Bound automatic compaction by rendered input

[KeenWill]

Summary

• preview the exact projected model-visible inventory before claiming an automatic context compaction
• choose an exact closed tool-exchange boundary whose compact JSON, configured prompt, and maximum output reservation fit the selected model context window
• re-render after the durable claim and terminalize the still-unsent call if a concurrent frontier change no longer fits

The prior raw-content estimate omitted JSON/provenance and prompt cost. The replacement bounds what the summary model actually receives and falls back to the latest safe prefix.

Meaningfully changed lines (excluding lockfiles): 624.

Validation

• formatting; workspace check; warning-denied Clippy; doctests; rustdoc; metadata; documentation, migration, numeric-bound, and panic gates
• focused persistence/unit tests and three ignored PostgreSQL process-runtime compaction scenarios
• complete no-fail-fast run: changed surfaces green; inherited host failures remain in one IANA alias fixture and local-socket ancestor-permission fixtures

Known ignored check: Web search live smoke (provider credits).

Numeric bounds

This slice adds or changes no numeric-bound ceiling.

Stack reconstruction ledger

• absorbed Harden daemon turn recovery and scheduler occupancy #1030 at eeee1c5b5
• absorbed Add fleet soak liveness harness #1028 at 4cdc5dfbc
• absorbed the numeric-bounds carrier through Make numeric-bound declarations fail closed #1125 at 546600143
• includes Provision isolated commissioned-session workspaces #1164 at 4e6abf6c7
• includes Read only appended reported-usage frontier deltas #1165 at 35b9075d1
• includes Read compacted usage from retained frontier suffixes #1166 at 89b1075d3
• immediate base Bound compacted usage candidate scans #1167 at ed22eba60

[coderabbitai]

Warning

Your free Security trial is over. An organization admin can activate billing to continue.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 45719971-f759-4359-a7a5-7ae604897393

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[KeenWill]

@codex review exact head 322a3a8

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[chatgpt-codex-connector]

You have reached your Codex usage limits for security reviews. Please try again later.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[github-actions]

Rust coverage (report only)

Report only. This measurement has no threshold, gates no merge, and
fails no check; it exists so untested code stays visible.

Measured suite	Outcome
workspace (--all-targets --all-features)	failure
persistence PostgreSQL (--ignored)	success
signalboxd PostgreSQL (--ignored)	failure
terminal-client PostgreSQL (--ignored)	success

What this number does not measure

• Doctests. cargo llvm-cov --doctests needs a nightly
  toolchain; this workspace pins stable, so the compile-fail
  sealing proofs and every other doctest are outside the
  denominator.
• Live smokes, which spend real network requests or
  credentials and are never run here: the tools-github and
  tools-web smokes stay --ignored, and the whole-daemon and
  real-provider terminal smokes are skipped by name above.
• The Swift native client, which Xcode measures separately.
• One environment-clearing test in signalbox-tools-exec,
  which instrumenting its supervisor process perturbs. The
  workflow comment on the workspace step states why; rust.yml
  runs that test uninstrumented and gates on it.
• Dedicated test files. cargo-llvm-cov excludes tests/
  and benches/ targets and *tests.rs modules from the
  report by default, so that test code is counted neither
  covered nor uncovered here. Inline #[cfg(test)] modules
  inside a source file are the exception: they are
  instrumented, and they land on both sides. A test body
  that ran counts as covered, which makes every percentage
  below optimistic; the body of an #[ignore]d test no
  measured suite runs counts as uncovered, which puts test
  lines into the file ranking. Read both tables as close,
  not exact.

Measure	Covered	Total	Percent
Lines	254205	311758	81.54%
Functions	20726	25204	82.23%
Regions	321947	403223	79.84%

