@mindstudio-ai/remy 0.1.322 → 0.1.324

package/dist/automatedActions/_resumed.md

@@ -0,0 +1,3 @@
+This step was already started once and was interrupted before it finished. Work may have continued in the conversation since — including work that covers part or all of it.
+
+Take stock of the current state of the project before you act, and pick up from there rather than starting over. If everything below has already been done, say so briefly and end the turn.

package/dist/headless.d.ts

@@ -270,6 +270,19 @@ declare class HeadlessSession {
      * pipeline where it stopped. Holding only the remainder would resume one step
      * PAST the interruption, polishing and finalizing half-built code.
      *
+     * That re-queued step is marked `resumed`, which is what stops it being a
+     * verbatim replay. The message the user sends to un-pause a build is usually
+     * the rest of that build ("try again, I fixed the adapter") and Remy does the
+     * work inside that turn — so re-delivering the original "build everything
+     * now" afterwards had it rebuild an app it had just finished.
+     *
+     * `reason: 'shutdown'` is the environment taking the agent down rather than a
+     * person pressing Stop. It pauses identically — nothing may start a turn
+     * while the workspace is being tarred — but tags the chain steps it holds so
+     * the next boot releases them and the pipeline carries on by itself. Called
+     * from the stdin `cancel` (the sandbox's pre-destroy quiesce) and from our own
+     * SIGTERM handler, whichever gets there first.
+     *
      * A compaction is cancelled here too, unconditionally. It gates every queued
      * message and outlives the turn that started it, so leaving it running means
      * Stop can't reach idle. The cost is the summary work in flight; the forced
@@ -285,9 +298,10 @@ declare class HeadlessSession {
      * Remove pending queued messages: all user messages (no id), or a single item
      * by id. Does not affect the in-flight turn (use `cancel` for that).
      *
-     * Held chain items — a paused pipeline — are removable only by explicit id.
-     * The id-less form is the queue card's "Clear" and the pre-destroy quiesce,
-     * neither of which should get to decide the pipeline's fate. A DELIVERABLE
+     * Held chain items — a paused pipeline — are removable only by explicit id:
+     * the queue card's Discard sends one call per step, and its per-step X sends
+     * one. The id-less form is the card's "Clear", which is about the user's own
+     * messages and shouldn't get to decide the pipeline's fate. A DELIVERABLE
      * chain item is never removable: that's live pipeline work. (The step
      * actually running isn't in the queue at all — drainQueueLoop takes it out
      * before running it.)

package/dist/headless.js

@@ -981,6 +981,34 @@ function parseSentinel(text) {
   }
   return { name: match[1], remainder: match[2] };
 }
+function sentinelParams(text) {
+  const parsed = parseSentinel(text);
+  if (!parsed) {
+    return {};
+  }
+  const firstLine = parsed.remainder.split("\n")[0].trim();
+  if (!firstLine) {
+    return {};
+  }
+  try {
+    const value = JSON.parse(firstLine);
+    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+  } catch {
+    return {};
+  }
+}
+function setSentinelParams(text, patch) {
+  const parsed = parseSentinel(text);
+  if (!parsed) {
+    return text;
+  }
+  const newlineAt = parsed.remainder.indexOf("\n");
+  const body = newlineAt === -1 ? "" : parsed.remainder.slice(newlineAt + 1);
+  const params = { ...sentinelParams(text), ...patch };
+  const line = `${sentinel(parsed.name)}${JSON.stringify(params)}`;
+  return body ? `${line}
+${body}` : line;
+}
 function stripSentinelLine(text) {
   return text.replace(/^@@automated::[^@]*@@[^\n]*\n?/, "");
 }
@@ -2334,11 +2362,23 @@ var bashTool = {
     const maxLines = input.maxLines === 0 ? Infinity : input.maxLines || DEFAULT_MAX_LINES2;
     const timeoutMs = input.timeout ? input.timeout * 1e3 : DEFAULT_TIMEOUT_MS;
     return new Promise((resolve4) => {
-      const child = spawn2("sh", ["-c", input.command], {
+      const child = spawn2("bash", ["-c", input.command], {
         // Pinned rather than inherited. `undefined` here means "wherever the
         // process happens to be", which is the project root only by luck.
         cwd: input.cwd ? path7.resolve(PROJECT_ROOT, input.cwd) : PROJECT_ROOT,
-        env: { ...process.env, FORCE_COLOR: "1" }
+        // Output is rendered in a terminal view in the IDE, so ask tools for
+        // color. The devbox image sets none of these — it declares only
+        // WORKSPACE_DIR, LANG, LC_ALL, PIP_BREAK_SYSTEM_PACKAGES,
+        // NPM_CONFIG_PREFIX and PATH — and a container gets no TERM unless
+        // something sets it, so without TERM anything driving terminfo assumes
+        // a dumb terminal. Same trio the sandbox's pty handler sets, for the
+        // same reason; FORCE_COLOR alone only reaches the Node/chalk ecosystem.
+        env: {
+          ...process.env,
+          TERM: "xterm-256color",
+          CLICOLOR: "1",
+          FORCE_COLOR: "1"
+        }
       });
       let output = "";
       child.stdout.on("data", (chunk) => {
@@ -3374,6 +3414,10 @@ function acquireBrowserLock() {
 // src/toolRegistry.ts
 var log6 = createLogger("tool-registry");
 var USER_CANCELLED_RESULT = "[USER CANCELLED] The user manually cancelled this tool. Do not retry it automatically \u2014 wait for the user\u2019s next message for direction.";
+var ENV_INTERRUPTED_RESULT = "[INTERRUPTED] The environment shut down while this tool was running. No user action was involved \u2014 pick up from here.";
+function cancelledToolResult(signal) {
+  return signal?.reason === "shutdown" ? ENV_INTERRUPTED_RESULT : USER_CANCELLED_RESULT;
+}
 var ToolRegistry = class {
   entries = /* @__PURE__ */ new Map();
   onEvent;
@@ -3448,6 +3492,20 @@ ${partial}` : "[INTERRUPTED] Tool execution was stopped.";
 };
 
