aiden-runtime 4.1.0 → 4.1.2

package/dist/cli/v4/providerBootSelector.js

@@ -0,0 +1,144 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * cli/v4/providerBootSelector.ts — Phase v4.1.2-bug1.
+ *
+ * Boot-time provider/model picker. Replaces the hardcoded
+ * `groq + llama-3.3-70b-versatile` fallback that bit new users:
+ * users authenticated with ChatGPT Plus OAuth (the post-v4.1.1
+ * onboarding default) booted into Groq anyway, and llama-3.3-70b's
+ * tool emission triggers Groq's first-party 400
+ * ("Failed to call a function. Please adjust your prompt.").
+ *
+ * Resolution precedence (caller in `aidenCLI.ts` enforces order):
+ *   1. Both CLI flags `--provider` + `--model` set      → use as-is
+ *   2. One CLI flag set                                  → use it, resolve other
+ *   3. Persisted config (model-selection.json) complete  → use as-is
+ *   4. Persisted config partial                          → use it, resolve other
+ *   5. Neither → priority-list auto-pick                 → THIS MODULE
+ *   6. Nothing authed                                    → hardcoded fallback
+ *
+ * `resolveBootProvider()` covers cases 1–5; the caller composes the
+ * input shape and falls back when this returns `null` (case 6).
+ *
+ * Test surface: the enumerator is injected so unit tests mock it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BOOT_PRIORITY = void 0;
+exports.findProviderForModel = findProviderForModel;
+exports.resolveBootProvider = resolveBootProvider;
+const doctorLiveness_1 = require("./doctorLiveness");
+const registry_1 = require("../../providers/v4/registry");
+/**
+ * Provider id ordering for auto-pick. Higher in the list = preferred.
+ * OAuth subscription flows lead because they have no API-key
+ * onboarding friction and are the default v4.1.1 install path.
+ */
+exports.BOOT_PRIORITY = [
+    'chatgpt-plus', // OAuth — primary onboarding flow
+    'claude-pro', // OAuth — Anthropic equivalent
+    'anthropic', // API key — power-user tier
+    'openai', // API key — power-user tier
+    // Phase v4.1.2-deepseek: paid tier, strong tool-caller, ranked
+    // above groq for the same first-run-UX reason — groq's free-tier
+    // tool emission was the original bug1 (llama-3.3-70b 400s on
+    // tool calls).
+    'deepseek', // API key — paid, strong tool-caller (V4 Pro)
+    'groq', // free-tier API key — common but tool-emission flaky
+    'ollama', // local — only if daemon up
+];
+/**
+ * Walk every provider's `modelIds` and return the entry that lists
+ * `modelId`. Used by the `--model`-only path to validate the model
+ * is at least known to one provider before we accept it.
+ */
+function findProviderForModel(modelId) {
+    for (const entry of Object.values(registry_1.PROVIDER_REGISTRY)) {
+        if (entry.modelIds.includes(modelId))
+            return entry;
+    }
+    return null;
+}
+/**
+ * Resolve the boot provider + model. Returns `null` when no choice
+ * could be inferred AND nothing is authed (the caller falls back to
+ * the hardcoded `groq + llama-3.3-70b-versatile` default in that
+ * one case).
+ *
+ * Throws (`Error`) when input is internally inconsistent — e.g. the
+ * user passed `--model foo` for a model no provider declares. Caller
+ * surfaces the message via the standard error path.
+ */
+async function resolveBootProvider(input, enumerate) {
+    const { cliProviderId, cliModelId, cfgProviderId, cfgModelId } = input;
+    // Case 1: both CLI flags set.
+    if (cliProviderId && cliModelId) {
+        return { providerId: cliProviderId, modelId: cliModelId, source: 'cli-flag' };
+    }
+    // Case 2a: `--provider` only. Use that provider + its first
+    // non-codex model. The registry might not know this provider; we
+    // accept it as-is (the runtime resolver will throw a clearer error
+    // later if it's bogus).
