@noopolis/daimon 0.2.2 → 0.2.3

package/dist/runtime/grokBrokerProxy.d.ts

@@ -64,6 +64,13 @@ export declare function createGrokBrokerProxyHandler(authority: GrokBrokerCreden
  */
 export declare class GrokBrokerProxyRefusal extends Error {
     readonly reason: string;
-    constructor(reason: string);
+    readonly check?: string | undefined;
+    readonly detail?: string | undefined;
+    /**
+     * `check` names which body-gate check failed and `detail` is the refused
+     * body's content-free shape ({@link grokBrokerProxyBodyShape}); both are for
+     * the broker's stderr line, and `check` also rides the 400 body.
+     */
+    constructor(reason: string, check?: string | undefined, detail?: string | undefined);
 }
 //# sourceMappingURL=grokBrokerProxy.d.ts.map

package/dist/runtime/grokBrokerProxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerProxy.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAExF,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAIpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAE9E,OAAO,EAA2E,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG7I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,WAAW,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,qBAAqB,CAAC,CAAC,mBAAmB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,CAAC,mBAAmB,CAAC,EAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AACjQ,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,+BAA+B,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC,CAAC;AAE3N;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,UAAU,SAAS,EACrF,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;;;mCAoC5B,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;GA5B7D;AAED,iFAAiF;AACjF,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;mCAc9F,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;EAI7D;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CACpC"}
+{"version":3,"file":"grokBrokerProxy.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAExF,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAIpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAmC,MAAM,6BAA6B,CAAC;AAG/G,OAAO,EAA2E,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG7I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,WAAW,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,qBAAqB,CAAC,CAAC,mBAAmB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,CAAC,mBAAmB,CAAC,EAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AACjQ,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,+BAA+B,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC,CAAC;AAE3N;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,UAAU,SAAS,EACrF,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;;;mCAoC5B,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;GA5B7D;AAED,iFAAiF;AACjF,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;mCAc9F,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;EAI7D;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAMnC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IALtF;;;;OAIG;gBACkB,MAAM,EAAE,MAAM,EAAW,KAAK,CAAC,EAAE,MAAM,YAAA,EAAW,MAAM,CAAC,EAAE,MAAM,YAAA;CACvF"}

