@stratusagent/gateway 0.14.0 → 0.14.2

package/dist/schedules.d.ts

@@ -1,5 +1,5 @@
 import { DatabaseSync } from 'node:sqlite';
-import { type JsonObject, type Session } from '@stratusagent/core';
+import { type JsonObject, type Session, type SessionStatus, type SessionStoppedEarly, type TrustLevel } from '@stratusagent/core';
 import { type ScheduleDestination, type ScheduleRecord, type SchedulerHandle } from '@stratusagent/agents';
 import type { EventTrigger } from './event-intake.ts';
 import type { SqliteEventStore } from './events.ts';
@@ -78,6 +78,33 @@ export declare class SqliteScheduleStore {
 export declare const SCHEDULE_SESSION_ID_PREFIX = "schedule:";
 /** Whether a session id belongs to the reserved scheduled-firing namespace. */
 export declare const isScheduleSessionId: (sessionId: string) => boolean;
+/** The longest prefix of `text` that fits in `bytes` of UTF-8, never splitting a character. */
+export declare const utf8Prefix: (text: string, bytes: number) => string;
+/**
+ * What the next firing of a schedule reads from the one before it (card
+ * 858), from the gateway's session store: the status, the stopped-early
+ * marker, the latest reply and the label that reply carries. Never the
+ * transcript.
+ */
+export interface PreviousRun {
+    status: SessionStatus;
+    stoppedEarly?: SessionStoppedEarly;
+    /** The latest turn's text (`latestTurnReply`): for a stopped run, its wrap-up. */
+    reply?: string;
+    /** The label the run's own words carry (`sessionWriteTrust`). */
+    trust: TrustLevel;
+}
+/** A resumed firing carries at most this much of the stopped run's summary. */
+export declare const RESUME_SUMMARY_MAX_BYTES = 4096;
+/**
+ * What a firing that resumes sees after its schedule's prompt: when the
+ * stopped run ended and why, its own summary of what was done and left
+ * (capped), and, from the second stop in a row, that it's a repeat. The
+ * runtime posts nothing about a repeat: only the agent knows whether a
+ * person is waiting, so it's told it may post one line to the destination
+ * its schedule was approved with, when there is one.
+ */
+export declare const renderResumeBlock: (stoppedEarly: SessionStoppedEarly, reply: string | undefined, streak: number, reportsSomewhere: boolean) => string;
 export interface SchedulerLimits {
     /**
      * The floor under a recurring cadence, milliseconds. Applied to intervals
@@ -140,6 +167,14 @@ export interface SchedulerRuntimeOptions {
     validateDestination(agentId: string, destination: ScheduleDestination): Promise<void>;
     /** Status of a firing's session, for the spent-one-shot sweep. */
     sessionStatus(sessionId: string): Promise<string | undefined>;
+    /**
+     * The session a schedule's previous firing ran in, or undefined when it
+     * doesn't exist (card 858). Read when the next firing of an `every` or
+     * `cron` schedule is claimed: a run that stopped early is that firing's
+     * checkpoint, and a run still going holds the slot back. Without it,
+     * every firing starts from its prompt alone, as before.
+     */
+    previousRun?(sessionId: string): Promise<PreviousRun | undefined>;
     /** The roster check: a schedule for an agent that does not exist is a refusal. */
     hasAgent(agentId: string): boolean;
     limits?: SchedulerLimits;
@@ -190,6 +225,13 @@ export interface SchedulerRuntime {
      * the next tick: the intake calls it after a delivery matched.
      */
     kickEvents(): void;
+    /**
+     * Take event triggers on a host that had no source when it built this
+     * runtime: a plugin's source is known only once plugins load, after the
+     * gateway built its scheduler. Once, and with the same options
+     * `SchedulerRuntimeOptions.events` would have carried.
