deepccc 0.2.27 → 0.2.28

package/dist/completion-session.d.ts

@@ -25,7 +25,7 @@ export type CompletionResult = {
     content: string;
     reasoning: string;
 } | {
-    status: 'timed_out' | 'cancelled' | 'invalid_output' | 'error';
+    status: 'timed_out' | 'cancelled' | 'invalid_output' | 'context_limit' | 'error';
     diagnostic: {
         code: string;
         httpStatus?: number;

package/dist/completion-session.js

@@ -26,14 +26,17 @@ export class CompletionSession {
         if (timeout > 2147483647)
             throw new Error('Deadline exceeds timer capacity');
         const messages = JSON.parse(JSON.stringify(request.messages));
-        if (JSON.stringify(messages).length > positive(request.maxContextChars ?? 1_000_000))
-            throw new Error('Context budget exceeded');
+        const contextLimit = positive(request.maxContextChars ?? 1_000_000);
         const extensions = JSON.parse(JSON.stringify(request.extensions ?? {}));
         if (Object.keys(extensions).some(key => protectedKeys.has(key)) || JSON.stringify(extensions).length > 8192)
             throw new Error('Invalid request extension');
         const responseLimit = positive(request.maxResponseChars ?? 1_000_000);
         if (request.maxOutputTokens !== undefined)
             positive(request.maxOutputTokens);
+        // Size is a runtime outcome, not invalid configuration. Never echo input
+        // or contact the provider when the caller-owned context exceeds its budget.
+        if (JSON.stringify(messages).length > contextLimit)
+            return { status: 'context_limit', diagnostic: { code: 'context_budget_exceeded' }, metrics: { durationMs: performance.now() - started, modelCalls: 0 } };
         const controller = new AbortController();
         let expired = false;
         const cancel = () => controller.abort();

package/docs/completion-session.md

@@ -26,8 +26,12 @@ performed here. Completion is accepted only after a normal stop, never a length
 limit or interrupted stream. Text mode preserves plain-text output. Parallel
 calls do not share mutable history. `timeoutMs` covers stream consumption;
 optional cancellation is the second argument. Context/response character limits
-default to one million each. Oversize input and invalid options throw before
-network activity; runtime failures return fixed diagnostics without raw errors.
+default to one million each. Since 0.2.28, oversized input returns
+`status: 'context_limit'`, `diagnostic.code: 'context_budget_exceeded'` and zero
+model calls before network activity. It does not return the input or partial
+content. Invalid configuration budgets still throw. Other runtime failures return
+fixed diagnostics without raw errors. Character limits are not token estimates;
+callers must assemble bounded evidence rather than merely increase the limit.
 
 JSON responses are collected as text without constructing partial objects for
 each streamed fragment. This avoids unnecessary parsing and allocation for large

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepccc",
-  "version": "0.2.27",
+  "version": "0.2.28",
   "description": "A lightweight coding agent with OpenAI-compatible and Anthropic Messages API support.",
   "license": "Apache-2.0",
   "keywords": [