package/dist/runtime/grokBrokerProxy.js

@@ -6,7 +6,8 @@ import { CLI_ENGINE_MAX_DIAGNOSTIC_BYTES } from "../pi/cliChildOutput.js";
 import { EngineBrokerCapabilities } from "./engineBrokerCapabilities.js";
 import { ENGINE_BROKER_AUTH_STALE } from "./engineBrokerProtocol.js";
 import { DEFAULT_GROK_BROKER_MODEL_POLICY, parseGrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
-import { authorizeGrokBrokerProxyRequest } from "./grokBrokerProxyRequest.js";
+import { authorizeGrokBrokerProxyRequest, GrokBrokerProxyRequestRejection } from "./grokBrokerProxyRequest.js";
+import { formatGrokBrokerProxyBodyShape, grokBrokerProxyBodyShape } from "./grokBrokerProxyBodyShape.js";
 import { GROK_SESSION_TITLE_SINK_KEY } from "./grokBrokerWorkerConfig.js";
 import { parseGrokFinalReply, parseGrokResponseToolNames, parseGrokUpstreamUsage } from "./grokBrokerTurnMeter.js";
 import { GROK_ENGINE_BROKER } from "../contracts/runtimeContractManifest.js";
@@ -77,9 +78,18 @@ export function createGrokBrokerProxyHandler(authority, upstream = defaultUpstre
  */
 export class GrokBrokerProxyRefusal extends Error {
     reason;
-    constructor(reason) {
+    check;
+    detail;
+    /**
+     * `check` names which body-gate check failed and `detail` is the refused
+     * body's content-free shape ({@link grokBrokerProxyBodyShape}); both are for
+     * the broker's stderr line, and `check` also rides the 400 body.
+     */
+    constructor(reason, check, detail) {
         super(`grok broker proxy refused: ${reason}`);
         this.reason = reason;
+        this.check = check;
+        this.detail = detail;
     }
 }
 async function serve(request, response, authority, upstream, capabilities, guards, turns, fallback, grants) {
@@ -137,7 +147,7 @@ async function serve(request, response, authority, upstream, capabilities, guard
         token = "";
         // The spend gate runs after the body is proven a real lean worker request
         // (a refused session-title body never counts) and before any upstream call.
-        const admission = turn.meter.admit();
+        const admission = turn.meter.admit({ keepFinal: prepared.compaction === true });
         if ("refused" in admission) {
             response.writeHead(429, { "content-type": "application/json", "cache-control": "no-store" });
             response.end(JSON.stringify({ error: "turn limit reached", limit: admission.refused }));
@@ -167,8 +177,9 @@ async function serve(request, response, authority, upstream, capabilities, guard
         // A successful answer that called nothing and stopped is the turn's final
         // reply: the broker ends a worker that finished but did not exit on it
         // (`grokEngineBrokerTurnEnd.ts`), and reports it when the launcher refused
-        // the worker's stdout. Observation only, exactly like the tool names.
-        settle?.(usageOrEstimate(result.body, result.headers["content-type"]), toolCallsOrNothing(result.body, result.headers["content-type"]), result.status === 200 ? finalReplyOrNothing(result.body, result.headers["content-type"]) : undefined);
+        // the worker's stdout. Observation only, exactly like the tool names. A
+        // compaction summary also calls nothing and stops, and is never the reply.
+        settle?.(usageOrEstimate(result.body, result.headers["content-type"]), toolCallsOrNothing(result.body, result.headers["content-type"]), result.status === 200 && prepared.compaction !== true ? finalReplyOrNothing(result.body, result.headers["content-type"]) : undefined);
         response.writeHead(result.status, { "content-type": result.headers["content-type"] ?? "application/json", "cache-control": "no-store" });
         response.end(result.body);
     }
@@ -191,7 +202,8 @@ async function serve(request, response, authority, upstream, capabilities, guard
         // A named refusal is its own account; anything else used to reach the log as
         // the bare word `broker_unavailable`, which names nothing — so it carries the
         // fault's own class and message, and nothing else, beside it.
-        const named = refused ? refusal : `${refusal} (${brokerFaultCause(error, secrets)})`;
+        const named = !refused ? `${refusal} (${brokerFaultCause(error, secrets)})`
+            : error instanceof GrokBrokerProxyRefusal && error.check !== undefined ? `${refusal} check=${error.check}${error.detail === undefined ? "" : ` ${error.detail}`}` : refusal;
         if (!titleSink && !expectedWorkerProbe(request))
             process.stderr.write(`[grok-proxy] refused: ${named}\n`);
         // Grok's own session-title call is refused by design, and keeps the transient
@@ -206,7 +218,7 @@ async function serve(request, response, authority, upstream, capabilities, guard
         }
         if (refused) {
             response.writeHead(400, { "content-type": "application/json", "cache-control": "no-store" });
-            response.end(JSON.stringify({ error: "broker refused this request", reason: refusal }));
+            response.end(JSON.stringify({ error: "broker refused this request", reason: refusal, ...(error instanceof GrokBrokerProxyRefusal && error.check !== undefined ? { check: error.check } : {}) }));
             return;
         }
         response.writeHead(503, { "content-type": "application/json", "cache-control": "no-store" });
@@ -307,13 +319,19 @@ const finalReplyOrNothing = (body, contentType) => {
         return undefined;
     }
 };
-/** The body gate, refused non-retryably: a rejected body is a policy miss, never a transient fault. */
+/**
+ * The body gate, refused non-retryably: a rejected body is a policy miss, never
+ * a transient fault. The refusal names the failed check and the body's
+ * content-free shape, because a bare `request_body_rejected` sent a live
+ * training pilot to a stub harness to learn which of a dozen checks fired.
+ */
 function authorizeRequestOrRefuse(...args) {
     try {
         return authorizeGrokBrokerProxyRequest(...args);
     }
-    catch {
-        throw new GrokBrokerProxyRefusal("request_body_rejected");
+    catch (error) {
+        const check = error instanceof GrokBrokerProxyRequestRejection ? error.check : "credential";
+        throw new GrokBrokerProxyRefusal("request_body_rejected", check, formatGrokBrokerProxyBodyShape(grokBrokerProxyBodyShape(args[0].body)));
     }
 }
 async function readBody(request) { const chunks = []; let bytes = 0; for await (const chunk of request) {

