dsh-mnemon 0.5.16 → 0.5.18

package/lib/index.js

@@ -1,9 +1,9 @@
-import { f as withMemoryStorageLock, n as memoryStrategyConfigurationValues, r as readMemoryStrategyConfiguration, s as receipt } from "./strategy-configuration-D8IEKZdS.js";
-import { a as prepareMemoryContributions, i as validateMemoryPluginGraph, n as MemoryCompositionGeneration, r as captureMemoryContributionSnapshot, t as provideMemoryRuntime } from "./runtime-BEX0sc1z.js";
-import { i as DEFAULT_MEMORY_VIEW_BUDGET, t as MEMORY_CAPABILITIES } from "./contracts-D4ghDRK4.js";
-import { r as defineMemoryPlugin, t as canonicalMemoryJson } from "./definitions-CSPV0ER1.js";
+import { f as withMemoryStorageLock, n as memoryStrategyConfigurationValues, r as readMemoryStrategyConfiguration, s as receipt } from "./strategy-configuration-sVkKToSW.js";
+import { a as validateMemoryPluginGraph, i as captureMemoryContributionSnapshot, n as isMemoryCompositionUnavailable, o as prepareMemoryContributions, r as MemoryCompositionGeneration, t as provideMemoryRuntime } from "./runtime-Bk6lFgxd.js";
+import { DEFAULT_MEMORY_VIEW_BUDGET, MEMORY_CAPABILITIES } from "./contracts.js";
+import { r as defineMemoryPlugin, t as canonicalMemoryJson } from "./definitions-j9QPbrXb.js";
 import { Context } from "@deepseek-ai/cordis";
-import z from "schemastery";
+import z from "@deepseek-ai/schemastery";
 import { basename, delimiter, dirname, isAbsolute, join, normalize, resolve } from "node:path";
 import { resolveEmbedding, resolvePersistenceStrategy, resolveRecallQuality } from "dsh-mnemon-source-memory-spaces";
 import { createHash, randomUUID } from "node:crypto";
@@ -15,14 +15,14 @@ import { RUNTIME_ENTRY_DELIMITER, RUNTIME_MEMORY_LIMITS, RUNTIME_MEMORY_VERSION
 import { threeTierActionWorkflow } from "dsh-mnemon-strategy-default-three-tier/extension-sdk";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { fileURLToPath } from "node:url";
-import { findMnemonCommand, mnemonNpmLauncher, nodeLauncherEnvironment } from "dsh-mnemon-source-memory-spaces/native-cli";
+import { findMnemonCommand, mnemonNpmLauncher, nodeLauncherEnvironment, resolveMnemonInvocation } from "dsh-mnemon-source-memory-spaces/native-cli";
 import { spawn } from "node:child_process";
 import { StringDecoder } from "node:string_decoder";
 import { z as z$1 } from "zod";
+import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
+import { isVolatile } from "@deepseek-ai/cosmokit";
 import { readFile, stat } from "node:fs/promises";
 import { parseDocument } from "yaml";
-import * as cosmokit from "@deepseek-ai/cosmokit";
-import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 //#region src/host/view-protocol.ts
 const MNEMON_VIEW_CHANNEL = "/dsh-mnemon-view";
 const MNEMON_VIEW_WRITE_CHANNEL = "/dsh-mnemon-view-settings";
@@ -61,6 +61,12 @@ const DEFAULT_IDLE_REVIEW = {
 	maxContextChars: 24e3,
 	maxTokens: 4096
 };
+/** The Sources that keep their data in Mnemon's data directory, in the order a backup lists them. */
+const MNEMON_PACK_COMPONENTS = [
+	"runtime",
+	"documents",
+	"memory-spaces"
+];
 const CATEGORIES = [
 	"preference",
 	"decision",
@@ -119,7 +125,7 @@ function preferences(value) {
 	for (const [entryId, item] of Object.entries(entries)) {
 		if (!ENTRY_ID$1.test(entryId)) throw new Error("Invalid memory plugin Entry id");
 		const candidate = record$3(item);
-		if (typeof candidate.enabled !== "boolean") throw new Error("Plugin enabled must be boolean");
+		if (candidate.enabled !== void 0 && typeof candidate.enabled !== "boolean") throw new Error("Plugin enabled must be boolean");
 		record$3(candidate.config);
 	}
 	return clone$2(value);
@@ -474,6 +480,59 @@ function resolveConfig(config = {}) {
 	};
 }
 //#endregion
+//#region src/host/workspace-storage.ts
+/** Host workspace identity, including aliases with not-yet-created descendants. */
+function canonicalWorkspacePath(workspacePath) {
+	if (!isAbsolute(workspacePath) || workspacePath.includes("\0")) throw new Error("Workspace path must be absolute");
+	let parent = resolve(workspacePath);
+	const suffix = [];
+	for (;;) {
+		let real;
+		try {
+			real = realpathSync.native(parent);
+		} catch (error) {
+			if (error.code !== "ENOENT") throw error;
+			const next = dirname(parent);
+			if (next === parent) throw error;
+			suffix.unshift(parent.slice(next.length).replace(/^[/\\]+/u, ""));
+			parent = next;
+			continue;
+		}
+		if (suffix.length > 0 && !statSync(real).isDirectory()) throw Object.assign(/* @__PURE__ */ new Error(`ENOTDIR: not a directory, realpath '${parent}'`), {
+			code: "ENOTDIR",
+			path: parent,
+			syscall: "realpath"
+		});
+		return join(real, ...suffix);
+	}
+}
+/** A rename or move selects a new directory; resolving identity never writes. */
+function workspaceStorageId(workspacePath) {
+	return createHash("sha256").update(canonicalWorkspacePath(workspacePath)).digest("hex");
+}
+//#endregion
+//#region src/host/storage-root.ts
+function expandDirectory(value) {
+	return resolve(value === "~" ? homedir() : value.startsWith("~/") ? join(homedir(), value.slice(2)) : value);
+}
+/** Host owns every built-in layout; Sources own the data within the chosen root. */
+function storageDirectory(config, workspaceRoot) {
+	const globalRoot = process.env.MNEMON_DATA_DIR?.trim() || "~/.mnemon";
+	switch (config.storageScope) {
+		case "global": return expandDirectory(globalRoot);
+		case "custom": return expandDirectory(config.dataDir);
+		case "workspace": return resolve(workspaceRoot ?? process.cwd(), ".mnemon");
+		case "workspaces": return join(expandDirectory(config.dataDir ?? globalRoot), "workspaces", workspaceStorageId(resolve(workspaceRoot ?? process.cwd())));
+	}
+}
+function createStorageRoot(config, workspaceRoot) {
+	const directory = storageDirectory(config, workspaceRoot);
+	return {
+		effectiveDataDir: () => directory,
+		withExclusive: (operation) => withMemoryStorageLock(directory, operation)
+	};
+}
+//#endregion
 //#region src/host/pack.ts
 const MNEMON_PACK_FORMAT = "mnemonpack";
 const MNEMON_PACK_MIME = "application/zip";
@@ -487,11 +546,7 @@ const COMPONENT_DIRECTORIES = {
 	documents: "documents",
 	"memory-spaces": "data"
 };
-const COMPONENT_ORDER = [
-	"runtime",
-	"documents",
-	"memory-spaces"
-];
+const COMPONENT_ORDER = MNEMON_PACK_COMPONENTS;
 const BODY_ID = /^[a-zA-Z0-9][a-zA-Z0-9_-]*$/;
 const SQLITE_HEADER = Buffer.from("SQLite format 3\0", "binary");
 function record$2(value) {
@@ -1175,7 +1230,8 @@ var MnemonPackManager = class {
 	target() {
 		return {
 			root: this.root,
-			scope: this.config.storageScope
+			scope: this.config.storageScope,
+			defaultRoot: resolve(createStorageRoot({ storageScope: "global" }).effectiveDataDir())
 		};
 	}
 	async exportPack(scope) {
@@ -1264,59 +1320,6 @@ var MnemonPackManager = class {
 	}
 };
 //#endregion
-//#region src/host/workspace-storage.ts
-/** Host workspace identity, including aliases with not-yet-created descendants. */
-function canonicalWorkspacePath(workspacePath) {
-	if (!isAbsolute(workspacePath) || workspacePath.includes("\0")) throw new Error("Workspace path must be absolute");
-	let parent = resolve(workspacePath);
-	const suffix = [];
-	for (;;) {
-		let real;
-		try {
-			real = realpathSync.native(parent);
-		} catch (error) {
-			if (error.code !== "ENOENT") throw error;
-			const next = dirname(parent);
-			if (next === parent) throw error;
-			suffix.unshift(parent.slice(next.length).replace(/^[/\\]+/u, ""));
-			parent = next;
-			continue;
-		}
-		if (suffix.length > 0 && !statSync(real).isDirectory()) throw Object.assign(/* @__PURE__ */ new Error(`ENOTDIR: not a directory, realpath '${parent}'`), {
-			code: "ENOTDIR",
-			path: parent,
-			syscall: "realpath"
-		});
-		return join(real, ...suffix);
-	}
-}
-/** A rename or move selects a new directory; resolving identity never writes. */
-function workspaceStorageId(workspacePath) {
-	return createHash("sha256").update(canonicalWorkspacePath(workspacePath)).digest("hex");
-}
-//#endregion
-//#region src/host/storage-root.ts
-function expandDirectory(value) {
-	return resolve(value === "~" ? homedir() : value.startsWith("~/") ? join(homedir(), value.slice(2)) : value);
-}
-/** Host owns every built-in layout; Sources own the data within the chosen root. */
-function storageDirectory(config, workspaceRoot) {
-	const globalRoot = process.env.MNEMON_DATA_DIR?.trim() || "~/.mnemon";
-	switch (config.storageScope) {
-		case "global": return expandDirectory(globalRoot);
-		case "custom": return expandDirectory(config.dataDir);
-		case "workspace": return resolve(workspaceRoot ?? process.cwd(), ".mnemon");
-		case "workspaces": return join(expandDirectory(config.dataDir ?? globalRoot), "workspaces", workspaceStorageId(resolve(workspaceRoot ?? process.cwd())));
-	}
-}
-function createStorageRoot(config, workspaceRoot) {
-	const directory = storageDirectory(config, workspaceRoot);
-	return {
-		effectiveDataDir: () => directory,
-		withExclusive: (operation) => withMemoryStorageLock(directory, operation)
-	};
-}
-//#endregion
 //#region src/host/storage-scope.ts
 function expandHome(path) {
 	if (path === "~") return homedir();
@@ -2184,6 +2187,7 @@ function memoryGenerationOptions(config, workspaceRoot) {
 	const userDirectory = config.runtimeUserScope === "global" ? createStorageRoot({ storageScope: "global" }).effectiveDataDir() : directory;
 	return {
 		strategyTypeId: config.memoryTopology.strategyId,
+		strategyFallback: "sole-strategy",
 		sourceTimeoutMs: config.timeoutMs,
 		sourceCapabilities: (installed) => MEMORY_CAPABILITIES.filter((capability) => (config.writeEnabled || ![
 			"write",
@@ -2474,12 +2478,13 @@ async function execute(serviceOrSource, coordinator, invocation) {
 				text: `Mnemon 不可用：${status.error ?? "未知错误"}`
 			};
 			const stats = status.stats;
+			const nativeInstalled = status.commandFound !== false;
 			return {
 				kind: "success",
 				text: [
-					`Mnemon ${status.version ?? ""} · default=${status.mnemonDefaultStore}`.trim(),
+					nativeInstalled ? `Mnemon ${status.version ?? ""} · default=${status.mnemonDefaultStore}`.trim() : "Mnemon Native: 未安装 CLI（可选，其他 Provider 不受影响）",
 					`DSH 已激活: ${status.dshActiveStores.join(", ") || "none"}`,
-					`CLI: ${status.cliPath}`,
+					...nativeInstalled ? [`CLI: ${status.cliPath}`] : [],
 					`数据目录: ${status.dataDir}`,
 					`有效记忆: ${stats?.totalInsights ?? 0} · 连接: ${stats?.edgeCount ?? 0} · 已删除: ${stats?.deletedInsights ?? 0}`,
 					`模式: ${status.writeEnabled ? "读写" : "只读"} · 默认召回: ${status.defaultRecallLimit}`
@@ -2595,11 +2600,14 @@ function applyMemoryViewGuidance(assembly, view, routingEnabled = true) {
 		sections
 	});
 }
+/** Register once the prompt service is active; Cordis re-runs this if the service is replaced. */
 function registerGuidance(ctx, config) {
-	ctx.get("systemPrompt")?.section?.({
-		name: GUIDANCE_SECTION_NAME,
-		order: 150,
-		text: () => config?.routingGuidance === false ? "" : ROUTING_GUIDANCE
+	ctx.inject(["systemPrompt"], (prompted) => {
+		prompted.get("systemPrompt").section({
+			name: GUIDANCE_SECTION_NAME,
+			order: 150,
+			text: () => config?.routingGuidance === false ? "" : ROUTING_GUIDANCE
+		});
 	});
 }
 //#endregion
@@ -2669,36 +2677,13 @@ function mutationResultCommitted(result) {
 	return COMMITTED_MUTATION_COUNTS.some((key) => typeof value[key] === "number" && Number.isFinite(value[key]) && value[key] > 0);
 }
 //#endregion
-//#region src/host/session-events.ts
-function eventArray(value) {
-	return Array.isArray(value) ? value : void 0;
-}
-/**
-* Materialize one immutable event-log snapshot across supported DSH releases.
-* Capability detection keeps alpha and stable rc behavior on one code path.
-*/
-function hostSessionEvents(session) {
-	if (typeof session.snapshotEvents === "function") {
-		const events = eventArray(session.snapshotEvents());
-		if (events !== void 0) return events;
-	}
-	const events = eventArray(session.events);
-	if (events !== void 0) return events;
-	throw new TypeError("Unsupported DSH Session event API: expected snapshotEvents() or events[]");
-}
-/** Read one exact event without materializing the alpha log when possible. */
-function hostSessionEventAt(session, seq) {
-	if (typeof session.eventAt === "function") return session.eventAt(seq);
-	return hostSessionEvents(session)[seq];
-}
-//#endregion
 //#region src/host/review-tools.ts
 const startingReview = new AsyncLocalStorage();
 /**
-* Older published Team tools evaluate membership after a child loses its
-* temporary Lead identity. Keep their conservative pause unless the operator
-* selects scoped review (verified with DSH/Teams 0.1.7-rc.1). That opt-in still
-* requires startGuardedReview; it never removes another plugin's policy.
+* Pausing stays the conservative default while Team tools are installed; the
+* operator can select scoped review instead (verified with DSH/Teams
+* 0.1.7-rc.2). That opt-in still requires startGuardedReview; it never removes
+* another plugin's policy.
