@pentoshi/clai 2.0.18 → 2.0.20

package/dist/agent/context-manager.js

@@ -16,8 +16,8 @@ export function estimateMessagesTokens(messages) {
     }
     return sum;
 }
-const DEFAULT_BUDGET_TOKENS = 24_000;
-const DEFAULT_KEEP_RECENT = 8;
+const DEFAULT_BUDGET_TOKENS = 32_000;
+const DEFAULT_KEEP_RECENT = 12;
 /**
  * Replace older messages with a single condensed "memory" message while
  * preserving the system prompt and the most recent N messages.
@@ -75,12 +75,27 @@ export function compactMessages(messages, options = {}) {
 export async function compactMessagesWithSummary(messages, summarize, options = {}, sessionTranscript) {
     const before = messages.length;
     const beforeTokens = estimateMessagesTokens(messages);
-    const keepRecent = Math.max(2, options.keepRecent ?? DEFAULT_KEEP_RECENT);
+    const isForced = options.budgetTokens === 0;
+    let keepRecent = Math.max(2, options.keepRecent ?? DEFAULT_KEEP_RECENT);
     const start = messages[0]?.role === "system" ? 1 : 0;
-    const tailStart = Math.max(start, messages.length - keepRecent);
-    const older = messages.slice(start, tailStart);
-    if (older.length === 0) {
-        return { messages: [...messages], before, after: before, beforeTokens, afterTokens: beforeTokens, summarized: false };
+    let tailStart = Math.max(start, messages.length - keepRecent);
+    let older = messages.slice(start, tailStart);
+    // If forced and the older slice would be empty, try keeping fewer recent
+    // messages (minimum 1) so we have something to compact (e.g. the first user prompt).
+    if (older.length === 0 && isForced && messages.length >= start + 2) {
+        keepRecent = 1;
+        tailStart = messages.length - 1;
+        older = messages.slice(start, tailStart);
+    }
+    if (older.length === 0 && !sessionTranscript?.trim()) {
+        return {
+            messages: [...messages],
+            before,
+            after: before,
+            beforeTokens,
+            afterTokens: beforeTokens,
+            summarized: false,
+        };
     }
     const messageTranscript = older
         .map((message) => `${message.role.toUpperCase()}: ${redactSecrets(message.content)}`)
@@ -107,7 +122,7 @@ export async function compactMessagesWithSummary(messages, summarize, options =
             ...messages.slice(tailStart),
         ];
         const afterTokens = estimateMessagesTokens(compacted);
-        if (afterTokens >= beforeTokens) {
+        if (afterTokens >= beforeTokens && !isForced) {
             const deterministicCompacted = compactMessages(messages, { ...options, budgetTokens: 0 });
             const detTokens = estimateMessagesTokens(deterministicCompacted);
             if (detTokens < beforeTokens) {
@@ -144,7 +159,7 @@ export async function compactMessagesWithSummary(messages, summarize, options =
         }
         const compacted = compactMessages(messages, { ...options, budgetTokens: 0 });
         const afterTokens = estimateMessagesTokens(compacted);
-        if (afterTokens >= beforeTokens) {
+        if (afterTokens >= beforeTokens && !isForced) {
             return {
                 messages: [...messages],
                 before,

package/dist/agent/context-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"context-manager.js","sourceRoot":"","sources":["../../src/agent/context-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAuB;IAC5D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAkBD,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAuB,EACvB,UAA0B,EAAE;IAE5B,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvD,IAAI,sBAAsB,CAAC,QAAQ,CAAC,IAAI,MAAM;QAAE,OAAO,QAAQ,CAAC;IAEhE,oEAAoE;IACpE,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAgB;QACxB,IAAI,EAAE,QAAQ;QACd,OAAO,EACL,6JAA6J;YAC7J,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;KACrB,CAAC;IAEF,OAAO,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAuB,EACvB,SAA8C,EAC9C,UAA0B,EAAE,EAC5B,iBAAsC;IAEtC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAE/C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACxH,CAAC;IAED,MAAM,iBAAiB,GAAG,KAAK;SAC5B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;SACpF,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,iBAAiB,EAAE,IAAI,EAAE;QAC1C,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC,CAAC,iBAAiB,CAAC;IACtB,MAAM,MAAM,GAAG;QACb,4HAA4H;QAC5H,sNAAsN;QACtN,+JAA+J;QAC/J,mHAAmH;QACnH,EAAE;QACF,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAkB;YAC/B,GAAG,IAAI;YACP,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mDAAmD,OAAO,EAAE,EAAE;YACzF,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;SAC7B,CAAC;QACF,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,WAAW,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,sBAAsB,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1F,MAAM,SAAS,GAAG,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;YACjE,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