@tea-agent/loop-agent 0.40.0-next.9 → 0.41.0-beta.1

package/dist/shared/context-transfer.js

@@ -0,0 +1,418 @@
+import { createHash } from "node:crypto";
+import { z } from "zod";
+export const CONTEXT_TRANSFER_REASON_CODES = [
+    "CONTEXT_RECEIPT_MISSING",
+    "CONTEXT_COMPONENT_UNAVAILABLE",
+    "CONTEXT_BUNDLE_INEXACT",
+    "CONTEXT_BUNDLE_TOO_LARGE",
+    "RAW_EXPORT_ACKNOWLEDGEMENT_REQUIRED",
+    "SECRET_SCAN_CONFIRMATION_REQUIRED",
+    "ARTIFACT_BINDING_UNAVAILABLE",
+    "ARTIFACT_NOT_REVISION_ELIGIBLE",
+    "ARTIFACT_IDENTITY_AMBIGUOUS",
+    "ARTIFACT_REVISION_SCHEMA_INVALID",
+    "ARTIFACT_REVISION_PATH_INVALID",
+    "ARTIFACT_REVISION_EXPIRED",
+    "ARTIFACT_REVISION_DRIFT",
+    "ARTIFACT_REVISION_QUOTA_EXCEEDED",
+    "ARTIFACT_CONSUMER_UNKNOWN",
+    "ARTIFACT_IMPACT_UNSAFE",
+    "RERUN_PLAN_DRIFT",
+    "WORKER_MANAGED_CONTINUATION_UNSUPPORTED",
+    "WORKER_CONTINUATION_AUTHORITY_MISMATCH",
+    "WORKER_CONTINUATION_NEEDS_RECONCILE",
+];
+export const contextTransferReasonCodeSchema = z.enum(CONTEXT_TRANSFER_REASON_CODES);
+export const CONTEXT_BUNDLE_LIMITS = Object.freeze({
+    previewBytes: 64 * 1024,
+    singleFileBytes: 16 * 1024 * 1024,
+    totalUncompressedBytes: 64 * 1024 * 1024,
+    fileCount: 2_048,
+});
+const sha256Schema = z.string().regex(/^[a-f0-9]{64}$/);
+const safeRelativePosixPathSchema = z
+    .string()
+    .min(1)
+    .refine((value) => !value.includes("\0"), "path must not contain NUL")
+    .refine((value) => !value.includes("\\"), "path must use POSIX separators")
+    .refine((value) => !value.startsWith("/") &&
+    !value.startsWith("//") &&
+    !/^[A-Za-z]:/.test(value), "path must be relative")
+    .refine((value) => value.split("/").every((segment) => segment !== ".." && segment !== ""), "path must not escape or contain empty segments");
+const contextComponentSchema = z
+    .object({
+    index: z.number().int().nonnegative(),
+    kind: z.enum([
+        "system-prompt",
+        "developer-prompt",
+        "user-prompt",
+        "task-contract",
+        "execution-constraint",
+        "context-file",
+        "upstream-artifact",
+        "tool-contract",
+        "runtime-fact",
+    ]),
+    logicalName: z.string().min(1),
+    source: z
+        .object({
+        type: z.string().min(1),
+        identity: z.string().min(1),
+        revision: z.string().min(1).optional(),
+    })
+        .strict(),
+    materializedPath: safeRelativePosixPathSchema.optional(),
+    sha256: sha256Schema,
+    bytes: z.number().int().nonnegative(),
+    mediaType: z.string().min(1),
+    inclusion: z.enum([
+        "full",
+        "excerpt",
+        "summary",
+        "reference-only",
+        "omitted",
+    ]),
+    authoritativeSource: z
+        .object({ identity: z.string().min(1), sha256: sha256Schema.optional() })
+        .strict()
+        .optional(),
+    omissionReason: z.string().min(1).optional(),
+})
+    .strict();
+export const effectiveNodeContextV1Schema = z
+    .object({
+    schemaVersion: z.literal(1),
+    identity: z
+        .object({
+        runId: z.string().min(1),
+        nodeId: z.string().min(1),
+        attempt: z.number().int().positive(),
+        capturedAt: z.string().min(1),
+    })
+        .strict(),
+    orderedComponents: z.array(contextComponentSchema),
+    promptAssembly: z
+        .object({
+        strategy: z.string().min(1),
+        finalPromptSha256: sha256Schema.optional(),
+        tokenEstimate: z.number().int().nonnegative().optional(),
+        truncations: z.array(z
+            .object({
+            componentIndex: z.number().int().nonnegative(),
+            reason: z.string().min(1),
+            retainedBytes: z.number().int().nonnegative().optional(),
+        })
+            .strict()),
+    })
+        .strict(),
+    boundaries: z
+        .object({