 */
 function idleReviewBlockReason(parent, agentTeams = "pause") {
 	return agentTeams !== "scoped" && parent.ctx?.get?.("agentTeams") !== void 0 && parent.ctx.tools?.get?.("spawn_teammate", parent) !== void 0 ? "agent-team" : void 0;
@@ -2797,9 +2782,8 @@ function textContent(content, toolResult = false) {
 }
 /** Use only the current public surface, so rewound or compacted evidence cannot reappear. */
 function reviewCheckpoint(session, maxChars) {
-	const nodes = session.surface?.nodes;
-	if (nodes === void 0) return "No current checkpoint surface is available. Skip this review without a mutation.";
-	const events = hostSessionEvents(session);
+	const nodes = session.surface.nodes;
+	const events = session.snapshotEvents();
 	const completed = [...events].reverse().find((event) => event.type === "turn/end");
 	if (completed === void 0) return "No completed checkpoint is available. Skip this review without a mutation.";
 	const end = completed.seq ?? events.indexOf(completed);
@@ -2808,7 +2792,7 @@ function reviewCheckpoint(session, maxChars) {
 	let remaining = maxChars - 122;
 	const candidates = nodes.filter((seq) => seq < end);
 	for (const seq of candidates.slice(-128).reverse()) {
-		const event = hostSessionEventAt(session, seq);
+		const event = session.eventAt(seq);
 		if (event === void 0 || ![
 			"user/message",
 			"assistant/message",
@@ -2834,8 +2818,8 @@ function evidenceInsights(evidence) {
 			...optionalObject(item.provenance) ?? {},
 			id: item.id,
 			content: item.text,
-			score: item.score,
-			revision: item.revision
+			...item.score === void 0 ? {} : { score: item.score },
+			...item.revision === void 0 ? {} : { revision: item.revision }
 		};
 	});
 }
@@ -3207,7 +3191,7 @@ function subagentFailureDetail(run, result) {
 		const diagnostic = safeFailureDetail(result.diagnostic);
 		if (diagnostic !== "") return diagnostic;
 	}
-	const events = run.localAgent === void 0 ? [] : hostSessionEvents(run.localAgent.session);
+	const events = run.localAgent === void 0 ? [] : run.localAgent.session.snapshotEvents();
 	for (let index = events.length - 1; index >= 0; index -= 1) {
 		const event = events[index];
 		if (event?.type !== "turn/end") continue;
@@ -3753,7 +3737,7 @@ var MnemonSubagentCoordinator = class {
 			const context = {
 				runtime,
 				inspectRuntime: runtime,
-				maintain: threeTierActionWorkflow(graph.config.memoryTopology.strategyId, "runtime", "mutate") !== void 0,
+				maintain: threeTierActionWorkflow(lease.generation.strategy.definition.manifest.typeId, "runtime", "mutate") !== void 0,
 				commit: () => runtime.mutate("mutate", request, signal),
 				memorySpaces: async () => {
 					if (!graph.config.writeEnabled || !this.runtimeSource.config.writeEnabled) throw new Error("dsh-mnemon is configured read-only");
@@ -5071,7 +5055,7 @@ function inspectMemoryView(generation, view, state, turn, memoryText) {
 /** The durable log, not a parent session id, identifies the executing turn. */
 function openAgentTurn(agent) {
 	let open;
-	for (const event of hostSessionEvents(agent.session)) {
+	for (const event of agent.session.snapshotEvents()) {
 		const turn = typeof event.data.turn === "number" ? event.data.turn : void 0;
 		if (event.type === "turn/start" && turn !== void 0) open = turn;
 		else if (event.type === "turn/end" && turn === open) open = void 0;
@@ -5087,6 +5071,9 @@ var AgentMemoryTurn = class {
 	runtime;
 	delegation;
 	pinned;
+	/** A turn that runs without memory because no composition was serving when it began. */
+	unavailable;
+	warned;
 	pending;
 	generation = 0;
 	closed = false;
@@ -5103,6 +5090,10 @@ var AgentMemoryTurn = class {
 	get current() {
 		return this.pinned;
 	}
+	/** Why the current turn has no View, when memory could not be composed for it. */
+	get unavailableReason() {
+		return this.unavailable?.reason;
+	}
 	inspect(workspaceRoot) {
 		if (this.lastInspection === void 0) return void 0;
 		if (workspaceRoot !== void 0 && resolve(workspaceRoot) !== this.lastWorkspace) return void 0;
@@ -5133,14 +5124,23 @@ var AgentMemoryTurn = class {
 	async begin(turn, signal) {
 		if (this.closed) throw new Error("memory Agent lifetime has ended");
 		signal?.throwIfAborted();
-		if (this.pinned?.turn === turn) return;
+		if (this.pinned?.turn === turn || this.unavailable?.turn === turn) return;
 		if (this.pending?.turn === turn) return this.pending.result;
 		this.end();
 		const generation = this.generation;
 		const controller = new AbortController();
 		const abort = () => controller.abort(signal.reason);
 		signal?.addEventListener("abort", abort, { once: true });
-		const result = this.pin(turn, generation, controller.signal);
+		const result = this.pin(turn, generation, controller.signal).catch((error) => {
+			if (!isMemoryCompositionUnavailable(error) || this.closed || this.generation !== generation) throw error;
+			this.unavailable = {
+				turn,
+				reason: error.message
+			};
+			this.clearInspection();
+			if (this.warned !== error.message) console.warn(`[dsh-mnemon] this turn runs without memory: ${error.message}`);
+			this.warned = error.message;
+		});
 		this.pending = {
 			turn,
 			generation,
@@ -5155,8 +5155,9 @@ var AgentMemoryTurn = class {
 		}
 	}
 	end(turn) {
-		if (turn !== void 0 && this.pinned?.turn !== turn && this.pending?.turn !== turn) return;
+		if (turn !== void 0 && this.pinned?.turn !== turn && this.pending?.turn !== turn && this.unavailable?.turn !== turn) return;
 		this.generation += 1;
+		this.unavailable = void 0;
 		this.pending?.controller.abort(/* @__PURE__ */ new Error("memory turn ended during View preparation"));
 		this.pending = void 0;
 		const pinned = this.pinned;
@@ -5186,6 +5187,7 @@ var AgentMemoryTurn = class {
 				context,
 				release: execution.release
 			};
+			this.warned = void 0;
 			this.lastInspection = inspection;
 			this.lastWorkspace = context.scope.workspaceId === void 0 ? void 0 : resolve(context.scope.workspaceId);
 		} catch (error) {
@@ -5309,12 +5311,6 @@ var MnemonAgentLifecycle = class {
 	memoryActivity = new TurnActivityProjection();
 	turnActivity = /* @__PURE__ */ new Map();
 	/**
-	* Fallback presence marker for hosts that publish no surface projection.
-	* A host with a surface answers the question from what the model can
-	* actually see, which is what makes a rewind self-correcting.
-	*/
-	cueInjected = false;
-	/**
 	* Text of the runtime memory snapshot most recently injected as this
 	* plugin's own message. `.context()` used to get supersede-on-change for free
 	* from the host's runtime-context projection; carrying the snapshot as an own
@@ -5335,6 +5331,7 @@ var MnemonAgentLifecycle = class {
 	lastPhase = "idle";
 	lastAt;
 	lastError;
+	composedTurn;
 	constructor(agent, coordinator, config, counters, source, memoryTurn) {
 		this.agent = agent;
 		this.coordinator = coordinator;
@@ -5345,20 +5342,6 @@ var MnemonAgentLifecycle = class {
 	}
 	start() {
 		const disposers = [
-			this.agent.ctx.on("agent/session-start", ((payload) => {
-				this.releaseView();
-				this.memoryTurn?.clearInspection();
-				this.cancelIdleReview(true);
-				this.guidedTurns.clear();
-				this.turnActivity.clear();
-				this.memoryActivity.reset();
-				this.startSource = payload.source;
-				this.primePending = true;
-				this.cueInjected = false;
-				this.injectedMemoryText = void 0;
-				this.lastError = void 0;
-				this.mark("prime");
-			})),
 			this.agent.ctx.on("session/event", ((session, event) => this.sessionEvent(session, event))),
 			this.agent.ctx.on("system-prompt/assemble", ((assembly, context, next) => this.assemblePrompt(assembly, context, next))),
 			this.agent.ctx.on("agent/pre-step", ((payload, next) => this.preStep(payload, next)), { prepend: true }),
@@ -5377,7 +5360,7 @@ var MnemonAgentLifecycle = class {
 			startSource: this.startSource,
 			primePending: this.primePending,
 			guidedTurns: this.guidedTurns.size,
-			memoryToolCalls: memoryToolCalls(hostSessionEvents(this.agent.session)),
+			memoryToolCalls: memoryToolCalls(this.agent.session.snapshotEvents()),
 			idleReviewPending: this.idleReviewTimer !== void 0,
 			reviewRunning: this.reviewRunning,
 			reviewActivity: this.reviewActivity(),
@@ -5400,11 +5383,11 @@ var MnemonAgentLifecycle = class {
 	}
 	/** Incremental snapshot of settled Mnemon activity in this durable log. */
 	turnMemoryActivities() {
-		return this.memoryActivity.snapshot(hostSessionEvents(this.agent.session));
+		return this.memoryActivity.snapshot(this.agent.session.snapshotEvents());
 	}
 	/** Plain text of one finalized assistant message, from this agent's session log. */
 	assistantMessageText(messageId) {
-		return assistantMessageText(hostSessionEvents(this.agent.session), messageId);
+		return assistantMessageText(this.agent.session.snapshotEvents(), messageId);
 	}
 	memoryWake() {
 		const pinned = this.memoryTurn?.current;
@@ -5414,19 +5397,17 @@ var MnemonAgentLifecycle = class {
 	/**
 	* Whether the reminder is still visible to the model.
 	*
-	* Read from the surface rather than from `cueInjected`, because a rewind is a
-	* surface replacement inside the same live session: it does not emit
-	* `agent/session-start`, so a session-scoped flag stays set and the reminder
-	* never returns. The durable event log cannot answer this either, since it is
-	* append-only and still contains the discarded message.
+	* Read from the surface rather than an Agent-scoped flag, because a rewind
+	* is a surface replacement inside the same live Agent: DSH does not recreate
+	* the Agent, so a flag would stay set and the reminder would never return.
+	* The durable event log cannot answer this either, since it is append-only
+	* and still contains the discarded message.
 	*
 	* Scanning forward is cheap: the reminder sits near the head of the surface,
 	* so the loop exits after a few nodes even on a long session.
 	*/
 	cueAlreadyVisible() {
-		const nodes = this.agent.session.surface?.nodes;
-		if (nodes === void 0) return this.cueInjected;
-		for (const seq of nodes) if (isOwnUserMessageEvent(hostSessionEventAt(this.agent.session, seq))) return true;
+		for (const seq of this.agent.session.surface.nodes) if (isOwnUserMessageEvent(this.agent.session.eventAt(seq))) return true;
 		return false;
 	}
 	/**
@@ -5474,7 +5455,6 @@ var MnemonAgentLifecycle = class {
 			kind: "enter",
 			messages: withSnapshot(decision.messages)
 		};
-		this.cueInjected = true;
 		this.guidedTurns.add(payload.turn);
 		if (this.config.recallMode === "guided") this.counters.recallCues += 1;
 		if (this.config.writebackMode === "guided" && this.config.writeEnabled) this.counters.writebackCues += 1;
@@ -5508,10 +5488,9 @@ var MnemonAgentLifecycle = class {
 	}
 	scheduleIdleReview(turn) {
 		this.cancelIdleReview(true);
-		if (!this.idleReviewAllowed()) return;
-		if (this.config.memoryTopology.strategyId !== "default-three-tier") return;
+		if (!this.idleReviewAllowed() || !this.composedByDefault(turn)) return;
 		const activity = this.ensureTurnActivity(turn);
-		const tools = completedToolActivity(hostSessionEvents(this.agent.session), turn);
+		const tools = completedToolActivity(this.agent.session.snapshotEvents(), turn);
 		activity.toolCallCount = tools.count;
 		activity.toolNames = tools.names;
 		if (!this.reviewActivity().eligible || !this.reviewAdmitted(turn)) return;
@@ -5523,10 +5502,26 @@ var MnemonAgentLifecycle = class {
 				return;
 			}
 			if (this.agent.status !== "idle") return;
-			if (!hostSessionEvents(this.agent.session).some((event) => event.type === "turn/end" && eventTurn(event) === turn) || !this.reviewActivity().eligible || !this.reviewAdmitted(turn)) return;
+			if (!this.agent.session.snapshotEvents().some((event) => event.type === "turn/end" && eventTurn(event) === turn) || !this.reviewActivity().eligible || !this.reviewAdmitted(turn)) return;
 			this.runIdleReview();
 		}, Math.max(this.config.idleReviewMs, (this.lastReviewAttemptAt ?? -Infinity) + this.config.idleReview.minIntervalMs - Date.now()));
 	}
+	/**
+	* Automatic three-tier maintenance belongs to the default product, not to
+	* every third-party View Strategy, and only to turns that Strategy actually
+	* composed: a turn served by a fallback Strategy, or run without memory, has
+	* nothing for it to maintain. Explicit management remains available.
+	*/
+	composedByDefault(turn) {
+		if (this.memoryTurn === void 0) return true;
+		const pinned = this.memoryTurn.current;
+		if (pinned?.turn === turn) this.composedTurn = {
+			turn,
+			strategyTypeId: pinned.context.view.strategyTypeId
+		};
+		else if (this.composedTurn?.turn !== turn) this.composedTurn = void 0;
+		return this.composedTurn?.strategyTypeId === "default-three-tier";
+	}
 	idleReviewAllowed() {
 		return this.config.lifecycleEnabled && this.config.writeEnabled && this.config.writebackMode === "guided" && this.config.idleReview.enabled && this.idleReviewAttempts < this.config.idleReview.maxPerSession && idleReviewBlockReason(this.agent, this.config.idleReview.agentTeams) === void 0 && this.config.memoryTopology.strategyId === "default-three-tier";
 	}
@@ -5603,7 +5598,7 @@ var MnemonAgentLifecycle = class {
 			explicitCandidate ||= activity.explicitCandidate;
 			completedNonMemoryTool ||= activity.toolCallCount > 0 && [...activity.toolNames].some((name) => !name.startsWith("mnemon_"));
 		}
-		const assistantTextLength = hostSessionEvents(this.agent.session).filter((event) => {
+		const assistantTextLength = this.agent.session.snapshotEvents().filter((event) => {
 			const turn = eventTurn(event);
 			return turn !== void 0 && turns.has(turn);
 		}).map(assistantEventTextLength).reduce((total, length) => total + length, 0);
@@ -5664,8 +5659,8 @@ var MnemonLifecycle = class {
 		this.runtimeSource = runtimeSource;
 	}
 	start() {
-		const stopCreated = this.ctx.on("agent/created", (({ agent }) => {
-			this.install(agent, "startup");
+		const stopCreated = this.ctx.on("agent/created", (({ agent, source }) => {
+			this.install(agent, source);
 		}));
 		for (const agent of this.ctx.agents.roots()) this.install(agent, "adopted");
 		return () => {
@@ -5689,7 +5684,7 @@ var MnemonLifecycle = class {
 			idleReviewMs: this.config.idleReviewMs,
 			activeAgents: this.owners.size,
 			sessionAvailable: agent !== void 0,
-			taskAgentAvailable: this.ctx.agents.create === void 0 ? agent !== void 0 : this.taskAgentModelOptions(requestedId ?? "", workspaceRoot) !== void 0,
+			taskAgentAvailable: this.taskAgentModelOptions(requestedId ?? "", workspaceRoot) !== void 0,
 			counters: { ...this.counters },
 			subagents: this.coordinator.snapshot(),
 			...owner === void 0 ? {} : { current: owner.snapshot() }
@@ -5937,20 +5932,15 @@ var MnemonLifecycle = class {
 	* workspace graph without borrowing conversation history or ownership.
