@gaunt-sloth/core 2.0.0-beta.4 → 2.0.0-beta.6

package/dist/core/contextWindow.js

@@ -0,0 +1,256 @@
+/**
+ * @packageDocumentation
+ * EXT-160 — **how many tokens the model in front of us will actually accept.**
+ *
+ * The pre-call context guard needs one number: the window, in tokens. This module resolves it, and
+ * its contract is the part that matters — **`null` means "unknown", and an unknown window never
+ * triggers anything.** A guard that guesses a window is worse than no guard: LangChain's own
+ * overflow fallback guesses 4097 for anything it does not recognise, which on a 262144-token local
+ * model would compact a conversation that had all the room in the world. So every source here
+ * either knows or says it does not.
+ *
+ * The source is **injectable and per-provider**, and there are three of them, tried in a fixed
+ * order by {@link resolveContextWindow}:
+ *
+ * 1. **ollama** — the number this session will actually put on the request (`num_ctx`), capped by
+ *    the model's own `context_length`. Ollama is the only provider that cannot report an overflow
+ *    at all: it silently drops the oldest tokens to fit and answers from the remainder, so knowing
+ *    the number beforehand is the only defence.
+ * 2. **models.dev** ([[EXT-161]]) — the cloud catalog's `limit.context`, read through the
+ *    cache-first slice `providers/modelCatalog.ts` already maintains.
+ * 3. **the LangChain profile** ([[EXT-161]]) — `llm.profile.maxInputTokens`, a backstop.
+ *
+ * **models.dev outranks the profile, and the order is a ruling rather than a preference.** The
+ * profile is a table compiled into a provider package, so it moves only when that package is
+ * republished and we bump it, while the catalog refreshes on a 24h TTL. That makes a profile
+ * **wrong as well as absent**: measured on this repo's pinned packages, `deepseek-chat` reports a
+ * 1,000,000-token window from `@langchain/deepseek`'s own table. Wrong-and-confident is the failure
+ * this order avoids — an overstated window means no preventive compaction at all, which is exactly
+ * the case the reactive seam then has to catch.
+ *
+ * **A model none of the three knows resolves to `null`, and `null` triggers nothing.** There is
+ * deliberately no default anywhere in this chain: LangChain's own overflow fallback guesses 4097
+ * for an unrecognised model, which on a 262144-token local model would compact a conversation that
+ * had all the room in the world, and on an unknown cloud model would compact at roughly 3.3k tokens
+ * with nothing on screen to say why.
+ */
+import { debugLog } from '#src/utils/debugUtils.js';
+import { getProviderCatalog, } from '#src/providers/modelCatalog.js';
+/**
+ * GS2-59 — default context window (`num_ctx`) for Ollama models. Ollama's OWN default is 4096, but
+ * gaunt-sloth's agentic prompt (system + full lean toolset + a tool result) already lands ~4000
+ * tokens; at 4096 a thinking model (e.g. gemma4:31b) spends its entire remaining budget on the
+ * reasoning field and emits EMPTY `content` on the turn after a tool executes — the GS2-59
+ * blank-answer regression. The OpenAI-compat `/v1` shim IGNORES `num_ctx`; the native `/api/chat`
+ * path honors it.
+ *
+ * 16384 is chosen as the largest window that is BOTH safely above the ~4000-token starvation point
+ * (4× headroom for reasoning + a few tool results) AND fits constrained consumer VRAM: Ollama
+ * preallocates the KV cache at `num_ctx`, so on a box where a large model already spills partly to
+ * CPU (e.g. a 19GB model on ~18GB of GPU), a 32768 cache tips the GPU allocation into an
+ * out-of-memory error. 16384 was verified live to run the agentic tool→synthesis turn on such a
+ * box; 32768 OOM'd it. Overridable per config via `llm.numCtx` — raise it if you have the VRAM and
+ * run long sessions, lower it on very tight hardware. NOTE: a per-request `num_ctx` overrides the
+ * daemon's `OLLAMA_CONTEXT_LENGTH`, so a user who tuned their server window higher should set
+ * `llm.numCtx` to match rather than rely on the server default.
+ *
+ * It lives here rather than in the provider module because two things now need it — the client the
+ * provider builds and the guard that has to know what that client will send — and a second copy is
+ * how the guard would come to reason about a window the request does not use.
+ */
+export const DEFAULT_OLLAMA_NUM_CTX = 16384;
+/** How long the daemon gets to answer `/api/show` before the cap is treated as unknown. */
+const SHOW_TIMEOUT_MS = 3000;
+/** A source that never knows — the honest answer for every provider no source is wired for. */
