@lqc123qwe/car-runtime 1.20.0 → 1.21.0

package/dist/SHA256SUMS

@@ -1 +1 @@
-4546ebcc06ccdb9f33754d2d98ee413b25937f61e6bd3fe06a6cff60fa7ae541  car-runtime-1.20.0.tgz
+8d9bd1fa4d447b255ae668a51bb47338bde8e35ad8ccac97ac72d2c893664115  car-runtime-1.21.0.tgz

package/dist/car-runtime-1.21.0.tgz.sig.bundle

@@ -0,0 +1 @@
+{"base64Signature":"MEQCIEr84YFIo6UQdCBqDYqzEn5iofitA9Wtuxx9AqUbuNGZAiBdNvJTODyumJazgvvJunU8HC/jVNGcHjUM9u7quHIyOg==","cert":"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","rekorBundle":{"SignedEntryTimestamp":"MEUCIB04W7cJqnNa2clZD6iGQQPWdN+4NyyrSfjpxuDJ5cWIAiEAlr/UsHUN8IVr0S/5WeyxAYNKIpQUnHcPyToMjqgz+HA=","Payload":{"body":"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","integratedTime":1794627338,"logIndex":3868826566,"logID":"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"}}}

package/dist/release-audit.jsonl

@@ -1,4 +1,4 @@
-{"stage":"archive","detail":"git archive HEAD → car-runtime-1.20.0.tgz（430265 bytes，树哈希锚定）","ts":1794037383291}
-{"stage":"sha256sums","detail":"SHA256SUMS 4546ebcc06ccdb9f…（裸字节复核通过）","ts":1794037383292}
-{"stage":"sbom","detail":"55 个组件（运行时依赖 0 项）","ts":1794037383299}
-{"stage":"cosign-keyless","detail":"signed car-runtime-1.20.0.tgz (keyless OIDC + Rekor)","ts":1794037385104}
+{"stage":"archive","detail":"git archive HEAD → car-runtime-1.21.0.tgz（436516 bytes，树哈希锚定）","ts":1794627336025}
+{"stage":"sha256sums","detail":"SHA256SUMS 8d9bd1fa4d447b25…（裸字节复核通过）","ts":1794627336026}
+{"stage":"sbom","detail":"55 个组件（运行时依赖 0 项）","ts":1794627336033}
+{"stage":"cosign-keyless","detail":"signed car-runtime-1.21.0.tgz (keyless OIDC + Rekor)","ts":1794627338842}

