@sema-agent/core 2.13.0 → 4.0.0

package/dist/brain/tool-call-repair.js

@@ -1,9 +1,10 @@
+import { mintFallbackToolCallId } from "./tool-call-id.js";
 const TAG_RE = /<(tool_call|function_call|tool_calls|function_calls)>\s*([\s\S]*?)\s*<\/\1>/gi;
 const FENCE_RE = /```(?:json|tool_call|tool|function)?\s*([\s\S]*?)```/gi;
 function asRecord(v) {
     return v && typeof v === "object" && !Array.isArray(v) ? v : undefined;
 }
-function extractCall(obj, toolNames) {
+function extractCall(obj, toolNames, framed) {
     const rec = asRecord(obj);
     if (!rec) {
         return undefined;
@@ -13,45 +14,63 @@ function extractCall(obj, toolNames) {
     if (typeof name !== "string" || !toolNames.has(name)) {
         return undefined;
     }
-    let rawArgs = rec.arguments ?? rec.parameters ?? rec.input ?? rec.args ?? fn?.arguments;
-    if (typeof rawArgs === "string") {
+    const rawArgs = rec.arguments ?? rec.parameters ?? rec.input ?? rec.args ?? fn?.arguments;
+    let args;
+    if (rawArgs === undefined) {
+        if (!framed)
+            return undefined;
+        args = {};
+    }
+    else if (typeof rawArgs === "string") {
+        let parsed;
         try {
-            rawArgs = JSON.parse(rawArgs);
+            parsed = JSON.parse(rawArgs);
         }
         catch {
-            rawArgs = {};
+            return undefined;
         }
+        const rec2 = asRecord(parsed);
+        if (!rec2)
+            return undefined;
+        args = rec2;
+    }
+    else {
+        const rec2 = asRecord(rawArgs);
+        if (!rec2)
+            return undefined;
+        args = rec2;
     }
-    const args = asRecord(rawArgs) ?? {};
     return {
         type: "toolCall",
-        id: `repair_${name}_${Math.random().toString(36).slice(2, 8)}`,
+        id: mintFallbackToolCallId(`repair_${name}_`),
         name,
         arguments: args,
     };
 }
-function parseBlock(raw, toolNames, out) {
+function parseBlock(raw, toolNames, out, framed) {
     let parsed;
     try {
         parsed = JSON.parse(raw.trim());
     }
     catch {
-        return false;
+        return "none";
     }
     const items = Array.isArray(parsed) ? parsed : [parsed];
-    let any = false;
+    let promoted = 0;
     for (const item of items) {
-        const call = extractCall(item, toolNames);
+        const call = extractCall(item, toolNames, framed);
         if (call) {
             out.push(call);
-            any = true;
+            promoted++;
         }
     }
-    return any;
+    if (promoted === 0)
+        return "none";
+    return promoted === items.length ? "all" : "some";
 }
 export function repairTextToolCalls(text, toolNames) {
     const toolCalls = [];
-    let cleaned = text.replace(TAG_RE, (m, _tag, inner) => parseBlock(inner, toolNames, toolCalls) ? "" : m);
-    cleaned = cleaned.replace(FENCE_RE, (m, inner) => parseBlock(inner, toolNames, toolCalls) ? "" : m);
+    let cleaned = text.replace(TAG_RE, (m, _tag, inner) => parseBlock(inner, toolNames, toolCalls, true) === "all" ? "" : m);
+    cleaned = cleaned.replace(FENCE_RE, (m, inner) => parseBlock(inner, toolNames, toolCalls, false) === "all" ? "" : m);
     return { toolCalls, cleanedText: cleaned.trim() };
 }

