@omnicross/daemon 0.1.8 → 0.1.10

package/dist/index.d.cts

@@ -15,7 +15,8 @@ import { SubscriptionIdentityStore } from '@omnicross/core/provider-proxy/identi
 import { LoggingConfig, HealthReport } from '@omnicross/contracts/health-logging-types';
 import { SubscriptionAccountHealth } from '@omnicross/core/pipeline/SubscriptionAccountHealth';
 import { fetchUpstream } from '@omnicross/core/pipeline/upstreamFetch';
-import { AuditRecord, AuditStats, AuditConfig } from '@omnicross/contracts/audit-types';
+import { ThinkLevel } from '@omnicross/contracts/completion-types';
+import { AuditRecord, AuditStats, AuditBodyResult, AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingDeliveryStatus, BillingConfig, BillingEvent } from '@omnicross/contracts/billing-types';
 import http from 'node:http';
 import { LLMProvider, AgentDefaultModels, GlobalModelParameters } from '@omnicross/contracts/llm-config';
@@ -145,11 +146,11 @@ interface DaemonApiKeyEntry {
 /**
  * Per-model metadata subset (app-parity child 2). A hand-authored SUBSET of the
  * app's `ModelConfig` (`app/src/shared-types/llm-config.ts`), carrying ONLY the
- * named-five fields the daemon stores + round-trips, keyed by the model `id`:
- * `name` (display name), `enabled`, `group`, `vision`, `reasoning`. The wider
+ * allowlisted fields the daemon stores + round-trips, keyed by the model `id`:
+ * display metadata plus target thinking capabilities. The wider
  * `ModelConfig` fields the discovery flow may send (`category`/`contextLength`/
  * `maxTokens`/`functionCall`/`webSearch`/`completionSettings`/`openRouterProvider`/
- * `thinkingLevels`/…) are NOT in this allowlist — they are DROPPED by
+ * fields are NOT in this allowlist — they are DROPPED by
  * deny-by-default (`validateModelConfigs`/`parseModelConfigsInput`).
  *
  * ENFORCEMENT (app-parity-2 child 2): `enabled` is now a DISCOVERY/advertisement
@@ -158,8 +159,8 @@ interface DaemonApiKeyEntry {
  * advertisement, NOT a hard per-request block (core does not validate a requested
  * model against `models[]`, so a hardcoded disabled model id still reaches the
  * upstream, which rejects it). The admin management view (`toProviderView`) still
- * lists ALL models. The other fields (`name`/`group`/`vision`/`reasoning`) remain
- * display-only metadata (no core per-model capability binding on the BYO path).
+ * lists ALL models. `name`/`group`/`vision`/`reasoning` remain display metadata;
+ * thinking capabilities are projected into core for request negotiation.
  */
 interface DaemonModelConfig {
     /** Model id — the metadata key (parallels an entry in the flat `models[]`). */
@@ -175,6 +176,13 @@ interface DaemonModelConfig {
     vision?: boolean;
     /** Reasoning-capable hint (display only; not consumed by routing). */
     reasoning?: boolean;
+    /** Discrete reasoning efforts accepted by this target model. */
+    thinkingLevels?: ThinkLevel[];
+    /** Valid legacy thinking-budget bounds for this target model. */
+    thinkingTokenLimit?: {
+        min: number;
+        max: number;
+    };
 }
 /**
  * One transformer chain entry (app-parity child 5). Mirrors the app's
@@ -1413,11 +1421,53 @@ declare class AccountHealthProbeScheduler implements AccountProbeHistoryReader {
 }
 
 /**
- * auditReader — read + filter the date-rotated audit store (request-audit-log,
- * design D4/D6). Backs the AUTHED admin query only (the records carry IP/UA +
- * possibly bodies). Reads the relevant `audit-*.jsonl` files, parses defensively
- * (a torn final line never poisons a query), filters by key id + time window, and
- * returns NEWEST-FIRST up to a bounded limit.
+ * auditBodyReader — reconstruct captured bodies out of the per-session shards
+ * (audit-store-sharding, design D4).
+ *
+ * Bodies no longer sit inline on the metadata line, so reading one is an explicit
+ * second step: locate the session shard, replay its delta chain, hand back the
+ * original text. Backs the AUTHED admin body query and the `omnicross audit` CLI
+ * — never an unauthenticated surface (a body can hold prompts and PII).
+ *
+ * Shards are read whole. That is bounded on purpose: a shard holds ONE session's
+ * deltas, which is exactly the thing the delta encoding keeps small.