package/dist/runtime-core/chatStep.js

@@ -21,13 +21,25 @@ export async function chatStep(opts) {
     const messages = log.deriveMessages(undefined, { activeTurnId: turnId }).map(m => ({
         role: m.role,
         content: m.toolCall !== undefined
-            ? { toolCall: m.toolCall }
+            ? {
+                toolCall: m.toolCall,
+                // 1.21（R-TOKENHUB-1 / D-T3/D-T4）：投影层附加的同 turn thinking 三元组随 toolCall
+                // 载荷透传（适配器回传消费——toAnthropic 前置 thinking 块；openai 形忽略该键）
+                ...(m.thinking !== undefined
+                    ? { thinking: m.thinking }
+                    : {}),
+            }
             : m.content,
     }));
     // 4. 流式消费（3. 凭据解析在适配器首块前，A080001 由此传播）
     const redactor = new StreamRedactor();
     let text = '';
     const calls = new Map();
+    // 1.21（R-TOKENHUB-1 / D-T1/D-T2）：thinking 捕获累积——禁改写（回传签名完整性 > 脱敏
+    // 改写），provider 事实字节保真；redacted_thinking = data 全文单发覆盖
+    let thinkingText = '';
+    let thinkingSignature = '';
+    let thinkingRedacted;
     let stopReason;
     let errorDetail;
     let usage;
@@ -67,6 +79,13 @@ export async function chatStep(opts) {
                 cur.argsBuf += chunk.toolCallDelta.argumentsDelta;
             calls.set(idx, cur);
         }
+        // 1.21（R-TOKENHUB-1 / D-T1）：thinking 三面捕获（text/signature 增量累积、redacted 单发覆盖）
+        if (chunk.thinkingDelta !== undefined)
+            thinkingText += chunk.thinkingDelta;
+        if (chunk.thinkingSignatureDelta !== undefined)
+            thinkingSignature += chunk.thinkingSignatureDelta;
+        if (chunk.thinkingRedacted !== undefined)
+            thinkingRedacted = chunk.thinkingRedacted;
         if (chunk.error)
             errorDetail = chunk.error.message;
         if (chunk.usage)
@@ -103,6 +122,20 @@ export async function chatStep(opts) {
             providerRaw: usage.providerRaw,
         });
     }
+    // 5a. 1.21（R-TOKENHUB-1 / D-T2）：thinking 事件落链（actor='model'，先于 assistant/toolCall
+    //     ——投影层按同 turn 首 toolCall 附加回传）。payload = thinking 原文禁改写（签名完整性 >
+    //     脱敏改写——改写即回传校验失败）；secretsRedacted 仅计数留痕（审计信号，不复写）；
+    //     redacted 形态 payload = data 全文（meta.redacted=true）。无 thinking chunk = 零新事件
+    //     （D-T5 字节兼容，链形态与 1.20 全等）。
+    if (thinkingText.length || thinkingRedacted !== undefined) {
+        const thinkingPayload = thinkingRedacted ?? thinkingText;
+        const secretsInThinking = scanSecrets(thinkingPayload).hits.length;
+        log.append('model', 'thinking', turnId, thinkingPayload, {
+            ...(thinkingRedacted !== undefined ? { redacted: true } : {}),
+            ...(thinkingSignature ? { signature: thinkingSignature } : {}),
+            ...(secretsInThinking ? { secretsRedacted: secretsInThinking } : {}),
+        });
+    }
     // 5. assistant 文本落 M7（脱敏后 + 计数留痕；空文本不产事件）
     //    flush 后兜底复扫只计数不复写：流式遮蔽已生效，>0 即流式边界逃逸的审计信号
     let secretsRedacted = 0;

package/dist/runtime-core/llm.js

@@ -624,7 +624,17 @@ function toAnthropic(req, apiKey, cache) {
         flushToolResults();
         if (m.role === 'assistant' && m.content != null && typeof m.content === 'object' && 'toolCall' in m.content) {
             const tc = m.content.toolCall;
-            turns.push({ role: 'assistant', content: [{ type: 'tool_use', id: tc.id, name: tc.tool, input: tc.args ?? {} }] });
+            // 1.21（R-TOKENHUB-1 / D-T4）：工具环回传——投影层附加的 thinking（同 turn 原始 assistant
+            // 消息的 thinking 块）前置重放（Anthropic 规范：thinking 须位于同消息 text/tool_use 之前；
+            // tokenhub 等网关对缺回传 400——R-TOKENHUB-1 实证）。无 thinking = 形态与 1.20 逐字节一致
+            // （D-T5 兼容线，golden 不动）。
+            const th = m.content.thinking;
+            const thinkingBlock = th?.text?.length
+                ? th.redacted
+                    ? { type: 'redacted_thinking', data: th.text }
+                    : { type: 'thinking', thinking: th.text, ...(th.signature ? { signature: th.signature } : {}) }
+                : undefined;
+            turns.push({ role: 'assistant', content: [...(thinkingBlock ? [thinkingBlock] : []), { type: 'tool_use', id: tc.id, name: tc.tool, input: tc.args ?? {} }] });
         }
         else {
             turns.push({ role: m.role, content: typeof m.content === 'string' ? m.content : JSON.stringify(m.content) });
@@ -706,6 +716,10 @@ async function* parseAnthropicSseStream(body, model, adapterId) {
                 if (block?.type === 'tool_use') {
                     yield { toolCallDelta: { index: evt.index, id: block.id, name: block.name } };
                 }
+                else if (block?.type === 'redacted_thinking' && typeof block.data === 'string' && block.data.length) {
+                    // 1.21（R-TOKENHUB-1 / D-T1）：redacted_thinking 全文单发（回传形态 {type:'redacted_thinking',data}）
+                    yield { thinkingRedacted: block.data };
+                }
             }
             else if (type === 'content_block_delta') {
                 const d = evt.delta;
@@ -715,7 +729,14 @@ async function* parseAnthropicSseStream(body, model, adapterId) {
                 else if (d?.type === 'input_json_delta' && typeof d.partial_json === 'string' && d.partial_json.length) {
                     yield { toolCallDelta: { index: evt.index, argumentsDelta: d.partial_json } };
                 }
-                // thinking_delta / citations_delta 等非 CAR 消费面：容错跳过
+                else if (d?.type === 'thinking_delta' && typeof d.thinking === 'string' && d.thinking.length) {
+                    // 1.21（R-TOKENHUB-1 / D-T1）：thinking 文本增量捕获（原容错跳过 → 落链 + 工具环回传）
+                    yield { thinkingDelta: d.thinking };
+                }
+                else if (d?.type === 'signature_delta' && typeof d.signature === 'string' && d.signature.length) {
+                    yield { thinkingSignatureDelta: d.signature };
+                }
+                // citations_delta 等其余非 CAR 消费面：容错跳过
             }
             else if (type === 'message_start') {
                 // 1.11-S1（D-33）：input 侧采集（usage 嵌套在 message 下）

