@namzu/sdk 62.5.0 → 62.6.1

package/src/compaction/model-summary.ts

@@ -1,6 +1,7 @@
 import type { CompactionConfig } from '../config/runtime.js'
 import { collectChatCompletion } from '../provider/collect-chat-completion.js'
 import { resolveStreamIdleTimeoutMs, withStreamIdleTimeout } from '../provider/idle-timeout.js'
+import { chatStreamWithSamplingRepair } from '../runtime/query/iteration/side-call.js'
 import { isOperatorUserMessage } from '../runtime/query/steering.js'
 import {
 	generateRenderNonce,
@@ -347,7 +348,7 @@ export async function requestModelSummary(input: ModelSummaryInput): Promise<str
 			try {
 				const response = await deadline.race(
 					collectChatCompletion(
-						provider.chatStream({
+						chatStreamWithSamplingRepair(provider, {
 							model: route.model,
 							messages: [
 								{ role: 'system', content: SUMMARY_SYSTEM_PROMPT },

package/src/compaction/verifier.ts

@@ -2,6 +2,7 @@ import type { CompactionConfig } from '../config/runtime.js'
 import { SECTION_HEADERS } from '../constants/compaction/index.js'
 import { collectChatCompletion } from '../provider/collect-chat-completion.js'
 import { resolveStreamIdleTimeoutMs, withStreamIdleTimeout } from '../provider/idle-timeout.js'
+import { chatStreamWithSamplingRepair } from '../runtime/query/iteration/side-call.js'
 import {
 	generateRenderNonce,
 	nonceClosureStatement,
@@ -306,7 +307,7 @@ async function buildVerifiedSummaryWithProvider(
 		]
 		try {
 			response = await collectChatCompletion(
-				provider.chatStream({
+				chatStreamWithSamplingRepair(provider, {
 					model: model ?? '',
 					messages: verificationMessages,
 					maxTokens: config.llmVerificationMaxTokens,

package/src/eval/judge.ts

@@ -1,5 +1,6 @@
 import { collectChatCompletion } from '../provider/collect-chat-completion.js'
 import { resolveStreamIdleTimeoutMs, withStreamIdleTimeout } from '../provider/idle-timeout.js'
+import { chatStreamWithSamplingRepair } from '../runtime/query/iteration/side-call.js'
 import type { LLMProvider } from '../types/provider/interface.js'
 import type { EvalCase, EvalTurn, Score, Scorer } from './types.js'
 
@@ -221,7 +222,7 @@ export function judgeScorer(config: JudgeScorerConfig): Scorer {
 		name: config.name ?? 'judge',
 		async score(turn: EvalTurn, evalCase: EvalCase, signal?: AbortSignal): Promise<Score> {
 			const response = await collectChatCompletion(
-				provider.chatStream({
+				chatStreamWithSamplingRepair(provider, {
 					model: config.model,
 					messages: [{ role: 'user', content: buildPrompt(config, turn, evalCase, scale) }],
 					// The same turn must grade the same way twice, or a

