chainlesschain 0.166.22 → 0.166.25

package/src/commands/governed-skill-marketplace.js

@@ -0,0 +1,142 @@
+import { isGovernedSkillMarketplaceCliHost } from "../lib/evolution/governed-skill-marketplace-cli-host.js";
+import { startGovernedSkillMarketplaceBadgeServer } from "../lib/evolution/governed-skill-marketplace-badge.js";
+import { intArg } from "../lib/cli-arg.js";
+
+function host(value) {
+  if (!isGovernedSkillMarketplaceCliHost(value))
+    throw new Error(
+      "Governed Skill marketplace is unavailable: a trusted deployment host is required",
+    );
+  return value;
+}
+
+function output(value) {
+  console.log(JSON.stringify(value, null, 2));
+}
+
+export function registerGovernedSkillMarketplaceCommands(
+  marketplace,
+  { marketplaceHost = null } = {},
+) {
+  marketplace
+    .command("serve-badge <skill-name>")
+    .description(
+      "Serve a read-only public Eval badge for one explicitly pinned listing",
+    )
+    .requiredOption("--skill-version <version>", "Exact public catalog version")
+    .requiredOption(
+      "--manifest <digest>",
+      "Explicitly approved manifest digest",
+    )
+    .option(
+      "--listen <ip>",
+      "Bind IP; non-loopback explicitly publishes the badge",
+      "127.0.0.1",
+    )
+    .option(
+      "--port <port>",
+      "HTTP port (0 selects an available port)",
+      intArg("--port", { min: 0, max: 65535 }),
+      8321,
+    )
+    .option(
+      "--snapshot-seconds <seconds>",
+      "Snapshot lifetime; expiration requires explicit restart",
+      intArg("--snapshot-seconds", { min: 1, max: 3600 }),
+      600,
+    )
+    .action(async (skillName, options) => {
+      const service = await startGovernedSkillMarketplaceBadgeServer({
+        marketplaceHost: host(marketplaceHost),
+        skillName,
+        version: options.skillVersion,
+        manifestDigest: options.manifest,
+        listen: options.listen,
+        port: options.port,
+        snapshotTtlMs: options.snapshotSeconds * 1000,
+      });
+      const close = () => {
+        service.close().catch(() => {
+          process.exitCode = 1;
+        });
+      };
+      process.once("SIGINT", close);
+      process.once("SIGTERM", close);
+      service.server.once("close", () => {
+        process.removeListener("SIGINT", close);
+        process.removeListener("SIGTERM", close);
+      });
+      console.log(`Public Eval badge: ${service.url}`);
+    });
+
+  marketplace
+    .command("inspect <skill-name>")
+    .description(
+      "Verify a signed Skill listing for the deployment's fixed target",
+    )
+    .option("--skill-version <version>", "Exact catalog version")
+    .action(async (skillName, options) =>
+      output(
+        await host(marketplaceHost).inspect({
+          skillName,
+          version: options.skillVersion ?? null,
+        }),
+      ),
+    );
+
+  marketplace
+    .command("install <skill-name>")
+    .description(
+      "Persist verified candidate files and governance state; does not activate the Skill",
+    )
+    .option("--skill-version <version>", "Exact catalog version")
+    .requiredOption(
+      "--manifest <digest>",
+      "Manifest digest returned by inspect",
+    )
+    .option(
+      "--expected-state <digest>",
+      "Current state digest for an update; omitted for first stage",
+    )
+    .action(async (skillName, options) =>
+      output(
+        await host(marketplaceHost).install({
+          skillName,
+          version: options.skillVersion ?? null,
+          manifestDigest: options.manifest,
+          expectedStateDigest: options.expectedState ?? null,
+        }),
+      ),
+    );
+
+  marketplace
+    .command("state <skill-name>")
+    .description("Read the verified durable governed Skill state")
+    .action(async (skillName) =>
+      output(await host(marketplaceHost).state({ skillName })),
+    );
+
+  for (const operation of ["rollout", "revoke"]) {
+    marketplace
+      .command(`${operation} <skill-name>`)
+      .description(
+        operation === "rollout"
+          ? "Advance exactly one stage using a verified Pilot receipt"
+          : "Roll back using a verified revocation receipt",
+      )
+      .requiredOption("--expected-state <digest>", "Exact current state digest")
+      .requiredOption(
+        "--receipt <reference>",
+        "Reference resolved and verified by deployment authority",
+      )
+      .action(async (skillName, options) =>
+        output(
+          await host(marketplaceHost)[operation]({
+            skillName,
+            expectedStateDigest: options.expectedState,
+            receiptRef: options.receipt,
+          }),
+        ),
+      );
+  }
+}

