dsh-mnemon 0.5.41 → 0.5.43

package/lib/index.js

@@ -7,7 +7,7 @@ import z from "@deepseek-ai/schemastery";
 import { basename, delimiter, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { resolveEmbedding, resolvePersistenceStrategy, resolveRecallQuality } from "dsh-mnemon-source-memory-spaces";
 import { CATEGORIES, DEFAULT_EMBEDDING_ENDPOINT, DEFAULT_EMBEDDING_MODEL, DEFAULT_EMBEDDING_PROTOCOL, EDGE_TYPES, MEMORY_PLACEMENT_CAPABILITIES, MEMORY_PROVIDER_REGISTRY_FILE, MEMORY_SPACES_DIRECTORY, MEMORY_SPACE_DATABASE_FILE, MEMORY_SPACE_ID_PATTERN, MEMORY_SPACE_NAME_MAX_LENGTH, MEMORY_SPACE_REGISTRY_FILE, MNEMON_ACTIVE_STORE_FILE, MNEMON_EMBEDDING_PROTOCOLS, SOURCES, parseMemorySpaceRegistry, summarizeMemoryProviderRegistry, summarizeMemorySpaceRegistry } from "dsh-mnemon-source-memory-spaces/contracts";
-import { RUNTIME_ARCHIVE_DIRECTORY, RUNTIME_DIRECTORY, RUNTIME_ENTRY_DELIMITER, RUNTIME_ENTRY_MAX_BYTES, RUNTIME_LOCK_FILE, RUNTIME_LOCK_STALE_MS, RUNTIME_MEMORIES_FILE, RUNTIME_MEMORY_LIMITS, RUNTIME_MEMORY_LIMIT_MAX_BYTES, RUNTIME_MEMORY_VERSION, RUNTIME_PROJECTION_FILES, parseRuntimeBranches, runtimeBytes, runtimeProjection, summarizeRuntimeMemories } from "dsh-mnemon-source-runtime/contracts";
+import { RUNTIME_ARCHIVE_DIRECTORY, RUNTIME_DIRECTORY, RUNTIME_ENTRY_DELIMITER, RUNTIME_ENTRY_MAX_BYTES, RUNTIME_LOCK_FILE, RUNTIME_LOCK_STALE_MS, RUNTIME_MEMORIES_FILE, RUNTIME_MEMORY_LIMITS, RUNTIME_MEMORY_LIMIT_MAX_BYTES, RUNTIME_MEMORY_VERSION, RUNTIME_PROJECTION_FILES, assertRuntimePinnedBudget, parseRuntimeBranches, runtimeBytes, runtimeProjection, summarizeRuntimeMemories } from "dsh-mnemon-source-runtime/contracts";
 import { createHash, randomUUID } from "node:crypto";
 import fs, { accessSync, chmodSync, closeSync, constants, copyFileSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { homedir, hostname } from "node:os";
@@ -23,6 +23,8 @@ import { Agent, request as request$1 } from "node:https";
 import { connect } from "node:tls";
 import { readFile, stat } from "node:fs/promises";
 import { AsyncLocalStorage } from "node:async_hooks";
+import { setTimeout as setTimeout$1 } from "node:timers/promises";
+import * as SkillsContracts from "dsh-mnemon-source-skills/contracts";
 import { z as z$1 } from "zod";
 import { Remote, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import { isVolatile } from "@deepseek-ai/cosmokit";
@@ -389,6 +391,7 @@ const DEFAULT_SKILLS_CONFIG = Object.freeze({
 	allowUpdate: true,
 	targetScope: "user",
 	autoBacktest: true,
+	autoAdopt: false,
 	draftMaxTokens: 32768,
 	draftRetryMaxTokens: 65536,
 	hints: true,
@@ -419,7 +422,7 @@ const schema = z.object({
 const legacySchema = z.object({ sources: z.dict(z.object({ enabled: z.boolean() })).default({}) });
 const ENTRY_ID$1 = /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,299}$/u;
 const clone$2 = (value) => JSON.parse(JSON.stringify(value));
-function record$10(value) {
+function record$11(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("Plugin configuration must be an object");
 	const json = JSON.stringify(value);
 	if (json.length > 65536) throw new Error("Plugin configuration exceeds 64 KiB");
@@ -433,13 +436,13 @@ function record$10(value) {
 }
 function preferences(value) {
 	if (value.strategyTypeId !== void 0 && !/^[a-z][a-z0-9-]{0,127}$/u.test(value.strategyTypeId)) throw new Error("Invalid Strategy type id");
-	const entries = record$10(value.entries ?? {});
+	const entries = record$11(value.entries ?? {});
 	if (Object.keys(entries).length > 64) throw new Error("At most 64 memory plugin Entries can be configured");
 	for (const [entryId, item] of Object.entries(entries)) {
 		if (!ENTRY_ID$1.test(entryId)) throw new Error("Invalid memory plugin Entry id");
-		const candidate = record$10(item);
+		const candidate = record$11(item);
 		if (candidate.enabled !== void 0 && typeof candidate.enabled !== "boolean") throw new Error("Plugin enabled must be boolean");
-		record$10(candidate.config);
+		record$11(candidate.config);
 	}
 	return clone$2(value);
 }
@@ -483,6 +486,7 @@ const SkillsConfig = z.object({
 		"project"
 	]).default(DEFAULT_SKILLS_CONFIG.targetScope),
 	autoBacktest: z.boolean().default(DEFAULT_SKILLS_CONFIG.autoBacktest),
+	autoAdopt: z.boolean().default(DEFAULT_SKILLS_CONFIG.autoAdopt),
 	draftMaxTokens: z.number().step(1).min(128).max(131072).default(DEFAULT_SKILLS_CONFIG.draftMaxTokens),
 	draftRetryMaxTokens: z.number().step(1).min(128).max(131072).default(DEFAULT_SKILLS_CONFIG.draftRetryMaxTokens),
 	hints: z.boolean().default(DEFAULT_SKILLS_CONFIG.hints),
@@ -539,6 +543,7 @@ const RecallQualitySchema = z.object({
 	maxUnknownResults: z.number().step(1).min(0).max(50).default(DEFAULT_RECALL_MAX_UNKNOWN_RESULTS)
 });
 const RuntimeMemorySchema = z.object({
+	inheritToSubagents: z.boolean().default(false),
 	memoryLimitBytes: z.number().step(1).min(1).max(MAX_RUNTIME_MEMORY_LIMIT_BYTES).default(DEFAULT_RUNTIME_MEMORY_LIMIT_BYTES),
 	userLimitBytes: z.number().step(1).min(1).max(MAX_RUNTIME_MEMORY_LIMIT_BYTES).default(DEFAULT_RUNTIME_USER_LIMIT_BYTES),
 	maintenanceMaxTokens: z.number().step(1).min(1).max(MAX_RUNTIME_MAINTENANCE_MAX_TOKENS).default(DEFAULT_RUNTIME_MAINTENANCE_MAX_TOKENS)
@@ -595,6 +600,7 @@ const Config = z.object({
 	timeoutMs: z.number().step(1).min(100).max(12e4).default(DEFAULT_TIMEOUT_MS),
 	defaultRecallLimit: z.number().step(1).min(1).max(50).default(10),
 	runtimeMemory: RuntimeMemorySchema.default({
+		inheritToSubagents: false,
 		memoryLimitBytes: DEFAULT_RUNTIME_MEMORY_LIMIT_BYTES,
 		userLimitBytes: DEFAULT_RUNTIME_USER_LIMIT_BYTES,
 		maintenanceMaxTokens: DEFAULT_RUNTIME_MAINTENANCE_MAX_TOKENS
@@ -719,6 +725,8 @@ function resolveTaskAgentModel(value) {
 	};
 }
 function resolveRuntimeMemory(value) {
+	const inheritToSubagents = value?.inheritToSubagents ?? false;
+	if (typeof inheritToSubagents !== "boolean") throw new Error("dsh-mnemon: Runtime inheritToSubagents must be a boolean");
 	const memoryLimitBytes = value?.memoryLimitBytes ?? DEFAULT_RUNTIME_MEMORY_LIMIT_BYTES;
 	const userLimitBytes = value?.userLimitBytes ?? DEFAULT_RUNTIME_USER_LIMIT_BYTES;
 	const maintenanceMaxTokens = value?.maintenanceMaxTokens ?? 8192;
@@ -726,6 +734,7 @@ function resolveRuntimeMemory(value) {
 	if (!Number.isInteger(userLimitBytes) || userLimitBytes < 1 || userLimitBytes > MAX_RUNTIME_MEMORY_LIMIT_BYTES) throw new Error(`dsh-mnemon: Runtime USER.md limit must be an integer within 1..${MAX_RUNTIME_MEMORY_LIMIT_BYTES} bytes`);
 	if (!Number.isInteger(maintenanceMaxTokens) || maintenanceMaxTokens < 1 || maintenanceMaxTokens > 1e6) throw new Error(`dsh-mnemon: Runtime maintenance maxTokens must be an integer within 1..${MAX_RUNTIME_MAINTENANCE_MAX_TOKENS}`);
 	return {
+		inheritToSubagents,
 		memoryLimitBytes,
 		userLimitBytes,
 		maintenanceMaxTokens
@@ -1003,7 +1012,7 @@ function createStorageRoot(config, workspaceRoot) {
 const MNEMON_MACHINE_DIRECTORY = "state";
 const MNEMON_MACHINE_FILE = "machine.json";
 const MNEMON_MACHINE_VERSION = 1;
-function record$9(value) {
+function record$10(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 /** The name a fresh identity carries: the host name, or a neutral fallback. */
@@ -1085,7 +1094,7 @@ var MnemonMachineStore = class {
 		} catch {
 			return;
 		}
-		const parsed = record$9(value);
+		const parsed = record$10(value);
 		if (parsed?.version !== MNEMON_MACHINE_VERSION) return void 0;
 		if (typeof parsed.id !== "string" || parsed.id.trim() === "") return void 0;
 		if (typeof parsed.label !== "string" || parsed.label.trim() === "") return void 0;
@@ -2059,7 +2068,7 @@ const COMPONENT_ORDER = MNEMON_PACK_COMPONENTS;
 */
 const CONTENT_HASH = /^[a-f0-9]{64}$/u;
 const SQLITE_HEADER = Buffer.from("SQLite format 3\0", "binary");
-function record$8(value) {
+function record$9(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function utf8(bytes, label) {
@@ -2122,7 +2131,7 @@ function componentsForScope(scope) {
 }
 /** Exported so the sync channel can read the manifest a commit holds without unpacking the archive. */
 function parseManifest(value) {
-	const manifest = record$8(value);
+	const manifest = record$9(value);
 	if (manifest?.format !== "mnemonpack" || manifest.version !== 1) throw new Error("unsupported Mnemon Pack format or version");
 	if (manifest.scope !== "full" && !COMPONENT_ORDER.includes(manifest.scope)) throw new Error("Mnemon Pack scope is invalid");
 	if (typeof manifest.exportedAt !== "string") throw new Error("Mnemon Pack exportedAt is invalid");
@@ -2131,11 +2140,11 @@ function parseManifest(value) {
 	if (components.length === 0 || new Set(components).size !== components.length || components.some((component) => !COMPONENT_ORDER.includes(component))) throw new Error("Mnemon Pack components are invalid");
 	const expected = componentsForScope(manifest.scope);
 	if (components.length !== expected.length || expected.some((component) => !components.includes(component))) throw new Error("Mnemon Pack scope does not match its components");
-	const source = record$8(manifest.source);
+	const source = record$9(manifest.source);
 	if (source?.plugin !== "dsh-mnemon" || typeof source.pluginVersion !== "string") throw new Error("Mnemon Pack source is invalid");
 	if (!Array.isArray(manifest.summary)) throw new Error("Mnemon Pack summary is invalid");
 	const summary = manifest.summary.map((entry) => {
-		const item = record$8(entry);
+		const item = record$9(entry);
 		const component = item?.component;
 		if (!COMPONENT_ORDER.includes(component) || !Number.isSafeInteger(item?.files) || !Number.isSafeInteger(item?.bytes) || !Number.isSafeInteger(item?.items) || Number(item?.files) < 0 || Number(item?.bytes) < 0 || Number(item?.items) < 0) throw new Error("Mnemon Pack summary entry is invalid");
 		return {
@@ -2161,7 +2170,7 @@ function parseManifest(value) {
 /** The sync channel reads its machine identity with this parser; no Pack carries one. */
 function parseMachineIdentity(value) {
 	if (value === void 0 || value === null) return void 0;
-	const machine = record$8(value);
+	const machine = record$9(value);
 	if (typeof machine?.id !== "string" || machine.id.trim() === "" || typeof machine.label !== "string" || typeof machine.createdAt !== "string") throw new Error("Mnemon Pack machine identity is invalid");
 	return {
 		id: machine.id,
@@ -2171,7 +2180,7 @@ function parseMachineIdentity(value) {
 }
 function parseEntryOrigin(value) {
 	if (value === void 0 || value === null) return void 0;
-	const origin = record$8(value);
+	const origin = record$9(value);
 	if (typeof origin?.machine !== "string" || typeof origin.label !== "string" || typeof origin.at !== "string") return void 0;
 	return {
 		machine: origin.machine,
@@ -2216,8 +2225,8 @@ function parseArchive(base64, runtimeLimits = RUNTIME_MEMORY_LIMITS) {
 		if (path !== "manifest.json" && path !== "checksums.json" && !allowedPayloadPath(path)) throw new Error(`unsupported Mnemon Pack entry: ${path}`);
 	}
 	const manifest = parseManifest(json$1(files["manifest.json"], "manifest.json"));
-	const checksumValue = record$8(json$1(files["checksums.json"], "checksums.json"));
-	const checksumFiles = record$8(checksumValue?.files);
+	const checksumValue = record$9(json$1(files["checksums.json"], "checksums.json"));
+	const checksumFiles = record$9(checksumValue?.files);
 	if (checksumValue?.algorithm !== "sha256" || checksumFiles === void 0) throw new Error("Mnemon Pack checksums are invalid");
 	const payloadNames = names.filter((path) => path.startsWith("payload/")).sort();
 	if (Object.keys(checksumFiles).length !== payloadNames.length) throw new Error("Mnemon Pack checksum inventory does not match the payload");