+ *
+ * Both storage forms are handled transparently: today's plain `.jsonl` (kept
+ * greppable on disk) and an archived `.jsonl.gz` from a rolled-over day.
+ *
+ * @module @omnicross/daemon/audit/auditBodyReader
+ */
+
+/** Locate one record's bodies. `ts` narrows the search to a single day directory. */
+interface AuditBodyQuery {
+    /** The audit record id whose bodies to reconstruct. */
+    id: string;
+    /** The record's session key (its shard). */
+    sessionKey: string;
+    /** The record's timestamp, if known — skips scanning every retained day. */
+    ts?: number;
+}
+
+/**
+ * auditReader — read + filter the audit store (request-audit-log design D4/D6,
+ * re-laid-out by audit-store-sharding design D5). Backs the AUTHED admin query
+ * only (records carry IP/UA). Returns NEWEST-FIRST up to a bounded limit.
+ *
+ * Reads BOTH on-disk layouts: the current `audit-YYYY-MM-DD/meta.jsonl` and the
+ * legacy flat `audit-YYYY-MM-DD.jsonl` left behind by an older daemon (still
+ * queryable until TTL prunes it — there is no migration step).
+ *
+ * BOUNDED BY CONSTRUCTION. Days are visited newest-first and each file is walked
+ * BACKWARDS from its tail, so a query touches only as much of the store as it
+ * needs. Two stops apply:
+ *  - cross-day: once `limit` rows are in hand, no older day is opened at all.
+ *    Exact, because day files never overlap in date.
+ *  - within-day: at most `limit + OVERSCAN` rows are taken from one file. The
+ *    overscan absorbs the slight append-order skew from a slow request landing
+ *    after a fast one that started later.
+ *
+ * A returned record NEVER carries a body — those live in the per-session shards
+ * and are fetched one at a time. `hasBody` says whether one exists.
  *
  * @module @omnicross/daemon/audit/auditReader
  */
@@ -1426,6 +1476,8 @@ declare class AccountHealthProbeScheduler implements AccountProbeHistoryReader {
 interface AuditQuery {
     /** Restrict to one outbound key id. */
     keyId?: string;
+    /** Restrict to one conversation-session key. */
+    sessionKey?: string;
     /** Inclusive lower bound (epoch ms). */
     from?: number;
     /** Inclusive upper bound (epoch ms). */
@@ -1450,9 +1502,9 @@ interface AuditStatsQuery {
  * auditQueryApi — the AUTHED `GET /admin/api/audit?keyId=&from=&to=&limit=`
  * handler (request-audit-log, design D6).
  *
- * Audit records carry client IP / user-agent (PII) and, when body capture is on,
- * redacted bodies — so unlike the coarse `/health` boolean they are served ONLY
- * behind the admin auth gate. This lives in its OWN helper module (the
+ * Audit records carry client IP / user-agent (PII), and the sibling body query
+ * returns redacted request/response snapshots — so unlike the coarse `/health`
+ * boolean they are served ONLY behind the admin auth gate. This lives in its OWN helper module (the
  * #4/#8/#10 helper-module convention) so `adminApi.ts` — at its line cap — is not
  * touched: `AdminServer.dispatch` routes the path here directly, AFTER its auth
  * gate. NEVER unauthenticated, NEVER surfaced on `/health`.
@@ -1467,6 +1519,14 @@ interface AuditStatsQuery {
 type AuditQueryReader = (query: AuditQuery) => AuditRecord[];
 /** Metadata-only aggregate reader used by the overview. */
 type AuditStatsReader = (query: AuditStatsQuery) => Promise<AuditStats> | AuditStats;
+/** Reconstructs ONE record's bodies from the per-session shard store. */
+type AuditBodyReader = (query: AuditBodyQuery) => AuditBodyResult;
+/** Runs the cross-session body compaction over every closed day. */
+type AuditCompactor = () => {
+    days: number;
+    shards: number;
+    savedBytes: number;
+};
 
 /**
  * billingStatusApi — the AUTHED `GET /admin/api/billing-status` handler
@@ -2124,6 +2184,13 @@ interface AdminServerDeps extends AdminApiDeps {
     auditReader?: AuditQueryReader;
     /** Metadata-only audit aggregate used by the overview error-rate metric. */
     auditStatsReader?: AuditStatsReader;
+    /**
+     * Reconstructs one record's bodies from the per-session shard store
+     * (audit-store-sharding). Absent when audit was never enabled.