+     */
+    attachEvents(events: SchedulerEventOptions): void;
     /**
      * The destination carve-out, shaped for the permission policy's
      * `destinations` option: true exactly when this session is a firing of a

package/dist/schedules.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedules.d.ts","sourceRoot":"","sources":["../src/schedules.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAA6B,KAAK,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EAQL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAkB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGpE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,UAAU,MAAM,EAChB,SAAS,0BAA0B,EACnC,QAAQ,MAAM,KACb,YA4BF,CAAC;AAEF,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAe;gBAEtB,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B;IAYtE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAMpC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAO3C,gEAAgE;IAChE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE;IAOxC,6EAA6E;IAC7E,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE;IAOrC;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO;IAOtE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI3B,KAAK,IAAI,IAAI;CAGd;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,cAAc,CAAC;AAEtD,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,GAAI,WAAW,MAAM,KAAG,OACN,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;IACzC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;IACtC,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC;IACvE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,UAAU,CAAC;QACrB,8FAA8F;QAC9F,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,kDAAkD;IAClD,GAAG,CAAC,IAAI,IAAI,CAAC;IACb;;;;OAIG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,kEAAkE;IAClE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,OAAO,CAAC;IACnB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,mBAAmB,GAAG,OAAO,CAAC,CAAC;IAC/G,wDAAwD;IACxD,OAAO,IAAI,SAAS,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAWD,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,MAAM,EAAE,eAAe,CAAC;IACxB,oEAAoE;IACpE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;IAChD;;;OAGG;IACH,UAAU,IAAI,IAAI,CAAC;IACnB;;;;;;OAMG;IACH,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE;;;;;;OAMG;IACH,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,GAAG,MAAM,GAAG,SAAS,CAAC;IACxF;;;;;OAKG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAC;IAC1E,wDAAwD;IACxD,IAAI,IAAI,cAAc,EAAE,CAAC;IACzB,gEAAgE;IAChE,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,oDAAoD;IACpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,wDAAwD;IACxD,IAAI,IAAI,IAAI,CAAC;IACb,qEAAqE;IACrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACjE;AAED,eAAO,MAAM,sBAAsB,GAAI,SAAS,uBAAuB,KAAG,gBAqrBzE,CAAC"}
+{"version":3,"file":"schedules.d.ts","sourceRoot":"","sources":["../src/schedules.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAQL,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAkB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGpE;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,UAAU,MAAM,EAChB,SAAS,0BAA0B,EACnC,QAAQ,MAAM,KACb,YA4BF,CAAC;AAEF,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAe;gBAEtB,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,0BAA+B;IAYtE,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI;IAMpC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAO3C,gEAAgE;IAChE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE;IAOxC,6EAA6E;IAC7E,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE;IAOrC;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO;IAOtE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI3B,KAAK,IAAI,IAAI;CAGd;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,0BAA0B,cAAc,CAAC;AAEtD,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,GAAI,WAAW,MAAM,KAAG,OACN,CAAC;AAEnD,+FAA+F;AAC/F,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,EAAE,OAAO,MAAM,KAAG,MAGxD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,KAAK,EAAE,UAAU,CAAC;CACnB;AAED,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAa9C;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,GAC5B,cAAc,mBAAmB,EACjC,OAAO,MAAM,GAAG,SAAS,EACzB,QAAQ,MAAM,EACd,kBAAkB,OAAO,KACxB,MAwBF,