package/src/commands/marketplace.js

@@ -5,6 +5,7 @@
  */
 
 import chalk from "chalk";
+import { registerGovernedSkillMarketplaceCommands } from "./governed-skill-marketplace.js";
 import { intArg, floatArg } from "../lib/cli-arg.js";
 import { logger } from "../lib/logger.js";
 import { parseJsonOption } from "../lib/parse-json-option.js";
@@ -82,13 +83,15 @@ function _printService(s) {
   logger.log(`  ${chalk.bold("Invocations:")}  ${s.invocationCount}`);
 }
 
-export function registerMarketplaceCommand(program) {
+export function registerMarketplaceCommand(program, dependencies = {}) {
   const mp = program
     .command("marketplace")
     .description(
       "Skill marketplace — publish skill services, record invocations, view stats",
     );
 
+  registerGovernedSkillMarketplaceCommands(mp, dependencies);
+
   mp.command("status-types")
     .description("List known service statuses")
     .option("--json", "Output as JSON")

package/src/commands/serve.js

@@ -7,13 +7,16 @@ import { logger } from "../lib/logger.js";
 import { createAgentRuntimeFactory } from "../runtime/runtime-factory.js";
 import { captureAgentSkillOutcomeIndex } from "../lib/evolution/agent-evolution-runtime-composition-brand.js";
 import { captureSkillVectorAuthority } from "../lib/skill-vector-authority.js";
+import { captureSkillRetrievalRevocationReader } from "../lib/evolution/skill-retrieval-revocation-authority.js";
 import { isEvolutionWorkbenchCliHost } from "../lib/evolution/evolution-workbench-cli-host.js";
 import { isGovernedKnowledgeReviewHost } from "../lib/evolution/governed-knowledge-review-host.js";
+import { isGovernedKnowledgeRevocationHost } from "../lib/evolution/governed-knowledge-revocation-host.js";
 import path from "node:path";
 
 export function captureServeGovernanceHosts({
   evolutionWorkbenchHost = null,
   governedKnowledgeReviewHost = null,
+  governedKnowledgeRevocationHost = null,
 } = {}) {
   if (
     evolutionWorkbenchHost !== null &&
@@ -31,9 +34,18 @@ export function captureServeGovernanceHosts({
       "serve governedKnowledgeReviewHost must be a branded review host",
     );
   }
+  if (
+    governedKnowledgeRevocationHost !== null &&
+    !isGovernedKnowledgeRevocationHost(governedKnowledgeRevocationHost)
+  ) {
+    throw new TypeError(
+      "serve governedKnowledgeRevocationHost must be a branded revocation host",
+    );
+  }
   return Object.freeze({
     evolutionWorkbenchHost,
     governedKnowledgeReviewHost,
+    governedKnowledgeRevocationHost,
   });
 }
 
@@ -48,6 +60,12 @@ export function registerServeCommand(program, dependencies = {}) {
     dependencies.skillVectorAuthority == null
       ? null
       : captureSkillVectorAuthority(dependencies.skillVectorAuthority);
+  const skillRetrievalRevocationReader =
+    dependencies.skillRetrievalRevocationReader == null
+      ? null
+      : captureSkillRetrievalRevocationReader(
+          dependencies.skillRetrievalRevocationReader,
+        );
   const governanceHosts = captureServeGovernanceHosts(dependencies);
   const serve = program
     .command("serve")
@@ -170,6 +188,7 @@ export function registerServeCommand(program, dependencies = {}) {
               evolutionCompositionFactory,
               skillOutcomeIndex,
               skillVectorAuthority,
+              skillRetrievalRevocationReader,
               ...governanceHosts,
               maxQueuedRequests,
             });
@@ -203,6 +222,7 @@ export function registerServeCommand(program, dependencies = {}) {
               evolutionCompositionFactory,
               skillOutcomeIndex,
               skillVectorAuthority,
+              skillRetrievalRevocationReader,
               ...governanceHosts,
               maxQueuedRequests,
             });
@@ -218,6 +238,7 @@ export function registerServeCommand(program, dependencies = {}) {
               : { evolutionCompositionFactory },
           skillOutcomeIndex,
           skillVectorAuthority,
+          skillRetrievalRevocationReader,
         }).createServerRuntime({
           port: parseInt(opts.port, 10),
           host: opts.host,

