flavor-code 1.4.0-beta.3 → 1.4.0-beta.5

package/dist/{chunk-NIKCPCJG.js → chunk-J7TLT6LR.js}

@@ -2,10 +2,15 @@
 import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
 import {
   MEMORY_RESTART_EXIT_CODE,
+  consumedMemoryRestartMarker,
+  markMemoryRotation,
   memoryRestartMarkerPath,
+  memoryRotationActive,
   nextMemoryRestartMarker,
-  parseMemoryRestartMarker
-} from "./chunk-CIVPKHF4.js";
+  parseMemoryRestartMarker,
+  pendingContinuation,
+  rotationCooldownActive
+} from "./chunk-N5MXHJKD.js";
 import {
   PERMISSION_MODES,
   PermissionModeSchema,
@@ -18,7 +23,7 @@ import {
   redactConfig,
   setProjectMcpServerDisabled,
   updateProtectedFile
-} from "./chunk-KBHWS7M6.js";
+} from "./chunk-KQMKY7C5.js";
 import {
   AuditLogger,
   appendUsageLog,
@@ -1296,6 +1301,11 @@ function appendThinkingText(previous, delta) {
 // src/ui/transcript.ts
 var MAX_TRANSCRIPT_TURNS = 200;
 var MAX_TRANSCRIPT_CHARS = 2e6;
+var MAX_ACTIVE_TRANSCRIPT_BLOCKS = 160;
+var MAX_ACTIVE_ASSISTANT_CHARS = 64e3;
+var MAX_TRANSCRIPT_BLOCK_TEXT_CHARS = 16e3;
+var MAX_TRANSCRIPT_TOOL_VALUE_CHARS = 16e3;
+var MAX_TRANSCRIPT_PRESENTATION_CHARS = 32e3;
 function createTranscriptState() {
   return { completed: [], nextId: 1 };
 }
@@ -1656,11 +1666,9 @@ function applyTaskSnapshot(turn, snapshot4, includeTerminal = true) {
     else blocks[index] = block;
   }
   return {
-    ...turn,
+    ...withBlocks(turn, blocks),
     taskSnapshot: snapshot4,
-    suppressedTaskIds: [...suppressed],
-    blocks,
-    statusLines: blocks.filter((block) => block.kind === "status").map((block) => block.text)
+    suppressedTaskIds: [...suppressed]
   };
 }
 function terminalTaskIds(snapshot4) {
@@ -1674,13 +1682,10 @@ function upsertStatus(state, block) {
   if (state.active === void 0) return state;
   const blocks = [...state.active.blocks];
   const index = blocks.findIndex((item) => item.kind === "status" && item.id === block.id);
-  if (index < 0) blocks.push(block);
-  else blocks[index] = block;
-  return { ...state, active: {
-    ...state.active,
-    statusLines: blocks.filter((item) => item.kind === "status").map((item) => item.text),
-    blocks
-  } };
+  const bounded2 = boundedTranscriptBlock(block);
+  if (index < 0) blocks.push(bounded2);
+  else blocks[index] = bounded2;
+  return { ...state, active: withBlocks(state.active, blocks) };
 }
 function finishActive(state) {
   if (state.active === void 0) return state;
@@ -1704,16 +1709,12 @@ function attachThinking(turn, text) {
     ...block,
     thinkingText: appendThinkingText(block.thinkingText, text)
   };
-  return { ...turn, blocks };
+  return withBlocks(turn, blocks);
 }
 function withoutModelActivity(turn, id) {
   const blocks = turn.blocks.filter((block) => block.kind !== "status" || block.activity !== "model" || id !== void 0 && block.id !== id);
   if (blocks.length === turn.blocks.length) return turn;
-  return {
-    ...turn,
-    blocks,
-    statusLines: blocks.filter((block) => block.kind === "status").map((block) => block.text)
-  };
+  return withBlocks(turn, blocks);
 }
 function restoreTranscriptState(state) {
   const completed = state.completed.map(cloneTurn);
@@ -1815,15 +1816,18 @@ function cloneTurn(turn) {
 function upsertTurnStatus(turn, block) {
   const blocks = [...turn.blocks];
   const index = blocks.findIndex((item) => item.kind === "status" && item.id === block.id);
-  if (index < 0) blocks.push(block);
-  else blocks[index] = block;
+  const bounded2 = boundedTranscriptBlock(block);
+  if (index < 0) blocks.push(bounded2);
+  else blocks[index] = bounded2;
   return withBlocks(turn, blocks);
 }
 function withBlocks(turn, blocks) {
+  const bounded2 = blocks.length <= MAX_ACTIVE_TRANSCRIPT_BLOCKS ? blocks : blocks.slice(-MAX_ACTIVE_TRANSCRIPT_BLOCKS);
   return {
     ...turn,
-    blocks,
-    statusLines: blocks.filter((block) => block.kind === "status").map((block) => block.text)
+    assistantText: tailText(turn.assistantText, MAX_ACTIVE_ASSISTANT_CHARS),
+    blocks: bounded2,
+    statusLines: bounded2.filter((block) => block.kind === "status").map((block) => block.text)
   };
 }
 function appendLine(text, line) {
@@ -1837,19 +1841,95 @@ function stripRetryBlocks(turn) {
     if (block.id.startsWith("structured-retry:")) return false;
     return true;
   });
-  return {
-    ...turn,
-    blocks,
-    statusLines: blocks.filter((item) => item.kind === "status").map((item) => item.text)
-  };
+  return withBlocks(turn, blocks);
 }
 function addText(turn, text, onNewLine = false) {
-  const assistantText = onNewLine ? appendLine(turn.assistantText, text) : turn.assistantText + text;
+  const assistantText = tailText(
+    onNewLine ? appendLine(turn.assistantText, text) : turn.assistantText + text,
+    MAX_ACTIVE_ASSISTANT_CHARS
+  );
   const blocks = [...turn.blocks];
   const last = blocks[blocks.length - 1];
-  if (!onNewLine && last?.kind === "text") blocks[blocks.length - 1] = { kind: "text", text: last.text + text };
-  else blocks.push({ kind: "text", text });
-  return { ...turn, assistantText, blocks };
+  if (!onNewLine && last?.kind === "text") {
+    blocks[blocks.length - 1] = { kind: "text", text: tailText(last.text + text, MAX_TRANSCRIPT_BLOCK_TEXT_CHARS) };
+  } else {
+    blocks.push({ kind: "text", text: tailText(text, MAX_TRANSCRIPT_BLOCK_TEXT_CHARS) });
+  }
+  return withBlocks({ ...turn, assistantText }, blocks);
+}
+function boundedTranscriptBlock(block) {
+  const presentation = block.presentation === void 0 ? void 0 : boundedTranscriptPresentation(block.presentation);
+  const tool = block.tool === void 0 ? void 0 : {
+    name: block.tool.name,
+    input: boundedTranscriptValue(block.tool.input),
+    ...block.tool.result === void 0 ? {} : {
+      result: {
+        ok: block.tool.result.ok,
+        ...block.tool.result.output === void 0 ? {} : { output: boundedTranscriptValue(block.tool.result.output) },
+        ...block.tool.result.content === void 0 ? {} : {
+          content: tailText(block.tool.result.content, MAX_TRANSCRIPT_TOOL_VALUE_CHARS)
+        },
+        ...block.tool.result.presentation === void 0 ? {} : {
+          presentation: boundedTranscriptPresentation(block.tool.result.presentation)
+        },
+        ...block.tool.result.additionalContext === void 0 ? {} : {
+          additionalContext: block.tool.result.additionalContext.slice(-20).map((item) => tailText(item, MAX_TRANSCRIPT_TOOL_VALUE_CHARS))
+        },
+        ...block.tool.result.error === void 0 ? {} : { error: {
+          code: block.tool.result.error.code,
+          message: tailText(block.tool.result.error.message, MAX_TRANSCRIPT_BLOCK_TEXT_CHARS)
+        } }
+      }
+    }
+  };
+  return {
+    ...block,
+    text: tailText(block.text, MAX_TRANSCRIPT_BLOCK_TEXT_CHARS),
+    ...block.hint === void 0 ? {} : { hint: tailText(block.hint, MAX_TRANSCRIPT_BLOCK_TEXT_CHARS) },
+    ...block.details === void 0 ? {} : { details: tailText(block.details, MAX_TRANSCRIPT_BLOCK_TEXT_CHARS) },
+    ...presentation === void 0 ? {} : { presentation },
+    ...tool === void 0 ? {} : { tool }
+  };
+}
+function boundedTranscriptPresentation(presentation) {
+  return jsonSize(presentation) <= MAX_TRANSCRIPT_PRESENTATION_CHARS ? presentation : {
+    kind: "generic",
+    title: "Tool output",
+    summary: "Large presentation omitted from the live transcript; the model-facing result remains available in context."
+  };
+}
+function boundedTranscriptValue(value) {
+  const chars = jsonSize(value);
+  if (chars <= MAX_TRANSCRIPT_TOOL_VALUE_CHARS) return value;
+  const record = typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+  const summary2 = { truncated: true, originalChars: chars };
+  for (const key of ["path", "command", "id", "name", "exitCode", "bytes", "replacements"]) {
+    const item = record?.[key];
+    if (typeof item === "string") summary2[key] = tailText(item, 1e3);
+    else if (typeof item === "number" || typeof item === "boolean" || item === null) summary2[key] = item;
+  }
+  return summary2;
+}
+function jsonSize(value) {
+  try {
+    return JSON.stringify(value)?.length ?? 0;
+  } catch {
+    return Number.POSITIVE_INFINITY;
+  }
+}
+function tailText(text, limit) {
+  if (text.length <= limit) return text;
+  const marker = `\u2026 ${text.length - limit} earlier characters omitted \u2026
+`;
+  return marker.length >= limit ? text.slice(-limit) : marker + text.slice(-(limit - marker.length));
+}
+function transcriptCensus(state) {
+  const turns = [...state.completed, ...state.active === void 0 ? [] : [state.active]];
+  return {
+    turns: turns.length,
+    blocks: turns.reduce((total, turn) => total + turn.blocks.length, 0),
+    chars: jsonSize(state)
+  };
 }
 
 // src/session/checkpoint.ts
@@ -2061,6 +2141,10 @@ var SessionHistory = class _SessionHistory {
   get leafId() {
     return this.#leafId;
   }
+  /** Cheap retained-node count for the rotation census (no cloning). */
+  get nodeCount() {
+    return this.#nodes.length;
+  }
   tree() {
     return this.#nodes.map((node) => structuredClone(node));
   }
@@ -3612,6 +3696,11 @@ var HELP = [
   "/co-work <pal> <goal> | status [id] | cancel <id> [reason]"
 ].join("\n");
 var MAX_STOP_DENIALS = 2;
+var RESUMABLE_TURN_BOUNDARIES = /* @__PURE__ */ new Set([
+  "iteration_limit",
+  "output_limit",
+  "context_overflow"
+]);
 var FlavorSession = class {
   #services;
   #active;
@@ -3635,6 +3724,7 @@ var FlavorSession = class {
   #pendingCoWorkStarts = [];
   #activeSteeringDurableIds = /* @__PURE__ */ new Set();
   #durableResumeStarted = false;
+  #continuationResumeStarted = false;
   #permissionBaseline;
   #activeSubmission;
   constructor(services) {
@@ -3655,6 +3745,10 @@ var FlavorSession = class {
   queueSnapshot() {
     return this.#queue.snapshot();
   }
+  /** True when start() admitted a persisted /loop or /goal continuation. */
+  get rotationContinuationResumed() {
+    return this.#continuationResumeStarted;
+  }
   clearQueue() {
     const snapshot4 = this.#queue.clear();
     for (const kind of ["steer", "followUp"]) {
@@ -3804,6 +3898,7 @@ var FlavorSession = class {
       if (decision.additionalContext !== void 0) await this.#services.addContext?.(decision.additionalContext);
       this.#started = true;
       this.#resumeDurableQueue();
+      this.#resumeRotationContinuation();
     });
     return this.#startPromise;
   }
@@ -3837,6 +3932,7 @@ var FlavorSession = class {
       if (!initial) this.#outputQueuedSubmission(submission);
       initial = false;
       await this.#runSubmission(submission);
+      if (this.#services.rotationPending?.() === true) return;
       pending.push(...this.#drainMessages("steer"), ...this.#drainMessages("followUp"));
     }
   }
@@ -3860,6 +3956,7 @@ var FlavorSession = class {
     this.#activeSubmission = submission;
     this.#interrupted = false;
     let outcome = "completed";
+    let resumableBoundary;
     let assistantSummary = "";
     let deliverables = [];
     try {
@@ -3886,7 +3983,8 @@ var FlavorSession = class {
         skillNames,
         this.#services.managedToolCommands().map(({ name }) => name)
       );
-      if (command !== null) await this.#dispatch(command, controller.signal);
+      if (submission.continuation !== void 0) await this.#runContinuation(submission.continuation, controller.signal);
+      else if (command !== null) await this.#dispatch(command, controller.signal);
       else for await (const event of this.#services.run(prompt, controller.signal, {
         getSteeringMessages: () => this.#drainMessages("steer", true).map((item) => item.text),
         ...decision.additionalContext === void 0 ? {} : { additionalContext: decision.additionalContext },
@@ -3895,7 +3993,10 @@ var FlavorSession = class {
         this.#services.output(event);
         if (event.type === "text") assistantSummary = `${assistantSummary}${event.text}`.slice(-2e3);
         if (event.type === "deliverables") deliverables = event.files.slice(0, 100);
-        if (event.type === "error") outcome = "failed";
+        if (event.type === "error") {
+          outcome = "failed";
+          if (RESUMABLE_TURN_BOUNDARIES.has(event.error.code)) resumableBoundary = event.error.code;
+        }
       }
       if (controller.signal.aborted) outcome = "cancelled";
     } catch (error) {
@@ -3936,6 +4037,13 @@ var FlavorSession = class {
           }
         }
         try {
+          if (resumableBoundary !== void 0 && !this.#closed && !controller.signal.aborted) {
+            const attempt = (submission.iterationContinuation ?? 0) + 1;
+            const text = `[automatic continuation after ${resumableBoundary} boundary; segment ${attempt}]
+Continue the unfinished task from the current conversation and workspace state. Do not repeat completed operations. Inspect existing results, finish the remaining work, and verify it before stopping.`;
+            this.#enqueueMessage("followUp", { text, displayText: text, iterationContinuation: attempt });
+            this.#notice(`Agent ${resumableBoundary} boundary reached; durable continuation ${attempt} queued.`);
+          }
           if (stopDecision?.decision === "deny" && typeof stopDecision.reason === "string" && stopDecision.reason.length > 0 && !this.#closed && outcome !== "cancelled" && outcome !== "denied") {
             if (this.#stopDenials < MAX_STOP_DENIALS) {
               this.#stopDenials += 1;
@@ -4132,7 +4240,7 @@ Address this now (for example run the required verification or fix), then finish
     });
   }
   #resumeDurableQueue() {
-    if (this.#durableResumeStarted || this.#closed || this.active || this.#pendingSubmissions > 0) return;
+    if (this.#durableResumeStarted || this.#closed || this.active || this.#pendingSubmissions > 0 || this.#services.rotationPending?.() === true) return;
     if (!this.#queue.hasPending) return;
     this.#durableResumeStarted = true;
     const submissions = [...this.#drainMessages("steer"), ...this.#drainMessages("followUp")];
@@ -4144,6 +4252,33 @@ Address this now (for example run the required verification or fix), then finish
       });
     }
   }
+  /**
+   * After a heap rotation the relaunched process inherits the same session and
+   * a marker continuation naming the /loop or /goal that was in flight. Resume
+   * it once here so a multi-day autonomous run survives the rotation instead of
+   * silently stopping at the boundary.
+   */
+  #resumeRotationContinuation() {
+    if (this.#continuationResumeStarted || this.#closed) return;
+    const continuation = this.#services.continuation?.();
+    if (continuation === void 0) return;
+    const supported = continuation.kind === "loop" ? this.#services.resumeLoop !== void 0 : this.#services.resumeGoal !== void 0;
+    if (!supported) return;
+    this.#continuationResumeStarted = true;
+    const displayText = `Resuming the interrupted ${continuation.kind} ${continuation.id} after a heap rotation.`;
+    this.#notice(displayText);
+    this.#enqueueNormalizedSubmission({ text: displayText, displayText, continuation }).catch((error) => {
+      this.#services.output({ type: "error", error: { code: "unknown", message: message(error) } });
+    });
+  }
+  async #runContinuation(continuation, signal) {
+    const stream = continuation.kind === "loop" ? this.#services.resumeLoop?.(continuation.id, signal) : this.#services.resumeGoal?.(continuation.id, signal);
+    if (stream === void 0) {
+      this.#notice(`The runtime cannot resume the interrupted ${continuation.kind} ${continuation.id}; start it again with /${continuation.kind}.`);
+      return;
+    }
+    for await (const event of stream) this.#services.output(event);
+  }
   #ackDurable(submission) {
     if (submission.durableId === void 0) return;
     this.#services.durableQueue?.ack(submission.durableId);
@@ -4256,6 +4391,7 @@ function recoveredSubmission(value) {
   if (typeof input.text !== "string" || input.text.trim().length === 0) return void 0;
   if (typeof input.displayText !== "string") return void 0;
   if (input.controlOnly !== void 0 && typeof input.controlOnly !== "boolean") return void 0;
+  if (input.iterationContinuation !== void 0 && (!Number.isSafeInteger(input.iterationContinuation) || input.iterationContinuation < 1)) return void 0;
   if (input.coWorkPlanningKey !== void 0 && typeof input.coWorkPlanningKey !== "string") return void 0;
   if (input.remoteOrigin !== void 0) {
     const origin = input.remoteOrigin;
@@ -5973,8 +6109,8 @@ var PalBrokerServer = class {
     });
     if (this.endpointLock === void 0) throw new Error(`Pals endpoint '${this.address}' is active or owned`);
     try {
-      const stat11 = await lstat4(this.address);
-      if (!stat11.isSocket()) throw new Error(`Refusing to unlink '${this.address}' because it is not a socket`);
+      const stat12 = await lstat4(this.address);
+      if (!stat12.isSocket()) throw new Error(`Refusing to unlink '${this.address}' because it is not a socket`);
       await unlink3(this.address);
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
@@ -5987,8 +6123,8 @@ var PalBrokerServer = class {
   }
   async unlinkKnownSocket() {
     try {
-      const stat11 = await lstat4(this.address);
-      if (stat11.isSocket()) await unlink3(this.address);
+      const stat12 = await lstat4(this.address);
+      if (stat12.isSocket()) await unlink3(this.address);
     } catch (error) {
       if (error.code !== "ENOENT") throw error;
     }
@@ -6715,11 +6851,11 @@ async function ensureOnce(options) {
 }
 