@@ -2240,16 +2249,17 @@ function parseArchive(base64, runtimeLimits = RUNTIME_MEMORY_LIMITS) {
 	};
 }
 function parseRuntime(value, limits = RUNTIME_MEMORY_LIMITS) {
-	const source = record$8(value);
+	const source = record$9(value);
 	if (source?.version !== RUNTIME_MEMORY_VERSION || !Array.isArray(source.entries)) throw new Error("runtime memories.json is invalid");
 	const entries = source.entries.map((raw) => {
-		const entry = record$8(raw);
+		const entry = record$9(raw);
 		if (typeof entry?.content !== "string" || entry.target !== "memory" && entry.target !== "user" || ![
 			"critical",
 			"normal",
 			"low"
 		].includes(String(entry.importance))) throw new Error("runtime memories.json contains an invalid entry");
 		if (typeof entry.created_at !== "string" || typeof entry.updated_at !== "string") throw new Error("runtime memories.json contains invalid timestamps");
+		if (entry.pinned !== void 0 && typeof entry.pinned !== "boolean") throw new Error("runtime memories.json contains invalid pin state");
 		const content = entry.content.trim().replace(/\s+/gu, " ");
 		if (content === "" || content.includes("§") || Buffer.byteLength(content, "utf8") > RUNTIME_ENTRY_MAX_BYTES) throw new Error("runtime memories.json contains invalid content");
 		const branches = entry.target === "memory" ? parseRuntimeBranches(entry.branches) : void 0;
@@ -2260,10 +2270,12 @@ function parseRuntime(value, limits = RUNTIME_MEMORY_LIMITS) {
 			importance: entry.importance,
 			created_at: entry.created_at,
 			updated_at: entry.updated_at,
+			...entry.pinned === void 0 ? {} : { pinned: entry.pinned },
 			...branches === void 0 ? {} : { branches },
 			...origin === void 0 ? {} : { origin }
 		};
 	});
+	assertRuntimePinnedBudget(entries);
 	for (const target of ["user", "memory"]) {
 		const used = runtimeBytes(entries, target);
 		if (used > limits[target]) throw new Error(`runtime ${target} memory holds ${used} bytes and exceeds its ${limits[target]} byte limit`);
@@ -2280,12 +2292,12 @@ function emptyTombstones() {
 	};
 }
 function parseTombstones(value) {
-	const source = record$8(value);
+	const source = record$9(value);
 	if (source?.version !== 1 || !Array.isArray(source.tombstones)) throw new Error("runtime tombstones.json is invalid");
 	return {
 		version: 1,
 		tombstones: source.tombstones.map((raw) => {
-			const tombstone = record$8(raw);
+			const tombstone = record$9(raw);
 			if (tombstone?.target !== "memory" && tombstone?.target !== "user") throw new Error("runtime tombstones.json contains an invalid entry");
 			if (typeof tombstone.contentHash !== "string" || !CONTENT_HASH.test(tombstone.contentHash) || typeof tombstone.deletedAt !== "string") throw new Error("runtime tombstones.json contains an invalid entry");
 			return {
@@ -2476,6 +2488,7 @@ function archiveRuntimeOverflow(stagedRuntime, entries) {
 }
 /** Retain the same hot set on both machines, without asking a model to rewrite evidence. */
 function fitMergedRuntime(entries, limits) {
+	if (runtimeBytes(entries.filter((entry) => entry.pinned === true), "memory") > limits.memory) throw new Error("Pinned runtime entries exceed the merge capacity. Unpin entries or increase the capacity; no data was changed.");
 	if (runtimeBytes(entries, "memory") <= limits.memory) return {
 		entries,
 		archived: []
@@ -2486,7 +2499,7 @@ function fitMergedRuntime(entries, limits) {
 		low: 0
 	};
 	const compare = (left, right) => left < right ? -1 : left > right ? 1 : 0;
-	const ranked = entries.filter((entry) => entry.target === "memory").sort((left, right) => importance[right.importance] - importance[left.importance] || compare(right.updated_at, left.updated_at) || compare(entryKey(left), entryKey(right)));
+	const ranked = entries.filter((entry) => entry.target === "memory").sort((left, right) => Number(right.pinned === true) - Number(left.pinned === true) || importance[right.importance] - importance[left.importance] || compare(right.updated_at, left.updated_at) || compare(entryKey(left), entryKey(right)));
 	const kept = [];
 	const archived = [];
 	for (const entry of ranked) if (runtimeBytes([...kept, entry], "memory") <= limits.memory) kept.push(entry);
@@ -2700,11 +2713,11 @@ function emptyRuntimeIndex() {
 }
 /** A damaged index only costs forgotten deletions, so it degrades instead of failing an export. */
 function parseRuntimeIndex(value) {
-	const source = record$8(value);
+	const source = record$9(value);
 	if (source?.version !== 1 || !Array.isArray(source.entries)) return emptyRuntimeIndex();
 	const entries = [];
 	for (const raw of source.entries) {
-		const entry = record$8(raw);
+		const entry = record$9(raw);
 		if (entry?.target !== "memory" && entry?.target !== "user") continue;
 		if (typeof entry.contentHash !== "string" || !/^[a-f0-9]{64}$/u.test(entry.contentHash)) continue;
 		entries.push({
@@ -2835,7 +2848,14 @@ function mergeRuntime(root, pack, runtimeLimits, options = {}) {
 			}
 			for (const tombstone of hidden) if (!revived.includes(tombstone)) revived.push(tombstone);
 		}
-		if (keys.has(key)) continue;
+		if (keys.has(key)) {
+			const existing = entries.find((candidate) => entryKey(candidate) === key);
+			if (entry.pinned !== void 0 && (existing.pinned === void 0 || entry.updated_at > existing.updated_at)) {
+				existing.pinned = entry.pinned;
+				if (entry.updated_at > existing.updated_at) existing.updated_at = entry.updated_at;
+			}
+			continue;
+		}
 		keys.add(key);
 		entries.push(entry);
 		incomingKeys.add(key);
@@ -3356,7 +3376,7 @@ const STATUSES = [
 	"accepted",
 	"rejected"
 ];
-function record$7(value) {
+function record$8(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function text$2(value, limit = MAX_REVIEW_TEXT) {
@@ -3368,7 +3388,7 @@ function strings$1(value, limit = 64) {
 function parseOpinions(value) {
 	if (!Array.isArray(value)) return [];
 	return value.flatMap((raw) => {
-		const opinion = record$7(raw);
+		const opinion = record$8(raw);
 		if (opinion === void 0 || typeof opinion.id !== "string" || typeof opinion.text !== "string") return [];
 		return [{
 			id: opinion.id,
@@ -3380,11 +3400,11 @@ function parseOpinions(value) {
 }
 /** A proposal that no longer parses is dropped rather than failing the whole ledger. */
 function parseEntry(value) {
-	const entry = record$7(value);
+	const entry = record$8(value);
 	if (entry === void 0 || typeof entry.id !== "string" || entry.id.trim() === "") return void 0;
 	if (typeof entry.status !== "string" || !STATUSES.includes(entry.status)) return void 0;
 	if (!Array.isArray(entry.operations)) return void 0;
-	const machine = record$7(entry.machine) ?? {};
+	const machine = record$8(entry.machine) ?? {};
 	const createdAt = typeof entry.createdAt === "string" ? entry.createdAt : (/* @__PURE__ */ new Date()).toISOString();
 	return {
 		id: entry.id,
@@ -3534,7 +3554,7 @@ var MnemonReviewLedger = class {
 			version: 1,
 			entries: []
 		};
-		const file = record$7(JSON.parse(readFileSync(this.path(), "utf8")));
+		const file = record$8(JSON.parse(readFileSync(this.path(), "utf8")));
 		if (file?.version !== 1 || !Array.isArray(file.entries)) throw new Error("review ledger is invalid: " + this.path());
 		return {
 			version: 1,
@@ -3985,7 +4005,7 @@ const MNEMON_GITHUB_MAX_INTERVAL_MS = 6e4;
 const MNEMON_GITHUB_FLOW_LIMIT_MS = 36e5;
 const MNEMON_GITHUB_USER_AGENT = "dsh-mnemon-sync";
 const DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
-function record$6(value) {
+function record$7(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function text$1(value) {
@@ -3993,7 +4013,7 @@ function text$1(value) {
 }
 /** GitHub answers a refused request with a `error` code or an API `message`. */
 function codeOf(body) {
-	const fields = record$6(body);
+	const fields = record$7(body);
 	return text$1(fields?.error) ?? text$1(fields?.message);
 }
 /** A positive count GitHub sends as a JSON number, or as a string in a form-encoded answer. */
@@ -4008,7 +4028,7 @@ const FIELD_NAME = /^[A-Za-z_][A-Za-z0-9_]{0,63}$/u;
 * device code or a token. Enough to tell a proxy's HTML page from a reply that lost a field.
 */
 function shapeOf(answer) {
-	const keys = Object.keys(record$6(answer.body) ?? {});
+	const keys = Object.keys(record$7(answer.body) ?? {});
 	const names = keys.filter((key) => FIELD_NAME.test(key)).slice(0, 8);
 	const listed = keys.length > names.length ? [...names, String(keys.length - names.length) + " other"] : names;
 	return "HTTP " + String(answer.status) + ", content-type " + (answer.type ?? "none") + ", fields: " + (listed.length === 0 ? "none" : listed.join(", "));
@@ -4020,9 +4040,9 @@ function failure$3(action, status, body) {
 }
 /** Read one grant out of a stored record, refusing anything else. */
 function githubGrantFromRecord(record_) {
-	const fields = record$6(record_);
+	const fields = record$7(record_);
 	if (fields?.kind !== "grant") return void 0;
-	const payload = record$6(fields.payload);
+	const payload = record$7(fields.payload);
 	if (payload?.version !== 1) return void 0;
 	const accessToken = text$1(payload.accessToken);
 	if (accessToken === void 0) return void 0;
@@ -4036,13 +4056,13 @@ function githubGrantFromRecord(record_) {
 	};
 }
 function repositoryOf(value) {
-	const fields = record$6(value);
+	const fields = record$7(value);
 	const fullName = text$1(fields?.full_name);
 	const url = text$1(fields?.clone_url);
 	const name = text$1(fields?.name);
 	if (fullName === void 0 || url === void 0 || name === void 0) return void 0;
-	const owner = record$6(fields?.owner);
-	const permissions = record$6(fields?.permissions);
+	const owner = record$7(fields?.owner);
+	const permissions = record$7(fields?.permissions);
 	return {
 		name,
 		fullName,
@@ -4155,7 +4175,7 @@ var MnemonGitHubAuth = class {
 			throw new Error("the GitHub device code request could not reach GitHub: " + describeTransportError(error));
 		}
 		if (answer.status !== 200) throw failure$3("the GitHub device code request", answer.status, answer.body);
-		const fields = record$6(answer.body);
+		const fields = record$7(answer.body);
 		const deviceCode = text$1(fields?.device_code);
 		const userCode = text$1(fields?.user_code);
 		const verificationUri = text$1(fields?.verification_uri);
@@ -4204,7 +4224,7 @@ var MnemonGitHubAuth = class {
 				message: describeTransportError(error)
 			};
 		}
-		const fields = record$6(answer.body);
+		const fields = record$7(answer.body);
 		const code = text$1(fields?.error);
 		if (code === void 0) {
 			const accessToken = text$1(fields?.access_token);
@@ -4275,7 +4295,7 @@ var MnemonGitHubAuth = class {
 				...signal === void 0 ? {} : { signal }
 			});
 			if (status !== 200) return void 0;
-			return text$1(record$6(body)?.login);
+			return text$1(record$7(body)?.login);
 		} catch {
 			return;
 		}
@@ -4401,7 +4421,7 @@ const SETTING_KEYS = [
 	"autoBackupMinutes"
 ];
 const REPOSITORY_HINT = "sync repository must be an https:// or ssh:// URL, a git@host:path address, or an absolute local path";
-function record$5(value) {
+function record$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function known(key) {
@@ -4505,7 +4525,7 @@ var MnemonSyncSettingsStore = class {
 		} catch {
 			throw new Error("sync configuration is not valid JSON");
 		}
-		const stored = record$5(parsed);
+		const stored = record$6(parsed);
 		if (stored === void 0) throw new Error("sync configuration is not a JSON object");
 		for (const key of Object.keys(stored)) if (!known(key)) throw new Error("sync configuration has an unknown field: " + key);
 		const settings = this.defaults();
@@ -4552,7 +4572,7 @@ var MnemonSyncSettingsStore = class {
 	* turns the automatic backup off.
