@noopolis/daimon 0.2.1 → 0.2.3

package/dist/runtime/agentSkillsDirectory.d.ts

@@ -0,0 +1,25 @@
+import { type AgentSkill } from "./grokWorkerSkills.js";
+/**
+ * What every entry of a skills tree must satisfy beyond being a plain,
+ * non-symlink directory or regular file. Attesting a root-provisioned
+ * `$GROK_HOME/skills` sets both; reading a compiled workspace leaves them unset.
+ */
+export type AgentSkillsTreePolicy = Readonly<{
+    ownerUid?: number;
+    readOnly?: boolean;
+}>;
+/**
+ * Reads a skills tree — `<root>/<name>/SKILL.md` plus any supporting files —
+ * into the engine-neutral {@link AgentSkill} input, or `undefined` when `root`
+ * does not exist.
+ *
+ * It is the same reader for both ends of the Grok skills path: provisioning
+ * reads the compiled workspace's `.agents/skills` (the tree Codex reads in
+ * place), and the broker re-reads the rendered `$GROK_HOME/skills` before every
+ * turn under a root-owned, read-only policy. Symlinks, special files, hard
+ * links (read-only policy), non-UTF-8 content and anything past the
+ * {@link AGENT_SKILLS_BOUNDS} are refused rather than skipped, because a
+ * skipped entry would make the attested digest describe less than Grok loads.
+ */
+export declare function readAgentSkillsDirectory(root: string, policy?: AgentSkillsTreePolicy): Promise<readonly AgentSkill[] | undefined>;
+//# sourceMappingURL=agentSkillsDirectory.d.ts.map

package/dist/runtime/agentSkillsDirectory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentSkillsDirectory.d.ts","sourceRoot":"","sources":["../../src/runtime/agentSkillsDirectory.ts"],"names":[],"mappings":"AAIA,OAAO,EAAyC,KAAK,UAAU,EAAuB,MAAM,uBAAuB,CAAC;AAEpH;;;;GAIG;AACH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AAKxF;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,qBAA0B,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC,CAqC3I"}

package/dist/runtime/agentSkillsDirectory.js

@@ -0,0 +1,101 @@
+import { constants } from "node:fs";
+import { lstat, open, readdir } from "node:fs/promises";
+import path from "node:path";
+import { AGENT_SKILLS_BOUNDS, parseAgentSkills } from "./grokWorkerSkills.js";
+const invalid = (detail) => new TypeError(`invalid agent skills directory: ${detail}`);
+const decoder = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
+/**
+ * Reads a skills tree — `<root>/<name>/SKILL.md` plus any supporting files —
+ * into the engine-neutral {@link AgentSkill} input, or `undefined` when `root`
+ * does not exist.
+ *
+ * It is the same reader for both ends of the Grok skills path: provisioning
+ * reads the compiled workspace's `.agents/skills` (the tree Codex reads in
+ * place), and the broker re-reads the rendered `$GROK_HOME/skills` before every
+ * turn under a root-owned, read-only policy. Symlinks, special files, hard
+ * links (read-only policy), non-UTF-8 content and anything past the
+ * {@link AGENT_SKILLS_BOUNDS} are refused rather than skipped, because a
+ * skipped entry would make the attested digest describe less than Grok loads.
+ */
+export async function readAgentSkillsDirectory(root, policy = {}) {
+    let top;
+    try {
+        top = await lstat(root);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw invalid("unreadable root");
+    }
+    assertEntry(top, "directory", policy, ".");
+    const names = await boundedEntries(root, AGENT_SKILLS_BOUNDS.skills);
+    const skills = [];
+    let budget = AGENT_SKILLS_BOUNDS.totalBytes;
+    for (const name of names) {
+        const directory = path.join(root, name);
+        assertEntry(await lstat(directory), "directory", policy, name);
+        const files = [];
+        const walk = async (relative, depth) => {
+            for (const child of await boundedEntries(path.join(directory, relative), AGENT_SKILLS_BOUNDS.filesPerSkill)) {
+                const childRelative = relative === "" ? child : `${relative}/${child}`;
+                const absolute = path.join(directory, childRelative);
+                const where = `${name}/${childRelative}`;
+                const entry = await lstat(absolute);
+                if (entry.isDirectory()) {
+                    if (depth + 1 >= AGENT_SKILLS_BOUNDS.depth)
+                        throw invalid(`too deep at ${JSON.stringify(where)}`);
+                    assertEntry(entry, "directory", policy, where);
+                    await walk(childRelative, depth + 1);
+                    continue;
+                }
+                assertEntry(entry, "file", policy, where);
+                if (files.length >= AGENT_SKILLS_BOUNDS.filesPerSkill)
+                    throw invalid(`too many files in ${JSON.stringify(name)}`);
+                const content = await readPinnedFile(absolute, where, entry, Math.min(AGENT_SKILLS_BOUNDS.fileBytes, budget));
+                budget -= Buffer.byteLength(content, "utf8");
+                files.push({ path: childRelative, content });
+            }
+        };
+        await walk("", 0);
+        skills.push({ name, files });
+    }
+    return parseAgentSkills(skills);
+}
+/** `where` is the entry's path relative to the skills root, named in every refusal. */
+function assertEntry(entry, kind, policy, where) {
+    if (entry.isSymbolicLink() || (kind === "directory" ? !entry.isDirectory() : !entry.isFile()))
+        throw invalid(`expected a plain ${kind} at ${JSON.stringify(where)}`);
+    if (policy.ownerUid !== undefined && entry.uid !== policy.ownerUid)
+        throw invalid(`unexpected owner of ${JSON.stringify(where)}`);
+    if (policy.readOnly === true && ((Number(entry.mode) & 0o7222) !== 0 || (kind === "file" && entry.nlink !== 1)))
+        throw invalid(`writable or linked entry ${JSON.stringify(where)}`);
+}
+async function boundedEntries(directory, limit) {
+    const entries = await readdir(directory);
+    if (entries.length > limit)
+        throw invalid(`too many entries in ${JSON.stringify(path.basename(directory))}`);
+    return entries.sort();
+}
+/** Opens without following links and requires the inode `lstat` saw, so a swap between the two cannot change the bytes read. */
+async function readPinnedFile(file, where, seen, limit) {
+    if (seen.size > limit)
+        throw invalid(`file too large ${JSON.stringify(where)}`);
+    const handle = await open(file, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+    try {
+        const opened = await handle.stat();
+        if (!opened.isFile() || opened.dev !== seen.dev || opened.ino !== seen.ino || opened.uid !== seen.uid || opened.mode !== seen.mode || opened.nlink !== seen.nlink || opened.size > limit)
+            throw invalid(`file changed while read ${JSON.stringify(where)}`);
+        const bytes = await handle.readFile();
+        if (bytes.length > limit)
+            throw invalid(`file too large ${JSON.stringify(where)}`);
+        try {
+            return decoder.decode(bytes);
+        }
+        catch {
+            throw invalid(`file is not UTF-8 ${JSON.stringify(where)}`);
+        }
+    }
+    finally {
+        await handle.close().catch(() => undefined);
+    }
+}

