billion-context-pi 0.1.75 → 0.1.76-pr.513.331

package/README.md

@@ -10,6 +10,14 @@ The model decides <em>when</em> and <em>what</em> to compress — not a hard lim
 
 ---
 
+## Community
+
+QQ Group:
+1056132097 (full)
+1108730198 (open)
+
+---
+
 ## 📄 Paper / Preprint
 
 - **[Model-Driven Incremental Hierarchical Compression: Training-Free Multi-Generational Context Management for Long-Lived Coding Agents](./paper/model-driven-incremental-hierarchical-compression-training-free-multi-generational-context-management-for-long-lived-coding-agents.md)** (English, v0.2)
@@ -34,12 +42,6 @@ A production-scale longitudinal study: 4.5 months, three hosts, 174,327 model ca
 
 > **Host support:** this plugin is for **Pi**. It does **not** support **OMP (oh-my-pi)** — on an OMP host it refuses to run. OMP users: use [billion-context](https://github.com/ranxianglei/billion-context) instead (`bili omp`, built-in plugin). Full client → package table: see [Which do I need?](#which-do-i-need); OMP details: [docs/omp.md](./docs/omp.md).
 
-## Community
-
-Discussion, help, and updates on QQ — one group covers all three projects (`billion-context`, `billion-context-pi`, `opencode-acp`):
-
-**QQ Group: 1056132097**
-
 ## Why?
 
 When conversations get long, the model runs out of context. Most tools hard-truncate — silently dropping earlier messages. **billion-context** gives the model a `compress` tool: the LLM decides **when** and **what** to compress into high-fidelity summaries, preserving critical details (file paths, decisions, error strings) while reclaiming context space.
@@ -251,11 +253,12 @@ The model receives detailed guidance (in its system prompt) on **when** to compr
 
 ### What gets protected
 
-billion-context protects three categories of content from compression:
+billion-context protects four categories of content from compression:
 
 1. **Always-protected tools** — `compress` calls are hard-protected (they're load-bearing metadata; compressing them breaks decompress and the "summary is historical" contract).
 2. **Soft recent-zone** — the last N messages (default 5) and last ~5K tokens are soft-protected so the model keeps its working set. Tool results from `decompress`, `search_context`, `read`, and `bash` are **excluded** from this zone: they're large and meant to be compressible once consumed, so they don't eat the protected budget.
 3. **Last user message** — always protected (user intent must survive).
+4. **User-configured tool protection** — `protectedTools` / `protectedLatestTools` in `acp.json` hard-exclude matched tool calls+results (full history vs. latest-only; see [CONFIGURATION.md](./CONFIGURATION.md)).
 
 ## Session storage & migration
 

package/README.zh-CN.md

@@ -8,6 +8,14 @@
 
 ---
 
+## 社区
+
+QQ群:
+1056132097(已满)
+1108730198(未满)
+
+---
+
 ## 📄 论文 / 预印本
 
 - **[模型驱动的分层增量压缩:面向长寿命编码 Agent 的免训练多代上下文管理](./paper/模型驱动的分层增量压缩-免训练多代上下文管理.md)**(中文版,v0.2)
@@ -32,12 +40,6 @@
 
 > **宿主支持:** 本插件面向 **Pi**。它**不支持 OMP(oh-my-pi)** —— 在 OMP 宿主上会拒绝运行。OMP 用户请直接改用 [billion-context](https://github.com/ranxianglei/billion-context)(启动命令 bili omp);其他客户端的完整对照见[该选哪个?](#该选哪个)。OMP 详细说明:[docs/omp.zh-CN.md](./docs/omp.zh-CN.md)。
 
-## 社区
-
-交流、求助与更新都在 QQ——同一个群覆盖三个项目(`billion-context`、`billion-context-pi`、`opencode-acp`):
-
-**QQ 群:1056132097**
-
 ## 为什么选择 billion-context
 
 当对话变长,模型的上下文会耗尽。多数工具采用硬截断 —— 静默丢弃早期消息。**billion-context** 把 `compress` 工具交给模型:由 LLM 决定**何时**压缩、压缩**什么**,将内容压缩成高保真摘要,在回收上下文空间的同时保留关键细节(文件路径、决策、错误字符串)。
@@ -240,11 +242,12 @@ grep '\[error\]' ~/.pi/acp.log        # 汇总所有记录的失败
 
 ### 哪些内容会被保护
 
-billion-context 保护三类内容不被压缩:
+billion-context 保护四类内容不被压缩:
 
