npm - rovecode - Versions diffs - 0.3.2 - Mend

rovecode 0.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (334) hide show

package/LICENSE +662 -0
package/README.md +737 -0
package/THIRD_PARTY_NOTICES.md +268 -0
package/bin/rovecode.ts +21 -0
package/package.json +56 -0
package/src/acp/server.ts +374 -0
package/src/cli/auth-login.ts +122 -0
package/src/cli/connect.ts +244 -0
package/src/cli/context-cmd.ts +199 -0
package/src/cli/dispatch.ts +82 -0
package/src/cli/doctor.ts +362 -0
package/src/cli/export.ts +276 -0
package/src/cli/help.ts +293 -0
package/src/cli/is-tui-invocation.ts +8 -0
package/src/cli/main.ts +583 -0
package/src/cli/market-cmd.ts +658 -0
package/src/cli/mcp-login.ts +141 -0
package/src/cli/mcp-market-cmd.ts +302 -0
package/src/cli/output.ts +382 -0
package/src/cli/repl.ts +250 -0
package/src/cli/repomap-root.ts +14 -0
package/src/cli/resume.ts +57 -0
package/src/cli/run-flags.ts +43 -0
package/src/cli/run-limits.ts +78 -0
package/src/cli/runtime.ts +931 -0
package/src/cli/session-arg.ts +30 -0
package/src/cli/sessions-cmd.ts +145 -0
package/src/cli/setup.ts +153 -0
package/src/cli/skills-cmd.ts +194 -0
package/src/cli/start-chat.ts +65 -0
package/src/cli/trust-cmd.ts +52 -0
package/src/coding/bash.ts +148 -0
package/src/coding/checkpoints.ts +327 -0
package/src/coding/diff.ts +138 -0
package/src/coding/files.ts +341 -0
package/src/coding/hashline.ts +274 -0
package/src/coding/lsp-gate.ts +254 -0
package/src/coding/lsp-servers.ts +147 -0
package/src/coding/lsp.ts +283 -0
package/src/coding/repomap-cache.ts +99 -0
package/src/coding/repomap-files.ts +192 -0
package/src/coding/repomap.ts +481 -0
package/src/core/agents.ts +255 -0
package/src/core/compaction.ts +259 -0
package/src/core/config.ts +289 -0
package/src/core/context-report.ts +228 -0
package/src/core/context.ts +60 -0
package/src/core/count-remote.ts +107 -0
package/src/core/execpolicy-rules.ts +196 -0
package/src/core/execpolicy.ts +385 -0
package/src/core/executor.ts +454 -0
package/src/core/guardrails.ts +400 -0
package/src/core/hooks.ts +411 -0
package/src/core/images.ts +230 -0
package/src/core/intro.ts +266 -0
package/src/core/loop.ts +567 -0
package/src/core/modes.ts +372 -0
package/src/core/orchestrator.ts +245 -0
package/src/core/proc-group.ts +48 -0
package/src/core/project-trust.ts +98 -0
package/src/core/reflection.ts +165 -0
package/src/core/sandbox-config.ts +186 -0
package/src/core/session-id.ts +24 -0
package/src/core/session-images.ts +73 -0
package/src/core/session-ops.ts +183 -0
package/src/core/session-text.ts +29 -0
package/src/core/session.ts +469 -0
package/src/core/settings.ts +170 -0
package/src/core/tasks.ts +646 -0
package/src/core/token-scale.ts +108 -0
package/src/core/tools.ts +309 -0
package/src/core/trust.ts +104 -0
package/src/core/types.ts +330 -0
package/src/core/update-check.ts +171 -0
package/src/core/usage.ts +204 -0
package/src/core/validate.ts +121 -0
package/src/core/verify-gate.ts +159 -0
package/src/core/verify.ts +236 -0
package/src/core/voice.ts +158 -0
package/src/core/win-job.ts +183 -0
package/src/core/workspace.ts +184 -0
package/src/design/audit.ts +797 -0
package/src/design/direction.ts +190 -0
package/src/design/rules.ts +157 -0
package/src/eval/bench.ts +150 -0
package/src/eval/gauntlet-runner.ts +215 -0
package/src/eval/gauntlet-support.ts +84 -0
package/src/eval/gauntlet-wave3.ts +269 -0
package/src/eval/gauntlet-wave4.ts +217 -0
package/src/eval/gauntlet.ts +253 -0
package/src/index.ts +17 -0
package/src/lanes/agy.ts +95 -0
package/src/lanes/approval.ts +24 -0
package/src/lanes/claude.ts +129 -0
package/src/lanes/codex.ts +127 -0
package/src/lanes/events.ts +130 -0
package/src/lanes/job.ts +142 -0
package/src/lanes/opencode.ts +122 -0
package/src/lanes/process.ts +184 -0
package/src/lanes/progress.ts +183 -0
package/src/lanes/registry.ts +178 -0
package/src/lanes/runner.ts +124 -0
package/src/lanes/types.ts +112 -0
package/src/market/catalogs/mcp-docs.json +111 -0
package/src/market/catalogs/plugins.json +111 -0
package/src/market/catalogs/skills.json +478 -0
package/src/market/clone.ts +72 -0
package/src/market/context-cost.ts +121 -0
package/src/market/digest.ts +106 -0
package/src/market/index.ts +22 -0
package/src/market/install.ts +578 -0
package/src/market/manifest.ts +187 -0
package/src/market/prereq.ts +145 -0
package/src/market/registry.ts +363 -0
package/src/market/resolve.ts +111 -0
package/src/market/types.ts +236 -0
package/src/market/validate.ts +227 -0
package/src/mcp/client.ts +449 -0
package/src/mcp/config.ts +252 -0
package/src/mcp/local-package.ts +211 -0
package/src/mcp/market-catalog.ts +84 -0
package/src/mcp/market-install.ts +289 -0
package/src/mcp/market.ts +362 -0
package/src/mcp/oauth.ts +251 -0
package/src/mcp/prompts-resources.ts +249 -0
package/src/mcp/shared.ts +149 -0
package/src/mcp/status.ts +67 -0
package/src/mcp/tools.ts +275 -0
package/src/mcp/transport.ts +122 -0
package/src/mcp/trust.ts +25 -0
package/src/memory/blocks.ts +278 -0
package/src/memory/recall.ts +355 -0
package/src/memory/scope.ts +182 -0
package/src/memory/store.ts +105 -0
