git:20261011.78540ac to git:20261012.5b2a135

# Router contracts

Shared scheduled-task update validation preserves an unchanged future `once`

instant on a live task inside `scheduler.min_once_delay_seconds`; new/changed

instants and terminal reactivation still enforce the minimum delay.

The MCP task list accepts optional `TaskStatus` and `active_only` query filters.

Pass both to the repository before its limit; preserve `threads:read`, owner

checks, current-thread incarnation scoping, and the unfiltered array response.

Custom Agent packages are strict, versioned definition-only JSON documents.

Export explicitly projects the caller's portable `AgentConfig` fields and SOUL;

exclude `github` installation bindings, memory contents, conversations and

credentials. Import may rename locally but must remain owner-scoped and

create-only: collisions return 409, never overwrite or upsert. Ordinary creation

and import share `_persist_new_agent`, which uses `run_drained_write` so a

cancelled request still drains the owned persistence worker.

Committed MCP reconciliation failures are logged once by

`fail_mcp_reconciliation`, with only the underlying exception type.

`_run_drained_mcp_apply` passes `_McpCommittedReconciliationError` as an expected

error to `run_drained_write` to avoid a duplicate diagnostic. It still drains

retired-pool cleanup outside the config locks and reports the fixed-detail 500.

Custom-skill edit, delete and rollback hold the owning root's process mutex and

`.custom.mutation.lock` sidecar across predecessor read, storage mutation and

history append. Peer Gateway processes sharing that root must use this same

critical section to preserve history ordering. Keep the sidecar distinct from

the nested projection lock, retain it across requests, and acquire/release both

off-loop inside the drained worker. Unrelated users retain independent locks;

external filesystem writers do not participate in this history guarantee.