+    if (cliProviderId && !cliModelId) {
+        const entry = registry_1.PROVIDER_REGISTRY[cliProviderId];
+        const modelId = entry ? (0, doctorLiveness_1.pickProbeModel)(entry) : '';
+        if (!modelId) {
+            throw new Error(`--provider '${cliProviderId}' set but no model could be inferred. ` +
+                `Pass --model explicitly.`);
+        }
+        return { providerId: cliProviderId, modelId, source: 'cli-flag-partial' };
+    }
+    // Case 2b: `--model` only. Verify the model is known to some
+    // provider; pick the matching provider.
+    if (!cliProviderId && cliModelId) {
+        const entry = findProviderForModel(cliModelId);
+        if (!entry) {
+            throw new Error(`--model '${cliModelId}' is not declared by any provider in the ` +
+                `registry. Run \`aiden model\` to see available models, or pass ` +
+                `--provider explicitly.`);
+        }
+        return { providerId: entry.id, modelId: cliModelId, source: 'cli-flag-partial' };
+    }
+    // Case 3: persisted config — both fields set.
+    if (cfgProviderId && cfgModelId) {
+        return { providerId: cfgProviderId, modelId: cfgModelId, source: 'persisted-config' };
+    }
+    // Case 4a: config has provider, no model — resolve via pickProbeModel.
+    if (cfgProviderId && !cfgModelId) {
+        const entry = registry_1.PROVIDER_REGISTRY[cfgProviderId];
+        const modelId = entry ? (0, doctorLiveness_1.pickProbeModel)(entry) : '';
+        if (modelId) {
+            return { providerId: cfgProviderId, modelId, source: 'config-partial' };
+        }
+        // Unknown provider in config — fall through to auto-pick rather
+        // than refusing to boot.
+    }
+    // Case 4b: config has model only — same shape as Case 2b but
+    // softer: fall through to auto-pick if the model isn't found in
+    // the registry (config can lag the codebase).
+    if (!cfgProviderId && cfgModelId) {
+        const entry = findProviderForModel(cfgModelId);
+        if (entry) {
+            return { providerId: entry.id, modelId: cfgModelId, source: 'config-partial' };
+        }
+    }
+    // Case 5: auto-pick from priority list.
+    const configured = await enumerate();
+    for (const id of exports.BOOT_PRIORITY) {
+        const hit = configured.find((c) => c.entry.id === id && c.configured);
+        if (hit) {
+            return {
+                providerId: id,
+                modelId: (0, doctorLiveness_1.pickProbeModel)(hit.entry),
+                source: 'auto-priority',
+            };
+        }
+    }
+    // Case 6: nothing authed — caller falls back to hardcoded default.
+    return null;
+}

package/dist/cli/v4/sessionSummaryGate.js

@@ -0,0 +1,66 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * cli/v4/sessionSummaryGate.ts — Phase v4.1.2-followup-2.
+ *
+ * Pure decision helpers extracted from `ChatSession.maybeAutoSummarize`
+ * so the threshold + mtime/size-grew logic is unit-testable without
+ * standing up a full ChatSession + mocked agent loop.
+ *
+ *   shouldAutoSummarize → returns {fire: true} or
+ *                         {fire: false, reason: 'short'|'unconfigured'|'no-paths'}.
+ *                         ChatSession uses the reason tag to log the right
+ *                         user-visible message.
+ *
+ *   memoryGrewBetween → strict size-or-mtime comparison so the caller can
+ *                       detect "the model actually fired session_summary"
+ *                       even when the tool wrote without growing the file
+ *                       length (e.g. replaced a previous same-length entry).
+ *
+ * No I/O here. ChatSession owns the fs.stat + display.warn / display.dim.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SESSION_SUMMARY_MIN_TURNS = void 0;
+exports.shouldAutoSummarize = shouldAutoSummarize;
+exports.memoryGrewBetween = memoryGrewBetween;
+/** Minimum user-message turns required before auto-summary triggers. */
+exports.SESSION_SUMMARY_MIN_TURNS = 3;
+/**
+ * Decide whether the /quit auto-summary should fire. Threshold lives
+ * here as the single source of truth; ChatSession imports the constant
+ * so the user-facing log message ("need 3+") cites the exact value.