package/src/memory/tools.ts +99 -0
package/src/plugins/cli.ts +119 -0
package/src/plugins/discover.ts +108 -0
package/src/plugins/index.ts +50 -0
package/src/plugins/install.ts +184 -0
package/src/plugins/load.ts +124 -0
package/src/plugins/manifest.ts +92 -0
package/src/plugins/state.ts +83 -0
package/src/providers/auth.ts +408 -0
package/src/providers/cache.ts +223 -0
package/src/providers/catalog-local.ts +160 -0
package/src/providers/catalog.ts +421 -0
package/src/providers/middleware-context.ts +86 -0
package/src/providers/middleware.ts +373 -0
package/src/providers/model-list.ts +23 -0
package/src/providers/models-index.json +1 -0
package/src/providers/oauth/common.ts +105 -0
package/src/providers/oauth/device-code.ts +107 -0
package/src/providers/oauth/github-copilot.ts +146 -0
package/src/providers/oauth/loopback.ts +158 -0
package/src/providers/oauth/openai.ts +163 -0
package/src/providers/oauth/openrouter.ts +89 -0
package/src/providers/oauth/pkce.ts +45 -0
package/src/providers/oauth/registry.ts +39 -0
package/src/providers/oauth/seam.ts +89 -0
package/src/providers/profile-glm53.ts +111 -0
package/src/providers/profile-sonnet5-persona.ts +65 -0
package/src/providers/profile-sonnet5-voice.ts +23 -0
package/src/providers/profiles.ts +156 -0
package/src/providers/provider-config.ts +311 -0
package/src/providers/registry.ts +333 -0
package/src/providers/responses.ts +209 -0
package/src/providers/retry.ts +234 -0
package/src/providers/router.ts +294 -0
package/src/providers/sse.ts +26 -0
package/src/providers/stream-errors.ts +117 -0
package/src/providers/stream.ts +566 -0
package/src/providers/thinking.ts +189 -0
package/src/providers/wire-messages.ts +129 -0
package/src/providers/wire-responses.ts +79 -0
package/src/providers/wire-select.ts +53 -0
package/src/server/http.ts +291 -0
package/src/server/openapi.ts +246 -0
package/src/sextant/card-hits.ts +102 -0
package/src/sextant/card-keys.ts +55 -0
package/src/sextant/context-source.ts +157 -0
package/src/sextant/crew-cards.ts +350 -0
package/src/sextant/draw-agents.ts +273 -0
package/src/sextant/draw-code.ts +388 -0
package/src/sextant/draw-context.ts +222 -0
package/src/sextant/draw-frame.ts +164 -0
package/src/sextant/draw-market.ts +573 -0
package/src/sextant/draw-messages.ts +386 -0
package/src/sextant/draw-pet.ts +230 -0
package/src/sextant/draw-plan.ts +187 -0
package/src/sextant/draw-tabs.ts +85 -0
package/src/sextant/draw-util.ts +65 -0
package/src/sextant/draw-wizard.ts +378 -0
package/src/sextant/engine.ts +230 -0
package/src/sextant/frame-hits.ts +25 -0
package/src/sextant/frame.ts +101 -0
package/src/sextant/git-status.ts +197 -0
package/src/sextant/grid.ts +59 -0
package/src/sextant/input.ts +119 -0
package/src/sextant/keys.ts +521 -0
package/src/sextant/layout.ts +86 -0
package/src/sextant/local-commands.ts +169 -0
package/src/sextant/market-source.ts +287 -0
package/src/sextant/mentions.ts +200 -0
package/src/sextant/message-hits.ts +26 -0
package/src/sextant/model.ts +387 -0
package/src/sextant/overlays.ts +456 -0
package/src/sextant/panel-hits.ts +38 -0
package/src/sextant/pet.ts +399 -0
package/src/sextant/screen.ts +324 -0
package/src/sextant/scroll-hits.ts +66 -0
package/src/sextant/scrollbar.ts +82 -0
package/src/sextant/sextant-bridge.ts +174 -0
package/src/sextant/sextant-cards.ts +142 -0
package/src/sextant/sextant-diff-base.ts +63 -0
package/src/sextant/sextant-files.ts +154 -0
package/src/sextant/sextant-frame-loop.ts +335 -0
package/src/sextant/sextant-renderer.ts +574 -0
package/src/sextant/sextant-repo.ts +140 -0
package/src/sextant/theme.ts +66 -0
package/src/sextant/tool-rows.ts +189 -0
package/src/sextant/types.ts +493 -0
package/src/skills/index.ts +387 -0
package/src/skills/pack.ts +220 -0
package/src/skills/spec.ts +162 -0
package/src/skills/tools.ts +69 -0
package/src/skills/versioned.ts +227 -0
package/src/telemetry/otel-export.ts +122 -0
package/src/telemetry/otel-lanes.ts +89 -0
package/src/telemetry/otel-logs.ts +131 -0
package/src/telemetry/otel-metrics.ts +136 -0
package/src/telemetry/otel.ts +397 -0
package/src/telemetry/otlp.ts +76 -0
package/src/tools/ask-user.ts +156 -0
package/src/tools/bash-bg.ts +94 -0
package/src/tools/bash-jobs.ts +237 -0
package/src/tools/design.ts +151 -0
package/src/tools/evalcell.ts +338 -0
package/src/tools/html-text.ts +139 -0
package/src/tools/provider.ts +149 -0
package/src/tools/task.ts +250 -0
package/src/tools/todo.ts +320 -0
package/src/tools/webfetch.ts +332 -0
package/src/tools/websearch.ts +359 -0
package/src/tui/agents-cmd.ts +41 -0
package/src/tui/app.ts +749 -0
package/src/tui/attach.ts +127 -0
package/src/tui/boot-notes.ts +41 -0
package/src/tui/builtin-prompts.ts +59 -0
package/src/tui/checkpoints-cmd.ts +70 -0
package/src/tui/clipboard-image.ts +81 -0
package/src/tui/clipboard.ts +78 -0
package/src/tui/commands.ts +283 -0
package/src/tui/config-view.ts +53 -0
package/src/tui/context-cmds.ts +282 -0
package/src/tui/cost.ts +108 -0
package/src/tui/crash-guard.ts +173 -0
package/src/tui/focus-terminal.ts +34 -0
package/src/tui/git-cmds.ts +273 -0
package/src/tui/git-plain.ts +58 -0
