@sema-agent/core 5.11.0 → 5.13.0

package/dist/core/runner/prepare-task.js

@@ -4,6 +4,7 @@ import { resolve as resolveFsPath } from "node:path";
 import { AgentHarness, DEFAULT_CHARS_PER_TOKEN, DEFAULT_CLAMP_TOLERANCE, DEFAULT_COMPACTION_SETTINGS, estimateContextTokens, readCompactionActiveTools, summaryOutputBudgetTokens } from "../../internal/harness.js";
 const PROMPT_HASH_SALT = randomBytes(16);
 import { sanitizeCompactionSettings } from "../auto-compaction.js";
+import { projectStaleToolResults, resolveStaleToolResultOffload } from "./compaction-call-options.js";
 import { createAutoModeDecider } from "../auto-mode.js";
 import { buildAutoModePrompt, renderAutoModeAction, renderAutoModeWindow } from "../auto-mode-prompt.js";
 import { resolveModel, resolveTaskModel, roleModelIfSet } from "../roles.js";
@@ -37,6 +38,10 @@ import { OUTPUT_TOOL_NAME, REPORT_FINDINGS_TOOL_NAME, SKILL_CONTENT_MAX_CHARS, S
 import { compileOutputSchema } from "./strict-output-schema.js";
 import { TOOL_SEARCH_NAME, buildDeferredRegistry, classifyDeferred, extractDiscoveredToolNames, createPlaceholderTool, createToolSearchTool, } from "./tool-disclosure.js";
 import { composeMemoryBlock } from "../memory.js";
+import { preflightLockedConfig } from "../locked-config.js";
+import { COMPLIANCE_CAPABILITIES, WEB_FETCH_TOOL_NAME, complianceCallDenial, resolveComplianceDenies } from "../compliance.js";
+import { assertRetentionCapability } from "../retention.js";
+import { foldAdmissionFreeze } from "../memory-admission.js";
 import { prepareMemory } from "./prepare-memory.js";
 import { defaultPromptProvider, buildEnvironmentContext, buildGitSnapshot, formatLocalDate, isValidTimeZone, PROJECT_CONTEXT_FRAMING } from "../../prompts/default.js";
 import { assemblePrompt } from "../../prompt-assembly/assemble.js";
@@ -68,7 +73,7 @@ import { resolveWorkflowSizeGuideline } from "../../orchestration/workflow-size-
 import { createLspTool, gitCheckIgnoreFilter, resolveLspPath } from "../lsp.js";
 import { resolveKey } from "../../tools/fs/safety.js";
 import { wholeFileRecordsFromTranscript } from "./session-file-state-replay.js";
-import { BINDING_CHECKPOINT_VERSION, mintCheckpointToken, RESOURCE_CHECKPOINT_VERSION, TOKEN_CHECKPOINT_VERSION, buildRiskDescriptor, debitLedger, remainingBudgetMicroUsd, } from "../checkpoint-store.js";
+import { BINDING_CHECKPOINT_VERSION, mintCheckpointToken, ORG_ADMISSION_CHECKPOINT_VERSION, RESOURCE_CHECKPOINT_VERSION, TOKEN_CHECKPOINT_VERSION, buildRiskDescriptor, debitLedger, remainingBudgetMicroUsd, } from "../checkpoint-store.js";
 import { boundInputHashOf } from "../canonical-json.js";
 import { GLOBAL_USAGE_KEY, resolveUsageWindows, usageRetryAfterMs } from "../usage-window-store.js";
 const RECONCILE_MAX_RETRIES = 3;
@@ -336,6 +341,16 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
         e.code = "config.empty_objective";
         throw e;
     }
+    const lockedPreflight = preflightLockedConfig(spec, deps);
+    assertRetentionCapability({
+        policy: deps.retentionPolicy,
+        locked: lockedPreflight.lockedKeys.has("retentionPolicy"),
+        stores: [
+            { name: "sessionStore", store: sessions },
+            { name: "checkpointStore", store: resolveCheckpointStore(spec, deps) },
+            { name: "toolResultStore", store: deps.toolResultStore },
+        ],
+    });
     resolveTaskLimits(spec.limits);
     if (spec.resourceSuspend !== undefined) {
         const rsus = spec.resourceSuspend;
@@ -939,9 +954,24 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                     ? liveShellGate
                     : seedShellGate;
         const inheritedParentConstraints = liveInheritedGate?.parentConstraints;
+        const liveAdmittedOrg = liveInheritedGate?.admittedOrgScopes;
+        const seedAdmittedOrg = seedInheritedGate?.admittedOrgScopes;