+ */
+function shouldAutoSummarize(input) {
+    if (input.userTurns < exports.SESSION_SUMMARY_MIN_TURNS) {
+        return { fire: false, reason: 'short' };
+    }
+    if (input.unconfigured) {
+        return { fire: false, reason: 'unconfigured' };
+    }
+    if (!input.memoryPath) {
+        return { fire: false, reason: 'no-paths' };
+    }
+    return { fire: true };
+}
+/**
+ * True iff MEMORY.md grew (longer) or was touched (newer mtime) between
+ * the two snapshots. Used to detect whether the agent actually fired
+ * the session_summary tool inside the synthetic turn — if not, the
+ * user sees a warning instead of a misleading "saved" message.
+ *
+ * The size-OR-mtime disjunction (not just size>before) covers the case
+ * where session_summary replaces an existing same-length entry: file
+ * size stays the same but mtime advances.
+ */
+function memoryGrewBetween(before, after) {
+    if (after.size > before.size)
+        return true;
+    if (after.mtime > before.mtime)
+        return true;
+    return false;
+}

package/dist/cli/v4/toolPreview.js

@@ -0,0 +1,139 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * cli/v4/toolPreview.ts — Phase v4.1.2 alive-core.
+ *
+ * Clean per-tool argument previews. Replaces the old
+ * `JSON.stringify(args)` blob in `display.toolPreview` with a
+ * tool-aware lookup that extracts the primary argument (the one
+ * actually useful at a glance — `command` for terminal, `path` for
+ * file ops, `query` for search, etc.).
+ *
+ * Falls back to the original full-JSON stringification when the tool
+ * isn't in the map or the primary arg is absent. This keeps unknown
+ * tools rendering exactly as before — additive only.
+ *
+ * Adding a new tool with a non-obvious primary arg? Add it here.
+ * Tools whose `args` shape is "the arg is meaningful at-a-glance"
+ * (a path, a query, a command, a URL, an id, a name) belong in this map.
+ * Tools whose args are a small flag bag (e.g. system_info has no args
+ * worth showing) can be omitted — the renderer hides the args block
+ * entirely when the map returns `null` and the arg object is empty.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TOOL_PRIMARY_ARG = void 0;
+exports.buildToolPreview = buildToolPreview;
+/**
+ * Map of tool-name → name of the property in `args` that should render
+ * as the at-a-glance preview. Stable contract; tests assert specific
+ * entries.
+ */
+exports.TOOL_PRIMARY_ARG = {
+    // ── terminal / execution ─────────────────────────────────────────────
+    shell_exec: 'command',
+    execute_code: 'code',
+    // ── file ops ─────────────────────────────────────────────────────────
+    file_read: 'path',
+    file_write: 'path',
+    file_patch: 'path',
+    file_list: 'path',
+    file_copy: 'source',
+    file_move: 'source',
+    file_delete: 'path',
+    // ── web ──────────────────────────────────────────────────────────────
+    web_search: 'query',
+    deep_research: 'query',
+    youtube_search: 'query',
+    fetch_url: 'url',
+    fetch_page: 'url',
+    open_url: 'url',
+    // ── browser ──────────────────────────────────────────────────────────
+    browser_navigate: 'url',
+    browser_click: 'selector',
+    browser_fill: 'selector',
+    browser_type: 'selector',
+    browser_scroll: 'selector',
+    browser_extract: 'selector',
+    browser_get_url: '', // no args — present so map lookup hits
+    browser_screenshot: 'path',
+    browser_close: '',
+    // ── memory ───────────────────────────────────────────────────────────
+    memory_add: 'content',
+    memory_remove: 'content',
+    memory_replace: 'old',
+    // ── skills ───────────────────────────────────────────────────────────
+    skill_view: 'name',
+    skill_manage: 'action',
+    skills_list: '',
+    // ── sessions ─────────────────────────────────────────────────────────
+    session_search: 'query',
+    session_list: '',
+    session_summary: 'trigger',
+    // ── process ──────────────────────────────────────────────────────────
+    process_spawn: 'command',
+    process_kill: 'pid',
+    process_list: '',
+    process_wait: 'pid',
+    process_log_read: 'pid',
+    // ── subagent ─────────────────────────────────────────────────────────
+    subagent_fanout: 'mode',
+    // ── system / misc ────────────────────────────────────────────────────
+    system_info: '',
+    now_playing: '',
+    get_natural_events: '',
+};
+/**
+ * Maximum visible characters for the preview value. Long commands /
+ * full file contents get truncated with an ellipsis so a single tool
+ * row stays on one line at typical terminal widths.