package/src/pricing/catalogue.generated.ts

@@ -33,6 +33,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 10,
 					outputCostPer1M: 50,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 1, writeCostPer1M: 12.5 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -41,6 +42,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 10,
 					outputCostPer1M: 50,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.25, writeCostPer1M: 12.5 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -50,6 +52,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					outputCostPer1M: 40,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.2, writeCostPer1M: 10 },
 					fastMultiplier: 2,
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -58,6 +61,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 1,
 					outputCostPer1M: 5,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.1, writeCostPer1M: 1.25 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -66,6 +70,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 10,
 					outputCostPer1M: 50,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 1, writeCostPer1M: 12.5 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -74,6 +79,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 10,
 					outputCostPer1M: 50,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.25, writeCostPer1M: 12.5 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -83,6 +89,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					outputCostPer1M: 40,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.2, writeCostPer1M: 10 },
 					fastMultiplier: 2,
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -91,6 +98,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 15,
 					outputCostPer1M: 75,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 1.5, writeCostPer1M: 18.75 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -99,6 +107,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 15,
 					outputCostPer1M: 75,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 1.5, writeCostPer1M: 18.75 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -107,6 +116,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 5,
 					outputCostPer1M: 25,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.5, writeCostPer1M: 6.25 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -115,6 +125,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 5,
 					outputCostPer1M: 25,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.5, writeCostPer1M: 6.25 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -124,6 +135,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					outputCostPer1M: 25,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.5, writeCostPer1M: 6.25 },
 					fastMultiplier: 2,
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -133,6 +145,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					outputCostPer1M: 25,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.5, writeCostPer1M: 6.25 },
 					fastMultiplier: 2,
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -142,6 +155,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					outputCostPer1M: 20,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.2, writeCostPer1M: 5 },
 					fastMultiplier: 2,
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -150,6 +164,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 3,
 					outputCostPer1M: 15,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.3, writeCostPer1M: 3.75 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -158,6 +173,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 3,
 					outputCostPer1M: 15,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.3, writeCostPer1M: 3.75 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -166,6 +182,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 3,
 					outputCostPer1M: 15,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.3, writeCostPer1M: 3.75 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -174,6 +191,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 2,
 					outputCostPer1M: 10,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.2, writeCostPer1M: 2.5 },
+					webSearchCostPer1000: 10,
 				},
 			],
 			[
@@ -182,6 +200,7 @@ export const VENDOR_RATES: readonly VendorRates[] = [
 					inputCostPer1M: 2,
 					outputCostPer1M: 10,
 					cache: { promptIncludesCacheReads: false, readCostPer1M: 0.1, writeCostPer1M: 2.5 },
+					webSearchCostPer1000: 10,
 				},
 			],
 		]),

package/src/pricing/rates.source.json

@@ -24,6 +24,12 @@
 		"2x on the full context window, stacking with cache pricing). A model without it",
 		"has no published fast price, so a fast request on it is reported as unpriced.",
 		"",
+		"webSearchPer1000 (optional, per vendor) is the price in USD of 1,000 hosted web",
+		"searches, billed per request on top of tokens (verified 2026-11-10 against the",
+		"pricing page's web search section: $10 per 1,000, a failed search is not billed).",
+		"It is copied onto every model row of that vendor. Absent means searches are not",
+		"part of the total.",
+		"",
 		"Matching is EXACT on a normalised id (lowercased, one trailing -YYYYMMDD or",
 		"@YYYYMMDD snapshot suffix removed). Deliberately not prefix or substring:",
 		"within one vendor here, ids one character apart differ in price by 4x, so a",
@@ -64,6 +70,7 @@
 			"verified": "2026-11-10",
 			"promptIncludesCacheReads": false,
 			"reportsCacheWrites": true,
+			"webSearchPer1000": 10,
 			"note": "The last two rows exist because the driver's own offline catalogue offers those models and this table did not price them — a lookup-key gap that reads as `cost unknown` and is invisible to the generator's own check, which only proves the module matches this file. `providers/anthropic` asserts the two lists agree. Vendor list prices, every row checked against its pricing page on the `verified` date. Cache read is the vendor's published 0.1x of the input rate, except on the six models it prices differently: 0.05x on claude-opus-5-5 and claude-sonnet-5-5 and 0.025x on claude-fable-5-1, claude-mythos-5-1, claude-fable-5-2 and claude-mythos-5-2, entered at the published rate rather than derived. claude-haiku-5-5 has no row on purpose: the vendor prices it by prompt length ($0.10 in / $0.50 out up to 100,000 prompt tokens, $0.50 / $2.50 above, cache counted in the length), this table holds one rate per model, and either single rate would be wrong for the other half of requests, so its cost reports unknown. Cache write is its published 1.25x for the five-minute entry, which is the default TTL and the one the driver's `cacheControl: { type: 'auto' }` asks for. claude-sonnet-5 launched at an introductory $2/$10 with $3/$15 scheduled from 2026-09-01, and this table recorded the scheduled rate; the vendor has since made $2/$10 the standard price and cancelled the increase. The table has no time dimension, so a future promotional window is still recorded at the list rate and over-reported rather than mis-modelled.",
 			"models": [
 				{

