dsh-lcx-codex 0.4.2 → 0.4.3-pre.13

package/lib/index.js

@@ -1,798 +1,1106 @@
-import z from '@deepseek-ai/schemastery'
-import { installSettingsSection, settingsNamespace } from '@deepseek-ai/dsh-settings'
-import { randomUUID } from 'node:crypto'
-import { homedir } from 'node:os'
-import { join } from 'node:path'
-import { AsyncLocalStorage } from 'node:async_hooks'
-import { fetchJsonWithRetry } from './transport.js'
-import {
-  agentSessionId,
-  compactionConfigState,
-  compactionPatchCandidate,
-  contextService,
-  installCompactionPatch,
-  patchCompactionConfig,
-  patchToolResultPruner,
-  patchVisibleWebSearchTimeout,
-  readAgentRouteState,
-  readWebSearchProvider,
-  refreshVisibleWebSearchTimeouts,
-  resolveAgentService,
-  resolveContextService,
-  resolveScopedService,
-  restoreCompactionConfig,
-  restoreCompactionPatches,
-  restoreToolResultPruner,
-  restoreVisibleWebSearchTimeouts,
-  sessionFor,
-  sessionsService,
-  toolResultPrunerState,
-  writeWebSearchProvider,
-} from './dsh-compat.js'
-import {
-  authenticatedHeaders,
-  currentRoute,
-  generationControlsFromHeader,
-  generationControlsFromSession,
-  promptCacheKey,
-  promptCacheRetention,
-  promptCacheSessionId,
-  resolveResponsesRouteConfig,
-  routeFingerprint,
-  updateRequestHeaderCache,
-} from './route.js'
-import {
-  DEFAULT_MAX_REQUEST_IMAGE_BYTES,
-  DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET,
-  DEFAULT_REQUEST_IMAGE_MAX_BYTES,
-  hydrateNativeImageReferences,
-  resolveModelImageSupport,
-  serializeDshMessages,
-} from './dsh-responses.js'
-import { mergeFeatureHeader, requestNativeCompaction } from './compact-v2.js'
-import { buildResponsesBody } from './responses-request.js'
-import { managedFailureChunk, streamResponsesRequest } from './responses-stream.js'
-import {
-  checkpointStateForMessage,
-  compactCheckpointId,
-  createNativeCheckpointBlock,
-  legacyCheckpointId,
-  nativeCheckpointChunks,
-  portableMessagesForCheckpoint,
-  retainedConversationInput,
-  shadowedMessagesForCheckpoint,
-  rewriteCheckpointsPortable,
-  stateRouteCompatible,
-} from './native-checkpoint.js'
-import { legacyRouteCompatible, legacyV3Id, loadLegacyRecord } from './legacy-v3.js'
-import {
-  HOSTED_SEARCH_OUTPUT,
-  HOSTED_SEARCH_PARAMETERS,
-  buildHostedSearchBody,
-  normalizeHostedSearchArgs,
-  parseHostedSearchResponse,
-  renderHostedSearchResult,
-} from './web-search-hosted.js'
-import {
-  ALPHA_SCHEMA_FINGERPRINT,
-  alphaRefRequiresStore,
-  isAlphaContinuationUrl,
-  isAlphaHttpUrl,
-  ALPHA_SEARCH_OUTPUT,
-  ALPHA_SEARCH_PARAMETERS,
-  buildAlphaSearchBody,
-  normalizeAlphaSearchArgs,
-  parseAlphaSearchResponse,
-  renderAlphaSearchResult,
-} from './web-search-alpha.js'
-import { AlphaCapabilityStore, alphaCapabilityFingerprint, alphaCapabilityUsable } from './web-search-capability.js'
-import { AlphaRefStore } from './web-search-ref-store.js'
-import { ServiceMutex } from './service-mutex.js'
-
-export const name = 'lcx-codex'
-export const inject = ['llm', 'web', 'sessions']
-const SETTINGS_NS = settingsNamespace('lcx-codex')
-const ADVANCED_HOSTED_TOOL = 'websearch_gpt_advanced'
-const ALPHA_TOOL = 'websearch_alpha'
-const COMPACTION_DIRECTIVE = 'You are now acting as a compaction engine'
-const hostedSearchRouteContext = new AsyncLocalStorage()
-
-function dshHome() { return process.env.DSH_HOME ?? join(homedir(), '.dsh') }
-function defaultLegacyCheckpointPath() { return join(dshHome(), 'storages', 'lcx-codex', 'checkpoints-v3.json') }
-function defaultAlphaCapabilityPath() { return join(dshHome(), 'storages', 'lcx-codex', 'web-alpha-capabilities.json') }
-function defaultAlphaRefPath() { return join(dshHome(), 'storages', 'lcx-codex', 'web-alpha-refs.json') }
-
+import z from "@deepseek-ai/schemastery";
+import { recordHostedUsage, withAuxiliaryUsage } from "./auxiliary-usage.js";
+import { installSearchUsage } from "./search-usage.js";
+import { WEB_SEARCH_MAX_QUERIES, applyWebSearchTool, } from "@deepseek-ai/dsh-tool-web";
+import "@deepseek-ai/dsh-agent";
+import "@deepseek-ai/dsh-tools";
+import "@deepseek-ai/dsh-web";
+import { randomUUID } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { AsyncLocalStorage } from "node:async_hooks";
+import { getSupportedThinkingLevels } from "./pi-responses-runtime.js";
+import { fetchJsonWithRetry } from "./transport.js";
+import { agentSessionId, agentUsesSession, compactionConfigState, compactionPatchCandidate, installCompactionPatch, patchCompactionConfig, patchToolResultPruner, readAgentRouteState, resolveAgentService, resolveContextService, resolveScopedService, restoreCompactionConfig, restoreCompactionPatches, restoreToolResultPruner, sessionFor, sessionFromAgent, scopedToolRuntime, tokenMeterTotal, toolResultPrunerState, } from "./dsh-compat.js";
+import { InvocationPolicyScope } from "./invocation-policy-scope.js";
+import { authenticatedGrokHeaders, authenticatedHeaders, currentRoute, generationControlsFromSession, grokPromptCacheSessionId, promptCacheKey, promptCacheRetention, promptCacheSessionId, resolveGrokResponsesRouteConfig, resolveResponsesRouteConfig, routeFingerprint, } from "./route.js";
+import { DEFAULT_MAX_REQUEST_IMAGE_BYTES, DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET, DEFAULT_REQUEST_IMAGE_MAX_BYTES, hydrateNativeImageReferences, resolveModelImageSupport, responseInputItems, serializeDshMessages, } from "./dsh-responses.js";
+import { mergeFeatureHeader, requestNativeCompaction } from "./compact-v2.js";
+import { buildResponsesBody } from "./responses-request.js";
+import { managedFailureChunk, streamResponsesRequest, } from "./responses-stream.js";
+import { assertSupportedCheckpointMessage, checkpointStateForMessage, compactCheckpointId, createNativeCheckpointBlock, nativeCheckpointChunks, portableMessagesForCheckpoint, stateRouteCompatible, } from "./native-checkpoint.js";
+import { HOSTED_SEARCH_OUTPUT, HOSTED_SEARCH_PARAMETERS, buildHostedSearchBody, hostedMediaPresentationMeta, normalizeHostedSearchArgs, parseHostedSearchResponse, renderHostedSearchResult, } from "./web-search-hosted.js";
+import { ALPHA_SCHEMA_FINGERPRINT, alphaRefRequiresStore, isAlphaContinuationUrl, isAlphaHttpUrl, ALPHA_SEARCH_OUTPUT, ALPHA_SEARCH_PARAMETERS, alphaSearchRetryOptions, buildAlphaSearchBody, normalizeAlphaSearchArgs, parseAlphaSearchResponse, renderAlphaSearchResult, runWithAlphaSessionLock, } from "./web-search-alpha.js";
+import { AlphaCapabilityStore, alphaCapabilityFingerprint, alphaCapabilityUsable, alphaSearchParametersFor, assertAlphaActionAllowed, } from "./web-search-capability.js";
+import { AlphaRefStore } from "./web-search-ref-store.js";
+import { ServiceMutex } from "./service-mutex.js";
+import { GROK_NATIVE_SERVER_TOOL_TYPES, grokNativeSearchEnabled, grokVisibleFunctionTools, isGrokNativeServerToolItem, grokWireTools, restoreGrokNativeReplay, } from "./grok-native-search.js";
+export const name = "lcx-codex";
+export const inject = ["llm", "web", "sessions", "tools", "settings", "credentials", "attachments", "fs"];
+const SETTINGS_NS = "lcx-codex";
+const ADVANCED_HOSTED_TOOL = "websearch_gpt_advanced";
+const ALPHA_TOOL = "websearch_alpha";
+const hostedSearchRouteContext = new AsyncLocalStorage();
+const WEB_SEARCH_TIMEOUT_MS = 240_000;
+const AUTO_COMPACTION_THRESHOLD_PERCENT = 90;
+const EMERGENCY_PRUNE_THRESHOLD_PERCENT = 95;
+function positiveInteger(value, fallback, maximum) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0)
+        return fallback;
+    return maximum === undefined ? value : Math.min(value, maximum);
+}
+function stringValue(value, fallback) {
+    return typeof value === "string" && value.trim() ? value : fallback;
+}
+function routeWithPolicies(route, config) {
+    return {
+        ...route,
+        alphaProfile: config.alphaProfile,
+        alphaGroup: config.alphaGroup,
+        alphaMaxOutputTokens: config.alphaMaxOutputTokens,
+        assistantRetentionPerMessageTokenCap: config.assistantRetentionPerMessageTokenCap,
+        assistantRetentionTokenReserve: config.assistantRetentionTokenReserve,
+        maxRequestImageBytes: route.maxRequestImageBytes ?? config.maxRequestImageBytes,
+        maxResponseBytes: config.maxResponseBytes,
+        nativeRetentionTokenBudget: config.nativeRetentionTokenBudget,
+        portableReplayMaxChars: config.portableReplayMaxChars,
+        requestImageMaxBytes: route.requestImageMaxBytes ?? config.requestImageMaxBytes,
+        requestImagePixelBudget: route.requestImagePixelBudget ?? config.requestImagePixelBudget,
+        webMaxResults: config.webMaxResults,
+    };
+}
+function grokReplayRoute(route, config) {
+    return {
+        ...route,
+        apiKeyEnv: config.apiKeyEnv,
+        headers: config.headers,
+    };
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object";
+}
+function asAbortSignal(value) {
+    return value instanceof AbortSignal ? value : undefined;
+}
+function errorDetails(value) {
+    return isRecord(value)
+        ? {
+            name: value.name,
+            code: value.code,
+            status: value.status,
+            message: value.message,
+        }
+        : {};
+}
+function dshHome() {
+    return process.env.DSH_HOME ?? join(homedir(), ".dsh");
+}
+function defaultAlphaCapabilityPath() {
+    return join(dshHome(), "storages", "lcx-codex", "web-alpha-capabilities.json");
+}
+function defaultAlphaRefPath() {
+    return join(dshHome(), "storages", "lcx-codex", "web-alpha-refs.json");
+}
 export const Config = z.object({
-  provider: z.string().default('lcx'),
-  baseURL: z.string().default('https://api.lcxbot.com/v1'),
-  apiKeyEnv: z.string().default('LCX_API_KEY'),
-  model: z.string().default('gpt-5.6-sol'),
-  supportsExplicitPromptCacheMode: z.boolean().default(false),
-  legacyCheckpointPath: z.string().default(''),
-  checkpointPath: z.string().default(''),
-  alphaCapabilityPath: z.string().default(''),
-  alphaRefPath: z.string().default(''),
-  alphaProfile: z.string().default(''),
-  alphaGroup: z.string().default(''),
-  alphaMaxOutputTokens: z.number().default(2500),
-  webSearchProvider: z.string().default('lcx-responses'),