+     */
+    auditBodyReader?: AuditBodyReader;
+    /** Runs cross-session body compaction on demand (audit-store-sharding D8). */
+    auditCompactor?: AuditCompactor;
     /**
      * OPTIONAL billing delivery-status reader (billing-event-stream, design D5).
      * When wired (bootstrap → the ledger dir), the AUTHED `GET /admin/api/billing-status`
@@ -2287,17 +2354,28 @@ declare class AccountHealthSweeper {
 }
 
 /**
- * AuditPruneSweeper — the TTL prune for the audit store (request-audit-log,
- * design D4). Deletes whole `audit-YYYY-MM-DD.jsonl` files whose date is older
- * than `retentionDays` — a cheap file UNLINK, never a line-level rewrite of a
- * live file (which jsonl makes awkward). So the store never grows unbounded and
- * TTL is O(files).
+ * AuditPruneSweeper — retention + archiving for the audit store
+ * (request-audit-log design D4, extended by audit-store-sharding design D6).
+ *
+ * Two jobs run on the same hourly tick:
+ *
+ *  - PRUNE. Remove every day older than `retentionDays`. A current day is a
+ *    DIRECTORY (removed recursively), a legacy day is a flat file (unlinked with
+ *    its stats sidecar). Either way it stays a whole-day removal — never a
+ *    line-level rewrite of a live file, which jsonl makes awkward.
+ *  - ARCHIVE. First run the cross-session compaction pass (see
+ *    {@link compactAuditDay}), then gzip the body shards of any day that is no
+ *    longer today. The
+ *    current day stays PLAIN TEXT so it can still be tailed and grepped while
+ *    debugging; once a day is closed nothing appends to it again, so rewriting
+ *    and compressing it is safe and buys a large multiple on top of the delta.
+ *    `meta.jsonl` is NEVER compressed — it is the query hot path.
  *
  * Modeled on the #8 `AccountHealthProbeScheduler` / `AccountHealthSweeper`:
  * `start()` arms an `unref()`ed interval, `dispose()` clears it, a single-sweep
- * re-entrancy guard prevents overlap. A prune ALSO runs once at boot (`start`
- * fires an immediate sweep). Disabled/zero-retention config ⇒ armed-off ⇒ no-op
- * (byte-identical zero regression). Never throws.
+ * re-entrancy guard prevents overlap. Both jobs also run once at boot. Disabled
+ * config means armed-off, so audit-off is byte-identical zero regression. Never
+ * throws.
  *
  * @module @omnicross/daemon/audit/AuditPruneSweeper
  */
@@ -2311,6 +2389,7 @@ declare class AuditPruneSweeper {
     private readonly now;
     private timer;
     private sweeping;
+    private archiving;
     constructor(auditDir: string, logger: Logger, config: AuditConfig, intervalMs?: number, 
     /** Injectable clock (ms) for deterministic tests. */
     now?: () => number);
@@ -2319,32 +2398,56 @@ declare class AuditPruneSweeper {
     /** Re-apply config to the live instance (boot + admin PUT hot-reload). */
     configure(config: AuditConfig): void;
     /**
-     * Arm the prune interval AND run one prune immediately (boot cleanup). No-op
-     * when audit is disabled (zero regression). Idempotent.
+     * Arm the interval AND run one pass immediately (boot cleanup). No-op when
+     * audit is disabled (zero regression). Idempotent.
      */
     start(): void;
     /** Clear the interval (daemon shutdown / test teardown). Idempotent. */
     dispose(): void;
+    /** Prune first, then archive — never spend CPU compressing a day about to go. */
+    private runOnce;
+    /** The LOCAL-midnight epoch ms of the current day. */
+    private todayMidnight;
     /**
-     * One prune: unlink every audit date file strictly OLDER than the retention
-     * cutoff (`now - retentionDays` days, at local-midnight granularity). Exposed
-     * for tests; never throws. Returns the number of files removed.
+     * One prune: remove every audit day strictly OLDER than the retention cutoff
+     * (`now - retentionDays` days, at local-midnight granularity). Exposed for
+     * tests; never throws. Returns the number of days removed.
      */
     sweep(): Promise<number>;
+    /**
+     * Gzip the body shards of every CLOSED day (anything before today). Today is
+     * deliberately left as plain text so it stays greppable while it is the day you
+     * are debugging. Exposed for tests; never throws. Returns shards compressed.
