nolo-cli 0.115.0-alpha.1 → 0.116.0-alpha.1

package/{chunk-RB3EETRZ.js → chunk-52Q2IW2X.js}

@@ -50,7 +50,7 @@ import {
   requiresBareImageUrl,
   resolveToolGuidedSections,
   toBareImageUrlMessages
-} from "./chunk-SBDFSHSS.js";
+} from "./chunk-Z2PV6O2T.js";
 import {
   convertMessagesToResponsesInput,
   extractReasoningFromResponseOutput,
@@ -11900,6 +11900,7 @@ var toQueue = /* @__PURE__ */ dual(2, (self, options) => toQueueArray(self.chann
 var runIntoQueue = /* @__PURE__ */ dual(2, (self, queue) => runIntoQueueArray(self.channel, queue));
 
 // packages/agent-runtime/abortableKernel.ts
+var IDLE_WATCHDOG_SLICES = 20;
 function runAbortableWithTimeout(args2) {
   const taskEffect = Effect_exports.callback(
     (resume) => {
@@ -11935,12 +11936,26 @@ function runAbortableWithTimeout(args2) {
     raced = Effect_exports.raceFirst(taskEffect, abortEffect);
   }
   if (typeof args2.timeoutMs === "number") {
-    const inner = raced;
+    const outer = raced;
     const timeoutMs = args2.timeoutMs;
-    raced = Effect_exports.gen(function* () {
-      const outcome = yield* Effect_exports.timeoutOption(inner, Duration_exports.millis(timeoutMs));
-      return Option_exports.isNone(outcome) ? { kind: "timeout" } : outcome.value;
+    const activityVersion = args2.activityVersion;
+    const idleWatchdog = Effect_exports.gen(function* () {
+      const sliceCount = activityVersion ? IDLE_WATCHDOG_SLICES : 1;
+      const baseSliceMs = Math.max(1, Math.floor(timeoutMs / sliceCount));
+      let idleMs = 0;
+      for (; ; ) {
+        const versionAtSliceStart = activityVersion?.();
+        const sliceMs = Math.max(1, Math.min(timeoutMs - idleMs, baseSliceMs));
+        yield* Effect_exports.sleep(Duration_exports.millis(sliceMs));
+        idleMs += sliceMs;
+        if (activityVersion && activityVersion() !== versionAtSliceStart) {
+          idleMs = 0;
+          continue;
+        }
+        if (idleMs >= timeoutMs) return { kind: "timeout" };
+      }
     });
+    raced = Effect_exports.raceFirst(outer, idleWatchdog);
   }
   return args2.runtime ? args2.runtime.runPromise(raced) : Effect_exports.runPromise(raced);
 }
@@ -12627,6 +12642,13 @@ function isColdResume(history, nowMs) {
 }
 async function maybeAutoCompactLocalHistory(args2) {
   const { adapter, dialogId, history } = args2;
+  const emitPhase = (phase) => {
+    try {
+      args2.onPhase?.(phase);
+    } catch {
+    }
+  };
+  emitPhase({ kind: "validating-context" });
   const unchanged = (decision) => ({
     history,
     compressed: false,
@@ -12722,8 +12744,15 @@ async function maybeAutoCompactLocalHistory(args2) {
   if (!plan.shouldCompress) {
     return projectExisting();
   }
+  emitPhase({ kind: "compaction-start" });
   try {
+    if (args2.abortSignal?.aborted) {
+      throw Object.assign(new Error("auto-compaction aborted"), { compactionReason: "aborted" });
+    }
     const provider = await args2.resolveProvider();
+    if (args2.abortSignal?.aborted) {
+      throw Object.assign(new Error("auto-compaction aborted"), { compactionReason: "aborted" });
+    }
     const msgsToCompress = plan.msgsToCompress;
     const messagesText = formatMessagesForSummaryWithTruncation(msgsToCompress);
     const fileOpsText = formatFileOperationsFromMessages(
@@ -12735,20 +12764,55 @@ async function maybeAutoCompactLocalHistory(args2) {
       messagesText,
       fileOpsText
     });
-    const result4 = await provider.complete([
-      { role: "system", content: COMPACTION_SUMMARY_SYSTEM_PROMPT },
-      { role: "user", content: promptContent }
-    ]);
+    emitPhase({ kind: "waiting-provider" });
+    const timeoutMs = typeof args2.timeoutMs === "number" && Number.isFinite(args2.timeoutMs) && args2.timeoutMs > 0 ? args2.timeoutMs : void 0;
+    const requestController = new AbortController();
+    let timeoutHandle;
+    let abortListener;
+    const request3 = provider.complete(
+      [{ role: "system", content: COMPACTION_SUMMARY_SYSTEM_PROMPT }, { role: "user", content: promptContent }],
+      { signal: requestController.signal, ...timeoutMs ? { timeoutMs } : {} }
+    ).then(