package/dist/runtime-core/types.d.ts

@@ -86,6 +86,12 @@ export interface LlmChunk {
     };
     /** 1.11-S1（D-33）：每次请求最后一个 chunk 附带归一化用量；缺失 = provider 未回，禁补造 */
     usage?: LlmUsage;
+    /** thinking 块文本增量（content_block_delta.thinking_delta） */
+    thinkingDelta?: string;
+    /** thinking 块签名增量（signature_delta——真 Anthropic thinking 块回传须携签名） */
+    thinkingSignatureDelta?: string;
+    /** redacted_thinking 块 data 全文（content_block_start 单发；回传形态 {type:'redacted_thinking',data}） */
+    thinkingRedacted?: string;
 }
 /** Provider 适配器（ACL，C-02）：统一签名，消解 Provider 差异 */
 export interface LlmAdapter {

package/dist/sbom.json

@@ -1,7 +1,7 @@
 {
   "bomFormat": "CAR-SBOM",
   "specVersion": "0.1",
-  "version": "1.20.0",
+  "version": "1.21.0",
   "components": [
     {
       "type": "file",
@@ -161,7 +161,7 @@
     {
       "type": "file",
       "path": "src/runtime-core/chatStep.ts",
-      "sha256": "da87f5e0231a9d0dc8455bac6057ce7f5d45eeffa7534b9ae44be7c0a42e64f4"
+      "sha256": "b7cf35ba06ebaae339a89da0e4df08b5ae310a60a97b5201de54f092fc8758ab"
     },
     {
       "type": "file",
@@ -176,7 +176,7 @@
     {
       "type": "file",
       "path": "src/runtime-core/llm.ts",
-      "sha256": "ea7d8f9c9e8b79d5f073df06e7e8cc8af1819500222108061ff07b60aa29695a"
+      "sha256": "71bf8926b162fc8ae05343953405a225b5630ba85196dc71727524de18196cc3"
     },
     {
       "type": "file",
@@ -201,7 +201,7 @@
     {
       "type": "file",
       "path": "src/runtime-core/types.ts",
-      "sha256": "15229f894f8432ce29e8c1b3dcefded54a1e1220e0c6da93c5f24a68213147df"
+      "sha256": "d9ff638ea4de9b89d56238f2d7fd65c07dd29323fcb9906e72b6877618a360a6"
     },
     {
       "type": "file",
@@ -251,7 +251,7 @@
     {
       "type": "file",
       "path": "src/session/log.ts",
-      "sha256": "435fc7336e5de1b96688d3c973aa1129ae39e7347a324d5f15aaabe77a6e1a71"
+      "sha256": "9b3a081bfa60e046166cce11203848402f52d4e9b9d0f94ad2e9dc1f0ebadd9c"
     },
     {
       "type": "file",
@@ -271,7 +271,7 @@
     {
       "type": "file",
       "path": "package.json",
-      "sha256": "29ba6c8cb059bcb1429d80a909ca79573c644ae1429f870a6065903c898d2816"
+      "sha256": "a6ae52801faedf9b64c49d0be8c5a7c22204697bf22d78c7253494bf28677b9d"
     },
     {
       "type": "file",