,QAAQ,EAAE,sBAAsB;oBAChC,MAAM;oBACN,KAAK,EAAE,sBAAsB,CAAC,MAAM;oBACpC,YAAY;oBACZ,WAAW,EAAE,SAAS;oBACtB,UAAU,EAAE,KAAK;iBAClB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;gBACvB,MAAM;gBACN,KAAK,EAAE,MAAM;gBACb,YAAY;gBACZ,WAAW,EAAE,YAAY;gBACzB,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM;YACN,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,YAAY;YACZ,WAAW;YACX,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAClG,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,WAAW,IAAI,YAAY,EAAE,CAAC;YAChC,OAAO;gBACL,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;gBACvB,MAAM;gBACN,KAAK,EAAE,MAAM;gBACb,YAAY;gBACZ,WAAW,EAAE,YAAY;gBACzB,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM;YACN,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,YAAY;YACZ,WAAW;YACX,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAgB;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC/C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"context-manager.js","sourceRoot":"","sources":["../../src/agent/context-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAuB;IAC5D,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAkBD,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAuB,EACvB,UAA0B,EAAE;IAE5B,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvD,IAAI,sBAAsB,CAAC,QAAQ,CAAC,IAAI,MAAM;QAAE,OAAO,QAAQ,CAAC;IAEhE,oEAAoE;IACpE,MAAM,IAAI,GAAkB,EAAE,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAEzC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAgB;QACxB,IAAI,EAAE,QAAQ;QACd,OAAO,EACL,6JAA6J;YAC7J,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;KACrB,CAAC;IAEF,OAAO,CAAC,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAAuB,EACvB,SAA8C,EAC9C,UAA0B,EAAE,EAC5B,iBAAsC;IAEtC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,YAAY,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC;IAE5C,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;IAC9D,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAE7C,yEAAyE;IACzE,qFAAqF;IACrF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACnE,UAAU,GAAG,CAAC,CAAC;QACf,SAAS,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAChC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC;QACrD,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;YACvB,MAAM;YACN,KAAK,EAAE,MAAM;YACb,YAAY;YACZ,WAAW,EAAE,YAAY;YACzB,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,KAAK;SAC5B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;SACpF,IAAI,CAAC,MAAM,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,iBAAiB,EAAE,IAAI,EAAE;QAC1C,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;QACzC,CAAC,CAAC,iBAAiB,CAAC;IACtB,MAAM,MAAM,GAAG;QACb,4HAA4H;QAC5H,sNAAsN;QACtN,+JAA+J;QAC/J,mHAAmH;QACnH,EAAE;QACF,UAAU;KACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAkB;YAC/B,GAAG,IAAI;YACP,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mDAAmD,OAAO,EAAE,EAAE;YACzF,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;SAC7B,CAAC;QACF,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,WAAW,IAAI,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,MAAM,sBAAsB,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1F,MAAM,SAAS,GAAG,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;YACjE,IAAI,SAAS,GAAG,YAAY,EAAE,CAAC;gBAC7B,OAAO;oBACL,QAAQ,EAAE,sBAAsB;oBAChC,MAAM;oBACN,KAAK,EAAE,sBAAsB,CAAC,MAAM;oBACpC,YAAY;oBACZ,WAAW,EAAE,SAAS;oBACtB,UAAU,EAAE,KAAK;iBAClB,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;gBACvB,MAAM;gBACN,KAAK,EAAE,MAAM;gBACb,YAAY;gBACZ,WAAW,EAAE,YAAY;gBACzB,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM;YACN,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,YAAY;YACZ,WAAW;YACX,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAClG,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7E,MAAM,WAAW,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,WAAW,IAAI,YAAY,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,OAAO;gBACL,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;gBACvB,MAAM;gBACN,KAAK,EAAE,MAAM;gBACb,YAAY;gBACZ,WAAW,EAAE,YAAY;gBACzB,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,SAAS;YACnB,MAAM;YACN,KAAK,EAAE,SAAS,CAAC,MAAM;YACvB,YAAY;YACZ,WAAW;YACX,UAAU,EAAE,KAAK;SAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,QAAgB;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC/C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC;AAC9C,CAAC"}

package/dist/agent/events.d.ts

@@ -48,7 +48,7 @@ export type AgentEvent = {
 } | {
     type: "confirm-request";
     id: string;
-    kind: "tool" | "pentest" | "reset";
+    kind: "tool" | "pentest" | "reset" | "continue";
     prompt: string;
 } | {
     type: "turn-end";

package/dist/agent/loop-guard.d.ts

@@ -31,6 +31,10 @@ export declare class LoopGuard {
      * expected to fix the cause (install a tool, create a dir) and retry. Only
      * calls that already SUCCEEDED are deduped, since re-running them wastes a
      * step and risks an infinite summarize loop.
