@jsonstudio/llms 0.6.1739 → 0.6.1890

package/dist/conversion/hub/pipeline/hub-pipeline.js

@@ -1,6 +1,7 @@
 import { Readable } from 'node:stream';
 import { isJsonObject, jsonClone } from '../types/json.js';
 import { VirtualRouterEngine } from '../../../router/virtual-router/engine.js';
+import { parseRoutingInstructions } from '../../../router/virtual-router/routing-instructions.js';
 import { providerErrorCenter } from '../../../router/virtual-router/error-center.js';
 import { providerSuccessCenter } from '../../../router/virtual-router/success-center.js';
 import { defaultSseCodecRegistry } from '../../../sse/index.js';
@@ -108,6 +109,83 @@ function extractHubShadowCompareConfig(metadata) {
     }
     return { baselineMode: modeCandidate };
 }
+const PASSTHROUGH_CANONICAL_CHAT_KEYS = new Set([
+    'model',
+    'messages',
+    'tools',
+    'parameters',
+    'metadata',
+    'semantics',
+    'stream'
+]);
+function cloneJsonRecord(payload) {
+    try {
+        return jsonClone(payload);
+    }
+    catch {
+        return { ...payload };
+    }
+}
+function collectPassthroughTodoTopLevelKeys(payload) {
+    return Object.keys(payload)
+        .filter((key) => !PASSTHROUGH_CANONICAL_CHAT_KEYS.has(key))
+        .sort();
+}
+function buildPassthroughAudit(rawInbound, providerProtocol) {
+    return {
+        raw: {
+            inbound: cloneJsonRecord(rawInbound)
+        },
+        todo: {
+            inbound: {
+                unmappedTopLevelKeys: collectPassthroughTodoTopLevelKeys(rawInbound),
+                providerProtocol,
+                note: 'passthrough_mode_parse_record_only'
+            }
+        }
+    };
+}
+function annotatePassthroughGovernanceSkip(audit) {
+    const todo = audit.todo && typeof audit.todo === 'object' && !Array.isArray(audit.todo)
+        ? audit.todo
+        : (audit.todo = {});
+    todo.governance = {
+        skipped: true,
+        reason: 'process_mode_passthrough'
+    };
+}
+function attachPassthroughProviderInputAudit(audit, providerPayload, providerProtocol) {
+    const raw = audit.raw && typeof audit.raw === 'object' && !Array.isArray(audit.raw)
+        ? audit.raw
+        : (audit.raw = {});
+    raw.providerInput = cloneJsonRecord(providerPayload);
+    const todo = audit.todo && typeof audit.todo === 'object' && !Array.isArray(audit.todo)
+        ? audit.todo
+        : (audit.todo = {});
+    todo.outbound = {
+        unmappedTopLevelKeys: collectPassthroughTodoTopLevelKeys(providerPayload),
+        providerProtocol,
+        note: 'provider_payload_not_mapped_back_to_chat_semantics'
+    };
+}
+function hasInstructionRequestedPassthrough(messages) {
+    if (!Array.isArray(messages) || messages.length === 0) {
+        return false;
+    }
+    try {
+        const instructions = parseRoutingInstructions(messages);
+        return instructions.some((instruction) => instruction.processMode === 'passthrough');
+    }
+    catch {
+        return false;
+    }
+}
+function resolveActiveProcessMode(baseMode, messages) {
+    if (baseMode === 'passthrough') {
+        return 'passthrough';
+    }
+    return hasInstructionRequestedPassthrough(messages) ? 'passthrough' : 'chat';
+}
 export class HubPipeline {
     routerEngine;
     config;
@@ -277,6 +355,15 @@ export class HubPipeline {
         catch {
             // best-effort: do not block request handling due to metadata propagation failures
         }
+        const activeProcessMode = resolveActiveProcessMode(normalized.processMode, standardizedRequest.messages);
+        if (activeProcessMode !== normalized.processMode) {
+            normalized.processMode = activeProcessMode;
+            normalized.metadata = normalized.metadata || {};
+            normalized.metadata.processMode = activeProcessMode;
+        }
+        const passthroughAudit = activeProcessMode === 'passthrough'
+            ? buildPassthroughAudit(rawRequest, normalized.providerProtocol)
+            : undefined;
         const inboundEnd = Date.now();
         const nodeResults = [];
         nodeResults.push({
@@ -313,7 +400,7 @@ export class HubPipeline {
