dsh-github-copilot 0.4.0-alpha.21 → 0.4.0-alpha.23

package/lib/index.js

@@ -1,7 +1,6 @@
 import { C as currentSearchInitiator, D as GITHUB_COPILOT_CREDENTIAL_KEY, E as readCopilotCatalog, O as GITHUB_COPILOT_PREVIEW_PROVIDER_ID, S as currentChatRoute, T as isPluginPreviewProvider, _ as RESPONSES_WEB_SEARCH_TOOL_TYPE, a as COPILOT_HOSTED_SEARCH_PROVIDER_ID, b as candidatesForRoute, c as abortable$1, d as readBounded, f as applyRequestAuth, h as ANTHROPIC_WEB_SEARCH_TOOL_TYPE, i as describeSearchBackend, k as GITHUB_COPILOT_PROVIDER_ID, l as isAbortError, m as providerRequestHeaders, n as routeSessionSearch, o as GITHUB_COPILOT_HOSTED_SEARCH_PROVIDER_ID, p as normalizeRequestAuth, r as DescribedSearchFallbackError, s as createTraditionalSearchProvider, t as isCopilotSearchSelection, u as providerErrorMessage, v as SearchPlan, w as currentSearchSelection, x as sameCandidates, y as WEB_SEARCH_TOOL_TYPE } from "./search-routing-pFLux0W7.js";
 import AuthorizationService from "@deepseek-ai/dsh-authorization";
 import { createHash, randomUUID } from "node:crypto";
-import { Service } from "@deepseek-ai/cordis";
 import * as dshScope from "@deepseek-ai/dsh-scope";
 import { Remote, RemoteError, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
 import z from "@deepseek-ai/schemastery";
@@ -18,6 +17,46 @@ import { Config as Config$1, PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
 import { buildCopilotDynamicHeaders, hasCopilotVisionInput } from "@earendil-works/pi-ai/api/github-copilot-headers";
 //#region lib/types/dual-model-host.js
 /** Optional plugin-owned planner/executor sessions; no Core/default-model mutation. */
+var __runInitializers$2 = function(thisArg, initializers, value) {
+	var useValue = arguments.length > 2;
+	for (var i = 0; i < initializers.length; i++) value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+	return useValue ? value : void 0;
+};
+var __esDecorate$2 = function(ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+	function accept(f) {
+		if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected");
+		return f;
+	}
+	var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+	var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+	var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+	var _, done = false;
+	for (var i = decorators.length - 1; i >= 0; i--) {
+		var context = {};
+		for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+		for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+		context.addInitializer = function(f) {
+			if (done) throw new TypeError("Cannot add initializers after decoration has completed");
+			extraInitializers.push(accept(f || null));
+		};
+		var result = (0, decorators[i])(kind === "accessor" ? {
+			get: descriptor.get,
+			set: descriptor.set
+		} : descriptor[key], context);
+		if (kind === "accessor") {
+			if (result === void 0) continue;
+			if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+			if (_ = accept(result.get)) descriptor.get = _;
+			if (_ = accept(result.set)) descriptor.set = _;
+			if (_ = accept(result.init)) initializers.unshift(_);
+		} else if (_ = accept(result)) {
+			if (kind === "field") initializers.unshift(_);
+			else descriptor[key] = _;
+		}
+	}
+	if (target) Object.defineProperty(target, contextIn.name, descriptor);
+	done = true;
+};
 const DUAL_MODEL_NAMESPACE = "github-copilot-dual-model";
 const DUAL_MODEL_POLICY_EVENT = "github-copilot/dual-model-policy";
 const DUAL_MODEL_PROJECTION = "githubCopilotDualModelPolicy";
@@ -233,525 +272,676 @@ function dedicatedAddress(agent) {
 	const owned = /^copilot-dual-[0-9a-f]{64}$/;
 	return owned.test(agent.id) || agent.session.header.origin === "subagent" && owned.test(agent.session.header.parentSession ?? "");
 }
-/** Always mountable; missing optional APIs produce a safe unsupported view. */
-var GitHubCopilotDualModel = class extends Service {
-	owner;
-	lifetime = new AbortController();
-	creates = /* @__PURE__ */ new Map();
-	overlays = /* @__PURE__ */ new Map();
-	handles = /* @__PURE__ */ new Map();
-	settingsReady = false;
-	projectionReady = false;
-	registrationFailed = false;
-	constructor(ctx) {
-		super(ctx, "githubCopilotDualModel");
-		this.owner = { ctx };
-		ctx.inject(["settings"], (scope) => {
-			const settings = api$1(scope, "settings", [
+let GitHubCopilotDualModel = (() => {
+	let _classSuper = TypertRemoteService;
+	let _instanceExtraInitializers = [];
+	let _view_decorators;
+	let _save_decorators;
+	let _create_decorators;
+	return class GitHubCopilotDualModel extends _classSuper {
+		static {
+			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+			_view_decorators = [Remote];
+			_save_decorators = [Remote];
+			_create_decorators = [Remote];
+			__esDecorate$2(this, null, _view_decorators, {
+				kind: "method",
+				name: "view",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "view" in obj,
+					get: (obj) => obj.view
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate$2(this, null, _save_decorators, {
+				kind: "method",
+				name: "save",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "save" in obj,
+					get: (obj) => obj.save
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			__esDecorate$2(this, null, _create_decorators, {
+				kind: "method",
+				name: "create",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "create" in obj,
+					get: (obj) => obj.create
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
+				enumerable: true,
+				configurable: true,
+				writable: true,
+				value: _metadata
+			});
+		}
+		owner = __runInitializers$2(this, _instanceExtraInitializers);
+		lifetime = new AbortController();
+		creates = /* @__PURE__ */ new Map();
+		overlays = /* @__PURE__ */ new Map();
+		handles = /* @__PURE__ */ new Map();
+		settingsReady = false;
+		projectionReady = false;
+		registrationFailed = false;
+		constructor(ctx) {
+			super(ctx, "githubCopilotDualModel");
+			this.owner = { ctx };
+			ctx.inject(["settings"], (scope) => {
+				const settings = api$1(scope, "settings", [
+					"register",
+					"describe",
+					"replace"
+				]);
+				if (!settings) return;
+				try {
+					settings.register(DUAL_MODEL_NAMESPACE, configSchema);
+					this.settingsReady = true;
+				} catch {
+					this.registrationFailed = true;
+					return;
+				}
+				scope.effect(() => () => {
+					this.settingsReady = false;
+				});
+			});
+			ctx.inject(["sessionProjections"], (scope) => {
+				const projections = api$1(scope, "sessionProjections", ["register", "stateOf"]);
+				if (!projections) return;
+				try {
+					projections.register(dualModelProjection);
+					this.projectionReady = true;
+				} catch {
+					this.registrationFailed = true;
+					return;
+				}
+				scope.effect(() => () => {
+					this.projectionReady = false;
+				});
+			});
+			ctx.inject(["tools"], (scope) => {
+				api$1(scope, "tools", ["guard"])?.guard((exec) => exec.agent && dedicatedAddress(exec.agent) && !this.overlays.has(exec.agent) ? "DUAL_MODEL_UNSUPPORTED" : void 0);
+			});
+			ctx.on("agent/request", async ({ agent }, next) => {
+				const subject = agent;
+				if (dedicatedAddress(subject) && !this.overlays.has(subject)) {
+					this.restore(subject);
+					if (!this.overlays.has(subject)) fail$1("DUAL_MODEL_UNSUPPORTED");
+				}
+				return next();
+			}, { prepend: true });
+			ctx.on("system-prompt/assemble", async (_assembly, context, next) => {
+				const candidate = context.scope;
+				if (!candidate || !object$3(candidate.session) || !object$3(candidate.session.header) || !dedicatedAddress(candidate)) return next();
+				const rehydrating = !this.overlays.has(candidate);
+				if (rehydrating) this.restore(candidate);
+				const installed = this.overlays.get(candidate);
+				if (!installed) fail$1("DUAL_MODEL_UNSUPPORTED");
+				const result = await next(), { policy, role } = installed;
+				const allowed = new Set(role === "planner" ? policy.plannerTools : policy.executorTools);