package/dist/core/auto-compaction.js

@@ -1,10 +1,11 @@
-import { DEFAULT_CHARS_PER_TOKEN, DEFAULT_CLAMP_TOLERANCE, DEFAULT_COMPACTION_SETTINGS, CompactionError, compact, computeFileLists, dryRunSummarizationClamp, estimateContextTokens, estimateTokens, formatPersistedOutputRefs, prepareCompaction, shouldCompact, } from "../internal/harness.js";
+import { DEFAULT_CHARS_PER_TOKEN, DEFAULT_CLAMP_TOLERANCE, DEFAULT_COMPACTION_SETTINGS, CompactionError, compact, computeFileLists, dryRunSummarizationClamp, estimateContextTokens, estimateTokens, formatFileOperations, formatPersistedOutputRefs, prepareCompaction, shouldCompact, } from "../internal/harness.js";
 import { fileArgPath } from "../tools/fs/safety.js";
 import { contextEditFrontier } from "./context-edit.js";
 import { selectCompactionEpoch } from "../prompt-assembly/epoch.js";
 import { SEMA_DEFAULT_PACK } from "../prompt-assembly/packs/sema-default.js";
 import { brainToRuntime } from "./runtime.js";
 import { defuseFenceMarkers, sanitizeUntrustedText } from "./untrusted-text.js";
+import { createSafeNotifier } from "./safe-notify.js";
 export const DEFAULT_COMPACTION_INSTRUCTIONS = "Preserve verbatim every code, identifier, name, number, file path, error message, credential " +
     "reference, and explicit user instruction or decision mentioned anywhere in the conversation. " +
     "When in doubt, keep the specific detail rather than generalizing it.";
@@ -17,6 +18,10 @@ export function sanitizeCompactionInstructions(text) {
         ? cps.slice(0, COMPACTION_INSTRUCTIONS_MAX_CHARS).join("")
         : defused;
 }
+const WORKING_FILE_BREAKOUT_TAGS = ["working-file", "summary"];
+function escapeWorkingFilePathAttr(path) {
+    return path.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/[\r\n]+/g, " ");
+}
 export const COMPACTION_THROUGHPUT_PRIOR_TOKENS_PER_MS = 3;
 const COMPACTION_THROUGHPUT_EWMA_ALPHA = 0.3;
 const COMPACTION_WALLTIME_ABORT_FLAG = "semaCompactionWalltimeAbort";
@@ -69,8 +74,11 @@ export async function maybeCompact(opts) {
     const anchorStale = est.usageTokens > 0 && est.tokens > structuralTokens * STALE_ANCHOR_STRUCTURAL_MARGIN + overhead;
     const tokens = anchorStale || est.usageTokens === 0 ? structuralTokens + overhead : est.tokens;
     const window = opts.model.autoCompactTokens ?? opts.model.contextTokens ?? opts.model.contextWindow;
+    const windowKnown = Number.isFinite(window) && window > 0;
     const settings = sanitizeCompactionSettings(rawSettings, window);
-    const contextUsage = { usedTokens: tokens, windowTokens: window, compactAtTokens: window - settings.reserveTokens };
+    const contextUsage = windowKnown
+        ? { usedTokens: tokens, windowTokens: window, compactAtTokens: window - settings.reserveTokens }
+        : undefined;
     const wantsCompact = shouldCompact(tokens, window, settings);
     const naturalTrigger = wantsCompact && tokens >= (opts.minTokens ?? 0);
     const force = opts.force || (opts.forceUnderThreshold === true && !naturalTrigger);
@@ -89,6 +97,7 @@ export async function maybeCompact(opts) {
         return { contextUsage, compacted: false, noop: true };
     }
     const trigger = opts.trigger ?? "auto";
+    const notifier = createSafeNotifier();
     let hookInstructions;
     if (opts.preCompact) {
         let pre;
@@ -118,7 +127,7 @@ export async function maybeCompact(opts) {
             : hookSanitized
         : specInstructions;
     const maxReuse = opts.maxConsecutiveProviderReuse ?? 3;
-    const forceRealSummary = (opts.consecutiveProviderReuse ?? 0) >= maxReuse;
+    const forceRealSummary = maxReuse > 0 && (opts.consecutiveProviderReuse ?? 0) >= maxReuse;
     let providerSummary;
     if (opts.summaryProvider && !forceRealSummary && !prep.value.isSplitTurn) {
         const providerModifiedFiles = computeFileLists(prep.value.fileOps).modifiedFilesByRecency;
@@ -151,7 +160,9 @@ export async function maybeCompact(opts) {
         summary = providerSummary;
         firstKeptEntryId = prep.value.firstKeptEntryId;
         summaryTokensBefore = prep.value.tokensBefore;
-        details = computeFileLists(prep.value.fileOps);
+        const providerFileLists = computeFileLists(prep.value.fileOps);