package/dist/runtime/engineBrokerServiceConfig.d.ts

@@ -16,6 +16,13 @@ export type EngineBrokerServiceRegistration = Readonly<{
     usageLedgerPath: string;
     limits: EngineBrokerTurnLimits;
     model: GrokBrokerModelPolicy;
+    /**
+     * Digest of the skills root provisioning rendered into `$GROK_HOME/skills`
+     * (`grokWorkerSkillsSha256`), attested before every turn. Optional in v2
+     * registrations and v3 slot policies; absent means the slot has no skills and
+     * the directory must not exist.
+     */
+    skillsSha256?: string;
 }>;
 /**
  * `inferenceLedgerPath` (v2, optional) is where evaluator inference grants
@@ -46,8 +53,9 @@ export declare const engineBrokerSealLedgerPathFor: (usageLedgerPath: string) =>
  * v3 retains seven-field registrations and binds slotPolicies by slot; agent IDs
  * may repeat, while worker UIDs, slots and ledger streams must be distinct.
  * v2 requires every registration to declare its usage ledger, limits and model
- * (`model.id`/`model.reasoningEffort` from the closed lists); unknown keys at
- * any level are refused. v1 is still accepted and receives today's defaults:
+ * (`model.id`/`model.reasoningEffort` from the closed lists) and may declare
+ * `skillsSha256` (v3: on its slot policy); unknown keys at any level are
+ * refused. v1 is still accepted and receives today's defaults:
  * the container ledger, {@link DEFAULT_GROK_BROKER_TURN_LIMITS}, and
  * `grok-4.6`/`low`.
  */

package/dist/runtime/engineBrokerServiceConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engineBrokerServiceConfig.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerServiceConfig.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgE,KAAK,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC5I,OAAO,EAAuF,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAK7J,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAC5F,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAC5F,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAE5F,mHAAmH;AACnH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IACpI,oJAAoJ;IACpJ,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,qBAAqB,CAAC;CAC9B,CAAC,CAAC;AACH;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAc5O,2EAA2E;AAC3E,eAAO,MAAM,gCAAgC,GAAI,iBAAiB,MAAM,KAAG,MAAgF,CAAC;AAE5J;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,GAAI,iBAAiB,MAAM,KAAG,MAA6E,CAAC;AAEtJ;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAwDxF"}
+{"version":3,"file":"engineBrokerServiceConfig.d.ts","sourceRoot":"","sources":["../../src/runtime/engineBrokerServiceConfig.ts"],"names":[],"mappings":"AAEA,OAAO,EAAgE,KAAK,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC5I,OAAO,EAAuF,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAK7J,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAC5F,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAC5F,eAAO,MAAM,wBAAwB,EAAG,0CAAmD,CAAC;AAE5F,mHAAmH;AACnH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IACpI,oJAAoJ;IACpJ,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,qBAAqB,CAAC;IAC7B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC,CAAC;AACH;;;;;;GAMG;AACH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAc5O,2EAA2E;AAC3E,eAAO,MAAM,gCAAgC,GAAI,iBAAiB,MAAM,KAAG,MAAgF,CAAC;AAE5J;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,GAAI,iBAAiB,MAAM,KAAG,MAA6E,CAAC;AAEtJ;;;;;;;;;;;GAWG;AACH,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAyDxF"}

