dsh-mnemon 0.5.43 → 0.5.44

package/lib/index.js

@@ -6,7 +6,7 @@ import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 import { basename, delimiter, dirname, isAbsolute, join, normalize, relative, resolve, sep } from "node:path";
 import { resolveEmbedding, resolvePersistenceStrategy, resolveRecallQuality } from "dsh-mnemon-source-memory-spaces";
-import { CATEGORIES, DEFAULT_EMBEDDING_ENDPOINT, DEFAULT_EMBEDDING_MODEL, DEFAULT_EMBEDDING_PROTOCOL, EDGE_TYPES, MEMORY_PLACEMENT_CAPABILITIES, MEMORY_PROVIDER_REGISTRY_FILE, MEMORY_SPACES_DIRECTORY, MEMORY_SPACE_DATABASE_FILE, MEMORY_SPACE_ID_PATTERN, MEMORY_SPACE_NAME_MAX_LENGTH, MEMORY_SPACE_REGISTRY_FILE, MNEMON_ACTIVE_STORE_FILE, MNEMON_EMBEDDING_PROTOCOLS, SOURCES, parseMemorySpaceRegistry, summarizeMemoryProviderRegistry, summarizeMemorySpaceRegistry } from "dsh-mnemon-source-memory-spaces/contracts";
+import { CATEGORIES, DEFAULT_EMBEDDING_ENDPOINT, DEFAULT_EMBEDDING_MODEL, DEFAULT_EMBEDDING_PROTOCOL, EDGE_TYPES, EMBEDDING_CREDENTIAL_PREFIX, MEMORY_PLACEMENT_CAPABILITIES, MEMORY_PROVIDER_REGISTRY_FILE, MEMORY_SPACES_DIRECTORY, MEMORY_SPACE_DATABASE_FILE, MEMORY_SPACE_ID_PATTERN, MEMORY_SPACE_NAME_MAX_LENGTH, MEMORY_SPACE_REGISTRY_FILE, MNEMON_ACTIVE_STORE_FILE, MNEMON_EMBEDDING_PROTOCOLS, SOURCES, parseMemorySpaceRegistry, summarizeMemoryProviderRegistry, summarizeMemorySpaceRegistry } from "dsh-mnemon-source-memory-spaces/contracts";
 import { RUNTIME_ARCHIVE_DIRECTORY, RUNTIME_DIRECTORY, RUNTIME_ENTRY_DELIMITER, RUNTIME_ENTRY_MAX_BYTES, RUNTIME_LOCK_FILE, RUNTIME_LOCK_STALE_MS, RUNTIME_MEMORIES_FILE, RUNTIME_MEMORY_LIMITS, RUNTIME_MEMORY_LIMIT_MAX_BYTES, RUNTIME_MEMORY_VERSION, RUNTIME_PROJECTION_FILES, assertRuntimePinnedBudget, parseRuntimeBranches, runtimeBytes, runtimeProjection, summarizeRuntimeMemories } from "dsh-mnemon-source-runtime/contracts";
 import { createHash, randomUUID } from "node:crypto";
 import fs, { accessSync, chmodSync, closeSync, constants, copyFileSync, existsSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
@@ -392,6 +392,8 @@ const DEFAULT_SKILLS_CONFIG = Object.freeze({
 	targetScope: "user",
 	autoBacktest: true,
 	autoAdopt: false,
+	autoAdoptDailyLimit: 2,
+	autoAdoptTimeZone: "local",
 	draftMaxTokens: 32768,
 	draftRetryMaxTokens: 65536,
 	hints: true,
@@ -487,6 +489,17 @@ const SkillsConfig = z.object({
 	]).default(DEFAULT_SKILLS_CONFIG.targetScope),
 	autoBacktest: z.boolean().default(DEFAULT_SKILLS_CONFIG.autoBacktest),
 	autoAdopt: z.boolean().default(DEFAULT_SKILLS_CONFIG.autoAdopt),
+	autoAdoptDailyLimit: z.number().step(1).min(0).max(100).default(DEFAULT_SKILLS_CONFIG.autoAdoptDailyLimit),
+	autoAdoptTimeZone: z.transform(z.string(), (value) => {
+		if (value === "local") return value;
+		if (!value || value.length > 100) throw new Error("skills.autoAdoptTimeZone must be an IANA time zone or local");
+		try {
+			new Intl.DateTimeFormat("en", { timeZone: value }).format(0);
+		} catch {
+			throw new Error("skills.autoAdoptTimeZone must be an IANA time zone or local");
+		}
+		return value;
+	}).default(DEFAULT_SKILLS_CONFIG.autoAdoptTimeZone),
 	draftMaxTokens: z.number().step(1).min(128).max(131072).default(DEFAULT_SKILLS_CONFIG.draftMaxTokens),
 	draftRetryMaxTokens: z.number().step(1).min(128).max(131072).default(DEFAULT_SKILLS_CONFIG.draftRetryMaxTokens),
 	hints: z.boolean().default(DEFAULT_SKILLS_CONFIG.hints),
@@ -530,7 +543,9 @@ const MnemonEmbeddingSchema = z.object({
 	enabled: z.boolean().default(false),
 	endpoint: z.string().default(DEFAULT_EMBEDDING_ENDPOINT),
 	model: z.string().default(DEFAULT_EMBEDDING_MODEL),
-	apiKey: z.string().default(""),
+	apiKey: z.string().role("secret").default(""),
+	apiKeyEnv: z.string(),
+	apiKeyRef: z.string(),
 	protocol: z.union(MNEMON_EMBEDDING_PROTOCOLS).default(DEFAULT_EMBEDDING_PROTOCOL)
 });
 const RecallQualitySchema = z.object({
@@ -3580,6 +3595,44 @@ var MnemonReviewLedger = class {
 	}
 };
 //#endregion
+//#region src/host/disposable-directory.ts
+function makeWritable(path) {
+	let entry;
+	try {
+		entry = lstatSync(path);
+	} catch (error) {
+		if (error.code === "ENOENT") return;
+		throw error;
+	}
+	if (entry.isSymbolicLink()) return;
+	if ((entry.mode & 128) === 0) chmodSync(path, entry.mode | 128);
+	if (entry.isDirectory()) for (const name of readdirSync(path)) makeWritable(join(path, name));
+}
+/** Remove only a caller-owned disposable tree, including read-only Git packs on Windows. */
+function removeDisposableDirectory(path) {
+	try {
+		rmSync(path, {
+			recursive: true,
+			force: true
+		});
+	} catch (error) {
+		const code = error.code;
+		if (process.platform !== "win32" || ![
+			"EPERM",
+			"EACCES",
+			"ENOTEMPTY",
+			"EBUSY"
+		].includes(code ?? "")) throw error;
+		makeWritable(path);
+		rmSync(path, {
+			recursive: true,
+			force: true,
+			maxRetries: 3,
+			retryDelay: 100
+		});
+	}
+}
+//#endregion
 //#region src/host/github-transport.ts
 /**
 * How GitHub sign-in reaches GitHub.