package/src/commands/skill.js

@@ -131,6 +131,7 @@ export function routeSkillSearch(skills, query, options = {}) {
     tags: options.tag ? [options.tag] : [],
     target: { os: options.os || process.platform },
     outcomeMetrics: options.outcomeMetrics ?? null,
+    revocationReader: options.revocationReader ?? null,
     vectorScores: options.vectorScores ?? null,
     topK: limit,
   });
@@ -575,6 +576,8 @@ export function registerSkillCommand(program, dependencies = {}) {
           {
             ...options,
             outcomeMetrics: outcomeAuthority.metrics,
+            revocationReader:
+              dependencies.skillRetrievalRevocationReader ?? null,
           },
           skillVectorAuthority,
         );

package/src/data/changelog.json

@@ -1,6 +1,45 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.25",
+      "cliVersions": ["0.166.24", "0.166.25"],
+      "date": "2026-09-06",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.25: preserve large-file reading progress",
+          "body": "> `chainlesschain` **0.166.24 -> 0.166.25** (2026-09-06).\n\n- **Forward progress after compaction**: keep bounded, version-aware file cursors\n  outside the message history and include them in each model request. Reading an\n  older page cannot move the cursor backwards; changes on disk reset it.\n- **Repeated-read recovery**: detect unchanged pages across sequential and parallel\n  tool batches, including after context compaction. Give the model a recovery\n  opportunity, then fail explicitly after three batches with no new reading\n  progress instead of consuming tokens indefinitely or claiming completion.\n- **Normal reading remains available**: new pages, changed files, different\n  rendering modes and other tool work clear the repeated-read streak. New runs\n  can intentionally revisit a file.\n- **Validation**: cover a large document traversed to EOF through repeated\n  compaction, exact-page loops, parallel reads, changed-file reads and cursor\n  preservation. CLI publication requires the complete exact-commit operating\n  system matrices in `CLI CI` and `CLI Strict Sandbox`."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.24",
+      "cliVersions": ["0.166.22", "0.166.24"],
+      "date": "2026-09-06",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.24: durable long-running IDE tasks",
+          "body": "> `chainlesschain` **0.166.22 -> 0.166.24** (published 2026-09-06;\n> incorporates the unpublished 0.166.23 candidate).\n> Immutable tag `v-npm-0-166-24` resolves to\n> `9cf9c7bfd70ddb8b12b0d157dd6faa1ceb152436`: the complete\n> [CLI CI](https://github.com/chainlesschain/chainlesschain/actions/runs/34006348566)\n> and [CLI Strict Sandbox](https://github.com/chainlesschain/chainlesschain/actions/runs/34006348459)\n> matrices passed, followed by\n> [npm publishing and public-install verification](https://github.com/chainlesschain/chainlesschain/actions/runs/34007761162).\n> npm latest, Session Core `0.3.12` and Core DB `0.1.5` were read back on 2026-09-06.\n\n- **Long-running interactive turns**: remove the implicit 50-model-call ceiling\n  from interactive streamed Agent sessions. Explicit `--max-turns`, environment,\n  cost, and session budgets remain authoritative, while unattended runs retain\n  the conservative default ceiling.\n- **Bounded large-file traversal**: page reads by exact byte and line cursors,\n  including oversized Unicode and escaped single lines, and return an explicit\n  continuation cursor without claiming unread ranges.\n- **No redundant file reinjection**: cache a bounded set of unchanged read\n  pages per Agent loop, invalidate entries when the file version changes, and\n  reference an already-visible page instead of injecting the same content into\n  the model again.\n- **Compaction-safe progress**: retain the newest file-read cursor through both\n  micro-compaction and full context compression so a long task resumes from the\n  correct page rather than restarting a large file.