 // src/production.ts
-import { readFile as readFile23 } from "fs/promises";
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { readFile as readFile24 } from "fs/promises";
+import { mkdirSync as mkdirSync4, readFileSync as readFileSync3, renameSync as renameSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync3 } from "fs";
 import { createHash as createHash18, randomUUID as randomUUID20 } from "crypto";
 import { homedir as homedir3, release as osRelease, tmpdir as tmpdir4, version as osVersion } from "os";
-import { basename as basename7, dirname as dirname17, join as join29, relative as relative22, resolve as resolve31, sep as sep22 } from "path";
+import { basename as basename7, dirname as dirname17, join as join30, relative as relative22, resolve as resolve31, sep as sep22 } from "path";
 
 // src/agent/subagents.ts
 import { z as z9 } from "zod";
@@ -7677,6 +7813,18 @@ var ContextManager = class _ContextManager {
   estimatedTokens() {
     return estimateMessageTokens(this.messagesForModel());
   }
+  /** Retained sizes for the rotation census: what this context holds right now. */
+  census() {
+    const chars = (messages) => messages.reduce((sum, entry2) => sum + modelContentText(entry2.content).length, 0);
+    return {
+      messages: this.#messages.length,
+      messageChars: chars(this.#messages),
+      visibilityEntries: this.#visibilityLog.length,
+      visibilityChars: this.#visibilityLog.reduce((sum, record) => sum + record.content.length, 0),
+      transientEntries: this.#activeTransientSystem.size,
+      transientChars: chars([...this.#activeTransientSystem.values()])
+    };
+  }
   needsCompaction() {
     if (modelVisibleText(this.messagesForModel()).length >= this.#compactAtChars) return true;
     return calculateContextPressure(this.#currentTokenUsage(), this.#compaction).shouldAutoCompact;
@@ -7717,10 +7865,6 @@ var ContextManager = class _ContextManager {
       }
       return microcompact.changed;
     }
-    if (this.#consecutiveAutoCompactFailures >= 3) {
-      rollbackMicrocompact();
-      return false;
-    }
     try {
       const compacted = await this.#compactConversation(signal);
       if (compacted) {
@@ -8184,10 +8328,10 @@ function within(root, candidate) {
 
 // src/context/summarizer.ts
 async function summarizeWithModel(options) {
-  const maxAttempts = options.maxPromptTooLongAttempts ?? 3;
-  if (!Number.isInteger(maxAttempts) || maxAttempts <= 0) throw new Error("maxPromptTooLongAttempts must be positive");
   options.signal?.throwIfAborted();
   let groups = groupMessagesByApiRound(options.messages);
+  const maxAttempts = options.maxPromptTooLongAttempts ?? Math.max(1, Math.ceil(Math.log2(Math.max(1, groups.length))) + 1);
+  if (!Number.isInteger(maxAttempts) || maxAttempts <= 0) throw new Error("maxPromptTooLongAttempts must be positive");
   let lastOverflow;
   let progress = 20;
   reportProgress(options.onProgress, progress);
@@ -8228,7 +8372,7 @@ async function summarizeWithModel(options) {
     if (terminalError.code !== "context_overflow") throw terminalError;
     lastOverflow = terminalError;
     if (attempt >= maxAttempts || groups.length <= 1) throw terminalError;
-    groups = groups.slice(1);
+    groups = groups.slice(Math.max(1, Math.floor(groups.length / 2)));
   }
   throw lastOverflow ?? new Error("Compact summary failed");
 }
@@ -8245,8 +8389,75 @@ function reportProgress(callback, percentage) {
   }
 }
 
-// src/agent/loop.ts
+// src/utils/heap.ts
 import { getHeapStatistics } from "v8";
+import { totalmem } from "os";
+var MEMORY_PRESSURE_HEAP_RATIO = 0.8;
+var MEMORY_ROTATION_HEAP_RATIO = 0.6;
+var MEMORY_PRESSURE_RSS_RATIO = 0.75;
+var MEMORY_ROTATION_RSS_RATIO = 0.6;
+var ROTATION_PRECHECK_RATIO = 0.45;
+function readHeap() {
+  const heapLimit = getHeapStatistics().heap_size_limit;
+  const heapUsed = process.memoryUsage().heapUsed;
+  return { heapUsed, heapLimit, ratio: heapLimit > 0 ? heapUsed / heapLimit : 0 };
+}
+function forceFullGc() {
+  const gc = globalThis.gc;
+  if (typeof gc !== "function") return false;
+  gc();
+  gc();
+  return true;
+}
+function ratioOf(heapLimit, heapUsed) {
+  return heapLimit > 0 ? heapUsed / heapLimit : 0;
+}
+function effectiveMemoryLimit() {
+  const physical = totalmem();
+  const constrained = process.constrainedMemory?.() ?? 0;
+  return constrained > 0 ? Math.min(physical, constrained) : physical;
+}
+function withRss(reading, gcVerified) {
+  const usage = process.memoryUsage();
+  const memoryLimit = effectiveMemoryLimit();
+  return {
+    ...reading,
+    gcVerified,
+    rss: usage.rss,
+    memoryLimit,
+    rssRatio: ratioOf(memoryLimit, usage.rss),
+    external: usage.external,
+    arrayBuffers: usage.arrayBuffers
+  };
+}
+function verifiedHeapPressure(threshold) {
+  const raw = readHeap();
+  const before = withRss(raw, false);
+  const rssThreshold = threshold >= MEMORY_PRESSURE_HEAP_RATIO ? MEMORY_PRESSURE_RSS_RATIO : threshold;
+  if ((raw.heapLimit <= 0 || raw.ratio < threshold) && (before.rssRatio ?? 0) < rssThreshold) return void 0;
+  if (!forceFullGc()) return before;
+  const heapUsed = process.memoryUsage().heapUsed;
+  const ratio = ratioOf(raw.heapLimit, heapUsed);
+  const verified = withRss({ heapUsed, heapLimit: raw.heapLimit, ratio, verifiedRatio: ratio }, true);
+  if (ratio < threshold && (verified.rssRatio ?? 0) < rssThreshold) return void 0;
+  return verified;
+}
+function heapRotationNeeded() {
+  const raw = readHeap();
+  const before = withRss(raw, false);
+  if ((raw.heapLimit <= 0 || raw.ratio < ROTATION_PRECHECK_RATIO) && (before.rssRatio ?? 0) < ROTATION_PRECHECK_RATIO) return void 0;
+  if (!forceFullGc()) {
+    return raw.ratio >= MEMORY_PRESSURE_HEAP_RATIO || (before.rssRatio ?? 0) >= MEMORY_PRESSURE_RSS_RATIO ? before : void 0;
+  }
+  const heapUsed = process.memoryUsage().heapUsed;
+  const ratio = ratioOf(raw.heapLimit, heapUsed);
+  const verified = withRss({ heapUsed, heapLimit: raw.heapLimit, ratio, verifiedRatio: ratio }, true);
+  if (ratio < MEMORY_ROTATION_HEAP_RATIO && (verified.rssRatio ?? 0) < MEMORY_ROTATION_RSS_RATIO) return void 0;
+  return verified;
+}
+function heapSnapshotWarranted(_reading) {
+  return process.env.FLAVOR_HEAP_SNAPSHOT_ON_ROTATE === "1";
+}
 