+ */
+const PREVIEW_MAX_CHARS = 120;
+/**
+ * Build the per-tool preview string for `args`. Returns:
+ *   - `null` when the tool isn't in the map (caller falls back to the
+ *     legacy JSON.stringify path),
+ *   - `''` (empty string) when the tool is in the map but has no
+ *     meaningful primary arg (caller renders just the tool name),
+ *   - the truncated string value of the primary arg otherwise.
+ *
+ * Exposed for unit tests. Pure function, no side effects.
+ */
+function buildToolPreview(toolName, args) {
+    if (!Object.prototype.hasOwnProperty.call(exports.TOOL_PRIMARY_ARG, toolName)) {
+        return null;
+    }
+    const argKey = exports.TOOL_PRIMARY_ARG[toolName];
+    if (argKey === '')
+        return '';
+    if (!args || typeof args !== 'object')
+        return '';
+    const raw = args[argKey];
+    if (raw === undefined || raw === null)
+        return '';
+    let str;
+    if (typeof raw === 'string') {
+        str = raw;
+    }
+    else if (typeof raw === 'number' || typeof raw === 'boolean') {
+        str = String(raw);
+    }
+    else {
+        try {
+            str = JSON.stringify(raw);
+        }
+        catch {
+            str = String(raw);
+        }
+    }
+    // Collapse whitespace so multi-line commands stay on one preview row.
+    str = str.replace(/\s+/g, ' ').trim();
+    if (str.length > PREVIEW_MAX_CHARS) {
+        str = `${str.slice(0, PREVIEW_MAX_CHARS - 1)}…`;
+    }
+    return str;
+}

package/dist/core/v4/aidenAgent.js

@@ -61,7 +61,11 @@ class AidenAgent {
         /** Cached system prompt — invalidated by setPersonalityOverlay/markMemoryDirty/explicit. */
         this.cachedSystemPrompt = null;
         this.compressionEvents = 0;
-        this.memoryDirty = null;
+        // Phase v4.1.2: tracks which identity / memory files need a system-
+        // prompt rebuild on the next turn. Empty set = clean. Plain Set keeps
+        // the membership-test path O(1) and avoids the combinatorial union
+        // type the previous representation grew when SOUL.md joined the list.
+        this.memoryDirty = new Set();
         /** Process-scoped tracker metrics for `/doctor`. */
         this.skillEnforcementMetrics = {
             recovered: 0, failed: 0, armed: 0, preArmed: 0,
@@ -100,6 +104,17 @@ class AidenAgent {
         this.refreshMemorySnapshot = opts.refreshMemorySnapshot;
         this.onMemoryRefresh = opts.onMemoryRefresh;
         this.lookupSkillRequiredTools = opts.lookupSkillRequiredTools;
+        // Phase v4.1.2-slice3: optional health registry (constructor-
+        // injected per the slice3 decision tree — no singleton). When
+        // wired, the caller already plumbed trackers into each subsystem
+        // via their own constructors; we just hold the read handle.
+        this
+            .subsystemHealthRegistry = opts.subsystemHealthRegistry;
+        // Phase v4.1.2-slice4: same pattern for the outcome tracker. The
+        // caller composes the tracker into `onToolCall`; we just keep a
+        // read handle for doctor.