+        const inheritedAdmittedOrgScopes = liveAdmittedOrg === undefined ? seedAdmittedOrg : seedAdmittedOrg === undefined ? liveAdmittedOrg : liveAdmittedOrg.filter((s) => seedAdmittedOrg.includes(s));
+        const inheritedOrgGoverned = liveInheritedGate?.orgAdmissionGoverned === true || seedInheritedGate?.orgAdmissionGoverned === true;
+        const priorOwnOrgVerdict = resume?.seed.inheritedGate?.ownAdmittedOrgScopes !== undefined
+            ? { scopes: resume.seed.inheritedGate.ownAdmittedOrgScopes, writeScope: resume.seed.inheritedGate.ownAdmittedOrgWriteScope ?? null }
+            : undefined;
+        const orgGovernedProvenance = deps.memoryScopeAdmission !== undefined ||
+            (deps.deploymentMemoryScopes !== undefined && deps.deploymentMemoryScopes.length > 0) ||
+            deps.compliancePostureResolver !== undefined ||
+            inheritedOrgGoverned ||
+            priorOwnOrgVerdict !== undefined;
         const specShellGate = spec.shellGate ?? "off";
         const effectiveShellGate = inheritedShellGate !== undefined && shellGateRank[inheritedShellGate] > shellGateRank[specShellGate] ? inheritedShellGate : specShellGate;
         const ownSessionRulesRef = {};
+        const memoryAdmittedOrgScopesRef = { current: [] };
+        const ownOrgVerdictRef = { current: undefined };
+        const orgAdmissionCheckpointState = () => inheritedAdmittedOrgScopes !== undefined || ownOrgVerdictRef.current !== undefined || orgGovernedProvenance;
         const frozenOnAsk = spec.onAsk ?? deps.onAsk;
         const frozenOnQuestion = spec.onQuestion ?? deps.onQuestion;
         const inheritedGateForChildren = () => {
@@ -949,7 +979,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 ...(inheritedAncestorRules ?? []),
                 ...(ownSessionRulesRef.current !== undefined ? [ownSessionRulesRef.current] : []),
             ];
-            const ownCallerPolicy = spec.toolPolicy ?? deps.toolPolicy;
+            const ownCallerPolicy = lockedPreflight.toolPolicy;
             const durableMandate = runtimeCaps?.forceDurableGate === true || (spec.durableApproval !== undefined && frozenOnAsk === undefined);
             const parentConstraints = [
                 ...(inheritedParentConstraints ?? []),
@@ -967,6 +997,8 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 ...(ancestorRules.length > 0 ? { ancestorRules } : {}),
                 ...(effectiveShellGate !== "off" ? { shellGate: effectiveShellGate } : {}),
                 ...(parentConstraints.length > 0 ? { parentConstraints } : {}),
+                admittedOrgScopes: memoryAdmittedOrgScopesRef.current,
+                ...(orgGovernedProvenance ? { orgAdmissionGoverned: true } : {}),
             };
         };
         let agentForkDenial;
@@ -1071,6 +1103,39 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 runtimeCaps = { allowWorkflows: false, allowFork: false };
             }
         }
+        let complianceDenies = new Set();
+        let complianceDegraded = false;
+        if (deps.compliancePostureResolver) {
+            try {
+                const posture = (await deps.compliancePostureResolver(spec.principal)) ?? undefined;
+                if (posture !== undefined)
+                    complianceDenies = resolveComplianceDenies(posture);
+            }
+            catch (err) {
+                deps.onError?.(err instanceof Error ? err : new Error(String(err)), { phase: "config", sessionId });
+                complianceDenies = new Set(COMPLIANCE_CAPABILITIES);
+                complianceDegraded = true;
+            }
+            const complianceRefuse = (capability, requested) => {
+                const e = new Error(`${requested} is denied for this principal by the compliance posture (capability "${capability}"` +
+                    `${complianceDegraded ? "; the posture resolver is currently failing, so every managed capability is denied fail-closed" : ""}) — ` +