package/dist/session/log.d.ts

@@ -1,4 +1,4 @@
-export type EventKind = 'user' | 'assistant' | 'toolCall' | 'toolResult' | 'turnEnd' | 'goalUpdate' | 'hostRaw' | 'fork' | 'system' | 'usage' | 'compact' | 'routing' | 'memory';
+export type EventKind = 'user' | 'assistant' | 'toolCall' | 'toolResult' | 'turnEnd' | 'goalUpdate' | 'hostRaw' | 'fork' | 'system' | 'usage' | 'compact' | 'routing' | 'memory' | 'thinking';
 export type Actor = 'user' | 'model' | 'plugin' | 'runtime';
 export interface SessionEvent {
     seq: number;

package/dist/session/log.js

@@ -122,15 +122,45 @@ export class SessionLog {
         const out = [];
         if (compactEvent)
             out.push({ role: 'system', content: (compactEvent.payload.summary) });
+        // 1.21（R-TOKENHUB-1 / D-T3）：thinking 投影——同 turn 内 thinking 事件附加到首个后续
+        // toolCall 消息（原始 provider assistant 消息 = [thinking, ...tool_use] 的重放形态）；
+        // standalone（无后续 toolCall）/ 被 user·system 隔断 / 跨 turn 不投影（实证：普通两轮
+        // 历史不要求回传）；assistant(text) 同 turn 不隔断（链序 thinking→assistant→toolCall）；
+        // 无 thinking 事件投影逐字节不变（D-T5 兼容线，N1 快照自洽）。
+        let pendingThinking = null;
         for (const e of projected) {
+            if (pendingThinking && (e.turnId !== pendingThinking.turnId || e.kind === 'user' || e.kind === 'system'))
+                pendingThinking = null;
+            if (e.kind === 'thinking') {
+                const p = typeof e.payload === 'string' ? e.payload : '';
+                if (p.length || e.meta?.redacted === true) {
+                    pendingThinking = {
+                        turnId: e.turnId,
+                        text: p,
+                        ...(typeof e.meta?.signature === 'string' && e.meta.signature ? { signature: e.meta.signature } : {}),
+                        ...(e.meta?.redacted === true ? { redacted: true } : {}),
+                    };
+                }
+                continue; // thinking 不单独成消息（无独立回传语义）
+            }
             if (e.kind === 'system')
                 out.push({ role: 'system', content: e.payload });
             else if (e.kind === 'user')
                 out.push({ role: 'user', content: e.payload });
             else if (e.kind === 'assistant')
                 out.push({ role: 'assistant', content: e.payload });
-            else if (e.kind === 'toolCall')
-                out.push({ role: 'assistant', toolCall: e.payload });
+            else if (e.kind === 'toolCall') {
+                const msg = { role: 'assistant', toolCall: e.payload };
+                if (pendingThinking) {
+                    msg.thinking = {
+                        text: pendingThinking.text,
+                        ...(pendingThinking.signature ? { signature: pendingThinking.signature } : {}),
+                        ...(pendingThinking.redacted ? { redacted: true } : {}),
+                    };
+                    pendingThinking = null; // 首 toolCall 消费即清——同 turn 多 toolCall = 同一原始消息，单块重放
+                }
+                out.push(msg);
+            }
             else if (e.kind === 'toolResult') {
                 const id = e.payload?.id;
                 if (typeof id === 'string' && lastSeqById.get(id) !== e.seq)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lqc123qwe/car-runtime",
-  "version": "1.20.0",
+  "version": "1.21.0",
   "description": "Composable Agent Runtime (CAR) - microkernel plugin system with sandboxed PTC, append-only hashed session log, and MCP host bridge",
   "license": "MIT",
   "type": "module",

package/src/runtime-core/chatStep.ts

@@ -81,7 +81,14 @@ export async function chatStep(opts: ChatStepOptions): Promise<ChatStepResult> {
   const messages = log.deriveMessages(undefined, { activeTurnId: turnId }).map(m => ({
     role: m.role as 'system' | 'user' | 'assistant' | 'toolResult',
     content: (m as unknown as { toolCall?: unknown }).toolCall !== undefined
-      ? { toolCall: (m as unknown as { toolCall: unknown }).toolCall }
+      ? {
+          toolCall: (m as unknown as { toolCall: unknown }).toolCall,
+          // 1.21（R-TOKENHUB-1 / D-T3/D-T4）：投影层附加的同 turn thinking 三元组随 toolCall
+          // 载荷透传（适配器回传消费——toAnthropic 前置 thinking 块；openai 形忽略该键）
+          ...((m as unknown as { thinking?: unknown }).thinking !== undefined
+            ? { thinking: (m as unknown as { thinking: unknown }).thinking }
+            : {}),
+        }
       : m.content,
   }))
 
