@noopolis/daimon 0.2.2 → 0.2.4

package/dist/runtime/grokBrokerProxy.d.ts

@@ -64,6 +64,13 @@ export declare function createGrokBrokerProxyHandler(authority: GrokBrokerCreden
  */
 export declare class GrokBrokerProxyRefusal extends Error {
     readonly reason: string;
-    constructor(reason: string);
+    readonly check?: string | undefined;
+    readonly detail?: string | undefined;
+    /**
+     * `check` names which body-gate check failed and `detail` is the refused
+     * body's content-free shape ({@link grokBrokerProxyBodyShape}); both are for
+     * the broker's stderr line, and `check` also rides the 400 body.
+     */
+    constructor(reason: string, check?: string | undefined, detail?: string | undefined);
 }
 //# sourceMappingURL=grokBrokerProxy.d.ts.map

package/dist/runtime/grokBrokerProxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerProxy.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAExF,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAIpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAE,MAAM,6BAA6B,CAAC;AAE9E,OAAO,EAA2E,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG7I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,WAAW,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,qBAAqB,CAAC,CAAC,mBAAmB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,CAAC,mBAAmB,CAAC,EAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AACjQ,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,+BAA+B,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC,CAAC;AAE3N;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,UAAU,SAAS,EACrF,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;;;mCAoC5B,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;GA5B7D;AAED,iFAAiF;AACjF,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;mCAc9F,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;EAI7D;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM;gBAAd,MAAM,EAAE,MAAM;CACpC"}
+{"version":3,"file":"grokBrokerProxy.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAExF,OAAO,EAAgB,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAIpF,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACtI,OAAO,EAAE,+BAA+B,EAAmC,MAAM,6BAA6B,CAAC;AAG/G,OAAO,EAA2E,KAAK,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG7I,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAkC,KAAK,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5G,2FAA2F;AAC3F,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,MAAM,6BAA6B,GAAG,QAAQ,CAAC;IAAE,WAAW,CAAC,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,qBAAqB,CAAC,CAAC,mBAAmB,EAAC,MAAM,GAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,CAAC,mBAAmB,CAAC,EAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,CAAC,IAAI,OAAO,CAAA;CAAE,CAAC,CAAC;AACjQ,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,+BAA+B,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC,CAAC;AAE3N;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,UAAU,SAAS,EACrF,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;;;mCAoC5B,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;GA5B7D;AAED,iFAAiF;AACjF,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,6BAA6B,EAAE,QAAQ,GAAE,kBAAoC,EACxF,MAAM,GAAE,qBAAwD,EAAE,MAAM,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,EAAE,mBAAmB;;mCAc9F,MAAM,SAAS,MAAM,OAAO,CAAC,IAAI,CAAC;iCACpC,MAAM;yBACd,MAAM,QAAQ,mBAAmB;uBAMnC,MAAM;qBACR,eAAe,YAAY,cAAc;EAI7D;AAED;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;IAMnC,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;IALtF;;;;OAIG;gBACkB,MAAM,EAAE,MAAM,EAAW,KAAK,CAAC,EAAE,MAAM,YAAA,EAAW,MAAM,CAAC,EAAE,MAAM,YAAA;CACvF"}

package/dist/runtime/grokBrokerProxy.js

@@ -6,7 +6,8 @@ import { CLI_ENGINE_MAX_DIAGNOSTIC_BYTES } from "../pi/cliChildOutput.js";
 import { EngineBrokerCapabilities } from "./engineBrokerCapabilities.js";
 import { ENGINE_BROKER_AUTH_STALE } from "./engineBrokerProtocol.js";
 import { DEFAULT_GROK_BROKER_MODEL_POLICY, parseGrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
-import { authorizeGrokBrokerProxyRequest } from "./grokBrokerProxyRequest.js";
+import { authorizeGrokBrokerProxyRequest, GrokBrokerProxyRequestRejection } from "./grokBrokerProxyRequest.js";
+import { formatGrokBrokerProxyBodyShape, grokBrokerProxyBodyShape } from "./grokBrokerProxyBodyShape.js";
 import { GROK_SESSION_TITLE_SINK_KEY } from "./grokBrokerWorkerConfig.js";
 import { parseGrokFinalReply, parseGrokResponseToolNames, parseGrokUpstreamUsage } from "./grokBrokerTurnMeter.js";
 import { GROK_ENGINE_BROKER } from "../contracts/runtimeContractManifest.js";
@@ -77,9 +78,18 @@ export function createGrokBrokerProxyHandler(authority, upstream = defaultUpstre
  */
 export class GrokBrokerProxyRefusal extends Error {
     reason;
-    constructor(reason) {
+    check;
+    detail;
+    /**
+     * `check` names which body-gate check failed and `detail` is the refused
+     * body's content-free shape ({@link grokBrokerProxyBodyShape}); both are for
+     * the broker's stderr line, and `check` also rides the 400 body.
+     */
+    constructor(reason, check, detail) {
         super(`grok broker proxy refused: ${reason}`);
         this.reason = reason;
+        this.check = check;
+        this.detail = detail;
     }
 }
 async function serve(request, response, authority, upstream, capabilities, guards, turns, fallback, grants) {
@@ -137,7 +147,7 @@ async function serve(request, response, authority, upstream, capabilities, guard
         token = "";
         // The spend gate runs after the body is proven a real lean worker request
         // (a refused session-title body never counts) and before any upstream call.
-        const admission = turn.meter.admit();
+        const admission = turn.meter.admit({ keepFinal: prepared.compaction === true });
         if ("refused" in admission) {
             response.writeHead(429, { "content-type": "application/json", "cache-control": "no-store" });
             response.end(JSON.stringify({ error: "turn limit reached", limit: admission.refused }));
@@ -167,8 +177,9 @@ async function serve(request, response, authority, upstream, capabilities, guard
         // A successful answer that called nothing and stopped is the turn's final
         // reply: the broker ends a worker that finished but did not exit on it
         // (`grokEngineBrokerTurnEnd.ts`), and reports it when the launcher refused
-        // the worker's stdout. Observation only, exactly like the tool names.
-        settle?.(usageOrEstimate(result.body, result.headers["content-type"]), toolCallsOrNothing(result.body, result.headers["content-type"]), result.status === 200 ? finalReplyOrNothing(result.body, result.headers["content-type"]) : undefined);
+        // the worker's stdout. Observation only, exactly like the tool names. A
+        // compaction summary also calls nothing and stops, and is never the reply.
+        settle?.(usageOrEstimate(result.body, result.headers["content-type"]), toolCallsOrNothing(result.body, result.headers["content-type"]), result.status === 200 && prepared.compaction !== true ? finalReplyOrNothing(result.body, result.headers["content-type"]) : undefined);
         response.writeHead(result.status, { "content-type": result.headers["content-type"] ?? "application/json", "cache-control": "no-store" });
         response.end(result.body);
     }
@@ -191,7 +202,8 @@ async function serve(request, response, authority, upstream, capabilities, guard
         // A named refusal is its own account; anything else used to reach the log as
         // the bare word `broker_unavailable`, which names nothing — so it carries the
         // fault's own class and message, and nothing else, beside it.
-        const named = refused ? refusal : `${refusal} (${brokerFaultCause(error, secrets)})`;
+        const named = !refused ? `${refusal} (${brokerFaultCause(error, secrets)})`
+            : error instanceof GrokBrokerProxyRefusal && error.check !== undefined ? `${refusal} check=${error.check}${error.detail === undefined ? "" : ` ${error.detail}`}` : refusal;
         if (!titleSink && !expectedWorkerProbe(request))
             process.stderr.write(`[grok-proxy] refused: ${named}\n`);
         // Grok's own session-title call is refused by design, and keeps the transient
@@ -206,7 +218,7 @@ async function serve(request, response, authority, upstream, capabilities, guard
         }
         if (refused) {
             response.writeHead(400, { "content-type": "application/json", "cache-control": "no-store" });
-            response.end(JSON.stringify({ error: "broker refused this request", reason: refusal }));
+            response.end(JSON.stringify({ error: "broker refused this request", reason: refusal, ...(error instanceof GrokBrokerProxyRefusal && error.check !== undefined ? { check: error.check } : {}) }));
             return;
         }
         response.writeHead(503, { "content-type": "application/json", "cache-control": "no-store" });
@@ -307,13 +319,19 @@ const finalReplyOrNothing = (body, contentType) => {
         return undefined;
     }
 };
-/** The body gate, refused non-retryably: a rejected body is a policy miss, never a transient fault. */
+/**
+ * The body gate, refused non-retryably: a rejected body is a policy miss, never
+ * a transient fault. The refusal names the failed check and the body's
+ * content-free shape, because a bare `request_body_rejected` sent a live
+ * training pilot to a stub harness to learn which of a dozen checks fired.
+ */
 function authorizeRequestOrRefuse(...args) {
     try {
         return authorizeGrokBrokerProxyRequest(...args);
     }
-    catch {
-        throw new GrokBrokerProxyRefusal("request_body_rejected");
+    catch (error) {
+        const check = error instanceof GrokBrokerProxyRequestRejection ? error.check : "credential";
+        throw new GrokBrokerProxyRefusal("request_body_rejected", check, formatGrokBrokerProxyBodyShape(grokBrokerProxyBodyShape(args[0].body)));
     }
 }
 async function readBody(request) { const chunks = []; let bytes = 0; for await (const chunk of request) {