+        details = providerFileLists;
+        summary += formatFileOperations(providerFileLists.readFiles, providerFileLists.modifiedFiles);
         if (prep.value.invokedSkills.length > 0) {
             details.invokedSkills = prep.value.invokedSkills;
         }
@@ -174,11 +185,7 @@ export async function maybeCompact(opts) {
         }
         const contentTokens = dry !== undefined ? Math.ceil((dry.conversationChars + (prep.value.previousSummary?.length ?? 0)) / cpt) : 0;
         const observeWindowSafety = (info) => {
-            try {
-                opts.onWindowSafety?.(info);
-            }
-            catch {
-            }
+            notifier.notify(() => opts.onWindowSafety?.(info), "compaction.onWindowSafety");
         };
         if (wantsWindowSafety && dry !== undefined) {
             const tolerance = settings.clampTolerance ?? DEFAULT_CLAMP_TOLERANCE;
@@ -330,7 +337,7 @@ export async function maybeCompact(opts) {
     const rawCandidateFiles = recentlyRead.length > 0 ? recentlyRead : (details?.modifiedFilesByRecency ?? details?.modifiedFiles);
     const maxFilesForSelection = Math.max(1, att?.maxFiles ?? 3);
     const excludedReadStatePreserveKeys = [];
-    const candidateFiles = Array.isArray(rawCandidateFiles) && rawCandidateFiles.length > 0
+    const candidateFiles = att !== undefined && Array.isArray(rawCandidateFiles) && rawCandidateFiles.length > 0
         ? await (async () => {
             const keptTailReadPathsRaw = new Set();
             const firstKeptIdx = branch.findIndex((e) => e.id === firstKeptEntryId);
@@ -417,7 +424,8 @@ export async function maybeCompact(opts) {
     if (att && Array.isArray(candidateFiles) && candidateFiles.length > 0) {
         const maxFiles = maxFilesForSelection;
         const perFileCap = Math.max(200, att.maxCharsPerFile ?? 16_000);
-        let remaining = Math.min(maxFiles * perFileCap, Math.floor(window * 0.15) * cpt);
+        const windowShareChars = windowKnown ? Math.floor(window * 0.15) * cpt : Number.POSITIVE_INFINITY;
+        let remaining = Math.min(maxFiles * perFileCap, windowShareChars);
         const blocks = [];
         for (const path of candidateFiles.slice(0, maxFiles)) {
             if (remaining <= 0)
@@ -437,7 +445,7 @@ export async function maybeCompact(opts) {
                 ? `${content.slice(0, cap)}\n[... ${content.length - cap} more characters truncated — read the file for the rest]`
                 : content;
             remaining -= clipped.length;
-            blocks.push(`<working-file path="${path}">\n${clipped}\n</working-file>`);
+            blocks.push(`<working-file path="${escapeWorkingFilePathAttr(path)}">\n${sanitizeUntrustedText(clipped, WORKING_FILE_BREAKOUT_TAGS)}\n</working-file>`);
             attachedFiles.push({ path, chars: Math.min(content.length, cap), truncated: wasClipped });
             if (!wasClipped)
                 attachedComplete.push({ path, content });
@@ -488,27 +496,20 @@ export async function maybeCompact(opts) {
     }
     catch {
     }
-    try {
-        opts.onCompaction?.({
-            messagesCompacted: prep.value.messagesToSummarize.length,
-            freedTokens,
-            tokensBefore: summaryTokensBefore,
-            reused,
-        });
-    }
-    catch {
-    }
+    const messagesCompacted = prep.value.messagesToSummarize.length;
+    notifier.notify(() => opts.onCompaction?.({
+        messagesCompacted,
+        freedTokens,
+        tokensBefore: summaryTokensBefore,
+        reused,
+    }), "compaction.onCompaction");
     if (opts.postCompact) {
-        try {
-            await opts.postCompact({
-                trigger,
-                summary,
-                tokensBefore: summaryTokensBefore,
-                ...(postTriggerTokens !== undefined ? { tokensAfter: postTriggerTokens } : {}),
-            });
-        }
-        catch {
-        }
+        await notifier.notifyAsync(() => opts.postCompact?.({
+            trigger,
+            summary,
+            tokensBefore: summaryTokensBefore,
+            ...(postTriggerTokens !== undefined ? { tokensAfter: postTriggerTokens } : {}),
+        }), "compaction.postCompact");
     }
     const endAt = Date.now();
     return {