+				const sectionName = "github-copilot:dual-model-role";
+				const schemas = rehydrating ? this.requireCapabilities().tools.schemas(candidate) : result.tools;
+				return {
+					...result,
+					sections: result.sections.some((section) => section.name === sectionName) ? result.sections : [...result.sections, {
+						name: sectionName,
+						text: roleText(policy, role)
+					}],
+					tools: schemas.filter((tool) => allowed.has(tool.name)),
+					variables: {
+						...result.variables,
+						provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
+						model: role === "planner" ? policy.plannerModel : policy.executorModel
+					}
+				};
+			}, { prepend: true });
+			ctx.on("agent/created", ({ agent }) => this.restore(agent));
+			ctx.on("agent/disposed", ({ agent }) => {
+				const subject = agent;
+				const overlay = this.overlays.get(subject);
+				this.overlays.delete(subject);
+				if (this.handles.get(agent.id)?.agent === subject) this.handles.delete(agent.id);
+				if (overlay) overlay.dispose().catch(() => {});
+			});
+			ctx.effect(() => async () => {
+				this.lifetime.abort();
+				await Promise.allSettled([...this.creates.values()].map((value) => value.promise));
+				const roots = [...this.overlays].filter(([, value]) => value.role === "planner").map(([agent]) => agent);
+				await api$1(ctx, "subagents", ["drainContinuableDescendants"])?.drainContinuableDescendants(roots).catch(() => {});
+				for (const [agent] of this.overlays) agent.cancel({ kind: "disposed" });
+				await Promise.allSettled([...this.overlays.keys()].map((agent) => agent.whenIdle()));
+				await Promise.allSettled([...this.handles.values()].map((handle) => handle.dispose()));
+				await Promise.allSettled([...this.overlays.values()].map((overlay) => overlay.dispose()));
+				this.handles.clear();
+				this.overlays.clear();
+			});
+			for (const agent of api$1(ctx, "agents", ["list"])?.list() ?? []) try {
+				this.restore(agent);
+			} catch {}
+		}
+		capabilities() {
+			if (typeof dshScope.createScope !== "function" || this.lifetime.signal.aborted || this.registrationFailed || !this.settingsReady || !this.projectionReady) return void 0;
+			const agents = api$1(this.owner.ctx, "agents", [
+				"list",
+				"get",
+				"create",
+				"resume"
+			]);
+			const workspaces = api$1(this.owner.ctx, "workspaceRegistry", ["get", "list"]);
+			const settings = api$1(this.owner.ctx, "settings", [
 				"register",
 				"describe",
 				"replace"
 			]);
-			if (!settings) return;
-			try {
-				settings.register(DUAL_MODEL_NAMESPACE, configSchema);
-				this.settingsReady = true;
-			} catch {
-				this.registrationFailed = true;
-				return;
-			}
-			scope.effect(() => () => {
-				this.settingsReady = false;
-			});
-		});
-		ctx.inject(["sessionProjections"], (scope) => {
-			const projections = api$1(scope, "sessionProjections", ["register", "stateOf"]);
-			if (!projections) return;
-			try {
-				projections.register(dualModelProjection);
-				this.projectionReady = true;
-			} catch {
-				this.registrationFailed = true;
-				return;
-			}
-			scope.effect(() => () => {
-				this.projectionReady = false;
-			});
-		});
-		ctx.inject(["tools"], (scope) => {
-			api$1(scope, "tools", ["guard"])?.guard((exec) => exec.agent && dedicatedAddress(exec.agent) && !this.overlays.has(exec.agent) ? "DUAL_MODEL_UNSUPPORTED" : void 0);
-		});
-		ctx.on("agent/request", async ({ agent }, next) => {
-			const subject = agent;
-			if (dedicatedAddress(subject) && !this.overlays.has(subject)) {
-				this.restore(subject);
-				if (!this.overlays.has(subject)) fail$1("DUAL_MODEL_UNSUPPORTED");
-			}
-			return next();
-		}, { prepend: true });
-		ctx.on("system-prompt/assemble", async (_assembly, context, next) => {
-			const candidate = context.scope;
-			if (!candidate || !object$3(candidate.session) || !object$3(candidate.session.header) || !dedicatedAddress(candidate)) return next();
-			const rehydrating = !this.overlays.has(candidate);
-			if (rehydrating) this.restore(candidate);
-			const installed = this.overlays.get(candidate);
-			if (!installed) fail$1("DUAL_MODEL_UNSUPPORTED");
-			const result = await next(), { policy, role } = installed;
-			const allowed = new Set(role === "planner" ? policy.plannerTools : policy.executorTools);
-			const sectionName = "github-copilot:dual-model-role";
-			const schemas = rehydrating ? this.requireCapabilities().tools.schemas(candidate) : result.tools;
+			const projections = api$1(this.owner.ctx, "sessionProjections", ["register", "stateOf"]);
+			const persistence = api$1(this.owner.ctx, "sessionPersistence", ["stat"]);
+			const sessions = api$1(this.owner.ctx, "sessions", ["flush"]);
+			const inspector = api$1(this.owner.ctx, "sessionController", ["inspect"]);
+			const presets = api$1(this.owner.ctx, "agentPresets", [
+				"resolve",
+				"mount",
+				"composedPreset",
+				"standingKeyFor"
+			]);
+			const llm = api$1(this.owner.ctx, "llm", ["resolveCallConfig"]);
+			const tools = api$1(this.owner.ctx, "tools", [
+				"register",
+				"restrict",
+				"guard",
+				"schemas",
+				"presentAs"
+			]);
+			const subagents = api$1(this.owner.ctx, "subagents", [
+				"getProvider",
+				"startContinuable",
+				"sendMessage",
+				"listChildren",
+				"drainContinuableDescendants"
+			]);
+			const preview = api$1(this.owner.ctx, "githubCopilotPreview", ["getView", "discover"]);
+			if (!agents || !workspaces || !settings || !projections || !persistence || !sessions || !inspector || !presets || !llm || !tools || !subagents || !preview) return void 0;
+			const provider = subagents.getProvider("spawn");
+			if (!provider || typeof provider.prepareContinuable !== "function" || !provider.capabilities.agentOptions || !provider.capabilities.persona || !provider.capabilities.toolFilter || !provider.capabilities.depthLimit) return void 0;
 			return {
-				...result,
-				sections: result.sections.some((section) => section.name === sectionName) ? result.sections : [...result.sections, {
-					name: sectionName,
-					text: roleText(policy, role)
-				}],
-				tools: schemas.filter((tool) => allowed.has(tool.name)),
-				variables: {
-					...result.variables,
-					provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
-					model: role === "planner" ? policy.plannerModel : policy.executorModel
-				}
+				agents,
+				workspaces,
+				settings,
+				projections,
+				persistence,
+				sessions,
+				inspector,
+				presets,
+				llm,
+				tools,
+				subagents,
+				preview
 			};
-		}, { prepend: true });
-		ctx.on("agent/created", ({ agent }) => this.restore(agent));
-		ctx.on("agent/disposed", ({ agent }) => {
-			const subject = agent;
-			const overlay = this.overlays.get(subject);
-			this.overlays.delete(subject);
-			if (this.handles.get(agent.id)?.agent === subject) this.handles.delete(agent.id);
-			if (overlay) overlay.dispose().catch(() => {});
-		});
-		ctx.effect(() => async () => {
-			this.lifetime.abort();
-			await Promise.allSettled([...this.creates.values()].map((value) => value.promise));
-			const roots = [...this.overlays].filter(([, value]) => value.role === "planner").map(([agent]) => agent);
-			await api$1(ctx, "subagents", ["drainContinuableDescendants"])?.drainContinuableDescendants(roots).catch(() => {});
-			for (const [agent] of this.overlays) agent.cancel({ kind: "disposed" });
-			await Promise.allSettled([...this.overlays.keys()].map((agent) => agent.whenIdle()));
-			await Promise.allSettled([...this.handles.values()].map((handle) => handle.dispose()));
-			await Promise.allSettled([...this.overlays.values()].map((overlay) => overlay.dispose()));
-			this.handles.clear();
-			this.overlays.clear();
-		});
-		for (const agent of api$1(ctx, "agents", ["list"])?.list() ?? []) try {
-			this.restore(agent);
-		} catch {}
-	}
-	capabilities() {
-		if (typeof dshScope.createScope !== "function" || this.lifetime.signal.aborted || this.registrationFailed || !this.settingsReady || !this.projectionReady) return void 0;