 	*/
 	async runTaskAgent(fallbackSessionId, workspaceRoot, signal, operation) {
-		const create = this.ctx.agents.create?.bind(this.ctx.agents);
-		if (create === void 0) {
-			const fallback = workspaceRoot === void 0 ? this.ctx.agents.get(fallbackSessionId.trim()) ?? this.availableAgent() : this.availableAgent(workspaceRoot);
-			if (fallback === void 0) throw new Error("current DSH host cannot create a task Agent and no matching live Agent is available");
-			return operation(fallback);
-		}
 		const sessionId = randomUUID();
 		this.taskAgentIds.add(sessionId);
 		let handle;
 		let failure;
 		try {
-			handle = await create({
+			const creation = await this.taskAgentCreation(fallbackSessionId, workspaceRoot);
+			handle = await this.ctx.agents.create({
 				sessionId,
-				...await this.taskAgentCreation(fallbackSessionId, workspaceRoot),
+				...creation,
 				signal
 			});
 			return await operation(handle.agent);
@@ -6089,7 +6079,6 @@ var MnemonLifecycle = class {
 				}
 			};
 			try {
-				stops.push(agent.ctx.on("agent/session-start", (() => memory.end())));
 				stops.push(agent.ctx.on("system-prompt/assemble", (async (_assembly, context, next) => {
 					if (context.agent !== void 0 && context.agent !== agent) return next();
 					const turn = openAgentTurn(agent);
@@ -6486,7 +6475,8 @@ var VersionUpdateManager = class {
 		const launcher = mnemonNpmLauncher(command);
 		let current;
 		try {
-			current = versionFrom((await resultOrThrow(this.processRunner, launcher === void 0 ? command : process.execPath, launcher === void 0 ? ["--version"] : [launcher, "--version"], CHECK_TIMEOUT_MS, launcher === void 0 ? {} : { env: nodeLauncherEnvironment() })).stdout);
+			const invocation = resolveMnemonInvocation(command, ["--version"]);
+			current = versionFrom((await resultOrThrow(this.processRunner, invocation.command, invocation.args, CHECK_TIMEOUT_MS, { env: invocation.env })).stdout);
 		} catch {
 			return { install: {
 				mode: launcher === void 0 ? "manual" : "npm",
@@ -6662,17 +6652,6 @@ var VersionUpdateManager = class {
 		return {
 			checkedAt: (/* @__PURE__ */ new Date()).toISOString(),
 			components: [{
-				id: "mnemon",
-				name: "Mnemon CLI",
-				...mnemonLocal.install.command === void 0 ? {} : { executablePath: mnemonLocal.install.command },
-				...mnemonLocal.current === void 0 ? {} : { current: mnemonLocal.current },
-				...mnemonLatest === void 0 ? {} : { latest: mnemonLatest },
-				outdated: mnemonOutdated,
-				installMode: mnemonLocal.install.mode,
-				updateSupported: mnemonSupported,
-				updateHint: mnemonLocal.install.hint ?? (mnemonLocal.install.mode === "homebrew" ? mnemonSupported ? "brew" : "brew-missing" : mnemonLocal.install.mode === "go" ? "go" : mnemonLocal.install.mode === "missing" ? "install" : "manual"),
-				...mnemonLatest === void 0 ? { checkError: "latest-unavailable" } : {}
-			}, {
 				id: "dsh-mnemon",
 				name: "dsh-mnemon",
 				...dshInstall.profileName === void 0 ? {} : { installProfile: dshInstall.profileName },
@@ -6686,6 +6665,17 @@ var VersionUpdateManager = class {
 				restartRequired: this.pendingRestart.size > 0,
 				updateHint: dshInstall.mode === "npm" ? dshSupported ? "pnpm" : "pnpm-missing" : dshInstall.mode === "link" ? "link" : "manual",
 				...dshLatest === void 0 ? { checkError: "latest-unavailable" } : {}
+			}, {
+				id: "mnemon",
+				name: "Mnemon CLI",
+				...mnemonLocal.install.command === void 0 ? {} : { executablePath: mnemonLocal.install.command },
+				...mnemonLocal.current === void 0 ? {} : { current: mnemonLocal.current },
+				...mnemonLatest === void 0 ? {} : { latest: mnemonLatest },
+				outdated: mnemonOutdated,
+				installMode: mnemonLocal.install.mode,
+				updateSupported: mnemonSupported,
+				updateHint: mnemonLocal.install.hint ?? (mnemonLocal.install.mode === "homebrew" ? mnemonSupported ? "brew" : "brew-missing" : mnemonLocal.install.mode === "go" ? "go" : mnemonLocal.install.mode === "missing" ? "install" : "manual"),
+				...mnemonLatest === void 0 ? { checkError: "latest-unavailable" } : {}
 			}]
 		};
 	}
@@ -6799,6 +6789,13 @@ function requireWritable(runtime) {
 function requireCapability(runtime, typeId, capability) {
 	assertParticipation(runtime.graph.config, typeId, capability, "manual");
 }
+/** A memory layer that is off takes no part in reads or writes, management and assistance included. */
+function requireLayerOn(runtime, sourceTypeId) {
+	if (sourceTypeId !== void 0 && runtime.graph.config.memoryTopology.layers[sourceTypeId]?.enabled === false) throw new Error(`Memory layer ${sourceTypeId} is off; turn it on to read or change it`);
+}
+function sourceTypeOf(generation, sourceInstanceKey) {
+	return generation?.sourceInstances().find((source) => source.sourceInstanceKey === sourceInstanceKey)?.sourceTypeId;
+}
 function success$1(value) {
 	return {
 		ok: true,
@@ -6883,8 +6880,12 @@ async function catalog(runtime, lifecycle) {
 	}
 }
 async function compositionStatus(runtime) {
+	const composition = runtime.graph.memoryComposition.inspect();
+	const strategyTypeId = runtime.graph.memoryComposition.current()?.strategy.definition.manifest.typeId;
 	return {
-		evaluation: runtime.graph.memoryComposition.inspect().evaluation,
+		serving: composition.servingGenerationId !== void 0,
+		...strategyTypeId === void 0 ? {} : { strategyTypeId },
+		evaluation: composition.evaluation,
 		sources: (await catalog(runtime)).sources,
 		configuration: runtime.graph.config.memoryTopology
 	};
@@ -7010,6 +7011,7 @@ function createReadHandler(input, lifecycle, versions) {
 				case "source-management-read": {
 					const lease = runtime.graph.memoryComposition.acquire();
 					try {
+						requireLayerOn(runtime, sourceTypeOf(lease.generation, String(payload.sourceInstanceKey ?? "")));
 						return success$1(await lease.generation.executeManagement({
 							scope: runtime.scope,
 							sourceInstanceKey: String(payload.sourceInstanceKey ?? ""),
@@ -7104,6 +7106,7 @@ function createActivationHandler(input) {
 				try {
 					const source = (await lease.generation.managementCatalog(runtime.scope)).sources.find((item) => item.sourceInstanceKey === payload.sourceInstanceKey && item.sourceTypeId === "memory-spaces");
 					if (source === void 0) throw new Error("Memory Spaces Source instance is unavailable");
+					requireLayerOn(runtime, source.sourceTypeId);
 					return success$1(await lease.generation.executeManagement({
 						scope: runtime.scope,
 						sourceInstanceKey: source.sourceInstanceKey,
@@ -7158,6 +7161,7 @@ function createWriteHandler(input, lifecycle, versions) {
 					...typeof payload.expectedRevision === "string" ? { expectedRevision: payload.expectedRevision } : {},
 					...signal === void 0 ? {} : { signal }
 				};
+				requireLayerOn(runtime, sourceTypeOf(runtime.graph.memoryComposition.current(), request.sourceInstanceKey));
 				if (lifecycle !== void 0) return success$1(await lifecycle.manageSource(runtime.graph, request));
 				const lease = runtime.graph.memoryComposition.acquire();
 				try {
@@ -7171,6 +7175,7 @@ function createWriteHandler(input, lifecycle, versions) {
 				const source = (await catalog(runtime, lifecycle)).sources.find((item) => item.sourceInstanceKey === payload.sourceInstanceKey);
 				const operation = String(payload.operation ?? "");
 				if (source === void 0 || !source.assistance.includes(operation)) throw new Error("Host assistance is not available for this Source instance");
+				requireLayerOn(runtime, source.sourceTypeId);
 				if (operation !== "agent-search" && (payload.confirmed !== true || payload.expectedRevision !== source.revision)) throw new Error("Host assistance requires confirmation of the current Source revision");
 				const value = await assisted(runtime, lifecycle, source.sourceTypeId, operation, object$4(payload.input), signal, {
 					sourceInstanceKey: source.sourceInstanceKey,
@@ -7239,16 +7244,16 @@ function createPackHandler(input) {
 		}
 	};
 }
-function registerRpc(connection, input, lifecycle, versions, managementAuthority = "loopback") {
+function registerRpc(connection, input, lifecycle, versions) {
 	const versionManager = versions ?? new VersionUpdateManager({ mnemonCliPath: () => input.config.cliPath });
 	const readHandler = createReadHandler(input, lifecycle, versionManager);
 	const activationHandler = createActivationHandler(input);
 	const writeHandler = createWriteHandler(input, lifecycle, versionManager);
 	const packHandler = createPackHandler(input);
-	connection.rpc.handle(MNEMON_READ_CHANNEL, readHandler, { authority: "trusted-host" });
-	connection.rpc.handle(MNEMON_ACTIVATION_CHANNEL, activationHandler, { authority: "trusted-host" });
-	connection.rpc.handle(MNEMON_WRITE_CHANNEL, writeHandler, { authority: managementAuthority });
-	connection.rpc.handle(MNEMON_PACK_CHANNEL, packHandler, { authority: managementAuthority });
+	connection.rpc.handle(MNEMON_READ_CHANNEL, readHandler);
+	connection.rpc.handle(MNEMON_ACTIVATION_CHANNEL, activationHandler);
+	connection.rpc.handle(MNEMON_WRITE_CHANNEL, writeHandler);
+	connection.rpc.handle(MNEMON_PACK_CHANNEL, packHandler);
 	return {
 		read: readHandler,
 		activation: activationHandler,
@@ -7403,9 +7408,9 @@ function createSettingsHandler(settings) {
 		}
 	};
 }
-function registerSettingsRpc(connection, settings, authority = "loopback") {
+function registerSettingsRpc(connection, settings) {
 	const handler = createSettingsHandler(settings);
-	connection.rpc.handle(MNEMON_SETTINGS_CHANNEL, handler, { authority });
+	connection.rpc.handle(MNEMON_SETTINGS_CHANNEL, handler);
 	return handler;
 }
 //#endregion
@@ -8328,7 +8333,6 @@ const mnemonSubagentTokenUsageProjectionDefinition = {
 	key: "mnemonSubagentTokenUsage",
 	stateVersion: 1,
 	stateSchema: tokenUsageStateSchema,
-	schema: tokenUsageWire.viewSchema,
 	init: () => ({
 		descriptorSeen: false,
 		totals: emptyTokenUsage(),
@@ -8351,7 +8355,6 @@ const mnemonSubagentTokenUsageProjectionDefinition = {
 			last: sample
 		};
 	},
-	view: tokenUsageWire.view,
 	wire: tokenUsageWire
 };
 /** Register lazily when the optional DSH projection service is present. */
@@ -8361,722 +8364,224 @@ function registerMnemonSubagentTokenUsageProjection(ctx) {
 	});
 }
 //#endregion
-//#region src/host/profile-schema.mjs
-const predicate = Reflect.get(cosmokit, "isVolatile");
-const supportsLiveConfig = typeof predicate === "function" && typeof Reflect.get(cosmokit, "createVolatile") === "function";
-const isVolatile = (value) => supportsLiveConfig && predicate(value);
-var profile_schema_default = supportsLiveConfig ? (await import("schemastery-live")).default : z;
-//#endregion
-//#region src/host/live-config.ts
-function plain(value) {
-	if (isVolatile(value)) return plain(value.get());
-	if (Array.isArray(value)) return value.map(plain);
-	if (value === null || typeof value !== "object") return value;
-	const prototype = Object.getPrototypeOf(value);
-	if (prototype !== Object.prototype && prototype !== null) return value;
-	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, plain(child)]));
+//#region src/host/plugin-management.ts
+/** Saved choices keep only configuration once the profile patch owns enablement. */
+function configurationOnly(entries) {
+	return Object.fromEntries(Object.entries(entries).map(([entryId, value]) => [entryId, { config: value.config }]));
 }
-/** Read a detached configuration snapshot from either DSH generation. */
-function plainHostConfig(value = {}) {
-	return plain(value);
+const PACKAGE$1 = /^(?:@[a-z0-9._-]+\/)?dsh-mnemon-(source|strategy)-[a-z0-9._-]+$/u;
+const hash = (value) => createHash("sha256").update(canonicalMemoryJson(value)).digest("hex");
+const clone$1 = (value) => JSON.parse(JSON.stringify(value));
+function contributionRoles(snapshot, entryId) {
+	const roles = /* @__PURE__ */ new Set();
+	if (snapshot.sources.some((value) => value.provenance.entryId === entryId)) roles.add("source");
+	if (snapshot.strategies.some((value) => value.provenance.entryId === entryId)) roles.add("strategy");
+	if ((snapshot.strategyExtensions ?? []).some((value) => value.provenance.entryId === entryId)) roles.add("strategy-extension");
+	return [...roles];
 }
-function liveConfig() {
-	const schema = new profile_schema_default(Config.toJSON());
-	schema.dict = Object.fromEntries(Object.entries(schema.dict ?? {}).map(([key, field]) => [key, key === "remoteAccess" ? field : field.volatile()]));
-	const standard = schema["~standard"];
-	Object.defineProperty(schema, "~standard", { value: {
-		...standard,
-		validate(value) {
-			const parsed = standard.validate(value);
-			if ("then" in parsed) throw new TypeError("Mnemon configuration validation must be synchronous");
-			if (parsed.issues) return parsed;
-			try {
-				resolveConfig(plainHostConfig(parsed.value));
-				return parsed;
-			} catch (error) {
-				return { issues: [{ message: error instanceof Error ? error.message : String(error) }] };
-			}
-		}
-	} });
-	return schema;
+function fallbackDescriptor(entry, snapshot, editor) {
+	const sources = snapshot.sources.filter((value) => value.provenance.entryId === entry.id);
+	const strategies = snapshot.strategies.filter((value) => value.provenance.entryId === entry.id);
+	const extensions = (snapshot.strategyExtensions ?? []).filter((value) => value.provenance.entryId === entry.id);
+	const roles = contributionRoles(snapshot, entry.id);
+	if (roles.length === 0) roles.push(editor?.kind ?? (PACKAGE$1.exec(entry.options.name)?.[1] === "source" ? "source" : "strategy"));
+	const typeId = editor?.typeId ?? strategies[0]?.definition.manifest.typeId ?? extensions[0]?.definition.manifest.typeId ?? sources[0]?.definition.manifest.typeId;
+	const sourceLabel = sources[0]?.definition.manifest.management?.label;
+	const label = editor?.label ?? {
+		en: sourceLabel ?? typeId ?? entry.options.name,
+		"zh-CN": sourceLabel ?? typeId ?? entry.options.name
+	};
+	const description = editor?.description ?? {
+		en: "",
+		"zh-CN": ""
+	};
+	const provides = roles.includes("source") ? [{ id: "source" }, ...sources.map((source) => ({ id: `source.${source.definition.manifest.role}` }))] : [{ id: roles.includes("strategy") ? "strategy" : `strategy.${typeId ?? hash(entry.options.name).slice(0, 12)}` }];
+	return defineMemoryPlugin({
+		packageName: entry.options.name,
+		label,
+		description,
+		roles,
+		provides
+	});
 }
-/** Profile Config for live forms; transport authority retains normal remounts. */
-const LiveConfig = supportsLiveConfig ? liveConfig() : Config;
-//#endregion
-//#region src/host/legacy-settings-import.ts
-const UNSAFE_KEYS = /* @__PURE__ */ new Set([
-	"__proto__",
-	"prototype",
-	"constructor"
-]);
-const ENTRY_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,299}$/u;
-const STRATEGY_ID = /^[a-z][a-z0-9-]{0,127}$/u;
-const VIEW_NAMESPACE = /^mnemon-view(?:-[a-f0-9]{16})?$/u;
-const LEGACY_NAMESPACE = /^mnemon-plugins(?:-[a-f0-9]{16})?$/u;
-function object$2(value, label) {
-	if (value === null || typeof value !== "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) throw new Error(`${label} must be a plain object`);
-	for (const key of Reflect.ownKeys(value)) {
-		if (typeof key !== "string" || UNSAFE_KEYS.has(key)) throw new Error(`${label} contains an unsafe key`);
-		const descriptor = Object.getOwnPropertyDescriptor(value, key);
-		if (!descriptor.enumerable || !Object.hasOwn(descriptor, "value")) throw new Error(`${label} must contain only data properties`);
-	}
-	return value;
+function prepared(item, config) {
+	if (item.editor === void 0) throw new Error(`Plugin does not expose a pure configuration factory: ${item.entry.id}`);
+	const contribution = item.editor.create(config);
+	if ([...contribution.strategies ?? [], ...contribution.strategyExtensions ?? []][0].manifest.packageName !== item.entry.options.name) throw new Error("Plugin factory does not match its declared Entry");
+	if (contribution.plugin !== void 0 && hash(contribution.plugin) !== hash(item.descriptor)) throw new Error("Plugin factory descriptor does not match its module export");
+	return prepareMemoryContributions({
+		...contribution,
+		plugin: contribution.plugin ?? item.descriptor
+	}, { instanceId: item.entry.id });
 }
-/** Copy JSON data without invoking getters, serializers or prototype methods. */
-function copy(value, label, ancestors = /* @__PURE__ */ new Set(), depth = 0) {
-	if (value === null || typeof value === "string" || typeof value === "boolean") return value;
-	if (typeof value === "number" && Number.isFinite(value)) return value;
-	if (typeof value !== "object" || value === null) throw new Error(`${label} must contain only JSON data`);
-	if (depth > 64 || ancestors.has(value)) throw new Error(`${label} contains cyclic or excessively nested data`);
-	ancestors.add(value);
-	try {
-		if (Array.isArray(value)) {
-			if (Object.getPrototypeOf(value) !== Array.prototype) throw new Error(`${label} must contain plain arrays`);
-			if (Reflect.ownKeys(value).length !== value.length + 1) throw new Error(`${label} contains a sparse or extended array`);
-			return Array.from({ length: value.length }, (_, index) => {
-				const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
-				if (!descriptor || !descriptor.enumerable || !Object.hasOwn(descriptor, "value")) throw new Error(`${label} must contain only data properties`);
-				return copy(descriptor.value, label, ancestors, depth + 1);
-			});
-		}
-		return Object.fromEntries(Object.entries(object$2(value, label)).map(([key, item]) => [key, copy(item, label, ancestors, depth + 1)]));
-	} finally {
-		ancestors.delete(value);
-	}
-}
-function copiedObject(value, label) {
-	object$2(value, label);
-	return copy(value, label);
-}
-/** Inspect validated copies only; never evaluate expressions or invoke getters. */
-function containsExpression(value) {
-	return value !== null && typeof value === "object" && (Object.hasOwn(value, "__jsExpr") || Object.values(value).some(containsExpression));
-}
-function fields(value, allowed, label) {
-	if (Object.keys(value).some((key) => !allowed.includes(key))) throw new Error(`${label} contains unsupported fields`);
-}
-function interaction(value, label, allowed) {
-	const result = copiedObject(value, label);
-	fields(result, allowed, label);
-	if (Object.values(result).some((item) => typeof item !== "boolean")) throw new Error(`${label} preferences must be boolean`);
-	return result;
-}
-function entryId(value, label) {
-	if (typeof value !== "string" || !ENTRY_ID.test(value) || UNSAFE_KEYS.has(value)) throw new Error(`${label} contains an invalid Entry id`);
-}
-function view(value, label) {
-	const result = copiedObject(value, label);
-	fields(result, ["strategyTypeId", "entries"], label);
-	if (Object.hasOwn(result, "strategyTypeId") && (typeof result.strategyTypeId !== "string" || !STRATEGY_ID.test(result.strategyTypeId))) throw new Error(`${label} contains an invalid Strategy type id`);
-	const entries = {};
-	if (Object.hasOwn(result, "entries")) {
-		const values = object$2(result.entries, `${label}.entries`);
-		if (Object.keys(values).length > 64) throw new Error(`${label} contains too many Entries`);
-		for (const [id, raw] of Object.entries(values)) {
-			entryId(id, label);
-			const item = copiedObject(raw, `${label}.entries`);
-			fields(item, ["enabled", "config"], `${label}.entries`);
-			if (typeof item.enabled !== "boolean") throw new Error(`${label} Entry enabled must be boolean`);
-			const config = Object.hasOwn(item, "config") ? copiedObject(item.config, `${label} Entry config`) : {};
-			if (JSON.stringify(config).length > 65536) throw new Error(`${label} Entry config exceeds 64 KiB`);
-			entries[id] = {
-				enabled: item.enabled,
-				config
-			};
-		}
-	}
+function installedPlugin(descriptor, entryId) {
 	return {
-		...typeof result.strategyTypeId === "string" ? { strategyTypeId: result.strategyTypeId } : {},
-		...Object.hasOwn(result, "entries") ? { entries } : {}
+		kind: "plugin",
+		instanceKey: `plugin:${entryId}`,
+		provenance: {
+			packageName: descriptor.packageName,
+			entryId
+		},
+		descriptor
 	};
 }
-function sources(value, label, sourceEntryIds, diagnostics) {
-	const result = copiedObject(value, label);
-	fields(result, ["sources"], label);
-	const values = Object.hasOwn(result, "sources") ? object$2(result.sources, `${label}.sources`) : {};
-	if (Object.keys(values).length > 64) throw new Error(`${label} contains too many Source Entries`);
-	const entries = {};
-	for (const [id, raw] of Object.entries(values)) {
-		entryId(id, label);
-		const item = copiedObject(raw, `${label}.sources`);
-		fields(item, ["enabled"], `${label}.sources`);
-		if (typeof item.enabled !== "boolean") throw new Error(`${label} Source enabled must be boolean`);
-		if (!sourceEntryIds.has(id)) {
-			diagnostics.push(`Skipped legacy Source preference for ${id}: the current profile does not declare it as a Source.`);
-			continue;
-		}
-		entries[id] = {
-			enabled: item.enabled,
-			config: {}
-		};
-	}
-	return entries;
-}
-function applyEntryOverrides(entries, overrides, sourceEntryIds, diagnostics) {
-	if (!Array.isArray(overrides)) throw new Error("Explicit Entry overrides must be an array");
-	const matching = /* @__PURE__ */ new Map();
-	for (const raw of overrides) {
-		const row = object$2(raw, "Explicit Entry override");
-		entryId(row.id, "Explicit Entry override");
-		if (!Object.hasOwn(entries, row.id)) continue;
-		const previous = matching.get(row.id) ?? {};
-		matching.set(row.id, {
-			...previous,
-			...row.disabled === void 0 ? {} : { disabled: row.disabled },
-			...row.config === void 0 ? {} : { config: row.config }
-		});
+function orderPlugins(values) {
+	const byId = new Map(values.map((value) => [value.entryId, value]));
+	const edges = new Map(values.map((value) => [value.entryId, /* @__PURE__ */ new Set()]));
+	const indegree = new Map(values.map((value) => [value.entryId, 0]));
+	for (const dependent of values) for (const requirement of dependent.requires) for (const provider of values) {
+		if (provider.entryId === dependent.entryId || !provider.provides.some((capability) => capability.id === requirement)) continue;
+		if (edges.get(provider.entryId).has(dependent.entryId)) continue;
+		edges.get(provider.entryId).add(dependent.entryId);
+		indegree.set(dependent.entryId, indegree.get(dependent.entryId) + 1);
 	}
-	for (const [id, row] of matching) {
-		if (row.disabled !== void 0 && typeof row.disabled !== "boolean") {
-			delete entries[id];
-			diagnostics.push(`Skipped legacy View preference for ${id}: its explicit disabled value is not boolean.`);
-			continue;
-		}
-		if (row.config !== void 0 && !sourceEntryIds.has(id)) {
-			const config = copiedObject(row.config, "Explicit Entry config");
-			if (containsExpression(config)) {
-				delete entries[id];
-				diagnostics.push(`Skipped legacy View preference for ${id}: its explicit config contains an expression.`);
-				continue;
+	const stable = (left, right) => byId.get(left).packageName.localeCompare(byId.get(right).packageName) || left.localeCompare(right);
+	const ready = [...indegree].filter(([, count]) => count === 0).map(([entryId]) => entryId).sort(stable);
+	const ordered = [];
+	while (ready.length > 0) {
+		const entryId = ready.shift();
+		ordered.push(byId.get(entryId));
+		for (const dependent of [...edges.get(entryId)].sort(stable)) {
+			const next = indegree.get(dependent) - 1;
+			indegree.set(dependent, next);
+			if (next === 0) {
+				ready.push(dependent);
+				ready.sort(stable);
 			}
-			entries[id].config = config;
 		}
-		if (typeof row.disabled === "boolean") entries[id].enabled = !row.disabled;
 	}
+	if (ordered.length < values.length) ordered.push(...values.filter((value) => !ordered.includes(value)).sort((left, right) => stable(left.entryId, right.entryId)));
+	return ordered;
 }
 /**
-* Recover only the canonical root and the exact owning profile's old namespaces.