package/dist/core/background-agent-store.d.ts

@@ -73,18 +73,24 @@ export declare function canAccessAgentRecord(record: Pick<BackgroundAgentRecord,
     sessionId?: string;
 }): boolean;
 export declare const STALE_RUNNING_REAP_ATTRIBUTION = "the host process was interrupted while this agent was running \u2014 its in-process state was lost. Check its worktree / output file for partial work before assuming the task landed (stale running row reaped).";
+export interface BackgroundAgentUpdateIfExpect {
+    rev: number;
+    status?: BackgroundAgentRecord["status"];
+    parkedCheckpointToken?: string | null;
+    parkClaimId?: string | null;
+}
+export interface BackgroundAgentReapOptions {
+    maxAgeMs?: number;
+    keep?: number;
+    staleRunningMaxAgeMs?: number;
+}
 export interface BackgroundAgentStore {
     put(record: BackgroundAgentRecord): Promise<void>;
     get(handle: string, scope: string): Promise<BackgroundAgentRecord | null>;
     update(handle: string, scope: string, record: BackgroundAgentRecord, expect: {
         rev: number;
     }): Promise<boolean>;
-    updateIf(handle: string, scope: string, record: BackgroundAgentRecord, expect: {
-        rev: number;
-        status?: BackgroundAgentRecord["status"];
-        parkedCheckpointToken?: string | null;
-        parkClaimId?: string | null;
-    }): Promise<boolean>;
+    updateIf(handle: string, scope: string, record: BackgroundAgentRecord, expect: BackgroundAgentUpdateIfExpect): Promise<boolean>;
     listBySession(scope: string, sessionId: string, opts?: {
         status?: BackgroundAgentRecord["status"];
         limit?: number;
@@ -97,11 +103,7 @@ export interface BackgroundAgentStore {
         rev: number;
     }): Promise<boolean>;
     listScopes?(): Promise<string[]>;
-    reap(scope: string, now: number, opts?: {
-        maxAgeMs?: number;
-        keep?: number;
-        staleRunningMaxAgeMs?: number;
-    }): Promise<number>;
+    reap(scope: string, now: number, opts?: BackgroundAgentReapOptions): Promise<number>;
 }
 export declare function reconcileParkedAgents(stores: {
     agentStore: BackgroundAgentStore;
@@ -114,6 +116,13 @@ export declare function reconcileParkedAgents(stores: {
     failed: number;
     rolledBack: number;
 }>;
+export interface BackgroundAgentQuery {
+    scope: string;
+    sessionId?: string;
+    status?: BackgroundAgentRecord["status"];
+    limit?: number;
+}
+export declare function queryBackgroundAgents(rows: Iterable<BackgroundAgentRecord>, query: BackgroundAgentQuery): BackgroundAgentRowSummary[];
 export declare class InMemoryBackgroundAgentStore implements BackgroundAgentStore {
     private rows;
     private key;
@@ -122,12 +131,7 @@ export declare class InMemoryBackgroundAgentStore implements BackgroundAgentStor
     update(handle: string, scope: string, record: BackgroundAgentRecord, expect: {
         rev: number;
     }): Promise<boolean>;
-    updateIf(handle: string, scope: string, record: BackgroundAgentRecord, expect: {
-        rev: number;
-        status?: BackgroundAgentRecord["status"];
-        parkedCheckpointToken?: string | null;
-        parkClaimId?: string | null;
-    }): Promise<boolean>;
+    updateIf(handle: string, scope: string, record: BackgroundAgentRecord, expect: BackgroundAgentUpdateIfExpect): Promise<boolean>;
     listBySession(scope: string, sessionId: string, opts?: {
         status?: BackgroundAgentRecord["status"];
         limit?: number;
@@ -140,9 +144,5 @@ export declare class InMemoryBackgroundAgentStore implements BackgroundAgentStor
         rev: number;
     }): Promise<boolean>;
     listScopes(): Promise<string[]>;
-    reap(scope: string, now: number, opts?: {
-        maxAgeMs?: number;
-        keep?: number;
-        staleRunningMaxAgeMs?: number;
-    }): Promise<number>;
+    reap(scope: string, now: number, opts?: BackgroundAgentReapOptions): Promise<number>;
 }

