zigmini 0.8.0-beta.5 → 0.8.0-beta.7

package/host/omo-check/patches/omo-5.1.35-compaction-idle.patch

@@ -0,0 +1,77 @@
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/index.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/index.js
+@@ -138,1 +138,1 @@
+-            const result = await applyGeneratedCompaction(ctx, job.snapshot, () => speculativeGeneration, compaction);
++            const result = await applyGeneratedCompaction(ctx, job.snapshot, () => speculativeGeneration, compaction, undefined, false);
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative.js
+@@ -303,1 +303,1 @@
+-export async function applyGeneratedCompaction(context, snapshot, getCurrentGeneration, compaction, signal) {
++export async function applyGeneratedCompaction(context, snapshot, getCurrentGeneration, compaction, signal, blocking = true) {
+@@ -319,3 +319,4 @@
+     return await context.applyCompaction(compaction, {
+         reason: "extension",
++        blocking,
+         ...(revisionUnchanged || !warmAnchor
+--- a/@code-yeongyu/senpi/dist/core/agent-session.js
++++ b/@code-yeongyu/senpi/dist/core/agent-session.js
+@@ -6195,4 +6195,5 @@
+             this._emit({
+                 type: "compaction_start",
+                 reason: options.reason,
++                blocking: options.blocking,
+                 requestId,
+@@ -6208,4 +6209,5 @@
+                 owner: "compaction",
+                 reason: options.reason,
++                blocking: options.blocking,
+                 requestId,
+                 willRetry: false,
+@@ -6227,4 +6229,5 @@
+             this._emit({
+                 type: "compaction_end",
+                 reason: options.reason,
++                blocking: options.blocking,
+                 result: undefined,
+@@ -6479,4 +6482,5 @@
+             this._emit({
+                 type: "compaction_end",
+                 reason: request.reason,
++                blocking: request.blocking,
+                 result: compactionResult,
+@@ -6591,4 +6595,5 @@
+         this._emit({
+             type: "compaction_end",
+             reason: request.reason,
++            blocking: request.blocking,
+             result: undefined,
+--- a/@code-yeongyu/senpi/dist/core/extensions/types.d.ts
++++ b/@code-yeongyu/senpi/dist/core/extensions/types.d.ts
+@@ -297,3 +297,4 @@
+ export interface ApplyCompactionOptions {
+     reason: CompactionReason;
++    blocking?: boolean;
+     expectedRevision?: number;
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative.d.ts
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative.d.ts
+@@ -22,3 +22,4 @@
+     applyCompaction(precomputed: CompactionResult, options: {
+         reason: "extension";
++        blocking?: boolean;
+         expectedRevision?: number;
+@@ -110,1 +111,1 @@
+-export declare function applyGeneratedCompaction(context: SpeculativeCompactionContext, snapshot: SpeculativeCompactionSnapshot | undefined, getCurrentGeneration: () => number, compaction: CompactionResult | undefined, signal?: AbortSignal): Promise<SpeculativeCompactionResult>;
++export declare function applyGeneratedCompaction(context: SpeculativeCompactionContext, snapshot: SpeculativeCompactionSnapshot | undefined, getCurrentGeneration: () => number, compaction: CompactionResult | undefined, signal?: AbortSignal, blocking?: boolean): Promise<SpeculativeCompactionResult>;
+--- a/@code-yeongyu/senpi/dist/core/agent-session.d.ts
++++ b/@code-yeongyu/senpi/dist/core/agent-session.d.ts
+@@ -140,3 +140,4 @@
+     type: "compaction_start";
+     reason: CompactionReason;
++    blocking?: boolean;
+     requestId?: string;
+@@ -229,4 +230,5 @@
+     type: "compaction_end";
+     failure?: CompactionFailure;
+     reason: CompactionReason;
++    blocking?: boolean;
+     result: CompactionResult | undefined;

package/host/omo-check/patches/omo-5.1.35-compaction-intent.patch

@@ -0,0 +1,212 @@
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative.js
+@@ -13,1 +13,1 @@
+-import { extractTaskIntent, resolveInheritedTaskIntent } from "./task-intent.js";
++import { extractTaskIntent, resolveInheritedTaskIntent, taskIntentSummary, taskIntentMetadata } from "./task-intent.js";
+@@ -268,1 +268,5 @@
+-        const summary = parsedSummary.summaryText;
++        const inheritedIntent = resolveInheritedTaskIntent(snapshot.branchEntries ?? []);