 // src/models/structured.ts
 import { z as z11 } from "zod";
@@ -8665,7 +8876,6 @@ function envMaxIterations() {
   if (!Number.isInteger(parsed) || parsed <= 0) return void 0;
   return parsed;
 }
-var MEMORY_PRESSURE_HEAP_RATIO = 0.8;
 function memoryPressureError(heapUsed, heapLimit) {
   if (heapLimit <= 0 || heapUsed < heapLimit * MEMORY_PRESSURE_HEAP_RATIO) return void 0;
   const mb = (bytes) => Math.round(bytes / 1048576);
@@ -8675,7 +8885,12 @@ function memoryPressureError(heapUsed, heapLimit) {
   };
 }
 function currentMemoryPressure() {
-  return memoryPressureError(process.memoryUsage().heapUsed, getHeapStatistics().heap_size_limit);
+  const reading = verifiedHeapPressure(MEMORY_PRESSURE_HEAP_RATIO);
+  if (reading === void 0) return void 0;
+  return memoryPressureError(reading.heapUsed, reading.heapLimit) ?? {
+    code: "memory_pressure",
+    message: `Process RSS reached ${Math.round((reading.rssRatio ?? 0) * 100)}% of the available memory limit; stopping before system OOM`
+  };
 }
 var AgentLoop = class {
   #options;
@@ -10053,6 +10268,10 @@ var HarnessJournal = class {
   get records() {
     return this.#records.map((record) => structuredClone(record));
   }
+  /** Retained record count for the rotation census. */
+  get recordCount() {
+    return this.#records.length;
+  }
   admitQueue(kind, payload) {
     QueueKindSchema.parse(kind);
     const id = randomUUID8();
@@ -10329,19 +10548,38 @@ function jsonSafeRecord(value) {
   return JSON.parse(json);
 }
 function hashJson(value) {
-  return createHash6("sha256").update(stableJson(value)).digest("hex");
-}
-function recordHash(record) {
-  const { hash: _hash, ...unsigned } = record;
-  return hashJson(unsigned);
+  const hash = createHash6("sha256");
+  stableHashInto(hash, value);
+  return hash.digest("hex");
 }
-function stableJson(value) {
-  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
+function stableHashInto(hash, value) {
+  if (Array.isArray(value)) {
+    hash.update("[");
+    for (let index = 0; index < value.length; index += 1) {
+      if (index > 0) hash.update(",");
+      stableHashInto(hash, value[index]);
+    }
+    hash.update("]");
+    return;
+  }
   if (typeof value === "object" && value !== null) {
     const object = value;
-    return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${stableJson(object[key])}`).join(",")}}`;
+    hash.update("{");
+    const keys = Object.keys(object).sort();
+    for (let index = 0; index < keys.length; index += 1) {
+      const key = keys[index];
+      if (index > 0) hash.update(",");
+      hash.update(`${JSON.stringify(key)}:`);
+      stableHashInto(hash, object[key]);
+    }
+    hash.update("}");
+    return;
   }
-  return JSON.stringify(value) ?? String(value);
+  hash.update(JSON.stringify(value) ?? String(value));
+}
+function recordHash(record) {
+  const { hash: _hash, ...unsigned } = record;
+  return hashJson(unsigned);
 }
 function assertSessionId(value) {
   if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(value)) throw new Error("Invalid session id");
@@ -12457,6 +12695,14 @@ var LoopStateSchema = z17.object({
     approvals: z17.array(LoopApprovalSchema)
   }).strict(),
   cycles: z17.array(LoopCycleEvidenceSchema),
+  /** Completed worker awaiting host verification; avoids replaying tool work after rotation. */
+  pendingCycle: z17.object({
+    cycle: z17.number().int().positive(),
+    startedAt: z17.string().datetime({ offset: true }),
+    inputTokens: z17.number().int().nonnegative(),
+    outputTokens: z17.number().int().nonnegative(),
+    workerText: z17.string().max(16e3)
+  }).strict().nullable().optional(),
   terminalReason: z17.string().optional()
 }).strict();
 var LoopEventSchema = z17.object({
@@ -12506,7 +12752,7 @@ function extendBudget(input, dimensions, approvedAt) {
   return LoopStateSchema.parse({
     ...state,
     updatedAt: approvedAt,
-    budget: { ...state.budget, cycleCheckpoint, tokenCheckpoint, approvals }
+    budget: { ...state.budget, cycleCheckpoint, tokenCheckpoint, approvals: approvals.slice(-64) }
   });
 }
 function rejectBudget(input, terminalReason) {
@@ -12545,15 +12791,45 @@ var LoopOrchestrator = class {
         tokenCheckpoint: this.#options.config.maxTokens,
         approvals: []
       },
-      cycles: []
+      cycles: [],
+      pendingCycle: null
     });
     await this.#options.persistence.create(state);
+    yield* this.#execute(state, request.goal, request.signal);
+  }
+  /**
+   * Continue a loop whose process rotated onto a fresh heap. The persisted
+   * state decides where to pick up; an interrupted cycle simply runs again.
+   */
+  async *resume(request) {
+    const persistence = this.#options.persistence;
+    if (persistence.load === void 0) throw new Error("Loop persistence does not support resume");
+    let state;
     try {
+      state = await persistence.load(request.loopId);
+    } catch (error) {
+      yield { type: "loop-terminal", loopId: request.loopId, status: "failed", reason: message(error) };
+      return;
+    }
+    if (state.status !== "running") {
+      const status = state.status;
+      yield { type: "loop-terminal", loopId: state.loopId, status, reason: state.terminalReason ?? "The loop is not running." };
+      return;
+    }
+    yield* this.#execute(state, state.goal, request.signal);
+  }
+  async *#execute(initialState, goal, signal) {
+    const now = this.#options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
+    const loopId = initialState.loopId;
+    let state = initialState;
+    try {
+      await this.#options.onMemoryCheckpoint?.(loopId);
+      if (memoryRotationActive()) return;
       const workspaceResolution = await this.#options.prepareWorkspace({
         root: this.#options.workspace,
         loopId,
-        goal: request.goal,
-        signal: request.signal
+        goal,
+        signal
       });
       if (workspaceResolution.kind === "needs_human") {
         state = await this.#terminal(state, "needs_human", workspaceResolution.reason, now());
@@ -12571,67 +12847,90 @@ var LoopOrchestrator = class {
         cycleCheckpoint: state.budget.cycleCheckpoint,
         tokenCheckpoint: state.budget.tokenCheckpoint
       };
-      let previousVerification = plan.commands.length === 0 ? {
+      const lastCompletedCycle = state.cycles.at(-1);
+      let previousVerification = lastCompletedCycle?.verification ?? (plan.commands.length === 0 ? {
         passed: false,
         commands: [],
         summary: `${plan.needsHumanReason ?? "No deterministic verification command was found."} Inspect the project and establish a meaningful project-native deterministic check; never add a trivial pass-through verifier.`
-      } : void 0;
-      let previousFailureSignature;
-      let repeatedFailures = 0;
+      } : void 0);
+      let previousFailureSignature = lastCompletedCycle === void 0 ? void 0 : `${lastCompletedCycle.workspaceFingerprint}
+${lastCompletedCycle.verification.summary}`;
+      let repeatedFailures = previousFailureSignature === void 0 ? 0 : countTrailingFailureSignature(state.cycles, previousFailureSignature);
       while (state.status === "running") {
-        request.signal.throwIfAborted();
-        const cycle = state.budget.cyclesUsed + 1;
-        const startedAt = now();
-        await this.#options.persistence.append({ version: 1, type: "cycle_started", timestamp: startedAt, loopId, payload: { cycle } });
-        yield { type: "loop-cycle-start", loopId, cycle };
-        const prompt = buildLoopCyclePrompt({
-          goal: request.goal,
-          cycle,
-          ...previousVerification === void 0 ? {} : {
-            memory: `Previous host verification: ${previousVerification.summary}`,
-            verification: previousVerification
-          }
-        });
-        let cycleInputTokens = 0;
-        let cycleOutputTokens = 0;
-        let workerError;
-        let workerText = "";
-        for await (const event of this.#options.runWorker({
-          goal: request.goal,
-          cycle,
-          workspace: executionWorkspace.root,
-          prompt,
-          signal: request.signal
-        })) {
-          if (event.type === "usage") {
-            cycleInputTokens += event.inputTokens;
-            cycleOutputTokens += event.outputTokens;
-          }
-          if (event.type === "error") workerError = event.error.message;
-          if (event.type === "text") workerText += event.text;
-          if (this.#options.hallucinationGuard !== void 0) {
-            if (event.type === "tool-start") {
-              this.#options.hallucinationGuard.recordToolCall(event.name, event.input, event.id);
-            } else if (event.type === "tool-end") {
-              this.#options.hallucinationGuard.recordToolResult(event.name, event.result, event.id);
+        signal.throwIfAborted();
+        await this.#options.onCycleBoundary?.(loopId);
+        if (memoryRotationActive()) return;
+        const pendingCycle = state.pendingCycle;
+        const cycle = pendingCycle?.cycle ?? state.budget.cyclesUsed + 1;
+        const startedAt = pendingCycle?.startedAt ?? now();
+        let cycleInputTokens = pendingCycle?.inputTokens ?? 0;
+        let cycleOutputTokens = pendingCycle?.outputTokens ?? 0;
+        let workerText = pendingCycle?.workerText ?? "";
+        if (pendingCycle === void 0 || pendingCycle === null) {
+          await this.#options.persistence.append({ version: 1, type: "cycle_started", timestamp: startedAt, loopId, payload: { cycle } });
+          yield { type: "loop-cycle-start", loopId, cycle };
+          const prompt = buildLoopCyclePrompt({
+            goal,
+            cycle,
+            ...previousVerification === void 0 ? {} : {
+              memory: `Previous host verification: ${previousVerification.summary}`,
+              verification: previousVerification
             }
+          });
+          let workerError;
+          let workerMemoryPressure = false;
+          let workerIterationLimit = false;
+          for await (const event of this.#options.runWorker({
+            goal,
+            cycle,
+            workspace: executionWorkspace.root,
+            prompt,
+            signal
+          })) {
+            if (event.type === "usage") {
+              cycleInputTokens += event.inputTokens;
+              cycleOutputTokens += event.outputTokens;
+            }
+            if (event.type === "error") {
+              workerError = event.error;
+              if (event.error.code === "memory_pressure") workerMemoryPressure = true;
+              if (event.error.code === "iteration_limit") workerIterationLimit = true;
+            }
+            if (event.type === "text") workerText = `${workerText}${event.text}`.slice(-16e3);
+            if (this.#options.hallucinationGuard !== void 0) {
+              if (event.type === "tool-start") {
+                this.#options.hallucinationGuard.recordToolCall(event.name, event.input, event.id);
+              } else if (event.type === "tool-end") {
+                this.#options.hallucinationGuard.recordToolResult(event.name, event.result, event.id);
+              }
+            }
+            yield { type: "worker-event", event };
+          }
+          if (workerMemoryPressure) return;
+          if (workerError !== void 0 && !workerIterationLimit && !isResumableWorkerError(workerError)) {
+            const status = workerError.code === "cancelled" ? "cancelled" : "failed";
+            state = LoopStateSchema.parse({
+              ...state,
+              budget: {
+                ...state.budget,
+                cyclesUsed: cycle,
+                inputTokens: state.budget.inputTokens + cycleInputTokens,
+                outputTokens: state.budget.outputTokens + cycleOutputTokens
+              }
+            });
+            state = await this.#terminal(state, status, workerError.message, now());
+            yield { type: "loop-terminal", loopId, status, reason: workerError.message };
+            return;
           }
-          yield { type: "worker-event", event };
-        }
-        if (workerError !== void 0) {
           state = LoopStateSchema.parse({
             ...state,
-            budget: {
-              ...state.budget,
-              cyclesUsed: cycle,
-              inputTokens: state.budget.inputTokens + cycleInputTokens,
-              outputTokens: state.budget.outputTokens + cycleOutputTokens
-            }
+            pendingCycle: { cycle, startedAt, inputTokens: cycleInputTokens, outputTokens: cycleOutputTokens, workerText },
+            updatedAt: now()
           });
-          state = await this.#terminal(state, "failed", workerError, now());
-          yield { type: "loop-terminal", loopId, status: "failed", reason: workerError };
-          return;
+          await this.#options.persistence.save(state);
         }
+        await this.#options.onMemoryCheckpoint?.(loopId);
+        if (memoryRotationActive()) return;
         if (plan.commands.length === 0) {
           plan = await this.#options.inferVerification(executionWorkspace.root);
           if (plan.commands.length > 0) {
@@ -12651,8 +12950,22 @@ var LoopOrchestrator = class {
           passed: false,
           commands: [],
           summary: plan.needsHumanReason ?? "No deterministic verification command was found after the discovery cycle."
-        } : await this.#options.runVerifier(plan, executionWorkspace.root, request.signal);
+        } : await this.#options.runVerifier(plan, executionWorkspace.root, signal);
+        await this.#options.onMemoryCheckpoint?.(loopId);
+        if (memoryRotationActive()) return;
         const fingerprint2 = await this.#options.fingerprint(executionWorkspace.root);
+        let guardWarnings = [];
+        if (evidence.passed && this.#options.hallucinationGuard !== void 0) {
+          try {
+            await this.#options.onMemoryCheckpoint?.(loopId);
+            if (memoryRotationActive()) return;
+            const report = await this.#options.hallucinationGuard.evaluate(goal, workerText);
+            await this.#options.onMemoryCheckpoint?.(loopId);
+            if (memoryRotationActive()) return;
+            guardWarnings = [...report.blockingReasons, ...report.warnings];
+          } catch {
+          }
+        }
         const completedAt = now();
         state = LoopStateSchema.parse({
           ...state,
@@ -12671,7 +12984,8 @@ var LoopOrchestrator = class {
             outputTokens: cycleOutputTokens,
             workspaceFingerprint: fingerprint2,
             verification: evidence
-          }]
+          }].slice(-64),
+          pendingCycle: null
         });
         await this.#options.persistence.save(state);
         await this.#options.persistence.append({
@@ -12689,20 +13003,6 @@ var LoopOrchestrator = class {
           return;
         }
         if (evidence.passed) {
-          let guardWarnings = [];
-          if (this.#options.hallucinationGuard !== void 0) {
-            try {
-              const report = await this.#options.hallucinationGuard.evaluate(request.goal, workerText);
-              if (!report.passed) {
-                const guardReason = report.blockingReasons.join("; ") || "Hallucination guard blocked completion.";
-                state = await this.#terminal(state, "failed", guardReason, now());
-                yield { type: "loop-terminal", loopId, status: "failed", reason: guardReason };
-                return;
-              }
-              guardWarnings = report.warnings;
-            } catch {
-            }
-          }
           const reason = [evidence.summary, ...guardWarnings].filter(Boolean).join("; ");
           state = await this.#terminal(state, "succeeded", reason, now());
           yield { type: "loop-terminal", loopId, status: "succeeded", reason };
@@ -12713,8 +13013,8 @@ ${evidence.summary}`;
         repeatedFailures = failureSignature === previousFailureSignature ? repeatedFailures + 1 : 1;
         previousFailureSignature = failureSignature;
         previousVerification = evidence;
-        if (repeatedFailures >= 3) {
-          const reason = "The same verification failure repeated three times without material workspace progress.";
+        if (this.#options.maxNoProgressCycles !== void 0 && repeatedFailures >= this.#options.maxNoProgressCycles) {
+          const reason = `The same verification failure repeated ${this.#options.maxNoProgressCycles} times without material workspace progress.`;
           state = await this.#terminal(state, "no_progress", reason, now());
           yield { type: "loop-terminal", loopId, status: "no_progress", reason };
           return;
@@ -12728,7 +13028,7 @@ ${evidence.summary}`;
             cycleCheckpoint: state.budget.cycleCheckpoint,
             tokenCheckpoint: state.budget.tokenCheckpoint
           };
-          const confirmation = await this.#options.confirmBudget(state, decision.dimensions, request.signal);
+          const confirmation = await this.#options.confirmBudget(state, decision.dimensions, signal);
           if (confirmation === "unavailable") {
             const reason = "Loop budget extension requires user confirmation.";
             state = await this.#terminal(state, "needs_human", reason, now());
@@ -12755,8 +13055,9 @@ ${evidence.summary}`;
         }
       }
     } catch (error) {
-      const status = request.signal.aborted ? "cancelled" : "failed";
-      const reason = request.signal.aborted ? "Loop cancelled by user." : message(error);
+      if (memoryRotationActive()) return;
+      const status = signal.aborted ? "cancelled" : "failed";
+      const reason = signal.aborted ? "Loop cancelled by user." : message(error);
       state = await this.#terminal(state, status, reason, now());
       yield { type: "loop-terminal", loopId, status, reason };
     }
@@ -12774,6 +13075,19 @@ ${evidence.summary}`;
     return state;
   }
 };
+function isResumableWorkerError(error) {
+  return error.code !== "authentication" && error.code !== "model_not_found" && error.code !== "cancelled" && error.code !== "memory_pressure";
+}
+function countTrailingFailureSignature(cycles, signature) {
+  let count = 0;
+  for (let index = cycles.length - 1; index >= 0; index -= 1) {
+    const cycle = cycles[index];
+    if (`${cycle.workspaceFingerprint}
+${cycle.verification.summary}` !== signature) break;
+    count += 1;
+  }
+  return count;
+}
 