+                    `the task is refused rather than silently narrowed.`);
+                e.code = complianceDegraded ? "config.compliance_required" : "config.compliance_denied";
+                throw e;
+            };
+            if (complianceDenies.has("mcp_servers") && lockedPreflight.mcp?.length) {
+                complianceRefuse("mcp_servers", "TaskSpec.mcp (MCP server materialization)");
+            }
+            if (complianceDenies.has("workflows") && spec.selfOrchestration === true) {
+                complianceRefuse("workflows", "TaskSpec.selfOrchestration (workflow self-orchestration)");
+            }
+            if (complianceDenies.has("web_fetch")) {
+                const webTool = (spec.tools ?? []).find((t) => t.name === WEB_FETCH_TOOL_NAME || (t.aliases ?? []).includes(WEB_FETCH_TOOL_NAME));
+                if (webTool !== undefined) {
+                    complianceRefuse("web_fetch", `TaskSpec.tools["${webTool.name}"] (the WebFetch tool face)`);
+                }
+            }
+        }
         agentForkDenial = forkGovernanceDenial(spec.enableFork, runtimeCaps?.allowFork);
         observersActive = runtimeCaps?.allowObservers === true;
         if (runtimeCaps?.autoMode === true && deps.autoMode !== undefined) {
@@ -1219,8 +1284,8 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             }
             tools.push(createOutputTool(outputRef, spec.outputSchema, compiled.strict ? compiled.modelSchema : undefined));
         }
-        mcp = spec.mcp?.length
-            ? await materializeMcpTools(spec.mcp, spec.principal, deps.onElicit, deps.mcpImageResizer)
+        mcp = lockedPreflight.mcp?.length
+            ? await materializeMcpTools(lockedPreflight.mcp, spec.principal, deps.onElicit, deps.mcpImageResizer)
             : { tools: [], toolAxes: [], warnings: [], serverInstructions: [], instructionsDelta: { pendingAdds: [], pendingRemovals: [] }, droppedTools: [], statuses: [], refresh: async () => [], dispose: async () => { } };
         for (const w of mcp.warnings)
             deps.onError?.(w, { phase: "mcp", sessionId });
@@ -1240,7 +1305,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
         tools.push(...mcp.tools.map((t) => remoteToolOffload(t)));
         const rebuildHarnessToolsRef = {};
         const toolCallGateArmedRef = { armed: false };
-        if (spec.mcp?.length) {
+        if (lockedPreflight.mcp?.length) {
             tools.push({
                 name: "RefreshMcpTools",
                 label: "RefreshMcpTools",
@@ -1631,7 +1696,31 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                     .catch(() => undefined);
             }
             : undefined;
-        const { memoryEngineSession, memoryBlock: memoryBlockFromEngine, seedFiles: memorySeedFiles } = await prepareMemory({ spec, deps, sessionId, taskRootPath, memoryWriteGateRef });
+        const { memoryEngineSession, memoryBlock: memoryBlockFromEngine, seedFiles: memorySeedFiles, admittedOrgScopes: memoryAdmittedOrgScopes, ownOrgVerdict: memoryOwnOrgVerdict, } = await prepareMemory({
+            spec,
+            deps,
+            sessionId,
+            taskRootPath,
+            memoryWriteGateRef,
+            admissionCtx: {
+                orgMemoryDenied: complianceDenies.has("org_memory_mount"),
+                complianceDegraded,
+                parentAdmittedOrgScopes: foldAdmissionFreeze({
+                    delegated: internals?.isDelegatedChild === true ||
+                        internals?.inheritedGate !== undefined ||
+                        (resume?.seed.inheritedGate !== undefined &&
+                            (resume.seed.inheritedGate.ancestorRules !== undefined ||
+                                resume.seed.inheritedGate.shellGate !== undefined ||
