pi-zip 0.2.7 → 0.3.0-rc.1

package/src/plan.ts

@@ -2,9 +2,10 @@
 import { classifyRecoverability, type Recover } from "./classify.ts";
 import { handleFor, makePlaceholderFor, pickKeyLines, RECALL_TOOL, shortArgs } from "./placeholder.ts";
 import { createHash } from "node:crypto";
-import { type Any, PRODUCT, clamp, envInt, textOf, tok4, tokensOf } from "./util.ts";
+import { type Any, COMMIT_CUSTOM, PRODUCT, clamp, envInt, piTokensOf, textOf, tok4, tokensOf } from "./util.ts";
 import { PH_MARK } from "./placeholder.ts";
 import { MIN_EXPECT, type Prices } from "./learn.ts";
+import { commandNamesRecall, parseRecallPath, type FileRecall } from "./recallfile.ts";
 
 /** Default: when a COLD plan (P(warm) < 0.5) is still above the cap, also fold REREADABLE outputs of the previous user turn, biggest
  *  first. A warm plan does so only at a user return after the declared TTL (PlanOpts.pastTtl): the very returns where the TTL rule
@@ -22,7 +23,21 @@ export const RELAX_PREV_TURN = true;
  *  constant (largest saving with lost <= prod in every stratum); the old rereadable-only filter cost 1.026 / 1.018x at -0.6 lost items. */
 export const INTURN_AGE = 60;
 
-const PROTECT_USER_TURNS = 2; // the latest user turn and the one before it are never summarised; folded only by relax (cold plan, previous turn, rereadable) or in-turn (old enough)
+const PROTECT_USER_TURNS = 2; // the latest user turn and the one before it are never summarised (but see LOOKAHEAD); folded only by relax (cold plan, previous turn, rereadable) or in-turn (old enough)
+
+/** F1: a warm (valve) summary passes the same summary gate as a cold one, the call priced in (before: a warm plan skipped it, so a
+ *  summary the cold gate had just refused was written one request later anyway). PlanOpts.warmSummaryGate. */
+export const WARM_SUMMARY_GATE = true;
+/** F2: a cold plan that does not summarise looks one user turn ahead: if the warm valve would summarise at the next user turn, once the
+ *  protected window has slid past the previous turn, the cold plan summarises now (the rewrite is free now, not then), its cut allowed
+ *  inside the previous user turn up to that turn's final assistant answer, which stays verbatim with everything after it. PlanOpts.lookahead. */
+export const LOOKAHEAD = false;
+/** F3: the summary gates price the call the code makes (summary.ts narrative): uncached input of the prefix the narrative reads (the
+ *  previous summary is not sent: its sections are carried forward by code) plus output of at most the narrative budget, instead of
+ *  w x the prefix + out x the whole planned summary (which counts the carried-forward previous summary as model output). PlanOpts.narrativePrice. */
+export const NARRATIVE_PRICE = true;
+/** The narrative's token budget (chars/4), summary.ts buildCut: clamp(planned - skeleton, 300, NARRATIVE_MAX). */
+export const NARRATIVE_MAX = 4000;
 const SUMMARY_FLOOR = 1000;
 const SUMMARY_CAP = 8000;
 const SUMMARY_RATIO = 0.1;
@@ -55,6 +70,56 @@ export function legacyValve(before: number, after: number, room: number | null):
 }
 
 export const PI_KEEP_RECENT = 20_000; // Pi's compaction keepRecentTokens default
+
+/** Pi's compaction keepRecentTokens for this model: compaction.modelOverrides["provider/id"], else compaction.keepRecentTokens, else 20000. */
+export function keepRecentTokensFor(settings: Any, model: Any): number {
+	const c = settings?.compaction;
+	const key = model ? `${model.provider}/${model.id}` : "";
+	for (const v of [c?.modelOverrides?.[key]?.keepRecentTokens, c?.keepRecentTokens]) if (typeof v === "number" && Number.isFinite(v) && v >= 0) return v;
+	return PI_KEEP_RECENT;
+}
+
+const CUT_POINT_ROLES = new Set(["user", "assistant", "bashExecution", "custom", "branchSummary", "compactionSummary"]);
+const TURN_START_ROLES = new Set(["user", "bashExecution", "custom", "branchSummary", "compactionSummary"]);
+
+/**
+ * Would Pi's compact() find something to compact in this projection (the branch as it is now), or throw "Nothing to compact (session
+ * too small)"? A replica of the emptiness test of Pi's prepareCompaction (core/compaction/compaction.js, not exported): Pi cuts where
+ * keepRecent of its chars/4 tokens, counted from the end, begin, at the next cut point; the conversation before that cut (or before the
+ * turn it splits) must not be empty. Pi's own extra moves of the cut (over entries without messages, past recovery omissions) never
+ * empty it. The caller checks "Already compacted" (the newest branch entry is a compaction) itself.
+ */
+export function piCanCompact(entries: Any[], keepRecent: number): boolean {
+	const msgs = (e: Any): Any[] => (Array.isArray(e?.messages) ? e.messages : []);
+	const isComp = (e: Any) => e?.sourceEntry?.type === "compaction";
+	const prev = entries.findIndex((e) => isComp(e) && msgs(e).length > 0);
+	const start = prev >= 0 ? prev + 1 : 0, end = entries.length;
+	const cuts: number[] = [];
+	for (let i = start; i < end; i++) if (!isComp(entries[i]) && msgs(entries[i]).some((m) => CUT_POINT_ROLES.has(m?.role))) cuts.push(i);
+	if (!cuts.length) return false;
+	let cut = cuts[0], acc = 0;
+	for (let i = end - 1; i >= start; i--) {
+		const t = msgs(entries[i]).reduce((a, m) => a + piTokensOf(m), 0);
+		if (!t) continue;
+		acc += t;
+		if (acc >= keepRecent) { cut = cuts.find((c) => c >= i) ?? cuts[cuts.length - 1]; break; }
+	}
+	while (cut > start && !isComp(entries[cut - 1]) && !msgs(entries[cut - 1]).length) cut--;
+	if (!entries[cut]?.sourceEntry?.id) return false;
+	const startsTurn = (e: Any) => !isComp(e) && msgs(e).some((m) => TURN_START_ROLES.has(m?.role));
+	let turn = -1;
+	if (!startsTurn(entries[cut])) for (let i = cut; i >= start; i--) if (startsTurn(entries[i])) { turn = i; break; }
+	const conversation = (from: number, to: number) => entries.slice(from, to).some((e) => !isComp(e) && msgs(e).some((m) => m?.role !== "system"));
+	return turn >= 0 ? conversation(start, turn) || conversation(turn, cut) : conversation(start, cut);
+}
+
+/** The projection a run plan would have seen without pi-zip's native compaction: `pre` (taken right before it) plus what was appended
+ *  after the compaction entry (the prompt and anything sent with it). null when that compaction is no longer the head of `now`. */
+export function spliceNative(pre: Any[], now: Any[], compactionId: string): Any[] | null {
+	if (!compactionId || now[0]?.sourceEntry?.id !== compactionId) return null;
+	const known = new Set(pre.map((e) => e?.sourceEntry?.id).filter((x) => typeof x === "string"));
+	return [...pre, ...now.slice(1).filter((e) => !known.has(e?.sourceEntry?.id))];
+}
 export const G0 = 2_500; // growth per request before the session's own EWMA has data
 