 1. **永久保护的工具** — `compress` 调用被硬保护(它们是承载关键元数据的;压缩它们会破坏 decompress 和"摘要是历史"的契约)。
 2. **软近期区** — 最后 N 条消息(默认 5)和最后约 5K token 被软保护,让模型保留工作集。来自 `decompress`、`search_context`、`read`、`bash` 的工具结果被**排除**出此区:它们体量大、消费后就该能压缩,所以不该占用保护预算。
 3. **最后一条用户消息** — 始终保护(用户意图必须存活)。
+4. **用户配置的工具保护** — `acp.json` 中的 `protectedTools` / `protectedLatestTools` 硬排除匹配的工具 call+result(全历史 vs 仅最近一次;见 [CONFIGURATION.zh-CN.md](./CONFIGURATION.zh-CN.md))。
 
 ## 会话存储与迁移
 

package/dist/{chunk-FTCH7KHF.js → chunk-44F6OZJV.js}

@@ -7,7 +7,7 @@ var __export = (target, all) => {
 // src/contract.ts
 var SIDECAR_SCHEMA_VERSION = 1;
 function sidecarProducer() {
-  return `billion-context-pi@${true ? "0.1.75" : "dev"}`;
+  return `billion-context-pi@${true ? "0.1.76" : "dev"}`;
 }
 
 export {
@@ -15,4 +15,4 @@ export {
   SIDECAR_SCHEMA_VERSION,
   sidecarProducer
 };
-//# sourceMappingURL=chunk-FTCH7KHF.js.map
+//# sourceMappingURL=chunk-44F6OZJV.js.map

package/dist/config.d.ts

@@ -216,7 +216,18 @@ export interface AdapterConfig {
     /** When omitted, the adapter reads `ctx.model.contextWindow` live each turn.
      *  Set explicitly for tests/headless runs. */
     modelContextLimit?: number;
+    /** Tool-name patterns (glob suffix allowed) whose EVERY call+result pair is
+     *  hard-excluded from compression — matching refs render as BLOCKED in every
+     *  view. Default: none. Intended for low-frequency high-value tools whose
+     *  outputs are independent content (e.g. skill loads); do NOT use for chatty
+     *  tools — protecting every instance grows context unboundedly (#639
+     *  rationale). Settable via acp.json since #499. */
     protectedTools?: string[];
+    /** Tool-name patterns (glob suffix allowed) whose LATEST call+result pair is
+     *  hard-excluded from compression; older pairs remain compressible. Default:
+     *  none. Intended for cumulative-snapshot tools where each call supersedes
+     *  the last. Settable via acp.json since #499. */
+    protectedLatestTools?: string[];
     preserveRecentMessages?: number;
     /** Check npm for a newer billion-context-pi on startup and auto-install it. Default: true.
      *  Disable via `autoUpdate: false` or env `ACP_AUTO_UPDATE=0` to avoid all

package/dist/contract.js

@@ -1,7 +1,7 @@
 import {
   SIDECAR_SCHEMA_VERSION,
   sidecarProducer
-} from "./chunk-FTCH7KHF.js";
+} from "./chunk-44F6OZJV.js";
 export {
   SIDECAR_SCHEMA_VERSION,
   sidecarProducer

package/dist/delegate-tool.d.ts

@@ -278,10 +278,26 @@ export declare function buildChildArgs(args: DelegateArgs, rolePrompt: string, c
     useJsonStream: boolean;
     sessionFile: string | null;
 }>;
+interface ChildResult {
+    code: number | null;
+    signal?: NodeJS.Signals | null;
+    stdout: string;
+    stderr: string;
+    timedOut: boolean;
+}
 /** Model-facing summary of the ACTIVE async watchdog limits — built from the
  *  resolved policy so it stays truthful when timeouts are customized or
  *  disabled via acp.json/env. */
 export declare function asyncWatchdogDescription(overrideAsyncMs?: number | null): string;
+export declare function formatSyncResult(agent: string, runId: string, task: string, r: ChildResult, file: string): string;
+/** Exit-0 runs that produced no final reply text did not deliver anything
+ *  actionable (#506): a thinking-only stop (thinking budget exhausted) or a
+ *  silent no-op termination must not be announced as a plain completion — the
+ *  parent would trust the notification and never re-dispatch the task. Real
+ *  non-zero exits and watchdog kills (code null / timedOut) are handled by the
+ *  existing failure paths and stay excluded here. */
+export declare function genuineNoOutput(code: number | null, timedOut: boolean, output: string): boolean;
+export declare const NO_FINAL_OUTPUT_BODY: string;
 /** Watchdog/EOF finalize arrives with code === null (the child was killed or
  *  never exited). If a result was delivered (non-empty reply or stderr), the
  *  run counts as completed (0); otherwise it stays null = genuine failure. */

package/dist/index.js

@@ -2,7 +2,7 @@ import {
   SIDECAR_SCHEMA_VERSION,
   __export,
   sidecarProducer
-} from "./chunk-FTCH7KHF.js";
+} from "./chunk-44F6OZJV.js";
 