         }
         normalized.metadata = metaBase;
         let processedRequest;
-        if (normalized.processMode !== 'passthrough') {
+        if (activeProcessMode !== 'passthrough') {
             assertNoMappableSemanticsInMetadata(metaBase, 'chat_process.request.entry');
             const processResult = await runReqProcessStage1ToolGovernance({
                 request: standardizedRequest,
@@ -339,6 +426,20 @@ export class HubPipeline {
                 nodeResults.push(this.convertProcessNodeResult('chat_process.req.stage4.tool_governance', processResult.nodeResult));
             }
         }
+        else {
+            nodeResults.push({
+                id: 'chat_process.req.stage4.tool_governance',
+                success: true,
+                metadata: {
+                    node: 'chat_process.req.stage4.tool_governance',
+                    skipped: true,
+                    reason: 'process_mode_passthrough_parse_record_only'
+                }
+            });
+            if (passthroughAudit) {
+                annotatePassthroughGovernanceSkip(passthroughAudit);
+            }
+        }
         let workingRequest = processedRequest ?? standardizedRequest;
         // 使用与 VirtualRouter 一致的 tiktoken 计数逻辑，对标准化请求进行一次
         // 上下文 token 估算，供后续 usage 归一化与统计使用。
@@ -405,9 +506,15 @@ export class HubPipeline {
             stageRecorder: inboundRecorder
         });
         const stopMessageState = this.routerEngine.getStopMessageState(metadataInput);
-        if (stopMessageState && normalized.metadata && typeof normalized.metadata === 'object') {
+        const preCommandState = this.routerEngine.getPreCommandState(metadataInput);
+        if ((stopMessageState || preCommandState) && normalized.metadata && typeof normalized.metadata === 'object') {
             const rt = ensureRuntimeMetadata(normalized.metadata);
-            rt.stopMessageState = stopMessageState;
+            if (stopMessageState) {
+                rt.stopMessageState = stopMessageState;
+            }
+            if (preCommandState) {
+                rt.preCommandState = preCommandState;
+            }
         }
         // Emit virtual router hit log for debugging (orange [virtual-router] ...)
         try {
@@ -423,21 +530,15 @@ export class HubPipeline {
             // logging must not break routing
         }
         const outboundStream = this.resolveOutboundStreamIntent(routing.target?.streaming);
-        workingRequest = this.applyOutboundStreamPreference(workingRequest, outboundStream);
+        workingRequest = this.applyOutboundStreamPreference(workingRequest, outboundStream, activeProcessMode);
         const outboundAdapterContext = this.buildAdapterContext(normalized, routing.target);
         if (routing.target?.compatibilityProfile) {
             outboundAdapterContext.compatibilityProfile = routing.target.compatibilityProfile;
         }
         const outboundProtocol = outboundAdapterContext.providerProtocol;
-        const protocolSwitch = outboundProtocol !== normalized.providerProtocol;
-        const outboundHooks = protocolSwitch ? this.resolveProtocolHooks(outboundProtocol) : hooks;
-        if (!outboundHooks) {
-            throw new Error(`[HubPipeline] Unsupported provider protocol for hub pipeline: ${outboundProtocol}`);
-        }
-        const outboundSemanticMapper = protocolSwitch ? outboundHooks.createSemanticMapper() : semanticMapper;
-        const outboundFormatAdapter = protocolSwitch ? outboundHooks.createFormatAdapter() : formatAdapter;
-        const outboundContextMetadataKey = protocolSwitch ? outboundHooks.contextMetadataKey : hooks.contextMetadataKey;
-        const outboundContextSnapshot = protocolSwitch ? undefined : contextSnapshot;
+        if (activeProcessMode === 'passthrough' && outboundProtocol !== normalized.providerProtocol) {
+            throw new Error(`[HubPipeline] passthrough requires matching protocols: entry=${normalized.providerProtocol}, target=${outboundProtocol}`);
+        }
         // Snapshots must be grouped by entry endpoint (client-facing protocol), not by provider protocol.
