dsh-mnemon 0.5.40 → 0.5.42

package/lib/index.js

@@ -389,6 +389,8 @@ const DEFAULT_SKILLS_CONFIG = Object.freeze({
 	allowUpdate: true,
 	targetScope: "user",
 	autoBacktest: true,
+	draftMaxTokens: 32768,
+	draftRetryMaxTokens: 65536,
 	hints: true,
 	sidebar: false,
 	reviewThreshold: 5,
@@ -417,7 +419,7 @@ const schema = z.object({
 const legacySchema = z.object({ sources: z.dict(z.object({ enabled: z.boolean() })).default({}) });
 const ENTRY_ID$1 = /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,299}$/u;
 const clone$2 = (value) => JSON.parse(JSON.stringify(value));
-function record$10(value) {
+function record$11(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("Plugin configuration must be an object");
 	const json = JSON.stringify(value);
 	if (json.length > 65536) throw new Error("Plugin configuration exceeds 64 KiB");
@@ -431,13 +433,13 @@ function record$10(value) {
 }
 function preferences(value) {
 	if (value.strategyTypeId !== void 0 && !/^[a-z][a-z0-9-]{0,127}$/u.test(value.strategyTypeId)) throw new Error("Invalid Strategy type id");
-	const entries = record$10(value.entries ?? {});
+	const entries = record$11(value.entries ?? {});
 	if (Object.keys(entries).length > 64) throw new Error("At most 64 memory plugin Entries can be configured");
 	for (const [entryId, item] of Object.entries(entries)) {
 		if (!ENTRY_ID$1.test(entryId)) throw new Error("Invalid memory plugin Entry id");
-		const candidate = record$10(item);
+		const candidate = record$11(item);
 		if (candidate.enabled !== void 0 && typeof candidate.enabled !== "boolean") throw new Error("Plugin enabled must be boolean");
-		record$10(candidate.config);
+		record$11(candidate.config);
 	}
 	return clone$2(value);
 }
@@ -481,6 +483,8 @@ const SkillsConfig = z.object({
 		"project"
 	]).default(DEFAULT_SKILLS_CONFIG.targetScope),
 	autoBacktest: z.boolean().default(DEFAULT_SKILLS_CONFIG.autoBacktest),
+	draftMaxTokens: z.number().step(1).min(128).max(131072).default(DEFAULT_SKILLS_CONFIG.draftMaxTokens),
+	draftRetryMaxTokens: z.number().step(1).min(128).max(131072).default(DEFAULT_SKILLS_CONFIG.draftRetryMaxTokens),
 	hints: z.boolean().default(DEFAULT_SKILLS_CONFIG.hints),
 	sidebar: z.boolean().default(DEFAULT_SKILLS_CONFIG.sidebar),
 	reviewThreshold: z.number().step(1).min(1).max(50).default(DEFAULT_SKILLS_CONFIG.reviewThreshold),
@@ -640,6 +644,7 @@ const Config = z.object({
 	skills: SkillsConfig.default({ ...DEFAULT_SKILLS_CONFIG }),
 	persistenceStrategy: MemoryPersistenceStrategySchema,
 	taskAgentModel: TaskAgentModelSchema,
+	subagentProviderNames: z.array(z.string()).default([]),
 	syncEnabled: z.boolean().default(false)
 });
 function resolveInteractionConfig(config = {}) {
@@ -689,6 +694,11 @@ function resolveCustomPacks(value, legacyDataDir) {
 	}
 	return packs;
 }
+function resolveSubagentProviderNames(value) {
+	if (value === void 0) return [];
+	if (!Array.isArray(value) || value.length > 32 || value.some((name) => typeof name !== "string" || !name.trim() || name.length > 128)) throw new Error("dsh-mnemon: subagentProviderNames must contain at most 32 nonempty provider names of at most 128 characters");
+	return [...new Set(value.map((name) => name.trim()))];
+}
 function resolveTaskAgentModel(value) {
 	const mode = value?.mode ?? "inherit";
 	if (mode !== "inherit" && mode !== "fixed") throw new Error(`dsh-mnemon: unsupported task Agent model mode: ${String(mode)}`);
@@ -813,6 +823,7 @@ function resolveConfig(config = {}) {
 		},
 		persistenceStrategy: resolvePersistenceStrategy(config.persistenceStrategy),
 		taskAgentModel: resolveTaskAgentModel(config.taskAgentModel),
+		subagentProviderNames: resolveSubagentProviderNames(config.subagentProviderNames),
 		syncEnabled: config.syncEnabled ?? false
 	};
 }
@@ -992,7 +1003,7 @@ function createStorageRoot(config, workspaceRoot) {
 const MNEMON_MACHINE_DIRECTORY = "state";
 const MNEMON_MACHINE_FILE = "machine.json";
 const MNEMON_MACHINE_VERSION = 1;
-function record$9(value) {
+function record$10(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 /** The name a fresh identity carries: the host name, or a neutral fallback. */
@@ -1074,7 +1085,7 @@ var MnemonMachineStore = class {
 		} catch {
 			return;
 		}
-		const parsed = record$9(value);
+		const parsed = record$10(value);
 		if (parsed?.version !== MNEMON_MACHINE_VERSION) return void 0;
 		if (typeof parsed.id !== "string" || parsed.id.trim() === "") return void 0;
 		if (typeof parsed.label !== "string" || parsed.label.trim() === "") return void 0;
@@ -2048,7 +2059,7 @@ const COMPONENT_ORDER = MNEMON_PACK_COMPONENTS;
 */
 const CONTENT_HASH = /^[a-f0-9]{64}$/u;
 const SQLITE_HEADER = Buffer.from("SQLite format 3\0", "binary");
-function record$8(value) {
+function record$9(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function utf8(bytes, label) {
@@ -2111,7 +2122,7 @@ function componentsForScope(scope) {
 }
 /** Exported so the sync channel can read the manifest a commit holds without unpacking the archive. */
 function parseManifest(value) {
-	const manifest = record$8(value);
+	const manifest = record$9(value);
 	if (manifest?.format !== "mnemonpack" || manifest.version !== 1) throw new Error("unsupported Mnemon Pack format or version");
 	if (manifest.scope !== "full" && !COMPONENT_ORDER.includes(manifest.scope)) throw new Error("Mnemon Pack scope is invalid");
 	if (typeof manifest.exportedAt !== "string") throw new Error("Mnemon Pack exportedAt is invalid");
@@ -2120,11 +2131,11 @@ function parseManifest(value) {
 	if (components.length === 0 || new Set(components).size !== components.length || components.some((component) => !COMPONENT_ORDER.includes(component))) throw new Error("Mnemon Pack components are invalid");
 	const expected = componentsForScope(manifest.scope);
 	if (components.length !== expected.length || expected.some((component) => !components.includes(component))) throw new Error("Mnemon Pack scope does not match its components");
-	const source = record$8(manifest.source);
+	const source = record$9(manifest.source);
 	if (source?.plugin !== "dsh-mnemon" || typeof source.pluginVersion !== "string") throw new Error("Mnemon Pack source is invalid");
 	if (!Array.isArray(manifest.summary)) throw new Error("Mnemon Pack summary is invalid");
 	const summary = manifest.summary.map((entry) => {
-		const item = record$8(entry);
+		const item = record$9(entry);
 		const component = item?.component;
 		if (!COMPONENT_ORDER.includes(component) || !Number.isSafeInteger(item?.files) || !Number.isSafeInteger(item?.bytes) || !Number.isSafeInteger(item?.items) || Number(item?.files) < 0 || Number(item?.bytes) < 0 || Number(item?.items) < 0) throw new Error("Mnemon Pack summary entry is invalid");
 		return {
@@ -2150,7 +2161,7 @@ function parseManifest(value) {
 /** The sync channel reads its machine identity with this parser; no Pack carries one. */
 function parseMachineIdentity(value) {
 	if (value === void 0 || value === null) return void 0;
-	const machine = record$8(value);
+	const machine = record$9(value);
 	if (typeof machine?.id !== "string" || machine.id.trim() === "" || typeof machine.label !== "string" || typeof machine.createdAt !== "string") throw new Error("Mnemon Pack machine identity is invalid");
 	return {
 		id: machine.id,
@@ -2160,7 +2171,7 @@ function parseMachineIdentity(value) {
 }
 function parseEntryOrigin(value) {
 	if (value === void 0 || value === null) return void 0;
-	const origin = record$8(value);
+	const origin = record$9(value);
 	if (typeof origin?.machine !== "string" || typeof origin.label !== "string" || typeof origin.at !== "string") return void 0;
 	return {
 		machine: origin.machine,
@@ -2205,8 +2216,8 @@ function parseArchive(base64, runtimeLimits = RUNTIME_MEMORY_LIMITS) {
 		if (path !== "manifest.json" && path !== "checksums.json" && !allowedPayloadPath(path)) throw new Error(`unsupported Mnemon Pack entry: ${path}`);
 	}
 	const manifest = parseManifest(json$1(files["manifest.json"], "manifest.json"));
-	const checksumValue = record$8(json$1(files["checksums.json"], "checksums.json"));
-	const checksumFiles = record$8(checksumValue?.files);
+	const checksumValue = record$9(json$1(files["checksums.json"], "checksums.json"));
+	const checksumFiles = record$9(checksumValue?.files);
 	if (checksumValue?.algorithm !== "sha256" || checksumFiles === void 0) throw new Error("Mnemon Pack checksums are invalid");
 	const payloadNames = names.filter((path) => path.startsWith("payload/")).sort();
 	if (Object.keys(checksumFiles).length !== payloadNames.length) throw new Error("Mnemon Pack checksum inventory does not match the payload");
@@ -2229,10 +2240,10 @@ function parseArchive(base64, runtimeLimits = RUNTIME_MEMORY_LIMITS) {
 	};
 }
 function parseRuntime(value, limits = RUNTIME_MEMORY_LIMITS) {
-	const source = record$8(value);
+	const source = record$9(value);
 	if (source?.version !== RUNTIME_MEMORY_VERSION || !Array.isArray(source.entries)) throw new Error("runtime memories.json is invalid");
 	const entries = source.entries.map((raw) => {
-		const entry = record$8(raw);
+		const entry = record$9(raw);
 		if (typeof entry?.content !== "string" || entry.target !== "memory" && entry.target !== "user" || ![
 			"critical",
 			"normal",
@@ -2269,12 +2280,12 @@ function emptyTombstones() {
 	};
 }
 function parseTombstones(value) {
-	const source = record$8(value);
+	const source = record$9(value);
 	if (source?.version !== 1 || !Array.isArray(source.tombstones)) throw new Error("runtime tombstones.json is invalid");
 	return {
 		version: 1,
 		tombstones: source.tombstones.map((raw) => {
-			const tombstone = record$8(raw);
+			const tombstone = record$9(raw);
 			if (tombstone?.target !== "memory" && tombstone?.target !== "user") throw new Error("runtime tombstones.json contains an invalid entry");
 			if (typeof tombstone.contentHash !== "string" || !CONTENT_HASH.test(tombstone.contentHash) || typeof tombstone.deletedAt !== "string") throw new Error("runtime tombstones.json contains an invalid entry");
 			return {
@@ -2689,11 +2700,11 @@ function emptyRuntimeIndex() {
 }
 /** A damaged index only costs forgotten deletions, so it degrades instead of failing an export. */
 function parseRuntimeIndex(value) {
-	const source = record$8(value);
+	const source = record$9(value);
 	if (source?.version !== 1 || !Array.isArray(source.entries)) return emptyRuntimeIndex();
 	const entries = [];
 	for (const raw of source.entries) {
-		const entry = record$8(raw);
+		const entry = record$9(raw);
 		if (entry?.target !== "memory" && entry?.target !== "user") continue;
 		if (typeof entry.contentHash !== "string" || !/^[a-f0-9]{64}$/u.test(entry.contentHash)) continue;
 		entries.push({
@@ -3345,7 +3356,7 @@ const STATUSES = [
 	"accepted",
 	"rejected"
 ];
-function record$7(value) {
+function record$8(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function text$2(value, limit = MAX_REVIEW_TEXT) {
@@ -3357,7 +3368,7 @@ function strings$1(value, limit = 64) {
 function parseOpinions(value) {
 	if (!Array.isArray(value)) return [];
 	return value.flatMap((raw) => {
-		const opinion = record$7(raw);
+		const opinion = record$8(raw);
 		if (opinion === void 0 || typeof opinion.id !== "string" || typeof opinion.text !== "string") return [];
 		return [{
 			id: opinion.id,
@@ -3369,11 +3380,11 @@ function parseOpinions(value) {
 }
 /** A proposal that no longer parses is dropped rather than failing the whole ledger. */
 function parseEntry(value) {
-	const entry = record$7(value);
+	const entry = record$8(value);
 	if (entry === void 0 || typeof entry.id !== "string" || entry.id.trim() === "") return void 0;
 	if (typeof entry.status !== "string" || !STATUSES.includes(entry.status)) return void 0;
 	if (!Array.isArray(entry.operations)) return void 0;
-	const machine = record$7(entry.machine) ?? {};
+	const machine = record$8(entry.machine) ?? {};
 	const createdAt = typeof entry.createdAt === "string" ? entry.createdAt : (/* @__PURE__ */ new Date()).toISOString();
 	return {
 		id: entry.id,
@@ -3523,7 +3534,7 @@ var MnemonReviewLedger = class {
 			version: 1,
 			entries: []
 		};
-		const file = record$7(JSON.parse(readFileSync(this.path(), "utf8")));
+		const file = record$8(JSON.parse(readFileSync(this.path(), "utf8")));
 		if (file?.version !== 1 || !Array.isArray(file.entries)) throw new Error("review ledger is invalid: " + this.path());
 		return {
 			version: 1,
@@ -3974,7 +3985,7 @@ const MNEMON_GITHUB_MAX_INTERVAL_MS = 6e4;
 const MNEMON_GITHUB_FLOW_LIMIT_MS = 36e5;
 const MNEMON_GITHUB_USER_AGENT = "dsh-mnemon-sync";
 const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
-function record$6(value) {
+function record$7(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function text$1(value) {
@@ -3982,7 +3993,7 @@ function text$1(value) {
 }
 /** GitHub answers a refused request with a `error` code or an API `message`. */
 function codeOf(body) {
-	const fields = record$6(body);
+	const fields = record$7(body);
 	return text$1(fields?.error) ?? text$1(fields?.message);
 }
 /** A positive count GitHub sends as a JSON number, or as a string in a form-encoded answer. */
@@ -3997,7 +4008,7 @@ const FIELD_NAME = /^[A-Za-z_][A-Za-z0-9_]{0,63}$/u;
 * device code or a token. Enough to tell a proxy's HTML page from a reply that lost a field.