 // src/config-dir.ts
 import * as piModule from "@earendil-works/pi-coding-agent";
@@ -170,6 +170,8 @@ var KNOWN = /* @__PURE__ */ new Set([
   "debug",
   "autoUpdate",
   "modelContextLimit",
+  "protectedTools",
+  "protectedLatestTools",
   "toolBashDefaultTimeout",
   "toolOutputMaxBytes",
   "delegate",
@@ -195,13 +197,27 @@ function pickKnown(parsed) {
   return out;
 }
 function applyUserConfig(adapter, user) {
-  return {
+  const result = {
     ...adapter,
     ...user,
     coreOverrides: adapter.coreOverrides,
-    protectedTools: adapter.protectedTools,
     preserveRecentMessages: adapter.preserveRecentMessages
   };
+  for (const key of ["protectedTools", "protectedLatestTools"]) {
+    if (!(key in user)) continue;
+    const cleaned = cleanProtectionList(key, user[key]);
+    if (cleaned !== void 0) result[key] = cleaned;
+    else if (adapter[key] !== void 0) result[key] = adapter[key];
+    else delete result[key];
+  }
+  return result;
+}
+function cleanProtectionList(key, value) {
+  if (!Array.isArray(value) || value.length === 0 || !value.every((v2) => typeof v2 === "string" && v2.trim() !== "")) {
+    console.warn(`[bcp] acp.json "${key}" must be a non-empty array of non-empty strings \u2014 ignoring the value`);
+    return void 0;
+  }
+  return value.map((v2) => v2.trim());
 }
 