-  webMaxResults: z.number().default(8),
-  timeoutMs: z.number().default(300000),
-  maxResponseBytes: z.number().default(8 * 1024 * 1024),
-  maxAttempts: z.number().default(3),
-  maxRequestImageBytes: z.number().default(DEFAULT_MAX_REQUEST_IMAGE_BYTES),
-  requestImagePixelBudget: z.number().default(DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET),
-  requestImageMaxBytes: z.number().default(DEFAULT_REQUEST_IMAGE_MAX_BYTES),
-  portableReplayMaxChars: z.number().default(80_000),
-  nativeRetentionTokenBudget: z.number().default(64_000),
-  assistantRetentionTokenReserve: z.number().default(24_000),
-  assistantRetentionPerMessageTokenCap: z.number().default(3_000),
-  webSearchTimeoutMs: z.number().default(240_000),
-  autoCompactionThresholdPercent: z.number().default(90),
-  emergencyPruneThresholdPercent: z.number().default(95),
-})
-
+    supportsLongCacheRetention: z.boolean().default(false),
+    supportsExplicitPromptCacheMode: z.boolean().default(false),
+    alphaCapabilityPath: z.string().default(""),
+    alphaRefPath: z.string().default(""),
+    alphaProfile: z.string().default(""),
+    alphaGroup: z.string().default(""),
+    alphaMaxOutputTokens: z.number().default(2500),
+    webSearchProvider: z.string().default("lcx-responses"),
+    webMaxResults: z.number().default(8),
+    timeoutMs: z.number().default(300000),
+    maxResponseBytes: z.number().default(8 * 1024 * 1024),
+    maxAttempts: z.number().default(3),
+    maxRequestImageBytes: z.number().default(DEFAULT_MAX_REQUEST_IMAGE_BYTES),
+    requestImagePixelBudget: z
+        .number()
+        .default(DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET),
+    requestImageMaxBytes: z.number().default(DEFAULT_REQUEST_IMAGE_MAX_BYTES),
+    portableReplayMaxChars: z.number().default(80_000),
+    nativeRetentionTokenBudget: z.number().default(64_000),
+    assistantRetentionTokenReserve: z.number().default(24_000),
+    assistantRetentionPerMessageTokenCap: z.number().default(3_000),
+});
 const SettingsSchema = z.object({
-  enabled: z.boolean().default(false),
-  webSearch: z.boolean().default(false),
-  advancedHostedSearch: z.boolean().default(false),
-  alphaSearch: z.boolean().default(false),
-  remoteCompaction: z.boolean().default(false),
-  fallbackToBasicCompaction: z.boolean().default(true),
-  autoCompaction: z.boolean().default(true),
-  webSearchTimeoutSeconds: z.number().default(240),
-  autoCompactionThresholdPercent: z.number().default(90),
-  emergencyPruneThresholdPercent: z.number().default(95),
-  provider: z.string().default('lcx'),
-  baseURL: z.string().default('https://api.lcxbot.com/v1'),
-  apiKeyEnv: z.string().default('LCX_API_KEY'),
-  model: z.string().default('gpt-5.6-sol'),
-})
-
+    enabled: z.boolean().default(false),
+    webSearch: z.boolean().default(false),
+    advancedHostedSearch: z.boolean().default(false),
+    alphaSearch: z.boolean().default(false),
+    grokNativeWebSearch: z.boolean().default(false),
+    grokNativeXSearch: z.boolean().default(false),
+    searchMediaPreview: z.boolean().default(false),
+});
 function normalizeConfig(input = {}) {
-  const legacy = input.legacyCheckpointPath || input.checkpointPath || defaultLegacyCheckpointPath()
-  return {
-    provider: input.provider || 'lcx',
-    baseURL: String(input.baseURL || 'https://api.lcxbot.com/v1').replace(/\/+$/u, ''),
-    apiKeyEnv: input.apiKeyEnv || 'LCX_API_KEY',
-    model: input.model || 'gpt-5.6-sol',
-    supportsExplicitPromptCacheMode: input.supportsExplicitPromptCacheMode === true,
-    headers: input.headers && typeof input.headers === 'object' ? { ...input.headers } : {},
-    legacyCheckpointPath: legacy,
-    alphaCapabilityPath: input.alphaCapabilityPath || defaultAlphaCapabilityPath(),
-    alphaRefPath: input.alphaRefPath || defaultAlphaRefPath(),
-    alphaProfile: String(input.alphaProfile ?? ''),
-    alphaGroup: String(input.alphaGroup ?? ''),
-    alphaMaxOutputTokens: Number.isInteger(input.alphaMaxOutputTokens) && input.alphaMaxOutputTokens > 0 ? Math.min(input.alphaMaxOutputTokens, 32_000) : 2500,
-    webSearchProvider: input.webSearchProvider || 'lcx-responses',
-    webMaxResults: Number.isInteger(input.webMaxResults) && input.webMaxResults > 0 ? input.webMaxResults : 8,
-    timeoutMs: Number.isInteger(input.timeoutMs) && input.timeoutMs > 0 ? input.timeoutMs : 300000,
-    maxResponseBytes: Number.isInteger(input.maxResponseBytes) && input.maxResponseBytes > 0 ? input.maxResponseBytes : 8 * 1024 * 1024,
-    maxAttempts: Number.isInteger(input.maxAttempts) && input.maxAttempts > 0 ? Math.min(input.maxAttempts, 6) : 3,
-    maxRequestImageBytes: Number.isSafeInteger(input.maxRequestImageBytes) && input.maxRequestImageBytes > 0 ? input.maxRequestImageBytes : DEFAULT_MAX_REQUEST_IMAGE_BYTES,
-    requestImagePixelBudget: Number.isSafeInteger(input.requestImagePixelBudget) && input.requestImagePixelBudget > 0 ? input.requestImagePixelBudget : DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET,
-    requestImageMaxBytes: Number.isSafeInteger(input.requestImageMaxBytes) && input.requestImageMaxBytes > 0 ? input.requestImageMaxBytes : DEFAULT_REQUEST_IMAGE_MAX_BYTES,
-    portableReplayMaxChars: Number.isSafeInteger(input.portableReplayMaxChars) && input.portableReplayMaxChars > 0 ? input.portableReplayMaxChars : 80_000,
-    nativeRetentionTokenBudget: Number.isSafeInteger(input.nativeRetentionTokenBudget) && input.nativeRetentionTokenBudget > 0 ? input.nativeRetentionTokenBudget : 64_000,
-    assistantRetentionTokenReserve: Number.isSafeInteger(input.assistantRetentionTokenReserve) && input.assistantRetentionTokenReserve >= 0 ? input.assistantRetentionTokenReserve : 24_000,
-    assistantRetentionPerMessageTokenCap: Number.isSafeInteger(input.assistantRetentionPerMessageTokenCap) && input.assistantRetentionPerMessageTokenCap > 0 ? input.assistantRetentionPerMessageTokenCap : 3_000,
-    webSearchTimeoutMs: Number.isSafeInteger(input.webSearchTimeoutMs) && input.webSearchTimeoutMs >= 30_000 ? Math.min(input.webSearchTimeoutMs, 600_000) : 240_000,
-    autoCompactionThresholdPercent: Number.isFinite(input.autoCompactionThresholdPercent) ? Math.min(95, Math.max(85, Number(input.autoCompactionThresholdPercent))) : 90,
-    emergencyPruneThresholdPercent: Number.isFinite(input.emergencyPruneThresholdPercent) ? Math.min(99, Math.max(90, Number(input.emergencyPruneThresholdPercent))) : 95,
-  }
-}
-
+    return {
+        supportsLongCacheRetention: input.supportsLongCacheRetention === true,
+        supportsExplicitPromptCacheMode: input.supportsExplicitPromptCacheMode === true,
+        alphaCapabilityPath: stringValue(input.alphaCapabilityPath, defaultAlphaCapabilityPath()),
+        alphaRefPath: stringValue(input.alphaRefPath, defaultAlphaRefPath()),
+        alphaProfile: String(input.alphaProfile ?? ""),
+        alphaGroup: String(input.alphaGroup ?? ""),
+        alphaMaxOutputTokens: positiveInteger(input.alphaMaxOutputTokens, 2500, 32_000),
+        webSearchProvider: stringValue(input.webSearchProvider, "lcx-responses"),
+        webMaxResults: positiveInteger(input.webMaxResults, 8),
+        timeoutMs: positiveInteger(input.timeoutMs, 300000),
+        maxResponseBytes: positiveInteger(input.maxResponseBytes, 8 * 1024 * 1024),
+        maxAttempts: positiveInteger(input.maxAttempts, 3, 6),
+        maxRequestImageBytes: positiveInteger(input.maxRequestImageBytes, DEFAULT_MAX_REQUEST_IMAGE_BYTES),
+        requestImagePixelBudget: positiveInteger(input.requestImagePixelBudget, DEFAULT_REQUEST_IMAGE_PIXEL_BUDGET),
+        requestImageMaxBytes: positiveInteger(input.requestImageMaxBytes, DEFAULT_REQUEST_IMAGE_MAX_BYTES),
+        portableReplayMaxChars: positiveInteger(input.portableReplayMaxChars, 80_000),
+        nativeRetentionTokenBudget: positiveInteger(input.nativeRetentionTokenBudget, 64_000),
+        assistantRetentionTokenReserve: typeof input.assistantRetentionTokenReserve === "number" &&
+            Number.isSafeInteger(input.assistantRetentionTokenReserve) &&
+            input.assistantRetentionTokenReserve >= 0
+            ? input.assistantRetentionTokenReserve
+            : 24_000,
+        assistantRetentionPerMessageTokenCap: positiveInteger(input.assistantRetentionPerMessageTokenCap, 3_000),
+    };
+}
 function webError(message, code, cause) {
-  const error = new Error(message, cause === undefined ? undefined : { cause })
-  error.name = 'WebError'; error.code = code; return error
-}
-
-function activeAgentRoute(exec, fallback) {
-  const route = readAgentRouteState(exec?.agent)
-  return {
-    provider: route.requestConfig?.provider ?? route.options?.provider ?? fallback.provider,
-    model: route.requestConfig?.model ?? route.options?.model ?? fallback.model,
-    sessionId: route.sessionId,
-  }
-}
-
-function selectedAgentRoute(agent, fallback) {
-  const route = readAgentRouteState(agent)
-  return {
-    provider: route.options?.provider ?? route.requestConfig?.provider ?? fallback.provider,
-    model: route.options?.model ?? route.requestConfig?.model ?? fallback.model,
-    sessionId: route.sessionId,
-  }
-}
-
+    const error = new Error(message, cause === undefined ? undefined : { cause });
+    error.name = "WebError";
+    error.code = code;
+    return error;
+}
+function routeConfigValue(value, name) {
+    return isRecord(value) ? value[name] : undefined;
+}
+function activeAgentRoute(exec) {
+    const route = readAgentRouteState(exec.agent);
+    return {
+        provider: stringValue(routeConfigValue(route.requestConfig, "provider") ??
+            routeConfigValue(route.options, "provider"), ""),
+        model: stringValue(routeConfigValue(route.requestConfig, "model") ??
+            routeConfigValue(route.options, "model"), ""),
+        sessionId: route.sessionId,
+    };
+}
+function selectedAgentRoute(agent) {
+    const route = readAgentRouteState(agent);
+    return {
+        provider: stringValue(routeConfigValue(route.requestConfig, "provider") ??
+            routeConfigValue(route.options, "provider"), ""),
+        model: stringValue(routeConfigValue(route.requestConfig, "model") ??
