dsh-github-copilot 0.4.0-alpha.27 → 0.4.0-alpha.28

package/lib/index.js

@@ -6,7 +6,7 @@ import { Remote, RemoteError, TypertRemoteService } from "@deepseek-ai/dsh-typer
 import z from "@deepseek-ai/schemastery";
 import { z as z$1 } from "zod";
 import * as dshLlm from "@deepseek-ai/dsh-llm";
-import { LlmError, attributionHeaders, contentHasImage, isAgentLoopRequest, resolveImageAttachmentAccess, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
+import { CONTEXT_WINDOW_EXCEEDED_CODE, LlmError, ReasoningEffortId, attributionHeaders, callConfigEquals, contentHasImage, isAgentLoopRequest, resolveImageAttachmentAccess, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { WebError } from "@deepseek-ai/dsh-web";
 import * as dshSettings from "@deepseek-ai/dsh-settings";
 import { getBuiltinModels } from "@earendil-works/pi-ai/providers/all";
@@ -14,6 +14,7 @@ import { createModels, getSupportedThinkingLevels, hasApi, lazyStream } from "@e
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import { githubCopilotProvider } from "@earendil-works/pi-ai/providers/github-copilot";
 import { Config as Config$1, PiAiAdapter } from "@deepseek-ai/dsh-llm-pi-ai";
+import { estimateContextTokens, estimateMessageTokens } from "@earendil-works/pi-ai/utils/estimate";
 import { buildCopilotDynamicHeaders, hasCopilotVisionInput } from "@earendil-works/pi-ai/api/github-copilot-headers";
 //#region lib/types/dual-model-host.js
 /** Optional plugin-owned planner/executor sessions; no Core/default-model mutation. */
@@ -226,12 +227,12 @@ function fail$1(reason, creation) {
 function creationOf(error) {
 	return ownRemoteFailure(error)?.creation ?? "uncertain";
 }
-function object$3(value) {
+function object$4(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function api$1(ctx, key, methods) {
 	const value = ctx.get(key);
-	return object$3(value) && methods.every((method) => typeof value[method] === "function") ? value : void 0;
+	return object$4(value) && methods.every((method) => typeof value[method] === "function") ? value : void 0;
 }
 function revision(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
@@ -255,7 +256,7 @@ const ERROR_REASONS = /* @__PURE__ */ new Set([
 /** Remote errors cross bundle/realm boundaries; constructor identity is not a protocol. */
 function ownRemoteFailure(error) {
 	try {
-		if (!object$3(error) || error.isDSHRemoteError !== true || error.code !== "copilot/dual-model" || !object$3(error.details)) return void 0;
+		if (!object$4(error) || error.isDSHRemoteError !== true || error.code !== "copilot/dual-model" || !object$4(error.details)) return void 0;
 		const reason = error.details.reason;
 		if (typeof reason !== "string" || !ERROR_REASONS.has(reason)) return void 0;
 		const creation = error.details.creation;
@@ -271,7 +272,7 @@ function reasonOf(error, fallback) {
 	const own = ownRemoteFailure(error);
 	if (own) return own.reason;
 	try {
-		if (object$3(error) && error.code === "SETTINGS_CONFLICT") return "DUAL_MODEL_REVISION_CONFLICT";
+		if (object$4(error) && error.code === "SETTINGS_CONFLICT") return "DUAL_MODEL_REVISION_CONFLICT";
 	} catch {}
 	return fallback;
 }
@@ -400,7 +401,7 @@ let GitHubCopilotDualModel = (() => {
 			}, { prepend: true });
 			ctx.on("system-prompt/assemble", async (_assembly, context, next) => {
 				const candidate = context.scope;
-				if (!candidate || !object$3(candidate.session) || !object$3(candidate.session.header) || !dedicatedAddress(candidate)) return next();
+				if (!candidate || !object$4(candidate.session) || !object$4(candidate.session.header) || !dedicatedAddress(candidate)) return next();
 				const rehydrating = !this.overlays.has(candidate);
 				if (rehydrating) this.restore(candidate);
 				const installed = this.overlays.get(candidate);
@@ -961,7 +962,7 @@ let SearchRoutingController = (() => {
 //#endregion
 //#region package.json
 var name$1 = "dsh-github-copilot";
-var version = "0.4.0-alpha.27";
+var version = "0.4.0-alpha.28";
 //#endregion
 //#region lib/types/probe.js
 /**
@@ -1263,6 +1264,92 @@ async function probeAnthropic(candidate, apiKey, signal) {
 	};
 }
 //#endregion
+//#region lib/types/request-budget.js
+/** The safety allowance matches the pinned native SDK; pressure is a separate opt-in check. */
+const DEFAULT_REQUEST_BUDGET_POLICY = Object.freeze({
+	safetyTokens: 4096,
+	pressureRatio: .9,
+	compactionReasoning: "prefer-low"
+});
+/** Validate deployment policy before applying defaults; unknown keys fail rather than silently drift. */
+function resolveRequestBudgetPolicy(config = {}) {
+	const keys = /* @__PURE__ */ new Set([
+		"safetyTokens",
+		"pressureRatio",
+		"compactionReasoning"