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,CAAC;IACrC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC5C,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;IACzC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,EAAE,CAAC;IACtC,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC;IACvE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,iBAAiB,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,UAAU,CAAC;QACrB,8FAA8F;QAC9F,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrB;;;;OAIG;IACH,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,kDAAkD;IAClD,GAAG,CAAC,IAAI,IAAI,CAAC;IACb;;;;OAIG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,kEAAkE;IAClE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D;;;;;;OAMG;IACH,WAAW,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAClE,kFAAkF;IAClF,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B;;;;;;OAMG;IACH,MAAM,CAAC,IAAI,OAAO,CAAC;IACnB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,mBAAmB,GAAG,OAAO,CAAC,CAAC;IAC/G,wDAAwD;IACxD,OAAO,IAAI,SAAS,MAAM,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAWD,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,MAAM,EAAE,eAAe,CAAC;IACxB,oEAAoE;IACpE,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,EAAE,CAAC;IAChD;;;OAGG;IACH,UAAU,IAAI,IAAI,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAClD;;;;;;OAMG;IACH,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IAChE;;;;;;OAMG;IACH,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,GAAG,MAAM,GAAG,SAAS,CAAC;IACxF;;;;;OAKG;IACH,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,mBAAmB,GAAG,SAAS,CAAC;IAC1E,wDAAwD;IACxD,IAAI,IAAI,cAAc,EAAE,CAAC;IACzB,gEAAgE;IAChE,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,oDAAoD;IACpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,wDAAwD;IACxD,IAAI,IAAI,IAAI,CAAC;IACb,qEAAqE;IACrE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACjE;AAYD,eAAO,MAAM,sBAAsB,GAAI,SAAS,uBAAuB,KAAG,gBAw3BzE,CAAC"}

package/dist/schedules.js

@@ -2,7 +2,7 @@ import { randomUUID } from 'node:crypto';
 import { chmodSync, mkdirSync } from 'node:fs';
 import path from 'node:path';
 import { DatabaseSync } from 'node:sqlite';
-import { SENDER_TRUST_METADATA_KEY } from '@stratusagent/core';
+import { leastTrusted, SENDER_TRUST_METADATA_KEY, } from '@stratusagent/core';
 import { canonicalDestination, DEFAULT_EVENT_MAX_PER_HOUR, isWithinQuietHours, nextFireAfter, SCHEDULE_ID_METADATA_KEY, SCHEDULED_TURN_METADATA_KEY, } from '@stratusagent/agents';
 import { assertDerivedStatePathSync } from '@stratusagent/state';
 import { tightenSqliteFile } from "./sessions.js";
@@ -119,6 +119,52 @@ export class SqliteScheduleStore {
 export const SCHEDULE_SESSION_ID_PREFIX = 'schedule:';
 /** Whether a session id belongs to the reserved scheduled-firing namespace. */
 export const isScheduleSessionId = (sessionId) => sessionId.startsWith(SCHEDULE_SESSION_ID_PREFIX);
+/** The longest prefix of `text` that fits in `bytes` of UTF-8, never splitting a character. */
+export const utf8Prefix = (text, bytes) => {
+    const { read } = new TextEncoder().encodeInto(text, new Uint8Array(Math.max(0, bytes)));
+    return text.slice(0, read);
+};
+/** A resumed firing carries at most this much of the stopped run's summary. */
+export const RESUME_SUMMARY_MAX_BYTES = 4_096;
+const STOPPED_EARLY_WHY = {
+    'turn-limit': 'it used all its steps',
+    'repeated-failure': 'it kept hitting the same failure',
+};
+const ordinal = (n) => {
+    const tens = n % 100;
+    const suffix = tens >= 11 && tens <= 13 ? 'th' : (['th', 'st', 'nd', 'rd'][n % 10] ?? 'th');
+    return `${n}${suffix}`;
+};
+/**
+ * What a firing that resumes sees after its schedule's prompt: when the
+ * stopped run ended and why, its own summary of what was done and left
+ * (capped), and, from the second stop in a row, that it's a repeat. The
+ * runtime posts nothing about a repeat: only the agent knows whether a
+ * person is waiting, so it's told it may post one line to the destination
+ * its schedule was approved with, when there is one.
+ */
+export const renderResumeBlock = (stoppedEarly, reply, streak, reportsSomewhere) => {
+    const text = reply?.trim() ?? '';
+    const summary = text === ''
+        ? 'It left no summary.'