+     */
+    archive(): Promise<number>;
+    /** Gzip up to `budget` plain shards in one day's `bodies/` directory. */
+    private archiveDay;
 }
 
 /**
- * AuditWriter — the daemon's file-backed audit sink (request-audit-log, design
- * D4/D5). Registered as `@omnicross/core`'s audit sink when audit is enabled; its
- * {@link record} is what `recordAudit` hands each assembled record to.
+ * AuditWriter — the daemon's file-backed audit sink (request-audit-log design
+ * D4/D5, re-laid-out by audit-store-sharding design D2). Registered as
+ * `@omnicross/core`'s audit sink when audit is enabled; its {@link record} is
+ * what `recordAudit` hands each assembled record to.
  *
- * FIRE-AND-FORGET (hard constraint): {@link record} DEFERS the fs append off the
+ * FIRE-AND-FORGET (hard constraint): {@link record} DEFERS all fs work off the
  * caller's stack (an injectable `defer`, default a zero-delay timer — the
  * `UsageRecorder` precedent) and returns immediately, so the relay response path
- * never waits on disk I/O. A write error is swallowed + logged (a failing audit
- * store must never affect a relay). Each record is appended as ONE JSON line to
- * `audit/audit-YYYY-MM-DD.jsonl` (the record's LOCAL date), matching the
- * `usage-events.jsonl` pattern — no new dependency, TTL is a whole-file unlink.
+ * never waits on disk I/O. Delta encoding rides that same deferred tick and is
+ * pure memory, so it can never stall a response either. A write error is
+ * swallowed + logged (a failing audit store must never affect a relay).
+ *
+ * Each record is split across TWO destinations under `audit/audit-YYYY-MM-DD/`:
+ *
+ *  - `meta.jsonl` — one small JSON line WITHOUT bodies. This is what queries and
+ *    the stats sidecar read, so a listing no longer pays for megabytes of prompt.
+ *  - `bodies/<sessionKey>.jsonl` — the captured bodies, sharded per conversation
+ *    and delta-encoded against the session's previous turn.
+ *
+ * The two writes are INDEPENDENT: the metadata line is the canonical record, so a
+ * body-shard failure is logged and the metadata still lands. When a shard write
+ * fails the session's encoding base is dropped, otherwise the next turn would
+ * chain a delta onto a base no reader can find.
  *
  * @module @omnicross/daemon/audit/AuditWriter
  */
@@ -2352,23 +2455,37 @@ declare class AuditPruneSweeper {
 declare class AuditWriter {
     private readonly auditDir;
     private readonly logger;
-    /** Deferral used by `record()` to schedule the append off the caller's path. */
+    /** Deferral used by `record()` to schedule the writes off the caller's path. */
     private readonly defer;
-    private dirEnsured;
+    /** Day directories already created this process (avoids an mkdir per record). */
+    private readonly ensuredDirs;
+    /** Per-session encoding bases. Memory-only; a miss simply writes a full snapshot. */
+    private readonly bases;
     constructor(auditDir: string, logger: Logger, 
-    /** Deferral used by `record()` to schedule the append off the caller's path. */
+    /** Deferral used by `record()` to schedule the writes off the caller's path. */
     defer?: (fn: () => void) => void);
     /**
-     * Enqueue one record for append. Returns IMMEDIATELY (fire-and-forget); the fs
-     * write happens on the deferred tick. A failure is logged, never thrown.
+     * Enqueue one record. Returns IMMEDIATELY (fire-and-forget); every fs write and
+     * the delta encoding happen on the deferred tick. A failure is logged, never thrown.
      */
     record(record: AuditRecord): void;
+    /** Drop all retained encoding bases (config reload / shutdown / test teardown). */
+    reset(): void;
     /**
-     * Append synchronously — the awaitable form tests use to assert the line landed.
-     * Ensures the `audit/` directory exists on first write (lazy, like the usage
-     * store's lazy file creation).
+     * Append synchronously — the awaitable form tests use to assert a line landed.
+     * Writes the metadata line first (canonical), then the body shard.
      */
     appendNow(record: AuditRecord): void;
+    /** Create a directory once per process and remember it. */
+    private ensureDir;
+    /** Write the body-free metadata line + refresh the exact-count sidecar. */
+    private appendMeta;
+    /**
+     * Write the delta-encoded body shard for one record. A no-op when nothing was
+     * captured or when the session key is missing/unsafe — in which case the body
+     * is dropped rather than written to an unvalidated path.