package/dist/core/background-agent-store.js

@@ -173,6 +173,23 @@ function toSummary(r) {
         ...(r.usage !== undefined ? { usage: structuredClone(r.usage) } : {}),
     };
 }
+export function queryBackgroundAgents(rows, query) {
+    const out = [];
+    for (const r of rows) {
+        if (r.scope !== query.scope)
+            continue;
+        if (query.sessionId !== undefined) {
+            const anchor = r.sessionScoped ? r.owner : r.parentSessionId;
+            if (anchor !== query.sessionId && r.rootSessionId !== query.sessionId)
+                continue;
+        }
+        if (query.status !== undefined && r.status !== query.status)
+            continue;
+        out.push(toSummary(r));
+    }
+    out.sort((a, b) => b.spawnedAt - a.spawnedAt);
+    return query.limit !== undefined ? out.slice(0, Math.max(0, query.limit)) : out;
+}
 export class InMemoryBackgroundAgentStore {
     rows = new Map();
     key(handle, scope) {
@@ -220,31 +237,10 @@ export class InMemoryBackgroundAgentStore {
         return this.update(handle, scope, record, { rev: expect.rev });
     }
     async listBySession(scope, sessionId, opts) {
-        const out = [];
-        for (const r of this.rows.values()) {
-            if (r.scope !== scope)
-                continue;
-            const anchor = r.sessionScoped ? r.owner : r.parentSessionId;
-            if (anchor !== sessionId && r.rootSessionId !== sessionId)
-                continue;
-            if (opts?.status !== undefined && r.status !== opts.status)
-                continue;
-            out.push(toSummary(r));
-        }
-        out.sort((a, b) => b.spawnedAt - a.spawnedAt);
-        return opts?.limit !== undefined ? out.slice(0, Math.max(0, opts.limit)) : out;
+        return queryBackgroundAgents(this.rows.values(), { scope, sessionId, status: opts?.status, limit: opts?.limit });
     }
     async listByScope(scope, opts) {
-        const out = [];
-        for (const r of this.rows.values()) {
-            if (r.scope !== scope)
-                continue;
-            if (opts?.status !== undefined && r.status !== opts.status)
-                continue;
-            out.push(toSummary(r));
-        }
-        out.sort((a, b) => b.spawnedAt - a.spawnedAt);
-        return opts?.limit !== undefined ? out.slice(0, Math.max(0, opts.limit)) : out;
+        return queryBackgroundAgents(this.rows.values(), { scope, status: opts?.status, limit: opts?.limit });
     }
     async delete(handle, scope, expect) {
         const k = this.key(handle, scope);

package/dist/core/checkpoint-store.d.ts

@@ -3,7 +3,8 @@ import type { RepairBundle } from "../agents/repair-loop.js";
 import type { WorkspaceHandle } from "./remote-env.js";
 import type { ConsolidationNote } from "./runner/memory-consolidation.js";
 import type { SessionPermissionRules } from "./session-policy-store.js";
-import type { TaskResult } from "./types.js";
+import type { NestedUsageAccum, TaskResult } from "./types.js";
+import type { ActiveWorktreeSession } from "../internal/harness-types.js";
 export type CheckpointToken = string & {
     readonly __brand: "CheckpointToken";
 };
@@ -30,6 +31,7 @@ export declare function riskSeverity(axes: {
     shell?: boolean;
 }): 1 | 2 | 3 | 4 | 5;
 export declare const MAX_TOOL_INPUT_PREVIEW_CHARS = 512;
+export declare const MAX_PENDING_STEER_CHARS = 16000;
 export declare function buildRiskDescriptor(input: {
     toolName: string;
     args: unknown;
@@ -111,12 +113,7 @@ export interface CheckpointState {
         value?: unknown;
         set?: boolean;
     };
-    nestedStats: {
-        tokens: number;
-        turns: number;
-        tasks: number;
-        costMicroUsd: number;
-    };
+    nestedStats: NestedUsageAccum;
     consolidationNotes?: ConsolidationNote[];
     readFileState?: Array<[string, ReadEntry]>;
     repairBundle?: RepairBundle;
@@ -130,12 +127,7 @@ export interface CheckpointState {
         description?: string;
     }>;
     handsCwd?: string;
-    activeWorktree?: {
-        worktreeDir: string;
-        originalCwd: string;
-        baseSha: string;
-        entered?: boolean;
-    };
+    activeWorktree?: ActiveWorktreeSession;
     inheritedGate?: {
         ancestorRules?: ReadonlyArray<{
             sessionId: string;
@@ -272,6 +264,8 @@ export declare function validatePendingSteer(steer: {
     text: string;
     trusted: boolean;
 };
+export declare function checkpointRowMatches(cp: Checkpoint | undefined, scope: string, status: Checkpoint["status"]): cp is Checkpoint;
+export declare function checkpointOccMatches(cp: Checkpoint, expect?: ResolveExpectation): boolean;
 export type CheckpointFaultMode = "resolve-after-commit" | "resolve-before-commit";
 export declare class InMemoryCheckpointStore implements CheckpointStore {
     private cps;