+     *
+     * Read-only tools (web.fetch, fs.read, etc.) get a higher threshold (3)
+     * because they may legitimately need re-calling after context compaction
+     * removes their results.
      */
     shouldBlock(name: string, args: Record<string, unknown>): {
         block: boolean;
@@ -42,6 +46,11 @@ export declare class LoopGuard {
      * (e.g., command not found → retry → not found → ...).
      */
     hasRepeatedFailures(threshold?: number): boolean;
+    /**
+     * Reset counters for read-only tools. Called after context compaction
+     * so the model can re-fetch data whose results were compacted away.
+     */
+    resetReadOnly(): void;
     /**
      * Get the total number of recorded attempts.
      */

package/dist/agent/loop-guard.js

@@ -1,3 +1,24 @@
+/**
+ * Non-mutating tools that may legitimately need re-calling after context
+ * compaction removes their earlier results. These get a higher dedup
+ * threshold (3 vs 2 for write tools) and their counters can be reset when
+ * context is compacted.
+ */
+const READ_ONLY_TOOLS = new Set([
+    "web.fetch",
+    "http.fetch",
+    "web.search",
+    "dns.lookup",
+    "whois.lookup",
+    "fs.read",
+    "fs.list",
+    "fs.search",
+    "sysinfo",
+    "net.context",
+    "tool.check",
+    "image.ocr",
+    "pdf.read",
+]);
 /**
  * Track and detect tool-call repetition patterns so the agent doesn't
  * waste steps in loops.
@@ -47,6 +68,10 @@ export class LoopGuard {
      * expected to fix the cause (install a tool, create a dir) and retry. Only
      * calls that already SUCCEEDED are deduped, since re-running them wastes a
      * step and risks an infinite summarize loop.
+     *
+     * Read-only tools (web.fetch, fs.read, etc.) get a higher threshold (3)
+     * because they may legitimately need re-calling after context compaction
+     * removes their results.
      */
     shouldBlock(name, args) {
         const sig = this.canonicalize(name, args);
@@ -60,7 +85,10 @@ export class LoopGuard {
         // that just wrote a file to "use the results you already have" is
         // nonsensical and has caused models to assume the whole task is done.
         const isWrite = name === "fs.write" || name === "fs.writeMany" || name === "fs.edit";
-        if (count === 1) {
+        // Read-only tools get a higher threshold — they may need re-calling
+        // after context compaction removes their earlier results.
+        const threshold = READ_ONLY_TOOLS.has(name) ? 3 : 2;
+        if (count < threshold) {
             return {
                 block: false,
                 reason: isWrite
@@ -68,12 +96,12 @@ export class LoopGuard {
                     : `${name} has already been called with these arguments once and succeeded. Consider using the results you already have.`,
             };
         }
-        // count >= 2 and at least one success: block
+        // count >= threshold and at least one success: block
         return {
             block: true,
             reason: isWrite
                 ? `${name} was already called ${count} time(s) with the identical path and content. That file is already written. Continue with the remaining files/steps or give your final answer.`
-                : `${name} was already called ${count} time(s) with the same arguments. Summarize existing results instead.`,
+                : `${name} was already called ${count} time(s) with the same arguments. The data is already in your context — analyze what you have and move to the next step.`,
         };
     }
     getAttemptCount(name, args) {
@@ -90,6 +118,20 @@ export class LoopGuard {
         const recent = this.attempts.slice(-threshold);
         return recent.every((a) => !a.ok);
     }
+    /**
+     * Reset counters for read-only tools. Called after context compaction
+     * so the model can re-fetch data whose results were compacted away.
+     */
+    resetReadOnly() {
+        for (const sig of [...this.signatureCount.keys()]) {
+            const name = sig.split("::")[0] ?? "";
+            if (READ_ONLY_TOOLS.has(name)) {
+                this.signatureCount.delete(sig);
+                this.signatureSuccess.delete(sig);
+            }
+        }
+        this.attempts = this.attempts.filter((a) => !READ_ONLY_TOOLS.has(a.callName));
+    }
     /**
      * Get the total number of recorded attempts.