-* This does not read files, edit profile rows, validate plugin domains or commit.
-* Malformed relevant input rejects the complete plan without an import marker.
+* Profile-local plugin graph overlay. Every dsh-mnemon Source or Strategy Entry
+* is one peer node; activation, configuration, dependency checks and rollback
+* use one transaction. Contribution roles do not create separate managers.
 */
-function planLegacySettingsImport(options) {
-	const diagnostics = [];
-	try {
-		const rawCurrent = object$2(options.currentOverride, "Current config override");
-		if (rawCurrent.legacySettingsImported === true) return {
-			patch: {},
-			diagnostics
-		};
-		if (options.entryId !== "mnemon") throw new Error("Legacy settings belong to the canonical mnemon Entry; another root Entry is ambiguous.");
-		if (!VIEW_NAMESPACE.test(options.viewNamespace) || !LEGACY_NAMESPACE.test(options.legacyNamespace) || options.legacyNamespace !== options.viewNamespace.replace(/^mnemon-view/u, "mnemon-plugins")) throw new Error("Legacy settings namespaces must identify the same exact profile.");
-		const sections = object$2(options.sections, "Legacy settings document");
-		for (const key of Object.keys(sections)) if (key.startsWith("mnemon-view-") && !VIEW_NAMESPACE.test(key) || key.startsWith("mnemon-plugins-") && !LEGACY_NAMESPACE.test(key)) throw new Error("Legacy settings document contains an invalid Mnemon namespace.");
-		const relevant = [
-			"mnemon",
-			"mnemon-ui",
-			options.viewNamespace,
-			options.legacyNamespace
-		];
-		if (!relevant.some((key) => Object.hasOwn(sections, key))) return {
-			patch: {},
-			diagnostics
-		};
-		for (const key of relevant) if (Object.hasOwn(sections, key) && containsExpression(copiedObject(sections[key], key))) throw new Error(`${key} contains an expression; legacy settings must contain only literal data.`);
-		const current = copiedObject(rawCurrent, "Current config override");
-		if (Object.hasOwn(current, "legacySettingsImported") && typeof current.legacySettingsImported !== "boolean") throw new Error("Current import marker must be boolean");
-		const root = Object.hasOwn(sections, "mnemon") ? copiedObject(sections.mnemon, "mnemon") : {};
-		if (Object.hasOwn(root, "memoryView") || Object.hasOwn(root, "legacySettingsImported")) throw new Error("Legacy mnemon contains reserved migration fields");
-		const oldInteraction = Object.hasOwn(root, "conversationInteraction") ? interaction(root.conversationInteraction, "mnemon.conversationInteraction", [
-			"toolviews",
-			"turnBar",
-			"saveAction"
-		]) : {};
-		const oldUi = Object.hasOwn(sections, "mnemon-ui") ? interaction(sections["mnemon-ui"], "mnemon-ui", ["turnBar", "saveAction"]) : {};
-		const currentInteraction = Object.hasOwn(current, "conversationInteraction") ? interaction(current.conversationInteraction, "Current conversationInteraction", [
-			"toolviews",
-			"turnBar",
-			"saveAction"
-		]) : {};
-		const patch = Object.fromEntries(Object.entries(root).filter(([key]) => key !== "conversationInteraction" && !Object.hasOwn(current, key)));
-		const inheritedInteraction = {
-			...oldInteraction,
-			...oldUi
-		};
-		if (Object.keys(inheritedInteraction).some((key) => !Object.hasOwn(currentInteraction, key))) patch.conversationInteraction = {
-			...inheritedInteraction,
-			...currentInteraction
-		};
-		const currentView = Object.hasOwn(current, "memoryView") ? view(current.memoryView, "Current memoryView") : {};
-		if (Object.hasOwn(sections, options.viewNamespace) || Object.hasOwn(sections, options.legacyNamespace)) {
-			if (!Array.isArray(options.sourceEntryIds)) throw new Error("Source Entry ids must be an array");
-			for (const id of options.sourceEntryIds) entryId(id, "Source Entry ids");
-			const sourceEntryIds = new Set(options.sourceEntryIds);
-			const oldSources = Object.hasOwn(sections, options.legacyNamespace) ? sources(sections[options.legacyNamespace], options.legacyNamespace, sourceEntryIds, diagnostics) : {};
-			const oldView = Object.hasOwn(sections, options.viewNamespace) ? view(sections[options.viewNamespace], options.viewNamespace) : {};
-			const entries = {
-				...oldSources,
-				...oldView.entries
-			};
-			applyEntryOverrides(entries, options.entryOverrides, sourceEntryIds, diagnostics);
-			const migratedView = {
-				...oldView,
-				entries,
-				...currentView
-			};
-			if (!Object.hasOwn(currentView, "entries") || !Object.hasOwn(currentView, "strategyTypeId") && oldView.strategyTypeId !== void 0) patch.memoryView = migratedView;
-		}
-		patch.legacySettingsImported = true;
-		return {
-			patch,
-			diagnostics
-		};
-	} catch (error) {
-		diagnostics.push(error instanceof Error ? error.message : "Legacy settings import could not be planned");
-		return {
-			patch: {},
-			diagnostics
-		};
-	}
-}
-//#endregion
-//#region src/host/settings-service.ts
-const pendingNativeImports = /* @__PURE__ */ new WeakSet();
-const clone$1 = (value) => structuredClone(value);
-const object$1 = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
-function profileYaml(source) {
-	const document = parseDocument(source, { customTags: [{
-		tag: "tag:yaml.org,2002:js",
-		resolve: (value) => ({ __jsExpr: value })
-	}] });
-	if (document.errors.length > 0 || document.warnings.length > 0) throw new Error("Invalid or unsupported legacy/profile YAML; retained backup was not changed");
-	return document.toJS({ maxAliasCount: 100 });
-}
-/** A local facade preserves Mnemon's wire namespaces; DSH owns all persistence. */
-var ProfileMnemonSettings = class {
+var MemoryPluginManagement = class {
 	ctx;
-	input;
-	registrations = /* @__PURE__ */ new Map();
-	listeners = /* @__PURE__ */ new Set();
-	revisions = /* @__PURE__ */ new Map();
-	owner;
-	forms;
-	editor;
+	engine;
+	settingsService;
+	settingsNamespace;
+	settings;
+	legacySettings;
+	queue = Promise.resolve();
 	closed = false;
-	importing;
-	nativeImportPending;
-	constructor(ctx, input) {
+	timer;
+	restoreError;
+	discoveryWarnings = [];
+	changingEntries = false;
+	restorePending = false;
+	/** A failed move keeps saved choices in effect instead of retrying on every profile reload. */
+	enablementMoveError;
+	constructor(ctx, engine, settingsService) {
 		this.ctx = ctx;
-		this.input = input;
-		this.forms = ctx.settings;
-		this.owner = ctx.fiber;
-		this.editor = ctx.get("configEditor");
-		const profile = ctx.get("profileContext");
-		const root = ctx.root ?? ctx;
-		if (profile?.home !== void 0 && existsSync(join(profile.home, "settings.yaml"))) pendingNativeImports.add(root);
-		this.nativeImportPending = pendingNativeImports.has(root);
-		const owner = this.owner;
-		const validate = (candidate) => {
-			const config = plainHostConfig(candidate);
-			for (const registration of this.registrations.values()) {
-				if (registration.legacy) continue;
-				const value = this.resolve(registration, config);
-				registration.validate?.(value);
+		this.engine = engine;
+		this.settingsService = settingsService;
+		const loader = this.loader();
+		const anchor = loader?.config?.baseUrl ?? loader?.ctx?.baseUrl ?? loader?.context?.baseUrl;
+		const suffix = anchor ? `-${hash(anchor).slice(0, 16)}` : "";
+		this.settingsNamespace = `${MNEMON_VIEW_SETTINGS_NAMESPACE}${suffix}`;
+		this.settings = settingsService.register(this.settingsNamespace, schema, {
+			base: { entries: {} },
+			applies: "live",
+			validate: (value) => {
+				preferences(value);
 			}
-		};
-		ctx.on("internal/config", function(_raw, next) {
-			const candidate = next();
-			if (this === owner) validate(candidate);
-			return candidate;
-		}, { prepend: true });
-		ctx.on("loader/volatile-update", ((paths) => {
-			if (this.closed) return;
-			for (const registration of this.registrations.values()) {
-				if (registration.legacy) continue;
-				if (!paths.some((path) => registration.field === void 0 ? path.length === 0 || !["memoryView", "legacySettingsImported"].includes(path[0]) : path.length === 0 || path[0] === registration.field)) continue;
-				const value = this.resolve(registration);
-				for (const listener of this.listeners) try {
-					listener(registration.namespace, value);
-				} catch (error) {
-					console.warn("dsh-mnemon: committed settings listener failed", error);
-				}
+		});
+		this.legacySettings = settingsService.register(`mnemon-plugins${suffix}`, legacySchema, {
+			base: { sources: {} },
+			applies: "live",
+			validate: (value) => {
+				legacyPreferences(value);
 			}
-		}));
-		ctx.effect(() => {
-			const disposePresentation = owner === void 0 ? void 0 : this.forms.configure({ auto: false }, owner);
-			return () => {
-				this.closed = true;
-				this.listeners.clear();
-				this.revisions.clear();
-				disposePresentation?.();
-			};
-		}, "dsh-mnemon: profile settings");
+		});
 	}
-	get writable() {
-		const entry = this.owner?.entry;
-		return !this.closed && this.forms.writable && entry !== void 0 && this.editor?.entries().includes(entry) === true;
+	resolveConfig(config, view = this.settings.get()) {
+		const selected = view.strategyTypeId;
+		return selected === void 0 ? config : {
+			...config,
+			memoryTopology: {
+				...config.memoryTopology,
+				strategyId: selected
+			}
+		};
 	}
-	onUpdated(listener) {
-		this.listeners.add(listener);
+	start() {
+		const schedule = () => this.scheduleRestore();
+		const stops = [
+			this.ctx.on("loader/entry-init", schedule),
+			this.ctx.on("loader/partial-dispose", schedule),
+			this.ctx.on("app-boot/config-reload", () => this.scheduleRestore(true)),
+			this.settingsService.onUpdated((namespace) => {
+				if (namespace === this.settingsNamespace || namespace === `mnemon-plugins${this.settingsNamespace.slice(11)}`) schedule();
+			})
+		];
+		this.ctx.inject(["pluginManager"], () => {
+			schedule();
+		});
+		schedule();
 		return () => {
-			this.listeners.delete(listener);
+			this.closed = true;
+			this.restorePending = false;
+			clearTimeout(this.timer);
+			for (const stop of stops.reverse()) stop();
 		};
 	}
-	resolve(registration, config = plainHostConfig(this.owner?.config ?? this.input)) {
-		const value = registration.legacy ? registration.base : registration.field === void 0 ? config : config[registration.field];
-		return registration.schema(object$1(value));
+	scheduleRestore(profileReload = false) {
+		const hasSavedState = Object.keys(this.settings.get().entries ?? {}).length > 0 || Object.keys(this.legacySettings.get().sources ?? {}).length > 0;
+		if (this.closed || !profileReload && this.changingEntries || !hasSavedState) return;
+		this.restorePending = true;
+		if (this.changingEntries || this.timer) return;
+		this.timer = setTimeout(() => {
+			this.timer = void 0;
+			this.enqueueRestore();
+		}, 0);
 	}
-	register(namespace, schema, options) {
-		if (this.registrations.has(namespace)) throw new Error(`Mnemon settings already registered: ${namespace}`);
-		if (typeof schema !== "function") throw new Error("Mnemon settings require a schema");
-		const field = namespace === "mnemon-ui" ? "conversationInteraction" : /^mnemon-view(?:-[a-f0-9]{16})?$/u.test(namespace) ? "memoryView" : void 0;
-		const legacy = /^mnemon-plugins(?:-[a-f0-9]{16})?$/u.test(namespace);
-		if (namespace !== "mnemon" && field === void 0 && !legacy) throw new Error("Unsupported Mnemon settings namespace");
-		const registration = {
-			namespace,
-			...field === void 0 ? {} : { field },
-			legacy,
-			schema,
-			base: clone$1(options.base ?? {}),
-			...options.validate === void 0 ? {} : { validate: options.validate }
-		};
-		const value = this.resolve(registration);
-		options.validate?.(value);
-		this.registrations.set(namespace, registration);
-		return { get: () => this.resolve(registration) };
+	enqueueRestore() {
+		if (this.closed || this.changingEntries || !this.restorePending) return;
+		clearTimeout(this.timer);
+		this.timer = void 0;
+		this.restorePending = false;
+		this.exclusive(async () => {
+			try {
+				await this.restore();
+			} catch (error) {
+				this.restoreError = error instanceof Error ? error.message : String(error);
+			}
+		}).catch(() => {});
 	}
-	nativeDescriptor() {
-		if (this.closed || this.owner?.entry === void 0 || !this.editor?.entries().includes(this.owner.entry)) return void 0;
-		const descriptor = this.forms.describe().find((item) => item.ns === this.owner?.entry?.options.id);
-		if (descriptor !== void 0) {
-			this.revisions.set(descriptor.revision, clone$1({
-				ns: descriptor.ns,
-				revision: descriptor.revision,
-				applies: descriptor.applies,
-				value: descriptor.value,
-				base: descriptor.base,
-				user: descriptor.user
-			}));
-			if (this.revisions.size > 64) this.revisions.delete(this.revisions.keys().next().value);
-		}
-		return descriptor;
+	/** A response must not race the deferred restore after profile reconciliation. */
+	async settled() {
+		do {
+			this.enqueueRestore();
+			const pending = this.queue;
+			await pending;
+			if (pending === this.queue && !this.restorePending) return;
+		} while (!this.closed);
 	}
-	unchanged(previous, current, registration, operations) {
-		const project = (value) => {
-			if (registration.field !== void 0) return object$1(value)[registration.field];
-			const { memoryView: _view, legacySettingsImported: _imported, conversationInteraction, ...core } = object$1(value);
-			return operations.some((operation) => operation.path[0] === "conversationInteraction") ? {
-				...core,
-				conversationInteraction
-			} : core;
-		};
-		const signature = (descriptor) => canonicalMemoryJson(JSON.parse(JSON.stringify([
-			project(descriptor.value) ?? null,
-			project(descriptor.base) ?? null,
-			project(descriptor.user) ?? null
-		])));
-		return signature(previous) === signature(current);
+	loader() {
+		const candidate = this.ctx.get("loader");
+		return candidate && typeof candidate.entries === "function" ? candidate : void 0;
 	}
-	describe(options) {
-		const raw = this.nativeDescriptor();
-		if (raw === void 0) return [];
-		const descriptor = options?.redactSecrets ? this.forms.describe(options).find((item) => item.ns === this.owner?.entry?.options.id) : raw;
-		if (descriptor === void 0) return [];
-		return [...this.registrations.values()].map((registration) => {
-			const project = (value) => registration.legacy ? {} : registration.field === void 0 ? value : object$1(value)[registration.field];
-			return {
-				ns: registration.namespace,
-				value: project(descriptor.value) ?? {},
-				base: project(descriptor.base) ?? {},
-				user: project(descriptor.user) ?? {},
-				revision: descriptor.revision,
-				applies: "live"
-			};
-		});
+	/**
+	* With the DSH plugin manager, the profile patch owns enablement, so its
+	* Plugins page and Mnemon agree. Profiles without it keep Mnemon's overlay.