@@ -89,6 +96,11 @@ export async function chatStep(opts: ChatStepOptions): Promise<ChatStepResult> {
   const redactor = new StreamRedactor()
   let text = ''
   const calls = new Map<number, { id?: string; name?: string; argsBuf: string }>()
+  // 1.21（R-TOKENHUB-1 / D-T1/D-T2）：thinking 捕获累积——禁改写（回传签名完整性 > 脱敏
+  // 改写），provider 事实字节保真；redacted_thinking = data 全文单发覆盖
+  let thinkingText = ''
+  let thinkingSignature = ''
+  let thinkingRedacted: string | undefined
   let stopReason: ModelStep['stopReason'] | undefined
   let errorDetail: string | undefined
   let usage: LlmUsage | undefined
@@ -124,6 +136,10 @@ export async function chatStep(opts: ChatStepOptions): Promise<ChatStepResult> {
       if (chunk.toolCallDelta.argumentsDelta) cur.argsBuf += chunk.toolCallDelta.argumentsDelta
       calls.set(idx, cur)
     }
+    // 1.21（R-TOKENHUB-1 / D-T1）：thinking 三面捕获（text/signature 增量累积、redacted 单发覆盖）
+    if (chunk.thinkingDelta !== undefined) thinkingText += chunk.thinkingDelta
+    if (chunk.thinkingSignatureDelta !== undefined) thinkingSignature += chunk.thinkingSignatureDelta
+    if (chunk.thinkingRedacted !== undefined) thinkingRedacted = chunk.thinkingRedacted
     if (chunk.error) errorDetail = chunk.error.message
     if (chunk.usage) usage = chunk.usage // D-33：附着于最后一个 chunk——后到覆盖
     if (chunk.finishReason !== undefined) stopReason = chunk.finishReason === 'aborted' ? 'error' : chunk.finishReason
@@ -157,6 +173,21 @@ export async function chatStep(opts: ChatStepOptions): Promise<ChatStepResult> {
     })
   }
 
+  // 5a. 1.21（R-TOKENHUB-1 / D-T2）：thinking 事件落链（actor='model'，先于 assistant/toolCall
+  //     ——投影层按同 turn 首 toolCall 附加回传）。payload = thinking 原文禁改写（签名完整性 >
+  //     脱敏改写——改写即回传校验失败）；secretsRedacted 仅计数留痕（审计信号，不复写）；
+  //     redacted 形态 payload = data 全文（meta.redacted=true）。无 thinking chunk = 零新事件
+  //     （D-T5 字节兼容，链形态与 1.20 全等）。
+  if (thinkingText.length || thinkingRedacted !== undefined) {
+    const thinkingPayload = thinkingRedacted ?? thinkingText
+    const secretsInThinking = scanSecrets(thinkingPayload).hits.length
+    log.append('model', 'thinking', turnId, thinkingPayload, {
+      ...(thinkingRedacted !== undefined ? { redacted: true } : {}),
+      ...(thinkingSignature ? { signature: thinkingSignature } : {}),
+      ...(secretsInThinking ? { secretsRedacted: secretsInThinking } : {}),
+    })
+  }
+
   // 5. assistant 文本落 M7（脱敏后 + 计数留痕；空文本不产事件）
   //    flush 后兜底复扫只计数不复写：流式遮蔽已生效，>0 即流式边界逃逸的审计信号
   let secretsRedacted = 0