 */
 function shapeOf(answer) {
-	const keys = Object.keys(record$6(answer.body) ?? {});
+	const keys = Object.keys(record$7(answer.body) ?? {});
 	const names = keys.filter((key) => FIELD_NAME.test(key)).slice(0, 8);
 	const listed = keys.length > names.length ? [...names, String(keys.length - names.length) + " other"] : names;
 	return "HTTP " + String(answer.status) + ", content-type " + (answer.type ?? "none") + ", fields: " + (listed.length === 0 ? "none" : listed.join(", "));
@@ -4009,9 +4020,9 @@ function failure$3(action, status, body) {
 }
 /** Read one grant out of a stored record, refusing anything else. */
 function githubGrantFromRecord(record_) {
-	const fields = record$6(record_);
+	const fields = record$7(record_);
 	if (fields?.kind !== "grant") return void 0;
-	const payload = record$6(fields.payload);
+	const payload = record$7(fields.payload);
 	if (payload?.version !== 1) return void 0;
 	const accessToken = text$1(payload.accessToken);
 	if (accessToken === void 0) return void 0;
@@ -4025,13 +4036,13 @@ function githubGrantFromRecord(record_) {
 	};
 }
 function repositoryOf(value) {
-	const fields = record$6(value);
+	const fields = record$7(value);
 	const fullName = text$1(fields?.full_name);
 	const url = text$1(fields?.clone_url);
 	const name = text$1(fields?.name);
 	if (fullName === void 0 || url === void 0 || name === void 0) return void 0;
-	const owner = record$6(fields?.owner);
-	const permissions = record$6(fields?.permissions);
+	const owner = record$7(fields?.owner);
+	const permissions = record$7(fields?.permissions);
 	return {
 		name,
 		fullName,
@@ -4144,7 +4155,7 @@ var MnemonGitHubAuth = class {
 			throw new Error("the GitHub device code request could not reach GitHub: " + describeTransportError(error));
 		}
 		if (answer.status !== 200) throw failure$3("the GitHub device code request", answer.status, answer.body);
-		const fields = record$6(answer.body);
+		const fields = record$7(answer.body);
 		const deviceCode = text$1(fields?.device_code);
 		const userCode = text$1(fields?.user_code);
 		const verificationUri = text$1(fields?.verification_uri);
@@ -4193,7 +4204,7 @@ var MnemonGitHubAuth = class {
 				message: describeTransportError(error)
 			};
 		}
-		const fields = record$6(answer.body);
+		const fields = record$7(answer.body);
 		const code = text$1(fields?.error);
 		if (code === void 0) {
 			const accessToken = text$1(fields?.access_token);
@@ -4264,7 +4275,7 @@ var MnemonGitHubAuth = class {
 				...signal === void 0 ? {} : { signal }
 			});
 			if (status !== 200) return void 0;
-			return text$1(record$6(body)?.login);
+			return text$1(record$7(body)?.login);
 		} catch {
 			return;
 		}
@@ -4390,7 +4401,7 @@ const SETTING_KEYS = [
 	"autoBackupMinutes"
 ];
 const REPOSITORY_HINT = "sync repository must be an https:// or ssh:// URL, a git@host:path address, or an absolute local path";
-function record$5(value) {
+function record$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function known(key) {
@@ -4494,7 +4505,7 @@ var MnemonSyncSettingsStore = class {
 		} catch {
 			throw new Error("sync configuration is not valid JSON");
 		}
-		const stored = record$5(parsed);
+		const stored = record$6(parsed);
 		if (stored === void 0) throw new Error("sync configuration is not a JSON object");
 		for (const key of Object.keys(stored)) if (!known(key)) throw new Error("sync configuration has an unknown field: " + key);
 		const settings = this.defaults();
@@ -4541,7 +4552,7 @@ var MnemonSyncSettingsStore = class {
 	* turns the automatic backup off.
 	*/
 	patch(patch) {
-		const fields = record$5(patch);
+		const fields = record$6(patch);
 		if (fields === void 0) throw new Error("sync configuration must be an object");
 		for (const key of Object.keys(fields)) if (!known(key)) throw new Error("unknown sync setting: " + key);
 		const next = { ...this.read() };
@@ -4777,7 +4788,7 @@ function remoteFailure(message) {
 function rejectedPush(output) {
 	return /\[rejected\]|fetch first|non-fast-forward/iu.test(output);
 }
-function record$4(value) {
+function record$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function tail(output) {
@@ -4842,7 +4853,7 @@ const TIMESTAMP_FIELDS = /* @__PURE__ */ new Set(["exportedAt", "pushedAt"]);
 /** The same manifest without its timestamps describes the same payload. */
 function withoutTimestamps(value) {
 	if (Array.isArray(value)) return value.map(withoutTimestamps);
-	const parsed = record$4(value);
+	const parsed = record$5(value);
 	if (parsed === void 0) return value;
 	return Object.fromEntries(Object.entries(parsed).filter(([key]) => !TIMESTAMP_FIELDS.has(key)).map(([key, item]) => [key, withoutTimestamps(item)]));
 }
@@ -4855,7 +4866,7 @@ function manifestIdentity(bytes) {
 	} catch {
 		return;
 	}
-	return record$4(value) === void 0 ? void 0 : JSON.stringify(withoutTimestamps(value));
+	return record$5(value) === void 0 ? void 0 : JSON.stringify(withoutTimestamps(value));
 }
 /**
 * Whether the mirror already holds exactly this payload. Every push re-exports
@@ -5060,7 +5071,20 @@ function readFiles(root, limit = MAX_PAYLOAD_BYTES) {
 function unpack(archive) {
 	let entries;
 	try {
-		entries = unzipSync(archive);
+		if (archive.byteLength > 268435456) throw new Error("compressed archive exceeds safety limit");
+		let expandedBytes = 0;
+		let fileCount = 0;
+		entries = unzipSync(archive, { filter(info) {
+			const path = info.name;
+			const normalized = path.endsWith("/") ? path.slice(0, -1) : path;
+			if (path.includes("\\") || path.startsWith("/") || /^[a-z]:/i.test(path) || path.includes("\0") || normalized.split("/").some((part) => !part || part === "." || part === "..")) throw new Error("unsafe archive path");
+			if (path.endsWith("/")) return false;
+			if (info.compression === 0 && info.size !== info.originalSize) throw new Error("invalid stored archive entry size");
+			expandedBytes += info.originalSize;
+			fileCount += 1;
+			if (!Number.isSafeInteger(info.originalSize) || info.originalSize < 0 || info.originalSize > 134217728 || expandedBytes > 268435456 || fileCount > 4096) throw new Error("expanded archive exceeds safety limit");
+			return true;
+		} });
 	} catch {
 		throw new Error("the Mnemon payload is not a readable archive");
 	}
@@ -5218,7 +5242,7 @@ var MnemonGitSync = class {
 	}
 	async configure(patch) {
 		const previous = this.store.read();
-		const fields = record$4(patch);
+		const fields = record$5(patch);
 		const { machineLabel: name, ...settings } = fields ?? {};
 		const naming = fields !== void 0 && "machineLabel" in fields;
 		if (naming && name !== null && name !== "") machineLabel(name);
@@ -5426,7 +5450,7 @@ var MnemonGitSync = class {
 	/** When memory last travelled through this channel, or nothing when it never did. */
 	lastRun() {
 		try {
-			const value = record$4(JSON.parse(readFileSync(this.lastRunPath(), "utf8")));
+			const value = record$5(JSON.parse(readFileSync(this.lastRunPath(), "utf8")));
 			if (value === void 0 || typeof value.at !== "string" || typeof value.commit !== "string") return void 0;
 			if (value.kind !== "sync" && value.kind !== "merge") return void 0;
 			return {
@@ -5464,13 +5488,13 @@ var MnemonGitSync = class {
 	async agreedDocuments(settings, tip, signal) {
 		let value;
 		try {
-			value = record$4(JSON.parse(readFileSync(this.basePath(), "utf8")));
+			value = record$5(JSON.parse(readFileSync(this.basePath(), "utf8")));
 		} catch {
 			value = void 0;
 		}
 		if (value === void 0) return this.lastRunDocuments(settings, tip, signal);
 		if (value.version !== 1 || value.scope !== this.agreementScope(settings)) return void 0;
-		const documents = record$4(value.documents);
+		const documents = record$5(value.documents);
 		if (typeof value.commit !== "string" || !AGREED_COMMIT.test(value.commit) || documents === void 0) return void 0;
 		if ((await this.git([
 			"merge-base",
@@ -5917,9 +5941,9 @@ var MnemonGitSync = class {
 		let machine;
 		let pushedAt;
 		try {
-			const raw = record$4(parseJson(bytes, "the backup manifest"));
+			const raw = record$5(parseJson(bytes, "the backup manifest"));
 			if (raw === void 0) return void 0;
-			const extension = record$4(raw[SYNC_EXTENSION]);
+			const extension = record$5(raw[SYNC_EXTENSION]);
 			pushedAt = typeof extension?.pushedAt === "string" ? extension.pushedAt : void 0;
 			machine = extensionMachine(extension);
 			manifest = parseManifest(raw);
@@ -6226,11 +6250,11 @@ var MnemonGitSync = class {
 		if (manifestBytes === void 0 || checksumBytes === void 0) return void 0;
 		if (manifestBytes.byteLength > MAX_MANIFEST_BYTES) throw new Error("the remote Mnemon manifest exceeds the safety limit");
 		for (const path of Object.keys(files)) if (path !== MANIFEST && path !== CHECKSUMS && !path.startsWith("payload/")) throw new Error("the remote Mnemon payload holds an unexpected file: " + path);
-		const parsed = record$4(parseJson(manifestBytes, "the remote Mnemon manifest"));
+		const parsed = record$5(parseJson(manifestBytes, "the remote Mnemon manifest"));
 		if (parsed === void 0) throw new Error("the remote Mnemon manifest is not a JSON object");
 		if (parsed.format !== "mnemonpack" || parsed.version !== 1) throw new Error("the remote Mnemon manifest is not a supported Mnemon Pack");
-		const checksums = record$4(parseJson(checksumBytes, "the remote Mnemon checksum inventory"));
-		const inventory = record$4(checksums?.files);
+		const checksums = record$5(parseJson(checksumBytes, "the remote Mnemon checksum inventory"));
+		const inventory = record$5(checksums?.files);
 		if (checksums?.algorithm !== "sha256" || inventory === void 0) throw new Error("the remote Mnemon checksum inventory is invalid");
 		for (const [path, bytes] of Object.entries(files)) {
 			if (path === MANIFEST || path === CHECKSUMS) continue;
@@ -6239,7 +6263,7 @@ var MnemonGitSync = class {
 			if (expected !== sha256Hex(bytes)) throw new Error("the remote Mnemon payload failed its checksum: " + path);
 		}