package/dist/runtime/grokBrokerProxyBodyShape.d.ts

@@ -0,0 +1,24 @@
+/**
+ * A content-free description of one refused worker body, for the broker's own
+ * stderr: byte length, top-level member names, offered tool names, message
+ * count and roles, and `tool_choice`. Never a message, a parameter schema, a
+ * value of any other member, a header or a token.
+ *
+ * Every name comes from a body the worker wrote, so each is admitted only as a
+ * plain short identifier (anything else is `<invalid>`) and every list is
+ * bounded with a `<truncated>` last entry. A body that is not a JSON object
+ * reports its byte length alone.
+ */
+export type GrokBrokerProxyBodyShape = Readonly<{
+    bytes: number;
+    keys?: readonly string[];
+    tools?: readonly string[] | "absent" | "invalid";
+    messages?: number | "invalid";
+    roles?: readonly string[];
+    tool_choice?: string;
+}>;
+export declare const GROK_PROXY_BODY_SHAPE_LIST_MAX = 32;
+export declare function grokBrokerProxyBodyShape(body: Uint8Array): GrokBrokerProxyBodyShape;
+/** One line, `key=value` pairs, for the `[grok-proxy] refused:` log. */
+export declare const formatGrokBrokerProxyBodyShape: (shape: GrokBrokerProxyBodyShape) => string;
+//# sourceMappingURL=grokBrokerProxyBodyShape.d.ts.map

package/dist/runtime/grokBrokerProxyBodyShape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grokBrokerProxyBodyShape.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyBodyShape.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAGH,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAqBjD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,UAAU,GAAG,wBAAwB,CAmBnF;AAED,wEAAwE;AACxE,eAAO,MAAM,8BAA8B,GAAI,OAAO,wBAAwB,KAAG,MAOtE,CAAC"}

package/dist/runtime/grokBrokerProxyBodyShape.js

@@ -0,0 +1,60 @@
+const NAME = /^[A-Za-z_][A-Za-z0-9_.-]{0,63}$/u;
+export const GROK_PROXY_BODY_SHAPE_LIST_MAX = 32;
+const safeName = (value) => typeof value === "string" && NAME.test(value) ? value : "<invalid>";
+const bounded = (values) => values.length <= GROK_PROXY_BODY_SHAPE_LIST_MAX ? values : [...values.slice(0, GROK_PROXY_BODY_SHAPE_LIST_MAX - 1), "<truncated>"];
+const isObject = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+/** Roles in order, with consecutive repeats collapsed to `role*n` so a long history stays short. */
+const roleRuns = (messages) => {
+    const runs = [];
+    let last;
+    let count = 0;
+    const flush = () => { if (last !== undefined)
+        runs.push(count > 1 ? `${last}*${count}` : last); };
+    for (const message of messages) {
+        const role = isObject(message) ? safeName(message.role) : "<invalid>";
+        if (role === last) {
+            count++;
+            continue;
+        }
+        flush();
+        last = role;
+        count = 1;
+    }
+    flush();
+    return bounded(runs);
+};
+export function grokBrokerProxyBodyShape(body) {
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder("utf-8", { fatal: false }).decode(body));
+    }
+    catch {
+        return { bytes: body.byteLength };
+    }
+    if (!isObject(parsed))
+        return { bytes: body.byteLength };
+    const tools = parsed.tools === undefined ? "absent" : Array.isArray(parsed.tools)
+        ? bounded(parsed.tools.map((tool) => isObject(tool) && isObject(tool.function) ? safeName(tool.function.name) : "<invalid>"))
+        : "invalid";
+    const choice = parsed.tool_choice;
+    return {
+        bytes: body.byteLength,
+        keys: bounded(Object.keys(parsed).map(safeName).sort()),
+        tools,
+        messages: Array.isArray(parsed.messages) ? parsed.messages.length : "invalid",
+        ...(Array.isArray(parsed.messages) ? { roles: roleRuns(parsed.messages) } : {}),
+        ...(choice === undefined ? {} : {
+            tool_choice: typeof choice === "string" ? safeName(choice)
+                : isObject(choice) ? `object:${isObject(choice.function) ? safeName(choice.function.name) : safeName(choice.type)}` : "<invalid>"
+        })
+    };
+}
+/** One line, `key=value` pairs, for the `[grok-proxy] refused:` log. */
+export const formatGrokBrokerProxyBodyShape = (shape) => [
+    `bytes=${shape.bytes}`,
+    ...(shape.keys === undefined ? [] : [`keys=${shape.keys.join(",")}`]),
+    ...(shape.tools === undefined ? [] : [`tools=${Array.isArray(shape.tools) ? shape.tools.join(",") : shape.tools}`]),
+    ...(shape.messages === undefined ? [] : [`messages=${shape.messages}`]),
+    ...(shape.roles === undefined ? [] : [`roles=${shape.roles.join(",")}`]),
+    ...(shape.tool_choice === undefined ? [] : [`tool_choice=${shape.tool_choice}`])
+].join(" ");