package/src/runtime/query/auto-review/classifier.ts

@@ -38,6 +38,7 @@ import {
 } from '../../../utils/backoff.js'
 import { SCOPE_ATTRIBUTE } from '../../../utils/log/types.js'
 import { type Logger, resolveLogger } from '../../../utils/logger.js'
+import { chatStreamWithSamplingRepair } from '../iteration/side-call.js'
 import {
 	STAGE_ONE_INSTRUCTION,
 	STAGE_TWO_INSTRUCTION,
@@ -209,7 +210,7 @@ export function createAutoReviewClassifier(
 				// ignores it would otherwise hold the call open past its deadline, and
 				// a turn cancelled while it waits would wait with it.
 				const collected = collectChatCompletion(
-					options.provider.chatStream({
+					chatStreamWithSamplingRepair(options.provider, {
 						model: options.model,
 						messages,
 						maxTokens: stage === 1 ? 64 : 8_192,

package/src/runtime/query/iteration/index.ts

@@ -1383,6 +1383,9 @@ export class IterationOrchestrator {
 									},
 								}
 							: {}),
+						...(response.usage.cacheMiss !== undefined
+							? { cacheMiss: response.usage.cacheMiss }
+							: {}),
 						...contextFigures,
 					})
 

package/src/runtime/query/iteration/request-repair.ts

@@ -39,7 +39,13 @@ import { isProviderRejectedImageError } from './provider-rejected-image.js'
  * compaction summaries, do not pass through it.
  */
 
-export type RejectedParameter = 'effort' | 'thinking' | 'temperature' | 'topP' | 'responseFormat'
+export type RejectedParameter =
+	| 'effort'
+	| 'thinking'
+	| 'temperature'
+	| 'topP'
+	| 'topK'
+	| 'responseFormat'
 
 export interface MediaRemoval {
 	readonly count: number
@@ -110,6 +116,7 @@ const PARAMETER_NAMES: Record<RejectedParameter, string> = {
 	thinking: 'thinking',
 	temperature: 'temperature',
 	topP: 'top[_ ]?p',
+	topK: 'top[_ ]?k',
 	responseFormat:
 		'(?:response_format|output_config(?:\\.format)?|json_schema|json_object|structured\\s+output)',
 }
@@ -124,6 +131,10 @@ const PARAMETER_PATTERNS = Object.fromEntries(
 	]),
 ) as Record<RejectedParameter, { named: RegExp; refused: RegExp }>
 
+const SAMPLING = ['temperature', 'topP', 'topK'] as const satisfies readonly RejectedParameter[]
+const SAMPLING_GROUP =
+	/\btemperature\b.{0,80}\btop[_ ]?[pk]\b|\btop[_ ]?[pk]\b.{0,80}\btemperature\b/i
+
 const BOTH_SAMPLING =
 	/temperature.{0,60}top[_ ]?p.{0,80}(?:cannot|can['’]t|may\s+not|should\s+not).{0,20}(?:both|together)/i
 
@@ -156,6 +167,7 @@ function rejectedParameters(
 		thinking: params.thinking !== undefined,
 		temperature: params.temperature !== undefined,
 		topP: params.topP !== undefined,
+		topK: params.topK !== undefined,
 		responseFormat: params.responseFormat !== undefined,
 	} satisfies Record<RejectedParameter, boolean>
 	const found: RejectedParameter[] = []
@@ -165,6 +177,12 @@ function rejectedParameters(
 		if (structured ? pattern.named.test(text) : pattern.refused.test(text)) found.push(name)
 	}
 	if (found.length === 0 && set.topP && BOTH_SAMPLING.test(text)) found.push('topP')
+	// The vendor words a refusal of sampling controls as a group ("Omit
+	// temperature, top_p, and top_k"), so naming one of them in a refusal that
+	// names the others is enough for whichever of them was sent.
+	if (found.length === 0 && SAMPLING_GROUP.test(text)) {
+		for (const name of SAMPLING) if (set[name]) found.push(name)
+	}
 	return found
 }
 