 // src/goal/orchestrator.ts
 import { createHash as createHash11 } from "crypto";
@@ -12841,6 +13155,11 @@ var GoalStateSchema = z18.object({
   planPath: z18.string().nullable(),
   verifyRounds: z18.number().int().min(0),
   workerRounds: z18.number().int().min(0),
+  /** Worker output checkpoint used to resume verification without rerunning tools. */
+  pendingVerification: z18.object({
+    round: z18.number().int().positive(),
+    finalResponse: z18.string().max(16e3)
+  }).strict().nullable().optional(),
   lastGaps: z18.array(GapSchema),
   gapFingerprint: z18.string(),
   stallStreak: z18.number().int().min(0),
@@ -12886,6 +13205,7 @@ ${objective}`
   ].join("\n");
 }
 async function runPlanner(options) {
+  await options.onProgress?.();
   const { adapter, model } = options.registry.get(options.modelId);
   const prompt = buildPlannerPrompt(options.objective);
   const messages = [{ role: "user", content: prompt }];
@@ -12897,6 +13217,7 @@ async function runPlanner(options) {
     tools: [],
     ...options.signal === void 0 ? {} : { signal: options.signal }
   })) {
+    await options.onProgress?.();
     if (event.type === "text") text += event.text;
     else if (event.type === "error") throw event.error;
     else if (event.type === "done") {
@@ -13003,7 +13324,7 @@ async function runClassifier(evidence, plan, options) {
   const skepticResults = await Promise.all(
     Array.from(
       { length: n },
-      (_, i) => runOneSkeptic(evidence, plan, i + 1, adapter, model, options.signal)
+      (_, i) => runOneSkeptic(evidence, plan, i + 1, adapter, model, options.signal, options.onProgress)
     )
   );
   const verdicts = [];
@@ -13020,7 +13341,8 @@ async function runClassifier(evidence, plan, options) {
   }
   return aggregate(verdicts);
 }
-async function runOneSkeptic(evidence, plan, index, adapter, model, signal) {
+async function runOneSkeptic(evidence, plan, index, adapter, model, signal, onProgress) {
+  await onProgress?.();
   const prompt = buildSkepticPrompt(evidence, plan, index);
   const messages = [{ role: "user", content: prompt }];
   let text = "";
@@ -13030,6 +13352,7 @@ async function runOneSkeptic(evidence, plan, index, adapter, model, signal) {
     tools: [],
     ...signal === void 0 ? {} : { signal }
   })) {
+    await onProgress?.();
     if (event.type === "text") text += event.text;
     else if (event.type === "error") throw event.error;
     else if (event.type === "done") break;
@@ -13184,7 +13507,7 @@ var GoalOrchestrator = class {
   async *run(request) {
     const timestamp2 = () => this.#options.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
     const createdAt = timestamp2();
-    let state = {
+    const state = {
       id: this.#options.idFactory?.() ?? `goal-${Date.now().toString(36)}`,
       objective: request.goal,
       phase: "planning",
@@ -13193,6 +13516,7 @@ var GoalOrchestrator = class {
       planPath: null,
       verifyRounds: 0,
       workerRounds: 0,
+      pendingVerification: null,
       lastGaps: [],
       gapFingerprint: "",
       stallStreak: 0,
@@ -13201,91 +13525,164 @@ var GoalOrchestrator = class {
       createdAt,
       updatedAt: createdAt
     };
+    yield* this.#execute(state, request.signal);
+  }
+  /**
+   * Continue a goal whose process rotated onto a fresh heap. The persisted
+   * state decides where to pick up; an interrupted round simply runs again.
+   */
+  async *resume(request) {
+    const persistence = this.#options.persistence;
+    if (persistence === void 0 || persistence.load === void 0) {
+      throw new Error("Goal persistence does not support resume");
+    }
+    let state;
+    try {
+      state = await persistence.load(request.goalId);
+    } catch (error) {
+      yield { type: "goal-failed", reason: message(error) };
+      return;
+    }
+    if (state.status !== "active" && state.status !== "not_achieved") {
+      yield { type: "goal-failed", reason: `Goal "${state.id}" is ${state.status}; it cannot be resumed.` };
+      return;
+    }
+    yield { type: "goal-resumed", goalId: state.id, round: resumeStartRound(state) };
+    yield* this.#execute(state, request.signal);
+  }
+  async *#execute(initialState, signal) {
+    const timestamp2 = () => this.#options.now?.() ?? (/* @__PURE__ */ new Date()).toISOString();
+    let state = initialState;
     const persistState = async (patch) => {
       state = { ...state, ...patch, updatedAt: timestamp2() };
       await this.#options.persistence?.save(state);
     };
+    const memoryCheckpoint = async () => {
+      await this.#options.onMemoryCheckpoint?.(state.id);
+      if (memoryRotationActive()) throw new Error("Heap rotation requested");
+    };
     await persistState();
     const workspace = this.#options.workspace;
     let plan;
     let planPath;
-    try {
-      request.signal.throwIfAborted();
-      plan = await runPlanner({
-        registry: this.#options.registry,
-        modelId: this.#options.plannerModelId,
-        objective: request.goal,
-        signal: request.signal
-      });
-      planPath = await writePlanFile(workspace, plan);
-      await persistState({ plan, planPath, contractHash: contractHash(request.goal, plan) });
-      yield { type: "goal-plan-created", plan, planPath };
-    } catch (error) {
-      const reason = `Goal planning failed: ${message(error)}`;
-      await persistState({ phase: "complete", status: "failed" });
-      yield { type: "goal-plan-failed", reason };
-      yield { type: "goal-failed", reason };
-      return;
-    }
-    let priorGaps = [];
-    let priorFingerprint = "";
-    let stallStreak = 0;
-    for (let round = 1; round <= this.#options.maxRounds; round++) {
-      request.signal.throwIfAborted();
-      const workerPrompt = buildWorkerPrompt(request.goal, plan, priorGaps, round);
-      await persistState({
-        phase: "executing",
-        status: "active",
-        workerRounds: round,
-        lastGaps: priorGaps,
-        gapFingerprint: priorFingerprint,
-        stallStreak
-      });
-      yield { type: "goal-worker-start", round };
-      let finalResponse = "";
-      let workerError;
-      try {
-        for await (const event of this.#options.runWorker({
-          goal: request.goal,
-          round,
-          workspace,
-          prompt: workerPrompt,
-          priorGaps: formatPriorGaps(priorGaps),
-          signal: request.signal
-        })) {
-          yield { type: "goal-worker-event", round, event };
-          if (event.type === "text") finalResponse += event.text;
-          if (event.type === "error") {
-            workerError = event.error.message;
-            break;
+    if (state.plan === null) {
+      let planningAttempt = 0;
+      while (true) {
+        try {
+          signal.throwIfAborted();
+          await memoryCheckpoint();
+          plan = await runPlanner({
+            registry: this.#options.registry,
+            modelId: this.#options.plannerModelId,
+            objective: state.objective,
+            signal,
+            onProgress: memoryCheckpoint
+          });
+          planPath = await writePlanFile(workspace, plan);
+          await persistState({ phase: "executing", plan, planPath, contractHash: contractHash(state.objective, plan) });
+          yield { type: "goal-plan-created", plan, planPath };
+          break;
+        } catch (error) {
+          if (memoryRotationActive()) return;
+          const normalized = normalizeProviderError(error);
+          if (!isResumableStageError(normalized)) {
+            const reason = `Goal planning failed: ${normalized.message}`;
+            await persistState({ phase: "complete", status: "failed" });
+            yield { type: "goal-plan-failed", reason };
+            yield { type: "goal-failed", reason };
+            return;
           }
+          planningAttempt += 1;
+          const delayMs = stageRetryDelay(this.#options, planningAttempt);
+          yield { type: "goal-stage-retry", stage: "planning", attempt: planningAttempt, reason: normalized.message, delayMs };
+          await waitForStageRetry(delayMs, signal);
         }
-      } catch (error) {
-        workerError = message(error);
       }
-      if (workerError !== void 0) {
-        const reason = `Worker error in round ${round}: ${workerError}`;
-        await persistState({ phase: "complete", status: "failed" });
-        yield { type: "goal-failed", reason };
-        return;
+    } else {
+      plan = state.plan;
+      planPath = state.planPath ?? await writePlanFile(workspace, plan);
+      await persistState({ phase: "executing", status: "active", ...state.planPath === null ? { planPath } : {} });
+    }
+    let priorGaps = state.lastGaps;
+    let priorFingerprint = state.gapFingerprint;
+    let stallStreak = state.stallStreak;
+    const startRound = resumeStartRound(state);
+    for (let round = startRound; this.#options.maxRounds === void 0 || round <= this.#options.maxRounds; round++) {
+      signal.throwIfAborted();
+      await this.#options.onRoundBoundary?.(state.id);
+      if (memoryRotationActive()) return;
+      const pendingVerification = state.pendingVerification?.round === round ? state.pendingVerification : void 0;
+      let finalResponse = pendingVerification?.finalResponse ?? "";
+      if (pendingVerification === void 0) {
+        const workerPrompt = buildWorkerPrompt(state.objective, plan, priorGaps, round);
+        await persistState({
+          phase: "executing",
+          status: "active",
+          workerRounds: round,
+          pendingVerification: null,
+          lastGaps: priorGaps,
+          gapFingerprint: priorFingerprint,
+          stallStreak
+        });
+        yield { type: "goal-worker-start", round };
+        let workerError;
+        let workerMemoryPressure = false;
+        let workerIterationLimit = false;
+        try {
+          for await (const event of this.#options.runWorker({
+            goal: state.objective,
+            round,
+            workspace,
+            prompt: workerPrompt,
+            priorGaps: formatPriorGaps(priorGaps),
+            signal
+          })) {
+            yield { type: "goal-worker-event", round, event };
+            if (event.type === "text") finalResponse = `${finalResponse}${event.text}`.slice(-16e3);
+            if (event.type === "error") {
+              workerError = event.error;
+              if (event.error.code === "memory_pressure") workerMemoryPressure = true;
+              if (event.error.code === "iteration_limit") workerIterationLimit = true;
+              break;
+            }
+          }
+        } catch (error) {
+          if (memoryRotationActive()) return;
+          workerError = { code: "unknown", message: message(error) };
+        }
+        if (workerMemoryPressure) return;
+        if (workerError !== void 0 && !workerIterationLimit && !isResumableWorkerError2(workerError)) {
+          const reason = `Worker error in round ${round}: ${workerError.message}`;
+          await persistState({ phase: "complete", status: "failed" });
+          yield { type: "goal-failed", reason };
+          return;
+        }
+        await persistState({
+          phase: "verifying",
+          status: "active",
+          pendingVerification: { round, finalResponse }
+        });
       }
-      await persistState({ phase: "verifying", status: "active", verifyRounds: round });
       yield { type: "goal-verification-start", round };
-      const hostVerification = await this.#options.verifyHost?.(request.signal);
+      await this.#options.onMemoryCheckpoint?.(state.id);
+      if (memoryRotationActive()) return;
+      const hostVerification = await this.#options.verifyHost?.(signal);
+      await this.#options.onMemoryCheckpoint?.(state.id);
+      if (memoryRotationActive()) return;
       const evidence = await collectEvidence(
         workspace,
-        request.goal,
+        state.objective,
         finalResponse.slice(-4e3),
         // Last 4000 chars of response
         formatPriorGaps(priorGaps),
         state.contractHash,
         hostVerification
       );
-      await persistState({ evidenceRounds: [...state.evidenceRounds, {
+      await persistState({ evidenceRounds: [...state.evidenceRounds.filter((item) => item.round !== round), {
         round,
         workspaceDiffHash: evidence.workspaceDiffHash,
         ...hostVerification === void 0 ? {} : { hostVerification }
-      }] });
+      }].slice(-64) });
       let outcome;
       if (plan.kind === "code-change" && hostVerification !== void 0 && !hostVerification.passed) {
         if (hostVerification.commands.length === 0) {
@@ -13299,20 +13696,34 @@ var GoalOrchestrator = class {
             fingerprint: createHash11("sha256").update(hostVerification.summary).digest("hex").slice(0, 16)
           };
         }
-      } else try {
-        outcome = await runClassifier(evidence, plan, {
-          registry: this.#options.registry,
-          modelId: this.#options.classifierModelId,
-          skepticCount: this.#options.skepticCount,
-          workspace,
-          signal: request.signal
-        });
-      } catch (error) {
-        outcome = {
-          type: "blocked",
-          reason: `Classifier infrastructure error: ${message(error)}`
-        };
+      } else {
+        let classifierAttempt = 0;
+        while (true) {
+          try {
+            outcome = await runClassifier(evidence, plan, {
+              registry: this.#options.registry,
+              modelId: this.#options.classifierModelId,
+              skepticCount: this.#options.skepticCount,
+              workspace,
+              signal,
+              onProgress: memoryCheckpoint
+            });
+            break;
+          } catch (error) {
+            if (memoryRotationActive()) return;
+            const normalized = normalizeProviderError(error);
+            if (!isResumableStageError(normalized)) {
+              outcome = { type: "blocked", reason: `Classifier infrastructure error: ${normalized.message}` };
+              break;
+            }
+            classifierAttempt += 1;
+            const delayMs = stageRetryDelay(this.#options, classifierAttempt);
+            yield { type: "goal-stage-retry", stage: "classification", attempt: classifierAttempt, reason: normalized.message, delayMs };
+            await waitForStageRetry(delayMs, signal);
+          }
+        }
       }
+      await persistState({ verifyRounds: round, pendingVerification: null });
       yield {
         type: "goal-verdict",
         round,
@@ -13332,7 +13743,7 @@ var GoalOrchestrator = class {
       }
       if (outcome.fingerprint === priorFingerprint) {
         stallStreak++;
-        if (stallStreak >= this.#options.maxStallStreak) {
+        if (this.#options.maxStallStreak !== void 0 && stallStreak >= this.#options.maxStallStreak) {
           await persistState({
             phase: "complete",
             status: "failed",
@@ -13372,6 +13783,37 @@ var GoalOrchestrator = class {
 function contractHash(objective, plan) {
   return createHash11("sha256").update(JSON.stringify({ objective, plan })).digest("hex");
 }
+function resumeStartRound(state) {
+  if (state.pendingVerification !== void 0 && state.pendingVerification !== null) {
+    return state.pendingVerification.round;
+  }
+  return state.verifyRounds >= state.workerRounds ? state.workerRounds + 1 : Math.max(state.workerRounds, 1);
+}
+function isResumableWorkerError2(error) {
+  return error.code !== "authentication" && error.code !== "model_not_found" && error.code !== "cancelled" && error.code !== "memory_pressure";
+}
+function isResumableStageError(error) {
+  return error.code !== "authentication" && error.code !== "model_not_found" && error.code !== "cancelled" && error.code !== "memory_pressure";
+}
+function stageRetryDelay(options, attempt) {
+  const delayMs = options.stageRetryDelayMs?.(attempt) ?? Math.min(6e4, 1e3 * 2 ** Math.min(attempt - 1, 6));
+  return Number.isSafeInteger(delayMs) && delayMs >= 0 ? delayMs : 1e3;
+}
+function waitForStageRetry(delayMs, signal) {
+  signal.throwIfAborted();
+  if (delayMs === 0) return Promise.resolve();
+  return new Promise((resolvePromise, reject) => {
+    const onAbort = () => {
+      clearTimeout(timer);
+      reject(signal.reason instanceof Error ? signal.reason : new Error("Goal cancelled"));
+    };
+    const timer = setTimeout(() => {
+      signal.removeEventListener("abort", onAbort);
+      resolvePromise();
+    }, delayMs);
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+}
 async function writePlanFile(workspace, plan) {
   const dir = join17(workspace, ".flavor");
   const planPath = join17(dir, "goal-plan.md");
@@ -13451,7 +13893,7 @@ function formatPriorGaps(gaps) {
 // src/goal/store.ts
 import { constants as constants4 } from "fs";
 import { randomUUID as randomUUID11 } from "crypto";
-import { lstat as lstat7, mkdir as mkdir11, open as open6, rename as rename4, rm as rm4 } from "fs/promises";
+import { lstat as lstat7, mkdir as mkdir11, open as open6, readFile as readFile11, rename as rename4, rm as rm4, stat as stat6 } from "fs/promises";
 import { dirname as dirname10, join as join18, relative as relative11, resolve as resolve14, sep as sep11 } from "path";
 var DEFAULT_MAX_BYTES = 1024 * 1024;
 var GoalStore = class {
@@ -13488,6 +13930,28 @@ var GoalStore = class {
       await rm4(temporary, { force: true }).catch(() => void 0);
     }
   }
+  /** Reload a persisted goal so a rotated process can resume it. */
+  async load(goalId) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(goalId)) {
+      throw new Error(`Goal "${goalId}" was not found`);
+    }
+    await assertNoSymlink(this.#workspace, dirname10(this.#root));
+    await assertNoSymlink(this.#workspace, this.#root);
+    const target = join18(this.#root, `${goalId}.json`);
+    try {
+      const metadata = await stat6(target);
+      if (!metadata.isFile() || metadata.size > this.#maxBytes) {
+        throw new Error("Goal state is not a bounded regular file");
+      }
+      const raw = await readFile11(target, "utf8");
+      return GoalStateSchema.parse(JSON.parse(raw));
+    } catch (error) {
+      if (isCode3(error, "ENOENT")) throw new Error(`Goal "${goalId}" was not found`);
+      const quarantine = `${target}.corrupt-${Date.now()}-${randomUUID11().slice(0, 8)}`;
+      await rename4(target, quarantine).catch(() => void 0);
+      throw new Error(`Goal "${goalId}" is corrupt and was quarantined`);
+    }
+  }
 };
 async function assertNoSymlink(root, target) {
   let cursor = resolve14(target);
@@ -13514,7 +13978,7 @@ function isCode3(error, code) {
 }
 