      */

package/dist/agent/loop-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"loop-guard.js","sourceRoot":"","sources":["../../src/agent/loop-guard.ts"],"names":[],"mappings":"AAUA;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,QAAQ,GAAkB,EAAE,CAAC;IAC7B,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,gBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEtD;;;;OAIG;IACH,YAAY,CAAC,IAAY,EAAE,IAA6B;QACtD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,8CAA8C;YAC9C,IAAI,IAAI,KAAK,YAAY,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5E,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,aAAa,CACX,IAAY,EACZ,IAAY,EACZ,IAA6B,EAC7B,EAAW,EACX,QAA6B;QAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,qEAAqE;QACrE,kBAAkB;QAClB,IAAI,EAAE;YAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC;IAED;;;;;;;;;;;OAWG;IACH,WAAW,CACT,IAAY,EACZ,IAA6B;QAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAEzC,2DAA2D;QAC3D,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAEtE,wEAAwE;QACxE,kEAAkE;QAClE,sEAAsE;QACtE,MAAM,OAAO,GACX,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,SAAS,CAAC;QAEvE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,OAAO;oBACb,CAAC,CAAC,GAAG,IAAI,8HAA8H;oBACvI,CAAC,CAAC,GAAG,IAAI,gHAAgH;aAC5H,CAAC;QACJ,CAAC;QAED,6CAA6C;QAC7C,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,GAAG,IAAI,uBAAuB,KAAK,gJAAgJ;gBACrL,CAAC,CAAC,GAAG,IAAI,uBAAuB,KAAK,uEAAuE;SAC/G,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,IAAY,EAAE,IAA6B;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,SAAS,GAAG,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS;YAAE,OAAO,KAAK,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;CACF"}
+{"version":3,"file":"loop-guard.js","sourceRoot":"","sources":["../../src/agent/loop-guard.ts"],"names":[],"mappings":"AAUA;;;;;GAKG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,cAAc;IACd,SAAS;IACT,SAAS;IACT,WAAW;IACX,SAAS;IACT,aAAa;IACb,YAAY;IACZ,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,SAAS;IACZ,QAAQ,GAAkB,EAAE,CAAC;IAC7B,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,gBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAC;IAEtD;;;;OAIG;IACH,YAAY,CAAC,IAAY,EAAE,IAA6B;QACtD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACtB,8CAA8C;YAC9C,IAAI,IAAI,KAAK,YAAY,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5E,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,aAAa,CACX,IAAY,EACZ,IAAY,EACZ,IAA6B,EAC7B,EAAW,EACX,QAA6B;QAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,qEAAqE;QACrE,kBAAkB;QAClB,IAAI,EAAE;YAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;aACxC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAClF,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CACT,IAAY,EACZ,IAA6B;QAE7B,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAEzC,2DAA2D;QAC3D,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QAEtE,wEAAwE;QACxE,kEAAkE;QAClE,sEAAsE;QACtE,MAAM,OAAO,GACX,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,cAAc,IAAI,IAAI,KAAK,SAAS,CAAC;QAEvE,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEpD,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;YACtB,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,OAAO;oBACb,CAAC,CAAC,GAAG,IAAI,8HAA8H;oBACvI,CAAC,CAAC,GAAG,IAAI,gHAAgH;aAC5H,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,GAAG,IAAI,uBAAuB,KAAK,gJAAgJ;gBACrL,CAAC,CAAC,GAAG,IAAI,uBAAuB,KAAK,0HAA0H;SAClK,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,IAAY,EAAE,IAA6B;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,SAAS,GAAG,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,SAAS;YAAE,OAAO,KAAK,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,aAAa;QACX,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CACxC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;CACF"}

package/dist/agent/runner.d.ts

@@ -18,6 +18,8 @@ export declare function createSessionPolicy(): SessionPolicy;
 export interface ConfirmPort {
     confirmTool(call: ToolCall): Promise<boolean>;
     confirmPentest(): Promise<boolean>;
+    /** Ask the user whether to continue after hitting the step budget. */
+    confirmContinue?(steps: number): Promise<boolean>;
 }
 export interface AgentRunOptions {
     provider?: ProviderId | undefined;
@@ -120,6 +122,11 @@ export declare function sameToolCall(a: ToolCall, b: ToolCall): boolean;
  * copies and note the collapse so the meaning is preserved without the bulk.
  */
 export declare function collapseRepeatedText(text: string): string;
+/**
+ * Detect pentest/security tasks that need the full step budget.
+ * Mirrors looksLikeBuildTask but for security work.