package/dist/runtime/engineBrokerServiceConfig.js

@@ -33,8 +33,9 @@ export const engineBrokerSealLedgerPathFor = (usageLedgerPath) => path.posix.joi
  * v3 retains seven-field registrations and binds slotPolicies by slot; agent IDs
  * may repeat, while worker UIDs, slots and ledger streams must be distinct.
  * v2 requires every registration to declare its usage ledger, limits and model
- * (`model.id`/`model.reasoningEffort` from the closed lists); unknown keys at
- * any level are refused. v1 is still accepted and receives today's defaults:
+ * (`model.id`/`model.reasoningEffort` from the closed lists) and may declare
+ * `skillsSha256` (v3: on its slot policy); unknown keys at any level are
+ * refused. v1 is still accepted and receives today's defaults:
  * the container ledger, {@link DEFAULT_GROK_BROKER_TURN_LIMITS}, and
  * `grok-4.6`/`low`.
  */
@@ -66,7 +67,7 @@ export function parseEngineBrokerServiceConfig(value) {
         for (const policy of value.slotPolicies) {
             if (!plain(policy))
                 throw invalid();
-            exact(policy, ["slot", "usageLedgerPath", "limits", "model"]);
+            exact(policy, ["slot", "usageLedgerPath", "limits", "model", ...withSkills(policy)]);
             if (!Number.isSafeInteger(policy.slot) || policy.slot < 0 || policies.has(policy.slot))
                 throw invalid();
             policies.set(policy.slot, policy);
@@ -77,7 +78,7 @@ export function parseEngineBrokerServiceConfig(value) {
     const registrations = value.registrations.map((entry) => {
         if (!plain(entry))
             throw invalid();
-        exact(entry, v2 && !v3 ? V2_REGISTRATION : V1_REGISTRATION);
+        exact(entry, v2 && !v3 ? [...V2_REGISTRATION, ...withSkills(entry)] : V1_REGISTRATION);
         const { agentId, slot, workerUid, workspace, profilePath, eventsPath, profileSha256 } = entry;
         if (typeof agentId !== "string" || !agentId.trim() || (!v3 && seen.has(agentId)) || !Number.isSafeInteger(slot) || slot < 0 || slots.has(slot) || !Number.isSafeInteger(workerUid) || workerUid < 2200 || workers.has(workerUid) || !absolute(workspace) || !absolute(profilePath) || !absolute(eventsPath) || typeof profileSha256 !== "string" || !/^[a-f0-9]{64}$/u.test(profileSha256) || eventsPath !== grokWorkerEventsPathFor(profilePath) || !profilePath.endsWith("/sandbox.toml"))
             throw invalid();
@@ -104,7 +105,9 @@ export function parseEngineBrokerServiceConfig(value) {
         catch {
             throw invalid();
         }
-        return { ...base, usageLedgerPath, limits, model: parseServiceModel(policy.model) };
+        if (Object.hasOwn(policy, "skillsSha256") && (typeof policy.skillsSha256 !== "string" || !/^[a-f0-9]{64}$/u.test(policy.skillsSha256)))
+            throw invalid();
+        return { ...base, usageLedgerPath, limits, model: parseServiceModel(policy.model), ...(Object.hasOwn(policy, "skillsSha256") ? { skillsSha256: policy.skillsSha256 } : {}) };
     });
     const base = { credentialHome: value.credentialHome, turnStore: value.turnStore, registrations,
         ...(value.runRequestStore === undefined ? {} : { runRequestStore: value.runRequestStore }),
@@ -119,6 +122,7 @@ export function parseEngineBrokerServiceConfig(value) {
         throw invalid();
     return { ...base, inferenceLedgerPath };
 }
+const withSkills = (value) => Object.hasOwn(value, "skillsSha256") ? ["skillsSha256"] : [];
 const ledgerPath = (item) => absolute(item) && item.endsWith(".jsonl") && path.posix.normalize(item) === item;
 function parseServiceModel(value) {
     if (!plain(value))

package/dist/runtime/grokBrokerProjection.d.ts

@@ -2,6 +2,7 @@ import { GROK_BROKER_TASK_CLOCK, type GrokWorkerConfigVariant } from "../contrac
 import { type EngineBrokerServiceRegistration } from "./engineBrokerServiceConfig.js";
 import { type EngineBrokerTurnLimits } from "./engineBrokerTurnAccounting.js";
 import type { GrokBrokerModel, GrokBrokerReasoningEffort } from "./grokBrokerModelPolicy.js";
+import { type AgentSkill } from "./grokWorkerSkills.js";
 import { GROK_WORKER_SANDBOX_PROFILE } from "./grokWorkerSandboxProfile.js";
 export declare const GROK_BROKER_PROJECTION_VERSION: "noopolis.daimon.grok-broker-projection.v3";
 /**
@@ -27,6 +28,13 @@ export type OrganizationGrokBrokerProjection = Readonly<{
         timestampFilePath: string;
     }>;
     systemPromptSha256: string;
+    /**
+     * Digest of the declared skills rendered into `$GROK_HOME/skills`
+     * (`grokWorkerSkillsSha256`). Present only when the agent declares at least
+     * one skill, so a skill-less projection is byte-identical to one computed
+     * before skills existed.
+     */
+    skillsSha256?: string;
     grokCliVersion: string;
     grokExecutableSha256: string;
     nativeAbiVersion: number;
@@ -78,6 +86,13 @@ export type OrganizationGrokBrokerProjectionOptions = Readonly<{
     seccompProfileSha256: string;
     /** When the caller already holds a rendered profile digest, it must equal Daimon's. */
     profileSha256?: string;
+    /**
+     * The agent's declared skills: the compiled workspace `.agents/skills` tree
+     * every engine is given (`readAgentSkillsDirectory`), which root provisioning
+     * renders into `$GROK_HOME/skills` (`renderGrokWorkerSkillsTree`). Omitted or
+     * empty means no skills.
+     */
+    skills?: readonly AgentSkill[];
 }>;
 /**
  * Resolve the public Grok broker projection for one agent.
@@ -98,7 +113,8 @@ export type OrganizationGrokBrokerProjectionOptions = Readonly<{
  * this agent (realm, bootstrap, peers, and the mask covering the acceptance
  * store) plus the caller's evaluator paths, sorted and deduplicated exactly as
  * the profile renderer does. A supplied `profileSha256` that differs is
- * refused.
+ * refused. Declared `skills` add `skillsSha256`, which the implied
+ * registration carries and the broker attests against `$GROK_HOME/skills`.
  */
 export declare function resolveOrganizationGrokBrokerProjection(config: unknown, agentId: string, options: OrganizationGrokBrokerProjectionOptions): OrganizationGrokBrokerProjection;
 /** sha256 over the projection's canonical JSON; what a slot preflight receipt binds. */