 /** What the law knows at a decision: prices (null = legacy rule), growth per request g (real tokens), P(the cache is warm). */
@@ -88,58 +153,249 @@ export function lawTerms(B: number, A: number, P: number, room: number | null, p
 export const editAllowed = (B: number, A: number, P: number, room: number | null, pr: Prices | null, g: number, call = 0, T = A): boolean =>
 	lawTerms(B, A, P, room, pr, g, call, T).ok;
 
-// Token scale. Every size in this file is a chars/4 estimate, and chars/4 undercounts real tokens (JSON-heavy tool calls, code,
-// identifiers, tool definitions that are not in the text at all). `k` = real tokens per estimated token; every limit (cold cap,
-// compaction room, min gain) is compared against k x estimate, so they mean REAL tokens. k is read from the branch itself (the
-// usage of the newest assistant message), so it survives a restart and needs no stored state. With no usage to read, DEFAULT_K
-// applies: 1.7 is the ratio measured on recorded coding sessions (real first-request context / chars/4 estimate: 1.72 after cold
-// returns, 1.71 for previous-prompt peaks), and a too-high k only folds a little deeper, a too-low k leaves the context over the cap.
-export const DEFAULT_K = 1.7;
-export const K_MIN = 1; // an estimate above the real count is not trusted: never scale down
-export const K_MAX = 2.5;
-
-export interface Calibration {
-	k: number;
-	real: number; // input + cacheRead + cacheWrite of the request that produced the newest usable assistant message (0 = none)
-	est: number; // estimate of what that request carried: system prompt + the view blocks before that message
-	source: "usage" | "default";
+// Token scale. Every size in this file is a chars/4 estimate of the CONTENT (Pi's own rule); the provider counts real tokens, and the
+// two are not proportional:   real = O + c x content.
+//   O  what every request carries and no edit can shrink: system prompt, tool schemas, the provider's own framing (2-4K on a bare Pi,
+//      29-55K with a large tool set);
+//   c  real tokens per estimated content token (0.7-1.1 GLM / GPT, 1.5-2.2 Claude; more on CJK-heavy content).
+// pi-zip <= 0.2.9 used ONE ratio, k = real / (system prompt + content) clamped to [1, 2.5]: with O a third of the context k sat on its
+// clamp, and every size after an edit came out 10-15K too small (research round5/affine.md). Both are read from the branch on every
+// decision, so a restart or `pi -p` calibrates exactly like a long-lived process, and nothing is stored:
+//   O  1. the cacheRead of the request that first carried the newest summary: everything after the system prompt and tools changed
+//         there, so what the provider still read from its cache is exactly O (when the cache was warm at all);
+//      2. else the session's first request minus C0 x its content (an opening prompt is small next to O);
+//      3. else R0 x the chars/4 of the system prompt and the JSON of the declared tools.
+//      An O measured under another system prompt or tool set moves by R0 x the change of that chars/4 size (MCP tools come and go).
+//   c  (real - O) / content of the newest response, clamped to [C_MIN, C_MAX] (a guard for a tiny content estimate; recorded sessions
+//      span 0.7-3.9); C0 before the first response. A response followed by edits it did not carry (a warm-valve edit is persisted at
+//      turn_end and first sent with the next request: that response's prompt did not shrink) is counted with the originals.
+//   Both are per model: only responses of the model the next request goes to count. After a switch, before its first response,
+//   O = R0 x the system state and c = C0; after it, with no O evidence of its own, O = c x X, X = O / c of the previous model.
+export const C0 = 1.5;
+export const C_MIN = 0.5;
+export const C_MAX = 4;
+export const R0 = 2;
+
+/** The system prompt and the declared tools (Pi API fallback for a transcript that records no system message). */
+export interface SysInfo { text: string; tools: Any[] }
+/** chars/4 of the system prompt plus the JSON of the declared tool definitions (name, description, parameters). */
+export const sysEst = (s: SysInfo): number =>
+	tok4(s.text) + (s.tools.length ? tok4(JSON.stringify(s.tools.map((t: Any) => ({ name: t?.name, description: t?.description, parameters: t?.parameters })))) : 0);
+
+export interface Scale {
+	O: number; // real tokens every request carries before the content (system prompt, tools, framing)
+	c: number; // real tokens per estimated (chars/4) content token
+	real: number; // input + cacheRead + cacheWrite of the newest usable response (0 = none)
+	est: number; // estimated content that request carried
+	source: "usage" | "default"; // where c comes from
+	oSource: "summary" | "first" | "model" | "default"; // where O comes from ("model": another model's O in content units, X = O' / c')
+}
+/** Sizes taken as real (tests, and the ledger of a plan made without calibration). */
+export const UNIT: Scale = { O: 0, c: 1, real: 0, est: 0, source: "default", oSource: "default" };
+/** Real tokens of a context whose content is estimated at `content`. */
+export const sizeOf = (s: Pick<Scale, "O" | "c">, content: number): number => s.O + s.c * content;
+
+/** A response pi-ai drops before sending (an error or an abort): it carries no usable usage and adds nothing to later requests. */
+const dropped = (m: Any): boolean => m?.role === "assistant" && (m.stopReason === "error" || m.stopReason === "aborted");
+/** chars/4 a message adds to every later request: tokensOf, except 0 for an assistant message pi-ai drops before sending. */
+export const wireTokensOf = (m: Any): number => (dropped(m) ? 0 : tokensOf(m));
+/** Prompt size the provider reported for a response that really ran (0 = none, an error or an abort). */
+const promptOf = (m: Any): number => {
+	const u = m?.role === "assistant" && !dropped(m) ? m.usage : null;
+	return u ? (Number(u.input) || 0) + (Number(u.cacheRead) || 0) + (Number(u.cacheWrite) || 0) : 0;
+};
+/** "provider/model" of a response ("" = not recorded: such a response counts for any model). */
+const respKey = (m: Any): string => (m?.provider || m?.model ? `${m.provider ?? ""}/${m.model ?? ""}` : "");
+/** chars/4 of the system state the transcript records in `msgs` (-1: none recorded). */
+function sysOf(msgs: Any[]): number {
+	const s = collapseSystem(msgs);
+	return s ? sysEst({ text: [textOf(s.content), ...Object.values<string>(s.sections ?? {})].filter((x) => x).join("\n\n"), tools: s.toolsAdded ?? [] }) : -1;
+}
+/** The session's first response from model `key` on the branch: its prompt, the content before it and the system state it was sent with. */
+function firstRequest(branch: Any[], key: string): { real: number; est: number; S: number } | null {
+	const sys: Any[] = [];
+	let est = 0;
+	for (const e of branch) {
+		const m = e?.type === "message" ? e.message : e?.type === "custom_message" ? { role: "custom", content: e.content } : null;
+		if (!m) continue;
+		if (m.role === "system") { sys.push(m); continue; }
+		const real = promptOf(m), k = respKey(m);
+		if (real > 0 && (!key || !k || k === key)) return { real, est, S: sysOf(sys) };
+		est += wireTokensOf(m);
+	}
+	return null;
 }
 