+ */
+export declare function looksLikePentestTask(prompt: string, history?: ChatMessage[] | undefined): boolean;
 /**
  * Decide whether this turn should get the build workflow (explore → plan →
  * implement) and a generous step budget. Looks at the current prompt first,

package/dist/agent/runner.js

@@ -2,7 +2,8 @@ import { confirm } from "@inquirer/prompts";
 import chalk from "chalk";
 import { mkdir, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
-import { join } from "node:path";
+import { fixOwner, handlePermissionError } from "../os/permissions.js";
+import { join, resolve } from "node:path";
 import { streamWithProvider } from "../llm/router.js";
 import { randomUUID } from "node:crypto";
 import { jobManager } from "../tools/jobs.js";
@@ -26,6 +27,7 @@ import { analyzeTask } from "./task-analyzer.js";
 import { LoopGuard } from "./loop-guard.js";
 import { createPlan, loadPlan, savePlan, markTask, } from "../store/plan.js";
 import { renderPlanChecklist, renderPlanSidePane } from "../ui/plan-pane.js";
+import { pathInsideSandbox } from "../tools/fs.js";
 /** Render the plan as a right-side pane on wide terminals, else inline. */
 function renderPlanForTerminal(plan) {
     const cols = process.stdout.columns ?? 0;
@@ -547,6 +549,25 @@ const LOCAL_RUNTIME_RE = /\b(?:current\s+(?:directory|dir|cwd|working\s+director
 // under-budgeting silently truncates a half-built project.
 const BUILD_TASK_RE = /\b(?:build|create|scaffold|generate|make|set\s*up|setup|bootstrap|init(?:ialize)?|implement|add|write|develop|code|refactor|migrate|convert|wire\s*up|integrate)\b[\s\S]{0,80}\b(?:app|application|project|site|website|web\s*app|server|api|service|component|page|module|feature|cli|script|library|package|frontend|backend|fullstack|game|bot|dashboard|form|endpoint|database|schema|test|tests|suite)\b/i;
 const BUILD_STACK_RE = /\b(?:react|next(?:\.?js)?|vue|svelte|angular|vite|webpack|express|fastify|nest(?:js)?|django|flask|fastapi|rails|laravel|spring|node(?:\.?js)?|typescript|tailwind|redux|prisma|mongoose|graphql|docker|kubernetes)\b/i;
+// Pentest / security keywords — these tasks are inherently multi-step and
+// always deserve the full step budget, just like build tasks.
+const PENTEST_TASK_RE = /\b(?:pentest|pen[\s-]?test|penetration|security\s*(?:test|audit|scan|assess)|csrf|xss|sqli|sql[\s-]?inject|rce|lfi|rfi|ssrf|idor|xxe|brute[\s-]?force|enumerat|exploit|vulnerabilit|recon|bug[\s-]?bounty|ctf|capture[\s-]?the[\s-]?flag|red[\s-]?team|offensive|nmap|nikto|nuclei|ffuf|gobuster|sqlmap|hydra|metasploit)\b/i;
+/**
+ * Detect pentest/security tasks that need the full step budget.
+ * Mirrors looksLikeBuildTask but for security work.
+ */
+export function looksLikePentestTask(prompt, history) {
+    if (PENTEST_TASK_RE.test(prompt))
+        return true;
+    if (history && history.length > 0) {
+        const recent = history.slice(-6);
+        for (const msg of recent) {
+            if (msg.role === "user" && PENTEST_TASK_RE.test(msg.content))
+                return true;
+        }
+    }
+    return false;
+}
 // Short continuation prompts that, on their own, carry no build signal but
 // clearly mean "keep going with what we were doing".
 const CONTINUATION_RE = /^(?:do\s+it|build\s+it|build\s+fully|build\s+it\s+fully|go\s+ahead|continue|proceed|keep\s+going|finish(?:\s+it)?|complete(?:\s+it)?|yes|ok(?:ay)?|make\s+it|run\s+it|next|on\s+your\s+own|build\s+(?:fully\s+)?on\s+your\s+own)\b/i;
@@ -752,6 +773,58 @@ function restoreInteractiveStdin() {
         /* ignore */
     }
 }
+/**
+ * Build a rich summary when the agent stops (user declined to continue or
+ * maxIterations ceiling hit). Includes plan state, key findings, and clear
+ * resume instructions so a later "continue" can pick up exactly here.