+	*/
+	pluginManager() {
+		const candidate = this.ctx.get("pluginManager");
+		return typeof candidate?.setPluginEnabled === "function" ? candidate : void 0;
 	}
-	async mutate(namespace, operations, expectedRevision) {
-		const registration = this.registrations.get(namespace);
-		if (registration === void 0 || registration.legacy) throw new Error("Unsupported Mnemon settings namespace");
-		if (!this.writable) throw new Error("DSH settings are read-only");
-		const translated = operations.map((operation) => ({
-			...operation,
-			path: [...registration.field === void 0 ? [] : [registration.field], ...operation.path]
-		}));
-		let revision = expectedRevision;
-		const previous = revision === void 0 ? void 0 : this.revisions.get(revision);
-		for (let attempt = 0;; attempt += 1) {
-			if (!this.writable) throw new Error("DSH settings are read-only");
-			try {
-				await this.forms.mutate(this.owner.entry.options.id, translated, revision);
-				return;
-			} catch (error) {
-				if (attempt >= 2 || previous === void 0 || typeof error !== "object" || error === null || !("code" in error) || error.code !== "SETTINGS_CONFLICT") throw error;
-				if (!this.writable) throw new Error("DSH settings are read-only");
-				const current = this.nativeDescriptor();
-				if (current === void 0 || !this.unchanged(previous, current, registration, operations)) throw error;
-				revision = current.revision;
-			}
-		}
+	async setEnabled(manager, entryId, enabled) {
+		const result = await manager.setPluginEnabled(entryId, enabled);
+		if (result.application !== "applied") throw new Error(`DSH could not ${enabled ? "enable" : "disable"} ${entryId}: ${result.error?.message ?? result.application}`);
 	}
-	/** Read only the retained backup; ConfigEditor preserves all other patch rows. */
-	async importLegacy(sourceEntryIds) {
-		if (this.importing !== void 0) return this.importing;
-		this.importing = this.performImport(sourceEntryIds).finally(() => {
-			this.importing = void 0;
-		});
-		return this.importing;
+	settingsRevision(namespace = this.settingsNamespace) {
+		return this.settingsService.describe({ redactSecrets: true }).find((value) => value.ns === namespace)?.revision ?? 0;
 	}
-	async performImport(sourceEntryIds) {
-		const profile = this.ctx.get("profileContext");
-		const entry = this.owner?.entry;
-		if (!this.writable || profile?.home === void 0 || entry === void 0) return;
-		if (this.nativeImportPending) {
-			console.warn("dsh-mnemon: DSH is importing settings.yaml; restart once to recover retained Mnemon UI and plugin preferences");
-			return;
-		}
-		if (plainHostConfig(this.owner?.config ?? this.input).legacySettingsImported) return;
-		const backup = join(profile.home, "settings.yaml.imported");
-		let text;
-		try {
-			if ((await stat(backup)).size > 1048576) throw new Error("Legacy settings backup exceeds the import limit");
-			text = await readFile(backup, "utf8");
-		} catch (error) {
-			if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") return;
-			throw error;
-		}
-		const sections = profileYaml(text);
-		const viewNamespace = [...this.registrations.keys()].find((namespace) => namespace.startsWith("mnemon-view"));
-		const legacyNamespace = [...this.registrations.keys()].find((namespace) => namespace.startsWith("mnemon-plugins"));
-		const plan = () => {
-			const configuration = this.editor.configuration().find((item) => item.entry === entry);
-			if (configuration === void 0) throw new Error("Mnemon profile entry is no longer editable");
-			const document = profileYaml(readFileSync(this.editor.documentPath, "utf8"));
-			const entryOverrides = Array.isArray(document) ? document.flatMap((value) => {
-				const row = object$1(value);
-				if (typeof row.id !== "string") return [];
-				const entries = this.editor.entries().filter((candidate) => candidate.options.id === row.id);
-				if (entries.length > 1) throw new Error("Legacy settings import requires unambiguous profile Entry ids");
-				return [{
-					id: entries[0]?.id ?? row.id,
-					..."disabled" in row ? { disabled: row.disabled } : {},
-					..."config" in row ? { config: row.config } : {}
-				}];
-			}) : [];
-			return planLegacySettingsImport({
-				entryId: entry.options.id,
-				viewNamespace,
-				legacyNamespace,
-				sections,
-				currentOverride: configuration.override,
-				entryOverrides,
-				sourceEntryIds
-			});
-		};
-		const preview = plan();
-		if (Object.keys(preview.patch).length === 0) {
-			if (preview.diagnostics.length > 0) console.warn("dsh-mnemon: legacy settings were not imported; retained backup requires review");
-			return;
-		}
-		if (this.closed) return;
-		await this.editor.edit(entry, (current) => {
-			if (this.closed) throw new Error("Mnemon settings are disposed");
-			const next = plan();
-			return {
-				...current,
-				...next.patch
-			};
-		});
-	}
-};
-function createHostSettings(ctx, config) {
-	return typeof ctx.settings.register === "function" ? ctx.settings : new ProfileMnemonSettings(ctx, config);
-}
-function subscribeSettings(ctx, settings, listener) {
-	return settings instanceof ProfileMnemonSettings ? settings.onUpdated(listener) : ctx.on("settings/updated", listener);
-}
-//#endregion
-//#region src/host/plugin-management.ts
-const PACKAGE$1 = /^(?:@[a-z0-9._-]+\/)?dsh-mnemon-(source|strategy)-[a-z0-9._-]+$/u;
-const hash = (value) => createHash("sha256").update(canonicalMemoryJson(value)).digest("hex");
-const clone = (value) => JSON.parse(JSON.stringify(value));
-function contributionRoles(snapshot, entryId) {
-	const roles = /* @__PURE__ */ new Set();
-	if (snapshot.sources.some((value) => value.provenance.entryId === entryId)) roles.add("source");
-	if (snapshot.strategies.some((value) => value.provenance.entryId === entryId)) roles.add("strategy");
-	if ((snapshot.strategyExtensions ?? []).some((value) => value.provenance.entryId === entryId)) roles.add("strategy-extension");
-	return [...roles];
-}
-function fallbackDescriptor(entry, snapshot, editor) {
-	const sources = snapshot.sources.filter((value) => value.provenance.entryId === entry.id);
-	const strategies = snapshot.strategies.filter((value) => value.provenance.entryId === entry.id);
-	const extensions = (snapshot.strategyExtensions ?? []).filter((value) => value.provenance.entryId === entry.id);
-	const roles = contributionRoles(snapshot, entry.id);
-	if (roles.length === 0) roles.push(editor?.kind ?? (PACKAGE$1.exec(entry.options.name)?.[1] === "source" ? "source" : "strategy"));
-	const typeId = editor?.typeId ?? strategies[0]?.definition.manifest.typeId ?? extensions[0]?.definition.manifest.typeId ?? sources[0]?.definition.manifest.typeId;
-	const sourceLabel = sources[0]?.definition.manifest.management?.label;
-	const label = editor?.label ?? {
-		en: sourceLabel ?? typeId ?? entry.options.name,
-		"zh-CN": sourceLabel ?? typeId ?? entry.options.name
-	};
-	const description = editor?.description ?? {
-		en: "",
-		"zh-CN": ""
-	};
-	const provides = roles.includes("source") ? [{ id: "source" }, ...sources.map((source) => ({ id: `source.${source.definition.manifest.role}` }))] : [{ id: roles.includes("strategy") ? "strategy" : `strategy.${typeId ?? hash(entry.options.name).slice(0, 12)}` }];
-	return defineMemoryPlugin({
-		packageName: entry.options.name,
-		label,
-		description,
-		roles,
-		provides
-	});
-}
-function prepared(item, config) {
-	if (item.editor === void 0) throw new Error(`Plugin does not expose a pure configuration factory: ${item.entry.id}`);
-	const contribution = item.editor.create(config);
-	if ([...contribution.strategies ?? [], ...contribution.strategyExtensions ?? []][0].manifest.packageName !== item.entry.options.name) throw new Error("Plugin factory does not match its declared Entry");
-	if (contribution.plugin !== void 0 && hash(contribution.plugin) !== hash(item.descriptor)) throw new Error("Plugin factory descriptor does not match its module export");
-	return prepareMemoryContributions({
-		...contribution,
-		plugin: contribution.plugin ?? item.descriptor
-	}, { instanceId: item.entry.id });
-}
-function installedPlugin(descriptor, entryId) {
-	return {
-		kind: "plugin",
-		instanceKey: `plugin:${entryId}`,
-		provenance: {
-			packageName: descriptor.packageName,
-			entryId
-		},
-		descriptor
-	};
-}
-function orderPlugins(values) {
-	const byId = new Map(values.map((value) => [value.entryId, value]));
-	const edges = new Map(values.map((value) => [value.entryId, /* @__PURE__ */ new Set()]));
-	const indegree = new Map(values.map((value) => [value.entryId, 0]));
-	for (const dependent of values) for (const requirement of dependent.requires) for (const provider of values) {
-		if (provider.entryId === dependent.entryId || !provider.provides.some((capability) => capability.id === requirement)) continue;
-		if (edges.get(provider.entryId).has(dependent.entryId)) continue;
-		edges.get(provider.entryId).add(dependent.entryId);
-		indegree.set(dependent.entryId, indegree.get(dependent.entryId) + 1);
-	}
-	const stable = (left, right) => byId.get(left).packageName.localeCompare(byId.get(right).packageName) || left.localeCompare(right);
-	const ready = [...indegree].filter(([, count]) => count === 0).map(([entryId]) => entryId).sort(stable);
-	const ordered = [];
-	while (ready.length > 0) {
-		const entryId = ready.shift();
-		ordered.push(byId.get(entryId));
-		for (const dependent of [...edges.get(entryId)].sort(stable)) {
-			const next = indegree.get(dependent) - 1;
-			indegree.set(dependent, next);
-			if (next === 0) {
-				ready.push(dependent);
-				ready.sort(stable);
-			}
-		}
-	}
-	if (ordered.length < values.length) ordered.push(...values.filter((value) => !ordered.includes(value)).sort((left, right) => stable(left.entryId, right.entryId)));
-	return ordered;
-}
-/**
-* Profile-local plugin graph overlay. Every dsh-mnemon Source or Strategy Entry
-* is one peer node; activation, configuration, dependency checks and rollback
-* use one transaction. Contribution roles do not create separate managers.