++        if (inheritedIntent && parsedSummary.taskIntent && parsedSummary.taskIntent !== inheritedIntent)
++            throw new SummaryGenerationError("incomplete", "Compaction changed protected task intent");
++        const taskIntent = inheritedIntent ?? parsedSummary.taskIntent;
++        const summary = taskIntentSummary(parsedSummary.summaryText, taskIntent);
+@@ -273,1 +277,0 @@
+-        const taskIntent = parsedSummary.taskIntent ?? resolveInheritedTaskIntent(snapshot.branchEntries ?? []);
+@@ -275,1 +278,1 @@
+-            summary: parsedSummary.summaryText,
++            summary,
+@@ -291,1 +294,1 @@
+-                    summary: parsedSummary.summaryText,
++                    summary,
+@@ -295,1 +298,1 @@
+-                ...(taskIntent ? { taskIntent } : {}),
++                ...(taskIntent ? { taskIntent: taskIntentMetadata(taskIntent) } : {}),
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/openai-remote.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/openai-remote.js
+@@ -4,0 +4,3 @@
++import { collectIntentProtection, protectedRemoteInput, taskIntentSummary, retainedUserText } from "./task-intent.js";
++import { estimateTokens } from "../../../compaction/index.js";
++import { resolveEffectiveReserveTokens } from "./policy.js";
+@@ -23,1 +26,1 @@
+-    const input = options.messages
++    const converted = options.messages
+@@ -26,0 +29,1 @@
++    const input = protectedRemoteInput(converted, collectIntentProtection(options.branchEntries));
+@@ -55,0 +59,1 @@
++        ...(typeof options.value.model === "string" ? { observedModel: options.value.model } : {}),
+@@ -71,0 +76,1 @@
++        ...(options.response.observedModel ? { observedProvider: options.model.provider, observedModel: options.response.observedModel } : {}),
+@@ -140,0 +146,1 @@
++        ...(options.response.responseModel ? { observedProvider: options.response.provider, observedModel: options.response.responseModel } : {}),
+@@ -177,0 +184,1 @@
++        streamKind: "auxiliary",
+@@ -334,0 +342,22 @@
++    const protection = collectIntentProtection(event.branchEntries);
++    const protectedInput = protectedRemoteInput([], protection);
++    const model = ctx.model;
++    const settings = ctx.getCompactionSettings?.() ?? event.preparation.settings;
++    const protectionTokens = estimateTokens({ role: "user", content: JSON.stringify(protectedInput) });
++    if (model && protectionTokens > model.contextWindow - resolveEffectiveReserveTokens(model.contextWindow, settings))
++        return { status: "ineligible" }; // Before dispatch only: same-model text compaction is permitted.
++    const attempt = await runOpenAiRemoteCompactionAttempt(ctx, event, emit, dependencies);
++    if (attempt.status !== "accepted") return attempt;
++    const result = attempt.compaction;
++    const checkpointTexts = new Set(convertPendingMessages(buildSessionContext(event.branchEntries).messages.filter((message) => message.role === "compactionSummary"), model).map(retainedUserText));
++    // The accepted native envelope already covers the request checkpoint. Keep its original intent outside it, not a second raw copy of the old summary.
++    const retained = result.details.replacementInput.filter((item) => !checkpointTexts.has(retainedUserText(item)));
++    const replacementInput = protectedRemoteInput(retained, protection);
++    return { status: "accepted", compaction: { ...result,
++        summary: taskIntentSummary(result.summary, protection.taskIntent) + (protection.sources.length ? `\n<source-user-text>\n${JSON.stringify(protection.sources)}\n</source-user-text>` : ""),
++        details: { ...result.details, intentProtection: protection, replacementInput, retainedInputItemCount: replacementInput.length,
++            selectionMode: settings.model === undefined || settings.model === "auto" ? "auto" : "explicit",
++            requestedProvider: model.provider, requestedModel: model.id },
++    } };
++}
++async function runOpenAiRemoteCompactionAttempt(ctx, event, emit, dependencies = {}) {
+@@ -410,0 +440,4 @@
++    const requestTokens = estimateTokens({ role: "user", content: JSON.stringify(request.body) });
++    const requestSettings = ctx.getCompactionSettings?.() ?? event.preparation.settings;
++    if (requestTokens > requestModel.contextWindow - resolveEffectiveReserveTokens(requestModel.contextWindow, requestSettings))
++        return undefined;