package/dist/runtime/grokBrokerProjection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerProjection.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProjection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAQ3G,OAAO,EAAkC,KAAK,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACtH,OAAO,EAA+B,KAAK,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE3G,OAAO,KAAK,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAAE,2BAA2B,EAA2F,MAAM,+BAA+B,CAAC;AAGrK,eAAO,MAAM,8BAA8B,6CAAuC,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,OAAO,EAAE,OAAO,8BAA8B,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,uBAAuB,CAAC;IAC7C,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,sBAAsB,EAAE,eAAe,GAAG,mBAAmB,CAAC,GAAG,QAAQ,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxJ,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,eAAe,CAAC;IACvB,eAAe,EAAE,yBAAyB,CAAC;IAC3C,MAAM,EAAE,sBAAsB,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,yHAAyH;IACzH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,QAAQ,CAAC;QAAE,QAAQ,EAAE,gBAAgB,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,eAAe,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,OAAO,2BAA2B,CAAC;QAAC,cAAc,EAAE,YAAY,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjM,CAAC,CAAC;AAEH,MAAM,MAAM,uCAAuC,GAAG,QAAQ,CAAC;IAC7D,gHAAgH;IAChH,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,OAAO,GAAG,KAAK,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,sBAAsB,CAAC;IAC/B;;;;;;;;;;;;;;OAcG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mFAAmF;IACnF,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,gFAAgF;IAChF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,uCAAuC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,uCAAuC,GAAG,gCAAgC,CAkC5K;AAED,wFAAwF;AACxF,eAAO,MAAM,0BAA0B,GAAI,YAAY,gCAAgC,KAAG,MACpB,CAAC;AAEvE,4HAA4H;AAC5H,wBAAgB,gCAAgC,CAAC,UAAU,EAAE,gCAAgC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAQhI;AAED;;;;GAIG;AACH,wBAAgB,6CAA6C,CAAC,YAAY,EAAE,+BAA+B,EAAE,UAAU,EAAE,gCAAgC,GAAG,IAAI,CAG/J"}
+{"version":3,"file":"grokBrokerProjection.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProjection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,KAAK,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAQ3G,OAAO,EAAkC,KAAK,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACtH,OAAO,EAA+B,KAAK,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAE3G,OAAO,KAAK,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAA4C,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAAE,2BAA2B,EAA2F,MAAM,+BAA+B,CAAC;AAGrK,eAAO,MAAM,8BAA8B,6CAAuC,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,OAAO,EAAE,OAAO,8BAA8B,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,uBAAuB,CAAC;IAC7C,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,sBAAsB,EAAE,eAAe,GAAG,mBAAmB,CAAC,GAAG,QAAQ,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxJ,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,eAAe,CAAC;IACvB,eAAe,EAAE,yBAAyB,CAAC;IAC3C,MAAM,EAAE,sBAAsB,CAAC;IAC/B,eAAe,EAAE,MAAM,CAAC;IACxB,yHAAyH;IACzH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,WAAW,EAAE,QAAQ,CAAC;QAAE,QAAQ,EAAE,gBAAgB,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAC;QAAC,eAAe,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,OAAO,2BAA2B,CAAC;QAAC,cAAc,EAAE,YAAY,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjM,CAAC,CAAC;AAEH,MAAM,MAAM,uCAAuC,GAAG,QAAQ,CAAC;IAC7D,gHAAgH;IAChH,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAC9C,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,OAAO,GAAG,KAAK,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,sBAAsB,CAAC;IAC/B;;;;;;;;;;;;;;OAcG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mFAAmF;IACnF,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,gFAAgF;IAChF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CAChC,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,uCAAuC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,uCAAuC,GAAG,gCAAgC,CAmC5K;AAED,wFAAwF;AACxF,eAAO,MAAM,0BAA0B,GAAI,YAAY,gCAAgC,KAAG,MACpB,CAAC;AAEvE,4HAA4H;AAC5H,wBAAgB,gCAAgC,CAAC,UAAU,EAAE,gCAAgC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAShI;AAED;;;;GAIG;AACH,wBAAgB,6CAA6C,CAAC,YAAY,EAAE,+BAA+B,EAAE,UAAU,EAAE,gCAAgC,GAAG,IAAI,CAG/J"}