-/**
- * k from the branch: the newest assistant message with usage says how many real tokens its request carried; the estimate of the
- * view blocks before it (the projection, with the folds and cut as persisted, which are exactly what that request carried, I1)
- * says how many we would have guessed. Only the INPUT side is used: that message's own output is not part of the request it
- * answered, and thinking tokens may or may not be sent back, so including output would add noise to the ratio.
- * Skipped: errored messages, messages without input usage, and messages older than a compaction Pi made (not ours): their
- * request carried text the projection no longer has.
- */
-export function calibrate(entries: Any[], sys = 0): Calibration {
-	const none: Calibration = { k: DEFAULT_K, real: 0, est: 0, source: "default" };
-	const blocks = buildBlocks(entries);
-	let foreignCompactionMs = 0;
-	for (const pe of entries) {
-		const src = pe.sourceEntry;
-		if (src?.type === "compaction" && src.details?.by !== PRODUCT) foreignCompactionMs = Math.max(foreignCompactionMs, Date.parse(src.timestamp) || 0);
+/** chars/4 of the context the request behind the response `id` carried, rebuilt from the branch the way Pi projects it: the newest
+ *  compaction before the response, the entries it keeps, everything after it, and the edits persisted before the response, plus the
+ *  edits of a run plan persisted right after it (their commit entry says the response itself carried them). null: `id` is not on the
+ *  branch. Used when a compaction written after the response (Pi's own, another extension's) removed that request's content from the
+ *  projection, so the projection cannot say what the response measured. */
+function requestEst(branch: Any[], id: string): number | null {
+	const at = branch.findIndex((e) => e?.id === id);
+	if (at < 0) return null;
+	const pre = branch.slice(0, at);
+	const edit = new Map<string, Any>();
+	for (const e of pre) if (e?.type === "context_edit") edit.set(e.targetId, e.replacement);
+	for (let i = at + 1; i < branch.length && !(branch[i]?.type === "message" || branch[i]?.type === "compaction"); i++) {
+		const e = branch[i];
+		if (e?.type === "custom" && e.customType === COMMIT_CUSTOM) {
+			if (e.data?.carried) for (let j = at + 1; j < i; j++) if (branch[j]?.type === "context_edit") edit.set(branch[j].targetId, branch[j].replacement);
+			break;
+		}
 	}
-	const before: number[] = []; // estimate of blocks[0..i)
-	let acc = 0;
-	for (const b of blocks) { before.push(acc); acc += b.tokens; }
-	for (let i = blocks.length - 1; i >= 0; i--) {
-		if (blocks[i].kind !== "assistant") continue;
-		const m = blocks[i].raw ?? blocks[i].msg;
-		const u = m?.usage;
-		const real = u ? (Number(u.input) || 0) + (Number(u.cacheRead) || 0) + (Number(u.cacheWrite) || 0) : 0;
-		if (!(real > 0) || m.stopReason === "error") continue;
-		if (foreignCompactionMs && typeof m.timestamp === "number" && m.timestamp < foreignCompactionMs) return none;
-		const est = sys + before[i];
-		if (!(est > 0)) return none;
-		return { k: clamp(real / est, K_MIN, K_MAX), real, est, source: "usage" };
+	let ci = -1;
+	pre.forEach((e, i) => { if (e?.type === "compaction") ci = i; });
+	const kept = ci < 0 ? pre : [pre[ci], ...pre.slice(0, ci).slice(Math.max(0, pre.findIndex((e) => e?.id === pre[ci].firstKeptEntryId))).filter((e) => !(e?.type === "message" && e.message?.role === "system")), ...pre.slice(ci + 1)];
+	let est = 0;
+	for (const e of kept) {
+		if (e?.type === "compaction" || e?.type === "branch_summary") est += tokensOf({ role: "compactionSummary", summary: e.summary });
+		else if (e?.type === "custom_message") est += tokensOf({ role: "custom", content: edit.has(e.id) ? edit.get(e.id)?.content : e.content });
+		else if (e?.type === "message" && e.message) {
+			const rep = edit.get(e.id);
+			if (rep === null) continue;
+			const m = rep && e.message.role !== "system" ? { ...e.message, content: typeof rep.content === "string" && e.message.role !== "user" ? [{ type: "text", text: rep.content }] : rep.content } : e.message;
+			est += wireTokensOf(m);
+		}
 	}
-	return none;
+	return est;
+}
+
+/** O and c from the projection (`entries`) and, for the session's first request, the branch; `sys` stands in for a transcript without
+ *  system messages. `model` = "provider/id" of the model the next request goes to (default: the newest response's): O and c are
+ *  properties of the provider's tokenizer, so only that model's responses are evidence. With none, O = R0 x the system state and
+ *  c = C0; with responses but no O evidence of its own (a model switch mid-session), O keeps the size another model measured in
+ *  content units, X = O' / c' (the system prompt and tools tokenize like the content around them): real = c (X + E). */
+export function calibrate(entries: Any[], sys?: SysInfo, branch: Any[] = [], model?: string): Scale {
+	type Resp = { at: number; est: number; real: number; read: number; nSys: number; ts: number; key: string; id: string };
+	const resp: Resp[] = [];
+	const sysMsgs: Any[] = [];
+	const edits: { at: number; target: string; foreign: boolean }[] = [];
+	const marks: { at: number; carried: boolean }[] = []; // pi-zip's commit entries: who first carried the edits right before them (run.ts commit)
+	const orig = new Map<string, { at: number; d: number }>(); // edited entries: tokens their originals add back
+	const withMsgs: number[] = [0]; // withMsgs[k]: entries before k that carry messages (a commit group has none inside it)
+	let est = 0, sysAt = 0; // sysAt: responses before the newest system message
+	entries.forEach((pe, at) => {
+		const src = pe.sourceEntry, msgs: Any[] = pe.messages ?? [];
+		withMsgs.push(withMsgs[at] + (msgs.length ? 1 : 0));
+		// an edit with a replacement that is not our placeholder is another extension's (never carried by a request of ours); one without
+		// (a bare entry) is judged by the size heuristics below
+		if (src?.type === "context_edit") edits.push({ at, target: src.targetId, foreign: "replacement" in src && !textOf(src.replacement?.content).startsWith(PH_MARK) });
+		if (src?.type === "custom" && src.customType === COMMIT_CUSTOM) marks.push({ at, carried: !!src.data?.carried });
+		if (src?.type === "message" && msgs.length === 1 && msgs[0] !== src.message) orig.set(src.id, { at, d: wireTokensOf(src.message) - wireTokensOf(msgs[0]) });
+		for (const m of msgs) {
+			if (m?.role === "system") { sysMsgs.push(m); sysAt = resp.length; continue; }
+			const real = promptOf(m);
+			if (real > 0) resp.push({ at, est, real, read: Number(m.usage.cacheRead) || 0, nSys: sysMsgs.length, ts: Number(m.timestamp) || 0, key: respKey(m), id: src?.id ?? "" });
+			est += wireTokensOf(m);
+		}
+	});