+@@ -765,1 +799,1 @@
+-        ...remote.details.replacementInput,
++        ...protectedRemoteInput(remote.details.replacementInput, remote.details.intentProtection),
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/openai-remote-responses-v2.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/openai-remote-responses-v2.js
+@@ -109,0 +109,1 @@
++            ...(assistant.responseModel ? { observedProvider: assistant.provider, observedModel: assistant.responseModel } : {}),
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/rejected-recovery.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/rejected-recovery.js
+@@ -6,0 +6,2 @@
++import { getOpenAiRemoteCompactionDetails, convertPendingMessages } from "./openai-remote-convert.js";
++import { protectedRemoteInput } from "./task-intent.js";
+@@ -33,1 +35,6 @@
+-    const tokens = filterContextExcludedMessages(messages).reduce((total, message) => total + estimateTokens(message), 0);
++    const remote = getOpenAiRemoteCompactionDetails(compactionResult.details);
++    const budgetMessages = remote ? [{ role: "user", content: JSON.stringify([
++        ...protectedRemoteInput(remote.replacementInput, remote.intentProtection),
++        ...convertPendingMessages(pendingMessages, model),
++    ]) }] : messages;
++    const tokens = filterContextExcludedMessages(budgetMessages).reduce((total, message) => total + estimateTokens(message), 0);
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/openai-remote-convert.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/openai-remote-convert.js
+@@ -1,0 +1,1 @@
++import { protectedRemoteInput } from "./task-intent.js";
+@@ -2,1 +3,1 @@
+-import { sessionEntryToContextMessages } from "../../../session-manager.js";
++import { sessionEntryToContextMessages, getSessionContextEntryId, SESSION_CONTEXT_ENTRY_ID } from "../../../session-manager.js";
+@@ -142,2 +143,6 @@
+-        case "user":
+-            return [{ role: "user", content: convertUserContent(message.content) }];
++        case "user": {
++            const item = { role: "user", content: convertUserContent(message.content) };
++            const sourceId = getSessionContextEntryId(message) ?? message[SESSION_CONTEXT_ENTRY_ID];
++            if (sourceId) Object.defineProperty(item, "__senpiCompactionSourceId", { value: sourceId });
++            return [item];
++        }
+@@ -188,1 +193,1 @@
+-                items.push(...details.replacementInput);
++                items.push(...protectedRemoteInput(details.replacementInput, details.intentProtection));
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/prompts.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/prompts.js
+@@ -9,2 +9,2 @@
+-Immutable provenance of the original task. Do not rewrite it. Newer explicit user steering overrides it.
+-</task-intent>`;
++</task-intent>
++Immutable provenance of the original task. Do not rewrite it. Newer explicit user steering overrides it.`;
+@@ -13,2 +13,2 @@
+-Immutable provenance of the original task. Do not rewrite it. Newer explicit user steering overrides it.
+-</task-intent>`;
++</task-intent>
++Immutable provenance of the original task. Do not rewrite it. Newer explicit user steering overrides it.`;
+@@ -22,1 +22,1 @@
+-R3. Where a previous summary is supplied, treat its User Requests, Final Goal, and Constraints fields as IMMUTABLE. Append, never rewrite, those three sections.
++R3. Preserve original requests and durable constraints as quoted provenance. Latest explicit user steering governs the current goal and next action. An answer-local restriction applies only to that answer.
+@@ -86,1 +86,1 @@
+-R3 enforcement: R3. Where a previous summary is supplied, treat its User Requests, Final Goal, and Constraints fields as IMMUTABLE. Append, never rewrite, those three sections.
++Preserve original requests and durable constraints as quoted provenance. Latest explicit user steering governs the current goal and next action. Keep answer-local restrictions local to their answer.
+@@ -179,1 +179,1 @@
+-Silently determine the current task intent and the minimum context needed for the next turn.
++Preserve the original request and durable constraints from the entire history together with the split turn. Latest explicit steering governs the current goal and next action. Do not promote answer-local restrictions into durable constraints.