@@ -4618,10 +4671,7 @@ var MnemonSyncSettingsStore = class {
 		};
 	}
 	clearMirror() {
-		rmSync(this.mirror(), {
-			recursive: true,
-			force: true
-		});
+		removeDisposableDirectory(this.mirror());
 	}
 };
 //#endregion
@@ -6003,16 +6053,10 @@ var MnemonGitSync = class {
 				cwd: mirror,
 				signal
 			});
-			if (origin.exitCode !== 0 || origin.stdout.trim() !== settings.repoUrl) rmSync(mirror, {
-				recursive: true,
-				force: true
-			});
+			if (origin.exitCode !== 0 || origin.stdout.trim() !== settings.repoUrl) removeDisposableDirectory(mirror);
 		}
 		if (!existsSync(join(mirror, ".git"))) {
-			rmSync(mirror, {
-				recursive: true,
-				force: true
-			});
+			removeDisposableDirectory(mirror);
 			const initialized = await this.git([
 				"init",
 				"--quiet",
@@ -6139,10 +6183,7 @@ var MnemonGitSync = class {
 		const root = this.payloadRoot(subdir);
 		const mirror = resolve(this.store.mirror());
 		if (root === mirror || !root.startsWith(mirror + (process.platform === "win32" ? "\\" : "/"))) throw new Error("sync directory escapes the mirror");
-		rmSync(root, {
-			recursive: true,
-			force: true
-		});
+		removeDisposableDirectory(root);
 		for (const [path, bytes] of Object.entries(entries)) {
 			const file = resolve(root, path);
 			mkdirSync(join(file, ".."), {
@@ -9476,7 +9517,7 @@ const WRITE_TOOL_FALLBACK_ACTION = {
 };
 function reviewReceipt(receipt) {
 	if (!mutationResultCommitted(receipt.value)) return void 0;
-	const value = object$6(receipt.value);
+	const value = object$7(receipt.value);
 	const args = optionalObject(receipt.arguments);
 	const document = optionalObject(value.document);
 	return {
@@ -9487,7 +9528,7 @@ function reviewReceipt(receipt) {
 		...typeof value.revision === "string" ? { revision: value.revision } : {}
 	};
 }
-function object$6(value) {
+function object$7(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("memory subagent returned an invalid structured result");
 	return value;
 }
@@ -9727,7 +9768,7 @@ async function runtimeArchiveSource(runtimeSource, graph, scope, view, generatio
 	return {
 		source,
 		cleanup,
-		memoryBodyIds: new Set(strings(object$6(grant.value).memoryBodyIds)),
+		memoryBodyIds: new Set(strings(object$7(grant.value).memoryBodyIds)),
 		writeScope: {
 			viewId: view.id,
 			grant
@@ -9852,13 +9893,13 @@ ${chunk.context}
 					provider = delegated.provider;
 					runId = delegated.runId;
 				}
-				const value = object$6(delegated.result.structured);
+				const value = object$7(delegated.result.structured);
 				if (value.action !== "planned") throw new Error(typeof value.summary === "string" && value.summary !== "" ? value.summary : "runtime memory archival routing failed");
 				if (!Array.isArray(value.routes) || value.routes.length === 0) throw new Error("runtime memory migration returned no routes");
 				const allowedIndexes = new Set(chunk.indexes);
 				const proposed = /* @__PURE__ */ new Map();
 				for (const candidate of value.routes) {
-					const route = object$6(candidate);
+					const route = object$7(candidate);
 					const memoryBodyId = typeof route.memoryBodyId === "string" ? route.memoryBodyId.trim() : "";
 					if (memoryBodyId === "" || !eligibleById.has(memoryBodyId)) throw new Error(`runtime memory migration selected an invalid Memory Space: ${memoryBodyId || "(empty)"}`);
 					if (!Array.isArray(route.sourceIndexes) || route.sourceIndexes.length === 0) throw new Error("runtime memory migration route must contain source indexes");
@@ -10013,10 +10054,10 @@ ${pendingMutationContext(plan)}
 
 ${runtimeSnapshotContext("user", mutable)}`;
 	const { provider, runId, result } = await context.model("compaction", "Consolidate local user profile", prompt, USER_COMPACTION_SCHEMA, USER_COMPACTION_PERSONA);
-	const value = object$6(result.structured);
+	const value = object$7(result.structured);
 	if (value.action !== "compacted") throw new Error(typeof value.summary === "string" && value.summary !== "" ? value.summary : "USER.md compaction failed");
 	const compactedEntries = Array.isArray(value.compactedEntries) ? value.compactedEntries.map((entry) => {
-		const item = object$6(entry);
+		const item = object$7(entry);
 		if (typeof item.content !== "string" || ![
 			"critical",
 			"normal",
@@ -10194,7 +10235,7 @@ async function archiveDocumentLocked(host, parent, id, signal) {
 		const cleanup = graph.source("memory-spaces", agentScope(parent, graph.config)).forInstance(identity.sourceInstanceKey).forGeneration(lease.generation);
 		const grant = authority?.context.view.readGrants.find((grant) => grant.sourceInstanceKey === identity.sourceInstanceKey && grant.schema === "dsh-mnemon.memory-spaces/v1");
 		if (authority !== void 0 && grant === void 0) throw new Error("document archive requires a Memory Space namespace grant");
-		const allowed = grant === void 0 ? void 0 : new Set(strings(object$6(grant.value).memoryBodyIds));
+		const allowed = grant === void 0 ? void 0 : new Set(strings(object$7(grant.value).memoryBodyIds));
 		const directory = await memoryService.read("body-directory", null, signal);
 		const indexable = (body) => archivableSpace(directory, body);
 		const eligible = (body) => indexable(body) && (allowed === void 0 || allowed.has(body.id));
@@ -10204,7 +10245,7 @@ async function archiveDocumentLocked(host, parent, id, signal) {
 			throw new Error("document archive requires an existing active Memory Space with exact writes and safe forget");
 		}