 	*/
 	patch(patch) {
-		const fields = record$5(patch);
+		const fields = record$6(patch);
 		if (fields === void 0) throw new Error("sync configuration must be an object");
 		for (const key of Object.keys(fields)) if (!known(key)) throw new Error("unknown sync setting: " + key);
 		const next = { ...this.read() };
@@ -4788,7 +4808,7 @@ function remoteFailure(message) {
 function rejectedPush(output) {
 	return /\[rejected\]|fetch first|non-fast-forward/iu.test(output);
 }
-function record$4(value) {
+function record$5(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function tail(output) {
@@ -4853,7 +4873,7 @@ const TIMESTAMP_FIELDS = /* @__PURE__ */ new Set(["exportedAt", "pushedAt"]);
 /** The same manifest without its timestamps describes the same payload. */
 function withoutTimestamps(value) {
 	if (Array.isArray(value)) return value.map(withoutTimestamps);
-	const parsed = record$4(value);
+	const parsed = record$5(value);
 	if (parsed === void 0) return value;
 	return Object.fromEntries(Object.entries(parsed).filter(([key]) => !TIMESTAMP_FIELDS.has(key)).map(([key, item]) => [key, withoutTimestamps(item)]));
 }
@@ -4866,7 +4886,7 @@ function manifestIdentity(bytes) {
 	} catch {
 		return;
 	}
-	return record$4(value) === void 0 ? void 0 : JSON.stringify(withoutTimestamps(value));
+	return record$5(value) === void 0 ? void 0 : JSON.stringify(withoutTimestamps(value));
 }
 /**
 * Whether the mirror already holds exactly this payload. Every push re-exports
@@ -5071,7 +5091,20 @@ function readFiles(root, limit = MAX_PAYLOAD_BYTES) {
 function unpack(archive) {
 	let entries;
 	try {
-		entries = unzipSync(archive);
+		if (archive.byteLength > 268435456) throw new Error("compressed archive exceeds safety limit");
+		let expandedBytes = 0;
+		let fileCount = 0;
+		entries = unzipSync(archive, { filter(info) {
+			const path = info.name;
+			const normalized = path.endsWith("/") ? path.slice(0, -1) : path;
+			if (path.includes("\\") || path.startsWith("/") || /^[a-z]:/i.test(path) || path.includes("\0") || normalized.split("/").some((part) => !part || part === "." || part === "..")) throw new Error("unsafe archive path");
+			if (path.endsWith("/")) return false;
+			if (info.compression === 0 && info.size !== info.originalSize) throw new Error("invalid stored archive entry size");
+			expandedBytes += info.originalSize;
+			fileCount += 1;
+			if (!Number.isSafeInteger(info.originalSize) || info.originalSize < 0 || info.originalSize > 134217728 || expandedBytes > 268435456 || fileCount > 4096) throw new Error("expanded archive exceeds safety limit");
+			return true;
+		} });
 	} catch {
 		throw new Error("the Mnemon payload is not a readable archive");
 	}
@@ -5229,7 +5262,7 @@ var MnemonGitSync = class {
 	}
 	async configure(patch) {
 		const previous = this.store.read();
-		const fields = record$4(patch);
+		const fields = record$5(patch);
 		const { machineLabel: name, ...settings } = fields ?? {};
 		const naming = fields !== void 0 && "machineLabel" in fields;
 		if (naming && name !== null && name !== "") machineLabel(name);
@@ -5437,7 +5470,7 @@ var MnemonGitSync = class {
 	/** When memory last travelled through this channel, or nothing when it never did. */
 	lastRun() {
 		try {
-			const value = record$4(JSON.parse(readFileSync(this.lastRunPath(), "utf8")));
+			const value = record$5(JSON.parse(readFileSync(this.lastRunPath(), "utf8")));
 			if (value === void 0 || typeof value.at !== "string" || typeof value.commit !== "string") return void 0;
 			if (value.kind !== "sync" && value.kind !== "merge") return void 0;
 			return {
@@ -5475,13 +5508,13 @@ var MnemonGitSync = class {
 	async agreedDocuments(settings, tip, signal) {
 		let value;
 		try {
-			value = record$4(JSON.parse(readFileSync(this.basePath(), "utf8")));
+			value = record$5(JSON.parse(readFileSync(this.basePath(), "utf8")));
 		} catch {
 			value = void 0;
 		}
 		if (value === void 0) return this.lastRunDocuments(settings, tip, signal);
 		if (value.version !== 1 || value.scope !== this.agreementScope(settings)) return void 0;
-		const documents = record$4(value.documents);
+		const documents = record$5(value.documents);
 		if (typeof value.commit !== "string" || !AGREED_COMMIT.test(value.commit) || documents === void 0) return void 0;
 		if ((await this.git([
 			"merge-base",
@@ -5928,9 +5961,9 @@ var MnemonGitSync = class {
 		let machine;
 		let pushedAt;
 		try {
-			const raw = record$4(parseJson(bytes, "the backup manifest"));
+			const raw = record$5(parseJson(bytes, "the backup manifest"));
 			if (raw === void 0) return void 0;
-			const extension = record$4(raw[SYNC_EXTENSION]);
+			const extension = record$5(raw[SYNC_EXTENSION]);
 			pushedAt = typeof extension?.pushedAt === "string" ? extension.pushedAt : void 0;
 			machine = extensionMachine(extension);
 			manifest = parseManifest(raw);
@@ -6237,11 +6270,11 @@ var MnemonGitSync = class {
 		if (manifestBytes === void 0 || checksumBytes === void 0) return void 0;
 		if (manifestBytes.byteLength > MAX_MANIFEST_BYTES) throw new Error("the remote Mnemon manifest exceeds the safety limit");
 		for (const path of Object.keys(files)) if (path !== MANIFEST && path !== CHECKSUMS && !path.startsWith("payload/")) throw new Error("the remote Mnemon payload holds an unexpected file: " + path);
-		const parsed = record$4(parseJson(manifestBytes, "the remote Mnemon manifest"));
+		const parsed = record$5(parseJson(manifestBytes, "the remote Mnemon manifest"));
 		if (parsed === void 0) throw new Error("the remote Mnemon manifest is not a JSON object");
 		if (parsed.format !== "mnemonpack" || parsed.version !== 1) throw new Error("the remote Mnemon manifest is not a supported Mnemon Pack");
-		const checksums = record$4(parseJson(checksumBytes, "the remote Mnemon checksum inventory"));
-		const inventory = record$4(checksums?.files);
+		const checksums = record$5(parseJson(checksumBytes, "the remote Mnemon checksum inventory"));
+		const inventory = record$5(checksums?.files);
 		if (checksums?.algorithm !== "sha256" || inventory === void 0) throw new Error("the remote Mnemon checksum inventory is invalid");
 		for (const [path, bytes] of Object.entries(files)) {
 			if (path === MANIFEST || path === CHECKSUMS) continue;
@@ -6250,7 +6283,7 @@ var MnemonGitSync = class {
 			if (expected !== sha256Hex(bytes)) throw new Error("the remote Mnemon payload failed its checksum: " + path);
 		}
 		for (const path of Object.keys(inventory)) if (files[path] === void 0) throw new Error("the remote Mnemon payload is missing a checksummed file: " + path);
-		const extension = record$4(parsed[SYNC_EXTENSION]);
+		const extension = record$5(parsed[SYNC_EXTENSION]);
 		const pushedAt = typeof extension?.pushedAt === "string" ? extension.pushedAt : void 0;
 		const machine = extensionMachine(extension);
 		const archive = zipSync(files, {
@@ -6471,7 +6504,7 @@ function abandoned(path, now) {
 	}
 	if (age > STALE_LOCK_MS) return true;
 	try {
-		const pid = record$4(JSON.parse(readFileSync(join(path, LOCK_OWNER), "utf8")))?.pid;
+		const pid = record$5(JSON.parse(readFileSync(join(path, LOCK_OWNER), "utf8")))?.pid;
 		return typeof pid === "number" && Number.isInteger(pid) && pid > 0 && pid !== process.pid && !processAlive(pid);
 	} catch {
 		return age > OWNERLESS_LOCK_MS;
@@ -7992,6 +8025,7 @@ function registerCommands(commands, service, coordinator) {
 const GUIDANCE_SECTION_NAME = "mnemon:routing";
 const RUNTIME_MEMORY_CONTEXT_NAME = "mnemon:runtime-memory";
 const STRATEGY_SECTION_NAME = "mnemon:strategy";
+const SNAPSHOT_GUIDANCE = "Mnemon memory snapshots are complete projections in chronological order. The latest snapshot supersedes earlier snapshots as the current projected state; do not treat older versions as additional current facts or authority. Absence may reflect filtering or projection budgets and does not imply deletion from storage.";
 const ROUTING_GUIDANCE = "Use memory only when needed. Follow the current Mnemon View: use mnemon_view_route or mnemon_view_action only for offered ids. Installed tools do not imply an available Source. Never infer missing historical facts. An action offer is not authorization; a write exists only after its receipt.";
 /** A View is an own-plugin message, never part of the shared context snapshot. */
 function withoutMemoryViewContext(assembly) {
@@ -8002,12 +8036,20 @@ function withoutMemoryViewContext(assembly) {
 }
 /** Inject trusted Strategy instructions after interpolation; Source text stays quoted in the Wake. */
 function applyMemoryViewGuidance(assembly, view, routingEnabled = true) {
-	if (view === void 0) return withoutMemoryViewContext(assembly);
+	if (view === void 0) return withoutMemoryViewContext({
+		...assembly,
+		sections: assembly.sections.filter((section) => section.name !== "mnemon:snapshot-history")
+	});
 	const sections = assembly.sections.filter((section) => ![
 		GUIDANCE_SECTION_NAME,
 		STRATEGY_SECTION_NAME,
-		"mnemon:runtime-memory-protocol"
+		"mnemon:runtime-memory-protocol",
+		"mnemon:snapshot-history"
 	].includes(section.name));
+	sections.push({
+		name: "mnemon:snapshot-history",
+		text: SNAPSHOT_GUIDANCE
+	});
 	if (view.guidance?.system) sections.push({
 		name: STRATEGY_SECTION_NAME,
 		text: view.guidance.system
@@ -8143,7 +8185,7 @@ function pendingOpinions(entries) {
 		createdAt: opinion.createdAt
 	}))).sort((left, right) => left.createdAt.localeCompare(right.createdAt));
 }
-function record$3(value) {
+function record$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function stringField(value) {
@@ -8292,7 +8334,7 @@ function body(value, index, field) {
 	return text.slice(0, MAX_FIELD);
 }
 function parseOperation(value, index, evidence) {
-	const operation = record$3(value);
+	const operation = record$4(value);
 	if (operation === void 0) throw new Error(`reconcile operation ${index} must be an object`);
 	const kind = stringField(operation.kind);
 	if (kind === void 0 || !KINDS.includes(kind)) throw new Error(`reconcile operation ${index} has an unsupported kind: ${JSON.stringify(operation.kind)}`);
@@ -8365,7 +8407,7 @@ function emptyDocumentSnapshot(directory, at) {
 }
 /** The host, not the model, decides what a proposal may contain. */
 function parseReconcileResult(value, evidence) {
-	const result = record$3(value);
+	const result = record$4(value);
 	if (result === void 0) throw new Error("memory reconciliation returned an invalid structured result");
 	const action = stringField(result.action);
 	if (action === void 0 || ![
@@ -8694,13 +8736,13 @@ async function startGuardedChild(host, parent, start, guard, options) {
 }
 //#endregion
 //#region src/host/review-checkpoint.ts
-function record$2(value) {
+function record$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
 }
 function textContent(content, toolResult = false) {