+            routeConfigValue(route.options, "model"), ""),
+        sessionId: route.sessionId,
+    };
+}
 function requestImageOptions(routeConfig, imageSupport, signal, imageMap, extra = {}) {
-  return {
-    imageSupport, signal, imageMap,
-    maxRequestImageBytes: routeConfig.maxRequestImageBytes,
-    requestImagePixelBudget: routeConfig.requestImagePixelBudget,
-    requestImageMaxBytes: routeConfig.requestImageMaxBytes,
-    ...extra,
-  }
-}
-
-async function executeHostedSearch(ctx, routeConfig, args, signal, sessionId = '') {
-  const normalized = normalizeHostedSearchArgs(args)
-  const requestId = randomUUID()
-  const route = currentRoute({ provider: routeConfig.provider, model: routeConfig.model, sessionId }, routeConfig)
-  const headers = await authenticatedHeaders(ctx, routeConfig, sessionId, requestId)
-  const searchCacheKey = sessionId ? `dsh-lcx-search:${routeFingerprint(route)}` : undefined
-  const body = buildHostedSearchBody(normalized, routeConfig.model, { promptCacheKey: searchCacheKey })
-  const response = await fetchJsonWithRetry(`${routeConfig.baseURL}/responses`, body, headers, signal, routeConfig.timeoutMs, { maxAttempts: routeConfig.maxAttempts, maxResponseBytes: routeConfig.maxResponseBytes })
-  return parseHostedSearchResponse(response, requestId, routeConfig.webMaxResults)
-}
-
+    return {
+        imageSupport,
+        signal,
+        imageMap,
+        maxRequestImageBytes: routeConfig.maxRequestImageBytes,
+        requestImagePixelBudget: routeConfig.requestImagePixelBudget,
+        requestImageMaxBytes: routeConfig.requestImageMaxBytes,
+        ...extra,
+    };
+}
+async function executeHostedSearch(ctx, routeConfig, args, signal, sessionId = "") {
+    const normalized = normalizeHostedSearchArgs(args);
+    const requestId = randomUUID();
+    const route = currentRoute({ provider: routeConfig.provider, model: routeConfig.model, sessionId }, routeConfig);
+    const headers = await authenticatedHeaders(ctx, routeConfig, sessionId, requestId);
+    const searchCacheKey = sessionId
+        ? `dsh-lcx-search:${routeFingerprint(route)}`
+        : undefined;
+    const body = buildHostedSearchBody(normalized, routeConfig.model, {
+        promptCacheKey: searchCacheKey,
+    });
+    const response = await fetchJsonWithRetry(`${routeConfig.baseURL}/responses`, body, headers, signal, routeConfig.timeoutMs, {
+        maxAttempts: routeConfig.maxAttempts,
+        maxResponseBytes: routeConfig.maxResponseBytes,
+    });
+    recordHostedUsage(response, requestId, routeConfig.provider, routeConfig.model);
+    return parseHostedSearchResponse(response, requestId, routeConfig.webMaxResults);
+}
 class LcxResponsesSearchProvider {
-  constructor(ctx, getConfig, enabled) { this.ctx = ctx; this.getConfig = getConfig; this.enabled = enabled; this.id = getConfig().webSearchProvider }
-  available() {
-    const config = this.getConfig()
-    const route = resolveResponsesRouteConfig(this.ctx, { provider: config.provider, model: config.model }, config)
-    return this.enabled() && Boolean(route)
-  }
-  async search(request, signal) {
-    const config = this.getConfig()
-    const active = hostedSearchRouteContext.getStore()
-    const requested = active ?? { provider: config.provider, model: config.model, sessionId: '' }
-    let route = resolveResponsesRouteConfig(this.ctx, requested, config)
-    let source = active ? 'active-agent' : 'fallback'
-    if (!route && active) {
-      route = resolveResponsesRouteConfig(this.ctx, { provider: config.provider, model: config.model }, config)
-      source = 'fallback'
+    ctx;
+    getConfig;
+    enabled;
+    id;
+    constructor(ctx, getConfig, enabled) {
+        this.ctx = ctx;
+        this.getConfig = getConfig;
+        this.enabled = enabled;
+        this.id = getConfig().webSearchProvider;
     }
-    if (!route) throw webError('LCX Hosted Search requires a configured GPT openai-responses route', 'LCX_WEB_ROUTE_UNAVAILABLE')
-    const sessionId = String((source === 'active-agent' ? active?.sessionId : '') ?? '')
-    this.ctx.logger?.info?.(`[lcx-codex] web_search route: ${route.provider}/${route.model} (${source})`)
-    const result = await executeHostedSearch(this.ctx, route, { query: request.query }, signal, sessionId)
-    const max = Number.isInteger(request.maxResults) && request.maxResults > 0 ? request.maxResults : route.webMaxResults
-    return { content: result.content || undefined, sources: result.sources.slice(0, max), truncated: result.truncated || result.sources.length > max }
-  }
-}
-
+    available() {
+        const active = hostedSearchRouteContext.getStore();
+        if (!active)
+            return false;
+        const config = this.getConfig();
+        const route = resolveResponsesRouteConfig(this.ctx, active, config);
+        return this.enabled() && Boolean(route);
+    }
+    async search(request, signal) {
+        const config = this.getConfig();
+        const active = hostedSearchRouteContext.getStore();
+        const route = active && resolveResponsesRouteConfig(this.ctx, active, config);
+        const routeConfig = route && routeWithPolicies(route, config);
+        if (!routeConfig)
+            throw webError("LCX Hosted Search requires a configured GPT openai-responses route", "LCX_WEB_ROUTE_UNAVAILABLE");
+        const sessionId = active?.sessionId ?? "";
+        this.ctx.logger?.info?.(`[lcx-codex] web_search route: ${routeConfig.provider}/${routeConfig.model} (active-agent)`);
+        const result = await executeHostedSearch(this.ctx, routeConfig, { query: request.query }, signal, sessionId);
+        const max = request.maxResults ?? routeConfig.webMaxResults;
+        return {
+            content: result.content || undefined,
+            sources: result.sources.slice(0, max),
+            truncated: result.truncated || result.sources.length > max,
+        };
+    }
+}
+function createScopedGptWebSearchTool(ctx, state, getConfig, provider, fetchEnabled) {
+    let definition;
+    const composition = {
+        web: {
+            search: (request, signal) => provider.search(request, signal),
+        },
+        tools: {
+            register(candidate) {
+                definition = candidate;
+                return () => { };
+            },
+        },
+        systemPrompt: {
+            getSectionOrder: () => 0,
+            section: () => () => { },
+        },
+    };
+    applyWebSearchTool(composition, getConfig().webMaxResults, WEB_SEARCH_MAX_QUERIES, WEB_SEARCH_TIMEOUT_MS, fetchEnabled);
+    if (!definition)
+        throw new Error("DSH web_search composition did not register a tool");
+    const execute = definition.execute.bind(definition);
+    const output = definition.output;
+    return withAuxiliaryUsage({
+        ...definition,
+        output: {
+            ...output,
+            presentationMeta(args, value) {
+                return hostedMediaPresentationMeta(value, "web_search", output.presentationMeta?.(args, value));
+            },
+        },
+        async execute(args, exec) {
+            if (!state.enabled || !state.webSearch)
+                throw webError("web_search GPT Hosted Search is disabled", "LCX_WEB_DISABLED");
+            const active = activeAgentRoute(exec);
+            const route = resolveResponsesRouteConfig(ctx, active, getConfig());
+            if (!route)
+                throw webError("GPT Hosted Search requires the active GPT openai-responses route", "LCX_WEB_ROUTE_UNAVAILABLE");
+            return hostedSearchRouteContext.run(active, () => execute(args, exec));
+        },
+    });
+}
 function createAdvancedHostedTool(ctx, state, getConfig) {
-  return {
-    name: ADVANCED_HOSTED_TOOL,
-    description: 'Advanced GPT Responses Hosted Search. Use DSH web_search for ordinary lookup. Call this only when you need domain allow/block filters, approximate user location, search-context size, image search, external-web-access or return-token-budget controls. It is one-shot and has no open/find/click state.',
-    parameters: HOSTED_SEARCH_PARAMETERS,
-    output: { schema: HOSTED_SEARCH_OUTPUT, render: (_args, value) => renderHostedSearchResult(value) },
-    async execute(args, exec) {
-      if (!state.enabled || !state.webSearch || !state.advancedHostedSearch) throw webError(`${ADVANCED_HOSTED_TOOL} is disabled`, 'LCX_WEB_DISABLED')
-      const config = getConfig(); const active = activeAgentRoute(exec, config)
-      const route = resolveResponsesRouteConfig(ctx, active, config)
-      if (!route) throw webError('Advanced Hosted Search requires the active GPT openai-responses route', 'LCX_WEB_ROUTE_UNAVAILABLE')
-      return executeHostedSearch(ctx, route, args, exec?.signal, active.sessionId)
-    },
-  }
-}
-
+    return withAuxiliaryUsage({
+        name: ADVANCED_HOSTED_TOOL,
+        description: "Advanced GPT Responses Hosted Search. Use DSH web_search for ordinary lookup. Call this only when you need domain allow/block filters, approximate user location, search-context size, image search, external-web-access or return-token-budget controls. It is one-shot and has no open/find/click state.",
+        parameters: HOSTED_SEARCH_PARAMETERS,
+        output: {
+            schema: HOSTED_SEARCH_OUTPUT,
+            render: (_args, value) => renderHostedSearchResult(value),
+            presentationMeta: (_args, value) => hostedMediaPresentationMeta(value, ADVANCED_HOSTED_TOOL),
+        },
+        async execute(args, exec) {
+            if (!state.enabled || !state.webSearch || !state.advancedHostedSearch)
+                throw webError(`${ADVANCED_HOSTED_TOOL} is disabled`, "LCX_WEB_DISABLED");
+            const config = getConfig();
+            const active = activeAgentRoute(exec);
+            const route = resolveResponsesRouteConfig(ctx, active, config);
+            if (!route)
+                throw webError("Advanced Hosted Search requires the active GPT openai-responses route", "LCX_WEB_ROUTE_UNAVAILABLE");
+            return executeHostedSearch(ctx, routeWithPolicies(route, config), args, exec.signal, active.sessionId);
+        },
+    });
+}
+function disposeGptToolsForAgent(agent, registrations) {
+    const registration = registrations.get(agent);
+    if (!registration)
+        return;
+    registration.dispose();
+    registrations.delete(agent);
+}
+function syncGptToolsForAgent(ctx, agent, state, getConfig, provider, registrations) {
+    const config = getConfig();
+    const active = selectedAgentRoute(agent);
+    const route = resolveResponsesRouteConfig(ctx, active, config);
+    const webSearch = state.enabled && state.webSearch && Boolean(route);
+    const advanced = webSearch && state.advancedHostedSearch;
+    if (!webSearch && !advanced) {
+        disposeGptToolsForAgent(agent, registrations);
+        return false;
+    }
+    const fingerprint = JSON.stringify({
+        provider: route?.provider,
+        model: route?.model,
+        baseURL: route?.baseURL,
+        webSearch,
+        advanced,
+        webMaxResults: config.webMaxResults,
+    });
+    if (registrations.get(agent)?.fingerprint === fingerprint)
+        return true;
+    disposeGptToolsForAgent(agent, registrations);
+    const scopedTools = scopedToolRuntime(agent);
+    if (!scopedTools)
+        return false;
+    const disposers = [];
+    try {
+        if (webSearch) {
+            const fetchEnabled = Boolean(scopedTools.get?.("web_fetch", agent));
+            disposers.push(scopedTools.register(createScopedGptWebSearchTool(ctx, state, getConfig, provider, fetchEnabled)));
+        }
+        if (advanced)
+            disposers.push(scopedTools.register(createAdvancedHostedTool(ctx, state, getConfig)));
+        registrations.set(agent, {
+            fingerprint,
+            dispose() {
+                for (const dispose of disposers.reverse())
+                    dispose();
+            },
+        });
+        return true;
+    }
+    catch (error) {
+        for (const dispose of disposers.reverse())
+            dispose();
+        ctx.logger?.warn?.(`[lcx-codex] GPT search tool composition unavailable: ${errorDetails(error).message ?? String(error)}`);
+        return false;
+    }
+}
 function alphaCapabilityFor(config, store) {
-  const fingerprint = alphaCapabilityFingerprint({ baseURL: config.baseURL, provider: config.provider, model: config.model, profile: config.alphaProfile, group: config.alphaGroup, schemaFingerprint: ALPHA_SCHEMA_FINGERPRINT })
-  return { fingerprint, record: store.get(fingerprint) }
+    const fingerprint = alphaCapabilityFingerprint({
+        baseURL: config.baseURL,
+        provider: config.provider,
+        model: config.model,
+        profile: config.alphaProfile,
+        group: config.alphaGroup,
+        schemaFingerprint: ALPHA_SCHEMA_FINGERPRINT,
+    });
+    return { fingerprint, record: store.get(fingerprint) };
 }
-
 function verifiedAlphaCapabilityForRoute(ctx, active, config, store) {
-  const route = resolveResponsesRouteConfig(ctx, active, config)
-  if (!route) return { route: undefined, usable: false }
-  const { fingerprint, record } = alphaCapabilityFor(route, store)
-  return { route, fingerprint, record, usable: alphaCapabilityUsable(record) && record?.schemaFingerprint === ALPHA_SCHEMA_FINGERPRINT }
+    const resolvedRoute = resolveResponsesRouteConfig(ctx, active, config);
+    if (!resolvedRoute)
+        return { route: undefined, usable: false };
+    const route = routeWithPolicies(resolvedRoute, config);
+    const { fingerprint, record } = alphaCapabilityFor(route, store);
+    return {
+        route,
+        fingerprint,
+        record,
+        usable: alphaCapabilityUsable(record) &&
+            record?.schemaFingerprint === ALPHA_SCHEMA_FINGERPRINT,
+    };
 }
-
 async function executeAlpha(ctx, routeConfig, capability, refStore, args, exec) {
-  const normalized = normalizeAlphaSearchArgs(args)
-  if (['open', 'find', 'screenshot'].includes(normalized.action) && isAlphaHttpUrl(normalized.refId) && !isAlphaContinuationUrl(normalized.refId)) {
-    throw webError('Alpha Search direct URLs must be public HTTP(S) targets', 'LCX_ALPHA_URL_UNAVAILABLE')
-  }
-  const sessionId = agentSessionId(exec?.agent)
-  if (!sessionId) throw webError('Alpha Search requires a DSH session', 'LCX_ALPHA_SESSION_REQUIRED')
-  const routeFp = routeFingerprint({ provider: routeConfig.provider, model: routeConfig.model, baseURL: routeConfig.baseURL, sessionId })
-  if (alphaRefRequiresStore(normalized.action, normalized.refId)) refStore.assertUsable(sessionId, routeFp, normalized.refId)
-  const requestId = randomUUID(); const headers = await authenticatedHeaders(ctx, routeConfig, sessionId, requestId)
-  let response
-  try {
-    response = await fetchJsonWithRetry(`${routeConfig.baseURL}/alpha/search`, buildAlphaSearchBody(normalized, routeConfig.model, sessionId, true, routeConfig.alphaMaxOutputTokens), headers, exec?.signal, routeConfig.timeoutMs, { maxAttempts: routeConfig.maxAttempts, maxResponseBytes: routeConfig.maxResponseBytes })