 		const { provider, runId, result } = await host.delegate(parent, "document-archive", "Plan managed document archive", documentArchivePrompt(document, source, bodies), [], DOCUMENT_ARCHIVE_SCHEMA, signal, "spawn", DOCUMENT_ARCHIVE_PERSONA);
-		const value = object$6(result.structured);
+		const value = object$7(result.structured);
 		const summary = typeof value.summary === "string" ? value.summary.trim() : "";
 		if (value.action !== "planned") throw new Error(summary || "document archive planning failed");
 		if (summary === "" || summary.length > 1e3) throw new Error("document archive summary must contain 1–1000 characters");
@@ -10507,6 +10548,23 @@ function openAgentTurn(agent) {
 	}
 	return open;
 }
+/** PTC dispatch records belong to a real open step, not just an open turn. */
+function openAgentStep(agent) {
+	let turn;
+	let open;
+	for (const event of agent.session.snapshotEvents()) if (event.type === "turn/start") {
+		turn = typeof event.data.turn === "number" ? event.data.turn : void 0;
+		open = void 0;
+	} else if (event.type === "turn/end" && event.data.turn === turn) {
+		turn = void 0;
+		open = void 0;
+	} else if (event.type === "step/start" && turn !== void 0 && event.data.turn === turn && typeof event.data.step === "number") open = {
+		turn,
+		step: event.data.step
+	};
+	else if (event.type === "step/end" && open?.turn === event.data.turn && open?.step === event.data.step) open = void 0;
+	return open;
+}
 /**
 * One Agent owns each turn pin. A child additionally retains its delegation
 * across parent completion, collection, and runtime swaps until it is disposed.
@@ -10677,7 +10735,7 @@ async function executeHostTool(tools, input) {
 //#region src/host/review-admission.ts
 const RESULT_TOOL = "mnemon_subagent_result";
 const CHECK_TIMEOUT_MS = 5e3;
-/** An in-turn no-op challenge through the mandatory review completion channel.
+/** An in-step no-op challenge through the mandatory review completion channel.
 * Inventory alone cannot see execution-time guards. No errors are classified as
 * permission failures, and an unavailable checkpoint is never a permanent ban.
 */
@@ -10703,7 +10761,7 @@ var AutomaticReviewAdmission = class {
 	async check(agent, signal) {
 		signal.throwIfAborted();
 		const tools = agent.ctx.tools;
-		if (this.disposed || tools?.execute === void 0 || this.draining.has(agent) || openAgentTurn(agent) === void 0) return false;
+		if (this.disposed || tools?.execute === void 0 || this.draining.has(agent) || openAgentStep(agent) === void 0) return false;
 		const controller = new AbortController();
 		this.controllers.add(controller);
 		const combined = AbortSignal.any([signal, controller.signal]);
@@ -11116,7 +11174,7 @@ var MnemonSubagentCoordinator = class {
 				if (!isSubagent(execution.agent)) throw new Error("Mnemon subagent result tools are restricted to delegated children");
 				execution.signal.throwIfAborted();
 				assertDshOutputValue(RESULT_TOOL_INPUT_SCHEMA, args);
-				const request = object$6(args);
+				const request = object$7(args);
 				const submit = this.resultRequests.get(String(request.requestId));
 				if (this.disposed || submit === void 0) throw new Error("Mnemon subagent result request is unknown or no longer active");
 				return submit(request.result, execution);
@@ -11353,7 +11411,7 @@ var MnemonSubagentCoordinator = class {
 		].join("\n\n");
 		const schema = providerPlacementSchema(prepared.candidates.map((candidate) => candidate.id));
 		const { provider, runId, result } = await this.delegate(parent, "placement", "Choose Memory Space provider", prompt, [], schema, signal, "spawn", PROVIDER_PLACEMENT_PERSONA);
-		const value = object$6(result.structured);
+		const value = object$7(result.structured);
 		return source.read("finalize-placement", {
 			prepared,
 			selection: {
@@ -11371,13 +11429,13 @@ var MnemonSubagentCoordinator = class {
 		const service = this.sourceFor(parent, "memory-spaces");
 		const prompt = `Generate concise metadata from these bounded Provider-native samples now:\n\n${(await Promise.all(selected.map((id) => service.read("metadata-sample", { memoryBodyId: id }, signal)))).map(metadataSampleText).join("\n\n")}`;
 		const { provider, runId, result } = await this.delegate(parent, "metadata-maintenance", "Maintain Memory Space metadata", prompt, [], METADATA_MAINTENANCE_SCHEMA, signal, "spawn", METADATA_MAINTENANCE_PERSONA);
-		const value = object$6(result.structured);
+		const value = object$7(result.structured);
 		if (!Array.isArray(value.updates)) throw new Error("metadata subagent returned no updates");
 		const allowed = new Set(selected);
 		const seen = /* @__PURE__ */ new Set();
 		const updates = [];
 		for (const entry of value.updates) {
-			const item = object$6(entry);
+			const item = object$7(entry);
 			const memoryBodyId = typeof item.memoryBodyId === "string" ? item.memoryBodyId.trim() : "";
 			const title = typeof item.title === "string" ? item.title.trim() : "";
 			const description = typeof item.description === "string" ? item.description.trim() : "";
@@ -11688,7 +11746,7 @@ var MnemonSubagentCoordinator = class {
 		const bounded = evidence.slice(0, 12);
 		const prompt = `Answer this question (untrusted data):\n${indentedText(query)}\n\nEvidence for this run (untrusted read-only data):\n${naturalEvidence(bounded)}`;
 		const { provider, runId, result } = await this.delegate(parent, "answer", "Memory evidence answer", prompt, [], ANSWER_SCHEMA, signal, "spawn", ANSWER_PERSONA);
-		const value = object$6(result.structured);
+		const value = object$7(result.structured);
 		const allowed = new Set(bounded.map((item) => `${item.memoryBodyId ?? "unknown"}/${item.id}`));