+	]);
+	for (const key of Object.keys(config)) if (!keys.has(key)) throw new Error(`COPILOT_REQUEST_BUDGET_POLICY_INVALID: unknown setting ${key}`);
+	const safetyTokens = config.safetyTokens === void 0 ? DEFAULT_REQUEST_BUDGET_POLICY.safetyTokens : config.safetyTokens;
+	const pressureRatio = config.pressureRatio === void 0 ? DEFAULT_REQUEST_BUDGET_POLICY.pressureRatio : config.pressureRatio;
+	const compactionReasoning = config.compactionReasoning === void 0 ? DEFAULT_REQUEST_BUDGET_POLICY.compactionReasoning : config.compactionReasoning;
+	if (!Number.isSafeInteger(safetyTokens) || safetyTokens < 0) throw new Error("COPILOT_REQUEST_BUDGET_POLICY_INVALID: safetyTokens must be a non-negative safe integer");
+	if (!Number.isFinite(pressureRatio) || pressureRatio <= 0 || pressureRatio > 1) throw new Error("COPILOT_REQUEST_BUDGET_POLICY_INVALID: pressureRatio must be greater than zero and at most one");
+	if (compactionReasoning !== "prefer-low" && compactionReasoning !== "preserve") throw new Error("COPILOT_REQUEST_BUDGET_POLICY_INVALID: unsupported compactionReasoning");
+	return Object.freeze({
+		safetyTokens,
+		pressureRatio,
+		compactionReasoning
+	});
+}
+function failure$1(code, message) {
+	return Object.freeze({
+		ok: false,
+		code,
+		message: `${code}: ${message}`
+	});
+}
+function positiveInteger$1(value) {
+	return Number.isSafeInteger(value) && value > 0;
+}
+/**
+* Reserve output under the combined context and independently enforce the prompt ceiling.
+* `policy` must come from resolveRequestBudgetPolicy; no caller cap or catalog object is changed.
+*/
+function calculateRequestBudget(limits, requestedMaxTokens, policy = DEFAULT_REQUEST_BUDGET_POLICY) {
+	const { contextWindow, maxInputTokens, maxTokens } = limits;
+	if (!positiveInteger$1(contextWindow) || !positiveInteger$1(maxTokens) || maxInputTokens !== void 0 && !positiveInteger$1(maxInputTokens)) return failure$1("COPILOT_REQUEST_INVALID_LIMITS", "model token capacities must be positive safe integers");
+	if (requestedMaxTokens !== void 0 && !positiveInteger$1(requestedMaxTokens)) return failure$1("COPILOT_REQUEST_INVALID_OUTPUT_LIMIT", "request output cap must be a positive safe integer");
+	const outputReservation = requestedMaxTokens ?? maxTokens;
+	if (outputReservation > maxTokens) return failure$1("COPILOT_REQUEST_OUTPUT_LIMIT_EXCEEDED", `request output cap ${outputReservation} exceeds model output capacity ${maxTokens}`);
+	const contextInputLimit = contextWindow - outputReservation;
+	const limitingFactor = maxInputTokens !== void 0 && maxInputTokens <= contextInputLimit ? "prompt" : "context";
+	const hardInputLimit = Math.min(maxInputTokens ?? contextInputLimit, contextInputLimit) - policy.safetyTokens;
+	if (hardInputLimit <= 0) return failure$1("COPILOT_REQUEST_NO_INPUT_HEADROOM", "output reservation and safety allowance leave no positive input budget");
+	return Object.freeze({
+		ok: true,
+		budget: Object.freeze({
+			contextWindow,
+			...maxInputTokens === void 0 ? {} : { maxInputTokens },
+			maxOutputTokens: maxTokens,
+			outputReservation,
+			hardInputLimit,
+			pressureInputLimit: Math.floor(hardInputLimit * policy.pressureRatio),
+			limitingFactor
+		})
+	});
+}
+/**
+* Check an estimated full prompt; estimates are not provider-exact token counts.
+* Enable pressure only for an owned ordinary loop call with a compaction recovery path.
+* Auxiliary and agentless calls use hard admission, including compaction itself.
+*/
+function assessRequestBudget(estimatedInput, budget, pressure = false) {
+	if (!Number.isFinite(estimatedInput) || estimatedInput < 0 || estimatedInput > Number.MAX_SAFE_INTEGER) return failure$1("COPILOT_REQUEST_INVALID_ESTIMATE", "estimated input must be finite, non-negative, and safely representable");
+	const input = Math.ceil(estimatedInput);
+	if (input > budget.hardInputLimit) return failure$1(budget.limitingFactor === "prompt" ? "COPILOT_REQUEST_INPUT_LIMIT_EXCEEDED" : "COPILOT_REQUEST_CONTEXT_LIMIT_EXCEEDED", `estimated input ${input} exceeds input budget ${budget.hardInputLimit} with output reservation ${budget.outputReservation}`);
+	if (pressure && input > budget.pressureInputLimit) return failure$1("COPILOT_REQUEST_PRESSURE_EXCEEDED", `estimated input ${input} exceeds proactive compaction budget ${budget.pressureInputLimit}`);
+	return Object.freeze({ ok: true });
+}
+/**
+* Select a low-cost supported effort only for a caller-confirmed compaction request.
+* A supplied effort, including a materialized provider default, wins unchanged; native validation
+* remains authoritative. Unsupported low-cost controls preserve the provider default, never off/none.
