flavor-code 1.4.0-beta.3 → 1.4.0-beta.4

package/dist/{chunk-NIKCPCJG.js → chunk-DCNUBQCH.js}

@@ -2,10 +2,15 @@
 import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
 import {
   MEMORY_RESTART_EXIT_CODE,
+  consumedMemoryRestartMarker,
+  markMemoryRotation,
   memoryRestartMarkerPath,
+  memoryRotationActive,
   nextMemoryRestartMarker,
-  parseMemoryRestartMarker
-} from "./chunk-CIVPKHF4.js";
+  parseMemoryRestartMarker,
+  pendingContinuation,
+  rotationCooldownActive
+} from "./chunk-LKQTBL3R.js";
 import {
   PERMISSION_MODES,
   PermissionModeSchema,
@@ -18,7 +23,7 @@ import {
   redactConfig,
   setProjectMcpServerDisabled,
   updateProtectedFile
-} from "./chunk-KBHWS7M6.js";
+} from "./chunk-KQMKY7C5.js";
 import {
   AuditLogger,
   appendUsageLog,
@@ -2061,6 +2066,10 @@ var SessionHistory = class _SessionHistory {
   get leafId() {
     return this.#leafId;
   }
+  /** Cheap retained-node count for the rotation census (no cloning). */
+  get nodeCount() {
+    return this.#nodes.length;
+  }
   tree() {
     return this.#nodes.map((node) => structuredClone(node));
   }
@@ -3635,6 +3644,7 @@ var FlavorSession = class {
   #pendingCoWorkStarts = [];
   #activeSteeringDurableIds = /* @__PURE__ */ new Set();
   #durableResumeStarted = false;
+  #continuationResumeStarted = false;
   #permissionBaseline;
   #activeSubmission;
   constructor(services) {
@@ -3655,6 +3665,10 @@ var FlavorSession = class {
   queueSnapshot() {
     return this.#queue.snapshot();
   }
+  /** True when start() admitted a persisted /loop or /goal continuation. */
+  get rotationContinuationResumed() {
+    return this.#continuationResumeStarted;
+  }
   clearQueue() {
     const snapshot4 = this.#queue.clear();
     for (const kind of ["steer", "followUp"]) {
@@ -3804,6 +3818,7 @@ var FlavorSession = class {
       if (decision.additionalContext !== void 0) await this.#services.addContext?.(decision.additionalContext);
       this.#started = true;
       this.#resumeDurableQueue();
+      this.#resumeRotationContinuation();
     });
     return this.#startPromise;
   }
@@ -3886,7 +3901,8 @@ var FlavorSession = class {
         skillNames,
         this.#services.managedToolCommands().map(({ name }) => name)
       );
-      if (command !== null) await this.#dispatch(command, controller.signal);
+      if (submission.continuation !== void 0) await this.#runContinuation(submission.continuation, controller.signal);
+      else if (command !== null) await this.#dispatch(command, controller.signal);
       else for await (const event of this.#services.run(prompt, controller.signal, {
         getSteeringMessages: () => this.#drainMessages("steer", true).map((item) => item.text),
         ...decision.additionalContext === void 0 ? {} : { additionalContext: decision.additionalContext },
@@ -4144,6 +4160,33 @@ Address this now (for example run the required verification or fix), then finish
       });
     }
   }
+  /**
+   * After a heap rotation the relaunched process inherits the same session and
+   * a marker continuation naming the /loop or /goal that was in flight. Resume
+   * it once here so a multi-day autonomous run survives the rotation instead of
+   * silently stopping at the boundary.
+   */
+  #resumeRotationContinuation() {
+    if (this.#continuationResumeStarted || this.#closed) return;
+    const continuation = this.#services.continuation?.();
+    if (continuation === void 0) return;
+    const supported = continuation.kind === "loop" ? this.#services.resumeLoop !== void 0 : this.#services.resumeGoal !== void 0;
+    if (!supported) return;
+    this.#continuationResumeStarted = true;
+    const displayText = `Resuming the interrupted ${continuation.kind} ${continuation.id} after a heap rotation.`;
+    this.#notice(displayText);
+    this.#enqueueNormalizedSubmission({ text: displayText, displayText, continuation }).catch((error) => {
+      this.#services.output({ type: "error", error: { code: "unknown", message: message(error) } });
+    });
+  }
+  async #runContinuation(continuation, signal) {
+    const stream = continuation.kind === "loop" ? this.#services.resumeLoop?.(continuation.id, signal) : this.#services.resumeGoal?.(continuation.id, signal);
+    if (stream === void 0) {
+      this.#notice(`The runtime cannot resume the interrupted ${continuation.kind} ${continuation.id}; start it again with /${continuation.kind}.`);
+      return;
+    }
+    for await (const event of stream) this.#services.output(event);
+  }
   #ackDurable(submission) {
     if (submission.durableId === void 0) return;
     this.#services.durableQueue?.ack(submission.durableId);
@@ -5973,8 +6016,8 @@ var PalBrokerServer = class {
     });
     if (this.endpointLock === void 0) throw new Error(`Pals endpoint '${this.address}' is active or owned`);
     try {
-      const stat11 = await lstat4(this.address);
-      if (!stat11.isSocket()) throw new Error(`Refusing to unlink '${this.address}' because it is not a socket`);
+      const stat12 = await lstat4(this.address);
+      if (!stat12.isSocket()) throw new Error(`Refusing to unlink '${this.address}' because it is not a socket`);
       await unlink3(this.address);
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
@@ -5987,8 +6030,8 @@ var PalBrokerServer = class {
   }
   async unlinkKnownSocket() {
     try {
-      const stat11 = await lstat4(this.address);
-      if (stat11.isSocket()) await unlink3(this.address);
+      const stat12 = await lstat4(this.address);
+      if (stat12.isSocket()) await unlink3(this.address);
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
     }
@@ -6715,11 +6758,11 @@ async function ensureOnce(options) {
 }
 
 // src/production.ts
-import { readFile as readFile23 } from "fs/promises";
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { readFile as readFile24 } from "fs/promises";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync3, renameSync as renameSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync3 } from "fs";
 import { createHash as createHash18, randomUUID as randomUUID20 } from "crypto";
 import { homedir as homedir3, release as osRelease, tmpdir as tmpdir4, version as osVersion } from "os";
-import { basename as basename7, dirname as dirname17, join as join29, relative as relative22, resolve as resolve31, sep as sep22 } from "path";
+import { basename as basename7, dirname as dirname17, join as join30, relative as relative22, resolve as resolve31, sep as sep22 } from "path";
 
 // src/agent/subagents.ts
 import { z as z9 } from "zod";
@@ -7677,6 +7720,18 @@ var ContextManager = class _ContextManager {
   estimatedTokens() {
     return estimateMessageTokens(this.messagesForModel());
   }
+  /** Retained sizes for the rotation census: what this context holds right now. */
+  census() {
+    const chars = (messages) => messages.reduce((sum, entry2) => sum + modelContentText(entry2.content).length, 0);
+    return {
+      messages: this.#messages.length,
+      messageChars: chars(this.#messages),
+      visibilityEntries: this.#visibilityLog.length,
+      visibilityChars: this.#visibilityLog.reduce((sum, record) => sum + record.content.length, 0),
+      transientEntries: this.#activeTransientSystem.size,
+      transientChars: chars([...this.#activeTransientSystem.values()])
+    };
+  }
   needsCompaction() {
     if (modelVisibleText(this.messagesForModel()).length >= this.#compactAtChars) return true;
     return calculateContextPressure(this.#currentTokenUsage(), this.#compaction).shouldAutoCompact;
@@ -8245,8 +8300,75 @@ function reportProgress(callback, percentage) {
   }
 }
 
-// src/agent/loop.ts
+// src/utils/heap.ts
 import { getHeapStatistics } from "v8";
+import { totalmem } from "os";
+var MEMORY_PRESSURE_HEAP_RATIO = 0.8;
+var MEMORY_ROTATION_HEAP_RATIO = 0.6;
+var MEMORY_PRESSURE_RSS_RATIO = 0.75;
+var MEMORY_ROTATION_RSS_RATIO = 0.6;
+var ROTATION_PRECHECK_RATIO = 0.45;
+function readHeap() {
+  const heapLimit = getHeapStatistics().heap_size_limit;
+  const heapUsed = process.memoryUsage().heapUsed;
+  return { heapUsed, heapLimit, ratio: heapLimit > 0 ? heapUsed / heapLimit : 0 };
+}
+function forceFullGc() {
+  const gc = globalThis.gc;
+  if (typeof gc !== "function") return false;
+  gc();
+  gc();
+  return true;
+}
+function ratioOf(heapLimit, heapUsed) {
+  return heapLimit > 0 ? heapUsed / heapLimit : 0;
+}
+function effectiveMemoryLimit() {
+  const physical = totalmem();
+  const constrained = process.constrainedMemory?.() ?? 0;
+  return constrained > 0 ? Math.min(physical, constrained) : physical;
+}
+function withRss(reading, gcVerified) {
+  const usage = process.memoryUsage();
+  const memoryLimit = effectiveMemoryLimit();
+  return {
+    ...reading,
+    gcVerified,
+    rss: usage.rss,
+    memoryLimit,
+    rssRatio: ratioOf(memoryLimit, usage.rss),
+    external: usage.external,
+    arrayBuffers: usage.arrayBuffers
+  };
+}
+function verifiedHeapPressure(threshold) {
+  const raw = readHeap();
+  const before = withRss(raw, false);
+  const rssThreshold = threshold >= MEMORY_PRESSURE_HEAP_RATIO ? MEMORY_PRESSURE_RSS_RATIO : threshold;
+  if ((raw.heapLimit <= 0 || raw.ratio < threshold) && (before.rssRatio ?? 0) < rssThreshold) return void 0;
+  if (!forceFullGc()) return before;
+  const heapUsed = process.memoryUsage().heapUsed;
+  const ratio = ratioOf(raw.heapLimit, heapUsed);
+  const verified = withRss({ heapUsed, heapLimit: raw.heapLimit, ratio, verifiedRatio: ratio }, true);
+  if (ratio < threshold && (verified.rssRatio ?? 0) < rssThreshold) return void 0;
+  return verified;
+}
+function heapRotationNeeded() {
+  const raw = readHeap();
+  const before = withRss(raw, false);
+  if ((raw.heapLimit <= 0 || raw.ratio < ROTATION_PRECHECK_RATIO) && (before.rssRatio ?? 0) < ROTATION_PRECHECK_RATIO) return void 0;
+  if (!forceFullGc()) {
+    return raw.ratio >= MEMORY_PRESSURE_HEAP_RATIO || (before.rssRatio ?? 0) >= MEMORY_PRESSURE_RSS_RATIO ? before : void 0;
+  }
+  const heapUsed = process.memoryUsage().heapUsed;
+  const ratio = ratioOf(raw.heapLimit, heapUsed);
+  const verified = withRss({ heapUsed, heapLimit: raw.heapLimit, ratio, verifiedRatio: ratio }, true);
+  if (ratio < MEMORY_ROTATION_HEAP_RATIO && (verified.rssRatio ?? 0) < MEMORY_ROTATION_RSS_RATIO) return void 0;
+  return verified;
+}
+function heapSnapshotWarranted(_reading) {
+  return process.env.FLAVOR_HEAP_SNAPSHOT_ON_ROTATE === "1";
+}
 