 // src/index.ts
@@ -2599,18 +2615,30 @@ function mergeRangesToThreshold(ranges, minChars) {
   const result = [];
   let batch = [];
   let batchChars = 0;
-  for (const r of ranges) {
-    batch.push(r);
-    batchChars += rangeChars(r);
-    if (batchChars >= minChars) {
-      result.push(mergeBatch(batch));
+  const closeBatch = () => {
+    if (batch.length > 0) {
+      if (batchChars >= minChars) result.push(mergeBatch(batch));
       batch = [];
       batchChars = 0;
     }
+  };
+  for (const r of ranges) {
+    const prev = batch[batch.length - 1];
+    if (prev && prev.endIndex !== void 0 && r.startIndex !== void 0 && r.startIndex > prev.endIndex + 1) {
+      closeBatch();
+    }
+    batch.push(r);
+    batchChars += rangeChars(r);
+    if (batchChars >= minChars) closeBatch();
   }
   if (batch.length > 0 && result.length > 0) {
     const prev = result[result.length - 1];
-    result[result.length - 1] = mergeBatch([prev, ...batch]);
+    const contiguous = prev.endIndex === void 0 || batch[0].startIndex === void 0 || batch[0].startIndex <= prev.endIndex + 1;
+    if (contiguous) {
+      result[result.length - 1] = mergeBatch([prev, ...batch]);
+    } else if (batchChars >= minChars) {
+      result.push(mergeBatch(batch));
+    }
   }
   return result;
 }
@@ -3127,10 +3155,29 @@ function applySingleRange(input) {
     messages: input.messages,
     state: input.state
   });
-  const rangeMessageIds = applyPairBoundaryAdjustments(
-    resolved,
-    input.messages
-  ).filter((id) => !isSummaryMessageId(id));
+  const plainRange = resolved.boundaryKind !== "block";
+  const liveCarrierIds = /* @__PURE__ */ new Set();
+  if (plainRange) {
+    for (const message of input.messages) {
+      const carrierOf = message.summaryOfBlockId;
+      if (carrierOf === void 0) continue;
+      if (blockById(input.state, carrierOf)?.active) {
+        liveCarrierIds.add(message.id);
+      }
+    }
+  }
+  const adjustedIds = applyPairBoundaryAdjustments(resolved, input.messages);
+  const skippedCarriers = adjustedIds.filter((id) => liveCarrierIds.has(id));
+  if (skippedCarriers.length > 0) {
+    warnings.push(
+      `Excluded ${skippedCarriers.length} checkpoint message(s) ${skippedCarriers.join(
+        ", "
+      )} from the compression range \u2014 they carry the visible summary of still-active block(s), which a plain message-ref range does not supersede. The checkpoints stay visible; to fold them, reference the block ids (bN..bM) instead.`
+    );
+  }
+  const rangeMessageIds = adjustedIds.filter(
+    (id) => !isSummaryMessageId(id) && !liveCarrierIds.has(id)
+  );
   if (rangeMessageIds.length > resolved.messageIds.length) {
     const indexByMessageId = /* @__PURE__ */ new Map();
     input.messages.forEach((m2, i) => indexByMessageId.set(m2.id, i));
@@ -5649,6 +5696,7 @@ function resolveConfig(adapter, liveContextLimit, provider, modelId) {
   const limit = !Number.isNaN(envLimitNum) && envLimitNum > 0 ? envLimitNum : adapter.modelContextLimit && adapter.modelContextLimit > 0 ? adapter.modelContextLimit : liveContextLimit > 0 ? liveContextLimit : FALLBACK_LIMIT;
   const config = defaultConfig(limit, {
     protectedTools: adapter.protectedTools ?? [],
+    protectedLatestTools: adapter.protectedLatestTools ?? [],
     preserveRecentMessages: adapter.preserveRecentMessages ?? 5,
     ...adapter.coreOverrides
   });
@@ -12729,7 +12777,7 @@ function resolveActivePack(adapter, cwd, provider, modelId, resolver) {
 }
 var HOST_VERSION = (() => {
   try {
-    return "0.1.75";
+    return "0.1.76";
   } catch {
     return "dev";
   }
@@ -14271,9 +14319,19 @@ async function runDelegate(pi, args, ctx, signal) {
           run.exitCode = code;
           run.exitSignal = signal2 ?? void 0;
           const output = applier.getReplyText().trim();
+          const noOutput = genuineNoOutput(code, Boolean(run.timedOut), output);
           let body2;
-          if (code === 0) {
+          if (code === 0 && !noOutput) {
             body2 = output || "(no output)";
+          } else if (noOutput) {
+            const parts = [NO_FINAL_OUTPUT_BODY];
+            const err = stderrText.trim();
+            if (err) parts.push(`stderr:
+${err}`);
+            const tail = activityStream ? await readActivityTail(activityFile) : "";
+            if (tail) parts.push(`last activity (full log: \`${activityFile}\`)
+${tail}`);
+            body2 = parts.join("\n\n");
           } else {
             const parts = [];
             const err = stderrText.trim();
@@ -14302,13 +14360,22 @@ ${output}`);