+ */
+async function buildRichStopSummary(messages, session, steps) {
+    const plan = await loadPlan(session.sessionId).catch(() => undefined);
+    const parts = [];
+    parts.push(`Session paused after ${steps} steps.\n`);
+    // Plan state
+    if (plan) {
+        parts.push("## Plan Status");
+        parts.push(`Goal: ${plan.goal}`);
+        for (const task of plan.tasks) {
+            const icon = task.state === "done"
+                ? "✓"
+                : task.state === "in_progress"
+                    ? "▶"
+                    : task.state === "failed"
+                        ? "✗"
+                        : task.state === "skipped"
+                            ? "↷"
+                            : "·";
+            parts.push(`  ${icon} [${task.id}] (${task.state}) ${task.title}${task.note ? ` — ${task.note}` : ""}`);
+        }
+        const next = plan.tasks.find((t) => t.state === "pending" || t.state === "in_progress");
+        if (next) {
+            parts.push(`\nNext task to resume: ${next.id} — "${next.title}"`);
+        }
+        const doneCount = plan.tasks.filter((t) => t.state === "done").length;
+        parts.push(`\nProgress: ${doneCount}/${plan.tasks.length} tasks done.`);
+    }
+    // Key findings from tool results (last 20 tool messages)
+    const toolMsgs = messages.filter((m) => m.role === "tool").slice(-20);
+    if (toolMsgs.length > 0) {
+        parts.push("\n## Key Findings So Far");
+        for (const msg of toolMsgs) {
+            const firstLine = msg.content.split("\n")[0] ?? "";
+            // Extract tool name from the structured format "Tool <name> result ..."
+            const toolMatch = firstLine.match(/^Tool (\S+) result/);
+            if (toolMatch) {
+                parts.push(`- ${toolMatch[1]}: ${firstLine.slice(0, 150)}`);
+            }
+            else {
+                parts.push(`- ${firstLine.slice(0, 150)}`);
+            }
+        }
+    }
+    parts.push("\n## To Resume");
+    parts.push('Type "continue" to pick up from where this session left off.');
+    return parts.join("\n");
+}
 /**
  * Tools allowed while an UN-approved plan is active. Before the user runs
  * /implement, the agent may only (re)create the plan and do read-only
@@ -793,11 +866,18 @@ async function saveToolOutput(call, output) {
     if (!output.trim())
         return undefined;
     const dir = join(homedir(), ".clai", "outputs");
-    await mkdir(dir, { recursive: true });
-    const stamp = new Date().toISOString().replace(/[:.]/g, "-");
-    const path = join(dir, `${stamp}-${safeArtifactName(call.name)}.txt`);
-    await writeFile(path, `${output}\n`, "utf8");
-    return path;
+    try {
+        await mkdir(dir, { recursive: true });
+        await fixOwner(dir);
+        const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+        const path = join(dir, `${stamp}-${safeArtifactName(call.name)}.txt`);
+        await writeFile(path, `${output}\n`, "utf8");
+        await fixOwner(path);
+        return path;
+    }
+    catch (err) {
+        handlePermissionError(err);
+    }
 }
 function summarizeOutput(output, maxChars = 8_000) {
     if (output.length <= maxChars)
@@ -876,6 +956,12 @@ const inquirerConfirmPort = {
             default: false,
         });
     },
+    async confirmContinue(steps) {
+        return confirm({
+            message: chalk.yellow(`  ${steps} steps reached — continue?`),
+            default: true,
+        });
+    },
 };
 async function ensurePentestAuthorization(call, autoConfirm, session, confirmPort) {
     if (!isPentestToolCall(call))
@@ -1166,7 +1252,9 @@ export async function runAgentLoop(prompt, options = {}) {
         // "now"/"latest" that trip the volatile-info regex; without this guard the
         // agent burns its turn searching the date instead of writing files.
         const buildLikeTurn = looksLikeBuildTask(prompt, options.history);
+        const pentestLikeTurn = looksLikePentestTask(prompt, options.history);
         const freshWebSearchRequired = !buildLikeTurn &&
+            !pentestLikeTurn &&
             toolNames.includes("web.search") &&
             requiresFreshWebSearch(prompt);
         const systemSections = [renderAgentSystemPrompt(toolNames.join(", "))];
@@ -1278,14 +1366,15 @@ export async function runAgentLoop(prompt, options = {}) {
         const analysis = analyzeTask(prompt);
         const hasHistory = (options.history?.length ?? 0) > 0;
         const buildLike = buildLikeTurn;
+        const pentestLike = looksLikePentestTask(prompt, options.history);
         let stepBudget = analysis.complexity === "simple"
             ? 20
             : analysis.complexity === "standard"
                 ? 40
                 : maxSteps;
-        if (buildLike) {
-            // Scaffolding / multi-file work needs room: many file writes plus a
-            // verify/build step. Continuation prompts ("do it") inherit this too.
+        if (buildLike || pentestLike) {
+            // Scaffolding / multi-file work / pentest tasks need room.