package/src/tui/info-cmd.ts +150 -0
package/src/tui/input-plain.ts +76 -0
package/src/tui/mcp-cmd.ts +128 -0
package/src/tui/memory-note.ts +77 -0
package/src/tui/modes-cmd.ts +45 -0
package/src/tui/notify-seq.ts +100 -0
package/src/tui/notify.ts +318 -0
package/src/tui/overlays.ts +97 -0
package/src/tui/pi-renderer.ts +428 -0
package/src/tui/providers-cmd.ts +377 -0
package/src/tui/reasoning-view.ts +56 -0
package/src/tui/renderer.ts +128 -0
package/src/tui/replay-marker.ts +29 -0
package/src/tui/session-cmd.ts +148 -0
package/src/tui/session-manage.ts +95 -0
package/src/tui/sextant-attach.ts +102 -0
package/src/tui/sextant-io.ts +202 -0
package/src/tui/sextant-smoke.ts +110 -0
package/src/tui/shell-cmd.ts +158 -0
package/src/tui/smoke.ts +72 -0
package/src/tui/staged-terminal.ts +50 -0
package/src/tui/startup.ts +12 -0
package/src/tui/theme.ts +59 -0
package/src/tui/todo-label.ts +7 -0
package/src/tui/trust-card.ts +107 -0
package/src/tui/tui-commands.ts +87 -0
package/tsconfig.json +30 -0
package/vendor/pi-tui/LICENSE +21 -0
package/vendor/pi-tui/PATCHES.md +12 -0
package/vendor/pi-tui/PROVENANCE.md +12 -0
package/vendor/pi-tui/README.upstream.md +854 -0
package/vendor/pi-tui/native/win32/prebuilds/win32-arm64/win32-console-mode.node +0 -0
package/vendor/pi-tui/native/win32/prebuilds/win32-x64/win32-console-mode.node +0 -0
package/vendor/pi-tui/src/alt-screen-search.ts +158 -0
package/vendor/pi-tui/src/autocomplete.ts +827 -0
package/vendor/pi-tui/src/components/alt-screen-flash.ts +52 -0
package/vendor/pi-tui/src/components/box.ts +138 -0
package/vendor/pi-tui/src/components/cancellable-loader.ts +41 -0
package/vendor/pi-tui/src/components/editor.ts +2364 -0
package/vendor/pi-tui/src/components/h-stack.ts +45 -0
package/vendor/pi-tui/src/components/image.ts +128 -0
package/vendor/pi-tui/src/components/input.ts +448 -0
package/vendor/pi-tui/src/components/loader.ts +93 -0
package/vendor/pi-tui/src/components/markdown.ts +1016 -0
package/vendor/pi-tui/src/components/scroll-view.ts +217 -0
package/vendor/pi-tui/src/components/select-list.ts +230 -0
package/vendor/pi-tui/src/components/settings-list.ts +277 -0
package/vendor/pi-tui/src/components/spacer.ts +29 -0
package/vendor/pi-tui/src/components/stack.ts +155 -0
package/vendor/pi-tui/src/components/text.ts +108 -0
package/vendor/pi-tui/src/components/truncated-text.ts +66 -0
package/vendor/pi-tui/src/components/v-stack.ts +34 -0
package/vendor/pi-tui/src/editor-component.ts +75 -0
package/vendor/pi-tui/src/fuzzy.ts +138 -0
package/vendor/pi-tui/src/index.ts +149 -0
package/vendor/pi-tui/src/keybindings.ts +321 -0
package/vendor/pi-tui/src/keys.ts +1402 -0
package/vendor/pi-tui/src/kill-ring.ts +47 -0
package/vendor/pi-tui/src/latex.ts +1381 -0
package/vendor/pi-tui/src/layout-node.ts +52 -0
package/vendor/pi-tui/src/layout.ts +411 -0
package/vendor/pi-tui/src/native-modifiers.ts +60 -0
package/vendor/pi-tui/src/native-module-path.ts +32 -0
package/vendor/pi-tui/src/stdin-buffer.ts +445 -0
package/vendor/pi-tui/src/terminal-colors.ts +74 -0
package/vendor/pi-tui/src/terminal-image.ts +701 -0
package/vendor/pi-tui/src/terminal.ts +554 -0
package/vendor/pi-tui/src/tui-alt-screen.ts +1379 -0
package/vendor/pi-tui/src/tui-main-screen.ts +655 -0
package/vendor/pi-tui/src/tui.ts +1264 -0
package/vendor/pi-tui/src/undo-stack.ts +29 -0
package/vendor/pi-tui/src/utils.ts +1327 -0
package/vendor/pi-tui/src/word-navigation.ts +118 -0
package/vendor/pi-tui/test/test-themes.ts +39 -0
package/vendor/pi-tui/test/virtual-terminal.ts +219 -0

package/src/core/agents.ts ADDED Viewed

@@ -0,0 +1,255 @@
+/** Custom subagent definitions (ported from the Nimbus harness, PORT #62): `.rovecode/agents/<name>.md` (project) and
+ *  `~/.rovecode/agents/<name>.md` (user scope, ROVECODE_HOME-aware — providers/auth.ts rovecodeHome) become agent
+ *  names the `task` tool can start: `task start {agent:"<name>"}` runs the child with the definition's model, mode
+ *  and a tool registry RESTRICTED to its allow-list — through the existing TaskManager / child registry (no second
+ *  loop, no second registry; the allow-list is a FILTER over the child tool table, never wider than the parent's).
+ *  This module is the pure half — file format, discovery, the filter. cli/runtime.ts wires it (discovery at boot,
+ *  the defs map beside `main`, the filtered child registry); core/orchestrator.ts honours `mode`.
+ *
+ *  Pattern source: opencode @ ebece6e (MIT), packages/opencode/src/config/agent.ts — markdown files under an
+ *  `agent(s)/` config dir, name = path sans extension, frontmatter = the agent's fields and the body its prompt
+ *  (`{ name, ...md.data, prompt: md.content.trim() }`, :23-28); the global config dir is merged before the project's,
+ *  so a project entry replaces a user one (config.ts:474-475 mergeDeep). Its field set (description, model, mode,
+ *  tools {name: bool}, permission, temperature, steps …) is reduced to the four knobs below; `tools` is a plain
+ *  allow-list (permissions come from the parent's rules via orchestrator deriveChildRules and are NOT configurable
+ *  per agent).