+      (value) => ({ kind: "done", value }),
+      (error) => ({ kind: "provider-error", error })
+    );
+    const guards = [];
+    if (timeoutMs) guards.push(new Promise((resolve5) => {
+      timeoutHandle = setTimeout(() => {
+        requestController.abort();
+        resolve5({ kind: "timeout" });
+      }, timeoutMs);
+    }));
+    if (args2.abortSignal) guards.push(new Promise((resolve5) => {
+      abortListener = () => {
+        requestController.abort(args2.abortSignal?.reason);
+        resolve5({ kind: "aborted" });
+      };
+      args2.abortSignal?.addEventListener("abort", abortListener, { once: true });
+    }));
+    const outcome = guards.length ? await Promise.race([request3, ...guards]) : await request3;
+    if (timeoutHandle) clearTimeout(timeoutHandle);
+    if (abortListener) args2.abortSignal?.removeEventListener("abort", abortListener);
+    if (outcome.kind !== "done") {
+      const reason = outcome.kind === "timeout" ? "timeout" : outcome.kind === "aborted" ? "aborted" : "provider-error";
+      const detail = outcome.kind === "provider-error" ? outcome.error instanceof Error ? outcome.error.message : String(outcome.error) : reason === "timeout" ? `auto-compaction timed out after ${timeoutMs}ms` : "auto-compaction aborted";
+      throw Object.assign(new Error(detail), { compactionReason: reason });
+    }
+    const result4 = outcome.value;
     const newSummary = typeof result4.content === "string" ? result4.content.trim() : "";
     if (!newSummary) {
       console.warn(
         "[localLoop] auto-compaction produced empty summary; keeping prior projection"
       );
+      const failureReason = "provider-error";
+      emitPhase({ kind: "compaction-failed", reason: failureReason });
       return {
         ...projectExisting(),
         failureMessage: "summary model returned empty content",
+        failureReason,
         decision: {
           outcome: "failed",
+          reason: failureReason,
           detail: "summary model returned empty content"
         }
       };
@@ -12775,6 +12839,7 @@ async function maybeAutoCompactLocalHistory(args2) {
       summaryUsage: result4.usage
     });
     console.log(formatCompactionMetricsLog(metrics));
+    emitPhase({ kind: "compaction-end" });
     return {
       history: projectHistoryWithSummary({
         history,
@@ -12802,10 +12867,13 @@ async function maybeAutoCompactLocalHistory(args2) {
   } catch (error) {
     console.warn("[localLoop] auto-compaction failed:", error);
     const failureMessage = error instanceof Error && error.message ? error.message.slice(0, 200) : String(error).slice(0, 200);
+    const failureReason = error instanceof Error && "compactionReason" in error ? error.compactionReason : "provider-error";
+    emitPhase({ kind: "compaction-failed", reason: failureReason });
     return {
       ...projectExisting(),
       failureMessage,
-      decision: { outcome: "failed", detail: failureMessage }
+      failureReason,
+      decision: { outcome: "failed", reason: failureReason, detail: failureMessage }
     };
   }
 }
@@ -12862,6 +12930,8 @@ function emitLoopEvent(boundary, event, bridge) {
   boundary.emit(bridge ? { event, bridge } : { event });
 }
 var LLM_REQUEST_TIMEOUT = "LLM_REQUEST_TIMEOUT";
+var DEFAULT_LLM_REQUEST_TIMEOUT_MS = 10 * 60 * 1e3;
+var DEFAULT_COMPACTION_TIMEOUT_MS = 60 * 1e3;
 var LOCAL_TURN_ABORTED_CODE = "LOCAL_TURN_ABORTED";
 function buildAbortedError() {
   const error = new Error("local agent turn aborted by user");
@@ -12889,8 +12959,11 @@ async function runAbortableToolTask(input, task, pendingToolName) {
 }
 function resolveLlmRequestTimeoutMs(input) {
   const raw = input.llmRequestTimeoutMs ?? input.timeoutMs;
-  if (typeof raw !== "number" || !Number.isFinite(raw) || raw <= 0) return void 0;
-  return raw;
+  return typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_LLM_REQUEST_TIMEOUT_MS;
+}
+function resolveCompactionTimeoutMs(input) {
+  const raw = input.compactionTimeoutMs;
+  return typeof raw === "number" && Number.isFinite(raw) && raw > 0 ? raw : DEFAULT_COMPACTION_TIMEOUT_MS;
 }