+        allowedPaths: z.array(z.string()),
+        forbiddenPaths: z.array(z.string()),
+        writeSet: z.array(z.string()),
+    })
+        .strict(),
+    runtime: z
+        .object({
+        executor: z.string().min(1),
+        modelHint: z.string().min(1).optional(),
+        resolvedModel: z.string().min(1).optional(),
+        skills: z.array(z.string()),
+        extensions: z.array(z.string()),
+        activeTools: z.array(z.string()),
+    })
+        .strict(),
+    contextDigest: sha256Schema,
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    value.orderedComponents.forEach((component, index) => {
+        if (component.index !== index) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["orderedComponents", index, "index"],
+                message: "component indexes must be contiguous and ordered",
+            });
+        }
+    });
+});
+const bundleFileSchema = z
+    .object({
+    path: safeRelativePosixPathSchema,
+    sha256: sha256Schema,
+    bytes: z.number().int().nonnegative(),
+    mediaType: z.string().min(1),
+    origin: z.string().min(1),
+    redaction: z.enum(["none", "redacted", "omitted"]),
+    sourceSha256: sha256Schema.optional(),
+})
+    .strict();
+export const contextBundleManifestV1Schema = z
+    .object({
+    schemaVersion: z.literal(1),
+    bundleId: z.string().min(1),
+    createdAt: z.string().min(1),
+    source: z
+        .object({
+        repoIdentity: z.string().min(1),
+        taskId: z.string().min(1).optional(),
+        runId: z.string().min(1),
+        nodeId: z.string().min(1),
+        attempt: z.number().int().positive(),
+        pass: z.number().int().positive().optional(),
+        parentRunId: z.string().min(1).optional(),
+    })
+        .strict(),
+    profile: z.enum(["redacted", "raw"]),
+    target: z.enum(["generic", "pi-session", "pi-handoff", "readable"]),
+    reproducibility: z
+        .object({
+        level: z.enum([
+            "exact-pi-session",
+            "semantic-handoff",
+            "readable-transcript",
+        ]),
+        reasons: z.array(z.string()),
+        limitations: z.array(z.string()),
+    })
+        .strict(),
+    bindings: z
+        .object({
+        frozenRunSpecSha256: sha256Schema,
+        contextReceiptSha256: sha256Schema,
+        contextDigest: sha256Schema,
+        taskContractSha256: sha256Schema.optional(),
+        sourceBindingSha256: sha256Schema.optional(),
+    })
+        .strict(),
+    runtime: z
+        .object({
+        executor: z.string().min(1),
+        model: z.string().min(1).optional(),
+        provider: z.string().min(1).optional(),
+        piVersion: z.string().min(1).optional(),
+        skills: z.array(z
+            .object({
+            id: z.string().min(1),
+            version: z.string().min(1).optional(),
+            sha256: sha256Schema.optional(),
+        })
+            .strict()),
+        extensions: z.array(z
+            .object({
+            id: z.string().min(1),
+            packageName: z.string().min(1).optional(),
+            version: z.string().min(1).optional(),
+            status: z.string().min(1),
+        })
+            .strict()),
+        tools: z.array(z
+            .object({
+            name: z.string().min(1),
+            contractSha256: sha256Schema.optional(),
+            available: z.boolean(),
+        })
+            .strict()),
+    })
+        .strict(),
+    files: z.array(bundleFileSchema),
+    omissions: z.array(z
+        .object({
+        subject: z.string().min(1),
+        reasonCode: z.string().min(1),
+        detail: z.string().min(1).optional(),
+    })
+        .strict()),
+    security: z
+        .object({
+        secretScan: z.enum(["pass", "warning", "not-run"]),
+        findingCounts: z.record(z.string(), z.number().int().nonnegative()),
+        rawAcknowledgement: z