 		for (const path of Object.keys(inventory)) if (files[path] === void 0) throw new Error("the remote Mnemon payload is missing a checksummed file: " + path);
-		const extension = record$4(parsed[SYNC_EXTENSION]);
+		const extension = record$5(parsed[SYNC_EXTENSION]);
 		const pushedAt = typeof extension?.pushedAt === "string" ? extension.pushedAt : void 0;
 		const machine = extensionMachine(extension);
 		const archive = zipSync(files, {
@@ -6460,7 +6484,7 @@ function abandoned(path, now) {
 	}
 	if (age > STALE_LOCK_MS) return true;
 	try {
-		const pid = record$4(JSON.parse(readFileSync(join(path, LOCK_OWNER), "utf8")))?.pid;
+		const pid = record$5(JSON.parse(readFileSync(join(path, LOCK_OWNER), "utf8")))?.pid;
 		return typeof pid === "number" && Number.isInteger(pid) && pid > 0 && pid !== process.pid && !processAlive(pid);
 	} catch {
 		return age > OWNERLESS_LOCK_MS;
@@ -7187,9 +7211,9 @@ var MemoryExecutions = class {
 	constructor(runtime) {
 		this.runtime = runtime;
 	}
-	async turn(agent, turn, signal, delegation) {
+	async turn(agent, turn, signal, delegation, independent = false) {
 		signal.throwIfAborted();
-		const slot = this.open(agent, "turn", `${agent.id}:${turn}`, "agent.root-turn", delegation);
+		const slot = this.open(agent, "turn", `${agent.id}:${turn}`, "agent.root-turn", delegation, independent);
 		const abort = () => slot.controller.abort(signal.reason);
 		signal.addEventListener("abort", abort, { once: true });
 		try {
@@ -7272,7 +7296,7 @@ var MemoryExecutions = class {
 			if (slot.kind === "turn") slot.close();
 		}
 	}
-	open(agent, kind, turnId, purpose, delegation) {
+	open(agent, kind, turnId, purpose, delegation, independent = false) {
 		this.assertOpen();
 		const previous = this.slots.get(agent.id);
 		const done = deferred();
@@ -7307,7 +7331,7 @@ var MemoryExecutions = class {
 			await previous?.done;
 			slot.controller.signal.throwIfAborted();
 			this.assertOpen();
-			const graph = delegation?.graph ?? this.runtime.forAgent(agent);
+			const graph = delegation?.graph ?? (independent ? this.runtime.forAgent(agent, { independent: true }) : this.runtime.forAgent(agent));
 			const manager = graph.composableTurns;
 			const scope = delegation === void 0 ? agentScope(agent, graph.config) : {
 				...delegation.scope,
@@ -7619,13 +7643,15 @@ var LiveMnemonRuntime = class {
 		for (const graph of graphs) graph.dispose();
 	}
 	/** Resolve the runtime that must serve one Agent execution. */
-	forAgent(agent) {
+	forAgent(agent, options = {}) {
 		this.assertOpen();
-		const pinned = this.agentGraphs.get(agent.id);
-		if (pinned !== void 0) return pinned.graph;
-		const parentSession = agent.session.header?.origin === "subagent" ? agent.session.header.parentSession?.trim() : void 0;
-		const inherited = parentSession === void 0 || parentSession === "" ? void 0 : this.agentGraphs.get(parentSession);
-		if (inherited !== void 0) return inherited.graph;
+		if (!options.independent) {
+			const pinned = this.agentGraphs.get(agent.id);
+			if (pinned !== void 0) return pinned.graph;
+			const parentSession = agent.session.header?.origin === "subagent" ? agent.session.header.parentSession?.trim() : void 0;
+			const inherited = parentSession === void 0 || parentSession === "" ? void 0 : this.agentGraphs.get(parentSession);
+			if (inherited !== void 0) return inherited.graph;
+		}
 		if (!isWorkspaceStorageScope(this.current.config.storageScope)) return this.current;
 		const cwd = agent.session.header?.cwd?.trim();
 		if (cwd === void 0 || cwd === "") throw new Error("the current DSH session has no workspace for Mnemon");
@@ -7979,6 +8005,7 @@ function registerCommands(commands, service, coordinator) {
 const GUIDANCE_SECTION_NAME = "mnemon:routing";
 const RUNTIME_MEMORY_CONTEXT_NAME = "mnemon:runtime-memory";
 const STRATEGY_SECTION_NAME = "mnemon:strategy";
+const SNAPSHOT_GUIDANCE = "Mnemon memory snapshots are complete projections in chronological order. The latest snapshot supersedes earlier snapshots as the current projected state; do not treat older versions as additional current facts or authority. Absence may reflect filtering or projection budgets and does not imply deletion from storage.";
 const ROUTING_GUIDANCE = "Use memory only when needed. Follow the current Mnemon View: use mnemon_view_route or mnemon_view_action only for offered ids. Installed tools do not imply an available Source. Never infer missing historical facts. An action offer is not authorization; a write exists only after its receipt.";
 /** A View is an own-plugin message, never part of the shared context snapshot. */
 function withoutMemoryViewContext(assembly) {
@@ -7989,12 +8016,20 @@ function withoutMemoryViewContext(assembly) {
 }
 /** Inject trusted Strategy instructions after interpolation; Source text stays quoted in the Wake. */
 function applyMemoryViewGuidance(assembly, view, routingEnabled = true) {
-	if (view === void 0) return withoutMemoryViewContext(assembly);
+	if (view === void 0) return withoutMemoryViewContext({
+		...assembly,
+		sections: assembly.sections.filter((section) => section.name !== "mnemon:snapshot-history")
+	});
 	const sections = assembly.sections.filter((section) => ![
 		GUIDANCE_SECTION_NAME,
 		STRATEGY_SECTION_NAME,
-		"mnemon:runtime-memory-protocol"
+		"mnemon:runtime-memory-protocol",
+		"mnemon:snapshot-history"
 	].includes(section.name));
+	sections.push({
+		name: "mnemon:snapshot-history",
+		text: SNAPSHOT_GUIDANCE
+	});
 	if (view.guidance?.system) sections.push({
 		name: STRATEGY_SECTION_NAME,
 		text: view.guidance.system
@@ -8130,7 +8165,7 @@ function pendingOpinions(entries) {
 		createdAt: opinion.createdAt
 	}))).sort((left, right) => left.createdAt.localeCompare(right.createdAt));
 }
-function record$3(value) {
+function record$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function stringField(value) {
@@ -8279,7 +8314,7 @@ function body(value, index, field) {
 	return text.slice(0, MAX_FIELD);
 }
 function parseOperation(value, index, evidence) {
-	const operation = record$3(value);
+	const operation = record$4(value);
 	if (operation === void 0) throw new Error(`reconcile operation ${index} must be an object`);
 	const kind = stringField(operation.kind);
 	if (kind === void 0 || !KINDS.includes(kind)) throw new Error(`reconcile operation ${index} has an unsupported kind: ${JSON.stringify(operation.kind)}`);
@@ -8352,7 +8387,7 @@ function emptyDocumentSnapshot(directory, at) {
 }
 /** The host, not the model, decides what a proposal may contain. */
 function parseReconcileResult(value, evidence) {
-	const result = record$3(value);
+	const result = record$4(value);
 	if (result === void 0) throw new Error("memory reconciliation returned an invalid structured result");
 	const action = stringField(result.action);
 	if (action === void 0 || ![
@@ -8461,6 +8496,72 @@ async function applyReconcileOperations(operations, applier, signal, selection)
 	};
 }
 //#endregion
+//#region src/host/agent-compat.ts
+function configuredProviderNames(host) {
+	const names = /* @__PURE__ */ new Set();
+	for (const runtime of host?.registry?.values() ?? []) for (const fiber of runtime.fibers) {
+		const config = fiber.effectiveConfig;
+		if (config && typeof config === "object" && "providerName" in config && typeof config.providerName === "string") names.add(config.providerName);
+	}
+	return [...names];
+}
+/** Official 0.2.2-rc.1 has registry ownership; master fcc0ad4 moved it into Subagent. */
+function activationOwned(subagents) {
+	return typeof subagents?.rootOf === "function";
+}
+/** Only live registry instances can be adopted; persisted lineage is not authority. */
+function isRootAgent(agents, subagents, agent) {
+	if (agents.get(agent.id) !== agent) return false;
+	if (typeof agents.roots === "function") return agents.roots().includes(agent);
+	try {
+		return subagents.rootOf?.(agent) === agent;
+	} catch {
+		return false;
+	}
+}
+function rootAgents(agents, subagents) {
+	if (typeof agents.roots === "function") return agents.roots();
+	return (agents.list?.() ?? []).filter((agent) => isRootAgent(agents, subagents, agent));
+}
+/** Persisted IDs keep completed internal sessions out of conversation automation after restart. */
+function isTaskRecord(id) {
+	return /^mnemon-(?:task|run)-v1-[0-9a-f-]{36}$/.test(id);
+}
+function titleTask(agent, title) {
+	(agent.ctx.get?.("sessionTitle"))?.rename?.(agent.session, title);
+}
+const creatingChild = new AsyncLocalStorage();
+/** Share one reservation across guard, continuation and composition wrappers, never across nested runs. */
+function withReservedChild(parent, operation, fresh = false) {
+	const current = creatingChild.getStore();
+	if (!fresh && current?.parent === parent && !current.claimed) return operation();
+	return creatingChild.run({
+		parent,
+		id: `mnemon-run-v1-${randomUUID()}`
+	}, operation);
+}
+function reservedChildId(parent) {
+	const current = creatingChild.getStore();
+	return current?.parent === parent && !current.claimed ? current.id : void 0;
+}
+function claimReservedChild(parent) {
+	const current = creatingChild.getStore();
+	if (current?.parent !== parent || current.claimed) return void 0;
+	current.claimed = true;
+	return current.id;
+}
+function isCreatingChild(agents, child) {
+	const current = creatingChild.getStore();
+	return current !== void 0 && isReservedChild(agents, current.parent, child);
+}
+/** A lineage string or same-tree relationship is not a creation capability. */
+function isReservedChild(agents, parent, child) {
+	const current = creatingChild.getStore();
+	if (current?.parent !== parent || !current.claimed || current.id !== child.id || agents?.get?.(parent.id) !== parent || agents.get(child.id) !== child || current.child !== void 0 && current.child !== child) return false;
+	current.child = child;
+	return true;
+}
+//#endregion
 //#region src/host/review-tools.ts
 const startingChild$1 = new AsyncLocalStorage();
 /**
@@ -8470,7 +8571,11 @@ const startingChild$1 = new AsyncLocalStorage();
 * still requires startGuardedReview; it never removes another plugin's policy.