+     */
+    private appendBody;
 }
 
 /**

package/dist/index.d.ts

@@ -15,7 +15,8 @@ import { SubscriptionIdentityStore } from '@omnicross/core/provider-proxy/identi
 import { LoggingConfig, HealthReport } from '@omnicross/contracts/health-logging-types';
 import { SubscriptionAccountHealth } from '@omnicross/core/pipeline/SubscriptionAccountHealth';
 import { fetchUpstream } from '@omnicross/core/pipeline/upstreamFetch';
-import { AuditRecord, AuditStats, AuditConfig } from '@omnicross/contracts/audit-types';
+import { ThinkLevel } from '@omnicross/contracts/completion-types';
+import { AuditRecord, AuditStats, AuditBodyResult, AuditConfig } from '@omnicross/contracts/audit-types';
 import { BillingDeliveryStatus, BillingConfig, BillingEvent } from '@omnicross/contracts/billing-types';
 import http from 'node:http';
 import { LLMProvider, AgentDefaultModels, GlobalModelParameters } from '@omnicross/contracts/llm-config';
@@ -145,11 +146,11 @@ interface DaemonApiKeyEntry {
 /**
  * Per-model metadata subset (app-parity child 2). A hand-authored SUBSET of the
  * app's `ModelConfig` (`app/src/shared-types/llm-config.ts`), carrying ONLY the
- * named-five fields the daemon stores + round-trips, keyed by the model `id`:
- * `name` (display name), `enabled`, `group`, `vision`, `reasoning`. The wider
+ * allowlisted fields the daemon stores + round-trips, keyed by the model `id`:
+ * display metadata plus target thinking capabilities. The wider
  * `ModelConfig` fields the discovery flow may send (`category`/`contextLength`/
  * `maxTokens`/`functionCall`/`webSearch`/`completionSettings`/`openRouterProvider`/
- * `thinkingLevels`/…) are NOT in this allowlist — they are DROPPED by
+ * fields are NOT in this allowlist — they are DROPPED by
  * deny-by-default (`validateModelConfigs`/`parseModelConfigsInput`).
  *
  * ENFORCEMENT (app-parity-2 child 2): `enabled` is now a DISCOVERY/advertisement
@@ -158,8 +159,8 @@ interface DaemonApiKeyEntry {
  * advertisement, NOT a hard per-request block (core does not validate a requested
  * model against `models[]`, so a hardcoded disabled model id still reaches the
  * upstream, which rejects it). The admin management view (`toProviderView`) still
- * lists ALL models. The other fields (`name`/`group`/`vision`/`reasoning`) remain
- * display-only metadata (no core per-model capability binding on the BYO path).
+ * lists ALL models. `name`/`group`/`vision`/`reasoning` remain display metadata;
+ * thinking capabilities are projected into core for request negotiation.
  */
 interface DaemonModelConfig {
     /** Model id — the metadata key (parallels an entry in the flat `models[]`). */
@@ -175,6 +176,13 @@ interface DaemonModelConfig {
     vision?: boolean;
     /** Reasoning-capable hint (display only; not consumed by routing). */
     reasoning?: boolean;
+    /** Discrete reasoning efforts accepted by this target model. */
+    thinkingLevels?: ThinkLevel[];
+    /** Valid legacy thinking-budget bounds for this target model. */
+    thinkingTokenLimit?: {
+        min: number;
+        max: number;
+    };
 }
 /**
  * One transformer chain entry (app-parity child 5). Mirrors the app's
@@ -1413,11 +1421,53 @@ declare class AccountHealthProbeScheduler implements AccountProbeHistoryReader {
 }
 
 /**
- * auditReader — read + filter the date-rotated audit store (request-audit-log,
- * design D4/D6). Backs the AUTHED admin query only (the records carry IP/UA +
- * possibly bodies). Reads the relevant `audit-*.jsonl` files, parses defensively
- * (a torn final line never poisons a query), filters by key id + time window, and
- * returns NEWEST-FIRST up to a bounded limit.
+ * auditBodyReader — reconstruct captured bodies out of the per-session shards
+ * (audit-store-sharding, design D4).
+ *
+ * Bodies no longer sit inline on the metadata line, so reading one is an explicit
+ * second step: locate the session shard, replay its delta chain, hand back the
+ * original text. Backs the AUTHED admin body query and the `omnicross audit` CLI
+ * — never an unauthenticated surface (a body can hold prompts and PII).
+ *
+ * Shards are read whole. That is bounded on purpose: a shard holds ONE session's
+ * deltas, which is exactly the thing the delta encoding keeps small.