package/dist/runtime/grokBrokerProxyRequest.d.ts

@@ -1,5 +1,15 @@
 import type { EngineBrokerCapabilities } from "./engineBrokerCapabilities.js";
 import { type GrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
+/**
+ * Which body-gate check refused a request: a closed, content-free code, so a
+ * refusal on the broker's stderr names its cause without a stub harness.
+ */
+export type GrokBrokerProxyRejectionCheck = "route" | "body_size" | "bearer" | "scope" | "client_version" | "json" | "envelope" | "model" | "reasoning_effort" | "tools" | "members" | "stream_options";
+/** A body-gate refusal. The message is the historic one; `check` names the failed check. */
+export declare class GrokBrokerProxyRequestRejection extends Error {
+    readonly check: GrokBrokerProxyRejectionCheck;
+    constructor(check: GrokBrokerProxyRejectionCheck);
+}
 export type GrokBrokerProxyInput = Readonly<{
     method: string;
     pathname: string;
@@ -8,10 +18,12 @@ export type GrokBrokerProxyInput = Readonly<{
     agentId?: string;
     turnId?: string;
 }>;
+/** `compaction` marks a normalized auto-compaction summary request: its answer is a summary, never the turn's final reply. */
 export type GrokBrokerUpstreamRequest = Readonly<{
     url: "https://cli-chat-proxy.grok.com/v1/chat/completions";
     headers: Readonly<Record<string, string>>;
     body: Uint8Array;
+    compaction?: true;
 }>;
 /**
  * Authorizes one worker request and rebuilds it for the provider.
@@ -24,7 +36,24 @@ export type GrokBrokerUpstreamRequest = Readonly<{
  * - the offered tool names are exactly the lean visible set. Grok 1.0.34 turns
  *   an unmappable `--tools` entry into its full 19-tool set, and its per-turn
  *   `session_title` request carries a single forced tool; both are refused.
+ *
+ * One other shape is admitted, and only by normalizing it into the lean one:
+ * Grok 1.0.34's auto-compaction summary request ({@link normalizeGrokCompactionRequest}).
  */
 export declare function authorizeGrokBrokerProxyRequest(input: GrokBrokerProxyInput, capabilities: EngineBrokerCapabilities, bearer: string, policy?: GrokBrokerModelPolicy): GrokBrokerUpstreamRequest;
+/**
+ * Rewrites, in place, exactly the captured compaction shape into the lean
+ * worker shape, and reports whether it did. The two extra members are each
+ * the provider's default value (`tool_choice: "auto"` with tools offered,
+ * `temperature: 1`), so removing them changes nothing the model is asked; the
+ * missing effort is set to the declared one, so the request cannot fall back
+ * to a provider default effort. Every other check — model, tools, stream
+ * options — then runs on the result exactly as for any worker request, and
+ * the forwarded body is indistinguishable from an ordinary lean request: the
+ * spend envelope is unchanged. Any other value of either member (a forced
+ * `tool_choice`, another temperature) or any other member set is left as is,
+ * and refused by the ordinary checks.
+ */
+export declare function normalizeGrokCompactionRequest(parsed: Record<string, unknown>, reasoningEffort: string): boolean;
 export declare function exactLeanTools(tools: unknown): boolean;
 //# sourceMappingURL=grokBrokerProxyRequest.d.ts.map

package/dist/runtime/grokBrokerProxyRequest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerProxyRequest.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyRequest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAGtI,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9L,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,qDAAqD,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AAE9K;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,qBAAwD,GAAG,yBAAyB,CAmChO;AASD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAStD"}
+{"version":3,"file":"grokBrokerProxyRequest.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerProxyRequest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAgE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAItI;;;GAGG;AACH,MAAM,MAAM,6BAA6B,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,GAAG,OAAO,GAAG,gBAAgB,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,kBAAkB,GAAG,OAAO,GAAG,SAAS,GAAG,gBAAgB,CAAC;AAExM,4FAA4F;AAC5F,qBAAa,+BAAgC,SAAQ,KAAK;IAC5C,QAAQ,CAAC,KAAK,EAAE,6BAA6B;gBAApC,KAAK,EAAE,6BAA6B;CAC1D;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC9L,8HAA8H;AAC9H,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,qDAAqD,CAAC;IAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC,CAAC;AAEjM;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,qBAAwD,GAAG,yBAAyB,CAwChO;AAcD;;;;;;;;;;;;GAYG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAOhH;AASD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAStD"}