           try {
             const file2 = replyFile;
             if (output === "") {
-              const fallback = stderrText.trim();
-              await appendFile(file2, fallback ? `${fallback}
+              if (noOutput) {
+                const err = stderrText.trim();
+                await appendFile(file2, `${NO_FINAL_OUTPUT_BODY}
+${err ? `
+${err}` : ""}
+`);
+              } else {
+                const fallback = stderrText.trim();
+                await appendFile(file2, fallback ? `${fallback}
 ` : "(no output)\n");
+              }
             }
             const effectiveCode = effectiveExitCode(code, output, stderrText);
             run.result = { code, file: file2, body: body2 };
-            run.status = effectiveCode === 0 ? "completed" : "failed";
+            run.status = effectiveCode === 0 && !noOutput ? "completed" : "failed";
+            if (noOutput) logWarn("delegate", { event: "no-final-output", runId, agent: args.agent, code });
             run.finishedAt = Date.now();
             if (run.waiter) {
               debug.event("delegate-done", { runId, code, status: run.status, injected: false, via: "wait", outLen: output.length, file: file2 });
@@ -14400,7 +14467,19 @@ ${output}`);
   });
   const result = await waitForChild(child, signal, effectiveSyncMs);
   void cleanupTmp(tmpDir);
-  const body = result.timedOut || result.code !== 0 ? result.stderr.trim() || "(no stderr)" : result.stdout || "(no output)";
+  const syncNoOutput = genuineNoOutput(result.code, result.timedOut, result.stdout);
+  let body;
+  if (result.timedOut || result.code !== 0) {
+    body = result.stderr.trim() || "(no stderr)";
+  } else if (syncNoOutput) {
+    const err = result.stderr.trim();
+    body = err ? `${NO_FINAL_OUTPUT_BODY}
+
+stderr:
+${err}` : NO_FINAL_OUTPUT_BODY;
+  } else {
+    body = result.stdout;
+  }
   const file = await persistResult(runId, body);
   return formatSyncResult(args.agent, runId, taskText, result, file);
 }
@@ -14528,14 +14607,19 @@ function asyncWatchdogDescription(overrideAsyncMs) {
   return `A watchdog force-finishes a hung run: ${joined} \u2014 the result reflects whatever was produced.`;
 }
 function formatSyncResult(agent, runId, task, r, file) {
-  const status = r.timedOut ? "timed out" : r.code === 0 ? "completed" : "FAILED \u26A0\uFE0F";
+  const noOutput = genuineNoOutput(r.code, r.timedOut, r.stdout);
+  const status = r.timedOut ? "timed out" : r.code === 0 && !noOutput ? "completed" : "FAILED \u26A0\uFE0F";
   const header = `Delegate **${agent}** ${status} (runId \`${runId}\`, ${exitLabel(r.code, r.signal)}).`;
-  if (r.code === 0 && !r.timedOut) {
+  if (r.code === 0 && !r.timedOut && !noOutput) {
     return formatPayload(header, file, task);
   }
-  const body = r.timedOut ? "(timed out)" : r.stderr.trim() || "(no stderr)";
+  const body = r.timedOut ? "(timed out)" : r.code === 0 ? NO_FINAL_OUTPUT_BODY : r.stderr.trim() || "(no stderr)";
   return formatPayload(header, file, task, body);
 }
+function genuineNoOutput(code, timedOut, output) {
+  return !timedOut && code === 0 && output.trim().length === 0;
+}
+var NO_FINAL_OUTPUT_BODY = "child exited 0 but produced NO final reply text \u2014 likely a thinking-only stop (thinking budget exhausted) or a no-op termination. Treat the task as NOT delivered: inspect the activity log and session file, then re-dispatch if needed.";
 function effectiveExitCode(code, output, stderr) {
   return code ?? (output || stderr ? 0 : null);
 }
@@ -19477,7 +19561,7 @@ async function statusReport(runtime, ctx) {
   const sentTokens = estimateTokens(coreMessages, coveredIds, imageTokens) + systemPromptTokens;
   const viewSentTokens = adjustedTokenCount(runtime.core, coreMessages, state, config, sentTokens, imageTokens, systemPromptTokens);
   const turn = runtime.core.processTurn({ messages: coreMessages, state, config, tokenCount: anchorStale ? viewSentTokens : Math.max(viewSentTokens, realUsage?.tokens ?? 0) });
-  const versionStr = "0.1.75" ? `billion-context-pi@${"0.1.75"} \xB7 pack: ${resolveSurfaceMeta(runtime.adapter, ctx?.cwd ?? process.cwd(), ctx?.model?.provider, ctx?.model?.id).pack}` : void 0;
+  const versionStr = "0.1.76" ? `billion-context-pi@${"0.1.76"} \xB7 pack: ${resolveSurfaceMeta(runtime.adapter, ctx?.cwd ?? process.cwd(), ctx?.model?.provider, ctx?.model?.id).pack}` : void 0;
   let text = buildStatusPanel({
     version: versionStr,
     tokenCount: sessionTokens,
@@ -19586,6 +19670,41 @@ function carryHostSystemMessages(rebuilt, input) {
   return changed ? patched : rebuilt;
 }
 