 // src/loop/isolation.ts
-import { appendFile as appendFile2, mkdir as mkdir12, readFile as readFile11 } from "fs/promises";
+import { appendFile as appendFile2, mkdir as mkdir12, readFile as readFile12 } from "fs/promises";
 import { join as join19, resolve as resolve15 } from "path";
 var CODE_CHANGE = /\b(?:fix|implement|add|update|change|modify|refactor|build|create|remove|delete|write|migrate)\b|修复|实现|添加|更新|修改|重构|创建|删除|迁移/i;
 var READ_ONLY = /\b(?:review|analy[sz]e|inspect|explain|research|investigate|audit|summari[sz]e|report)\b|调研|分析|审查|检查|解释|研究|总结|报告/i;
@@ -13574,7 +14038,7 @@ async function ensureWorktreeDirectoryIgnored(root) {
   await mkdir12(infoDirectory, { recursive: true });
   let existing = "";
   try {
-    existing = await readFile11(excludePath, "utf8");
+    existing = await readFile12(excludePath, "utf8");
   } catch (error) {
     if (!(typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT")) throw error;
   }
@@ -13585,7 +14049,7 @@ async function ensureWorktreeDirectoryIgnored(root) {
 
 // src/loop/store.ts
 import { constants as constants5 } from "fs";
-import { lstat as lstat8, mkdir as mkdir13, open as open7, readFile as readFile12, realpath as realpath5, rename as rename5, rm as rm5, stat as stat6 } from "fs/promises";
+import { lstat as lstat8, mkdir as mkdir13, open as open7, readFile as readFile13, realpath as realpath5, rename as rename5, rm as rm5, stat as stat7 } from "fs/promises";
 import { dirname as dirname11, join as join20, relative as relative12, resolve as resolve16, sep as sep12 } from "path";
 import { randomUUID as randomUUID12 } from "crypto";
 var LOOP_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
@@ -13636,9 +14100,9 @@ var LoopStore = class {
     const directory = await this.#safeExisting(loopId);
     const target = join20(directory, "state.json");
     try {
-      const metadata = await stat6(target);
+      const metadata = await stat7(target);
       if (!metadata.isFile() || metadata.size > this.#maxBytes) throw new Error("Loop state is not a bounded regular file");
-      const raw = await readFile12(target, "utf8");
+      const raw = await readFile13(target, "utf8");
       const state = LoopStateSchema.parse(JSON.parse(raw));
       await this.#assertWorkspace(state.workspace);
       return state;
@@ -13727,9 +14191,10 @@ function isCode4(error, code) {
 }
 
 // src/loop/verifier.ts
-import { readFile as readFile13 } from "fs/promises";
+import { readFile as readFile14 } from "fs/promises";
 import { join as join21 } from "path";
 var SCRIPT_PRIORITY = ["test", "typecheck", "lint", "build", "smoke:install"];
+var MAX_PERSISTED_VERIFICATION_STREAM_BYTES = 1024;
 async function inferVerificationPlan(workspace) {
   const commands = [];
   const seen = /* @__PURE__ */ new Set();
@@ -13765,9 +14230,9 @@ async function runVerificationPlan(plan, workspace, signal, executionEnvironment
       command: item.command,
       args: item.args,
       exitCode: result.exitCode,
-      stdout: result.stdout,
-      stderr: result.stderr,
-      truncated: result.truncated
+      stdout: boundedEvidenceTail(result.stdout),
+      stderr: boundedEvidenceTail(result.stderr),
+      truncated: result.truncated || Buffer.byteLength(result.stdout, "utf8") > MAX_PERSISTED_VERIFICATION_STREAM_BYTES || Buffer.byteLength(result.stderr, "utf8") > MAX_PERSISTED_VERIFICATION_STREAM_BYTES
     });
     if (result.exitCode !== 0) {
       return { passed: false, commands, summary: `${item.label} failed with exit code ${String(result.exitCode)}.` };
@@ -13775,6 +14240,14 @@ async function runVerificationPlan(plan, workspace, signal, executionEnvironment
   }
   return { passed: true, commands, summary: `Passed ${commands.length} deterministic verification command(s).` };
 }
+function boundedEvidenceTail(value) {
+  const encoded = Buffer.from(value, "utf8");
+  if (encoded.byteLength <= MAX_PERSISTED_VERIFICATION_STREAM_BYTES) return value;
+  const prefix = Buffer.from("\u2026\n", "utf8");
+  let start = encoded.byteLength - (MAX_PERSISTED_VERIFICATION_STREAM_BYTES - prefix.byteLength);
+  while (start < encoded.byteLength && (encoded[start] & 192) === 128) start += 1;
+  return `${prefix.toString("utf8")}${encoded.subarray(start).toString("utf8")}`;
+}
 function npmScript(name) {
   return name === "test" ? { label: name, command: "npm", args: ["test"] } : { label: name, command: "npm", args: ["run", name] };
 }
@@ -13806,7 +14279,7 @@ function isUnconditionalPassThrough(script) {
 }
 async function optionalText(path) {
   try {
-    return await readFile13(path, "utf8");
+    return await readFile14(path, "utf8");
   } catch (error) {
     if (isCode5(error, "ENOENT")) return void 0;
     throw error;
@@ -13827,7 +14300,7 @@ function isCode5(error, code) {
 
 // src/models/anthropic.ts
 import Anthropic from "@anthropic-ai/sdk";
-import { readFile as readFile14 } from "fs/promises";
+import { readFile as readFile15 } from "fs/promises";
 
 // src/utils/json.ts
 function safeParseJson(input) {
@@ -13868,6 +14341,35 @@ function normalizeToolCallInput(input, maxDepth = 3) {
   throw new Error(`Tool-call input must decode to an object; received ${kind}`);
 }
 
+// src/utils/abort.ts
+function waitWithSignal(operation, signal) {
+  if (signal === void 0) return operation;
+  return new Promise((resolve32, reject) => {
+    const abort2 = () => reject(signal.reason);
+    if (signal.aborted) abort2();
+    else signal.addEventListener("abort", abort2, { once: true });
+    operation.then(resolve32, reject).finally(() => signal.removeEventListener("abort", abort2));
+  });
+}
+function createScopedAbortSignal(parent) {
+  const controller = new AbortController();
+  let disposed = false;
+  const abort2 = () => {
+    if (!controller.signal.aborted) controller.abort(parent?.reason);
+  };
+  if (parent?.aborted) abort2();
+  else parent?.addEventListener("abort", abort2, { once: true });
+  return {
+    signal: controller.signal,
+    dispose: () => {
+      if (disposed) return;
+      disposed = true;
+      parent?.removeEventListener("abort", abort2);
+      abort2();
+    }
+  };
+}
+
 // src/models/anthropic.ts
 var CLAUDE_CLIENT_HEADERS = {
   "User-Agent": "claude-cli/2.1.0 (external, cli)",
@@ -13990,6 +14492,7 @@ var AnthropicModelAdapter = class {
     void appendUsageLog(line);
   }
   async *stream(request) {
+    const requestAbort = createScopedAbortSignal(request.signal);
     let inputTokens = 0;
     let outputTokens = 0;
     let hasUsage = false;
@@ -14064,7 +14567,7 @@ var AnthropicModelAdapter = class {
             source: {
               type: "base64",
               media_type: block.mediaType,
-              data: (await readFile14(block.source.path)).toString("base64")
+              data: (await readFile15(block.source.path)).toString("base64")
             }
           }));
           if (message2.cacheBreakpoint && Array.isArray(content) && content.length > 0) {
@@ -14113,13 +14616,13 @@ var AnthropicModelAdapter = class {
       };
       let stream;
       try {
-        stream = await this.client.messages.create(body, { signal: request.signal });
+        stream = await this.client.messages.create(body, { signal: requestAbort.signal });
       } catch (error) {
         if (this.thinkingBudget > 0 && !this.#thinkingRejected && isThinkingParamRejected(error)) {
           this.#thinkingRejected = true;
           delete body.thinking;
           stripThinkingBlocks(body.messages);
-          stream = await this.client.messages.create(body, { signal: request.signal });
+          stream = await this.client.messages.create(body, { signal: requestAbort.signal });
         } else {
           throw error;
         }
@@ -14231,6 +14734,8 @@ var AnthropicModelAdapter = class {
         };
       }
       yield { type: "error", error: normalizeProviderError(error) };
+    } finally {
+      requestAbort.dispose();
     }
   }
 };
@@ -14284,7 +14789,7 @@ function resolveCacheProfile(input) {
 
 // src/models/openai.ts
 import OpenAI from "openai";
-import { readFile as readFile15 } from "fs/promises";
+import { readFile as readFile16 } from "fs/promises";
 async function toInput(message2) {
   if (message2.role === "tool") {
     if (!message2.toolCallId) throw new Error("Tool messages require toolCallId");
@@ -14296,7 +14801,7 @@ async function toInput(message2) {
   }
   const content = typeof message2.content === "string" ? message2.content : await Promise.all(message2.content.map(async (block) => block.type === "text" ? { type: "input_text", text: block.text } : {
     type: "input_image",
-    image_url: `data:${block.mediaType};base64,${(await readFile15(block.source.path)).toString("base64")}`,
+    image_url: `data:${block.mediaType};base64,${(await readFile16(block.source.path)).toString("base64")}`,
     detail: "auto"
   }));
   return [
@@ -14375,6 +14880,7 @@ var OpenAIModelAdapter = class {
     void appendUsageLog(line);
   }
   async *stream(request) {
+    const requestAbort = createScopedAbortSignal(request.signal);
     const callIds = /* @__PURE__ */ new Map();
     const pendingCalls = /* @__PURE__ */ new Map();
     const emittedCalls = /* @__PURE__ */ new Set();
@@ -14391,7 +14897,7 @@ var OpenAIModelAdapter = class {
           strict: tool.strict ?? true
         }))
       };
-      const stream = this.client.responses.stream(body, { signal: request.signal });
+      const stream = this.client.responses.stream(body, { signal: requestAbort.signal });
       for await (const event of stream) {
         if (event.type === "response.output_item.added" && event.item?.type === "function_call" && event.output_index !== void 0 && event.item.call_id) {
           callIds.set(event.output_index, event.item.call_id);
@@ -14485,6 +14991,8 @@ var OpenAIModelAdapter = class {
       }
     } catch (error) {
       yield { type: "error", error: normalizeProviderError(error) };
+    } finally {
+      requestAbort.dispose();
     }
   }
 };
@@ -15127,7 +15635,7 @@ function isStoredToken(value) {
 }
 
 // src/permissions/policy.ts
-import { readFile as readFile16 } from "fs/promises";
+import { readFile as readFile17 } from "fs/promises";
 import { join as join22, resolve as resolve18 } from "path";
 import { z as z20 } from "zod";
 var DecisionSchema2 = z20.enum(["allow", "ask", "deny"]);
@@ -15173,7 +15681,7 @@ async function loadPermissionPolicy(options) {
   for (const source of sources) {
     let raw;
     try {
-      raw = await readFile16(source.path, "utf8");
+      raw = await readFile17(source.path, "utf8");
     } catch (error) {
       if (isCode6(error, "ENOENT")) continue;
       throw error;
@@ -15939,7 +16447,7 @@ function createSkillResourceTool(registry) {
 
 // src/session/store.ts
 import { constants as constants7 } from "fs";
-import { lstat as lstat10, mkdir as mkdir14, open as open8, readFile as readFile17, readdir as readdir7, realpath as realpath7, rename as rename6, rm as rm6, stat as stat7 } from "fs/promises";
+import { lstat as lstat10, mkdir as mkdir14, open as open8, readFile as readFile18, readdir as readdir7, realpath as realpath7, rename as rename6, rm as rm6, stat as stat8 } from "fs/promises";
 import { basename as basename4, dirname as dirname13, join as join23, relative as relative14, resolve as resolve20, sep as sep14 } from "path";
 import { randomUUID as randomUUID13 } from "crypto";
 import { z as z22 } from "zod";
@@ -16137,7 +16645,7 @@ var SessionStore = class {
           release: async () => {
             if (released) return;
             try {
-              if (await readFile17(path, "utf8") === token) await rm6(path, { force: true });
+              if (await readFile18(path, "utf8") === token) await rm6(path, { force: true });
             } catch (error) {
               if (!isCode7(error, "ENOENT")) throw error;
             }
@@ -16331,14 +16839,14 @@ function storedSessionVersion(raw) {
 }
 async function reclaimStaleSessionLock(path) {
   try {
-    const token = await readFile17(path, "utf8");
-    const metadata = await stat7(path);
+    const token = await readFile18(path, "utf8");
+    const metadata = await stat8(path);
     const owner2 = parseSessionLockOwner(token);
     if (owner2 !== void 0 && isProcessAlive(owner2)) return owner2;
     if (owner2 === void 0 && Date.now() - metadata.mtimeMs <= INVALID_SESSION_LOCK_STALE_MS) {
       throw new Error(`Session writer lock ${path} is incomplete or invalid; retry after the owning process exits`);
     }
-    if (await readFile17(path, "utf8") !== token) return void 0;
+    if (await readFile18(path, "utf8") !== token) return void 0;
     const stale = `${path}.stale-${process.pid}-${randomUUID13()}`;
     try {
       await rename6(path, stale);
@@ -16371,10 +16879,10 @@ function isProcessAlive(pid) {
   }
 }
 async function boundedRead(path, maxBytes) {
-  const metadata = await stat7(path);
+  const metadata = await stat8(path);
   if (!metadata.isFile()) throw new Error("Session path is not a regular file");
   if (metadata.size > maxBytes) throw new Error(`Session exceeds maximum read size of ${maxBytes} bytes`);
-  const value = await readFile17(path);
+  const value = await readFile18(path);
   if (value.byteLength > maxBytes) throw new Error(`Session exceeds maximum read size of ${maxBytes} bytes`);
   return value.toString("utf8");
 }
@@ -16564,11 +17072,70 @@ function sanitize2(input, seen = /* @__PURE__ */ new WeakSet()) {
   return output;
 }
 