         // Otherwise one request would be split across multiple folders (e.g. openai-responses + anthropic-messages),
         // which breaks codex-samples correlation.
@@ -446,83 +547,118 @@ export class HubPipeline {
         });
         const outboundStart = Date.now();
         let providerPayload;
-        const outboundStage1 = await runReqOutboundStage1SemanticMap({
-            request: workingRequest,
-            adapterContext: outboundAdapterContext,
-            semanticMapper: outboundSemanticMapper,
-            contextSnapshot: outboundContextSnapshot,
-            contextMetadataKey: outboundContextMetadataKey,
-            stageRecorder: outboundRecorder
-        });
-        let formattedPayload = await runReqOutboundStage2FormatBuild({
-            formatEnvelope: outboundStage1.formatEnvelope,
-            adapterContext: outboundAdapterContext,
-            formatAdapter: outboundFormatAdapter,
-            stageRecorder: outboundRecorder
-        });
-        formattedPayload = await runReqOutboundStage3Compat({
-            payload: formattedPayload,
-            adapterContext: outboundAdapterContext,
-            stageRecorder: outboundRecorder
-        });
         let shadowBaselineProviderPayload;
-        if (shadowCompareBaselineMode) {
-            const baselinePolicy = {
-                ...(effectivePolicy ?? {}),
-                mode: shadowCompareBaselineMode
-            };
-            // Compute a baseline provider payload in the *same execution*, without recording
-            // snapshots/diffs and without re-running the full pipeline. This avoids side effects
-            // (conversation store, followup captures, etc.) that a second execute() would trigger.
-            const baselineFormatted = typeof globalThis.structuredClone === 'function'
-                ? globalThis.structuredClone(formattedPayload)
-                : jsonClone(formattedPayload);
-            let baselinePayload = applyHubProviderOutboundPolicy({
-                policy: baselinePolicy,
+        if (activeProcessMode === 'passthrough') {
+            providerPayload = cloneJsonRecord(rawRequest);
+            if (typeof outboundStream === 'boolean') {
+                providerPayload.stream = outboundStream;
+            }
+            if (passthroughAudit) {
+                attachPassthroughProviderInputAudit(passthroughAudit, providerPayload, outboundProtocol);
+            }
+        }
+        else {
+            const protocolSwitch = outboundProtocol !== normalized.providerProtocol;
+            const outboundHooks = protocolSwitch ? this.resolveProtocolHooks(outboundProtocol) : hooks;
+            if (!outboundHooks) {
+                throw new Error(`[HubPipeline] Unsupported provider protocol for hub pipeline: ${outboundProtocol}`);
+            }
+            const outboundSemanticMapper = protocolSwitch ? outboundHooks.createSemanticMapper() : semanticMapper;
+            const outboundFormatAdapter = protocolSwitch ? outboundHooks.createFormatAdapter() : formatAdapter;
+            const outboundContextMetadataKey = protocolSwitch ? outboundHooks.contextMetadataKey : hooks.contextMetadataKey;
+            const outboundContextSnapshot = protocolSwitch ? undefined : contextSnapshot;
+            const outboundStage1 = await runReqOutboundStage1SemanticMap({
+                request: workingRequest,
+                adapterContext: outboundAdapterContext,
+                semanticMapper: outboundSemanticMapper,
+                contextSnapshot: outboundContextSnapshot,
+                contextMetadataKey: outboundContextMetadataKey,
+                stageRecorder: outboundRecorder
+            });
+            let formattedPayload = await runReqOutboundStage2FormatBuild({
+                formatEnvelope: outboundStage1.formatEnvelope,
+                adapterContext: outboundAdapterContext,
+                formatAdapter: outboundFormatAdapter,
+                stageRecorder: outboundRecorder
+            });
+            formattedPayload = await runReqOutboundStage3Compat({
+                payload: formattedPayload,
+                adapterContext: outboundAdapterContext,
+                stageRecorder: outboundRecorder
+            });
+            if (shadowCompareBaselineMode) {
+                const baselinePolicy = {
+                    ...(effectivePolicy ?? {}),
+                    mode: shadowCompareBaselineMode
+                };
+                // Compute a baseline provider payload in the *same execution*, without recording
+                // snapshots/diffs and without re-running the full pipeline. This avoids side effects
+                // (conversation store, followup captures, etc.) that a second execute() would trigger.