+ *
+ *  File format (YAML-lite frontmatter — skills/index.ts parseFrontmatter):
+ *    ---
+ *    description: Fast codebase explorer            (optional; ≤ 200 chars in listings; default "custom agent (<file>)")
+ *    model: openai/gpt-4o-mini                      (optional; "provider/model" = the router grammar, split on the
+ *                                                    FIRST slash; a bare id runs on the starting run's provider. A
+ *                                                    child streams over the RUN's endpoint, so a provider other than
+ *                                                    the configured one cannot be honoured and is refused at
+ *                                                    discovery — DiscoverAgentsOptions.validateModel)
+ *    mode: plan                                     (optional; plan|act; plan = the plan rule set + prompt section)
+ *    tools: read, grep, glob                        (optional allow-list; comma/space separated, [brackets] allowed;
+ *                                                    ABSENT or "*" = every tool the child table offers; PRESENT but
+ *                                                    empty — `tools:`, `tools: []`, `tools: ''` — is an error, and so
+ *                                                    is a YAML block list (`- read` lines): the file is skipped, it
+ *                                                    never fails open to every tool)
+ *    ---
+ *    <body = the child's system prompt; empty → the runtime's own prompt>
+ *  Frontmatter lines are `key: value` only (blank and `#` comment lines allowed); any other line is an error. Keys
+ *  outside description/model/mode/tools are IGNORED with a warning (the file still loads) — a typo like `tool:` is
+ *  never silent. Names: filename sans `.md`, lowercased, [a-z0-9_-]+; `main` (the built-in child) and the external-lane
+ *  adapter ids are RESERVED: a `codex.md` is refused with a line naming the file, and `task start codex` stays the
+ *  lane — neither is silently preferred. Every problem is a warning (never a throw): unterminated frontmatter, a
+ *  `mode` outside plan|act, a malformed `tools` or `model` value, a model the run cannot honour, an unreadable file,
+ *  a bad or reserved name. Missing dirs are silent. */
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join, resolve } from "node:path";
+import type { Tool } from "./types.ts";
+import { rovecodeHome } from "../providers/auth.ts";
+import { parseFrontmatter } from "../skills/index.ts";
+import { ADAPTER_IDS } from "../lanes/types.ts";
+export type AgentScope = "project" | "user";
+export type CustomAgentMode = "plan" | "act";
+export interface CustomAgent {
+  /** the filename sans `.md`, lowercased; matches [a-z0-9_-]+ */
+  name: string;
+  description: string;
+  /** frontmatter `model:` — "provider/model" (router grammar) or a bare model id (the starting run's provider) */
+  model?: string;
+  /** frontmatter `mode:` — the child runs in this plan/act mode (orchestrator runChild applies it) */
+  mode?: CustomAgentMode;
+  /** tool allow-list; ["*"] = every tool the child table offers (the default) */
+  tools: string[];
+  /** the markdown body: the child's system prompt ("" → the runtime's own prompt) */
+  body: string;
+  path: string;
+  scope: AgentScope;
+}
+export interface ParsedAgentFile {
+  description?: string; model?: string; mode?: CustomAgentMode; tools: string[]; body: string;
+  /** frontmatter keys outside the four known ones (present only when there are some) — the file loads, discovery warns */
+  unknown?: string[];
+}
+export interface DiscoveredAgents { agents: CustomAgent[]; warnings: string[] }
+export interface DiscoverAgentsOptions {
+  /** user-scope home; default rovecodeHome() (ROVECODE_HOME → ~/.rovecode). Definitions: `<home>/agents` */
+  home?: string;
+  /** names a definition may not take; default DEFAULT_RESERVED_AGENT_NAMES */
+  reserved?: readonly string[];
+  /** false skips the PROJECT dir (an untrusted checkout's definitions never reach the `task` schema); the user dir still
+   *  loads. Default true. */
+  project?: boolean;
+  /** why a `model:` selector cannot be honoured by THIS runtime, or undefined when it can — the runtime knows which
+   *  provider the run streams over; a refused file is skipped with the reason (cli/runtime.ts modelProblemFor) */
+  validateModel?: (selector: string) => string | undefined;
+}
+/** the built-in child definition + the external-lane ids (core/tasks.ts treats the lane ids as lanes, never agents) */
+export const DEFAULT_RESERVED_AGENT_NAMES: readonly string[] = ["main", ...ADAPTER_IDS];
+/** the sub-directory of a state dir that holds the definitions */
+export const AGENTS_DIR = "agents";
+/** the project state dir the definitions live under */
+export const PROJECT_STATE_DIR = ".rovecode";
+const NAME_RE = /^[a-z0-9_-]+$/;
+const TOOL_NAME_RE = /^[A-Za-z0-9_*-]+$/;
+const MAX_DESCRIPTION_CHARS = 200;
+function clip(s: string, max: number): string {
+  return s.length > max ? s.slice(0, max - 1) + "…" : s;
+}
+// ---------- file format ----------
+/** `tools:` value → allow-list. Comma/space separated, optional [brackets] and quotes; "*" anywhere = all;
+ *  a token outside [A-Za-z0-9_*-]+ is an error (never a silent partial list). Empty → ["*"]. */
+export function parseToolList(value: string | undefined): string[] | { error: string } {
+  const raw = (value ?? "").trim().replace(/^\[|\]$/g, "").trim();
+  if (raw === "") return ["*"];
+  const names = raw.split(/[\s,]+/).map((t) => t.replace(/^["']|["']$/g, "")).filter((t) => t !== "");
+  const bad = names.find((n) => !TOOL_NAME_RE.test(n));
+  if (bad !== undefined) return { error: `tools: "${clip(bad, 40)}" is not a tool name (letters, digits, _ - or *)` };
+  if (names.includes("*")) return ["*"];
+  return [...new Set(names)];
+}
+/** Optional `---` frontmatter + body → agent fields. `{ error }` names why a file must be skipped. Never throws. */
+export function parseAgentFile(text: string): ParsedAgentFile | { error: string } {
+  let src = text.charCodeAt(0) === 0xfeff ? text.slice(1) : text; // drop a UTF-8 BOM
+  let fm: Record<string, string> = {};
+  let body = src;
+  if (src.startsWith("---")) {
+    if (!src.endsWith("\n")) src += "\n"; // parseFrontmatter finds the closing fence by its line end
+    const parsed = parseFrontmatter(src);
+    if (!parsed) return { error: "unterminated frontmatter (no closing ---)" };
+    // parseFrontmatter silently DROPS lines without a colon — a YAML block list (`tools:` + `- read` lines) or a
+    // multi-line value would leave `tools` empty and fail OPEN to "*"; reject the file instead (blank / `#` lines are fine)
+    const shape = checkFrontmatterLines(src.slice(4, src.indexOf("\n---", 3)));
+    if (shape !== undefined) return { error: shape };
+    fm = parsed.fm; body = parsed.body;
+  }
+  const field = (k: string): string | undefined => { const v = fm[k]?.trim(); return v ? v : undefined; };
+  const mode = field("mode");
+  if (mode !== undefined && mode !== "plan" && mode !== "act") return { error: `mode must be "plan" or "act" (got "${clip(mode, 40)}")` };