 // src/recording.ts
+function collectRecordings(messages) {
+  const recordings = [];
+  for (const msg of messages) {
+    if (msg.role !== "assistant" || !Array.isArray(msg.content)) {
+      continue;
+    }
+    for (const block of msg.content) {
+      if (block.type === "tool" && block.recording) {
+        recordings.push(block.recording);
+      }
+    }
+  }
+  return recordings;
+}
 function liftRecording(result) {
   if (!result.includes('"recording"')) {
     return { result };
@@ -3503,6 +3561,18 @@ function capToolResult(result, maxBytes = MAX_TOOL_RESULT_BYTES) {
 }
 var MAX_SUBAGENT_RESULT_BYTES = 32 * 1024;
 var MAX_SUBAGENT_TRANSCRIPT_BYTES = 512 * 1024;
+function attachSubAgentTranscript(block, messages) {
+  if (!block.recordings) {
+    const recordings = collectRecordings(messages);
+    if (recordings.length > 0) {
+      block.recordings = recordings;
+    }
+  }
+  block.subAgentMessages = capSubAgentTranscript(messages);
+}
+function dropToolResultMessages(messages) {
+  return messages.filter((m) => !(m.role === "user" && m.toolCallId));
+}
 function capSubAgentTranscript(messages) {
   for (const msg of messages) {
     capMessageForHistory(msg, MAX_SUBAGENT_RESULT_BYTES);
@@ -3547,7 +3617,7 @@ function capMessageForHistory(msg, maxBytes = MAX_TOOL_RESULT_BYTES) {
         );
       }
       if (Array.isArray(block.subAgentMessages)) {
-        block.subAgentMessages = capSubAgentTranscript(block.subAgentMessages);
+        attachSubAgentTranscript(block, block.subAgentMessages);
       }
     }
   } else if (msg.role === "user" && msg.toolCallId && typeof msg.content === "string") {
@@ -3892,7 +3962,7 @@ ${partial}` : "[INTERRUPTED] Agent was interrupted before producing output.",
           messages: thisInvocation()
         };
       }
-      return { text: USER_CANCELLED_RESULT, messages: thisInvocation() };
+      return { text: cancelledToolResult(signal), messages: thisInvocation() };
     }
     let lastToolResult = "";
     let watchedBlocks = [];
@@ -4128,7 +4198,7 @@ ${partial}` : "[INTERRUPTED] Agent was interrupted before producing output.",
             if (signal?.aborted) {
               return {
                 id: tc.id,
-                result: USER_CANCELLED_RESULT,
+                result: cancelledToolResult(signal),
                 isError: true
               };
             }
@@ -4245,7 +4315,7 @@ ${partial}` : "[INTERRUPTED] Agent was interrupted before producing output.",
             }
             const innerMsgs = subAgentMessages.get(r.id);
             if (innerMsgs) {
-              block.subAgentMessages = capSubAgentTranscript(innerMsgs);
+              attachSubAgentTranscript(block, innerMsgs);
             }
             if (captureArtifacts?.includes(block.name) && !r.isError) {
               try {
@@ -4787,13 +4857,12 @@ async function runBrowserAutomation(task, context, opts) {
       },
       toolRegistry: context.toolRegistry
     });
-    context.subAgentMessages?.set(context.toolCallId, result.messages);
-    const preferred = opts?.capture === "viewport" ? lastCapture.viewport ?? lastCapture.fullPage : lastCapture.fullPage ?? lastCapture.viewport;
-    const recorded = result.messages.some(
-      (m) => m.role === "assistant" && Array.isArray(m.content) && m.content.some(
-        (b) => b.type === "tool" && b.name === "browserCommand" && !!b.recording
-      )
+    context.subAgentMessages?.set(
+      context.toolCallId,
+      dropToolResultMessages(result.messages)
     );
+    const preferred = opts?.capture === "viewport" ? lastCapture.viewport ?? lastCapture.fullPage : lastCapture.fullPage ?? lastCapture.viewport;
+    const recorded = collectRecordings(result.messages).length > 0;
     return {
       text: result.text,
       recorded,
@@ -4948,6 +5017,79 @@ var screenshotTool = {
   execute: (input, context) => executeScreenshot(input, context?.onLog, context)
 };
 
+// src/tools/common/scrapeWebUrl.ts
+var CONTENT_BUDGET_BYTES = MAX_TOOL_RESULT_BYTES - 4 * 1024;
+var TRUNCATED_SUFFIX = "\n\n[output truncated]";
+async function fetchWebPage(url, opts) {
+  const raw = await runMindstudioCli(
+    [
+      "scrape-url",
+      "--url",
+      url,
+      "--page-options",
+      JSON.stringify({ onlyMainContent: true, screenshot: opts.screenshot })
+    ],
+    {
+      onLog: opts.onLog,
+      maxBuffer: SCRAPE_MAX_BUFFER,
+      caller: opts.caller
+    }
+  );
+  return shapeFetchResult(url, raw);
+}
+function shapeFetchResult(url, raw) {
+  const body = raw.endsWith(TRUNCATED_SUFFIX) ? raw.slice(0, -TRUNCATED_SUFFIX.length) : raw;
+  let envelope;
+  try {
+    envelope = JSON.parse(body);
+  } catch {
+    return raw;
+  }
+  if (!envelope || typeof envelope !== "object" || typeof envelope.content !== "string") {
+    return raw;
+  }
+  const shot = envelope.screenshot;
+  const screenshot = typeof shot === "string" ? shot : Array.isArray(shot) && typeof shot[0] === "string" ? shot[0] : void 0;
+  return JSON.stringify({
+    url,
+    ...screenshot ? { screenshot } : {},
+    content: capContent(envelope.content)
+  });
+}
+function capContent(content) {
+  const total = Buffer.byteLength(content, "utf-8");
+  if (total <= CONTENT_BUDGET_BYTES) {
+    return content;
+  }
+  const head = Buffer.from(content, "utf-8").subarray(0, CONTENT_BUDGET_BYTES).toString("utf-8");
+  return head + `
+
+[page content truncated at ${(CONTENT_BUDGET_BYTES / 1024).toFixed(0)}KB of ${(total / 1024).toFixed(0)}KB \u2014 narrow what you need or fetch a sub-page]`;
+}
+var scrapeWebUrlTool = {
+  definition: {
+    name: "scrapeWebUrl",
+    description: "Fetch a web page. Returns its main content as markdown plus `screenshot`, a full-page capture the person sees in the editor. Read the markdown; analyze the screenshot with analyzeImage only when the visual design matters. Use this when you need to fetch or analyze content from a website.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        url: {
+          type: "string",
+          description: "The URL to fetch."
+        }
+      },
+      required: ["url"]
+    }
+  },
+  async execute(input, context) {
+    return fetchWebPage(input.url, {
+      screenshot: true,
+      caller: "parent",
+      onLog: context?.onLog
+    });
+  }
+};
+
 // src/subagents/research/tools.ts
 var searchGoogleDefinition = {
   name: "searchGoogle",
@@ -5007,22 +5149,6 @@ async function executeSearchGoogle(input, onLog, caller) {
     }
   );
 }
-async function executeScrapeWebUrl(input, onLog, caller) {
-  return runMindstudioCli(
-    [
-      "scrape-url",
-      "--url",
-      String(input.url),
-      "--page-options",
-      JSON.stringify({ onlyMainContent: true })
-    ],
-    {
-      maxBuffer: SCRAPE_MAX_BUFFER,
-      onLog,
-      caller
-    }
-  );
-}
 