+        : Buffer.byteLength(text) <= RESUME_SUMMARY_MAX_BYTES
+            ? text
+            : `${utf8Prefix(text, RESUME_SUMMARY_MAX_BYTES)}\n[summary cut at ${Math.round(RESUME_SUMMARY_MAX_BYTES / 1_024)} KB]`;
+    const when = typeof stoppedEarly.at === 'string' ? `, at ${stoppedEarly.at},` : '';
+    const why = STOPPED_EARLY_WHY[stoppedEarly.reason] ?? 'it stopped before finishing';
+    const lines = [
+        `Your last run of this schedule${when} stopped early: ${why}. What it said was done and what was left:`,
+        '',
+        summary,
+        '',
+        "Carry on from there, and don't redo finished work.",
+    ];
+    if (streak >= 2) {
+        lines.push('', `That was the ${ordinal(streak)} run in a row to stop early.`
+            + (reportsSomewhere ? " If that blocks someone, post one line to this schedule's report destination saying what's stuck." : ''));
+    }
+    return lines.join('\n');
+};
 const DEFAULT_MIN_INTERVAL_MS = 60_000;
 const DEFAULT_MAX_CONCURRENT_PER_AGENT = 1;
 const DEFAULT_TICK_MS = 1_000;
@@ -129,9 +175,11 @@ const EVENT_HELD_PER_KEY = 5;
 /** How often the event tables are pruned to their 7-day window and row cap. */
 const EVENT_PRUNE_INTERVAL_MS = 60 * 60 * 1_000;
 export const createSchedulerRuntime = (options) => {
-    const { store, dispatch, validateDestination, sessionStatus, hasAgent, log, warn, events } = options;
+    const { store, dispatch, validateDestination, sessionStatus, hasAgent, log, warn } = options;
+    // Late-bindable once: see `attachEvents`.
+    let events = options.events;
     const clock = options.now ?? (() => new Date());
-    const maxEventsPerAgent = events?.maxConcurrentPerAgent ?? 1;
+    let maxEventsPerAgent = events?.maxConcurrentPerAgent ?? 1;
     const minIntervalMs = options.limits?.minIntervalMs ?? DEFAULT_MIN_INTERVAL_MS;
     const maxConcurrentPerAgent = options.limits?.maxConcurrentPerAgent ?? DEFAULT_MAX_CONCURRENT_PER_AGENT;
     const tickMs = options.limits?.tickMs ?? DEFAULT_TICK_MS;
@@ -193,7 +241,7 @@ export const createSchedulerRuntime = (options) => {
             throw new Error('createTrigger takes an event cadence.');
         }
         if (!events) {
-            throw new Error('This daemon takes no events: its config has no "events" sources, so a trigger could never fire. The operator adds a source first.');
+            throw new Error('This daemon takes no events: its config has no "events" sources and no plugin feeds one, so a trigger could never fire. The operator adds a source first.');
         }
         const configured = events.sources();
         if (!configured.includes(input.cadence.source)) {
@@ -290,6 +338,128 @@ export const createSchedulerRuntime = (options) => {
         const { nextFireAt: _spent, ...rest } = record;
         return { ...rest, ...extra, ...(next ? { nextFireAt: next.toISOString() } : {}) };
     };
+    /**
+     * Card 858: a readiness check that failed after an await inside a scan.
+     * Carries the reason out to `tick`, which treats it like the check at the
+     * top of the tick: the scheduler stops, and at start the failure is
+     * `start()`'s rejection.
+     */
+    class NotReady extends Error {
+        scheduleId;
+        reason;
+        constructor(scheduleId, reason) {
+            super(reason instanceof Error ? reason.message : String(reason));
+            this.scheduleId = scheduleId;
+            this.reason = reason;
+        }
+    }
+    const stillReady = async (scheduleId) => {
+        if (!options.ready) {
+            return;
+        }
+        try {
+            await options.ready();
+        }
+        catch (error) {
+            stopped = true;
+            throw new NotReady(scheduleId, error);
+        }
+    };
+    /**
+     * What the firing about to be claimed carries from the one in
+     * `lastSessionId` (card 858): `'defer'` while that run is still going (a
+     * schedule never claims past a run whose outcome it hasn't read, or that
+     * run's summary is lost and the streak breaks), otherwise the new streak
+     * and the stopped run to resume from, if any. Undefined when the daemon
+     * gave no `previousRun`: the claim then leaves both fields as they are.