+	const sAt = (n: number) => sysOf(sysMsgs.slice(0, n)); // the system state after the first n system messages (computed only where needed)
+	const S = sAt(sysMsgs.length);
+	const Snow = S >= 0 ? S : sys ? sysEst(sys) : 0;
+	const head = entries[0]?.sourceEntry?.type === "compaction" ? entries[0].sourceEntry : null;
+	const headMs = head ? Date.parse(head.timestamp) || 0 : 0;
+	// a pi-zip summary persisted as a turn_end draft was request-local first (a run plan carries it before its entry exists); one that
+	// went in through Pi's compaction before the run (details.via "native") is carried after its entry, exactly like Pi's own
+	const local = !!head && head.details?.by === PRODUCT && head.details?.via !== "native";
+	// Was the request behind this response sent after the head compaction entry was written? The branch's order says (timestamps tie when
+	// a compaction follows a response in the same millisecond); without the branch the timestamps do.
+	const pos = new Map<string, number>();
+	if (head) branch.forEach((e, i) => { if (typeof e?.id === "string") pos.set(e.id, i); });
+	const afterHead = (r: Resp): boolean => {
+		const h = pos.get(head?.id), i = pos.get(r.id);
+		return h !== undefined && i !== undefined ? i > h : r.ts > headMs;
+	};
+	const opening = (r: { real: number; est: number } | null | undefined) => !!r && C0 * r.est <= 0.1 * r.real; // content small next to O
+
+	/** The first commit entry of the group of pi-zip edits that starts at entry `at` (none when a message comes first). */
+	const markOf = (at: number) => marks.find((m) => m.at > at && withMsgs[m.at] - withMsgs[at + 1] === 0);
+	/** Index of the newest response in `resp` before entry `at`. */
+	const respBefore = (at: number) => resp.reduce((k, r, i) => (r.at < at ? i : k), -1);
+	/** Tokens the originals add back for response i: edits persisted after it that its own request did not carry (the projection counts
+	 *  their placeholders). A commit entry says who carried them (a run plan: the response before the entry; a valve plan: the next one);
+	 *  with none (a session of an older version) the sizes decide, for the newest response only (`legacy`). */
+	const addBack = (i: number, legacy: boolean): number => {
+		let d = 0;
+		for (const x of edits) {
+			const t = orig.get(x.target);
+			if (x.at <= resp[i].at || !t || t.at >= resp[i].at) continue;
+			const m = x.foreign ? undefined : markOf(x.at);
+			if (m ? m.carried && respBefore(m.at) === i : !x.foreign && legacy) continue;
+			d += t.d;
+		}
+		return d;
+	};
+
+	const fit = (want: string, transfer: boolean): Scale => {
+		const mine = (r: Resp | undefined): r is Resp => !!r && (!want || !r.key || r.key === want);
+		// evidence for O, the newest wins (it needs the smallest correction for system changes since)
+		const ev: { at: number; O: number; S: number; src: Scale["oSource"] }[] = [];
+		const f = branch.length ? firstRequest(branch, want) : head ? null : resp.find(mine); // the session's first request
+		if (f && opening(f)) ev.push({ at: -1, O: f.real - C0 * f.est, S: "S" in f ? f.S : sAt(f.nSys), src: "first" });
+		const ci = resp.findIndex((r, i) => i >= sysAt && mine(r)), cur = resp[ci]; // the first response sent with the current system prompt and tools
+		// its content as its request carried it: edits persisted after it (a model switch, say, then a run plan's folds) are in `est`
+		const curEst = cur ? cur.est + addBack(ci, false) : 0;
+		if (cur && (!head || afterHead(cur)) && opening({ real: cur.real, est: curEst })) ev.push({ at: ci, O: cur.real - C0 * curEst, S, src: "first" });
+		if (head) {
+			// the summary at the head was first carried by the first response after its entry, or, for pi-zip's own request-local summary
+			// (a run plan), by the last one before it; Pi's, another extension's or a native pi-zip compaction is never sent before its entry
+			const after = resp.findIndex((r) => afterHead(r)), ours = local;
+			for (const i of after < 0 ? (ours ? [resp.length - 1] : []) : ours ? [after - 1, after] : [after]) {
+				const r = resp[i], prev = resp[i - 1];
+				if (mine(r) && r.read > 0 && r.read < 0.8 * r.real && (!prev || r.read < 0.8 * prev.real)) { ev.push({ at: i, O: r.read, S: sAt(r.nSys), src: "summary" }); break; }
+			}
+		}
+		const best = ev.sort((a, b) => b.at - a.at)[0];
+		let O = best ? Math.max(0, best.O + (best.S >= 0 && S >= 0 ? R0 * (Snow - best.S) : 0)) : R0 * Snow, oSource: Scale["oSource"] = best?.src ?? "default";
+		// c from the newest response of this model
+		let n = resp.length - 1;
+		while (n >= 0 && !mine(resp[n])) n--;
+		if (n < 0) return { O, c: C0, real: 0, est: 0, source: "default", oSource };
+		const N = resp[n];
+		let estN = N.est;
+		const cutLater = !!head && !afterHead(N);
+		const later = edits.filter((x) => x.at > N.at);
+		const rebuilt = cutLater && !local && !!N.id ? requestEst(branch, N.id) : null; // what its request carried: the compaction after it removed that from the projection
+		if (rebuilt !== null && rebuilt > 0) estN = rebuilt;
+		else if (later.length || cutLater) {
+			// carried (a run plan): the prompt shrank, or a read stopped early; a cache miss alone (no read at all) proves nothing. The
+			// commit entries of pi-zip's edits say it outright; the sizes decide only for edits without one (older sessions).
+			// Pi's own compaction is never request-local.
+			let p = n - 1;
+			while (p >= 0 && !mine(resp[p])) p--;
+			const P = resp[p];
+			const heur = !P || N.real < P.real || (N.read > 0 && N.read < 0.8 * P.real);
+			const carried = !(cutLater && !local) && (cutLater && typeof head.details?.carried === "boolean" ? head.details.carried : heur);
+			if (!carried && cutLater) return { O, c: C0, real: N.real, est: 0, source: "default", oSource }; // what it carried is summarised away
+			estN += addBack(n, heur && carried);
+		}
+		if (!best && transfer && estN > 0) {
+			// no O of its own: the newest other model's O in content units
+			// (a compaction may have taken the other model's responses out of the projection: the branch still has them)
+			const other = [...resp].reverse().find((r) => r.key && r.key !== want)?.key
+				?? [...branch].reverse().map((e) => (e?.type === "message" && promptOf(e.message) > 0 ? respKey(e.message) : "")).find((k) => k && k !== want);
+			const o = other ? fit(other, false) : null;
+			if (o && o.oSource !== "default" && o.c > 0) {
+				const X = o.O / o.c, c = clamp(N.real / (X + estN), C_MIN, C_MAX);
+				return { O: c * X, c, real: N.real, est: estN, source: "usage", oSource: "model" };
+			}
+		}
+		return { O, c: estN > 0 ? clamp((N.real - O) / estN, C_MIN, C_MAX) : C0, real: N.real, est: estN, source: estN > 0 ? "usage" : "default", oSource };
+	};
+	return fit(model || [...resp].reverse().find((r) => r.key)?.key || "", true);
 }
 