+@@ -217,3 +217,1 @@
+-            return options.taskIntent
+-                ? MERGED_COMPACTION_PROMPT_TURN_PREFIX
+-                : mergeTaskIntent(MERGED_COMPACTION_PROMPT_TURN_PREFIX, promptFamilyText(options.promptFamily, TASK_INTENT_ACQUISITION_CLAUDE, TASK_INTENT_ACQUISITION_GPT));
++            return buildUserPrompt({ ...options, variant: options.previousSummary || options.taskIntent ? "update" : "default" });
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/task-intent.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/task-intent.js
+@@ -16,1 +16,1 @@
+-            taskIntent = capUtf8Bytes(block.inner.trim(), TASK_INTENT_BYTE_CAP);
++            taskIntent = block.inner.trim();
+@@ -44,1 +44,1 @@
+-        if (schema === REMOTE_SCHEMA || schema !== SUMMARY_SCHEMA)
++        if (schema !== REMOTE_SCHEMA && schema !== SUMMARY_SCHEMA)
+@@ -46,1 +46,2 @@
+-        const taskIntent = typedDetails.taskIntent;
++        const fullIntent = typeof entry.summary === "string" ? extractTaskIntent(entry.summary).taskIntent : undefined;
++        const taskIntent = fullIntent ?? typedDetails.intentProtection?.taskIntent ?? typedDetails.taskIntent;
+@@ -52,1 +53,1 @@
+-        return capUtf8Bytes(trimmed, TASK_INTENT_BYTE_CAP);
++        return trimmed;
+@@ -92,0 +93,57 @@
++
++/** Full-body provenance is separate from the bounded display metadata. */
++export function taskIntentSummary(body, taskIntent) {
++    return taskIntent ? `<task-intent>
++${taskIntent}
++</task-intent>
++
++Quoted original-task provenance, not a renewed instruction. Latest explicit user steering governs current action. Answer-local restrictions do not become durable constraints.
++
++${body}` : body;
++}
++export function taskIntentMetadata(taskIntent) {
++    return taskIntent ? capUtf8Bytes(taskIntent, TASK_INTENT_BYTE_CAP) : undefined;
++}
++export function collectIntentProtection(branchEntries) {
++    const sources = new Map();
++    const previous = branchEntries.findLast((entry) => entry.type === "compaction")?.details?.intentProtection;
++    for (const source of previous?.sources ?? []) sources.set(source.id, source);
++    for (const entry of branchEntries) {
++        for (const source of entry.details?.intentProtection?.sources ?? [])
++            sources.set(source.id, source);
++        if (entry.type !== "message" || entry.message?.role !== "user")
++            continue;
++        const content = entry.message.content;
++        const text = typeof content === "string" ? content : content.filter((block) => block.type === "text").map((block) => block.text).join("\n");
++        if (text) sources.set(entry.id, { id: entry.id, text });
++    }
++    return { taskIntent: resolveInheritedTaskIntent(branchEntries), sources: [...sources.values()] };
++}
++export function retainedUserText(item) {
++    if (item.role !== "user") return undefined;
++    if (typeof item.content === "string") return item.content;
++    if (!Array.isArray(item.content) || !item.content.every((block) => block.type === "input_text")) return undefined;
++    return item.content.map((block) => block.text).join("\n");
++}
++export function protectedRemoteInput(replacementInput, protection) {
++    if (!protection) return replacementInput;
++    const input = replacementInput.filter((item) => {
++        const text = retainedUserText(item);
++        if (!text) return true;
++        if (protection.sources.some((source) => source.id === item.__senpiCompactionSourceId && source.text === text)) return false;
++        if (protection.taskIntent && text === taskIntentSummary("", protection.taskIntent)) return false;
++        const start = text.indexOf("<source-user-text>\n");
++        const end = text.indexOf("\n</source-user-text>", start);
++        if (start < 0 || end < 0) return true;
++        let records;
++        try { records = JSON.parse(text.slice(start + 19, end)); } catch { return true; }
++        if (!Array.isArray(records) || !records.every((source) => protection.sources.some((known) => known.id === source.id && known.text === source.text))) return true;
++        const canonical = taskIntentSummary(`Quoted user source records; newer explicit steering takes precedence.\n<source-user-text>\n${JSON.stringify(records)}\n</source-user-text>`, protection.taskIntent);
++        return text !== canonical;
++    });
++    const remaining = protection.sources;
++    const text = taskIntentSummary(remaining.length ? `Quoted user source records; newer explicit steering takes precedence.\n<source-user-text>
++${JSON.stringify(remaining)}
++</source-user-text>` : "", protection.taskIntent);
++    return text ? [...input, { type: "message", role: "user", content: [{ type: "input_text", text }] }] : input;
++}
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/openai-remote-schema.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/openai-remote-schema.js
+@@ -52,0 +52,1 @@
++        ...(isRecord(value.intentProtection) ? { intentProtection: value.intentProtection } : {}),

package/host/omo-check/patches/omo-5.1.35-compaction-model.patch

@@ -0,0 +1,299 @@
+--- a/@code-yeongyu/senpi/dist/core/agent-session.js
++++ b/@code-yeongyu/senpi/dist/core/agent-session.js
+@@ -758,2 +758,2 @@
+-     * Unset, malformed, or unknown overrides keep a usable session model.