+                const baselineFormatted = typeof globalThis.structuredClone === 'function'
+                    ? globalThis.structuredClone(formattedPayload)
+                    : jsonClone(formattedPayload);
+                let baselinePayload = applyHubProviderOutboundPolicy({
+                    policy: baselinePolicy,
+                    providerProtocol: outboundProtocol,
+                    compatibilityProfile: typeof outboundAdapterContext.compatibilityProfile === 'string'
+                        ? outboundAdapterContext.compatibilityProfile
+                        : undefined,
+                    payload: baselineFormatted,
+                    stageRecorder: undefined,
+                    requestId: normalized.id
+                });
+                baselinePayload = applyProviderOutboundToolSurface({
+                    config: this.config.toolSurface,
+                    providerProtocol: outboundProtocol,
+                    payload: baselinePayload,
+                    stageRecorder: undefined,
+                    requestId: normalized.id
+                });
+                shadowBaselineProviderPayload = baselinePayload;
+            }
+            // Phase 0/1: observe provider outbound payload violations before any enforcement rewrites.
+            // This provides black-box visibility into what the pipeline would have sent upstream.
+            recordHubPolicyObservation({
+                policy: effectivePolicy,
+                providerProtocol: outboundProtocol,
+                compatibilityProfile: typeof outboundAdapterContext.compatibilityProfile === 'string'
+                    ? outboundAdapterContext.compatibilityProfile
+                    : undefined,
+                payload: formattedPayload,
+                stageRecorder: outboundRecorder,
+                requestId: normalized.id
+            });
+            providerPayload = applyHubProviderOutboundPolicy({
+                policy: effectivePolicy,
                 providerProtocol: outboundProtocol,
-                payload: baselineFormatted,
-                stageRecorder: undefined,
+                compatibilityProfile: typeof outboundAdapterContext.compatibilityProfile === 'string'
+                    ? outboundAdapterContext.compatibilityProfile
+                    : undefined,
+                payload: formattedPayload,
+                stageRecorder: outboundRecorder,
                 requestId: normalized.id
             });
-            baselinePayload = applyProviderOutboundToolSurface({
+            providerPayload = applyProviderOutboundToolSurface({
                 config: this.config.toolSurface,
                 providerProtocol: outboundProtocol,
-                payload: baselinePayload,
-                stageRecorder: undefined,
+                payload: providerPayload,
+                stageRecorder: outboundRecorder,
+                requestId: normalized.id
+            });
+            recordHubPolicyObservation({
+                policy: effectivePolicy,
+                providerProtocol: outboundProtocol,
+                compatibilityProfile: typeof outboundAdapterContext.compatibilityProfile === 'string'
+                    ? outboundAdapterContext.compatibilityProfile
+                    : undefined,
+                payload: providerPayload,
+                stageRecorder: outboundRecorder,
                 requestId: normalized.id
             });
-            shadowBaselineProviderPayload = baselinePayload;
+            if (passthroughAudit) {
+                attachPassthroughProviderInputAudit(passthroughAudit, providerPayload, outboundProtocol);
+            }
         }
-        // Phase 0/1: observe provider outbound payload violations before any enforcement rewrites.