package/dist/core/checkpoint-store.js

@@ -25,6 +25,7 @@ const MAX_TOUCHED_PATHS = 8;
 const MAX_DIGEST_KEYS = 16;
 const MAX_DIGEST_SCAN_KEYS = 256;
 export const MAX_TOOL_INPUT_PREVIEW_CHARS = 512;
+export const MAX_PENDING_STEER_CHARS = 16_000;
 function isPlainRecord(x) {
     try {
         if (x === null || typeof x !== "object" || Array.isArray(x))
@@ -130,26 +131,40 @@ export const MAX_SUPPORTED_CHECKPOINT_VERSION = 4;
 export function checkpointVersionOf(cp) {
     return cp.version ?? 0;
 }
+function finiteBound(v) {
+    return v !== undefined && Number.isFinite(v) ? v : undefined;
+}
+function finiteSpend(v) {
+    return v !== undefined && Number.isFinite(v) ? v : undefined;
+}
 export function debitLedger(prior, slice, total, opts) {
     return {
-        totalBudgetMicroUsd: prior?.totalBudgetMicroUsd ?? total?.totalBudgetMicroUsd,
-        totalWalltimeSec: prior?.totalWalltimeSec ?? total?.totalWalltimeSec,
-        spentMicroUsd: (prior?.spentMicroUsd ?? 0) + Math.max(0, slice.costMicroUsd),
-        spentTokens: (prior?.spentTokens ?? 0) + Math.max(0, slice.tokens),
-        spentTurns: (prior?.spentTurns ?? 0) + Math.max(0, slice.turns),
-        spentWalltimeMs: (prior?.spentWalltimeMs ?? 0) + Math.max(0, slice.walltimeMs ?? 0),
+        totalBudgetMicroUsd: finiteBound(prior?.totalBudgetMicroUsd) ?? finiteBound(total?.totalBudgetMicroUsd),
+        totalWalltimeSec: finiteBound(prior?.totalWalltimeSec) ?? finiteBound(total?.totalWalltimeSec),
+        spentMicroUsd: (finiteSpend(prior?.spentMicroUsd) ?? 0) + Math.max(0, finiteSpend(slice.costMicroUsd) ?? 0),
+        spentTokens: (finiteSpend(prior?.spentTokens) ?? 0) + Math.max(0, finiteSpend(slice.tokens) ?? 0),
+        spentTurns: (finiteSpend(prior?.spentTurns) ?? 0) + Math.max(0, finiteSpend(slice.turns) ?? 0),
+        spentWalltimeMs: (finiteSpend(prior?.spentWalltimeMs) ?? 0) + Math.max(0, finiteSpend(slice.walltimeMs) ?? 0),
         sliceCount: (prior?.sliceCount ?? 0) + (opts?.countSlice === false ? 0 : 1),
     };
 }
 export function remainingBudgetMicroUsd(ledger) {
-    if (ledger?.totalBudgetMicroUsd === undefined)
+    const total = ledger?.totalBudgetMicroUsd;
+    if (total === undefined || !Number.isFinite(total))
         return undefined;
-    return Math.max(0, ledger.totalBudgetMicroUsd - ledger.spentMicroUsd);
+    const spent = ledger?.spentMicroUsd;
+    if (spent !== undefined && !Number.isFinite(spent))
+        return 0;
+    return Math.max(0, total - (spent ?? 0));
 }
 export function remainingWalltimeMs(ledger) {
-    if (ledger?.totalWalltimeSec === undefined)
+    const total = ledger?.totalWalltimeSec;
+    if (total === undefined || !Number.isFinite(total))
         return undefined;
-    return Math.max(0, ledger.totalWalltimeSec * 1000 - (ledger.spentWalltimeMs ?? 0));
+    const spent = ledger?.spentWalltimeMs;
+    if (spent !== undefined && !Number.isFinite(spent))
+        return 0;
+    return Math.max(0, total * 1000 - (spent ?? 0));
 }
 export function summarizeCheckpoint(cp) {
     const riskDescriptor = cp.gate.kind === "human" || cp.gate.kind === "irreversible_ask" ? cp.gate.riskDescriptor : undefined;
@@ -217,8 +232,17 @@ export function validatePendingSteer(steer) {
     if (/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/.test(steer.text)) {
         throw new CheckpointError("steering.invalid_content", "steering text must not contain control characters");
     }
+    if (steer.text.length > MAX_PENDING_STEER_CHARS) {
+        throw new CheckpointError("steering.invalid_content", `steering text must be at most ${MAX_PENDING_STEER_CHARS} characters (got ${steer.text.length})`);
+    }
     return { text: steer.text, trusted: steer.trusted };
 }
+export function checkpointRowMatches(cp, scope, status) {
+    return cp !== undefined && cp.scope === scope && cp.status === status;
+}
+export function checkpointOccMatches(cp, expect) {
+    return expect === undefined || (cp.rev ?? 0) === expect.rev;
+}
 export class InMemoryCheckpointStore {
     cps = new Map();
     fault = null;
@@ -238,10 +262,10 @@ export class InMemoryCheckpointStore {
             throw new Error("injected fault: resolve before commit");
         }
         const cp = this.cps.get(token);
-        if (!cp || cp.scope !== scope || cp.status !== "pending") {
+        if (!checkpointRowMatches(cp, scope, "pending")) {
             return false;
         }
-        if (expect !== undefined && (cp.rev ?? 0) !== expect.rev) {
+        if (!checkpointOccMatches(cp, expect)) {
             return false;
         }
         cp.status = "resolved";
@@ -258,7 +282,7 @@ export class InMemoryCheckpointStore {
     }
     async reopen(token, scope, reason) {
         const cp = this.cps.get(token);
-        if (!cp || cp.scope !== scope || cp.status !== "resolved") {
+        if (!checkpointRowMatches(cp, scope, "resolved")) {
             return false;
         }
         cp.status = "pending";
@@ -269,7 +293,7 @@ export class InMemoryCheckpointStore {
     async setPendingSteer(token, scope, steer) {
         const clean = validatePendingSteer(steer);
         const cp = this.cps.get(token);
-        if (!cp || cp.scope !== scope || cp.status !== "pending") {
+        if (!checkpointRowMatches(cp, scope, "pending")) {
             return false;
         }
         cp.state.pendingSteer = clean;
@@ -277,7 +301,7 @@ export class InMemoryCheckpointStore {
     }
     async expire(token, scope) {
         const cp = this.cps.get(token);
-        if (!cp || cp.scope !== scope || cp.status !== "pending") {
+        if (!checkpointRowMatches(cp, scope, "pending")) {
             return false;
         }
         cp.status = "expired";