+*/
+function selectCompactionReasoning(supportedEfforts, requestedEffort, mode = DEFAULT_REQUEST_BUDGET_POLICY.compactionReasoning) {
+	if (requestedEffort !== void 0 || mode === "preserve") return requestedEffort;
+	return supportedEfforts.find((effort) => effort === "minimal") ?? supportedEfforts.find((effort) => effort === "low");
+}
+//#endregion
 //#region lib/types/config.js
 /**
 * Settings section of the inline web-search plugin: the narrow-gate switch,
@@ -1283,6 +1370,9 @@ const Config = z.object({
 	probeTimeoutMs: z.number().step(1).min(1).max(MAX_TIMEOUT_MS).default(3e4),
 	accountModelTtlMs: z.number().step(1).min(0).max(MAX_TIMEOUT_MS).default(864e5),
 	accountModelFailureCooldownMs: z.number().step(1).min(0).max(MAX_TIMEOUT_MS).default(3e5),
+	requestBudgetSafetyTokens: z.number().step(1).min(0).max(Number.MAX_SAFE_INTEGER).default(DEFAULT_REQUEST_BUDGET_POLICY.safetyTokens),
+	requestBudgetPressureRatio: z.number().step(.01).min(.01).max(1).default(DEFAULT_REQUEST_BUDGET_POLICY.pressureRatio),
+	compactionReasoning: z.union(["prefer-low", "preserve"]).default(DEFAULT_REQUEST_BUDGET_POLICY.compactionReasoning),
 	routeWebSearch: z.boolean().default(true),
 	searchFallback: z.union(["none", "deepseek"]).default("deepseek"),
 	searchModel: z.string().hidden(),
@@ -3131,19 +3221,19 @@ var TemporaryRouteConflictError = class extends Error {
 		this.name = "TemporaryRouteConflictError";
 	}
 };
-function object$2(value) {
+function object$3(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function profileAt(value) {
-	return object$2(object$2(object$2(value)?.providers)?.["github-copilot"]);
+	return object$3(object$3(object$3(value)?.providers)?.["github-copilot"]);
 }
 /** Bounded comparison; never stringify or copy unknown model extras or headers. */
 function equalJson(a, b, depth = 0) {
 	if (a === b) return true;
 	if (depth > 12) return false;
 	if (Array.isArray(a) || Array.isArray(b)) return Array.isArray(a) && Array.isArray(b) && a.length <= 512 && a.length === b.length && a.every((value, i) => equalJson(value, b[i], depth + 1));
-	const left = object$2(a);
-	const right = object$2(b);
+	const left = object$3(a);
+	const right = object$3(b);
 	if (!left || !right) return false;
 	const keys = Object.keys(left);
 	return keys.length <= 512 && keys.length === Object.keys(right).length && keys.every((key) => Object.hasOwn(right, key) && equalJson(left[key], right[key], depth + 1));
@@ -3152,7 +3242,7 @@ const MAX_BACKUP = 131072;
 function safeModels(value) {
 	if (!Array.isArray(value) || value.length > 512) throw new TemporaryRouteConflictError();
 	return value.map((entry) => {
-		const model = object$2(entry);
+		const model = object$3(entry);
 		if (!model || typeof model.id !== "string" || !/^[a-zA-Z0-9._:/-]{1,200}$/.test(model.id)) throw new TemporaryRouteConflictError();
 		const overlay = temporaryGitHubCopilotModel(model.id, /* @__PURE__ */ new Map());
 		if (overlay && Object.keys(model).some((key) => key !== "id" && key !== "api")) {
@@ -3183,10 +3273,10 @@ function readBackup(value) {
 	if (value === void 0) return void 0;
 	if (typeof value !== "string" || value.length > MAX_BACKUP) throw new TemporaryRouteConflictError("TEMPORARY_ROUTE_INVALID_BACKUP");
 	try {
-		const decoded = object$2(JSON.parse(value));
+		const decoded = object$3(JSON.parse(value));
 		if (!decoded) throw new Error();
 		if (decoded.version === void 0 || decoded.version === 2 && decoded.sourceEpoch === void 0) throw new TemporaryRouteConflictError("TEMPORARY_ROUTE_LEGACY_CONFLICT");
-		if (decoded.version !== 2 || typeof decoded.providerExisted !== "boolean" || typeof decoded.sourceEpoch !== "string" || !/^[a-f0-9-]{36}$/.test(decoded.sourceEpoch) || !Number.isSafeInteger(decoded.sourceRevision) || Number(decoded.sourceRevision) < 0 || !["overlay", "restoring"].includes(String(decoded.phase)) || !object$2(decoded.preimage) || !object$2(decoded.postimage) || !object$2(decoded.ownedHeaders) || Object.keys(decoded).some((key) => ![
+		if (decoded.version !== 2 || typeof decoded.providerExisted !== "boolean" || typeof decoded.sourceEpoch !== "string" || !/^[a-f0-9-]{36}$/.test(decoded.sourceEpoch) || !Number.isSafeInteger(decoded.sourceRevision) || Number(decoded.sourceRevision) < 0 || !["overlay", "restoring"].includes(String(decoded.phase)) || !object$3(decoded.preimage) || !object$3(decoded.postimage) || !object$3(decoded.ownedHeaders) || Object.keys(decoded).some((key) => ![
 			"version",
 			"providerExisted",
 			"preimage",
@@ -3203,15 +3293,15 @@ function readBackup(value) {
 			decoded.postimage,
 			...decoded.phase === "restoring" ? [decoded.target] : []
 		]) {
-			const record = object$2(leaf);
+			const record = object$3(leaf);
 			if (!record || !equalJson(record, leavesOf(record))) throw new Error();
 		}
-		const models = object$2(decoded.postimage)?.models ?? [];