-        // This provides black-box visibility into what the pipeline would have sent upstream.
-        recordHubPolicyObservation({
-            policy: effectivePolicy,
-            providerProtocol: outboundProtocol,
-            payload: formattedPayload,
-            stageRecorder: outboundRecorder,
-            requestId: normalized.id
-        });
-        providerPayload = applyHubProviderOutboundPolicy({
-            policy: effectivePolicy,
-            providerProtocol: outboundProtocol,
-            payload: formattedPayload,
-            stageRecorder: outboundRecorder,
-            requestId: normalized.id
-        });
-        providerPayload = applyProviderOutboundToolSurface({
-            config: this.config.toolSurface,
-            providerProtocol: outboundProtocol,
-            payload: providerPayload,
-            stageRecorder: outboundRecorder,
-            requestId: normalized.id
-        });
-        recordHubPolicyObservation({
-            policy: effectivePolicy,
-            providerProtocol: outboundProtocol,
-            payload: providerPayload,
-            stageRecorder: outboundRecorder,
-            requestId: normalized.id
-        });
         const outboundEnd = Date.now();
         nodeResults.push({
             id: 'req_outbound',
@@ -570,6 +706,7 @@ export class HubPipeline {
             providerProtocol: outboundProtocol,
             stream: normalized.stream,
             processMode: normalized.processMode,
+            ...(passthroughAudit ? { passthroughAudit } : {}),
             routeHint: normalized.routeHint,
             target: routing.target,
             ...(typeof outboundStream === 'boolean' ? { providerStream: outboundStream } : {}),
@@ -702,6 +839,15 @@ export class HubPipeline {
         }
         normalized.metadata = metaBase;
         const standardizedRequest = standardizedRequestBase;
+        const activeProcessMode = resolveActiveProcessMode(normalized.processMode, standardizedRequest.messages);
+        if (activeProcessMode !== normalized.processMode) {
+            normalized.processMode = activeProcessMode;
+            normalized.metadata = normalized.metadata || {};
+            normalized.metadata.processMode = activeProcessMode;
+        }
+        const passthroughAudit = activeProcessMode === 'passthrough'
+            ? buildPassthroughAudit(rawPayload, normalized.providerProtocol)
+            : undefined;
         // Semantic Gate (chat_process entry): lift any mappable protocol semantics from metadata into request.semantics.
         // This is the last chance before entering chat_process; after this point we fail-fast on banned metadata keys.
         try {
@@ -739,7 +885,7 @@ export class HubPipeline {
             disableSnapshots: normalized.disableSnapshots === true
         });
         let processedRequest;
-        if (normalized.processMode !== 'passthrough') {
+        if (activeProcessMode !== 'passthrough') {
             assertNoMappableSemanticsInMetadata(metaBase, 'chat_process.request.entry');
             const processResult = await runReqProcessStage1ToolGovernance({
                 request: standardizedRequest,
@@ -765,6 +911,20 @@ export class HubPipeline {
                 nodeResults.push(this.convertProcessNodeResult('chat_process.req.stage4.tool_governance', processResult.nodeResult));
             }
         }
+        else {
+            nodeResults.push({
+                id: 'chat_process.req.stage4.tool_governance',
+                success: true,
+                metadata: {
+                    node: 'chat_process.req.stage4.tool_governance',
+                    skipped: true,
+                    reason: 'process_mode_passthrough_parse_record_only'
+                }
+            });
+            if (passthroughAudit) {
+                annotatePassthroughGovernanceSkip(passthroughAudit);
+            }
+        }
         let workingRequest = processedRequest ?? standardizedRequest;
         // Token estimate for stats/diagnostics (best-effort).