 // src/models/structured.ts
 import { z as z11 } from "zod";
@@ -8665,7 +8787,6 @@ function envMaxIterations() {
   if (!Number.isInteger(parsed) || parsed <= 0) return void 0;
   return parsed;
 }
-var MEMORY_PRESSURE_HEAP_RATIO = 0.8;
 function memoryPressureError(heapUsed, heapLimit) {
   if (heapLimit <= 0 || heapUsed < heapLimit * MEMORY_PRESSURE_HEAP_RATIO) return void 0;
   const mb = (bytes) => Math.round(bytes / 1048576);
@@ -8675,7 +8796,12 @@ function memoryPressureError(heapUsed, heapLimit) {
   };
 }
 function currentMemoryPressure() {
-  return memoryPressureError(process.memoryUsage().heapUsed, getHeapStatistics().heap_size_limit);
+  const reading = verifiedHeapPressure(MEMORY_PRESSURE_HEAP_RATIO);
+  if (reading === void 0) return void 0;
+  return memoryPressureError(reading.heapUsed, reading.heapLimit) ?? {
+    code: "memory_pressure",
+    message: `Process RSS reached ${Math.round((reading.rssRatio ?? 0) * 100)}% of the available memory limit; stopping before system OOM`
+  };
 }
 var AgentLoop = class {
   #options;
@@ -10053,6 +10179,10 @@ var HarnessJournal = class {
   get records() {
     return this.#records.map((record) => structuredClone(record));
   }
+  /** Retained record count for the rotation census. */
+  get recordCount() {
+    return this.#records.length;
+  }
   admitQueue(kind, payload) {
     QueueKindSchema.parse(kind);
     const id = randomUUID8();
@@ -10329,19 +10459,38 @@ function jsonSafeRecord(value) {
   return JSON.parse(json);
 }
 function hashJson(value) {
-  return createHash6("sha256").update(stableJson(value)).digest("hex");
-}
-function recordHash(record) {
-  const { hash: _hash, ...unsigned } = record;
-  return hashJson(unsigned);
+  const hash = createHash6("sha256");
+  stableHashInto(hash, value);
+  return hash.digest("hex");
 }
-function stableJson(value) {
-  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
+function stableHashInto(hash, value) {
+  if (Array.isArray(value)) {
+    hash.update("[");
+    for (let index = 0; index < value.length; index += 1) {
+      if (index > 0) hash.update(",");
+      stableHashInto(hash, value[index]);
+    }
+    hash.update("]");
+    return;
+  }
   if (typeof value === "object" && value !== null) {
     const object = value;
-    return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableJson(object[key])}`).join(",")}}`;
+    hash.update("{");
+    const keys = Object.keys(object).sort();
+    for (let index = 0; index < keys.length; index += 1) {
+      const key = keys[index];
+      if (index > 0) hash.update(",");
+      hash.update(`${JSON.stringify(key)}:`);
+      stableHashInto(hash, object[key]);
+    }
+    hash.update("}");
+    return;
   }
-  return JSON.stringify(value) ?? String(value);
+  hash.update(JSON.stringify(value) ?? String(value));
+}
+function recordHash(record) {
+  const { hash: _hash, ...unsigned } = record;
+  return hashJson(unsigned);
 }
 function assertSessionId(value) {
   if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(value)) throw new Error("Invalid session id");
@@ -12457,6 +12606,14 @@ var LoopStateSchema = z17.object({
     approvals: z17.array(LoopApprovalSchema)
   }).strict(),
   cycles: z17.array(LoopCycleEvidenceSchema),
+  /** Completed worker awaiting host verification; avoids replaying tool work after rotation. */
+  pendingCycle: z17.object({
+    cycle: z17.number().int().positive(),
+    startedAt: z17.string().datetime({ offset: true }),
+    inputTokens: z17.number().int().nonnegative(),
+    outputTokens: z17.number().int().nonnegative(),
+    workerText: z17.string().max(16e3)
+  }).strict().nullable().optional(),
   terminalReason: z17.string().optional()
 }).strict();
 var LoopEventSchema = z17.object({
@@ -12545,15 +12702,45 @@ var LoopOrchestrator = class {
         tokenCheckpoint: this.#options.config.maxTokens,
         approvals: []
       },
-      cycles: []
+      cycles: [],
+      pendingCycle: null
     });
     await this.#options.persistence.create(state);
+    yield* this.#execute(state, request.goal, request.signal);
+  }
+  /**
+   * Continue a loop whose process rotated onto a fresh heap. The persisted
+   * state decides where to pick up; an interrupted cycle simply runs again.
+   */
+  async *resume(request) {
+    const persistence = this.#options.persistence;
+    if (persistence.load === void 0) throw new Error("Loop persistence does not support resume");
+    let state;
     try {
+      state = await persistence.load(request.loopId);
+    } catch (error) {
+      yield { type: "loop-terminal", loopId: request.loopId, status: "failed", reason: message(error) };
+      return;
+    }
+    if (state.status !== "running") {
+      const status = state.status;
+      yield { type: "loop-terminal", loopId: state.loopId, status, reason: state.terminalReason ?? "The loop is not running." };
+      return;
+    }
+    yield* this.#execute(state, state.goal, request.signal);
+  }
+  async *#execute(initialState, goal, signal) {
+    const now = this.#options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+    const loopId = initialState.loopId;
+    let state = initialState;
+    try {
+      await this.#options.onMemoryCheckpoint?.(loopId);
+      if (memoryRotationActive()) return;
       const workspaceResolution = await this.#options.prepareWorkspace({
         root: this.#options.workspace,
         loopId,
-        goal: request.goal,
-        signal: request.signal
+        goal,
+        signal
       });
       if (workspaceResolution.kind === "needs_human") {
         state = await this.#terminal(state, "needs_human", workspaceResolution.reason, now());
@@ -12571,67 +12758,87 @@ var LoopOrchestrator = class {
         cycleCheckpoint: state.budget.cycleCheckpoint,
         tokenCheckpoint: state.budget.tokenCheckpoint
       };
-      let previousVerification = plan.commands.length === 0 ? {
+      const lastCompletedCycle = state.cycles.at(-1);
+      let previousVerification = lastCompletedCycle?.verification ?? (plan.commands.length === 0 ? {
         passed: false,
         commands: [],
         summary: `${plan.needsHumanReason ?? "No deterministic verification command was found."} Inspect the project and establish a meaningful project-native deterministic check; never add a trivial pass-through verifier.`
-      } : void 0;
-      let previousFailureSignature;
-      let repeatedFailures = 0;
+      } : void 0);
+      let previousFailureSignature = lastCompletedCycle === void 0 ? void 0 : `${lastCompletedCycle.workspaceFingerprint}
+${lastCompletedCycle.verification.summary}`;
+      let repeatedFailures = previousFailureSignature === void 0 ? 0 : countTrailingFailureSignature(state.cycles, previousFailureSignature);
       while (state.status === "running") {
-        request.signal.throwIfAborted();
-        const cycle = state.budget.cyclesUsed + 1;
-        const startedAt = now();
-        await this.#options.persistence.append({ version: 1, type: "cycle_started", timestamp: startedAt, loopId, payload: { cycle } });
-        yield { type: "loop-cycle-start", loopId, cycle };
-        const prompt = buildLoopCyclePrompt({
-          goal: request.goal,
-          cycle,
-          ...previousVerification === void 0 ? {} : {
-            memory: `Previous host verification: ${previousVerification.summary}`,
-            verification: previousVerification
-          }
-        });
-        let cycleInputTokens = 0;
-        let cycleOutputTokens = 0;
-        let workerError;
-        let workerText = "";
-        for await (const event of this.#options.runWorker({
-          goal: request.goal,
-          cycle,
-          workspace: executionWorkspace.root,
-          prompt,
-          signal: request.signal
-        })) {
-          if (event.type === "usage") {
-            cycleInputTokens += event.inputTokens;
-            cycleOutputTokens += event.outputTokens;
-          }
-          if (event.type === "error") workerError = event.error.message;
-          if (event.type === "text") workerText += event.text;
-          if (this.#options.hallucinationGuard !== void 0) {
-            if (event.type === "tool-start") {
-              this.#options.hallucinationGuard.recordToolCall(event.name, event.input, event.id);
-            } else if (event.type === "tool-end") {
-              this.#options.hallucinationGuard.recordToolResult(event.name, event.result, event.id);
+        signal.throwIfAborted();
+        await this.#options.onCycleBoundary?.(loopId);
+        if (memoryRotationActive()) return;
+        const pendingCycle = state.pendingCycle;
+        const cycle = pendingCycle?.cycle ?? state.budget.cyclesUsed + 1;
+        const startedAt = pendingCycle?.startedAt ?? now();
+        let cycleInputTokens = pendingCycle?.inputTokens ?? 0;
+        let cycleOutputTokens = pendingCycle?.outputTokens ?? 0;
+        let workerText = pendingCycle?.workerText ?? "";
+        if (pendingCycle === void 0 || pendingCycle === null) {
+          await this.#options.persistence.append({ version: 1, type: "cycle_started", timestamp: startedAt, loopId, payload: { cycle } });
+          yield { type: "loop-cycle-start", loopId, cycle };
+          const prompt = buildLoopCyclePrompt({
+            goal,
+            cycle,
+            ...previousVerification === void 0 ? {} : {
+              memory: `Previous host verification: ${previousVerification.summary}`,
+              verification: previousVerification
+            }
+          });
+          let workerError;
+          let workerMemoryPressure = false;
+          for await (const event of this.#options.runWorker({
+            goal,
+            cycle,
+            workspace: executionWorkspace.root,
+            prompt,
+            signal
+          })) {
+            if (event.type === "usage") {
+              cycleInputTokens += event.inputTokens;
+              cycleOutputTokens += event.outputTokens;
+            }
+            if (event.type === "error") {
+              workerError = event.error.message;
+              if (event.error.code === "memory_pressure") workerMemoryPressure = true;
+            }
+            if (event.type === "text") workerText = `${workerText}${event.text}`.slice(-16e3);
+            if (this.#options.hallucinationGuard !== void 0) {
+              if (event.type === "tool-start") {
+                this.#options.hallucinationGuard.recordToolCall(event.name, event.input, event.id);
+              } else if (event.type === "tool-end") {
+                this.#options.hallucinationGuard.recordToolResult(event.name, event.result, event.id);
+              }
             }
+            yield { type: "worker-event", event };
+          }
+          if (workerMemoryPressure) return;
+          if (workerError !== void 0) {
+            state = LoopStateSchema.parse({
+              ...state,
+              budget: {
+                ...state.budget,
+                cyclesUsed: cycle,
+                inputTokens: state.budget.inputTokens + cycleInputTokens,
+                outputTokens: state.budget.outputTokens + cycleOutputTokens
+              }
+            });
+            state = await this.#terminal(state, "failed", workerError, now());
+            yield { type: "loop-terminal", loopId, status: "failed", reason: workerError };
+            return;
           }
-          yield { type: "worker-event", event };
-        }
-        if (workerError !== void 0) {
           state = LoopStateSchema.parse({
             ...state,
-            budget: {
-              ...state.budget,
-              cyclesUsed: cycle,
-              inputTokens: state.budget.inputTokens + cycleInputTokens,
-              outputTokens: state.budget.outputTokens + cycleOutputTokens
-            }
+            pendingCycle: { cycle, startedAt, inputTokens: cycleInputTokens, outputTokens: cycleOutputTokens, workerText },
+            updatedAt: now()
           });
-          state = await this.#terminal(state, "failed", workerError, now());
-          yield { type: "loop-terminal", loopId, status: "failed", reason: workerError };
-          return;
+          await this.#options.persistence.save(state);
         }
+        await this.#options.onMemoryCheckpoint?.(loopId);
+        if (memoryRotationActive()) return;
         if (plan.commands.length === 0) {
           plan = await this.#options.inferVerification(executionWorkspace.root);
           if (plan.commands.length > 0) {
@@ -12651,8 +12858,28 @@ var LoopOrchestrator = class {
           passed: false,
           commands: [],
           summary: plan.needsHumanReason ?? "No deterministic verification command was found after the discovery cycle."
-        } : await this.#options.runVerifier(plan, executionWorkspace.root, request.signal);
+        } : await this.#options.runVerifier(plan, executionWorkspace.root, signal);
+        await this.#options.onMemoryCheckpoint?.(loopId);
+        if (memoryRotationActive()) return;
         const fingerprint2 = await this.#options.fingerprint(executionWorkspace.root);
+        let guardWarnings = [];
+        if (evidence.passed && this.#options.hallucinationGuard !== void 0) {
+          try {
+            await this.#options.onMemoryCheckpoint?.(loopId);
+            if (memoryRotationActive()) return;
+            const report = await this.#options.hallucinationGuard.evaluate(goal, workerText);
+            await this.#options.onMemoryCheckpoint?.(loopId);
+            if (memoryRotationActive()) return;
+            if (!report.passed) {
+              const guardReason = report.blockingReasons.join("; ") || "Hallucination guard blocked completion.";
+              state = await this.#terminal(state, "failed", guardReason, now());
+              yield { type: "loop-terminal", loopId, status: "failed", reason: guardReason };
+              return;
+            }
+            guardWarnings = report.warnings;
+          } catch {
+          }
+        }
         const completedAt = now();
         state = LoopStateSchema.parse({
           ...state,
@@ -12671,7 +12898,8 @@ var LoopOrchestrator = class {
             outputTokens: cycleOutputTokens,
             workspaceFingerprint: fingerprint2,
             verification: evidence
-          }]
+          }],
+          pendingCycle: null
         });
         await this.#options.persistence.save(state);
         await this.#options.persistence.append({
@@ -12689,20 +12917,6 @@ var LoopOrchestrator = class {
           return;
         }
         if (evidence.passed) {
-          let guardWarnings = [];
-          if (this.#options.hallucinationGuard !== void 0) {
-            try {
-              const report = await this.#options.hallucinationGuard.evaluate(request.goal, workerText);
-              if (!report.passed) {
-                const guardReason = report.blockingReasons.join("; ") || "Hallucination guard blocked completion.";
-                state = await this.#terminal(state, "failed", guardReason, now());
-                yield { type: "loop-terminal", loopId, status: "failed", reason: guardReason };
-                return;
-              }
-              guardWarnings = report.warnings;
-            } catch {
-            }
-          }
           const reason = [evidence.summary, ...guardWarnings].filter(Boolean).join("; ");
           state = await this.#terminal(state, "succeeded", reason, now());
           yield { type: "loop-terminal", loopId, status: "succeeded", reason };
@@ -12728,7 +12942,7 @@ ${evidence.summary}`;
             cycleCheckpoint: state.budget.cycleCheckpoint,
             tokenCheckpoint: state.budget.tokenCheckpoint
           };
-          const confirmation = await this.#options.confirmBudget(state, decision.dimensions, request.signal);
+          const confirmation = await this.#options.confirmBudget(state, decision.dimensions, signal);
           if (confirmation === "unavailable") {
             const reason = "Loop budget extension requires user confirmation.";
             state = await this.#terminal(state, "needs_human", reason, now());
@@ -12755,8 +12969,9 @@ ${evidence.summary}`;
         }
       }
     } catch (error) {
-      const status = request.signal.aborted ? "cancelled" : "failed";
-      const reason = request.signal.aborted ? "Loop cancelled by user." : message(error);
+      if (memoryRotationActive()) return;
+      const status = signal.aborted ? "cancelled" : "failed";
+      const reason = signal.aborted ? "Loop cancelled by user." : message(error);
       state = await this.#terminal(state, status, reason, now());
       yield { type: "loop-terminal", loopId, status, reason };
     }
@@ -12774,6 +12989,16 @@ ${evidence.summary}`;
     return state;
   }
 };
+function countTrailingFailureSignature(cycles, signature) {
+  let count = 0;
+  for (let index = cycles.length - 1; index >= 0; index -= 1) {
+    const cycle = cycles[index];
+    if (`${cycle.workspaceFingerprint}
+${cycle.verification.summary}` !== signature) break;
+    count += 1;
+  }
+  return count;
+}
 