+		const models = object$3(decoded.postimage)?.models ?? [];
 		const knownHeaders = Object.assign({}, ...models.flatMap((model) => {
 			const overlay = temporaryGitHubCopilotModelFromProfile(model);
 			return overlay ? [overlay.headers] : [];
 		}));
-		if (!Object.entries(object$2(decoded.ownedHeaders)).every(([name, header]) => knownHeaders[name] === header)) throw new Error();
+		if (!Object.entries(object$3(decoded.ownedHeaders)).every(([name, header]) => knownHeaders[name] === header)) throw new Error();
 		if (decoded.removeProfile !== void 0 && typeof decoded.removeProfile !== "boolean") throw new Error();
 		return decoded;
 	} catch (error) {
@@ -3237,7 +3327,7 @@ function settingsSnapshot(settings) {
 		hasOwnedSecrets,
 		routeRevision: route.revision,
 		markerRevision: marker.revision,
-		backup: readBackup(object$2(settings.get("github-copilot"))?.temporaryRouteBackup)
+		backup: readBackup(object$3(settings.get("github-copilot"))?.temporaryRouteBackup)
 	};
 }
 function assertOwned(current, backup) {
@@ -3270,7 +3360,7 @@ function leafOperations(current, target) {
 	}]);
 }
 function ownedHeaderRemoval(current, backup) {
-	return Object.entries(object$2(current?.headers) ?? {}).flatMap(([name, value]) => Object.entries(backup.ownedHeaders).some(([ownedName, ownedValue]) => name.toLowerCase() === ownedName.toLowerCase() && value === ownedValue) ? [{
+	return Object.entries(object$3(current?.headers) ?? {}).flatMap(([name, value]) => Object.entries(backup.ownedHeaders).some(([ownedName, ownedValue]) => name.toLowerCase() === ownedName.toLowerCase() && value === ownedValue) ? [{
 		op: "unset",
 		path: [
 			"providers",
@@ -3292,7 +3382,7 @@ function wholeProfileOwned(snapshot, backup) {
 //#endregion
 //#region lib/types/migration-status.js
 const LIMIT = 1024;
-function object$1(value) {
+function object$2(value) {
 	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error("Invalid evidence");
 	return value;
 }
@@ -3301,7 +3391,7 @@ function text$1(value) {
 	return value;
 }
 function selection(value, omitDefaultEffort = false) {
-	const item = object$1(value);
+	const item = object$2(value);
 	const provider = text$1(item.provider), model = text$1(item.model), effort = item.reasoningEffort;
 	if (effort !== void 0) text$1(effort);
 	return {
@@ -3316,7 +3406,7 @@ function array(value) {
 }
 function api(ctx, name, methods) {
 	try {
-		const candidate = object$1(ctx.get(name));
+		const candidate = object$2(ctx.get(name));
 		return methods.every((key) => typeof candidate[key] === "function") ? candidate : void 0;
 	} catch {
 		return;
@@ -3386,26 +3476,26 @@ function migrationStatus(ctx) {
 		const rows = [], ids = /* @__PURE__ */ new Set();
 		let complete = projections !== void 0;
 		for (const candidate of array(call(agents, "list"))) {
-			const agent = object$1(candidate), id = text$1(agent.id), status = agent.status;
+			const agent = object$2(candidate), id = text$1(agent.id), status = agent.status;
 			if (ids.has(id) || status !== "idle" && status !== "running") throw new Error("Invalid agent inventory");
 			ids.add(id);
-			const session = object$1(agent.session);
+			const session = object$2(agent.session);
 			if (text$1(session.id) !== id) throw new Error("Invalid agent identity");
 			const header = call(session, "requestHeader");
-			const request = header === void 0 ? null : selection(object$1(header).config);
+			const request = header === void 0 ? null : selection(object$2(header).config);
 			let effective = null, source = "unknown";
 			if (projections) {
 				const state = call(projections, "stateOf", session, "modelSelection");
 				if (state !== void 0) {
-					const pending = object$1(state).pending;
+					const pending = object$2(state).pending;
 					if (pending !== null) {
 						effective = selection(pending);
 						source = "pending";
 					} else if (header !== void 0) {
-						const defaults = object$1(header).adapterDefaults;
-						const defaultEffort = defaults === void 0 ? false : object$1(defaults).reasoningEffort;
+						const defaults = object$2(header).adapterDefaults;
+						const defaultEffort = defaults === void 0 ? false : object$2(defaults).reasoningEffort;
 						if (defaultEffort !== void 0 && typeof defaultEffort !== "boolean") throw new Error("Invalid adapter defaults");
-						effective = selection(object$1(header).config, defaultEffort === true);
+						effective = selection(object$2(header).config, defaultEffort === true);
 						source = "request-header";
 					} else if (result.complete.defaultSelection) {
 						effective = result.defaultSelection;
@@ -3429,23 +3519,23 @@ function migrationStatus(ctx) {
 		const descriptors = array(call(settings, "describe", { redactSecrets: true }));
 		const found = /* @__PURE__ */ new Set();
 		for (const value of descriptors) {
-			const descriptor = object$1(value);
+			const descriptor = object$2(value);