 */
 function idleReviewBlockReason(parent, agentTeams = "pause") {
-	return agentTeams !== "scoped" && parent.ctx?.get?.("agentTeams") !== void 0 && parent.ctx.tools?.get?.("spawn_teammate", parent) !== void 0 ? "agent-team" : void 0;
+	if (agentTeams === "scoped") return void 0;
+	const teams = parent.ctx?.get?.("agentTeams");
+	if (teams === void 0) return void 0;
+	const tools = parent.ctx.tools;
+	return tools?.get?.("spawn_teammate", parent) !== void 0 || typeof teams?.isEnabled === "function" && teams.isEnabled(parent) && tools?.get?.("team_task_create", parent) !== void 0 ? "agent-team" : void 0;
 }
 /** The two writes an idle review can make, one per layer; both are rows of the tool table. */
 const DOCUMENT_WRITE = "mnemon_document_create";
@@ -8522,20 +8627,24 @@ function startGuardedReview(host, parent, toolNames, start, published, policy) {
 async function startGuardedChild(host, parent, start, guard, options) {
 	const { purpose, published } = options;
 	const agents = host.agents;
-	if (typeof agents?.isOwnedBy !== "function") {
+	const reserved = activationOwned(host.subagents);
+	if (reserved && typeof agents?.get !== "function") throw new Error(`Mnemon ${purpose} requires exact live Agent lookup`);
+	if (!reserved && typeof agents?.isOwnedBy !== "function") {
 		if (options.optional === true) return start();
 		throw new Error(`Mnemon ${purpose} requires DSH Agent ownership and scoped tool guard support`);
 	}
 	const pending = Symbol(`Mnemon ${purpose} publication`);
 	const guards = /* @__PURE__ */ new Map();
 	let attachmentError;
+	let expectedChildId;
 	let run;
 	const listener = host.on("agent/created", (({ agent }) => {
-		if (startingChild$1.getStore() !== pending || !agents.isOwnedBy(agent.id, parent)) return;
+		if (startingChild$1.getStore() !== pending) return;
+		if (reserved ? agent.id !== expectedChildId || !isReservedChild(agents, parent, agent) : !agents.isOwnedBy(agent.id, parent)) return;
 		try {
 			const tools = agent.ctx?.tools;
 			if (typeof tools?.guard !== "function") {
-				if (options.optional === true) return;
+				if (options.optional === true && !reserved) return;
 				throw new Error(`Mnemon ${purpose} requires DSH scoped tool guard support`);
 			}
 			const dispose = tools.guard(guard);
@@ -8563,13 +8672,16 @@ async function startGuardedChild(host, parent, start, guard, options) {
 		if (failed.length) throw new AggregateError(failed.map((outcome) => outcome.reason), `Mnemon ${purpose} guard cleanup failed`);
 	};
 	try {
-		run = await startingChild$1.run(pending, start);
+		run = await startingChild$1.run(pending, () => reserved ? withReservedChild(parent, () => {
+			expectedChildId = reservedChildId(parent);
+			return start();
+		}, true) : start());
 		if (attachmentError !== void 0) throw attachmentError;
 		const runId = run.id;
 		const child = run.localAgent ?? [...guards.keys()].find((agent) => agent.id === runId);
 		if (child === void 0 || !guards.has(child)) {
-			const local = run.localAgent ?? agents.get?.(runId);
-			if (options.optional === true && guards.size === 0 && typeof local?.ctx?.tools?.guard !== "function") {
+			const local = run.localAgent ?? agents?.get?.(runId);
+			if (!reserved && options.optional === true && guards.size === 0 && typeof local?.ctx?.tools?.guard !== "function") {
 				await closeObserver();
 				return run;
 			}
@@ -8604,13 +8716,13 @@ async function startGuardedChild(host, parent, start, guard, options) {
 }
 //#endregion
 //#region src/host/review-checkpoint.ts
-function record$2(value) {
+function record$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 function textContent(content, toolResult = false) {
 	if (!Array.isArray(content)) return "";
 	return content.map((block) => {
-		const value = record$2(block);
+		const value = record$3(block);
 		if (value.type === "text" && typeof value.text === "string") return value.text;
 		if (toolResult && value.type === "tool-result" && value.isError !== true) return textContent(value.content);
 		return "";
@@ -8634,8 +8746,8 @@ function reviewCheckpoint(session, maxChars) {
 			"assistant/message",
 			"tool/result"
 		].includes(event.type)) continue;
-		const message = record$2(event.type === "user/message" ? event.data : event.data.message);
-		const source = record$2(message.source);
+		const message = record$3(event.type === "user/message" ? event.data : event.data.message);
+		const source = record$3(message.source);
 		if (event.type === "user/message" && source.kind !== "user") continue;
 		const text = textContent(message.content, event.type === "tool/result");
 		if (!text) continue;
@@ -8649,8 +8761,14 @@ function reviewCheckpoint(session, maxChars) {
 //#endregion
 //#region src/host/plugin-message.ts
 const MNEMON_PLUGIN_SOURCE = "dsh-mnemon";
+/** Includes the published V3 wrapper and its official V4 migration. */
+function isMnemonMessageSource(source) {
+	if (typeof source !== "object" || source === null) return false;
+	const { kind, plugin } = source;
+	return kind === "dsh-mnemon" || kind === `plugin:dsh-mnemon` || kind === "plugin" && plugin === "dsh-mnemon";
+}
 /** A user-role message this plugin adds to a step, marked with its own source. */
-function createPluginMessage(text, form) {
+function createPluginMessage(text, form, snapshot) {
 	return structuredClone({
 		id: randomUUID(),
 		role: "user",
@@ -8660,7 +8778,8 @@ function createPluginMessage(text, form) {
 		}],
 		source: {
 			kind: MNEMON_PLUGIN_SOURCE,
-			form
+			form,
+			...snapshot === void 0 ? {} : { snapshot }
 		}
 	});
 }
@@ -8719,10 +8838,13 @@ function continueAfterRefusal(agent) {
 * that does not report creation leaves the child as it was.
 */
 async function startWithContinuationTurns(host, parent, start) {
+	const reserved = activationOwned(host.subagents);
 	const pending = Symbol("Mnemon delegated start");
 	const stops = [];
+	let expectedChildId;
 	const listener = host.on("agent/created", (({ agent }) => {
 		if (startingChild.getStore() !== pending) return;
+		if (reserved && (agent.id !== expectedChildId || !isReservedChild(host.agents, parent, agent))) return;
 		if (typeof host.agents?.isOwnedBy === "function" && !host.agents.isOwnedBy(agent.id, parent)) return;
 		for (const stop of continueAfterRefusal(agent)) if (typeof stop === "function") stops.push(stop);
 	}));
@@ -8731,7 +8853,10 @@ async function startWithContinuationTurns(host, parent, start) {
 	};
 	let run;
 	try {
-		run = await startingChild.run(pending, start);
+		run = await startingChild.run(pending, () => reserved ? withReservedChild(parent, () => {
+			expectedChildId = reservedChildId(parent);
+			return start();
+		}) : start());
 	} catch (error) {
 		await release();
 		throw error;
@@ -8790,6 +8915,7 @@ function childComposition(subagents, provider) {
 * step, which needs `publications`.
 */
 async function startSubagent(subagents, agents, provider, request, publications) {
+	if (typeof subagents.startActivation === "function" && reservedChildId(request.parent) === void 0) return withReservedChild(request.parent, () => startSubagent(subagents, agents, provider, request, publications));
 	const { toolFilter, persona, ...task } = request;
 	if (toolFilter === void 0 && persona === void 0 || childComposition(subagents, subagents.getProvider(provider)) !== "publication") return startOnHost(subagents, agents, provider, request);
 	if (publications === void 0) throw new Error("This DSH takes no subagent persona or tool filter at start, and dsh-mnemon cannot observe the child it publishes");
@@ -8797,14 +8923,26 @@ async function startSubagent(subagents, agents, provider, request, publications)
 		...toolFilter === void 0 ? {} : { toolFilter },
 		...persona === void 0 ? {} : { persona }
 	};
-	return startComposed(publications, agents, request.parent, composition, () => startOnHost(subagents, agents, provider, task));
+	return startComposed(publications, agents, request.parent, composition, () => startOnHost(subagents, agents, provider, task), activationOwned(subagents));
 }
 async function startOnHost(subagents, agents, provider, request) {
 	if (typeof subagents.startActivation === "function") {
 		const { label, signal, ...task } = request;
-		const activation = await subagents.startActivation({
+		const modern = activationOwned(subagents);
+		const childId = claimReservedChild(request.parent);
+		if (modern && (childId === void 0 || agents?.get?.(request.parent.id) !== request.parent)) throw new Error("Mnemon requires an exact live parent and reserved child identity on an activation-owned DSH");
+		const startCurrent = subagents.startActivation;
+		const activation = modern ? await startCurrent.call(subagents, {
+			...task,
 			provider,
 			label,
+			signal,
+			childId,
+			delivery: "caller"
+		}) : await subagents.startActivation({
+			provider,
+			label,
+			...childId === void 0 ? {} : { childId },
 			request: task,
 			signal,
 			delivery: "caller"
@@ -8818,7 +8956,9 @@ async function startOnHost(subagents, agents, provider, request) {
 			activation.result.then(release, release);
 			if (signal.aborted) stop();
 			const child = agents?.get?.(activation.childId);
-			const localAgent = child !== void 0 && (typeof agents?.isOwnedBy !== "function" || agents.isOwnedBy(child.id, request.parent)) ? child : void 0;
+			if (modern && (activation.childId !== childId || child === void 0 || !isReservedChild(agents, request.parent, child))) throw new Error("DSH did not return the reserved live Mnemon child");
+			if (modern && child !== void 0) titleTask(child, label.startsWith("Mnemon ") ? label : `Mnemon · ${label}`);
+			const localAgent = child !== void 0 && (modern || typeof agents?.isOwnedBy !== "function" || agents.isOwnedBy(child.id, request.parent)) ? child : void 0;
 			return {
 				id: activation.childId,
 				...localAgent === void 0 ? {} : { localAgent },
@@ -8858,12 +8998,14 @@ function compose(agent, { toolFilter, persona }) {
 * check confirms the parent. A failed composition makes DSH roll the child
 * back; a child that was not seen published is disposed and refused.
 */
-async function startComposed(publications, agents, parent, composition, start) {
+async function startComposed(publications, agents, parent, composition, start, reserved = false) {
 	const pending = Symbol("Mnemon child composition");
+	const expectedChildId = reserved ? reservedChildId(parent) : void 0;
 	const composed = /* @__PURE__ */ new Set();
 	let failure;
 	const listener = publications.on("agent/created", (({ agent }) => {
 		if (composingChild.getStore() !== pending) return;
+		if (reserved && (agent.id !== expectedChildId || !isReservedChild(agents, parent, agent))) return;
 		if (typeof agents?.isOwnedBy === "function" && !agents.isOwnedBy(agent.id, parent)) return;
 		try {
 			compose(agent, composition);
@@ -10332,6 +10474,7 @@ var AgentMemoryTurn = class {
 	agent;
 	runtime;
 	delegation;
+	independent;
 	pinned;
 	/** A turn that runs without memory because no composition was serving when it began. */
 	unavailable;
@@ -10342,10 +10485,11 @@ var AgentMemoryTurn = class {
 	lastInspection;
 	lastWorkspace;
 	releaseDelegation;
-	constructor(agent, runtime, delegation) {
+	constructor(agent, runtime, delegation, independent = false) {
 		this.agent = agent;
 		this.runtime = runtime;
 		this.delegation = delegation;
+		this.independent = independent;
 		if (delegation === void 0) return;
 		this.releaseDelegation = runtime.executions.retain(agent, delegation);
 	}
@@ -10437,7 +10581,7 @@ var AgentMemoryTurn = class {
 		}
 	}
 	async pin(turn, generation, signal) {
-		const execution = await this.runtime.executions.turn(this.agent, turn, signal, this.delegation);
+		const execution = await this.runtime.executions.turn(this.agent, turn, signal, this.delegation, this.independent);
 		const { graph, context } = execution;
 		try {
 			if (this.closed || this.generation !== generation) throw new Error("memory turn ended during View preparation");
@@ -10581,6 +10725,136 @@ var AutomaticReviewAdmission = class {
 	}
 };
 //#endregion
+//#region src/host/subagent-errors.ts
+/** A provider stop, kept separate from schema, startup and cancellation errors. */
+var SubagentStoppedError = class extends Error {
+	stopReason;
+	maxTokens;
+	constructor(stopReason, maxTokens, detail) {
+		super(`memory subagent stopped with ${stopReason}${detail === void 0 ? "" : `: ${detail}`}`);
+		this.stopReason = stopReason;
+		this.maxTokens = maxTokens;
+		this.name = "SubagentStoppedError";
+	}
+};
+//#endregion
+//#region src/host/task-continuation.ts
+const FINISHED_TASK_REFUSAL = "This Mnemon task has finished. Send a new user message in this conversation to continue working with memory.";