+            // Continuation prompts ("do it") inherit this too.
             stepBudget = Math.max(stepBudget, maxSteps);
         }
         else if (hasHistory) {
@@ -1295,7 +1384,7 @@ export async function runAgentLoop(prompt, options = {}) {
         }
         // Hard ceiling on total loop iterations (productive + recovery) so a model
         // stuck emitting only thinking or malformed calls can't loop indefinitely.
-        const maxIterations = stepBudget * 3;
+        let maxIterations = stepBudget * 3;
         let productiveSteps = 0;
         let step = -1;
         let nextToolEventId = 0;
@@ -1393,7 +1482,19 @@ export async function runAgentLoop(prompt, options = {}) {
                 if (needsPentestAuth) {
                     pentestJustConfirmed = true;
                 }
-                const forceManualConfirm = call.name === "fs.delete";
+                let forceManualConfirm = call.name === "fs.delete";
+                if (call.name.startsWith("fs.") &&
+                    !isPreApprovalAllowedTool(call.name)) {
+                    const pathArg = typeof call.args.path === "string" ? call.args.path : undefined;
+                    if (pathArg) {
+                        const expandHomeLocal = (p) => p.startsWith("~/") || p.startsWith("~\\") ? join(homedir(), p.slice(2)) : p === "~" ? homedir() : p;
+                        const resolved = resolve(expandHomeLocal(pathArg));
+                        const mode = (call.name === "fs.read" || call.name === "fs.list" || call.name === "fs.search") ? "read" : "write";
+                        if (!pathInsideSandbox(resolved, mode)) {
+                            forceManualConfirm = true;
+                        }
+                    }
+                }
                 if (decision.level === "confirm" && !pentestJustConfirmed) {
                     const ok = await confirmToolExecution(call, forceManualConfirm ? false : Boolean(options.autoConfirm), session, confirmPort);
                     restoreInteractiveStdin();
@@ -1475,6 +1576,7 @@ export async function runAgentLoop(prompt, options = {}) {
                             return;
                         printLive(chunk);
                     },
+                    confirmed: true,
                 });
                 if (liveBytes > 0 || liveTruncatedNotified) {
                     writeToolOutput(toolEventId, "\n", "\n");
@@ -1555,8 +1657,59 @@ export async function runAgentLoop(prompt, options = {}) {
             // `step` is the productive-step index (used for display + audit). It only
             // advances when the previous iteration actually executed a tool.
             step = productiveSteps;
-            if (productiveSteps >= stepBudget)
-                break;
+            // ── Step budget gate: ask the user instead of hard-stopping ────────
+            if (productiveSteps >= stepBudget) {
+                const askContinue = confirmPort.confirmContinue ?? inquirerConfirmPort.confirmContinue;
+                let shouldContinue = false;
+                try {
+                    shouldContinue = await askContinue(productiveSteps);
+                    restoreInteractiveStdin();
+                }
+                catch {
+                    // Abort / non-interactive — treat as decline.
+                    shouldContinue = false;
+                }
+                if (shouldContinue) {
+                    // Extend the budget for another chunk of work.
+                    const extension = Math.max(40, maxSteps);
+                    stepBudget += extension;
+                    maxIterations = stepBudget * 3;
+                    // Compact older messages to free context space.
+                    const compacted = compactMessages(messages, { budgetTokens: 0, keepRecent: 12 });
+                    if (compacted.length < messages.length) {
+                        messages.splice(0, messages.length, ...compacted);
+                        loopGuard.resetReadOnly();
+                        await auditLog("agent.compact", {
+                            newLength: messages.length,
+                            estimatedTokens: estimateMessagesTokens(messages),
+                            reason: "step-budget-continue",
+                        });
+                    }
+                    // Inject a progress summary so the model stays focused.
+                    const livePlan = await loadPlan(session.sessionId).catch(() => undefined);
+                    let progressNote = "The step limit was reached and the user chose to continue. ";
+                    progressNote += "Review what you have accomplished so far and continue with the NEXT unfinished step. ";
+                    progressNote += "Do NOT repeat work already done. Do NOT re-fetch pages or re-run scans whose results you already have.";
+                    if (livePlan) {
+                        const doneTasks = livePlan.tasks.filter(t => t.state === "done");
+                        const pendingTasks = livePlan.tasks.filter(t => t.state === "pending" || t.state === "in_progress");
+                        progressNote += `\n\nPlan progress: ${doneTasks.length}/${livePlan.tasks.length} tasks done.`;
+                        if (pendingTasks.length > 0) {
+                            progressNote += ` Next: ${pendingTasks[0].id} — "${pendingTasks[0].title}".`;
+                        }
+                    }
+                    messages.push({ role: "user", content: progressNote });
+                    writeNotice("info", `continuing — budget extended to ${stepBudget} steps`, chalk.dim(`  ℹ continuing — budget extended to ${stepBudget} steps\n`));
+                    // Continue the loop — model doesn't know it paused.