+-     * A spent account instead uses the held target or another authenticated model.
++     * Auto selection stays within the active provider; explicit values never fall back.
++     * Selection uses the availability snapshot. Authentication remains request-time.
+@@ -761,27 +761,50 @@
+-    _resolveCompactionModel(sessionModel) {
+-        const override = this._getCompactionSettings().model;
+-        const slash = override?.indexOf("/") ?? -1;
+-        const configured = override && slash > 0
+-            ? this._modelRuntime.getModel(override.slice(0, slash), override.slice(slash + 1))
+-            : undefined;
+-        const usable = (model) => !this._retryFallback.isProviderSpent(model.provider);
+-        // Preserve the explicit override and original-model geometry on healthy sessions.
+-        // A held downswitch uses its target only when the original account cannot serve.
+-        if (usable(sessionModel))
+-            return configured && usable(configured) ? configured : sessionModel;
+-        const pending = this._pendingModelSwitch?.model;
+-        if (pending && usable(pending))
+-            return pending;
+-        if (configured && usable(configured))
+-            return configured;
+-        const requiredContextWindow = estimateMessagesTokens(filterContextExcludedMessages(this._runtimeMessages())) +
+-            this._getCompactionSettings().reserveTokens;
+-        const available = this._modelRuntime
+-            .getModels()
+-            .find((model) => usable(model) &&
+-            model.contextWindow >= requiredContextWindow &&
+-            this._modelRuntime.hasConfiguredAuth(model.provider));
+-        if (available)
+-            return available;
+-        throw new AccountUsageLimitError(sessionModel.provider, this._retryFallback.accountError(sessionModel.provider));
+-    }
++    _resolveCompactionModel(sessionModel, inputTokens = 0) {
++        const settings = this._getCompactionSettings();
++        const override = settings.model;
++        const explicit = override !== undefined && override !== "auto";
++        const fail = (kind, model = sessionModel) => {
++            throw Object.assign(new Error(
++                explicit ? "Compaction model unavailable; check compaction.model or set it to auto."
++                    : "No usable compaction model within the active provider."),
++                { failure: { kind, provider: model.provider, model: model.id } });
++        };
++        const chat = this._modelRuntime.getModels();
++        const available = this._modelRuntime.getAvailableSnapshot();
++        const same = (left, right) => left.provider === right.provider && left.id === right.id;
++        const usable = (model) => chat.some((entry) => same(entry, model)) && (!available.some((entry) => entry.provider === model.provider) || available.some((entry) => same(entry, model))) &&
++            !this._retryFallback.isProviderSpent(model.provider) &&
++            this._modelRuntime.isFallbackEligible(model.provider);
++        const fits = (model) => {
++            const output = Math.min(32768, model.maxTokens > 0 ? model.maxTokens : 32768, Math.floor(model.contextWindow / 2));
++            return model.contextWindow > 0 && inputTokens + Math.max(settings.reserveTokens, output) <= model.contextWindow;
++        };
++        if (explicit) {
++            if (typeof override !== "string" || !/^[^/\s]+\/\S+$/.test(override))
++                return fail("invalid_model");
++            const slash = override.indexOf("/");
++            const configured = this._modelRuntime.getModel(override.slice(0, slash), override.slice(slash + 1));
++            if (!configured || !chat.some((model) => same(model, configured)))
++                return fail("invalid_model");
++            if (this._retryFallback.isProviderSpent(configured.provider))
++                return fail("quota", configured);
++            if (!usable(configured))
++                return fail("model_unavailable", configured);
++            if (!fits(configured))
++                return fail("context_budget", configured);
++            return configured;
++        }
++        if (this._retryFallback.isProviderSpent(sessionModel.provider))
++            return fail("quota");
++        const family = ["anthropic", "anthropic-subscription"].includes(sessionModel.provider) && /^claude-/.test(sessionModel.id) ? /^claude-sonnet-/
++            : ["openai", "chatgpt-subscription"].includes(sessionModel.provider) && /^gpt-/.test(sessionModel.id) ? /^gpt-.*-luna(?:-fast)?$/ : undefined;
++        const preferred = family ? available.filter((model) =>
++            model.provider === sessionModel.provider && family.test(model.id)) : [];
++        // Stable sort preserves registry order within the regular and fast Luna groups.