-  } catch (error) {
-    if ([404,405].includes(error?.status) || /channel does not support/iu.test(String(error?.message ?? ''))) throw webError('Alpha Search is not supported by this route', 'LCX_ALPHA_UNAVAILABLE', error)
-    throw webError('Alpha Search provider request failed', 'LCX_ALPHA_PROVIDER_ERROR', error)
-  }
-  const result = parseAlphaSearchResponse(response, { action: normalized.action, capability: capability.classification, requestId })
-  refStore.record(sessionId, routeFp, result.refRecords ?? result.refs.map((refId) => ({ refId })))
-  delete result.refRecords
-  return result
-}
-
-function createAlphaTool(ctx, state, getConfig, capabilityStore, refStore) {
-  return {
-    name: ALPHA_TOOL,
-    description: 'Stateful Codex/Alpha web command tool. Use it for search/open/find/click/PDF screenshot and the structured image/finance/weather/sports/time actions. Use DSH web_search for ordinary search, and websearch_gpt_advanced only for Hosted Search controls.',
-    parameters: ALPHA_SEARCH_PARAMETERS,
-    output: { schema: ALPHA_SEARCH_OUTPUT, render: (_args, value) => renderAlphaSearchResult(value) },
-    async execute(args, exec) {
-      if (!state.enabled || !state.alphaSearch) throw webError(`${ALPHA_TOOL} is disabled`, 'LCX_ALPHA_DISABLED')
-      const config = getConfig(); const active = activeAgentRoute(exec, config); const route = resolveResponsesRouteConfig(ctx, active, config)
-      if (!route) throw webError('Alpha Search requires the active GPT openai-responses route', 'LCX_ALPHA_ROUTE_UNAVAILABLE')
-      const fingerprint = alphaCapabilityFingerprint({ baseURL: route.baseURL, provider: route.provider, model: route.model, profile: route.alphaProfile, group: route.alphaGroup, schemaFingerprint: ALPHA_SCHEMA_FINGERPRINT })
-      const capability = capabilityStore.get(fingerprint)
-      if (!alphaCapabilityUsable(capability) || capability?.schemaFingerprint !== ALPHA_SCHEMA_FINGERPRINT) throw webError('Alpha Search capability has not been verified for this exact route/schema', 'LCX_ALPHA_CAPABILITY_UNVERIFIED')
-      return executeAlpha(ctx, route, capability, refStore, args, exec)
-    },
-  }
-}
-
+    const sessionId = agentSessionId(exec?.agent);
+    if (!sessionId)
+        throw webError("Alpha Search requires a DSH session", "LCX_ALPHA_SESSION_REQUIRED");
+    return runWithAlphaSessionLock(sessionId, exec?.signal, async () => {
+        const normalized = normalizeAlphaSearchArgs(args);
+        assertAlphaActionAllowed(capability, normalized.action);
+        if (["open", "find", "screenshot"].includes(normalized.action) &&
+            isAlphaHttpUrl(normalized.refId) &&
+            !isAlphaContinuationUrl(normalized.refId)) {
+            throw webError("Alpha Search direct URLs must be public HTTP(S) targets", "LCX_ALPHA_URL_UNAVAILABLE");
+        }
+        const routeFp = routeFingerprint({
+            provider: routeConfig.provider,
+            model: routeConfig.model,
+            baseURL: routeConfig.baseURL,
+            sessionId,
+        });
+        const continuedRef = alphaRefRequiresStore(normalized.action, normalized.refId)
+            ? refStore.assertUsable(sessionId, routeFp, normalized.refId)
+            : undefined;
+        const requestId = randomUUID();
+        const headers = await authenticatedHeaders(ctx, routeConfig, sessionId, requestId);
+        let response;
+        try {
+            response = await fetchJsonWithRetry(`${routeConfig.baseURL}/alpha/search`, buildAlphaSearchBody(normalized, routeConfig.model, sessionId, true, routeConfig.alphaMaxOutputTokens), headers, exec?.signal, routeConfig.timeoutMs, alphaSearchRetryOptions(routeConfig.maxResponseBytes));
+        }
+        catch (error) {
+            const details = errorDetails(error);
+            if ([404, 405].includes(Number(details.status)) ||
+                /channel does not support/iu.test(String(details.message ?? "")))
+                throw webError("Alpha Search is not supported by this route", "LCX_ALPHA_UNAVAILABLE", error);
+            throw webError("Alpha Search provider request failed", "LCX_ALPHA_PROVIDER_ERROR", error);
+        }
+        const { refRecords: observedRefs, ...result } = parseAlphaSearchResponse(response, {
+            action: normalized.action,
+            capability: capability.classification,
+            requestId,
+        });
+        const refRecords = observedRefs.map((observation) => {
+            if (observation.refId !== normalized.refId || !continuedRef)
+                return observation;
+            const observedArtifact = observation.provenance.artifactFingerprint;
+            const acceptedArtifact = continuedRef.provenance.artifactFingerprint;
+            if (observedArtifact && observedArtifact !== acceptedArtifact)
+                return observation;
+            // An echoed input ref retains its accepted origin; an omitted URL makes no new claim.
+            return {
+                ...observation,
+                ...(observation.url === undefined && continuedRef.url ? { url: continuedRef.url } : {}),
+                provenance: { ...continuedRef.provenance },
+            };
+        });
+        refStore.record(sessionId, routeFp, refRecords);
+        return result;
+    });
+}
+function createAlphaTool(ctx, state, getConfig, capabilityStore, refStore, advertisedRecord) {
+    return {
+        name: ALPHA_TOOL,
+        description: "Stateful Codex/Alpha web command tool. Use it for search/open/find/click/PDF screenshot and the structured image/finance/weather/sports/time actions. Use DSH web_search for ordinary search, and websearch_gpt_advanced only for Hosted Search controls.",
+        parameters: advertisedRecord
+            ? alphaSearchParametersFor(advertisedRecord)
+            : ALPHA_SEARCH_PARAMETERS,
+        output: {
+            schema: ALPHA_SEARCH_OUTPUT,
+            render: (_args, value) => renderAlphaSearchResult(value),
+        },
+        async execute(args, exec) {
+            if (!state.enabled || !state.alphaSearch)
+                throw webError(`${ALPHA_TOOL} is disabled`, "LCX_ALPHA_DISABLED");
+            const config = getConfig();
+            const active = activeAgentRoute(exec);
+            const route = resolveResponsesRouteConfig(ctx, active, config);
+            if (!route)
+                throw webError("Alpha Search requires the active GPT openai-responses route", "LCX_ALPHA_ROUTE_UNAVAILABLE");
+            const routeConfig = routeWithPolicies(route, config);
+            const fingerprint = alphaCapabilityFingerprint({
+                baseURL: routeConfig.baseURL,
+                provider: routeConfig.provider,
+                model: routeConfig.model,
+                profile: routeConfig.alphaProfile,
+                group: routeConfig.alphaGroup,
+                schemaFingerprint: ALPHA_SCHEMA_FINGERPRINT,
+            });
+            const capability = capabilityStore.get(fingerprint);
+            if (!alphaCapabilityUsable(capability) ||
+                capability?.schemaFingerprint !== ALPHA_SCHEMA_FINGERPRINT)
+                throw webError("Alpha Search capability has not been verified for this exact route/schema", "LCX_ALPHA_CAPABILITY_UNVERIFIED");
+            return executeAlpha(ctx, routeConfig, capability, refStore, args, exec);
+        },
+    };
+}
 function syncAlphaToolForAgent(ctx, agent, state, getConfig, capabilityStore, refStore, registrations) {
-  const previous = registrations.get(agent)
-  if (!state.enabled || !state.alphaSearch) {
-    disposeAlphaToolForAgent(agent, registrations)
-    return false
-  }
-  try {
-    const config = getConfig()
-    const active = selectedAgentRoute(agent, config)
-    const capability = verifiedAlphaCapabilityForRoute(ctx, active, config, capabilityStore)
-    if (!capability.usable) {
-      disposeAlphaToolForAgent(agent, registrations)
-      return false
+    const previous = registrations.get(agent);
+    if (!state.enabled || !state.alphaSearch) {
+        disposeAlphaToolForAgent(agent, registrations);
+        return false;
+    }
+    try {
+        const config = getConfig();
+        const active = selectedAgentRoute(agent);
+        const capability = verifiedAlphaCapabilityForRoute(ctx, active, config, capabilityStore);
+        if (!capability.usable) {
+            disposeAlphaToolForAgent(agent, registrations);
+            return false;
+        }
+        if (previous?.fingerprint === capability.fingerprint)
+            return true;
+        disposeAlphaToolForAgent(agent, registrations);
+        const scopedTools = scopedToolRuntime(agent);
+        if (!scopedTools)
+            return false;
+        // Alpha is route-bound; global registration would advertise a static record to other routes.
+        registrations.set(agent, {
+            fingerprint: capability.fingerprint,
+            dispose: scopedTools.register(createAlphaTool(ctx, state, getConfig, capabilityStore, refStore, capability.record)),
+        });
+        return true;
     }
-    if (previous?.fingerprint === capability.fingerprint) return true
-    disposeAlphaToolForAgent(agent, registrations)
-    const scopedTools = resolveScopedService(agent, 'tools')
-    if (!scopedTools?.register) return false
-    // Alpha is route-bound; global registration would advertise a static record to other routes.
-    registrations.set(agent, { fingerprint: capability.fingerprint, dispose: scopedTools.register(createAlphaTool(ctx, state, getConfig, capabilityStore, refStore)) })
-    return true
-  } catch (error) {
-    disposeAlphaToolForAgent(agent, registrations)
-    ctx.logger?.warn?.(`[lcx-codex] Alpha capability store unavailable: ${error?.message ?? error}`)
-    return false
-  }
-}
-
+    catch (error) {
+        disposeAlphaToolForAgent(agent, registrations);
+        ctx.logger?.warn?.(`[lcx-codex] Alpha capability store unavailable: ${errorDetails(error).message ?? String(error)}`);
+        return false;
+    }
+}
 function disposeAlphaToolForAgent(agent, registrations) {
-  const registration = registrations.get(agent)
-  if (!registration) return
-  registration.dispose()
-  registrations.delete(agent)
+    const registration = registrations.get(agent);
+    if (!registration)
+        return;
+    registration.dispose();
+    registrations.delete(agent);
 }
-
 function isDshCompactionDirective(message) {
-  if (message?.role !== 'user') return false
-  if (message?.source?.kind === 'plugin' && message?.source?.plugin === 'dsh-compaction-basic') return true
-  const text = (message?.content ?? []).filter((b) => b?.type === 'text').map((b) => b.text).join('')
-  return text.includes(COMPACTION_DIRECTIVE)
+    return (message?.role === "user" &&
+        message?.source?.kind === "plugin" &&
+        message?.source?.plugin === "dsh-compaction-basic");
 }
 function stripCompactionDirective(messages) {
-  if (!Array.isArray(messages) || messages.length === 0) return []
-  return isDshCompactionDirective(messages.at(-1)) ? messages.slice(0, -1) : messages
-}
-
-function mergeMap(target, source) { for (const [key, value] of source ?? []) target.set(key, value) }
-
-async function serializeNativeAware(messages, route, routeConfig, ctx, options = {}) {
-  const session = sessionFor(ctx, route.sessionId)
-  const imageSupport = await resolveModelImageSupport(ctx, route, options.signal)
-  const input = []; const imageMap = new Map(); let nativeTools; let nativeModel; let grammarToolInputProperties
-  let normal = []
-  const serializeOptions = (imageMapOverride, extra = {}) => requestImageOptions(routeConfig, imageSupport, options.signal, imageMapOverride, { route, tools: options.tools, responsesCompat: routeConfig.responsesCompat, ...extra })
-  const prelude = await serializeDshMessages([], ctx, serializeOptions(undefined, { systemPrompt: options.system, includeSystemPrompt: true }))
-  const ephemeralPreludeItemCount = prelude.input.length
-  input.push(...prelude.input); nativeTools = prelude.tools; nativeModel = prelude.model; grammarToolInputProperties = prelude.grammarToolInputProperties
-  const flush = async () => {
-    if (!normal.length) return
-    const serialized = await serializeDshMessages(normal, ctx, serializeOptions())
-    nativeTools = serialized.tools ?? nativeTools; nativeModel = serialized.model ?? nativeModel; grammarToolInputProperties = serialized.grammarToolInputProperties ?? grammarToolInputProperties
-    input.push(...serialized.input); mergeMap(imageMap, serialized.imageMap); normal = []
-  }
-  for (const message of messages ?? []) {
-    const state = session ? checkpointStateForMessage(session, message) : undefined
-    if (state) {
-      await flush()
-      if (stateRouteCompatible(state, route, ctx)) {
-        let nativeOutput = state.nativeOutput
-        if (state.version === 4) {
-          const checkpointId = compactCheckpointId(message)
-          const shadowed = shadowedMessagesForCheckpoint(session, checkpointId)
-          if (shadowed.length > 0) {
-            const serializedShadowed = await serializeDshMessages(shadowed, ctx, serializeOptions())
-            const repairedRetained = retainedConversationInput(serializedShadowed.input, {
-              tokenBudget: routeConfig.nativeRetentionTokenBudget,
-              assistantTokenReserve: routeConfig.assistantRetentionTokenReserve,
-              assistantPerMessageTokenCap: routeConfig.assistantRetentionPerMessageTokenCap,
-            })
-            const opaque = state.nativeCompaction ?? nativeOutput.find((item) => item?.type === 'compaction')
-            if (repairedRetained.length > 0 && opaque) {
-              nativeOutput = [...repairedRetained, structuredClone(opaque)]
-              mergeMap(imageMap, serializedShadowed.imageMap)
-            } else if (state.retainedInputCount === undefined) {
-              const portable = portableMessagesForCheckpoint(session, checkpointId, { maxChars: routeConfig.portableReplayMaxChars })
-              const serializedPortable = await serializeDshMessages(portable, ctx, serializeOptions())
-              input.push(...serializedPortable.input); mergeMap(imageMap, serializedPortable.imageMap)
-              continue
+    if (messages.length === 0)
+        return [];
+    return isDshCompactionDirective(messages.at(-1))
+        ? messages.slice(0, -1)
+        : [...messages];
+}
+function mergeMap(target, source) {
+    for (const [key, value] of source ?? [])
+        target.set(key, value);
+}
+async function serializeNativeAware(messages, route, routeConfig, ctx, options) {
+    const session = sessionFor(ctx, route.sessionId);
+    const imageSupport = await resolveModelImageSupport(ctx, route, options.signal);
+    const input = [];
+    const imageMap = new Map();
+    let nativeTools;
+    let nativeModel;
+    let grammarToolInputProperties;
+    let normal = [];