 async function runCompleteWithTimeout(args2) {
   const { provider, messages, options, timeoutMs, round, input, boundary, context: context3, providerName, model } = args2;
@@ -12913,6 +12986,7 @@ async function runCompleteWithTimeout(args2) {
       const outcome = await runAbortableWithTimeout({
         task: complete,
         timeoutMs: typeof timeoutMs === "number" ? timeoutMs : void 0,
+        activityVersion: args2.activityVersion,
         abortSignal: input.abortSignal,
         runtime: input.effectRuntime
       });
@@ -12923,7 +12997,7 @@ async function runCompleteWithTimeout(args2) {
       }
       if (outcome.kind === "timeout") {
         const timeoutError = new Error(
-          `LLM request timed out after ${timeoutMs}ms (round ${round})`
+          `LLM request timed out after ${timeoutMs}ms without new output (idle window, round ${round})`
         );
         timeoutError.code = LLM_REQUEST_TIMEOUT;
         throw timeoutError;
@@ -13639,6 +13713,16 @@ async function runLocalAgentTurn(input) {
       }
     }
     let compactionUsage;
+    const emitCompactionPhase = (phase, scope3) => {
+      const atMs = Date.now();
+      if (phase.kind === "validating-context") emitLoopEvent(observationBoundary, { kind: "turn-phase", phase: "validating-context", atMs, compactionScope: scope3 });
+      else if (phase.kind === "compaction-start") {
+        emitLoopEvent(observationBoundary, { kind: "turn-phase", phase: "compacting", atMs, compactionScope: scope3 });
+        emitLoopEvent(observationBoundary, { kind: "compaction-start", atMs, scope: scope3 });
+      } else if (phase.kind === "waiting-provider") emitLoopEvent(observationBoundary, { kind: "turn-phase", phase: "waiting-provider", atMs, compactionScope: scope3 });
+      else if (phase.kind === "compaction-end") emitLoopEvent(observationBoundary, { kind: "compaction-end", atMs, scope: scope3 });
+      else emitLoopEvent(observationBoundary, { kind: "compaction-failed", atMs, scope: scope3, reason: phase.reason });
+    };
     const emitCompactionObservation = (compacted) => {
       const decision = compacted.decision;
       if (decision?.outcome === "skipped") {
@@ -13672,7 +13756,10 @@ async function runLocalAgentTurn(input) {
         model: agentConfig.model,
         resolveProvider: resolveProviderOnce,
         contextWindow,
-        realContextUsagePercent
+        realContextUsagePercent,
+        abortSignal: input.abortSignal,
+        timeoutMs: resolveCompactionTimeoutMs(input),
+        onPhase: (phase) => emitCompactionPhase(phase, "initial")
       });
       history = compacted.history;
       compactionUsage = compacted.usage;
@@ -13778,7 +13865,10 @@ async function runLocalAgentTurn(input) {
           model: agentConfig.model,
           resolveProvider: resolveProviderOnce,
           contextWindow,
-          ...ratio !== void 0 ? { realContextUsagePercent: ratio } : {}
+          ...ratio !== void 0 ? { realContextUsagePercent: ratio } : {},
+          abortSignal: input.abortSignal,
+          timeoutMs: resolveCompactionTimeoutMs(input),
+          onPhase: (phase) => emitCompactionPhase(phase, "in-loop")
         });
         if (compacted.usage) {
           compactionUsage = addOutOfBandUsage(compactionUsage, compacted.usage);
@@ -13848,11 +13938,12 @@ async function runLocalAgentTurn(input) {
         const shouldPassToolEvents = Boolean(
           input.onToolEvent || input.onObservationEvent || input.observationBoundary
         );
+        let llmStreamActivity = 0;
         result4 = await runCompleteWithTimeout({
           provider,
           messages: requestMessages,
           options: {
-            ...typeof input.timeoutMs === "number" ? { timeoutMs: input.timeoutMs } : {},
+            timeoutMs: resolveLlmRequestTimeoutMs(input),
             // 用户取消信号穿进 provider options：providerStreamRetry 据此在
             // 取消后跳过重试，provider 分支（如 antigravity/openai-compatible）
             // 也可把 fetch 绑定到同一信号，实现真正的传输层取消。
@@ -13861,6 +13952,7 @@ async function runLocalAgentTurn(input) {
             // 归到具体对话而不是 chat-proxy 兜底桶。新对话首轮 id 尚未分配。