+     */
+    const planResume = async (record, last, slot) => {
+        const deferKey = `${record.id}:${slot}:previous`;
+        const holdBack = () => {
+            if (!deferralsWarned.has(deferKey)) {
+                deferralsWarned.add(deferKey);
+                warn(`schedule ${record.id}: its previous run ${last} is still going; deferring this firing (slot ${slot})`);
+            }
+            return 'defer';
+        };
+        // Started by this daemon and not settled: its session may not exist yet.
+        if (activeFirings.has(last)) {
+            return holdBack();
+        }
+        const read = options.previousRun;
+        if (!read) {
+            return undefined;
+        }
+        const streak = record.stoppedEarlyStreak ?? 0;
+        const readRun = async (sessionId) => {
+            try {
+                return await read(sessionId);
+            }
+            catch (error) {
+                warn(`schedule ${record.id}: could not read its previous run ${sessionId} (${error instanceof Error ? error.message : String(error)}); firing without it`);
+                return 'unreadable';
+            }
+        };
+        const previous = await readRun(last);
+        if (previous === 'unreadable') {
+            // No outcome to count: the streak stays, and there's no block.
+            return { streak };
+        }
+        if (previous !== undefined) {
+            if (previous.status === 'running' || previous.status === 'pending_approval') {
+                return holdBack();
+            }
+            deferralsWarned.delete(deferKey);
+            return previous.stoppedEarly !== undefined
+                ? { streak: streak + 1, from: { sessionId: last, run: previous } }
+                : { streak: 0 };
+        }
+        deferralsWarned.delete(deferKey);
+        const fallback = record.resumeFrom;
+        if (fallback !== undefined && fallback.firing === last) {
+            // That firing was claimed and never started: the daemon died before
+            // its session existed, or refused it on the way down. It has no
+            // outcome, so the streak stays, and it carried a checkpoint, which
+            // this firing carries instead.
+            const from = await readRun(fallback.from);
+            if (from === 'unreadable') {
+                return { streak };
+            }
+            if (from?.stoppedEarly !== undefined) {
+                return { streak, from: { sessionId: fallback.from, run: from } };
+            }
+            log(`schedule ${record.id}: previous run ${last} never started, and the run it resumed from (${fallback.from}) is gone; starting fresh`);
+            return { streak: 0 };
+        }
+        // Removed after it ran, a home restored without it, or a fallback left
+        // for another firing (an older build moved `lastSessionId` without it).
+        // Replaying an older checkpoint here could redo finished work.
+        log(`schedule ${record.id}: previous run ${last} not found; starting fresh`);
+        return { streak: 0 };
+    };
+    /**
+     * A resumed firing whose session exists no longer needs its fallback: the
+     * next claim reads that session. Only while the row still names this
+     * firing, through the slot claim's own conditional write, so a later
+     * claim's fallback is never the one removed. Best effort: one left
+     * behind is used only while `lastSessionId` names no session.
+     */
+    const dropFallback = async (scheduleId, sessionId) => {
+        try {
+            if ((await sessionStatus(sessionId)) === undefined) {
+                return;
+            }
+            const current = store.get(scheduleId);
+            if (current?.resumeFrom?.firing !== sessionId) {
+                return;
+            }
+            const { resumeFrom: _done, ...rest } = current;
+            store.claimSlot(rest, current.nextFireAt ?? '');
+        }
+        catch (error) {
+            warn(`schedule ${scheduleId}: could not clear the resume fallback for ${sessionId}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    };
     /**
      * Fire one due schedule: consume the slot durably, then dispatch.
      *
@@ -299,7 +469,7 @@ export const createSchedulerRuntime = (options) => {
      * advance past it with a log line, never replay. Anything else fires,
      * which on time is the normal case and late is the single catch-up.