         try {
@@ -827,9 +987,15 @@ export class HubPipeline {
             stageRecorder
         });
         const stopMessageState = this.routerEngine.getStopMessageState(metadataInput);
-        if (stopMessageState && normalized.metadata && typeof normalized.metadata === 'object') {
+        const preCommandState = this.routerEngine.getPreCommandState(metadataInput);
+        if ((stopMessageState || preCommandState) && normalized.metadata && typeof normalized.metadata === 'object') {
             const rt = ensureRuntimeMetadata(normalized.metadata);
-            rt.stopMessageState = stopMessageState;
+            if (stopMessageState) {
+                rt.stopMessageState = stopMessageState;
+            }
+            if (preCommandState) {
+                rt.preCommandState = preCommandState;
+            }
         }
         // Emit virtual router hit log for debugging (same as inbound path).
         try {
@@ -845,75 +1011,101 @@ export class HubPipeline {
             // ignore
         }
         const outboundStream = this.resolveOutboundStreamIntent(routing.target?.streaming);
-        workingRequest = this.applyOutboundStreamPreference(workingRequest, outboundStream);
+        workingRequest = this.applyOutboundStreamPreference(workingRequest, outboundStream, activeProcessMode);
         const outboundAdapterContext = this.buildAdapterContext(normalized, routing.target);
         if (routing.target?.compatibilityProfile) {
             outboundAdapterContext.compatibilityProfile = routing.target.compatibilityProfile;
         }
         const outboundProtocol = outboundAdapterContext.providerProtocol;
-        const protocolSwitch = outboundProtocol !== normalized.providerProtocol;
-        const outboundHooks = protocolSwitch ? this.resolveProtocolHooks(outboundProtocol) : hooks;
-        if (!outboundHooks) {
-            throw new Error(`[HubPipeline] Unsupported provider protocol for hub pipeline: ${outboundProtocol}`);
-        }
-        const outboundSemanticMapper = protocolSwitch ? outboundHooks.createSemanticMapper() : hooks.createSemanticMapper();
-        const outboundFormatAdapter = protocolSwitch ? outboundHooks.createFormatAdapter() : hooks.createFormatAdapter();
-        const outboundContextMetadataKey = protocolSwitch ? outboundHooks.contextMetadataKey : hooks.contextMetadataKey;
-        const outboundContextSnapshot = undefined;
+        if (activeProcessMode === 'passthrough' && outboundProtocol !== normalized.providerProtocol) {
+            throw new Error(`[HubPipeline] passthrough requires matching protocols: entry=${normalized.providerProtocol}, target=${outboundProtocol}`);
+        }
         const outboundRecorder = this.maybeCreateStageRecorder(outboundAdapterContext, normalized.entryEndpoint, {
             disableSnapshots: normalized.disableSnapshots === true
         });
         const outboundStart = Date.now();
         let providerPayload;
-        const outboundStage1 = await runReqOutboundStage1SemanticMap({
-            request: workingRequest,
-            adapterContext: outboundAdapterContext,
-            semanticMapper: outboundSemanticMapper,
-            contextSnapshot: outboundContextSnapshot,
-            contextMetadataKey: outboundContextMetadataKey,
-            stageRecorder: outboundRecorder
-        });
-        let formattedPayload = await runReqOutboundStage2FormatBuild({
-            formatEnvelope: outboundStage1.formatEnvelope,
-            adapterContext: outboundAdapterContext,
-            formatAdapter: outboundFormatAdapter,
-            stageRecorder: outboundRecorder
-        });
-        formattedPayload = await runReqOutboundStage3Compat({
-            payload: formattedPayload,
-            adapterContext: outboundAdapterContext,
-            stageRecorder: outboundRecorder
-        });
-        // Phase 0/1: observe + enforce provider outbound policy and tool surface (same as inbound path).