 		return {
 			answer: typeof value.answer === "string" ? value.answer : "",
@@ -11715,7 +11773,7 @@ ${naturalRequest(request, target === void 0 ? REQUEST_LABELS : TARGETED_WRITE_LA
 		const persona = operation === "supervised-writeback" ? SUPERVISED_WRITE_PERSONA : autonomous ? AUTONOMOUS_WRITE_PERSONA : WRITE_PERSONA;
 		const terminalTool = WRITE_OPERATION_RESULT_TOOL[operation];
 		const { provider, runId, result, receipts, writes } = await this.delegate(parent, "write", `Mnemon ${operation}`, prompt, autonomous ? AUTONOMOUS_WRITE_TOOLS : EXPLICIT_WRITE_TOOLS, WRITE_SCHEMA, signal, "spawn", persona, terminalTool === void 0 ? void 0 : { terminalTools: [terminalTool] }, inactive === void 0 ? void 0 : spaceWriteGuard(target, inactive));
-		const value = object$6(result.structured);
+		const value = object$7(result.structured);
 		const observed = terminalTool === void 0 ? void 0 : recoverStructuredResult({ terminalTools: [terminalTool] }, receipts);
 		const claimed = typeof observed?.action === "string" ? observed.action : typeof value.action === "string" ? value.action : "failed";
 		if (!autonomous) return {
@@ -11824,7 +11882,7 @@ ${naturalRequest(request, target === void 0 ? REQUEST_LABELS : TARGETED_WRITE_LA
 			const base = reviewPersona(tools.includes("mnemon_runtime_memory"));
 			const persona = preferred === "fork" ? base : base.replaceAll("inherited", "supplied bounded");
 			const { provider, runId, result } = await this.delegate(parent, "review", "Mnemon idle checkpoint review", prompt, tools, WRITE_SCHEMA, execution.signal, preferred, persona, { terminalTools: writers }, void 0, void 0, admission);
-			const value = object$6(result.structured);
+			const value = object$7(result.structured);
 			return {
 				delegated: true,
 				runId,
@@ -11995,7 +12053,7 @@ This is the only completion channel for this run. Do not finish with a plain-tex
 				"failed",
 				"partial",
 				"unknown"
-			].includes(String(object$6(structured).action))) throw new Error(`memory review reported ${object$6(structured).action}`);
+			].includes(String(object$7(structured).action))) throw new Error(`memory review reported ${object$7(structured).action}`);
 			completed = {
 				provider,
 				runId: activeRun.id,
@@ -12158,7 +12216,7 @@ const MNEMON_ACTIVITY_SCHEMA = "dsh-mnemon.activity/v1";
 const MAX_ITEMS = 8;
 const MAX_TITLE = 160;
 const MAX_EXCERPT = 500;
-function object$5(value) {
+function object$6(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function bounded(value, maximum) {
@@ -12168,7 +12226,7 @@ function bounded(value, maximum) {
 	return truncate(normalized, maximum);
 }
 function item(value, index) {
-	const entry = object$5(value);
+	const entry = object$6(value);
 	if (entry === void 0) return void 0;
 	const content = bounded(entry.content ?? entry.text ?? entry.excerpt, MAX_EXCERPT);
 	const explicitTitle = bounded(entry.title ?? entry.label ?? entry.name ?? entry.memoryBodyName, MAX_TITLE);
@@ -12182,7 +12240,7 @@ function item(value, index) {
 	};
 }
 function resultItems(value) {
-	const root = object$5(value);
+	const root = object$6(value);
 	if (root === void 0) return [];
 	const candidates = [
 		root.results,
@@ -12201,8 +12259,8 @@ function resultItems(value) {
 	return items;
 }
 function writeItem(argsValue, operationId) {
-	const outer = object$5(argsValue) ?? {};
-	const input = object$5(outer.input) ?? outer;
+	const outer = object$6(argsValue) ?? {};
+	const input = object$6(outer.input) ?? outer;
 	const content = bounded(input.content ?? input.description ?? input.reason ?? input.summary ?? input.old_text ?? input.oldText, MAX_EXCERPT);
 	const explicitTitle = bounded(input.title ?? input.name, MAX_TITLE);
 	const identity = bounded(input.id ?? input.memoryBodyId ?? input.targetMemoryBodyId ?? input.sourceId, 300);
@@ -12214,7 +12272,7 @@ function writeItem(argsValue, operationId) {
 	};
 }
 function reference(argsValue, key) {
-	return bounded(object$5(argsValue)?.[key], 600);
+	return bounded(object$6(argsValue)?.[key], 600);
 }
 function memoryReadPresentation(sourceTypeId, operationId, referenceKey) {
 	return (args, value) => ({
@@ -12233,7 +12291,7 @@ function memoryWritePresentation(sourceTypeId, operationId, referenceKey) {
 		operationId,
 		...sourceTypeId === void 0 ? {} : { sourceTypeId },
 		...referenceKey === void 0 || reference(args, referenceKey) === void 0 ? {} : { reference: reference(args, referenceKey) },
-		committed: mutationResultCommitted(value) || operationId === "mutate" && object$5(value)?.success === true,
+		committed: mutationResultCommitted(value) || operationId === "mutate" && object$6(value)?.success === true,
 		item: writeItem(args, operationId)
 	});
 }
@@ -12243,7 +12301,7 @@ function namedToolPresentation(name) {
 	return tool.kind === "write" ? memoryWritePresentation(tool.sourceTypeId, tool.operation) : memoryReadPresentation(tool.sourceTypeId, tool.operation);
 }
 function validItem(value) {
-	const entry = object$5(value);
+	const entry = object$6(value);
 	return entry !== void 0 && bounded(entry.id, 300) === entry.id && bounded(entry.title, MAX_TITLE) === entry.title && (entry.excerpt === void 0 || bounded(entry.excerpt, MAX_EXCERPT) === entry.excerpt);
 }
 function cleanItem(value) {
@@ -12256,7 +12314,7 @@ function cleanItem(value) {
 }
 /** Fail closed on arbitrary third-party/session metadata. */
 function parseMnemonActivityMeta(value, callId, toolName) {
-	const meta = object$5(value);
+	const meta = object$6(value);
 	if (meta?.schema !== "dsh-mnemon.activity/v1" || meta.kind !== "read" && meta.kind !== "write") return {};