+// src/utils/rotation-census.ts
+import { mkdirSync as mkdirSync3, readdirSync, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "fs";
+import { join as join24 } from "path";
+import { writeHeapSnapshot } from "v8";
+var CENSUS_PREFIX = "rotation-census-";
+var SNAPSHOT_PREFIX = "heap-";
+var KEEP_CENSUS_FILES = 5;
+var KEEP_SNAPSHOT_FILES = 2;
+function censusHeapBlock(reading) {
+  const usage = process.memoryUsage();
+  const mb = (bytes) => Math.round(bytes / 1048576);
+  return {
+    heapUsedMb: mb(reading.heapUsed),
+    heapLimitMb: mb(reading.heapLimit),
+    rawRatio: Number(reading.ratio.toFixed(3)),
+    ...reading.verifiedRatio === void 0 ? {} : { verifiedRatio: Number(reading.verifiedRatio.toFixed(3)) },
+    gcVerified: reading.gcVerified,
+    rssMb: mb(usage.rss),
+    externalMb: mb(usage.external),
+    arrayBuffersMb: mb(usage.arrayBuffers),
+    ...reading.memoryLimit === void 0 ? {} : { memoryLimitMb: mb(reading.memoryLimit) },
+    ...reading.rssRatio === void 0 ? {} : { rssRatio: Number(reading.rssRatio.toFixed(3)) }
+  };
+}
+function writeRotationCensus(workspace, census) {
+  try {
+    const directory = join24(workspace, ".flavor", "tmp");
+    mkdirSync3(directory, { recursive: true });
+    const path = join24(directory, `${CENSUS_PREFIX}${Date.now()}.json`);
+    writeFileSync2(path, `${JSON.stringify(census, null, 2)}
+`, { encoding: "utf8", mode: 384 });
+    prune(directory, CENSUS_PREFIX, ".json", KEEP_CENSUS_FILES);
+    return path;
+  } catch {
+    return void 0;
+  }
+}
+function writeRotationHeapSnapshot(workspace) {
+  try {
+    const directory = join24(workspace, ".flavor", "tmp");
+    mkdirSync3(directory, { recursive: true });
+    const path = join24(directory, `${SNAPSHOT_PREFIX}${Date.now()}.heapsnapshot`);
+    writeHeapSnapshot(path);
+    prune(directory, SNAPSHOT_PREFIX, ".heapsnapshot", KEEP_SNAPSHOT_FILES);
+    return path;
+  } catch {
+    return void 0;
+  }
+}
+function prune(directory, prefix, suffix, keep) {
+  const stale = readdirSync(directory).filter((name) => name.startsWith(prefix) && name.endsWith(suffix)).sort().slice(0, -keep);
+  for (const name of stale) {
+    try {
+      unlinkSync2(join24(directory, name));
+    } catch {
+    }
+  }
+}
+
 // src/sleep/organizer.ts
 import { constants as constants8 } from "fs";
 import { randomUUID as randomUUID14 } from "crypto";
 import { lstat as lstat11, mkdir as mkdir15, open as open9, readdir as readdir8, realpath as realpath8, rename as rename7, rm as rm7 } from "fs/promises";
-import { isAbsolute as isAbsolute10, join as join24, relative as relative15, resolve as resolve21, sep as sep15 } from "path";
+import { isAbsolute as isAbsolute10, join as join25, relative as relative15, resolve as resolve21, sep as sep15 } from "path";
 import { z as z23 } from "zod";
 var DateKeySchema = z23.string().regex(/^\d{4}-\d{2}-\d{2}$/);
 var ReviewSchema = z23.object({
@@ -16623,7 +17190,7 @@ var ProjectSleepOrganizer = class {
   #generate;
   constructor(options) {
     this.#workspace = resolve21(options.workspace);
-    this.#sleepDirectory = join24(this.#workspace, ".flavor", "sleep");
+    this.#sleepDirectory = join25(this.#workspace, ".flavor", "sleep");
     this.#sessions = options.sessions ?? new SessionStore({ workspace: this.#workspace });
     this.#generate = options.generate;
   }
@@ -16632,7 +17199,7 @@ var ProjectSleepOrganizer = class {
     signal.throwIfAborted();
     await this.#prepareDirectory();
     if (await this.#hasReport(date)) return { status: "exists", date };
-    const lockPath = join24(this.#sleepDirectory, `.${date}.lock`);
+    const lockPath = join25(this.#sleepDirectory, `.${date}.lock`);
     let lock;
     try {
       lock = await open9(lockPath, constants8.O_CREAT | constants8.O_EXCL | constants8.O_WRONLY, 384);
@@ -16667,7 +17234,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
       }
       if (review === void 0) throw lastError;
       const filename2 = `${date}-${filenameSummary(review.title)}.md`;
-      const path = join24(this.#sleepDirectory, filename2);
+      const path = join25(this.#sleepDirectory, filename2);
       const markdown = renderSleepReport(date, review, documents);
       await this.#atomicWrite(path, markdown);
       return { status: "written", date, path, sessionCount: documents.length };
@@ -16709,7 +17276,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
     });
   }
   async #prepareDirectory() {
-    const flavorDirectory = join24(this.#workspace, ".flavor");
+    const flavorDirectory = join25(this.#workspace, ".flavor");
     await assertNotSymlink(flavorDirectory);
     await mkdir15(flavorDirectory, { recursive: true, mode: 448 });
     await assertNotSymlink(this.#sleepDirectory);
@@ -16723,7 +17290,7 @@ Previous output was invalid. Repair it and return strict JSON only.`;
     return (await readdir8(this.#sleepDirectory, { withFileTypes: true })).some((entry2) => entry2.isFile() && entry2.name.startsWith(prefix) && entry2.name.endsWith(".md"));
   }
   async #atomicWrite(path, content) {
-    const temporary = join24(this.#sleepDirectory, `.${randomUUID14()}.tmp`);
+    const temporary = join25(this.#sleepDirectory, `.${randomUUID14()}.tmp`);
     let handle;
     try {
       handle = await open9(temporary, constants8.O_CREAT | constants8.O_EXCL | constants8.O_WRONLY, 384);
@@ -17097,7 +17664,7 @@ function computeSessionStats(documents) {
 
 // src/tools/files.ts
 import { constants as constants9 } from "fs";
-import { mkdir as mkdir16, open as open10, readFile as readFile18, realpath as realpath9, rename as rename8, rm as rm8, stat as stat8 } from "fs/promises";
+import { mkdir as mkdir16, open as open10, readFile as readFile19, realpath as realpath9, rename as rename8, rm as rm8, stat as stat9 } from "fs/promises";
 import { dirname as dirname14, isAbsolute as isAbsolute11, relative as relative16, resolve as resolve22, sep as sep16 } from "path";
 import { randomUUID as randomUUID15 } from "crypto";
 import { z as z24 } from "zod";
@@ -17250,7 +17817,7 @@ function createReadTool(workspace, options = {}) {
     execute: async (input, signal) => {
       abortIfNeeded(signal);
       const path = await guard.existing(input.path);
-      const info = await stat8(path);
+      const info = await stat9(path);
       const maxBytes = input.maxBytes ?? MAX_READ_BYTES;
       if (!Number.isSafeInteger(maxBytes) || maxBytes <= 0 || maxBytes > MAX_READ_BYTES) {
         throw new Error(`maxBytes must be a positive integer no greater than ${MAX_READ_BYTES}`);
@@ -17459,7 +18026,7 @@ async function atomicWrite(path, content, signal, expectedVersion) {
   const temporary = `${path}.${randomUUID15()}.tmp`;
   let mode;
   try {
-    mode = (await stat8(path)).mode & 511;
+    mode = (await stat9(path)).mode & 511;
   } catch (error) {
     if (!isMissing3(error)) throw error;
   }
@@ -17482,7 +18049,7 @@ async function atomicWrite(path, content, signal, expectedVersion) {
   }
 }
 async function readText(path) {
-  const contents = await readFile18(path);
+  const contents = await readFile19(path);
   if (isBinary(contents)) throw new Error("Cannot edit binary file as text");
   return decodeFileText(contents);
 }
@@ -17508,7 +18075,7 @@ async function assertMutationVersion(path, expected, observations) {
 }
 async function fileVersion(path) {
   try {
-    return versionOfStat(await stat8(path));
+    return versionOfStat(await stat9(path));
   } catch (error) {
     if (isMissing3(error)) return ABSENT_VERSION;
     throw error;
@@ -17519,7 +18086,7 @@ function versionOfStat(info) {
 }
 async function readOptionalPresentationText(path) {
   try {
-    const contents = await readFile18(path);
+    const contents = await readFile19(path);
     return isBinary(contents) ? { exists: true } : { exists: true, text: contents.toString("utf8") };
   } catch (error) {
     return isMissing3(error) ? { exists: false } : { exists: true };
@@ -17834,19 +18401,6 @@ import { isIP } from "net";
 import { request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
 import { z as z25 } from "zod";
-
-// src/utils/abort.ts
-function waitWithSignal(operation, signal) {
-  if (signal === void 0) return operation;
-  return new Promise((resolve32, reject) => {
-    const abort2 = () => reject(signal.reason);
-    if (signal.aborted) abort2();
-    else signal.addEventListener("abort", abort2, { once: true });
-    operation.then(resolve32, reject).finally(() => signal.removeEventListener("abort", abort2));
-  });
-}
-
-// src/tools/web.ts
 var WebFetchInput = z25.object({
   url: z25.string().url().max(8192),
   timeoutMs: z25.coerce.number().int().positive().max(12e4).optional(),
@@ -18171,7 +18725,7 @@ function charset(contentType) {
 // src/tools/lsp.ts
 import { spawn as spawn8 } from "child_process";
 import { existsSync as existsSync5 } from "fs";
-import { access as access2, constants as constants10, readFile as readFile19 } from "fs/promises";
+import { access as access2, constants as constants10, readFile as readFile20 } from "fs/promises";
 import { basename as basename5, dirname as dirname15, extname as extname2, isAbsolute as isAbsolute12, relative as relative17, resolve as resolve23, sep as sep17 } from "path";
 import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "url";
 import { z as z26 } from "zod";
@@ -18365,7 +18919,7 @@ var LspConnection = class {
     const url = new URL(uri);
     if (url.protocol !== "file:") return;
     const filePath = fileURLToPath2(url);
-    const text = await readFile19(filePath, "utf8");
+    const text = await readFile20(filePath, "utf8");
     const current = this.#documents.get(uri);
     if (current === void 0) {
       this.#documents.set(uri, { text, version: 1 });
@@ -18731,19 +19285,19 @@ async function changeSummary(workspace) {
   };
 }
 async function stagedDiff(workspace, maxChars = 96e3) {
-  const stat11 = await git2(workspace, ["diff", "--staged", "--stat"]);
+  const stat12 = await git2(workspace, ["diff", "--staged", "--stat"]);
   const diff = await git2(workspace, ["diff", "--staged", "--no-ext-diff", "--no-color"]);
   if (!diff.ok) throw gitFailure(diff, "diff --staged");
   const text = diff.stdout;
   return {
     diff: text.length > maxChars ? `${text.slice(0, maxChars)}
 \u2026[diff truncated]` : text,
-    stat: stat11.stdout.trim(),
+    stat: stat12.stdout.trim(),
     truncated: text.length > maxChars
   };
 }
 async function uncommittedDiff(workspace, maxChars = 96e3) {
-  const stat11 = await git2(workspace, ["diff", "HEAD", "--stat"]);
+  const stat12 = await git2(workspace, ["diff", "HEAD", "--stat"]);
   const diff = await git2(workspace, ["diff", "HEAD", "--no-ext-diff", "--no-color"]);
   if (!diff.ok && !diff.stderr.includes("unknown revision")) throw gitFailure(diff, "diff HEAD");
   const summary2 = await changeSummary(workspace);
@@ -18751,7 +19305,7 @@ async function uncommittedDiff(workspace, maxChars = 96e3) {
   return {
     diff: text.length > maxChars ? `${text.slice(0, maxChars)}
 \u2026[diff truncated]` : text,
-    stat: stat11.stdout.trim(),
+    stat: stat12.stdout.trim(),
     untracked: summary2.untrackedFiles
   };
 }
@@ -19048,17 +19602,17 @@ ${explanation}` : "";
 }
 
 // src/desktop/astgraph-service.ts
-import { stat as stat9 } from "fs/promises";
+import { stat as stat10 } from "fs/promises";
 import { createRequire as nodeCreateRequire } from "module";
-import { join as join25, resolve as resolve24 } from "path";
+import { join as join26, resolve as resolve24 } from "path";
 var FIELDS = "id, kind, name, qualified_name, file_path, language, start_line, end_line, signature";
 var DesktopAstGraphService = class {
   #path;
   constructor(workspace) {
-    this.#path = join25(resolve24(workspace), ".flavor", "astgraph", "index.db");
+    this.#path = join26(resolve24(workspace), ".flavor", "astgraph", "index.db");
   }
   async status() {
-    if ((await stat9(this.#path).catch(() => void 0))?.isFile() !== true) {
+    if ((await stat10(this.#path).catch(() => void 0))?.isFile() !== true) {
       return { available: false, path: this.#path, files: 0, nodes: 0, edges: 0 };
     }
     return this.#read((db) => {
@@ -19338,8 +19892,8 @@ function createTodoWriteTool() {
 
 // src/tools/managed.ts
 import { randomUUID as randomUUID16 } from "crypto";
-import { link as link2, lstat as lstat12, mkdir as mkdir17, readFile as readFile20, readdir as readdir9, unlink as unlink5, writeFile as writeFile10 } from "fs/promises";
-import { dirname as dirname16, join as join26, resolve as resolve26 } from "path";
+import { link as link2, lstat as lstat12, mkdir as mkdir17, readFile as readFile21, readdir as readdir9, unlink as unlink5, writeFile as writeFile10 } from "fs/promises";
+import { dirname as dirname16, join as join27, resolve as resolve26 } from "path";
 import { z as z31 } from "zod";
 var MANAGED_TOOL_VERSION = 1;
 var MAX_RECORD_BYTES = 256 * 1024;
@@ -19382,8 +19936,8 @@ var ManagedToolStore = class {
   #diagnostics = [];
   constructor(options) {
     this.#workspace = resolve26(options.workspace);
-    this.#projectRoot = join26(this.#workspace, ".flavor", "tools");
-    this.#globalRoot = join26(resolve26(options.home), ".flavor-code", "tools");
+    this.#projectRoot = join27(this.#workspace, ".flavor", "tools");
+    this.#globalRoot = join27(resolve26(options.home), ".flavor-code", "tools");
     this.#now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   }
   get diagnostics() {
@@ -19430,7 +19984,7 @@ var ManagedToolStore = class {
       version: MANAGED_TOOL_VERSION,
       createdAt: this.#now()
     });
-    const path = join26(this.directory(input.scope), filename(input.name));
+    const path = join27(this.directory(input.scope), filename(input.name));
     const definition = compileDefinition(record, input.scope, this.#workspace);
     await writeExclusive(path, `${JSON.stringify(record, void 0, 2)}
 `);
@@ -19455,7 +20009,7 @@ var ManagedToolStore = class {
     if (!parsed.success) return [];
     const matches = this.#matching(parsed.data.name).filter((entry2) => parsed.data.scope === void 0 || entry2.scope === parsed.data.scope);
     if (matches.length > 0) return matches.map((entry2) => entry2.path);
-    return [join26(this.directory(parsed.data.scope ?? "project"), filename(parsed.data.name))];
+    return [join27(this.directory(parsed.data.scope ?? "project"), filename(parsed.data.name))];
   }
   async #loadDirectory(scope2) {
     const root = this.directory(scope2);
@@ -19468,12 +20022,12 @@ var ManagedToolStore = class {
       return;
     }
     for (const name of names) {
-      const path = join26(root, name);
+      const path = join27(root, name);
       try {
         const info = await lstat12(path);
         if (!info.isFile() || info.isSymbolicLink()) throw new Error("Managed tool record must be a regular file");
         if (info.size > MAX_RECORD_BYTES) throw new Error(`Managed tool record exceeds ${MAX_RECORD_BYTES} bytes`);
-        const record = ManagedToolRecordSchema.parse(JSON.parse(await readFile20(path, "utf8")));
+        const record = ManagedToolRecordSchema.parse(JSON.parse(await readFile21(path, "utf8")));
         if (record.scope !== scope2) throw new Error(`Managed tool record scope must match its ${scope2} directory`);
         const key = scopedKey(scope2, record.name);
         if (this.#entries.has(key)) throw new Error(`Duplicate managed tool name in ${scope2} scope: ${record.name}`);
@@ -20386,8 +20940,8 @@ ${total}`;
 