 // src/subagents/research/index.ts
 var BASE_PROMPT2 = readAsset("subagents/research", "prompt.md");
@@ -5048,7 +5174,11 @@ async function runResearch(task, context) {
         return executeSearchGoogle(toolInput, childCtx.onLog, "research");
       }
       if (name === "scrapeWebUrl") {
-        return executeScrapeWebUrl(toolInput, childCtx.onLog, "research");
+        return fetchWebPage(String(toolInput.url), {
+          screenshot: false,
+          caller: "research",
+          onLog: childCtx.onLog
+        });
       }
       return executeTool(name, toolInput, childCtx);
     },
@@ -5096,7 +5226,7 @@ __export(scrapeWebUrl_exports, {
 });
 var definition = {
   name: "scrapeWebUrl",
-  description: "Fetch the content of a web page as markdown. Use for reading a specific URL \u2014 a site the user referenced, a brand to match, a page the researcher cited that you want in full.",
+  description: "Fetch a web page as markdown, plus `screenshot`, a full-page capture you can analyze. Use for reading a specific URL \u2014 a site the user referenced, a brand to match, a page the researcher cited that you want in full.",
   inputSchema: {
     type: "object",
     properties: {
@@ -5109,17 +5239,11 @@ var definition = {
   }
 };
 async function execute(input, onLog) {
-  const pageOptions = { onlyMainContent: true };
-  return runMindstudioCli(
-    [
-      "scrape-url",
-      "--url",
-      input.url,
-      "--page-options",
-      JSON.stringify(pageOptions)
-    ],
-    { onLog, caller: "designExpert", maxBuffer: SCRAPE_MAX_BUFFER }
-  );
+  return fetchWebPage(String(input.url), {
+    screenshot: true,
+    caller: "designExpert",
+    onLog
+  });
 }
 
 // src/subagents/designExpert/tools/analyzeDesign.ts
@@ -7300,50 +7424,6 @@ var reviewExistingProjectTool = {
   }
 };
 