package/dist/runtime/grokBrokerProjection.js

@@ -9,6 +9,7 @@ import { grokSandboxProtectedPaths } from "./engineDispatcher.js";
 import { parseEngineBrokerServiceConfig } from "./engineBrokerServiceConfig.js";
 import { parseEngineBrokerTurnLimits } from "./engineBrokerTurnAccounting.js";
 import { grokBrokerWorkerConfigPins, grokBrokerWorkerConfigSha256 } from "./grokBrokerWorkerConfig.js";
+import { grokWorkerSkillsSha256, parseAgentSkills } from "./grokWorkerSkills.js";
 import { GROK_WORKER_SANDBOX_PROFILE, grokWorkerEventsPathFor, renderGrokWorkerSandboxProfile, grokWorkerSandboxProfileSha256 } from "./grokWorkerSandboxProfile.js";
 import { parseOrganizationRuntimeConfig } from "./organizationRuntime.js";
 export const GROK_BROKER_PROJECTION_VERSION = GROK_ENGINE_BROKER.projectionVersion;
@@ -31,7 +32,8 @@ export const GROK_BROKER_PROJECTION_VERSION = GROK_ENGINE_BROKER.projectionVersi
  * this agent (realm, bootstrap, peers, and the mask covering the acceptance
  * store) plus the caller's evaluator paths, sorted and deduplicated exactly as
  * the profile renderer does. A supplied `profileSha256` that differs is
- * refused.
+ * refused. Declared `skills` add `skillsSha256`, which the implied
+ * registration carries and the broker attests against `$GROK_HOME/skills`.
  */
 export function resolveOrganizationGrokBrokerProjection(config, agentId, options) {
     const parsed = parseOrganizationRuntimeConfig(config);
@@ -64,12 +66,13 @@ export function resolveOrganizationGrokBrokerProjection(config, agentId, options
     const artifact = GROK_ENGINE_BROKER.grokCliArtifacts[options.architecture];
     if (artifact === undefined)
         throw new Error("Grok broker projection requires a pinned architecture");
+    const skills = parseAgentSkills(options.skills ?? []);
     const profilePath = path.posix.join(options.workerHomePath, ".grok", "sandbox.toml");
     const projection = {
         version: GROK_BROKER_PROJECTION_VERSION, agentId, workspacePath: agent.workspacePath, runtimeHomePath: agent.runtimeHomePath,
         workerUid: options.workerUid, slot: options.slot, profilePath, profileSha256, denyPaths, workerConfigSha256, workerConfigVariant,
         ...(workerConfigVariant === "clocked" ? { taskClock: { ...GROK_BROKER_TASK_CLOCK, directoryPath: path.posix.dirname(brokerTaskClockFileFor(options.slot)), timestampFilePath: brokerTaskClockFileFor(options.slot) } } : {}),
-        systemPromptSha256: GROK_ENGINE_BROKER.worker.systemPromptSha256, grokCliVersion: GROK_ENGINE_BROKER.grokCliVersion, grokExecutableSha256: artifact.sha256,
+        systemPromptSha256: GROK_ENGINE_BROKER.worker.systemPromptSha256, ...(skills.length === 0 ? {} : { skillsSha256: grokWorkerSkillsSha256(skills) }), grokCliVersion: GROK_ENGINE_BROKER.grokCliVersion, grokExecutableSha256: artifact.sha256,
         nativeAbiVersion: GROK_ENGINE_BROKER.nativeAbiVersion, model, reasoningEffort, limits: parseEngineBrokerTurnLimits(options.limits), usageLedgerPath: options.usageLedgerPath, seccompProfileSha256: options.seccompProfileSha256,
         attestation: { platform: "linux/landlock", enforced: true, restrictNetwork: true, profileName: GROK_WORKER_SANDBOX_PROFILE, sandboxRuntime: "bubblewrap", eventsPath: grokWorkerEventsPathFor(profilePath) }
     };
@@ -84,7 +87,8 @@ export function grokBrokerServiceRegistrationFor(projection) {
     const registration = {
         agentId: projection.agentId, slot: projection.slot, workerUid: projection.workerUid, workspace: projection.workspacePath,
         profilePath: projection.profilePath, eventsPath: projection.attestation.eventsPath, profileSha256: projection.profileSha256,
-        usageLedgerPath: projection.usageLedgerPath, limits: projection.limits, model: { id: projection.model, reasoningEffort: projection.reasoningEffort }
+        usageLedgerPath: projection.usageLedgerPath, limits: projection.limits, model: { id: projection.model, reasoningEffort: projection.reasoningEffort },
+        ...(projection.skillsSha256 === undefined ? {} : { skillsSha256: projection.skillsSha256 })
     };
     parseEngineBrokerServiceConfig({ version: "noopolis.daimon.engine-broker-service.v2", credentialHome: GROK_ENGINE_BROKER.credentialHomePath, turnStore: GROK_ENGINE_BROKER.turnStorePath, registrations: [registration] });
     return registration;

package/dist/runtime/grokBrokerProxy.d.ts

@@ -64,6 +64,13 @@ export declare function createGrokBrokerProxyHandler(authority: GrokBrokerCreden
  */
 export declare class GrokBrokerProxyRefusal extends Error {
     readonly reason: string;
-    constructor(reason: string);
+    readonly check?: string | undefined;
+    readonly detail?: string | undefined;
+    /**
+     * `check` names which body-gate check failed and `detail` is the refused
+     * body's content-free shape ({@link grokBrokerProxyBodyShape}); both are for
+     * the broker's stderr line, and `check` also rides the 400 body.
+     */
+    constructor(reason: string, check?: string | undefined, detail?: string | undefined);
 }
 //# sourceMappingURL=grokBrokerProxy.d.ts.map