+    const serializeOptions = (imageMapOverride = undefined, extra = {}) => requestImageOptions(routeConfig, imageSupport, options.signal, imageMapOverride, {
+        route,
+        tools: options.tools,
+        responsesCompat: routeConfig.responsesCompat,
+        ...extra,
+    });
+    const firstMessage = messages[0];
+    const systemHead = firstMessage?.role === "system" ? firstMessage : undefined;
+    const surfaceMessages = systemHead ? messages.slice(1) : messages;
+    const systemPrompt = systemHead?.content
+        .filter((block) => block.type === "text")
+        .map((block) => block.text)
+        .join("") || undefined;
+    const prelude = await serializeDshMessages([], ctx, serializeOptions(undefined, {
+        systemPrompt,
+        includeSystemPrompt: true,
+    }));
+    const ephemeralPreludeItemCount = prelude.input.length;
+    input.push(...prelude.input);
+    nativeTools = prelude.tools;
+    nativeModel = prelude.model;
+    grammarToolInputProperties = prelude.grammarToolInputProperties;
+    const flush = async () => {
+        if (!normal.length)
+            return;
+        const batch = normal;
+        normal = [];
+        const serialized = await serializeDshMessages(batch, ctx, serializeOptions());
+        nativeTools = serialized.tools ?? nativeTools;
+        nativeModel = serialized.model ?? nativeModel;
+        grammarToolInputProperties =
+            serialized.grammarToolInputProperties ?? grammarToolInputProperties;
+        input.push(...restoreGrokNativeReplay(serialized.input, batch, options.grokNativeReplayRoute));
+        mergeMap(imageMap, serialized.imageMap);
+    };
+    for (const message of surfaceMessages ?? []) {
+        assertSupportedCheckpointMessage(message);
+        const state = session
+            ? checkpointStateForMessage(session, message)
+            : undefined;
+        if (state && session) {
+            const checkpointId = compactCheckpointId(message);
+            if (!checkpointId) {
+                normal.push(message);
+                continue;
+            }
+            await flush();
+            if (stateRouteCompatible(state, route, ctx)) {
+                const nativeOutput = state.nativeOutput;
+                const hydratedMap = new Map();
+                const hydrated = await hydrateNativeImageReferences(nativeOutput, ctx, requestImageOptions(routeConfig, imageSupport, options.signal, hydratedMap));
+                input.push(...responseInputItems(hydrated));
+                mergeMap(imageMap, hydratedMap);
             }
-          } else if (state.retainedInputCount === undefined) {
-            const portable = portableMessagesForCheckpoint(session, checkpointId, { maxChars: routeConfig.portableReplayMaxChars })
-            const serializedPortable = await serializeDshMessages(portable, ctx, serializeOptions())
-            input.push(...serializedPortable.input); mergeMap(imageMap, serializedPortable.imageMap)
-            continue
-          }
+            else {
+                const portable = portableMessagesForCheckpoint(session, checkpointId, { maxChars: routeConfig.portableReplayMaxChars });
+                const serialized = await serializeDshMessages(portable, ctx, serializeOptions());
+                input.push(...serialized.input);
+                mergeMap(imageMap, serialized.imageMap);
+            }
+            continue;
         }
-        const hydratedMap = new Map()
-        const hydrated = await hydrateNativeImageReferences(nativeOutput, ctx, requestImageOptions(routeConfig, imageSupport, options.signal, hydratedMap))
-        input.push(...hydrated); mergeMap(imageMap, hydratedMap)
-      } else {
-        const portable = portableMessagesForCheckpoint(session, compactCheckpointId(message), { maxChars: routeConfig.portableReplayMaxChars })
-        const serialized = await serializeDshMessages(portable, ctx, serializeOptions())
-        input.push(...serialized.input); mergeMap(imageMap, serialized.imageMap)
-      }
-      continue
-    }
-    const legacyId = legacyV3Id(message)
-    if (legacyId) {
-      const legacy = loadLegacyRecord(routeConfig.legacyCheckpointPath, legacyId)
-      if (legacy) {
-        await flush()
-        const legacyItems = legacyRouteCompatible(legacy, route, ctx) ? legacy.nativeOutput : (legacy.portableHistory ?? [])
-        const hydratedMap = new Map()
-        const hydrated = await hydrateNativeImageReferences(legacyItems, ctx, requestImageOptions(routeConfig, imageSupport, options.signal, hydratedMap))
-        input.push(...hydrated); mergeMap(imageMap, hydratedMap)
-        continue
-      }
+        normal.push(message);
     }
-    normal.push(message)
-  }
-  await flush()
-  if (!nativeModel) throw Object.assign(new Error('LCX could not resolve the Pi Responses model descriptor'), { code: 'LCX_RESPONSES_MODEL_UNAVAILABLE' })
-  return { input, ephemeralPreludeItemCount, imageMap, imageSupport, tools: nativeTools, model: nativeModel, grammarToolInputProperties }
+    await flush();
+    if (!nativeModel)
+        throw Object.assign(new Error("LCX could not resolve the Pi Responses model descriptor"), { code: "LCX_RESPONSES_MODEL_UNAVAILABLE" });
+    return {
+        input,
+        ephemeralPreludeItemCount,
+        imageMap,
+        imageSupport,
+        tools: nativeTools,
+        model: nativeModel,
+        grammarToolInputProperties,
+    };
 }
-
 function fallbackEligible(error, signal) {
-  if (signal?.aborted) return false
-  if (error?.name === 'AbortError' || error?.code === 'LCX_ABORTED') return false
-  if (error?.name === 'TimeoutError') return true
-  return ['LCX_HTTP_RETRYABLE', 'LCX_RETRY_EXHAUSTED'].includes(error?.code)
-}
-
-async function* remoteCompactionStream(options, routeConfig, state, ctx, next, requestHeaders) {
-  const history = stripCompactionDirective(options.messages)
-  const route = currentRoute(options, routeConfig)
-  try {
-    const prepared = await serializeNativeAware(history, route, routeConfig, ctx, { signal: options.signal, system: options.system, tools: options.tools })
-    const cacheSessionId = promptCacheSessionId(route, routeConfig)
-    const headers = await authenticatedHeaders(ctx, routeConfig, cacheSessionId, cacheSessionId === undefined ? null : undefined)
-    const cachedGeneration = generationControlsFromHeader(requestHeaders?.get(route.sessionId), route)
-    const generation = Object.keys(cachedGeneration).length > 0 ? cachedGeneration : generationControlsFromSession(sessionFor(ctx, route.sessionId), route)
-    const result = await requestNativeCompaction({
-      baseURL: routeConfig.baseURL,
-      model: route.model,
-      modelDescriptor: prepared.model,
-      input: prepared.input,
-      tools: prepared.tools ?? options.tools,
-      promptCacheKey: promptCacheKey(route, routeConfig),
-      promptCacheRetention: promptCacheRetention(routeConfig),
-      cacheRetention: routeConfig.cacheRetention,
-      reasoningEffort: generation.reasoningEffort,
-      temperature: generation.temperature,
-      maxTokens: generation.maxTokens,
-      idempotencyKey: randomUUID(),
-      headers,
-      signal: options.signal,
-      timeoutMs: routeConfig.timeoutMs,
-      maxAttempts: routeConfig.maxAttempts,
-      maxResponseBytes: routeConfig.maxResponseBytes,
-    })
-    const session = sessionFor(ctx, route.sessionId)
-    const block = createNativeCheckpointBlock({
-      session, route, result, input: prepared.input, ephemeralPreludeItemCount: prepared.ephemeralPreludeItemCount, imageMap: prepared.imageMap,
-      retentionOptions: {
-        tokenBudget: routeConfig.nativeRetentionTokenBudget,
-        assistantTokenReserve: routeConfig.assistantRetentionTokenReserve,
-        assistantPerMessageTokenCap: routeConfig.assistantRetentionPerMessageTokenCap,
-      },
-    })
-    ctx.logger?.info?.(`[lcx-codex] native V2 compaction succeeded; retained ${block.retainedClientCount ?? 0} client + ${block.retainedAssistantCount ?? 0} assistant-visible item(s) (~${block.retainedEstimatedTokens ?? 0} tokens) with the opaque checkpoint`)
-    for (const chunk of nativeCheckpointChunks(block, result.usage)) yield chunk
-  } catch (error) {
-    const session = sessionFor(ctx, route.sessionId)
-    const hasExistingCheckpoint = messagesContainNativeCheckpoint(history, session) || messagesContainLegacyCheckpoint(history)
-    const code = error?.code ?? error?.name ?? 'ERROR'
-    const status = Number.isInteger(error?.status) ? ` status=${error.status}` : ''
-    const requestId = error?.requestId ? ` requestId=${String(error.requestId)}` : ''
-    const providerCode = error?.providerCode ? ` providerCode=${error.providerCode}` : ''
-    const providerType = error?.providerType ? ` providerType=${error.providerType}` : ''
-    const providerParam = error?.providerParam ? ` providerParam=${error.providerParam}` : ''
-    ctx.logger?.warn?.(`[lcx-codex] native V2 compaction failed: code=${code}${status}${requestId}${providerCode}${providerType}${providerParam}`)
-    if (!state.fallbackToBasicCompaction || hasExistingCheckpoint || !fallbackEligible(error, options.signal)) throw error
-    ctx.logger?.info?.('[lcx-codex] falling back to DSH basic compaction after allowlisted first-checkpoint native failure')
-    const stream = await next()
-    for await (const chunk of stream) yield chunk
-  }
-}
-
-function routedTargetForAgent(agent, fallback) {
-  const route = readAgentRouteState(agent)
-  const provider = route.requestConfig?.provider ?? route.options?.provider ?? fallback.provider
-  const model = route.requestConfig?.model ?? route.options?.model ?? fallback.model
-  return provider && model ? { provider, model } : undefined
-}
-
-function clampPercent(value, fallback, min, max) {
-  const number = Number(value)
-  return Number.isFinite(number) ? Math.min(max, Math.max(min, number)) : fallback
-}
-
-function pressurePolicy(state, config) {
-  const auto = clampPercent(state.autoCompactionThresholdPercent, config.autoCompactionThresholdPercent, 85, 95)
-  const emergencyRaw = clampPercent(state.emergencyPruneThresholdPercent, config.emergencyPruneThresholdPercent, 90, 99)
-  const emergency = Math.max(auto + 1, emergencyRaw)
-  return { auto, emergency: Math.min(99, emergency) }
-}
-
+    if (signal?.aborted)
+        return false;
+    const details = errorDetails(error);
+    if (details.name === "AbortError" || details.code === "LCX_ABORTED")
+        return false;
+    if (details.name === "TimeoutError")
+        return true;
+    return ["LCX_HTTP_RETRYABLE", "LCX_RETRY_EXHAUSTED"].includes(String(details.code ?? ""));
+}
+async function* remoteCompactionStream(options, routeConfig, ctx, next) {
+    const history = stripCompactionDirective(options.messages);
+    const route = currentRoute(options, routeConfig);
+    try {
+        const prepared = await serializeNativeAware(history, route, routeConfig, ctx, { signal: options.signal, tools: options.tools });
+        const cacheSessionId = promptCacheSessionId(route, routeConfig, ctx);
+        const headers = await authenticatedHeaders(ctx, routeConfig, cacheSessionId, cacheSessionId === undefined ? null : route.sessionId);
+        const generation = generationControlsFromSession(sessionFor(ctx, route.sessionId), route);
+        const result = await requestNativeCompaction({
+            baseURL: routeConfig.baseURL,
+            model: route.model,
+            modelDescriptor: prepared.model,
+            input: prepared.input,
+            tools: prepared.tools ?? options.tools,
+            promptCacheKey: promptCacheKey(route, routeConfig, ctx),
+            promptCacheRetention: promptCacheRetention(routeConfig),
+            cacheRetention: routeConfig.cacheRetention,
+            reasoningEffort: generation.reasoningEffort,
+            temperature: generation.temperature,
+            maxTokens: generation.maxTokens,
+            idempotencyKey: randomUUID(),
+            headers,
+            signal: options.signal,
+            timeoutMs: routeConfig.timeoutMs,
+            maxAttempts: routeConfig.maxAttempts,
+            maxResponseBytes: routeConfig.maxResponseBytes,
+        });
+        const session = sessionFor(ctx, route.sessionId);
+        if (session === undefined)
+            throw webError("Native compaction requires a live DSH session", "LCX_COMPACT_SESSION_UNAVAILABLE");
+        const block = createNativeCheckpointBlock({
+            session,
+            route,
+            result,
+            input: prepared.input,
+            ephemeralPreludeItemCount: prepared.ephemeralPreludeItemCount,
+            imageMap: prepared.imageMap,
+            retentionOptions: {
+                tokenBudget: routeConfig.nativeRetentionTokenBudget,
+                assistantTokenReserve: routeConfig.assistantRetentionTokenReserve,
+                assistantPerMessageTokenCap: routeConfig.assistantRetentionPerMessageTokenCap,
+            },
+        });
+        ctx.logger?.info?.(`[lcx-codex] native V2 compaction succeeded; retained ${block.retainedClientCount ?? 0} client + ${block.retainedAssistantCount ?? 0} assistant-visible item(s) (~${block.retainedEstimatedTokens ?? 0} tokens) with the opaque checkpoint`);
+        for (const chunk of nativeCheckpointChunks(block, result.usage))
+            yield chunk;
+    }
+    catch (error) {
+        const session = sessionFor(ctx, route.sessionId);
+        const hasExistingCheckpoint = messagesContainNativeCheckpoint(history, session);
+        const details = errorDetails(error);
+        const code = details.code ?? details.name ?? "ERROR";
+        const status = Number.isInteger(details.status)
+            ? ` status=${details.status}`
+            : "";
+        const requestId = isRecord(error) && error.requestId
+            ? ` requestId=${String(error.requestId)}`
+            : "";
+        const providerCode = isRecord(error) && error.providerCode
+            ? ` providerCode=${String(error.providerCode)}`
+            : "";
+        const providerType = isRecord(error) && error.providerType
+            ? ` providerType=${String(error.providerType)}`
+            : "";
+        const providerParam = isRecord(error) && error.providerParam
+            ? ` providerParam=${String(error.providerParam)}`
+            : "";
+        ctx.logger?.warn?.(`[lcx-codex] native V2 compaction failed: code=${code}${status}${requestId}${providerCode}${providerType}${providerParam}`);
+        if (hasExistingCheckpoint || !fallbackEligible(error, options.signal))
+            throw error;
+        ctx.logger?.info?.("[lcx-codex] falling back to DSH basic compaction after allowlisted first-checkpoint native failure");
+        const stream = await next();
+        for await (const chunk of stream)
+            yield chunk;
+    }
+}
+function routedTargetForAgent(agent) {
+    const route = readAgentRouteState(agent);
+    const provider = stringValue(routeConfigValue(route.requestConfig, "provider") ??