package/dist/runtime/grokBrokerProxyRequest.js

@@ -2,6 +2,15 @@ import { GROK_ENGINE_BROKER } from "../contracts/runtimeContractManifest.js";
 import { GROK_WORKER_VISIBLE_TOOLS } from "../contracts/grokWorkerContract.js";
 import { DEFAULT_GROK_BROKER_MODEL_POLICY, parseGrokBrokerModelPolicy } from "./grokBrokerModelPolicy.js";
 const MAX_BODY = 2 * 1024 * 1024;
+/** A body-gate refusal. The message is the historic one; `check` names the failed check. */
+export class GrokBrokerProxyRequestRejection extends Error {
+    check;
+    constructor(check) {
+        super("broker proxy request rejected");
+        this.check = check;
+    }
+}
+function reject(check) { throw new GrokBrokerProxyRequestRejection(check); }
 /**
  * Authorizes one worker request and rebuilds it for the provider.
  *
@@ -13,23 +22,28 @@ const MAX_BODY = 2 * 1024 * 1024;
  * - the offered tool names are exactly the lean visible set. Grok 1.0.34 turns
  *   an unmappable `--tools` entry into its full 19-tool set, and its per-turn
  *   `session_title` request carries a single forced tool; both are refused.
+ *
+ * One other shape is admitted, and only by normalizing it into the lean one:
+ * Grok 1.0.34's auto-compaction summary request ({@link normalizeGrokCompactionRequest}).
  */
 export function authorizeGrokBrokerProxyRequest(input, capabilities, bearer, policy = DEFAULT_GROK_BROKER_MODEL_POLICY) {
     const declared = parseGrokBrokerModelPolicy(policy);
-    if (input.method !== "POST" || input.pathname !== "/v1/chat/completions" || input.body.byteLength < 2 || input.body.byteLength > MAX_BODY)
-        throw new Error("broker proxy request rejected");
+    if (input.method !== "POST" || input.pathname !== "/v1/chat/completions")
+        reject("route");
+    if (input.body.byteLength < 2 || input.body.byteLength > MAX_BODY)
+        reject("body_size");
     const authorization = input.headers.authorization;
     const match = authorization?.match(/^Bearer ([A-Za-z0-9_-]{40,})$/u);
     if (match === null || match === undefined)
-        throw new Error("broker proxy request rejected");
+        return reject("bearer");
     const scope = capabilities.authorizeToken(match[1]);
     if (scope === undefined || (input.agentId !== undefined && scope.agentId !== input.agentId) || (input.turnId !== undefined && scope.turnId !== input.turnId))
-        throw new Error("broker proxy request rejected");
+        reject("scope");
     if (!bearer || /[\r\n]/u.test(bearer))
         throw new Error("broker credential authority unavailable");
     const clientVersion = input.headers["x-grok-client-version"];
     if (clientVersion !== GROK_ENGINE_BROKER.grokCliVersion)
-        throw new Error("broker proxy request rejected");
+        reject("client_version");
     let parsed;
     // `__proto__` is refused at any depth: JSON.parse makes it an ordinary own
     // member, but an upstream JavaScript parser may treat it as a prototype.
@@ -41,16 +55,21 @@ export function authorizeGrokBrokerProxyRequest(input, capabilities, bearer, pol
         });
     }
     catch {
-        throw new Error("broker proxy request rejected");
+        return reject("json");
     }
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed) || parsed.stream !== true || !Array.isArray(parsed.messages))
-        throw new Error("broker proxy request rejected");
-    if (parsed.model !== declared.model || parsed.reasoning_effort !== declared.reasoningEffort)
-        throw new Error("broker proxy request rejected");
+        reject("envelope");
+    const compaction = normalizeGrokCompactionRequest(parsed, declared.reasoningEffort);
+    if (parsed.model !== declared.model)
+        reject("model");
+    if (parsed.reasoning_effort !== declared.reasoningEffort)
+        reject("reasoning_effort");
     if (!exactLeanTools(parsed.tools))
-        throw new Error("broker proxy request rejected");
-    if (Object.keys(parsed).some((key) => !LEAN_BODY_MEMBERS.has(key)) || !validStreamOptions(parsed.stream_options))
-        throw new Error("broker proxy request rejected");
+        reject("tools");
+    if (Object.keys(parsed).some((key) => !LEAN_BODY_MEMBERS.has(key)))
+        reject("members");
+    if (!validStreamOptions(parsed.stream_options))
+        reject("stream_options");
     // Keep origin/main's production handling: UTF-8 replacement decoding, then
     // serialize the validated object (including last-member-wins duplicates).
     // Only a clocked turn takes the stricter date rewrite before this gate.
@@ -61,9 +80,45 @@ export function authorizeGrokBrokerProxyRequest(input, capabilities, bearer, pol
             "x-xai-token-auth": "xai-grok-cli", "x-grok-model-override": declared.model,
             "x-grok-client-version": clientVersion, "x-grok-client-identifier": "grok-shell"
         },
-        body: Buffer.from(JSON.stringify(parsed))
+        body: Buffer.from(JSON.stringify(parsed)),
+        ...(compaction ? { compaction: true } : {})
     };
 }
+/**
+ * Top-level members of Grok 1.0.34's auto-compaction summary request (live stub
+ * capture against the pinned binary in the training image, 2026-10-21). When a
+ * session nears the model's `context_window`, Grok asks the same model for a
+ * summary — single-pass, or a second "two-pass" request — and sends it with
+ * the lean tool set, `tool_choice: "auto"` and `temperature: 1`, and *without*
+ * `reasoning_effort`. Refusing it does not stop the session: Grok gives up on
+ * compaction and carries the whole history forward, so every refusal was a
+ * wasted round trip and the context kept growing.
+ */
+const COMPACTION_BODY_MEMBERS = new Set(["messages", "model", "stream", "stream_options", "temperature", "tool_choice", "tools"]);
+/**
+ * Rewrites, in place, exactly the captured compaction shape into the lean
+ * worker shape, and reports whether it did. The two extra members are each
+ * the provider's default value (`tool_choice: "auto"` with tools offered,
+ * `temperature: 1`), so removing them changes nothing the model is asked; the
+ * missing effort is set to the declared one, so the request cannot fall back
+ * to a provider default effort. Every other check — model, tools, stream
+ * options — then runs on the result exactly as for any worker request, and
+ * the forwarded body is indistinguishable from an ordinary lean request: the
+ * spend envelope is unchanged. Any other value of either member (a forced
+ * `tool_choice`, another temperature) or any other member set is left as is,
+ * and refused by the ordinary checks.
+ */
+export function normalizeGrokCompactionRequest(parsed, reasoningEffort) {
+    const keys = Object.keys(parsed);
+    if (keys.length !== COMPACTION_BODY_MEMBERS.size || keys.some((key) => !COMPACTION_BODY_MEMBERS.has(key)))
+        return false;
+    if (parsed.temperature !== 1 || parsed.tool_choice !== "auto")
+        return false;
+    delete parsed.temperature;
+    delete parsed.tool_choice;
+    parsed.reasoning_effort = reasoningEffort;
+    return true;
+}
 /** Top-level members of a Grok 1.0.34 lean worker chat-completions body (live stub capture). */
 const LEAN_BODY_MEMBERS = new Set(["messages", "model", "reasoning_effort", "stream", "stream_options", "tools"]);
 /** Members of each lean tool `function` entry (live stub capture). */

package/dist/runtime/grokBrokerTurnMeter.d.ts

@@ -83,8 +83,13 @@ export declare class GrokBrokerTurnMeter {
     private final;
     private activityAt;
     constructor(limits: EngineBrokerTurnLimits, onLimit?: (reason: Exclude<EngineBrokerLimitReason, "none">) => void, now?: () => number);
-    /** Returns the request index and its upstream abort signal when admitted, the limit that refused it, or `busy` while another request is in flight. */
-    admit(): Readonly<{
+    /**
+     * Returns the request index and its upstream abort signal when admitted, the limit that refused it, or `busy` while another request is in flight.
+     * `keepFinal` admits a request that cannot replace the answer (a compaction summary), so a final reply already recorded survives it.
+     */
+    admit(options?: Readonly<{
+        keepFinal?: boolean;
+    }>): Readonly<{
         index: number;
         signal: AbortSignal;
     } | {