+            .object({
+            requestId: z.string().min(1),
+            acknowledgedAt: z.string().min(1),
+        })
+            .strict()
+            .optional(),
+    })
+        .strict(),
+    bundleSha256: sha256Schema,
+})
+    .strict()
+    .superRefine((value, ctx) => {
+    const seen = new Set();
+    for (const [index, file] of value.files.entries()) {
+        const folded = file.path.normalize("NFC").toLocaleLowerCase("en-US");
+        if (seen.has(folded)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["files", index, "path"],
+                message: "bundle file paths must be unique under case folding",
+            });
+        }
+        seen.add(folded);
+    }
+    if (value.profile === "raw" && !value.security.rawAcknowledgement) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["security", "rawAcknowledgement"],
+            message: "raw bundle requires explicit acknowledgement",
+        });
+    }
+});
+export const artifactRevisionV1Schema = z
+    .object({
+    schemaVersion: z.literal(1),
+    revisionId: z.string().min(1),
+    state: z.enum([
+        "staged",
+        "validated",
+        "rejected",
+        "expired",
+        "consumed",
+        "discarded",
+    ]),
+    parent: z
+        .object({
+        runId: z.string().min(1),
+        nodeId: z.string().min(1),
+        artifactPath: safeRelativePosixPathSchema,
+        artifactSha256: sha256Schema,
+        artifactSchemaId: z.string().min(1).optional(),
+    })
+        .strict(),
+    candidate: z
+        .object({
+        stagingPath: z.string().min(1),
+        sha256: sha256Schema,
+        bytes: z.number().int().nonnegative(),
+        mediaType: z.string().min(1),
+        uploadedAt: z.string().min(1),
+        uploadedBy: z.literal("operator"),
+    })
+        .strict(),
+    validation: z
+        .object({
+        status: z.enum(["pending", "pass", "fail"]),
+        checks: z.array(z
+            .object({
+            id: z.string().min(1),
+            status: z.enum(["pass", "warning", "fail"]),
+            detail: z.string().min(1).optional(),
+        })
+            .strict()),
+    })
+        .strict(),
+    diff: z
+        .object({
+        kind: z.enum(["text", "json", "binary"]),
+        summary: z.string(),
+        previewPath: safeRelativePosixPathSchema.optional(),
+        truncated: z.boolean(),
+    })
+        .strict(),
+    expiresAt: z.string().min(1),
+    /** Explicit staging lease (M4c): fresh lease blocks conflicting holders. */
+    lease: z
+        .object({
+        holder: z.string().min(1),
+        acquiredAt: z.string().min(1),
+        expiresAt: z.string().min(1),
+    })
+        .strict()
+        .optional(),
+})
+    .strict();
+export const artifactOverrideSetV1Schema = z
+    .object({
+    schemaVersion: z.literal(1),
+    overrides: z
+        .array(z
+        .object({
+        revisionId: z.string().min(1),
+        parentArtifact: z
+            .object({
+            runId: z.string().min(1),
+            nodeId: z.string().min(1),
+            path: safeRelativePosixPathSchema,
+            sha256: sha256Schema,
+        })
+            .strict(),
+        replacement: z
+            .object({
+            sha256: sha256Schema,
+            bytes: z.number().int().nonnegative(),
+            mediaType: z.string().min(1),
+        })
+            .strict(),
+        supersedes: z.string().min(1),
+    })
+        .strict())
+        .length(1),
+    overrideSetHash: sha256Schema,
+})
+    .strict();
+const workerContinuationIdSchema = z
+    .string()
+    .min(1)
+    .regex(/^[A-Za-z0-9._-]+$/);
+/**
+ * Console-to-kernel authority for a Worker-owned artifact continuation.
+ * Every field is immutable and plan-hash-bound; the child identity is derived
+ * from the parent Worker run plus the single-use revision id.