+export const UNKNOWN_CONTEXT_WINDOW = async () => null;
+/** Whether a resolved chat model is the native `ChatOllama` client (`_llmType()` is `'ollama'`). */
+function isOllamaModel(llm) {
+    try {
+        const type = llm?._llmType?.();
+        return type === 'ollama';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The model's own maximum from the daemon: `/api/show` reports `model_info` keyed by architecture,
+ * e.g. `gemma4.context_length`. Returns `null` on any failure — no daemon, a model the daemon does
+ * not have, a timeout, a response shaped differently by a future ollama — because a cap we could
+ * not read is not a cap of zero.
+ */
+async function readOllamaModelCap(baseUrl, model) {
+    try {
+        const response = await fetch(`${baseUrl.replace(/\/+$/, '')}/api/show`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ model }),
+            signal: AbortSignal.timeout(SHOW_TIMEOUT_MS),
+        });
+        if (!response.ok)
+            return null;
+        const body = (await response.json());
+        const info = body?.model_info;
+        if (!info || typeof info !== 'object')
+            return null;
+        // Prefer the architecture the daemon itself names; fall back to any `*.context_length` key so a
+        // model whose `general.architecture` is missing still reports its window.
+        const architecture = info['general.architecture'];
+        const keys = typeof architecture === 'string' && architecture.length > 0
+            ? [`${architecture}.context_length`]
+            : Object.keys(info).filter((key) => key.endsWith('.context_length'));
+        for (const key of keys) {
+            const value = info[key];
+            if (typeof value === 'number' && Number.isFinite(value) && value > 0)
+                return value;
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * **The ollama window: what we send, capped by what the model can hold.**
+ *
+ * The effective window is `numCtx` — the number gaunt-sloth puts on every native `/api/chat`
+ * request, which overrides the daemon's own `OLLAMA_CONTEXT_LENGTH` — and never the daemon default,
+ * because the request is what decides. It is then capped by the model's own `context_length` from
+ * `/api/show`: asking for more than the model has does not buy more room, so guarding against the
+ * larger number would let exactly the truncation this guard exists to prevent happen anyway.
+ *
+ * **Fail-soft in one direction only.** No daemon, a slow daemon, an unreadable answer — the
+ * configured number stands, because that is still the number the request will carry. Nothing here
+ * throws, and nothing here degrades a known window to unknown.
+ */
+export function createOllamaContextWindowSource(llm) {
+    const configured = typeof llm.numCtx === 'number' && llm.numCtx > 0 ? llm.numCtx : undefined;
+    // `providers/ollama.ts` always sets `numCtx`, so the default below is reached only by a chat model
+    // a JS config built by hand.
+    const requested = configured ?? DEFAULT_OLLAMA_NUM_CTX;
+    const baseUrl = typeof llm.baseUrl === 'string' ? llm.baseUrl : undefined;
+    const model = typeof llm.model === 'string' ? llm.model : undefined;
+    // Memoised: the window cannot change during a session, and the guard runs before EVERY model
+    // call. A per-call `/api/show` would put a network round trip in front of each one. Held as the
+    // PROMISE so concurrent calls share the one request rather than racing to make several.
+    let pending;
+    return async () => {
+        if (!baseUrl || !model)
+            return requested;
+        pending ??= readOllamaModelCap(baseUrl, model);
+        const cap = await pending;
+        if (cap === null)
+            return requested;
+        const effective = Math.min(requested, cap);
+        if (effective !== requested) {
+            debugLog(`Ollama context window: requested num_ctx ${requested} exceeds ${model}'s own ` +
+                `${cap}; guarding against ${effective}.`);
+        }
+        return effective;
+    };
+}
+/** How each origin is described to a user, in a sentence that says where to go to change it. */
+export const CONTEXT_WINDOW_ORIGIN_LABELS = {
+    ollama: "this session's num_ctx, capped by the model's own context length",
+    'models.dev': 'the models.dev catalog',
+    profile: "the provider package's built-in model profile",
+    unknown: 'nowhere — no source knows this model, so nothing is compacted preventively',
+};
+/**
+ * The model's window as the LangChain provider package declares it: `llm.profile.maxInputTokens`.
+ *
+ * A getter on `BaseLanguageModel` that the base class answers with `{}` and each provider package