package/dist/runtime/grokBrokerTurnMeter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokBrokerTurnMeter.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerTurnMeter.ts"],"names":[],"mappings":"AACA,OAAO,EAA4B,KAAK,uBAAuB,EAAE,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAElK;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxK,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,uBAAuB,CAAC;IAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAA;CAAE,CAAC,CAAC;AAC5O,wHAAwH;AACxH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEzF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,OAAO,CAAC;AACnD,yGAAyG;AACzG,eAAO,MAAM,iBAAiB,GAAI,OAAO,qBAAqB,KAAG,MAC4B,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBAAa,mBAAmB;IAQlB,QAAQ,CAAC,MAAM,EAAE,sBAAsB;IAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAgF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAPjL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiI;IACzJ,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA6D;IAC7E,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,UAAU,CAAS;gBACN,MAAM,EAAE,sBAAsB,EAAmB,OAAO,GAAE,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,KAAK,IAAsB,EAAmB,GAAG,GAAE,MAAM,MAAiB;IAK1M,sJAAsJ;IACtJ,KAAK,IAAI,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC;IAgBlI;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAa/I,wEAAwE;IACxE,UAAU,IAAI,oBAAoB,GAAG,SAAS;IAC9C,sDAAsD;IACtD,IAAI,IAAI,OAAO;IACf,0FAA0F;IAC1F,cAAc,IAAI,MAAM;IAExB,mFAAmF;IACnF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,IAAI;IAO5D,8FAA8F;IAC9F,aAAa,IAAI,IAAI;IAErB,QAAQ,IAAI,2BAA2B;CAIxC;AAID,+GAA+G;AAC/G,eAAO,MAAM,wBAAwB,GAAI,cAAc,MAAM,KAAG,qBAG/D,CAAC;AAMF;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAU3H;AA0BD,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAClD,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAGtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CA2B3H;AAED,oGAAoG;AACpG,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAkBzG;AAED,sIAAsI;AACtI,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAA6B,GAAG,MAAM,CAQ/F"}
+{"version":3,"file":"grokBrokerTurnMeter.d.ts","sourceRoot":"","sources":["../../src/runtime/grokBrokerTurnMeter.ts"],"names":[],"mappings":"AACA,OAAO,EAA4B,KAAK,uBAAuB,EAAE,KAAK,sBAAsB,EAAE,KAAK,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAElK;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC,CAAC;AACxK,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,uBAAuB,CAAC;IAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAA;CAAE,CAAC,CAAC;AAC5O,wHAAwH;AACxH,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEzF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,OAAO,CAAC;AACnD,yGAAyG;AACzG,eAAO,MAAM,iBAAiB,GAAI,OAAO,qBAAqB,KAAG,MAC4B,CAAC;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBAAa,mBAAmB;IAQlB,QAAQ,CAAC,MAAM,EAAE,sBAAsB;IAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;IAAgF,OAAO,CAAC,QAAQ,CAAC,GAAG;IAPjL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiI;IACzJ,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,QAAQ,CAA6D;IAC7E,OAAO,CAAC,KAAK,CAAmC;IAChD,OAAO,CAAC,UAAU,CAAS;gBACN,MAAM,EAAE,sBAAsB,EAAmB,OAAO,GAAE,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,KAAK,IAAsB,EAAmB,GAAG,GAAE,MAAM,MAAiB;IAK1M;;;OAGG;IACH,KAAK,CAAC,OAAO,GAAE,QAAQ,CAAC;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,CAAM,GAAG,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,IAAI,CAAA;KAAE,CAAC;IAiBjL;;;;;;;;;;;;;OAaG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI;IAa/I,wEAAwE;IACxE,UAAU,IAAI,oBAAoB,GAAG,SAAS;IAC9C,sDAAsD;IACtD,IAAI,IAAI,OAAO;IACf,0FAA0F;IAC1F,cAAc,IAAI,MAAM;IAExB,mFAAmF;IACnF,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,GAAG,IAAI;IAO5D,8FAA8F;IAC9F,aAAa,IAAI,IAAI;IAErB,QAAQ,IAAI,2BAA2B;CAIxC;AAID,+GAA+G;AAC/G,eAAO,MAAM,wBAAwB,GAAI,cAAc,MAAM,KAAG,qBAG/D,CAAC;AAMF;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,qBAAqB,GAAG,SAAS,CAU3H;AA0BD,uGAAuG;AACvG,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAClD,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAGtD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CA2B3H;AAED,oGAAoG;AACpG,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAkBzG;AAED,sIAAsI;AACtI,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAA6B,GAAG,MAAM,CAQ/F"}

package/dist/runtime/grokBrokerTurnMeter.js

@@ -63,8 +63,11 @@ export class GrokBrokerTurnMeter {
         this.startedAt = now();
         this.activityAt = this.startedAt;
     }
-    /** Returns the request index and its upstream abort signal when admitted, the limit that refused it, or `busy` while another request is in flight. */
-    admit() {
+    /**
+     * Returns the request index and its upstream abort signal when admitted, the limit that refused it, or `busy` while another request is in flight.
+     * `keepFinal` admits a request that cannot replace the answer (a compaction summary), so a final reply already recorded survives it.
+     */
+    admit(options = {}) {
         if (this.reason === "none") {
             if (this.now() - this.startedAt >= this.limits.timeoutMs)
                 this.trip("timeout");
@@ -78,8 +81,9 @@ export class GrokBrokerTurnMeter {
         if (this.inFlight !== undefined)
             return { busy: true };
         this.timings.push({ startedAt: new Date(this.now()).toISOString() });
-        // A new request means the previous answer was not the last one.
-        this.final = undefined;
+        // A new sampling request means the previous answer was not the last one.
+        if (options.keepFinal !== true)
+            this.final = undefined;
         this.activityAt = this.now();
         const controller = new AbortController();
         this.inFlight = { index: this.timings.length - 1, controller };

package/dist/runtime/grokEngineBrokerTurn.d.ts

@@ -58,6 +58,8 @@ export type GrokEngineBrokerTurnDependencies = Readonly<{
     runNative(input: NativeBrokerTurn, signal: AbortSignal): Promise<Readonly<NativeBrokerTurnResult>>;
     /** The worker the launcher started for this identity (`/proc` by default); only read when the broker ends a turn itself. */
     observeWorker?(workerUid: number): Promise<GrokWorkerProcess | undefined>;
+    /** Whether the worker identity has a live local tool process (default: `grokWorkerToolProcessLive` over `/proc`). */
+    observeToolProcess?(workerUid: number): Promise<boolean>;
     /** Overrides the turn-end grace and idle bounds (tests). */
     turnEnd?: GrokBrokerTurnEndTiming;
     /** Whether no live process holds the worker identity (`/proc` by default); polled, bounded, before an aborted turn is sealed. */