+ */
+export const workerContinuationAuthorityV1Schema = z
+    .object({
+    schemaVersion: z.literal(1),
+    parentWorkerRunId: workerContinuationIdSchema,
+    childWorkerRunId: workerContinuationIdSchema,
+    featureId: workerContinuationIdSchema,
+    taskId: workerContinuationIdSchema,
+    batchRunId: workerContinuationIdSchema,
+    revisionId: workerContinuationIdSchema,
+})
+    .strict()
+    .superRefine((authority, ctx) => {
+    const expected = deriveWorkerContinuationRunId(authority.parentWorkerRunId, authority.revisionId);
+    if (authority.childWorkerRunId !== expected) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["childWorkerRunId"],
+            message: `childWorkerRunId must equal ${expected}`,
+        });
+    }
+});
+export function deriveWorkerContinuationRunId(parentWorkerRunId, revisionId) {
+    const digest = createHash("sha256")
+        .update(`worker-continuation-v1\0${parentWorkerRunId}\0${revisionId}`)
+        .digest("hex")
+        .slice(0, 32);
+    return `wrc-${digest}`;
+}
+export function sortKeysDeep(value) {
+    if (Array.isArray(value))
+        return value.map(sortKeysDeep);
+    if (value && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([key, child]) => [key, sortKeysDeep(child)]));
+    }
+    return value;
+}
+export function canonicalSha256(value) {
+    return createHash("sha256")
+        .update(JSON.stringify(sortKeysDeep(value)))
+        .digest("hex");
+}
+export function computeContextDigest(context) {
+    return canonicalSha256(context);
+}
+export function computeBundleManifestSha256(manifest) {
+    return canonicalSha256(manifest);
+}
+export function computeOverrideSetHash(overrides) {
+    return canonicalSha256({ schemaVersion: 1, overrides });
+}
+export function isKnownContextTransferReasonCode(value) {
+    return contextTransferReasonCodeSchema.safeParse(value).success;
+}

package/dist/shared/operator/capabilities.js

@@ -51,6 +51,8 @@ const OFFICIAL_ACTION_DESCRIPTIONS = {
     workerSchedulerStatus: "Night-scheduler status overview (agent-worker). Use to check whether overnight jobs are healthy.",
     workerSchedulerLedger: "Night-scheduler harvest ledger (agent-worker). Use to audit what overnight runs produced.",
     workerSchedulerDoctor: "Diagnose night-scheduler health (agent-worker). Use when overnight jobs fail to fire or harvest.",
+    dagResume: "Unpause a run paused at a human decision checkpoint. Orphaned runs (dead runner, liveness=orphaned) are NOT continuable — do not resume them: use dagReconcileRun --action supersede to archive and then advance/rerun the task fresh.",
+    dagReconcileRun: "Reconcile an orphaned run (dead runner, liveness=orphaned). These are NOT continuable: supersede archives the run for a fresh same-task advance/rerun; abandon discards it. resume only unpauses human-decision checkpoints — never for orphaned runs.",
 };
 const officialAction = (action, cli, kind, coverage) => ({
     action,
@@ -817,7 +819,7 @@ export function buildOperatorCapabilitiesDocument() {
                 "BINDING_DRIFT",
                 "HUMAN_CONFIRMATION_REQUIRED",
             ],
-            description: "Issue a session-bound single-use execution receipt after server-side G2 assessment (bounded writeSet ⊆ allowedPaths, no forbidden overlap, no broad/destructive risk, structured verification). The model never passes a raw DAG path.",
+            description: "Returns SYNCHRONOUSLY (not an operation): it immediately yields a session-bound single-use executionId + receipt, which you then pass to runDag to actually execute. It is a server-side G2 assessment (bounded writeSet ⊆ allowedPaths, no forbidden overlap, no broad/destructive risk, structured verification). The model never passes a raw DAG path.",
             inputParams: [
                 {
                     name: "taskId",
@@ -1067,6 +1069,12 @@ export function buildOperatorCapabilitiesDocument() {
                     required: false,
                     description: "verification entries as label:command strings",
                 },
+                {
+                    name: "approveGate",
+                    type: "string",
+                    required: false,
+                    description: "optional write-set gate approval token `<gate-id>:sha256:<64-hex>` exactly as reported by task status gate.approveCommand; forwards as --approve-gate and executes the approved DAG as this background operation (preferred over a foreground terminal)",
+                },
             ],
             modelCallable: "always",
             humanConfirmation: "none",
@@ -2244,6 +2252,20 @@ export const OPERATOR_COMMAND_COVERAGE = Object.freeze([
         action: "dagFinalVerification",
         source: "loop-agent",
     },
+    {
+        command: "loop-agent dag context",
+        coverage: "excluded",
+        action: null,
+        source: "loop-agent",
+        exclusionReason: "Context export can disclose raw execution bytes and requires a human-selected output path; Console uses dedicated gated actions instead of the generic CLI wrapper.",
+    },
+    {
+        command: "loop-agent dag artifact",
+        coverage: "excluded",
+        action: null,
+        source: "loop-agent",
+        exclusionReason: "Artifact revision staging consumes a human-selected local file and remains on dedicated Console/CLI mutation gates.",
+    },
     {
         command: "loop-agent workflow list",
         coverage: "advanced",

package/dist/shared/operator/safe-run-summary.js

@@ -0,0 +1 @@
+export {};

package/dist/shared/path-safety.js

@@ -0,0 +1,93 @@
+import { constants as fsConstants } from "node:fs";
+import { lstat, open, realpath } from "node:fs/promises";
+import path from "node:path";
+function assertContained(root, target, label) {
+    if (target === root || !target.startsWith(`${root}${path.sep}`)) {
+        throw new Error(`${label}: path escapes boundary: ${target}`);
+    }
+}
+/**
+ * Reject any symlink on the path between `boundaryRoot` and `targetPath`.