package/dist/runtime/grokBrokerProxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerProxy.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAExF,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAIpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAE9E,OAAO,EAA2E,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG7I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,WAAW,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,qBAAqB,CAAC,CAAC,mBAAmB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,CAAC,mBAAmB,CAAC,EAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AACjQ,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,+BAA+B,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC,CAAC;AAE3N;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,UAAU,SAAS,EACrF,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;;;mCAoC5B,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;GA5B7D;AAED,iFAAiF;AACjF,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;mCAc9F,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;EAI7D;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CACpC"}
+{"version":3,"file":"grokBrokerProxy.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAExF,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAIpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAmC,MAAM,6BAA6B,CAAC;AAG/G,OAAO,EAA2E,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG7I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,WAAW,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,qBAAqB,CAAC,CAAC,mBAAmB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,CAAC,mBAAmB,CAAC,EAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AACjQ,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,+BAA+B,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC,CAAC;AAE3N;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,UAAU,SAAS,EACrF,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;;;mCAoC5B,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;GA5B7D;AAED,iFAAiF;AACjF,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;mCAc9F,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;EAI7D;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAMnC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IALtF;;;;OAIG;gBACkB,MAAM,EAAE,MAAM,EAAW,KAAK,CAAC,EAAE,MAAM,YAAA,EAAW,MAAM,CAAC,EAAE,MAAM,YAAA;CACvF"}

package/dist/runtime/grokBrokerProxy.js

@@ -6,7 +6,8 @@ import { CLI_ENGINE_MAX_DIAGNOSTIC_BYTES } from "../pi/cliChildOutput.js";
 import { EngineBrokerCapabilities } from "./engineBrokerCapabilities.js";
 import { ENGINE_BROKER_AUTH_STALE } from "./engineBrokerProtocol.js";
 import { DEFAULT_GROK_BROKER_MODEL_POLICY, parseGrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
-import { authorizeGrokBrokerProxyRequest } from "./grokBrokerProxyRequest.js";
+import { authorizeGrokBrokerProxyRequest, GrokBrokerProxyRequestRejection } from "./grokBrokerProxyRequest.js";
+import { formatGrokBrokerProxyBodyShape, grokBrokerProxyBodyShape } from "./grokBrokerProxyBodyShape.js";
 import { GROK_SESSION_TITLE_SINK_KEY } from "./grokBrokerWorkerConfig.js";
 import { parseGrokFinalReply, parseGrokResponseToolNames, parseGrokUpstreamUsage } from "./grokBrokerTurnMeter.js";
 import { GROK_ENGINE_BROKER } from "../contracts/runtimeContractManifest.js";
@@ -77,9 +78,18 @@ export function createGrokBrokerProxyHandler(authority, upstream = defaultUpstre
  */
 export class GrokBrokerProxyRefusal extends Error {
     reason;
-    constructor(reason) {
+    check;
+    detail;
+    /**
+     * `check` names which body-gate check failed and `detail` is the refused
+     * body's content-free shape ({@link grokBrokerProxyBodyShape}); both are for
+     * the broker's stderr line, and `check` also rides the 400 body.
+     */
+    constructor(reason, check, detail) {
         super(`grok broker proxy refused: ${reason}`);
         this.reason = reason;
+        this.check = check;
+        this.detail = detail;
     }
 }
 async function serve(request, response, authority, upstream, capabilities, guards, turns, fallback, grants) {
@@ -137,7 +147,7 @@ async function serve(request, response, authority, upstream, capabilities, guard
         token = "";
         // The spend gate runs after the body is proven a real lean worker request
         // (a refused session-title body never counts) and before any upstream call.
-        const admission = turn.meter.admit();
+        const admission = turn.meter.admit({ keepFinal: prepared.compaction === true });
         if ("refused" in admission) {
             response.writeHead(429, { "content-type": "application/json", "cache-control": "no-store" });
             response.end(JSON.stringify({ error: "turn limit reached", limit: admission.refused }));
@@ -167,8 +177,9 @@ async function serve(request, response, authority, upstream, capabilities, guard
         // A successful answer that called nothing and stopped is the turn's final
         // reply: the broker ends a worker that finished but did not exit on it
         // (`grokEngineBrokerTurnEnd.ts`), and reports it when the launcher refused
-        // the worker's stdout. Observation only, exactly like the tool names.
-        settle?.(usageOrEstimate(result.body, result.headers["content-type"]), toolCallsOrNothing(result.body, result.headers["content-type"]), result.status === 200 ? finalReplyOrNothing(result.body, result.headers["content-type"]) : undefined);
+        // the worker's stdout. Observation only, exactly like the tool names. A
+        // compaction summary also calls nothing and stops, and is never the reply.
+        settle?.(usageOrEstimate(result.body, result.headers["content-type"]), toolCallsOrNothing(result.body, result.headers["content-type"]), result.status === 200 && prepared.compaction !== true ? finalReplyOrNothing(result.body, result.headers["content-type"]) : undefined);
         response.writeHead(result.status, { "content-type": result.headers["content-type"] ?? "application/json", "cache-control": "no-store" });
         response.end(result.body);
     }
@@ -191,7 +202,8 @@ async function serve(request, response, authority, upstream, capabilities, guard
         // A named refusal is its own account; anything else used to reach the log as
         // the bare word `broker_unavailable`, which names nothing — so it carries the
         // fault's own class and message, and nothing else, beside it.
-        const named = refused ? refusal : `${refusal} (${brokerFaultCause(error, secrets)})`;
+        const named = !refused ? `${refusal} (${brokerFaultCause(error, secrets)})`
+            : error instanceof GrokBrokerProxyRefusal && error.check !== undefined ? `${refusal} check=${error.check}${error.detail === undefined ? "" : ` ${error.detail}`}` : refusal;
         if (!titleSink && !expectedWorkerProbe(request))
             process.stderr.write(`[grok-proxy] refused: ${named}\n`);
         // Grok's own session-title call is refused by design, and keeps the transient
@@ -206,7 +218,7 @@ async function serve(request, response, authority, upstream, capabilities, guard
         }
         if (refused) {
             response.writeHead(400, { "content-type": "application/json", "cache-control": "no-store" });
-            response.end(JSON.stringify({ error: "broker refused this request", reason: refusal }));
+            response.end(JSON.stringify({ error: "broker refused this request", reason: refusal, ...(error instanceof GrokBrokerProxyRefusal && error.check !== undefined ? { check: error.check } : {}) }));
             return;
         }
         response.writeHead(503, { "content-type": "application/json", "cache-control": "no-store" });
@@ -307,13 +319,19 @@ const finalReplyOrNothing = (body, contentType) => {
         return undefined;
     }
 };
-/** The body gate, refused non-retryably: a rejected body is a policy miss, never a transient fault. */
+/**
+ * The body gate, refused non-retryably: a rejected body is a policy miss, never
+ * a transient fault. The refusal names the failed check and the body's
+ * content-free shape, because a bare `request_body_rejected` sent a live
+ * training pilot to a stub harness to learn which of a dozen checks fired.
+ */
 function authorizeRequestOrRefuse(...args) {
     try {
         return authorizeGrokBrokerProxyRequest(...args);
     }
-    catch {
-        throw new GrokBrokerProxyRefusal("request_body_rejected");
+    catch (error) {
+        const check = error instanceof GrokBrokerProxyRequestRejection ? error.check : "credential";
+        throw new GrokBrokerProxyRefusal("request_body_rejected", check, formatGrokBrokerProxyBodyShape(grokBrokerProxyBodyShape(args[0].body)));
     }
 }
 async function readBody(request) { const chunks = []; let bytes = 0; for await (const chunk of request) {