package/dist/runtime/grokEngineBrokerTurn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokEngineBrokerTurn.d.ts","sourceRoot":"","sources":["../../src/runtime/grokEngineBrokerTurn.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAEL,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,KAAK,sBAAsB,EACzE,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAA2B,KAAK,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAMhH,OAAO,EAEL,KAAK,8BAA8B,EAAE,KAAK,uBAAuB,EAClE,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAqD,KAAK,0BAA0B,EAAE,KAAK,8BAA8B,EAA8B,MAAM,iCAAiC,CAAC;AACtM,OAAO,EAA2B,KAAK,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACzJ,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAmE,KAAK,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAGvJ,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,EAAgK,KAAK,uBAAuB,EAAE,KAAK,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAClQ,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAG3E,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;CAC7E,CAAC,GAAG,0BAA0B,GAAG,sBAAsB,GAAG,8BAA8B,CAAC;AAC1F,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,kCAAkC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,8BAA8B,CAAC,mBAAmB,CAAC;gBANvE,IAAI,EAAE,OAAO,CAAC,uBAAuB,EAAE,eAAe,CAAC,EACvD,UAAU,CAAC,EAAE,sBAAsB,YAAA,EACnC,UAAU,CAAC,EAAE,0BAA0B,YAAA,EACvC,QAAQ,CAAC,EAAE,8BAA8B,YAAA,EACzC,UAAU,CAAC,EAAE,gBAAgB,YAAA,EAC7B,aAAa,CAAC,EAAE,kCAAkC,YAAA,EAClD,iBAAiB,CAAC,EAAE,8BAA8B,CAAC,mBAAmB,CAAC;CAEnF;AAED,+HAA+H;AAC/H,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,KAAK,EAAE,wBAAwB,CAAC;IAChC,KAAK,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,QAAQ,CAAC;YAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;YAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;QAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACrW,GAAG,EAAE,QAAQ,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,8BAA8B,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;IAC3Q,eAAe,IAAI,OAAO,CAAC;IAC3B,gBAAgB,CAAC,YAAY,EAAE,+BAA+B,GAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,aAAa,EAAE,uBAAuB,CAAA;KAAE,CAAC,CAAC,CAAC;IAC3J,cAAc,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC7C,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,eAAe,CAAC,IAAI,IAAI,CAAC;IACzB,SAAS,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACnG,4HAA4H;IAC5H,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC1E,4DAA4D;IAC5D,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAClC,iIAAiI;IACjI,mBAAmB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC,CAAC;AAKH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,gCAAgC,EAAE,YAAY,EAAE,+BAA+B,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,8BAA8B,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAyKtT"}
+{"version":3,"file":"grokEngineBrokerTurn.d.ts","sourceRoot":"","sources":["../../src/runtime/grokEngineBrokerTurn.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAEL,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,KAAK,sBAAsB,EACzE,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAA2B,KAAK,kCAAkC,EAAE,MAAM,8BAA8B,CAAC;AAMhH,OAAO,EAEL,KAAK,8BAA8B,EAAE,KAAK,uBAAuB,EAClE,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAqD,KAAK,0BAA0B,EAAE,KAAK,8BAA8B,EAA8B,MAAM,iCAAiC,CAAC;AACtM,OAAO,EAA2B,KAAK,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACzJ,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAmE,KAAK,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AAGvJ,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,EAAgK,KAAK,uBAAuB,EAAE,KAAK,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAClQ,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAI3E,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAC;CAC7E,CAAC,GAAG,0BAA0B,GAAG,sBAAsB,GAAG,8BAA8B,CAAC;AAC1F,qBAAa,uBAAwB,SAAQ,KAAK;IAE9C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,sBAAsB;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,0BAA0B;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,8BAA8B;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,kCAAkC;IAC3D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,8BAA8B,CAAC,mBAAmB,CAAC;gBANvE,IAAI,EAAE,OAAO,CAAC,uBAAuB,EAAE,eAAe,CAAC,EACvD,UAAU,CAAC,EAAE,sBAAsB,YAAA,EACnC,UAAU,CAAC,EAAE,0BAA0B,YAAA,EACvC,QAAQ,CAAC,EAAE,8BAA8B,YAAA,EACzC,UAAU,CAAC,EAAE,gBAAgB,YAAA,EAC7B,aAAa,CAAC,EAAE,kCAAkC,YAAA,EAClD,iBAAiB,CAAC,EAAE,8BAA8B,CAAC,mBAAmB,CAAC;CAEnF;AAED,+HAA+H;AAC/H,MAAM,MAAM,gCAAgC,GAAG,QAAQ,CAAC;IACtD,KAAK,EAAE,wBAAwB,CAAC;IAChC,KAAK,EAAE,QAAQ,CAAC;QAAE,YAAY,EAAE,QAAQ,CAAC;YAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;YAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAAC,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC;QAAC,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IACrW,GAAG,EAAE,QAAQ,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,8BAA8B,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;IAC3Q,eAAe,IAAI,OAAO,CAAC;IAC3B,gBAAgB,CAAC,YAAY,EAAE,+BAA+B,GAAG,OAAO,CAAC,QAAQ,CAAC;QAAE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QAAC,aAAa,EAAE,uBAAuB,CAAA;KAAE,CAAC,CAAC,CAAC;IAC3J,cAAc,CAAC,EAAE,OAAO,oBAAoB,CAAC;IAC7C,6EAA6E;IAC7E,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,6EAA6E;IAC7E,eAAe,CAAC,IAAI,IAAI,CAAC;IACzB,SAAS,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACnG,4HAA4H;IAC5H,aAAa,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAAC;IAC1E,qHAAqH;IACrH,kBAAkB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,4DAA4D;IAC5D,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAClC,iIAAiI;IACjI,mBAAmB,CAAC,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC,CAAC;AAKH;;;;;;;;;;;;;GAaG;AACH,wBAAsB,uBAAuB,CAAC,IAAI,EAAE,gCAAgC,EAAE,YAAY,EAAE,+BAA+B,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,8BAA8B,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA2KtT"}

package/dist/runtime/grokEngineBrokerTurn.js

@@ -14,6 +14,7 @@ import { finishBrokerTurnWithUsage } from "./grokEngineBrokerMetering.js";
 import { GrokBrokerTurnMeter } from "./grokBrokerTurnMeter.js";
 import { awaitGrokWorkerIdentityEmpty, findGrokWorkerProcess, GROK_WORKER_REAP_WAIT_MS, grokWorkerIdentityEmpty, watchGrokBrokerTurnEnd } from "./grokEngineBrokerTurnEnd.js";
 import { GrokWorkerAttestationFailure } from "./grokWorkerAttestation.js";
+import { grokWorkerToolProcessLive, grokWorkerToolProcessSampler } from "./grokWorkerToolProcess.js";
 export class EngineBrokerTurnFailure extends Error {
     code;
     diagnostic;
@@ -119,12 +120,14 @@ export async function runGrokEngineBrokerTurn(deps, registration, wakeId, prompt
         deps.proxy.registerTurn(turnId, { policy: registration.model, meter, clock });
         const capabilityTtlMs = engineBrokerCapabilityTtlMs(limits.timeoutMs);
         const providerCapability = deps.proxy.capabilities.issue(agentId, turnId, capabilityTtlMs), mcpCapability = deps.mcp.register(agentId, turnId, mcpEndpoint, capabilityTtlMs);
+        // A shell command Grok runs itself is work the proxy and facade never see.
+        const toolProcess = grokWorkerToolProcessSampler(() => (deps.observeToolProcess ?? grokWorkerToolProcessLive)(registration.workerUid));
         watchdog = watchGrokBrokerTurnEnd({
-            meter, activity: () => deps.mcp.activity?.(turnId), signal: controller.signal, ...(deps.turnEnd === undefined ? {} : { timing: deps.turnEnd }),
+            meter, activity: () => deps.mcp.activity?.(turnId), toolProcess: toolProcess.live, signal: controller.signal, ...(deps.turnEnd === undefined ? {} : { timing: deps.turnEnd }),
             // The worker is read once, as soon as it has made a request — long before
             // anything can end the turn and reap it — so a final reply is never left
             // without the worker that gave it.
-            onPoll: () => { if (worker === undefined && meter.snapshot().requests > 0)
+            onPoll: () => { toolProcess.poll(); if (worker === undefined && meter.snapshot().requests > 0)
                 worker = (deps.observeWorker ?? findGrokWorkerProcess)(registration.workerUid).catch(() => undefined); },
             onFinalReply: () => { worker ??= (deps.observeWorker ?? findGrokWorkerProcess)(registration.workerUid).catch(() => undefined); },
             // An idle stall is a deadline of its own: it trips the meter as a timeout, so it seals like one.

