One turn of the agent loop Diagram

The loop

• core/loop.py yields AgentEvents; TUI and dave run render them
• Rounds repeat until no calls or max_tool_rounds

Gate and tools

• Denied calls return a denial as the tool result
• Checkpoints snapshot files before writes, for /rewind

Task boundaries

• Busy switches wait or cancel before changing Task association
• Outgoing output and queued input remain with the old conversation

Task time boundaries

• A single device lease counts active model/tool work. Permission waits permit idle. Ten-second evidence caps crash recovery; completed child attribution falls back after memory capture.

General and sidequests

• General uses ordinary permissions and isolated child memory/time. Reviewed promotion retains IDs and relocates owned data once.
• Sidequests offer Save or Save and switch. Busy switches wait/cancel; failed adoption restores old selection and manual pause.
• Missing-checkout returns offer attach or memory-only work; tool filtering and the gate both enforce the restriction.