 	if (!Array.isArray(content)) return "";
 	return content.map((block) => {
-		const value = record$2(block);
+		const value = record$3(block);
 		if (value.type === "text" && typeof value.text === "string") return value.text;
 		if (toolResult && value.type === "tool-result" && value.isError !== true) return textContent(value.content);
 		return "";
@@ -8724,8 +8766,8 @@ function reviewCheckpoint(session, maxChars) {
 			"assistant/message",
 			"tool/result"
 		].includes(event.type)) continue;
-		const message = record$2(event.type === "user/message" ? event.data : event.data.message);
-		const source = record$2(message.source);
+		const message = record$3(event.type === "user/message" ? event.data : event.data.message);
+		const source = record$3(message.source);
 		if (event.type === "user/message" && source.kind !== "user") continue;
 		const text = textContent(message.content, event.type === "tool/result");
 		if (!text) continue;
@@ -8739,8 +8781,14 @@ function reviewCheckpoint(session, maxChars) {
 //#endregion
 //#region src/host/plugin-message.ts
 const MNEMON_PLUGIN_SOURCE = "dsh-mnemon";
+/** Includes the published V3 wrapper and its official V4 migration. */
+function isMnemonMessageSource(source) {
+	if (typeof source !== "object" || source === null) return false;
+	const { kind, plugin } = source;
+	return kind === "dsh-mnemon" || kind === `plugin:dsh-mnemon` || kind === "plugin" && plugin === "dsh-mnemon";
+}
 /** A user-role message this plugin adds to a step, marked with its own source. */
-function createPluginMessage(text, form) {
+function createPluginMessage(text, form, snapshot) {
 	return structuredClone({
 		id: randomUUID(),
 		role: "user",
@@ -8750,7 +8798,8 @@ function createPluginMessage(text, form) {
 		}],
 		source: {
 			kind: MNEMON_PLUGIN_SOURCE,
-			form
+			form,
+			...snapshot === void 0 ? {} : { snapshot }
 		}
 	});
 }
@@ -9643,7 +9692,11 @@ function runtimeRouteChunks(entries) {
 function compactedBudget(plan) {
 	const pendingBytes = plan.pending === void 0 ? 0 : Buffer.byteLength(plan.pending.content, "utf8");
 	const separatorBytes = plan.pending === void 0 || plan.entries.length === 0 ? 0 : Buffer.byteLength(RUNTIME_ENTRY_DELIMITER, "utf8");
-	return Math.max(0, Math.floor(plan.limit * .7) - pendingBytes - separatorBytes);
+	const pinned = plan.entries.filter((entry) => entry.pinned === true);
+	const pinnedBytes = Buffer.byteLength(pinned.map((entry) => entry.content).join(RUNTIME_ENTRY_DELIMITER), "utf8");
+	const available = plan.limit - pendingBytes - separatorBytes;
+	if ((pinned.length > 0 || plan.pending?.pinned === true) && pinnedBytes > available) throw new Error("Pinned runtime entries leave no capacity for this write. Unpin entries or increase the capacity; no archive writes were attempted.");
+	return Math.max(pinnedBytes, Math.max(0, Math.floor(plan.limit * .7) - pendingBytes - separatorBytes));
 }
 function runtimeMigrationSources(revision, entries) {
 	return entries.map((entry, offset) => ({
@@ -9692,10 +9745,11 @@ async function archiveRuntimeLocally(counters, context, request, plan, reason, s
 	if (plan.localArchive !== true) throw new Error(`runtime memory archival found no Memory Space that can take the archive (${reason}), and this Runtime Source cannot archive locally; pending write was not committed and existing runtime entries are unchanged; update dsh-mnemon-source-runtime, activate a supported Memory Space, or increase runtimeMemory.memoryLimitBytes`);
 	context.assertWritable?.();
 	const runId = `host-${randomUUID()}`;
-	const compacted = plan.entries.map(({ content, importance, branches }) => ({
+	const compacted = plan.entries.map(({ content, importance, branches, pinned }) => ({
 		content,
 		importance,
-		...branches === void 0 ? {} : { branches }
+		...branches === void 0 ? {} : { branches },
+		...pinned === void 0 ? {} : { pinned }
 	}));
 	const mutation = await context.runtime.mutateResult("compact-and-mutate", {
 		revision: plan.revision,
@@ -9738,7 +9792,9 @@ async function runtimeLocked(counters, context, request, signal) {
 	if (context.expectedRevision !== void 0 && context.expectedRevision !== plan.revision) throw new Error("Runtime source revision conflict before capacity maintenance");
 	if (!plan.requiresMaintenance) return context.commit();
 	if (plan.entries.length === 0) throw new Error("runtime memory capacity was exceeded without entries available for maintenance");
+	compactedBudget(plan);
 	if (request.target === "user") return compactUserAndCommit(context, request, plan, signal);
+	const archiveEntries = plan.entries.filter((entry) => entry.pinned !== true);
 	const archive = await context.memorySpaces();
 	if (archive === void 0) return archiveRuntimeLocally(counters, context, request, plan, "no Memory Space takes automatic writes here", signal);
 	const memoryService = archive.source;
@@ -9773,11 +9829,11 @@ async function runtimeLocked(counters, context, request, signal) {
 	let provider = "host";
 	let runId = `host-${randomUUID()}`;
 	let summary = "Routed every entry to the only eligible Memory Space without model work.";
-	if (eligibleBodies.length === 1) for (const index of plan.entries.keys()) routed.set(index + 1, eligibleBodies[0].id);
+	if (eligibleBodies.length === 1) for (const index of archiveEntries.keys()) routed.set(index + 1, eligibleBodies[0].id);
 	else {
 		const summaries = [];
 		const fallbackBody = eligibleBodies.find((body) => body.mnemonDefault) ?? eligibleBodies[0];
-		const chunks = runtimeRouteChunks(plan.entries);
+		const chunks = runtimeRouteChunks(archiveEntries);
 		for (const [chunkIndex, chunk] of chunks.entries()) {
 			const prompt = `Route this bounded MEMORY.md archive batch now. The host retains and writes the exact source content; these excerpts exist only for destination selection.
 
@@ -9822,11 +9878,12 @@ ${chunk.context}
 		}
 		summary = summaries.join(" ");
 	}
-	if (routed.size !== plan.entries.length) throw new Error("runtime memory migration omitted committed archive sources");
-	const compactedEntries = plan.entries.map(({ content, importance, branches }) => ({
+	if (routed.size !== archiveEntries.length) throw new Error("runtime memory migration omitted committed archive sources");
+	const compactedEntries = plan.entries.map(({ content, importance, branches, pinned }) => ({
 		content,
 		importance,
-		...branches === void 0 ? {} : { branches }
+		...branches === void 0 ? {} : { branches },
+		...pinned === void 0 ? {} : { pinned }
 	}));
 	if ((await runtimeMemory.read("maintenance-plan", {
 		...request,
@@ -9836,9 +9893,9 @@ ${chunk.context}
 	for (const memoryBodyId of new Set(routed.values())) if (!destinations.items.some((body) => body.id === memoryBodyId && eligible(body))) throw new Error(`runtime archive Memory Space ${memoryBodyId} is no longer eligible; no archive writes were attempted`);
 	signal.throwIfAborted();
 	context.assertWritable?.();
-	const sources = runtimeMigrationSources(plan.revision, plan.entries);
+	const sources = runtimeMigrationSources(plan.revision, archiveEntries);
 	const requests = sources.map((source) => {
-		const entry = plan.entries[source.index - 1];
+		const entry = archiveEntries[source.index - 1];
 		return {
 			content: entry.content,
 			category: "context",
@@ -9881,7 +9938,7 @@ ${chunk.context}
 				archiveResults.set(source.index, result);
 			}
 			if (written.length !== batch.length) throw new Error("runtime archive batch did not return one receipt per source entry");
-			for (const source of batch) verified.set(source.index, await archiveRuntimeEntry(memoryService, memoryBodyId, plan.entries[source.index - 1], archiveResults.get(source.index), signal));
+			for (const source of batch) verified.set(source.index, await archiveRuntimeEntry(memoryService, memoryBodyId, archiveEntries[source.index - 1], archiveResults.get(source.index), signal));
 		}
 		const lineage = [];
 		const memoryBodyIds = /* @__PURE__ */ new Set();
@@ -9948,11 +10005,13 @@ ${chunk.context}
 async function compactUserAndCommit(context, request, plan, signal) {
 	const runtimeMemory = context.runtime;
 	const budget = compactedBudget(plan);
+	const pinned = plan.entries.filter((entry) => entry.pinned === true);
+	const mutable = plan.entries.filter((entry) => entry.pinned !== true);
 	const prompt = `Run local USER.md compaction now.
 Pending mutation (uncommitted; do not include in compaction):
 ${pendingMutationContext(plan)}
 
-${runtimeSnapshotContext("user", plan.entries)}`;
+${runtimeSnapshotContext("user", mutable)}`;
 	const { provider, runId, result } = await context.model("compaction", "Consolidate local user profile", prompt, USER_COMPACTION_SCHEMA, USER_COMPACTION_PERSONA);
 	const value = object$6(result.structured);
 	if (value.action !== "compacted") throw new Error(typeof value.summary === "string" && value.summary !== "" ? value.summary : "USER.md compaction failed");
@@ -9981,17 +10040,21 @@ ${runtimeSnapshotContext("user", plan.entries)}`;
 		if (entry.sourceIndexes.length === 0) throw new Error("USER.md compaction returned an entry without a source");
 		let requiredRank = 0;
 		for (const index of entry.sourceIndexes) {
-			if (index < 1 || index > plan.entries.length || seen.has(index)) throw new Error("USER.md compaction source coverage is invalid");
+			if (index < 1 || index > mutable.length || seen.has(index)) throw new Error("USER.md compaction source coverage is invalid");
 			seen.add(index);
-			requiredRank = Math.max(requiredRank, importanceRank[plan.entries[index - 1].importance]);
+			requiredRank = Math.max(requiredRank, importanceRank[mutable[index - 1].importance]);
 		}
 		if (importanceRank[entry.importance] < requiredRank) throw new Error("USER.md compaction lowered source importance");
 	}
-	if (seen.size !== plan.entries.length) throw new Error("USER.md compaction omitted committed entries");
-	const candidates = compactedEntries.map(({ content, importance }) => ({
+	if (seen.size !== mutable.length) throw new Error("USER.md compaction omitted committed entries");
+	const candidates = [...pinned.map((entry) => ({
+		content: entry.content,
+		importance: entry.importance,
+		pinned: true
+	})), ...compactedEntries.map(({ content, importance }) => ({
 		content,
 		importance
-	}));
+	}))];
 	const candidateBytes = Buffer.byteLength(candidates.map((entry) => entry.content.trim().replace(/\s+/gu, " ")).join(RUNTIME_ENTRY_DELIMITER), "utf8");
 	if (candidateBytes > budget) throw new Error(`USER.md compaction did not fit the host budget (${candidateBytes} > ${budget} bytes)`);
 	signal.throwIfAborted();
@@ -10328,9 +10391,16 @@ const ACTION_TOOLS = namedBindings("action");
 const NAMED_SOURCE_TYPES = [.../* @__PURE__ */ new Set([...Object.keys(ROUTE_TOOLS), ...Object.keys(ACTION_TOOLS)])];
 /** Use a short availability list only where the Host has the matching named binding.