+  const model = field("model");
+  if (model !== undefined && /\s/.test(model)) return { error: `model must be one selector ("provider/model" or a model id; got "${clip(model, 40)}")` };
+  // a PRESENT `tools:` with nothing in it (`tools:`, `tools: []`, `tools: ''`) is an error — only an ABSENT key means "*"
+  if (fm["tools"] !== undefined && fm["tools"].trim().replace(/^\[|\]$/g, "").trim() === "") return { error: "tools: empty value (write `tools: *` for every tool, or list names — `tools:` alone never means all)" };
+  const tools = parseToolList(fm["tools"]);
+  if (!Array.isArray(tools)) return { error: tools.error };
+  const unknown = Object.keys(fm).filter((k) => !KNOWN_KEYS.has(k));
+  return { description: field("description"), model, mode, tools, body: body.trim(), ...(unknown.length > 0 ? { unknown } : {}) };
+}
+const KNOWN_KEYS: ReadonlySet<string> = new Set(["description", "model", "mode", "tools"]);
+/** Every non-blank, non-comment frontmatter line must be `key: value`; the first offender names the reason. */
+function checkFrontmatterLines(block: string): string | undefined {
+  for (const line of block.split(/\r?\n/)) {
+    const t = line.trim();
+    if (t === "" || t.startsWith("#")) continue;
+    if (/^-(\s|$)/.test(t)) return `frontmatter uses a YAML block list ("${clip(t, 30)}") — not supported: write \`tools: read, grep\` on one line`;
+    if (t.indexOf(":") === -1) return `frontmatter line is not \`key: value\` ("${clip(t, 30)}")`;
+  }
+  return undefined;
+}
+/** The runtime's model check (DiscoverAgentsOptions.validateModel): a `provider/model` selector whose provider is not the
+ *  one this session streams over cannot be honoured — every child runs on the run's endpoint. A bare id, or the same
+ *  provider, is fine; an unknown model ID is not judged here (the catalog is advisory everywhere else). `configured` =
+ *  the run's provider id, or null when nothing is configured (then nothing is refused on this ground). */
+export function modelProblemFor(configured: string | null): (selector: string) => string | undefined {
+  return (selector) => {
+    const slash = selector.indexOf("/");
+    if (slash <= 0 || configured === null) return undefined;
+    const provider = selector.slice(0, slash);
+    return provider === configured ? undefined : `model "${clip(selector, 60)}" names provider "${provider}" but this session streams over "${configured}" — a child cannot switch providers; write the bare model id, or "${configured}/<model>"`;
+  };
+}
+// ---------- discovery ----------
+/** Scan `<home>/agents` then `<cwd>/.rovecode/agents`; a later (project) entry replaces an earlier (user) one of the
+ *  same name. Missing dirs are silent; every other problem is a warning for the boot transcript, never a throw.
+ *  Sorted by name. */
+export function discoverAgents(cwd: string, opts: DiscoverAgentsOptions = {}): DiscoveredAgents {
+  const warnings: string[] = [];
+  const reserved = new Set(opts.reserved ?? DEFAULT_RESERVED_AGENT_NAMES);
+  const userDir = join(opts.home ?? rovecodeHome(), AGENTS_DIR);
+  const projectDir = join(cwd, PROJECT_STATE_DIR, AGENTS_DIR);
+  // the project state dir IS the user home: one directory, scanned once; untrusted → the user dir only
+  const dirs: [AgentScope, string][] = opts.project === false ? [["user", userDir]]
+    : resolve(userDir) === resolve(projectDir) ? [["project", projectDir]]
+    : [["user", userDir], ["project", projectDir]];
+  const byName = new Map<string, CustomAgent>();
+  for (const [scope, dir] of dirs) {
+    for (const a of scanAgentDir(dir, scope, warnings, opts.validateModel)) {
+      if (reserved.has(a.name)) { warnings.push(`${a.path}: skipped — "${a.name}" is a reserved agent name${ADAPTER_IDS.includes(a.name as (typeof ADAPTER_IDS)[number]) ? ` (the ${a.name} external lane keeps it; \`task start ${a.name}\` runs the lane, never this file)` : ""}`); continue; }
+      const prev = byName.get(a.name);
+      if (prev?.scope === scope) { warnings.push(`${a.path}: agent "${a.name}" already defined by ${prev.path} — first kept`); continue; }
+      byName.set(a.name, a); // project (scanned second) shadows user
+    }
+  }
+  return { agents: [...byName.values()].sort((a, b) => a.name.localeCompare(b.name)), warnings };
+}
+/** a symlinked `*.md` counts when its target is a file; a dangling link stays so the read reports it */
+function linksToFile(path: string): boolean {
+  try { return statSync(path).isFile(); } catch { return true; }
+}
+/** One directory's `*.md` files (top level only, sorted), each parsed or warned about. */
+function scanAgentDir(dir: string, scope: AgentScope, warnings: string[], validateModel?: (selector: string) => string | undefined): CustomAgent[] {
+  let files: string[];
+  try {
+    files = readdirSync(dir, { withFileTypes: true })
+      .filter((e) => /\.md$/i.test(e.name) && (e.isFile() || (e.isSymbolicLink() && linksToFile(join(dir, e.name)))))
+      .map((e) => e.name).sort();
+  } catch {
+    return []; // no such directory — silent, like the skills store and custom commands
+  }
+  const out: CustomAgent[] = [];
+  for (const file of files) {
+    const path = join(dir, file);
+    const name = file.slice(0, -3).toLowerCase();
+    if (!NAME_RE.test(name)) { warnings.push(`${path}: skipped — agent name "${name}" must match [a-z0-9_-]+`); continue; }
+    let text: string;
+    try {
+      text = readFileSync(path, "utf8");
+    } catch (e) {
+      warnings.push(`${path}: skipped — unreadable (${e instanceof Error ? e.message : String(e)})`);
+      continue;
+    }
+    const parsed = parseAgentFile(text);
+    if ("error" in parsed) { warnings.push(`${path}: skipped — ${parsed.error}`); continue; }
+    // a model this runtime cannot honour is refused HERE, with the file named — not at run time inside a child
+    const modelProblem = parsed.model !== undefined && validateModel ? validateModel(parsed.model) : undefined;
+    if (modelProblem !== undefined) { warnings.push(`${path}: skipped — ${modelProblem}`); continue; }
+    // unknown keys load fine but are never silent (a `tool:` typo would otherwise grant every tool without a word)
+    if (parsed.unknown) warnings.push(`${path}: loaded — ignored unknown frontmatter key${parsed.unknown.length > 1 ? "s" : ""} ${parsed.unknown.map((k) => `"${clip(k, 30)}"`).join(", ")} (known: description, model, mode, tools)`);
+    out.push({
+      name, description: clip(parsed.description ?? `custom agent (${file})`, MAX_DESCRIPTION_CHARS),
+      ...(parsed.model !== undefined ? { model: parsed.model } : {}), ...(parsed.mode !== undefined ? { mode: parsed.mode } : {}),
+      tools: parsed.tools, body: parsed.body, path, scope,
+    });
+  }
+  return out;
+}
+// ---------- the child registry filter ----------
+/** The tools a child may be given: the candidate table filtered by the definition's allow-list ("*" keeps it
+ *  all) AND clamped to names the PARENT registry holds — a definition can never widen a child beyond its
+ *  parent's set, and a name outside the child table (mcp_call, web_fetch, memory_edit …) is simply dropped.