+                }
+                else {
+                    // User declined — build a rich summary and return.
+                    const richSummary = await buildRichStopSummary(messages, session, productiveSteps);
+                    writeAssistantMessage(richSummary);
+                    lastAnswer = richSummary;
+                    return finishTurn(lastAnswer, productiveSteps);
+                }
+            }
             options.signal?.throwIfAborted();
             // `call` and `assistantText` are shared by both paths below: a fresh
             // model round-trip, or draining a previously-queued tool call.
@@ -1678,24 +1831,19 @@ export async function runAgentLoop(prompt, options = {}) {
                 // answer and the user has to re-submit the same prompt.
                 if (!assistantText.visible.trim() && !call && assistantText.hasThinking) {
                     emptyVisibleRetries += 1;
-                    if (emptyVisibleRetries <= 2) {
+                    if (emptyVisibleRetries <= 3) {
                         writeThinkingBlock(assistantText.thinkContent);
                         writeNotice("warn", "model produced only thinking — nudging it to take action", chalk.yellow("  ⚠ model produced only thinking — nudging it to take action\n"));
                         messages.push({
                             role: "assistant",
                             content: collapseRepeatedText(completion.text),
                         });
+                        // Keep nudges SHORT — cheap models lose the key instruction in long text.
                         const buildNudge = buildLikeTurn && !activePlan
-                            ? "You only produced internal reasoning with no visible answer or tool call. " +
-                                "This is a BUILD/SCAFFOLD task with NO plan yet. " +
-                                "You MUST call plan.create using the ```tool format to create a comprehensive plan BEFORE writing any files or running any commands. " +
-                                "Do NOT use fs.write, fs.writeMany, fs.edit, shell.exec, shell.start, or pkg.install yet. " +
-                                "Your ONLY allowed action right now is plan.create (or read/list for exploration)."
-                            : "You only produced internal reasoning with no visible answer or tool call. " +
-                                "You MUST either call a tool using the ```tool format or provide your final answer. " +
-                                "Do NOT wrap your tool call inside  considering or reasoning tags — put it in the VISIBLE response, not hidden. " +
-                                "If images are attached, inspect them directly for visual details (text, colors, layout, spacing, style) instead of using OCR unless explicitly needed. " +
-                                "Do NOT just think — take action NOW.";
+                            ? "No visible output. Emit a ```tool block to call plan.create now. " +
+                                "Do NOT hide tool calls in <think> tags — put them in the visible response."
+                            : "No visible output. Emit a ```tool block or give your final answer. " +
+                                "Do NOT hide tool calls in <think> tags — put them in the visible response.";
                         messages.push(recoveryUserMessage(buildNudge));
                         continue;
                     }
@@ -2003,10 +2151,13 @@ export async function runAgentLoop(prompt, options = {}) {
                     return finishTurn(lastAnswer, productiveSteps);
                 }
                 // Compact older messages when the running estimate exceeds budget
-                if (estimateMessagesTokens(messages) > 24_000) {
-                    const compacted = compactMessages(messages);
+                if (estimateMessagesTokens(messages) > 32_000) {
+                    const compacted = compactMessages(messages, { keepRecent: 12 });
                     if (compacted.length < messages.length) {
                         messages.splice(0, messages.length, ...compacted);
+                        // Reset read-only tool counters so the model can re-fetch data
+                        // whose results were compacted away.
+                        loopGuard.resetReadOnly();
                         await auditLog("agent.compact", {
                             newLength: messages.length,
                             estimatedTokens: estimateMessagesTokens(messages),
@@ -2015,8 +2166,11 @@ export async function runAgentLoop(prompt, options = {}) {
                 }
             }
         }
-        lastAnswer = `Stopped after ${productiveSteps} steps.`;
-        writeNotice("warn", lastAnswer, "  " + chalk.yellow(lastAnswer) + "\n");
+        // maxIterations ceiling reached (safety net — normally the step budget
+        // gate with user confirmation handles stopping gracefully).
+        const richSummary = await buildRichStopSummary(messages, session, productiveSteps);
+        writeAssistantMessage(richSummary);
+        lastAnswer = richSummary;
         return finishTurn(lastAnswer, productiveSteps);
     }
     catch (error) {