package/dist/runtime/grokBrokerProxyBodyShape.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A content-free description of one refused worker body, for the broker's own
+ * stderr: byte length, top-level member names, offered tool names, message
+ * count and roles, and `tool_choice`. Never a message, a parameter schema, a
+ * value of any other member, a header or a token.
+ *
+ * Every name comes from a body the worker wrote, so each is admitted only as a
+ * plain short identifier (anything else is `<invalid>`) and every list is
+ * bounded with a `<truncated>` last entry. A body that is not a JSON object
+ * reports its byte length alone.
+ */
+export type GrokBrokerProxyBodyShape = Readonly<{
+    bytes: number;
+    keys?: readonly string[];
+    tools?: readonly string[] | "absent" | "invalid";
+    messages?: number | "invalid";
+    roles?: readonly string[];
+    tool_choice?: string;
+}>;
+export declare const GROK_PROXY_BODY_SHAPE_LIST_MAX = 32;
+export declare function grokBrokerProxyBodyShape(body: Uint8Array): GrokBrokerProxyBodyShape;
+/** One line, `key=value` pairs, for the `[grok-proxy] refused:` log. */
+export declare const formatGrokBrokerProxyBodyShape: (shape: GrokBrokerProxyBodyShape) => string;
+//# sourceMappingURL=grokBrokerProxyBodyShape.d.ts.map

package/dist/runtime/grokBrokerProxyBodyShape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grokBrokerProxyBodyShape.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyBodyShape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAGH,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAqBjD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,UAAU,GAAG,wBAAwB,CAmBnF;AAED,wEAAwE;AACxE,eAAO,MAAM,8BAA8B,GAAI,OAAO,wBAAwB,KAAG,MAOtE,CAAC"}

package/dist/runtime/grokBrokerProxyBodyShape.js

@@ -0,0 +1,60 @@
+const NAME = /^[A-Za-z_][A-Za-z0-9_.-]{0,63}$/u;
+export const GROK_PROXY_BODY_SHAPE_LIST_MAX = 32;
+const safeName = (value) => typeof value === "string" && NAME.test(value) ? value : "<invalid>";
+const bounded = (values) => values.length <= GROK_PROXY_BODY_SHAPE_LIST_MAX ? values : [...values.slice(0, GROK_PROXY_BODY_SHAPE_LIST_MAX - 1), "<truncated>"];
+const isObject = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+/** Roles in order, with consecutive repeats collapsed to `role*n` so a long history stays short. */
+const roleRuns = (messages) => {
+    const runs = [];
+    let last;
+    let count = 0;
+    const flush = () => { if (last !== undefined)
+        runs.push(count > 1 ? `${last}*${count}` : last); };
+    for (const message of messages) {
+        const role = isObject(message) ? safeName(message.role) : "<invalid>";
+        if (role === last) {
+            count++;
+            continue;
+        }
+        flush();
+        last = role;
+        count = 1;
+    }
+    flush();
+    return bounded(runs);
+};
+export function grokBrokerProxyBodyShape(body) {
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder("utf-8", { fatal: false }).decode(body));
+    }
+    catch {
+        return { bytes: body.byteLength };
+    }
+    if (!isObject(parsed))
+        return { bytes: body.byteLength };
+    const tools = parsed.tools === undefined ? "absent" : Array.isArray(parsed.tools)
+        ? bounded(parsed.tools.map((tool) => isObject(tool) && isObject(tool.function) ? safeName(tool.function.name) : "<invalid>"))
+        : "invalid";
+    const choice = parsed.tool_choice;
+    return {
+        bytes: body.byteLength,
+        keys: bounded(Object.keys(parsed).map(safeName).sort()),
+        tools,
+        messages: Array.isArray(parsed.messages) ? parsed.messages.length : "invalid",
+        ...(Array.isArray(parsed.messages) ? { roles: roleRuns(parsed.messages) } : {}),
+        ...(choice === undefined ? {} : {
+            tool_choice: typeof choice === "string" ? safeName(choice)
+                : isObject(choice) ? `object:${isObject(choice.function) ? safeName(choice.function.name) : safeName(choice.type)}` : "<invalid>"
+        })
+    };
+}
+/** One line, `key=value` pairs, for the `[grok-proxy] refused:` log. */
+export const formatGrokBrokerProxyBodyShape = (shape) => [
+    `bytes=${shape.bytes}`,
+    ...(shape.keys === undefined ? [] : [`keys=${shape.keys.join(",")}`]),
+    ...(shape.tools === undefined ? [] : [`tools=${Array.isArray(shape.tools) ? shape.tools.join(",") : shape.tools}`]),
+    ...(shape.messages === undefined ? [] : [`messages=${shape.messages}`]),
+    ...(shape.roles === undefined ? [] : [`roles=${shape.roles.join(",")}`]),
+    ...(shape.tool_choice === undefined ? [] : [`tool_choice=${shape.tool_choice}`])
+].join(" ");