package/src/runtime-core/llm.ts

@@ -673,7 +673,17 @@ function toAnthropic(req: LlmRequest, apiKey: string, cache: { rolling: boolean;
     flushToolResults()
     if (m.role === 'assistant' && m.content != null && typeof m.content === 'object' && 'toolCall' in (m.content as object)) {
       const tc = (m.content as { toolCall: { id: string; tool: string; args: unknown } }).toolCall
-      turns.push({ role: 'assistant', content: [{ type: 'tool_use', id: tc.id, name: tc.tool, input: tc.args ?? {} }] })
+      // 1.21（R-TOKENHUB-1 / D-T4）：工具环回传——投影层附加的 thinking（同 turn 原始 assistant
+      // 消息的 thinking 块）前置重放（Anthropic 规范：thinking 须位于同消息 text/tool_use 之前；
+      // tokenhub 等网关对缺回传 400——R-TOKENHUB-1 实证）。无 thinking = 形态与 1.20 逐字节一致
+      // （D-T5 兼容线，golden 不动）。
+      const th = (m.content as { thinking?: { text?: string; signature?: string; redacted?: boolean } }).thinking
+      const thinkingBlock = th?.text?.length
+        ? th.redacted
+          ? { type: 'redacted_thinking', data: th.text }
+          : { type: 'thinking', thinking: th.text, ...(th.signature ? { signature: th.signature } : {}) }
+        : undefined
+      turns.push({ role: 'assistant', content: [...(thinkingBlock ? [thinkingBlock] : []), { type: 'tool_use', id: tc.id, name: tc.tool, input: tc.args ?? {} }] })
     } else {
       turns.push({ role: m.role, content: typeof m.content === 'string' ? m.content : JSON.stringify(m.content) })
     }
@@ -746,6 +756,9 @@ async function* parseAnthropicSseStream(body: AsyncIterable<Uint8Array>, model:
         const block = evt.content_block
         if (block?.type === 'tool_use') {
           yield { toolCallDelta: { index: evt.index, id: block.id, name: block.name } }
+        } else if (block?.type === 'redacted_thinking' && typeof block.data === 'string' && block.data.length) {
+          // 1.21（R-TOKENHUB-1 / D-T1）：redacted_thinking 全文单发（回传形态 {type:'redacted_thinking',data}）
+          yield { thinkingRedacted: block.data }
         }
       } else if (type === 'content_block_delta') {
         const d = evt.delta
@@ -753,8 +766,13 @@ async function* parseAnthropicSseStream(body: AsyncIterable<Uint8Array>, model:
           yield { delta: d.text }
         } else if (d?.type === 'input_json_delta' && typeof d.partial_json === 'string' && d.partial_json.length) {
           yield { toolCallDelta: { index: evt.index, argumentsDelta: d.partial_json } }
+        } else if (d?.type === 'thinking_delta' && typeof d.thinking === 'string' && d.thinking.length) {
+          // 1.21（R-TOKENHUB-1 / D-T1）：thinking 文本增量捕获（原容错跳过 → 落链 + 工具环回传）
+          yield { thinkingDelta: d.thinking }
+        } else if (d?.type === 'signature_delta' && typeof d.signature === 'string' && d.signature.length) {
+          yield { thinkingSignatureDelta: d.signature }
         }
-        // thinking_delta / citations_delta 等非 CAR 消费面：容错跳过
+        // citations_delta 等其余非 CAR 消费面：容错跳过
       } else if (type === 'message_start') {
         // 1.11-S1（D-33）：input 侧采集（usage 嵌套在 message 下）
         const u = (evt.message as Record<string, unknown> | undefined)?.usage

package/src/runtime-core/types.ts

@@ -76,6 +76,14 @@ export interface LlmChunk {
   error?: { code: string; message: string }
   /** 1.11-S1（D-33）：每次请求最后一个 chunk 附带归一化用量；缺失 = provider 未回，禁补造 */
   usage?: LlmUsage
+  // —— 1.21（R-TOKENHUB-1 / D-T1）thinking 捕获加法——anthropic SSE thinking 面捕获；
+  // 禁改写（回传签名完整性 > 脱敏改写）；缺失 = provider 未发 thinking，禁补造
+  /** thinking 块文本增量（content_block_delta.thinking_delta） */
+  thinkingDelta?: string
+  /** thinking 块签名增量（signature_delta——真 Anthropic thinking 块回传须携签名） */
+  thinkingSignatureDelta?: string
+  /** redacted_thinking 块 data 全文（content_block_start 单发；回传形态 {type:'redacted_thinking',data}） */
+  thinkingRedacted?: string
 }
 