-		const agents = api$1(this.owner.ctx, "agents", [
-			"list",
-			"get",
-			"create",
-			"resume"
-		]);
-		const workspaces = api$1(this.owner.ctx, "workspaceRegistry", ["get", "list"]);
-		const settings = api$1(this.owner.ctx, "settings", [
-			"register",
-			"describe",
-			"replace"
-		]);
-		const projections = api$1(this.owner.ctx, "sessionProjections", ["register", "stateOf"]);
-		const persistence = api$1(this.owner.ctx, "sessionPersistence", ["stat"]);
-		const sessions = api$1(this.owner.ctx, "sessions", ["flush"]);
-		const inspector = api$1(this.owner.ctx, "sessionController", ["inspect"]);
-		const presets = api$1(this.owner.ctx, "agentPresets", [
-			"resolve",
-			"mount",
-			"composedPreset",
-			"standingKeyFor"
-		]);
-		const llm = api$1(this.owner.ctx, "llm", ["resolveCallConfig"]);
-		const tools = api$1(this.owner.ctx, "tools", [
-			"register",
-			"restrict",
-			"guard",
-			"schemas",
-			"presentAs"
-		]);
-		const subagents = api$1(this.owner.ctx, "subagents", [
-			"getProvider",
-			"startContinuable",
-			"sendMessage",
-			"listChildren",
-			"drainContinuableDescendants"
-		]);
-		const preview = api$1(this.owner.ctx, "githubCopilotPreview", ["getView", "discover"]);
-		if (!agents || !workspaces || !settings || !projections || !persistence || !sessions || !inspector || !presets || !llm || !tools || !subagents || !preview) return void 0;
-		const provider = subagents.getProvider("spawn");
-		if (!provider || typeof provider.prepareContinuable !== "function" || !provider.capabilities.agentOptions || !provider.capabilities.persona || !provider.capabilities.toolFilter || !provider.capabilities.depthLimit) return void 0;
-		return {
-			agents,
-			workspaces,
-			settings,
-			projections,
-			persistence,
-			sessions,
-			inspector,
-			presets,
-			llm,
-			tools,
-			subagents,
-			preview
-		};
-	}
-	requireCapabilities() {
-		return this.capabilities() ?? fail$1("DUAL_MODEL_UNSUPPORTED");
-	}
-	configuration() {
-		const descriptor = api$1(this.owner.ctx, "settings", ["describe"])?.describe({ redactSecrets: true }).find((value) => value.ns === DUAL_MODEL_NAMESPACE);
-		if (!descriptor) return {
-			configuration: DEFAULT_CONFIG,
-			revision: null
-		};
-		const parsed = ConfigJson.safeParse(descriptor.value);
-		if (!parsed.success || !revision(descriptor.revision)) return fail$1("DUAL_MODEL_UNSUPPORTED");
-		return {
-			configuration: parsed.data,
-			revision: descriptor.revision
-		};
-	}
-	async view() {
-		const empty = {
-			supported: false,
-			diagnostic: "DUAL_MODEL_UNSUPPORTED",
-			writable: false,
-			revision: null,
-			configuration: DEFAULT_CONFIG,
-			models: [],
-			workspaces: []
-		};
-		try {
-			const configuration = this.configuration(), cap = this.capabilities();
-			if (!cap) return {
-				...empty,
-				...configuration
+		}
+		requireCapabilities() {
+			return this.capabilities() ?? fail$1("DUAL_MODEL_UNSUPPORTED");
+		}
+		configuration() {
+			const descriptor = api$1(this.owner.ctx, "settings", ["describe"])?.describe({ redactSecrets: true }).find((value) => value.ns === DUAL_MODEL_NAMESPACE);
+			if (!descriptor) return {
+				configuration: DEFAULT_CONFIG,
+				revision: null
+			};
+			const parsed = ConfigJson.safeParse(descriptor.value);
+			if (!parsed.success || !revision(descriptor.revision)) return fail$1("DUAL_MODEL_UNSUPPORTED");
+			return {
+				configuration: parsed.data,
+				revision: descriptor.revision
+			};
+		}
+		async view() {
+			const empty = {
+				supported: false,
+				diagnostic: "DUAL_MODEL_UNSUPPORTED",
+				writable: false,
+				revision: null,
+				configuration: DEFAULT_CONFIG,
+				models: [],
+				workspaces: []
 			};
-			let models = [], diagnostic;
 			try {
-				const preview = await cap.preview.discover({
-					force: false,
-					signal: this.lifetime.signal
-				});
-				if (preview.available && preview.state === "ready") models = z$1.array(CatalogEntryJson).max(512).parse(preview.models.map(({ id, name }) => ({
-					id,
-					name
-				})));
-				else diagnostic = "DUAL_MODEL_MODEL_UNAVAILABLE";
+				const configuration = this.configuration(), cap = this.capabilities();
+				if (!cap) return {
+					...empty,
+					...configuration
+				};
+				let models = [], diagnostic;
+				try {
+					const preview = await cap.preview.discover({
+						force: false,
+						signal: this.lifetime.signal
+					});
+					if (preview.available && preview.state === "ready") models = z$1.array(CatalogEntryJson).max(512).parse(preview.models.map(({ id, name }) => ({
+						id,
+						name
+					})));
+					else diagnostic = "DUAL_MODEL_MODEL_UNAVAILABLE";
+				} catch {
+					diagnostic = "DUAL_MODEL_MODEL_UNAVAILABLE";
+				}
+				return {
+					supported: true,
+					...diagnostic === void 0 ? {} : { diagnostic },
+					writable: cap.settings.writable === true,
+					...configuration,
+					models,
+					workspaces: z$1.array(CatalogEntryJson).max(1024).parse(cap.workspaces.list().map((workspace) => ({
+						id: workspace.id,
+						name: workspace.title
+					})))
+				};
 			} catch {
-				diagnostic = "DUAL_MODEL_MODEL_UNAVAILABLE";
+				return empty;
 			}
-			return {
-				supported: true,
-				...diagnostic === void 0 ? {} : { diagnostic },
-				writable: cap.settings.writable === true,
-				...configuration,
-				models,
-				workspaces: z$1.array(CatalogEntryJson).max(1024).parse(cap.workspaces.list().map((workspace) => ({
-					id: workspace.id,
-					name: workspace.title
-				})))
-			};
-		} catch {
-			return empty;
 		}
-	}
-	async save(input) {
-		try {
-			return await this.saveOnce(input);
-		} catch (error) {
-			fail$1(reasonOf(error, "DUAL_MODEL_SAVE_FAILED"));
+		async save(input) {
+			try {
+				return await this.saveOnce(input);
+			} catch (error) {
+				fail$1(reasonOf(error, "DUAL_MODEL_SAVE_FAILED"));
+			}
 		}
-	}
-	async saveOnce(input) {
-		const parsed = SaveJson.safeParse(input);
-		if (!parsed.success) fail$1("DUAL_MODEL_INVALID_REQUEST");
-		const cap = this.requireCapabilities(), { configuration, expectedRevision } = parsed.data;
-		if (cap.settings.writable !== true) fail$1("DUAL_MODEL_READ_ONLY");
-		if (this.configuration().revision !== expectedRevision) fail$1("DUAL_MODEL_REVISION_CONFLICT");
-		if (configuration.enabled) await this.assertModels(cap, [configuration.plannerModel, configuration.executorModel]);
-		try {
-			await cap.settings.replace(DUAL_MODEL_NAMESPACE, configuration, expectedRevision);
-		} catch (error) {
-			fail$1(reasonOf(error, "DUAL_MODEL_SAVE_FAILED"));
+		async saveOnce(input) {
+			const parsed = SaveJson.safeParse(input);
+			if (!parsed.success) fail$1("DUAL_MODEL_INVALID_REQUEST");
+			const cap = this.requireCapabilities(), { configuration, expectedRevision } = parsed.data;
+			if (cap.settings.writable !== true) fail$1("DUAL_MODEL_READ_ONLY");
+			if (this.configuration().revision !== expectedRevision) fail$1("DUAL_MODEL_REVISION_CONFLICT");
+			if (configuration.enabled) await this.assertModels(cap, [configuration.plannerModel, configuration.executorModel]);
+			try {
+				await cap.settings.replace(DUAL_MODEL_NAMESPACE, configuration, expectedRevision);
+			} catch (error) {
+				fail$1(reasonOf(error, "DUAL_MODEL_SAVE_FAILED"));
+			}
+			return this.view();
 		}
-		return this.view();
-	}
-	create(input) {
-		const parsed = CreateJson.safeParse(input);
-		if (!parsed.success) return Promise.reject(new RemoteError("copilot/dual-model", "DUAL_MODEL_INVALID_REQUEST", { reason: "DUAL_MODEL_INVALID_REQUEST" }));
-		const request = parsed.data, id = dualModelSessionId(request.requestId), key = requestKey(request);
-		const pending = this.creates.get(id);
-		if (pending) return pending.key === key ? pending.promise : Promise.reject(new RemoteError("copilot/dual-model", "DUAL_MODEL_REQUEST_CONFLICT", { reason: "DUAL_MODEL_REQUEST_CONFLICT" }));