+ * overrides, so an id its table has never heard of yields `undefined` rather than an error —
+ * measured: `gpt-4o-mini` gives 128000 and `mistralai/mistral-7b-instruct` gives nothing. Wrapped
+ * in a `try` because it is a getter on someone else's object and a throw here would take down a
+ * resolution that has a perfectly good answer to fall back to.
+ */
+export function readProfileContextWindow(llm) {
+    try {
+        const profile = llm?.profile;
+        const max = profile?.maxInputTokens;
+        return typeof max === 'number' && Number.isFinite(max) && max > 0 ? max : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * **The one place a model is matched to a context window.** Tries ollama, then models.dev, then the
+ * LangChain profile, and answers `{ tokens: null, origin: 'unknown' }` when none of them knows.
+ *
+ * **There is deliberately no `?? DEFAULT` anywhere on this path.** One fallback turns every unknown
+ * window into a confident wrong number, which is the 4097 failure this file opens by naming.
+ *
+ * The whole resolution is memoised as a PROMISE, for the reason the ollama source already gives:
+ * this runs before every model call, the answer cannot change during a session, and holding the
+ * promise rather than the value means concurrent calls share one catalog read instead of racing to
+ * make several.
+ */
+export function resolveContextWindow(llm, options = {}) {
+    const ollamaSource = isOllamaModel(llm) ? createOllamaContextWindowSource(llm) : null;
+    const catalogReader = options.catalogReader ?? getProviderCatalog;
+    const profileReader = options.profileReader ?? readProfileContextWindow;
+    const providerId = options.providerId?.trim();
+    const modelId = options.modelId?.trim();
+    let pending;
+    const resolve = async () => {
+        // 1. Ollama — the number the request will actually carry. It is asked first and not merely
+        //    preferred: models.dev deliberately has no ollama entry (local models have no catalog
+        //    row), so for ollama there is nothing below this to fall through to.
+        if (ollamaSource) {
+            try {
+                const tokens = await ollamaSource();
+                if (tokens !== null && Number.isFinite(tokens) && tokens > 0) {
+                    return { tokens, origin: 'ollama' };
+                }
+            }
+            catch {
+                /* the ollama source is documented never to throw; a stub still might */
+            }
+        }
+        // 2. models.dev — RULED to outrank the profile. See the module docblock for why.
+        if (providerId && modelId) {
+            try {
+                const catalog = await catalogReader(providerId, {
+                    cacheOnly: true,
+                    ...options.catalogOptions,
+                });
+                const context = catalog?.models?.[modelId]?.limit?.context;
+                if (typeof context === 'number' && Number.isFinite(context) && context > 0) {
+                    return { tokens: context, origin: 'models.dev' };
+                }
+            }
+            catch {
+                // `getProviderCatalog` never throws by contract (catalog availability must never block a
+                // model), so this catches an injected stub only — but a resolution that fell over here
+                // would take the profile backstop down with it, which is the opposite of degrading well.
+            }
+        }
+        // 3. The profile — a backstop, recorded as such so a wrong threshold is diagnosable.
+        try {
+            const profile = profileReader(llm);
+            if (profile !== null && Number.isFinite(profile) && profile > 0) {
+                return { tokens: profile, origin: 'profile' };
+            }
+        }
+        catch {
+            /* see readProfileContextWindow: someone else's getter */
+        }
+        return { tokens: null, origin: 'unknown' };
+    };
+    const read = () => (pending ??= resolve());
+    return { read, source: async () => (await read()).tokens };
+}
+/**
+ * The window as a bare number, for a caller that does not need the provenance.
+ *
+ * A thin wrapper over {@link resolveContextWindow} rather than a second implementation, so the two
+ * cannot answer differently. With no options it consults only the sources that need no
+ * configuration — ollama and the profile — which is why a plain object with neither still answers
+ * `null`.
+ */
+export function resolveContextWindowSource(llm, options = {}) {
+    return resolveContextWindow(llm, options).source;
+}
+//# sourceMappingURL=contextWindow.js.map