-*/
-var MemoryPluginManagement = class {
-	ctx;
-	engine;
-	settingsService;
-	settingsNamespace;
-	settings;
-	legacySettings;
-	queue = Promise.resolve();
-	closed = false;
-	timer;
-	restoreError;
-	discoveryWarnings = [];
-	changingEntries = false;
-	restorePending = false;
-	constructor(ctx, engine, settingsService = ctx.settings) {
-		this.ctx = ctx;
-		this.engine = engine;
-		this.settingsService = settingsService;
-		const loader = this.loader();
-		const anchor = loader?.config?.baseUrl ?? loader?.ctx?.baseUrl ?? loader?.context?.baseUrl;
-		const suffix = anchor ? `-${hash(anchor).slice(0, 16)}` : "";
-		this.settingsNamespace = `${MNEMON_VIEW_SETTINGS_NAMESPACE}${suffix}`;
-		this.settings = settingsService.register(this.settingsNamespace, schema, {
-			base: { entries: {} },
-			applies: "live",
-			validate: (value) => {
-				preferences(value);
-			}
-		});
-		this.legacySettings = settingsService.register(`mnemon-plugins${suffix}`, legacySchema, {
-			base: { sources: {} },
-			applies: "live",
-			validate: (value) => {
-				legacyPreferences(value);
-			}
-		});
-	}
-	resolveConfig(config, view = this.settings.get()) {
-		const selected = view.strategyTypeId;
-		return selected === void 0 ? config : {
-			...config,
-			memoryTopology: {
-				...config.memoryTopology,
-				strategyId: selected
-			}
-		};
-	}
-	start() {
-		const schedule = () => this.scheduleRestore();
-		const stops = [
-			this.ctx.on("loader/entry-init", schedule),
-			this.ctx.on("loader/partial-dispose", schedule),
-			this.ctx.on("app-boot/config-reload", () => this.scheduleRestore(true)),
-			subscribeSettings(this.ctx, this.settingsService, (namespace) => {
-				if (namespace === this.settingsNamespace || namespace === `mnemon-plugins${this.settingsNamespace.slice(11)}`) schedule();
-			})
-		];
-		schedule();
-		return () => {
-			this.closed = true;
-			this.restorePending = false;
-			clearTimeout(this.timer);
-			for (const stop of stops.reverse()) stop();
-		};
-	}
-	scheduleRestore(profileReload = false) {
-		const hasSavedState = Object.keys(this.settings.get().entries ?? {}).length > 0 || Object.keys(this.legacySettings.get().sources ?? {}).length > 0;
-		if (this.closed || !profileReload && this.changingEntries || !hasSavedState) return;
-		this.restorePending = true;
-		if (this.changingEntries || this.timer) return;
-		this.timer = setTimeout(() => {
-			this.timer = void 0;
-			this.enqueueRestore();
-		}, 0);
-	}
-	enqueueRestore() {
-		if (this.closed || this.changingEntries || !this.restorePending) return;
-		clearTimeout(this.timer);
-		this.timer = void 0;
-		this.restorePending = false;
-		this.exclusive(async () => {
-			try {
-				await this.restore();
-			} catch (error) {
-				this.restoreError = error instanceof Error ? error.message : String(error);
-			}
-		}).catch(() => {});
-	}
-	/** A response must not race the deferred restore after profile reconciliation. */
-	async settled() {
-		do {
-			this.enqueueRestore();
-			const pending = this.queue;
-			await pending;
-			if (pending === this.queue && !this.restorePending) return;
-		} while (!this.closed);
-	}
-	loader() {
-		const candidate = this.ctx.get("loader");
-		return candidate && typeof candidate.entries === "function" ? candidate : void 0;
-	}
-	settingsRevision() {
-		return this.settingsService.describe({ redactSecrets: true }).find((value) => value.ns === this.settingsNamespace)?.revision ?? 0;
+	/** The plugin manager owns enablement unless moving the saved choices failed. */
+	enablementOwner() {
+		return this.enablementMoveError === void 0 ? this.pluginManager() : void 0;
 	}
 	async managed() {
 		const loader = this.loader();
@@ -9168,7 +8673,7 @@ var MemoryPluginManagement = class {
 		const pending = this.queue;
 		const items = await this.managed();
 		if (pending !== this.queue || this.restorePending) return this.catalog();
-		const values = items.map((item) => clone(item.value));
+		const values = items.map((item) => clone$1(item.value));
 		const snapshot = this.engine.contributionSnapshot();
 		const managedIds = new Set(items.map((item) => item.entry.id));
 		const entryIds = new Set([
@@ -9228,7 +8733,7 @@ var MemoryPluginManagement = class {
 			revision: this.revision(items),
 			writable: this.settingsService.writable && this.loader() !== void 0,
 			entries: orderPlugins(values),
-			diagnostics: [...this.discoveryWarnings, ...this.restoreError === void 0 ? [] : [this.restoreError]]
+			diagnostics: [...this.discoveryWarnings, ...[this.restoreError, this.enablementMoveError].filter((value) => value !== void 0)]
 		};
 	}
 	choices(items, entries) {
@@ -9259,7 +8764,10 @@ var MemoryPluginManagement = class {
 			entries: request.entries
 		});
 		const managedIds = new Set(items.map((item) => item.entry.id));
-		for (const entryId of Object.keys(incoming.entries)) if (!managedIds.has(entryId)) throw new Error("Memory plugin Entry is not managed by this Host: " + entryId);
+		for (const [entryId, value] of Object.entries(incoming.entries)) {
+			if (!managedIds.has(entryId)) throw new Error("Memory plugin Entry is not managed by this Host: " + entryId);
+			if (typeof value.enabled !== "boolean") throw new Error("Plugin enabled must be boolean");
+		}
 		const choices = this.choices(items, incoming.entries);
 		for (const item of items) {
 			const chosen = choices.get(item.entry.id);
@@ -9316,8 +8824,9 @@ var MemoryPluginManagement = class {
 	}
 	async evaluateSnapshot(snapshot, config, scope, strategyTypeId, signal) {
 		signal?.throwIfAborted();
+		const { strategyFallback: _fallback, ...options } = memoryGenerationOptions(config, scope.workspaceId);
 		const generation = new MemoryCompositionGeneration(snapshot, {
-			...memoryGenerationOptions(config, scope.workspaceId),
+			...options,
 			strategyTypeId
 		});
 		try {
@@ -9339,14 +8848,24 @@ var MemoryPluginManagement = class {
 			const items = await this.managed();
 			const choices = this.validateRequest(items, request);
 			const expectedSettingsRevision = this.settingsRevision();
+			const manager = this.enablementOwner();
 			const previous = preferences(this.settings.get());
+			const merged = {
+				...previous.entries,
+				...request.entries
+			};
 			const next = preferences({
 				strategyTypeId: request.strategyTypeId,
-				entries: {
-					...previous.entries,
-					...request.entries
-				}
+				entries: manager === void 0 ? merged : configurationOnly(merged)
 			});
+			const toggles = manager === void 0 ? [] : items.flatMap((item) => {
+				const enabled = choices.get(item.entry.id).enabled;
+				return enabled === !item.entry.disabled ? [] : [{
+					entryId: item.entry.id,
+					enabled
+				}];
+			}).sort((left, right) => Number(right.enabled) - Number(left.enabled));
+			const written = [];
 			let committedRevision;
 			await this.updateEntries(items, choices, {
 				validate: () => this.evaluateSnapshot(this.engine.contributionSnapshot(), config, scope, request.strategyTypeId, signal),
@@ -9361,8 +8880,13 @@ var MemoryPluginManagement = class {
 						value: next.entries
 					}], expectedSettingsRevision);
 					committedRevision = this.settingsRevision();
+					for (const toggle of toggles) {
+						await this.setEnabled(manager, toggle.entryId, toggle.enabled);
+						written.push(toggle);
+					}
 				},
 				compensate: async () => {
+					for (const toggle of [...written].reverse()) await this.setEnabled(manager, toggle.entryId, !toggle.enabled);
 					if (hash(preferences(this.settings.get())) !== hash(next)) throw new Error("Memory plugin settings changed before rollback; refresh and inspect the saved configuration.");
 					await this.settingsService.mutate(this.settingsNamespace, [previous.strategyTypeId === void 0 ? {
 						op: "unset",
@@ -9381,15 +8905,56 @@ var MemoryPluginManagement = class {
 			this.restoreError = void 0;
 		});
 	}
+	/** Move saved enablement into the profile patch once, keeping only configuration overlays. */
+	async moveEnablement(manager, items) {
+		const saved = this.settings.get().entries ?? {};
+		const legacy = this.legacySettings.get().sources ?? {};
+		const moves = items.flatMap((item) => {
+			const enabled = saved[item.entry.id] !== void 0 ? saved[item.entry.id].enabled : item.descriptor.roles.includes("source") ? legacy[item.entry.id]?.enabled : void 0;
+			return enabled === void 0 ? [] : [{
+				entryId: item.entry.id,
+				enabled
+			}];
+		}).sort((left, right) => Number(right.enabled) - Number(left.enabled));
+		if (moves.length === 0 && Object.keys(legacy).length === 0) return false;
+		const legacyNamespace = `mnemon-plugins${this.settingsNamespace.slice(11)}`;
+		const revisions = {
+			view: this.settingsRevision(),
+			legacy: this.settingsRevision(legacyNamespace)
+		};
+		for (const move of moves) await this.setEnabled(manager, move.entryId, move.enabled);
+		await this.settingsService.mutate(this.settingsNamespace, [{
+			op: "set",
+			path: ["entries"],
+			value: configurationOnly(saved)
+		}], revisions.view);
+		if (Object.keys(legacy).length > 0) await this.settingsService.mutate(legacyNamespace, [{
+			op: "set",
+			path: ["sources"],
+			value: {}
+		}], revisions.legacy);
+		return true;
+	}
 	async restore() {
 		if (this.closed) return;
-		const items = await this.managed();
+		let items = await this.managed();
+		const available = this.enablementOwner();
+		if (available !== void 0 && this.settingsService.writable) try {
+			if (await this.moveEnablement(available, items)) items = await this.managed();
+		} catch (error) {
+			this.enablementMoveError = `Saved plugin choices could not move into the DSH profile and stay managed by Mnemon: ${error instanceof Error ? error.message : String(error)}`;
+		}
+		const manager = this.enablementOwner();
 		const saved = this.settings.get().entries ?? {};
 		const legacy = this.legacySettings.get().sources ?? {};
 		const desired = Object.fromEntries(items.flatMap((item) => {
 			const unified = saved[item.entry.id];
-			if (unified !== void 0) return [[item.entry.id, unified]];
-			const oldSource = item.descriptor.roles.includes("source") ? legacy[item.entry.id] : void 0;
+			const current = !item.entry.disabled;
+			if (unified !== void 0) return [[item.entry.id, {
+				enabled: manager === void 0 ? unified.enabled ?? current : current,
+				config: unified.config
+			}]];
+			const oldSource = manager === void 0 && item.descriptor.roles.includes("source") ? legacy[item.entry.id] : void 0;
 			return oldSource === void 0 ? [] : [[item.entry.id, {
 				enabled: oldSource.enabled,
 				config: item.value.config
@@ -9408,7 +8973,7 @@ var MemoryPluginManagement = class {
 		const previous = items.map((item) => ({
 			item,
 			disabled: item.entry.options.disabled ?? null,
-			config: clone(item.entry.options.config ?? {}),
+			config: clone$1(item.entry.options.config ?? {}),
 			enabled: item.value.enabled,
 			active: item.value.active
 		}));
@@ -9429,7 +8994,7 @@ var MemoryPluginManagement = class {
 				touched.add(item.entry.id);
 				await item.entry.update(item.editor === void 0 ? { disabled: !desired.enabled } : {
 					disabled: !desired.enabled,
-					config: clone(desired.config)
+					config: clone$1(desired.config)
 				});
 				await item.entry.fiber?.await?.();
 				const registered = contributionRoles(this.engine.contributionSnapshot(), item.entry.id).length > 0;
@@ -9511,7 +9076,7 @@ var MemoryPluginManagement = class {
 };
 //#endregion
 //#region src/host/view-rpc.ts
-function object(value) {
+function object$2(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("View request must be an object");
 	return value;
 }
@@ -9528,7 +9093,7 @@ function createViewHandler(runtime, engine, management, access, lifecycle, insta
 				"preview",
 				"inspect-plugin"
 			].includes(endpoint) : !["apply", "install-plugin"].includes(endpoint)) throw new Error("View operation is not available on this channel");
-			const payload = object(input);
+			const payload = object$2(input);
 			if (endpoint === "inspect-plugin") {
 				if (installation === void 0 || typeof payload.packageName !== "string") throw new Error("Plugin discovery is unavailable");
 				return {
@@ -9590,9 +9155,9 @@ function createViewHandler(runtime, engine, management, access, lifecycle, insta
 				};
 			}
 			if (endpoint !== "preview" && endpoint !== "apply") throw new Error("Unknown View operation");
-			const raw = object(payload.configuration);
+			const raw = object$2(payload.configuration);
 			if (typeof raw.expectedRevision !== "string" || typeof raw.strategyTypeId !== "string") throw new Error("View configuration requires a revision and Strategy id");
-			object(raw.entries);
+			object$2(raw.entries);
 			const request = raw;
 			if (endpoint === "preview") return {
 				ok: true,
@@ -9616,11 +9181,11 @@ function createViewHandler(runtime, engine, management, access, lifecycle, insta
 		}
 	};
 }
-function registerViewRpc(connection, runtime, engine, management, lifecycle, authority, installation) {
+function registerViewRpc(connection, runtime, engine, management, lifecycle, installation) {
 	const readHandler = createViewHandler(runtime, engine, management, "read", lifecycle, installation);
 	const writeHandler = createViewHandler(runtime, engine, management, "write", lifecycle, installation);
-	connection.rpc.handle(MNEMON_VIEW_CHANNEL, readHandler, { authority: "trusted-host" });
-	connection.rpc.handle(MNEMON_VIEW_WRITE_CHANNEL, writeHandler, { authority });
+	connection.rpc.handle(MNEMON_VIEW_CHANNEL, readHandler);
+	connection.rpc.handle(MNEMON_VIEW_WRITE_CHANNEL, writeHandler);
 	return {
 		read: readHandler,
 		write: writeHandler
@@ -9879,179 +9444,690 @@ var __esDecorate = function(ctor, descriptorIn, decorators, contextIn, initializ
 			else descriptor[key] = _;
 		}
 	}
-	if (target) Object.defineProperty(target, contextIn.name, descriptor);
-	done = true;
-};
-function denied() {
-	return {
-		ok: false,
-		error: {
-			code: "bad-request",
-			message: "remote Mnemon management requires remoteAccess: trusted-host",
-			details: { issues: [] }
+	if (target) Object.defineProperty(target, contextIn.name, descriptor);
+	done = true;
+};
+function denied() {
+	return {
+		ok: false,
+		error: {
+			code: "bad-request",
+			message: "remote Mnemon management requires remoteAccess: trusted-host",
+			details: { issues: [] }
+		}
+	};
+}
+function unknownSettingsEndpoint(endpoint) {
+	return {
+		ok: false,
+		error: {
+			code: "bad-request",
+			message: `unknown remote Mnemon settings endpoint: ${endpoint}`,
+			details: { issues: [] }
+		}
+	};
+}
+/**
+* Project Mnemon's existing handlers through DSH API Gateway. The Gateway owns
+* `/api`, Host/Origin validation, browser pairing, and response envelopes;
+* this Service retains Mnemon's narrower management grant.