+        this
+            .skillOutcomeTracker = opts.skillOutcomeTracker;
     }
     // ── Public method surface ────────────────────────────────────────────
     setProvider(adapter) {
@@ -124,6 +139,38 @@ class AidenAgent {
         this.cachedSystemPrompt = null;
         return true;
     }
+    /**
+     * Phase v4.1.2-bug2: replace the active provider/model fed into the
+     * `## Runtime` slot of the system prompt. Mirrors
+     * `setPersonalityOverlay` shape — mutate the cached PromptBuilder
+     * options + null the system-prompt cache so the next runConversation
+     * rebuilds with fresh values. Returns `true` when at least one of
+     * `providerId`/`modelId` actually changed; `false` is a no-op
+     * (caller may skip downstream signalling).
+     *
+     * This is NOT a dirty-bit invalidation — provider/model are
+     * in-memory field updates, not disk-backed reloads. The existing
+     * MemoryFile dirty-bit (`memory|user|soul`) governs file reload
+     * semantics and is intentionally not extended here.
+     *
+     * Called by chatSession.setProvider() after the adapter swap so the
+     * prompt's self-description stays in lockstep with the routed
+     * provider. Without this, `/model groq → chatgpt-plus` swaps the
+     * adapter (real requests route correctly) but the prompt keeps
+     * claiming "Provider: groq" for the rest of the session.
+     */
+    setActiveModel(providerId, modelId) {
+        const cur = this.promptBuilderOptions;
+        if (cur?.providerId === providerId && cur?.modelId === modelId)
+            return false;
+        this.promptBuilderOptions = {
+            ...(cur ?? {}),
+            providerId,
+            modelId,
+        };
+        this.cachedSystemPrompt = null;
+        return true;
+    }
     /**
      * Build (or return the cached) system prompt without driving the
      * provider. Powers the `/debug-prompt` command. Returns `null` when no
@@ -138,23 +185,31 @@ class AidenAgent {
         return this.cachedSystemPrompt;
     }
     /**
-     * Mark MEMORY.md / USER.md as dirty. The next `runConversation` will
-     * call `refreshMemorySnapshot`, rebuild the prompt, fire
-     * `onMemoryRefresh`, and clear the bit. No-op when no refresh callback
-     * is wired (frozen-snapshot semantics retained).
+     * Mark MEMORY.md / USER.md / SOUL.md as dirty. The next
+     * `runConversation` will rebuild the prompt, fire `onMemoryRefresh`,
+     * and clear the dirty set.
+     *
+     *   - 'memory' / 'user' refresh through `refreshMemorySnapshot` (the
+     *     in-memory MEMORY.md / USER.md blobs need a re-read). No-op when
+     *     no refresh callback is wired (frozen-snapshot semantics).
+     *   - 'soul' just invalidates the prompt cache; SOUL.md is re-read
+     *     from disk by `PromptBuilder.build()` on the next rebuild. No
+     *     snapshot callback required, so this kind always takes effect.
      */
     markMemoryDirty(file) {
-        if (!this.refreshMemorySnapshot)
+        if ((file === 'memory' || file === 'user') && !this.refreshMemorySnapshot) {
             return;
-        if (this.memoryDirty === null) {
-            this.memoryDirty = file;
-        }
-        else if (this.memoryDirty !== file) {
-            this.memoryDirty = 'both';
         }
+        this.memoryDirty.add(file);
     }
+    /**
+     * Returns the set of dirty files as a stable-sorted readonly array.
+     * Empty array = clean. (Phase v4.1.2: replaces the older
+     * `'memory' | 'user' | 'both' | null` return type now that SOUL.md
+     * joins the rotation — a Set scales without union-type explosion.)