 			const ns = text$1(descriptor.ns);
 			if (ns !== "llm-pi-ai" && ns !== "github-copilot") continue;
 			if (found.has(ns) || !Number.isSafeInteger(descriptor.revision) || descriptor.revision < 0) throw new Error("Invalid settings evidence");
 			found.add(ns);
 		}
 		if (found.size !== 2) throw new Error("Unregistered settings");
-		const config = object$1(call(settings, "get", "llm-pi-ai"));
-		const profile = (config.providers === void 0 ? void 0 : object$1(config.providers))?.[GITHUB_COPILOT_PROVIDER_ID];
-		if (profile !== void 0) object$1(profile);
+		const config = object$2(call(settings, "get", "llm-pi-ai"));
+		const profile = (config.providers === void 0 ? void 0 : object$2(config.providers))?.[GITHUB_COPILOT_PROVIDER_ID];
+		if (profile !== void 0) object$2(profile);
 		result.capabilities.settingsCas = true;
 		result.routes.nativeConfigured = profile !== void 0;
 	} catch {}
 	if (llm) try {
 		const ids = /* @__PURE__ */ new Set();
 		for (const value of array(call(llm, "listProviders"))) {
-			const id = text$1(object$1(value).id);
+			const id = text$1(object$2(value).id);
 			if (ids.has(id)) throw new Error("Invalid registry evidence");
 			ids.add(id);
 		}
@@ -3686,7 +3776,7 @@ async function repairGitHubCopilotProviderProfile(ctx) {
 		try {
 			await settings.mutate(namespace, operations, revision);
 		} catch (error) {
-			if (object$2(error)?.code === "SETTINGS_CONFLICT") throw new TemporaryRouteConflictError();
+			if (object$3(error)?.code === "SETTINGS_CONFLICT") throw new TemporaryRouteConflictError();
 			throw error;
 		}
 	};
@@ -4283,7 +4373,7 @@ const levels = [
 	"xhigh",
 	"max"
 ];
-function object(value) {
+function object$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
 }
 function unavailable() {
@@ -4292,18 +4382,18 @@ function unavailable() {
 /** Resolve only the selected model's declared/native efforts, with the same precedence as Core. */
 function resolveCopilotResponsesReasoning(ctx, request, candidate) {
 	if (request.provider !== "github-copilot" || candidate.protocol !== "openai-responses" || candidate.model !== request.model) return unavailable();
-	const profile = object(object(object(ctx.get("settings")?.get("llm-pi-ai"))?.providers)?.["github-copilot"]);
+	const profile = object$1(object$1(object$1(ctx.get("settings")?.get("llm-pi-ai"))?.providers)?.["github-copilot"]);
 	const effort = request.reasoningEffort ?? profile?.reasoning;
 	if (effort === void 0) return void 0;
 	const level = levels.find((value) => value === effort);
 	if (level === void 0 || profile === void 0) return unavailable();
 	const configured = Array.isArray(profile.models) ? profile.models : [];
-	const entry = configured.length > 0 ? object(configured.find((value) => object(value)?.id === request.model)) : object(object(profile.modelOverrides)?.[request.model]);
+	const entry = configured.length > 0 ? object$1(configured.find((value) => object$1(value)?.id === request.model)) : object$1(object$1(profile.modelOverrides)?.[request.model]);
 	if (configured.length > 0 && entry === void 0) return unavailable();
 	const declared = entry?.reasoningEfforts;
 	if (declared !== void 0) {
 		if (declared === false) return level === "off" ? void 0 : unavailable();
-		const mapping = object(declared);
+		const mapping = object$1(declared);
 		if (mapping === void 0) return unavailable();
 		const wire = mapping[level];
 		if (level === "off" && (wire === null || typeof wire === "string" && wire.length > 0)) return void 0;
@@ -4499,6 +4589,7 @@ function createAccountProvider(descriptors, guard, baseURL) {
 			guard.assertActive();
 			const entry = table.get(model.id);
 			if (model.provider !== "github-copilot-preview" || model.id !== selected() || entry === void 0 || model.api !== entry.api) throw new Error("COPILOT_MANAGED_MODEL_MISMATCH");
+			guard.inspectRequest?.(model, context, options);
 			const lease = await guard.beforeWire(model, options);
 			if (typeof options?.apiKey !== "string" || options.apiKey.length === 0) {
 				lease.release();
@@ -5342,6 +5433,118 @@ function createAccountModelSource(dependencies) {
 	return new AccountModelSource(dependencies);
 }
 //#endregion
+//#region lib/types/compaction-pressure.js
+function object(value) {
+	return typeof value === "object" && value !== null ? value : void 0;
+}
+/** Optional public services are not dependencies of the retained development baseline. */
+function optionalService(ctx, name) {
+	return ctx.get(name);
+}
+function positiveInteger(value) {
+	return typeof value === "number" && Number.isSafeInteger(value) && value > 0;
+}
+/**
+* Request a stock overflow reduction before sending an estimated over-budget
+* conversation. The loop has already logged and frozen this exact request;
+* only its owner can rebuild it after a durable compaction. Never rewrite the
+* request, invoke compaction concurrently, or intercept auxiliary summaries.