      */
-    const fireOrSkip = (record, now) => {
+    const fireOrSkip = async (record, now) => {
         const slot = record.nextFireAt;
         if (!slot) {
             return;
@@ -320,11 +490,15 @@ export const createSchedulerRuntime = (options) => {
             // and the line that blamed downtime for it sent an operator to look
             // for a restart that never happened.
             const deferralKey = `${record.id}:${slot}`;
-            log(deferralsWarned.has(deferralKey)
-                ? `schedule ${record.id}: the firing deferred by the per-agent cap (slot ${slot}) outlasted its window; skipping to ${next ? next.toISOString() : 'never'}`
-                : `schedule ${record.id}: missed firing(s) while the daemon was down; skipping to ${next ? next.toISOString() : 'never'}`);
+            const skippingTo = next ? next.toISOString() : 'never';
+            log(deferralsWarned.has(`${deferralKey}:previous`)
+                ? `schedule ${record.id}: the firing deferred while its previous run was still going (slot ${slot}) outlasted its window; skipping to ${skippingTo}`
+                : deferralsWarned.has(deferralKey)
+                    ? `schedule ${record.id}: the firing deferred by the per-agent cap (slot ${slot}) outlasted its window; skipping to ${skippingTo}`
+                    : `schedule ${record.id}: missed firing(s) while the daemon was down; skipping to ${skippingTo}`);
             store.claimSlot(withNextFire(record, next), slot);
             deferralsWarned.delete(deferralKey);
+            deferralsWarned.delete(`${deferralKey}:previous`);
             return;
         }
         if (options.paused?.() === true) {
@@ -357,6 +531,25 @@ export const createSchedulerRuntime = (options) => {
             return;
         }
         deferralsWarned.delete(`${record.id}:${slot}`);
+        // Card 858: what this firing carries from the one before it. Read here,
+        // at the claim, so a daemon killed after a wrap-up still leaves the
+        // stopped session for this read; it's the one copy of the checkpoint.
+        let plan;
+        if (record.cadence.kind !== 'at' && record.lastSessionId !== undefined) {
+            const planned = await planResume(record, record.lastSessionId, slot);
+            if (planned === 'defer') {
+                return;
+            }
+            if (planned !== undefined) {
+                // An await sat between the readiness check and the claim below,
+                // which writes into the schedules table: check both again.
+                if (stopped) {
+                    return;
+                }
+                await stillReady(record.id);
+                plan = planned;
+            }
+        }
         const firedAt = now.toISOString();
         const sessionId = `${SCHEDULE_SESSION_ID_PREFIX}${record.id}:${slot}`;
         // Advance from the scheduled slot, not from now: `following` is the
@@ -370,28 +563,53 @@ export const createSchedulerRuntime = (options) => {
         // and spent ATOMICALLY against the slot this tick read: a schedule
         // cancelled between the due scan and here is gone, and its prompt
         // must not run on a grant that was just revoked.
-        if (!store.claimSlot(withNextFire(record, next, { lastFiredAt: firedAt, lastSessionId: sessionId }), slot)) {
+        let claimed = withNextFire(record, next, { lastFiredAt: firedAt, lastSessionId: sessionId });
+        if (plan !== undefined) {
+            // The streak and the fallback are written in the same claim as the
+            // slot, so a crash can't leave one without the other.
+            const { stoppedEarlyStreak: _streak, resumeFrom: _resumeFrom, ...rest } = claimed;
+            claimed = {
+                ...rest,
+                ...(plan.streak > 0 ? { stoppedEarlyStreak: plan.streak } : {}),
+                ...(plan.from !== undefined ? { resumeFrom: { firing: sessionId, from: plan.from.sessionId } } : {}),
+            };
+        }
+        if (!store.claimSlot(claimed, slot)) {
             log(`schedule ${record.id}: slot ${slot} was cancelled or already claimed; not firing`);
             return;
         }
-        runningPerAgent.set(record.agentId, running + 1);
+        const resumeFrom = plan?.from;
+        // Re-read: a firing of this agent's may have settled during the await above.