+ *  Pure; the caller registers the result into the ONE child ToolRegistry it constructs (cli/runtime.ts). */
+export function restrictTools(table: readonly Tool[], allow: readonly string[], parentNames: ReadonlySet<string>): Tool[] {
+  const all = allow.includes("*");
+  const wanted = new Set(allow);
+  return table.filter((t) => (all || wanted.has(t.schema.name)) && parentNames.has(t.schema.name));
+}
+/** `name — description` rows for the `task` tool's schema (tools/task.ts enumerates the loaded definitions). */
+export function agentRows(d: DiscoveredAgents): { name: string; description: string }[] {
+  return d.agents.map((a) => ({ name: a.name, description: a.description }));
+}

package/src/core/compaction.ts ADDED Viewed

@@ -0,0 +1,259 @@
+/** Compaction strategy seam + adaptive trigger (port #25; ADR-007 history compaction).
+ *
+ *  Strategies — oh-my-pi compaction/compaction.ts:167-231 @ 65f79e7 (MIT) keeps a strategy enum
+ *  on the settings object and decides provider-native vs local per model; same split here:
+ *    head-summarize   the pre-#25 path, byte-for-byte: summarize the head with the weak model,
+ *                     keep the tail under half budget (aider history.py:41 via context.ts).
+ *    keep-window      deterministic, NO model call: keep the last N user turns + everything
+ *                     since the last user message, under a token cap; tool_call/tool_result
+ *                     pairs leave or stay TOGETHER (senpi deterministic-fallback.ts:28-33
+ *                     @ a0f26a6 rejects an "atomic-tool-chain-cut"; opencode message-v2.ts:
+ *                     349-360 — every tool_use needs its tool_result on the wire). When the
+ *                     current turn alone overflows, the user's request survives and the cut
+ *                     lands inside its tool traffic (opencode compaction.ts:340-356 replays
+ *                     the last user message after an overflow compaction).
+ *    provider-native  delegate to a server-side compaction capability when the active provider
+ *                     advertises one (oh-my-pi :222-231 shouldUseProviderNativeCompaction;
+ *                     :1264-1281 local summary when remote is off/unsupported). HONESTY: none
+ *                     of rovecode's adapters advertise it today — the seam (LoopDeps.compactNative)
+ *                     and a test double ship; absent or declining → head-summarize fallback.
+ *
+ *  Trigger (senpi a0f26a6): "speculative" when the ESTIMATE crosses budget × threshold, before
+ *  the provider call (compaction-settings.ts:22-24 speculativeFraction; agent-session.ts:5874
+ *  "Threshold: compact, NO auto-retry"). "emergency" when the provider REJECTS the request as
+ *  a context overflow (agent-session.ts:5873 "Overflow: LLM returned context overflow error …
+ *  compact, auto-retry"; :6061-6080 exactly ONE compact-and-retry; opencode processor.ts:
+ *  607-617 ContextOverflowError → needsCompaction → prompt.ts:1320-1327 create({overflow}) →
+ *  the loop restarts the turn). Emergency plans against the OBSERVED size, not the configured
+ *  window — the estimator just proved optimistic.