+ * This is the lexical/path-walk phase; callers that consume file bytes must
+ * still use readFileBoundarySafe so the checked object is the opened object.
+ */
+export async function assertRealPathInsideBoundary(input) {
+    const root = path.resolve(input.boundaryRoot);
+    const target = path.resolve(input.targetPath);
+    assertContained(root, target, input.label);
+    const rootStat = await lstat(root).catch(() => undefined);
+    if (!rootStat) {
+        throw new Error(`${input.label}: boundary root is not a real directory`);
+    }
+    if (rootStat.isSymbolicLink()) {
+        throw new Error(`${input.label}: boundary root must not be a symlink`);
+    }
+    if (!rootStat.isDirectory()) {
+        throw new Error(`${input.label}: boundary root is not a real directory`);
+    }
+    const segments = path.relative(root, target).split(path.sep).filter(Boolean);
+    let current = root;
+    for (let index = 0; index < segments.length; index += 1) {
+        current = path.join(current, segments[index]);
+        const stat = await lstat(current).catch(() => undefined);
+        if (!stat) {
+            throw new Error(`${input.label}: path component missing: ${segments[index]}`);
+        }
+        if (stat.isSymbolicLink()) {
+            throw new Error(`${input.label}: symlink is forbidden on path: ${segments[index]}`);
+        }
+        if (index < segments.length - 1 && !stat.isDirectory()) {
+            throw new Error(`${input.label}: path ancestor is not a directory: ${segments[index]}`);
+        }
+    }
+    return target;
+}
+/** Reject a non-regular, symlinked, or hardlinked final entry before opening. */
+export async function assertReadableRegularFile(input) {
+    const target = await assertRealPathInsideBoundary(input);
+    const stat = await lstat(target).catch(() => undefined);
+    if (!stat)
+        throw new Error(`${input.label}: path component missing`);
+    if (!stat.isFile() || stat.isSymbolicLink() || stat.nlink !== 1) {
+        throw new Error(`${input.label}: path must be a regular single-link file`);
+    }
+    return target;
+}
+/**
+ * Read one owned regular file without reopening an unchecked pathname.
+ *
+ * The preflight rejects normal FIFO/device/hardlink cases without opening
+ * them. O_NOFOLLOW rejects a final symlink introduced after preflight and
+ * O_NONBLOCK prevents a swapped FIFO from blocking. The post-open identity and
+ * realpath checks make an ancestor swap detectable before bytes are consumed.