 * Unbound external operations retain exact ids and schemas in the generic envelope. */
-function modelMemoryWake(graph, turn) {
+function modelMemoryWake(graph, turn, includeRuntime = true) {
 	const generation = graph.memoryComposition.generation(turn.view.runtimeGeneration);
 	if (generation === void 0) throw new Error("Cannot present an unpinned Memory generation");
+	if (!includeRuntime) {
+		const runtimeSources = new Set(generation.sourceInstances().filter((source) => source.sourceTypeId === "runtime").map((source) => source.sourceInstanceKey));
+		return createMemoryWake({
+			...turn.view,
+			projection: turn.view.projection.filter((fragment) => !runtimeSources.has(fragment.sourceInstanceKey))
+		}, memoryWakeBindings(generation, turn.view));
+	}
 	return graph.composableTurns.memoryWake(turn.view.id, memoryWakeBindings(generation, turn.view));
 }
 function presentMemoryWake(generation, view) {
@@ -10456,17 +10526,23 @@ var AgentMemoryTurn = class {
 	lastInspection;
 	lastWorkspace;
 	releaseDelegation;
+	includeRuntime;
 	constructor(agent, runtime, delegation, independent = false) {
 		this.agent = agent;
 		this.runtime = runtime;
 		this.delegation = delegation;
 		this.independent = independent;
+		this.includeRuntime = delegation === void 0 || runtime.config.runtimeMemory.inheritToSubagents;
 		if (delegation === void 0) return;
 		this.releaseDelegation = runtime.executions.retain(agent, delegation);
 	}
 	get current() {
 		return this.pinned;
 	}
+	modelWake() {
+		const pinned = this.pinned;
+		return pinned === void 0 ? void 0 : modelMemoryWake(pinned.graph, pinned.context, this.includeRuntime);
+	}
 	/** Why the current turn has no View, when memory could not be composed for it. */
 	get unavailableReason() {
 		return this.unavailable?.reason;
@@ -10557,7 +10633,7 @@ var AgentMemoryTurn = class {
 		try {
 			if (this.closed || this.generation !== generation) throw new Error("memory turn ended during View preparation");
 			signal?.throwIfAborted();
-			const inspection = inspectMemoryView(graph.memoryComposition.generation(context.view.runtimeGeneration), context.view, "active", turn, modelMemoryWake(graph, context).text);
+			const inspection = inspectMemoryView(graph.memoryComposition.generation(context.view.runtimeGeneration), context.view, "active", turn, modelMemoryWake(graph, context, this.includeRuntime).text);
 			this.pinned = {
 				turn,
 				graph,
@@ -12313,6 +12389,192 @@ var TurnActivityProjection = class {
 	}
 };
 //#endregion
+//#region src/host/memory-snapshot-state.ts
+const digest = (value) => createHash("sha256").update(canonicalMemoryJson(value)).digest("hex");
+const hash$1 = (value) => typeof value === "string" && /^[a-f0-9]{64}$/u.test(value);
+const record$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+function readMemorySnapshotState(value) {
+	if (!record$2(value) || value.version !== 1 || !hash$1(value.boundary) || !Array.isArray(value.entries) || !value.entries.every(hash$1)) return void 0;
+	return {
+		version: 1,
+		boundary: value.boundary,
+		entries: [...value.entries]
+	};
+}
+/**
+* Only Runtime's Source-owned, complete-projection provenance permits additive
+* history. Unknown Sources and opaque grants are compared in full. Do not use
+* View ids or source revisions here: ordinary Runtime writes change both.
+*/
+function memorySnapshotState(view) {
+	if (view === void 0) return void 0;
+	const entries = [];
+	const projection = view.projection.map((fragment) => {
+		const provenance = fragment.provenance;
+		const snapshot = record$2(provenance) ? provenance.snapshot : void 0;
+		if (!record$2(provenance) || provenance.sourceTypeId !== "runtime" || !record$2(snapshot) || snapshot.version !== 1 || !hash$1(snapshot.scope) || !Array.isArray(snapshot.entries) || !snapshot.entries.every(hash$1)) return fragment;
+		entries.push(...snapshot.entries.map((entry) => digest([
+			fragment.sourceInstanceKey,
+			fragment.id,
+			entry
+		])));
+		const { text: _text, revision: _revision, ...identity } = fragment;
+		return {
+			...identity,
+			provenance: {
+				...provenance,
+				snapshot: {
+					version: 1,
+					scope: snapshot.scope
+				}
+			}
+		};
+	});
+	return {
+		version: 1,
+		boundary: digest({
+			generation: view.runtimeGeneration,
+			scope: view.scope,
+			strategy: [
+				view.strategyInstanceKey,
+				view.strategyTypeId,
+				view.strategyExtensions ?? []
+			],
+			projection,
+			routes: view.routes,
+			actions: view.actionOffers,
+			grants: view.readGrants,
+			guidance: view.guidance ?? null,
+			diagnostics: view.diagnostics ?? []
+		}),
+		entries: entries.sort()
+	};
+}
+/** A missing old occurrence is a deletion/correction, even with duplicate facts. */
+function retainsSnapshotEntries(previous, current) {
+	const counts = /* @__PURE__ */ new Map();
+	for (const entry of current) counts.set(entry, (counts.get(entry) ?? 0) + 1);
+	for (const entry of previous) {
+		const count = counts.get(entry) ?? 0;
+		if (count === 0) return false;
+		counts.set(entry, count - 1);
+	}
+	return true;
+}
+//#endregion
+//#region src/host/memory-snapshot.ts
+const MAX_SNAPSHOTS = 4;
+const MAX_SNAPSHOT_BYTES = 65536;
+const LEGACY_RUNTIME_SNAPSHOT = /^MNEMON RUNTIME MEMORY SNAPSHOT\n[^\n]+(?:\n[^\n]+)*\n\n(?:USER\.md \(user profile\)|Contents of USER\.md \(user profile; entries: \d+; UTF-8 bytes: \d+\/\d+\))\n<runtime-memory-file name="USER.md">\n(?:(?!\n\nMNEMON (?:RUNTIME MEMORY SNAPSHOT|VIEW ))[\s\S])*?\n<\/runtime-memory-file>\n\n(?:MEMORY\.md \(working reference\)|Contents of MEMORY\.md \(working reference; entries: \d+; UTF-8 bytes: \d+\/\d+\))\n<runtime-memory-file name="MEMORY.md">\n(?:(?!\n\nMNEMON (?:RUNTIME MEMORY SNAPSHOT|VIEW ))[\s\S])*?\n<\/runtime-memory-file>(?:$|\n\n)/u;
+const TRUNCATED_RUNTIME_START = /^MNEMON RUNTIME MEMORY SNAPSHOT\n(?:Revision: [a-f0-9]{64}(?:\nGit branch: [^\r\n]+)?(?:\nMetadata lines are annotations; created\/updated are ages at projection in whole days \(future\/unknown for future\/invalid timestamps\)\. Current instructions win\. For old_text\/oldText, use entry content only\.)?\n\nContents of USER\.md \(user profile; entries: \d+; UTF-8 bytes: \d+\/\d+\)|Entry annotations default to importance=normal and ages=0d \(whole days at projection; future\/unknown for future\/invalid timestamps\)\. Current instructions win\. For old_text\/oldText, use entry content only\.(?:\nGit branch: [^\r\n]+)?\n\nUSER\.md \(user profile\))\n<runtime-memory-file name="USER.md">\n/u;
+const RUNTIME_WAKE_SEPARATOR = /\n\n(?:MNEMON RUNTIME MEMORY SNAPSHOT\n|MNEMON VIEW TOOLS \(available in this View\): |MNEMON VIEW ROUTES \(quoted routing data; use mnemon_view_route or mnemon_view_action by exact id\): |MNEMON VIEW AVAILABILITY \(quoted diagnostics; unavailable Sources are not evidence\): )/u;
+function isTruncatedRuntimeSnapshot(text) {
+	const start = TRUNCATED_RUNTIME_START.exec(text);
+	if (start === null) return false;
+	const body = text.slice(start[0].length);
+	const end = body.search(RUNTIME_WAKE_SEPARATOR);
+	const first = end < 0 ? body : body.slice(0, end);
+	if (!first.endsWith("…")) return false;
+	const prefix = first.slice(0, -1);
+	const userEnd = prefix.indexOf("\n</runtime-memory-file>");
+	if (userEnd < 0) return true;
+	const heading = start[0].includes("\nContents of USER.md ") ? [
+		"\n\nContents of MEMORY.md (working reference; entries: ",
+		/^\d+/u,
+		"; UTF-8 bytes: ",
+		/^\d+/u,
+		"/",
+		/^\d+/u,
+		")"
+	] : ["\n\nMEMORY.md (working reference)"];
+	heading.push("\n<runtime-memory-file name=\"MEMORY.md\">\n");
+	let rest = prefix.slice(userEnd + 23);
+	for (const part of heading) {
+		if (rest === "") return true;
+		if (typeof part === "string") {
+			if (part.startsWith(rest)) return true;
+			if (!rest.startsWith(part)) return false;
+			rest = rest.slice(part.length);
+		} else {
+			const match = part.exec(rest);
+			if (match === null) return false;
+			rest = rest.slice(match[0].length);
+		}
+	}
+	return true;
+}
+/** Read only this producer's snapshot formats; ordinary recalls retain history. */
+function snapshotText(event) {
+	if (event?.type !== "user/message" || event.data.role !== "user") return void 0;
+	const source = event.data.source;
+	if (!isMnemonMessageSource(source)) return void 0;
+	const content = event.data.content;
+	if (!Array.isArray(content) || content.length !== 1) return void 0;
+	const block = content[0];
+	if (block?.type !== "text" || typeof block.text !== "string") return void 0;
+	if (source?.form === "memory-snapshot") return block.text;
+	if (source?.form !== "recall" || !(LEGACY_RUNTIME_SNAPSHOT.test(block.text) || isTruncatedRuntimeSnapshot(block.text))) return void 0;
+	return block.text;
+}
+/**
+* Prepare a snapshot and its retirements without writing before step/start.
+* Commit after step/start publication, before the Host builds its request.
+* Empty developer nodes are a public Session representation that derives no model
+* message. They contain no instructions, Source text, or tool changes. Each
+* replacement shadows one owned node and cites it; the append-only audit keeps
+* the original full message, without touching interleaved conversation.
+*/
+function prepareMemorySnapshot(session, text, state) {
+	const current = text?.trim() === "" ? void 0 : text;
+	const snapshots = session.surface.nodes.flatMap((seq) => {
+		const event = session.eventAt(seq);
+		const text = snapshotText(event);
+		const source = event?.data.source;
+		return text === void 0 ? [] : [{
+			seq,
+			text,
+			state: source?.form === "memory-snapshot" ? readMemorySnapshotState(source.snapshot) : void 0
+		}];
+	});
+	const latest = snapshots.at(-1);
+	const compatible = state !== void 0 && snapshots.every((snapshot) => snapshot.state?.boundary === state.boundary && retainsSnapshotEntries(snapshot.state.entries, state.entries));
+	const unchanged = current !== void 0 && latest?.text === current;
+	const count = snapshots.length + (unchanged ? 0 : 1);
+	const bytes = snapshots.reduce((total, snapshot) => total + Buffer.byteLength(snapshot.text, "utf8"), 0) + (unchanged || current === void 0 ? 0 : Buffer.byteLength(current, "utf8"));
+	const retained = current === void 0 ? [] : compatible && count <= MAX_SNAPSHOTS && (count <= 1 || bytes <= MAX_SNAPSHOT_BYTES) ? snapshots : state === void 0 && unchanged ? [latest] : [];
+	const stale = snapshots.filter((snapshot) => !retained.includes(snapshot));
+	return {
+		message: current === void 0 || unchanged && retained.includes(latest) ? void 0 : createPluginMessage(current, "memory-snapshot", state),
+		retire(turn, step) {
+			const visible = new Set(session.surface.nodes);
+			for (const { seq } of stale) {
+				if (!visible.has(seq)) continue;
+				if (session.append === void 0) throw new Error("DSH Session append is required to retire superseded memory snapshots");
+				session.append("developer/message", {
+					turn,
+					step,
+					message: {
+						id: randomUUID(),
+						role: "developer",
+						content: [],
+						source: {
+							kind: MNEMON_PLUGIN_SOURCE,
+							form: "memory-snapshot-retired"
+						}
+					}
+				}, {
+					surfaceOp: {
+						op: "replace",
+						startSeq: seq,
+						endSeq: seq
+					},
+					sourceEventSeqs: [seq]
+				});
+			}
+		}
+	};
+}
+//#endregion
 //#region src/host/idle-review-watermark.ts
 const MAX_STATE_BYTES = 16384;
 const MAX_TIMESTAMP = 864e13;
@@ -12477,11 +12739,6 @@ function llmService(value) {
 	if (typeof value !== "object" || value === null || !("listProviders" in value) || typeof value.listProviders !== "function" || !("listModels" in value) || typeof value.listModels !== "function") return void 0;
 	return value;
 }
-function isMnemonMessageSource(source) {
-	if (typeof source !== "object" || source === null) return false;
-	const { kind, plugin } = source;
-	return kind === "dsh-mnemon" || kind === `plugin:dsh-mnemon` || kind === "plugin" && plugin === "dsh-mnemon";
-}
 /**
 * Whether an event is a durable user message this plugin produced.
 */
@@ -12561,16 +12818,9 @@ var MnemonAgentLifecycle = class {
 	primePending = true;
 	startSource;
 	guidedTurns = /* @__PURE__ */ new Set();
+	pendingSnapshot;
 	memoryActivity = new TurnActivityProjection();
 	turnActivity = /* @__PURE__ */ new Map();
-	/**
-	* Text of the runtime memory snapshot most recently injected as this
-	* plugin's own message. `.context()` used to get supersede-on-change for free
-	* from the host's runtime-context projection; carrying the snapshot as an own
-	* message means re-emitting on change is this plugin's responsibility, and
-	* the rendered text (which carries the revision digest) is the key.