package/dist/runtime/grokBrokerProxyBodyShape.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A content-free description of one refused worker body, for the broker's own
+ * stderr: byte length, top-level member names, offered tool names, message
+ * count and roles, and `tool_choice`. Never a message, a parameter schema, a
+ * value of any other member, a header or a token.
+ *
+ * Every name comes from a body the worker wrote, so each is admitted only as a
+ * plain short identifier (anything else is `<invalid>`) and every list is
+ * bounded with a `<truncated>` last entry. A body that is not a JSON object
+ * reports its byte length alone.
+ */
+export type GrokBrokerProxyBodyShape = Readonly<{
+    bytes: number;
+    keys?: readonly string[];
+    tools?: readonly string[] | "absent" | "invalid";
+    messages?: number | "invalid";
+    roles?: readonly string[];
+    tool_choice?: string;
+}>;
+export declare const GROK_PROXY_BODY_SHAPE_LIST_MAX = 32;
+export declare function grokBrokerProxyBodyShape(body: Uint8Array): GrokBrokerProxyBodyShape;
+/** One line, `key=value` pairs, for the `[grok-proxy] refused:` log. */
+export declare const formatGrokBrokerProxyBodyShape: (shape: GrokBrokerProxyBodyShape) => string;
+//# sourceMappingURL=grokBrokerProxyBodyShape.d.ts.map

package/dist/runtime/grokBrokerProxyBodyShape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grokBrokerProxyBodyShape.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyBodyShape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAGH,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAqBjD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,UAAU,GAAG,wBAAwB,CAmBnF;AAED,wEAAwE;AACxE,eAAO,MAAM,8BAA8B,GAAI,OAAO,wBAAwB,KAAG,MAOtE,CAAC"}

package/dist/runtime/grokBrokerProxyBodyShape.js

@@ -0,0 +1,60 @@
+const NAME = /^[A-Za-z_][A-Za-z0-9_.-]{0,63}$/u;
+export const GROK_PROXY_BODY_SHAPE_LIST_MAX = 32;
+const safeName = (value) => typeof value === "string" && NAME.test(value) ? value : "<invalid>";
+const bounded = (values) => values.length <= GROK_PROXY_BODY_SHAPE_LIST_MAX ? values : [...values.slice(0, GROK_PROXY_BODY_SHAPE_LIST_MAX - 1), "<truncated>"];
+const isObject = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+/** Roles in order, with consecutive repeats collapsed to `role*n` so a long history stays short. */
+const roleRuns = (messages) => {
+    const runs = [];
+    let last;
+    let count = 0;
+    const flush = () => { if (last !== undefined)
+        runs.push(count > 1 ? `${last}*${count}` : last); };
+    for (const message of messages) {
+        const role = isObject(message) ? safeName(message.role) : "<invalid>";
+        if (role === last) {
+            count++;
+            continue;
+        }
+        flush();
+        last = role;
+        count = 1;
+    }
+    flush();
+    return bounded(runs);
+};
+export function grokBrokerProxyBodyShape(body) {
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder("utf-8", { fatal: false }).decode(body));
+    }
+    catch {
+        return { bytes: body.byteLength };
+    }
+    if (!isObject(parsed))
+        return { bytes: body.byteLength };
+    const tools = parsed.tools === undefined ? "absent" : Array.isArray(parsed.tools)
+        ? bounded(parsed.tools.map((tool) => isObject(tool) && isObject(tool.function) ? safeName(tool.function.name) : "<invalid>"))
+        : "invalid";
+    const choice = parsed.tool_choice;
+    return {
+        bytes: body.byteLength,
+        keys: bounded(Object.keys(parsed).map(safeName).sort()),
+        tools,
+        messages: Array.isArray(parsed.messages) ? parsed.messages.length : "invalid",
+        ...(Array.isArray(parsed.messages) ? { roles: roleRuns(parsed.messages) } : {}),
+        ...(choice === undefined ? {} : {
+            tool_choice: typeof choice === "string" ? safeName(choice)
+                : isObject(choice) ? `object:${isObject(choice.function) ? safeName(choice.function.name) : safeName(choice.type)}` : "<invalid>"
+        })
+    };
+}
+/** One line, `key=value` pairs, for the `[grok-proxy] refused:` log. */
+export const formatGrokBrokerProxyBodyShape = (shape) => [
+    `bytes=${shape.bytes}`,
+    ...(shape.keys === undefined ? [] : [`keys=${shape.keys.join(",")}`]),
+    ...(shape.tools === undefined ? [] : [`tools=${Array.isArray(shape.tools) ? shape.tools.join(",") : shape.tools}`]),
+    ...(shape.messages === undefined ? [] : [`messages=${shape.messages}`]),
+    ...(shape.roles === undefined ? [] : [`roles=${shape.roles.join(",")}`]),
+    ...(shape.tool_choice === undefined ? [] : [`tool_choice=${shape.tool_choice}`])
+].join(" ");