package/dist/core/consolidate-scope.js

@@ -3,9 +3,9 @@ import { runMemoryConsolidation, DEFAULT_CONSOLIDATION_BAND, DEFAULT_CONSOLIDATI
 function maxMarker(a, b) {
     return a === undefined || b > a ? b : a;
 }
-function cappedHighWater(seen, failed) {
+function cappedHighWater(seen, blockers) {
     let floor;
-    for (const id of failed)
+    for (const id of blockers)
         if (floor === undefined || id < floor)
             floor = id;
     let hw;
@@ -66,7 +66,8 @@ export async function consolidateScope(scope, deps, opts = {}) {
             });
         }
         const seen = [...batchIds, ...(stats?.addedIds ?? [])];
-        const highWater = cappedHighWater(seen, stats?.failedIds ?? []);
+        const unfedTail = pending.slice(maxNotes).map((h) => h.id);
+        const highWater = cappedHighWater(seen, [...(stats?.failedIds ?? []), ...unfedTail]);
         if (highWater !== undefined && highWater !== cursor && (cursor === undefined || highWater > cursor)) {
             await store.setConsolidationCursor(scope, highWater);
         }

package/dist/core/context-edit.js

@@ -114,5 +114,8 @@ export function clearStaleToolResults(messages, opts) {
 }
 export function editBudget(model) {
     const window = model.autoCompactTokens ?? model.contextTokens ?? model.contextWindow;
+    if (!Number.isFinite(window) || window <= 0) {
+        return Number.POSITIVE_INFINITY;
+    }
     return contextEditFrontier(window);
 }