-		const promise = this.createOnce(request, id).catch((error) => fail$1(reasonOf(error, "DUAL_MODEL_CREATE_UNCERTAIN"), creationOf(error)));
-		this.creates.set(id, {
-			key,
-			promise
-		});
-		promise.then(() => this.creates.delete(id), () => this.creates.delete(id));
-		return promise;
-	}
-	async createOnce(request, id) {
-		let creation = "uncertain";
-		try {
-			const cap = this.requireCapabilities();
-			if (await cap.persistence.stat(id) !== void 0 || cap.agents.get(id)) {
-				const inspection = await cap.inspector.inspect(id);
-				let state = dualModelProjection.init(inspection.meta, inspection.inheritedEventCount);
-				for (const event of inspection.events) state = dualModelProjection.apply(state, event);
-				if (state.invalid || !state.policy || !policyMatches(state.policy, request)) fail$1("DUAL_MODEL_REQUEST_CONFLICT");
+		create(input) {
+			const parsed = CreateJson.safeParse(input);
+			if (!parsed.success) return Promise.reject(new RemoteError("copilot/dual-model", "DUAL_MODEL_INVALID_REQUEST", { reason: "DUAL_MODEL_INVALID_REQUEST" }));
+			const request = parsed.data, id = dualModelSessionId(request.requestId), key = requestKey(request);
+			const pending = this.creates.get(id);
+			if (pending) return pending.key === key ? pending.promise : Promise.reject(new RemoteError("copilot/dual-model", "DUAL_MODEL_REQUEST_CONFLICT", { reason: "DUAL_MODEL_REQUEST_CONFLICT" }));
+			const promise = this.createOnce(request, id).catch((error) => fail$1(reasonOf(error, "DUAL_MODEL_CREATE_UNCERTAIN"), creationOf(error)));
+			this.creates.set(id, {
+				key,
+				promise
+			});
+			promise.then(() => this.creates.delete(id), () => this.creates.delete(id));
+			return promise;
+		}
+		async createOnce(request, id) {
+			let creation = "uncertain";
+			try {
+				const cap = this.requireCapabilities();
+				if (await cap.persistence.stat(id) !== void 0 || cap.agents.get(id)) {
+					const inspection = await cap.inspector.inspect(id);
+					let state = dualModelProjection.init(inspection.meta, inspection.inheritedEventCount);
+					for (const event of inspection.events) state = dualModelProjection.apply(state, event);
+					if (state.invalid || !state.policy || !policyMatches(state.policy, request)) fail$1("DUAL_MODEL_REQUEST_CONFLICT");
+					const workspace = this.workspace(cap, request.workspaceId);
+					if (workspace.path !== state.policy.cwd) fail$1("DUAL_MODEL_REQUEST_CONFLICT");
+					await workspace.attachSession(id);
+					return { sessionId: id };
+				}
+				creation = "not-created";
+				const current = this.configuration();
+				if (current.revision !== request.expectedRevision) fail$1("DUAL_MODEL_REVISION_CONFLICT");
+				if (!current.configuration.enabled) fail$1("DUAL_MODEL_DISABLED");
 				const workspace = this.workspace(cap, request.workspaceId);
-				if (workspace.path !== state.policy.cwd) fail$1("DUAL_MODEL_REQUEST_CONFLICT");
-				await workspace.attachSession(id);
-				return { sessionId: id };
-			}
-			creation = "not-created";
-			const current = this.configuration();
-			if (current.revision !== request.expectedRevision) fail$1("DUAL_MODEL_REVISION_CONFLICT");
-			if (!current.configuration.enabled) fail$1("DUAL_MODEL_DISABLED");
-			const workspace = this.workspace(cap, request.workspaceId);
-			const captured = { ...current.configuration };
-			await this.assertModels(cap, [captured.plannerModel, captured.executorModel]);
-			const preset = await cap.presets.resolve();
-			const standingKey = await cap.presets.standingKeyFor(preset.id);
-			const inheritedNames = new Set(cap.tools.schemas(standingKey).map((tool) => tool.name));
-			const executorTools = EXECUTOR_TOOLS.filter((name) => inheritedNames.has(name));
-			if (!executorTools.includes("send_message")) fail$1("DUAL_MODEL_UNSUPPORTED");
-			if (this.configuration().revision !== request.expectedRevision) fail$1("DUAL_MODEL_REVISION_CONFLICT");
-			if (cap.workspaces.get(workspace.id) !== workspace) fail$1("DUAL_MODEL_WORKSPACE_UNAVAILABLE");
-			const policy = {
-				version: 1,
-				rootSessionId: id,
-				requestId: request.requestId,
-				workspaceId: workspace.id,
-				settingsRevision: request.expectedRevision,
-				cwd: workspace.path,
-				agentPreset: preset.id,
-				provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
-				plannerModel: captured.plannerModel,
-				executorModel: captured.executorModel,
-				plannerTools: [...ROOT_TOOLS],
-				executorTools: [...executorTools]
-			};
-			creation = "uncertain";
-			const handle = await cap.agents.create({
-				sessionId: id,
-				agentOptions: {
-					provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
-					model: policy.plannerModel
-				},
-				meta: {
-					cwd: policy.cwd,
+				const captured = { ...current.configuration };
+				await this.assertModels(cap, [captured.plannerModel, captured.executorModel]);
+				const preset = await cap.presets.resolve();
+				const standingKey = await cap.presets.standingKeyFor(preset.id);
+				const inheritedNames = new Set(cap.tools.schemas(standingKey).map((tool) => tool.name));
+				const executorTools = EXECUTOR_TOOLS.filter((name) => inheritedNames.has(name));
+				if (!executorTools.includes("send_message")) fail$1("DUAL_MODEL_UNSUPPORTED");
+				if (this.configuration().revision !== request.expectedRevision) fail$1("DUAL_MODEL_REVISION_CONFLICT");
+				if (cap.workspaces.get(workspace.id) !== workspace) fail$1("DUAL_MODEL_WORKSPACE_UNAVAILABLE");
+				const policy = {
+					version: 1,
+					rootSessionId: id,
+					requestId: request.requestId,
+					workspaceId: workspace.id,
+					settingsRevision: request.expectedRevision,
+					cwd: workspace.path,
 					agentPreset: preset.id,
-					isSeeded: false
-				},
-				inheritedEventCount: 0,
-				seed: [{
-					type: DUAL_MODEL_POLICY_EVENT,
-					seq: 0,
-					time: Date.now(),
-					ignorable: true,
-					data: policy
-				}, {
-					type: "model/selection",
-					seq: 1,
-					time: Date.now(),
-					data: {
+					provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
+					plannerModel: captured.plannerModel,
+					executorModel: captured.executorModel,
+					plannerTools: [...ROOT_TOOLS],
+					executorTools: [...executorTools]
+				};
+				creation = "uncertain";
+				const handle = await cap.agents.create({
+					sessionId: id,
+					agentOptions: {
 						provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
 						model: policy.plannerModel
+					},
+					meta: {
+						cwd: policy.cwd,
+						agentPreset: preset.id,
+						isSeeded: false
+					},
+					inheritedEventCount: 0,
+					seed: [{
+						type: DUAL_MODEL_POLICY_EVENT,
+						seq: 0,
+						time: Date.now(),
+						ignorable: true,
+						data: policy
+					}, {
+						type: "model/selection",
+						seq: 1,
+						time: Date.now(),
+						data: {
+							provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
+							model: policy.plannerModel
+						}
+					}],
+					signal: this.lifetime.signal,
+					setup: async (agentCtx, agent) => {
+						await cap.presets.mount(agentCtx, preset.id);
+						this.install(agent, policy, "planner");
 					}
-				}],
-				signal: this.lifetime.signal,
-				setup: async (agentCtx, agent) => {
-					await cap.presets.mount(agentCtx, preset.id);
-					this.install(agent, policy, "planner");
-				}
-			});
-			this.handles.set(id, handle);
-			if (!await cap.sessions.flush(handle.agent.session)) fail$1("DUAL_MODEL_CREATE_UNCERTAIN");
-			await workspace.attachSession(id);
-			return { sessionId: id };
-		} catch (error) {
-			fail$1(reasonOf(error, "DUAL_MODEL_CREATE_UNCERTAIN"), creation);
-		}
-	}
-	workspace(cap, id) {
-		const workspace = cap.workspaces.get(id);
-		if (!workspace || typeof workspace.path !== "string" || typeof workspace.attachSession !== "function") fail$1("DUAL_MODEL_WORKSPACE_UNAVAILABLE");
-		return workspace;
-	}
-	async assertModels(cap, models, signal = this.lifetime.signal) {
-		try {
-			signal.throwIfAborted();
-			const preview = await cap.preview.discover({
-				force: false,
-				signal