+* @param ctx - Host context owning the reversible stream listener.
+* @param callbacks - synchronous authenticated budget lookup, without discovery.
+* @returns disposer for the listener, also owned by its Cordis context.
+*/
+function installCopilotCompactionPressure(ctx, callbacks) {
+	let warned = false;
+	const unavailable = () => {
+		if (warned) return;
+		warned = true;
+		try {
+			if (typeof ctx.logger?.warn === "function") ctx.logger.warn("COPILOT_COMPACTION_PRESSURE_UNAVAILABLE: optional request measurement or stock automatic recovery is unavailable; retaining the native request budget guard.");
+		} catch (_error) {}
+	};
+	const pressureFailure = (request) => {
+		if (!isAgentLoopRequest(request) || request.purpose !== void 0 || request.provider !== "github-copilot-preview" || request.sessionId === void 0 || request.signal?.aborted) return void 0;
+		if (!isPluginPreviewProvider(ctx, request.provider)) return void 0;
+		if (typeof object(ctx.get("agents"))?.currentInitiator !== "function") {
+			unavailable();
+			return;
+		}
+		const owner = currentSearchInitiator(ctx);
+		if (owner === void 0 || owner.session.id !== request.sessionId) return void 0;
+		if (typeof owner.session.requestHeader !== "function") {
+			unavailable();
+			return;
+		}
+		const header = owner.session.requestHeader();
+		if (header === void 0 || !callConfigEquals(header.config, request)) return void 0;
+		const budget = callbacks.resolve(request);
+		if (budget === void 0 || !positiveInteger(budget.inputBudgetTokens)) return void 0;
+		const compaction = object(optionalService(ctx, "compaction"));
+		const config = object(compaction?.config);
+		if (config?.auto === false) return void 0;
+		if (config?.auto !== true || typeof compaction?.compactIfNeeded !== "function") {
+			unavailable();
+			return;
+		}
+		const retries = (Array.isArray(config.modelPolicies) ? object(config.modelPolicies.find((value) => {
+			const candidate = object(value);
+			return candidate?.provider === request.provider && candidate.model === request.model;
+		})) : void 0)?.maxOverflowRetries ?? config.maxOverflowRetries;
+		if (retries === 0) return void 0;
+		if (!positiveInteger(retries)) {
+			unavailable();
+			return;
+		}
+		const meter = object(optionalService(ctx, "tokenMeter"));
+		if (typeof meter?.measure !== "function") {
+			unavailable();
+			return;
+		}
+		const tokens = object(meter.measure(owner.session))?.totalTokens;
+		if (typeof tokens !== "number" || !Number.isSafeInteger(tokens) || tokens < 0) {
+			unavailable();
+			return;
+		}
+		if (tokens <= budget.inputBudgetTokens) return void 0;
+		return {
+			type: "finish",
+			reason: {
+				kind: "error",
+				failure: {
+					code: CONTEXT_WINDOW_EXCEEDED_CODE,
+					message: `Copilot local estimated input budget exceeded (${tokens} estimated tokens > ${budget.inputBudgetTokens} budget tokens); requesting stock compaction before provider dispatch.`
+				}
+			}
+		};
+	};
+	return ctx.on("llm/stream", (request, next) => {
+		let failure;
+		try {
+			failure = pressureFailure(request);
+		} catch (_error) {
+			unavailable();
+		}
+		if (failure === void 0) return next();
+		const terminal = failure;
+		return (async function* () {
+			if (request.signal?.aborted) {
+				yield {
+					type: "finish",
+					reason: {
+						kind: "aborted",
+						failure: {
+							code: "ABORTED",
+							message: "Copilot request cancelled before provider dispatch."
+						}
+					}
+				};
+				return;
+			}
+			yield terminal;
+		})();
+	}, { prepend: true });
+}
+//#endregion
 //#region lib/types/preview-route.js
 function failure(code, category = "AUTH") {
 	return new LlmError(code, category);
@@ -5535,18 +5738,25 @@ function resolvedProfile(provider, config) {
 		modelErrors: /* @__PURE__ */ new Map()
 	});
 }
-/** Only ownership/discovery/lifetime guards are added; Core owns model conversion and wire/replay. */
+/** Classify only an owned admission decision, never an arbitrary provider error string. */
+function budgetFailure(result) {
+	const contextExceeded = result.code === "COPILOT_REQUEST_INPUT_LIMIT_EXCEEDED" || result.code === "COPILOT_REQUEST_CONTEXT_LIMIT_EXCEEDED";
+	return new LlmError(contextExceeded ? `COPILOT_CONTEXT_BUDGET_EXCEEDED: ${result.message}` : result.message, contextExceeded ? "CONTEXT_WINDOW_EXCEEDED" : "INVALID_REQUEST");
+}
+/** Account-bound admission and purpose defaults; Core owns model conversion and wire/replay. */
 var PreviewAdapter = class extends PiAiAdapter {
 	lifetime;
 	optionsFor;
 	discoverSnapshot;
 	refreshRejected;
-	constructor(lifetime, optionsFor, discoverSnapshot, refreshRejected) {
+	requestBudgetSettings;