 // src/memory/store.ts
 import { createHash as createHash16 } from "crypto";
-import { readFile as readFile21, rm as rm9 } from "fs/promises";
-import { resolve as resolve27, join as join27, relative as relative19, sep as sep19 } from "path";
+import { readFile as readFile22, rm as rm9 } from "fs/promises";
+import { resolve as resolve27, join as join28, relative as relative19, sep as sep19 } from "path";
 
 // src/memory/similarity.ts
 function normalizeForSimilarity(value) {
@@ -20490,9 +21044,9 @@ var MemoryStore = class {
     if (!Number.isSafeInteger(options.maxEntries) || options.maxEntries < 1) throw new Error("maxEntries must be an integer of at least 1");
     if (!Number.isSafeInteger(options.maxEntryChars) || options.maxEntryChars < 1) throw new Error("maxEntryChars must be an integer of at least 1");
     this.workspace = resolve27(options.workspace);
-    this.#memoryRoot = join27(this.workspace, ".flavor", "memory");
-    this.path = join27(this.#memoryRoot, "MEMORY.md");
-    this.#behaviorPath = join27(this.#memoryRoot, "behavior.json");
+    this.#memoryRoot = join28(this.workspace, ".flavor", "memory");
+    this.path = join28(this.#memoryRoot, "MEMORY.md");
+    this.#behaviorPath = join28(this.#memoryRoot, "behavior.json");
     this.#maxEntries = options.maxEntries;
     this.#maxEntryChars = options.maxEntryChars;
   }
@@ -20710,7 +21264,7 @@ var MemoryStore = class {
     });
   }
   async #readTaskItem(reference) {
-    const document = decodeTask(await readFile21(this.#resolveContentPath(reference.contentPath), "utf8"));
+    const document = decodeTask(await readFile22(this.#resolveContentPath(reference.contentPath), "utf8"));
     return document.items.find((item) => item.id === reference.id)?.content ?? reference.summary;
   }
   #resolveContentPath(contentPath) {
@@ -21186,8 +21740,8 @@ function createExecutionEnvironment(workspace, config) {
 }
 
 // src/ide/client.ts
-import { readFile as readFile22, readdir as readdir10, stat as stat10 } from "fs/promises";
-import { basename as basename6, join as join28, relative as relative20, resolve as resolve28, sep as sep20 } from "path";
+import { readFile as readFile23, readdir as readdir10, stat as stat11 } from "fs/promises";
+import { basename as basename6, join as join29, relative as relative20, resolve as resolve28, sep as sep20 } from "path";
 var FlavorIdeClient = class {
   #workspace;
   #home;
@@ -21283,7 +21837,7 @@ var FlavorIdeClient = class {
       };
       if (await this.#healthy(configured)) return configured;
     }
-    const directory = join28(this.#home, ".flavor-code", "ide");
+    const directory = join29(this.#home, ".flavor-code", "ide");
     let entries;
     try {
       entries = (await readdir10(directory)).filter((name) => name.endsWith(".lock"));
@@ -21291,9 +21845,9 @@ var FlavorIdeClient = class {
       return void 0;
     }
     const candidates = (await Promise.all(entries.map(async (name) => {
-      const path = join28(directory, name);
+      const path = join29(directory, name);
       try {
-        const [contents, info] = await Promise.all([readFile22(path, "utf8"), stat10(path)]);
+        const [contents, info] = await Promise.all([readFile23(path, "utf8"), stat11(path)]);
         const lock = parseLockfile(contents);
         return lock === void 0 ? void 0 : { lock, modified: info.mtimeMs };
       } catch {
@@ -21412,6 +21966,7 @@ function relativeDisplay(workspace, filePath) {
 