+ */
+export async function readFileBoundarySafe(input) {
+    const target = await assertReadableRegularFile(input);
+    const flags = fsConstants.O_RDONLY |
+        (fsConstants.O_NOFOLLOW ?? 0) |
+        (fsConstants.O_NONBLOCK ?? 0);
+    const handle = await open(target, flags);
+    try {
+        const opened = await handle.stat();
+        if (!opened.isFile() || opened.nlink !== 1) {
+            throw new Error(`${input.label}: path must be a regular single-link file`);
+        }
+        const [resolvedRoot, resolvedTarget, current] = await Promise.all([
+            realpath(path.resolve(input.boundaryRoot)),
+            realpath(target),
+            lstat(target),
+        ]);
+        assertContained(resolvedRoot, resolvedTarget, input.label);
+        if (current.isSymbolicLink() ||
+            !current.isFile() ||
+            current.nlink !== 1 ||
+            current.dev !== opened.dev ||
+            current.ino !== opened.ino) {
+            throw new Error(`${input.label}: path changed while opening`);
+        }
+        return await handle.readFile();
+    }
+    finally {
+        await handle.close().catch(() => { });
+    }
+}

package/dist/shared/pi-context-pressure/checkpoint.js

@@ -0,0 +1,116 @@
+const CHECKPOINT_MAX_BYTES = 12 * 1024;
+function boundText(value, maxChars) {
+    if (typeof value !== "string" || !value.trim())
+        return "";
+    return value.length <= maxChars ? value : `${value.slice(0, maxChars - 1)}…`;
+}
+function asRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function extractLastUserGoal(messages) {
+    if (!Array.isArray(messages))
+        return "";
+    for (let index = messages.length - 1; index >= 0; index -= 1) {
+        const message = asRecord(messages[index]);
+        if (!message || message.role !== "user")
+            continue;
+        const content = message.content;
+        if (typeof content === "string")
+            return boundText(content, 800);
+        if (Array.isArray(content)) {
+            const texts = content
+                .map((block) => {
+                const rec = asRecord(block);
+                return typeof rec?.text === "string" ? rec.text : "";
+            })
+                .filter(Boolean);
+            if (texts.length > 0)
+                return boundText(texts.join("\n"), 800);
+        }
+    }
+    return "";
+}
+function extractTodos(details) {
+    const record = asRecord(details);
+    const todos = record?.todos ?? record?.items;
+    if (!Array.isArray(todos))
+        return "";
+    const lines = todos
+        .slice(0, 24)
+        .map((item) => {
+        const rec = asRecord(item);
+        const status = typeof rec?.status === "string" ? rec.status : "pending";
+        const content = typeof rec?.content === "string"
+            ? rec.content
+            : typeof rec?.title === "string"
+                ? rec.title
+                : "";
+        return content ? `- [${status}] ${content}` : "";
+    })
+        .filter(Boolean);
+    return boundText(lines.join("\n"), 1200);
+}
+function extractFileOps(fileOps) {
+    const record = asRecord(fileOps);
+    if (!record)
+        return "";
+    const parts = [];
+    for (const key of ["edited", "written", "read", "deleted", "ops"]) {
+        const value = record[key];
+        if (Array.isArray(value)) {
+            parts.push(`${key}: ${value
+                .slice(0, 20)
+                .map((item) => (typeof item === "string" ? item : JSON.stringify(item)))
+                .join(", ")}`);
+        }
+        else if (typeof value === "string" && value) {
+            parts.push(`${key}: ${value}`);
+        }
+    }
+    if (parts.length === 0) {
+        try {
+            return boundText(JSON.stringify(fileOps), 800);
+        }
+        catch {
+            return "";
+        }
+    }
+    return boundText(parts.join("\n"), 800);
+}
+export function buildOverflowCheckpoint(input) {
+    const preparation = input.preparation;
+    const firstKeptEntryId = typeof preparation?.firstKeptEntryId === "string" &&
+        preparation.firstKeptEntryId
+        ? preparation.firstKeptEntryId
+        : undefined;
+    const tokensBefore = typeof preparation?.tokensBefore === "number" &&
+        Number.isFinite(preparation.tokensBefore)
+        ? preparation.tokensBefore
+        : undefined;
+    if (!firstKeptEntryId || tokensBefore === undefined)
+        return undefined;
+    const sections = [
+        "Deterministic overflow checkpoint (no extra summary request).",
+        boundText(preparation?.previousSummary, 2000)
+            ? `Previous summary:\n${boundText(preparation?.previousSummary, 2000)}`
+            : "",
+        extractLastUserGoal(preparation?.messagesToSummarize)
+            ? `Latest user goal:\n${extractLastUserGoal(preparation?.messagesToSummarize)}`
+            : "",
+        extractTodos(input.todos) ? `Open todos:\n${extractTodos(input.todos)}` : "",
+        extractFileOps(preparation?.fileOps)
+            ? `File ops:\n${extractFileOps(preparation?.fileOps)}`
+            : "",
+        typeof input.lastError === "string" && input.lastError
+            ? `Latest error:\n${boundText(input.lastError, 400)}`
+            : "",
+        "Next step: continue the interrupted turn from the kept recent messages. Do not repeat completed file writes.",
+    ].filter(Boolean);
+    let summary = sections.join("\n\n");
+    if (Buffer.byteLength(summary, "utf8") > CHECKPOINT_MAX_BYTES) {
+        summary = `${summary.slice(0, CHECKPOINT_MAX_BYTES - 1)}…`;
+    }
+    return { summary, firstKeptEntryId, tokensBefore };
+}