+ *
+ * Both storage forms are handled transparently: today's plain `.jsonl` (kept
+ * greppable on disk) and an archived `.jsonl.gz` from a rolled-over day.
+ *
+ * @module @omnicross/daemon/audit/auditBodyReader
+ */
+
+/** Locate one record's bodies. `ts` narrows the search to a single day directory. */
+interface AuditBodyQuery {
+    /** The audit record id whose bodies to reconstruct. */
+    id: string;
+    /** The record's session key (its shard). */
+    sessionKey: string;
+    /** The record's timestamp, if known — skips scanning every retained day. */
+    ts?: number;
+}
+
+/**
+ * auditReader — read + filter the audit store (request-audit-log design D4/D6,
+ * re-laid-out by audit-store-sharding design D5). Backs the AUTHED admin query
+ * only (records carry IP/UA). Returns NEWEST-FIRST up to a bounded limit.
+ *
+ * Reads BOTH on-disk layouts: the current `audit-YYYY-MM-DD/meta.jsonl` and the
+ * legacy flat `audit-YYYY-MM-DD.jsonl` left behind by an older daemon (still
+ * queryable until TTL prunes it — there is no migration step).
+ *
+ * BOUNDED BY CONSTRUCTION. Days are visited newest-first and each file is walked
+ * BACKWARDS from its tail, so a query touches only as much of the store as it
+ * needs. Two stops apply:
+ *  - cross-day: once `limit` rows are in hand, no older day is opened at all.
+ *    Exact, because day files never overlap in date.
+ *  - within-day: at most `limit + OVERSCAN` rows are taken from one file. The
+ *    overscan absorbs the slight append-order skew from a slow request landing
+ *    after a fast one that started later.
+ *
+ * A returned record NEVER carries a body — those live in the per-session shards
+ * and are fetched one at a time. `hasBody` says whether one exists.
  *
  * @module @omnicross/daemon/audit/auditReader
  */
@@ -1426,6 +1476,8 @@ declare class AccountHealthProbeScheduler implements AccountProbeHistoryReader {
 interface AuditQuery {
     /** Restrict to one outbound key id. */
     keyId?: string;
+    /** Restrict to one conversation-session key. */
+    sessionKey?: string;
     /** Inclusive lower bound (epoch ms). */
     from?: number;
     /** Inclusive upper bound (epoch ms). */
@@ -1450,9 +1502,9 @@ interface AuditStatsQuery {
  * auditQueryApi — the AUTHED `GET /admin/api/audit?keyId=&from=&to=&limit=`
  * handler (request-audit-log, design D6).
  *
- * Audit records carry client IP / user-agent (PII) and, when body capture is on,
- * redacted bodies — so unlike the coarse `/health` boolean they are served ONLY
- * behind the admin auth gate. This lives in its OWN helper module (the
+ * Audit records carry client IP / user-agent (PII), and the sibling body query
+ * returns redacted request/response snapshots — so unlike the coarse `/health`
+ * boolean they are served ONLY behind the admin auth gate. This lives in its OWN helper module (the
  * #4/#8/#10 helper-module convention) so `adminApi.ts` — at its line cap — is not
  * touched: `AdminServer.dispatch` routes the path here directly, AFTER its auth
  * gate. NEVER unauthenticated, NEVER surfaced on `/health`.
@@ -1467,6 +1519,14 @@ interface AuditStatsQuery {
 type AuditQueryReader = (query: AuditQuery) => AuditRecord[];
 /** Metadata-only aggregate reader used by the overview. */
 type AuditStatsReader = (query: AuditStatsQuery) => Promise<AuditStats> | AuditStats;
+/** Reconstructs ONE record's bodies from the per-session shard store. */
+type AuditBodyReader = (query: AuditBodyQuery) => AuditBodyResult;
+/** Runs the cross-session body compaction over every closed day. */
+type AuditCompactor = () => {
+    days: number;
+    shards: number;
+    savedBytes: number;
+};
 
 /**
  * billingStatusApi — the AUTHED `GET /admin/api/billing-status` handler
@@ -2124,6 +2184,13 @@ interface AdminServerDeps extends AdminApiDeps {
     auditReader?: AuditQueryReader;
     /** Metadata-only audit aggregate used by the overview error-rate metric. */
     auditStatsReader?: AuditStatsReader;
+    /**
+     * Reconstructs one record's bodies from the per-session shard store
+     * (audit-store-sharding). Absent when audit was never enabled.