\n- **Regression coverage**: exercise an 80-page task using more than 50 model\n  calls with repeated shadow and canonical compactions, proving completion with\n  every page read exactly once.\n- **Release-runtime compatibility**: invoke the isolated evolution evaluator\n  with the permission-system flag supported by the Node 22.12 release baseline,\n  preventing the publish gate from failing before child-package publication.\n- **Release boundary**: no child npm package version changes are required. This\n  exact commit must pass every configured Linux, Windows, and macOS job in\n  `CLI CI` and `CLI Strict Sandbox` before the immutable npm tag is created."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.23",
+      "cliVersions": ["0.1.5", "0.3.12", "0.166.22", "0.166.23"],
+      "date": "2026-09-06",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.23: durable governed evolution and Workbench controls",
+          "body": "> `chainlesschain` **0.166.22 -> 0.166.23**,\n> `@chainlesschain/core-db` **0.1.4 -> 0.1.5**, and\n> `@chainlesschain/session-core` **0.3.11 -> 0.3.12** (release candidates,\n> 2026-09-06; CLI 0.166.23 was not published separately and is superseded by\n> 0.166.24. The two child packages were published before 0.166.24).\n\n- **Public-install dependency closure**: ship Session Core's missing\n  `./evolvable-artifact` export and structured evolution memory updates, plus\n  Core DB's unprefixed named-parameter normalization. Publish these two child\n  packages before the exactly pinned CLI; the other 11 audited related package\n  payloads match their existing public releases and do not need a version bump.\n- **Governed knowledge rollback**: persist real Skill rollback, candidate\n  rejection, revocation admission fences, and targeted Wiki tombstones;\n  authenticate multi-hop Wiki provenance and recover interrupted settlement\n  without duplicate effects or reactivation of revoked sources.\n- **Durable Wiki and model boundaries**: authenticate pruning checkpoints and\n  retrieval projections, recover maintenance effects, and enforce bounded,\n  redacted durable projections at the model ingress boundary.\n- **Trusted Workbench assembly**: provide authenticated current-state\n  projections, durable review/rollback adapters, file-backed resources, and\n  one-use-bound control ports for signed CLI/App Server deployment modules.\n  Review batch completion uses the v2 receipt contract supported by the updated\n  JetBrains source; installed IDE extensions do not update automatically.\n- **Atomic watchdog reservations**: serialize first acquisition and expired\n  takeover across processes, publish only fully written records, and preserve\n  prior reservations when staging fails.\n- **Windows sandbox identity publication**: flush and close the helper's\n  identity record before a non-overwriting atomic move exposes it to the\n  broker. Late helper errors cannot overwrite an already-published identity;\n  post-spawn failures retain their original cause and remain fail-closed.\n- **Release and deployment boundary**: require the exact candidate SHA to pass\n  both complete three-platform CLI gates, including independent Core DB and\n  Session Core tests. Workbench remains unavailable without a real trusted\n  deployment, identity, and policy configuration; this release does not enable\n  unattended promotion or claim that the entire evolution roadmap is complete."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.22",

package/src/gateways/ws/ws-agent-handler.js

@@ -274,6 +274,7 @@ export class WSAgentHandler {
       );
     }
     this._compactionLlmQuery = compactionLlmQuery || null;
+    this._customCompactionChatFn = typeof compactionChatFn === "function";
     this._compactionSettlementBlock = null;
     this._compactionChatFn =
       compactionChatFn ||
@@ -836,7 +837,11 @@ export class WSAgentHandler {
     return null;
   }
 