package/dist/runtime/grokBrokerProxyRequest.d.ts

@@ -1,5 +1,15 @@
 import type { EngineBrokerCapabilities } from "./engineBrokerCapabilities.js";
 import { type GrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
+/**
+ * Which body-gate check refused a request: a closed, content-free code, so a
+ * refusal on the broker's stderr names its cause without a stub harness.
+ */
+export type GrokBrokerProxyRejectionCheck = "route" | "body_size" | "bearer" | "scope" | "client_version" | "json" | "envelope" | "model" | "reasoning_effort" | "tools" | "members" | "stream_options";
+/** A body-gate refusal. The message is the historic one; `check` names the failed check. */
+export declare class GrokBrokerProxyRequestRejection extends Error {
+    readonly check: GrokBrokerProxyRejectionCheck;
+    constructor(check: GrokBrokerProxyRejectionCheck);
+}
 export type GrokBrokerProxyInput = Readonly<{
     method: string;
     pathname: string;
@@ -8,10 +18,12 @@ export type GrokBrokerProxyInput = Readonly<{
     agentId?: string;
     turnId?: string;
 }>;
+/** `compaction` marks a normalized auto-compaction summary request: its answer is a summary, never the turn's final reply. */
 export type GrokBrokerUpstreamRequest = Readonly<{
     url: "https://cli-chat-proxy.grok.com/v1/chat/completions";
     headers: Readonly<Record<string, string>>;
     body: Uint8Array;
+    compaction?: true;
 }>;
 /**
  * Authorizes one worker request and rebuilds it for the provider.
@@ -24,7 +36,24 @@ export type GrokBrokerUpstreamRequest = Readonly<{
  * - the offered tool names are exactly the lean visible set. Grok 1.0.34 turns
  *   an unmappable `--tools` entry into its full 19-tool set, and its per-turn
  *   `session_title` request carries a single forced tool; both are refused.
+ *
+ * One other shape is admitted, and only by normalizing it into the lean one:
+ * Grok 1.0.34's auto-compaction summary request ({@link normalizeGrokCompactionRequest}).
  */
 export declare function authorizeGrokBrokerProxyRequest(input: GrokBrokerProxyInput, capabilities: EngineBrokerCapabilities, bearer: string, policy?: GrokBrokerModelPolicy): GrokBrokerUpstreamRequest;
+/**
+ * Rewrites, in place, exactly the captured compaction shape into the lean
+ * worker shape, and reports whether it did. The two extra members are each
+ * the provider's default value (`tool_choice: "auto"` with tools offered,
+ * `temperature: 1`), so removing them changes nothing the model is asked; the
+ * missing effort is set to the declared one, so the request cannot fall back
+ * to a provider default effort. Every other check — model, tools, stream
+ * options — then runs on the result exactly as for any worker request, and
+ * the forwarded body is indistinguishable from an ordinary lean request: the
+ * spend envelope is unchanged. Any other value of either member (a forced
+ * `tool_choice`, another temperature) or any other member set is left as is,
+ * and refused by the ordinary checks.
+ */
+export declare function normalizeGrokCompactionRequest(parsed: Record<string, unknown>, reasoningEffort: string): boolean;
 export declare function exactLeanTools(tools: unknown): boolean;
 //# sourceMappingURL=grokBrokerProxyRequest.d.ts.map