+ *
+ *  Pure over Messages. The loop owns token accounting (ctx.tokenText = partsTokenText, so the
+ *  numbers match its trigger) and persistence (SessionStore.appendEvent). No loop import here:
+ *  loop.ts imports this module. Without a summarizer, speculative compaction stays off exactly
+ *  as before #25; an emergency still shrinks via the deterministic window (senpi deterministic-
+ *  fallback.ts:111 createRequiredCompactionFallback — a required compaction never wedges). */
+import { randomUUID } from "node:crypto";
+import type { Message, ModelRef, RunConfig } from "./types.ts";
+import { estimateTokens, planCompaction as planHeadTail } from "./context.ts";
+export type CompactionStrategy = "head-summarize" | "keep-window" | "provider-native";
+export type CompactionTrigger = "speculative" | "emergency";
+export const COMPACTION_STRATEGIES: readonly CompactionStrategy[] = ["head-summarize", "keep-window", "provider-native"];
+export const DEFAULT_COMPACTION_STRATEGY: CompactionStrategy = "head-summarize";
+/** keep-window: user turns retained BEFORE the current one when RunConfig.compactionKeepTurns is unset */
+export const DEFAULT_KEEP_TURNS = 2;
+/** `ROVECODE_COMPACTION=<strategy>`, case-insensitive — unset/blank → undefined (the caller applies the
+ *  default). An unknown name is ALSO undefined (→ default) plus ONE stderr note per process and value:
+ *  createRuntime has no warnings channel, and buildCfg re-parses the env before every run. */
+const unknownStrategyNoted = new Set<string>();
+export function parseCompactionStrategy(raw: string | undefined): CompactionStrategy | undefined {
+  const v = (raw ?? "").trim().toLowerCase();
+  if (v === "") return undefined;
+  if ((COMPACTION_STRATEGIES as readonly string[]).includes(v)) return v as CompactionStrategy;
+  if (!unknownStrategyNoted.has(v)) {
+    unknownStrategyNoted.add(v);
+    console.error(`rovecode: unknown ROVECODE_COMPACTION "${(raw ?? "").trim()}" — using ${DEFAULT_COMPACTION_STRATEGY} (known: ${COMPACTION_STRATEGIES.join(", ")})`);
+  }
+  return undefined;
+}
+/** Server-side compaction capability. Resolve to the replacement history, or null to decline
+ *  (unsupported model, endpoint error) — the seam then falls back locally. Contract: the
+ *  returned history's LAST message must be one the store already holds (the loop parents the
+ *  next message on it). */
+export type NativeCompactor = (
+  history: Message[],
+  opts: { model?: ModelRef; budgetTokens: number; trigger: CompactionTrigger; signal?: AbortSignal },
+) => Promise<Message[] | null>;
+export interface CompactionCtx {
+  trigger: CompactionTrigger;
+  /** token-bearing text of ONE message, all parts (loop.ts partsTokenText) — tokens = estimateTokens(tokenText) */
+  tokenText: (m: Message) => string;
+  summarize?: (texts: string[]) => Promise<string>;
+  native?: NativeCompactor;
+  model?: ModelRef;
+  signal?: AbortSignal;
+}
+export interface CompactionPlan {
+  strategy: CompactionStrategy;
+  /** the configured strategy when it could not run and `strategy` is its fallback */
+  fallbackFrom?: CompactionStrategy;
+  keep: Message[];
+  drop: Message[];
+  /** head-summarize: a summarizer call is required before the history can be rebuilt */
+  summaryNeeded: boolean;
+  tokensBefore: number;
+  /** planning budget in force: the window (speculative) or half the observed size (emergency) */
+  budgetTokens: number;
+}
+export interface CompactionOutcome { history: Message[]; strategy: CompactionStrategy; fallbackFrom?: CompactionStrategy }
+// ---------- trigger ----------
+/** Adaptive trigger. Strictly GREATER than budget × threshold: AT the threshold nothing fires
+ *  (pinned). A provider overflow rejection is an emergency whatever the estimate says. */
+export function compactionTrigger(histTokens: number, cfg: RunConfig, overflow: boolean): CompactionTrigger | null {
+  if (overflow) return "emergency";
+  return histTokens > cfg.contextBudgetTokens * cfg.compactionThreshold ? "speculative" : null;
+}
+/** Provider phrasings of "the prompt does not fit" — opencode-2026 llm/provider-error.ts:4-38
+ *  @ ebece6e (MIT), minus the throttling exclusions; plus HTTP 413 (provider/error.ts:175).
+ *  rovecode error text is "HTTP <status>: <body>" (stream-errors.ts httpErrorTurn; router.ts
+ *  classifyStreamError reads the same prefix) or a bare transport message. 429/5xx are the
+ *  retry classes (port #23) and never an overflow, whatever their body says. */
+const OVERFLOW_PATTERNS = [
+  /prompt is too long/i, /request_too_large/i, /input is too long for requested model/i,
+  /exceeds the context window/i, /maximum context length/i, /context[_ ]length[_ ]exceeded/i,
+  /input token count.*exceeds the maximum/i, /tokens in request more than max tokens allowed/i,
+  /maximum prompt length is \d+/i, /reduce the length of the messages/i, /request entity too large/i,
+  /model_context_window_exceeded/i, /too many tokens/i, /token limit exceeded/i,
+  /exceeds the available context size/i, /greater than the context length/i,
+];
+const OVERFLOW_EXCLUSIONS = [/rate limit/i, /too many requests/i, /throttling/i, /service unavailable/i];
+export function isContextOverflow(error: string | undefined): boolean {
+  if (!error || OVERFLOW_EXCLUSIONS.some((p) => p.test(error))) return false;
+  // the status may sit behind the router's exhausted-chain rewrite ("model chain 'x' exhausted
+  // (N candidates failed); last: HTTP 500: …", router.ts) — a 5xx body that mentions tokens is
+  // still a 5xx, never an overflow
+  const status = /(?:^|last: )HTTP (\d{3})\b/.exec(error)?.[1];
+  if (status === "413") return true;
+  if (status === "429" || status?.startsWith("5")) return false;
+  return OVERFLOW_PATTERNS.some((p) => p.test(error));
+}
+// ---------- planning ----------
+/** Speculative plans against the window. Emergency halves the smaller of window and OBSERVED
+ *  history, so the kept tail lands ≤ a quarter of what just overflowed (senpi shrinks the
+ *  summarization input geometrically per overflow retry — overflow-retry-bound.test.ts:126-142;
+ *  we get ONE retry, so one aggressive step). */
+export function planningBudget(cfg: RunConfig, observedTokens: number, trigger: CompactionTrigger): number {
+  if (trigger === "speculative") return cfg.contextBudgetTokens;
+  return Math.max(1, Math.floor(Math.min(cfg.contextBudgetTokens, observedTokens) / 2));
+}
+function resolveStrategy(requested: CompactionStrategy, ctx: CompactionCtx): CompactionStrategy | null {
+  if (requested === "keep-window") return "keep-window";
+  if (requested === "provider-native" && ctx.native) return "provider-native";
+  if (ctx.summarize) return "head-summarize";
+  // no summarizer: speculative stays off (pre-#25 gate); an emergency must still shrink
+  return ctx.trigger === "emergency" ? "keep-window" : null;