+/** The cold cap's target in real tokens of the WHOLE context (system prompt and tools included, as the cap was tuned): max(cap, O + cap/2),
+ *  never above Pi's compaction room. While O is under half the cap this is the plain whole-context cap. Above that the target is O plus
+ *  half the cap of conversation: never at or below O, where no edit reaches it (0.2.9's 40K with O = 29-55K summarised at every cold
+ *  return), and not 40K of conversation on top of O either (the cap on content alone cost +13% live on a 36K prefix, with no quality
+ *  difference measured). Offline it never loses more items than the whole-context cap (research round5/affine.md section 11). */
+export const CAP_CONTENT_MIN = 0.5;
+export const coldTarget = (cap: number, O: number, room: number | null): number => Math.min(Math.max(cap, O + CAP_CONTENT_MIN * cap), room ?? Infinity);
+
 export const settings = () => ({
-	coldCap: envInt("COLD_CAP", 40_000), // cold: fold, then summarise, down to this many tokens
+	coldCap: envInt("COLD_CAP", 40_000), // cold: fold, then summarise, down to this many real tokens of the whole context, but never below O + half of it (coldTarget)
 	foldMin: envInt("FOLD_MIN", 500), // outputs below this many tokens are never folded
 	keepLines: envInt("KEEP_LINES", 8),
 	minGain: envInt("MIN_GAIN", 10_000), // legacy rule only (no prices): a summary must remove at least max(minGain, 15% of the context)
@@ -203,7 +459,7 @@ export function buildBlocks(contextEntries: Any[], steerIds?: Set<string>): Bloc
 			for (const c of msg.content ?? []) if (c?.type === "toolCall") issued.set(c.id, asst);
 		}
 		asstOf[blocks.length] = kind === "toolResult" ? (issued.get(msg.toolCallId) ?? asst) : asst;
-		blocks.push({ idx: blocks.length, entryId: src.id ?? null, kind, msg, raw, tokens: msgs.reduce((a, m) => a + tokensOf(m), 0), userTurn, edited, ours, age: 0 });
+		blocks.push({ idx: blocks.length, entryId: src.id ?? null, kind, msg, raw, tokens: msgs.reduce((a, m) => a + wireTokensOf(m), 0), userTurn, edited, ours, age: 0 });
 	}
 	for (const b of blocks) if (b.kind === "toolResult") b.age = asst - asstOf[b.idx];
 	return blocks;
@@ -244,6 +500,7 @@ export interface Cut {
 	costUsd: number; // what the narrative model call cost (0 when unknown)
 	usage?: Any;
 	ms: number; // total production time (the narrative model call included)
+	ahead?: boolean; // F2: a lookahead cut (inside the previous user turn, before its final answer; guard.ts)
 }
 