-// src/tools/common/scrapeWebUrl.ts
-var scrapeWebUrlTool = {
-  definition: {
-    name: "scrapeWebUrl",
-    description: "Scrape the content of a web page. Returns the HTML of the page as markdown text. Optionally capture a screenshot if you need see the visual design. Use this when you need to fetch or analyze content from a website",
-    inputSchema: {
-      type: "object",
-      properties: {
-        url: {
-          type: "string",
-          description: "The URL to fetch."
-        },
-        screenshot: {
-          type: "boolean",
-          description: "Capture a screenshot of the page in addition to the text content. Adds latency; only use when you need to see the visual design."
-        }
-      },
-      required: ["url"]
-    }
-  },
-  async execute(input, context) {
-    const url = input.url;
-    const screenshot = input.screenshot;
-    const pageOptions = { onlyMainContent: true };
-    if (screenshot) {
-      pageOptions.screenshot = true;
-    }
-    return runMindstudioCli(
-      [
-        "scrape-url",
-        "--url",
-        url,
-        "--page-options",
-        JSON.stringify(pageOptions)
-      ],
-      {
-        onLog: context?.onLog,
-        maxBuffer: SCRAPE_MAX_BUFFER,
-        caller: "parent"
-      }
-    );
-  }
-};
-
 // src/tools/index.ts
 function deriveContext(parent, toolCallId, onLog) {
   return { ...parent, toolCallId, onLog };
@@ -8829,17 +8909,11 @@ function resolveAction(text) {
   if (!parsed) {
     return null;
   }
-  const { name: triggerName, remainder } = parsed;
+  const { name: triggerName } = parsed;
   if (NON_ACTION_SENTINELS.has(triggerName)) {
     return null;
   }
-  let params = {};
-  if (remainder) {
-    try {
-      params = JSON.parse(remainder.split("\n")[0]);
-    } catch {
-    }
-  }
+  const params = sentinelParams(text);
   let body = readAsset("automatedActions", `${triggerName}.md`);
   let next;
   const fmMatch = body.match(/^---\s*\n([\s\S]*?)\n---/);
@@ -8854,8 +8928,16 @@ function resolveAction(text) {
     const str = typeof value === "string" ? value : JSON.stringify(value);
     body = body.replaceAll(`{{${key}}}`, str);
   }
+  const resumed = params.resumed === true;
+  if (resumed) {
+    body = `${readAsset("automatedActions", "_resumed.md")}
+
+${body}`;
+  }
   return {
-    message: automatedMessage(triggerName, body),
+    message: resumed ? setSentinelParams(automatedMessage(triggerName, body), {
+      resumed: true
+    }) : automatedMessage(triggerName, body),
     next
   };
 }
@@ -9238,7 +9320,10 @@ async function runTurn(params) {
         const automated = parseSentinel(entry.text);
         if (automated) {
           if (!NON_ACTION_SENTINELS.has(automated.name)) {
-            parts.push(`Automated action: ${automated.name}`);
+            const resumed = sentinelParams(entry.text).resumed === true;
+            parts.push(
+              `Automated action: ${automated.name}${resumed ? " (resuming interrupted work)" : ""}`
+            );
             hasUserSignal = true;
           }
         } else if (entry.text) {
@@ -9627,7 +9712,11 @@ async function runTurn(params) {
       const results = await Promise.all(
         toolCalls.map(async (tc) => {
           if (signal?.aborted) {
-            return { id: tc.id, result: USER_CANCELLED_RESULT, isError: true };
+            return {
+              id: tc.id,
+              result: cancelledToolResult(signal),
+              isError: true
+            };
           }
           const toolStart = Date.now();
           let settle;
@@ -9646,7 +9735,7 @@ async function runTurn(params) {
           };
           const cascadeAbort = () => {
             toolAbort.abort();
-            safeSettle(USER_CANCELLED_RESULT, true);
+            safeSettle(cancelledToolResult(signal), true);
           };
           signal?.addEventListener("abort", cascadeAbort, { once: true });
           const run = async (input) => {
@@ -9755,7 +9844,7 @@ async function runTurn(params) {
           block.completedAt = Date.now();
           const msgs = subAgentMessages.get(r.id);
           if (msgs) {
-            block.subAgentMessages = capSubAgentTranscript(msgs);
+            attachSubAgentTranscript(block, msgs);
           }
         }
       }
@@ -10007,6 +10096,15 @@ function holdRestoredUserItems(items) {
     (item) => item.source === "user" ? { ...item, held: true } : item
   );
 }
+function releaseShutdownHolds(items) {
+  return items.map((item) => {
+    if (item.heldBy !== "shutdown" || item.source === "user") {
+      return item;
+    }
+    const { held: _held, heldBy: _heldBy, ...released } = item;
+    return released;
+  });
+}
 var MessageQueue = class {
   items = [];
   onChange;
@@ -10078,16 +10176,27 @@ var MessageQueue = class {
   /**
    * Mark matching items `held` — waiting on the user rather than on the agent.
    * Fires onChange only if something changed. Returns the held items.
+   *
+   * `heldBy` is stamped only on items this call actually transitions. An item
+   * that was ALREADY held keeps whatever hold it had: otherwise a shutdown
+   * arriving after a user's Stop — a box reaped while they were away from the
+   * tab — would retag their deliberate pause as environmental and the next
+   * boot would auto-run the very build they stopped.
    */
-  holdWhere(predicate) {
+  holdWhere(predicate, heldBy) {
     const held = [];
     let changed = false;
     for (const item of this.items) {
       if (!predicate(item)) {
         continue;
       }
-      changed = changed || !item.held;
-      item.held = true;
+      if (!item.held) {
+        changed = true;
+        item.held = true;
+        if (heldBy) {
+          item.heldBy = heldBy;
+        }
+      }
       held.push(item);
     }
     if (changed) {
@@ -10135,6 +10244,7 @@ var MessageQueue = class {
     const [item] = this.items.splice(idx, 1);
     item.delivery = "asap";
     delete item.held;
+    delete item.heldBy;
     this.items.unshift(item);
     this.onChange?.();
     return item;
@@ -10158,6 +10268,7 @@ var MessageQueue = class {
         continue;
       }
       delete item.held;
+      delete item.heldBy;
       released.push(item);
     }
     const back = this.items.filter(defer);
@@ -10287,10 +10398,13 @@ var HeadlessSession = class {
     });
     await initOrgContext(this.config);
     const resumed = loadSession(this.state);
-    this.queue = new MessageQueue(holdRestoredUserItems(loadQueue()), () => {
-      this.persistStats();
-      this.emit("queue_changed", { queuedMessages: this.queue.snapshot() });
-    });
+    this.queue = new MessageQueue(
+      releaseShutdownHolds(holdRestoredUserItems(loadQueue())),
+      () => {
+        this.persistStats();
+        this.emit("queue_changed", { queuedMessages: this.queue.snapshot() });
+      }
+    );
     this.passivePen = loadPassiveResults();
     this.persistStats();
     if (resumed) {
@@ -10412,6 +10526,11 @@ var HeadlessSession = class {
     this.emit("ready");
   }
   shutdown = () => {
+    try {
+      this.handleCancel("shutdown");
+    } catch (err) {
+      log17.warn("Shutdown cancel failed", { error: err?.message });
+    }
     this.emit("stopping");
     this.emit("stopped");
     process.exit(0);
@@ -11349,6 +11468,19 @@ var HeadlessSession = class {
    * pipeline where it stopped. Holding only the remainder would resume one step
    * PAST the interruption, polishing and finalizing half-built code.
    *
+   * That re-queued step is marked `resumed`, which is what stops it being a
+   * verbatim replay. The message the user sends to un-pause a build is usually
+   * the rest of that build ("try again, I fixed the adapter") and Remy does the
+   * work inside that turn — so re-delivering the original "build everything
+   * now" afterwards had it rebuild an app it had just finished.
+   *
+   * `reason: 'shutdown'` is the environment taking the agent down rather than a
+   * person pressing Stop. It pauses identically — nothing may start a turn
+   * while the workspace is being tarred — but tags the chain steps it holds so
+   * the next boot releases them and the pipeline carries on by itself. Called
+   * from the stdin `cancel` (the sandbox's pre-destroy quiesce) and from our own
+   * SIGTERM handler, whichever gets there first.
+   *
    * A compaction is cancelled here too, unconditionally. It gates every queued
    * message and outlives the turn that started it, so leaving it running means
    * Stop can't reach idle. The cost is the summary work in flight; the forced
@@ -11359,14 +11491,16 @@ var HeadlessSession = class {
    * `{cancelled, absorbed:true}` terminal. Only items still sitting in the
    * queue survive.
    */
-  handleCancel() {
+  handleCancel(reason) {
     if (this.currentAbort) {
-      this.currentAbort.abort();
+      this.currentAbort.abort(reason);
     }
     const cancelledCompaction = cancelInflightCompaction();
     for (const [id, pending2] of this.pendingTools) {
       clearTimeout(pending2.timeout);
-      pending2.resolve(USER_CANCELLED_RESULT);
+      pending2.resolve(
+        reason === "shutdown" ? ENV_INTERRUPTED_RESULT : USER_CANCELLED_RESULT
+      );
       this.pendingTools.delete(id);
     }
     const flushed = this.queue.removeWhere(
@@ -11377,7 +11511,13 @@ var HeadlessSession = class {
       this.queue.unshift({
         command: {
           action: "message",
-          text: step.text,
+          // Marked so it comes back as a resumption rather than a replay: the
+          // step already ran once, and whatever the user does between here and
+          // its re-delivery may well be the rest of it. resolveAction turns
+          // this param into a preamble, and both the chat row and the queue
+          // card label the step off it. Merged, so a step interrupted twice
+          // keeps its own params and re-marking stays idempotent.
+          text: setSentinelParams(step.text, { resumed: true }),
           onboardingState: step.onboardingState,
           // Fresh id: the original command's terminal has already gone out as
           // cancelled, and one command gets exactly one `completed`.
@@ -11385,13 +11525,18 @@ var HeadlessSession = class {
         },
         source: "chain",
         enqueuedAt: Date.now(),
-        held: true
+        held: true,
+        ...reason === "shutdown" && { heldBy: reason }
       });
       this.currentChainStep = null;
     }
-    const held = this.queue.holdWhere(
-      (item) => item.source === "user" || item.source === "chain"
-    );
+    const held = [
+      ...this.queue.holdWhere(
+        (item) => item.source === "chain",
+        reason === "shutdown" ? reason : void 0
+      ),
+      ...this.queue.holdWhere((item) => item.source === "user")
+    ];
     return {
       flushed,
       held,
@@ -11403,9 +11548,10 @@ var HeadlessSession = class {
    * Remove pending queued messages: all user messages (no id), or a single item
    * by id. Does not affect the in-flight turn (use `cancel` for that).
    *
-   * Held chain items — a paused pipeline — are removable only by explicit id.
-   * The id-less form is the queue card's "Clear" and the pre-destroy quiesce,
-   * neither of which should get to decide the pipeline's fate. A DELIVERABLE
+   * Held chain items — a paused pipeline — are removable only by explicit id:
+   * the queue card's Discard sends one call per step, and its per-step X sends
+   * one. The id-less form is the card's "Clear", which is about the user's own
+   * messages and shouldn't get to decide the pipeline's fate. A DELIVERABLE
    * chain item is never removable: that's live pipeline work. (The step
    * actually running isn't in the queue at all — drainQueueLoop takes it out
    * before running it.)
@@ -11511,7 +11657,9 @@ var HeadlessSession = class {
       return;
     }
     if (action === "cancel") {
-      const { flushed, held, pausedPipeline, cancelledCompaction } = this.handleCancel();
+      const { flushed, held, pausedPipeline, cancelledCompaction } = this.handleCancel(
+        parsed.reason === "shutdown" ? "shutdown" : void 0
+      );
       this.emit(
         "completed",
         {