++        preferred.sort((left, right) => Number(/-luna-fast$/.test(left.id)) - Number(/-luna-fast$/.test(right.id)));
++        const candidates = [...(family?.test(sessionModel.id) ? [sessionModel] : []), ...preferred, sessionModel];
++        for (const candidate of candidates) {
++            if (candidate.provider === sessionModel.provider && usable(candidate) && fits(candidate))
++                return candidate;
++        }
++        return fail(usable(sessionModel) ? "context_budget" : "model_unavailable");
++    }
+@@ -788,7 +811,6 @@
+-    async _getCompactionRequestAuth(model, signal, callbacks) {
+-        const auth = await this._getSummarizationRequestAuth(model, signal, callbacks);
+-        return {
+-            ...auth,
+-            extraBody: this._modelRuntime.getCompatibilityRequestConfig(model).extraBody,
+-        };
+-    }
++    async _getCompactionRequestAuth(model, signal, callbacks) {
++        const prepared = await retryTransientCall(() => this._modelRuntime.prepareRequest(model, { signal }),
++            isOAuthRefreshUnavailableError, this.settingsManager.getRetrySettings(), signal,
++            callbacks ?? this._summarizationRetryCallbacks({ source: "compaction" }));
++        return { ...prepared.options, model: prepared.model, thinkingLevel: this.thinkingLevel };
++    }
+@@ -6305,1 +6327,0 @@
+-                const compactionModel = this._resolveCompactionModel(model);
+@@ -6336,5 +6357,6 @@
+-                    // A configured compaction.model override redirects only the
+-                    // summarization call to that model; every other part of the session
+-                    // (lifecycle record, preparation, branch) still tracks the session
+-                    // model. Falls back to the session model when the override is unset
+-                    // or cannot be resolved.
++                    // Size the complete source, including control text, before selecting a model.
++                    // The final serialized request is checked again at the dispatch boundary.
++                    const inputTokens = estimateMessagesTokens([...preparation.messagesToSummarize, ...preparation.turnPrefixMessages]) +
++                        Math.ceil(JSON.stringify([this.agent.state.systemPrompt, this.agent.state.tools,
++                            preparation.previousSummary, request.customInstructions]).length / 4) + 8192;
++                    const compactionModel = this._resolveCompactionModel(model, inputTokens);
+@@ -6342,1 +6364,4 @@
+-                    compactionResult = await this._runDefaultCompaction(preparation, requestModel, apiKey, headers, extraBody, request.customInstructions, signal, env, request.reason, thinkingLevel);
++                    compactionResult = await this._runDefaultCompaction(preparation, requestModel, apiKey, headers, extraBody, request.customInstructions, signal, env, request.reason, thinkingLevel);
++                    compactionResult.details = { ...compactionResult.details,
++                        selectionMode: settings.model === undefined || settings.model === "auto" ? "auto" : "explicit",
++                        requestedProvider: compactionModel.provider, requestedModel: compactionModel.id };
+@@ -7704,3 +7729,4 @@
+-            getCompactionModel: () => this.model && this._retryFallback.isProviderSpent(this.model.provider)
+-                ? this._resolveCompactionModel(this.model)
+-                : this.model,
++            getCompactionModel: (inputTokens) => {
++                const model = this._limitsModel();
++                return model && this._resolveCompactionModel(model, inputTokens);
++            },
+--- a/@code-yeongyu/senpi/dist/core/extensions/runner.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/runner.js
+@@ -987,3 +987,3 @@
+-                    ? () => {
+-                        runner.assertActive();
+-                        return runner.getCompactionModelFn?.();
++                    ? (inputTokens) => {
++                        runner.assertActive();
++                        return runner.getCompactionModelFn?.(inputTokens);
+--- a/@code-yeongyu/senpi/dist/core/extensions/types.d.ts
++++ b/@code-yeongyu/senpi/dist/core/extensions/types.d.ts
+@@ -446,1 +446,1 @@
+-    getCompactionModel?(): Model<Api> | undefined;
++    getCompactionModel?(inputTokens?: number): Model<Api> | undefined;
+@@ -2415,1 +2415,1 @@
+-    getCompactionModel?: () => Model<Api> | undefined;
++    getCompactionModel?: (inputTokens?: number) => Model<Api> | undefined;
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/lane-policy.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/lane-policy.js
+@@ -94,2 +94,3 @@
+-        if (context.getCompactionSettings?.().model)
+-            return false;
++        const override = context.getCompactionSettings?.().model;
++        if (typeof override === "string" && /^[^/\s]+\/\S+$/.test(override))
++            return false;
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative.js
+@@ -8,1 +8,1 @@
+-import { allowOverflowRetry, boundSummarizationInput, SUMMARIZATION_INPUT_BUDGET_RATIO, SummarizationOverflowExhaustedError, shrinkSummarizationInputForOverflowRetry, } from "./overflow-retry.js";
++import { estimateTotalTokens, SummarizationOverflowExhaustedError } from "./overflow-retry.js";
+@@ -143,26 +143,44 @@
+-    const selectedModel = context.getCompactionModel?.() ?? snapshot.model;
+-    const selectedSnapshot = selectedModel === snapshot.model
+-        ? snapshot
+-        : { ...snapshot, model: selectedModel, contextWindow: selectedModel.contextWindow };
+-    const auth = await context.modelRegistry?.getApiKeyAndHeaders(selectedModel);
+-    if (signal?.aborted)
+-        return undefined;
+-    // A provider is authenticated for summarization by a resolved key, a credential
+-    // request header, or ambient request-time auth. The ambient marker comes from the
+-    // same provider resolution normal turns use; an unconfigured keyed provider still
+-    // has none of these and is rejected before a request.