package/dist/runtime/grokBrokerProxyRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerProxyRequest.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyRequest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGtI,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9L,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,qDAAqD,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAE9K;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,qBAAwD,GAAG,yBAAyB,CAmChO;AASD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAStD"}
+{"version":3,"file":"grokBrokerProxyRequest.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyRequest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAItI;;;GAGG;AACH,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,gBAAgB,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,kBAAkB,GAAG,OAAO,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAExM,4FAA4F;AAC5F,qBAAa,+BAAgC,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,6BAA6B;gBAApC,KAAK,EAAE,6BAA6B;CAC1D;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9L,8HAA8H;AAC9H,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,qDAAqD,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAEjM;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,qBAAwD,GAAG,yBAAyB,CAwChO;AAcD;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAOhH;AASD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAStD"}

package/dist/runtime/grokBrokerProxyRequest.js

@@ -2,6 +2,15 @@ import { GROK_ENGINE_BROKER } from "../contracts/runtimeContractManifest.js";
 import { GROK_WORKER_VISIBLE_TOOLS } from "../contracts/grokWorkerContract.js";
 import { DEFAULT_GROK_BROKER_MODEL_POLICY, parseGrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
 const MAX_BODY = 2 * 1024 * 1024;
+/** A body-gate refusal. The message is the historic one; `check` names the failed check. */
+export class GrokBrokerProxyRequestRejection extends Error {
+    check;
+    constructor(check) {
+        super("broker proxy request rejected");
+        this.check = check;
+    }
+}
+function reject(check) { throw new GrokBrokerProxyRequestRejection(check); }
 /**
  * Authorizes one worker request and rebuilds it for the provider.
  *
@@ -13,23 +22,28 @@ const MAX_BODY = 2 * 1024 * 1024;
  * - the offered tool names are exactly the lean visible set. Grok 1.0.34 turns
  *   an unmappable `--tools` entry into its full 19-tool set, and its per-turn
  *   `session_title` request carries a single forced tool; both are refused.
+ *
+ * One other shape is admitted, and only by normalizing it into the lean one:
+ * Grok 1.0.34's auto-compaction summary request ({@link normalizeGrokCompactionRequest}).
  */
 export function authorizeGrokBrokerProxyRequest(input, capabilities, bearer, policy = DEFAULT_GROK_BROKER_MODEL_POLICY) {
     const declared = parseGrokBrokerModelPolicy(policy);
-    if (input.method !== "POST" || input.pathname !== "/v1/chat/completions" || input.body.byteLength < 2 || input.body.byteLength > MAX_BODY)
-        throw new Error("broker proxy request rejected");
+    if (input.method !== "POST" || input.pathname !== "/v1/chat/completions")
+        reject("route");
+    if (input.body.byteLength < 2 || input.body.byteLength > MAX_BODY)
+        reject("body_size");
     const authorization = input.headers.authorization;
     const match = authorization?.match(/^Bearer ([A-Za-z0-9_-]{40,})$/u);
     if (match === null || match === undefined)
-        throw new Error("broker proxy request rejected");
+        return reject("bearer");
     const scope = capabilities.authorizeToken(match[1]);
     if (scope === undefined || (input.agentId !== undefined && scope.agentId !== input.agentId) || (input.turnId !== undefined && scope.turnId !== input.turnId))
-        throw new Error("broker proxy request rejected");
+        reject("scope");
     if (!bearer || /[\r\n]/u.test(bearer))
         throw new Error("broker credential authority unavailable");
     const clientVersion = input.headers["x-grok-client-version"];
     if (clientVersion !== GROK_ENGINE_BROKER.grokCliVersion)
-        throw new Error("broker proxy request rejected");
+        reject("client_version");
     let parsed;
     // `__proto__` is refused at any depth: JSON.parse makes it an ordinary own
     // member, but an upstream JavaScript parser may treat it as a prototype.