+     */
     getMemoryDirtyState() {
-        return this.memoryDirty;
+        return [...this.memoryDirty].sort();
     }
     /** /doctor accessor for cumulative skill-enforcement counters. */
     getSkillEnforcementMetrics() {
@@ -319,28 +374,35 @@ class AidenAgent {
     }
     // ── Private helpers ──────────────────────────────────────────────────
     async refreshSystemPromptIfDirty() {
-        if (this.memoryDirty === null)
+        if (this.memoryDirty.size === 0)
             return;
-        if (!this.refreshMemorySnapshot || !this.promptBuilder || !this.promptBuilderOptions) {
-            this.memoryDirty = null;
+        if (!this.promptBuilder || !this.promptBuilderOptions) {
+            this.memoryDirty.clear();
             return;
         }
-        let snapshot;
-        try {
-            snapshot = await this.refreshMemorySnapshot();
-        }
-        catch {
-            // Leave the dirty bit set so the next turn retries. We don't break
-            // this turn over a transient memory-read failure.
-            return;
+        const dirtyFiles = [...this.memoryDirty].sort();
+        // 'soul' is satisfied by a cache invalidation alone — SOUL.md is
+        // re-read by PromptBuilder.build() on the next rebuild. 'memory'
+        // / 'user' need a snapshot refresh first.
+        const needsSnapshot = this.memoryDirty.has('memory') || this.memoryDirty.has('user');
+        if (needsSnapshot && this.refreshMemorySnapshot) {
+            let snapshot;
+            try {
+                snapshot = await this.refreshMemorySnapshot();
+            }
+            catch {
+                // Leave the dirty set as-is so the next turn retries. We don't
+                // break this turn over a transient memory-read failure.
+                return;
+            }
+            this.promptBuilderOptions = {
+                ...this.promptBuilderOptions,
+                memorySnapshot: snapshot,
+            };
         }
-        this.promptBuilderOptions = {
-            ...this.promptBuilderOptions,
-            memorySnapshot: snapshot,
-        };
         this.cachedSystemPrompt = null;
-        this.onMemoryRefresh?.(this.memoryDirty);
-        this.memoryDirty = null;
+        this.onMemoryRefresh?.(dirtyFiles);
+        this.memoryDirty.clear();
     }
     async ensureSystemPrompt() {
         if (!this.promptBuilder || !this.promptBuilderOptions)

package/dist/core/v4/capabilities.js

@@ -0,0 +1,89 @@
+"use strict";
+/**
+ * Copyright (c) 2026 Shiva Deore (Taracod).
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ *
+ * Aiden — local-first agent.
+ */
+/**
+ * core/v4/capabilities.ts — Phase v4.1.2-followup self-awareness.
+ *
+ * Runtime-computed manifest of what Aiden actually has loaded. Fed
+ * into the `## Runtime` slot of the system prompt so the model can
+ * answer questions like "what version are you" and "what tools do
+ * you have" from facts in its context, instead of hallucinating from
+ * whatever stale text used to live in SOUL.md.
+ *
+ * The manifest is computed at prompt-build time, never cached
+ * separately — it piggybacks on the existing system-prompt cache.
+ * On dirty-bit invalidation (memory / user / soul write, or
+ * personality overlay change) the prompt rebuilds and so do these
+ * numbers.
+ *
+ * No hardcoded "shipped vs deferred" framing here. The slot describes
+ * what IS loaded; absence is absence, not declared deferral.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildRuntimeManifest = buildRuntimeManifest;
+exports.renderRuntimeSlot = renderRuntimeSlot;
+const version_1 = require("../version");
+/**
+ * TODO(v4.2): replace with a proper channel registry enumeration once
+ * channels expose a registration API. Today the gateway adapters are
+ * wired directly in `api/server.ts` (DiscordAdapter, SlackAdapter,
+ * TelegramAdapter, WhatsAppAdapter, EmailAdapter, WebhookAdapter,
+ * TwilioAdapter, IMessageAdapter, SignalAdapter — nine in total) and
+ * interaction surfaces (cli REPL, MCP server, OpenAI-compat HTTP, voice
+ * mode, headless --no-ui, web dashboard) are scattered across cli/v4
+ * and api/. This list conflates the two for the user-visible "channels
+ * Aiden is available on" count; a follow-up should pick a single
+ * definition and back this with a real registry.