-	*/
-	injectedMemoryText;
 	idleReviewTimer;
 	reviewController;
 	reviewRunning = false;
@@ -12616,6 +12866,10 @@ var MnemonAgentLifecycle = class {
 		];
 		return () => {
 			this.disposed = true;
+			const pending = this.pendingSnapshot;
+			this.pendingSnapshot = void 0;
+			const started = pending === void 0 ? void 0 : this.agent.session.snapshotEvents().findLast((event) => event.type === "step/start");
+			if (pending !== void 0 && started !== void 0 && eventTurn(started) === pending.turn && started.data.step === pending.step) this.queueSnapshotRetirement(pending);
 			this.releaseView();
 			this.cancelIdleReview(true);
 			for (const dispose of disposers.reverse()) dispose();
@@ -12685,24 +12939,8 @@ var MnemonAgentLifecycle = class {
 		for (const seq of this.agent.session.surface.nodes) if (isOwnUserMessageEvent(this.agent.session.eventAt(seq))) return true;
 		return false;
 	}
-	/**
-	* The runtime memory snapshot, as this plugin's own message, when it changed.
-	*
-	* `.context()` used to carry this inside the host's shared runtime-context
-	* projection. Carrying it here instead attributes it to dsh-mnemon and keeps
-	* a memory write from re-emitting other contributors' sections; supersede
-	* stays intact because the block is still a complete state replacing its
-	* predecessor, keyed on the rendered text's revision digest.
-	*/
-	memorySnapshotMessage() {
-		const wake = this.memoryWake();
-		if (wake === void 0) return void 0;
-		const text = wake.text;
-		if (text.trim() === "" || text === this.injectedMemoryText) return void 0;
-		this.injectedMemoryText = text;
-		return createPluginMessage(text, "recall");
-	}
 	async preStep(payload, next) {
+		this.pendingSnapshot = void 0;
 		if (payload.step === 1) this.cancelIdleReview(true);
 		const decision = await next();
 		if (decision.kind === "reject" || payload.signal.aborted) {
@@ -12710,12 +12948,19 @@ var MnemonAgentLifecycle = class {
 			return decision;
 		}
 		if (!this.disposed && openAgentTurn(this.agent) === payload.turn) await this.memoryTurn?.begin(payload.turn, payload.signal);
+		const update = prepareMemorySnapshot(this.agent.session, this.config.lifecycleEnabled ? this.memoryWake()?.text : void 0, this.config.lifecycleEnabled ? memorySnapshotState(this.memoryTurn?.current?.context.view) : void 0);
+		this.pendingSnapshot = {
+			turn: payload.turn,
+			step: payload.step,
+			signal: payload.signal,
+			update
+		};
 		if (!this.config.lifecycleEnabled) return decision;
 		if (this.config.writeEnabled && this.config.writebackMode === "guided") this.recordTurnMessages(payload.turn, decision.messages);
 		if (payload.step !== 1) return decision;
 		if (decision.messages.some((message) => isMnemonMessageSource(message.source))) return decision;
 		if (decision.messages.length === 0) return decision;
-		const snapshot = this.memorySnapshotMessage();
+		const snapshot = update.message;
 		const withSnapshot = (messages) => snapshot === void 0 ? messages : [...messages, snapshot];
 		if (this.primePending) {
 			this.primePending = false;
@@ -12784,12 +13029,40 @@ var MnemonAgentLifecycle = class {
 		if (admitted) this.scheduleIdleReview(payload.turn);
 	}
 	sessionEvent(session, event) {
-		if (session !== this.agent.session || event.type !== "turn/end") return;
+		if (session !== this.agent.session) return;
 		const turn = eventTurn(event);
+		if (event.type === "step/start") {
+			const pending = this.pendingSnapshot;
+			if (pending === void 0 || pending.turn !== turn || pending.step !== event.data.step) return;
+			this.pendingSnapshot = void 0;
+			this.queueSnapshotRetirement(pending);
+			return;
+		}
+		if (event.type !== "turn/end") return;
+		if (this.pendingSnapshot?.turn === turn) this.pendingSnapshot = void 0;
 		const current = this.memoryTurn?.current;
 		if ((turn === void 0 || current?.turn !== turn ? void 0 : current) === void 0) return;
 		this.releaseView(turn);
 	}
+	queueSnapshotRetirement(pending) {
+		queueMicrotask(() => {
+			if (pending.signal.aborted || openAgentTurn(this.agent) !== pending.turn) return;
+			try {
+				pending.update.retire(pending.turn, pending.step);
+			} catch {
+				const reason = "Memory snapshot checkpoint failed; model request cancelled.";
+				this.counters.failures += 1;
+				this.lastPhase = "error";
+				this.lastAt = (/* @__PURE__ */ new Date()).toISOString();
+				this.lastError = reason;
+				this.agent.cancel({
+					kind: "hook",
+					reason
+				}, { keepInbox: true });
+				console.warn("[dsh-mnemon] Memory snapshot checkpoint failed; model request cancelled.");
+			}
+		});
+	}
 	scheduleIdleReview(turn) {
 		this.cancelIdleReview(true);
 		if (!this.restoreWatermark() || !this.idleReviewAllowed()) return;
@@ -13645,6 +13918,16 @@ var MnemonLifecycle = class {
 			...typeof effort === "string" && effort !== "" ? { reasoningEffort: effort } : {}
 		};
 	}
+	/** Freeze the effective task route for a paired skill evaluation. */
+	skillTaskRoute(workspaceRoot) {
+		const options = this.taskAgentModelOptions("", workspaceRoot);
+		if (!options?.provider || !options.model) return void 0;
+		return {
+			provider: options.provider,
+			model: options.model,
+			...options.reasoningEffort === void 0 ? {} : { reasoningEffort: options.reasoningEffort }
+		};
+	}
 	taskAgentModelOptions(fallbackSessionId, workspaceRoot) {
 		return this.taskAgentModelRoute(fallbackSessionId, workspaceRoot)?.options;
 	}
@@ -13732,12 +14015,11 @@ var MnemonLifecycle = class {
 						return decision;
 					}
 					if (openAgentTurn(agent) !== payload.turn) return decision;
-					const recovering = memory.current?.turn !== payload.turn;
 					await memory.begin(payload.turn, payload.signal);
 					const pinned = memory.current;
-					if (recovering && payload.step === 1 && this.config.lifecycleEnabled && pinned !== void 0) {
-						const wake = modelMemoryWake(pinned.graph, pinned.context);
-						if (wake.text.trim() !== "") return {
+					if (payload.step === 1 && this.config.lifecycleEnabled && pinned !== void 0) {
+						const wake = memory.modelWake();
+						if (wake !== void 0 && wake.text.trim() !== "") return {
 							kind: "enter",
 							messages: [...decision.messages, createPluginMessage(wake.text, "recall")]
 						};
@@ -13757,6 +14039,219 @@ var MnemonLifecycle = class {
 	}
 };
 //#endregion
+//#region src/host/skill-auto-adoption.ts
+var AutomaticSkillStop = class extends Error {
+	reason;
+	constructor(reason, detail) {
+		super(detail ?? reason);
+		this.reason = reason;
+	}
+};
+function hashSkillCases(cases) {
+	return createHash("sha256").update(SkillsContracts.skillCaseSignature(cases)).digest("hex");
+}
+function hashSkillDraft(draft) {
+	return createHash("sha256").update(draft.content).digest("hex");
+}
+/** Only fresh idle-review suggestions enter this bounded, in-process queue. */
+var SkillAutoAdoption = class {
+	host;
+	jobs = /* @__PURE__ */ new Map();
+	tail = Promise.resolve();
+	disposed = false;
+	constructor(host) {
+		this.host = host;
+	}
+	enqueue(source, workspace, ids, available) {
+		if (this.disposed || !this.host.settings().autoAdopt) return;
+		for (const id of ids) {
+			if (this.jobs.has(id)) continue;
+			if (this.jobs.size >= 16) {
+				this.record({
+					source,
+					id
+				}, {
+					stage: "review",
+					attempt: 0,
+					reason: "queue-full"
+				}).catch((error) => this.host.warn("Could not record automatic adoption queue limit", error));
+				continue;
+			}
+			const job = {
+				source,
+				workspace,
+				id,
+				available,
+				controller: new AbortController()
+			};
+			this.jobs.set(id, job);
+			this.tail = this.tail.then(() => this.run(job)).catch((error) => this.host.warn("Automatic skill adoption failed", error)).finally(() => {
+				this.jobs.delete(id);
+			});
+		}
+	}
+	allowed(job) {
+		const settings = this.host.settings();
+		return !this.disposed && settings.evolution && settings.autoAdopt && settings.autoBacktest && job.available() && (job.action === void 0 || (job.action === "create" ? settings.allowCreate : settings.allowUpdate));
+	}
+	settingsChanged() {
+		for (const job of this.jobs.values()) if (!this.allowed(job)) job.controller.abort(new AutomaticSkillStop("disabled"));
+	}
+	dispose() {
+		this.disposed = true;
+		for (const job of this.jobs.values()) job.controller.abort(new AutomaticSkillStop("interrupted"));
+	}
+	checkpoint(job) {
+		if (!this.allowed(job)) job.controller.abort(new AutomaticSkillStop(this.disposed ? "interrupted" : "disabled"));
+		job.controller.signal.throwIfAborted();
+	}
+	record(job, event) {
+		return job.source.mutate("auto-adoption-record", {
+			id: job.id,
+			...event
+		});
+	}
+	async unchanged(job, draft, casesHash) {
+		this.checkpoint(job);
+		const current = await job.source.read("draft", { id: draft.id }, job.controller.signal);
+		const suggestion = (await job.source.read("suggestions", null, job.controller.signal)).find((entry) => entry.id === job.id);
+		const cases = (await job.source.read("cases", { skill: draft.skillName }, job.controller.signal)).filter((entry) => entry.enabled);
+		if (current.conflict !== void 0 || current.draft.status !== "ready" || suggestion?.status !== "review" || suggestion.draftId !== draft.id || hashSkillDraft(current.draft) !== hashSkillDraft(draft) || hashSkillCases(cases) !== casesHash) throw new AutomaticSkillStop("changed");
+	}
+	async runs(job, ids) {
+		const deadline = AbortSignal.timeout(276e4);
+		const signal = AbortSignal.any([job.controller.signal, deadline]);
+		for (;;) {
+			this.checkpoint(job);
+			signal.throwIfAborted();
+			const runs = await Promise.all(ids.map((id) => job.source.read("run", { id }, signal)));
+			if (runs.some((run) => run.status !== "running" && run.status !== "completed") || runs.every((run) => run.status !== "running")) return runs;
+			await setTimeout$1(250, void 0, { signal });
+		}
+	}
+	async run(job) {
+		const runIds = /* @__PURE__ */ new Set();
+		let attempt = 0;
+		let scores = {};
+		try {
+			this.checkpoint(job);
+			const suggestion = (await job.source.read("suggestions")).find((entry) => entry.id === job.id);
+			if (suggestion?.status !== "pending" || suggestion.draftId !== void 0) throw new AutomaticSkillStop("changed");
+			job.action = suggestion.action;
+			this.checkpoint(job);
+			await this.record(job, {
+				stage: "queued",
+				attempt
+			});
+			const cases = (await job.source.read("cases", { skill: suggestion.skillName })).filter((entry) => entry.enabled);
+			if (cases.length === 0) throw new AutomaticSkillStop("no-cases");
+			if (cases.some((entry) => entry.requiresVision === true || entry.checks.length === 0)) throw new AutomaticSkillStop("unmeasured");
+			if (cases.length > this.host.settings().casesPerRun) throw new AutomaticSkillStop("case-limit");
+			const casesHash = hashSkillCases(cases);
+			const preferences = await job.source.read("draft-preferences");
+			const defaultRoute = this.host.route(job.workspace);
+			const runRoute = preferences.skillRunModels[suggestion.skillName] ?? preferences.runModel ?? defaultRoute;
+			const draftRoute = preferences.suggestionModels[job.id] ?? preferences.model ?? defaultRoute;
+			if (runRoute === void 0 || draftRoute === void 0) throw new AutomaticSkillStop("model-unavailable");
+			let previous;
+			let guidance = "";
+			for (attempt = 1; attempt <= 3; attempt++) {
+				this.checkpoint(job);
+				await this.record(job, {
+					stage: "drafting",
+					attempt
+				});
+				const draft = await this.host.draft(job.source, job.workspace, {
+					suggestionId: job.id,
+					action: suggestion.action,
+					...previous === void 0 ? {} : { previous },
+					guidance,
+					route: draftRoute
+				}, job.controller.signal);
+				await this.unchanged(job, draft, casesHash);
+				await this.record(job, {
+					stage: "backtesting",
+					attempt
+				});
+				const baseline = await this.host.backtest(job.source, job.workspace, {
+					skillName: draft.skillName,
+					target: {
+						kind: draft.action === "update" ? "current" : "none",
+						...draft.action === "update" ? { draftId: draft.id } : {}
+					},
+					route: runRoute,
+					expectedCasesHash: casesHash,
+					signal: job.controller.signal
+				});
+				runIds.add(baseline.runId);
+				this.checkpoint(job);
+				const candidate = await this.host.backtest(job.source, job.workspace, {
+					skillName: draft.skillName,
+					target: {
+						kind: "draft",
+						draftId: draft.id
+					},
+					route: runRoute,
+					expectedCasesHash: casesHash,
+					signal: job.controller.signal
+				});
+				runIds.add(candidate.runId);
+				await job.source.mutate("run-link", {
+					draftId: draft.id,
+					runId: baseline.runId
+				}, job.controller.signal);
+				const [before, after] = await this.runs(job, [baseline.runId, candidate.runId]);
+				await this.unchanged(job, draft, casesHash);
+				const comparison = SkillsContracts.compareAutomaticSkillRuns(cases, before, after, casesHash);
+				scores = {
+					...comparison.baselineScore === void 0 ? {} : { baselineScore: comparison.baselineScore },
+					...comparison.draftScore === void 0 ? {} : { draftScore: comparison.draftScore }
+				};
+				if (comparison.outcome === "unmeasured") throw new AutomaticSkillStop("unmeasured");
+				if (comparison.outcome === "not-worse") {
+					this.checkpoint(job);
+					await job.source.mutate("draft-adopt", {
+						id: draft.id,
+						automatic: {
+							draftHash: hashSkillDraft(draft),
+							baselineRunId: baseline.runId,
+							draftRunId: candidate.runId,
+							casesHash,
+							attempt
+						}
+					}, job.controller.signal);
+					return;
+				}
+				if (attempt === 3) throw new AutomaticSkillStop("regressed");
+				await this.record(job, {
+					stage: "rewriting",
+					attempt,
+					reason: "regressed",
+					...scores
+				});
+				guidance = `The previous draft regressed in paired backtests. Baseline score: ${comparison.baselineScore}; previous draft score: ${comparison.draftScore}. Improve each regressed case without losing any previously passing check.\n` + JSON.stringify(cases.map((entry) => ({
+					title: entry.title,
+					baseline: before.results.find((result) => result.caseId === entry.id),
+					draft: after.results.find((result) => result.caseId === entry.id)
+				}))).slice(0, 8e3);
+				previous = draft;
+			}
+		} catch (error) {
+			const failure = job.controller.signal.aborted ? job.controller.signal.reason : error;
+			const reason = failure instanceof AutomaticSkillStop ? failure.reason : "failed";
+			await this.record(job, {
+				stage: reason === "disabled" || reason === "interrupted" ? "paused" : "review",
+				attempt: Math.min(attempt, 3),
+				reason,
+				...scores,
+				...failure instanceof AutomaticSkillStop ? {} : { detail: failure instanceof Error ? failure.message : String(failure) }
+			}).catch((recordError) => this.host.warn("Could not record automatic adoption outcome", recordError));
+		} finally {
+			for (const id of runIds) await job.source.mutate("run-cancel", { id }).catch((error) => this.host.warn("Could not stop automatic skill backtest", error));
+		}
+	}
+};
+//#endregion
 //#region src/host/skill-review.ts
 const SIGNALS = [
 	"correction",
@@ -14589,7 +15084,7 @@ function retryingSource(source, attempts = 4) {
 			for (let attempt = 1;; attempt++) try {
 				return await source.mutate(operation, input, signal);
 			} catch (error) {
-				if (attempt >= attempts || !/revision conflict|changed since it was read; reload/u.test(error instanceof Error ? error.message : String(error))) throw error;
+				if (attempt >= attempts || !/revision conflict|Skills Source changed since it was read; reload/u.test(error instanceof Error ? error.message : String(error))) throw error;
 			}
 		}
 	};
@@ -14597,6 +15092,27 @@ function retryingSource(source, attempts = 4) {
 function message(error) {
 	return redact(error instanceof Error ? error.message : String(error));
 }
+/**
+* A draft task that stops reporting is abandoned here. The subagent behind it
+* can die without settling, and the suggestion would otherwise stay `drafting`
+* - blocking dismiss, delete and a retry - until the Host restarts.