+}
+export function planCompaction(history: Message[], cfg: RunConfig, ctx: CompactionCtx): CompactionPlan | null {
+  const requested = cfg.compactionStrategy ?? DEFAULT_COMPACTION_STRATEGY;
+  const strategy = resolveStrategy(requested, ctx);
+  if (!strategy) return null;
+  const tokens = (m: Message) => estimateTokens(ctx.tokenText(m));
+  const tokensBefore = history.reduce((n, m) => n + tokens(m), 0);
+  const budgetTokens = planningBudget(cfg, tokensBefore, ctx.trigger);
+  const base = { strategy, tokensBefore, budgetTokens, ...(strategy !== requested ? { fallbackFrom: requested } : {}) };
+  if (strategy === "provider-native") return { ...base, keep: history, drop: [], summaryNeeded: false };
+  if (strategy === "keep-window") {
+    const turns = ctx.trigger === "emergency" ? 0 : (cfg.compactionKeepTurns ?? DEFAULT_KEEP_TURNS);
+    return { ...base, ...keepWindow(history, tokens, budgetTokens, turns), summaryNeeded: false };
+  }
+  // head-summarize: the aider head/tail plan over {id,tokens,text} projections, mapped back to
+  // the real messages (loop.test.ts "rebuilds history from real messages, not projections")
+  const plan = planHeadTail(history.map((m) => ({ id: m.id, tokens: tokens(m), text: ctx.tokenText(m) })), budgetTokens);
+  const keepIds = new Set(plan.keep.map((k) => k.id));
+  // never an empty tail: the summary message is working-history only (never persisted), so the next
+  // assistant must parent on a REAL message or the store reloads with an orphan chain. When the last
+  // message alone exceeds half the budget the aider plan keeps nothing — keep it anyway, and when it
+  // is a tool result keep the assistant that issued the call too (over cap accepted over an orphan,
+  // exactly keepWindow's alignCut rule; the plan's ordinary cut stays prose-oriented, as before)
+  if (keepIds.size === 0 && history.length > 0) {
+    let i = history.length - 1;
+    while (i > 0 && history[i]!.role === "tool") i--;
+    for (const m of history.slice(i)) keepIds.add(m.id);
+  }
+  return { ...base, keep: history.filter((m) => keepIds.has(m.id)), drop: history.filter((m) => !keepIds.has(m.id)), summaryNeeded: true };
+}
+/** Deterministic window. Turn-level cuts land on user messages; when the current turn alone
+ *  exceeds the cap (half the planning budget), the user's request is kept and the cut moves
+ *  through its tool traffic one assistant+results group at a time (alignCut). */
+export function keepWindow(history: Message[], tokens: (m: Message) => number, budgetTokens: number, keepTurns: number): { keep: Message[]; drop: Message[] } {
+  const cap = Math.floor(budgetTokens / 2);
+  const sum = (ms: Message[]) => ms.reduce((n, m) => n + tokens(m), 0);
+  const userIdx = history.flatMap((m, i) => (m.role === "user" ? [i] : []));
+  let ui = Math.max(0, userIdx.length - 1 - Math.max(0, keepTurns));
+  let start = userIdx.length > 0 ? userIdx[ui]! : 0;
+  while (sum(history.slice(start)) > cap && ui < userIdx.length - 1) start = userIdx[++ui]!;
+  const lastUser = userIdx.at(-1);
+  if (lastUser !== undefined && start === lastUser && sum(history.slice(start)) > cap) {
+    // the current turn alone overflows: keep the request, cut inside the traffic after it
+    let inner = lastUser + 1;
+    while (inner < history.length && tokens(history[lastUser]!) + sum(history.slice(inner)) > cap) {
+      const next = alignCut(history, inner + 1);
+      if (next <= inner || next >= history.length) break;
+      inner = next;
+    }
+    return { keep: [history[lastUser]!, ...history.slice(inner)], drop: [...history.slice(0, lastUser), ...history.slice(lastUser + 1, inner)] };
+  }
+  if (userIdx.length === 0) {
+    // no user turn at all (foreign history): plain message-level cut, pairs still intact
+    while (sum(history.slice(start)) > cap) {
+      const next = alignCut(history, start + 1);
+      if (next <= start || next >= history.length) break;
+      start = next;
+    }
+  }
+  return { keep: history.slice(start), drop: history.slice(0, start) };
+}
+/** A cut on a tool message would orphan results whose call sits in the dropped head: advance
+ *  past the result run so call + results leave together. Returns history.length when only
+ *  results remain — the caller stops there and keeps the calling assistant with them. */
+function alignCut(history: Message[], i: number): number {
+  let j = i;
+  while (j < history.length && history[j]!.role === "tool") j++;
+  return j;
+}
+// ---------- apply ----------
+/** Rebuild the working history per plan. null = nothing to compact (keep-window found nothing
+ *  droppable; a native decline with no local fallback) — the caller yields no event then. */
+export async function applyCompaction(history: Message[], plan: CompactionPlan, cfg: RunConfig, ctx: CompactionCtx): Promise<CompactionOutcome | null> {
+  const tag = plan.fallbackFrom ? { fallbackFrom: plan.fallbackFrom } : {};
+  if (plan.strategy === "provider-native") {
+    let out: Message[] | null = null;
+    if (ctx.native) {
+      try { out = await ctx.native(history, { model: ctx.model, budgetTokens: plan.budgetTokens, trigger: ctx.trigger, signal: ctx.signal }); } catch { out = null; }
+    }
+    if (out) return { history: out, strategy: "provider-native", ...tag };
+    // declined at apply time: re-plan locally (oh-my-pi :1264 keeps a portable local summary
+    // rather than strand the history); the local plan is never provider-native — bounded
+    const local = planCompaction(history, { ...cfg, compactionStrategy: DEFAULT_COMPACTION_STRATEGY }, { ...ctx, native: undefined });
+    if (!local) return null;
+    const res = await applyCompaction(history, local, cfg, { ...ctx, native: undefined });
+    return res ? { ...res, fallbackFrom: "provider-native" } : null;
+  }
+  if (plan.strategy === "keep-window") {
+    if (plan.drop.length === 0) return null;
+    const dropped = plan.drop.reduce((n, m) => n + estimateTokens(ctx.tokenText(m)), 0);
+    const marker: Message = {
+      id: randomUUID(), role: "system",
+      parts: [{ kind: "text", text: `[context compacted (keep-window): ${plan.drop.length} earlier messages, ~${dropped} tokens, removed from the working context]` }],
+      parentId: plan.keep[0]?.id ?? null, createdAt: Date.now(),
+    };
+    return { history: [marker, ...plan.keep], strategy: "keep-window", ...tag };
+  }
+  if (!ctx.summarize) return null;
+  const summary = await ctx.summarize(plan.drop.map((m) => ctx.tokenText(m)));
+  const compactMsg: Message = {
+    id: randomUUID(), role: "system",
+    parts: [{ kind: "text", text: `Summary of earlier conversation:\n${summary}` }],
+    parentId: history[0]?.id ?? null, createdAt: Date.now(),
+  };
+  return { history: [compactMsg, ...plan.keep], strategy: "head-summarize", ...tag };
+}