 // src/goal/orchestrator.ts
 import { createHash as createHash11 } from "crypto";
@@ -12841,6 +13066,11 @@ var GoalStateSchema = z18.object({
   planPath: z18.string().nullable(),
   verifyRounds: z18.number().int().min(0),
   workerRounds: z18.number().int().min(0),
+  /** Worker output checkpoint used to resume verification without rerunning tools. */
+  pendingVerification: z18.object({
+    round: z18.number().int().positive(),
+    finalResponse: z18.string().max(16e3)
+  }).strict().nullable().optional(),
   lastGaps: z18.array(GapSchema),
   gapFingerprint: z18.string(),
   stallStreak: z18.number().int().min(0),
@@ -12886,6 +13116,7 @@ ${objective}`
   ].join("\n");
 }
 async function runPlanner(options) {
+  await options.onProgress?.();
   const { adapter, model } = options.registry.get(options.modelId);
   const prompt = buildPlannerPrompt(options.objective);
   const messages = [{ role: "user", content: prompt }];
@@ -12897,6 +13128,7 @@ async function runPlanner(options) {
     tools: [],
     ...options.signal === void 0 ? {} : { signal: options.signal }
   })) {
+    await options.onProgress?.();
     if (event.type === "text") text += event.text;
     else if (event.type === "error") throw event.error;
     else if (event.type === "done") {
@@ -13003,7 +13235,7 @@ async function runClassifier(evidence, plan, options) {
   const skepticResults = await Promise.all(
     Array.from(
       { length: n },
-      (_, i) => runOneSkeptic(evidence, plan, i + 1, adapter, model, options.signal)
+      (_, i) => runOneSkeptic(evidence, plan, i + 1, adapter, model, options.signal, options.onProgress)
     )
   );
   const verdicts = [];
@@ -13020,7 +13252,8 @@ async function runClassifier(evidence, plan, options) {
   }
   return aggregate(verdicts);
 }
-async function runOneSkeptic(evidence, plan, index, adapter, model, signal) {
+async function runOneSkeptic(evidence, plan, index, adapter, model, signal, onProgress) {
+  await onProgress?.();
   const prompt = buildSkepticPrompt(evidence, plan, index);
   const messages = [{ role: "user", content: prompt }];
   let text = "";
@@ -13030,6 +13263,7 @@ async function runOneSkeptic(evidence, plan, index, adapter, model, signal) {
     tools: [],
     ...signal === void 0 ? {} : { signal }
   })) {
+    await onProgress?.();
     if (event.type === "text") text += event.text;
     else if (event.type === "error") throw event.error;
     else if (event.type === "done") break;
@@ -13184,7 +13418,7 @@ var GoalOrchestrator = class {
   async *run(request) {
     const timestamp2 = () => this.#options.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
     const createdAt = timestamp2();
-    let state = {
+    const state = {
       id: this.#options.idFactory?.() ?? `goal-${Date.now().toString(36)}`,
       objective: request.goal,
       phase: "planning",
@@ -13193,6 +13427,7 @@ var GoalOrchestrator = class {
       planPath: null,
       verifyRounds: 0,
       workerRounds: 0,
+      pendingVerification: null,
       lastGaps: [],
       gapFingerprint: "",
       stallStreak: 0,
@@ -13201,87 +13436,147 @@ var GoalOrchestrator = class {
       createdAt,
       updatedAt: createdAt
     };
+    yield* this.#execute(state, request.signal);
+  }
+  /**
+   * Continue a goal whose process rotated onto a fresh heap. The persisted
+   * state decides where to pick up; an interrupted round simply runs again.
+   */
+  async *resume(request) {
+    const persistence = this.#options.persistence;
+    if (persistence === void 0 || persistence.load === void 0) {
+      throw new Error("Goal persistence does not support resume");
+    }
+    let state;
+    try {
+      state = await persistence.load(request.goalId);
+    } catch (error) {
+      yield { type: "goal-failed", reason: message(error) };
+      return;
+    }
+    if (state.status !== "active" && state.status !== "not_achieved") {
+      yield { type: "goal-failed", reason: `Goal "${state.id}" is ${state.status}; it cannot be resumed.` };
+      return;
+    }
+    yield { type: "goal-resumed", goalId: state.id, round: resumeStartRound(state) };
+    yield* this.#execute(state, request.signal);
+  }
+  async *#execute(initialState, signal) {
+    const timestamp2 = () => this.#options.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
+    let state = initialState;
     const persistState = async (patch) => {
       state = { ...state, ...patch, updatedAt: timestamp2() };
       await this.#options.persistence?.save(state);
     };
+    const memoryCheckpoint = async () => {
+      await this.#options.onMemoryCheckpoint?.(state.id);
+      if (memoryRotationActive()) throw new Error("Heap rotation requested");
+    };
     await persistState();
     const workspace = this.#options.workspace;
     let plan;
     let planPath;
-    try {
-      request.signal.throwIfAborted();
-      plan = await runPlanner({
-        registry: this.#options.registry,
-        modelId: this.#options.plannerModelId,
-        objective: request.goal,
-        signal: request.signal
-      });
-      planPath = await writePlanFile(workspace, plan);
-      await persistState({ plan, planPath, contractHash: contractHash(request.goal, plan) });
-      yield { type: "goal-plan-created", plan, planPath };
-    } catch (error) {
-      const reason = `Goal planning failed: ${message(error)}`;
-      await persistState({ phase: "complete", status: "failed" });
-      yield { type: "goal-plan-failed", reason };
-      yield { type: "goal-failed", reason };
-      return;
-    }
-    let priorGaps = [];
-    let priorFingerprint = "";
-    let stallStreak = 0;
-    for (let round = 1; round <= this.#options.maxRounds; round++) {
-      request.signal.throwIfAborted();
-      const workerPrompt = buildWorkerPrompt(request.goal, plan, priorGaps, round);
-      await persistState({
-        phase: "executing",
-        status: "active",
-        workerRounds: round,
-        lastGaps: priorGaps,
-        gapFingerprint: priorFingerprint,
-        stallStreak
-      });
-      yield { type: "goal-worker-start", round };
-      let finalResponse = "";
-      let workerError;
+    if (state.plan === null) {
       try {
-        for await (const event of this.#options.runWorker({
-          goal: request.goal,
-          round,
-          workspace,
-          prompt: workerPrompt,
-          priorGaps: formatPriorGaps(priorGaps),
-          signal: request.signal
-        })) {
-          yield { type: "goal-worker-event", round, event };
-          if (event.type === "text") finalResponse += event.text;
-          if (event.type === "error") {
-            workerError = event.error.message;
-            break;
-          }
-        }
+        signal.throwIfAborted();
+        await memoryCheckpoint();
+        plan = await runPlanner({
+          registry: this.#options.registry,
+          modelId: this.#options.plannerModelId,
+          objective: state.objective,
+          signal,
+          onProgress: memoryCheckpoint
+        });
+        planPath = await writePlanFile(workspace, plan);
+        await persistState({ phase: "executing", plan, planPath, contractHash: contractHash(state.objective, plan) });
+        yield { type: "goal-plan-created", plan, planPath };
       } catch (error) {
-        workerError = message(error);
-      }
-      if (workerError !== void 0) {
-        const reason = `Worker error in round ${round}: ${workerError}`;
+        if (memoryRotationActive()) return;
+        const reason = `Goal planning failed: ${message(error)}`;
         await persistState({ phase: "complete", status: "failed" });
+        yield { type: "goal-plan-failed", reason };
         yield { type: "goal-failed", reason };
         return;
       }
-      await persistState({ phase: "verifying", status: "active", verifyRounds: round });
+    } else {
+      plan = state.plan;
+      planPath = state.planPath ?? await writePlanFile(workspace, plan);
+      await persistState({ phase: "executing", status: "active", ...state.planPath === null ? { planPath } : {} });
+    }
+    let priorGaps = state.lastGaps;
+    let priorFingerprint = state.gapFingerprint;
+    let stallStreak = state.stallStreak;
+    const startRound = resumeStartRound(state);
+    for (let round = startRound; round <= this.#options.maxRounds; round++) {
+      signal.throwIfAborted();
+      await this.#options.onRoundBoundary?.(state.id);
+      if (memoryRotationActive()) return;
+      const pendingVerification = state.pendingVerification?.round === round ? state.pendingVerification : void 0;
+      let finalResponse = pendingVerification?.finalResponse ?? "";
+      if (pendingVerification === void 0) {
+        const workerPrompt = buildWorkerPrompt(state.objective, plan, priorGaps, round);
+        await persistState({
+          phase: "executing",
+          status: "active",
+          workerRounds: round,
+          pendingVerification: null,
+          lastGaps: priorGaps,
+          gapFingerprint: priorFingerprint,
+          stallStreak
+        });
+        yield { type: "goal-worker-start", round };
+        let workerError;
+        let workerMemoryPressure = false;
+        try {
+          for await (const event of this.#options.runWorker({
+            goal: state.objective,
+            round,
+            workspace,
+            prompt: workerPrompt,
+            priorGaps: formatPriorGaps(priorGaps),
+            signal
+          })) {
+            yield { type: "goal-worker-event", round, event };
+            if (event.type === "text") finalResponse = `${finalResponse}${event.text}`.slice(-16e3);
+            if (event.type === "error") {
+              workerError = event.error.message;
+              if (event.error.code === "memory_pressure") workerMemoryPressure = true;
+              break;
+            }
+          }
+        } catch (error) {
+          if (memoryRotationActive()) return;
+          workerError = message(error);
+        }
+        if (workerMemoryPressure) return;
+        if (workerError !== void 0) {
+          const reason = `Worker error in round ${round}: ${workerError}`;
+          await persistState({ phase: "complete", status: "failed" });
+          yield { type: "goal-failed", reason };
+          return;
+        }
+        await persistState({
+          phase: "verifying",
+          status: "active",
+          pendingVerification: { round, finalResponse }
+        });
+      }
       yield { type: "goal-verification-start", round };
-      const hostVerification = await this.#options.verifyHost?.(request.signal);
+      await this.#options.onMemoryCheckpoint?.(state.id);
+      if (memoryRotationActive()) return;
+      const hostVerification = await this.#options.verifyHost?.(signal);
+      await this.#options.onMemoryCheckpoint?.(state.id);
+      if (memoryRotationActive()) return;
       const evidence = await collectEvidence(
         workspace,
-        request.goal,
+        state.objective,
         finalResponse.slice(-4e3),
         // Last 4000 chars of response
         formatPriorGaps(priorGaps),
         state.contractHash,
         hostVerification
       );
-      await persistState({ evidenceRounds: [...state.evidenceRounds, {
+      await persistState({ evidenceRounds: [...state.evidenceRounds.filter((item) => item.round !== round), {
         round,
         workspaceDiffHash: evidence.workspaceDiffHash,
         ...hostVerification === void 0 ? {} : { hostVerification }
@@ -13305,14 +13600,17 @@ var GoalOrchestrator = class {
           modelId: this.#options.classifierModelId,
           skepticCount: this.#options.skepticCount,
           workspace,
-          signal: request.signal
+          signal,
+          onProgress: memoryCheckpoint
         });
       } catch (error) {
+        if (memoryRotationActive()) return;
         outcome = {
           type: "blocked",
           reason: `Classifier infrastructure error: ${message(error)}`
         };
       }
+      await persistState({ verifyRounds: round, pendingVerification: null });
       yield {
         type: "goal-verdict",
         round,
@@ -13372,6 +13670,12 @@ var GoalOrchestrator = class {
 function contractHash(objective, plan) {
   return createHash11("sha256").update(JSON.stringify({ objective, plan })).digest("hex");
 }
+function resumeStartRound(state) {
+  if (state.pendingVerification !== void 0 && state.pendingVerification !== null) {
+    return state.pendingVerification.round;
+  }
+  return state.verifyRounds >= state.workerRounds ? state.workerRounds + 1 : Math.max(state.workerRounds, 1);
+}
 async function writePlanFile(workspace, plan) {
   const dir = join17(workspace, ".flavor");
   const planPath = join17(dir, "goal-plan.md");
@@ -13451,7 +13755,7 @@ function formatPriorGaps(gaps) {
 // src/goal/store.ts
 import { constants as constants4 } from "fs";
 import { randomUUID as randomUUID11 } from "crypto";
-import { lstat as lstat7, mkdir as mkdir11, open as open6, rename as rename4, rm as rm4 } from "fs/promises";
+import { lstat as lstat7, mkdir as mkdir11, open as open6, readFile as readFile11, rename as rename4, rm as rm4, stat as stat6 } from "fs/promises";
 import { dirname as dirname10, join as join18, relative as relative11, resolve as resolve14, sep as sep11 } from "path";
 var DEFAULT_MAX_BYTES = 1024 * 1024;
 var GoalStore = class {
@@ -13488,6 +13792,28 @@ var GoalStore = class {
       await rm4(temporary, { force: true }).catch(() => void 0);
     }
   }
+  /** Reload a persisted goal so a rotated process can resume it. */
+  async load(goalId) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(goalId)) {
+      throw new Error(`Goal "${goalId}" was not found`);
+    }
+    await assertNoSymlink(this.#workspace, dirname10(this.#root));
+    await assertNoSymlink(this.#workspace, this.#root);
+    const target = join18(this.#root, `${goalId}.json`);
+    try {
+      const metadata = await stat6(target);
+      if (!metadata.isFile() || metadata.size > this.#maxBytes) {
+        throw new Error("Goal state is not a bounded regular file");
+      }
+      const raw = await readFile11(target, "utf8");
+      return GoalStateSchema.parse(JSON.parse(raw));
+    } catch (error) {
+      if (isCode3(error, "ENOENT")) throw new Error(`Goal "${goalId}" was not found`);
+      const quarantine = `${target}.corrupt-${Date.now()}-${randomUUID11().slice(0, 8)}`;
+      await rename4(target, quarantine).catch(() => void 0);
+      throw new Error(`Goal "${goalId}" is corrupt and was quarantined`);
+    }
+  }
 };
 async function assertNoSymlink(root, target) {
   let cursor = resolve14(target);
@@ -13514,7 +13840,7 @@ function isCode3(error, code) {
 }
 