+        routeConfigValue(route.options, "provider"), "");
+    const model = stringValue(routeConfigValue(route.requestConfig, "model") ??
+        routeConfigValue(route.options, "model"), "");
+    return provider && model ? { provider, model } : undefined;
+}
 export function compactionPressureBand(totalTokens, contextWindow, policy) {
-  const ratioPercent = totalTokens / contextWindow * 100
-  return { ratioPercent, band: ratioPercent < policy.auto ? 'below' : ratioPercent < policy.emergency ? 'native' : 'emergency' }
+    const ratioPercent = (totalTokens / contextWindow) * 100;
+    return {
+        ratioPercent,
+        band: ratioPercent < policy.auto
+            ? "below"
+            : ratioPercent < policy.emergency
+                ? "native"
+                : "emergency",
+    };
 }
-
 function adjustedCompactionConfig(config, target, thresholdRatio) {
-  if (!config || typeof config !== 'object') return config
-  const modelPolicies = Array.isArray(config.modelPolicies)
-    ? config.modelPolicies.map((policy) => policy?.provider === target.provider && policy?.model === target.model ? { ...policy, thresholdRatio } : policy)
-    : config.modelPolicies
-  return { ...config, thresholdRatio, ...(modelPolicies === undefined ? {} : { modelPolicies }) }
+    if (!isRecord(config))
+        return config;
+    const modelPolicies = Array.isArray(config.modelPolicies)
+        ? config.modelPolicies.map((policy) => isRecord(policy) &&
+            policy.provider === target.provider &&
+            policy.model === target.model
+            ? { ...policy, thresholdRatio }
+            : policy)
+        : config.modelPolicies;
+    return {
+        ...config,
+        thresholdRatio,
+        ...(modelPolicies === undefined ? {} : { modelPolicies }),
+    };
 }
-
 function combinedAbortSignal(primary, lifecycle) {
-  if (!primary) return lifecycle
-  if (!lifecycle) return primary
-  if (primary === lifecycle) return primary
-  return AbortSignal.any([primary, lifecycle])
-}
-
-function patchCompactionPressureService(compactionValue, state, getConfig, ctx, records, requestHeaders) {
-  const candidate = compactionPatchCandidate(compactionValue, records)
-  if (!candidate) return false
-  const { compaction, original } = candidate
-  const record = { compaction, original, wrapper: undefined, mutex: new ServiceMutex(), lifecycle: new AbortController() }
-  const wrapper = async function(agentArg, trigger, signal) {
-    const activeSignal = combinedAbortSignal(signal, record.lifecycle.signal)
-    const callOriginal = () => {
-      updateRequestHeaderCache(requestHeaders, agentArg?.session, { type: 'compaction/start' })
-      return original.call(this, agentArg, trigger, activeSignal)
-    }
-    return record.mutex.run(activeSignal, async () => {
-      if (trigger !== 'pressure' || !state.enabled || !state.autoCompaction) return callOriginal()
-      const config = getConfig()
-      const target = routedTargetForAgent(agentArg, config)
-      if (!target || !resolveResponsesRouteConfig(ctx, target, config)) return callOriginal()
-      const tokenMeter = resolveScopedService(agentArg, 'tokenMeter') ?? resolveContextService(this?.ctx, 'tokenMeter')
-      const llm = resolveScopedService(agentArg, 'llm') ?? resolveContextService(ctx, 'llm')
-      if (!tokenMeter?.measure || !llm?.resolveModelInfo) return callOriginal()
-      let contextWindow
-      try { contextWindow = (await llm.resolveModelInfo(target.provider, target.model, activeSignal))?.context?.contextWindow } catch { return callOriginal() }
-      if (!Number.isFinite(contextWindow) || contextWindow <= 0) return callOriginal()
-      const totalTokens = Number(tokenMeter.measure(agentArg.session)?.totalTokens ?? 0)
-      const { auto, emergency } = pressurePolicy(state, config)
-      const pressure = compactionPressureBand(totalTokens, contextWindow, { auto, emergency })
-      const ratioPercent = pressure.ratioPercent
-      if (pressure.band === 'below') return null
-      const prunerState = toolResultPrunerState(resolveAgentService(ctx, agentArg, 'toolResultPruner') ?? resolveContextService(this?.ctx, 'toolResultPruner'))
-      const configState = compactionConfigState(this)
-      const nativeFirst = pressure.band === 'native'
-      const noOpPrune = () => ({ pruned: [], charsRemoved: 0 })
-      const prunerPatch = nativeFirst ? patchToolResultPruner(prunerState, noOpPrune) : undefined
-      const configPatch = patchCompactionConfig(configState, originalConfig => adjustedCompactionConfig(originalConfig, target, auto / 100))
-      ctx.logger?.info?.(`[lcx-codex] auto pressure ${ratioPercent.toFixed(1)}%: ${nativeFirst ? 'Native V2 first' : 'emergency DSH prune allowed'} (native ${auto}%, emergency ${emergency}%)`)
-      try { return await callOriginal() }
-      finally {
-        restoreCompactionConfig(configPatch)
-        restoreToolResultPruner(prunerPatch)
-      }
-    })
-  }
-  record.wrapper = wrapper
-  return installCompactionPatch(records, record)
-}
-
-function patchCompactionPressureForAgent(agent, state, getConfig, ctx, records, requestHeaders) {
-  return patchCompactionPressureService(resolveAgentService(ctx, agent, 'compaction'), state, getConfig, ctx, records, requestHeaders)
-}
-
+    return primary === lifecycle ? primary : AbortSignal.any([primary, lifecycle]);
+}
+function patchCompactionPressureService(compactionValue, state, getConfig, ctx, records) {
+    const candidate = compactionPatchCandidate(compactionValue, records);
+    if (!candidate)
+        return false;
+    const mutex = new ServiceMutex();
+    const policyScope = new InvocationPolicyScope();
+    const lifecycle = new AbortController();
+    return installCompactionPatch(records, candidate, mutex, policyScope, lifecycle, async (agent, trigger, signal, callOriginal) => {
+        const activeSignal = combinedAbortSignal(signal, lifecycle.signal);
+        const configScoped = policyScope.ensure(compactionConfigState(candidate.compaction).service, "config");
+        const prunerState = toolResultPrunerState(resolveAgentService(ctx, agent, "toolResultPruner") ??
+            resolveScopedService(agent, "toolResultPruner") ??
+            resolveContextService(ctx, "toolResultPruner"));
+        const prunerScoped = !prunerState.pruner ||
+            (typeof prunerState.original === "function" &&
+                policyScope.ensure(prunerState.pruner, "pruneSession"));
+        const accessMode = configScoped && prunerScoped ? "shared" : "exclusive";
+        return policyScope.run(activeSignal, accessMode, async () => {
+            const invoke = async () => {
+                if (trigger !== "pressure" || !state.enabled)
+                    return callOriginal(activeSignal);
+                const config = getConfig();
+                const target = routedTargetForAgent(agent);
+                if (!target || !resolveResponsesRouteConfig(ctx, target, config))
+                    return callOriginal(activeSignal);
+                const session = sessionFromAgent(agent);
+                const tokenMeter = resolveScopedService(agent, "tokenMeter") ??