 	const operationId = bounded(meta.operationId, 300);
 	const sourceTypeId = bounded(meta.sourceTypeId, 128);
@@ -12825,6 +12883,7 @@ var MnemonAgentLifecycle = class {
 	reviewController;
 	reviewRunning = false;
 	reviewAccessBlocked = false;
+	reviewAdmission;
 	lastReviewAt;
 	lastReviewAction;
 	lastReviewScore;
@@ -12862,6 +12921,10 @@ var MnemonAgentLifecycle = class {
 			this.agent.ctx.on("session/event", ((session, event) => this.sessionEvent(session, event))),
 			this.agent.ctx.on("system-prompt/assemble", ((assembly, context, next) => this.assemblePrompt(assembly, context, next))),
 			this.agent.ctx.on("agent/pre-step", ((payload, next) => this.preStep(payload, next)), { prepend: true }),
+			this.agent.ctx.on("agent/request", (async (payload, next) => {
+				await this.prepareReviewAccess(payload);
+				return next();
+			}), { prepend: true }),
 			this.agent.ctx.on("agent/turn-stopping", ((payload) => this.finishTurn(payload)))
 		];
 		return () => {
@@ -13006,18 +13069,28 @@ var MnemonAgentLifecycle = class {
 		activity.toolCallCount = tools.count;
 		activity.toolNames = tools.names;
 		if (!this.reviewActivity().eligible || !this.reviewAdmitted(payload.turn)) return;
+		const admission = this.reviewAdmission;
+		if (admission?.turn === payload.turn && admission.policy === this.reviewPolicy() && admission.available) this.scheduleIdleReview(payload.turn);
+	}
+	async prepareReviewAccess(payload) {
+		this.recordComposedTurn(payload.turn);
+		if (payload.signal.aborted || !this.restoreWatermark() || !this.idleReviewAllowed() || this.turnActivity.get(payload.turn)?.noMaintenance) return;
+		const policy = this.reviewPolicy();
+		if (this.reviewAdmission?.turn === payload.turn && this.reviewAdmission.policy === policy) return;
 		const controller = new AbortController();
 		const signal = AbortSignal.any([payload.signal, controller.signal]);
 		const epoch = this.reviewEpoch;
-		const policy = this.reviewPolicy();
 		this.reviewController = controller;
 		this.reviewRunning = true;
-		let admitted = false;
 		try {
 			const available = await this.coordinator.checkReviewAccess(this.agent, signal);
 			if (signal.aborted || epoch !== this.reviewEpoch || policy !== this.reviewPolicy() || !this.idleReviewAllowed()) return;
 			this.reviewAccessBlocked = !available;
-			admitted = available;
+			this.reviewAdmission = {
+				turn: payload.turn,
+				policy,
+				available
+			};
 		} catch (error) {
 			if (!signal.aborted) this.fail(error);
 		} finally {
@@ -13026,7 +13099,6 @@ var MnemonAgentLifecycle = class {
 				this.reviewController = void 0;
 			}
 		}
-		if (admitted) this.scheduleIdleReview(payload.turn);
 	}
 	sessionEvent(session, event) {
 		if (session !== this.agent.session) return;
@@ -13119,6 +13191,7 @@ var MnemonAgentLifecycle = class {
 		if (policy !== this.observedReviewPolicy) {
 			this.cancelIdleReview(true);
 			this.reviewAccessBlocked = false;
+			this.reviewAdmission = void 0;
 		}
 		this.observedReviewPolicy = policy;
 		this.restoreWatermark();
@@ -14139,9 +14212,17 @@ var SkillAutoAdoption = class {
 			if (suggestion?.status !== "pending" || suggestion.draftId !== void 0) throw new AutomaticSkillStop("changed");
 			job.action = suggestion.action;
 			this.checkpoint(job);
+			const settings = this.host.settings();
+			const reserved = await job.source.mutate("auto-adoption-reserve", {
+				id: job.id,
+				limit: settings.autoAdoptDailyLimit,
+				timeZone: settings.autoAdoptTimeZone
+			}, job.controller.signal);
+			if (!reserved.allowed) throw new AutomaticSkillStop(reserved.reason, `${reserved.used}/${reserved.limit} · ${reserved.date} · ${reserved.timeZone}`);
 			await this.record(job, {
 				stage: "queued",
-				attempt
+				attempt,
+				detail: `${reserved.used}/${reserved.limit} · ${reserved.date} · ${reserved.timeZone}`
 			});
 			const cases = (await job.source.read("cases", { skill: suggestion.skillName })).filter((entry) => entry.enabled);
 			if (cases.length === 0) throw new AutomaticSkillStop("no-cases");
@@ -14213,6 +14294,7 @@ var SkillAutoAdoption = class {
 					await job.source.mutate("draft-adopt", {
 						id: draft.id,
 						automatic: {
+							reservationId: reserved.reservationId,
 							draftHash: hashSkillDraft(draft),
 							baselineRunId: baseline.runId,
 							draftRunId: candidate.runId,
@@ -14244,7 +14326,7 @@ var SkillAutoAdoption = class {
 				attempt: Math.min(attempt, 3),
 				reason,
 				...scores,
-				...failure instanceof AutomaticSkillStop ? {} : { detail: failure instanceof Error ? failure.message : String(failure) }
+				...failure instanceof AutomaticSkillStop && failure.message === failure.reason ? {} : { detail: failure instanceof Error ? failure.message : String(failure) }
 			}).catch((recordError) => this.host.warn("Could not record automatic adoption outcome", recordError));
 		} finally {
 			for (const id of runIds) await job.source.mutate("run-cancel", { id }).catch((error) => this.host.warn("Could not stop automatic skill backtest", error));
@@ -15120,7 +15202,9 @@ function newSkillRoot(settings, source, catalog, explicit) {
 		if (settings.targetScope === "storage" && source.scope === void 0) throw new Error("The skill destination needs a known storage scope; select User or Project in Skills settings.");
 		root = settings.targetScope === "project" || settings.targetScope === "storage" && (source.scope?.storage === "workspace" || source.scope?.storage === "workspaces") ? "project-dsh" : "user-dsh";
 	}