+        runningPerAgent.set(record.agentId, (runningPerAgent.get(record.agentId) ?? 0) + 1);
         activeFirings.add(sessionId);
         const firing = dispatch({
             sessionId,
             agentId: record.agentId,
-            userMessage: record.prompt,
+            userMessage: resumeFrom === undefined
+                ? record.prompt
+                : [record.prompt, renderResumeBlock(resumeFrom.run.stoppedEarly, resumeFrom.run.reply, plan.streak, record.destination !== undefined)].join('\n\n'),
             metadata: {
                 [SCHEDULED_TURN_METADATA_KEY]: true,
                 [SCHEDULE_ID_METADATA_KEY]: record.id,
                 // The firing's "sender" is the session that wrote the prompt, at
                 // the label it had then; a schedule set before labels existed is
-                // `unknown`, like every other record from before.
-                [SENDER_TRUST_METADATA_KEY]: record.trust ?? 'unknown',
+                // `unknown`, like every other record from before. A resumed firing
+                // also carries the stopped run's own words, so it's sent at the
+                // lower of the two, the rule `agent.delegate` uses for a child: a
+                // run that read a web page can't launder that page's text into a
+                // turn at the schedule's label.
+                [SENDER_TRUST_METADATA_KEY]: resumeFrom === undefined
+                    ? record.trust ?? 'unknown'
+                    : leastTrusted(record.trust ?? 'unknown', resumeFrom.run.trust),
             },
         }).then(() => {
             log(`schedule ${record.id} fired — session ${sessionId} completed`);
         }, (error) => {
             warn(`schedule ${record.id} firing failed: ${error instanceof Error ? error.message : String(error)}`);
+        }).then(async () => {
+            if (resumeFrom !== undefined) {
+                await dropFallback(record.id, sessionId);
+            }
         }).finally(() => {
             activeFirings.delete(sessionId);
             const count = (runningPerAgent.get(record.agentId) ?? 1) - 1;
@@ -494,7 +712,9 @@ export const createSchedulerRuntime = (options) => {
     const processEvents = (now) => {
         // Not before start(): a held daemon's scheduler never starts, and its
         // waiting firings must not go out through a delivery's kick either.
-        if (!events || stopped || !started) {
+        // Read once: the closures below would not see a narrowed `let`.
+        const current = events;
+        if (!current || stopped || !started) {
             return;
         }
         const nowIso = now.toISOString();
@@ -505,7 +725,7 @@ export const createSchedulerRuntime = (options) => {
         if (eventsPrunedAt === undefined || now.getTime() - eventsPrunedAt >= EVENT_PRUNE_INTERVAL_MS) {
             eventsPrunedAt = now.getTime();
             try {
-                events.store.prune(nowIso);
+                current.store.prune(nowIso);
             }
             catch (error) {
                 warn(`events: could not prune old deliveries: ${error instanceof Error ? error.message : String(error)}`);
@@ -522,13 +742,13 @@ export const createSchedulerRuntime = (options) => {
         // A claimed batch stays itself; free firings group by trigger and key.
         // Map order is first appearance in `open()`, oldest first.
         const groups = new Map();
-        for (const row of events.store.open()) {
+        for (const row of current.store.open()) {
             if (row.batchKey !== undefined && inflightBatches.has(row.batchKey)) {
                 continue;
             }
             const trigger = triggerFor(row.triggerId);
             if (!trigger || trigger.agentId !== row.agentId) {
-                events.store.retire([row.id], 'expired', 'Its trigger was cancelled.', nowIso);
+                current.store.retire([row.id], 'expired', 'Its trigger was cancelled.', nowIso);
                 continue;
             }
             // Holds expire; a claim does not. A batch claimed before a crash may
@@ -536,7 +756,7 @@ export const createSchedulerRuntime = (options) => {
             // turn or sends an event that never went out, however long the
             // daemon was down.