-			});
-			if (preview.provider !== "github-copilot-preview" || !preview.available || preview.state !== "ready") fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
-			for (const model of models) {
-				if (!model || !preview.models.some((item) => item.id === model)) fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
-				const resolved = await cap.llm.resolveCallConfig({
-					provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
-					model
-				}, signal);
-				if (resolved.provider !== "github-copilot-preview" || resolved.model !== model) fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
+				});
+				this.handles.set(id, handle);
+				if (!await cap.sessions.flush(handle.agent.session)) fail$1("DUAL_MODEL_CREATE_UNCERTAIN");
+				await workspace.attachSession(id);
+				return { sessionId: id };
+			} catch (error) {
+				fail$1(reasonOf(error, "DUAL_MODEL_CREATE_UNCERTAIN"), creation);
 			}
-			const now = cap.preview.getView();
-			if (!now.available || now.state !== "ready" || models.some((model) => !now.models.some((item) => item.id === model))) fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
-			signal.throwIfAborted();
-		} catch {
-			fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
-		}
-	}
-	projection(agent) {
-		const projections = api$1(this.owner.ctx, "sessionProjections", ["stateOf"]);
-		const parsed = ProjectionJson.safeParse(projections?.stateOf(agent.session, DUAL_MODEL_PROJECTION));
-		return parsed.success ? parsed.data : void 0;
-	}
-	restore(agent) {
-		if (this.overlays.has(agent)) return;
-		const state = this.projection(agent);
-		if (!state) {
-			if (dedicatedAddress(agent)) fail$1("DUAL_MODEL_UNSUPPORTED");
-			return;
 		}
-		if (state.invalid) fail$1("DUAL_MODEL_POLICY_INVALID");
-		if (state.policy) {
-			this.install(agent, state.policy, "planner");
-			return;
+		workspace(cap, id) {
+			const workspace = cap.workspaces.get(id);
+			if (!workspace || typeof workspace.path !== "string" || typeof workspace.attachSession !== "function") fail$1("DUAL_MODEL_WORKSPACE_UNAVAILABLE");
+			return workspace;
 		}
-		if (state.origin !== "subagent" || state.parentId === null) {
-			if (dedicatedAddress(agent)) fail$1("DUAL_MODEL_POLICY_INVALID");
-			return;
+		async assertModels(cap, models, signal = this.lifetime.signal) {
+			try {
+				signal.throwIfAborted();
+				const preview = await cap.preview.discover({
+					force: false,
+					signal
+				});
+				if (preview.provider !== "github-copilot-preview" || !preview.available || preview.state !== "ready") fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
+				for (const model of models) {
+					if (!model || !preview.models.some((item) => item.id === model)) fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
+					const resolved = await cap.llm.resolveCallConfig({
+						provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
+						model
+					}, signal);
+					if (resolved.provider !== "github-copilot-preview" || resolved.model !== model) fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
+				}
+				const now = cap.preview.getView();
+				if (!now.available || now.state !== "ready" || models.some((model) => !now.models.some((item) => item.id === model))) fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
+				signal.throwIfAborted();
+			} catch {
+				fail$1("DUAL_MODEL_MODEL_UNAVAILABLE");
+			}
 		}
-		const parent = api$1(this.owner.ctx, "agents", ["get"])?.get(state.parentId);
-		if (!parent) {
-			if (dedicatedAddress(agent)) fail$1("DUAL_MODEL_UNSUPPORTED");
-			return;
+		projection(agent) {
+			const projections = api$1(this.owner.ctx, "sessionProjections", ["stateOf"]);
+			const parsed = ProjectionJson.safeParse(projections?.stateOf(agent.session, DUAL_MODEL_PROJECTION));
+			return parsed.success ? parsed.data : void 0;
 		}
-		if (this.overlays.get(parent)?.role === "executor") fail$1("DUAL_MODEL_DELEGATION_DENIED");
-		const parentPolicy = this.projection(parent)?.policy;
-		if (!parentPolicy) {
-			if (dedicatedAddress(agent)) fail$1("DUAL_MODEL_POLICY_INVALID");
-			return;
+		restore(agent) {
+			if (this.overlays.has(agent)) return;
+			const state = this.projection(agent);
+			if (!state) {
+				if (dedicatedAddress(agent)) fail$1("DUAL_MODEL_UNSUPPORTED");
+				return;
+			}
+			if (state.invalid) fail$1("DUAL_MODEL_POLICY_INVALID");
+			if (state.policy) {
+				this.install(agent, state.policy, "planner");
+				return;
+			}
+			if (state.origin !== "subagent" || state.parentId === null) {
+				if (dedicatedAddress(agent)) fail$1("DUAL_MODEL_POLICY_INVALID");
+				return;
+			}
+			const parent = api$1(this.owner.ctx, "agents", ["get"])?.get(state.parentId);
+			if (!parent) {
+				if (dedicatedAddress(agent)) fail$1("DUAL_MODEL_UNSUPPORTED");
+				return;
+			}
+			if (this.overlays.get(parent)?.role === "executor") fail$1("DUAL_MODEL_DELEGATION_DENIED");
+			const parentPolicy = this.projection(parent)?.policy;
+			if (!parentPolicy) {
+				if (dedicatedAddress(agent)) fail$1("DUAL_MODEL_POLICY_INVALID");
+				return;
+			}
+			if (!state.child || state.child.agentProvider !== "github-copilot-preview" || state.child.agentModel !== parentPolicy.executorModel) fail$1("DUAL_MODEL_POLICY_INVALID");
+			this.install(agent, parentPolicy, "executor");
 		}
-		if (!state.child || state.child.agentProvider !== "github-copilot-preview" || state.child.agentModel !== parentPolicy.executorModel) fail$1("DUAL_MODEL_POLICY_INVALID");
-		this.install(agent, parentPolicy, "executor");
-	}
-	install(agent, policy, role) {
-		if (this.overlays.has(agent)) return;
-		this.requireCapabilities();
-		if (typeof agent.cancel !== "function" || typeof agent.whenIdle !== "function") fail$1("DUAL_MODEL_UNSUPPORTED");
-		const overlay = dshScope.createScope(agent.ctx, agent), scoped = overlay.ctx;
-		try {
-			const tools = api$1(scoped, "tools", [
-				"schemas",
-				"register",
-				"restrict",
-				"guard",
-				"presentAs"
-			]);
-			const prompt = api$1(scoped, "systemPrompt", ["section"]);
-			if (!tools || !prompt) fail$1("DUAL_MODEL_UNSUPPORTED");
-			const allowed = new Set(role === "planner" ? policy.plannerTools : policy.executorTools);
-			const available = tools.schemas(agent).map((item) => item.name);
-			tools.guard((exec) => allowed.has(exec.name) ? void 0 : "DUAL_MODEL_TOOL_DENIED");
-			tools.presentAs("native");
-			tools.restrict({ allow: available.filter((name) => allowed.has(name) && name !== "copilot_execute") });
-			const selectedModel = role === "planner" ? policy.plannerModel : policy.executorModel;
-			prompt.section({
-				name: "github-copilot:dual-model-role",
-				order: 1e3,
-				text: roleText(policy, role)
-			});
-			scoped.on("agent/request", async ({ signal }, next) => {
-				await this.assertModels(this.requireCapabilities(), [selectedModel], signal);
-				const resolved = await next();
-				if (resolved.provider !== "github-copilot-preview" || resolved.model !== selectedModel) fail$1("DUAL_MODEL_SELECTION_LOCKED");
-				return resolved;
-			}, { prepend: true });
-			if (role === "planner") tools.register({
-				name: DUAL_MODEL_EXECUTE_TOOL,
-				description: `Delegate implementation to a continuable executor fixed to ${GITHUB_COPILOT_PREVIEW_PROVIDER_ID}/${policy.executorModel}. Returns a durable child ID, not completion. Continue with send_message and inspect with list_agents. No model override or recursive delegation is allowed.`,
-				parameters: {
-					type: "object",
-					additionalProperties: false,
-					properties: {
-						description: { type: "string" },
-						prompt: { type: "string" }
-					},
-					required: ["description", "prompt"]
-				},
-				output: {
-					schema: {
+		install(agent, policy, role) {
+			if (this.overlays.has(agent)) return;
+			this.requireCapabilities();
+			if (typeof agent.cancel !== "function" || typeof agent.whenIdle !== "function") fail$1("DUAL_MODEL_UNSUPPORTED");
+			const overlay = dshScope.createScope(agent.ctx, agent), scoped = overlay.ctx;