+                                resume.seed.inheritedGate.admittedOrgScopes !== undefined ||
+                                resume.seed.inheritedGate.requiresParentConstraint)),
+                    inherited: inheritedAdmittedOrgScopes,
+                }),
+                priorOwnVerdict: priorOwnOrgVerdict,
+                governedProvenance: orgGovernedProvenance,
+            },
+        });
+        memoryAdmittedOrgScopesRef.current = memoryAdmittedOrgScopes;
+        ownOrgVerdictRef.current = memoryOwnOrgVerdict ?? priorOwnOrgVerdict;
         let memoryBlock = memoryBlockFromEngine;
         if (memorySeedFiles?.length && seedContextFiles) {
             try {
@@ -1736,7 +1825,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         { entries: [], seedAnnounced: true }
                     : undefined;
         const provider = spec.promptProvider ?? deps.promptProvider ?? defaultPromptProvider;
-        const promptPolicyEnabled = Boolean(spec.toolPolicy ?? deps.toolPolicy);
+        const promptPolicyEnabled = Boolean(lockedPreflight.toolPolicy);
         const promptHooks = spec.hooks ?? deps.hooks;
         const promptHooksEnabled = Boolean(promptHooks?.preToolUse || promptHooks?.postToolUse);
         const failClosedReason = selfOrchestrationFailClosedReason(spec, deps);
@@ -2275,6 +2364,34 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
         const dateChange = renderWithDate
             ? { legDate: envFacts.date, today: () => formatLocalDate(new Date(), tzValid ? userTz : undefined) }
             : undefined;
+        const lastBrainContextRef = {};
+        const requestLossyRef = { current: false };
+        const staleOffloadWrittenRefs = new Set();
+        const lastBrainContext = () => lastBrainContextRef.current;
+        const recordBrainContext = (servedModelId, c) => {
+            if (requestLossyRef.current) {
+                lastBrainContextRef.current = undefined;
+                return;
+            }
+            lastBrainContextRef.current = {
+                ...(c.systemPrompt !== undefined ? { systemPrompt: c.systemPrompt } : {}),
+                ...(c.systemBlocks !== undefined ? { systemBlocks: [...c.systemBlocks] } : {}),
+                messages: [...c.messages],
+                ...(c.tools !== undefined ? { tools: [...c.tools] } : {}),
+                modelId: servedModelId,
+            };
+        };
+        const staleOffloadCfg = resolveStaleToolResultOffload(spec.compaction?.staleToolResultOffload);
+        if (staleOffloadCfg !== undefined && offloadStore === undefined) {
+            deps.onError?.(new Error("compaction.staleToolResultOffload is set but the tool-result offload store is disabled (toolResultThresholdChars ≤ 0/∞) — the knob is inert this run; re-enable offloading or drop the knob"), { phase: "config", sessionId });
+        }
+        const staleOffload = staleOffloadCfg !== undefined && offloadStore !== undefined ? { cfg: staleOffloadCfg, store: offloadStore } : undefined;
+        const guardedBrain = brainCallGuardrailMs === undefined
+            ? deps.brain
+            : {
+                ...deps.brain,
+                stream: withBrainCallGuardrail((m, c, o) => deps.brain.stream(m, c, o), brainCallGuardrailMs, brainCallGuardrailRef),
+            };
         const harness = new AgentHarness({
             abortResultDetails: () => suspendRef.token !== undefined || reviewRef.token !== undefined ? { code: "gate.parked" } : undefined,
             ...(spec.limits?.maxOutputTokens !== undefined && spec.limits.maxOutputTokens > 0
@@ -2299,7 +2416,6 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 }));
             },
             ...(spec.streamingToolExecution === true ? { streamingToolExecution: true } : {}),
-            followUpMode: "all",
             env: executionEnv,
             session,
             tools: harnessTools,