+const CONTINUATION_GUIDANCE = "This is a new user request in a completed Mnemon task conversation. The previous task stays completed. Use the current memory View and ordinary memory tools for this request; require receipts for changes. Do not repeat the previous task or submit its expired completion request.";
+/** Older workers have no reserved ID: require their own Host descriptor and task contract. */
+function isLegacyMemoryTask(agent) {
+	if (agent.session.header?.origin !== "subagent") return false;
+	const events = agent.session.snapshotEvents(agent.session.inheritedEventCount ?? 0);
+	const descriptor = events.findLastIndex((event) => event.type === "subagent/descriptor");
+	if (descriptor < 0 || typeof events[descriptor].data.label !== "string" || !events[descriptor].data.label.startsWith("Mnemon ")) return false;
+	const own = events.slice(descriptor + 1);
+	const textOf = (value) => {
+		return value?.content?.filter((block) => block.type === "text").map((block) => block.text ?? "").join("\n") ?? "";
+	};
+	const prompt = own.find((event) => event.type === "user/message" && (event.data.message ?? event.data).source?.kind === "user");
+	if (prompt === void 0 || !/^\[dsh-mnemon:delegated [a-z-]+\](?:\n|$)/u.test(textOf(prompt.data.message ?? prompt.data))) return false;
+	return own.some((event) => event.type === "system/message" && textOf(event.data.message).includes("Completion protocol: call `mnemon_subagent_result` exactly once with requestId `"));
+}
+/** A resumed task receives memory authority only for a newly accepted human turn. */
+var TaskContinuation = class {
+	agent;
+	runtime;
+	liveAgent;
+	memory;
+	authorizedTurn;
+	stops = [];
+	views = /* @__PURE__ */ new Map();
+	closed = false;
+	constructor(agent, runtime, liveAgent) {
+		this.agent = agent;
+		this.runtime = runtime;
+		this.liveAgent = liveAgent;
+		this.memory = new AgentMemoryTurn(agent, runtime, void 0, true);
+	}
+	start() {
+		try {
+			const guard = this.agent.ctx.tools?.guard?.((execution) => this.guard(execution));
+			if (typeof guard !== "function") throw new Error("Task continuation requires a scoped memory tool guard");
+			this.stops.push(guard);
+			this.stops.push(this.agent.ctx.on("agent/pre-step", ((step, next) => this.preStep(step, next)), { prepend: true }));
+			this.stops.push(this.agent.ctx.on("system-prompt/assemble", (async (_assembly, context, next) => {
+				const assembly = await next();
+				if (context.agent !== void 0 && context.agent !== this.agent) return assembly;
+				const pin = this.memory.current;
+				return applyMemoryViewGuidance(assembly, pin?.context.view, pin?.graph.config.routingGuidance);
+			})));
+			this.stops.push(this.agent.ctx.on("session/event", ((session, event) => {
+				if (session === this.agent.session && event.type === "turn/end" && event.data.turn === this.authorizedTurn) this.end();
+			})));
+			return () => this.dispose();
+		} catch (error) {
+			this.dispose();
+			throw error;
+		}
+	}
+	ownsHumanTurn(actor) {
+		return !this.closed && actor === this.agent && this.liveAgent(actor.id) === actor && this.authorizedTurn !== void 0 && this.memory.current?.turn === this.authorizedTurn && openAgentTurn(actor) === this.authorizedTurn;
+	}
+	guard(execution) {
+		if (!execution.name?.startsWith("mnemon_")) return void 0;
+		const actor = execution.agent;
+		if (this.closed || actor === void 0 || this.liveAgent(actor.id) !== actor) return FINISHED_TASK_REFUSAL;
+		if (actor !== this.agent) {
+			try {
+				const graph = this.runtime.forAgent(actor);
+				const pin = graph.composableTurns.activeTurn(actor.id);
+				if (pin !== void 0 && this.views.get(pin.view.id) === graph) return void 0;
+			} catch {}
+			return FINISHED_TASK_REFUSAL;
+		}
+		if (this.authorizedTurn === void 0) return FINISHED_TASK_REFUSAL;
+		if (execution.name === "mnemon_subagent_result") return "The previous Mnemon task result is already settled. Use ordinary memory tools for the new user request.";
+		if (this.memory.current?.turn !== this.authorizedTurn) return this.memory.unavailableReason ?? "Memory is unavailable for this request.";
+	}
+	async preStep(step, next) {
+		const decision = await next();
+		if (step.agent !== this.agent) return decision;
+		if (decision.kind === "reject" || step.signal.aborted || this.closed || this.liveAgent(this.agent.id) !== this.agent) {
+			this.end();
+			return decision;
+		}
+		const starting = this.authorizedTurn !== step.turn;
+		if (starting) this.end();
+		if (decision.messages.some((message) => message.source.kind === "user" && message.content.some((block) => block.type !== "text" || (block.text?.trim().length ?? 0) > 0))) this.authorizedTurn = step.turn;
+		if (this.authorizedTurn !== step.turn || openAgentTurn(this.agent) !== step.turn) return decision;
+		try {
+			await this.memory.begin(step.turn, step.signal);
+		} catch (error) {
+			this.end();
+			throw error;
+		}
+		const pin = this.memory.current;
+		for (const [id, graph] of this.views) if (graph.composableTurns.get(id) === void 0) this.views.delete(id);
+		if (pin !== void 0) this.views.set(pin.context.view.id, pin.graph);
+		if (!starting && step.step !== 1) return decision;
+		const wake = pin === void 0 ? "" : modelMemoryWake(pin.graph, pin.context).text;
+		return {
+			...decision,
+			messages: [...decision.messages, createPluginMessage(`${CONTINUATION_GUIDANCE}\n\n${wake}`, "instructions")]
+		};
+	}
+	end() {
+		this.authorizedTurn = void 0;
+		this.memory.end();
+	}
+	dispose() {
+		if (this.closed) return;
+		this.closed = true;
+		try {
+			for (const stop of this.stops.splice(0).reverse()) stop();
+		} finally {
+			this.authorizedTurn = void 0;
+			this.memory.dispose();
+			this.views.clear();
+		}
+	}
+};
+//#endregion
 //#region src/host/subagent.ts
 function evidenceInsights(evidence) {
 	return evidence.items.map((item) => {
@@ -10626,7 +10900,6 @@ const REVIEW_TOOLS = [
 const RESULT_TOOL_NAME = "mnemon_subagent_result";
 /** How many finished delegated children stay refused memory tools if DSH resumes one. */
 const FINISHED_CHILDREN = 1e3;
-const FINISHED_CHILD_REFUSAL = "This Mnemon task has finished, so it no longer reads or changes memory. Reply without memory tools.";
 const RESULT_TOOL_INPUT_SCHEMA = {
 	type: "object",
 	properties: {
@@ -10763,8 +11036,13 @@ var MnemonSubagentCoordinator = class {
 	resultRequests = /* @__PURE__ */ new Map();
 	disposeResultTool;
 	disposeResumeGuard;
+	disposeTaskNotices;
 	/** Delegated children whose run has ended, newest last, at most FINISHED_CHILDREN. */
 	finishedChildren = /* @__PURE__ */ new Set();
+	continuations = /* @__PURE__ */ new Map();
+	continuationOwners = /* @__PURE__ */ new WeakMap();
+	providerNames = /* @__PURE__ */ new Set(["spawn", "fork"]);
+	providerObservers = [];
 	disposed = false;
 	reviewAdmission = new AutomaticReviewAdmission();
 	constructor(subagents, runtimeSource, resultRuntime, taskAgentModelResolver, runtimeMaintenanceMaxTokensResolver, runtimeMaintenanceTaskRunner) {
@@ -10799,11 +11077,39 @@ var MnemonSubagentCoordinator = class {
 		});
 		if (typeof registration !== "function") throw new Error("dsh-mnemon subagent result tool registration did not return a disposer");
 		this.disposeResultTool = registration;
+		const notices = resultRuntime.on("agent/pre-step", (async (step, next) => {
+			const ignored = new Set(step.messages.filter((message) => {
+				const source = message.source;
+				return source.kind === "subagent-settled" && typeof source.senderSessionId === "string" && (isTaskRecord(source.senderSessionId) || this.finishedChildren.has(source.senderSessionId));
+			}).map((message) => message.id));
+			if (ignored.size === 0) return next();
+			if (step.step === 1 && ignored.size === step.messages.length) return {
+				kind: "enter",
+				messages: []
+			};
+			const decision = await next();
+			return decision.kind === "reject" ? decision : {
+				...decision,
+				messages: decision.messages.filter((message) => !ignored.has(message.id))
+			};
+		}), { prepend: true });
+		if (typeof notices === "function") this.disposeTaskNotices = notices;
+		if (typeof subagents.list !== "function") {
+			for (const stop of [resultRuntime.on("subagent/provider-added", ((provider) => {
+				this.providerNames.add(provider.name);
+			})), resultRuntime.on("subagent/provider-removed", ((name) => {
+				this.providerNames.delete(name);
+			}))]) if (typeof stop === "function") this.providerObservers.push(stop);
+		}
 	}
 	dispose() {
 		this.disposed = true;
 		this.reviewAdmission.dispose();
 		this.resultRequests.clear();
+		this.disposeTaskNotices?.();
+		this.disposeTaskNotices = void 0;
+		for (const stop of [...this.continuations.values()].reverse()) stop();
+		for (const stop of this.providerObservers.splice(0)) stop();
 		const resumeGuard = this.disposeResumeGuard;
 		this.disposeResumeGuard = void 0;
 		resumeGuard?.();
@@ -10814,10 +11120,68 @@ var MnemonSubagentCoordinator = class {
 	snapshot() {
 		return { ...this.counters };
 	}
+	isFinishedTask(id, agent) {
+		if (this.finishedChildren.has(id)) return true;
+		if (agent === void 0 || agent.id !== id || !isLegacyMemoryTask(agent)) return false;
+		this.finished(id);
+		return true;
+	}
+	isUserContinuation(agent) {
+		return this.continuationOwners.get(agent)?.ownsHumanTurn(agent) === true;
+	}
+	delegationLimit(parent) {
+		if (!this.isUserContinuation(parent)) return 1;
+		const depths = [parent.session.header?.delegationDepth ?? 0, parent.options?.subagentDepth ?? 0];
+		if (depths.some((depth) => !Number.isSafeInteger(depth) || depth < 0 || Object.is(depth, -0) || depth === Number.MAX_SAFE_INTEGER)) throw new Error("Cannot determine a safe delegation depth for this continued task");
+		return Math.max(...depths) + 1;
+	}
+	/** User continuation is a fresh scoped turn, never revival of a delegated run. */
+	continueTask(agent) {
+		if (this.continuations.has(agent) || this.disposed) return;
+		if (typeof agent.ctx.effect !== "function" || this.resultRuntime?.agents?.get === void 0) {
+			agent.ctx.tools?.guard?.((execution) => execution.name?.startsWith("mnemon_") ? FINISHED_TASK_REFUSAL : void 0);
+			return;
+		}
+		const continuation = new TaskContinuation(agent, this.runtimeSource, (id) => this.resultRuntime?.agents?.get?.(id));
+		let dispose;
+		dispose = agent.ctx.effect(() => {
+			const stop = continuation.start();
+			this.continuationOwners.set(agent, continuation);
+			return () => {
+				try {
+					stop();
+				} finally {
+					if (this.continuations.get(agent) === dispose) this.continuations.delete(agent);
+					this.continuationOwners.delete(agent);
+				}
+			};
+		}, "dsh-mnemon.task-continuation()");
+		this.continuations.set(agent, dispose);
+	}
+	/** Spawn may use an independent tool scope, so transfer the turn guard explicitly. */
+	inheritTaskContinuation(parent, child) {
+		const owner = this.continuationOwners.get(parent);
+		if (owner === void 0 || this.continuations.has(child)) return;
+		let dispose;
+		dispose = child.ctx.effect(() => {
+			const stop = child.ctx.tools?.guard?.((execution) => owner.guard(execution));
+			if (typeof stop !== "function") throw new Error("A continued task child requires a scoped memory tool guard");
+			this.continuationOwners.set(child, owner);
+			return () => {
+				try {
+					stop();
+				} finally {
+					if (this.continuations.get(child) === dispose) this.continuations.delete(child);
+					this.continuationOwners.delete(child);
+				}
+			};
+		}, "dsh-mnemon.task-delegation()");
+		this.continuations.set(child, dispose);
+	}
 	/**
 	* DSH 0.2.1 can resume a finished child from its saved state when another Agent sends it a
-	* message: with its persona and tools, but without the guard its run held. A delegated child
-	* never reads or changes memory once its run has ended (#387).
+	* message: with its persona and tools, but without the guard its run held. Only a fresh
+	* human turn may acquire new authority; automatic continuations remain denied (#387).
 	*/
 	finished(id) {
 		this.finishedChildren.delete(id);
@@ -10826,9 +11190,7 @@ var MnemonSubagentCoordinator = class {
 		if (this.disposeResumeGuard !== void 0 || this.disposed || this.resultRuntime === void 0) return;
 		const resumed = this.resultRuntime.on("agent/created", (({ agent }) => {
 			if (!this.finishedChildren.has(agent.id)) return;
-			try {
-				agent.ctx?.tools?.guard?.((execution) => execution.name?.startsWith("mnemon_") === true ? FINISHED_CHILD_REFUSAL : void 0);
-			} catch {}
+			this.continueTask(agent);
 		}));
 		if (typeof resumed === "function") this.disposeResumeGuard = resumed;
 	}
@@ -11267,8 +11629,8 @@ var MnemonSubagentCoordinator = class {
 	* One tool-less structured run for skill evolution: a review, a draft, a
 	* backtest step or a case derivation. The child sees only the prompt.