+			try {
+				const tools = api$1(scoped, "tools", [
+					"schemas",
+					"register",
+					"restrict",
+					"guard",
+					"presentAs"
+				]);
+				const prompt = api$1(scoped, "systemPrompt", ["section"]);
+				if (!tools || !prompt) fail$1("DUAL_MODEL_UNSUPPORTED");
+				const allowed = new Set(role === "planner" ? policy.plannerTools : policy.executorTools);
+				const available = tools.schemas(agent).map((item) => item.name);
+				tools.guard((exec) => allowed.has(exec.name) ? void 0 : "DUAL_MODEL_TOOL_DENIED");
+				tools.presentAs("native");
+				tools.restrict({ allow: available.filter((name) => allowed.has(name) && name !== "copilot_execute") });
+				const selectedModel = role === "planner" ? policy.plannerModel : policy.executorModel;
+				prompt.section({
+					name: "github-copilot:dual-model-role",
+					order: 1e3,
+					text: roleText(policy, role)
+				});
+				scoped.on("agent/request", async ({ signal }, next) => {
+					await this.assertModels(this.requireCapabilities(), [selectedModel], signal);
+					const resolved = await next();
+					if (resolved.provider !== "github-copilot-preview" || resolved.model !== selectedModel) fail$1("DUAL_MODEL_SELECTION_LOCKED");
+					return resolved;
+				}, { prepend: true });
+				if (role === "planner") tools.register({
+					name: DUAL_MODEL_EXECUTE_TOOL,
+					description: `Delegate implementation to a continuable executor fixed to ${GITHUB_COPILOT_PREVIEW_PROVIDER_ID}/${policy.executorModel}. Returns a durable child ID, not completion. Continue with send_message and inspect with list_agents. No model override or recursive delegation is allowed.`,
+					parameters: {
 						type: "object",
 						additionalProperties: false,
 						properties: {
-							childId: { type: "string" },
-							provider: { type: "string" },
-							model: { type: "string" }
+							description: { type: "string" },
+							prompt: { type: "string" }
 						},
-						required: [
-							"childId",
-							"provider",
-							"model"
-						]
+						required: ["description", "prompt"]
 					},
-					render: (_args, value) => [{
-						type: "text",
-						text: JSON.stringify(value)
-					}]
-				},
-				execute: async (input, exec) => {
-					try {
-						const parsed = ExecuteJson.safeParse(input);
-						if (!parsed.success || exec.agent !== agent) fail$1("DUAL_MODEL_INVALID_REQUEST");
-						const current = this.requireCapabilities();
-						await this.assertModels(current, [policy.executorModel], exec.signal);
-						return {
-							childId: (await current.subagents.startContinuable({
-								provider: "spawn",
-								label: parsed.data.description,
-								request: {
-									parent: agent,
-									prompt: [{
-										type: "text",
-										text: parsed.data.prompt
-									}],
-									agentOptions: {
-										provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
-										model: policy.executorModel
+					output: {
+						schema: {
+							type: "object",
+							additionalProperties: false,
+							properties: {
+								childId: { type: "string" },
+								provider: { type: "string" },
+								model: { type: "string" }
+							},
+							required: [
+								"childId",
+								"provider",
+								"model"
+							]
+						},
+						render: (_args, value) => [{
+							type: "text",
+							text: JSON.stringify(value)
+						}]
+					},
+					execute: async (input, exec) => {
+						try {
+							const parsed = ExecuteJson.safeParse(input);
+							if (!parsed.success || exec.agent !== agent) fail$1("DUAL_MODEL_INVALID_REQUEST");
+							const current = this.requireCapabilities();
+							await this.assertModels(current, [policy.executorModel], exec.signal);
+							return {
+								childId: (await current.subagents.startContinuable({
+									provider: "spawn",
+									label: parsed.data.description,
+									request: {
+										parent: agent,
+										prompt: [{
+											type: "text",
+											text: parsed.data.prompt
+										}],
+										agentOptions: {
+											provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
+											model: policy.executorModel
+										},
+										persona: EXECUTOR_PERSONA,
+										toolFilter: { allow: policy.executorTools },
+										maxDepth: 1
 									},
-									persona: EXECUTOR_PERSONA,
-									toolFilter: { allow: policy.executorTools },
-									maxDepth: 1
-								},
-								signal: exec.signal
-							})).childId,
-							provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
-							model: policy.executorModel
-						};
-					} catch (error) {
-						fail$1(reasonOf(error, "DUAL_MODEL_EXECUTION_FAILED"));
+									signal: exec.signal
+								})).childId,
+								provider: GITHUB_COPILOT_PREVIEW_PROVIDER_ID,
+								model: policy.executorModel
+							};
+						} catch (error) {
+							fail$1(reasonOf(error, "DUAL_MODEL_EXECUTION_FAILED"));
+						}
 					}
-				}
-			});
-			this.overlays.set(agent, {
-				dispose: overlay.dispose,
-				policy,
-				role
-			});
-		} catch (error) {
-			overlay.dispose().catch(() => {});
-			throw error;
+				});
+				this.overlays.set(agent, {
+					dispose: overlay.dispose,
+					policy,
+					role
+				});
+			} catch (error) {
+				overlay.dispose().catch(() => {});
+				throw error;
+			}
 		}
+	};
+})();
+//#endregion
+//#region lib/types/search-routing-remote.js
+const SearchProviderCatalogSchema = z$1.object({
+	supported: z$1.boolean(),
+	providers: z$1.array(z$1.object({ id: z$1.string().min(1).max(512) }).strict()).max(512)
+}).strict();
+//#endregion
+//#region lib/types/search-routing-host.js
+var __runInitializers$1 = function(thisArg, initializers, value) {
+	var useValue = arguments.length > 2;
+	for (var i = 0; i < initializers.length; i++) value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+	return useValue ? value : void 0;
+};
+var __esDecorate$1 = function(ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+	function accept(f) {
+		if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected");
+		return f;
 	}
+	var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+	var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+	var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+	var _, done = false;
+	for (var i = decorators.length - 1; i >= 0; i--) {
+		var context = {};
+		for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+		for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+		context.addInitializer = function(f) {
+			if (done) throw new TypeError("Cannot add initializers after decoration has completed");
+			extraInitializers.push(accept(f || null));
+		};
+		var result = (0, decorators[i])(kind === "accessor" ? {
+			get: descriptor.get,
+			set: descriptor.set
+		} : descriptor[key], context);
+		if (kind === "accessor") {
+			if (result === void 0) continue;
+			if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+			if (_ = accept(result.get)) descriptor.get = _;
+			if (_ = accept(result.set)) descriptor.set = _;
+			if (_ = accept(result.init)) initializers.unshift(_);
+		} else if (_ = accept(result)) {
+			if (kind === "field") initializers.unshift(_);
+			else descriptor[key] = _;
+		}
+	}
+	if (target) Object.defineProperty(target, contextIn.name, descriptor);
+	done = true;
 };
+let SearchRoutingController = (() => {
+	let _classSuper = TypertRemoteService;
+	let _instanceExtraInitializers = [];
+	let _providers_decorators;
+	return class SearchRoutingController extends _classSuper {
+		static {
+			const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
+			_providers_decorators = [Remote];
+			__esDecorate$1(this, null, _providers_decorators, {
+				kind: "method",
+				name: "providers",
+				static: false,
+				private: false,
+				access: {
+					has: (obj) => "providers" in obj,
+					get: (obj) => obj.providers
+				},
+				metadata: _metadata
+			}, null, _instanceExtraInitializers);