+*/
+let MnemonRemoteService = (() => {
+	let _classSuper = TypertRemoteService;
+	let _instanceExtraInitializers = [];
+	let _read_decorators;
+	let _activation_decorators;
+	let _write_decorators;
+	let _pack_decorators;
+	let _settings_decorators;
+	let _view_decorators;
+	let _viewWrite_decorators;
+	return class MnemonRemoteService extends _classSuper {
+		static {
+			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+			_read_decorators = [Remote("read")];
+			_activation_decorators = [Remote("activation")];
+			_write_decorators = [Remote("write")];
+			_pack_decorators = [Remote("pack")];
+			_settings_decorators = [Remote("settings")];
+			_view_decorators = [Remote("view")];
+			_viewWrite_decorators = [Remote("viewWrite")];
+			__esDecorate(this, null, _read_decorators, {
+				kind: "method",
+				name: "read",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "read" in obj,
+					get: (obj) => obj.read
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _activation_decorators, {
+				kind: "method",
+				name: "activation",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "activation" in obj,
+					get: (obj) => obj.activation
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _write_decorators, {
+				kind: "method",
+				name: "write",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "write" in obj,
+					get: (obj) => obj.write
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _pack_decorators, {
+				kind: "method",
+				name: "pack",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "pack" in obj,
+					get: (obj) => obj.pack
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _settings_decorators, {
+				kind: "method",
+				name: "settings",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "settings" in obj,
+					get: (obj) => obj.settings
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _view_decorators, {
+				kind: "method",
+				name: "view",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "view" in obj,
+					get: (obj) => obj.view
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate(this, null, _viewWrite_decorators, {
+				kind: "method",
+				name: "viewWrite",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "viewWrite" in obj,
+					get: (obj) => obj.viewWrite
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
+				enumerable: true,
+				configurable: true,
+				writable: true,
+				value: _metadata
+			});
+		}
+		handlers = __runInitializers(this, _instanceExtraInitializers);
+		constructor(ctx, handlers) {
+			super(ctx, "mnemonRemote", { namespace: MNEMON_REMOTE_NAMESPACE });
+			this.handlers = handlers;
+		}
+		read(endpoint, payload, signal) {
+			return this.handlers.read(endpoint, payload, signal);
+		}
+		activation(endpoint, payload, signal) {
+			return this.handlers.activation(endpoint, payload, signal);
+		}
+		write(endpoint, payload, signal) {
+			if (!this.handlers.management) return Promise.resolve(denied());
+			return this.handlers.write(endpoint, payload, signal);
+		}
+		pack(endpoint, payload, signal) {
+			if (!this.handlers.management) return Promise.resolve(denied());
+			return this.handlers.pack(endpoint, payload, signal);
+		}
+		async settings(endpoint, payload, signal) {
+			if (endpoint === "mutate" && !this.handlers.management) return denied();
+			if (endpoint !== "get" && endpoint !== "mutate") return unknownSettingsEndpoint(endpoint);
+			const response = await this.handlers.settings(endpoint, payload, signal);
+			if (endpoint !== "get" || this.handlers.management || !response.ok || typeof response.value !== "object" || response.value === null || Array.isArray(response.value)) return response;
+			return {
+				...response,
+				value: {
+					...response.value,
+					writable: false
+				}
+			};
+		}
+		view(endpoint, payload, signal) {
+			return this.handlers.view(endpoint, payload, signal);
+		}
+		viewWrite(endpoint, payload, signal) {
+			if (!this.handlers.management) return Promise.resolve(denied());
+			return this.handlers.viewWrite(endpoint, payload, signal);
+		}
+	};
+})();
+//#endregion
+//#region src/host/live-config.ts
+function plain(value) {
+	if (isVolatile(value)) return plain(value.get());
+	if (Array.isArray(value)) return value.map(plain);
+	if (value === null || typeof value !== "object") return value;
+	const prototype = Object.getPrototypeOf(value);
+	if (prototype !== Object.prototype && prototype !== null) return value;
+	return Object.fromEntries(Object.entries(value).map(([key, child]) => [key, plain(child)]));
+}
+/** Read a detached snapshot of the live profile configuration. */
+function plainHostConfig(value = {}) {
+	return plain(value);
+}
+function liveConfig() {
+	const schema = new z(Config.toJSON());
+	schema.dict = Object.fromEntries(Object.entries(schema.dict ?? {}).map(([key, field]) => [key, key === "remoteAccess" ? field : field.volatile()]));
+	const standard = schema["~standard"];
+	Object.defineProperty(schema, "~standard", { value: {
+		...standard,
+		validate(value) {
+			const parsed = standard.validate(value);
+			if ("then" in parsed) throw new TypeError("Mnemon configuration validation must be synchronous");
+			if (parsed.issues) return parsed;
+			try {
+				resolveConfig(plainHostConfig(parsed.value));
+				return parsed;
+			} catch (error) {
+				return { issues: [{ message: error instanceof Error ? error.message : String(error) }] };
+			}
+		}
+	} });
+	return schema;
+}
+/** Profile Config for live forms; transport authority retains normal remounts. */
+const LiveConfig = liveConfig();
+//#endregion
+//#region src/host/legacy-settings-import.ts
+const UNSAFE_KEYS = /* @__PURE__ */ new Set([
+	"__proto__",
+	"prototype",
+	"constructor"
+]);
+const ENTRY_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,299}$/u;
+const STRATEGY_ID = /^[a-z][a-z0-9-]{0,127}$/u;
+const VIEW_NAMESPACE = /^mnemon-view(?:-[a-f0-9]{16})?$/u;
+const LEGACY_NAMESPACE = /^mnemon-plugins(?:-[a-f0-9]{16})?$/u;
+function object$1(value, label) {
+	if (value === null || typeof value !== "object" || Array.isArray(value) || ![Object.prototype, null].includes(Object.getPrototypeOf(value))) throw new Error(`${label} must be a plain object`);
+	for (const key of Reflect.ownKeys(value)) {
+		if (typeof key !== "string" || UNSAFE_KEYS.has(key)) throw new Error(`${label} contains an unsafe key`);
+		const descriptor = Object.getOwnPropertyDescriptor(value, key);
+		if (!descriptor.enumerable || !Object.hasOwn(descriptor, "value")) throw new Error(`${label} must contain only data properties`);
+	}
+	return value;
+}
+/** Copy JSON data without invoking getters, serializers or prototype methods. */
+function copy(value, label, ancestors = /* @__PURE__ */ new Set(), depth = 0) {
+	if (value === null || typeof value === "string" || typeof value === "boolean") return value;
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	if (typeof value !== "object" || value === null) throw new Error(`${label} must contain only JSON data`);
+	if (depth > 64 || ancestors.has(value)) throw new Error(`${label} contains cyclic or excessively nested data`);
+	ancestors.add(value);
+	try {
+		if (Array.isArray(value)) {
+			if (Object.getPrototypeOf(value) !== Array.prototype) throw new Error(`${label} must contain plain arrays`);
+			if (Reflect.ownKeys(value).length !== value.length + 1) throw new Error(`${label} contains a sparse or extended array`);
+			return Array.from({ length: value.length }, (_, index) => {
+				const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+				if (!descriptor || !descriptor.enumerable || !Object.hasOwn(descriptor, "value")) throw new Error(`${label} must contain only data properties`);
+				return copy(descriptor.value, label, ancestors, depth + 1);
+			});
+		}
+		return Object.fromEntries(Object.entries(object$1(value, label)).map(([key, item]) => [key, copy(item, label, ancestors, depth + 1)]));
+	} finally {
+		ancestors.delete(value);
+	}
+}
+function copiedObject(value, label) {
+	object$1(value, label);
+	return copy(value, label);
+}
+/** Inspect validated copies only; never evaluate expressions or invoke getters. */
+function containsExpression(value) {
+	return value !== null && typeof value === "object" && (Object.hasOwn(value, "__jsExpr") || Object.values(value).some(containsExpression));
+}
+function fields(value, allowed, label) {
+	if (Object.keys(value).some((key) => !allowed.includes(key))) throw new Error(`${label} contains unsupported fields`);
+}
+function interaction(value, label, allowed) {
+	const result = copiedObject(value, label);
+	fields(result, allowed, label);
+	if (Object.values(result).some((item) => typeof item !== "boolean")) throw new Error(`${label} preferences must be boolean`);
+	return result;
+}
+function entryId(value, label) {
+	if (typeof value !== "string" || !ENTRY_ID.test(value) || UNSAFE_KEYS.has(value)) throw new Error(`${label} contains an invalid Entry id`);
+}
+function view(value, label) {
+	const result = copiedObject(value, label);
+	fields(result, ["strategyTypeId", "entries"], label);
+	if (Object.hasOwn(result, "strategyTypeId") && (typeof result.strategyTypeId !== "string" || !STRATEGY_ID.test(result.strategyTypeId))) throw new Error(`${label} contains an invalid Strategy type id`);
+	const entries = {};
+	if (Object.hasOwn(result, "entries")) {
+		const values = object$1(result.entries, `${label}.entries`);
+		if (Object.keys(values).length > 64) throw new Error(`${label} contains too many Entries`);
+		for (const [id, raw] of Object.entries(values)) {
+			entryId(id, label);
+			const item = copiedObject(raw, `${label}.entries`);
+			fields(item, ["enabled", "config"], `${label}.entries`);
+			if (Object.hasOwn(item, "enabled") && typeof item.enabled !== "boolean") throw new Error(`${label} Entry enabled must be boolean`);
+			const config = Object.hasOwn(item, "config") ? copiedObject(item.config, `${label} Entry config`) : {};
+			if (JSON.stringify(config).length > 65536) throw new Error(`${label} Entry config exceeds 64 KiB`);
+			entries[id] = {
+				...typeof item.enabled === "boolean" ? { enabled: item.enabled } : {},
+				config
+			};
+		}
+	}
+	return {
+		...typeof result.strategyTypeId === "string" ? { strategyTypeId: result.strategyTypeId } : {},
+		...Object.hasOwn(result, "entries") ? { entries } : {}
+	};
+}
+function sources(value, label, sourceEntryIds, diagnostics) {
+	const result = copiedObject(value, label);
+	fields(result, ["sources"], label);
+	const values = Object.hasOwn(result, "sources") ? object$1(result.sources, `${label}.sources`) : {};
+	if (Object.keys(values).length > 64) throw new Error(`${label} contains too many Source Entries`);
+	const entries = {};
+	for (const [id, raw] of Object.entries(values)) {
+		entryId(id, label);
+		const item = copiedObject(raw, `${label}.sources`);
+		fields(item, ["enabled"], `${label}.sources`);
+		if (typeof item.enabled !== "boolean") throw new Error(`${label} Source enabled must be boolean`);
+		if (!sourceEntryIds.has(id)) {
+			diagnostics.push(`Skipped legacy Source preference for ${id}: the current profile does not declare it as a Source.`);
+			continue;
+		}
+		entries[id] = {
+			enabled: item.enabled,
+			config: {}
+		};
+	}
+	return entries;
+}
+function applyEntryOverrides(entries, overrides, sourceEntryIds, diagnostics) {
+	if (!Array.isArray(overrides)) throw new Error("Explicit Entry overrides must be an array");
+	const matching = /* @__PURE__ */ new Map();
+	for (const raw of overrides) {
+		const row = object$1(raw, "Explicit Entry override");
+		entryId(row.id, "Explicit Entry override");
+		if (!Object.hasOwn(entries, row.id)) continue;
+		const previous = matching.get(row.id) ?? {};
+		matching.set(row.id, {
+			...previous,
+			...row.disabled === void 0 ? {} : { disabled: row.disabled },
+			...row.config === void 0 ? {} : { config: row.config }
+		});
+	}
+	for (const [id, row] of matching) {
+		if (row.disabled !== void 0 && typeof row.disabled !== "boolean") {
+			delete entries[id];
+			diagnostics.push(`Skipped legacy View preference for ${id}: its explicit disabled value is not boolean.`);
+			continue;
+		}
+		if (row.config !== void 0 && !sourceEntryIds.has(id)) {
+			const config = copiedObject(row.config, "Explicit Entry config");
+			if (containsExpression(config)) {
+				delete entries[id];
+				diagnostics.push(`Skipped legacy View preference for ${id}: its explicit config contains an expression.`);
+				continue;
+			}
+			entries[id].config = config;
+		}
+		if (typeof row.disabled === "boolean") entries[id].enabled = !row.disabled;
+	}
+}
+/**
+* Recover only the canonical root and the exact owning profile's old namespaces.
+* This does not read files, edit profile rows, validate plugin domains or commit.
+* Malformed relevant input rejects the complete plan without an import marker.
+*/
+function planLegacySettingsImport(options) {
+	const diagnostics = [];
+	try {
+		const rawCurrent = object$1(options.currentOverride, "Current config override");
+		if (rawCurrent.legacySettingsImported === true) return {
+			patch: {},
+			diagnostics
+		};
+		if (options.entryId !== "mnemon") throw new Error("Legacy settings belong to the canonical mnemon Entry; another root Entry is ambiguous.");
+		if (!VIEW_NAMESPACE.test(options.viewNamespace) || !LEGACY_NAMESPACE.test(options.legacyNamespace) || options.legacyNamespace !== options.viewNamespace.replace(/^mnemon-view/u, "mnemon-plugins")) throw new Error("Legacy settings namespaces must identify the same exact profile.");
+		const sections = object$1(options.sections, "Legacy settings document");
+		for (const key of Object.keys(sections)) if (key.startsWith("mnemon-view-") && !VIEW_NAMESPACE.test(key) || key.startsWith("mnemon-plugins-") && !LEGACY_NAMESPACE.test(key)) throw new Error("Legacy settings document contains an invalid Mnemon namespace.");
+		const relevant = [
+			"mnemon",
+			"mnemon-ui",
+			options.viewNamespace,
+			options.legacyNamespace
+		];
+		if (!relevant.some((key) => Object.hasOwn(sections, key))) return {
+			patch: {},
+			diagnostics
+		};
+		for (const key of relevant) if (Object.hasOwn(sections, key) && containsExpression(copiedObject(sections[key], key))) throw new Error(`${key} contains an expression; legacy settings must contain only literal data.`);
+		const current = copiedObject(rawCurrent, "Current config override");
+		if (Object.hasOwn(current, "legacySettingsImported") && typeof current.legacySettingsImported !== "boolean") throw new Error("Current import marker must be boolean");
+		const root = Object.hasOwn(sections, "mnemon") ? copiedObject(sections.mnemon, "mnemon") : {};
+		if (Object.hasOwn(root, "memoryView") || Object.hasOwn(root, "legacySettingsImported")) throw new Error("Legacy mnemon contains reserved migration fields");
+		const oldInteraction = Object.hasOwn(root, "conversationInteraction") ? interaction(root.conversationInteraction, "mnemon.conversationInteraction", [
+			"toolviews",
+			"turnBar",
+			"saveAction"
+		]) : {};
+		const oldUi = Object.hasOwn(sections, "mnemon-ui") ? interaction(sections["mnemon-ui"], "mnemon-ui", ["turnBar", "saveAction"]) : {};
+		const currentInteraction = Object.hasOwn(current, "conversationInteraction") ? interaction(current.conversationInteraction, "Current conversationInteraction", [
+			"toolviews",
+			"turnBar",
+			"saveAction"
+		]) : {};
+		const patch = Object.fromEntries(Object.entries(root).filter(([key]) => key !== "conversationInteraction" && !Object.hasOwn(current, key)));
+		const inheritedInteraction = {
+			...oldInteraction,
+			...oldUi
+		};
+		if (Object.keys(inheritedInteraction).some((key) => !Object.hasOwn(currentInteraction, key))) patch.conversationInteraction = {
+			...inheritedInteraction,
+			...currentInteraction
+		};
+		const currentView = Object.hasOwn(current, "memoryView") ? view(current.memoryView, "Current memoryView") : {};
+		if (Object.hasOwn(sections, options.viewNamespace) || Object.hasOwn(sections, options.legacyNamespace)) {
+			if (!Array.isArray(options.sourceEntryIds)) throw new Error("Source Entry ids must be an array");
+			for (const id of options.sourceEntryIds) entryId(id, "Source Entry ids");
+			const sourceEntryIds = new Set(options.sourceEntryIds);
+			const oldSources = Object.hasOwn(sections, options.legacyNamespace) ? sources(sections[options.legacyNamespace], options.legacyNamespace, sourceEntryIds, diagnostics) : {};
+			const oldView = Object.hasOwn(sections, options.viewNamespace) ? view(sections[options.viewNamespace], options.viewNamespace) : {};
+			const entries = {
+				...oldSources,
+				...oldView.entries
+			};
+			applyEntryOverrides(entries, options.entryOverrides, sourceEntryIds, diagnostics);
+			const migratedView = {
+				...oldView,
+				entries,
+				...currentView
+			};
+			if (!Object.hasOwn(currentView, "entries") || !Object.hasOwn(currentView, "strategyTypeId") && oldView.strategyTypeId !== void 0) patch.memoryView = migratedView;
+		}
+		patch.legacySettingsImported = true;
+		return {
+			patch,
+			diagnostics
+		};
+	} catch (error) {
+		diagnostics.push(error instanceof Error ? error.message : "Legacy settings import could not be planned");
+		return {
+			patch: {},
+			diagnostics
+		};
+	}
+}
+//#endregion
+//#region src/host/settings-service.ts
+const pendingNativeImports = /* @__PURE__ */ new WeakSet();
+const clone = (value) => structuredClone(value);
+const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
+function profileYaml(source) {
+	const document = parseDocument(source, { customTags: [{
+		tag: "tag:yaml.org,2002:js",
+		resolve: (value) => ({ __jsExpr: value })
+	}] });
+	if (document.errors.length > 0 || document.warnings.length > 0) throw new Error("Invalid or unsupported legacy/profile YAML; retained backup was not changed");
+	return document.toJS({ maxAliasCount: 100 });
+}
+/** A local facade preserves Mnemon's wire namespaces; DSH owns all persistence. */
+var ProfileMnemonSettings = class {
+	ctx;
+	input;
+	registrations = /* @__PURE__ */ new Map();
+	listeners = /* @__PURE__ */ new Set();
+	revisions = /* @__PURE__ */ new Map();
+	owner;
+	forms;
+	editor;
+	closed = false;
+	importing;
+	nativeImportPending;
+	constructor(ctx, input) {
+		this.ctx = ctx;
+		this.input = input;
+		this.forms = ctx.settings;
+		this.owner = ctx.fiber;
+		this.editor = ctx.get("configEditor");
+		const profile = ctx.get("profileContext");
+		const root = ctx.root ?? ctx;
+		if (profile?.home !== void 0 && existsSync(join(profile.home, "settings.yaml"))) pendingNativeImports.add(root);
+		this.nativeImportPending = pendingNativeImports.has(root);
+		const owner = this.owner;
+		const validate = (candidate) => {
+			const config = plainHostConfig(candidate);
+			for (const registration of this.registrations.values()) {
+				if (registration.legacy) continue;
+				const value = this.resolve(registration, config);
+				registration.validate?.(value);
+			}
+		};
+		ctx.on("internal/config", function(_raw, next) {
+			const candidate = next();
+			if (this === owner) validate(candidate);
+			return candidate;
+		}, { prepend: true });
+		ctx.on("loader/volatile-update", ((paths) => {
+			if (this.closed) return;
+			for (const registration of this.registrations.values()) {
+				if (registration.legacy) continue;
+				if (!paths.some((path) => registration.field === void 0 ? path.length === 0 || !["memoryView", "legacySettingsImported"].includes(path[0]) : path.length === 0 || path[0] === registration.field)) continue;
+				const value = this.resolve(registration);
+				for (const listener of this.listeners) try {
+					listener(registration.namespace, value);
+				} catch (error) {
+					console.warn("dsh-mnemon: committed settings listener failed", error);
+				}
+			}
+		}));
+		ctx.effect(() => {
+			const disposePresentation = owner === void 0 ? void 0 : this.forms.configure({ auto: false }, owner);
+			return () => {
+				this.closed = true;
+				this.listeners.clear();
+				this.revisions.clear();
+				disposePresentation?.();
+			};
+		}, "dsh-mnemon: profile settings");
+	}
+	get writable() {
+		const entry = this.owner?.entry;
+		return !this.closed && this.forms.writable && entry !== void 0 && this.editor?.entries().includes(entry) === true;
+	}
+	onUpdated(listener) {
+		this.listeners.add(listener);
+		return () => {
+			this.listeners.delete(listener);
+		};
+	}
+	resolve(registration, config = plainHostConfig(this.owner?.config ?? this.input)) {
+		const value = registration.legacy ? registration.base : registration.field === void 0 ? config : config[registration.field];
+		return registration.schema(object(value));
+	}
+	register(namespace, schema, options) {
+		if (this.registrations.has(namespace)) throw new Error(`Mnemon settings already registered: ${namespace}`);
+		if (typeof schema !== "function") throw new Error("Mnemon settings require a schema");
+		const field = namespace === "mnemon-ui" ? "conversationInteraction" : /^mnemon-view(?:-[a-f0-9]{16})?$/u.test(namespace) ? "memoryView" : void 0;
+		const legacy = /^mnemon-plugins(?:-[a-f0-9]{16})?$/u.test(namespace);
+		if (namespace !== "mnemon" && field === void 0 && !legacy) throw new Error("Unsupported Mnemon settings namespace");
+		const registration = {
+			namespace,
+			...field === void 0 ? {} : { field },
+			legacy,
+			schema,
+			base: clone(options.base ?? {}),
+			...options.validate === void 0 ? {} : { validate: options.validate }
+		};
+		const value = this.resolve(registration);
+		options.validate?.(value);
+		this.registrations.set(namespace, registration);
+		return { get: () => this.resolve(registration) };
+	}
+	nativeDescriptor() {
+		if (this.closed || this.owner?.entry === void 0 || !this.editor?.entries().includes(this.owner.entry)) return void 0;
+		const descriptor = this.forms.describe().find((item) => item.ns === this.owner?.entry?.options.id);
+		if (descriptor !== void 0) {
+			this.revisions.set(descriptor.revision, clone({
+				ns: descriptor.ns,
+				revision: descriptor.revision,
+				applies: descriptor.applies,
+				value: descriptor.value,
+				base: descriptor.base,
+				user: descriptor.user
+			}));
+			if (this.revisions.size > 64) this.revisions.delete(this.revisions.keys().next().value);
+		}
+		return descriptor;
+	}
+	unchanged(previous, current, registration, operations) {
+		const project = (value) => {
+			if (registration.field !== void 0) return object(value)[registration.field];
+			const { memoryView: _view, legacySettingsImported: _imported, conversationInteraction, ...core } = object(value);
+			return operations.some((operation) => operation.path[0] === "conversationInteraction") ? {
+				...core,
+				conversationInteraction
+			} : core;
+		};
+		const signature = (descriptor) => canonicalMemoryJson(JSON.parse(JSON.stringify([
+			project(descriptor.value) ?? null,
+			project(descriptor.base) ?? null,
+			project(descriptor.user) ?? null
+		])));
+		return signature(previous) === signature(current);
+	}
+	describe(options) {
+		const raw = this.nativeDescriptor();
+		if (raw === void 0) return [];
+		const descriptor = options?.redactSecrets ? this.forms.describe(options).find((item) => item.ns === this.owner?.entry?.options.id) : raw;
+		if (descriptor === void 0) return [];
+		return [...this.registrations.values()].map((registration) => {
+			const project = (value) => registration.legacy ? {} : registration.field === void 0 ? value : object(value)[registration.field];
+			return {
+				ns: registration.namespace,
+				value: project(descriptor.value) ?? {},
+				base: project(descriptor.base) ?? {},
+				user: project(descriptor.user) ?? {},
+				revision: descriptor.revision,
+				applies: "live"
+			};
+		});
+	}
+	async mutate(namespace, operations, expectedRevision) {
+		const registration = this.registrations.get(namespace);
+		if (registration === void 0 || registration.legacy) throw new Error("Unsupported Mnemon settings namespace");
+		if (!this.writable) throw new Error("DSH settings are read-only");
+		const translated = operations.map((operation) => ({
+			...operation,
+			path: [...registration.field === void 0 ? [] : [registration.field], ...operation.path]
+		}));
+		let revision = expectedRevision;
+		const previous = revision === void 0 ? void 0 : this.revisions.get(revision);
+		for (let attempt = 0;; attempt += 1) {
+			if (!this.writable) throw new Error("DSH settings are read-only");
+			try {
+				await this.forms.mutate(this.owner.entry.options.id, translated, revision);
+				return;
+			} catch (error) {
+				if (attempt >= 2 || previous === void 0 || typeof error !== "object" || error === null || !("code" in error) || error.code !== "SETTINGS_CONFLICT") throw error;
+				if (!this.writable) throw new Error("DSH settings are read-only");
+				const current = this.nativeDescriptor();
+				if (current === void 0 || !this.unchanged(previous, current, registration, operations)) throw error;
+				revision = current.revision;
+			}
+		}
+	}
+	/** Read only the retained backup; ConfigEditor preserves all other patch rows. */
+	async importLegacy(sourceEntryIds) {
+		if (this.importing !== void 0) return this.importing;
+		this.importing = this.performImport(sourceEntryIds).finally(() => {
+			this.importing = void 0;
+		});
+		return this.importing;
+	}
+	async performImport(sourceEntryIds) {
+		const profile = this.ctx.get("profileContext");
+		const entry = this.owner?.entry;
+		if (!this.writable || profile?.home === void 0 || entry === void 0) return;
+		if (this.nativeImportPending) {
+			console.warn("dsh-mnemon: DSH is importing settings.yaml; restart once to recover retained Mnemon UI and plugin preferences");
+			return;
 		}
-	};
-}
-function unknownSettingsEndpoint(endpoint) {
-	return {
-		ok: false,
-		error: {
-			code: "bad-request",
-			message: `unknown remote Mnemon settings endpoint: ${endpoint}`,
-			details: { issues: [] }
+		if (plainHostConfig(this.owner?.config ?? this.input).legacySettingsImported) return;
+		const backup = join(profile.home, "settings.yaml.imported");
+		let text;
+		try {
+			if ((await stat(backup)).size > 1048576) throw new Error("Legacy settings backup exceeds the import limit");
+			text = await readFile(backup, "utf8");
+		} catch (error) {
+			if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") return;
+			throw error;
 		}
-	};
-}
-/**
-* Project Mnemon's existing handlers through DSH API Gateway. The Gateway owns
-* `/api`, Host/Origin validation, browser pairing, and response envelopes;
-* this Service retains Mnemon's narrower management grant.