package/dist/core/context-guard.js

@@ -116,5 +116,8 @@ export function dropOrphanToolResults(messages) {
 }
 export function guardBudget(model) {
     const window = model.contextTokens ?? model.contextWindow;
+    if (!Number.isFinite(window) || window <= 0) {
+        return Number.POSITIVE_INFINITY;
+    }
     return Math.max(window - GUARD_HEADROOM_TOKENS, Math.floor(window * GUARD_FRACTION));
 }

package/dist/core/file-snapshot-store.d.ts

@@ -1,3 +1,5 @@
+declare function relUnder(root: string, child: string): string | null;
+declare function joinUnder(root: string, rel: string): string;
 import type { ExecutionEnv } from "../internal/harness-types.js";
 export interface FileSnapshotError {
     code: "too_large" | "enumerate_failed" | "read_failed" | "restore_failed" | "not_found" | "aborted";
@@ -51,3 +53,9 @@ export declare class InMemoryFileSnapshotStore implements FileSnapshotStore {
     importManifest(scope: string, key: string, manifest: Map<string, string>, srcGetBlob: (hash: string) => Promise<Uint8Array | undefined>): Promise<FileSnapshotResult>;
     reap(scope: string, keepKeys: string[]): Promise<number>;
 }
+export declare const __testables: {
+    joinUnder: typeof joinUnder;
+    relUnder: typeof relUnder;
+    stripTrailSep: (p: string) => string;
+};
+export {};

package/dist/core/file-snapshot-store.js

@@ -1,8 +1,8 @@
 import { createHash } from "node:crypto";
+import { isAbsolutePathForm, isWinFormPath } from "../tools/fs/safety.js";
 const normSlash = (p) => p.replace(/\\/g, "/");
-const stripTrailSep = (p) => p.replace(/[\\/]+$/, "");
+const stripTrailSep = (p) => (isWinFormPath(p) ? p.replace(/[\\/]+$/, "") : p.replace(/\/+$/, ""));
 const foldDrive = (p) => (/^[A-Za-z]:(\/|$)/.test(p) ? p[0].toLowerCase() + p.slice(1) : p);
-const isWinFormPath = (p) => /^[A-Za-z]:[\\/]/.test(p) || p.startsWith("\\\\") || (!p.startsWith("/") && p.includes("\\"));
 function relUnder(root, child) {
     const fold = isWinFormPath(root) ? normSlash : (p) => p;
     const r = foldDrive(fold(stripTrailSep(root)));
@@ -18,7 +18,7 @@ function joinUnder(root, rel) {
     return stripTrailSep(root) + (win ? "\\" : "/") + (win ? rel.replace(/\//g, "\\") : rel);
 }
 function isUnsafeRelPath(relN) {
-    return relN.startsWith("/") || /^[A-Za-z]:/.test(relN) || relN.split("/").includes("..");
+    return isAbsolutePathForm(relN) || /^[A-Za-z]:/.test(relN) || relN.split("/").includes("..");
 }
 export const DEFAULT_SNAPSHOT_BOUNDS = {
     maxFiles: 10000,
@@ -256,3 +256,4 @@ export class InMemoryFileSnapshotStore {
         return removed;
     }
 }
+export const __testables = { joinUnder, relUnder, stripTrailSep };

package/dist/core/git-worktree-env.d.ts

@@ -12,4 +12,9 @@ export declare function addWorktree(baseEnv: ExecutionEnv, opts: AddWorktreeOpti
     };
     worktreeDir: string;
 }>;
-export declare function pruneWorktrees(baseEnv: ExecutionEnv, repoRoot: string): Promise<void>;
+export declare function pruneWorktrees(baseEnv: ExecutionEnv, repoRoot: string): Promise<{
+    ok: true;
+} | {
+    ok: false;
+    detail: string;
+}>;

package/dist/core/git-worktree-env.js

@@ -59,5 +59,16 @@ export async function addWorktree(baseEnv, opts) {
     return { env, worktreeDir };
 }
 export async function pruneWorktrees(baseEnv, repoRoot) {
-    await baseEnv.exec("git worktree prune", { cwd: repoRoot });
+    try {
+        const r = await baseEnv.exec("git worktree prune", { cwd: repoRoot });
+        if (r.ok && r.value.exitCode === 0)
+            return { ok: true };
+        return {
+            ok: false,
+            detail: r.ok ? (r.value.stderr || r.value.stdout || `exit ${r.value.exitCode}`).trim() : String(r.error),
+        };
+    }
+    catch (err) {
+        return { ok: false, detail: String(err) };
+    }
 }