package/dist/runtime/grokBrokerProxyRequest.d.ts

@@ -1,5 +1,15 @@
 import type { EngineBrokerCapabilities } from "./engineBrokerCapabilities.js";
 import { type GrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
+/**
+ * Which body-gate check refused a request: a closed, content-free code, so a
+ * refusal on the broker's stderr names its cause without a stub harness.
+ */
+export type GrokBrokerProxyRejectionCheck = "route" | "body_size" | "bearer" | "scope" | "client_version" | "json" | "envelope" | "model" | "reasoning_effort" | "tools" | "members" | "stream_options";
+/** A body-gate refusal. The message is the historic one; `check` names the failed check. */
+export declare class GrokBrokerProxyRequestRejection extends Error {
+    readonly check: GrokBrokerProxyRejectionCheck;
+    constructor(check: GrokBrokerProxyRejectionCheck);
+}
 export type GrokBrokerProxyInput = Readonly<{
     method: string;
     pathname: string;
@@ -8,10 +18,12 @@ export type GrokBrokerProxyInput = Readonly<{
     agentId?: string;
     turnId?: string;
 }>;
+/** `compaction` marks a normalized auto-compaction summary request: its answer is a summary, never the turn's final reply. */
 export type GrokBrokerUpstreamRequest = Readonly<{
     url: "https://cli-chat-proxy.grok.com/v1/chat/completions";
     headers: Readonly<Record<string, string>>;
     body: Uint8Array;
+    compaction?: true;
 }>;
 /**
  * Authorizes one worker request and rebuilds it for the provider.
@@ -24,7 +36,24 @@ export type GrokBrokerUpstreamRequest = Readonly<{
  * - the offered tool names are exactly the lean visible set. Grok 1.0.34 turns
  *   an unmappable `--tools` entry into its full 19-tool set, and its per-turn
  *   `session_title` request carries a single forced tool; both are refused.
+ *
+ * One other shape is admitted, and only by normalizing it into the lean one:
+ * Grok 1.0.34's auto-compaction summary request ({@link normalizeGrokCompactionRequest}).
  */
 export declare function authorizeGrokBrokerProxyRequest(input: GrokBrokerProxyInput, capabilities: EngineBrokerCapabilities, bearer: string, policy?: GrokBrokerModelPolicy): GrokBrokerUpstreamRequest;
+/**
+ * Rewrites, in place, exactly the captured compaction shape into the lean
+ * worker shape, and reports whether it did. The two extra members are each
+ * the provider's default value (`tool_choice: "auto"` with tools offered,
+ * `temperature: 1`), so removing them changes nothing the model is asked; the
+ * missing effort is set to the declared one, so the request cannot fall back
+ * to a provider default effort. Every other check — model, tools, stream
+ * options — then runs on the result exactly as for any worker request, and
+ * the forwarded body is indistinguishable from an ordinary lean request: the
+ * spend envelope is unchanged. Any other value of either member (a forced
+ * `tool_choice`, another temperature) or any other member set is left as is,
+ * and refused by the ordinary checks.
+ */
+export declare function normalizeGrokCompactionRequest(parsed: Record<string, unknown>, reasoningEffort: string): boolean;
 export declare function exactLeanTools(tools: unknown): boolean;
 //# sourceMappingURL=grokBrokerProxyRequest.d.ts.map

package/dist/runtime/grokBrokerProxyRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerProxyRequest.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyRequest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGtI,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9L,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,qDAAqD,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAE9K;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,qBAAwD,GAAG,yBAAyB,CAmChO;AASD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAStD"}
+{"version":3,"file":"grokBrokerProxyRequest.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyRequest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAItI;;;GAGG;AACH,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,gBAAgB,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,kBAAkB,GAAG,OAAO,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAExM,4FAA4F;AAC5F,qBAAa,+BAAgC,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,6BAA6B;gBAApC,KAAK,EAAE,6BAA6B;CAC1D;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9L,8HAA8H;AAC9H,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,qDAAqD,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAEjM;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,qBAAwD,GAAG,yBAAyB,CAwChO;AAcD;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAOhH;AASD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAStD"}