-  async _compactCanonicalHistoryBeforeClaim(requestId, signal = null) {
+  async _compactCanonicalHistoryBeforeClaim(
+    requestId,
+    signal = null,
+    evolutionComposition = null,
+  ) {
     const { session } = this;
     if (
       session.autoCompact === false ||
@@ -873,6 +878,14 @@ export class WSAgentHandler {
           preserveCompletedExchange: true,
           llmQuery: this._compactionLlmQuery,
           chatFn: this._compactionChatFn,
+          ...(evolutionComposition === null
+            ? {}
+            : {
+                evolutionIngress: evolutionComposition.evolutionIngress,
+                chatFn: this._customCompactionChatFn
+                  ? this._compactionChatFn
+                  : undefined,
+              }),
           chatOptions: {
             cwd: session.projectRoot,
             sessionId: session.id,
@@ -1395,9 +1408,13 @@ export class WSAgentHandler {
           strictUsageTelemetry =
             this._resolveCanonicalUsageProtocol() === "call-ledger";
           if (strictUsageTelemetry) this._assertUsageLedgerWritable();
+          if (this._evolutionCompositionFactory !== null) {
+            evolutionComposition = await this._prepareEvolutionTurn(requestId);
+          }
           const compacted = await this._compactCanonicalHistoryBeforeClaim(
             requestId,
             turnSignal,
+            evolutionComposition,
           );
           if (!compacted) return;
         }
@@ -1429,7 +1446,10 @@ export class WSAgentHandler {
           return;
         }
       }
-      if (this._evolutionCompositionFactory !== null) {
+      if (
+        this._evolutionCompositionFactory !== null &&
+        evolutionComposition === null
+      ) {
         evolutionComposition = await this._prepareEvolutionTurn(requestId);
       }
       if (evolutionComposition !== null) {
@@ -1489,6 +1509,11 @@ export class WSAgentHandler {
       const approvalGate = await this._ensureApprovalGate();
       approvalGate?.beginTurn?.(requestId || `turn-${Date.now()}`);
       const loopOptions = {
+        ...(evolutionComposition === null
+          ? {}
+          : {
+              evolutionIngress: evolutionComposition.evolutionIngress,
+            }),
         provider: session.provider,
         model: activeModel,
         baseUrl: session.baseUrl || "http://localhost:11434",
@@ -2228,11 +2253,15 @@ export class WSAgentHandler {
         const expectedMessages = [...session.messages];
         let result = null;
         let commandError = null;
+        let compactionEvolution = null;
         let compactionUsageCall = null;
         let compactionUsageSettled = false;
         try {
           this.assertSessionBudgetAdmission("WebSocket compaction");
           this._sessionHostLease?.assert?.();
+          compactionEvolution = await this._prepareEvolutionTurn(
+            `compact:${requestId || randomUUID()}`,
+          );
           result = await this._compactContextMemory(
             session.messages,
             {
@@ -2246,6 +2275,14 @@ export class WSAgentHandler {
               preserveCompletedExchange: true,
               llmQuery: this._compactionLlmQuery,
               chatFn: this._compactionChatFn,
+              ...(compactionEvolution === null
+                ? {}
+                : {
+                    evolutionIngress: compactionEvolution.evolutionIngress,
+                    chatFn: this._customCompactionChatFn
+                      ? this._compactionChatFn
+                      : undefined,
+                  }),
               chatOptions: {
                 cwd: session.projectRoot,
                 sessionId: session.id,
@@ -2428,6 +2465,26 @@ export class WSAgentHandler {
           // never retried by this command.
           this._emitCompactionUsage(requestId, usageEvent);
         }
+        if (
+          compactionEvolution !== null &&
+          result !== null &&
+          commandError === null
+        ) {
+          try {
+            await compactionEvolution.evolutionIngress.complete();
+          } catch {
+            commandError = this._latchCompactionSettlement({
+              code: "CC_AGENT_EVOLUTION_INGRESS_FAILED",
+              reason: "compaction_evolution_completion_failed",
+              commitState: "evolution-unconfirmed",
+            });
+            this.interaction.emit("compaction-degraded", {
+              requestId,
+              ...commandError,
+              summaryMode: "none",
+            });
+          }
+        }
         this.interaction.emit("command-response", {
           requestId,
           command: cmd,