+                    resolveContextService(ctx, "tokenMeter");
+                if (!session || tokenMeter === undefined)
+                    return callOriginal(activeSignal);
+                let contextWindow;
+                try {
+                    contextWindow = (await ctx.llm.resolveModelInfo(target.provider, target.model, activeSignal)).context?.contextWindow;
+                }
+                catch {
+                    return callOriginal(activeSignal);
+                }
+                const totalTokens = tokenMeterTotal(tokenMeter, session);
+                if (contextWindow === undefined ||
+                    contextWindow <= 0 ||
+                    totalTokens === undefined)
+                    return callOriginal(activeSignal);
+                const auto = AUTO_COMPACTION_THRESHOLD_PERCENT;
+                const emergency = EMERGENCY_PRUNE_THRESHOLD_PERCENT;
+                const pressure = compactionPressureBand(totalTokens, contextWindow, {
+                    auto,
+                    emergency,
+                });
+                if (pressure.band === "below")
+                    return null;
+                const nativeFirst = pressure.band === "native";
+                const prunerPatch = nativeFirst
+                    ? patchToolResultPruner(prunerState, () => ({ pruned: [], charsRemoved: 0 }))
+                    : undefined;
+                const configPatch = patchCompactionConfig(compactionConfigState(candidate.compaction), (originalConfig) => adjustedCompactionConfig(originalConfig, target, auto / 100));
+                ctx.logger?.info?.(`[lcx-codex] auto pressure ${pressure.ratioPercent.toFixed(1)}%: ${nativeFirst ? "Native V2 first" : "emergency DSH prune allowed"} (native ${auto}%, emergency ${emergency}%)`);
+                try {
+                    return await callOriginal(activeSignal);
+                }
+                finally {
+                    restoreCompactionConfig(configPatch);
+                    restoreToolResultPruner(prunerPatch);
+                }
+            };
+            return accessMode === "shared"
+                ? invoke()
+                : mutex.run(activeSignal, invoke);
+        });
+    });
+}
+function patchCompactionPressureForAgent(agent, state, getConfig, ctx, records) {
+    return patchCompactionPressureService(resolveAgentService(ctx, agent, "compaction"), state, getConfig, ctx, records);
+}
 async function restoreCompactionPressure(records) {
-  const reason = new Error('lcx-codex pressure coordination is shutting down')
-  const entries = [...records.values()]
-  for (const record of entries) {
-    if (!record.lifecycle.signal.aborted) record.lifecycle.abort(reason)
-  }
-  await Promise.allSettled(entries.map((record) => record.mutex.close(reason)))
-  restoreCompactionPatches(records, entries)
-}
-
-function visibleWebSearchTimeout(state, getConfig) {
-  const config = getConfig()
-  const timeoutMs = Number.isFinite(state.webSearchTimeoutSeconds) ? Math.min(600_000, Math.max(30_000, Math.round(state.webSearchTimeoutSeconds * 1000))) : config.webSearchTimeoutMs
-  return state.enabled && state.webSearch ? timeoutMs : undefined
-}
-
-function messagesContainNativeCheckpoint(messages, session) { return Boolean(session && (messages ?? []).some((message) => checkpointStateForMessage(session, message))) }
-function messagesContainLegacyCheckpoint(messages) { return (messages ?? []).some((message) => Boolean(legacyCheckpointId(message))) }
-
+    const reason = new Error("lcx-codex pressure coordination is shutting down");
+    const entries = [...records.values()];
+    for (const record of entries) {
+        if (!record.lifecycle.signal.aborted)
+            record.lifecycle.abort(reason);
+    }
+    await Promise.allSettled(entries.flatMap((record) => [
+        record.policyScope.close(reason),
+        record.mutex.close(reason),
+    ]));
+    restoreCompactionPatches(records, entries);
+    for (const record of entries)
+        record.policyScope.restore();
+}
+function messagesContainNativeCheckpoint(messages, session) {
+    return session !== undefined && messages.some((message) => checkpointStateForMessage(session, message));
+}
 function inputHasNativeState(input) {
-  return (input ?? []).some((item) => item?.type === 'compaction')
+    return input.some((item) => isRecord(item) && item.type === "compaction");
 }
-
 async function* managedResponsesStream(options, routeConfig, ctx) {
-  const route = currentRoute(options, routeConfig)
-  try {
-    if (options.stop !== undefined) throw Object.assign(new Error('LCX Responses does not support GenerateOptions.stop'), { code: 'LCX_RESPONSES_UNSUPPORTED_OPTION' })
-    const prepared = await serializeNativeAware(options.messages, route, routeConfig, ctx, { signal: options.signal, system: options.system, tools: options.tools })
-    const cacheSessionId = promptCacheSessionId(route, routeConfig)
-    const headers = await authenticatedHeaders(ctx, routeConfig, cacheSessionId, cacheSessionId === undefined ? null : undefined)
-    const body = buildResponsesBody({
-      model: prepared.model,
-      input: prepared.input,
-      tools: prepared.tools ?? options.tools,
-      sessionId: cacheSessionId,
-      promptCacheKey: promptCacheKey(route, routeConfig),
-      promptCacheRetention: promptCacheRetention(routeConfig),
-      cacheRetention: routeConfig.cacheRetention,
-      reasoningEffort: options.reasoningEffort,
-      temperature: options.temperature,
-      maxTokens: options.maxTokens,
-    })
-    const nativeReplay = inputHasNativeState(prepared.input)
-    if (nativeReplay) { body.tool_choice = 'auto'; body.parallel_tool_calls = true }
-    yield* streamResponsesRequest({
-      baseURL: routeConfig.baseURL,
-      provider: route.provider,
-      model: route.model,
-      piModel: prepared.model,
-      body,
-      grammarToolInputProperties: prepared.grammarToolInputProperties,
-      headers: nativeReplay ? mergeFeatureHeader(headers) : headers,
-      signal: options.signal,
-      timeoutMs: routeConfig.timeoutMs,
-      maxAttempts: 1,
-      maxResponseBytes: routeConfig.maxResponseBytes,
-    })
-  } catch (error) {
-    yield managedFailureChunk(error, options.signal)
-  }
-}
-
-async function* unavailableManagedRouteStream(options) {
-  yield managedFailureChunk(Object.assign(new Error('LCX is enabled but the selected DSH route cannot be resolved as an authenticated OpenAI Responses wire route'), { code: 'LCX_RESPONSES_ROUTE_UNAVAILABLE' }), options.signal)
-}
-
-function installInjected(ctx, configInput = {}) {
-  const baseConfig = normalizeConfig(configInput)
-  let runtimeConfig = baseConfig
-  const state = { enabled: false, webSearch: false, advancedHostedSearch: false, alphaSearch: false, remoteCompaction: false, fallbackToBasicCompaction: true, autoCompaction: true, webSearchTimeoutSeconds: baseConfig.webSearchTimeoutMs / 1000, autoCompactionThresholdPercent: baseConfig.autoCompactionThresholdPercent, emergencyPruneThresholdPercent: baseConfig.emergencyPruneThresholdPercent }
-  const originalSearchProvider = readWebSearchProvider(ctx)
-  let warnedWebSelection = false
-  const provider = new LcxResponsesSearchProvider(ctx, () => runtimeConfig, () => state.enabled && state.webSearch)
-  ctx.web.registerSearchProvider(provider)
-  const tools = contextService(ctx, 'tools')
-  let disposeAdvanced
-  const capabilityStore = new AlphaCapabilityStore(baseConfig.alphaCapabilityPath)
-  const refStore = new AlphaRefStore(baseConfig.alphaRefPath)
-  const alphaAgents = new Set()
-  const alphaToolRegistrations = new Map()
-  const compactionPatchRecords = new Map()
-  const patchedWebSearchDefinitions = new Map()
-  const requestHeaders = new Map()
-  const seedRequestHeader = (session) => updateRequestHeaderCache(requestHeaders, session, { type: 'compaction/start' })
-  for (const session of sessionsService(ctx)?.list?.() ?? []) seedRequestHeader(session)
-  ctx.on('session/created', (session) => {
-    seedRequestHeader(session)
-  }, { global: true })
-  ctx.on('session/disposed', (session) => {
-    requestHeaders.delete(String(session?.id ?? ''))
-    for (const agent of alphaAgents) if (agent?.session === session) {
-      disposeAlphaToolForAgent(agent, alphaToolRegistrations)
-      alphaAgents.delete(agent)
+    const route = currentRoute(options, routeConfig);
+    try {
+        if (options.stop !== undefined)
+            throw Object.assign(new Error("LCX Responses does not support GenerateOptions.stop"), { code: "LCX_RESPONSES_UNSUPPORTED_OPTION" });
+        const prepared = await serializeNativeAware(options.messages, route, routeConfig, ctx, { signal: options.signal, tools: options.tools });
+        const cacheSessionId = promptCacheSessionId(route, routeConfig, ctx);
+        const headers = await authenticatedHeaders(ctx, routeConfig, cacheSessionId, cacheSessionId === undefined ? null : route.sessionId);
+        const body = buildResponsesBody({
+            model: prepared.model,
+            input: prepared.input,
+            tools: prepared.tools ?? options.tools,
+            sessionId: cacheSessionId,
+            promptCacheKey: promptCacheKey(route, routeConfig, ctx),
+            promptCacheRetention: promptCacheRetention(routeConfig),
+            cacheRetention: routeConfig.cacheRetention,
+            reasoningEffort: options.reasoningEffort,
+            temperature: options.temperature,
+            maxTokens: options.maxTokens,
+        });
+        const nativeReplay = inputHasNativeState(prepared.input);
+        if (nativeReplay) {
+            body.tool_choice = "auto";
+            body.parallel_tool_calls = true;
+        }
+        yield* streamResponsesRequest({
+            baseURL: routeConfig.baseURL,
+            provider: route.provider,
+            model: route.model,
+            piModel: prepared.model,
+            body,
+            grammarToolInputProperties: prepared.grammarToolInputProperties,
+            headers: nativeReplay ? mergeFeatureHeader(headers) : headers,
+            signal: options.signal,
+            timeoutMs: routeConfig.timeoutMs,
+            maxAttempts: 1,
+            maxResponseBytes: routeConfig.maxResponseBytes,
+        });
     }
-  }, { global: true })
-  ctx.on('session/event', (session, event) => {
-    updateRequestHeaderCache(requestHeaders, session, event)
-    if (event?.type === 'request/header') for (const agent of alphaAgents) if (agent?.session === session) {
-      syncAlphaToolForAgent(ctx, agent, state, () => runtimeConfig, capabilityStore, refStore, alphaToolRegistrations)
+    catch (error) {
+        yield managedFailureChunk(error, options.signal);
     }
-  }, { global: true })
-
-  const refreshTools = () => {
-    if (state.enabled && state.webSearch && state.advancedHostedSearch && !disposeAdvanced && tools?.register) disposeAdvanced = tools.register(createAdvancedHostedTool(ctx, state, () => runtimeConfig))
-    if ((!state.enabled || !state.webSearch || !state.advancedHostedSearch) && disposeAdvanced) { disposeAdvanced(); disposeAdvanced = undefined }
-    for (const agent of alphaAgents) syncAlphaToolForAgent(ctx, agent, state, () => runtimeConfig, capabilityStore, refStore, alphaToolRegistrations)
-    if (ctx.web) {
-      const target = state.enabled && state.webSearch ? runtimeConfig.webSearchProvider : originalSearchProvider
-      const selected = writeWebSearchProvider(ctx, target)
-      if (!selected && state.enabled && state.webSearch && !warnedWebSelection) {
-        warnedWebSelection = true
-        ctx.logger?.warn?.('[lcx-codex] DSH web provider selection could not be changed at runtime; websearch_gpt_advanced still works, but DSH web_search may remain on its configured provider. Pin web.searchProvider=lcx-responses in a profile overlay if this DSH version removes the runtime compatibility field.')