+			if (_metadata) Object.defineProperty(this, Symbol.metadata, {
+				enumerable: true,
+				configurable: true,
+				writable: true,
+				value: _metadata
+			});
+		}
+		constructor(ctx) {
+			super(ctx, "githubCopilotSearchRouting");
+			__runInitializers$1(this, _instanceExtraInitializers);
+		}
+		providers() {
+			const unavailable = {
+				supported: false,
+				providers: []
+			};
+			const catalog = this.ctx.get("githubCopilotSearchCatalog");
+			if (typeof catalog?.list !== "function") return unavailable;
+			try {
+				const ids = catalog.list();
+				const parsed = SearchProviderCatalogSchema.safeParse({
+					supported: true,
+					providers: ids.map((id) => ({ id }))
+				});
+				if (!parsed.success || new Set(ids).size !== ids.length) return unavailable;
+				parsed.data.providers.sort((a, b) => a.id.localeCompare(b.id));
+				return parsed.data;
+			} catch {
+				return unavailable;
+			}
+		}
+	};
+})();
 //#endregion
 //#region package.json
 var name$1 = "dsh-github-copilot";
-var version = "0.4.0-alpha.21";
+var version = "0.4.0-alpha.23";
 //#endregion
 //#region lib/types/probe.js
 /**
@@ -1079,6 +1269,18 @@ const Config = z.object({
 	temporaryRouteBackup: z.string().hidden()
 });
 //#endregion
+//#region lib/types/search-routing-policy.js
+/** Resolve old and new settings without guessing registered providers or dropping unknown ids. */
+function normalizeWebSearchRouting(config) {
+	const defaultProvider = config.defaultSearchProvider?.trim() || "deepseek-official";
+	const legacy = config.searchProvider === void 0;
+	return {
+		primaryProvider: legacy ? config.searchMode === "fixed" ? defaultProvider : "auto" : config.searchProvider?.trim() || "auto",
+		defaultProvider,
+		legacy
+	};
+}
+//#endregion
 //#region lib/types/web-search-routing-config.js
 /** Plugin-owned settings namespace for cross-provider web-search routing. */
 const WEB_SEARCH_ROUTING_SETTINGS_NAMESPACE = "github-copilot-search-routing";
@@ -1086,10 +1288,90 @@ const WEB_SEARCH_ROUTING_SETTINGS_NAMESPACE = "github-copilot-search-routing";
 const NO_DEFAULT_SEARCH_PROVIDER = "none";
 /** User-facing routing settings; provider-specific credentials and models remain provider-owned. */
 const WebSearchRoutingConfigSchema = z.object({
+	searchProvider: z.string(),
 	searchMode: z.union(["auto", "fixed"]).default("auto"),
 	defaultSearchProvider: z.string().default("deepseek-official")
 });
 //#endregion
+//#region lib/types/search-tool-routing.js
+function aborted() {
+	return new WebError("web search aborted", "WEB_ABORTED");
+}
+function isAborted(signal) {
+	return signal?.aborted === true;
+}
+function assertContinuable(signal, canContinue) {
+	if (isAborted(signal)) throw aborted();
+	let current = false;
+	try {
+		current = canContinue();
+	} catch {}
+	if (isAborted(signal)) throw aborted();
+	if (!current) throw new WebError("web search owner or account proof invalidated", "WEB_PROVIDER_UNAVAILABLE");
+}
+function isCancellation(error) {
+	return error instanceof WebError && error.code === "WEB_ABORTED" || error instanceof Error && error.name === "AbortError";
+}
+/** Only shared public codes may leave the provider boundary; messages, causes and custom codes stay private. */
+function failureCode(error) {
+	if (error instanceof WebError && [
+		"WEB_PROVIDER_CONFIGURED_MISSING",
+		"WEB_PROVIDER_CONFIGURED_UNAVAILABLE",
+		"WEB_PROVIDER_UNAVAILABLE",
+		"WEB_PROVIDER_ERROR",
+		"WEB_PROVIDER_AMBIGUOUS"
+	].includes(error.code)) return error.code;
+	return "WEB_PROVIDER_ERROR";
+}
+/**
+* Execute a captured primary and optional final fallback without registry or credential access.
+* The caller resolves Auto, handles disabled policy, proves registrations and supplies lifetime guards.
+* Generic providers must honor the signal; this helper cannot inspect their internal auth/HTTP boundary.
+*/
+async function routeSearchTools(request, signal, deps) {
+	const { primary, fallback, canContinue, allowFailureFallback = true } = deps;
+	const primaryId = primary?.id;
+	const primarySearch = primary?.search.bind(primary);
+	const fallbackId = fallback?.id;
+	const fallbackSearch = fallback?.search.bind(fallback);
+	assertContinuable(signal, canContinue);
+	let primaryFailure;
+	if (primarySearch !== void 0) {
+		let result;
+		try {
+			result = await primarySearch(request, signal);
+		} catch (error) {
+			assertContinuable(signal, canContinue);
+			if (isCancellation(error)) throw aborted();
+			primaryFailure = error;
+			if (!allowFailureFallback || fallbackSearch === void 0 || fallbackId === primaryId) throw new WebError(`Search provider ${JSON.stringify(primaryId)} failed (${failureCode(error)}).`, failureCode(error));
+			return runFallback();
+		}
+		assertContinuable(signal, canContinue);
+		return result;
+	}
+	return runFallback();
+	async function runFallback() {
+		assertContinuable(signal, canContinue);
+		if (fallbackSearch === void 0) throw new WebError("no selected search provider is available", "WEB_PROVIDER_UNAVAILABLE");
+		const reason = primarySearch === void 0 ? "no matching primary provider" : failureCode(primaryFailure);
+		const notice = `Search provider: ${JSON.stringify(fallbackId)} (final fallback${primaryId === void 0 ? "" : ` from ${JSON.stringify(primaryId)}`}; reason: ${reason}). This fallback may incur charges from the selected search backend.`;
+		let result;
+		try {
+			result = await fallbackSearch(request, signal);
+		} catch (error) {
+			assertContinuable(signal, canContinue);
+			if (isCancellation(error)) throw aborted();
+			throw new WebError(`${notice} The final fallback failed (${failureCode(error)}).`, "WEB_PROVIDER_ERROR");
+		}
+		assertContinuable(signal, canContinue);
+		return {
+			...result,
+			content: `${notice}\n\n${result.content ?? ""}`.trimEnd()
+		};
+	}
+}
+//#endregion
 //#region lib/types/sse.js
 /**
 * Bounded SSE line parser for the inline wire path. Handles `event:` and
@@ -5662,6 +5944,11 @@ const integrationInject = [
 ];
 /** Settings namespace carrying this plugin's section. */
 const GITHUB_COPILOT_SETTINGS_NAMESPACE = "github-copilot";
+var ConfiguredSearchProofInvalidated = class extends WebError {
+	constructor() {
+		super("configured Copilot search owner or account proof invalidated", "WEB_PROVIDER_UNAVAILABLE");
+	}
+};
 function isInstanceSettingsInstaller(value) {
 	return typeof value === "object" && value !== null && "installSection" in value && typeof value.installSection === "function";
 }
@@ -5728,6 +6015,7 @@ function activate(ctx, config) {
 	ctx.plugin(preview_route_default, { accountModelSettings: () => current() });
 	ctx.plugin(GitHubCopilotAuthorizationController);
 	ctx.plugin(GitHubCopilotDualModel);
+	ctx.plugin(SearchRoutingController);
 	const resolveGitHubCopilotToken = createGitHubCopilotTokenResolver(ctx, async () => {
 		await ensureGitHubCopilotProviderProfile(ctx);
 	});
@@ -5927,37 +6215,110 @@ function activate(ctx, config) {
 		const owner = currentSearchInitiator(ctx);
 		const startedGeneration = generation;
 		const cfg = current();
-		let proof;
-		let preview;
+		const preview = ctx.get("githubCopilotPreview");
+		const proof = preview?.captureSearchProof();
 		const assertCurrent = () => {
 			if (signal?.aborted) throw new WebError("web search aborted", "WEB_ABORTED");
-			if (!active || generation !== startedGeneration || owner === void 0 || disposedOwners.has(owner) || preview === void 0 || ctx.get("githubCopilotPreview") !== preview || proof?.() !== true) throw new WebError("configured Copilot search owner or account proof invalidated", "WEB_PROVIDER_UNAVAILABLE");
+			if (!active || generation !== startedGeneration || owner === void 0 || disposedOwners.has(owner) || preview === void 0 || ctx.get("githubCopilotPreview") !== preview || proof?.() !== true) throw new ConfiguredSearchProofInvalidated();
 		};
-		const result = await createTraditionalSearchProvider(configuredAvailable, async (requestSignal) => {
+		assertCurrent();