-	const directory = catalog.roots.find((candidate) => candidate.kind === root)?.path;
+	const destination = catalog.roots.find((candidate) => candidate.kind === root);
+	if (destination?.readOnly) throw new Error(`Cannot create a skill in ${root}: linked skill roots are read-only.`);
+	const directory = destination?.path;
 	if (directory === void 0 || root.startsWith("project-") && catalog.projectRoot === void 0) throw new Error("Project skill roots need a selected workspace; select a workspace or choose User in Skills settings.");
 	if (root.startsWith("project-")) try {
 		if (!statSync(catalog.projectRoot).isDirectory()) throw new Error("not a directory");
@@ -15456,6 +15540,7 @@ var SkillEvolution = class {
 			...input.draftId === void 0 ? {} : { draftId: input.draftId },
 			...input.skill === void 0 ? {} : { skill: input.skill }
 		});
+		if (pack.skill?.readOnly) throw new Error("Linked skills are read-only; use a local copy before generating an improvement draft.");
 		const previousId = input.draftId ?? pack.suggestion?.draftId;
 		const previous = previousId === void 0 ? (await source.read("drafts", {
 			skill: pack.skillName,
@@ -15510,6 +15595,7 @@ var SkillEvolution = class {
 			return await abortable(signal, async () => {
 				const pack = await source.read("evidence-pack", { suggestionId: input.suggestionId }, signal);
 				signal.throwIfAborted();
+				if (pack.skill?.readOnly) throw new AutomaticSkillStop("changed");
 				if (pack.action !== input.action || pack.action === "update" && pack.suggestion?.skillFileHash !== pack.skill?.hash) throw new AutomaticSkillStop("changed");
 				const targetRoot = pack.action === "update" ? pack.skill.root : newSkillRoot(this.host.settings(), source, await source.read("catalog", null, signal), input.previous?.targetRoot ?? pack.suggestion?.targetRoot);
 				const guidance = [...input.previous?.guidance ?? [], ...input.guidance === "" ? [] : [input.guidance]].slice(-8);
@@ -15923,7 +16009,7 @@ function skillsSourceFor(runtime, agent) {
 }
 //#endregion
 //#region src/host/rpc.ts
-function object$4(value) {
+function object$5(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("payload must be an object");
 	return value;
 }
@@ -16119,7 +16205,7 @@ async function assisted(runtime, lifecycle, typeId, operation, input, signal, ta
 				...signal === void 0 ? {} : { signal }
 			});
 			return {
-				...object$4(result.value),
+				...object$5(result.value),
 				revision: result.revision
 			};
 		} finally {
@@ -16246,7 +16332,7 @@ async function skillAssistance(runtime, lifecycle, operation, input, signal) {
 		case "skill-backtest": {
 			const skillName = optionalString(input.skillName, "skillName");
 			if (skillName === void 0) throw new Error("skillName is required");
-			const target = object$4(input.target);
+			const target = object$5(input.target);
 			if (![
 				"current",
 				"draft",
@@ -16286,7 +16372,7 @@ async function skillAssistance(runtime, lifecycle, operation, input, signal) {
 function createReadHandler(input, lifecycle, versions) {
 	return async (endpoint, rawPayload, signal) => {
 		try {
-			const payload = object$4(rawPayload);
+			const payload = object$5(rawPayload);
 			if (endpoint === "versions") {
 				if (versions === void 0) throw new Error("version checks are unavailable");
 				return success$1(await versions.check());
@@ -16307,7 +16393,7 @@ function createReadHandler(input, lifecycle, versions) {
 					if (lifecycle === void 0 || payload.operation !== "agent-search") throw new Error("Read-only Host assistance is unavailable");
 					const source = (await catalog(runtime, lifecycle)).sources.find((item) => item.sourceInstanceKey === payload.sourceInstanceKey);
 					if (source === void 0 || !source.assistance.includes("agent-search")) throw new Error("Host assistance is not available for this Source instance");
-					const value = await assisted(runtime, lifecycle, source.sourceTypeId, "agent-search", object$4(payload.input), signal);
+					const value = await assisted(runtime, lifecycle, source.sourceTypeId, "agent-search", object$5(payload.input), signal);
 					return success$1({
 						revision: (await catalog(runtime)).sources.find((item) => item.sourceInstanceKey === source.sourceInstanceKey)?.revision ?? source.revision,
 						value
@@ -16419,9 +16505,9 @@ function createActivationHandler(input) {
 	return async (endpoint, rawPayload, signal) => {
 		try {
 			if (endpoint === "source-assistance") {
-				const payload = object$4(rawPayload);
+				const payload = object$5(rawPayload);
 				if (payload.operation !== "activation" || payload.confirmed !== true) throw new Error("Unsupported activation operation");
-				const fields = object$4(payload.input);
+				const fields = object$5(payload.input);
 				if (Object.keys(fields).some((key) => key !== "memoryBodyId" && key !== "active") || typeof fields.active !== "boolean" || typeof fields.memoryBodyId !== "string") throw new Error("Activation accepts only a Memory Space id and boolean state");
 				const runtime = scoped(input, payload);
 				requireWritable(runtime);
@@ -16445,7 +16531,7 @@ function createActivationHandler(input) {
 				}
 			}
 			if (endpoint !== "body") return badRequest$1("unknown activation endpoint: " + endpoint);
-			const payload = object$4(rawPayload);
+			const payload = object$5(rawPayload);
 			const unexpected = Object.keys(payload).filter((field) => !ACTIVATION_FIELDS.has(field));
 			if (unexpected.length > 0) return badRequest$1("unsupported activation fields: " + unexpected.join(", "));