@@ -41,16 +55,21 @@ export function authorizeGrokBrokerProxyRequest(input, capabilities, bearer, pol
         });
     }
     catch {
-        throw new Error("broker proxy request rejected");
+        return reject("json");
     }
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed) || parsed.stream !== true || !Array.isArray(parsed.messages))
-        throw new Error("broker proxy request rejected");
-    if (parsed.model !== declared.model || parsed.reasoning_effort !== declared.reasoningEffort)
-        throw new Error("broker proxy request rejected");
+        reject("envelope");
+    const compaction = normalizeGrokCompactionRequest(parsed, declared.reasoningEffort);
+    if (parsed.model !== declared.model)
+        reject("model");
+    if (parsed.reasoning_effort !== declared.reasoningEffort)
+        reject("reasoning_effort");
     if (!exactLeanTools(parsed.tools))
-        throw new Error("broker proxy request rejected");
-    if (Object.keys(parsed).some((key) => !LEAN_BODY_MEMBERS.has(key)) || !validStreamOptions(parsed.stream_options))
-        throw new Error("broker proxy request rejected");
+        reject("tools");
+    if (Object.keys(parsed).some((key) => !LEAN_BODY_MEMBERS.has(key)))
+        reject("members");
+    if (!validStreamOptions(parsed.stream_options))
+        reject("stream_options");
     // Keep origin/main's production handling: UTF-8 replacement decoding, then
     // serialize the validated object (including last-member-wins duplicates).
     // Only a clocked turn takes the stricter date rewrite before this gate.
@@ -61,9 +80,45 @@ export function authorizeGrokBrokerProxyRequest(input, capabilities, bearer, pol
             "x-xai-token-auth": "xai-grok-cli", "x-grok-model-override": declared.model,
             "x-grok-client-version": clientVersion, "x-grok-client-identifier": "grok-shell"
         },
-        body: Buffer.from(JSON.stringify(parsed))
+        body: Buffer.from(JSON.stringify(parsed)),
+        ...(compaction ? { compaction: true } : {})
     };
 }
+/**
+ * Top-level members of Grok 1.0.34's auto-compaction summary request (live stub
+ * capture against the pinned binary in the training image, 2026-10-21). When a
+ * session nears the model's `context_window`, Grok asks the same model for a
+ * summary — single-pass, or a second "two-pass" request — and sends it with
+ * the lean tool set, `tool_choice: "auto"` and `temperature: 1`, and *without*
+ * `reasoning_effort`. Refusing it does not stop the session: Grok gives up on
+ * compaction and carries the whole history forward, so every refusal was a
+ * wasted round trip and the context kept growing.
+ */
+const COMPACTION_BODY_MEMBERS = new Set(["messages", "model", "stream", "stream_options", "temperature", "tool_choice", "tools"]);
+/**
+ * Rewrites, in place, exactly the captured compaction shape into the lean
+ * worker shape, and reports whether it did. The two extra members are each
+ * the provider's default value (`tool_choice: "auto"` with tools offered,
+ * `temperature: 1`), so removing them changes nothing the model is asked; the
+ * missing effort is set to the declared one, so the request cannot fall back
+ * to a provider default effort. Every other check — model, tools, stream
+ * options — then runs on the result exactly as for any worker request, and
+ * the forwarded body is indistinguishable from an ordinary lean request: the
+ * spend envelope is unchanged. Any other value of either member (a forced
+ * `tool_choice`, another temperature) or any other member set is left as is,
+ * and refused by the ordinary checks.
+ */
+export function normalizeGrokCompactionRequest(parsed, reasoningEffort) {
+    const keys = Object.keys(parsed);
+    if (keys.length !== COMPACTION_BODY_MEMBERS.size || keys.some((key) => !COMPACTION_BODY_MEMBERS.has(key)))
+        return false;
+    if (parsed.temperature !== 1 || parsed.tool_choice !== "auto")
+        return false;
+    delete parsed.temperature;
+    delete parsed.tool_choice;
+    parsed.reasoning_effort = reasoningEffort;
+    return true;
+}
 /** Top-level members of a Grok 1.0.34 lean worker chat-completions body (live stub capture). */
 const LEAN_BODY_MEMBERS = new Set(["messages", "model", "reasoning_effort", "stream", "stream_options", "tools"]);
 /** Members of each lean tool `function` entry (live stub capture). */