 // src/loop/isolation.ts
-import { appendFile as appendFile2, mkdir as mkdir12, readFile as readFile11 } from "fs/promises";
+import { appendFile as appendFile2, mkdir as mkdir12, readFile as readFile12 } from "fs/promises";
 import { join as join19, resolve as resolve15 } from "path";
 var CODE_CHANGE = /\b(?:fix|implement|add|update|change|modify|refactor|build|create|remove|delete|write|migrate)\b|修复|实现|添加|更新|修改|重构|创建|删除|迁移/i;
 var READ_ONLY = /\b(?:review|analy[sz]e|inspect|explain|research|investigate|audit|summari[sz]e|report)\b|调研|分析|审查|检查|解释|研究|总结|报告/i;
@@ -13574,7 +13900,7 @@ async function ensureWorktreeDirectoryIgnored(root) {
   await mkdir12(infoDirectory, { recursive: true });
   let existing = "";
   try {
-    existing = await readFile11(excludePath, "utf8");
+    existing = await readFile12(excludePath, "utf8");
   } catch (error) {
     if (!(typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT")) throw error;
   }
@@ -13585,7 +13911,7 @@ async function ensureWorktreeDirectoryIgnored(root) {
 
 // src/loop/store.ts
 import { constants as constants5 } from "fs";
-import { lstat as lstat8, mkdir as mkdir13, open as open7, readFile as readFile12, realpath as realpath5, rename as rename5, rm as rm5, stat as stat6 } from "fs/promises";
+import { lstat as lstat8, mkdir as mkdir13, open as open7, readFile as readFile13, realpath as realpath5, rename as rename5, rm as rm5, stat as stat7 } from "fs/promises";
 import { dirname as dirname11, join as join20, relative as relative12, resolve as resolve16, sep as sep12 } from "path";
 import { randomUUID as randomUUID12 } from "crypto";
 var LOOP_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
@@ -13636,9 +13962,9 @@ var LoopStore = class {
     const directory = await this.#safeExisting(loopId);
     const target = join20(directory, "state.json");
     try {
-      const metadata = await stat6(target);
+      const metadata = await stat7(target);
       if (!metadata.isFile() || metadata.size > this.#maxBytes) throw new Error("Loop state is not a bounded regular file");
-      const raw = await readFile12(target, "utf8");
+      const raw = await readFile13(target, "utf8");
       const state = LoopStateSchema.parse(JSON.parse(raw));
       await this.#assertWorkspace(state.workspace);
       return state;
@@ -13727,7 +14053,7 @@ function isCode4(error, code) {
 }
 
 // src/loop/verifier.ts
-import { readFile as readFile13 } from "fs/promises";
+import { readFile as readFile14 } from "fs/promises";
 import { join as join21 } from "path";
 var SCRIPT_PRIORITY = ["test", "typecheck", "lint", "build", "smoke:install"];
 async function inferVerificationPlan(workspace) {
@@ -13806,7 +14132,7 @@ function isUnconditionalPassThrough(script) {
 }
 async function optionalText(path) {
   try {
-    return await readFile13(path, "utf8");
+    return await readFile14(path, "utf8");
   } catch (error) {
     if (isCode5(error, "ENOENT")) return void 0;
     throw error;
@@ -13827,7 +14153,7 @@ function isCode5(error, code) {
 
 // src/models/anthropic.ts
 import Anthropic from "@anthropic-ai/sdk";
-import { readFile as readFile14 } from "fs/promises";
+import { readFile as readFile15 } from "fs/promises";
 
 // src/utils/json.ts
 function safeParseJson(input) {
@@ -14064,7 +14390,7 @@ var AnthropicModelAdapter = class {
             source: {
               type: "base64",
               media_type: block.mediaType,
-              data: (await readFile14(block.source.path)).toString("base64")
+              data: (await readFile15(block.source.path)).toString("base64")
             }
           }));
           if (message2.cacheBreakpoint && Array.isArray(content) && content.length > 0) {
@@ -14284,7 +14610,7 @@ function resolveCacheProfile(input) {
 