package/dist/index.js

@@ -1481,6 +1481,34 @@ function parseSentinel(text) {
   }
   return { name: match[1], remainder: match[2] };
 }
+function sentinelParams(text) {
+  const parsed = parseSentinel(text);
+  if (!parsed) {
+    return {};
+  }
+  const firstLine = parsed.remainder.split("\n")[0].trim();
+  if (!firstLine) {
+    return {};
+  }
+  try {
+    const value = JSON.parse(firstLine);
+    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+  } catch {
+    return {};
+  }
+}
+function setSentinelParams(text, patch) {
+  const parsed = parseSentinel(text);
+  if (!parsed) {
+    return text;
+  }
+  const newlineAt = parsed.remainder.indexOf("\n");
+  const body = newlineAt === -1 ? "" : parsed.remainder.slice(newlineAt + 1);
+  const params = { ...sentinelParams(text), ...patch };
+  const line = `${sentinel(parsed.name)}${JSON.stringify(params)}`;
+  return body ? `${line}
+${body}` : line;
+}
 function stripSentinelLine(text) {
   return text.replace(/^@@automated::[^@]*@@[^\n]*\n?/, "");
 }
@@ -2343,6 +2371,20 @@ var init_cleanMessages = __esm({
 });
 
 // src/recording.ts
+function collectRecordings(messages) {
+  const recordings = [];
+  for (const msg of messages) {
+    if (msg.role !== "assistant" || !Array.isArray(msg.content)) {
+      continue;
+    }
+    for (const block of msg.content) {
+      if (block.type === "tool" && block.recording) {
+        recordings.push(block.recording);
+      }
+    }
+  }
+  return recordings;
+}
 function liftRecording(result) {
   if (!result.includes('"recording"')) {
     return { result };
@@ -2400,6 +2442,18 @@ function capToolResult(result, maxBytes = MAX_TOOL_RESULT_BYTES) {
 
 (tool result truncated at ${(maxBytes / 1024).toFixed(0)}KB of ${(total / 1024).toFixed(0)}KB \u2014 too large to keep in context. Narrow the call (select fewer fields, paginate, or query a subset) instead of fetching everything.)`;
 }
+function attachSubAgentTranscript(block, messages) {
+  if (!block.recordings) {
+    const recordings = collectRecordings(messages);
+    if (recordings.length > 0) {
+      block.recordings = recordings;
+    }
+  }
+  block.subAgentMessages = capSubAgentTranscript(messages);
+}
+function dropToolResultMessages(messages) {
+  return messages.filter((m) => !(m.role === "user" && m.toolCallId));
+}
 function capSubAgentTranscript(messages) {
   for (const msg of messages) {
     capMessageForHistory(msg, MAX_SUBAGENT_RESULT_BYTES);
@@ -2444,7 +2498,7 @@ function capMessageForHistory(msg, maxBytes = MAX_TOOL_RESULT_BYTES) {
         );
       }
       if (Array.isArray(block.subAgentMessages)) {
-        block.subAgentMessages = capSubAgentTranscript(block.subAgentMessages);
+        attachSubAgentTranscript(block, block.subAgentMessages);
       }
     }
   } else if (msg.role === "user" && msg.toolCallId && typeof msg.content === "string") {
@@ -3519,11 +3573,23 @@ var init_bash = __esm({
         const maxLines = input.maxLines === 0 ? Infinity : input.maxLines || DEFAULT_MAX_LINES2;
         const timeoutMs = input.timeout ? input.timeout * 1e3 : DEFAULT_TIMEOUT_MS;
         return new Promise((resolve4) => {
-          const child = spawn2("sh", ["-c", input.command], {
+          const child = spawn2("bash", ["-c", input.command], {
             // Pinned rather than inherited. `undefined` here means "wherever the
             // process happens to be", which is the project root only by luck.
             cwd: input.cwd ? path7.resolve(PROJECT_ROOT, input.cwd) : PROJECT_ROOT,
-            env: { ...process.env, FORCE_COLOR: "1" }
+            // Output is rendered in a terminal view in the IDE, so ask tools for
+            // color. The devbox image sets none of these — it declares only
+            // WORKSPACE_DIR, LANG, LC_ALL, PIP_BREAK_SYSTEM_PACKAGES,
+            // NPM_CONFIG_PREFIX and PATH — and a container gets no TERM unless
+            // something sets it, so without TERM anything driving terminfo assumes
+            // a dumb terminal. Same trio the sandbox's pty handler sets, for the
+            // same reason; FORCE_COLOR alone only reaches the Node/chalk ecosystem.
+            env: {
+              ...process.env,
+              TERM: "xterm-256color",
+              CLICOLOR: "1",
+              FORCE_COLOR: "1"
+            }
           });
           let output = "";
           child.stdout.on("data", (chunk) => {
@@ -4654,13 +4720,17 @@ var init_browserLock = __esm({
 });
 
 // src/toolRegistry.ts
-var log7, USER_CANCELLED_RESULT, ToolRegistry;
+function cancelledToolResult(signal) {
+  return signal?.reason === "shutdown" ? ENV_INTERRUPTED_RESULT : USER_CANCELLED_RESULT;
+}
+var log7, USER_CANCELLED_RESULT, ENV_INTERRUPTED_RESULT, ToolRegistry;
 var init_toolRegistry = __esm({
   "src/toolRegistry.ts"() {
     "use strict";
     init_logger();
     log7 = createLogger("tool-registry");
     USER_CANCELLED_RESULT = "[USER CANCELLED] The user manually cancelled this tool. Do not retry it automatically \u2014 wait for the user\u2019s next message for direction.";
+    ENV_INTERRUPTED_RESULT = "[INTERRUPTED] The environment shut down while this tool was running. No user action was involved \u2014 pick up from here.";
     ToolRegistry = class {
       entries = /* @__PURE__ */ new Map();
       onEvent;
@@ -4916,7 +4986,7 @@ ${partial}` : "[INTERRUPTED] Agent was interrupted before producing output.",
           messages: thisInvocation()
         };
       }
-      return { text: USER_CANCELLED_RESULT, messages: thisInvocation() };
+      return { text: cancelledToolResult(signal), messages: thisInvocation() };
     }
     let lastToolResult = "";
     let watchedBlocks = [];
@@ -5152,7 +5222,7 @@ ${partial}` : "[INTERRUPTED] Agent was interrupted before producing output.",
             if (signal?.aborted) {
               return {
                 id: tc.id,
-                result: USER_CANCELLED_RESULT,
+                result: cancelledToolResult(signal),
                 isError: true
               };
             }
@@ -5269,7 +5339,7 @@ ${partial}` : "[INTERRUPTED] Agent was interrupted before producing output.",
             }
             const innerMsgs = subAgentMessages.get(r.id);
             if (innerMsgs) {
-              block.subAgentMessages = capSubAgentTranscript(innerMsgs);
+              attachSubAgentTranscript(block, innerMsgs);
             }
             if (captureArtifacts?.includes(block.name) && !r.isError) {
               try {
@@ -5855,13 +5925,12 @@ async function runBrowserAutomation(task, context, opts) {
       },
       toolRegistry: context.toolRegistry
     });
-    context.subAgentMessages?.set(context.toolCallId, result.messages);
-    const preferred = opts?.capture === "viewport" ? lastCapture.viewport ?? lastCapture.fullPage : lastCapture.fullPage ?? lastCapture.viewport;
-    const recorded = result.messages.some(
-      (m) => m.role === "assistant" && Array.isArray(m.content) && m.content.some(
-        (b) => b.type === "tool" && b.name === "browserCommand" && !!b.recording
-      )
+    context.subAgentMessages?.set(
+      context.toolCallId,
+      dropToolResultMessages(result.messages)
     );
+    const preferred = opts?.capture === "viewport" ? lastCapture.viewport ?? lastCapture.fullPage : lastCapture.fullPage ?? lastCapture.viewport;
+    const recorded = collectRecordings(result.messages).length > 0;
     return {
       text: result.text,
       recorded,
@@ -5877,6 +5946,8 @@ var init_browserAutomation = __esm({
     "use strict";
     init_tools10();
     init_runner();
+    init_historyLimits();
+    init_recording();
     init_tools2();
     init_tools();
     init_readSpec();
@@ -6046,6 +6117,88 @@ var init_screenshot2 = __esm({
   }
 });
 