+     */
+    auditBodyReader?: AuditBodyReader;
+    /** Runs cross-session body compaction on demand (audit-store-sharding D8). */
+    auditCompactor?: AuditCompactor;
     /**
      * OPTIONAL billing delivery-status reader (billing-event-stream, design D5).
      * When wired (bootstrap → the ledger dir), the AUTHED `GET /admin/api/billing-status`
@@ -2287,17 +2354,28 @@ declare class AccountHealthSweeper {
 }
 
 /**
- * AuditPruneSweeper — the TTL prune for the audit store (request-audit-log,
- * design D4). Deletes whole `audit-YYYY-MM-DD.jsonl` files whose date is older
- * than `retentionDays` — a cheap file UNLINK, never a line-level rewrite of a
- * live file (which jsonl makes awkward). So the store never grows unbounded and
- * TTL is O(files).
+ * AuditPruneSweeper — retention + archiving for the audit store
+ * (request-audit-log design D4, extended by audit-store-sharding design D6).
+ *
+ * Two jobs run on the same hourly tick:
+ *
+ *  - PRUNE. Remove every day older than `retentionDays`. A current day is a
+ *    DIRECTORY (removed recursively), a legacy day is a flat file (unlinked with
+ *    its stats sidecar). Either way it stays a whole-day removal — never a
+ *    line-level rewrite of a live file, which jsonl makes awkward.
+ *  - ARCHIVE. First run the cross-session compaction pass (see
+ *    {@link compactAuditDay}), then gzip the body shards of any day that is no
+ *    longer today. The
+ *    current day stays PLAIN TEXT so it can still be tailed and grepped while
+ *    debugging; once a day is closed nothing appends to it again, so rewriting
+ *    and compressing it is safe and buys a large multiple on top of the delta.
+ *    `meta.jsonl` is NEVER compressed — it is the query hot path.
  *
  * Modeled on the #8 `AccountHealthProbeScheduler` / `AccountHealthSweeper`:
  * `start()` arms an `unref()`ed interval, `dispose()` clears it, a single-sweep
- * re-entrancy guard prevents overlap. A prune ALSO runs once at boot (`start`
- * fires an immediate sweep). Disabled/zero-retention config ⇒ armed-off ⇒ no-op
- * (byte-identical zero regression). Never throws.
+ * re-entrancy guard prevents overlap. Both jobs also run once at boot. Disabled
+ * config means armed-off, so audit-off is byte-identical zero regression. Never
+ * throws.
  *
  * @module @omnicross/daemon/audit/AuditPruneSweeper
  */
@@ -2311,6 +2389,7 @@ declare class AuditPruneSweeper {
     private readonly now;
     private timer;
     private sweeping;
+    private archiving;
     constructor(auditDir: string, logger: Logger, config: AuditConfig, intervalMs?: number, 
     /** Injectable clock (ms) for deterministic tests. */
     now?: () => number);
@@ -2319,32 +2398,56 @@ declare class AuditPruneSweeper {
     /** Re-apply config to the live instance (boot + admin PUT hot-reload). */
     configure(config: AuditConfig): void;
     /**
-     * Arm the prune interval AND run one prune immediately (boot cleanup). No-op
-     * when audit is disabled (zero regression). Idempotent.
+     * Arm the interval AND run one pass immediately (boot cleanup). No-op when
+     * audit is disabled (zero regression). Idempotent.
      */
     start(): void;
     /** Clear the interval (daemon shutdown / test teardown). Idempotent. */
     dispose(): void;
+    /** Prune first, then archive — never spend CPU compressing a day about to go. */
+    private runOnce;
+    /** The LOCAL-midnight epoch ms of the current day. */
+    private todayMidnight;
     /**
-     * One prune: unlink every audit date file strictly OLDER than the retention
-     * cutoff (`now - retentionDays` days, at local-midnight granularity). Exposed
-     * for tests; never throws. Returns the number of files removed.
+     * One prune: remove every audit day strictly OLDER than the retention cutoff
+     * (`now - retentionDays` days, at local-midnight granularity). Exposed for
+     * tests; never throws. Returns the number of days removed.
      */
     sweep(): Promise<number>;
+    /**
+     * Gzip the body shards of every CLOSED day (anything before today). Today is
+     * deliberately left as plain text so it stays greppable while it is the day you
+     * are debugging. Exposed for tests; never throws. Returns shards compressed.