             ...input.continueDialogId ? { dialogId: input.continueDialogId } : {},
             ...shouldStreamDeltas ? { onTextDelta: (chunk) => {
+              llmStreamActivity += 1;
               partialContent += chunk;
               observationBoundary.emit({
                 kind: "text-delta",
@@ -13870,6 +13962,7 @@ async function runLocalAgentTurn(input) {
               });
             } } : {},
             ...shouldStreamReasoning ? { onReasoningDelta: (chunk) => {
+              llmStreamActivity += 1;
               observationBoundary.emit({
                 kind: "reasoning-delta",
                 chunk,
@@ -13878,6 +13971,7 @@ async function runLocalAgentTurn(input) {
               });
             } } : {},
             ...shouldPassToolEvents ? { onToolEvent: (event) => {
+              llmStreamActivity += 1;
               observationBoundary.emit({
                 kind: "tool-event",
                 event,
@@ -13888,6 +13982,7 @@ async function runLocalAgentTurn(input) {
             ...shouldPassToolEvents ? { toolEventRound: round } : {}
           },
           timeoutMs: resolveLlmRequestTimeoutMs(input),
+          activityVersion: () => llmStreamActivity,
           round,
           input,
           boundary: observationBoundary,
@@ -16436,29 +16531,6 @@ function getProcessRegistry() {
   return registry;
 }
 
-// packages/agent-runtime/processOwnership.ts
-var asNonEmptyString = (value) => {
-  if (typeof value !== "string") return null;
-  const trimmed = value.trim();
-  return trimmed ? trimmed : null;
-};
-function readProcessOwner(runtimeContext) {
-  if (!runtimeContext || typeof runtimeContext !== "object") return null;
-  const dialogId = asNonEmptyString(runtimeContext.dialogId) ?? asNonEmptyString(runtimeContext.parentThreadId);
-  if (!dialogId) return null;
-  const turnId = asNonEmptyString(runtimeContext.turnId);
-  const ownerId = asNonEmptyString(runtimeContext.ownerId);
-  return {
-    dialogId,
-    ...turnId ? { turnId } : {},
-    ...ownerId ? { ownerId } : {}
-  };
-}
-
-// packages/agent-runtime/workspaceShell.ts
-import { resolve as resolve3 } from "node:path";
-import { spawn as spawnChildProcess2 } from "node:child_process";
-
 // packages/agent-runtime/processTaskResult.ts
 var PROCESS_RESULT_CAPSULE_TAIL_CHARS = 4e3;
 var PROCESS_RESULT_CAPSULE_SPILL_THRESHOLD_CHARS = 2e4;
@@ -16478,11 +16550,17 @@ function buildProcessTaskResultCapsule(args2) {
   const exitCode = args2.exitCode;
   const captureError = args2.captureError?.trim() || void 0;
   const durationMs = typeof args2.startedAt === "number" && Number.isFinite(args2.startedAt) ? Math.max(0, (args2.endedAt ?? Date.now()) - args2.startedAt) : void 0;
-  const stdoutTail = tailText(stdout, tailChars);
-  const stderrTail = tailText(stderr, tailChars);
+  const stdoutProvenance = args2.streamProvenance?.stdout;
+  const stderrProvenance = args2.streamProvenance?.stderr;
+  const ringEvicted = Boolean(stdoutProvenance?.evicted || stderrProvenance?.evicted);
+  const stdoutTailSource = typeof args2.stdoutTail === "string" ? args2.stdoutTail : stdout;
+  const stderrTailSource = typeof args2.stderrTail === "string" ? args2.stderrTail : stderr;
+  const stdoutTail = tailText(stdoutTailSource, tailChars);
+  const stderrTail = tailText(stderrTailSource, tailChars);
   const inlineSize = stdout.length + stderr.length;
   const inlineTruncated = stdoutTail.truncated || stderrTail.truncated;
-  const shouldSpill = inlineTruncated || inlineSize > spillThresholdChars;
+  const truncated = inlineTruncated || ringEvicted || Boolean(captureError);
+  const shouldSpill = truncated || inlineSize > spillThresholdChars;
   let spill;
   if (shouldSpill) {
     try {
@@ -16496,8 +16574,11 @@ function buildProcessTaskResultCapsule(args2) {
       });
       spill = {
         displayPath: result4.displayPath,
-        totalChars: result4.totalChars,
-        totalLines: result4.totalLines
+        // Prefer the caller's live provenance counters: they count every
+        // byte of the original stream, while the buffered content above may
+        // be a capped prefix of it.