package/dist/core/contextWindow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextWindow.js","sourceRoot":"","sources":["../../src/core/contextWindow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACpD,OAAO,EACL,kBAAkB,GAGnB,MAAM,gCAAgC,CAAC;AAGxC;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAE5C,2FAA2F;AAC3F,MAAM,eAAe,GAAG,IAAI,CAAC;AAU7B,+FAA+F;AAC/F,MAAM,CAAC,MAAM,sBAAsB,GAAwB,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC;AAgB5E,oGAAoG;AACpG,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAI,GAAuB,EAAE,QAAQ,EAAE,EAAE,CAAC;QACpD,OAAO,IAAI,KAAK,QAAQ,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAe,EAAE,KAAa;IAC9D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;YAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA6C,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,EAAE,UAAU,CAAC;QAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnD,gGAAgG;QAChG,0EAA0E;QAC1E,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAClD,MAAM,IAAI,GACR,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;YACzD,CAAC,CAAC,CAAC,GAAG,YAAY,iBAAiB,CAAC;YACpC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACzE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QACrF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,+BAA+B,CAAC,GAAoB;IAClE,MAAM,UAAU,GAAG,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,mGAAmG;IACnG,6BAA6B;IAC7B,MAAM,SAAS,GAAG,UAAU,IAAI,sBAAsB,CAAC;IACvD,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,6FAA6F;IAC7F,gGAAgG;IAChG,wFAAwF;IACxF,IAAI,OAA2C,CAAC;IAChD,OAAO,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,KAAK,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC;QAC1B,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,QAAQ,CACN,4CAA4C,SAAS,YAAY,KAAK,SAAS;gBAC7E,GAAG,GAAG,sBAAsB,SAAS,GAAG,CAC3C,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAYD,gGAAgG;AAChG,MAAM,CAAC,MAAM,4BAA4B,GAAkD;IACzF,MAAM,EAAE,kEAAkE;IAC1E,YAAY,EAAE,wBAAwB;IACtC,OAAO,EAAE,+CAA+C;IACxD,OAAO,EAAE,4EAA4E;CACtF,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAI,GAA8D,EAAE,OAAO,CAAC;QACzF,MAAM,GAAG,GAAG,OAAO,EAAE,cAAc,CAAC;QACpC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAkDD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAY,EACZ,OAAO,GAAmC,EAAE;IAE5C,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,kBAAkB,CAAC;IAClE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,wBAAwB,CAAC;IACxE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,IAAI,OAAkD,CAAC;IAEvD,MAAM,OAAO,GAAG,KAAK,IAAmC,EAAE;QACxD,2FAA2F;QAC3F,0FAA0F;QAC1F,yEAAyE;QACzE,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;gBACpC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wEAAwE;YAC1E,CAAC;QACH,CAAC;QACD,iFAAiF;QACjF,IAAI,UAAU,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAwB,EAAE;oBAC5D,SAAS,EAAE,IAAI;oBACf,GAAG,OAAO,CAAC,cAAc;iBAC1B,CAAC,CAAC;gBACH,MAAM,OAAO,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC;gBAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBAC3E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yFAAyF;gBACzF,uFAAuF;gBACvF,yFAAyF;YAC3F,CAAC;QACH,CAAC;QACD,qFAAqF;QACrF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC7C,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAkC,EAAE,CAAC,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC;IAC1E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CACxC,GAAY,EACZ,OAAO,GAAmC,EAAE;IAE5C,OAAO,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC"}