@@ -2308,12 +2424,20 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             systemPrompt,
             ...(assembled.systemBlocks ? { systemBlocks: assembled.systemBlocks } : {}),
             getApiKeyAndHeaders: spec.getApiKeyAndHeaders,
-            runtime: brainToRuntime(brainCallGuardrailMs === undefined
-                ? deps.brain
-                : {
-                    ...deps.brain,
-                    stream: withBrainCallGuardrail((m, c, o) => deps.brain.stream(m, c, o), brainCallGuardrailMs, brainCallGuardrailRef),
-                }),
+            runtime: brainToRuntime({
+                ...guardedBrain,
+                stream: (m, c, o) => {
+                    if (staleOffload === undefined) {
+                        recordBrainContext(m.id, c);
+                        return guardedBrain.stream(m, c, o);
+                    }
+                    return (async () => {
+                        const projected = await projectStaleToolResults(c, staleOffload.cfg, staleOffload.store, sessionId, staleOffloadWrittenRefs);
+                        recordBrainContext(m.id, projected);
+                        return await guardedBrain.stream(m, projected, o);
+                    })();
+                },
+            }),
         });
         harnessRef.current = harness;
         let releaseSignal = () => undefined;
@@ -2331,7 +2455,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 releaseSignal = () => sig.removeEventListener("abort", onExternalAbort);
             }
         }
-        const policy = spec.toolPolicy ?? deps.toolPolicy;
+        const policy = lockedPreflight.toolPolicy;
         const auditPolicyNames = (auditee) => {
             const nameGroups = toolPolicyNameSets(auditee);
             if (nameGroups.length > 0) {
@@ -2419,7 +2543,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
         for (const layer of narrowingLayers)
             auditPolicyNames(layer);
         const denyNarrowingPolicy = narrowingLayers.length === 0 ? undefined : narrowingLayers.length === 1 ? narrowingLayers[0] : combinePolicies(...narrowingLayers);
-        const basePolicyForResumeEdit = spec.toolPolicy ?? deps.toolPolicy;
+        const basePolicyForResumeEdit = lockedPreflight.toolPolicy;
         const sameInstanceAncestorCount = policy === undefined ? 0 : (inheritedParentConstraints ?? []).reduce((n, pc) => (pc.policy === policy ? n + 1 : n), 0);
         const sharedFirstDecision = new Map();
         const SHARED_FIRST_DECISION_CAP = 256;
@@ -2957,10 +3081,20 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 inheritedGate: (() => {
                     const requiresParentConstraint = (inheritedParentConstraints?.length ?? 0) > 0 || seedInheritedGate?.requiresParentConstraint === true;
                     const parentConstraintCount = (inheritedParentConstraints?.length ?? 0) > 0 ? inheritedParentConstraints.length : seedInheritedGate?.parentConstraintCount;
-                    return inheritedAncestorRules !== undefined || inheritedShellGate !== undefined || requiresParentConstraint
+                    return inheritedAncestorRules !== undefined ||
+                        inheritedShellGate !== undefined ||
+                        inheritedAdmittedOrgScopes !== undefined ||
+                        ownOrgVerdictRef.current !== undefined ||
+                        orgGovernedProvenance ||
+                        requiresParentConstraint
                         ? {
                             ...(inheritedAncestorRules !== undefined ? { ancestorRules: structuredClone(inheritedAncestorRules) } : {}),
                             ...(inheritedShellGate !== undefined ? { shellGate: inheritedShellGate } : {}),
+                            ...(inheritedAdmittedOrgScopes !== undefined ? { admittedOrgScopes: [...inheritedAdmittedOrgScopes] } : {}),
+                            ...(ownOrgVerdictRef.current !== undefined