package/dist/runtime/grokBrokerTurnMeter.d.ts

@@ -83,8 +83,13 @@ export declare class GrokBrokerTurnMeter {
     private final;
     private activityAt;
     constructor(limits: EngineBrokerTurnLimits, onLimit?: (reason: Exclude<EngineBrokerLimitReason, "none">) => void, now?: () => number);
-    /** Returns the request index and its upstream abort signal when admitted, the limit that refused it, or `busy` while another request is in flight. */
-    admit(): Readonly<{
+    /**
+     * Returns the request index and its upstream abort signal when admitted, the limit that refused it, or `busy` while another request is in flight.
+     * `keepFinal` admits a request that cannot replace the answer (a compaction summary), so a final reply already recorded survives it.
+     */
+    admit(options?: Readonly<{
+        keepFinal?: boolean;
+    }>): Readonly<{
         index: number;
         signal: AbortSignal;
     } | {

package/dist/runtime/grokBrokerTurnMeter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerTurnMeter.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerTurnMeter.ts"],"names":[],"mappings":"AACA,OAAO,EAA4B,KAAK,uBAAuB,EAAE,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAElK;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxK,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,uBAAuB,CAAC;IAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAA;CAAE,CAAC,CAAC;AAC5O,wHAAwH;AACxH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEzF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,OAAO,CAAC;AACnD,yGAAyG;AACzG,eAAO,MAAM,iBAAiB,GAAI,OAAO,qBAAqB,KAAG,MAC4B,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBAAa,mBAAmB;IAQlB,QAAQ,CAAC,MAAM,EAAE,sBAAsB;IAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAgF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAPjL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiI;IACzJ,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA6D;IAC7E,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,UAAU,CAAS;gBACN,MAAM,EAAE,sBAAsB,EAAmB,OAAO,GAAE,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,KAAK,IAAsB,EAAmB,GAAG,GAAE,MAAM,MAAiB;IAK1M,sJAAsJ;IACtJ,KAAK,IAAI,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC;IAgBlI;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAa/I,wEAAwE;IACxE,UAAU,IAAI,oBAAoB,GAAG,SAAS;IAC9C,sDAAsD;IACtD,IAAI,IAAI,OAAO;IACf,0FAA0F;IAC1F,cAAc,IAAI,MAAM;IAExB,mFAAmF;IACnF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,IAAI;IAO5D,8FAA8F;IAC9F,aAAa,IAAI,IAAI;IAErB,QAAQ,IAAI,2BAA2B;CAIxC;AAID,+GAA+G;AAC/G,eAAO,MAAM,wBAAwB,GAAI,cAAc,MAAM,KAAG,qBAG/D,CAAC;AAMF;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAU3H;AA0BD,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAClD,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAGtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CA2B3H;AAED,oGAAoG;AACpG,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAkBzG;AAED,sIAAsI;AACtI,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAA6B,GAAG,MAAM,CAQ/F"}
+{"version":3,"file":"grokBrokerTurnMeter.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerTurnMeter.ts"],"names":[],"mappings":"AACA,OAAO,EAA4B,KAAK,uBAAuB,EAAE,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAElK;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxK,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,uBAAuB,CAAC;IAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAA;CAAE,CAAC,CAAC;AAC5O,wHAAwH;AACxH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEzF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,OAAO,CAAC;AACnD,yGAAyG;AACzG,eAAO,MAAM,iBAAiB,GAAI,OAAO,qBAAqB,KAAG,MAC4B,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBAAa,mBAAmB;IAQlB,QAAQ,CAAC,MAAM,EAAE,sBAAsB;IAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAgF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAPjL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiI;IACzJ,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA6D;IAC7E,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,UAAU,CAAS;gBACN,MAAM,EAAE,sBAAsB,EAAmB,OAAO,GAAE,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,KAAK,IAAsB,EAAmB,GAAG,GAAE,MAAM,MAAiB;IAK1M;;;OAGG;IACH,KAAK,CAAC,OAAO,GAAE,QAAQ,CAAC;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAM,GAAG,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC;IAiBjL;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAa/I,wEAAwE;IACxE,UAAU,IAAI,oBAAoB,GAAG,SAAS;IAC9C,sDAAsD;IACtD,IAAI,IAAI,OAAO;IACf,0FAA0F;IAC1F,cAAc,IAAI,MAAM;IAExB,mFAAmF;IACnF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,IAAI;IAO5D,8FAA8F;IAC9F,aAAa,IAAI,IAAI;IAErB,QAAQ,IAAI,2BAA2B;CAIxC;AAID,+GAA+G;AAC/G,eAAO,MAAM,wBAAwB,GAAI,cAAc,MAAM,KAAG,qBAG/D,CAAC;AAMF;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAU3H;AA0BD,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAClD,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAGtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CA2B3H;AAED,oGAAoG;AACpG,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAkBzG;AAED,sIAAsI;AACtI,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAA6B,GAAG,MAAM,CAQ/F"}