 /** What a run sends from its first request on and persists verbatim at turn_end (F8). */
@@ -254,7 +511,7 @@ export interface RunPlan {
 	ctxBefore: number;
 	ctxAfter: number;
 	ms: number;
-	k: number; // the token scale the plan was made with (stats and notices of this run use the same one)
+	scale: Scale; // the token scale the plan was made with (stats and notices of this run use the same one)
 	persisted: boolean;
 	cutVisibleIdx?: number; // where the kept part starts among the projected non-system messages
 	cutKeptFirstMsg?: Any; // ... and that message itself (a disagreeing request view drops the cut)
@@ -262,6 +519,9 @@ export interface RunPlan {
 	applied?: Set<string>; // entry ids whose fold the latest request view actually carried (what turn_end must persist, no more)
 	cutTs?: number; // timestamp of the request-local summary message: one value per run, so every request of the run is identical
 	untouched?: number; // real tokens before the earliest edited block: what the first request carrying the plan can still read from the cache
+	waitMs?: number; // how long the user waited for this plan's summary (0: none, or it was ready)
+	noticed?: boolean; // its notice is already in the transcript (shown when the first request carrying it went out)
+	native?: Cut; // this run's summary went in through Pi's own compaction before the run: no request-local cut, no compaction draft
 }
 
 export interface PlanOpts {
@@ -270,8 +530,7 @@ export interface PlanOpts {
 	trace?: (LawTerms & { where: "summary" | "plan" })[]; // every law evaluation is pushed here (ledger)
 	reserve?: number; // Pi's compaction reserveTokens (default 16384)
 	steerIds?: Set<string>; // user entries that are mid-run steering or follow-up messages, not new user turns
-	sys: number; // estimated tokens of the system prompt (same chars/4 scale as the blocks; tool definitions are covered by k)
-	k?: number; // real tokens per estimated token (calibrate); default 1 = the estimates are taken as real
+	scale?: Scale; // real = O + c x content estimate (calibrate); default UNIT = the estimates are taken as real
 	cwd: string;
 	coldCap?: number;
 	foldMin?: number;
@@ -284,7 +543,14 @@ export interface PlanOpts {
 	inturnAge?: number; // default settings().inturnAge (PI_ZIP_INTURN_AGE, 60); 0 = outputs of the protected turns never fold on age
 	noSummary?: boolean; // a summary was already made while this cache stayed warm: no second one unless the context is at/above the compaction room
 	rereadOnly?: boolean; // zip_recall is not available to the model: fold only outputs that can be re-read (classify "rereadable")
+	fileRecall?: FileRecall; // zip_recall is hidden but read, grep or bash is active: fold as in full mode, placeholders name the recall file
 	pastTtl?: boolean; // a user return after the declared TTL: a warm plan may relax into the previous user turn too (RELAX_PREV_TURN)
+	warmSummaryGate?: boolean; // F1, default WARM_SUMMARY_GATE
+	lookahead?: boolean; // F2, default LOOKAHEAD (cold plans only)
+	narrativePrice?: boolean; // F3, default NARRATIVE_PRICE
+	slide?: number; // internal (F2): plan as if this many more user turns had started (the protected window slid)
+	valveB?: number; // internal (F2): the real context the slid warm plan's law sees (the cold plan's folds already applied)
+	warmStyle?: boolean; // internal: a cold plan at 0 < P(warm) < 0.5 that the law refused is planned once more the way a warm plan is (no relax folds unless pastTtl, the summary gated)
 }
 
 export interface PlanResult {
@@ -293,21 +559,33 @@ export interface PlanResult {
 	folds: FoldTarget[];
 	cutIdx: number | null;
 	firstKeptEntryId: string | null;
-	prefixTokens: number; // estimate units (x k = real), like summaryTokensPlanned
+	prefixTokens: number; // content estimate units (x c = real), like summaryTokensPlanned
 	summaryTokensPlanned: number;
 	sumTrigger: "cold" | "valve" | null;
-	k: number;
-	ctxTokens: number; // calibrated: k x (sys + blocks)
-	ctxAfterFolds: number; // calibrated
+	scale: Scale;
+	ctxTokens: number; // real: O + c x content
+	ctxAfterFolds: number; // real
 	userTurns: number;
 	cutVisibleIdx: number;
 	cutKeptFirstMsg: Any;
+	fileRecall?: FileRecall; // the summary of this plan names recall files instead of zip_recall (PlanOpts.fileRecall)
+	ahead?: boolean; // F2: the cut was decided by the lookahead (it may lie inside the previous user turn, before its final answer)
+}
+
+/** Index of the final assistant message of user turn `turn` (the answer the user saw), -1 if none. */
+export function finalAnswerIdx(blocks: Block[], turn: number): number {
+	for (let i = blocks.length - 1; i >= 0; i--) {
+		const b = blocks[i];
+		if (b.userTurn < turn) break;
+		if (b.userTurn === turn && b.kind === "assistant" && b.entryId && b.msg?.stopReason !== "error" && b.msg?.stopReason !== "aborted") return i;
+	}
+	return -1;
 }
 