 			if (typeof payload.memoryBodyId !== "string" || payload.memoryBodyId.trim() === "") return badRequest$1("memoryBodyId must be a non-empty string");
@@ -16464,7 +16550,7 @@ function createActivationHandler(input) {
 function createWriteHandler(input, lifecycle, versions) {
 	return async (endpoint, rawPayload, signal) => {
 		try {
-			const payload = object$4(rawPayload);
+			const payload = object$5(rawPayload);
 			if (endpoint === "version-update") {
 				if (versions === void 0) throw new Error("version updates are unavailable");
 				if (!input.config.writeEnabled) throw new Error("dsh-mnemon is configured read-only (writeEnabled: false)");
@@ -16500,12 +16586,12 @@ function createWriteHandler(input, lifecycle, versions) {
 				if (source === void 0 || !source.assistance.includes(operation)) throw new Error("Host assistance is not available for this Source instance");
 				requireLayerOn(runtime, source.sourceTypeId);
 				if (operation !== "agent-search" && (payload.confirmed !== true || payload.expectedRevision !== source.revision)) throw new Error("Host assistance requires confirmation of the current Source revision");
-				const value = await assisted(runtime, lifecycle, source.sourceTypeId, operation, object$4(payload.input), signal, {
+				const value = await assisted(runtime, lifecycle, source.sourceTypeId, operation, object$5(payload.input), signal, {
 					sourceInstanceKey: source.sourceInstanceKey,
 					expectedRevision: source.revision
 				});
 				if (source.sourceTypeId === "runtime") return success$1({
-					revision: object$4(value).revision,
+					revision: object$5(value).revision,
 					value
 				});
 				return success$1({
@@ -16549,7 +16635,7 @@ function createWriteHandler(input, lifecycle, versions) {
 function createPackHandler(input, nativeDirectoryPicker = () => false) {
 	return async (endpoint, rawPayload) => {
 		try {
-			const payload = object$4(rawPayload);
+			const payload = object$5(rawPayload);
 			const runtime = scoped(input, payload);
 			const manager = runtime.graph.packs;
 			if (endpoint === "target") return success$1({
@@ -16586,7 +16672,7 @@ function githubAuth(input) {
 function createSyncHandler(input, onConfigured) {
 	return async (endpoint, rawPayload, signal) => {
 		try {
-			const payload = object$4(rawPayload);
+			const payload = object$5(rawPayload);
 			const runtime = scoped(input, payload);
 			const sync = runtime.graph.sync;
 			if (endpoint === "status") return success$1(await sync.status(signal));
@@ -16659,7 +16745,7 @@ function createSyncHandler(input, onConfigured) {
 function createReviewHandler(input, lifecycle) {
 	return async (endpoint, rawPayload, signal) => {
 		try {
-			const payload = object$4(rawPayload);
+			const payload = object$5(rawPayload);
 			const ledger = input.reviews;
 			if (endpoint === "view") return success$1(ledger.view());
 			if (endpoint === "opinion") {
@@ -16746,6 +16832,106 @@ function hasNativeDirectoryPicker(ctx) {
 	}
 }
 //#endregion
+//#region src/host/embedding-settings.ts
+const object$4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : {};
+/** Preserve other Host redaction while never returning a legacy inline key. */
+function publicEmbeddingSettings(value, original, metadata = false) {
+	const config = object$4(value);
+	if (!metadata && config.embedding === void 0) return value;
+	const embedding = object$4(config.embedding);
+	const raw = object$4(object$4(original).embedding);
+	const apiKeyStorage = raw.apiKeyEnv ? "environment" : raw.apiKeyRef ? "credentials" : raw.apiKey ? "legacy" : "none";
+	return {
+		...config,
+		embedding: {
+			...embedding,
+			..."apiKey" in embedding ? { apiKey: "" } : {},
+			...metadata ? {
+				apiKeyStorage,
+				apiKeyConfigured: apiKeyStorage !== "none"
+			} : {}
+		}
+	};
+}
+/** Write/verify a new record before referencing it; failures keep the old configuration and key intact. */
+async function prepareEmbeddingSettings(settings, namespace, operations, revision, store) {
+	const last = operations.findLastIndex((operation) => operation.path.length === 1 && operation.path[0] === "embedding");
+	if (namespace !== "mnemon" || last === -1) return {
+		operations,
+		revision
+	};
+	const operation = operations[last];
+	const edits = operations.filter((entry, index) => index === last || entry.path[0] !== "embedding");
+	if (operation.op === "unset") return {
+		operations: edits,
+		revision
+	};
+	const view = settings.describe({ redactSecrets: false }).find((candidate) => candidate.ns === namespace);
+	if (view === void 0) throw new Error("Mnemon settings are unavailable");
+	if (revision !== void 0 && revision !== view.revision) throw new Error("Settings changed; reload before saving the embedding connection");
+	const previous = resolveEmbedding(object$4(object$4(view.value).embedding));
+	const input = object$4(operation.value);
+	if (typeof operation.value !== "object" || operation.value === null || Array.isArray(operation.value)) throw new Error("Embedding settings must be an object");
+	if (input.apiKey !== void 0 && typeof input.apiKey !== "string") throw new Error("Embedding API key must be text");
+	if (input.clearApiKey !== void 0 && typeof input.clearApiKey !== "boolean") throw new Error("clearApiKey must be boolean");
+	const { apiKeyStorage: _storage, apiKeyConfigured: _configured, clearApiKey: _clear, ...next } = input;
+	let resolved = resolveEmbedding(next);
+	let rollback;
+	if (input.clearApiKey === true) {
+		next.apiKey = "";
+		next.apiKeyRef = "";
+		next.apiKeyEnv = "";
+	} else if (resolved.apiKeyEnv) {