+// src/tool-pair-sanitizer.ts
+function sanitizeToolPairing(messages) {
+  const empty = { messages, droppedResults: [] };
+  if (!Array.isArray(messages) || messages.length === 0) return empty;
+  try {
+    const callIds = /* @__PURE__ */ new Set();
+    for (const raw of messages) {
+      const msg = raw;
+      if (!msg || typeof msg !== "object" || msg.role !== "assistant" || !Array.isArray(msg.content)) continue;
+      for (const b2 of msg.content) {
+        if (b2 && b2.type === "toolCall" && typeof b2.id === "string" && b2.id.length > 0) callIds.add(b2.id);
+      }
+    }
+    let changed = false;
+    const out = [];
+    const droppedResults = [];
+    for (const raw of messages) {
+      const msg = raw;
+      if (msg && typeof msg === "object" && msg.role === "toolResult") {
+        const tcid = msg.toolCallId;
+        const label = typeof tcid === "string" && tcid.length > 0 ? tcid : "(missing toolCallId)";
+        if (typeof tcid !== "string" || tcid.length === 0 || !callIds.has(tcid)) {
+          droppedResults.push(label);
+          changed = true;
+          continue;
+        }
+      }
+      out.push(raw);
+    }
+    return changed ? { messages: out, droppedResults } : empty;
+  } catch {
+    return empty;
+  }
+}
+
 // src/degeneration.ts
 var DEFAULT_DEGENERATION_GUARD = { enabled: true, minRun: 200 };
 var MIN_VALID_MIN_RUN = 8;
@@ -20317,7 +20436,7 @@ async function autoInstallLatest(latest, extDirOverride) {
       "--no-fund",
       "--no-save"
     ];
-    const prevVersion = (await readPackageJson(join15(extDir, "package.json")))?.version ?? "0.1.75";
+    const prevVersion = (await readPackageJson(join15(extDir, "package.json")))?.version ?? "0.1.76";
     const { code, stderr } = await runNpmImpl(installArgs(latest), { cwd: npmDir, timeout: 6e4 });
     if (code !== 0) {
       logWarn("update", {
@@ -20335,7 +20454,7 @@ async function autoInstallLatest(latest, extDirOverride) {
     }
     const verify = await verifyInstall(npmDir, latest);
     if (!verify.ok) {
-      const rollbackTo = SEMVER_RE.test(prevVersion) ? prevVersion : "0.1.75";
+      const rollbackTo = SEMVER_RE.test(prevVersion) ? prevVersion : "0.1.76";
       logWarn("update", { event: "auto-install-verify-failed", latest, reason: verify.reason, rollbackTo });
       const rb = await runNpmImpl(installArgs(rollbackTo), { cwd: npmDir, timeout: 6e4 });
       logInfo("update", { event: "rollback", from: latest, to: rollbackTo, ok: rb.code === 0 });
@@ -20410,7 +20529,7 @@ async function checkForUpdate(autoUpdate, notify) {
     }
     const latest = await fetchLatestVersion(tag);
     if (!latest) return;
-    const current = runtimeVersion ?? "0.1.75";
+    const current = runtimeVersion ?? "0.1.76";
     const hasUpdate = isVersionNewer(latest, current);
     debug.event("update-check", {
       current,
@@ -20629,7 +20748,7 @@ function wireSessionLifecycle(pi, runtime, standDownIfProxied) {
     setDelegatePolicy(DEFAULT_DELEGATE_POLICY);
     const sid = ctx.sessionManager.getSessionId();
     const modelInfo = ctx.model;
-    logInfo("session", { event: "start", sid, cwd: ctx.cwd, debug: runtime.adapter.debug ?? null, version: true ? "0.1.75" : null, model: modelInfo?.id ?? null, modelApi: modelInfo?.api ?? null, contextWindow: modelInfo?.contextWindow ?? null });
+    logInfo("session", { event: "start", sid, cwd: ctx.cwd, debug: runtime.adapter.debug ?? null, version: true ? "0.1.76" : null, model: modelInfo?.id ?? null, modelApi: modelInfo?.api ?? null, contextWindow: modelInfo?.contextWindow ?? null });
     let delegateStoodDown = false;
     try {
       await runtime.reloadConfig(ctx.cwd);
@@ -20940,6 +21059,13 @@ ${rendered.text}${example}`);
         rebuilt = withHostSystem;
         logInfo("system-passthrough", { sid, event: "carried", systems: event.messages.filter((m2) => m2.role === "system").length, outMsgs: rebuilt.length });
       }
+      if (turn.state.blocks.length > 0) {
+        const sanitized = sanitizeToolPairing(rebuilt);
+        if (sanitized.droppedResults.length > 0) {
+          rebuilt = sanitized.messages;
+          logWarn("tool-pair-sanitize", { sid, event: "dropped-orphan-results", count: sanitized.droppedResults.length, droppedResults: sanitized.droppedResults });
+        }
+      }
       debug.event("context-out", { outMsgs: rebuilt.length, injected: turn.nudge?.shouldInject ?? false, emergency: turn.nudge?.breakdown?.emergencyOverride === 1 });
       const updateCheck = checkForUpdate(runtime.adapter.autoUpdate ?? true, (msg) => {
         if (ctx.hasUI) ctx.ui.notify(msg);