+// src/tools/common/scrapeWebUrl.ts
+async function fetchWebPage(url, opts) {
+  const raw = await runMindstudioCli(
+    [
+      "scrape-url",
+      "--url",
+      url,
+      "--page-options",
+      JSON.stringify({ onlyMainContent: true, screenshot: opts.screenshot })
+    ],
+    {
+      onLog: opts.onLog,
+      maxBuffer: SCRAPE_MAX_BUFFER,
+      caller: opts.caller
+    }
+  );
+  return shapeFetchResult(url, raw);
+}
+function shapeFetchResult(url, raw) {
+  const body = raw.endsWith(TRUNCATED_SUFFIX) ? raw.slice(0, -TRUNCATED_SUFFIX.length) : raw;
+  let envelope;
+  try {
+    envelope = JSON.parse(body);
+  } catch {
+    return raw;
+  }
+  if (!envelope || typeof envelope !== "object" || typeof envelope.content !== "string") {
+    return raw;
+  }
+  const shot = envelope.screenshot;
+  const screenshot = typeof shot === "string" ? shot : Array.isArray(shot) && typeof shot[0] === "string" ? shot[0] : void 0;
+  return JSON.stringify({
+    url,
+    ...screenshot ? { screenshot } : {},
+    content: capContent(envelope.content)
+  });
+}
+function capContent(content) {
+  const total = Buffer.byteLength(content, "utf-8");
+  if (total <= CONTENT_BUDGET_BYTES) {
+    return content;
+  }
+  const head = Buffer.from(content, "utf-8").subarray(0, CONTENT_BUDGET_BYTES).toString("utf-8");
+  return head + `
+
+[page content truncated at ${(CONTENT_BUDGET_BYTES / 1024).toFixed(0)}KB of ${(total / 1024).toFixed(0)}KB \u2014 narrow what you need or fetch a sub-page]`;
+}
+var CONTENT_BUDGET_BYTES, TRUNCATED_SUFFIX, scrapeWebUrlTool;
+var init_scrapeWebUrl = __esm({
+  "src/tools/common/scrapeWebUrl.ts"() {
+    "use strict";
+    init_runMindstudioCli();
+    init_runCli();
+    init_historyLimits();
+    CONTENT_BUDGET_BYTES = MAX_TOOL_RESULT_BYTES - 4 * 1024;
+    TRUNCATED_SUFFIX = "\n\n[output truncated]";
+    scrapeWebUrlTool = {
+      definition: {
+        name: "scrapeWebUrl",
+        description: "Fetch a web page. Returns its main content as markdown plus `screenshot`, a full-page capture the person sees in the editor. Read the markdown; analyze the screenshot with analyzeImage only when the visual design matters. Use this when you need to fetch or analyze content from a website.",
+        inputSchema: {
+          type: "object",
+          properties: {
+            url: {
+              type: "string",
+              description: "The URL to fetch."
+            }
+          },
+          required: ["url"]
+        }
+      },
+      async execute(input, context) {
+        return fetchWebPage(input.url, {
+          screenshot: true,
+          caller: "parent",
+          onLog: context?.onLog
+        });
+      }
+    };
+  }
+});
+
 // src/subagents/research/tools.ts
 async function executeSearchGoogle(input, onLog, caller) {
   const fetchTopN = Math.max(0, Math.round(Number(input.fetchTopN) || 0));
@@ -6067,22 +6220,6 @@ async function executeSearchGoogle(input, onLog, caller) {
     }
   );
 }
-async function executeScrapeWebUrl(input, onLog, caller) {
-  return runMindstudioCli(
-    [
-      "scrape-url",
-      "--url",
-      String(input.url),
-      "--page-options",
-      JSON.stringify({ onlyMainContent: true })
-    ],
-    {
-      maxBuffer: SCRAPE_MAX_BUFFER,
-      onLog,
-      caller
-    }
-  );
-}
 var searchGoogleDefinition, scrapeWebUrlDefinition, RESEARCH_TOOLS;
 var init_tools3 = __esm({
   "src/subagents/research/tools.ts"() {
@@ -6155,7 +6292,11 @@ async function runResearch(task, context) {
         return executeSearchGoogle(toolInput, childCtx.onLog, "research");
       }
       if (name === "scrapeWebUrl") {
-        return executeScrapeWebUrl(toolInput, childCtx.onLog, "research");
+        return fetchWebPage(String(toolInput.url), {
+          screenshot: false,
+          caller: "research",
+          onLog: childCtx.onLog
+        });
       }
       return executeTool(name, toolInput, childCtx);
     },
@@ -6180,6 +6321,7 @@ var init_research = __esm({
     init_runner();
     init_context();
     init_tools10();
+    init_scrapeWebUrl();
     init_tools3();
     init_surfaces();
     BASE_PROMPT2 = readAsset("subagents/research", "prompt.md");
@@ -6215,27 +6357,20 @@ __export(scrapeWebUrl_exports, {
   execute: () => execute
 });
 async function execute(input, onLog) {
-  const pageOptions = { onlyMainContent: true };
-  return runMindstudioCli(
-    [
-      "scrape-url",
-      "--url",
-      input.url,
-      "--page-options",
-      JSON.stringify(pageOptions)
-    ],
-    { onLog, caller: "designExpert", maxBuffer: SCRAPE_MAX_BUFFER }
-  );
+  return fetchWebPage(String(input.url), {
+    screenshot: true,
+    caller: "designExpert",
+    onLog
+  });
 }
 var definition;
-var init_scrapeWebUrl = __esm({
+var init_scrapeWebUrl2 = __esm({
   "src/subagents/designExpert/tools/scrapeWebUrl.ts"() {
     "use strict";
-    init_runMindstudioCli();
-    init_runCli();
+    init_scrapeWebUrl();
     definition = {
       name: "scrapeWebUrl",
-      description: "Fetch the content of a web page as markdown. Use for reading a specific URL \u2014 a site the user referenced, a brand to match, a page the researcher cited that you want in full.",
+      description: "Fetch a web page as markdown, plus `screenshot`, a full-page capture you can analyze. Use for reading a specific URL \u2014 a site the user referenced, a brand to match, a page the researcher cited that you want in full.",
       inputSchema: {
         type: "object",
         properties: {
@@ -7380,7 +7515,7 @@ var init_tools5 = __esm({
     init_tools10();
     init_tools();
     init_research();
-    init_scrapeWebUrl();
+    init_scrapeWebUrl2();
     init_analyzeDesign();
     init_analyzeImage2();
     init_generateImages();
@@ -8817,58 +8952,6 @@ var init_reviewExistingProject = __esm({
   }
 });
 