 // src/models/openai.ts
 import OpenAI from "openai";
-import { readFile as readFile15 } from "fs/promises";
+import { readFile as readFile16 } from "fs/promises";
 async function toInput(message2) {
   if (message2.role === "tool") {
     if (!message2.toolCallId) throw new Error("Tool messages require toolCallId");
@@ -14296,7 +14622,7 @@ async function toInput(message2) {
   }
   const content = typeof message2.content === "string" ? message2.content : await Promise.all(message2.content.map(async (block) => block.type === "text" ? { type: "input_text", text: block.text } : {
     type: "input_image",
-    image_url: `data:${block.mediaType};base64,${(await readFile15(block.source.path)).toString("base64")}`,
+    image_url: `data:${block.mediaType};base64,${(await readFile16(block.source.path)).toString("base64")}`,
     detail: "auto"
   }));
   return [
@@ -15127,7 +15453,7 @@ function isStoredToken(value) {
 }
 
 // src/permissions/policy.ts
-import { readFile as readFile16 } from "fs/promises";
+import { readFile as readFile17 } from "fs/promises";
 import { join as join22, resolve as resolve18 } from "path";
 import { z as z20 } from "zod";
 var DecisionSchema2 = z20.enum(["allow", "ask", "deny"]);
@@ -15173,7 +15499,7 @@ async function loadPermissionPolicy(options) {
   for (const source of sources) {
     let raw;
     try {
-      raw = await readFile16(source.path, "utf8");
+      raw = await readFile17(source.path, "utf8");
     } catch (error) {
       if (isCode6(error, "ENOENT")) continue;
       throw error;
@@ -15939,7 +16265,7 @@ function createSkillResourceTool(registry) {
 
 // src/session/store.ts
 import { constants as constants7 } from "fs";
-import { lstat as lstat10, mkdir as mkdir14, open as open8, readFile as readFile17, readdir as readdir7, realpath as realpath7, rename as rename6, rm as rm6, stat as stat7 } from "fs/promises";
+import { lstat as lstat10, mkdir as mkdir14, open as open8, readFile as readFile18, readdir as readdir7, realpath as realpath7, rename as rename6, rm as rm6, stat as stat8 } from "fs/promises";
 import { basename as basename4, dirname as dirname13, join as join23, relative as relative14, resolve as resolve20, sep as sep14 } from "path";
 import { randomUUID as randomUUID13 } from "crypto";
 import { z as z22 } from "zod";
@@ -16137,7 +16463,7 @@ var SessionStore = class {
           release: async () => {
             if (released) return;
             try {
-              if (await readFile17(path, "utf8") === token) await rm6(path, { force: true });
+              if (await readFile18(path, "utf8") === token) await rm6(path, { force: true });
             } catch (error) {
               if (!isCode7(error, "ENOENT")) throw error;
             }
@@ -16331,14 +16657,14 @@ function storedSessionVersion(raw) {
 }
 async function reclaimStaleSessionLock(path) {
   try {
-    const token = await readFile17(path, "utf8");
-    const metadata = await stat7(path);
+    const token = await readFile18(path, "utf8");
+    const metadata = await stat8(path);
     const owner2 = parseSessionLockOwner(token);
     if (owner2 !== void 0 && isProcessAlive(owner2)) return owner2;
     if (owner2 === void 0 && Date.now() - metadata.mtimeMs <= INVALID_SESSION_LOCK_STALE_MS) {
       throw new Error(`Session writer lock ${path} is incomplete or invalid; retry after the owning process exits`);
     }
-    if (await readFile17(path, "utf8") !== token) return void 0;
+    if (await readFile18(path, "utf8") !== token) return void 0;
     const stale = `${path}.stale-${process.pid}-${randomUUID13()}`;
     try {
       await rename6(path, stale);
@@ -16371,10 +16697,10 @@ function isProcessAlive(pid) {
   }
 }
 async function boundedRead(path, maxBytes) {
-  const metadata = await stat7(path);
+  const metadata = await stat8(path);
   if (!metadata.isFile()) throw new Error("Session path is not a regular file");
   if (metadata.size > maxBytes) throw new Error(`Session exceeds maximum read size of ${maxBytes} bytes`);
-  const value = await readFile17(path);
+  const value = await readFile18(path);
   if (value.byteLength > maxBytes) throw new Error(`Session exceeds maximum read size of ${maxBytes} bytes`);
   return value.toString("utf8");
 }
@@ -16564,11 +16890,70 @@ function sanitize2(input, seen = /* @__PURE__ */ new WeakSet()) {
   return output;
 }
 
+// src/utils/rotation-census.ts
+import { mkdirSync as mkdirSync3, readdirSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join24 } from "path";
+import { writeHeapSnapshot } from "v8";
+var CENSUS_PREFIX = "rotation-census-";
+var SNAPSHOT_PREFIX = "heap-";
+var KEEP_CENSUS_FILES = 5;
+var KEEP_SNAPSHOT_FILES = 2;
+function censusHeapBlock(reading) {
+  const usage = process.memoryUsage();
+  const mb = (bytes) => Math.round(bytes / 1048576);
+  return {
+    heapUsedMb: mb(reading.heapUsed),
+    heapLimitMb: mb(reading.heapLimit),
+    rawRatio: Number(reading.ratio.toFixed(3)),
+    ...reading.verifiedRatio === void 0 ? {} : { verifiedRatio: Number(reading.verifiedRatio.toFixed(3)) },
+    gcVerified: reading.gcVerified,
+    rssMb: mb(usage.rss),
+    externalMb: mb(usage.external),
+    arrayBuffersMb: mb(usage.arrayBuffers),
+    ...reading.memoryLimit === void 0 ? {} : { memoryLimitMb: mb(reading.memoryLimit) },
+    ...reading.rssRatio === void 0 ? {} : { rssRatio: Number(reading.rssRatio.toFixed(3)) }
+  };
+}
+function writeRotationCensus(workspace, census) {
+  try {
+    const directory = join24(workspace, ".flavor", "tmp");
+    mkdirSync3(directory, { recursive: true });
+    const path = join24(directory, `${CENSUS_PREFIX}${Date.now()}.json`);
+    writeFileSync2(path, `${JSON.stringify(census, null, 2)}
+`, { encoding: "utf8", mode: 384 });
+    prune(directory, CENSUS_PREFIX, ".json", KEEP_CENSUS_FILES);
+    return path;
+  } catch {
+    return void 0;
+  }
+}
+function writeRotationHeapSnapshot(workspace) {
+  try {
+    const directory = join24(workspace, ".flavor", "tmp");
+    mkdirSync3(directory, { recursive: true });
+    const path = join24(directory, `${SNAPSHOT_PREFIX}${Date.now()}.heapsnapshot`);
+    writeHeapSnapshot(path);
+    prune(directory, SNAPSHOT_PREFIX, ".heapsnapshot", KEEP_SNAPSHOT_FILES);
+    return path;
+  } catch {
+    return void 0;
+  }
+}
+function prune(directory, prefix, suffix, keep) {
+  const stale = readdirSync(directory).filter((name) => name.startsWith(prefix) && name.endsWith(suffix)).sort().slice(0, -keep);
+  for (const name of stale) {
+    try {
+      unlinkSync2(join24(directory, name));
+    } catch {
+    }
+  }
+}
+
 // src/sleep/organizer.ts
 import { constants as constants8 } from "fs";
 import { randomUUID as randomUUID14 } from "crypto";
 import { lstat as lstat11, mkdir as mkdir15, open as open9, readdir as readdir8, realpath as realpath8, rename as rename7, rm as rm7 } from "fs/promises";
-import { isAbsolute as isAbsolute10, join as join24, relative as relative15, resolve as resolve21, sep as sep15 } from "path";
+import { isAbsolute as isAbsolute10, join as join25, relative as relative15, resolve as resolve21, sep as sep15 } from "path";
 import { z as z23 } from "zod";
 var DateKeySchema = z23.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var ReviewSchema = z23.object({
@@ -16623,7 +17008,7 @@ var ProjectSleepOrganizer = class {
   #generate;
   constructor(options) {
     this.#workspace = resolve21(options.workspace);
-    this.#sleepDirectory = join24(this.#workspace, ".flavor", "sleep");
+    this.#sleepDirectory = join25(this.#workspace, ".flavor", "sleep");
     this.#sessions = options.sessions ?? new SessionStore({ workspace: this.#workspace });
     this.#generate = options.generate;
   }
@@ -16632,7 +17017,7 @@ var ProjectSleepOrganizer = class {
     signal.throwIfAborted();
     await this.#prepareDirectory();
     if (await this.#hasReport(date)) return { status: "exists", date };
-    const lockPath = join24(this.#sleepDirectory, `.${date}.lock`);
+    const lockPath = join25(this.#sleepDirectory, `.${date}.lock`);
     let lock;
     try {
       lock = await open9(lockPath, constants8.O_CREAT | constants8.O_EXCL | constants8.O_WRONLY, 384);
@@ -16667,7 +17052,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
       }
       if (review === void 0) throw lastError;
       const filename2 = `${date}-${filenameSummary(review.title)}.md`;
-      const path = join24(this.#sleepDirectory, filename2);
+      const path = join25(this.#sleepDirectory, filename2);
       const markdown = renderSleepReport(date, review, documents);
       await this.#atomicWrite(path, markdown);
       return { status: "written", date, path, sessionCount: documents.length };
@@ -16709,7 +17094,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
     });
   }
   async #prepareDirectory() {
-    const flavorDirectory = join24(this.#workspace, ".flavor");
+    const flavorDirectory = join25(this.#workspace, ".flavor");
     await assertNotSymlink(flavorDirectory);
     await mkdir15(flavorDirectory, { recursive: true, mode: 448 });
     await assertNotSymlink(this.#sleepDirectory);
@@ -16723,7 +17108,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
     return (await readdir8(this.#sleepDirectory, { withFileTypes: true })).some((entry2) => entry2.isFile() && entry2.name.startsWith(prefix) && entry2.name.endsWith(".md"));
   }
   async #atomicWrite(path, content) {
-    const temporary = join24(this.#sleepDirectory, `.${randomUUID14()}.tmp`);
+    const temporary = join25(this.#sleepDirectory, `.${randomUUID14()}.tmp`);
     let handle;
     try {
       handle = await open9(temporary, constants8.O_CREAT | constants8.O_EXCL | constants8.O_WRONLY, 384);
@@ -17097,7 +17482,7 @@ function computeSessionStats(documents) {
 