+                                ? { ownAdmittedOrgScopes: [...ownOrgVerdictRef.current.scopes], ownAdmittedOrgWriteScope: ownOrgVerdictRef.current.writeScope }
+                                : {}),
+                            ...(orgGovernedProvenance ? { orgAdmissionGoverned: true } : {}),
                             requiresParentConstraint,
                             ...(requiresParentConstraint && parentConstraintCount !== undefined ? { parentConstraintCount } : {}),
                         }
@@ -3075,7 +3209,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 const mintedAt = Date.now();
                 const cp = {
                     token,
-                    version: resourceLedgerOut.totalTokens !== undefined ? TOKEN_CHECKPOINT_VERSION : RESOURCE_CHECKPOINT_VERSION,
+                    version: orgAdmissionCheckpointState() ? ORG_ADMISSION_CHECKPOINT_VERSION : resourceLedgerOut.totalTokens !== undefined ? TOKEN_CHECKPOINT_VERSION : RESOURCE_CHECKPOINT_VERSION,
                     scope,
                     sessionId,
                     leafId,
@@ -3157,7 +3291,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                     const mintedAt = Date.now();
                     const cp = {
                         token,
-                        version: reviewLedger.totalTokens !== undefined ? TOKEN_CHECKPOINT_VERSION : BINDING_CHECKPOINT_VERSION,
+                        version: orgAdmissionCheckpointState() ? ORG_ADMISSION_CHECKPOINT_VERSION : reviewLedger.totalTokens !== undefined ? TOKEN_CHECKPOINT_VERSION : BINDING_CHECKPOINT_VERSION,
                         scope,
                         sessionId,
                         leafId,
@@ -3193,8 +3327,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 : undefined;
             const suspendAsk = checkpointStore && (durableApproval || irreversibleTools.size > 0 || egressTools.size > 0)
                 ? async (req, postHookArgs, safety, approverUnavailable) => {
-                    if (safety === undefined &&
-                        onAsk !== undefined &&
+                    if (onAsk !== undefined &&
                         runtimeCaps?.forceDurableGate !== true &&
                         approverUnavailable !== true &&
                         req.toolName !== ASK_USER_QUESTION_TOOL_NAME &&
@@ -3283,7 +3416,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         const mintedAt = Date.now();
                         cp = {
                             token,
-                            version: approvalLedger.totalTokens !== undefined ? TOKEN_CHECKPOINT_VERSION : BINDING_CHECKPOINT_VERSION,
+                            version: orgAdmissionCheckpointState() ? ORG_ADMISSION_CHECKPOINT_VERSION : approvalLedger.totalTokens !== undefined ? TOKEN_CHECKPOINT_VERSION : BINDING_CHECKPOINT_VERSION,
                             scope,
                             sessionId,
                             leafId,
@@ -3344,11 +3477,28 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 if (eff !== undefined && !toolEffects.has(t.name))
                     toolEffects.set(t.name, eff);
             }
-            toolCallGateArmedRef.armed = effectivePolicy !== undefined || hooks?.preToolUse !== undefined || egressTools.size > 0 || irreversibleTools.size > 0 || spec.enablePlanMode === true;
+            toolCallGateArmedRef.armed =
+                effectivePolicy !== undefined ||
+                    hooks?.preToolUse !== undefined ||
+                    egressTools.size > 0 ||
+                    irreversibleTools.size > 0 ||
+                    spec.enablePlanMode === true ||
+                    complianceDenies.has("web_fetch");
             if (toolCallGateArmedRef.armed) {
                 harness.on("tool_call", async (e) => {
                     blockedToolCalls.delete(e.toolCallId);