package/src/gateways/ws/ws-server.js

@@ -392,6 +392,8 @@ export class ChainlessChainWSServer extends EventEmitter {
           options.remoteMembershipCoordinator === null
             ? null
             : () => this._requireRemoteMembershipCoordinator(),
+        refreshCoordinatorOnEnumeration:
+          options.remoteMembershipCoordinator != null,
         membershipAuthority:
           options.remoteMembershipAuthority === null
             ? null

package/src/generated/cc-agent-protocol.schema.json

@@ -3655,7 +3655,9 @@
                     "evolution/workbench/review",
                     "evolution/workbench/rollback",
                     "evolution/knowledge/conflicts",
-                    "evolution/knowledge/merge"
+                    "evolution/knowledge/merge",
+                    "evolution/knowledge/revocation/prepare",
+                    "evolution/knowledge/revocation/publish"
                   ]
                 }
               }

package/src/harness/golden-transcript.js

@@ -18,6 +18,7 @@ const VOLATILE_KEYS = new Set([
   "updatedAt",
   "duration",
   "durationMs",
+  "fileVersion",
   "permission_decision_id",
   "tool_use_id",
   "turn_id",

package/src/harness/prompt-compressor.js

@@ -10,13 +10,21 @@
  */
 
 import { createHash } from "node:crypto";
+import {
+  collectFileReadProgress,
+  FILE_READ_PROGRESS_PREFIX,
+  fileReadProgressBody,
+} from "../lib/read-file-page.js";
 import { feature, featureVariant } from "../lib/feature-flags.js";
 import { isAbortError } from "../lib/abort-utils.js";
 import {
   CONTEXT_WINDOWS,
   getContextWindow,
 } from "../lib/model-context-window.js";
-export { CONTEXT_WINDOWS, getContextWindow } from "../lib/model-context-window.js";
+export {
+  CONTEXT_WINDOWS,
+  getContextWindow,
+} from "../lib/model-context-window.js";
 import {
   DURABLE_SYSTEM_MESSAGE_KINDS,
   getDurableSystemMessageProvenance,
@@ -107,7 +115,14 @@ function buildBoundedHistory(messages, maxChars) {
 }
 
 function summaryPrompt(messages, maxChars) {
-  const schema = `{${STRUCTURED_HANDOFF_FIELDS.map((field) => `"${field}"`).join(",")}}`;
+  const schema = JSON.stringify(
+    Object.fromEntries(
+      STRUCTURED_HANDOFF_FIELDS.map((field) => [
+        field,
+        field === "objective" ? "" : [],
+      ]),
+    ),
+  );
   const instructions = [
     "Create a durable conversation handoff from the history below.",
     `Return exactly one strict JSON object with all keys in this order: ${schema}.`,
@@ -356,6 +371,7 @@ export class PromptCompressor {
       ? messages.filter((m) => !isPinned(m))
       : messages;
 
+    const readProgress = collectFileReadProgress(messages);
     const originalTokens = estimateMessagesTokens(messages);
     let result = [...working];
     const applied = [];
@@ -397,7 +413,10 @@ export class PromptCompressor {
     }
 
     if (result.length > this.maxMessages) {
-      result = this._truncate(result);
+      result = this._truncate(
+        result,
+        this.maxMessages - (readProgress.length ? 1 : 0),
+      );
       applied.push("truncate");
     }
 
@@ -417,6 +436,32 @@ export class PromptCompressor {
       result = sanitizeToolPairs(result);
     }
 
+    // The LLM summary may omit paging state. Preserve bounded cursors from the
+    // actual read results even when old tool pairs are removed completely.
+    if (applied.length && readProgress.length) {
+      result = result.filter(
+        (message) => fileReadProgressBody(message) === null,
+      );
+      const insertion = result.findIndex(
+        (message) => message.role !== "system",
+      );
+      result.splice(
+        insertion < 0 ? result.length : insertion,
+        0,
+        markDurableSystemMessage(
+          {
+            role: "system",
+            content:
+              FILE_READ_PROGRESS_PREFIX +
+              JSON.stringify(readProgress) +
+              "\nHistorical read positions, not retained file contents. Continue with nextRead when relevant; if the file changed or an earlier section is needed, read that specific section.",
+          },
+          DURABLE_SYSTEM_MESSAGE_KINDS.COMPACT_SUMMARY,
+        ),
+      );
+      applied.push("file-read-progress");
+    }
+
     const compressedTokens = estimateMessagesTokens(result);
     const stats = {
       strategy: applied.join("+") || "none",
@@ -493,7 +538,7 @@ export class PromptCompressor {
     return result;
   }
 