+ */
+const KNOWN_CHANNELS = Object.freeze([
+    'cli',
+    'telegram',
+    'discord',
+    'slack',
+    'mcp',
+    'voice',
+    'headless',
+    'web',
+    'api',
+]);
+/**
+ * Build the manifest from caller-supplied counts + persistent imports.
+ * Pure function — no side effects, no async, no I/O — so PromptBuilder
+ * can call it inline and keep the same determinism contract for its
+ * prefix-cache friendliness.
+ */
+function buildRuntimeManifest(opts) {
+    return {
+        version: version_1.VERSION,
+        toolCount: opts.toolCount,
+        skillCount: opts.skillCount,
+        channels: KNOWN_CHANNELS,
+        providerId: opts.providerId,
+        modelId: opts.modelId,
+    };
+}
+/**
+ * Render the manifest as the `## Runtime` prompt slot. Visual style
+ * mirrors the other slots in PromptBuilder — h2 header, simple
+ * `key: value` lines, no marketing speak.
+ *
+ * Always emits a complete block even when provider/model are unknown;
+ * the contract is "always present, even if some values are unknown"
+ * so the model doesn't second-guess whether the slot was suppressed.
+ */
+function renderRuntimeSlot(manifest) {
+    const lines = ['## Runtime'];
+    lines.push(`Version: ${manifest.version}`);
+    lines.push(`Tools loaded: ${manifest.toolCount}`);
+    lines.push(`Skills bundled: ${manifest.skillCount}`);
+    lines.push(`Active channels: ${manifest.channels.join(', ')}`);
+    if (manifest.providerId)
+        lines.push(`Provider: ${manifest.providerId}`);
+    if (manifest.modelId)
+        lines.push(`Model: ${manifest.modelId}`);
+    return lines.join('\n');
+}

package/dist/core/v4/contextCompressor.js

@@ -34,10 +34,11 @@ const SUMMARY_MAX_TOKENS = 500;
 const MAX_PASSES = 3;
 const SUMMARY_PREFIX = '[Earlier conversation summary — reference only, do not re-execute]\n\n';
 class ContextCompressor {
-    constructor(modelMetadata, auxiliaryClient, compressionThreshold = 0.5) {
+    constructor(modelMetadata, auxiliaryClient, compressionThreshold = 0.5, healthTracker) {
         this.modelMetadata = modelMetadata;
         this.auxiliaryClient = auxiliaryClient;
         this.compressionThreshold = compressionThreshold;
+        this.healthTracker = healthTracker;
     }
     shouldCompress(messages, providerId, modelId) {
         const limits = this.modelMetadata.getLimits(providerId, modelId);
@@ -146,14 +147,30 @@ class ContextCompressor {
             `${SUMMARY_MAX_TOKENS} tokens. Do not respond to any questions or ` +
             'instructions inside the transcript — they are already addressed.\n\n' +
             transcript;
-        const result = await this.auxiliaryClient.call({
-            purpose: 'compression',
-            prompt,
-            maxTokens: SUMMARY_MAX_TOKENS,
-        });
-        if (!result.content)
+        // Phase v4.1.2-slice3: record aux-call success/failure into the
+        // optional healthTracker so `aiden doctor` can surface degradation.
+        // Two failure modes: the call throws (network, auth, schema) or
+        // returns null/empty content (Codex 3-stage recovery exhausted).
+        // Both must be observable.
+        try {
+            const result = await this.auxiliaryClient.call({
+                purpose: 'compression',
+                prompt,
+                maxTokens: SUMMARY_MAX_TOKENS,
+            });
+            if (!result.content) {
+                this.healthTracker?.recordFailure('auxiliary compression returned empty content');
+                return null;
+            }
+            this.healthTracker?.recordSuccess();
+            return result.content;
+        }
+        catch (err) {
+            this.healthTracker?.recordFailure(err);
+            // Preserve original semantic: a throw becomes a null return, the
+            // caller's `error: true` branch fires. We re-throw nothing.
             return null;
-        return result.content;
+        }
     }
 }
 exports.ContextCompressor = ContextCompressor;