 /** Provider 适配器（ACL，C-02）：统一签名，消解 Provider 差异 */

package/src/session/log.ts

@@ -11,7 +11,7 @@ import { createHash } from 'node:crypto'
 import { readFileSync } from 'node:fs'
 import { decodeLogBuffer, splitJsonlLines } from './format.ts'
 
-export type EventKind = 'user' | 'assistant' | 'toolCall' | 'toolResult' | 'turnEnd' | 'goalUpdate' | 'hostRaw' | 'fork' | 'system' | 'usage' | 'compact' | 'routing' | 'memory' // M3-S11 加法扩展：多宿主归一化降级通道（pattern 未命中留痕，零静默）；M5-DEC4 加法扩展：跨宿主 fork 标记事件；1.4-S2 加法扩展：system prompt 落链（§3.5.5：新模型可见输入 = 新事件类型）；1.11-S2 加法扩展：usage 计量事实（D-33，actor='runtime'、model_visible=0 不进模型消息流，deriveMessages 不投影）；六值 TurnEndReason 不变；1.14-S2 加法扩展（K-MP-2 / D-40）：历史压缩事件（actor='runtime'，append-only 只追加——payload={summary, compactedUpTo, ...}，投影按 compactedUpTo 前缀折叠为摘要，原事件链不改写）；1.14-S4 加法扩展（K-POOL-1 / D-42）：模型池路由决策（actor='runtime'，payload.type='decide'，selected/reason/retries/attempts——禁静默换模型；model_visible=0 不进模型消息流，deriveMessages 不投影——同 usage 纪律）；1.15-S1 加法扩展（K-MEM-1 / D-46）：白盒记忆操作事件（actor='user' 宿主代理用户操作，turnId='memory' 会话级标识同 'compaction' 先例，payload.type='write'|'edit'|'delete'|'rollback'——审计链同源差异化面，链即版本库〔rollback 恢复数据源=链上 payload.before/after 全文〕；model_visible=0 不进模型消息流——记忆注入走宿主装配层 system ctx 行，deriveMessages 不投影）；
+export type EventKind = 'user' | 'assistant' | 'toolCall' | 'toolResult' | 'turnEnd' | 'goalUpdate' | 'hostRaw' | 'fork' | 'system' | 'usage' | 'compact' | 'routing' | 'memory' | 'thinking' // M3-S11 加法扩展：多宿主归一化降级通道（pattern 未命中留痕，零静默）；M5-DEC4 加法扩展：跨宿主 fork 标记事件；1.4-S2 加法扩展：system prompt 落链（§3.5.5：新模型可见输入 = 新事件类型）；1.11-S2 加法扩展：usage 计量事实（D-33，actor='runtime'、model_visible=0 不进模型消息流，deriveMessages 不投影）；六值 TurnEndReason 不变；1.14-S2 加法扩展（K-MP-2 / D-40）：历史压缩事件（actor='runtime'，append-only 只追加——payload={summary, compactedUpTo, ...}，投影按 compactedUpTo 前缀折叠为摘要，原事件链不改写）；1.14-S4 加法扩展（K-POOL-1 / D-42）：模型池路由决策（actor='runtime'，payload.type='decide'，selected/reason/retries/attempts——禁静默换模型；model_visible=0 不进模型消息流，deriveMessages 不投影——同 usage 纪律）；1.15-S1 加法扩展（K-MEM-1 / D-46）：白盒记忆操作事件（actor='user' 宿主代理用户操作，turnId='memory' 会话级标识同 'compaction' 先例，payload.type='write'|'edit'|'delete'|'rollback'——审计链同源差异化面，链即版本库〔rollback 恢复数据源=链上 payload.before/after 全文〕；model_visible=0 不进模型消息流——记忆注入走宿主装配层 system ctx 行，deriveMessages 不投影）；1.21 加法扩展（R-TOKENHUB-1 / D-T2）：thinking 事件（actor='model'，payload=thinking 原文禁改写，meta={signature?, redacted?, secretsRedacted?}——先于 assistant/toolCall 落链；投影 = 同 turn 首个 toolCall 消息附加回传（工具环 reasoning_content 契约，Anthropic thinking+tool_use 规范同款）；standalone/隔断/跨 turn 不投影；无 thinking 事件链投影逐字节不变）；
 export type Actor = 'user' | 'model' | 'plugin' | 'runtime'
 export interface SessionEvent {
   seq: number
@@ -146,11 +146,41 @@ export class SessionLog {
     }
     const out: Array<{ role: string; [k: string]: unknown }> = []
     if (compactEvent) out.push({ role: 'system', content: ((compactEvent.payload as { summary: string }).summary) })
