@nexrall/code-core 1.4.14 → 1.4.15

package/dist/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA8B,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiErH,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAIzC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5D,OAAO,EAAE,CAAC,EAAE,EACZ,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACtD,CAAC,EAAE,CAeL;AAeD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACjG,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6IAA6I;IAC7I,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAiDD,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CA80BlB;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9D;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAalD;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAgB1E;AAID,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAkBhF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA8B,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiErH,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAIzC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5D,OAAO,EAAE,CAAC,EAAE,EACZ,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACtD,CAAC,EAAE,CAeL;AAeD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACjG,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6IAA6I;IAC7I,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAiDD,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CA05BlB;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9D;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAalD;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAgB1E;AAID,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAkBhF"}

package/dist/api/client.js

@@ -328,6 +328,36 @@ async function streamChat(messages, options, onEvent) {
                     await sleepWithinBudget(backoffMs(attempt));
                     continue;
                 }
+                // 403 `{"error":{"type":"forbidden","message":"Request not allowed"}}` is
+                // Anthropic's own upstream response shape (reproduced verbatim through the AI
+                // Gateway passthrough — see services/aiGatewayClient.js), not something Nexrall's
+                // auth layer produces (an expired/invalid Nexrall JWT is a 401/403 with a
+                // completely different body — see middleware/auth.js). Reports of this exact
+                // error on Anthropic's own CLI describe it as intermittent and gone on retry, not
+                // a real permissions failure — so unlike every OTHER 4xx below (which are
+                // deterministic given the same body and must not be retried), this one gets a
+                // short, capped number of attempts before being treated as terminal. Capped well
+                // below MAX_RETRIES so a genuinely revoked/banned key still fails fast instead of
+                // burning the whole reconnect budget on something that will never succeed.
+                const FORBIDDEN_RETRY_LIMIT = 2;
+                if (response.status === 403 && attempt < FORBIDDEN_RETRY_LIMIT && canRetry()) {
+                    const bodyText = await response.text().catch(() => '');
+                    let isUpstreamForbidden = false;
+                    try {
+                        const parsed = JSON.parse(bodyText);
+                        isUpstreamForbidden = parsed?.error?.type === 'forbidden';
+                    }
+                    catch { /* not JSON — not this shape, fall through as terminal below */ }
+                    if (isUpstreamForbidden) {
+                        reportRetry('Upstream rejected the request — retrying');
+                        await sleepWithinBudget(backoffMs(attempt));
+                        continue;
+                    }
+                    // Not the known transient shape — treat as terminal, but reuse the body we
+                    // already consumed (node-fetch bodies are single-use) instead of losing it.
+                    errorBodyOverride = bodyText;
+                    break;
+                }
                 // 410 Gone — a resume was refused because the buffered window no longer contains
                 // our position (we were away too long, or the turn produced a huge amount in the
                 // meantime). Continuity can't be proven, and silently skipping frames would corrupt
@@ -841,6 +871,16 @@ async function streamChat(messages, options, onEvent) {
                         case 'error': {
                             const message = typeof evt.message === 'string' ? evt.message :
                                 typeof evt.error === 'string' ? evt.error : 'Unknown SSE error';
+                            // The GET /chat/resume tail loop sends this when the turn's Redis frame
+                            // buffer developed a gap (trimmed window, a swallowed flush error, or the
+                            // owning pod died) or the turn is simply gone — see routes/code.js. Unlike
+                            // `isRetryableStreamMsg` below, this is NOT a fuzzy text match: the backend
+                            // sets the flag explicitly, so it can never silently stop matching if either
+                            // side rewrites the English message. There is no cursor left to resume
+                            // from — a plain "retryable" resume-with-Last-Event-ID would just 410 again
+                            // — so this always needs a fresh turnId, which the outer loop mints via
+                            // `forceRestart`.
+                            const notResumable = evt.notResumable === true;
                             // Transient upstream failure before any output → let the outer loop retry it
                             // transparently instead of killing the turn (this is the "Overloaded" case).
                             // But never retry once the turn's message has already been delivered in
@@ -852,6 +892,11 @@ async function streamChat(messages, options, onEvent) {
                                 onEvent({ type: 'error', message });
                                 resolve();
                             }
+                            else if (notResumable && (!emittedToCaller || allowRestartAfterRender)) {
+                                clearInterval(heartbeatWatchdog);
+                                stream.destroy?.();
+                                reject(Object.assign(tagTransient(new Error(message)), { forceRestart: true }));
+                            }
                             else if (isRetryableStreamMsg(message) && (!emittedToCaller || allowRestartAfterRender)) {
                                 clearInterval(heartbeatWatchdog);
                                 stream.destroy?.();
@@ -939,6 +984,38 @@ async function streamChat(messages, options, onEvent) {
                     throw err;
                 const e = err;
                 if (e.retryable && sAttempt < MAX_RETRIES && canRetry()) {
+                    // The backend explicitly said this turnId's buffer is unrecoverable (gap in the
+                    // Redis frame stream, or the owning pod is gone — see the `notResumable` case in
+                    // client.ts's SSE parser). Resuming with the same `lastEventId` would just hit
+                    // the same wall again, so — exactly like the inline 410-while-resuming handling
+                    // above — release the old claim, mint a fresh turnId, and restart clean instead
+                    // of falling into the "prefer resuming" branch below.
+                    if (e.forceRestart) {
+                        await cancelTurn(turnId);
+                        turnId = (0, crypto_1.randomUUID)();
+                        resuming = false;
+                        serverResumable = false;
+                        lastEventId = 0;
+                        carryText = [];
+                        carryToolUse = [];
+                        const hadRendered = emittedAnythingAcrossAttempts;
+                        const renderedChars = emittedCharsAcrossAttempts;
+                        emittedAnythingAcrossAttempts = false;
+                        emittedCharsAcrossAttempts = 0;
+                        if (hadRendered && !allowRestartAfterRender) {
+                            throw new Error('Connection lost and this turn could no longer be resumed. Send your message again.');
+                        }
+                        if (hadRendered) {
+                            onEvent({
+                                type: 'stream_restart',
+                                reason: err.message || 'Could not resume — restarting this turn',
+                                discardedChars: renderedChars,
+                            });
+                        }
+                        reportRetry('Could not resume — restarting this turn');
+                        await sleepWithinBudget(backoffMs(sAttempt));
+                        continue;
+                    }
                     // PREFER RESUMING over restarting.
                     //
                     // The turn is still generating on the server (a dropped socket no longer aborts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexrall/code-core",
-  "version": "1.4.14",
+  "version": "1.4.15",
   "description": "Core agent loop, tools, and extension primitives for Nexrall Code — embed an AI coding agent in any Node.js application.",
   "license": "MIT",
   "author": "Nexrall <support@nexrall.com> (https://nexrall.com)",