+	constructor(lifetime, optionsFor, discoverSnapshot, refreshRejected, requestBudgetSettings) {
 		super(optionsFor());
 		this.lifetime = lifetime;
 		this.optionsFor = optionsFor;
 		this.discoverSnapshot = discoverSnapshot;
 		this.refreshRejected = refreshRejected;
+		this.requestBudgetSettings = requestBudgetSettings;
 	}
 	async listModels(provider) {
 		owned(provider);
@@ -5578,10 +5788,9 @@ var PreviewAdapter = class extends PiAiAdapter {
 		const cached = this.lifetime.source.readSnapshot();
 		const snapshot = await this.discoverSnapshot({ signal });
 		const lease = await this.lease(snapshot, model, signal, cached === snapshot);
-		const prepared = await this.withRecovery(snapshot, signal, () => new PiAiAdapter(this.optionsFor(lease)).prepareCall(provider, model, signal));
 		return {
-			model: prepared.model,
-			stream: (options) => this.guardedStream(lease, prepared.stream, options)
+			model: (await this.withRecovery(snapshot, signal, () => new PiAiAdapter(this.optionsFor(lease)).prepareCall(provider, model, signal))).model,
+			stream: (options) => this.guardedStream(lease, options)
 		};
 	}
 	stream(options) {
@@ -5591,8 +5800,7 @@ var PreviewAdapter = class extends PiAiAdapter {
 			const cached = owner.lifetime.source.readSnapshot();
 			const snapshot = await owner.discoverSnapshot({ signal: options.signal });
 			const lease = await owner.lease(snapshot, options.model, options.signal, cached === snapshot);
-			const native = new PiAiAdapter(owner.optionsFor(lease));
-			yield* owner.guardedStream(lease, (request) => native.stream(request), options);
+			yield* owner.guardedStream(lease, options);
 		})();
 	}
 	async lease(snapshot, model, signal, reused) {
@@ -5611,40 +5819,76 @@ var PreviewAdapter = class extends PiAiAdapter {
 			throw cause;
 		}
 	}
-	guardedStream(lease, dispatch, options) {
+	guardedStream(lease, options) {
 		const owner = this;
 		return (async function* () {
 			owner.lifetime.start(lease);
 			owned(options.provider);
 			if (options.model !== lease.descriptor.id) throw failure("COPILOT_PREVIEW_MODEL_MISMATCH");
+			const signal = AbortSignal.any([lease.signal, ...options.signal === void 0 ? [] : [options.signal]]);
+			if (signal.aborted) throw failure("COPILOT_PREVIEW_ABORTED", "ABORTED");
+			const policy = resolveRequestBudgetPolicy(owner.requestBudgetSettings());
+			const model = accountModelFromDescriptor(lease.descriptor, lease.proof.baseURL);
 			if (options.reasoningEffort !== void 0) {
-				const model = accountModelFromDescriptor(lease.descriptor, lease.proof.baseURL);
 				const mapping = Object.entries(model.thinkingLevelMap ?? {}).find(([level]) => level === options.reasoningEffort)?.[1];
 				if (typeof mapping !== "string" || mapping.length === 0) throw failure("COPILOT_PREVIEW_REASONING_UNSUPPORTED", "INVALID_REQUEST");
 			}
-			const signal = AbortSignal.any([lease.signal, ...options.signal === void 0 ? [] : [options.signal]]);
+			let admissionFailure;
+			const inspectRequest = (_model, context, nativeOptions) => {
+				if (signal.aborted) throw failure("COPILOT_PREVIEW_ABORTED", "ABORTED");
+				const calculated = calculateRequestBudget(lease.descriptor, nativeOptions?.maxTokens, policy);
+				if (!calculated.ok) {
+					admissionFailure = budgetFailure(calculated);
+					throw admissionFailure;
+				}
+				const prefix = estimateContextTokens({
+					messages: [],
+					...context.systemPrompt === void 0 ? {} : { systemPrompt: context.systemPrompt },
+					...context.tools === void 0 ? {} : { tools: context.tools }
+				}).tokens;
+				const fresh = context.messages.reduce((tokens, message) => tokens + estimateMessageTokens(message), prefix);
+				const admitted = assessRequestBudget(Math.max(estimateContextTokens(context).tokens, fresh), calculated.budget);
+				if (!admitted.ok) {
+					admissionFailure = budgetFailure(admitted);
+					throw admissionFailure;
+				}
+			};
 			try {
-				for await (const chunk of dispatch({
+				const native = new PiAiAdapter(owner.optionsFor(lease, inspectRequest));
+				const prepared = await native.prepareCall(options.provider, options.model, signal);
+				const suppliedEffort = options.reasoningEffort ?? prepared.model.reasoning?.defaultEffort;
+				const effort = options.purpose === "compaction" ? selectCompactionReasoning(getSupportedThinkingLevels(model), suppliedEffort, policy.compactionReasoning) : suppliedEffort;
+				const request = {
 					...options,
-					signal
-				})) {
+					signal,
+					...effort === void 0 ? {} : { reasoningEffort: ReasoningEffortId(effort) }
+				};
+				for await (const chunk of native.stream(request)) {
+					if (admissionFailure !== void 0) {
+						if (signal.aborted) throw failure("COPILOT_PREVIEW_ABORTED", "ABORTED");