+*/
+const DRAFT_DEADLINE_MS = 9e5;
+/** Distinguishes a deadline abort from the plain abort a Host shutdown sends. */
+var DraftDeadlineError = class extends Error {};
+/** The deadline error a task ran into, so the Source records why the draft ended. */
+function deadlineReason(signal) {
+	return signal.reason instanceof DraftDeadlineError ? signal.reason : void 0;
+}
+/** Cancellation settles the owner even when an underlying task ignores its signal. */
+function abortable(signal, work) {
+	signal.throwIfAborted();
+	return new Promise((resolve, reject) => {
+		const abort = () => reject(signal.reason);
+		signal.addEventListener("abort", abort, { once: true });
+		Promise.resolve().then(work).then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+	});
+}
 /** Resolve only roots supplied by this Source's scoped catalog, never the task's cwd. */
 function newSkillRoot(settings, source, catalog, explicit) {
 	let root = explicit;
@@ -14637,8 +15153,22 @@ var SkillEvolution = class {
 	sessions = /* @__PURE__ */ new Map();
 	jobs = /* @__PURE__ */ new Set();
 	disposed = false;
+	activeBacktests = 0;
+	backtestJobs = 0;
+	backtestWaiters = /* @__PURE__ */ new Set();
+	automatic;
 	constructor(host) {
 		this.host = host;
+		this.automatic = new SkillAutoAdoption({
+			settings: () => host.settings(),
+			route: (workspace) => host.taskRoute?.(workspace),
+			draft: (source, workspace, input, signal) => this.automaticDraft(source, workspace, input, signal),
+			backtest: (source, workspace, input) => this.backtest(source, workspace, input),
+			warn: (text, error) => this.warn(text, error)
+		});
+	}
+	settingsChanged() {
+		this.automatic.settingsChanged();
 	}
 	source(agent) {
 		const source = this.host.source(agent);
@@ -14872,6 +15402,7 @@ var SkillEvolution = class {
 			});
 			state.failures = 0;
 			state.lastReviewAt = this.now().getTime();
+			if (trigger === "automatic" && result.createdSuggestionIds !== void 0) this.automatic.enqueue(source, workspace, result.createdSuggestionIds, () => this.host.source(agent) !== void 0);
 			return result;
 		} catch (error) {
 			state.failures += 1;
@@ -14902,10 +15433,17 @@ var SkillEvolution = class {
 			delete state.reviewing;
 		}
 	}
-	background(name, work) {
+	background(name, work, deadlineMs) {
 		const controller = new AbortController();
 		this.jobs.add(controller);
-		work(controller.signal).catch((error) => this.warn(`${name} failed`, error)).finally(() => this.jobs.delete(controller));
+		const timer = deadlineMs === void 0 ? void 0 : setTimeout(() => {
+			controller.abort(new DraftDeadlineError(`${name} did not finish within ${Math.round(deadlineMs / 6e4)} minutes`));
+		}, deadlineMs);
+		timer?.unref?.();
+		return work(controller.signal).catch((error) => this.warn(`${name} failed`, deadlineReason(controller.signal) ?? error)).finally(() => {
+			if (timer !== void 0) clearTimeout(timer);
+			this.jobs.delete(controller);
+		});
 	}
 	/**
 	* Write a draft for a suggestion (or for a skill directly) in the
@@ -14915,12 +15453,15 @@ var SkillEvolution = class {
 		const source = retryingSource(port);
 		const pack = await source.read("evidence-pack", {
 			...input.suggestionId === void 0 ? {} : { suggestionId: input.suggestionId },
+			...input.draftId === void 0 ? {} : { draftId: input.draftId },
 			...input.skill === void 0 ? {} : { skill: input.skill }
 		});
-		const previous = pack.suggestion?.draftId === void 0 ? (await source.read("drafts", {
+		const previousId = input.draftId ?? pack.suggestion?.draftId;
+		const previous = previousId === void 0 ? (await source.read("drafts", {
 			skill: pack.skillName,
+			...pack.skill === void 0 ? {} : { path: pack.skill.path },
 			...input.suggestionId === void 0 ? {} : { suggestionId: input.suggestionId }
-		})).find((draft) => draft.suggestionId === input.suggestionId) : (await source.read("draft", { id: pack.suggestion.draftId })).draft;
+		})).find((draft) => draft.suggestionId === input.suggestionId) : (await source.read("draft", { id: previousId })).draft;
 		const targetRoot = pack.action === "update" ? pack.skill.root : newSkillRoot(this.host.settings(), source, await source.read("catalog"), input.targetRoot ?? previous?.targetRoot ?? pack.suggestion?.targetRoot);
 		const guidance = [...previous?.guidance ?? [], ...input.guidance?.trim() ? [input.guidance.trim()] : []].slice(-8);
 		if (input.suggestionId !== void 0) await source.mutate("suggestion-status", {
@@ -14928,26 +15469,83 @@ var SkillEvolution = class {
 			status: "drafting"
 		});
 		this.background("skill draft", async (signal) => {
+			let recorded = false;
 			try {
-				await this.writeDraft(source, workspace, input, {
+				await abortable(signal, () => this.writeDraft(source, workspace, input, {
 					pack,
 					targetRoot,
-					guidance
-				}, signal);
+					guidance,
+					onRecorded: () => {
+						recorded = true;
+					}
+				}, signal));
 			} catch (error) {
-				if (input.suggestionId !== void 0) await source.mutate("suggestion-status", {
-					id: input.suggestionId,
-					status: "pending",
-					error: message(error)
-				}).catch(() => void 0);
+				if (!recorded && input.suggestionId !== void 0) {
+					if ((await source.read("suggestions")).find((item) => item.id === input.suggestionId)?.status === "drafting") await source.mutate("suggestion-status", {
+						id: input.suggestionId,
+						status: "pending",
+						error: message(deadlineReason(signal) ?? error)
+					}).catch(() => void 0);
+				}
 				throw error;
 			}
-		});
+		}, DRAFT_DEADLINE_MS);
 		return {
 			started: true,
 			...input.suggestionId === void 0 ? {} : { suggestionId: input.suggestionId }
 		};
 	}
+	async automaticDraft(source, workspace, input, parentSignal) {
+		const controller = new AbortController();
+		const signal = AbortSignal.any([parentSignal, controller.signal]);
+		const timer = setTimeout(() => controller.abort(new DraftDeadlineError("Automatic skill draft did not finish within 15 minutes")), DRAFT_DEADLINE_MS);
+		timer.unref?.();
+		const expectedDraft = input.previous === void 0 ? null : {
+			id: input.previous.id,
+			hash: hashSkillDraft(input.previous)
+		};
+		let recorded = false;
+		let claimed = false;
+		try {
+			return await abortable(signal, async () => {
+				const pack = await source.read("evidence-pack", { suggestionId: input.suggestionId }, signal);
+				signal.throwIfAborted();
+				if (pack.action !== input.action || pack.action === "update" && pack.suggestion?.skillFileHash !== pack.skill?.hash) throw new AutomaticSkillStop("changed");
+				const targetRoot = pack.action === "update" ? pack.skill.root : newSkillRoot(this.host.settings(), source, await source.read("catalog", null, signal), input.previous?.targetRoot ?? pack.suggestion?.targetRoot);
+				const guidance = [...input.previous?.guidance ?? [], ...input.guidance === "" ? [] : [input.guidance]].slice(-8);
+				await source.mutate("suggestion-status", {
+					id: input.suggestionId,
+					status: "drafting",
+					expectedDraft
+				}, signal);
+				claimed = true;
+				return this.writeDraft(source, workspace, {
+					suggestionId: input.suggestionId,
+					...input.previous === void 0 ? {} : { draftId: input.previous.id },
+					route: input.route
+				}, {
+					pack,
+					targetRoot,
+					guidance,
+					expectedDraft,
+					deferBacktests: true,
+					onRecorded: () => {
+						recorded = true;
+					}
+				}, signal);
+			});
+		} catch (error) {
+			if (claimed && !recorded) await source.mutate("suggestion-status", {
+				id: input.suggestionId,
+				status: "pending",
+				expectedDraft,
+				...parentSignal.aborted ? {} : { error: message(signal.aborted ? signal.reason : error) }
+			}).catch(() => void 0);
+			throw signal.aborted ? signal.reason : error;
+		} finally {
+			clearTimeout(timer);
+		}
+	}
 	async writeDraft(source, workspace, input, prepared, signal) {
 		const settings = this.host.settings();
 		const { pack, targetRoot, guidance } = prepared;
@@ -14978,20 +15576,25 @@ var SkillEvolution = class {
 				signal.throwIfAborted();
 				draft = await source.mutate("draft-record", {
 					...input.suggestionId === void 0 ? {} : { suggestionId: input.suggestionId },
+					...input.draftId === void 0 ? {} : { draftId: input.draftId },
 					skillName: pack.skillName,
 					content: parsed.content,
 					notes: parsed.notes,
 					changes: parsed.changes,
 					guidance,
+					expectedBaseHash: pack.skill?.hash ?? null,
+					...prepared.expectedDraft === void 0 ? {} : { expectedDraft: prepared.expectedDraft },
 					...pack.action === "create" ? { targetRoot } : {}
 				}, signal);
+				prepared.onRecorded?.();
 			} catch (error) {
 				signal.throwIfAborted();
-				if (attempt > 0) throw error;
+				if (attempt > 0 || /changed while this draft/.test(message(error))) throw error;
 				prompt += `\n\nYour previous SKILL.md was rejected: ${message(error)}. Return a corrected complete file.`;
 			}
 		}
-		if (settings.autoBacktest && pack.cases.length > 0) {
+		signal.throwIfAborted();
+		if (!prepared.deferBacktests && (settings.autoBacktest || input.backtest) && pack.cases.length > 0) {
 			await this.backtest(source, workspace, {
 				skillName: pack.skillName,
 				target: {
@@ -15007,7 +15610,10 @@ var SkillEvolution = class {
 			else {
 				const baseline = await this.backtest(source, workspace, {
 					skillName: pack.skillName,
-					target: { kind: pack.action === "update" ? "current" : "none" },
+					target: {
+						kind: pack.action === "update" ? "current" : "none",
+						...pack.action === "update" ? { draftId: draft.id } : {}
+					},
 					...input.route === void 0 ? {} : { route: input.route }
 				});
 				await source.mutate("run-link", {
@@ -15019,67 +15625,138 @@ var SkillEvolution = class {
 		return draft;
 	}
 	/** Start a backtest of one version of a skill against its enabled cases; it runs in the background. */
+	backtestSlot(signal) {
+		signal.throwIfAborted();
+		return new Promise((resolve, reject) => {
+			const abort = () => {
+				this.backtestWaiters.delete(acquire);
+				reject(signal.reason);
+			};
+			const acquire = () => {
+				if (signal.aborted) {
+					abort();
+					return;
+				}
+				if (this.activeBacktests >= 2) return;
+				this.backtestWaiters.delete(acquire);
+				signal.removeEventListener("abort", abort);
+				this.activeBacktests++;
+				resolve(() => {
+					this.activeBacktests--;
+					for (const waiter of [...this.backtestWaiters]) waiter();
+				});
+			};
+			this.backtestWaiters.add(acquire);