 // src/tools/files.ts
 import { constants as constants9 } from "fs";
-import { mkdir as mkdir16, open as open10, readFile as readFile18, realpath as realpath9, rename as rename8, rm as rm8, stat as stat8 } from "fs/promises";
+import { mkdir as mkdir16, open as open10, readFile as readFile19, realpath as realpath9, rename as rename8, rm as rm8, stat as stat9 } from "fs/promises";
 import { dirname as dirname14, isAbsolute as isAbsolute11, relative as relative16, resolve as resolve22, sep as sep16 } from "path";
 import { randomUUID as randomUUID15 } from "crypto";
 import { z as z24 } from "zod";
@@ -17250,7 +17635,7 @@ function createReadTool(workspace, options = {}) {
     execute: async (input, signal) => {
       abortIfNeeded(signal);
       const path = await guard.existing(input.path);
-      const info = await stat8(path);
+      const info = await stat9(path);
       const maxBytes = input.maxBytes ?? MAX_READ_BYTES;
       if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0 || maxBytes > MAX_READ_BYTES) {
         throw new Error(`maxBytes must be a positive integer no greater than ${MAX_READ_BYTES}`);
@@ -17459,7 +17844,7 @@ async function atomicWrite(path, content, signal, expectedVersion) {
   const temporary = `${path}.${randomUUID15()}.tmp`;
   let mode;
   try {
-    mode = (await stat8(path)).mode & 511;
+    mode = (await stat9(path)).mode & 511;
   } catch (error) {
     if (!isMissing3(error)) throw error;
   }
@@ -17482,7 +17867,7 @@ async function atomicWrite(path, content, signal, expectedVersion) {
   }
 }
 async function readText(path) {
-  const contents = await readFile18(path);
+  const contents = await readFile19(path);
   if (isBinary(contents)) throw new Error("Cannot edit binary file as text");
   return decodeFileText(contents);
 }
@@ -17508,7 +17893,7 @@ async function assertMutationVersion(path, expected, observations) {
 }
 async function fileVersion(path) {
   try {
-    return versionOfStat(await stat8(path));
+    return versionOfStat(await stat9(path));
   } catch (error) {
     if (isMissing3(error)) return ABSENT_VERSION;
     throw error;
@@ -17519,7 +17904,7 @@ function versionOfStat(info) {
 }
 async function readOptionalPresentationText(path) {
   try {
-    const contents = await readFile18(path);
+    const contents = await readFile19(path);
     return isBinary(contents) ? { exists: true } : { exists: true, text: contents.toString("utf8") };
   } catch (error) {
     return isMissing3(error) ? { exists: false } : { exists: true };
@@ -18171,7 +18556,7 @@ function charset(contentType) {
 // src/tools/lsp.ts
 import { spawn as spawn8 } from "child_process";
 import { existsSync as existsSync5 } from "fs";
-import { access as access2, constants as constants10, readFile as readFile19 } from "fs/promises";
+import { access as access2, constants as constants10, readFile as readFile20 } from "fs/promises";
 import { basename as basename5, dirname as dirname15, extname as extname2, isAbsolute as isAbsolute12, relative as relative17, resolve as resolve23, sep as sep17 } from "path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "url";
 import { z as z26 } from "zod";
@@ -18365,7 +18750,7 @@ var LspConnection = class {
     const url = new URL(uri);
     if (url.protocol !== "file:") return;
     const filePath = fileURLToPath2(url);
-    const text = await readFile19(filePath, "utf8");
+    const text = await readFile20(filePath, "utf8");
     const current = this.#documents.get(uri);
     if (current === void 0) {
       this.#documents.set(uri, { text, version: 1 });
@@ -18731,19 +19116,19 @@ async function changeSummary(workspace) {
   };
 }
 async function stagedDiff(workspace, maxChars = 96e3) {
-  const stat11 = await git2(workspace, ["diff", "--staged", "--stat"]);
+  const stat12 = await git2(workspace, ["diff", "--staged", "--stat"]);
   const diff = await git2(workspace, ["diff", "--staged", "--no-ext-diff", "--no-color"]);
   if (!diff.ok) throw gitFailure(diff, "diff --staged");
   const text = diff.stdout;
   return {
     diff: text.length > maxChars ? `${text.slice(0, maxChars)}
 \u2026[diff truncated]` : text,
-    stat: stat11.stdout.trim(),
+    stat: stat12.stdout.trim(),
     truncated: text.length > maxChars
   };
 }
 async function uncommittedDiff(workspace, maxChars = 96e3) {
-  const stat11 = await git2(workspace, ["diff", "HEAD", "--stat"]);
+  const stat12 = await git2(workspace, ["diff", "HEAD", "--stat"]);
   const diff = await git2(workspace, ["diff", "HEAD", "--no-ext-diff", "--no-color"]);
   if (!diff.ok && !diff.stderr.includes("unknown revision")) throw gitFailure(diff, "diff HEAD");
   const summary2 = await changeSummary(workspace);
@@ -18751,7 +19136,7 @@ async function uncommittedDiff(workspace, maxChars = 96e3) {
   return {
     diff: text.length > maxChars ? `${text.slice(0, maxChars)}
 \u2026[diff truncated]` : text,
-    stat: stat11.stdout.trim(),
+    stat: stat12.stdout.trim(),
     untracked: summary2.untrackedFiles
   };
 }
@@ -19048,17 +19433,17 @@ ${explanation}` : "";
 }
 
 // src/desktop/astgraph-service.ts
-import { stat as stat9 } from "fs/promises";
+import { stat as stat10 } from "fs/promises";
 import { createRequire as nodeCreateRequire } from "module";
-import { join as join25, resolve as resolve24 } from "path";
+import { join as join26, resolve as resolve24 } from "path";
 var FIELDS = "id, kind, name, qualified_name, file_path, language, start_line, end_line, signature";
 var DesktopAstGraphService = class {
   #path;
   constructor(workspace) {
-    this.#path = join25(resolve24(workspace), ".flavor", "astgraph", "index.db");
+    this.#path = join26(resolve24(workspace), ".flavor", "astgraph", "index.db");
   }
   async status() {
-    if ((await stat9(this.#path).catch(() => void 0))?.isFile() !== true) {
+    if ((await stat10(this.#path).catch(() => void 0))?.isFile() !== true) {
       return { available: false, path: this.#path, files: 0, nodes: 0, edges: 0 };
     }
     return this.#read((db) => {
@@ -19338,8 +19723,8 @@ function createTodoWriteTool() {
 
 // src/tools/managed.ts
 import { randomUUID as randomUUID16 } from "crypto";
-import { link as link2, lstat as lstat12, mkdir as mkdir17, readFile as readFile20, readdir as readdir9, unlink as unlink5, writeFile as writeFile10 } from "fs/promises";
-import { dirname as dirname16, join as join26, resolve as resolve26 } from "path";
+import { link as link2, lstat as lstat12, mkdir as mkdir17, readFile as readFile21, readdir as readdir9, unlink as unlink5, writeFile as writeFile10 } from "fs/promises";
+import { dirname as dirname16, join as join27, resolve as resolve26 } from "path";
 import { z as z31 } from "zod";
 var MANAGED_TOOL_VERSION = 1;
 var MAX_RECORD_BYTES = 256 * 1024;
@@ -19382,8 +19767,8 @@ var ManagedToolStore = class {
   #diagnostics = [];
   constructor(options) {
     this.#workspace = resolve26(options.workspace);
-    this.#projectRoot = join26(this.#workspace, ".flavor", "tools");
-    this.#globalRoot = join26(resolve26(options.home), ".flavor-code", "tools");
+    this.#projectRoot = join27(this.#workspace, ".flavor", "tools");
+    this.#globalRoot = join27(resolve26(options.home), ".flavor-code", "tools");
     this.#now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   }
   get diagnostics() {
@@ -19430,7 +19815,7 @@ var ManagedToolStore = class {
       version: MANAGED_TOOL_VERSION,
       createdAt: this.#now()
     });
-    const path = join26(this.directory(input.scope), filename(input.name));
+    const path = join27(this.directory(input.scope), filename(input.name));
     const definition = compileDefinition(record, input.scope, this.#workspace);
     await writeExclusive(path, `${JSON.stringify(record, void 0, 2)}
 `);
@@ -19455,7 +19840,7 @@ var ManagedToolStore = class {
     if (!parsed.success) return [];
     const matches = this.#matching(parsed.data.name).filter((entry2) => parsed.data.scope === void 0 || entry2.scope === parsed.data.scope);
     if (matches.length > 0) return matches.map((entry2) => entry2.path);
-    return [join26(this.directory(parsed.data.scope ?? "project"), filename(parsed.data.name))];
+    return [join27(this.directory(parsed.data.scope ?? "project"), filename(parsed.data.name))];
   }
   async #loadDirectory(scope2) {
     const root = this.directory(scope2);
@@ -19468,12 +19853,12 @@ var ManagedToolStore = class {
       return;
     }
     for (const name of names) {
-      const path = join26(root, name);
+      const path = join27(root, name);
       try {
         const info = await lstat12(path);
         if (!info.isFile() || info.isSymbolicLink()) throw new Error("Managed tool record must be a regular file");
         if (info.size > MAX_RECORD_BYTES) throw new Error(`Managed tool record exceeds ${MAX_RECORD_BYTES} bytes`);
-        const record = ManagedToolRecordSchema.parse(JSON.parse(await readFile20(path, "utf8")));
+        const record = ManagedToolRecordSchema.parse(JSON.parse(await readFile21(path, "utf8")));
         if (record.scope !== scope2) throw new Error(`Managed tool record scope must match its ${scope2} directory`);
         const key = scopedKey(scope2, record.name);
         if (this.#entries.has(key)) throw new Error(`Duplicate managed tool name in ${scope2} scope: ${record.name}`);
@@ -20386,8 +20771,8 @@ ${total}`;
 
 // src/memory/store.ts
 import { createHash as createHash16 } from "crypto";
-import { readFile as readFile21, rm as rm9 } from "fs/promises";
-import { resolve as resolve27, join as join27, relative as relative19, sep as sep19 } from "path";
+import { readFile as readFile22, rm as rm9 } from "fs/promises";
+import { resolve as resolve27, join as join28, relative as relative19, sep as sep19 } from "path";
 
 // src/memory/similarity.ts
 function normalizeForSimilarity(value) {
@@ -20490,9 +20875,9 @@ var MemoryStore = class {
     if (!Number.isSafeInteger(options.maxEntries) || options.maxEntries < 1) throw new Error("maxEntries must be an integer of at least 1");
     if (!Number.isSafeInteger(options.maxEntryChars) || options.maxEntryChars < 1) throw new Error("maxEntryChars must be an integer of at least 1");
     this.workspace = resolve27(options.workspace);
-    this.#memoryRoot = join27(this.workspace, ".flavor", "memory");
-    this.path = join27(this.#memoryRoot, "MEMORY.md");
-    this.#behaviorPath = join27(this.#memoryRoot, "behavior.json");
+    this.#memoryRoot = join28(this.workspace, ".flavor", "memory");
+    this.path = join28(this.#memoryRoot, "MEMORY.md");
+    this.#behaviorPath = join28(this.#memoryRoot, "behavior.json");
     this.#maxEntries = options.maxEntries;
     this.#maxEntryChars = options.maxEntryChars;
   }
@@ -20710,7 +21095,7 @@ var MemoryStore = class {
     });
   }
   async #readTaskItem(reference) {
-    const document = decodeTask(await readFile21(this.#resolveContentPath(reference.contentPath), "utf8"));
+    const document = decodeTask(await readFile22(this.#resolveContentPath(reference.contentPath), "utf8"));
     return document.items.find((item) => item.id === reference.id)?.content ?? reference.summary;
   }
   #resolveContentPath(contentPath) {
@@ -21186,8 +21571,8 @@ function createExecutionEnvironment(workspace, config) {
 }
 
 // src/ide/client.ts
-import { readFile as readFile22, readdir as readdir10, stat as stat10 } from "fs/promises";
-import { basename as basename6, join as join28, relative as relative20, resolve as resolve28, sep as sep20 } from "path";
+import { readFile as readFile23, readdir as readdir10, stat as stat11 } from "fs/promises";
+import { basename as basename6, join as join29, relative as relative20, resolve as resolve28, sep as sep20 } from "path";
 var FlavorIdeClient = class {
   #workspace;
   #home;
@@ -21283,7 +21668,7 @@ var FlavorIdeClient = class {
       };
       if (await this.#healthy(configured)) return configured;
     }
-    const directory = join28(this.#home, ".flavor-code", "ide");
+    const directory = join29(this.#home, ".flavor-code", "ide");
     let entries;
     try {
       entries = (await readdir10(directory)).filter((name) => name.endsWith(".lock"));
@@ -21291,9 +21676,9 @@ var FlavorIdeClient = class {
       return void 0;
     }
     const candidates = (await Promise.all(entries.map(async (name) => {
-      const path = join28(directory, name);
+      const path = join29(directory, name);
       try {
-        const [contents, info] = await Promise.all([readFile22(path, "utf8"), stat10(path)]);
+        const [contents, info] = await Promise.all([readFile23(path, "utf8"), stat11(path)]);
         const lock = parseLockfile(contents);
         return lock === void 0 ? void 0 : { lock, modified: info.mtimeMs };
       } catch {
@@ -21412,6 +21797,7 @@ function relativeDisplay(workspace, filePath) {
 