 	*/
-	async skillTask(parent, label, prompt, schema, persona, signal, route) {
-		const { provider, runId, result } = await this.delegate(parent, "skill", label, prompt, [], schema, signal, "spawn", persona, void 0, void 0, route);
+	async skillTask(parent, label, prompt, schema, persona, signal, route, maxTokens) {
+		const { provider, runId, result } = await this.delegate(parent, "skill", label, prompt, [], schema, signal, "spawn", persona, void 0, void 0, route, void 0, maxTokens);
 		return {
 			provider,
 			runId,
@@ -11429,9 +11791,9 @@ ${naturalRequest(request, target === void 0 ? REQUEST_LABELS : TARGETED_WRITE_LA
 			execution.release();
 		}
 	}
-	async delegate(parent, operation, label, prompt, tools, outputSchema, signal, preferredProvider = "spawn", persona = WRITE_PERSONA, recovery, guard, route, admission) {
+	async delegate(parent, operation, label, prompt, tools, outputSchema, signal, preferredProvider = "spawn", persona = WRITE_PERSONA, recovery, guard, route, admission, skillMaxTokens) {
 		if (this.disposed) throw new Error("dsh-mnemon subagent coordinator is disposed");
-		const provider = this.provider(preferredProvider);
+		const provider = this.provider(preferredProvider, this.runtimeSource.forAgent(parent).config.subagentProviderNames);
 		assertDshOutputSchema(outputSchema);
 		if (this.resultRuntime === void 0) throw new Error("dsh-mnemon subagent result tool runtime is unavailable");
 		const resultToolName = RESULT_TOOL_NAME;
@@ -11537,7 +11899,7 @@ ${naturalRequest(request, target === void 0 ? REQUEST_LABELS : TARGETED_WRITE_LA
 Completion protocol: call \`${resultToolName}\` exactly once with requestId \`${requestId}\` and result matching this JSON schema:
 ${JSON.stringify(outputSchema)}
 This is the only completion channel for this run. Do not finish with a plain-text answer. The requestId expires when this run finishes or is cancelled.`;
-			const perOpMaxTokens = operation === "migration" || operation === "compaction" || operation === "reconcile" ? this.runtimeMaintenanceMaxTokensResolver?.() ?? 8192 : operation === "document-archive" ? 8192 : operation === "metadata-maintenance" ? 4096 : operation === "review" ? this.runtimeSource.config.idleReview.maxTokens : operation === "skill" ? 16384 : void 0;
+			const perOpMaxTokens = operation === "migration" || operation === "compaction" || operation === "reconcile" ? this.runtimeMaintenanceMaxTokensResolver?.() ?? 8192 : operation === "document-archive" ? 8192 : operation === "metadata-maintenance" ? 4096 : operation === "review" ? this.runtimeSource.config.idleReview.maxTokens : operation === "skill" ? skillMaxTokens ?? 16384 : void 0;
 			const fixed = route ?? this.taskAgentModelResolver?.();
 			const baseAgentOptions = perOpMaxTokens === void 0 ? void 0 : { maxTokens: perOpMaxTokens };
 			const resolvedAgentOptions = fixed === void 0 ? baseAgentOptions : {
@@ -11560,7 +11922,7 @@ This is the only completion channel for this run. Do not finish with a plain-tex
 					parent,
 					signal,
 					...resolvedAgentOptions === void 0 ? {} : { agentOptions: resolvedAgentOptions },
-					maxDepth: 1,
+					maxDepth: this.delegationLimit(parent),
 					toolFilter: { allow: [...this.availableTools(parent, tools), resultToolName] },
 					persona: completionPersona
 				}, host);
@@ -11576,11 +11938,11 @@ This is the only completion channel for this run. Do not finish with a plain-tex
 			if (captured !== void 0 && captured.agentId !== activeRun.id) throw new Error("Mnemon subagent result was recorded by a different child");
 			let structured = captured?.value ?? result.structured;
 			if (structured === void 0 && result.stopReason === "completed") structured = recoverStructuredResult(recovery, committedReceipts.filter((receipt) => receipt.agentId === activeRun.id));
-			if (structured !== void 0) assertDshOutputValue(outputSchema, structured);
 			if (result.stopReason !== "completed") {
 				const detail = subagentFailureDetail(activeRun, result);
-				throw new Error(`memory subagent stopped with ${result.stopReason}${detail === void 0 ? "" : `: ${detail}`}`);
+				throw new SubagentStoppedError(result.stopReason, perOpMaxTokens, detail);
 			}
+			if (structured !== void 0) assertDshOutputValue(outputSchema, structured);
 			if (structured === void 0) throw new Error("memory subagent completed without recording its result");
 			if (operation === "review" && [
 				"failed",
@@ -11644,8 +12006,12 @@ This is the only completion channel for this run. Do not finish with a plain-tex
 		this.counters.lastAt = (/* @__PURE__ */ new Date()).toISOString();
 		return completed;
 	}
-	provider(preferred) {
-		const names = this.subagents.list();
+	provider(preferred, explicitNames = []) {
+		const names = this.subagents.list?.() ?? [.../* @__PURE__ */ new Set([
+			...this.providerNames,
+			...configuredProviderNames(this.resultRuntime),
+			...explicitNames
+		])].filter((name) => this.subagents.getProvider(name) !== void 0);
 		const compatible = (name) => {
 			const provider = this.subagents.getProvider(name);
 			return provider?.capabilities.depthLimit === true && childComposition(this.subagents, provider) !== void 0;
@@ -11976,6 +12342,192 @@ var TurnActivityProjection = class {
 	}
 };
 //#endregion
+//#region src/host/memory-snapshot-state.ts
+const digest = (value) => createHash("sha256").update(canonicalMemoryJson(value)).digest("hex");
+const hash$1 = (value) => typeof value === "string" && /^[a-f0-9]{64}$/u.test(value);
+const record$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function readMemorySnapshotState(value) {
+	if (!record$2(value) || value.version !== 1 || !hash$1(value.boundary) || !Array.isArray(value.entries) || !value.entries.every(hash$1)) return void 0;
+	return {
+		version: 1,
+		boundary: value.boundary,
+		entries: [...value.entries]
+	};
+}
+/**
+* Only Runtime's Source-owned, complete-projection provenance permits additive
+* history. Unknown Sources and opaque grants are compared in full. Do not use
+* View ids or source revisions here: ordinary Runtime writes change both.
+*/
+function memorySnapshotState(view) {
+	if (view === void 0) return void 0;
+	const entries = [];
+	const projection = view.projection.map((fragment) => {
+		const provenance = fragment.provenance;
+		const snapshot = record$2(provenance) ? provenance.snapshot : void 0;
+		if (!record$2(provenance) || provenance.sourceTypeId !== "runtime" || !record$2(snapshot) || snapshot.version !== 1 || !hash$1(snapshot.scope) || !Array.isArray(snapshot.entries) || !snapshot.entries.every(hash$1)) return fragment;
+		entries.push(...snapshot.entries.map((entry) => digest([
+			fragment.sourceInstanceKey,
+			fragment.id,
+			entry
+		])));
+		const { text: _text, revision: _revision, ...identity } = fragment;
+		return {
+			...identity,
+			provenance: {
+				...provenance,
+				snapshot: {
+					version: 1,
+					scope: snapshot.scope
+				}
+			}
+		};
+	});
+	return {
+		version: 1,
+		boundary: digest({
+			generation: view.runtimeGeneration,
+			scope: view.scope,
+			strategy: [
+				view.strategyInstanceKey,
+				view.strategyTypeId,
+				view.strategyExtensions ?? []
+			],
+			projection,
+			routes: view.routes,
+			actions: view.actionOffers,
+			grants: view.readGrants,
+			guidance: view.guidance ?? null,
+			diagnostics: view.diagnostics ?? []
+		}),
+		entries: entries.sort()
+	};
+}
+/** A missing old occurrence is a deletion/correction, even with duplicate facts. */
+function retainsSnapshotEntries(previous, current) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const entry of current) counts.set(entry, (counts.get(entry) ?? 0) + 1);
+	for (const entry of previous) {
+		const count = counts.get(entry) ?? 0;
+		if (count === 0) return false;
+		counts.set(entry, count - 1);
+	}
+	return true;
+}
+//#endregion
+//#region src/host/memory-snapshot.ts
+const MAX_SNAPSHOTS = 4;
+const MAX_SNAPSHOT_BYTES = 65536;
+const LEGACY_RUNTIME_SNAPSHOT = /^MNEMON RUNTIME MEMORY SNAPSHOT\n[^\n]+(?:\n[^\n]+)*\n\n(?:USER\.md \(user profile\)|Contents of USER\.md \(user profile; entries: \d+; UTF-8 bytes: \d+\/\d+\))\n<runtime-memory-file name="USER.md">\n(?:(?!\n\nMNEMON (?:RUNTIME MEMORY SNAPSHOT|VIEW ))[\s\S])*?\n<\/runtime-memory-file>\n\n(?:MEMORY\.md \(working reference\)|Contents of MEMORY\.md \(working reference; entries: \d+; UTF-8 bytes: \d+\/\d+\))\n<runtime-memory-file name="MEMORY.md">\n(?:(?!\n\nMNEMON (?:RUNTIME MEMORY SNAPSHOT|VIEW ))[\s\S])*?\n<\/runtime-memory-file>(?:$|\n\n)/u;
+const TRUNCATED_RUNTIME_START = /^MNEMON RUNTIME MEMORY SNAPSHOT\n(?:Revision: [a-f0-9]{64}(?:\nGit branch: [^\r\n]+)?(?:\nMetadata lines are annotations; created\/updated are ages at projection in whole days \(future\/unknown for future\/invalid timestamps\)\. Current instructions win\. For old_text\/oldText, use entry content only\.)?\n\nContents of USER\.md \(user profile; entries: \d+; UTF-8 bytes: \d+\/\d+\)|Entry annotations default to importance=normal and ages=0d \(whole days at projection; future\/unknown for future\/invalid timestamps\)\. Current instructions win\. For old_text\/oldText, use entry content only\.(?:\nGit branch: [^\r\n]+)?\n\nUSER\.md \(user profile\))\n<runtime-memory-file name="USER.md">\n/u;
+const RUNTIME_WAKE_SEPARATOR = /\n\n(?:MNEMON RUNTIME MEMORY SNAPSHOT\n|MNEMON VIEW TOOLS \(available in this View\): |MNEMON VIEW ROUTES \(quoted routing data; use mnemon_view_route or mnemon_view_action by exact id\): |MNEMON VIEW AVAILABILITY \(quoted diagnostics; unavailable Sources are not evidence\): )/u;
+function isTruncatedRuntimeSnapshot(text) {
+	const start = TRUNCATED_RUNTIME_START.exec(text);
+	if (start === null) return false;
+	const body = text.slice(start[0].length);
+	const end = body.search(RUNTIME_WAKE_SEPARATOR);
+	const first = end < 0 ? body : body.slice(0, end);
+	if (!first.endsWith("…")) return false;
+	const prefix = first.slice(0, -1);
+	const userEnd = prefix.indexOf("\n</runtime-memory-file>");
+	if (userEnd < 0) return true;
+	const heading = start[0].includes("\nContents of USER.md ") ? [
+		"\n\nContents of MEMORY.md (working reference; entries: ",
+		/^\d+/u,
+		"; UTF-8 bytes: ",
+		/^\d+/u,
+		"/",
+		/^\d+/u,
+		")"
+	] : ["\n\nMEMORY.md (working reference)"];
+	heading.push("\n<runtime-memory-file name=\"MEMORY.md\">\n");
+	let rest = prefix.slice(userEnd + 23);
+	for (const part of heading) {
+		if (rest === "") return true;
+		if (typeof part === "string") {
+			if (part.startsWith(rest)) return true;
+			if (!rest.startsWith(part)) return false;
+			rest = rest.slice(part.length);
+		} else {
+			const match = part.exec(rest);
+			if (match === null) return false;
+			rest = rest.slice(match[0].length);
+		}
+	}
+	return true;
+}
+/** Read only this producer's snapshot formats; ordinary recalls retain history. */
+function snapshotText(event) {
+	if (event?.type !== "user/message" || event.data.role !== "user") return void 0;
+	const source = event.data.source;
+	if (!isMnemonMessageSource(source)) return void 0;
+	const content = event.data.content;
+	if (!Array.isArray(content) || content.length !== 1) return void 0;
+	const block = content[0];
+	if (block?.type !== "text" || typeof block.text !== "string") return void 0;
+	if (source?.form === "memory-snapshot") return block.text;
+	if (source?.form !== "recall" || !(LEGACY_RUNTIME_SNAPSHOT.test(block.text) || isTruncatedRuntimeSnapshot(block.text))) return void 0;
+	return block.text;
+}
+/**
+* Prepare a snapshot and its retirements without writing before step/start.
+* Commit after step/start publication, before the Host builds its request.
+* Empty developer nodes are a public Session representation that derives no model
+* message. They contain no instructions, Source text, or tool changes. Each
+* replacement shadows one owned node and cites it; the append-only audit keeps
+* the original full message, without touching interleaved conversation.