package/dist/core/exitOutputChannel.d.ts

@@ -0,0 +1,51 @@
+/**
+ * @module exitOutputChannel
+ * TUI-C56 — the queue for output that must OUTLIVE the session's own screen.
+ *
+ * TUI-C48 put the whole interactive session in the terminal's alternate screen. Ink treats
+ * alternate-screen teardown output as disposable by design: on unmount it restores the primary
+ * buffer without replaying prior frames, so everything the session painted — every notice, every
+ * answer — goes with the alternate buffer when the session ends. That is exactly what the
+ * full-screen surface is for, and it is the right default for a conversation.
+ *
+ * It is the wrong default for the handful of things a user must still have AFTER the session:
+ * a path they now have to go and open. The first of those is the `/debug-dump` archive, whose
+ * in-frame notice is genuinely useful mid-session and completely gone the moment the user exits —
+ * leaving them holding a diagnostic bundle they cannot find, with nothing having errored.
+ *
+ * So this is a channel, not a special case: a producer anywhere in the codebase can DEFER one
+ * block of text, and the surface that owns the terminal drains it once the terminal is its
+ * owner's again. Two halves, deliberately split:
+ *
+ * - **This module is the queue and nothing else.** No stream, no formatting, no policy about
+ *   when a line is worth printing. That keeps it surface-agnostic and directly testable.
+ * - **The surface owns the write.** Only the surface knows when its terminal is back (for the
+ *   Ink TUI: after `waitUntilExit()` has resolved, which is after Ink has left the alternate
+ *   screen) and whether writing is appropriate at all (a piped run must not get an extra line
+ *   its caller did not ask for). See `writeDeferredExitOutput` in the TUI session module.
+ *
+ * A surface whose output already survives its own exit — the readline (`--no-tui`) session, which
+ * never owned an alternate screen — simply never drains. Deferring is then a no-op that costs one
+ * array entry and prints nothing, which is what keeps the producers surface-agnostic: `/debug-dump`
+ * is one command with one behaviour, and the two surfaces differ only in whether the re-print is
+ * needed at all.
+ */
+/**
+ * Defer one block of text until the surface hands the terminal back.
+ *
+ * The text should stand on its own: it lands on a restored screen with none of the session's
+ * framing around it and possibly a long scrollback above it, so a bare value with no label is not
+ * enough for a reader to know what they are looking at.
+ */
+export declare function deferExitOutput(text: string): void;
+/**
+ * Take everything deferred so far, emptying the queue. Draining is destructive so a second drain
+ * — a surface with more than one exit path reaching the drain twice — cannot double-print.
+ */
+export declare function drainExitOutput(): string[];
+/**
+ * Discard anything deferred without emitting it. A surface calls this as it starts, so a block
+ * deferred by something earlier in the same process can never surface at the end of a session
+ * that had nothing to do with it.
+ */
+export declare function clearExitOutput(): void;