package/dist/runtime/grokEngineBrokerTurnEnd.d.ts

@@ -30,8 +30,12 @@ import type { GrokBrokerTurnMeter } from "./grokBrokerTurnMeter.js";
  * so a model that keeps going is never cut off. Independently, a turn with no
  * model request and no tool call in flight and no activity of either kind for
  * `idleMs` ends as `onEnd("idle")` — the backstop for a worker that stalls
- * without ever answering. Shell tools Grok runs itself are invisible here, so
- * the idle bound is minutes, not seconds.
+ * without ever answering. Shell tools Grok runs itself never reach the proxy
+ * or the facade, and Grok lets the model give one a timeout of up to ten
+ * hours, so a worker with a live tool process (`toolProcess`,
+ * `grokWorkerToolProcess.ts`) is working too: it is never idle while one runs,
+ * and the quiet clock restarts from the last poll that saw one. The idle bound
+ * stays minutes, not seconds, because that observation is a poll.
  */
 export type GrokBrokerTurnEndTiming = Readonly<{
     finalGraceMs: number;
@@ -45,6 +49,8 @@ export type GrokBrokerTurnEndReason = "final_reply" | "idle";
 export declare function watchGrokBrokerTurnEnd(input: Readonly<{
     meter: Pick<GrokBrokerTurnMeter, "finalReply" | "busy" | "lastActivityAt">;
     activity: () => EngineBrokerMcpActivity | undefined;
+    /** Whether the worker has a local tool process alive, as last observed; absent means never observed. */
+    toolProcess?: () => boolean;
     onFinalReply: () => void;
     /** Every poll, before any decision: the broker records the worker while it is certainly alive. */
     onPoll?: () => void;

package/dist/runtime/grokEngineBrokerTurnEnd.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grokEngineBrokerTurnEnd.d.ts","sourceRoot":"","sources":["../../src/runtime/grokEngineBrokerTurnEnd.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACzG,eAAO,MAAM,oBAAoB,EAAE,uBAAqG,CAAC;AACzI,qGAAqG;AACrG,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAAG,MAAM,CAAC;AAE7D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;IACrD,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,MAAM,GAAG,gBAAgB,CAAC,CAAC;IAC3E,QAAQ,EAAE,MAAM,uBAAuB,GAAG,SAAS,CAAC;IACpD,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,kGAAkG;IAClG,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,KAAK,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACjD,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC,GAAG,QAAQ,CAAC;IAAE,IAAI,IAAI,IAAI,CAAA;CAAE,CAAC,CAyB9B;AAED,oJAAoJ;AACpJ,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE9E;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAqBnH;AAED,2DAA2D;AAC3D,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAU,EAAE,eAAe,UAAQ,GACvD,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAA2B,EAAE,MAAM,SAAM,EAAE,QAAQ,SAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAarM"}
+{"version":3,"file":"grokEngineBrokerTurnEnd.d.ts","sourceRoot":"","sources":["../../src/runtime/grokEngineBrokerTurnEnd.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACzG,eAAO,MAAM,oBAAoB,EAAE,uBAAqG,CAAC;AACzI,qGAAqG;AACrG,eAAO,MAAM,wBAAwB,QAAS,CAAC;AAC/C,MAAM,MAAM,uBAAuB,GAAG,aAAa,GAAG,MAAM,CAAC;AAE7D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC;IACrD,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,MAAM,GAAG,gBAAgB,CAAC,CAAC;IAC3E,QAAQ,EAAE,MAAM,uBAAuB,GAAG,SAAS,CAAC;IACpD,wGAAwG;IACxG,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;IAC5B,YAAY,EAAE,MAAM,IAAI,CAAC;IACzB,kGAAkG;IAClG,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,KAAK,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACjD,MAAM,CAAC,EAAE,uBAAuB,CAAC;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC,GAAG,QAAQ,CAAC;IAAE,IAAI,IAAI,IAAI,CAAA;CAAE,CAAC,CA8B9B;AAED,oJAAoJ;AACpJ,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE9E;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC,CAqBnH;AAED,2DAA2D;AAC3D,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAU,EAAE,eAAe,UAAQ,GACvD,OAAO,CAAC,OAAO,CAAC,CAgBlB;AAED;;;;;;;GAOG;AACH,wBAAsB,4BAA4B,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAA2B,EAAE,MAAM,SAAM,EAAE,QAAQ,SAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAarM"}

package/dist/runtime/grokEngineBrokerTurnEnd.js

@@ -5,7 +5,7 @@ export const GROK_BROKER_TURN_END = Object.freeze({ finalGraceMs: 15_000, idleMs
 export const GROK_WORKER_REAP_WAIT_MS = 10_000;
 export function watchGrokBrokerTurnEnd(input) {
     const timing = input.timing ?? GROK_BROKER_TURN_END, now = input.now ?? Date.now;
-    let notified, done = false;
+    let notified, done = false, toolSeenAt = 0;
     const check = () => {
         if (done)
             return;
@@ -32,11 +32,22 @@ export function watchGrokBrokerTurnEnd(input) {
         catch {
             activity = undefined;
         }
+        let tool = false;
+        try {
+            tool = input.toolProcess?.() === true;
+        }
+        catch {
+            tool = false;
+        }
+        if (tool)
+            toolSeenAt = now();
         if (input.meter.busy() || (activity?.inFlight ?? 0) > 0)
             return;
         const quietSince = Math.max(input.meter.lastActivityAt(), activity?.lastActivityAt ?? 0);
+        // A tool process defers only the idle verdict. A final reply called no tool, so a child still
+        // alive beside it is not the model's work and must not hold a finished worker open.
         const reason = final !== undefined && now() - Math.max(final.at, quietSince) >= timing.finalGraceMs ? "final_reply"
-            : now() - quietSince >= timing.idleMs ? "idle" : undefined;
+            : now() - Math.max(quietSince, toolSeenAt) >= timing.idleMs ? "idle" : undefined;
         if (reason === undefined)
             return;
         stop();