 // src/jobs/registry.ts
 import { randomUUID as randomUUID17 } from "crypto";
+var OUTPUT_SLICE_SLACK_CHARS = 64 * 1024;
 var JobRegistry = class {
   #jobs = /* @__PURE__ */ new Map();
   #maxOutputChars;
@@ -21440,7 +21995,8 @@ var JobRegistry = class {
       updatedAt: now,
       outputChars: 0,
       truncated: false,
-      output: "",
+      chunks: [],
+      windowChars: 0,
       outputStart: 0,
       settle,
       done
@@ -21451,11 +22007,16 @@ var JobRegistry = class {
       id,
       append: (text) => {
         if (record.state !== "running" || text === "") return;
-        record.output += text;
+        record.chunks.push(text);
+        record.windowChars += text.length;
         record.outputChars += text.length;
-        if (record.output.length > this.#maxOutputChars) {
-          const removed = record.output.length - this.#maxOutputChars;
-          record.output = record.output.slice(removed);
+        if (record.outputChars > this.#maxOutputChars) record.truncated = true;
+        if (record.windowChars > this.#maxOutputChars + OUTPUT_SLICE_SLACK_CHARS) {
+          const joined = record.chunks.join("");
+          const kept = joined.slice(joined.length - this.#maxOutputChars);
+          const removed = joined.length - kept.length;
+          record.chunks = [kept];
+          record.windowChars = kept.length;
           record.outputStart += removed;
           record.truncated = true;
         }
@@ -21476,8 +22037,20 @@ var JobRegistry = class {
   }
   read(id, owner2, cursor = 0) {
     const job = this.#owned(id, owner2);
-    const effective = Math.max(cursor, job.outputStart);
-    return { ...snapshot2(job), output: job.output.slice(effective - job.outputStart), cursor: job.outputStart + job.output.length };
+    const window = job.chunks.join("");
+    const dropped = Math.max(0, window.length - this.#maxOutputChars);
+    const effective = Math.max(cursor, job.outputStart + dropped);
+    return { ...snapshot2(job), output: window.slice(effective - job.outputStart), cursor: job.outputStart + window.length };
+  }
+  /** Retained sizes for the rotation census. */
+  census() {
+    let windowChars = 0;
+    let running = 0;
+    for (const job of this.#jobs.values()) {
+      windowChars += job.windowChars;
+      if (job.state === "running") running += 1;
+    }
+    return { jobs: this.#jobs.size, running, windowChars };
   }
   async wait(id, owner2, signal) {
     signal?.throwIfAborted();
@@ -22705,8 +23278,8 @@ async function createProductionRuntime(options) {
   const registeredProviders = registration.registered;
   let effectiveLlm = registration.effectiveLlm;
   const pluginHost = new PluginHost({
-    globalPluginDirs: [join29(home, ".flavor-code", "plugins")],
-    projectPluginDirs: [join29(workspace, ".flavor", "plugins")],
+    globalPluginDirs: [join30(home, ".flavor-code", "plugins")],
+    projectPluginDirs: [join30(workspace, ".flavor", "plugins")],
     config,
     // Existing project plugins (including astgraph and superharness) use Node.js
     // built-ins. The Worker/vm sandbox deliberately blocks those imports, so it
@@ -22815,7 +23388,7 @@ async function createProductionRuntime(options) {
       const address = palSocketAddress({
         platform: process.platform,
         userScope: home,
-        runtimeDir: join29(tmpdir4(), `flavor-code-pals-${createHash18("sha256").update(home).digest("hex").slice(0, 16)}`)
+        runtimeDir: join30(tmpdir4(), `flavor-code-pals-${createHash18("sha256").update(home).digest("hex").slice(0, 16)}`)
       });
       const baseCollaborationClient = collaboration.client ?? collaboration.createClient?.({
         instanceId: collaboration.instanceId,
@@ -22926,8 +23499,8 @@ async function createProductionRuntime(options) {
       diagnostics.push(`MCP servers could not start: ${message(error)}`);
     });
     const skills = new SkillRegistry({
-      globalRoots: [join29(home, ".flavor-code", "skills")],
-      projectRoots: [join29(workspace, ".flavor", "skills"), ...pluginSkillRoots],
+      globalRoots: [join30(home, ".flavor-code", "skills")],
+      projectRoots: [join30(workspace, ".flavor", "skills"), ...pluginSkillRoots],
       authorizeResource: async () => true,
       disabledNames: config.skills.disabled
     });
@@ -22935,7 +23508,7 @@ async function createProductionRuntime(options) {
     skillsReady.catch(() => void 0);
     tools.push(createSkillTool(skills), createSkillResourceTool(skills));
     if (options.extraTools !== void 0) tools.push(...options.extraTools);
-    const flavor = await optionalText2(join29(workspace, "FLAVOR.md"));
+    const flavor = await optionalText2(join30(workspace, "FLAVOR.md"));
     const instructionBaseline = await workspaceInstructions.baseline();
     let memoryContext;
     if (memoryStore !== void 0) {
@@ -23520,7 +24093,7 @@ async function createProductionRuntime(options) {
         evolveService.toolDefinition(),
         ...mcpTools
       ];
-      const loopFlavor = await optionalText2(join29(input.workspace, "FLAVOR.md"));
+      const loopFlavor = await optionalText2(join30(input.workspace, "FLAVOR.md"));
       const loopInstructionBaseline = await loopInstructions.baseline();
       const loopEnvironment = createPromptEnvironment({
         now: /* @__PURE__ */ new Date(),
@@ -23628,12 +24201,89 @@ async function createProductionRuntime(options) {
         await loopExecutionEnvironment?.dispose();
       }
     };
+    let activeLongTask;
+    const readMemoryRestartMarker = () => {
+      try {
+        return parseMemoryRestartMarker(readFileSync3(memoryRestartMarkerPath(workspace), "utf8"));
+      } catch {
+        return void 0;
+      }
+    };
+    const currentPressureReading = () => verifiedHeapPressure(MEMORY_PRESSURE_HEAP_RATIO) ?? { ...readHeap(), gcVerified: false };
+    const collectRotationHolders = () => {
+      const holders = {};
+      try {
+        const context = harness.main.context.census();
+        holders.context = { entries: context.messages, chars: context.messageChars };
+        holders.contextVisibility = { entries: context.visibilityEntries, chars: context.visibilityChars };
+        holders.contextTransient = { entries: context.transientEntries, chars: context.transientChars };
+      } catch {
+      }
+      try {
+        holders.journal = { entries: harnessJournal.recordCount };
+      } catch {
+      }
+      try {
+        const jobCensus = jobs.census();
+        holders.jobs = { entries: jobCensus.jobs, chars: jobCensus.windowChars };
+      } catch {
+      }
+      try {
+        holders.sessionTree = { entries: sessionHistory.nodeCount };
+      } catch {
+      }
+      try {
+        const transcript = transcriptCensus(timelineState);
+        holders.transcript = { entries: transcript.blocks, chars: transcript.chars };
+        holders.transcriptTurns = { entries: transcript.turns };
+      } catch {
+      }
+      return holders;
+    };
+    const rotateForHeap = (continuation, reading) => {
+      requestMemoryRestart(workspace, sessionId, emitOutput, {
+        ...continuation === void 0 ? {} : { continuation },
+        ...reading === void 0 ? {} : { reading },
+        holders: collectRotationHolders()
+      }, options.onMemoryRestartRequested);
+    };
+    const maybeRotateAtBoundary = (continuation) => {
+      activeLongTask = continuation;
+      const pressure = verifiedHeapPressure(MEMORY_PRESSURE_HEAP_RATIO);
+      if (pressure !== void 0) {
+        rotateForHeap(continuation, pressure);
+        return;
+      }
+      const reading = heapRotationNeeded();
+      if (reading === void 0) return;
+      if (rotationCooldownActive(readMemoryRestartMarker(), sessionId, /* @__PURE__ */ new Date())) return;
+      rotateForHeap(continuation, reading);
+    };
+    const maybeRotateAtTurnBoundary = () => {
+      const reading = heapRotationNeeded();
+      if (reading === void 0) return;
+      if (rotationCooldownActive(readMemoryRestartMarker(), sessionId, /* @__PURE__ */ new Date())) return;
+      rotateForHeap(void 0, reading);
+    };
+    const consumePendingContinuation = () => {
+      const marker = readMemoryRestartMarker();
+      const continuation = pendingContinuation(marker, sessionId, /* @__PURE__ */ new Date());
+      if (continuation === void 0 || marker === void 0) return void 0;
+      try {
+        const markerPath = memoryRestartMarkerPath(workspace);
+        writeMarkerAtomically(markerPath, consumedMemoryRestartMarker(marker));
+      } catch {
+      }
+      return continuation;
+    };
     const loopStore = new LoopStore({ workspace });
     const loopOrchestrator = new LoopOrchestrator({
       workspace,
       config: config.loop,
       persistence: loopStore,
       hallucinationGuard,
+      onCycleBoundary: (loopId) => maybeRotateAtBoundary({ kind: "loop", id: loopId }),
+      onMemoryCheckpoint: (loopId) => maybeRotateAtBoundary({ kind: "loop", id: loopId }),
       prepareWorkspace: (input) => prepareLoopWorkspace(input),
       inferVerification: inferVerificationPlan,
       runWorker: ({ workspace: executionWorkspace, prompt, signal }) => runLoopWorker({ workspace: executionWorkspace, prompt, signal }),
@@ -23645,21 +24295,9 @@ async function createProductionRuntime(options) {
           await verifierEnvironment?.dispose();
         }
       },
-      confirmBudget: async (state, dimensions, signal) => {
-        if (options.approvalPolicy === "deny") return "unavailable";
-        const reached = dimensions.map((dimension) => dimension === "cycles" ? `${state.budget.cyclesUsed} cycles` : `${state.budget.inputTokens + state.budget.outputTokens} tokens`).join(" and ");
-        const next = dimensions.map((dimension) => dimension === "cycles" ? `${state.budget.cycleCheckpoint + state.config.cycleStep} cycles` : `${state.budget.tokenCheckpoint + state.config.tokenStep} tokens`).join(" and ");
-        const latestVerification = state.cycles.at(-1)?.verification.summary ?? "No host verification evidence yet.";
-        const answers = await questions.ask([{
-          header: "Loop budget",
-          question: `Loop ${state.loopId} reached ${reached}. Latest verification: ${latestVerification} Continue until the next checkpoint (${next})?`,
-          options: [
-            { label: "Continue", description: "Extend only the reached budget tranche and keep looping." },
-            { label: "Stop", description: "End this loop as budget exhausted." }
-          ]
-        }], signal);
-        return answers[0] === "Continue" ? "approved" : "rejected";
-      },
+      // Cycle/token values are telemetry checkpoint cadence, not an unattended
+      // execution cap. The user can still cancel explicitly at any time.
+      confirmBudget: async () => "approved",
       fingerprint: workspaceFingerprint,
       idFactory: () => `loop-${(/* @__PURE__ */ new Date()).toISOString().replace(/[^0-9]/g, "").slice(0, 17)}-${randomUUID20().slice(0, 8)}`
     });
@@ -23670,9 +24308,12 @@ async function createProductionRuntime(options) {
       plannerModelId: mainModel,
       classifierModelId: mainModel,
       skepticCount: 3,
-      maxRounds: 5,
-      maxStallStreak: 2,
+      // Production goals run until verified, explicitly cancelled, or blocked
+      // by a non-recoverable external condition. Numeric config values remain
+      // accepted for compatibility but no longer terminate autonomous work.
       persistence: goalStore,
+      onRoundBoundary: (goalId) => maybeRotateAtBoundary({ kind: "goal", id: goalId }),
+      onMemoryCheckpoint: (goalId) => maybeRotateAtBoundary({ kind: "goal", id: goalId }),
       verifyHost: async (signal) => runVerificationPlan(
         await inferVerificationPlan(workspace),
         workspace,
@@ -23767,30 +24408,50 @@ async function createProductionRuntime(options) {
           contextEpoch: harness.main.context.snapshot().epoch?.id ?? "legacy"
         });
         const turnId = harnessJournal.startTurn(turnConfig, { prompt, initialUserMessage: runOptions?.initialUserMessage });
-        return monitorMemoryRestart(durableTurn(persistAfter(runMain(
-          harness,
-          skills,
-          prompt,
-          signal,
-          selectedModels.mainError,
-          memoryStore === void 0 || !memoryHasRoutableEntries && userMemoryContext === void 0 ? void 0 : {
-            store: memoryStore,
-            taskId: memoryLifecycle.taskId ?? sessionId,
-            topK: config.memory.retrievalTopK,
-            maxChars: config.memory.maxPromptChars
-          },
-          runOptions?.getSteeringMessages,
-          runOptions?.initialUserMessage,
-          runOptions?.additionalContext,
-          ide
-        ), persist), harnessJournal, turnId, turnConfig), () => requestMemoryRestart(workspace, sessionId, emitOutput));
+        return monitorTurnMemory(
+          durableTurn(persistAfter(runMain(
+            harness,
+            skills,
+            prompt,
+            signal,
+            selectedModels.mainError,
+            memoryStore === void 0 || !memoryHasRoutableEntries && userMemoryContext === void 0 ? void 0 : {
+              store: memoryStore,
+              taskId: memoryLifecycle.taskId ?? sessionId,
+              topK: config.memory.retrievalTopK,
+              maxChars: config.memory.maxPromptChars
+            },
+            runOptions?.getSteeringMessages,
+            runOptions?.initialUserMessage,
+            runOptions?.additionalContext,
+            ide
+          ), persist), harnessJournal, turnId, turnConfig),
+          () => rotateForHeap(void 0, currentPressureReading()),
+          () => maybeRotateAtTurnBoundary()
+        );
       },
       runSkill: (skill, prompt, signal) => persistAfter(
         runExplicitSkill(harness, skills, skill, prompt, signal, selectedModels.mainError),
         persist
       ),
-      runLoop: (goal, signal) => runLoopSession(loopOrchestrator, hooks, goal, signal),
-      runGoal: (goal, signal) => persistEach(runGoalSession(goalOrchestrator, goal, signal), persist),
+      runLoop: (goal, signal) => monitorLongTaskRestart(
+        runLoopSession(loopOrchestrator, hooks, goal, signal),
+        () => rotateForHeap(activeLongTask, currentPressureReading())
+      ),
+      runGoal: (goal, signal) => monitorLongTaskRestart(
+        persistEach(runGoalSession(goalOrchestrator, goal, signal), persist),
+        () => rotateForHeap(activeLongTask, currentPressureReading())
+      ),
+      resumeLoop: (loopId, signal) => monitorLongTaskRestart(
+        runResumeLoopSession(loopOrchestrator, hooks, loopId, signal),
+        () => rotateForHeap(activeLongTask ?? { kind: "loop", id: loopId }, currentPressureReading())
+      ),
+      resumeGoal: (goalId, signal) => monitorLongTaskRestart(
+        persistEach(runResumeGoalSession(goalOrchestrator, goalId, signal), persist),
+        () => rotateForHeap(activeLongTask ?? { kind: "goal", id: goalId }, currentPressureReading())
+      ),
+      continuation: () => consumePendingContinuation(),
+      rotationPending: () => memoryRotationActive(),
       mcp: async (command, signal) => {
         signal.throwIfAborted();
         const manager = await mcpReady;
@@ -23884,7 +24545,7 @@ async function createProductionRuntime(options) {
           const root = resolve31(workspace);
           const abs = resolve31(root, path);
           if (abs !== root && !abs.startsWith(root + sep22)) throw new Error(`path outside workspace: ${path}`);
-          return readFile23(abs, "utf8");
+          return readFile24(abs, "utf8");
         },
         history: async (path, limit) => fileHistory(workspace, path, limit),
         questions,
@@ -23896,7 +24557,7 @@ async function createProductionRuntime(options) {
       }, query, focus, signal),
       audit: async (toolFilter) => {
         try {
-          const raw = await readFile23(auditLogger.path, "utf8");
+          const raw = await readFile24(auditLogger.path, "utf8");
           const lines = raw.trim().split("\n").filter((line) => line.length > 0);
           const entries = lines.map((line) => {
             try {
@@ -23936,7 +24597,7 @@ ${summary2}`;
       doctor: async () => formatDoctorReport(await runDoctor({ workspace, home, environment })),
       usage: async () => {
         try {
-          const raw = await readFile23(usageLogPath(), "utf8");
+          const raw = await readFile24(usageLogPath(), "utf8");
           return formatUsageSummary(summarizeUsage(parseUsageEntries(raw)));
         } catch (error) {
           if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") {
@@ -24089,7 +24750,7 @@ ${renderMemoryDocument(entries)}`;
           return `Provider "${providerName}" is missing authorizationUrl, tokenUrl, or clientId.`;
         }
         try {
-          const tokenStore = createFileTokenStore(join29(home, ".flavor-code", "auth.json"));
+          const tokenStore = createFileTokenStore(join30(home, ".flavor-code", "auth.json"));
           const credentialId = oauthCredentialId(oauthConfig.tokenUrl, oauthConfig.clientId);
           await migrateLegacyOAuthToken(tokenStore, providerName, credentialId);
           const oauth = new OAuthCallbackAuthProvider({
@@ -24136,7 +24797,7 @@ ${renderMemoryDocument(entries)}`;
         }
       },
       async logout() {
-        const tokenStore = createFileTokenStore(join29(home, ".flavor-code", "auth.json"));
+        const tokenStore = createFileTokenStore(join30(home, ".flavor-code", "auth.json"));
         const tokens = await tokenStore.load();
         const hadCredentials = Object.keys(tokens).length > 0 || effectiveLlm !== void 0;
         if (!hadCredentials) {
@@ -24329,10 +24990,16 @@ function formatMcpReconnect(server) {
   return `Failed to reconnect MCP server "${server.name}": ${server.error ?? "unknown error"}`;
 }
 async function* runLoopSession(orchestrator, hooks, goal, signal) {
+  yield* loopSessionEvents(orchestrator.run({ goal, signal }), hooks);
+}
+async function* runResumeLoopSession(orchestrator, hooks, loopId, signal) {
+  yield* loopSessionEvents(orchestrator.resume({ loopId, signal }), hooks);
+}
+async function* loopSessionEvents(events, hooks) {
   let totalInputTokens = 0;
   let totalOutputTokens = 0;
   let latestVerification;
-  for await (const event of orchestrator.run({ goal, signal })) {
+  for await (const event of events) {
     if (event.type === "worker-event") {
       if (event.event.type === "usage") {
         totalInputTokens += event.event.inputTokens;
@@ -24342,6 +25009,8 @@ async function* runLoopSession(orchestrator, hooks, goal, signal) {
           totalInputTokens,
           totalOutputTokens
         };
+      } else if (event.event.type === "error" && isResumableLongTaskError(event.event.error.code)) {
+        yield { type: "warning", message: `Loop worker segment ended at ${event.event.error.code}; checkpointing and verifying before continuing.` };
       } else if (event.event.type !== "done") yield event.event;
       continue;
     }
@@ -24396,7 +25065,7 @@ function loopProgressEvent(event) {
       loopId: event.loopId,
       phase: "budget",
       state: "info",
-      message: `Confirmation required for ${event.dimensions.join(" and ")} budget.`
+      message: `${event.dimensions.join(" and ")} checkpoint reached; continuing automatically.`
     };
   }
   return {
@@ -24413,6 +25082,9 @@ function terminalProgressState(status) {
   if (status === "needs_human") return "info";
   return "failed";
 }
+function isResumableLongTaskError(code) {
+  return code !== "authentication" && code !== "model_not_found" && code !== "cancelled" && code !== "memory_pressure";
+}
 async function workspaceFingerprint(workspace) {
   const hash = createHash18("sha256");
   const diff = await execFileNoThrow(
@@ -24436,7 +25108,7 @@ async function workspaceFingerprint(workspace) {
     hash.update(name);
     if (remaining <= 0) continue;
     try {
-      const content = await readFile23(path);
+      const content = await readFile24(path);
       const slice = content.subarray(0, remaining);
       hash.update(slice);
       remaining -= slice.length;
@@ -24548,7 +25220,16 @@ async function* durableTurn(source, journal, turnId, config) {
     }
   }
 }
-async function* monitorMemoryRestart(source, onRestartNeeded) {
+async function* monitorTurnMemory(source, onPressure, onBoundary) {
+  let pressure = false;
+  for await (const event of source) {
+    if (event.type === "error" && event.error.code === "memory_pressure") pressure = true;
+    yield event;
+  }
+  if (pressure) onPressure();
+  else onBoundary();
+}
+async function* monitorLongTaskRestart(source, onRestartNeeded) {
   let pressure = false;
   for await (const event of source) {
     if (event.type === "error" && event.error.code === "memory_pressure") pressure = true;
@@ -24556,7 +25237,10 @@ async function* monitorMemoryRestart(source, onRestartNeeded) {
   }
   if (pressure) onRestartNeeded();
 }
-function requestMemoryRestart(workspace, sessionId, emitOutput) {
+function requestMemoryRestart(workspace, sessionId, emitOutput, rotation, onRestartRequested) {
+  if (memoryRotationActive()) return;
+  markMemoryRotation();
+  const continuation = rotation?.continuation;
   try {
     const markerPath = memoryRestartMarkerPath(workspace);
     let previous;
@@ -24564,14 +25248,43 @@ function requestMemoryRestart(workspace, sessionId, emitOutput) {
       previous = parseMemoryRestartMarker(readFileSync3(markerPath, "utf8"));
     } catch {
     }
-    mkdirSync3(dirname17(markerPath), { recursive: true });
-    writeFileSync2(markerPath, `${JSON.stringify(nextMemoryRestartMarker(previous, sessionId, /* @__PURE__ */ new Date()))}
-`, "utf8");
+    writeMarkerAtomically(markerPath, nextMemoryRestartMarker(previous, sessionId, /* @__PURE__ */ new Date(), continuation));
   } catch {
   }
-  process.exitCode = MEMORY_RESTART_EXIT_CODE;
-  emitOutput({ type: "notice", message: "Memory watermark reached; the session is saved and Flavor is restarting with a fresh heap." });
-  emitOutput({ type: "exit" });
+  if (rotation?.reading !== void 0) {
+    const census = {
+      at: (/* @__PURE__ */ new Date()).toISOString(),
+      reason: continuation === void 0 ? "memory-pressure" : `heap-rotation:${continuation.kind}`,
+      sessionId,
+      heap: censusHeapBlock(rotation.reading),
+      holders: rotation.holders ?? {}
+    };
+    writeRotationCensus(workspace, census);
+    if (heapSnapshotWarranted(rotation.reading)) writeRotationHeapSnapshot(workspace);
+  }
+  emitOutput({
+    type: "notice",
+    message: continuation === void 0 ? "Memory watermark reached; the session is saved and Flavor is restarting with a fresh heap." : `Memory watermark reached; the session and the running ${continuation.kind} are saved, and Flavor is restarting with a fresh heap to continue it.`
+  });
+  if (onRestartRequested !== void 0) onRestartRequested(sessionId);
+  else {
+    process.exitCode = MEMORY_RESTART_EXIT_CODE;
+    emitOutput({ type: "exit" });
+  }
+}
+function writeMarkerAtomically(path, marker) {
+  mkdirSync4(dirname17(path), { recursive: true });
+  const temporary = `${path}.${process.pid}.${randomUUID20()}.tmp`;
+  try {
+    writeFileSync3(temporary, `${JSON.stringify(marker)}
+`, { encoding: "utf8", mode: 384 });
+    renameSync2(temporary, path);
+  } finally {
+    try {
+      unlinkSync3(temporary);
+    } catch {
+    }
+  }
 }
 async function runGitCommit(deps, hint, signal) {
   if (!await isGitRepository(deps.workspace)) return "Not a git repository \u2014 /commit needs git.";
@@ -24666,7 +25379,7 @@ async function registerConfiguredAdapters(providers, registry, environment, diag
   const configured = { ...providers };
   if (configured.openai === void 0 && environment.OPENAI_API_KEY) configured.openai = { type: "openai", apiKey: environment.OPENAI_API_KEY };
   if (configured.anthropic === void 0 && environment.ANTHROPIC_API_KEY) configured.anthropic = { type: "anthropic", apiKey: environment.ANTHROPIC_API_KEY };
-  const oauthTokenStore = createFileTokenStore(join29(home, ".flavor-code", "auth.json"));
+  const oauthTokenStore = createFileTokenStore(join30(home, ".flavor-code", "auth.json"));
   const registered = [];
   let effectiveLlm;
   for (const [name, provider] of Object.entries(configured)) {
@@ -24935,7 +25648,7 @@ async function generateSleepReview(registry, modelId, prompt, signal) {
 }
 async function optionalText2(path) {
   try {
-    return await readFile23(path, "utf8");
+    return await readFile24(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && "code" in error && error.code === "ENOENT") return void 0;
     throw error;
@@ -25020,7 +25733,24 @@ function attachCleanupError(primary, cleanup) {
   }
 }
 async function* runGoalSession(orchestrator, goal, signal) {
-  for await (const event of orchestrator.run({ goal, signal })) {
+  yield* goalSessionEvents(orchestrator.run({ goal, signal }));
+}
+async function* runResumeGoalSession(orchestrator, goalId, signal) {
+  yield* goalSessionEvents(orchestrator.resume({ goalId, signal }));
+}
+async function* goalSessionEvents(events) {
+  for await (const event of events) {
+    if (event.type === "goal-resumed") {
+      yield { type: "notice", message: `Resuming goal ${event.goalId} at round ${event.round} after a heap rotation.` };
+      continue;
+    }
+    if (event.type === "goal-stage-retry") {
+      yield {
+        type: "warning",
+        message: `Goal ${event.stage} attempt ${event.attempt} hit a recoverable boundary (${event.reason}); retrying in ${event.delayMs}ms.`
+      };
+      continue;
+    }
     if (event.type === "goal-plan-created") {
       yield { type: "notice", message: `Goal plan created (${event.plan.kind}) with ${event.plan.criteria.length} acceptance criteria.` };
       yield { type: "notice", message: `Plan file: ${event.planPath}` };
@@ -25047,6 +25777,8 @@ async function* runGoalSession(orchestrator, goal, signal) {
           totalInputTokens: event.event.usage.inputTokens,
           totalOutputTokens: event.event.usage.outputTokens
         };
+      } else if (event.event.type === "error" && isResumableLongTaskError(event.event.error.code)) {
+        yield { type: "warning", message: `Goal worker segment ended at ${event.event.error.code}; checkpointing and verifying before continuing.` };
       } else {
         yield event.event;
       }