+        totalChars: (stdoutProvenance?.totalChars ?? stdout.length) + (stderrProvenance?.totalChars ?? stderr.length),
+        totalLines: (stdoutProvenance?.totalLines ?? countLines(stdout)) + (stderrProvenance?.totalLines ?? countLines(stderr))
       };
     } catch {
     }
@@ -16508,12 +16589,33 @@ function buildProcessTaskResultCapsule(args2) {
     exitCode,
     ...durationMs !== void 0 ? { durationMs } : {},
     ...captureError ? { captureError } : {},
-    truncated: inlineTruncated || Boolean(captureError),
+    truncated,
     ...spill ? { spill } : {}
   };
 }
 
+// packages/agent-runtime/processOwnership.ts
+var asNonEmptyString = (value) => {
+  if (typeof value !== "string") return null;
+  const trimmed = value.trim();
+  return trimmed ? trimmed : null;
+};
+function readProcessOwner(runtimeContext) {
+  if (!runtimeContext || typeof runtimeContext !== "object") return null;
+  const dialogId = asNonEmptyString(runtimeContext.dialogId) ?? asNonEmptyString(runtimeContext.parentThreadId);
+  if (!dialogId) return null;
+  const turnId = asNonEmptyString(runtimeContext.turnId);
+  const ownerId = asNonEmptyString(runtimeContext.ownerId);
+  return {
+    dialogId,
+    ...turnId ? { turnId } : {},
+    ...ownerId ? { ownerId } : {}
+  };
+}
+
 // packages/agent-runtime/workspaceShell.ts
+import { resolve as resolve3 } from "node:path";
+import { spawn as spawnChildProcess2 } from "node:child_process";
 var EXEC_SHELL_TIMEOUT_ENV = "NOLO_EXEC_SHELL_TIMEOUT_MS";
 var EXEC_SHELL_DETACH_ENV = "NOLO_EXEC_SHELL_DETACH_MS";
 var DEFAULT_EXEC_SHELL_DETACH_MS = 12e4;
@@ -17382,13 +17484,169 @@ function runTasks(args2) {
   return { tasks, count: tasks.length };
 }
 
+// packages/agent-runtime/execShellCompletionWarnings.ts
+var BG_ESCAPE_WORD_PATTERN = /(?:^|[\s;|(&/\\])(nohup|disown|setsid|start-process)(?=$|[\s;|)&])/i;
+var SHELL_SPLIT_CHARS = /* @__PURE__ */ new Set([";", "|", "&", "(", ")", "<", ">", "\n", "	", " "]);
+function maskQuotedAndEscaped(command) {
+  const out = Array.from(command);
+  let quote = null;
+  for (let i = 0; i < out.length; i += 1) {
+    const ch = out[i];
+    if (quote) {
+      out[i] = " ";
+      if (ch === "\\" && quote !== "'") {
+        if (i + 1 < out.length) out[i + 1] = " ";
+        i += 1;
+      } else if (ch === quote) {
+        quote = null;
+      }
+      continue;
+    }
+    if (ch === "\\") {
+      out[i] = " ";
+      if (i + 1 < out.length) out[i + 1] = " ";
+      i += 1;
+      continue;
+    }
+    if (ch === "'" || ch === '"' || ch === "`") {
+      quote = ch;
+      out[i] = " ";
+      continue;
+    }
+    if (ch === "#" && (i === 0 || /[\s;]/.test(out[i - 1] ?? " "))) {
+      while (i < out.length && out[i] !== "\n") {
+        out[i] = " ";
+        i += 1;
+      }
+    }
+  }
+  return out.join("");
+}
+function readRedirectTarget(original, start) {
+  let i = start;
+  while (i < original.length && /\s/.test(original[i] ?? "")) {
+    i += 1;
+  }
+  if (i >= original.length) return void 0;
+  let text = "";
+  let j = i;
+  while (j < original.length) {
+    const o = original[j];
+    if (o === "'" || o === '"' || o === "`") {
+      const quote = o;
+      j += 1;
+      while (j < original.length && original[j] !== quote) {
+        if (original[j] === "\\" && quote !== "'" && j + 1 < original.length) {
+          text += original[j + 1];
+          j += 2;
+          continue;
+        }
+        text += original[j];
+        j += 1;
+      }
+      j += 1;
+      continue;
+    }
+    if (/\s/.test(o) || SHELL_SPLIT_CHARS.has(o)) break;
+    text += o;
+    j += 1;
+  }
+  if (!text || text === "$") return void 0;
+  return { text, end: j };
+}
+function isIgnoredRedirectTarget(target) {
+  return target === "/dev/null";
+}
+function detectExecShellSynchronousWarnings(command, shell) {
+  const masked = maskQuotedAndEscaped(command);
+  const isPowerShell = shell?.resolvedShell === "powershell";
+  const redirectTargets = [];
+  let backgrounded = false;
+  let i = 0;
+  while (i < masked.length) {
+    const ch = masked[i];
+    if (ch === "&") {
+      const next = masked[i + 1];
+      if (next === "&") {
+        i += 2;
+        continue;
+      }
+      if (next === ">") {
+        let j = i + 2;
+        if (masked[j] === ">") j += 1;
+        const target = readRedirectTarget(command, j);
+        if (target && !isIgnoredRedirectTarget(target.text)) redirectTargets.push(target.text);
+        i = target ? target.end : j;
+        continue;
+      }
+      const prev = masked[i - 1];
+      if (prev === ">" || prev === "<") {
+        i += 1;
+        continue;
+      }
+      if (isPowerShell) {
+        i += 1;
+        continue;
+      }
+      backgrounded = true;
+      i += 1;
+      continue;
+    }
+    if (ch === ">") {
+      const prev = masked[i - 1];
+      if (prev === ">" || prev === "&" || prev === "<") {
+        i += 1;
+        continue;
+      }
+      let j = i + 1;
+      if (masked[j] === ">") j += 1;
+      if (masked[j] === "&") {
+        const ampTarget = readRedirectTarget(command, j + 1);
+        const isFdDuplication = ampTarget !== void 0 && (/^\d+$/.test(ampTarget.text) || ampTarget.text === "-");
