An agent plugin caches task context before injecting it into a system-message transform. Multiple root sessions and child sessions share one process. The design problem is how to isolate cached context per session so one conversation never sees another's data, and how to cap memory when many sessions are active or idle.