+    // 1.21（R-TOKENHUB-1 / D-T3）：thinking 投影——同 turn 内 thinking 事件附加到首个后续
+    // toolCall 消息（原始 provider assistant 消息 = [thinking, ...tool_use] 的重放形态）；
+    // standalone（无后续 toolCall）/ 被 user·system 隔断 / 跨 turn 不投影（实证：普通两轮
+    // 历史不要求回传）；assistant(text) 同 turn 不隔断（链序 thinking→assistant→toolCall）；
+    // 无 thinking 事件投影逐字节不变（D-T5 兼容线，N1 快照自洽）。
+    let pendingThinking: { turnId: string; text: string; signature?: string; redacted?: boolean } | null = null
     for (const e of projected) {
+      if (pendingThinking && (e.turnId !== pendingThinking.turnId || e.kind === 'user' || e.kind === 'system')) pendingThinking = null
+      if (e.kind === 'thinking') {
+        const p = typeof e.payload === 'string' ? e.payload : ''
+        if (p.length || e.meta?.redacted === true) {
+          pendingThinking = {
+            turnId: e.turnId,
+            text: p,
+            ...(typeof e.meta?.signature === 'string' && e.meta.signature ? { signature: e.meta.signature } : {}),
+            ...(e.meta?.redacted === true ? { redacted: true } : {}),
+          }
+        }
+        continue // thinking 不单独成消息（无独立回传语义）
+      }
       if (e.kind === 'system') out.push({ role: 'system', content: e.payload })
       else if (e.kind === 'user') out.push({ role: 'user', content: e.payload })
       else if (e.kind === 'assistant') out.push({ role: 'assistant', content: e.payload })
-      else if (e.kind === 'toolCall') out.push({ role: 'assistant', toolCall: e.payload })
+      else if (e.kind === 'toolCall') {
+        const msg: { role: string; [k: string]: unknown } = { role: 'assistant', toolCall: e.payload }
+        if (pendingThinking) {
+          msg.thinking = {
+            text: pendingThinking.text,
+            ...(pendingThinking.signature ? { signature: pendingThinking.signature } : {}),
+            ...(pendingThinking.redacted ? { redacted: true } : {}),
+          }
+          pendingThinking = null // 首 toolCall 消费即清——同 turn 多 toolCall = 同一原始消息，单块重放
+        }
+        out.push(msg)
+      }
       else if (e.kind === 'toolResult') {
         const id = (e.payload as { id?: unknown } | null)?.id
         if (typeof id === 'string' && lastSeqById.get(id) !== e.seq) continue // D-23：后续有同 id 最终结果，本条为授权中间记录

package/dist/car-runtime-1.20.0.tgz.sig.bundle

@@ -1 +0,0 @@
-{"base64Signature":"MEYCIQCbYahnJCIA6I3JiR78DqF448xO747Dj5VSDZa+DjrhBwIhAOWOh2Ax0tWvzwsaV+OjU2P/tU5+zZ63vwIRgHQ+gSD4","cert":"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","rekorBundle":{"SignedEntryTimestamp":"MEUCIQDB6YqP2KWVy4Fo7LbSrDV7nIEb4z/smHLueDq0QzfuQQIgc0BoLANFB0BT/TS7PHukqcqBjRM0g3tV9AA+Kbq5Jvo=","Payload":{"body":"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","integratedTime":1794037384,"logIndex":3732640096,"logID":"c0d23d6ad406973f9559f3ba2d1ca01f84147d8ffc5b8445c224f98b9591801d"}}}