+     */
+    archive(): Promise<number>;
+    /** Gzip up to `budget` plain shards in one day's `bodies/` directory. */
+    private archiveDay;
 }
 
 /**
- * AuditWriter — the daemon's file-backed audit sink (request-audit-log, design
- * D4/D5). Registered as `@omnicross/core`'s audit sink when audit is enabled; its
- * {@link record} is what `recordAudit` hands each assembled record to.
+ * AuditWriter — the daemon's file-backed audit sink (request-audit-log design
+ * D4/D5, re-laid-out by audit-store-sharding design D2). Registered as
+ * `@omnicross/core`'s audit sink when audit is enabled; its {@link record} is
+ * what `recordAudit` hands each assembled record to.
  *
- * FIRE-AND-FORGET (hard constraint): {@link record} DEFERS the fs append off the
+ * FIRE-AND-FORGET (hard constraint): {@link record} DEFERS all fs work off the
  * caller's stack (an injectable `defer`, default a zero-delay timer — the
  * `UsageRecorder` precedent) and returns immediately, so the relay response path
- * never waits on disk I/O. A write error is swallowed + logged (a failing audit
- * store must never affect a relay). Each record is appended as ONE JSON line to
- * `audit/audit-YYYY-MM-DD.jsonl` (the record's LOCAL date), matching the
- * `usage-events.jsonl` pattern — no new dependency, TTL is a whole-file unlink.
+ * never waits on disk I/O. Delta encoding rides that same deferred tick and is
+ * pure memory, so it can never stall a response either. A write error is
+ * swallowed + logged (a failing audit store must never affect a relay).
+ *
+ * Each record is split across TWO destinations under `audit/audit-YYYY-MM-DD/`:
+ *
+ *  - `meta.jsonl` — one small JSON line WITHOUT bodies. This is what queries and
+ *    the stats sidecar read, so a listing no longer pays for megabytes of prompt.
+ *  - `bodies/<sessionKey>.jsonl` — the captured bodies, sharded per conversation
+ *    and delta-encoded against the session's previous turn.
+ *
+ * The two writes are INDEPENDENT: the metadata line is the canonical record, so a
+ * body-shard failure is logged and the metadata still lands. When a shard write
+ * fails the session's encoding base is dropped, otherwise the next turn would
+ * chain a delta onto a base no reader can find.
  *
  * @module @omnicross/daemon/audit/AuditWriter
  */
@@ -2352,23 +2455,37 @@ declare class AuditPruneSweeper {
 declare class AuditWriter {
     private readonly auditDir;
     private readonly logger;
-    /** Deferral used by `record()` to schedule the append off the caller's path. */
+    /** Deferral used by `record()` to schedule the writes off the caller's path. */
     private readonly defer;
-    private dirEnsured;
+    /** Day directories already created this process (avoids an mkdir per record). */
+    private readonly ensuredDirs;
+    /** Per-session encoding bases. Memory-only; a miss simply writes a full snapshot. */
+    private readonly bases;
     constructor(auditDir: string, logger: Logger, 
-    /** Deferral used by `record()` to schedule the append off the caller's path. */
+    /** Deferral used by `record()` to schedule the writes off the caller's path. */
     defer?: (fn: () => void) => void);
     /**
-     * Enqueue one record for append. Returns IMMEDIATELY (fire-and-forget); the fs
-     * write happens on the deferred tick. A failure is logged, never thrown.
+     * Enqueue one record. Returns IMMEDIATELY (fire-and-forget); every fs write and
+     * the delta encoding happen on the deferred tick. A failure is logged, never thrown.
      */
     record(record: AuditRecord): void;
+    /** Drop all retained encoding bases (config reload / shutdown / test teardown). */
+    reset(): void;
     /**
-     * Append synchronously — the awaitable form tests use to assert the line landed.
-     * Ensures the `audit/` directory exists on first write (lazy, like the usage
-     * store's lazy file creation).
+     * Append synchronously — the awaitable form tests use to assert a line landed.
+     * Writes the metadata line first (canonical), then the body shard.
      */
     appendNow(record: AuditRecord): void;
+    /** Create a directory once per process and remember it. */
+    private ensureDir;
+    /** Write the body-free metadata line + refresh the exact-count sidecar. */
+    private appendMeta;
+    /**
+     * Write the delta-encoded body shard for one record. A no-op when nothing was
+     * captured or when the session key is missing/unsafe — in which case the body
+     * is dropped rather than written to an unvalidated path.
+     */
+    private appendBody;
 }
 
 /**