-// src/tools/common/scrapeWebUrl.ts
-var scrapeWebUrlTool;
-var init_scrapeWebUrl2 = __esm({
-  "src/tools/common/scrapeWebUrl.ts"() {
-    "use strict";
-    init_runMindstudioCli();
-    init_runCli();
-    scrapeWebUrlTool = {
-      definition: {
-        name: "scrapeWebUrl",
-        description: "Scrape the content of a web page. Returns the HTML of the page as markdown text. Optionally capture a screenshot if you need see the visual design. Use this when you need to fetch or analyze content from a website",
-        inputSchema: {
-          type: "object",
-          properties: {
-            url: {
-              type: "string",
-              description: "The URL to fetch."
-            },
-            screenshot: {
-              type: "boolean",
-              description: "Capture a screenshot of the page in addition to the text content. Adds latency; only use when you need to see the visual design."
-            }
-          },
-          required: ["url"]
-        }
-      },
-      async execute(input, context) {
-        const url = input.url;
-        const screenshot = input.screenshot;
-        const pageOptions = { onlyMainContent: true };
-        if (screenshot) {
-          pageOptions.screenshot = true;
-        }
-        return runMindstudioCli(
-          [
-            "scrape-url",
-            "--url",
-            url,
-            "--page-options",
-            JSON.stringify(pageOptions)
-          ],
-          {
-            onLog: context?.onLog,
-            maxBuffer: SCRAPE_MAX_BUFFER,
-            caller: "parent"
-          }
-        );
-      }
-    };
-  }
-});
-
 // src/tools/index.ts
 function deriveContext(parent, toolCallId, onLog) {
   return { ...parent, toolCallId, onLog };
@@ -8927,7 +9010,7 @@ var init_tools10 = __esm({
     init_specSync();
     init_research();
     init_reviewExistingProject();
-    init_scrapeWebUrl2();
+    init_scrapeWebUrl();
     init_writeBuildOverview();
     ALL_TOOLS = [
       // Common
@@ -9167,17 +9250,11 @@ function resolveAction(text) {
   if (!parsed) {
     return null;
   }
-  const { name: triggerName, remainder } = parsed;
+  const { name: triggerName } = parsed;
   if (NON_ACTION_SENTINELS.has(triggerName)) {
     return null;
   }
-  let params = {};
-  if (remainder) {
-    try {
-      params = JSON.parse(remainder.split("\n")[0]);
-    } catch {
-    }
-  }
+  const params = sentinelParams(text);
   let body = readAsset("automatedActions", `${triggerName}.md`);
   let next;
   const fmMatch = body.match(/^---\s*\n([\s\S]*?)\n---/);
@@ -9192,8 +9269,16 @@ function resolveAction(text) {
     const str = typeof value === "string" ? value : JSON.stringify(value);
     body = body.replaceAll(`{{${key}}}`, str);
   }
+  const resumed = params.resumed === true;
+  if (resumed) {
+    body = `${readAsset("automatedActions", "_resumed.md")}
+
+${body}`;
+  }
   return {
-    message: automatedMessage(triggerName, body),
+    message: resumed ? setSentinelParams(automatedMessage(triggerName, body), {
+      resumed: true
+    }) : automatedMessage(triggerName, body),
     next
   };
 }
@@ -9938,7 +10023,10 @@ async function runTurn(params) {
         const automated = parseSentinel(entry.text);
         if (automated) {
           if (!NON_ACTION_SENTINELS.has(automated.name)) {
-            parts.push(`Automated action: ${automated.name}`);
+            const resumed = sentinelParams(entry.text).resumed === true;
+            parts.push(
+              `Automated action: ${automated.name}${resumed ? " (resuming interrupted work)" : ""}`
+            );
             hasUserSignal = true;
           }
         } else if (entry.text) {
@@ -10327,7 +10415,11 @@ async function runTurn(params) {
       const results = await Promise.all(
         toolCalls.map(async (tc) => {
           if (signal?.aborted) {
-            return { id: tc.id, result: USER_CANCELLED_RESULT, isError: true };
+            return {
+              id: tc.id,
+              result: cancelledToolResult(signal),
+              isError: true
+            };
           }
           const toolStart = Date.now();
           let settle;
@@ -10346,7 +10438,7 @@ async function runTurn(params) {
           };
           const cascadeAbort = () => {
             toolAbort.abort();
-            safeSettle(USER_CANCELLED_RESULT, true);
+            safeSettle(cancelledToolResult(signal), true);
           };
           signal?.addEventListener("abort", cascadeAbort, { once: true });
           const run = async (input) => {
@@ -10455,7 +10547,7 @@ async function runTurn(params) {
           block.completedAt = Date.now();
           const msgs = subAgentMessages.get(r.id);
           if (msgs) {
-            block.subAgentMessages = capSubAgentTranscript(msgs);
+            attachSubAgentTranscript(block, msgs);
           }
         }
       }
@@ -11019,6 +11111,15 @@ function holdRestoredUserItems(items) {
     (item) => item.source === "user" ? { ...item, held: true } : item
   );
 }
+function releaseShutdownHolds(items) {
+  return items.map((item) => {
+    if (item.heldBy !== "shutdown" || item.source === "user") {
+      return item;
+    }
+    const { held: _held, heldBy: _heldBy, ...released } = item;
+    return released;
+  });
+}
 var MessageQueue;
 var init_messageQueue = __esm({
   "src/headless/messageQueue.ts"() {
@@ -11094,16 +11195,27 @@ var init_messageQueue = __esm({
       /**
        * Mark matching items `held` — waiting on the user rather than on the agent.
        * Fires onChange only if something changed. Returns the held items.
+       *
+       * `heldBy` is stamped only on items this call actually transitions. An item
+       * that was ALREADY held keeps whatever hold it had: otherwise a shutdown
+       * arriving after a user's Stop — a box reaped while they were away from the
+       * tab — would retag their deliberate pause as environmental and the next
+       * boot would auto-run the very build they stopped.
        */
-      holdWhere(predicate) {
+      holdWhere(predicate, heldBy) {
         const held = [];
         let changed = false;
         for (const item of this.items) {
           if (!predicate(item)) {
             continue;
           }
-          changed = changed || !item.held;
-          item.held = true;
+          if (!item.held) {
+            changed = true;
+            item.held = true;
+            if (heldBy) {
+              item.heldBy = heldBy;
+            }
+          }
           held.push(item);
         }
         if (changed) {
@@ -11151,6 +11263,7 @@ var init_messageQueue = __esm({
         const [item] = this.items.splice(idx, 1);
         item.delivery = "asap";
         delete item.held;
+        delete item.heldBy;
         this.items.unshift(item);
         this.onChange?.();
         return item;