package/dist/core/exitOutputChannel.js

@@ -0,0 +1,65 @@
+/**
+ * @module exitOutputChannel
+ * TUI-C56 — the queue for output that must OUTLIVE the session's own screen.
+ *
+ * TUI-C48 put the whole interactive session in the terminal's alternate screen. Ink treats
+ * alternate-screen teardown output as disposable by design: on unmount it restores the primary
+ * buffer without replaying prior frames, so everything the session painted — every notice, every
+ * answer — goes with the alternate buffer when the session ends. That is exactly what the
+ * full-screen surface is for, and it is the right default for a conversation.
+ *
+ * It is the wrong default for the handful of things a user must still have AFTER the session:
+ * a path they now have to go and open. The first of those is the `/debug-dump` archive, whose
+ * in-frame notice is genuinely useful mid-session and completely gone the moment the user exits —
+ * leaving them holding a diagnostic bundle they cannot find, with nothing having errored.
+ *
+ * So this is a channel, not a special case: a producer anywhere in the codebase can DEFER one
+ * block of text, and the surface that owns the terminal drains it once the terminal is its
+ * owner's again. Two halves, deliberately split:
+ *
+ * - **This module is the queue and nothing else.** No stream, no formatting, no policy about
+ *   when a line is worth printing. That keeps it surface-agnostic and directly testable.
+ * - **The surface owns the write.** Only the surface knows when its terminal is back (for the
+ *   Ink TUI: after `waitUntilExit()` has resolved, which is after Ink has left the alternate
+ *   screen) and whether writing is appropriate at all (a piped run must not get an extra line
+ *   its caller did not ask for). See `writeDeferredExitOutput` in the TUI session module.
+ *
+ * A surface whose output already survives its own exit — the readline (`--no-tui`) session, which
+ * never owned an alternate screen — simply never drains. Deferring is then a no-op that costs one
+ * array entry and prints nothing, which is what keeps the producers surface-agnostic: `/debug-dump`
+ * is one command with one behaviour, and the two surfaces differ only in whether the re-print is
+ * needed at all.
+ */
+/**
+ * Blocks of deferred text, in the order they were deferred. Module-level, like the single
+ * subscriber in `toolOutputChannel`: one process hosts at most one interactive session, and no
+ * server surface reaches a producer (the slash-command registry is built only by the two
+ * interactive sessions).
+ */
+const deferred = [];
+/**
+ * Defer one block of text until the surface hands the terminal back.
+ *
+ * The text should stand on its own: it lands on a restored screen with none of the session's
+ * framing around it and possibly a long scrollback above it, so a bare value with no label is not
+ * enough for a reader to know what they are looking at.
+ */
+export function deferExitOutput(text) {
+    deferred.push(text);
+}
+/**
+ * Take everything deferred so far, emptying the queue. Draining is destructive so a second drain
+ * — a surface with more than one exit path reaching the drain twice — cannot double-print.
+ */
+export function drainExitOutput() {
+    return deferred.splice(0, deferred.length);
+}
+/**
+ * Discard anything deferred without emitting it. A surface calls this as it starts, so a block
+ * deferred by something earlier in the same process can never surface at the end of a session
+ * that had nothing to do with it.
+ */
+export function clearExitOutput() {
+    deferred.length = 0;
+}
+//# sourceMappingURL=exitOutputChannel.js.map

package/dist/core/exitOutputChannel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exitOutputChannel.js","sourceRoot":"","sources":["../../src/core/exitOutputChannel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;GAKG;AACH,MAAM,QAAQ,GAAa,EAAE,CAAC;AAE9B;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AACtB,CAAC"}

package/dist/core/refusal.d.ts

@@ -30,8 +30,15 @@ import type { GthTerminationClassification } from '#src/core/terminationReason.j
 /** One detected refusal, normalized across providers. */
 export interface RefusalInfo {
     /** Best-effort provider family the signal came from (for logging / the surfaced message). */
-    provider: 'openai' | 'anthropic' | 'bedrock' | 'unknown';
-    /** The raw stop/finish reason token that flagged the refusal (e.g. `content_filter`). */
+    provider: 'openai' | 'anthropic' | 'bedrock' | 'google' | 'unknown';
+    /**
+     * The stop/finish reason token that flagged the refusal, lower-cased (e.g. `content_filter`).
+     *
+     * Lower-cased rather than raw because the token's case is a per-provider spelling, not a fact:
+     * Gemini shouts `SAFETY` where OpenAI writes `content_filter`, and this value is matched, logged
+     * and carried into the taxonomy's `detail` — the same normalization
+     * {@link detectOutputTruncation} already applies to its own token.
+     */
     reason: string;
     /** Any model-provided explanation text (empty string when the refusal carried none). */
     explanation: string;
@@ -42,6 +49,9 @@ export interface RefusalInfo {
  * reason indicates a content-policy refusal, else `null`. Defensive: any non-message / unexpected
  * shape yields `null`, so a normal turn is never mistaken for a refusal.
  *
+ * Reasons are compared lower-cased, because the case is a provider's spelling and not a fact —
+ * Gemini shouts `SAFETY` where OpenAI writes `content_filter`.
+ *
  * Covered shapes:
  *  - OpenAI-family `finish_reason: 'content_filter'` (also under `additional_kwargs`).
  *  - Anthropic `stop_reason: 'refusal'`.
@@ -51,6 +61,11 @@ export interface RefusalInfo {
  *  - Bedrock Converse content filter: `stopReason`/`stop_reason`/`finish_reason` ===
  *    `'content_filtered'` (EXT-41 — a distinct `StopReason` enum value from `guardrail_intervened`
  *    that was previously mapped to `null`, i.e. a silent empty turn / false negative).
+ *  - Gemini's safety reasons ({@link GEMINI_REFUSAL_REASONS}) under **camelCase `finishReason`**
+ *    (CFG-41). That key is the half that has to come first: `@langchain/google`'s streamed chunk
+ *    puts `model_provider` and nothing else in `response_metadata` and the reason only in
+ *    `additional_kwargs.finishReason`, so a token added without the key would sit on a branch that
+ *    never ran for Gemini.
  */
 export declare function detectRefusal(message: unknown): RefusalInfo | null;
 /**