+		const provider = createTraditionalSearchProvider(configuredAvailable, async (requestSignal) => {
+			assertCurrent();
 			const searchPlan = await configuredWebPlan(requestSignal);
-			preview = ctx.get("githubCopilotPreview");
-			proof = preview?.captureSearchProof();
 			assertCurrent();
 			return searchPlan;
 		}, {
 			...hooks,
 			resolveApiKey: async (candidate) => {
+				assertCurrent();
 				const auth = await hooks.resolveApiKey(candidate);
-				if (proof !== void 0) assertCurrent();
+				assertCurrent();
 				return auth;
 			}
-		}, () => cfg, "github-copilot-hosted requires github-copilot.searchModel selecting an account-authorized OpenAI Responses model").search(request, signal);
-		assertCurrent();
-		return result;
+		}, () => cfg, "github-copilot-hosted requires github-copilot.searchModel selecting an account-authorized OpenAI Responses model");
+		try {
+			const result = await provider.search(request, signal);
+			assertCurrent();
+			return result;
+		} catch (error) {
+			assertCurrent();
+			throw error;
+		}
 	}
 	ctx.web.registerSearchProvider(traditionalProvider);
-	ctx.provide("githubCopilotSearchRouter", { search: async (request, signal, delegate, selectProvider) => {
+	ctx.provide("githubCopilotSearchRouter", { search: async (request, signal, delegate, selectProvider, captureSearchProvider) => {
 		const cfg = current();
 		const routing = routingCurrent();
+		const policy = normalizeWebSearchRouting(routing);
 		const owner = currentSearchInitiator(ctx);
 		const selection = currentSearchSelection(owner);
 		const managedOwned = selection?.provider === "github-copilot-preview" && isPluginPreviewProvider(ctx, selection.provider);
-		if (!cfg.enabled || cfg.routeWebSearch === false || owner === void 0) return delegate(request, signal);
+		if (!cfg.enabled || cfg.routeWebSearch === false) return delegate(request, signal);
+		if (!policy.legacy && captureSearchProvider === void 0) throw new WebError("explicit search routing requires captureSearchProvider from the routed Web facade", "WEB_PROVIDER_UNAVAILABLE");
+		if (owner === void 0) {
+			if (!policy.legacy) throw new WebError("explicit search routing requires agents.currentInitiator()", "WEB_PROVIDER_UNAVAILABLE");
+			return delegate(request, signal);
+		}
+		if (captureSearchProvider !== void 0) {
+			if (policy.primaryProvider === "none") throw new WebError("web search is disabled by the primary search provider setting", "WEB_PROVIDER_UNAVAILABLE");
+			const startedGeneration = generation;
+			const registrations = [];
+			let usingManagedPrimary = false;
+			let configuredProofInvalid = false;
+			const managedPreview = managedOwned ? ctx.get("githubCopilotPreview") : void 0;
+			const managedProof = managedPreview?.captureSearchProof();
+			const capture = (id) => {
+				const provider = captureSearchProvider(id);
+				if (provider !== void 0) registrations.push(provider);
+				return provider;
+			};
+			const missing = (id) => ({
+				id,
+				search: async () => {
+					throw new WebError("the configured search provider is not registered", "WEB_PROVIDER_CONFIGURED_MISSING");
+				}
+			});
+			const configured = (id) => {
+				const registration = capture(id);
+				if (registration === void 0) return missing(id);
+				if (id !== "github-copilot-hosted" || !registration.owns(traditionalProvider)) return registration;
+				return {
+					id,
+					search: async (query, querySignal) => {
+						try {
+							return await configuredSearch(query, querySignal);
+						} catch (error) {
+							if (error instanceof ConfiguredSearchProofInvalidated) configuredProofInvalid = true;
+							throw error;
+						}
+					}
+				};
+			};
+			let primary;
+			if (policy.primaryProvider === "auto") {
+				if (isCopilotSearchSelection(selection, managedOwned) && (cfg.providers.length === 0 || cfg.providers.includes(selection?.provider ?? ""))) {
+					const native = capture(GITHUB_COPILOT_HOSTED_SEARCH_PROVIDER_ID);
+					if (native?.owns(traditionalProvider)) {
+						usingManagedPrimary = managedOwned;
+						primary = native;
+					}
+				} else if (selection !== void 0) primary = capture(selection.provider);
+			} else primary = configured(policy.primaryProvider);
+			const fallback = policy.defaultProvider === "none" ? void 0 : configured(policy.defaultProvider);
+			const boundSignal = AbortSignal.any([
+				...signal === void 0 ? [] : [signal],
+				proofCancellation.signal,
+				plansFor(owner).cancellation.signal,
+				...registrations.map((provider) => provider.signal)
+			]);
+			const canContinue = () => active && generation === startedGeneration && !disposedOwners.has(owner) && !configuredProofInvalid && registrations.every((provider) => provider.current()) && (!usingManagedPrimary || ctx.get("githubCopilotPreview") === managedPreview && managedProof?.() === true);
+			return routeSearchTools(request, boundSignal, {
+				primary,
+				fallback,
+				canContinue,
+				allowFailureFallback: !policy.legacy || cfg.searchFallback !== "none"
+			});
+		}
 		const nativeAllowed = isCopilotSearchSelection(selection, managedOwned) && (cfg.providers.length === 0 || cfg.providers.includes(selection?.provider ?? ""));
 		const useNative = (routing.searchMode ?? "auto") === "auto" && nativeAllowed && (selectProvider === void 0 || traditionalAvailable());
 		const defaultProviderId = routing.defaultSearchProvider?.trim() || "deepseek-official";
@@ -6005,7 +6366,7 @@ function activate(ctx, config) {
 	});
 	ctx.on("llm/stream", (request, next) => {
 		const cfg = current();
-		if (!active || routingCurrent().searchMode === "fixed") return next();
+		if (!active || normalizeWebSearchRouting(routingCurrent()).primaryProvider !== "auto") return next();
 		const owner = currentSearchInitiator(ctx);
 		if (owner !== void 0 && disposedOwners.has(owner)) return next();
 		const route = currentChatRoute(ctx, request);
@@ -6024,7 +6385,8 @@ function activate(ctx, config) {
 		text: () => ""
 	});
 	return (owner, selection) => {
-		if (!active || owner === void 0 || disposedOwners.has(owner) || routingCurrent().searchMode === "fixed") return "";
+		const policy = normalizeWebSearchRouting(routingCurrent());
+		if (!active || owner === void 0 || disposedOwners.has(owner) || policy.primaryProvider !== "auto") return "";
 		const route = currentChatRoute(ctx, selection);
 		const cfg = current();
 		if (route === void 0 || cfg.providers.length > 0 && !cfg.providers.includes(route.provider)) return "";
@@ -6032,7 +6394,7 @@ function activate(ctx, config) {
 		const nativeGuidance = servingPrompt(current, matches(cached, route, candidatesForRoute(route), cfg) ? cached.plan : void 0);
 		const owned = route.provider === "github-copilot-preview" && isPluginPreviewProvider(ctx, route.provider);
 		if (!cfg.enabled || cfg.routeWebSearch === false || ctx.get("githubCopilotOriginalWeb") === void 0 || !isCopilotSearchSelection(route, owned)) return nativeGuidance;
-		return [nativeGuidance, cfg.searchFallback === "none" ? "Copilot search fallback is disabled. Do not silently substitute another paid search backend after a search failure." : "When web_search reports a fallback, explicitly tell the user the actual search backend (and custom endpoint/model when provided) and possible API charges in your answer. Never describe fallback results as Copilot search. Automatic fallback does not need per-search confirmation."].filter(Boolean).join("\n\n");
+		return [nativeGuidance, policy.defaultProvider === "none" || policy.legacy && cfg.searchFallback === "none" ? "Copilot search fallback is disabled. Do not silently substitute another paid search backend after a search failure." : "When web_search reports a fallback, explicitly tell the user the actual search backend (and custom endpoint/model when provided) and possible API charges in your answer. Never describe fallback results as Copilot search. Automatic fallback does not need per-search confirmation."].filter(Boolean).join("\n\n");
 	};
 }
 /**