+*/
+function prepareMemorySnapshot(session, text, state) {
+	const current = text?.trim() === "" ? void 0 : text;
+	const snapshots = session.surface.nodes.flatMap((seq) => {
+		const event = session.eventAt(seq);
+		const text = snapshotText(event);
+		const source = event?.data.source;
+		return text === void 0 ? [] : [{
+			seq,
+			text,
+			state: source?.form === "memory-snapshot" ? readMemorySnapshotState(source.snapshot) : void 0
+		}];
+	});
+	const latest = snapshots.at(-1);
+	const compatible = state !== void 0 && snapshots.every((snapshot) => snapshot.state?.boundary === state.boundary && retainsSnapshotEntries(snapshot.state.entries, state.entries));
+	const unchanged = current !== void 0 && latest?.text === current;
+	const count = snapshots.length + (unchanged ? 0 : 1);
+	const bytes = snapshots.reduce((total, snapshot) => total + Buffer.byteLength(snapshot.text, "utf8"), 0) + (unchanged || current === void 0 ? 0 : Buffer.byteLength(current, "utf8"));
+	const retained = current === void 0 ? [] : compatible && count <= MAX_SNAPSHOTS && (count <= 1 || bytes <= MAX_SNAPSHOT_BYTES) ? snapshots : state === void 0 && unchanged ? [latest] : [];
+	const stale = snapshots.filter((snapshot) => !retained.includes(snapshot));
+	return {
+		message: current === void 0 || unchanged && retained.includes(latest) ? void 0 : createPluginMessage(current, "memory-snapshot", state),
+		retire(turn, step) {
+			const visible = new Set(session.surface.nodes);
+			for (const { seq } of stale) {
+				if (!visible.has(seq)) continue;
+				if (session.append === void 0) throw new Error("DSH Session append is required to retire superseded memory snapshots");
+				session.append("developer/message", {
+					turn,
+					step,
+					message: {
+						id: randomUUID(),
+						role: "developer",
+						content: [],
+						source: {
+							kind: MNEMON_PLUGIN_SOURCE,
+							form: "memory-snapshot-retired"
+						}
+					}
+				}, {
+					surfaceOp: {
+						op: "replace",
+						startSeq: seq,
+						endSeq: seq
+					},
+					sourceEventSeqs: [seq]
+				});
+			}
+		}
+	};
+}
+//#endregion
 //#region src/host/idle-review-watermark.ts
 const MAX_STATE_BYTES = 16384;
 const MAX_TIMESTAMP = 864e13;
@@ -12140,11 +12692,6 @@ function llmService(value) {
 	if (typeof value !== "object" || value === null || !("listProviders" in value) || typeof value.listProviders !== "function" || !("listModels" in value) || typeof value.listModels !== "function") return void 0;
 	return value;
 }
-function isMnemonMessageSource(source) {
-	if (typeof source !== "object" || source === null) return false;
-	const { kind, plugin } = source;
-	return kind === "dsh-mnemon" || kind === `plugin:dsh-mnemon` || kind === "plugin" && plugin === "dsh-mnemon";
-}
 /**
 * Whether an event is a durable user message this plugin produced.
 */
@@ -12224,16 +12771,9 @@ var MnemonAgentLifecycle = class {
 	primePending = true;
 	startSource;
 	guidedTurns = /* @__PURE__ */ new Set();
+	pendingSnapshot;
 	memoryActivity = new TurnActivityProjection();
 	turnActivity = /* @__PURE__ */ new Map();
-	/**
-	* Text of the runtime memory snapshot most recently injected as this
-	* plugin's own message. `.context()` used to get supersede-on-change for free
-	* from the host's runtime-context projection; carrying the snapshot as an own
-	* message means re-emitting on change is this plugin's responsibility, and
-	* the rendered text (which carries the revision digest) is the key.
-	*/
-	injectedMemoryText;
 	idleReviewTimer;
 	reviewController;
 	reviewRunning = false;
@@ -12279,6 +12819,10 @@ var MnemonAgentLifecycle = class {
 		];
 		return () => {
 			this.disposed = true;
+			const pending = this.pendingSnapshot;
+			this.pendingSnapshot = void 0;
+			const started = pending === void 0 ? void 0 : this.agent.session.snapshotEvents().findLast((event) => event.type === "step/start");
+			if (pending !== void 0 && started !== void 0 && eventTurn(started) === pending.turn && started.data.step === pending.step) this.queueSnapshotRetirement(pending);
 			this.releaseView();
 			this.cancelIdleReview(true);
 			for (const dispose of disposers.reverse()) dispose();
@@ -12348,24 +12892,8 @@ var MnemonAgentLifecycle = class {
 		for (const seq of this.agent.session.surface.nodes) if (isOwnUserMessageEvent(this.agent.session.eventAt(seq))) return true;
 		return false;
 	}
-	/**
-	* The runtime memory snapshot, as this plugin's own message, when it changed.
-	*
-	* `.context()` used to carry this inside the host's shared runtime-context
-	* projection. Carrying it here instead attributes it to dsh-mnemon and keeps
-	* a memory write from re-emitting other contributors' sections; supersede
-	* stays intact because the block is still a complete state replacing its
-	* predecessor, keyed on the rendered text's revision digest.
-	*/
-	memorySnapshotMessage() {
-		const wake = this.memoryWake();
-		if (wake === void 0) return void 0;
-		const text = wake.text;
-		if (text.trim() === "" || text === this.injectedMemoryText) return void 0;
-		this.injectedMemoryText = text;
-		return createPluginMessage(text, "recall");
-	}
 	async preStep(payload, next) {
+		this.pendingSnapshot = void 0;
 		if (payload.step === 1) this.cancelIdleReview(true);
 		const decision = await next();
 		if (decision.kind === "reject" || payload.signal.aborted) {
@@ -12373,12 +12901,19 @@ var MnemonAgentLifecycle = class {
 			return decision;
 		}
 		if (!this.disposed && openAgentTurn(this.agent) === payload.turn) await this.memoryTurn?.begin(payload.turn, payload.signal);
+		const update = prepareMemorySnapshot(this.agent.session, this.config.lifecycleEnabled ? this.memoryWake()?.text : void 0, this.config.lifecycleEnabled ? memorySnapshotState(this.memoryTurn?.current?.context.view) : void 0);
+		this.pendingSnapshot = {
+			turn: payload.turn,
+			step: payload.step,
+			signal: payload.signal,
+			update
+		};
 		if (!this.config.lifecycleEnabled) return decision;
 		if (this.config.writeEnabled && this.config.writebackMode === "guided") this.recordTurnMessages(payload.turn, decision.messages);
 		if (payload.step !== 1) return decision;
 		if (decision.messages.some((message) => isMnemonMessageSource(message.source))) return decision;
 		if (decision.messages.length === 0) return decision;
-		const snapshot = this.memorySnapshotMessage();
+		const snapshot = update.message;
 		const withSnapshot = (messages) => snapshot === void 0 ? messages : [...messages, snapshot];
 		if (this.primePending) {
 			this.primePending = false;
@@ -12447,12 +12982,40 @@ var MnemonAgentLifecycle = class {
 		if (admitted) this.scheduleIdleReview(payload.turn);
 	}
 	sessionEvent(session, event) {
-		if (session !== this.agent.session || event.type !== "turn/end") return;
+		if (session !== this.agent.session) return;
 		const turn = eventTurn(event);
+		if (event.type === "step/start") {
+			const pending = this.pendingSnapshot;
+			if (pending === void 0 || pending.turn !== turn || pending.step !== event.data.step) return;
+			this.pendingSnapshot = void 0;
+			this.queueSnapshotRetirement(pending);
+			return;
+		}
+		if (event.type !== "turn/end") return;
+		if (this.pendingSnapshot?.turn === turn) this.pendingSnapshot = void 0;
 		const current = this.memoryTurn?.current;
 		if ((turn === void 0 || current?.turn !== turn ? void 0 : current) === void 0) return;
 		this.releaseView(turn);
 	}
+	queueSnapshotRetirement(pending) {
+		queueMicrotask(() => {
+			if (pending.signal.aborted || openAgentTurn(this.agent) !== pending.turn) return;
+			try {
+				pending.update.retire(pending.turn, pending.step);
+			} catch {
+				const reason = "Memory snapshot checkpoint failed; model request cancelled.";
+				this.counters.failures += 1;
+				this.lastPhase = "error";
+				this.lastAt = (/* @__PURE__ */ new Date()).toISOString();
+				this.lastError = reason;
+				this.agent.cancel({
+					kind: "hook",
+					reason
+				}, { keepInbox: true });
+				console.warn("[dsh-mnemon] Memory snapshot checkpoint failed; model request cancelled.");
+			}
+		});
+	}
 	scheduleIdleReview(turn) {
 		this.cancelIdleReview(true);
 		if (!this.restoreWatermark() || !this.idleReviewAllowed()) return;
@@ -12765,7 +13328,7 @@ var MnemonLifecycle = class {
 	}
 	/** Model work for skill evolution under a fresh task Agent, outside any conversation. */
 	runSkillTask(workspaceRoot, signal, operation, route) {
-		return this.runTaskAgent("", workspaceRoot, signal, operation, route);
+		return this.runTaskAgent("", workspaceRoot, signal, operation, route, "Mnemon · Skills");
 	}
 	/**
 	* What one conversation did with skills, for the bars under its turns. A
@@ -12808,7 +13371,7 @@ var MnemonLifecycle = class {
 		const stopCreated = this.ctx.on("agent/created", (({ agent, source }) => {
 			this.install(agent, source);
 		}));
-		for (const agent of this.ctx.agents.roots()) this.install(agent, "adopted");
+		for (const agent of rootAgents(this.ctx.agents, this.ctx.subagents)) this.install(agent, "adopted");
 		return () => {
 			stopChanged?.();
 			stopCreated();
@@ -12988,7 +13551,7 @@ var MnemonLifecycle = class {
 	/** Synthesize a Web Agent Query without borrowing a conversation Agent or its history. */
 	answerTask(sessionId, query, evidence, workspaceRoot, signal = new AbortController().signal) {
 		const root = workspaceRoot?.trim() || this.workspaceRoot(sessionId);
-		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.answer(agent, query, evidence, signal));
+		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.answer(agent, query, evidence, signal), void 0, "Mnemon · Ask Agent");
 	}
 	/** A write the user sent from the page: a space they picked that is switched off comes back on (#387). */
 	remember(sessionId, request, signal = new AbortController().signal) {
@@ -13001,7 +13564,7 @@ var MnemonLifecycle = class {
 		return this.coordinator.manageSource(graph, request);
 	}
 	runRuntimeMaintenanceTask(scope, signal, operation) {
-		return this.runTaskAgent(scope.sessionId ?? "", scope.workspaceId, signal, operation);
+		return this.runTaskAgent(scope.sessionId ?? "", scope.workspaceId, signal, operation, void 0, "Mnemon · Memory maintenance");
 	}
 	/**
 	* Read the merged memory and let a model propose what a human should review.
@@ -13030,12 +13593,12 @@ var MnemonLifecycle = class {
 	mutateDocumentTask(sessionId, request, workspaceRoot, signal = new AbortController().signal) {
 		const root = workspaceRoot?.trim() || this.workspaceRoot(sessionId);
 		if (root === void 0 || root.trim() === "") throw new Error("a selected DSH workspace is required to write a Mnemon Document");
-		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.document(agent, request, signal));
+		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.document(agent, request, signal), void 0, "Mnemon · Document");
 	}
 	archiveDocument(sessionId, id, workspaceRoot, signal = new AbortController().signal) {
 		const root = workspaceRoot?.trim() || this.workspaceRoot(sessionId);
 		if (root === void 0 || root.trim() === "") throw new Error("a selected DSH workspace is required to archive a Mnemon Document");
-		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.archiveDocument(agent, id, signal));
+		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.archiveDocument(agent, id, signal), void 0, "Mnemon · Archive Document");
 	}
 	mutate(sessionId, operation, request, signal = new AbortController().signal) {
 		return this.coordinator.write(this.liveAgent(sessionId), operation, request, signal);
@@ -13046,11 +13609,11 @@ var MnemonLifecycle = class {
 	/** Choose a new Memory Space's Provider under a fresh task Agent, as Ask Agent does without a loaded conversation Agent. */
 	placeProviderTask(sessionId, body, prepared, workspaceRoot, signal = new AbortController().signal) {
 		const root = workspaceRoot?.trim() || this.workspaceRoot(sessionId);
-		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.placeProvider(agent, body, prepared, signal));
+		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.placeProvider(agent, body, prepared, signal), void 0, "Mnemon · Choose memory provider");
 	}
 	maintainMetadata(sessionId, memoryBodyIds, workspaceRoot, signal = new AbortController().signal) {
 		const root = workspaceRoot?.trim() || this.workspaceRoot(sessionId);
-		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.maintainMetadata(agent, memoryBodyIds, signal));
+		return this.runTaskAgent(sessionId, root, signal, (agent) => this.coordinator.maintainMetadata(agent, memoryBodyIds, signal), void 0, "Mnemon · Memory metadata");
 	}
 	async supervise(sessionId, content, idempotencyKey, signal = new AbortController().signal) {
 		const normalizedSessionId = sessionId.trim();
@@ -13062,7 +13625,7 @@ var MnemonLifecycle = class {
 		const normalizedSessionId = sessionId.trim();
 		const root = workspaceRoot?.trim() || this.workspaceRoot(normalizedSessionId);
 		const scopeKey = root === void 0 ? `task:${normalizedSessionId || "global"}` : `task:${resolve(root)}`;
-		return this.superviseResolved(scopeKey, normalizedSessionId, content, idempotencyKey, signal, (operation) => this.runTaskAgent(normalizedSessionId, root, signal, operation));
+		return this.superviseResolved(scopeKey, normalizedSessionId, content, idempotencyKey, signal, (operation) => this.runTaskAgent(normalizedSessionId, root, signal, operation, void 0, "Mnemon · Save to memory"));
 	}
 	async superviseResolved(replayScope, responseSessionId, content, idempotencyKey, signal, withAgent) {
 		if (!this.config.writeEnabled) throw new Error("dsh-mnemon is configured read-only (writeEnabled: false)");
@@ -13116,8 +13679,9 @@ var MnemonLifecycle = class {
 	* is the explicit Web workbench scope, so LiveMnemonRuntime resolves the same
 	* workspace graph without borrowing conversation history or ownership.