package/dist/core/refusal.js

@@ -66,12 +66,57 @@ function extractRefusalText(message) {
         return refusalField.trim();
     return '';
 }
+/**
+ * The finish reasons Gemini uses when its safety system declined, lower-cased.
+ *
+ * Taken from `@langchain/google`'s own `mapGeminiFinishReason` — every reason that package
+ * classifies as a `content_filter`, rather than the two a bug report happened to name. The set is
+ * Gemini's, so nothing here can widen another provider's detection.
+ *
+ * Both spellings of the multi-word members are listed because the provider lists both.
+ */
+const GEMINI_REFUSAL_REASONS = new Set([
+    'safety',
+    'recitation',
+    'language',
+    'blocklist',
+    'prohibited_content',
+    'prohibited-content',
+    'spii',
+    'image_safety',
+    'image-safety',
+    'image_prohibited_content',
+    'image-prohibited-content',
+    'image_recitation',
+    'image-recitation',
+]);
+/**
+ * The first string value among `keys` × `sources`, lower-cased — key-major, so an earlier key wins
+ * over an earlier source, else `undefined`.
+ *
+ * Skipping non-strings rather than stopping at the first *present* value is deliberate: a provider
+ * that writes a structured value under one spelling must not hide the plain token another spelling
+ * carries. Lower-casing here is what lets every comparison below be written once, in one case.
+ */
+function firstReasonToken(sources, keys) {
+    for (const key of keys) {
+        for (const source of sources) {
+            const value = readField(source, key);
+            if (typeof value === 'string' && value.length > 0)
+                return value.toLowerCase();
+        }
+    }
+    return undefined;
+}
 /**
  * Inspect a finished model message (an `AIMessage` / `AIMessageChunk`, or any object exposing
  * `response_metadata` / `additional_kwargs`) and return a {@link RefusalInfo} when its stop/finish
  * reason indicates a content-policy refusal, else `null`. Defensive: any non-message / unexpected
  * shape yields `null`, so a normal turn is never mistaken for a refusal.
  *
+ * Reasons are compared lower-cased, because the case is a provider's spelling and not a fact —
+ * Gemini shouts `SAFETY` where OpenAI writes `content_filter`.
+ *
  * Covered shapes:
  *  - OpenAI-family `finish_reason: 'content_filter'` (also under `additional_kwargs`).
  *  - Anthropic `stop_reason: 'refusal'`.
@@ -81,20 +126,28 @@ function extractRefusalText(message) {
  *  - Bedrock Converse content filter: `stopReason`/`stop_reason`/`finish_reason` ===
  *    `'content_filtered'` (EXT-41 — a distinct `StopReason` enum value from `guardrail_intervened`
  *    that was previously mapped to `null`, i.e. a silent empty turn / false negative).
+ *  - Gemini's safety reasons ({@link GEMINI_REFUSAL_REASONS}) under **camelCase `finishReason`**
+ *    (CFG-41). That key is the half that has to come first: `@langchain/google`'s streamed chunk
+ *    puts `model_provider` and nothing else in `response_metadata` and the reason only in
+ *    `additional_kwargs.finishReason`, so a token added without the key would sit on a branch that
+ *    never ran for Gemini.
  */
 export function detectRefusal(message) {
     if (!message || typeof message !== 'object')
         return null;
     const meta = readField(message, 'response_metadata');
     const kwargs = readField(message, 'additional_kwargs');
-    // Gather the stop/finish reason from every place providers surface it.
-    const finishReason = readField(meta, 'finish_reason') ?? readField(kwargs, 'finish_reason') ?? undefined;
-    const stopReasonSnake = readField(meta, 'stop_reason') ?? readField(kwargs, 'stop_reason') ?? undefined;
-    const stopReasonCamel = readField(meta, 'stopReason') ?? readField(kwargs, 'stopReason') ?? undefined;
-    const asString = (v) => (typeof v === 'string' ? v : undefined);
-    const finish = asString(finishReason);
-    const stopSnake = asString(stopReasonSnake);
-    const stopCamel = asString(stopReasonCamel);
+    const sources = [meta, kwargs];
+    // Gather the stop/finish reason from every place providers surface it, in both spellings.
+    const finish = firstReasonToken(sources, ['finish_reason', 'finishReason']);
+    // The two stop spellings are gathered as SEPARATE values and every branch below tests both, so
+    // each spelling is independently sufficient — which is what the covered-shapes list above claims.
+    // Collapsing them into one first-match value looks equivalent and is not: a benign `stop_reason`
+    // in the same bag would then hide a refusing `stopReason`, turning a detected refusal into a
+    // silent `null`. A false negative is the one direction this detector must never acquire, so the
+    // three lines a collapse saves are not for sale.
+    const stopSnake = firstReasonToken(sources, ['stop_reason']);
+    const stopCamel = firstReasonToken(sources, ['stopReason']);
     const explanation = extractRefusalText(message);
     // OpenAI-family content filter.
     if (finish === 'content_filter') {
@@ -115,17 +168,22 @@ export function detectRefusal(message) {
     // EXT-41 — Bedrock Converse content filter. A distinct `StopReason` enum value from
     // `guardrail_intervened` (both live in the same AWS Converse `StopReason` enum); previously
     // unmapped, so a content-filtered turn returned `null` → the silent empty-turn false negative.
-    if (stopCamel === 'content_filtered' ||
-        stopSnake === 'content_filtered' ||
+    if (stopSnake === 'content_filtered' ||
+        stopCamel === 'content_filtered' ||
         finish === 'content_filtered') {
         return { provider: 'bedrock', reason: 'content_filtered', explanation };
     }
+    // CFG-41 — Gemini's safety system. Keyed on the finish reason only: these tokens are Gemini's
+    // own, and Gemini never spells the reason as a stop reason.
+    if (finish !== undefined && GEMINI_REFUSAL_REASONS.has(finish)) {
+        return { provider: 'google', reason: finish, explanation };
+    }
     return null;
 }
 /**
  * The provider spellings of "the answer hit the output cap", lower-cased.
  *
- * The same four places {@link detectRefusal} reads carry this one too, spelled per family: OpenAI's
+ * The places {@link detectRefusal} reads carry this one too, spelled per family: OpenAI's
  * `finish_reason: 'length'`, Anthropic's and Bedrock's `stop_reason: 'max_tokens'`, Gemini's
  * `finishReason: 'MAX_TOKENS'`, Ollama's `done_reason: 'length'`. LangChain normalizes none of it.
  *
@@ -141,9 +199,17 @@ const TRUNCATION_REASONS = new Set([
     'model_length',
 ]);
 /**
- * Every stop/finish reason token a message carries, lower-cased, from both `response_metadata` and
- * `additional_kwargs` and in both snake and camel case — the same four places {@link detectRefusal}
- * looks, so the two detections can never come to disagree about where the metadata lives.
+ * Every stop/finish reason token a message carries, lower-cased, from `response_metadata`,
+ * `additional_kwargs` and the message itself, in both snake and camel case.
+ *
+ * This reader is deliberately **wider** than {@link detectRefusal}'s, and the two differences are
+ * the point rather than drift. It also takes `done_reason` (Ollama's spelling, which carries a
+ * truncation and never a refusal) and the message's own top level, because a truncation is
+ * classified from whatever token is present; a refusal is claimed from a token whose *meaning* is
+ * known, so widening its reader would start reporting refusals a provider never declared. What the
+ * two must never disagree on is the **spelling** of a key, which is what CFG-41 cost: camelCase
+ * `finishReason` was read here and not there, so a Gemini refusal was truncation-classifiable and
+ * refusal-invisible at the same time.
  */
 function stopReasonTokens(message) {
     const meta = readField(message, 'response_metadata');