-*/
-let MnemonRemoteService = (() => {
-	let _classSuper = TypertRemoteService;
-	let _instanceExtraInitializers = [];
-	let _read_decorators;
-	let _activation_decorators;
-	let _write_decorators;
-	let _pack_decorators;
-	let _settings_decorators;
-	let _view_decorators;
-	let _viewWrite_decorators;
-	return class MnemonRemoteService extends _classSuper {
-		static {
-			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
-			_read_decorators = [Remote("read")];
-			_activation_decorators = [Remote("activation")];
-			_write_decorators = [Remote("write")];
-			_pack_decorators = [Remote("pack")];
-			_settings_decorators = [Remote("settings")];
-			_view_decorators = [Remote("view")];
-			_viewWrite_decorators = [Remote("viewWrite")];
-			__esDecorate(this, null, _read_decorators, {
-				kind: "method",
-				name: "read",
-				static: false,
-				private: false,
-				access: {
-					has: (obj) => "read" in obj,
-					get: (obj) => obj.read
-				},
-				metadata: _metadata
-			}, null, _instanceExtraInitializers);
-			__esDecorate(this, null, _activation_decorators, {
-				kind: "method",
-				name: "activation",
-				static: false,
-				private: false,
-				access: {
-					has: (obj) => "activation" in obj,
-					get: (obj) => obj.activation
-				},
-				metadata: _metadata
-			}, null, _instanceExtraInitializers);
-			__esDecorate(this, null, _write_decorators, {
-				kind: "method",
-				name: "write",
-				static: false,
-				private: false,
-				access: {
-					has: (obj) => "write" in obj,
-					get: (obj) => obj.write
-				},
-				metadata: _metadata
-			}, null, _instanceExtraInitializers);
-			__esDecorate(this, null, _pack_decorators, {
-				kind: "method",
-				name: "pack",
-				static: false,
-				private: false,
-				access: {
-					has: (obj) => "pack" in obj,
-					get: (obj) => obj.pack
-				},
-				metadata: _metadata
-			}, null, _instanceExtraInitializers);
-			__esDecorate(this, null, _settings_decorators, {
-				kind: "method",
-				name: "settings",
-				static: false,
-				private: false,
-				access: {
-					has: (obj) => "settings" in obj,
-					get: (obj) => obj.settings
-				},
-				metadata: _metadata
-			}, null, _instanceExtraInitializers);
-			__esDecorate(this, null, _view_decorators, {
-				kind: "method",
-				name: "view",
-				static: false,
-				private: false,
-				access: {
-					has: (obj) => "view" in obj,
-					get: (obj) => obj.view
-				},
-				metadata: _metadata
-			}, null, _instanceExtraInitializers);
-			__esDecorate(this, null, _viewWrite_decorators, {
-				kind: "method",
-				name: "viewWrite",
-				static: false,
-				private: false,
-				access: {
-					has: (obj) => "viewWrite" in obj,
-					get: (obj) => obj.viewWrite
-				},
-				metadata: _metadata
-			}, null, _instanceExtraInitializers);
-			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
-				enumerable: true,
-				configurable: true,
-				writable: true,
-				value: _metadata
+		const sections = profileYaml(text);
+		const viewNamespace = [...this.registrations.keys()].find((namespace) => namespace.startsWith("mnemon-view"));
+		const legacyNamespace = [...this.registrations.keys()].find((namespace) => namespace.startsWith("mnemon-plugins"));
+		const plan = () => {
+			const configuration = this.editor.configuration().find((item) => item.entry === entry);
+			if (configuration === void 0) throw new Error("Mnemon profile entry is no longer editable");
+			const document = profileYaml(readFileSync(this.editor.documentPath, "utf8"));
+			const entryOverrides = Array.isArray(document) ? document.flatMap((value) => {
+				const row = object(value);
+				if (typeof row.id !== "string") return [];
+				const entries = this.editor.entries().filter((candidate) => candidate.options.id === row.id);
+				if (entries.length > 1) throw new Error("Legacy settings import requires unambiguous profile Entry ids");
+				return [{
+					id: entries[0]?.id ?? row.id,
+					..."disabled" in row ? { disabled: row.disabled } : {},
+					..."config" in row ? { config: row.config } : {}
+				}];
+			}) : [];
+			return planLegacySettingsImport({
+				entryId: entry.options.id,
+				viewNamespace,
+				legacyNamespace,
+				sections,
+				currentOverride: configuration.override,
+				entryOverrides,
+				sourceEntryIds
 			});
+		};
+		const preview = plan();
+		if (Object.keys(preview.patch).length === 0) {
+			if (preview.diagnostics.length > 0) console.warn("dsh-mnemon: legacy settings were not imported; retained backup requires review");
+			return;
 		}
-		handlers = __runInitializers(this, _instanceExtraInitializers);
-		constructor(ctx, handlers) {
-			super(ctx, "mnemonRemote", { namespace: MNEMON_REMOTE_NAMESPACE });
-			this.handlers = handlers;
-		}
-		read(endpoint, payload, signal) {
-			return this.handlers.read(endpoint, payload, signal);
-		}
-		activation(endpoint, payload, signal) {
-			return this.handlers.activation(endpoint, payload, signal);
-		}
-		write(endpoint, payload, signal) {
-			if (!this.handlers.management) return Promise.resolve(denied());
-			return this.handlers.write(endpoint, payload, signal);
-		}
-		pack(endpoint, payload, signal) {
-			if (!this.handlers.management) return Promise.resolve(denied());
-			return this.handlers.pack(endpoint, payload, signal);
-		}
-		async settings(endpoint, payload, signal) {
-			if (endpoint === "mutate" && !this.handlers.management) return denied();
-			if (endpoint !== "get" && endpoint !== "mutate") return unknownSettingsEndpoint(endpoint);
-			const response = await this.handlers.settings(endpoint, payload, signal);
-			if (endpoint !== "get" || this.handlers.management || !response.ok || typeof response.value !== "object" || response.value === null || Array.isArray(response.value)) return response;
+		if (this.closed) return;
+		await this.editor.edit(entry, (current) => {
+			if (this.closed) throw new Error("Mnemon settings are disposed");
+			const next = plan();
 			return {
-				...response,
-				value: {
-					...response.value,
-					writable: false
-				}
+				...current,
+				...next.patch
 			};
-		}
-		view(endpoint, payload, signal) {
-			return this.handlers.view(endpoint, payload, signal);
-		}
-		viewWrite(endpoint, payload, signal) {
-			if (!this.handlers.management) return Promise.resolve(denied());
-			return this.handlers.viewWrite(endpoint, payload, signal);
-		}
-	};
-})();
+		});
+	}
+};
 //#endregion
 //#region src/host/plugin.ts
 const name = "dsh-mnemon";
@@ -10075,54 +10151,26 @@ function optionalWorkspaceRegistry(ctx) {
 function apply(rawContext, rawConfig = {}) {
 	const ctx = rawContext;
 	const config = plainHostConfig(rawConfig);
-	const hostSettings = createHostSettings(ctx, rawConfig);
+	const hostSettings = new ProfileMnemonSettings(ctx, rawConfig);
 	registerMnemonSubagentTokenUsageProjection(ctx);
 	const extensions = provideMemoryRuntime(ctx);
 	const memoryPlugins = new MemoryPluginManagement(ctx, extensions, hostSettings);
 	const pluginInstallation = new MemoryPluginInstallation(ctx);
-	const effectiveConfig = (value) => memoryPlugins.resolveConfig(resolveConfig(value), hostSettings instanceof ProfileMnemonSettings ? value.memoryView ?? { entries: {} } : void 0);
-	const prepared = /* @__PURE__ */ new Map();
-	const disposePrepared = () => {
-		for (const candidate of prepared.values()) candidate.graph.dispose();
-		prepared.clear();
-	};
+	const effectiveConfig = (value) => memoryPlugins.resolveConfig(resolveConfig(value), value.memoryView ?? { entries: {} });
 	const settings = hostSettings.register("mnemon", Config, {
 		base: config,
 		applies: "live",
-		validate: (value) => {
-			disposePrepared();
-			const candidate = {
-				graph: createRuntimeGraph(effectiveConfig(value), void 0, extensions),
-				token: Symbol("prepared-runtime")
-			};
-			if (hostSettings instanceof ProfileMnemonSettings) {
-				candidate.graph.dispose();
-				return;
-			}
-			prepared.set(value, candidate);
-			queueMicrotask(() => {
-				if (prepared.get(value)?.token !== candidate.token) return;
-				prepared.delete(value);
-				candidate.graph.dispose();
-			});
-		}
+		validate: (value) => createRuntimeGraph(effectiveConfig(value), void 0, extensions).dispose()
 	});
-	const initialSettings = settings.get();
-	const initialCandidate = prepared.get(initialSettings);
-	if (initialCandidate !== void 0) prepared.delete(initialSettings);
-	const runtime = new LiveMnemonRuntime(initialCandidate?.graph ?? createRuntimeGraph(effectiveConfig(initialSettings), void 0, extensions), optionalWorkspaceRegistry(ctx), ctx.agents, extensions);
+	const runtime = new LiveMnemonRuntime(createRuntimeGraph(effectiveConfig(settings.get()), void 0, extensions), optionalWorkspaceRegistry(ctx), ctx.agents, extensions);
 	const resolved = runtime.config;
-	ctx.effect(() => subscribeSettings(ctx, hostSettings, (namespace, value) => {
-		const next = value;
+	ctx.effect(() => hostSettings.onUpdated((namespace, value) => {
 		if (namespace === memoryPlugins.settingsNamespace) {
 			runtime.swap(createRuntimeGraph(effectiveConfig(settings.get()), void 0, extensions));
 			return;
 		}
 		if (namespace !== "mnemon") return;
-		const candidate = prepared.get(next);
-		if (candidate !== void 0) prepared.delete(next);
-		disposePrepared();
-		runtime.swap(candidate?.graph ?? createRuntimeGraph(effectiveConfig(next), void 0, extensions));
+		runtime.swap(createRuntimeGraph(effectiveConfig(value), void 0, extensions));
 	}), "dsh-mnemon: live runtime settings");
 	ctx.effect(() => memoryPlugins.start(), "dsh-mnemon: plugin graph settings");
 	hostSettings.register("mnemon-ui", InteractionConfig, {
@@ -10146,7 +10194,7 @@ function apply(rawContext, rawConfig = {}) {
 			unsubscribe();
 		};
 	}, "dsh-mnemon: canonical displayMode migration");
-	if (hostSettings instanceof ProfileMnemonSettings) ctx.effect(() => {
+	ctx.effect(() => {
 		let disposed = false;
 		const loader = ctx.get("loader");
 		Promise.resolve(loader?.await?.()).then(async () => {
@@ -10178,25 +10226,24 @@ function apply(rawContext, rawConfig = {}) {
 		return async () => {
 			stop();
 			await coordinator.dispose();
-			disposePrepared();
 			runtime.dispose();
 		};
 	}, "dsh-mnemon.lifecycle-root()");
 	registerTools(ctx, runtime, coordinator);
 	registerCommands(ctx.commands, runtime, coordinator);
 	registerGuidance(ctx, resolved);
-	ctx.inject(["connection"], (webContext) => {
-		if (webContext.connection === void 0) return;
-		const managementAuthority = resolved.remoteAccess === "trusted-host" ? "trusted-host" : "loopback";
-		const rpc = registerRpc(webContext.connection, runtime, lifecycle, void 0, managementAuthority);
-		const settings = registerSettingsRpc(webContext.connection, hostSettings, managementAuthority);
-		const view = registerViewRpc(webContext.connection, runtime, extensions, memoryPlugins, lifecycle, managementAuthority, pluginInstallation);
+	ctx.inject(["connection", "webServer"], (webContext) => {
+		const connection = Context.is(webContext) ? webContext.extend({ webServer: webContext.get("webServer") }).connection : webContext.connection;
+		if (connection === void 0) return;
+		const rpc = registerRpc(connection, runtime, lifecycle);
+		const settings = registerSettingsRpc(connection, hostSettings);
+		const view = registerViewRpc(connection, runtime, extensions, memoryPlugins, lifecycle, pluginInstallation);
 		if (Context.is(webContext)) new MnemonRemoteService(webContext, {
 			...rpc,
 			settings,
 			view: view.read,
 			viewWrite: view.write,
-			management: managementAuthority === "trusted-host"
+			management: resolved.remoteAccess === "trusted-host"
 		});
 	});
 }