                     inheritedAskGrants.delete(e.toolCallId);
+                    {
+                        const complianceDeny = complianceCallDenial(complianceDenies, e.toolName);
+                        if (complianceDeny !== undefined) {
+                            if (blockedTracked)
+                                blockedToolCalls.add(e.toolCallId);
+                            if (notifyPermissionDenied) {
+                                await notifyPermissionDenied({ toolName: e.toolName, input: cloneObserverInput(e.input), toolCallId: e.toolCallId, reason: complianceDeny, source: "safety" });
+                            }
+                            return { block: true, reason: formatHookFeedback(complianceDeny), preToolContext: [] };
+                        }
+                    }
                     if (planModeRef.active && (toolEffects.get(e.toolName) ?? "write") !== "read") {
                         if (blockedTracked)
                             blockedToolCalls.add(e.toolCallId);
@@ -3486,7 +3636,8 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                     : {}),
             });
             let trimmed = trimToBudget(edited, guardAt, estimateContextTokens(edited, charsPerToken).tokens, charsPerToken);
-            if (trimmed.length < edited.length) {
+            const trimDroppedMessages = trimmed.length < edited.length;
+            if (trimDroppedMessages) {
                 trimPressureRef.droppedMessages = true;
                 const droppedCount = edited.length - trimmed.length;
                 trimmed = insertTrimNotice(trimmed);
@@ -3509,6 +3660,12 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 catch {
                 }
             }
+            requestLossyRef.current =
+                capped !== healed ||
+                    mediaCapped !== capped ||
+                    edited !== mediaCapped ||
+                    trimDroppedMessages ||
+                    swept.dropped.length > 0;
             return { messages: swept.messages };
         });
         const cacheBreakDetector = deps.cacheBreakDetection === false ? undefined : new CacheBreakDetector();
@@ -3622,7 +3779,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             : undefined;
         const listBackgroundTasks = () => defaultTaskRegistry
             .list({ owner: hostTaskId, scope: taskScope, sessionId })
-            .filter((t) => t.status === "pending" || t.status === "running")
+            .filter((t) => t.status === "pending" || t.status === "running" || t.status === "parked")
             .map((t) => ({ id: t.task_id, ...(t.description !== undefined ? { description: t.description } : {}), status: t.status }));
         const overheadState = { promptChars: 0 };
         const centerCompactionCandidate = deps.promptSource !== undefined && centerAdoption !== undefined
@@ -3674,7 +3831,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             : undefined;
         overheadState.promptChars = systemPrompt.length;
         const preparedHolder = {};
-        const buildPrepared = () => ({ harness, session, sessionId, taskRootPath, model, thinking, compModel, mcp: mcp, ...(a2a !== undefined && a2a.tools.length > 0 ? { a2a } : {}), blockedRef, outputRef, abortController, conflictRef, blockedToolCalls, nestedStats, ...(rewindNotes.length > 0 ? { rewindNotes } : {}), cwdRef: handsCwdRef, ...(worktreeSessionRef !== undefined ? { worktreeSessionRef } : {}), ...(workspaceStateSettle !== undefined ? { workspaceStateSettle } : {}), denyNarrowingPolicy, ...(basePolicyForResumeEdit !== undefined ? { basePolicyForResumeEdit } : {}), releaseSignal, cacheBreakDetector, cacheFingerprint, promptManifest, epochDeclaredSections, activeTools, ...(deferred.size > 0 ? { deferredToolNames: deferred } : {}), toolMaterializeStatic, ownedEnv, suspendRef, suspendProgressRef, reviewRef, remoteEnvFailures, reviewRequestRef, suspendLoopRef, suspendForResource, ...