 // src/jobs/registry.ts
 import { randomUUID as randomUUID17 } from "crypto";
+var OUTPUT_SLICE_SLACK_CHARS = 64 * 1024;
 var JobRegistry = class {
   #jobs = /* @__PURE__ */ new Map();
   #maxOutputChars;
@@ -21440,7 +21826,8 @@ var JobRegistry = class {
       updatedAt: now,
       outputChars: 0,
       truncated: false,
-      output: "",
+      chunks: [],
+      windowChars: 0,
       outputStart: 0,
       settle,
       done
@@ -21451,11 +21838,16 @@ var JobRegistry = class {
       id,
       append: (text) => {
         if (record.state !== "running" || text === "") return;
-        record.output += text;
+        record.chunks.push(text);
+        record.windowChars += text.length;
         record.outputChars += text.length;
-        if (record.output.length > this.#maxOutputChars) {
-          const removed = record.output.length - this.#maxOutputChars;
-          record.output = record.output.slice(removed);
+        if (record.outputChars > this.#maxOutputChars) record.truncated = true;
+        if (record.windowChars > this.#maxOutputChars + OUTPUT_SLICE_SLACK_CHARS) {
+          const joined = record.chunks.join("");
+          const kept = joined.slice(joined.length - this.#maxOutputChars);
+          const removed = joined.length - kept.length;
+          record.chunks = [kept];
+          record.windowChars = kept.length;
           record.outputStart += removed;
           record.truncated = true;
         }
@@ -21476,8 +21868,20 @@ var JobRegistry = class {
   }
   read(id, owner2, cursor = 0) {
     const job = this.#owned(id, owner2);
-    const effective = Math.max(cursor, job.outputStart);
-    return { ...snapshot2(job), output: job.output.slice(effective - job.outputStart), cursor: job.outputStart + job.output.length };
+    const window = job.chunks.join("");
+    const dropped = Math.max(0, window.length - this.#maxOutputChars);
+    const effective = Math.max(cursor, job.outputStart + dropped);
+    return { ...snapshot2(job), output: window.slice(effective - job.outputStart), cursor: job.outputStart + window.length };
+  }
+  /** Retained sizes for the rotation census. */
+  census() {
+    let windowChars = 0;
+    let running = 0;
+    for (const job of this.#jobs.values()) {
+      windowChars += job.windowChars;
+      if (job.state === "running") running += 1;
+    }
+    return { jobs: this.#jobs.size, running, windowChars };
   }
   async wait(id, owner2, signal) {
     signal?.throwIfAborted();
@@ -22705,8 +23109,8 @@ async function createProductionRuntime(options) {
   const registeredProviders = registration.registered;
   let effectiveLlm = registration.effectiveLlm;
   const pluginHost = new PluginHost({
-    globalPluginDirs: [join29(home, ".flavor-code", "plugins")],
-    projectPluginDirs: [join29(workspace, ".flavor", "plugins")],
+    globalPluginDirs: [join30(home, ".flavor-code", "plugins")],
+    projectPluginDirs: [join30(workspace, ".flavor", "plugins")],
     config,
     // Existing project plugins (including astgraph and superharness) use Node.js
     // built-ins. The Worker/vm sandbox deliberately blocks those imports, so it
@@ -22815,7 +23219,7 @@ async function createProductionRuntime(options) {
       const address = palSocketAddress({
         platform: process.platform,
         userScope: home,
-        runtimeDir: join29(tmpdir4(), `flavor-code-pals-${createHash18("sha256").update(home).digest("hex").slice(0, 16)}`)
+        runtimeDir: join30(tmpdir4(), `flavor-code-pals-${createHash18("sha256").update(home).digest("hex").slice(0, 16)}`)
       });
       const baseCollaborationClient = collaboration.client ?? collaboration.createClient?.({
         instanceId: collaboration.instanceId,
@@ -22926,8 +23330,8 @@ async function createProductionRuntime(options) {
       diagnostics.push(`MCP servers could not start: ${message(error)}`);
     });
     const skills = new SkillRegistry({
-      globalRoots: [join29(home, ".flavor-code", "skills")],
-      projectRoots: [join29(workspace, ".flavor", "skills"), ...pluginSkillRoots],
+      globalRoots: [join30(home, ".flavor-code", "skills")],
+      projectRoots: [join30(workspace, ".flavor", "skills"), ...pluginSkillRoots],
       authorizeResource: async () => true,
       disabledNames: config.skills.disabled
     });
@@ -22935,7 +23339,7 @@ async function createProductionRuntime(options) {
     skillsReady.catch(() => void 0);
     tools.push(createSkillTool(skills), createSkillResourceTool(skills));
     if (options.extraTools !== void 0) tools.push(...options.extraTools);
-    const flavor = await optionalText2(join29(workspace, "FLAVOR.md"));
+    const flavor = await optionalText2(join30(workspace, "FLAVOR.md"));
     const instructionBaseline = await workspaceInstructions.baseline();
     let memoryContext;
     if (memoryStore !== void 0) {
@@ -23520,7 +23924,7 @@ async function createProductionRuntime(options) {
         evolveService.toolDefinition(),
         ...mcpTools
       ];
-      const loopFlavor = await optionalText2(join29(input.workspace, "FLAVOR.md"));
+      const loopFlavor = await optionalText2(join30(input.workspace, "FLAVOR.md"));
       const loopInstructionBaseline = await loopInstructions.baseline();
       const loopEnvironment = createPromptEnvironment({
         now: /* @__PURE__ */ new Date(),
@@ -23628,12 +24032,83 @@ async function createProductionRuntime(options) {
         await loopExecutionEnvironment?.dispose();
       }
     };
+    let activeLongTask;
+    const readMemoryRestartMarker = () => {
+      try {
+        return parseMemoryRestartMarker(readFileSync3(memoryRestartMarkerPath(workspace), "utf8"));
+      } catch {
+        return void 0;
+      }
+    };
+    const currentPressureReading = () => verifiedHeapPressure(MEMORY_PRESSURE_HEAP_RATIO) ?? { ...readHeap(), gcVerified: false };
+    const collectRotationHolders = () => {
+      const holders = {};
+      try {
+        const context = harness.main.context.census();
+        holders.context = { entries: context.messages, chars: context.messageChars };
+        holders.contextVisibility = { entries: context.visibilityEntries, chars: context.visibilityChars };
+        holders.contextTransient = { entries: context.transientEntries, chars: context.transientChars };
+      } catch {
+      }
+      try {
+        holders.journal = { entries: harnessJournal.recordCount };
+      } catch {
+      }
+      try {
+        const jobCensus = jobs.census();
+        holders.jobs = { entries: jobCensus.jobs, chars: jobCensus.windowChars };
+      } catch {
+      }
+      try {
+        holders.sessionTree = { entries: sessionHistory.nodeCount };
+      } catch {
+      }
+      return holders;
+    };
+    const rotateForHeap = (continuation, reading) => {
+      requestMemoryRestart(workspace, sessionId, emitOutput, {
+        ...continuation === void 0 ? {} : { continuation },
+        ...reading === void 0 ? {} : { reading },
+        holders: collectRotationHolders()
+      }, options.onMemoryRestartRequested);
+    };
+    const maybeRotateAtBoundary = (continuation) => {
+      activeLongTask = continuation;
+      const pressure = verifiedHeapPressure(MEMORY_PRESSURE_HEAP_RATIO);
+      if (pressure !== void 0) {
+        rotateForHeap(continuation, pressure);
+        return;
+      }
+      const reading = heapRotationNeeded();
+      if (reading === void 0) return;
+      if (rotationCooldownActive(readMemoryRestartMarker(), sessionId, /* @__PURE__ */ new Date())) return;
+      rotateForHeap(continuation, reading);
+    };
+    const maybeRotateAtTurnBoundary = () => {
+      const reading = heapRotationNeeded();
+      if (reading === void 0) return;
+      if (rotationCooldownActive(readMemoryRestartMarker(), sessionId, /* @__PURE__ */ new Date())) return;
+      rotateForHeap(void 0, reading);
+    };
+    const consumePendingContinuation = () => {
+      const marker = readMemoryRestartMarker();
+      const continuation = pendingContinuation(marker, sessionId, /* @__PURE__ */ new Date());
+      if (continuation === void 0 || marker === void 0) return void 0;
+      try {
+        const markerPath = memoryRestartMarkerPath(workspace);
+        writeMarkerAtomically(markerPath, consumedMemoryRestartMarker(marker));
+      } catch {
+      }
+      return continuation;
+    };
     const loopStore = new LoopStore({ workspace });
     const loopOrchestrator = new LoopOrchestrator({
       workspace,
       config: config.loop,
       persistence: loopStore,
       hallucinationGuard,
+      onCycleBoundary: (loopId) => maybeRotateAtBoundary({ kind: "loop", id: loopId }),
+      onMemoryCheckpoint: (loopId) => maybeRotateAtBoundary({ kind: "loop", id: loopId }),
       prepareWorkspace: (input) => prepareLoopWorkspace(input),
       inferVerification: inferVerificationPlan,
       runWorker: ({ workspace: executionWorkspace, prompt, signal }) => runLoopWorker({ workspace: executionWorkspace, prompt, signal }),
@@ -23670,9 +24145,11 @@ async function createProductionRuntime(options) {
       plannerModelId: mainModel,
       classifierModelId: mainModel,
       skepticCount: 3,
-      maxRounds: 5,
-      maxStallStreak: 2,
+      maxRounds: config.goal.maxRounds,
+      maxStallStreak: config.goal.maxStallStreak,
       persistence: goalStore,
+      onRoundBoundary: (goalId) => maybeRotateAtBoundary({ kind: "goal", id: goalId }),
+      onMemoryCheckpoint: (goalId) => maybeRotateAtBoundary({ kind: "goal", id: goalId }),
       verifyHost: async (signal) => runVerificationPlan(
         await inferVerificationPlan(workspace),
         workspace,
@@ -23767,30 +24244,49 @@ async function createProductionRuntime(options) {
           contextEpoch: harness.main.context.snapshot().epoch?.id ?? "legacy"
         });
         const turnId = harnessJournal.startTurn(turnConfig, { prompt, initialUserMessage: runOptions?.initialUserMessage });
-        return monitorMemoryRestart(durableTurn(persistAfter(runMain(
-          harness,
-          skills,
-          prompt,
-          signal,
-          selectedModels.mainError,
-          memoryStore === void 0 || !memoryHasRoutableEntries && userMemoryContext === void 0 ? void 0 : {
-            store: memoryStore,
-            taskId: memoryLifecycle.taskId ?? sessionId,
-            topK: config.memory.retrievalTopK,
-            maxChars: config.memory.maxPromptChars
-          },
-          runOptions?.getSteeringMessages,
-          runOptions?.initialUserMessage,
-          runOptions?.additionalContext,
-          ide
-        ), persist), harnessJournal, turnId, turnConfig), () => requestMemoryRestart(workspace, sessionId, emitOutput));
+        return monitorTurnMemory(
+          durableTurn(persistAfter(runMain(
+            harness,
+            skills,
+            prompt,
+            signal,
+            selectedModels.mainError,
+            memoryStore === void 0 || !memoryHasRoutableEntries && userMemoryContext === void 0 ? void 0 : {
+              store: memoryStore,
+              taskId: memoryLifecycle.taskId ?? sessionId,