+-    if (!auth?.ok || !(auth.apiKey || hasCredentialHeaders(auth.headers) || auth.ambient)) {
+-        const detail = auth && !auth.ok ? auth.error : `no credentials resolved for provider "${selectedModel.provider}"`;
+-        throw new SummaryGenerationError("auth", `summarization credentials unavailable: ${detail}`);
+-    }
+-    const requestSnapshot = auth.baseUrl
+-        ? { ...selectedSnapshot, model: { ...selectedModel, baseUrl: auth.baseUrl } }
+-        : selectedSnapshot;
+-    const prompt = buildPrompt({
+-        variant: requestSnapshot.promptVariant,
+-        previousSummary: requestSnapshot.preparation.previousSummary,
+-        taskIntent: resolveInheritedTaskIntent(requestSnapshot.branchEntries ?? []),
+-        customInstructions: requestSnapshot.customInstructions,
+-    });
+-    const promptTokens = approxTokens(prompt.user);
+-    let messages = boundSummarizationInput(pruneToolResults([...requestSnapshot.preparation.messagesToSummarize, ...requestSnapshot.preparation.turnPrefixMessages], requestSnapshot.contextWindow, SUMMARIZATION_INPUT_BUDGET_RATIO), requestSnapshot.contextWindow, promptTokens);
++    const prompt = buildPrompt({
++        variant: snapshot.promptVariant,
++        previousSummary: snapshot.preparation.previousSummary,
++        taskIntent: resolveInheritedTaskIntent(snapshot.branchEntries ?? []),
++        customInstructions: snapshot.customInstructions,
++    });
++    const messages = [...snapshot.preparation.messagesToSummarize, ...snapshot.preparation.turnPrefixMessages];
++    const inputTokens = estimateTotalTokens([
++        ...messages,
++        { role: "user", content: prompt.user },
++        { role: "user", content: snapshot.systemPrompt ?? prompt.system },
++        { role: "user", content: JSON.stringify(snapshot.tools ?? []) },
++    ]);
++    const selectedModel = context.getCompactionModel?.(inputTokens) ?? snapshot.model;
++    const selectedSnapshot = { ...snapshot, model: selectedModel, contextWindow: selectedModel.contextWindow, selectionMode: context.getCompactionSettings?.().model === undefined || context.getCompactionSettings?.().model === "auto" ? "auto" : "explicit" };
++    let auth;
++    try {
++        const runtime = context.modelRegistry?.modelRuntime;
++        if (runtime) {
++            const prepared = await runtime.prepareRequest(selectedModel, { signal });
++            auth = { ok: true, ...prepared.options, baseUrl: prepared.model.baseUrl, ambient: true };
++        }
++        else {
++            auth = await context.modelRegistry?.getApiKeyAndHeaders(selectedModel);
++        }
++    }
++    catch (error) {
++        if (signal?.aborted)
++            return undefined;
++        const kind = error?.failure?.kind ?? error?.kind;
++        const known = ["auth_missing", "auth_expired", "quota", "org_denied", "model_unavailable"];
++        const failure = { kind: kind === "auth" ? "auth_missing" : known.includes(kind) ? kind : "provider",
++            provider: selectedModel.provider, model: selectedModel.id };
++        throw Object.assign(new SummaryGenerationError(failure.kind, "Compaction request authentication failed"), { failure, cause: error });
++    }
++    if (signal?.aborted)
++        return undefined;
++    if (!auth?.ok || !(auth.apiKey || hasCredentialHeaders(auth.headers) || auth.ambient)) {
++        const failure = { kind: "auth_missing", provider: selectedModel.provider, model: selectedModel.id };
++        throw Object.assign(new SummaryGenerationError(failure.kind, "Compaction request authentication unavailable"), { failure });
++    }
++    const requestSnapshot = auth.baseUrl
++        ? { ...selectedSnapshot, model: { ...selectedModel, baseUrl: auth.baseUrl } }
++        : selectedSnapshot;
+@@ -173,2 +191,0 @@
+-    const overflowRetryStartMs = Date.now();
+-    let overflowAttempts = 0;
+@@ -216,1 +232,2 @@
+-                        extraBody: auth.extraBody,