+			signal.addEventListener("abort", abort, { once: true });
+			acquire();
+		});
+	}
 	async backtest(port, workspace, input) {
+		if (this.disposed) throw new Error("Skill evolution has stopped");
+		input.signal?.throwIfAborted();
+		if (this.backtestJobs >= 16) throw new Error("The skill backtest queue is full. Cancel a run or retry after it finishes.");
+		this.backtestJobs++;
 		const source = retryingSource(port);
-		const settings = this.host.settings();
-		const cases = (await source.read("cases", { skill: input.skillName })).filter((entry) => entry.enabled && (input.caseIds === void 0 || input.caseIds.includes(entry.id))).slice(0, settings.casesPerRun);
-		if (cases.length === 0) throw new Error(`${input.skillName} has no enabled eval case to run`);
-		if (cases.some((entry) => entry.requiresVision !== void 0 && typeof entry.requiresVision !== "boolean")) throw new Error("requiresVision must be a boolean");
-		const resolved = await source.read("target-content", {
-			skillName: input.skillName,
-			target: input.target
-		});
-		const run = await source.mutate("run-start", {
-			skillName: input.skillName,
-			target: resolved.target,
-			caseIds: cases.map((entry) => entry.id)
-		});
-		this.background("skill backtest", async (signal) => {
-			try {
-				for (const entry of cases.filter((entry) => entry.requiresVision === true)) {
-					signal.throwIfAborted();
-					await source.mutate("run-progress", {
-						id: run.id,
-						result: {
-							caseId: entry.id,
-							title: entry.title,
-							verdict: "error",
-							score: 0,
-							unmeasuredReason: "requires-vision",
-							checks: [],
-							steps: [],
-							answer: "",
-							error: "Not measured: this case requires image input, which text-only backtests cannot receive."
-						}
+		try {
+			const settings = this.host.settings();
+			const cases = (await source.read("cases", { skill: input.skillName }, input.signal)).filter((entry) => entry.enabled && (input.caseIds === void 0 || input.caseIds.includes(entry.id))).slice(0, settings.casesPerRun);
+			if (cases.length === 0) throw new Error(`${input.skillName} has no enabled eval case to run`);
+			if (input.expectedCasesHash !== void 0 && hashSkillCases(cases) !== input.expectedCasesHash) throw new Error("Eval cases changed before this backtest started");
+			if (cases.some((entry) => entry.requiresVision !== void 0 && typeof entry.requiresVision !== "boolean")) throw new Error("requiresVision must be a boolean");
+			const resolved = await source.read("target-content", {
+				skillName: input.skillName,
+				target: input.target
+			}, input.signal);
+			const run = await source.mutate("run-start", {
+				skillName: input.skillName,
+				target: resolved.target,
+				caseIds: cases.map((entry) => entry.id),
+				...input.expectedCasesHash === void 0 ? {} : { expectedCasesHash: input.expectedCasesHash },
+				...input.route === void 0 ? {} : { model: input.route }
+			}, input.signal);
+			this.background("skill backtest", async (deadline) => {
+				const controller = new AbortController();
+				const abort = () => controller.abort(deadline.aborted ? deadline.reason : input.signal?.reason);
+				deadline.addEventListener("abort", abort, { once: true });
+				input.signal?.addEventListener("abort", abort, { once: true });
+				if (deadline.aborted || input.signal?.aborted) abort();
+				const signal = controller.signal;
+				let checking = false;
+				const watcher = setInterval(() => {
+					if (checking || signal.aborted) return;
+					checking = true;
+					source.read("run", { id: run.id }).then((current) => {
+						if (current.status !== "running") controller.abort(new Error(current.error ?? "Backtest interrupted"));
+					}).catch((error) => controller.abort(error)).finally(() => {
+						checking = false;
 					});
-				}
-				const queue = cases.filter((entry) => entry.requiresVision !== true);
-				if (queue.length > 0) await this.host.runTask(workspace, signal, async (task) => {
-					const worker = async () => {
-						for (let entry = queue.shift(); entry !== void 0; entry = queue.shift()) {
+				}, 1e3);
+				watcher.unref?.();
+				try {
+					await abortable(signal, async () => {
+						const release = await this.backtestSlot(signal);
+						try {
+							for (const entry of cases.filter((entry) => entry.requiresVision === true)) {
+								signal.throwIfAborted();
+								await source.mutate("run-progress", {
+									id: run.id,
+									result: {
+										caseId: entry.id,
+										title: entry.title,
+										verdict: "error",
+										score: 0,
+										unmeasuredReason: "requires-vision",
+										checks: [],
+										steps: [],
+										answer: "",
+										error: "Not measured: this case requires image input, which text-only backtests cannot receive."
+									}
+								}, signal);
+							}
+							const queue = cases.filter((entry) => entry.requiresVision !== true);
+							if (queue.length > 0) await abortable(signal, () => this.host.runTask(workspace, signal, async (task) => {
+								const worker = async () => {
+									for (let entry = queue.shift(); entry !== void 0; entry = queue.shift()) {
+										signal.throwIfAborted();
+										const result = await this.runCase(task, entry, input.skillName, resolved.content, signal);
+										signal.throwIfAborted();
+										await source.mutate("run-progress", {
+											id: run.id,
+											result
+										}, signal);
+									}
+								};
+								await Promise.all(Array.from({ length: Math.min(BACKTEST_CONCURRENCY, queue.length) }, worker));
+							}, input.route));
 							signal.throwIfAborted();
-							await source.mutate("run-progress", {
+							await source.mutate("run-finish", {
 								id: run.id,
-								result: await this.runCase(task, entry, input.skillName, resolved.content, signal)
-							});
+								status: "completed"
+							}, signal);
+						} finally {
+							release();
 						}
-					};
-					await Promise.all(Array.from({ length: Math.min(BACKTEST_CONCURRENCY, queue.length) }, worker));
-				}, input.route);
-				await source.mutate("run-finish", {
-					id: run.id,
-					status: "completed"
-				});
-			} catch (error) {
-				await source.mutate("run-finish", {
-					id: run.id,
-					status: "failed",
-					error: message(error)
-				}).catch(() => void 0);
-				throw error;
-			}
-		});
-		return { runId: run.id };
+					});
+				} catch (error) {
+					await source.mutate("run-finish", {
+						id: run.id,
+						status: signal.aborted ? "interrupted" : "failed",
+						error: message(signal.aborted ? signal.reason : error)
+					}).catch(() => void 0);
+					throw error;
+				} finally {
+					clearInterval(watcher);
+					deadline.removeEventListener("abort", abort);
+					input.signal?.removeEventListener("abort", abort);
+				}
+			}, 27e5).finally(() => {
+				this.backtestJobs--;
+			});
+			return { runId: run.id };
+		} catch (error) {
+			this.backtestJobs--;
+			throw error;
+		}
 	}
 	/**
 	* Execute and grade one case. A run that fails (an output limit, a missing
@@ -15093,9 +15770,15 @@ var SkillEvolution = class {
 				name: skillName,
 				...content === void 0 ? {} : { content }
 			}), SKILL_EXECUTOR_SCHEMA, SKILL_EXECUTOR_PERSONA, signal)).structured);
-			const grade = gradeCase(entry, (await this.host.skillTask(task, `Mnemon skill judge: ${entry.title}`.slice(0, 120), skillJudgePrompt(entry, executed.steps, executed.answer), SKILL_JUDGE_SCHEMA, SKILL_JUDGE_PERSONA, signal)).structured);
+			signal.throwIfAborted();
+			const judged = await this.host.skillTask(task, `Mnemon skill judge: ${entry.title}`.slice(0, 120), skillJudgePrompt(entry, executed.steps, executed.answer), SKILL_JUDGE_SCHEMA, SKILL_JUDGE_PERSONA, signal);
+			const grade = gradeCase(entry, judged.structured);
+			const raw = judged.structured;
+			const checks = Array.isArray(raw?.checks) ? raw.checks : [];
+			const fullyGraded = checks.length === entry.checks.length && entry.checks.every((_check, index) => checks.filter((check) => check?.index === index + 1 && typeof check.pass === "boolean").length === 1);
 			return {
 				caseId: entry.id,
+				fullyGraded,
 				title: entry.title,
 				verdict: grade.verdict,
 				score: grade.score,
@@ -15205,6 +15888,7 @@ var SkillEvolution = class {
 		};
 	}
 	dispose() {
+		this.automatic.dispose();
 		this.disposed = true;
 		for (const state of this.sessions.values()) if (state.timer !== void 0) clearTimeout(state.timer);
 		this.sessions.clear();
@@ -15543,14 +16227,17 @@ async function skillAssistance(runtime, lifecycle, operation, input, signal) {
 				"user-agents"
 			].includes(root)) throw new Error("unknown skill root: " + root);
 			const suggestionId = optionalString(input.suggestionId, "suggestionId");
+			const draftId = optionalString(input.draftId, "draftId");
 			const skill = optionalString(input.skill, "skill");
-			if (suggestionId === void 0 && skill === void 0) throw new Error("a draft needs a suggestion or a skill");
+			if (suggestionId === void 0 && draftId === void 0 && skill === void 0) throw new Error("a draft needs a suggestion, a draft, or a skill");
 			const guidance = optionalString(input.guidance, "guidance");
 			if (guidance !== void 0 && guidance.length > 4e3) throw new Error("guidance is too long (max 4000 characters)");
 			const draftRoute = modelRoute(input);
 			return skills.draft(source, workspaceRoot, {
+				...input.backtest === true ? { backtest: true } : {},
 				...suggestionId === void 0 ? {} : { suggestionId },
 				...skill === void 0 ? {} : { skill },
+				...draftId === void 0 ? {} : { draftId },
 				...guidance === void 0 ? {} : { guidance },
 				...root === void 0 ? {} : { targetRoot: root },
 				...draftRoute === void 0 ? {} : { route: draftRoute }
@@ -19251,9 +19938,11 @@ function apply(rawContext, rawConfig = {}) {
 	const skills = new SkillEvolution({
 		settings: () => skillSettings.get(),
 		source: (agent) => skillsSourceFor(runtime, agent),
+		taskRoute: (workspace) => lifecycle.skillTaskRoute(workspace),
 		runTask: (workspaceRoot, signal, operation, route) => lifecycle.runSkillTask(workspaceRoot, signal, operation, route),
 		skillTask: (parent, label, prompt, schema, persona, signal, _route, maxTokens) => coordinator.skillTask(parent, label, prompt, schema, persona, signal, taskRoute(parent), maxTokens)
 	});
+	ctx.effect(() => hostSettings.onUpdated(() => skills.settingsChanged()), "dsh-mnemon: automatic skill adoption settings");
 	lifecycle.useSkillEvolution(skills);
 	ctx.effect(() => {
 		const stop = autoBackup.start();