@@ -11174,6 +11287,7 @@ var init_messageQueue = __esm({
             continue;
           }
           delete item.held;
+          delete item.heldBy;
           released.push(item);
         }
         const back = this.items.filter(defer);
@@ -11331,10 +11445,13 @@ var init_headless = __esm({
         });
         await initOrgContext(this.config);
         const resumed = loadSession(this.state);
-        this.queue = new MessageQueue(holdRestoredUserItems(loadQueue()), () => {
-          this.persistStats();
-          this.emit("queue_changed", { queuedMessages: this.queue.snapshot() });
-        });
+        this.queue = new MessageQueue(
+          releaseShutdownHolds(holdRestoredUserItems(loadQueue())),
+          () => {
+            this.persistStats();
+            this.emit("queue_changed", { queuedMessages: this.queue.snapshot() });
+          }
+        );
         this.passivePen = loadPassiveResults();
         this.persistStats();
         if (resumed) {
@@ -11456,6 +11573,11 @@ var init_headless = __esm({
         this.emit("ready");
       }
       shutdown = () => {
+        try {
+          this.handleCancel("shutdown");
+        } catch (err) {
+          log17.warn("Shutdown cancel failed", { error: err?.message });
+        }
         this.emit("stopping");
         this.emit("stopped");
         process.exit(0);
@@ -12393,6 +12515,19 @@ var init_headless = __esm({
        * pipeline where it stopped. Holding only the remainder would resume one step
        * PAST the interruption, polishing and finalizing half-built code.
        *
+       * That re-queued step is marked `resumed`, which is what stops it being a
+       * verbatim replay. The message the user sends to un-pause a build is usually
+       * the rest of that build ("try again, I fixed the adapter") and Remy does the
+       * work inside that turn — so re-delivering the original "build everything
+       * now" afterwards had it rebuild an app it had just finished.
+       *
+       * `reason: 'shutdown'` is the environment taking the agent down rather than a
+       * person pressing Stop. It pauses identically — nothing may start a turn
+       * while the workspace is being tarred — but tags the chain steps it holds so
+       * the next boot releases them and the pipeline carries on by itself. Called
+       * from the stdin `cancel` (the sandbox's pre-destroy quiesce) and from our own
+       * SIGTERM handler, whichever gets there first.
+       *
        * A compaction is cancelled here too, unconditionally. It gates every queued
        * message and outlives the turn that started it, so leaving it running means
        * Stop can't reach idle. The cost is the summary work in flight; the forced
@@ -12403,14 +12538,16 @@ var init_headless = __esm({
        * `{cancelled, absorbed:true}` terminal. Only items still sitting in the
        * queue survive.
        */
-      handleCancel() {
+      handleCancel(reason) {
         if (this.currentAbort) {
-          this.currentAbort.abort();
+          this.currentAbort.abort(reason);
         }
         const cancelledCompaction = cancelInflightCompaction();
         for (const [id, pending2] of this.pendingTools) {
           clearTimeout(pending2.timeout);
-          pending2.resolve(USER_CANCELLED_RESULT);
+          pending2.resolve(
+            reason === "shutdown" ? ENV_INTERRUPTED_RESULT : USER_CANCELLED_RESULT
+          );
           this.pendingTools.delete(id);
         }
         const flushed = this.queue.removeWhere(
@@ -12421,7 +12558,13 @@ var init_headless = __esm({
           this.queue.unshift({
             command: {
               action: "message",
-              text: step.text,
+              // Marked so it comes back as a resumption rather than a replay: the
+              // step already ran once, and whatever the user does between here and
+              // its re-delivery may well be the rest of it. resolveAction turns
+              // this param into a preamble, and both the chat row and the queue
+              // card label the step off it. Merged, so a step interrupted twice
+              // keeps its own params and re-marking stays idempotent.
+              text: setSentinelParams(step.text, { resumed: true }),
               onboardingState: step.onboardingState,
               // Fresh id: the original command's terminal has already gone out as
               // cancelled, and one command gets exactly one `completed`.
@@ -12429,13 +12572,18 @@ var init_headless = __esm({
             },
             source: "chain",
             enqueuedAt: Date.now(),
-            held: true
+            held: true,
+            ...reason === "shutdown" && { heldBy: reason }
           });
           this.currentChainStep = null;
         }
-        const held = this.queue.holdWhere(
-          (item) => item.source === "user" || item.source === "chain"
-        );
+        const held = [
+          ...this.queue.holdWhere(
+            (item) => item.source === "chain",
+            reason === "shutdown" ? reason : void 0
+          ),
+          ...this.queue.holdWhere((item) => item.source === "user")
+        ];
         return {
           flushed,
           held,
@@ -12447,9 +12595,10 @@ var init_headless = __esm({
        * Remove pending queued messages: all user messages (no id), or a single item
        * by id. Does not affect the in-flight turn (use `cancel` for that).
        *
-       * Held chain items — a paused pipeline — are removable only by explicit id.
-       * The id-less form is the queue card's "Clear" and the pre-destroy quiesce,
-       * neither of which should get to decide the pipeline's fate. A DELIVERABLE
+       * Held chain items — a paused pipeline — are removable only by explicit id:
+       * the queue card's Discard sends one call per step, and its per-step X sends
+       * one. The id-less form is the card's "Clear", which is about the user's own
+       * messages and shouldn't get to decide the pipeline's fate. A DELIVERABLE
        * chain item is never removable: that's live pipeline work. (The step
        * actually running isn't in the queue at all — drainQueueLoop takes it out
        * before running it.)
@@ -12555,7 +12704,9 @@ var init_headless = __esm({
           return;
         }
         if (action === "cancel") {
-          const { flushed, held, pausedPipeline, cancelledCompaction } = this.handleCancel();
+          const { flushed, held, pausedPipeline, cancelledCompaction } = this.handleCancel(
+            parsed.reason === "shutdown" ? "shutdown" : void 0
+          );
           this.emit(
             "completed",
             {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mindstudio-ai/remy",
-  "version": "0.1.322",
+  "version": "0.1.324",
   "description": "Remy coding agent",
   "repository": {
     "type": "git",