feat(context): add remote configuration for tool output masking thresholds (#18553)

packages/core/src/services/toolOutputMaskingService.test.ts

@@ -46,7 +46,7 @@ describe('ToolOutputMaskingService', () => {
       getSessionId: () => 'mock-session',
       getUsageStatisticsEnabled: () => false,
       getToolOutputMaskingEnabled: () => true,
-      getToolOutputMaskingConfig: () => ({
+      getToolOutputMaskingConfig: async () => ({
         enabled: true,
         toolProtectionThreshold: 50000,
         minPrunableTokensThreshold: 30000,
@@ -63,6 +63,44 @@ describe('ToolOutputMaskingService', () => {
     }
   });
 
+  it('should respect remote configuration overrides', async () => {
+    mockConfig.getToolOutputMaskingConfig = async () => ({
+      enabled: true,
+      toolProtectionThreshold: 100, // Very low threshold
+      minPrunableTokensThreshold: 50,
+      protectLatestTurn: false,
+    });
+
+    const history: Content[] = [
+      {
+        role: 'user',
+        parts: [
+          {
+            functionResponse: {
+              name: 'test_tool',
+              response: { output: 'A'.repeat(200) },
+            },
+          },
+        ],
+      },
+    ];
+
+    mockedEstimateTokenCountSync.mockImplementation((parts) => {
+      const resp = parts[0].functionResponse?.response as Record<
+        string,
+        unknown
+      >;
+      const content = (resp?.['output'] as string) ?? JSON.stringify(resp);
+      return content.includes(MASKING_INDICATOR_TAG) ? 10 : 200;
+    });
+
+    const result = await service.mask(history, mockConfig);
+
+    // With low thresholds and protectLatestTurn=false, it should mask even the latest turn
+    expect(result.maskedCount).toBe(1);
+    expect(result.tokensSaved).toBeGreaterThan(0);
+  });
+
   it('should not mask if total tool tokens are below protection threshold', async () => {
     const history: Content[] = [
       {

packages/core/src/services/toolOutputMaskingService.ts

@@ -68,7 +68,8 @@ export interface MaskingResult {
  */
 export class ToolOutputMaskingService {
   async mask(history: Content[], config: Config): Promise<MaskingResult> {
-    if (history.length === 0) {
+    const maskingConfig = await config.getToolOutputMaskingConfig();
+    if (!maskingConfig.enabled || history.length === 0) {
       return { newHistory: history, maskedCount: 0, tokensSaved: 0 };
     }
 
@@ -85,8 +86,6 @@ export class ToolOutputMaskingService {
       originalPart: Part;
     }> = [];
 
-    const maskingConfig = config.getToolOutputMaskingConfig();
-
     // Decide where to start scanning.
     // If PROTECT_LATEST_TURN is true, we skip the most recent message (index history.length - 1).
     const scanStartIdx = maskingConfig.protectLatestTurn