(suspendForPlatformLimit !== undefined ? { suspendForPlatformLimit } : {}), ...(envLifetimeSuspendAt !== undefined ? { envLifetimeSuspendAt } : {}), ...(usageGovernance !== undefined ? { usageGovernance } : {}), callIssuedAtRef, brainCallGuardrailRef, suspendForReview, resourceLedger: priorLedger, liveSpendRef, humanReviewRef, now, tools, toolEffects, wakeRecovered, promptOverheadTokens, readTaskFile, recentlyReadFiles, normalizeAttachmentPath, isDedupStubResult, ...(onCompactionApplied ? { onCompactionApplied } : {}), compactionReuseRef, trimPressureRef, ...(memoryEngineSession ? { memoryEngineSession } : {}), ...(subagentRetain ? { subagentRetain } : {}), ...(lspDiagnostics && nudgeLspOnEdit ? { lspDiagnostics: { registry: lspDiagnostics, nudge: nudgeLspOnEdit, runIdent: lspRunIdent } } : {}), planModeRef, ...(dateChange ? { dateChange } : {}), ...(instructionSources ? { instructionSources } : {}), ...(workflowSizeGuideline ? { workflowSizeGuideline } : {}), ...(detectExternalChanges ? { detectExternalChanges } : {}), ...(toolsDeltaRef ? { toolsDeltaRef } : {}), ...(agentListing ? { agentListing } : {}), ...(skillsListing ? { skillsListing } : {}), announcedListingsRef, listBackgroundTasks, ...(turnSnapshotRef.current !== undefined ? { turnSnapshot: turnSnapshotRef.current } : {}), ...(centerCompactionCandidate !== undefined ? { centerCompactionCandidate } : {}) });
+        const buildPrepared = () => ({ harness, session, sessionId, taskRootPath, model, thinking, compModel, mcp: mcp, ...(a2a !== undefined && a2a.tools.length > 0 ? { a2a } : {}), blockedRef, outputRef, abortController, conflictRef, blockedToolCalls, nestedStats, ...(rewindNotes.length > 0 ? { rewindNotes } : {}), cwdRef: handsCwdRef, ...(worktreeSessionRef !== undefined ? { worktreeSessionRef } : {}), ...(workspaceStateSettle !== undefined ? { workspaceStateSettle } : {}), denyNarrowingPolicy, ...(basePolicyForResumeEdit !== undefined ? { basePolicyForResumeEdit } : {}), releaseSignal, cacheBreakDetector, cacheFingerprint, promptManifest, epochDeclaredSections, activeTools, ...(deferred.size > 0 ? { deferredToolNames: deferred } : {}), toolMaterializeStatic, ownedEnv, suspendRef, suspendProgressRef, reviewRef, remoteEnvFailures, reviewRequestRef, suspendLoopRef, suspendForResource, ...(suspendForPlatformLimit !== undefined ? { suspendForPlatformLimit } : {}), ...(envLifetimeSuspendAt !== undefined ? { envLifetimeSuspendAt } : {}), ...(usageGovernance !== undefined ? { usageGovernance } : {}), callIssuedAtRef, brainCallGuardrailRef, suspendForReview, resourceLedger: priorLedger, liveSpendRef, humanReviewRef, now, tools, toolEffects, wakeRecovered, promptOverheadTokens, lastBrainContext, readTaskFile, recentlyReadFiles, normalizeAttachmentPath, isDedupStubResult, ...(onCompactionApplied ? { onCompactionApplied } : {}), compactionReuseRef, trimPressureRef, ...(memoryEngineSession ? { memoryEngineSession } : {}), ...(subagentRetain ? { subagentRetain } : {}), ...(lspDiagnostics && nudgeLspOnEdit ? { lspDiagnostics: { registry: lspDiagnostics, nudge: nudgeLspOnEdit, runIdent: lspRunIdent } } : {}), planModeRef, ...(dateChange ? { dateChange } : {}), ...(instructionSources ? { instructionSources } : {}), ...(workflowSizeGuideline ? { workflowSizeGuideline } : {}), ...(detectExternalChanges ? { detectExternalChanges } : {}), ...(toolsDeltaRef ? { toolsDeltaRef } : {}), ...(agentListing ? { agentListing } : {}), ...(skillsListing ? { skillsListing } : {}), announcedListingsRef, listBackgroundTasks, ...(turnSnapshotRef.current !== undefined ? { turnSnapshot: turnSnapshotRef.current } : {}), ...(centerCompactionCandidate !== undefined ? { centerCompactionCandidate } : {}) });
         const prepared = buildPrepared();
         preparedHolder.current = prepared;
         return prepared;