package/dist/core/refusal.js.map

@@ -1 +1 @@
-{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../src/core/refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAapE,iGAAiG;AACjG,SAAS,SAAS,CAAC,MAAe,EAAE,GAAW;IAC7C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAQ,MAAkC,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,iGAAiG;AACjG,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACpF,6FAA6F;IAC7F,iGAAiG;IACjG,6FAA6F;IAC7F,yBAAyB;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAI,oBAAoB,CAAC,OAAO,CAAe;aACtD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC,CAAC;aACD,IAAI,CAAC,EAAE,CAAC;aACR,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACnC,CAAC;IACD,mEAAmE;IACnE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1F,yFAAyF;IACzF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnF,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACpE,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAEvD,uEAAuE;IACvE,MAAM,YAAY,GAChB,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,SAAS,CAAC;IACtF,MAAM,eAAe,GACnB,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC;IAClF,MAAM,eAAe,GACnB,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,SAAS,CAAC;IAEhF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE5C,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEhD,gCAAgC;IAChC,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC;IACvE,CAAC;IACD,iCAAiC;IACjC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACnE,CAAC;IACD,gGAAgG;IAChG,IACE,SAAS,KAAK,sBAAsB;QACpC,SAAS,KAAK,sBAAsB;QACpC,MAAM,KAAK,sBAAsB;QACjC,SAAS,CAAC,MAAM,EAAE,gCAAgC,CAAC,KAAK,YAAY;QACpE,SAAS,CAAC,IAAI,EAAE,gCAAgC,CAAC,KAAK,YAAY,EAClE,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC;IAC9E,CAAC;IACD,oFAAoF;IACpF,4FAA4F;IAC5F,+FAA+F;IAC/F,IACE,SAAS,KAAK,kBAAkB;QAChC,SAAS,KAAK,kBAAkB;QAChC,MAAM,KAAK,kBAAkB,EAC7B,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;CACf,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,OAAgB;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;QAChG,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAiB;IAC/C,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AACvF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,MAAM,IAAI,GACR,gFAAgF;QAChF,gEAAgE,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW;QAC7B,CAAC,CAAC,wBAAwB,IAAI,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,oCAAoC,CAAC;IACzC,MAAM,IAAI,GACR,0FAA0F;QAC1F,wCAAwC,CAAC;IAC3C,OAAO,GAAG,IAAI,OAAO,MAAM,OAAO,IAAI,EAAE,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../src/core/refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAoBpE,iGAAiG;AACjG,SAAS,SAAS,CAAC,MAAe,EAAE,GAAW;IAC7C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAQ,MAAkC,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,iGAAiG;AACjG,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACpF,6FAA6F;IAC7F,iGAAiG;IACjG,6FAA6F;IAC7F,yBAAyB;IACzB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAI,oBAAoB,CAAC,OAAO,CAAe;aACtD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC,CAAC;aACD,IAAI,CAAC,EAAE,CAAC;aACR,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACnC,CAAC;IACD,mEAAmE;IACnE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1F,yFAAyF;IACzF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnF,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACpE,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC;IAC1D,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,WAAW;IACX,oBAAoB;IACpB,oBAAoB;IACpB,MAAM;IACN,cAAc;IACd,cAAc;IACd,0BAA0B;IAC1B,0BAA0B;IAC1B,kBAAkB;IAClB,kBAAkB;CACnB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAS,gBAAgB,CACvB,OAA2B,EAC3B,IAAuB;IAEvB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/B,0FAA0F;IAC1F,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;IAC5E,+FAA+F;IAC/F,kGAAkG;IAClG,iGAAiG;IACjG,6FAA6F;IAC7F,gGAAgG;IAChG,iDAAiD;IACjD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAE5D,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEhD,gCAAgC;IAChC,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC;IACvE,CAAC;IACD,iCAAiC;IACjC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACnE,CAAC;IACD,gGAAgG;IAChG,IACE,SAAS,KAAK,sBAAsB;QACpC,SAAS,KAAK,sBAAsB;QACpC,MAAM,KAAK,sBAAsB;QACjC,SAAS,CAAC,MAAM,EAAE,gCAAgC,CAAC,KAAK,YAAY;QACpE,SAAS,CAAC,IAAI,EAAE,gCAAgC,CAAC,KAAK,YAAY,EAClE,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC;IAC9E,CAAC;IACD,oFAAoF;IACpF,4FAA4F;IAC5F,+FAA+F;IAC/F,IACE,SAAS,KAAK,kBAAkB;QAChC,SAAS,KAAK,kBAAkB;QAChC,MAAM,KAAK,kBAAkB,EAC7B,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;IAC1E,CAAC;IACD,8FAA8F;IAC9F,4DAA4D;IAC5D,IAAI,MAAM,KAAK,SAAS,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC7D,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;CACf,CAAC,CAAC;AAEH;;;;;;;;;;;;GAYG;AACH,SAAS,gBAAgB,CAAC,OAAgB;IACxC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,CAAC,EAAE,CAAC;QAChG,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACzD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,OAAO;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAiB;IAC/C,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;AACvF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,MAAM,IAAI,GACR,gFAAgF;QAChF,gEAAgE,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW;QAC7B,CAAC,CAAC,wBAAwB,IAAI,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,oCAAoC,CAAC;IACzC,MAAM,IAAI,GACR,0FAA0F;QAC1F,wCAAwC,CAAC;IAC3C,OAAO,GAAG,IAAI,OAAO,MAAM,OAAO,IAAI,EAAE,CAAC;AAC3C,CAAC"}

package/dist/core/runStats.d.ts

@@ -1,7 +1,7 @@
 /**
  * @packageDocumentation
  * GS2-16 — pure, fail-soft helpers that harvest per-run analytics (token usage + invoked tool
- * names) from LangChain messages, so the opt-in history recorder can populate `gth insights`
+ * names) from LangChain messages, so the local history recorder can populate `gth insights`
  * with real numbers instead of zeros.
  *
  * The extraction is deliberately structural and defensive (duck-typed reads guarded by a

package/dist/core/terminationNotice.d.ts

@@ -107,5 +107,13 @@ export declare function terminationLogLine(reason: GthTerminationReason | null):
  *
  * Fail-soft in the strongest sense: explaining a failure must never become a second failure, so
  * every path here is wrapped and a throw is swallowed.
+ *
+ * **The whole notice, on one stream, at any console level.** Written through
+ * {@link displayNotice}, so the title and the body cannot land on different streams and cannot be
+ * filtered apart. `gate: 'always'` because {@link terminationCode} is the token a user quotes in a
+ * bug report and there is nowhere else they will find it: the session log is off by default and the
+ * debug log is not what anyone reads. A notice they cannot recover is not a notice worth quieting —
+ * and only a run that ended abnormally reaches here at all, since
+ * {@link shouldAnnounceTermination} declines the ordinary ones.
  */
 export declare function displayTermination(reason: GthTerminationReason | null): boolean;