+        if (ampTarget && !isFdDuplication && !isIgnoredRedirectTarget(ampTarget.text)) {
+          redirectTargets.push(ampTarget.text);
+        }
+        i = ampTarget ? ampTarget.end : j + 1;
+        continue;
+      }
+      const target = readRedirectTarget(command, j);
+      if (target && !isIgnoredRedirectTarget(target.text)) redirectTargets.push(target.text);
+      i = target ? target.end : j;
+      continue;
+    }
+    if (ch === "<") {
+      i += masked[i + 1] === "<" || masked[i + 1] === "&" ? 2 : 1;
+      continue;
+    }
+    i += 1;
+  }
+  const wordMatch = BG_ESCAPE_WORD_PATTERN.exec(masked);
+  if (wordMatch) backgrounded = true;
+  const warnings = [];
+  if (redirectTargets.length > 0) {
+    const target = redirectTargets[0];
+    warnings.push({
+      kind: "output-redirect",
+      redirectTarget: target,
+      message: `[wake-safety] This execShell call completed synchronously; its output was redirected to ${target}. That file is NOT delivered by any completion notification \u2014 no tracked background task was created. If you need the result, read that file in this turn.`
+    });
+  }
+  if (backgrounded) {
+    warnings.push({
+      kind: "shell-backgrounding",
+      message: `[wake-safety] Detected shell-internal backgrounding (lone \`&\`, nohup/disown/setsid/Start-Process or similar). Descendant processes are NOT tracked as platform tasks and will not produce completion notifications; text such as \`LAUNCHED\` printed by the command is plain stdout, not a platform receipt.`
+    });
+  }
+  return warnings;
+}
+
 // packages/agent-runtime/capabilities/execShellCapability.ts
 function buildExecShellToolDefinition(toolName = "execShell") {
   return {
     type: "function",
     function: {
       name: toolName,
-      description: `Execute a shell command from the workspace root. Prefer one compound command (e.g. 'git status && git diff --stat') to perform complete verification in one step instead of multiple small roundtrips. Do not cd into guessed paths; commands already run from the workspace root. Commands block until exit. Long-running commands (sleep over ${IMMEDIATE_DETACH_SLEEP_THRESHOLD_SECONDS}s, dev servers, watchers) automatically detach to background returning {detached: true, pid, label}; for persistent services, prefer launchProcess. On Windows the resolved shell may be Windows PowerShell 5.1 (metadata.shellKind="powershell5"): it does not support '&&'/'||' or $PSStyle \u2014 join commands with ';' or split into multiple calls. metadata.shellKind="pwsh" means PowerShell 7+ with full syntax. Read resolvedShell/shellKind from any execShell result before writing Windows-specific syntax.`,
+      description: `Execute a shell command from the workspace root. Prefer one compound command (e.g. 'git status && git diff --stat') to perform complete verification in one step instead of multiple small roundtrips. Do not cd into guessed paths; commands already run from the workspace root. Commands block until exit. Long-running commands (sleep over ${IMMEDIATE_DETACH_SLEEP_THRESHOLD_SECONDS}s, dev servers, watchers) automatically detach to background returning {detached: true, pid, label}; for persistent services, prefer launchProcess. On Windows the resolved shell may be Windows PowerShell 5.1 (metadata.shellKind="powershell5"): it does not support '&&'/'||' or $PSStyle \u2014 join commands with ';' or split into multiple calls. metadata.shellKind="pwsh" means PowerShell 7+ with full syntax. Read resolvedShell/shellKind from any execShell result before writing Windows-specific syntax. LIFECYCLE CONTRACT (misreading this contract silenced a real dialog for 10 hours): (1) A normal command waits synchronously for at most 120 seconds; if it ends inside that window the call IS finished \u2014 a result containing exitCode means the command has already completed, never "still running". (2) Only a result with metadata.detached === true AND a taskId represents a tracked background task that may trigger completion wake-up (terminal completion turn carrying a bounded result capsule); that handle may be waited on with taskWait and will produce a completion notification. (3) Text the command itself prints (LAUNCHED, STARTED, BACKGROUND, ...) is plain stdout with zero lifecycle meaning \u2014 never read it as a platform receipt. (4) Shell-level backgrounding (\`&\`, nohup, disown, setsid, self-daemonizing scripts, PowerShell Start-Process) is NOT tracked: those descendants produce no completion notification, and the outer shell finishing tells you nothing about them. Use background: true to turn a finite job into a tracked background task immediately. When a synchronous result's core output was redirected to a file, read that file in the SAME turn \u2014 never end the turn promising a later automatic report without a taskId.`,
       parameters: {
         type: "object",
         properties: {
@@ -17399,6 +17657,10 @@ function buildExecShellToolDefinition(toolName = "execShell") {
           cmd: {
             type: "string",
             description: "Compatibility alias for command."