-  _truncate(messages) {
+  _truncate(messages, maxMessages = this.maxMessages) {
     const system = messages.filter(
       (m) => m.role === "system" && !isCompactionArtifact(m),
     );
@@ -502,7 +547,7 @@ export class PromptCompressor {
       (m) => (m.role !== "system" || isCompactionArtifact(m)) && m !== last,
     );
 
-    let slots = this.maxMessages - system.length;
+    let slots = maxMessages - system.length;
     if (last) slots -= 1;
 
     const recent = rest.slice(-Math.max(slots, 1));
@@ -627,6 +672,7 @@ export class PromptCompressor {
       // A durable-ledger write failure is authoritative too. Falling back here
       // would let the host continue after losing the model-call boundary.
       if (error?.runtimeLedgerPersistence === true) throw error;
+      if (error?.code === "CC_AGENT_EVOLUTION_INGRESS_FAILED") throw error;
       // A workflow-bound query may already have reached the provider. An
       // extractive fallback would make the outer durable effect look completed
       // and authorize a replay of that physically unknown request.

package/src/harness/provider-backed-compaction.js

@@ -3,6 +3,7 @@ import {
   PromptCompressor,
   sanitizeToolPairs,
 } from "./prompt-compressor.js";
+import { captureAgentEvolutionIngress } from "../lib/evolution/agent-evolution-ingress.js";
 
 const DEFAULT_MAX_OUTPUT_TOKENS = 2048;
 const MIN_MAX_OUTPUT_TOKENS = 256;
@@ -121,11 +122,35 @@ export function compactionTokenUsage(stats) {
  * contract instead of falling back to positional truncation.
  */
 export async function compactConversationWithProvider(messages, options = {}) {
+  const configuredIngress =
+    options.evolutionIngress ?? options.chatOptions?.evolutionIngress ?? null;
+  const evolutionIngress =
+    configuredIngress === null
+      ? null
+      : captureAgentEvolutionIngress(configuredIngress);
   const originalMessages = Array.isArray(messages) ? [...messages] : [];
   const provider = options.provider || null;
   const model = options.model || null;
   const maxOutputTokens = boundedMaxOutputTokens(options.maxOutputTokens);
-  const chatFn = options.chatFn;
+  let chatFn = options.chatFn;
+  if (evolutionIngress !== null) {
+    const { chatWithTools } = await import("../runtime/agent-core.js");
+    if (
+      (chatFn != null && chatFn !== chatWithTools) ||
+      options.llmQuery != null ||
+      options.compressor != null ||
+      (options.evolutionIngress != null &&
+        options.chatOptions?.evolutionIngress != null &&
+        options.evolutionIngress !== options.chatOptions.evolutionIngress)
+    ) {
+      const error = new TypeError(
+        "Evolution compaction requires the canonical model transport and compressor",
+      );
+      error.code = "CC_AGENT_EVOLUTION_INGRESS_FAILED";
+      throw error;
+    }
+    chatFn = chatWithTools;
+  }
   const invokeProviderCall = async (call) => {
     const callId = safeUsageCallId(await options.onProviderCallStart?.());
     try {
@@ -145,12 +170,14 @@ export async function compactConversationWithProvider(messages, options = {}) {
           return invokeProviderCall(async () => {
             const response = await chatFn([{ role: "user", content: prompt }], {
               ...(options.chatOptions || {}),
+              ...(evolutionIngress === null ? {} : { evolutionIngress }),
               provider,
               model,
               baseUrl: options.baseUrl,
               apiKey: options.apiKey,
               signal: options.signal,
               contextEngine: null,
+              contextMemorySkipPlanning: true,
               enabledToolNames: [],
               extraToolDefinitions: [],
               hostManagedToolPolicy: null,