 	*/
-	async runTaskAgent(fallbackSessionId, workspaceRoot, signal, operation, route) {
-		const sessionId = randomUUID();
+	async runTaskAgent(fallbackSessionId, workspaceRoot, signal, operation, route, title = "Mnemon · Background task") {
+		const modern = activationOwned(this.ctx.subagents);
+		const sessionId = `mnemon-task-v1-${randomUUID()}`;
 		this.taskAgentIds.add(sessionId);
 		let handle;
 		let failure;
@@ -13128,6 +13692,7 @@ var MnemonLifecycle = class {
 				...creation,
 				signal
 			});
+			if (modern) titleTask(handle.agent, title);
 			if (route !== void 0) try {
 				handle.agent[TASK_ROUTE] = route;
 			} catch {}
@@ -13153,7 +13718,9 @@ var MnemonLifecycle = class {
 	* a turn only while DSH's projection cache holds a record of it, so a finished task
 	* could stay listed as an untitled Ungrouped conversation (#435). No `parentSession`
 	* or `delegationDepth`: the task belongs to no conversation, and its children stay
-	* one level deep.
+	* one level deep. Activation-owned master requires an ordinary root instead;
+	* its persistent task ID and title identify the visible record without enrolling
+	* it in conversation automation. Official rc.1 retains the hidden metadata.
 	*/
 	async taskAgentCreation(fallbackSessionId, workspaceRoot, signal, route) {
 		const baseOptions = this.taskAgentModelOptions(fallbackSessionId, workspaceRoot);
@@ -13171,7 +13738,7 @@ var MnemonLifecycle = class {
 		const workingDirectory = workFrom === void 0 ? void 0 : this.ctx.get("workingDirectory");
 		const meta = {
 			cwd,
-			origin: "subagent",
+			...activationOwned(this.ctx.subagents) ? {} : { origin: "subagent" },
 			...presetId === void 0 ? {} : { agentPreset: presetId }
 		};
 		if (presets === void 0 && typeof workingDirectory?.set !== "function") return {
@@ -13309,11 +13876,15 @@ var MnemonLifecycle = class {
 	}
 	install(agent, source) {
 		if (this.taskAgentIds.has(agent.id) || this.owners.has(agent) || this.children.has(agent)) return;
+		if ((isTaskRecord(agent.id) || this.coordinator.isFinishedTask(agent.id, agent)) && !isCreatingChild(this.ctx.agents, agent)) {
+			this.coordinator.continueTask(agent);
+			return;
+		}
 		if (agent.session.header?.origin === "subagent") {
 			this.installChild(agent);
 			return;
 		}
-		if (!this.ctx.agents.roots().includes(agent)) return;
+		if (!isRootAgent(this.ctx.agents, this.ctx.subagents, agent)) return;
 		const memoryTurn = this.runtimeSource === void 0 ? void 0 : new AgentMemoryTurn(agent, this.runtimeSource);
 		const lifecycle = new MnemonAgentLifecycle(agent, this.coordinator, this.config, this.counters, source, memoryTurn, () => this.runtimeSource?.forAgent(agent).directory);
 		let dispose;
@@ -13343,6 +13914,7 @@ var MnemonLifecycle = class {
 		const parentId = agent.session.header?.parentSession?.trim();
 		const parent = parentId === void 0 || parentId === "" ? void 0 : this.ctx.agents.get(parentId);
 		if (runtime === void 0 || parent === void 0 || parent === agent) return;
+		this.coordinator.inheritTaskContinuation(parent, agent);
 		const parentMemory = this.memoryTurns.get(parent);
 		let delegation;
 		if (parentMemory !== void 0) delegation = parentMemory.delegate();
@@ -14569,12 +15141,15 @@ var SkillEvolution = class {
 		const source = retryingSource(port);
 		const pack = await source.read("evidence-pack", {
 			...input.suggestionId === void 0 ? {} : { suggestionId: input.suggestionId },
+			...input.draftId === void 0 ? {} : { draftId: input.draftId },
 			...input.skill === void 0 ? {} : { skill: input.skill }
 		});
-		const previous = pack.suggestion?.draftId === void 0 ? (await source.read("drafts", {
+		const previousId = input.draftId ?? pack.suggestion?.draftId;
+		const previous = previousId === void 0 ? (await source.read("drafts", {
 			skill: pack.skillName,
+			...pack.skill === void 0 ? {} : { path: pack.skill.path },
 			...input.suggestionId === void 0 ? {} : { suggestionId: input.suggestionId }
-		})).find((draft) => draft.suggestionId === input.suggestionId) : (await source.read("draft", { id: pack.suggestion.draftId })).draft;
+		})).find((draft) => draft.suggestionId === input.suggestionId) : (await source.read("draft", { id: previousId })).draft;
 		const targetRoot = pack.action === "update" ? pack.skill.root : newSkillRoot(this.host.settings(), source, await source.read("catalog"), input.targetRoot ?? previous?.targetRoot ?? pack.suggestion?.targetRoot);
 		const guidance = [...previous?.guidance ?? [], ...input.guidance?.trim() ? [input.guidance.trim()] : []].slice(-8);
 		if (input.suggestionId !== void 0) await source.mutate("suggestion-status", {
@@ -14606,12 +15181,33 @@ var SkillEvolution = class {
 		const settings = this.host.settings();
 		const { pack, targetRoot, guidance } = prepared;
 		let prompt = skillDraftPrompt(pack, guidance, targetRoot);
+		let maxTokens = settings.draftMaxTokens;
+		const attemptedBudgets = [];
 		let draft;
 		for (let attempt = 0; draft === void 0; attempt++) {
-			const parsed = parseSkillDraft((await this.host.runTask(workspace, signal, (task) => this.host.skillTask(task, "Mnemon skill draft", prompt, SKILL_DRAFT_SCHEMA, SKILL_DRAFT_PERSONA, signal, input.route), input.route)).structured);
+			signal.throwIfAborted();
+			attemptedBudgets.push(maxTokens);
+			let answer;
+			try {
+				answer = await this.host.runTask(workspace, signal, (task) => this.host.skillTask(task, "Mnemon skill draft", prompt, SKILL_DRAFT_SCHEMA, SKILL_DRAFT_PERSONA, signal, input.route, maxTokens), input.route);
+				signal.throwIfAborted();
+			} catch (error) {
+				signal.throwIfAborted();
+				if (error instanceof SubagentStoppedError && error.maxTokens !== void 0) attemptedBudgets[attemptedBudgets.length - 1] = error.maxTokens;
+				if (error instanceof SubagentStoppedError && error.stopReason === "max-tokens" && attempt === 0 && settings.draftRetryMaxTokens > maxTokens) {
+					maxTokens = settings.draftRetryMaxTokens;
+					prompt += "\n\nThe previous attempt exhausted its output budget and was discarded. Return a complete SKILL.md from the beginning; keep notes and changes concise.";
+					continue;
+				}
+				const bytes = Buffer.byteLength(pack.skill?.content ?? "", "utf8");
+				throw new Error(`Skill draft failed. Attempted budgets: ${attemptedBudgets.join(", ")} tokens; source SKILL.md: ${bytes} bytes (UTF-8). Adjust skills.draftMaxTokens / skills.draftRetryMaxTokens in Plugins → dsh-mnemon → Skills → Draft generation. Stay within provider/model caps: lower rejected budgets, shorten the skill or use a model with a higher output cap. Reason: ${message(error).slice(0, 100)}`, { cause: error });
+			}
+			const parsed = parseSkillDraft(answer.structured);
 			try {
+				signal.throwIfAborted();
 				draft = await source.mutate("draft-record", {
 					...input.suggestionId === void 0 ? {} : { suggestionId: input.suggestionId },
+					...input.draftId === void 0 ? {} : { draftId: input.draftId },
 					skillName: pack.skillName,
 					content: parsed.content,
 					notes: parsed.notes,
@@ -14620,6 +15216,7 @@ var SkillEvolution = class {
 					...pack.action === "create" ? { targetRoot } : {}
 				}, signal);
 			} catch (error) {
+				signal.throwIfAborted();
 				if (attempt > 0) throw error;
 				prompt += `\n\nYour previous SKILL.md was rejected: ${message(error)}. Return a corrected complete file.`;
 			}
@@ -14640,7 +15237,10 @@ var SkillEvolution = class {
 			else {
 				const baseline = await this.backtest(source, workspace, {
 					skillName: pack.skillName,
-					target: { kind: pack.action === "update" ? "current" : "none" },
+					target: {
+						kind: pack.action === "update" ? "current" : "none",
+						...pack.action === "update" ? { draftId: draft.id } : {}
+					},
 					...input.route === void 0 ? {} : { route: input.route }
 				});
 				await source.mutate("run-link", {
@@ -15176,14 +15776,16 @@ async function skillAssistance(runtime, lifecycle, operation, input, signal) {
 				"user-agents"
 			].includes(root)) throw new Error("unknown skill root: " + root);
 			const suggestionId = optionalString(input.suggestionId, "suggestionId");
+			const draftId = optionalString(input.draftId, "draftId");
 			const skill = optionalString(input.skill, "skill");
-			if (suggestionId === void 0 && skill === void 0) throw new Error("a draft needs a suggestion or a skill");
+			if (suggestionId === void 0 && draftId === void 0 && skill === void 0) throw new Error("a draft needs a suggestion, a draft, or a skill");
 			const guidance = optionalString(input.guidance, "guidance");
 			if (guidance !== void 0 && guidance.length > 4e3) throw new Error("guidance is too long (max 4000 characters)");
 			const draftRoute = modelRoute(input);
 			return skills.draft(source, workspaceRoot, {
 				...suggestionId === void 0 ? {} : { suggestionId },
 				...skill === void 0 ? {} : { skill },
+				...draftId === void 0 ? {} : { draftId },
 				...guidance === void 0 ? {} : { guidance },
 				...root === void 0 ? {} : { targetRoot: root },
 				...draftRoute === void 0 ? {} : { route: draftRoute }
@@ -16415,7 +17017,7 @@ function registerDocumentTools(ctx, { requireSource, config, sourceAction }, coo
 			const agent = requireAgent(exec);
 			if (args.action === "archive") {
 				requireSource(exec, "documents", "archive");
-				if (isSubagent(agent)) throw new Error("idle document workers cannot cold-archive directly");
+				if (isSubagent(agent) && !coordinator.isUserContinuation(agent)) throw new Error("idle document workers cannot cold-archive directly");
 				if (args.id === void 0) throw new Error("document id is required for archive");
 				return Promise.resolve(coordinator.archiveDocument(agent, args.id, exec.signal)).then(documentReceipt);
 			}
@@ -18885,7 +19487,7 @@ function apply(rawContext, rawConfig = {}) {
 		settings: () => skillSettings.get(),
 		source: (agent) => skillsSourceFor(runtime, agent),
 		runTask: (workspaceRoot, signal, operation, route) => lifecycle.runSkillTask(workspaceRoot, signal, operation, route),
-		skillTask: (parent, label, prompt, schema, persona, signal) => coordinator.skillTask(parent, label, prompt, schema, persona, signal, taskRoute(parent))
+		skillTask: (parent, label, prompt, schema, persona, signal, _route, maxTokens) => coordinator.skillTask(parent, label, prompt, schema, persona, signal, taskRoute(parent), maxTokens)
 	});
 	lifecycle.useSkillEvolution(skills);
 	ctx.effect(() => {