++                        extraBody: auth.extraBody,
++                        env: auth.env,
+@@ -223,1 +240,1 @@
+-                    !isContextOverflow(attempt, snapshot.contextWindow)) {
++                    !isContextOverflow(attempt, requestSnapshot.contextWindow)) {
+@@ -240,12 +257,4 @@
+-        if (isAssistantMessage(response) && isContextOverflow(response, snapshot.contextWindow)) {
+-            overflowAttempts++;
+-            const elapsedMs = Date.now() - overflowRetryStartMs;
+-            const retryMessages = allowOverflowRetry(overflowAttempts, elapsedMs)
+-                ? shrinkSummarizationInputForOverflowRetry(messages, snapshot.contextWindow, promptTokens)
+-                : undefined;
+-            if (!retryMessages) {
+-                throw new SummarizationOverflowExhaustedError(overflowAttempts, elapsedMs);
+-            }
+-            messages = retryMessages;
+-            continue;
+-        }
++        if (isAssistantMessage(response) && isContextOverflow(response, requestSnapshot.contextWindow)) {
++            const failure = { kind: "context_budget", provider: selectedModel.provider, model: selectedModel.id };
++            throw Object.assign(new SummaryGenerationError(failure.kind, "Compaction input exceeds the provider context budget"), { failure });
++        }
+@@ -303,1 +312,6 @@
+-                schema: SUMMARY_SCHEMA,
++                schema: SUMMARY_SCHEMA,
++                selectionMode: selectedSnapshot.selectionMode,
++                requestedProvider: selectedModel.provider,
++                requestedModel: selectedModel.id,
++                ...(isAssistantMessage(response) && response.provider && response.responseModel
++                    ? { observedProvider: response.provider, observedModel: response.responseModel } : {}),
+--- a/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative-summary.js
++++ b/@code-yeongyu/senpi/dist/core/extensions/builtin/compaction/speculative-summary.js
+@@ -6,1 +6,2 @@
+-import { repairOrphanedToolResults } from "./repair-tool-pairs.js";
++import { repairOrphanedToolResults } from "./repair-tool-pairs.js";
++import { estimateTotalTokens } from "./overflow-retry.js";
+@@ -109,1 +110,10 @@
+-        const headers = providerRequest
++        const inputTokens = estimateTotalTokens([
++            ...requestContext.messages,
++            { role: "user", content: requestContext.systemPrompt },
++            { role: "user", content: JSON.stringify(requestContext.tools ?? []) },
++        ]);
++        if (inputTokens + summaryMaxTokens(options.snapshot.model, options.snapshot.contextWindow) > options.snapshot.contextWindow) {
++            throw Object.assign(new Error("Compaction request exceeds the selected model context budget"),
++                { failure: { kind: "context_budget", provider: options.snapshot.model.provider, model: options.snapshot.model.id } });
++        }
++        const headers = providerRequest
+@@ -115,1 +125,3 @@
+-            extraBody: options.auth.extraBody,
++            extraBody: options.auth.extraBody,
++            env: options.auth.env,
++            streamKind: "auxiliary",
+--- a/@code-yeongyu/senpi/dist/core/compaction/compaction.js
++++ b/@code-yeongyu/senpi/dist/core/compaction/compaction.js
+@@ -635,1 +635,2 @@
+-        affinitySessionId: options.affinitySessionId ?? options.sessionId,
++        affinitySessionId: options.affinitySessionId ?? options.sessionId,
++        streamKind: "auxiliary",
+@@ -638,1 +639,5 @@
+-    const callerSignal = options.signal;
++    if (model.contextWindow <= 0 || estimateProviderContextTokens(context).tokens + options.maxTokens > model.contextWindow) {
++        throw Object.assign(new Error("Compaction request exceeds the selected model context budget"),
++            { failure: { kind: "context_budget", provider: model.provider, model: model.id } });
++    }
++    const callerSignal = options.signal;