package/dist/runtime/grokBrokerTurnMeter.js

@@ -63,8 +63,11 @@ export class GrokBrokerTurnMeter {
         this.startedAt = now();
         this.activityAt = this.startedAt;
     }
-    /** Returns the request index and its upstream abort signal when admitted, the limit that refused it, or `busy` while another request is in flight. */
-    admit() {
+    /**
+     * Returns the request index and its upstream abort signal when admitted, the limit that refused it, or `busy` while another request is in flight.
+     * `keepFinal` admits a request that cannot replace the answer (a compaction summary), so a final reply already recorded survives it.
+     */
+    admit(options = {}) {
         if (this.reason === "none") {
             if (this.now() - this.startedAt >= this.limits.timeoutMs)
                 this.trip("timeout");
@@ -78,8 +81,9 @@ export class GrokBrokerTurnMeter {
         if (this.inFlight !== undefined)
             return { busy: true };
         this.timings.push({ startedAt: new Date(this.now()).toISOString() });
-        // A new request means the previous answer was not the last one.
-        this.final = undefined;
+        // A new sampling request means the previous answer was not the last one.
+        if (options.keepFinal !== true)
+            this.final = undefined;
         this.activityAt = this.now();
         const controller = new AbortController();
         this.inFlight = { index: this.timings.length - 1, controller };

package/dist/runtime/productionAgentTools.js

@@ -226,7 +226,7 @@ function moltnetTool(agent, wakeContext) {
 }
 async function connect(agent, server) {
     taskClockChildEnvironment(server.env);
-    const client = new Client({ name: "daimon-production", version: "0.2.2" });
+    const client = new Client({ name: "daimon-production", version: "0.2.3" });
     const headers = server.authSecretEnv === undefined ? {} : { authorization: `Bearer ${requiredSecret(server.authSecretEnv)}` };
     const transport = server.transport === "stdio"
         ? new StdioClientTransport({ command: server.command, args: [...server.args], env: stringEnvironment(readyTaskClockEnvironment({ ...server.env, ...cliChildEnvironment([], agent.runtimeHomePath, { executablePath: server.command }) })) })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noopolis/daimon",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Noopolis native per-agent runtime harness built on Pi.",
   "license": "MIT",
   "type": "module",