+						throw admissionFailure;
+					}
 					if (chunk.type === "finish" && chunk.reason.kind === "error" && chunk.reason.failure.code === "UNKNOWN_MODEL") await owner.refreshRejected(lease.snapshot, signal);
 					yield chunk;
 				}
+				if (admissionFailure !== void 0) throw admissionFailure;
 			} catch (cause) {
+				if (signal.aborted) throw failure("COPILOT_PREVIEW_ABORTED", "ABORTED");
 				if (cause instanceof LlmError && cause.code === "UNKNOWN_MODEL") await owner.refreshRejected(lease.snapshot, signal);
-				throw cause;
+				throw admissionFailure ?? cause;
 			}
 		})();
 	}
 };
 /** Register one stable account route; attach/status remain network-free. */
 function apply$1(ctx, config = {}) {
-	const { accountModelTtlMs, accountModelFailureCooldownMs, accountModelSettings, ...requestConfig } = config;
+	const { accountModelTtlMs, accountModelFailureCooldownMs, accountModelSettings, requestBudget, requestBudgetSettings, ...requestConfig } = config;
 	const cacheSettings = accountModelSettings ?? (() => ({
 		accountModelTtlMs,
 		accountModelFailureCooldownMs
 	}));
+	const budgetSettings = requestBudgetSettings ?? (() => requestBudget ?? {});
+	resolveRequestBudgetPolicy(budgetSettings());
 	const store = createGitHubCopilotCredentialStore(ctx, GITHUB_COPILOT_PREVIEW_PROVIDER_ID);
 	const nativeAuth = createAccountModelAuth(createGitHubCopilotCredentialStore(ctx));
 	const nativeModels = getBuiltinModels("github-copilot");
@@ -5711,7 +5955,7 @@ function apply$1(ctx, config = {}) {
 		})) ?? [];
 		const warnings = snapshot?.models.flatMap((model) => {
 			const codes = [];
-			if (model.maxInputTokens !== void 0 && model.maxInputTokens < model.contextWindow) codes.push("INPUT_LIMIT_NOT_ENFORCED_BY_CORE");
+			if (model.maxInputTokens !== void 0 && model.maxInputTokens < model.contextWindow) codes.push("INPUT_LIMIT_ESTIMATED_GUARD");
 			if (snapshotProof !== void 0 && accountModelFromDescriptor(model, snapshotProof.baseURL).unmappedReasoningEfforts.length > 0) codes.push("REASONING_EFFORTS_UNSUPPORTED");
 			return codes.map((code) => Object.freeze({
 				id: model.id,
@@ -5839,8 +6083,12 @@ function apply$1(ctx, config = {}) {
 			});
 		} catch {}
 	};
-	const optionsFor = (lease) => {
-		const { provider } = createAccountProvider(lease?.snapshot.models ?? [], lifetime.guard(lease), lease?.proof.baseURL ?? "https://api.individual.githubcopilot.com");
+	const optionsFor = (lease, inspectRequest) => {
+		const guard = {
+			...lifetime.guard(lease),
+			...inspectRequest === void 0 ? {} : { inspectRequest }
+		};
+		const { provider } = createAccountProvider(lease?.snapshot.models ?? [], guard, lease?.proof.baseURL ?? "https://api.individual.githubcopilot.com");
 		const profile = Object.freeze({
 			...template,
 			piProvider: provider
@@ -5862,7 +6110,15 @@ function apply$1(ctx, config = {}) {
 			resolveImageAccess: (attachments, ref) => resolveImageAttachmentAccess(attachments, (hostPath) => ctx.get("fs")?.processPathFromHostPath(hostPath), ref)
 		};
 	};
-	const registration = ctx.llm.registerAdapter([GITHUB_COPILOT_PREVIEW_PROVIDER_ID], new PreviewAdapter(lifetime, optionsFor, discoverSnapshot, refreshRejected));
+	const registration = ctx.llm.registerAdapter([GITHUB_COPILOT_PREVIEW_PROVIDER_ID], new PreviewAdapter(lifetime, optionsFor, discoverSnapshot, refreshRejected, budgetSettings));
+	installCopilotCompactionPressure(ctx, { resolve(request) {
+		const snapshot = source.readSnapshot();
+		if (snapshot === void 0 || proofFor(snapshot) === void 0) return void 0;
+		const descriptor = snapshot.models.find((model) => model.id === request.model);
+		if (descriptor === void 0) return void 0;
+		const result = calculateRequestBudget(descriptor, request.maxTokens, resolveRequestBudgetPolicy(budgetSettings()));
+		return result.ok ? { inputBudgetTokens: result.budget.pressureInputLimit } : void 0;
+	} });
 	notify = () => {
 		const view = getView();
 		const directory = JSON.stringify({
@@ -6033,7 +6289,17 @@ function activate(ctx, config) {
 		searchMode: "auto",
 		defaultSearchProvider: "deepseek-official"
 	});
-	ctx.plugin(preview_route_default, { accountModelSettings: () => current() });
+	ctx.plugin(preview_route_default, {
+		accountModelSettings: () => current(),
+		requestBudgetSettings: () => {
+			const selected = current();
+			return {
+				safetyTokens: selected.requestBudgetSafetyTokens,
+				pressureRatio: selected.requestBudgetPressureRatio,
+				compactionReasoning: selected.compactionReasoning
+			};
+		}
+	});
 	ctx.plugin(GitHubCopilotAuthorizationController);
 	ctx.plugin(GitHubCopilotDualModel);
 	ctx.plugin(SearchRoutingController);