Per crate, least-covered first

Crate	Line %	Lines	Function %	Region %
crates/program-runtime	7.57%	38/502	5.77%	6.13%
crates/runner-wire	60.41%	644/1066	62.67%	59.14%
apps/signalboxd	63.51%	35596/56048	70.68%	63.40%
crates/tools-sessions	65.06%	378/581	63.29%	61.68%
apps/signalbox-runner	69.47%	1784/2568	70.93%	70.29%
crates/approval-judge-eval	73.87%	492/666	76.12%	76.41%
crates/tool-schema-derive	74.20%	279/376	88.00%	72.42%
crates/tools-basic	75.37%	771/1023	66.15%	79.16%
crates/model-runtime-claude-cli	76.51%	1655/2163	73.10%	77.37%
crates/tools-github	77.06%	2408/3125	74.19%	74.82%
crates/tools-exec	77.76%	5196/6682	75.04%	74.06%
apps/client	78.88%	13283/16840	89.58%	75.76%
crates/persistence	79.93%	53997/67559	77.85%	75.32%
crates/tools-code-host	80.39%	7089/8818	80.46%	76.60%
crates/blob-store-filesystem	80.50%	1371/1703	70.17%	80.45%
crates/model-provider-runtime	81.37%	2463/3027	85.71%	79.97%
crates/blob-store	82.57%	308/373	75.41%	83.68%
crates/tools-conversations	83.01%	508/612	83.78%	77.65%
crates/egress-transport	85.35%	134/157	83.33%	77.61%
crates/conversation-import-claude-code	85.45%	740/866	66.09%	84.67%
crates/tools-plan	85.71%	768/896	88.89%	81.74%
crates/conversation-import-codex	85.76%	873/1018	64.00%	83.56%
crates/tools-workspace	86.36%	2977/3447	82.14%	87.30%
crates/tools-web	86.59%	2978/3439	87.93%	85.03%
crates/tools-git	87.40%	8750/10011	86.50%	83.24%
crates/application	88.65%	19184/21640	87.86%	88.81%
crates/model-runtime-codex-cli	90.01%	1550/1722	90.98%	89.96%
crates/test-bin	90.91%	10/11	100.00%	70.00%
crates/domain	92.29%	60212/65245	91.37%	94.13%
crates/web-contract	92.31%	408/442	82.61%	82.09%
crates/conversation-import-json	92.51%	284/307	96.88%	91.36%
crates/model-runtime-openai	93.55%	3812/4075	97.50%	91.72%
crates/process-protocol	93.67%	8469/9041	95.89%	86.68%
crates/model-runtime-anthropic	93.88%	3910/4165	97.51%	91.26%
crates/model-runtime	93.96%	9221/9814	93.29%	94.69%
crates/expect-table	95.60%	977/1022	100.00%	95.75%
crates/tool-contract	97.18%	688/708	96.47%	95.54%

25 files with the most uncovered lines

File	Uncovered lines	Line %
apps/signalboxd/src/process_runtime.rs	6653	53.34%
apps/signalboxd/src/repo_watch_runtime.rs	2235	69.20%
apps/signalboxd/src/runner_protocol_runtime.rs	2212	34.75%
crates/persistence/src/submit_input.rs	2071	71.81%
apps/client/src/lib.rs	1697	79.51%
apps/signalboxd/src/review_orchestration_runtime.rs	1333	2.56%
apps/signalboxd/src/main.rs	1303	47.46%
crates/persistence/src/model_execution.rs	1269	84.54%
crates/domain/src/turn_eligibility.rs	1223	90.33%
crates/persistence/src/runner_protocol.rs	1157	82.16%
crates/tools-code-host/src/code_host/github.rs	1052	76.26%
crates/persistence/src/review_workflow.rs	997	77.35%
crates/tools-exec/src/bin/signalbox-exec-supervisor.rs	885	45.61%
crates/persistence/src/tool_loop.rs	749	76.07%
crates/tools-github/src/lib.rs	717	76.47%
apps/signalboxd/src/convergence_sweep_runtime.rs	683	22.21%
crates/persistence/src/process_read.rs	681	82.33%
apps/client/src/presentation.rs	680	80.55%
apps/signalboxd/src/lib.rs	649	72.50%
crates/domain/src/submit_input.rs	640	88.03%
apps/signalboxd/src/daemon_tools.rs	573	89.68%
crates/process-protocol/src/lib.rs	572	93.67%
crates/persistence/src/review_orchestration.rs	569	75.66%
crates/persistence/src/session_delegation.rs	543	77.63%
crates/application/src/model_execution.rs	541	86.15%

Measured at f1a333bb63d10a185f15dfa01d099e82debbcd4d, the merge commit this pull request builds, whose head is 322a3a8b6a63b3572783118b35a23f5dce87016b, by run 32638362869, which uploads the HTML report and LCOV as an artifact.

[codecov]

Codecov Report

❌ Patch coverage is 56.79012% with 105 lines in your changes missing coverage. Please review.
✅ Project coverage is 82.20%. Comparing base (ed22eba) to head (322a3a8).

Files with missing lines	Patch %	Lines
apps/signalboxd/src/process_runtime.rs	48.20%	72 Missing ⚠️
crates/persistence/src/context_compaction.rs	68.26%	33 Missing ⚠️

Additional details and impacted files

Flag	Coverage Δ
rust	82.77% <56.79%> (-0.03%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.