+              topK: config.memory.retrievalTopK,
+              maxChars: config.memory.maxPromptChars
+            },
+            runOptions?.getSteeringMessages,
+            runOptions?.initialUserMessage,
+            runOptions?.additionalContext,
+            ide
+          ), persist), harnessJournal, turnId, turnConfig),
+          () => rotateForHeap(void 0, currentPressureReading()),
+          () => maybeRotateAtTurnBoundary()
+        );
       },
       runSkill: (skill, prompt, signal) => persistAfter(
         runExplicitSkill(harness, skills, skill, prompt, signal, selectedModels.mainError),
         persist
       ),
-      runLoop: (goal, signal) => runLoopSession(loopOrchestrator, hooks, goal, signal),
-      runGoal: (goal, signal) => persistEach(runGoalSession(goalOrchestrator, goal, signal), persist),
+      runLoop: (goal, signal) => monitorLongTaskRestart(
+        runLoopSession(loopOrchestrator, hooks, goal, signal),
+        () => rotateForHeap(activeLongTask, currentPressureReading())
+      ),
+      runGoal: (goal, signal) => monitorLongTaskRestart(
+        persistEach(runGoalSession(goalOrchestrator, goal, signal), persist),
+        () => rotateForHeap(activeLongTask, currentPressureReading())
+      ),
+      resumeLoop: (loopId, signal) => monitorLongTaskRestart(
+        runResumeLoopSession(loopOrchestrator, hooks, loopId, signal),
+        () => rotateForHeap(activeLongTask ?? { kind: "loop", id: loopId }, currentPressureReading())
+      ),
+      resumeGoal: (goalId, signal) => monitorLongTaskRestart(
+        persistEach(runResumeGoalSession(goalOrchestrator, goalId, signal), persist),
+        () => rotateForHeap(activeLongTask ?? { kind: "goal", id: goalId }, currentPressureReading())
+      ),
+      continuation: () => consumePendingContinuation(),
       mcp: async (command, signal) => {
         signal.throwIfAborted();
         const manager = await mcpReady;
@@ -23884,7 +24380,7 @@ async function createProductionRuntime(options) {
           const root = resolve31(workspace);
           const abs = resolve31(root, path);
           if (abs !== root && !abs.startsWith(root + sep22)) throw new Error(`path outside workspace: ${path}`);
-          return readFile23(abs, "utf8");
+          return readFile24(abs, "utf8");
         },
         history: async (path, limit) => fileHistory(workspace, path, limit),
         questions,
@@ -23896,7 +24392,7 @@ async function createProductionRuntime(options) {
       }, query, focus, signal),
       audit: async (toolFilter) => {
         try {
-          const raw = await readFile23(auditLogger.path, "utf8");
+          const raw = await readFile24(auditLogger.path, "utf8");
           const lines = raw.trim().split("\n").filter((line) => line.length > 0);
           const entries = lines.map((line) => {
             try {
@@ -23936,7 +24432,7 @@ ${summary2}`;
       doctor: async () => formatDoctorReport(await runDoctor({ workspace, home, environment })),
       usage: async () => {
         try {
-          const raw = await readFile23(usageLogPath(), "utf8");
+          const raw = await readFile24(usageLogPath(), "utf8");
           return formatUsageSummary(summarizeUsage(parseUsageEntries(raw)));
         } catch (error) {
           if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") {
@@ -24089,7 +24585,7 @@ ${renderMemoryDocument(entries)}`;
           return `Provider "${providerName}" is missing authorizationUrl, tokenUrl, or clientId.`;
         }
         try {
-          const tokenStore = createFileTokenStore(join29(home, ".flavor-code", "auth.json"));
+          const tokenStore = createFileTokenStore(join30(home, ".flavor-code", "auth.json"));
           const credentialId = oauthCredentialId(oauthConfig.tokenUrl, oauthConfig.clientId);
           await migrateLegacyOAuthToken(tokenStore, providerName, credentialId);
           const oauth = new OAuthCallbackAuthProvider({
@@ -24136,7 +24632,7 @@ ${renderMemoryDocument(entries)}`;
         }
       },
       async logout() {
-        const tokenStore = createFileTokenStore(join29(home, ".flavor-code", "auth.json"));
+        const tokenStore = createFileTokenStore(join30(home, ".flavor-code", "auth.json"));
         const tokens = await tokenStore.load();
         const hadCredentials = Object.keys(tokens).length > 0 || effectiveLlm !== void 0;
         if (!hadCredentials) {
@@ -24329,10 +24825,16 @@ function formatMcpReconnect(server) {
   return `Failed to reconnect MCP server "${server.name}": ${server.error ?? "unknown error"}`;
 }
 async function* runLoopSession(orchestrator, hooks, goal, signal) {
+  yield* loopSessionEvents(orchestrator.run({ goal, signal }), hooks);
+}
+async function* runResumeLoopSession(orchestrator, hooks, loopId, signal) {
+  yield* loopSessionEvents(orchestrator.resume({ loopId, signal }), hooks);
+}
+async function* loopSessionEvents(events, hooks) {
   let totalInputTokens = 0;
   let totalOutputTokens = 0;
   let latestVerification;
-  for await (const event of orchestrator.run({ goal, signal })) {
+  for await (const event of events) {
     if (event.type === "worker-event") {
       if (event.event.type === "usage") {
         totalInputTokens += event.event.inputTokens;
@@ -24436,7 +24938,7 @@ async function workspaceFingerprint(workspace) {
     hash.update(name);
     if (remaining <= 0) continue;
     try {
-      const content = await readFile23(path);
+      const content = await readFile24(path);
       const slice = content.subarray(0, remaining);
       hash.update(slice);
       remaining -= slice.length;
@@ -24548,7 +25050,16 @@ async function* durableTurn(source, journal, turnId, config) {
     }
   }
 }
-async function* monitorMemoryRestart(source, onRestartNeeded) {
+async function* monitorTurnMemory(source, onPressure, onBoundary) {
+  let pressure = false;
+  for await (const event of source) {
+    if (event.type === "error" && event.error.code === "memory_pressure") pressure = true;
+    yield event;
+  }
+  if (pressure) onPressure();
+  else onBoundary();
+}
+async function* monitorLongTaskRestart(source, onRestartNeeded) {
   let pressure = false;
   for await (const event of source) {
     if (event.type === "error" && event.error.code === "memory_pressure") pressure = true;
@@ -24556,7 +25067,10 @@ async function* monitorMemoryRestart(source, onRestartNeeded) {
   }
   if (pressure) onRestartNeeded();
 }
-function requestMemoryRestart(workspace, sessionId, emitOutput) {
+function requestMemoryRestart(workspace, sessionId, emitOutput, rotation, onRestartRequested) {
+  if (memoryRotationActive()) return;
+  markMemoryRotation();
+  const continuation = rotation?.continuation;
   try {
     const markerPath = memoryRestartMarkerPath(workspace);
     let previous;
@@ -24564,14 +25078,43 @@ function requestMemoryRestart(workspace, sessionId, emitOutput) {
       previous = parseMemoryRestartMarker(readFileSync3(markerPath, "utf8"));
     } catch {
     }
-    mkdirSync3(dirname17(markerPath), { recursive: true });
-    writeFileSync2(markerPath, `${JSON.stringify(nextMemoryRestartMarker(previous, sessionId, /* @__PURE__ */ new Date()))}
-`, "utf8");
+    writeMarkerAtomically(markerPath, nextMemoryRestartMarker(previous, sessionId, /* @__PURE__ */ new Date(), continuation));
   } catch {
   }
-  process.exitCode = MEMORY_RESTART_EXIT_CODE;
-  emitOutput({ type: "notice", message: "Memory watermark reached; the session is saved and Flavor is restarting with a fresh heap." });
-  emitOutput({ type: "exit" });
+  if (rotation?.reading !== void 0) {
+    const census = {
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      reason: continuation === void 0 ? "memory-pressure" : `heap-rotation:${continuation.kind}`,
+      sessionId,
+      heap: censusHeapBlock(rotation.reading),
+      holders: rotation.holders ?? {}
+    };
+    writeRotationCensus(workspace, census);
+    if (heapSnapshotWarranted(rotation.reading)) writeRotationHeapSnapshot(workspace);
+  }
+  emitOutput({
+    type: "notice",
+    message: continuation === void 0 ? "Memory watermark reached; the session is saved and Flavor is restarting with a fresh heap." : `Memory watermark reached; the session and the running ${continuation.kind} are saved, and Flavor is restarting with a fresh heap to continue it.`
+  });
+  if (onRestartRequested !== void 0) onRestartRequested(sessionId);
+  else {
+    process.exitCode = MEMORY_RESTART_EXIT_CODE;
+    emitOutput({ type: "exit" });
+  }
+}
+function writeMarkerAtomically(path, marker) {
+  mkdirSync4(dirname17(path), { recursive: true });
+  const temporary = `${path}.${process.pid}.${randomUUID20()}.tmp`;
+  try {
+    writeFileSync3(temporary, `${JSON.stringify(marker)}
+`, { encoding: "utf8", mode: 384 });
+    renameSync2(temporary, path);
+  } finally {
+    try {
+      unlinkSync3(temporary);
+    } catch {
+    }
+  }
 }
 async function runGitCommit(deps, hint, signal) {
   if (!await isGitRepository(deps.workspace)) return "Not a git repository \u2014 /commit needs git.";
@@ -24666,7 +25209,7 @@ async function registerConfiguredAdapters(providers, registry, environment, diag
   const configured = { ...providers };
   if (configured.openai === void 0 && environment.OPENAI_API_KEY) configured.openai = { type: "openai", apiKey: environment.OPENAI_API_KEY };
   if (configured.anthropic === void 0 && environment.ANTHROPIC_API_KEY) configured.anthropic = { type: "anthropic", apiKey: environment.ANTHROPIC_API_KEY };
-  const oauthTokenStore = createFileTokenStore(join29(home, ".flavor-code", "auth.json"));
+  const oauthTokenStore = createFileTokenStore(join30(home, ".flavor-code", "auth.json"));
   const registered = [];
   let effectiveLlm;
   for (const [name, provider] of Object.entries(configured)) {
@@ -24935,7 +25478,7 @@ async function generateSleepReview(registry, modelId, prompt, signal) {
 }
 async function optionalText2(path) {
   try {
-    return await readFile23(path, "utf8");
+    return await readFile24(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") return void 0;
     throw error;
@@ -25020,7 +25563,17 @@ function attachCleanupError(primary, cleanup) {
   }
 }
 async function* runGoalSession(orchestrator, goal, signal) {
-  for await (const event of orchestrator.run({ goal, signal })) {
+  yield* goalSessionEvents(orchestrator.run({ goal, signal }));
+}
+async function* runResumeGoalSession(orchestrator, goalId, signal) {
+  yield* goalSessionEvents(orchestrator.resume({ goalId, signal }));
+}
+async function* goalSessionEvents(events) {
+  for await (const event of events) {
+    if (event.type === "goal-resumed") {
+      yield { type: "notice", message: `Resuming goal ${event.goalId} at round ${event.round} after a heap rotation.` };
+      continue;
+    }
     if (event.type === "goal-plan-created") {
       yield { type: "notice", message: `Goal plan created (${event.plan.kind}) with ${event.plan.criteria.length} acceptance criteria.` };
       yield { type: "notice", message: `Plan file: ${event.planPath}` };