+          },
+          background: {
+            type: "boolean",
+            description: "Immediately detach this command into a tracked background task (no 120s synchronous wait): returns {detached: true, taskId}, and on completion the platform resumes this conversation with a bounded result capsule (exitCode, duration, stdout/stderr tail). Default false. Use for finite jobs (tests, builds, batch) whose result you need later; NOT for dev servers/watchers \u2014 use launchProcess for those."
           }
         }
       }
@@ -17439,11 +17701,13 @@ function normalizeExecShellInput(input) {
       throw new Error("execShell requires a non-empty command.");
     }
     const activity = extractActivity(record);
+    const background = record.background === true || typeof record.background === "string" && record.background.trim().toLowerCase() === "true";
     return {
       command,
       ...record.shell !== void 0 ? { shell: record.shell } : {},
       ...activity ? { activity } : {},
-      ...record.input !== void 0 ? { input: record.input } : {}
+      ...record.input !== void 0 ? { input: record.input } : {},
+      ...background ? { background: true } : {}
     };
   }
   throw new Error("execShell requires a non-empty command.");
@@ -17481,6 +17745,7 @@ var execShellCapability = {
       command,
       shell: normalized.shell
     });
+    const background = normalized.background === true;
     const result4 = await runWorkspaceCommand({
       workspaceRoot,
       command: shellPlan.argv,
@@ -17488,15 +17753,18 @@ var execShellCapability = {
       outputLimit: ctx.commandOutputLimit,
       commandPrefix: ctx.commandPrefix,
       abortSignal: ctx.abortSignal,
-      detachMs: isImmediateDetachShellCommand({ command }) ? 0 : ctx.detachMs,
+      detachMs: background ? 0 : isImmediateDetachShellCommand({ command }) ? 0 : ctx.detachMs,
       stdin: typeof normalized.input === "string" ? normalized.input : void 0,
       // Ownership of the turn that invoked this command: an auto-detached
       // command keeps its parent dialog so its terminal can resume that
       // conversation (see processOwnership.ts). Absent ctx.owner = unowned.
       owner: ctx.owner ?? null
     });
+    const warnings = result4.detached || result4.spawnFailed ? [] : detectExecShellSynchronousWarnings(command, {
+      resolvedShell: shellPlan.resolvedShell
+    });
     return {
-      content: result4.content,
+      content: warnings.length > 0 ? [result4.content, ...warnings.map((warning) => warning.message)].join("\n\n") : result4.content,
       metadata: {
         command,
         exitCode: result4.exitCode,
@@ -17511,8 +17779,21 @@ var execShellCapability = {
           // Phase 0: stable taskId from the pre-registered Execution
           // Envelope (additive; existing detached fields untouched).
           taskId: result4.taskId,
-          status: "running"
-        } : {},
+          status: "running",
+          // P0 machine-readable execution state: an explicit positive
+          // signal instead of requiring the model to infer "not detached"
+          // from absence. Mirrors the real lifecycle contract.
+          executionState: "detached",
+          trackedBackgroundTask: true,
+          completionNotification: "terminal-resume"
+        } : {
+          // P0 machine-readable execution state: the command already
+          // finished inside the synchronous window; no background task
+          // exists, so no completion notification will ever arrive.