-/** Estimated tokens before the earliest edited block (system prompt included): what stays cached through the edit. A cut edits from the start. */
-export function untouchedEst(blocks: Block[], folds: FoldTarget[], cut: boolean, sys: number): number {
+/** Estimated content before the earliest edited block: what stays cached through the edit with O (real: O + c x it). A cut edits from the start. */
+export function untouchedEst(blocks: Block[], folds: FoldTarget[], cut: boolean): number {
 	const ids = new Set(folds.map((t) => t.entryId));
-	let est = sys;
+	let est = 0;
 	if (!cut) for (const b of blocks) { if (b.entryId && ids.has(b.entryId)) break; est += b.tokens; }
 	return est;
 }
@@ -320,35 +598,41 @@ export const contentKeyOf = (content: Any): string => {
 
 /** The planner. Cold: fold everything outside the protected window, relax into the previous turn if still above the cap,
  *  summarise only if folds cannot reach the cap and the law prices the summary call in. Warm: null unless the context is above the
- *  cold cap and the law fires for the plan (the summary call is sunk there); then the cold plan minus the previous-turn relax (a warm plan
+ *  cold cap and the law fires for the plan; its summary passes the same summary gate (WARM_SUMMARY_GATE); then the cold plan minus the previous-turn relax (a warm plan
  *  folds the previous user turn by relax only at a return after the declared TTL, o.pastTtl). A cold plan with P(warm) > 0
  *  passes the same law (expected cost). The cap never exceeds Pi's compaction room. Returns null when there is nothing to plan on
  *  or the law says no. */
 export function planContext(entries: Any[], o: PlanOpts): PlanResult | null {
 	const s = settings();
 	const mode = o.mode ?? "cold";
-	// limits are in real tokens; the plan works in estimate units, so they are divided by k once, here
-	const k = o.k ?? 1;
+	const warmLike = mode === "warm" || o.warmStyle === true; // plans the way a warm plan does (the label of the trigger stays the mode's)
+	// limits are in real tokens; the plan works in content estimate units (real = O + c x estimate), so they are converted once, here.
+	// The cold cap is on the whole context, but leaves at least half of itself for the conversation above O (coldTarget): a cap the
+	// fixed prefix alone fills is out of reach, and every cold return then folds all it may and summarises. The compaction room is
+	// Pi's trigger on the whole context.
+	const { O, c } = o.scale ?? UNIT;
+	const real = (est: number) => O + c * est;
 	const room = compactionRoom(o.model, o.reserve);
-	const coldCap = Math.min(o.coldCap ?? s.coldCap, room ?? Infinity) / k;
+	const coldCap = (coldTarget(o.coldCap ?? s.coldCap, O, room) - O) / c;
 	const law: Law = o.law ?? { pr: null, g: G0, pWarm: mode === "cold" ? 0 : 1 };
 	const gate = (where: "summary" | "plan", B: number, A: number, r: number | null, call: number, T: number, Tsuf?: number): boolean => {
 		const t = lawTerms(B, A, law.pWarm, r, law.pr, law.g, call, T);
 		o.trace?.push({ where, ...t, ...(Tsuf !== undefined ? { Tsuf } : {}) });
 		return t.ok;
 	};
-	const minGain = (o.minGain ?? s.minGain) / k;
+	const minGain = o.minGain ?? s.minGain;
 	const foldMin = o.foldMin ?? s.foldMin;
 	const keepLines = o.keepLines ?? s.keepLines;
 	const relax = o.relax ?? RELAX_PREV_TURN;
 	const inturnAge = o.inturnAge ?? s.inturnAge;
 	const blocks = buildBlocks(entries, o.steerIds);
 	if (!blocks.length) return null;
-	const userTurns = countUserTurns(blocks) + (o.promptPending ? 1 : 0); // the upcoming prompt is a new user turn
+	const userTurns = countUserTurns(blocks) + (o.promptPending ? 1 : 0) + (o.slide ?? 0); // the upcoming prompt is a new user turn
+	const f1 = o.warmSummaryGate ?? WARM_SUMMARY_GATE, f2 = mode === "cold" && !o.warmStyle && (o.lookahead ?? LOOKAHEAD), f3 = o.narrativePrice ?? NARRATIVE_PRICE;
 	const calls = toolCallIndex(blocks);
 	const recalled = o.recalled ?? new Set<string>();
-	const ctxEst = o.sys + blocks.reduce((a, b) => a + b.tokens, 0);
-	if (mode === "warm" && !(ctxEst > coldCap)) return null; // I6: warm cache below the cold cap -> never edit
+	const ctxEst = blocks.reduce((a, b) => a + b.tokens, 0); // content
+	if (warmLike && !(ctxEst > coldCap)) return null; // I6: warm cache below the cold cap -> never edit
 	const trig = mode === "warm" ? "valve" : "cold";
 	const tokOverride = new Map<number, number>();
 	const folds: FoldTarget[] = [];
@@ -368,9 +652,9 @@ export function planContext(entries: Any[], o: PlanOpts): PlanResult | null {
 	};
 	const addFold = (b: Block, trig: string): boolean => {
 		if (tokOverride.has(b.idx) || recalled.has(handleFor(b.entryId!))) return false; // F4: never refold what the model recalled
-		const ph = makePlaceholderFor(b, calls, keepLines, !!o.rereadOnly);
+		const ph = makePlaceholderFor(b, calls, keepLines, !!o.rereadOnly, o.fileRecall);
 		if (ph === null) return false;
-		const phTok = tok4(ph);
+		const phTok = tokensOf({ ...b.msg, content: [{ type: "text", text: ph }] }); // the folded message: its id and framing stay
 		if (!(phTok < 0.9 * b.tokens)) return false;
 		tokOverride.set(b.idx, phTok);
 		const call = calls.get(b.msg.toolCallId);
@@ -378,20 +662,26 @@ export function planContext(entries: Any[], o: PlanOpts): PlanResult | null {
 		return true;
 	};
 	// a zip_recall result IS content the model just asked for: folding it would undo the recall (and loop); never
-	const isRecall = (b: Block) => (calls.get(b.msg.toolCallId)?.name ?? b.msg.toolName) === RECALL_TOOL;
+	// ... and so is a built-in read, grep, find, ls or bash call on a recall file (file recall, when an allowlist hides zip_recall)
+	const isRecall = (b: Block) => {
+		const call = calls.get(b.msg.toolCallId), name = call?.name ?? b.msg.toolName;
+		if (name === RECALL_TOOL) return true;
+		if (name === "bash") return commandNamesRecall(call?.args?.command);
+		return (name === "read" || name === "grep" || name === "find" || name === "ls") && !!parseRecallPath(call?.args?.path);
+	};
 	// Observability: on an automatic (prefix) cache no fold starts inside the first MIN_EXPECT real tokens, so the next response's cacheRead
 	// is an uncensored survival sample (learn.ts sample). Without it every idle return folded into the first 1-7K tokens and its sample was
 	// censored, so the learned curve never saw a return (live GLM bench). Explicit caches are exempt: the provider looks back only ~20
 	// blocks from the last breakpoint, a far head is not read either way. A cut replaces the prefix from the first message: exempt too.
-	const head = law.pr?.cls === "automatic" ? MIN_EXPECT / k : 0;
+	const head = law.pr?.cls === "automatic" ? (MIN_EXPECT - O) / c : 0; // MIN_EXPECT counts from the first token, O included
 	const start: number[] = [];
-	blocks.reduce((acc, b) => ((start[b.idx] = acc), acc + b.tokens), o.sys);
+	blocks.reduce((acc, b) => ((start[b.idx] = acc), acc + b.tokens), 0);
 	const foldable = (b: Block) => b.kind === "toolResult" && !b.edited && !!b.entryId && b.tokens > foldMin && !isRecall(b) && start[b.idx] >= head && (!o.rereadOnly || classify(b) === "rereadable");
 	const protectedTurn = (b: Block) => b.userTurn >= userTurns - PROTECT_USER_TURNS + 1;
 	const savings = () => folds.reduce((a, t) => a + t.entryTokens - t.phTokens, 0);
 	const cands = blocks.filter((b) => foldable(b) && !protectedTurn(b));
 	for (const b of cands) addFold(b, trig);
-	if (relax && (mode === "cold" || o.pastTtl === true)) {
+	if (relax && ((mode === "cold" && !o.warmStyle) || o.pastTtl === true)) {
 		// the protected window = the new prompt + the previous user turn; that turn's big reads are what makes a cold return
 		// expensive. Rereadable ones can be recalled exactly: fold them biggest-first until the cap; never the latest turn's own.
 		// Cold plans, and warm plans at a return after the declared TTL; any other warm plan keeps the previous user turn visible.
@@ -418,49 +708,78 @@ export function planContext(entries: Any[], o: PlanOpts): PlanResult | null {
 		}
 	}
 	let ctxAfterFolds = ctxEst - savings();
-	// what no summary can remove: the system prompt, the protected turns (after their folds) and the previous summary, which the next
-	// one carries forward; the cap is never chased below it (a context that is mostly this floor would be re-summarised for nothing)
+	// what no summary can remove (besides O): the protected turns (after their folds) and the previous summary, which the next one
+	// carries forward; the cap is never chased below it (a context that is mostly this floor would be re-summarised for nothing)
 	const prevSum = blocks[0]?.kind === "summary" ? blocks[0].tokens : 0;
-	const floor = o.sys + prevSum + blocks.reduce((a, b) => a + (protectedTurn(b) ? (tokOverride.get(b.idx) ?? b.tokens) : 0), 0);
+	const floor = prevSum + blocks.reduce((a, b) => a + (protectedTurn(b) ? (tokOverride.get(b.idx) ?? b.tokens) : 0), 0);
 	const target = Math.max(coldCap, floor + SUMMARY_FLOOR);
-	const atRoom = room !== null && k * ctxAfterFolds >= room;
+	const atRoom = room !== null && real(ctxAfterFolds) >= room;
 	const sumTrigger: "cold" | "valve" | null = ctxAfterFolds > target && (!o.noSummary || atRoom) ? trig : null;
 	let cutIdx: number | null = null;
 	let prefixTokens = 0;
 	let summaryTokensPlanned = 0;
-	if (sumTrigger) {
-		const limit = blocks.findIndex((b) => protectedTurn(b));
+	let ahead = false;
+	const minCut = blocks[0].kind === "summary" ? 2 : 1; // never re-summarise a prefix that is only the previous summary
+	const pre: number[] = [];