+		if (resolved.apiKey) throw new Error("Choose an embedding API key or an environment variable, not both");
+		next.apiKey = "";
+		next.apiKeyRef = "";
+	} else {
+		if (resolved.apiKeyRef && resolved.apiKeyRef !== previous.apiKeyRef) throw new Error("Save a key to create an embedding credential reference");
+		const sameEndpoint = resolved.endpoint === previous.endpoint;
+		if (!resolved.apiKey && !sameEndpoint && (previous.apiKeyRef || previous.apiKey)) throw new Error("Changing the embedding endpoint requires a new key, an environment variable, or explicitly removing the saved key");
+		const key = resolved.apiKey || (sameEndpoint ? previous.apiKey : "");
+		if (key) {
+			const credentials = store?.();
+			if (credentials === void 0) throw new Error("DSH credentials storage is unavailable; configure apiKeyEnv instead. The existing connection was not changed");
+			const reference = EMBEDDING_CREDENTIAL_PREFIX + randomUUID();
+			const payload = {
+				version: 1,
+				endpoint: resolved.endpoint,
+				apiKey: key
+			};
+			rollback = async () => {
+				await credentials.deleteRecord(reference);
+			};
+			try {
+				await credentials.modifyRecord(reference, async () => ({
+					kind: "grant",
+					payload
+				}));
+				const record = await credentials.readRecord(reference);
+				if (record?.kind !== "grant" || record.payload?.version !== 1 || record.payload.endpoint !== payload.endpoint || record.payload.apiKey !== key) throw new Error("Credential readback failed");
+			} catch {
+				await rollback().catch(() => {});
+				throw new Error("Could not save and verify the embedding credential; the existing connection was not changed");
+			}
+			next.apiKey = "";
+			next.apiKeyRef = reference;
+		} else if (sameEndpoint && previous.apiKeyRef) {
+			next.apiKey = "";
+			next.apiKeyRef = previous.apiKeyRef;
+		}
+	}
+	resolved = resolveEmbedding(next);
+	if (resolved.apiKey) throw new Error("Embedding settings must not persist a plaintext key");
+	return {
+		operations: edits.map((entry) => entry === operation ? {
+			...entry,
+			value: next
+		} : entry),
+		revision: revision ?? view.revision,
+		...rollback === void 0 ? {} : { rollback }
+	};
+}
+//#endregion
 //#region src/host/settings.ts
 function success(value) {
 	return {
@@ -16776,14 +16962,16 @@ function badRequest(message) {
 function descriptor(settings, namespace) {
 	const view = settings.describe({ redactSecrets: true }).find((candidate) => candidate.ns === namespace);
 	if (view === void 0) throw new Error(`${namespace} settings namespace is unavailable`);
+	const raw = namespace === "mnemon" ? settings.describe({ redactSecrets: false }).find((candidate) => candidate.ns === namespace) : void 0;
+	const visible = namespace === "mnemon" ? publicEmbeddingSettings(view.value, raw?.value, true) : view.value;
 	return {
 		status: "ready",
 		value: namespace === "mnemon" && displayModeOf(view.value) === "buildin" ? {
-			...object$3(view.value),
+			...object$3(visible),
 			displayMode: "builtin"
-		} : view.value,
-		base: view.base,
-		user: view.user,
+		} : visible,
+		base: namespace === "mnemon" ? publicEmbeddingSettings(view.base, raw?.base) : view.base,
+		user: namespace === "mnemon" ? publicEmbeddingSettings(view.user, raw?.user) : view.user,
 		revision: view.revision,
 		writable: settings.writable,
 		mode: "host",
@@ -16860,7 +17048,7 @@ function mutablePath(namespace, path) {
 	if (path.length === 4 && path[0] === "memoryTopology" && path[1] === "layers" && path[3] === "enabled") return MEMORY_LAYER_ID.test(path[2]);
 	return INTERACTION_PATHS.some((allowed) => allowed.length === path.length && allowed.every((segment, index) => segment === path[index]));
 }
-function createSettingsHandler(settings) {
+function createSettingsHandler(settings, credentials) {
 	return async (endpoint, rawPayload) => {
 		let namespace = MNEMON_SETTINGS_NAMESPACE;
 		try {
@@ -16887,7 +17075,13 @@ function createSettingsHandler(settings) {
 				};
 			});
 			const revision = payload.expectedRevision === void 0 ? void 0 : Number(payload.expectedRevision);
-			await settings.mutate(namespace, ops, revision);
+			const prepared = await prepareEmbeddingSettings(settings, namespace, ops, revision, credentials);
+			try {
+				await settings.mutate(namespace, prepared.operations, prepared.revision);
+			} catch (error) {
+				await prepared.rollback?.().catch(() => {});
+				throw error;
+			}
 			if (namespace === "mnemon") await migrateLegacyDisplayMode(settings);
 			return success(descriptor(settings, namespace));
 		} catch (error) {
@@ -16895,8 +17089,8 @@ function createSettingsHandler(settings) {
 		}
 	};
 }
-function registerSettingsRpc(connection, settings) {
-	const handler = createSettingsHandler(settings);
+function registerSettingsRpc(connection, settings, credentials) {
+	const handler = createSettingsHandler(settings, credentials);
 	connection.rpc.handle(MNEMON_SETTINGS_CHANNEL, handler);
 	return handler;
 }
@@ -19981,7 +20175,7 @@ function apply(rawContext, rawConfig = {}) {
 			pluginCommand: () => dshPluginCommand(ctx.get("profileContext"))
 		});
 		const rpc = registerRpc(connection, runtime, lifecycle, versions, () => autoBackup.refresh(), () => hasNativeDirectoryPicker(ctx));
-		const settings = registerSettingsRpc(connection, hostSettings);
+		const settings = registerSettingsRpc(connection, hostSettings, () => ctx.get("credentials") ?? ctx.credentials);
 		const view = registerViewRpc(connection, runtime, extensions, memoryPlugins, lifecycle, pluginInstallation);
 		if (Context.is(webContext)) new MnemonRemoteService(webContext, {
 			...rpc,