+          executionState: "synchronous-complete",
+          trackedBackgroundTask: false,
+          completionNotification: "none"
+        },
         ...normalized.activity ? { activity: normalized.activity } : {}
       }
     };
@@ -17728,7 +18009,7 @@ function buildLaunchProcessTool() {
     type: "function",
     function: {
       name: "launchProcess",
-      description: "Start a long-running background process (dev server, watcher, REPL) and return immediately with {pid, label, status}. Use listProcesses to inspect or stop it.",
+      description: "Start a long-running ambient background process (dev server, watcher, REPL) and return immediately with {pid, label, taskId, status}. Real boundaries: this registers a tracked background task, but completion does NOT automatically start a new turn \u2014 the process is intentionally notice-only (an exited dev server must not silently burn a model turn). When it reaches a terminal state the bounded result (exitCode, duration, stdout/stderr tail) is recorded and surfaced as a notice injected only on your next real turn in the same conversation. Use listProcesses to inspect, taskWait to block for its terminal state, or taskStop to stop it. For a finite job (tests, builds, batch) whose result must resume the conversation automatically, use execShell with background: true instead.",
       parameters: {
         type: "object",
         properties: {
@@ -18869,6 +19150,55 @@ async function execShellTool(args2) {
     }
   );
 }
+var LAUNCH_PROCESS_STREAM_RING_CHARS = 65536;
+var LAUNCH_PROCESS_STREAM_CAPTURE_MAX_CHARS = 4e6;
+function createLaunchProcessStreamCapture() {
+  let ring = "";
+  let full = null;
+  let capturedChars = 0;
+  let totalChars = 0;
+  let totalNewlines = 0;
+  return {
+    push(chunk) {
+      const str = typeof chunk === "string" ? chunk : chunk.toString("utf8");
+      if (!str) return;
+      totalChars += str.length;
+      for (let i = 0; i < str.length; i += 1) {
+        if (str.charCodeAt(i) === 10) totalNewlines += 1;
+      }
+      const combined = ring + str;
+      if (combined.length <= LAUNCH_PROCESS_STREAM_RING_CHARS) {
+        ring = combined;
+        return;
+      }
+      if (full === null) {
+        full = [combined];
+        capturedChars = combined.length;
+      } else if (capturedChars < LAUNCH_PROCESS_STREAM_CAPTURE_MAX_CHARS) {
+        const room = LAUNCH_PROCESS_STREAM_CAPTURE_MAX_CHARS - capturedChars;
+        const slice = str.length <= room ? str : str.slice(0, room);
+        full.push(slice);
+        capturedChars += slice.length;
+      }
+      ring = combined.slice(-LAUNCH_PROCESS_STREAM_RING_CHARS);
+    },
+    text() {
+      return full === null ? ring : full.join("");
+    },
+    tailText() {
+      return ring;
+    },
+    evicted() {
+      return full !== null;
+    },
+    totalChars() {
+      return totalChars;
+    },
+    totalLines() {
+      return totalChars > 0 ? totalNewlines + 1 : 0;
+    }
+  };
+}
 async function launchProcessTool(args2) {
   const parsed = parseWorkspaceToolArguments(args2.call.arguments);
   const command = requireShellCommand(parsed, args2.call.name);
@@ -18896,6 +19226,14 @@ async function launchProcessTool(args2) {
     stdio: ["ignore", "pipe", "pipe"],
     detached
   });
+  const stdoutCapture = createLaunchProcessStreamCapture();
+  const stderrCapture = createLaunchProcessStreamCapture();
+  proc.stdout?.on("data", (chunk) => stdoutCapture.push(chunk));
+  proc.stderr?.on("data", (chunk) => stderrCapture.push(chunk));
+  proc.stdout?.on("error", () => {
+  });
+  proc.stderr?.on("error", () => {
+  });
   const pid = proc.pid;
   if (typeof pid !== "number") {
     return {
@@ -18936,7 +19274,38 @@ async function launchProcessTool(args2) {
       process.removeListener("SIGTERM", cleanupChildOnHostSignal);
       process.removeListener("SIGINT", cleanupChildOnHostSignal);
     }
-    registry2.markExited(pid, code ?? 1);
+    const exitCode = code ?? 1;
+    let capsule;
+    try {
+      capsule = buildProcessTaskResultCapsule({
+        // The full captured output (bounded prefix when the process was
+        // extremely chatty): the module tails it for the inline capsule and
+        // spills it for recovery. Provenance carries the live original-stream
+        // counters so truncated/spill metadata never derives from the ring.
+        stdout: stdoutCapture.text(),
+        stderr: stderrCapture.text(),
+        stdoutTail: stdoutCapture.tailText(),
+        stderrTail: stderrCapture.tailText(),
+        exitCode,
+        // Duration measured from the registry envelope's startedAt (spawn).
+        startedAt: envelope.startedAt,
+        workspaceRoot: args2.workspaceRoot,
+        streamProvenance: {
+          stdout: {
+            evicted: stdoutCapture.evicted(),
+            totalChars: stdoutCapture.totalChars(),
+            totalLines: stdoutCapture.totalLines()
+          },
+          stderr: {
+            evicted: stderrCapture.evicted(),
+            totalChars: stderrCapture.totalChars(),
+            totalLines: stderrCapture.totalLines()
+          }
+        }
+      });
+    } catch {
+    }
+    registry2.markExited(pid, exitCode, capsule);
   });
   const activity = extractActivity(parsed);
   const resultData = { pid, label, taskId: envelope.taskId, status: "running" };
@@ -18948,6 +19317,13 @@ async function launchProcessTool(args2) {
       label,
       status: "running",
       taskId: envelope.taskId,
+      // P0 machine-readable execution state (consistent with the real wake
+      // contract): a real background task from birth, but ambient — its
+      // terminal result rides the next real turn's notice, not an automatic
+      // completion turn.
+      executionState: "background",
+      trackedBackgroundTask: true,
+      completionNotification: "next-turn-notice",
       processLaunch: resultData,
       ...activity ? { activity } : {}
     }