-        const effectivePolicy = normalized.policyOverride ?? this.config.policy;
-        recordHubPolicyObservation({
-            policy: effectivePolicy,
-            providerProtocol: outboundProtocol,
-            payload: formattedPayload,
-            stageRecorder: outboundRecorder,
-            requestId: normalized.id
-        });
-        providerPayload = applyHubProviderOutboundPolicy({
-            policy: effectivePolicy,
-            providerProtocol: outboundProtocol,
-            payload: formattedPayload,
-            stageRecorder: outboundRecorder,
-            requestId: normalized.id
-        });
-        providerPayload = applyProviderOutboundToolSurface({
-            config: this.config.toolSurface,
-            providerProtocol: outboundProtocol,
-            payload: providerPayload,
-            stageRecorder: outboundRecorder,
-            requestId: normalized.id
-        });
-        recordHubPolicyObservation({
-            policy: effectivePolicy,
-            providerProtocol: outboundProtocol,
-            payload: providerPayload,
-            stageRecorder: outboundRecorder,
-            requestId: normalized.id
-        });
+        if (activeProcessMode === 'passthrough') {
+            providerPayload = cloneJsonRecord(rawPayloadInput);
+            if (typeof outboundStream === 'boolean') {
+                providerPayload.stream = outboundStream;
+            }
+            if (passthroughAudit) {
+                attachPassthroughProviderInputAudit(passthroughAudit, providerPayload, outboundProtocol);
+            }
+        }
+        else {
+            const protocolSwitch = outboundProtocol !== normalized.providerProtocol;
+            const outboundHooks = protocolSwitch ? this.resolveProtocolHooks(outboundProtocol) : hooks;
+            if (!outboundHooks) {
+                throw new Error(`[HubPipeline] Unsupported provider protocol for hub pipeline: ${outboundProtocol}`);
+            }
+            const outboundSemanticMapper = protocolSwitch ? outboundHooks.createSemanticMapper() : hooks.createSemanticMapper();
+            const outboundFormatAdapter = protocolSwitch ? outboundHooks.createFormatAdapter() : hooks.createFormatAdapter();
+            const outboundContextMetadataKey = protocolSwitch ? outboundHooks.contextMetadataKey : hooks.contextMetadataKey;
+            const outboundContextSnapshot = undefined;
+            const outboundStage1 = await runReqOutboundStage1SemanticMap({
+                request: workingRequest,
+                adapterContext: outboundAdapterContext,
+                semanticMapper: outboundSemanticMapper,
+                contextSnapshot: outboundContextSnapshot,
+                contextMetadataKey: outboundContextMetadataKey,
+                stageRecorder: outboundRecorder
+            });
+            let formattedPayload = await runReqOutboundStage2FormatBuild({
+                formatEnvelope: outboundStage1.formatEnvelope,
+                adapterContext: outboundAdapterContext,
+                formatAdapter: outboundFormatAdapter,
+                stageRecorder: outboundRecorder
+            });
+            formattedPayload = await runReqOutboundStage3Compat({
+                payload: formattedPayload,
+                adapterContext: outboundAdapterContext,
+                stageRecorder: outboundRecorder
+            });
+            // Phase 0/1: observe + enforce provider outbound policy and tool surface (same as inbound path).