             if (row.status !== 'firing' && now.getTime() - Date.parse(row.createdAt) > EVENT_HOLD_MAX_MS) {
-                events.store.retire([row.id], 'expired', 'Held for more than 24 hours.', nowIso);
+                current.store.retire([row.id], 'expired', 'Held for more than 24 hours.', nowIso);
                 continue;
             }
             const key = row.batchKey !== undefined ? `batch\n${row.batchKey}` : `key\n${row.triggerId}\n${row.coalescingKey}`;
@@ -547,7 +767,7 @@ export const createSchedulerRuntime = (options) => {
         const holdAs = (rows, status) => {
             const ids = rows.filter((row) => row.status !== status).map((row) => row.id);
             if (ids.length > 0) {
-                events.store.hold(ids, status, nowIso);
+                current.store.hold(ids, status, nowIso);
             }
         };
         for (const [groupKey, all] of groups) {
@@ -559,7 +779,7 @@ export const createSchedulerRuntime = (options) => {
             const batched = rows[0].batchKey !== undefined;
             if (!batched && rows.length > EVENT_HELD_PER_KEY) {
                 const dropped = rows.slice(0, rows.length - EVENT_HELD_PER_KEY);
-                events.store.retire(dropped.map((row) => row.id), 'superseded', `Over ${EVENT_HELD_PER_KEY} waiting for one subject; newer ones were kept.`, nowIso);
+                current.store.retire(dropped.map((row) => row.id), 'superseded', `Over ${EVENT_HELD_PER_KEY} waiting for one subject; newer ones were kept.`, nowIso);
                 rows = rows.slice(-EVENT_HELD_PER_KEY);
             }
             const { quietHours } = trigger.cadence;
@@ -578,16 +798,16 @@ export const createSchedulerRuntime = (options) => {
             eventDeferralsWarned.delete(groupKey);
             const maxPerHour = trigger.cadence.maxPerHour ?? DEFAULT_EVENT_MAX_PER_HOUR;
             const hourAgo = new Date(now.getTime() - 3_600_000).toISOString();
-            if (events.store.turnsStartedSince(trigger.id, hourAgo, rows[0].batchKey) >= maxPerHour) {
+            if (current.store.turnsStartedSince(trigger.id, hourAgo, rows[0].batchKey) >= maxPerHour) {
                 if (!batched && rows.length > 1) {
-                    events.store.retire(rows.slice(0, -1).map((row) => row.id), 'superseded', 'A newer event for the same subject replaced it while over the hourly limit.', nowIso);
+                    current.store.retire(rows.slice(0, -1).map((row) => row.id), 'superseded', 'A newer event for the same subject replaced it while over the hourly limit.', nowIso);
                     rows = rows.slice(-1);
                 }
                 holdAs(rows, 'rate_limited');
                 continue;
             }
             const batchKey = rows[0].batchKey ?? rows[rows.length - 1].dispatchKey;
-            if (!events.store.claim(rows.map((row) => row.id), batchKey, nowIso, { triggerId: trigger.id })) {
+            if (!current.store.claim(rows.map((row) => row.id), batchKey, nowIso, { triggerId: trigger.id })) {
                 continue;
             }
             // When it last went out, on the trigger's own row, so `schedule.list`,
@@ -634,11 +854,18 @@ export const createSchedulerRuntime = (options) => {
                 if (stopped) {
                     break;
                 }
-                fireOrSkip(record, now);
+                await fireOrSkip(record, now);
             }
             processEvents(now);
         }
         catch (error) {
+            if (error instanceof NotReady) {
+                if (propagateReadiness) {
+                    throw error.reason;
+                }
+                warn(`scheduler stopped before claiming schedule ${error.scheduleId}'s firing: ${error.message}`);
+                return;
+            }
             warn(`scheduler tick failed: ${error instanceof Error ? error.message : String(error)}`);
         }
         if (!stopped) {
@@ -663,6 +890,13 @@ export const createSchedulerRuntime = (options) => {
                 filter: record.cadence.filter,
             }));
         },
+        attachEvents(attached) {
+            if (events) {
+                throw new Error('This scheduler already takes events; its sources are read live, so add a source there instead.');
+            }
+            events = attached;
+            maxEventsPerAgent = attached.maxConcurrentPerAgent ?? 1;
+        },
         kickEvents() {
             try {
                 processEvents(clock());