package/dist/runtime/grokWorkerToolProcess.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Whether a Grok worker is running one of its own local tools right now,
+ * read-only from `/proc`.
+ *
+ * The broker sees every model request (the proxy) and every MCP tool call (the
+ * facade), but not the tools Grok runs in-process: `run_terminal_command`
+ * executes as a child of the worker. Grok 1.0.34 advertises that tool with a
+ * model-chosen timeout of up to 36 000 000 ms (default 120 000 ms), so a
+ * command the model gave a long timeout is real work the broker cannot see,
+ * and the idle watchdog (`grokEngineBrokerTurnEnd.ts`) used to end such a turn
+ * as stalled ten minutes in.
+ *
+ * Every engine process carries the argv the launcher compiled — the outer
+ * bubblewrap wrapper Grok re-executes into and the Grok process inside it —
+ * so `--output-format streaming-messages-json` marks them. A live (non-zombie)
+ * process owned by `uid` whose parent is such an engine process, and which is
+ * not one itself, is a tool the worker started and is waiting on. Short-lived
+ * helpers count too, which only delays an idle verdict by a poll.
+ *
+ * An unreadable `/proc` (or one mounted `hidepid`) answers `false`: the
+ * watchdog then behaves exactly as it did without this signal.
+ */
+export declare function grokWorkerToolProcessLive(uid: number, procRoot?: string): Promise<boolean>;
+/**
+ * The watchdog's poll is synchronous and `/proc` is not, so the turn keeps the
+ * last answer: `poll()` starts one read when none is pending, `live()` returns
+ * the latest completed one. A failed read answers `false`, as an unreadable
+ * `/proc` does.
+ */
+export declare function grokWorkerToolProcessSampler(read: () => Promise<boolean>): Readonly<{
+    poll(): void;
+    live(): boolean;
+}>;
+//# sourceMappingURL=grokWorkerToolProcess.d.ts.map

package/dist/runtime/grokWorkerToolProcess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grokWorkerToolProcess.d.ts","sourceRoot":"","sources":["../../src/runtime/grokWorkerToolProcess.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,yBAAyB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBjG;AAQD;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IAAE,IAAI,IAAI,IAAI,CAAC;IAAC,IAAI,IAAI,OAAO,CAAA;CAAE,CAAC,CAUtH"}

package/dist/runtime/grokWorkerToolProcess.js

@@ -0,0 +1,78 @@
+import { readdir, readFile } from "node:fs/promises";
+/**
+ * Whether a Grok worker is running one of its own local tools right now,
+ * read-only from `/proc`.
+ *
+ * The broker sees every model request (the proxy) and every MCP tool call (the
+ * facade), but not the tools Grok runs in-process: `run_terminal_command`
+ * executes as a child of the worker. Grok 1.0.34 advertises that tool with a
+ * model-chosen timeout of up to 36 000 000 ms (default 120 000 ms), so a
+ * command the model gave a long timeout is real work the broker cannot see,
+ * and the idle watchdog (`grokEngineBrokerTurnEnd.ts`) used to end such a turn
+ * as stalled ten minutes in.
+ *
+ * Every engine process carries the argv the launcher compiled — the outer
+ * bubblewrap wrapper Grok re-executes into and the Grok process inside it —
+ * so `--output-format streaming-messages-json` marks them. A live (non-zombie)
+ * process owned by `uid` whose parent is such an engine process, and which is
+ * not one itself, is a tool the worker started and is waiting on. Short-lived
+ * helpers count too, which only delays an idle verdict by a poll.
+ *
+ * An unreadable `/proc` (or one mounted `hidepid`) answers `false`: the
+ * watchdog then behaves exactly as it did without this signal.
+ */
+export async function grokWorkerToolProcessLive(uid, procRoot = "/proc") {
+    let entries;
+    try {
+        entries = await readdir(procRoot);
+    }
+    catch {
+        return false;
+    }
+    const owned = new Map();
+    for (const entry of entries) {
+        if (!/^\d+$/u.test(entry))
+            continue;
+        try {
+            const status = await readFile(`${procRoot}/${entry}/status`, "utf8");
+            if (Number(/^Uid:\s+(\d+)/mu.exec(status)?.[1]) !== uid)
+                continue;
+            if (/^State:\s+[ZX]/mu.test(status))
+                continue;
+            const parent = Number(/^PPid:\s+(\d+)/mu.exec(status)?.[1]);
+            if (!Number.isSafeInteger(parent))
+                continue;
+            const argv = (await readFile(`${procRoot}/${entry}/cmdline`, "utf8")).split("\0");
+            owned.set(Number(entry), { parent, engine: isGrokEngineArgv(argv) });
+        }
+        catch { /* a process exiting mid-scan is not part of the answer */ }
+    }
+    for (const process of owned.values()) {
+        if (!process.engine && owned.get(process.parent)?.engine === true)
+            return true;
+    }
+    return false;
+}
+/** The compiled worker argv pair every engine process of a brokered turn carries (`grokBrokerWorkerConfig.ts`). */
+function isGrokEngineArgv(argv) {
+    const flag = argv.indexOf("--output-format");
+    return flag !== -1 && argv[flag + 1] === "streaming-messages-json";
+}
+/**
+ * The watchdog's poll is synchronous and `/proc` is not, so the turn keeps the
+ * last answer: `poll()` starts one read when none is pending, `live()` returns
+ * the latest completed one. A failed read answers `false`, as an unreadable
+ * `/proc` does.
+ */
+export function grokWorkerToolProcessSampler(read) {
+    let live = false, pending = false;
+    return {
+        poll: () => {
+            if (pending)
+                return;
+            pending = true;
+            void Promise.resolve().then(read).then((value) => { live = value; }, () => { live = false; }).finally(() => { pending = false; });
+        },
+        live: () => live
+    };
+}

package/dist/runtime/productionAgentTools.js

@@ -226,7 +226,7 @@ function moltnetTool(agent, wakeContext) {
 }
 async function connect(agent, server) {
     taskClockChildEnvironment(server.env);
-    const client = new Client({ name: "daimon-production", version: "0.2.2" });
+    const client = new Client({ name: "daimon-production", version: "0.2.4" });
     const headers = server.authSecretEnv === undefined ? {} : { authorization: `Bearer ${requiredSecret(server.authSecretEnv)}` };
     const transport = server.transport === "stdio"
         ? new StdioClientTransport({ command: server.command, args: [...server.args], env: stringEnvironment(readyTaskClockEnvironment({ ...server.env, ...cliChildEnvironment([], agent.runtimeHomePath, { executablePath: server.command }) })) })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noopolis/daimon",
-  "version": "0.2.2",
+  "version": "0.2.4",
   "description": "Noopolis native per-agent runtime harness built on Pi.",
   "license": "MIT",
   "type": "module",