+            const effectivePolicy = normalized.policyOverride ?? this.config.policy;
+            recordHubPolicyObservation({
+                policy: effectivePolicy,
+                providerProtocol: outboundProtocol,
+                compatibilityProfile: typeof outboundAdapterContext.compatibilityProfile === 'string'
+                    ? outboundAdapterContext.compatibilityProfile
+                    : undefined,
+                payload: formattedPayload,
+                stageRecorder: outboundRecorder,
+                requestId: normalized.id
+            });
+            providerPayload = applyHubProviderOutboundPolicy({
+                policy: effectivePolicy,
+                providerProtocol: outboundProtocol,
+                compatibilityProfile: typeof outboundAdapterContext.compatibilityProfile === 'string'
+                    ? outboundAdapterContext.compatibilityProfile
+                    : undefined,
+                payload: formattedPayload,
+                stageRecorder: outboundRecorder,
+                requestId: normalized.id
+            });
+            providerPayload = applyProviderOutboundToolSurface({
+                config: this.config.toolSurface,
+                providerProtocol: outboundProtocol,
+                payload: providerPayload,
+                stageRecorder: outboundRecorder,
+                requestId: normalized.id
+            });
+            recordHubPolicyObservation({
+                policy: effectivePolicy,
+                providerProtocol: outboundProtocol,
+                compatibilityProfile: typeof outboundAdapterContext.compatibilityProfile === 'string'
+                    ? outboundAdapterContext.compatibilityProfile
+                    : undefined,
+                payload: providerPayload,
+                stageRecorder: outboundRecorder,
+                requestId: normalized.id
+            });
+            if (passthroughAudit) {
+                attachPassthroughProviderInputAudit(passthroughAudit, providerPayload, outboundProtocol);
+            }
+        }
         const outboundEnd = Date.now();
         nodeResults.push({
             id: 'req_outbound',
@@ -943,6 +1135,7 @@ export class HubPipeline {
             providerProtocol: outboundProtocol,
             stream: normalized.stream,
             processMode: normalized.processMode,
+            ...(passthroughAudit ? { passthroughAudit } : {}),
             routeHint: normalized.routeHint,
             target: routing.target,
             ...(typeof outboundStream === 'boolean' ? { providerStream: outboundStream } : {})
@@ -1075,6 +1268,17 @@ export class HubPipeline {
             toolCallIdStyle,
             ...(compatibilityProfile ? { compatibilityProfile } : {})
         };
+        const targetDeepseek = isJsonObject(target?.deepseek)
+            ? jsonClone(target.deepseek)
+            : undefined;
+        if (targetDeepseek) {
+            adapterContext.deepseek = targetDeepseek;
+            const rtCarrier = isJsonObject(adapterContext.__rt)
+                ? { ...adapterContext.__rt }
+                : {};
+            rtCarrier.deepseek = targetDeepseek;
+            adapterContext.__rt = rtCarrier;
+        }
         const runtime = metadata.runtime;
         if (runtime && typeof runtime === 'object' && !Array.isArray(runtime)) {
             adapterContext.runtime = jsonClone(runtime);
@@ -1100,10 +1304,24 @@ export class HubPipeline {
         if (typeof metadata.assignedModelId === 'string') {
             adapterContext.modelId = metadata.assignedModelId;
         }
+        const estimatedInputTokens = Number(metadata.estimatedInputTokens ??
+            metadata.estimated_tokens ??
+            metadata.estimatedTokens);
+        if (Number.isFinite(estimatedInputTokens) && estimatedInputTokens > 0) {
+            adapterContext.estimatedInputTokens = Math.max(1, Math.round(estimatedInputTokens));
+        }
         const rt = cloneRuntimeMetadata(metadata);
         if (rt) {
             adapterContext.__rt = rt;
         }
+        const capturedChatRequest = metadata.capturedChatRequest &&
+            typeof metadata.capturedChatRequest === 'object' &&
+            !Array.isArray(metadata.capturedChatRequest)
+            ? jsonClone(metadata.capturedChatRequest)
+            : undefined;
+        if (capturedChatRequest) {
+            adapterContext.capturedChatRequest = capturedChatRequest;
+        }
         const sessionId = typeof metadata.sessionId === 'string'
             ? metadata.sessionId.trim()
             : '';
@@ -1324,10 +1542,13 @@ export class HubPipeline {
         }
         return undefined;
     }
-    applyOutboundStreamPreference(request, stream) {
+    applyOutboundStreamPreference(request, stream, processMode) {
         if (!request || typeof request !== 'object') {
             return request;
         }
+        if (processMode === 'passthrough' && stream === undefined) {
+            return request;
+        }
         const ops = [];
         if (typeof stream === 'boolean') {
             ops.push({ op: 'set_request_parameter_fields', fields: { stream } });