-      }
+}
+async function* managedGrokNativeSearchStream(options, routeConfig, nativeSearch, ctx) {
+    const route = currentRoute(options, routeConfig);
+    const nativeReplayRoute = grokReplayRoute(route, routeConfig);
+    try {
+        if (options.stop !== undefined)
+            throw Object.assign(new Error("LCX Responses does not support GenerateOptions.stop"), { code: "LCX_RESPONSES_UNSUPPORTED_OPTION" });
+        const visibleTools = grokVisibleFunctionTools(options.tools, nativeSearch);
+        const declaredToolNames = new Set(visibleTools?.map((tool) => tool.name) ?? []);
+        const prepared = await serializeNativeAware(options.messages, route, routeConfig, ctx, {
+            signal: options.signal,
+            tools: visibleTools,
+            grokNativeReplayRoute: nativeReplayRoute,
+        });
+        const cacheSessionId = grokPromptCacheSessionId(route, routeConfig);
+        const headers = await authenticatedGrokHeaders(ctx, routeConfig, cacheSessionId);
+        const model = {
+            ...prepared.model,
+            ...routeConfig.modelDefaults,
+            ...routeConfig.modelControls,
+            id: route.model,
+            provider: route.provider,
+            baseUrl: routeConfig.baseURL,
+            api: "openai-responses",
+        };
+        const effectiveReasoning = options.reasoningEffort ?? routeConfig.profileReasoning;
+        if (effectiveReasoning !== undefined &&
+            !getSupportedThinkingLevels(model).some((level) => level === effectiveReasoning))
+            throw Object.assign(new Error(`Grok route does not support reasoning effort "${String(effectiveReasoning)}"`), { code: "LCX_RESPONSES_UNSUPPORTED_OPTION" });
+        const body = buildResponsesBody({
+            model,
+            input: prepared.input,
+            tools: grokWireTools(prepared.tools ?? visibleTools, nativeSearch),
+            sessionId: cacheSessionId,
+            promptCacheRetention: promptCacheRetention(routeConfig),
+            cacheRetention: routeConfig.cacheRetention,
+            reasoningEffort: effectiveReasoning,
+            temperature: options.temperature,
+            maxTokens: options.maxTokens,
+        });
+        if (nativeSearch.web) {
+            const include = new Set(Array.isArray(body.include) ? body.include : []);
+            include.add("web_search_call.action.sources");
+            body.include = [...include];
+        }
+        yield* streamResponsesRequest({
+            baseURL: routeConfig.baseURL,
+            provider: route.provider,
+            model: route.model,
+            piModel: model,
+            body,
+            grammarToolInputProperties: prepared.grammarToolInputProperties,
+            headers,
+            signal: options.signal,
+            timeoutMs: routeConfig.timeoutMs,
+            applyDefaultTimeout: false,
+            streamIdleTimeoutMs: routeConfig.streamIdleTimeoutMs,
+            maxAttempts: 1,
+            maxResponseBytes: routeConfig.maxResponseBytes,
+            serverToolTypes: GROK_NATIVE_SERVER_TOOL_TYPES,
+            isServerToolItem: (item) => isGrokNativeServerToolItem(item, nativeSearch, declaredToolNames),
+            declaredToolNames,
+            nativeReplayRoute,
+            onServerToolUsage(usage) {
+                ctx.logger?.info?.(`[lcx-codex] Grok native search used ${usage.total} server-side tool call(s) (web=${usage.webSearchCalls}, x=${usage.xSearchCalls})`);
+            },
+        });
     }
-  }
-
-  let source = () => ({ ...baseConfig, ...state })
-  installSettingsSection(ctx, SETTINGS_NS, SettingsSchema, {
-    enabled: false, webSearch: false, advancedHostedSearch: false, alphaSearch: false, remoteCompaction: false, fallbackToBasicCompaction: true, autoCompaction: true,
-    webSearchTimeoutSeconds: baseConfig.webSearchTimeoutMs / 1000,
-    autoCompactionThresholdPercent: baseConfig.autoCompactionThresholdPercent,
-    emergencyPruneThresholdPercent: baseConfig.emergencyPruneThresholdPercent,
-    provider: baseConfig.provider, baseURL: baseConfig.baseURL, apiKeyEnv: baseConfig.apiKeyEnv, model: baseConfig.model,
-  }, {
-    setSource: (current) => { source = current },
-    onChange: () => {
-      const value = source()
-      state.enabled = Boolean(value.enabled); state.webSearch = Boolean(value.webSearch); state.advancedHostedSearch = Boolean(value.advancedHostedSearch); state.alphaSearch = Boolean(value.alphaSearch); state.remoteCompaction = Boolean(value.remoteCompaction)
-      state.fallbackToBasicCompaction = value.fallbackToBasicCompaction !== false; state.autoCompaction = value.autoCompaction !== false
-      state.webSearchTimeoutSeconds = Number.isFinite(value.webSearchTimeoutSeconds) ? value.webSearchTimeoutSeconds : baseConfig.webSearchTimeoutMs / 1000
-      state.autoCompactionThresholdPercent = clampPercent(value.autoCompactionThresholdPercent, baseConfig.autoCompactionThresholdPercent, 85, 95)
-      state.emergencyPruneThresholdPercent = clampPercent(value.emergencyPruneThresholdPercent, baseConfig.emergencyPruneThresholdPercent, 90, 99)
-      runtimeConfig = normalizeConfig({ ...baseConfig, provider: value.provider ?? baseConfig.provider, baseURL: value.baseURL ?? baseConfig.baseURL, apiKeyEnv: value.apiKeyEnv ?? baseConfig.apiKeyEnv, model: value.model ?? baseConfig.model })
-      refreshTools(); refreshVisibleWebSearchTimeouts(patchedWebSearchDefinitions, visibleWebSearchTimeout(state, () => runtimeConfig))
-    },
-  })
-  try {
-    const value = source()
-    Object.assign(state, { enabled: Boolean(value.enabled), webSearch: Boolean(value.webSearch), advancedHostedSearch: Boolean(value.advancedHostedSearch), alphaSearch: Boolean(value.alphaSearch), remoteCompaction: Boolean(value.remoteCompaction), fallbackToBasicCompaction: value.fallbackToBasicCompaction !== false, autoCompaction: value.autoCompaction !== false, webSearchTimeoutSeconds: Number.isFinite(value.webSearchTimeoutSeconds) ? value.webSearchTimeoutSeconds : baseConfig.webSearchTimeoutMs / 1000, autoCompactionThresholdPercent: clampPercent(value.autoCompactionThresholdPercent, baseConfig.autoCompactionThresholdPercent, 85, 95), emergencyPruneThresholdPercent: clampPercent(value.emergencyPruneThresholdPercent, baseConfig.emergencyPruneThresholdPercent, 90, 99) })
-    runtimeConfig = normalizeConfig({ ...baseConfig, provider: value.provider ?? baseConfig.provider, baseURL: value.baseURL ?? baseConfig.baseURL, apiKeyEnv: value.apiKeyEnv ?? baseConfig.apiKeyEnv, model: value.model ?? baseConfig.model })
-  } catch {}
-  refreshTools()
-  ctx.inject(['compaction'], compactionCtx => {
-    patchCompactionPressureService(resolveContextService(compactionCtx, 'compaction'), state, () => runtimeConfig, ctx, compactionPatchRecords, requestHeaders)
-  })
-
-  ctx.on('tools/execute', async (exec, next) => {
-    if (!state.enabled || !state.webSearch || exec?.name !== 'web_search') return next()
-    const active = activeAgentRoute(exec, runtimeConfig)
-    return hostedSearchRouteContext.run(active, () => next())
-  })
-
-  ctx.on('agent/created', ({ agent }) => {
-    if (!agent) return
-    alphaAgents.add(agent)
-    syncAlphaToolForAgent(ctx, agent, state, () => runtimeConfig, capabilityStore, refStore, alphaToolRegistrations)
-    const installed = patchCompactionPressureForAgent(agent, state, () => runtimeConfig, ctx, compactionPatchRecords, requestHeaders)
-    if (installed) ctx.logger?.info?.('[lcx-codex] pressure coordination installed through AgentPresets service resolver')
-  }, { global: true })
-
-  ctx.on('agent/status', ({ agent, status }) => {
-    if (status !== 'running' || !agent) return
-    alphaAgents.add(agent)
-    syncAlphaToolForAgent(ctx, agent, state, () => runtimeConfig, capabilityStore, refStore, alphaToolRegistrations)
-    const installed = patchCompactionPressureForAgent(agent, state, () => runtimeConfig, ctx, compactionPatchRecords, requestHeaders)
-    if (installed) ctx.logger?.info?.('[lcx-codex] pressure coordination installed through AgentPresets service resolver')
-    patchVisibleWebSearchTimeout(agent, () => visibleWebSearchTimeout(state, () => runtimeConfig), patchedWebSearchDefinitions)
-  }, { global: true })
-
-  ctx.on('llm/stream', (options, next) => {
-    if (!state.enabled || options.purpose === 'session-title') return next()
-    const routeConfig = resolveResponsesRouteConfig(ctx, options, runtimeConfig)
-    if (options.purpose === 'compaction') {
-      if (!routeConfig) return unavailableManagedRouteStream(options)
-      return remoteCompactionStream(options, routeConfig, state, ctx, next, requestHeaders)
+    catch (error) {
+        yield managedFailureChunk(error, options.signal);
+    }
+}
+function isGptLifecycleTarget(options) {
+    return /^gpt-/iu.test(String(options.model ?? ""));
+}
+async function* unavailableManagedRouteStream(options) {
+    yield managedFailureChunk(Object.assign(new Error("LCX is enabled but the selected DSH route cannot be resolved as an authenticated OpenAI Responses wire route"), { code: "LCX_RESPONSES_ROUTE_UNAVAILABLE" }), options.signal);
+}
+function installInjected(ctx, configInput = {}) {
+    installSearchUsage(ctx);
+    const baseConfig = normalizeConfig(configInput);
+    let runtimeConfig = baseConfig;
+    const state = {
+        enabled: false,
+        webSearch: false,
+        advancedHostedSearch: false,
+        alphaSearch: false,
+        grokNativeWebSearch: false,
+        grokNativeXSearch: false,
+    };
+    const provider = new LcxResponsesSearchProvider(ctx, () => runtimeConfig, () => state.enabled && state.webSearch);
+    const capabilityStore = new AlphaCapabilityStore(baseConfig.alphaCapabilityPath);
+    const refStore = new AlphaRefStore(baseConfig.alphaRefPath);
+    const managedAgents = new Set();
+    const gptToolRegistrations = new Map();
+    const alphaToolRegistrations = new Map();
+    const compactionPatchRecords = new Map();
+    const syncAgentTools = (agent) => {
+        syncGptToolsForAgent(ctx, agent, state, () => runtimeConfig, provider, gptToolRegistrations);
+        syncAlphaToolForAgent(ctx, agent, state, () => runtimeConfig, capabilityStore, refStore, alphaToolRegistrations);
+    };
+    const refreshTools = () => {
+        for (const agent of managedAgents)
+            syncAgentTools(agent);
+    };
+    ctx.on("session/disposed", (session) => {
+        for (const agent of managedAgents)
+            if (agentUsesSession(agent, session)) {
+                disposeGptToolsForAgent(agent, gptToolRegistrations);
+                disposeAlphaToolForAgent(agent, alphaToolRegistrations);
+                managedAgents.delete(agent);
+            }
+    }, { global: true });
+    ctx.on("session/event", (session, event) => {
+        if (event.type === "request/header")
+            for (const agent of managedAgents)
+                if (agentUsesSession(agent, session))
+                    syncAgentTools(agent);
+    }, { global: true });
+    const settingsEntry = {
+        enabled: false,
+        webSearch: false,
+        advancedHostedSearch: false,
+        alphaSearch: false,
+        grokNativeWebSearch: false,
+        grokNativeXSearch: false,
+        searchMediaPreview: false,
+    };
+    let source = () => settingsEntry;
+    ctx.settings.installSection(ctx, SETTINGS_NS, SettingsSchema, settingsEntry, {
+        setSource(current) {
+            source = current;
+        },
+        onChange() {
+            const value = source();
+            state.enabled = value.enabled;
+            state.webSearch = value.webSearch;
+            state.advancedHostedSearch = value.advancedHostedSearch;
+            state.alphaSearch = value.alphaSearch;
+            state.grokNativeWebSearch = value.grokNativeWebSearch;
+            state.grokNativeXSearch = value.grokNativeXSearch;
+            runtimeConfig = baseConfig;
+            refreshTools();
+        },
+    });
+    try {
+        const value = source();
+        Object.assign(state, {
+            enabled: Boolean(value.enabled),
+            webSearch: Boolean(value.webSearch),
+            advancedHostedSearch: Boolean(value.advancedHostedSearch),
+            alphaSearch: Boolean(value.alphaSearch),
+            grokNativeWebSearch: Boolean(value.grokNativeWebSearch),
+            grokNativeXSearch: Boolean(value.grokNativeXSearch),
+        });
+        runtimeConfig = baseConfig;
     }
-    if (!routeConfig) return unavailableManagedRouteStream(options)
-    return managedResponsesStream(options, routeConfig, ctx)
-  })
-
-  ctx.effect?.(() => async () => {
-    disposeAdvanced?.()
-    for (const agent of alphaAgents) disposeAlphaToolForAgent(agent, alphaToolRegistrations)
-    alphaAgents.clear()
-    await restoreCompactionPressure(compactionPatchRecords)
-    restoreVisibleWebSearchTimeouts(patchedWebSearchDefinitions)
-    writeWebSearchProvider(ctx, originalSearchProvider)
-    requestHeaders.clear()
-  }, 'lcx-codex cleanup')
-}
-
+    catch { }
+    refreshTools();
+    ctx.inject(["compaction"], (compactionCtx) => {
+        patchCompactionPressureService(resolveContextService(compactionCtx, "compaction"), state, () => runtimeConfig, ctx, compactionPatchRecords);
+    });
+    ctx.on("agent/created", ({ agent }) => {
+        if (agent === null || typeof agent !== "object")
+            return;
+        managedAgents.add(agent);
+        syncAgentTools(agent);
+        const installed = patchCompactionPressureForAgent(agent, state, () => runtimeConfig, ctx, compactionPatchRecords);
+        if (installed)
+            ctx.logger?.info?.("[lcx-codex] pressure coordination installed through AgentPresets service resolver");
+    }, { global: true });
+    ctx.on("agent/status", ({ agent, status }) => {
+        if (status !== "running" ||
+            agent === null ||
+            typeof agent !== "object")
+            return;
+        managedAgents.add(agent);
+        syncAgentTools(agent);
+        const installed = patchCompactionPressureForAgent(agent, state, () => runtimeConfig, ctx, compactionPatchRecords);
+        if (installed)
+            ctx.logger?.info?.("[lcx-codex] pressure coordination installed through AgentPresets service resolver");
+    }, { global: true });
+    ctx.on("llm/stream", (options, next) => {
+        if (options.purpose === "session-title")
+            return next();
+        const grokNativeSearch = {
+            web: state.grokNativeWebSearch,
+            x: state.grokNativeXSearch,
+        };
+        if (options.purpose === undefined && grokNativeSearchEnabled(grokNativeSearch)) {
+            const grokRoute = resolveGrokResponsesRouteConfig(ctx, options, runtimeConfig);
+            if (grokRoute)
+                return managedGrokNativeSearchStream(options, routeWithPolicies(grokRoute, runtimeConfig), grokNativeSearch, ctx);
+        }
+        if (!state.enabled || !isGptLifecycleTarget(options))
+            return next();
+        const routeConfig = resolveResponsesRouteConfig(ctx, options, runtimeConfig);
+        if (options.purpose === "compaction") {
+            if (!routeConfig)
+                return unavailableManagedRouteStream(options);
+            return remoteCompactionStream(options, routeWithPolicies(routeConfig, runtimeConfig), ctx, next);
+        }
+        if (!routeConfig)
+            return unavailableManagedRouteStream(options);
+        return managedResponsesStream(options, routeWithPolicies(routeConfig, runtimeConfig), ctx);
+    });
+    ctx.effect?.(() => async () => {
+        for (const agent of managedAgents) {
+            disposeGptToolsForAgent(agent, gptToolRegistrations);
+            disposeAlphaToolForAgent(agent, alphaToolRegistrations);
+        }
+        managedAgents.clear();
+        await restoreCompactionPressure(compactionPatchRecords);
+    }, "lcx-codex cleanup");
+}
 export function apply(ctx, configInput = {}) {
-  return installInjected(ctx, configInput)
+    return installInjected(ctx, configInput);
 }
-
-apply.inject = inject
-apply.Config = Config
-
-export default apply
+apply.inject = inject;
+apply.Config = Config;
+export default apply;