+	const S = (x: number) => Math.max(clamp(SUMMARY_RATIO * x, SUMMARY_FLOOR, SUMMARY_CAP), prevSum); // the next summary carries the previous one forward
+	// Block index of every fold: the folds a cut voids are those before it
+	const foldAt = folds.map((t) => blocks.findIndex((b) => b.entryId === t.entryId));
+	/** The whole plan's law (F10): B is the context as it is (or as the slid valve saw it), A what the plan leaves, `call` the summary call
+	 *  a cut makes; `untouched` is the content before the earliest edit (ledger only). A cold plan with some chance of a warm cache is
+	 *  priced by expectation (no prices: a cold plan always fires). T = A (the whole post-edit context, O included, as tuned: the cheaper
+	 *  A - O fires warm edits earlier and loses items offline). */
+	const planGate = (after: number, untouched: number, call: number, planned: boolean): boolean =>
+		!(warmLike || (planned && law.pr)) || gate("plan", Math.max(o.valveB ?? real(ctxEst), real(after)), real(after), room, call, real(after), c * (after - untouched));
+	/** The cut for cut points minCut..maxCut: the first that brings the context to the cap, else the deepest; gated = the summary law
+	 *  (no prices: the legacy gain rule) must pass. When the minimal cut's summary or the whole plan with it is refused, the deeper cuts
+	 *  are tried in turn (the gain grows as D^2, the call only with the prefix read). The whole plan's law prices the summary call too.
+	 *  Applies the first cut both laws accept (folds in the prefix are void) and returns true, or changes nothing. */
+	const summarise = (maxCut: number, gated: boolean): boolean => {
 		const cuts: number[] = [];
-		const minCut = blocks[0].kind === "summary" ? 2 : 1; // never re-summarise a prefix that is only the previous summary
-		for (let i = minCut; i < blocks.length; i++) {
-			if (limit >= 0 && i > limit) break;
-			if (blocks[i].entryId && (blocks[i].kind === "user" || blocks[i].kind === "assistant")) cuts.push(i);
-		}
-		const pre: number[] = [];
+		for (let i = minCut; i < blocks.length && i <= maxCut; i++) if (blocks[i].entryId && (blocks[i].kind === "user" || blocks[i].kind === "assistant")) cuts.push(i);
+		if (!cuts.length) return false;
 		let acc = 0;
 		for (let i = 0; i < blocks.length; i++) {
 			pre[i] = acc;
 			acc += tokOverride.get(i) ?? blocks[i].tokens;
 		}
-		const total = o.sys + acc;
-		const S = (x: number) => Math.max(clamp(SUMMARY_RATIO * x, SUMMARY_FLOOR, SUMMARY_CAP), prevSum); // the next summary carries the previous one forward
-		if (cuts.length) {
-			let pick = cuts[cuts.length - 1];
-			for (const c of cuts) if (total - pre[c] + S(pre[c]) <= coldCap) { pick = c; break; }
-			// cold: the summary call must pay for itself (verdict: call = w X + out S for an uncached call); warm: it is sunk in the plan's law
-			const X = k * pre[pick], Sr = k * S(pre[pick]);
-			const gain = !law.pr ? summaryGainOk(pre[pick], S(pre[pick]), total, minGain) : mode === "warm" || gate("summary", X, Sr, null, law.pr.w * X + law.pr.out * Sr, Sr);
-			if (pre[pick] >= 2 * S(pre[pick]) && gain) {
-				cutIdx = pick;
-				prefixTokens = pre[pick];
-				summaryTokensPlanned = S(pre[pick]);
-				for (let i = folds.length - 1; i >= 0; i--) {
-					const bi = blocks.findIndex((b) => b.entryId === folds[i].entryId);
-					if (bi < pick) { tokOverride.delete(bi); folds.splice(i, 1); } // the prefix is replaced: its folds are void
-				}
-				ctxAfterFolds = ctxEst - savings();
+		const total = acc;
+		let first = cuts.length - 1;
+		for (let k = 0; k < cuts.length; k++) if (total - pre[cuts[k]] + S(pre[cuts[k]]) <= coldCap) { first = k; break; }
+		for (const pick of cuts.slice(first)) {
+			const X = c * pre[pick], Sr = c * S(pre[pick]);
+			// the call is the narrative call summary.ts makes (F3, NARRATIVE_PRICE): uncached input of the prefix without the previous
+			// summary, which it never reads, + output of at most the narrative budget; without F3 the verdict's w X + out S (the carried
+			// summary as output)
+			const call = !law.pr ? 0 : f3 ? law.pr.input * c * Math.max(pre[pick] - prevSum, 0) + law.pr.out * c * Math.min(S(pre[pick]), NARRATIVE_MAX) : law.pr.w * X + law.pr.out * Sr;
+			if (gated) {
+				// the summary call must pay for itself, cold or warm (F1, WARM_SUMMARY_GATE; before, a warm plan skipped the gate)
+				const ok = !law.pr ? summaryGainOk(X, Sr, real(total), minGain) : (warmLike && !f1) || gate("summary", X, Sr, null, call, Sr);
+				if (!ok) continue;
 			}
+			if (!(pre[pick] >= 2 * S(pre[pick]))) continue;
+			// what the plan leaves: the context with its folds (those inside the prefix too: the prefix is measured as folded, `pre`) minus
+			// what the summary replaces plus the summary. (Counting the voided folds' savings back, as before, overstated it by them.)
+			if (!planGate(ctxAfterFolds - (pre[pick] - S(pre[pick])), 0, call, true)) continue;
+			cutIdx = pick;
+			prefixTokens = pre[pick];
+			summaryTokensPlanned = S(pre[pick]);
+			for (let i = folds.length - 1; i >= 0; i--) if (foldAt[i] < pick) { tokOverride.delete(foldAt[i]); folds.splice(i, 1); foldAt.splice(i, 1); } // the prefix is replaced: its folds are void
+			return true;
 		}
+		return false;
+	};
+	if (sumTrigger) {
+		const limit = blocks.findIndex((b) => protectedTurn(b));
+		summarise(limit >= 0 ? limit : blocks.length - 1, true);
+	}
+	if (f2 && cutIdx === null && law.pr && ctxAfterFolds > coldCap && (!o.noSummary || atRoom)) {
+		// F2 lookahead: the warm valve's plan at the next user turn (this context, its folds applied, the window slid by one turn). If it
+		// would summarise, the summary is written now, at the cold return, where the rewrite costs nothing extra (and at settle it is
+		// prepared while the user is away), instead of one turn later as a warm rewrite the user waits for.
+		const next = planContext(entries, { ...o, mode: "warm", slide: (o.slide ?? 0) + 1, lookahead: false, pastTtl: false, noSummary: false, trace: undefined, law: { ...law, pWarm: 1 }, valveB: real(ctxAfterFolds) });
+		const fa = finalAnswerIdx(blocks, userTurns - 1);
+		if (next && next.cutIdx !== null && fa >= minCut && summarise(fa, false)) ahead = true;
 	}
 	// where the kept part starts among the projected non-system messages (the request-local view drops everything before it)
 	let cutVisibleIdx = -1;
@@ -480,13 +799,17 @@ export function planContext(entries: Any[], o: PlanOpts): PlanResult | null {
 		}
 	}
 	// the untouched prefix: everything before the earliest edited block (a cut edits from the first block on)
-	const untouched = untouchedEst(blocks, folds, cutIdx !== null, o.sys);
+	const untouched = untouchedEst(blocks, folds, cutIdx !== null);
 	const after = ctxAfterFolds - (cutIdx !== null ? prefixTokens - summaryTokensPlanned : 0);
 	const planned = folds.length > 0 || cutIdx !== null;
-	// F10: a warm rewrite must pay back; a cold plan with some chance of a warm cache is priced by expectation (no prices: cold always fires).
-	// T = A (the whole post-edit context); the suffix after the earliest edit goes to the ledger only.
-	if ((mode === "warm" || (planned && law.pr)) && !gate("plan", k * ctxEst, k * after, room, 0, k * after, k * (after - untouched))) return null;
-	return { blocks, calls, folds, cutIdx, firstKeptEntryId: cutIdx !== null ? blocks[cutIdx].entryId : null, prefixTokens, summaryTokensPlanned, sumTrigger, k, ctxTokens: k * ctxEst, ctxAfterFolds: k * ctxAfterFolds, userTurns, cutVisibleIdx, cutKeptFirstMsg };
+	// a plan with a cut passed the whole plan's law with its call inside summarise; folds only (no summary wanted, or none the laws
+	// accepted: the deeper cuts and the cut-free plan both stand) is judged here
+	if (cutIdx === null && !planGate(after, untouched, 0, planned)) {
+		// a cold plan with some chance of a warm cache: the plan a warm cache would make may pay where this one does not
+		if (mode === "cold" && !o.warmStyle && law.pr && law.pWarm > 0 && law.pWarm < 0.5) return planContext(entries, { ...o, warmStyle: true });
+		return null;
+	}
+	return { blocks, calls, folds, cutIdx, firstKeptEntryId: cutIdx !== null ? blocks[cutIdx].entryId : null, prefixTokens, summaryTokensPlanned, sumTrigger: cutIdx !== null ? (sumTrigger ?? trig) : sumTrigger, scale: o.scale ?? UNIT, ctxTokens: real(ctxEst), ctxAfterFolds: real(ctxAfterFolds), userTurns, cutVisibleIdx, cutKeptFirstMsg, ...(o.fileRecall ? { fileRecall: o.fileRecall } : {}), ...(ahead ? { ahead } : {}) };
 }
 
 const sameMsg = (a: Any, b: Any): boolean =>
@@ -532,6 +855,11 @@ export function collapseSystem(messages: Any[]): Any | undefined {
  * message, the summary, then the kept non-system messages. null = nothing to apply. A cut whose kept boundary cannot be
  * located is dropped (folds still apply); an inconsistent split is never sent.
  */
+/** Fold targets of a plan made on the view before a native compaction, renumbered for the request Pi builds after it: Pi's summary
+ *  message first, then the kept part (positions among the non-system messages, as in applyPlanToMessages). */
+export const rebaseFolds = (folds: FoldTarget[], cutVisibleIdx: number): FoldTarget[] =>
+	folds.map((t) => ({ ...t, visIdx: t.visIdx >= 0 && cutVisibleIdx >= 0 && t.visIdx >= cutVisibleIdx ? t.visIdx - cutVisibleIdx + 1 : -1 }));
+
 export function applyPlanToMessages(messages: Any[], plan: RunPlan | null): { messages: Any[]; droppedCut: boolean; applied: Set<string> } | null {
 	if (!plan || plan.persisted || (!plan.folds.length && !plan.cut)) return null;
 	const vis: number[] = []; // indices of the non-system messages