@@ -726,6 +744,7 @@ function withoutParameters(
 	if (names.has('thinking')) next.thinking = undefined
 	if (names.has('temperature')) next.temperature = undefined
 	if (names.has('topP')) next.topP = undefined
+	if (names.has('topK')) next.topK = undefined
 	if (names.has('responseFormat')) next.responseFormat = undefined
 	return next
 }
@@ -741,3 +760,25 @@ function isHandledElsewhere(error: unknown, params: ChatCompletionParams): boole
 	}
 	return isImageInputRefusal(error)
 }
+
+/**
+ * Which of `temperature`, `top_p` and `top_k` a provider refused on this
+ * request, from the same reading of its rejection the main turn uses. Empty
+ * for any other failure, so a caller can strip exactly these and nothing else.
+ */
+export function rejectedSamplingParameters(
+	error: unknown,
+	params: ChatCompletionParams,
+): RejectedParameter[] {
+	const rejection = classifyRequestRejection(error, params)
+	if (rejection?.kind !== 'parameter') return []
+	return rejection.parameters.filter((name) => (SAMPLING as readonly string[]).includes(name))
+}
+
+/** The request without the named sampling parameters. */
+export function withoutSamplingParameters(
+	params: ChatCompletionParams,
+	names: ReadonlySet<RejectedParameter>,
+): ChatCompletionParams {
+	return withoutParameters(params, names)
+}

package/src/runtime/query/iteration/side-call.ts

@@ -0,0 +1,60 @@
+import type {
+	ChatCompletionParams,
+	LLMProvider,
+	StreamChunk,
+} from '../../../types/provider/index.js'
+import {
+	type RejectedParameter,
+	rejectedSamplingParameters,
+	withoutSamplingParameters,
+} from './request-repair.js'
+
+/**
+ * What each model was found to refuse, for the life of the provider object.
+ * Weakly keyed so a dropped provider takes its entry with it.
+ */
+const refused = new WeakMap<object, Map<string, Set<RejectedParameter>>>()
+
+/**
+ * A model call made outside the turn loop (a compaction summary, its verifier,
+ * the auto-review classifier) that asks for a deterministic answer with
+ * `temperature: 0`. Current models refuse sampling parameters outright, and
+ * the turn loop already recovers from that; this gives side calls the same
+ * recovery instead of letting the call fail and the feature with it.
+ *
+ * The request goes out as asked. If the provider refuses a sampling parameter
+ * BEFORE any output arrived, it is resent without exactly those parameters,
+ * and the finding is kept for the model so later calls omit them up front.
+ * Nothing is kept unless the resend was accepted, and any other failure is
+ * thrown unchanged.
+ */
+export async function* chatStreamWithSamplingRepair(
+	provider: LLMProvider,
+	params: ChatCompletionParams,
+): AsyncGenerator<StreamChunk> {
+	const perModel = refused.get(provider) ?? new Map<string, Set<RejectedParameter>>()
+	refused.set(provider, perModel)
+	const known = perModel.get(params.model)
+	let request = known ? withoutSamplingParameters(params, known) : params
+	let stripped: Set<RejectedParameter> | undefined
+	for (;;) {
+		let yielded = false
+		try {
+			for await (const chunk of provider.chatStream(request)) {
+				yielded = true
+				yield chunk
+			}
+			if (stripped) {
+				const merged = new Set([...(perModel.get(params.model) ?? []), ...stripped])
+				perModel.set(params.model, merged)
+			}
+			return
+		} catch (error) {
+			if (yielded || stripped) throw error
+			const names = rejectedSamplingParameters(error, request)
+			if (names.length === 0) throw error
+			stripped = new Set(names)
+			request = withoutSamplingParameters(request, stripped)
+		}
+	}
+}

package/src/sandbox/file-walk.ts

@@ -1,6 +1,5 @@
 import { isAbsolute, join, posix } from 'node:path'
 import braceExpansion from 'brace-expansion'
-import { GLOBSTAR, Minimatch } from 'minimatch'
 import type {
 	SandboxExecOptions,
 	SandboxExecResult,
@@ -10,11 +9,15 @@ import type {
 } from '../types/sandbox/index.js'
 import { subscribeToAbort } from '../utils/abort.js'
 import { FILE_WALK_PROGRAM } from './file-walk-program.js'
+import { compileSegment } from './glob-segment.js'
 import { VCS_NAMES, createIgnoreStack } from './ignore-matcher.js'
 
 /** Entries a walk examines before it stops with what it has: a safety valve, not a budget. */
 export const DEFAULT_MAX_VISITED_ENTRIES = 500_000
 
+const GLOBSTAR = Symbol('globstar')
+type Segment = string | { source: string; flags: string } | typeof GLOBSTAR
+
 interface WalkPlan {
 	root: string
 	prefix: string[]
@@ -62,22 +65,26 @@ function planWalk(root: string, options: SandboxWalkFilesOptions): WalkPlan {
 	// that cap can silently truncate before our extra branch proves incompleteness.
 	const branches = expandBraces(pattern, { max: 257, maxLength: Number.POSITIVE_INFINITY })
 	if (branches.length > 256) throw new RangeError('File walk pattern exceeds 256 brace expansions')
-	const matchers = branches.map((branch) => {
+	const dot = options.includeHidden ?? false
+	const sets = branches.map((branch) => {
 		if (branch.startsWith('/') || /^[a-z]:/i.test(branch) || branch.split('/').includes('..')) {
 			throw new Error('Expanded file walk pattern escapes its root')
 		}
-		return new Minimatch(branch, {
-			nobrace: true,
-			nonegate: true,
-			nocomment: true,
-			dot: options.includeHidden ?? false,
-			platform: 'linux',
-		})
+		return branch
+			.split('/')
+			.filter(
+				(segment, index, all) => segment !== '.' && (segment !== '' || index === all.length - 1),
+			)
+			.reduce<Segment[]>((set, segment) => {
+				if (segment === '**') {
+					if (set[set.length - 1] !== GLOBSTAR) set.push(GLOBSTAR)
+					return set
+				}
+				const { literal, source } = compileSegment(segment, dot)
+				set.push(literal !== null ? literal : { source, flags: 'u' })
+				return set
+			}, [])
 	})
-	const sets = matchers.flatMap((matcher) => matcher.set)
-	if (sets.some((set) => set.some((segment) => segment === '..'))) {
-		throw new Error('Expanded file walk pattern escapes its root')
-	}
 	const patternDepth = Math.max(
 		1,
 		...sets.map((set) => (set.includes(GLOBSTAR) ? Number.POSITIVE_INFINITY : set.length)),
@@ -100,10 +107,24 @@ function planWalk(root: string, options: SandboxWalkFilesOptions): WalkPlan {
 			break
 		prefix.push(segment)
 	}
-	const expressions = matchers.flatMap((matcher) => {
-		const expression = matcher.makeRe()
-		return expression ? [{ source: expression.source, flags: expression.flags }] : []
-	})
+	const hiddenGuard = dot ? '' : '(?!\\.)'
+	const expressions = sets.map((set) => ({
+		source: `^${set
+			.map((segment, index) => {
+				const last = index === set.length - 1
+				if (segment === GLOBSTAR) {
+					const run = `(?:${hiddenGuard}[^/]+/)*`
+					return last ? `${run}${hiddenGuard}[^/]+` : run
+				}
+				const body =
+					typeof segment === 'string'
+						? segment.replace(/[\\^$.*+?()[\]{}|/]/g, '\\$&')
+						: segment.source.slice(1, -1)
+				return last ? `(?:${body})` : `(?:${body})/`
+			})
+			.join('')}$`,
+		flags: 'u',
+	}))
 	return {
 		root,
 		prefix,