@nexrall/code-core 1.4.14 → 1.4.16

package/dist/api/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA8B,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiErH,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAIzC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5D,OAAO,EAAE,CAAC,EAAE,EACZ,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACtD,CAAC,EAAE,CAeL;AAeD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACjG,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6IAA6I;IAC7I,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAiDD,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CA80BlB;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9D;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAalD;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAgB1E;AAID,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAkBhF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAA8B,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiErH,eAAO,MAAM,QAAQ,QAAmB,CAAC;AAIzC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAC5D,OAAO,EAAE,CAAC,EAAE,EACZ,UAAU,EAAE,KAAK,CAAC;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GACtD,CAAC,EAAE,CAeL;AAeD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACnC,oFAAoF;IACpF,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IACjG,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6IAA6I;IAC7I,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;;;;;;OAeG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAiDD,wBAAsB,UAAU,CAC9B,QAAQ,EAAE,OAAO,EAAE,EACnB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,GAC7B,OAAO,CAAC,OAAO,CAAC,CAi7BlB;AAID;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAU9D;AAID,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAalD;AAID,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAgB1E;AAID,wBAAsB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAkBhF"}

package/dist/api/client.js

@@ -314,6 +314,10 @@ async function streamChat(messages, options, onEvent) {
         // A 409's body, already consumed to classify it. node-fetch bodies are single-use, so
         // the !response.ok handler below reads this instead of calling response.text() again.
         let errorBodyOverride = null;
+        // Set when a 403 upstream-forbidden (Anthropic passthrough, see below) used up its
+        // short in-loop retry budget — the final throw tags `retryable: true` so it still
+        // reaches the outer 5-minute stream-retry loop instead of dying as a terminal error.
+        let forbiddenExhausted = false;
         for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
             try {
                 response = await (0, node_fetch_1.default)(...buildFetchArgs());
@@ -328,6 +332,48 @@ async function streamChat(messages, options, onEvent) {
                     await sleepWithinBudget(backoffMs(attempt));
                     continue;
                 }
+                // 403 `{"error":{"type":"forbidden","message":"Request not allowed"}}` is
+                // Anthropic's own upstream response shape (reproduced verbatim through the AI
+                // Gateway passthrough — see services/aiGatewayClient.js), not something Nexrall's
+                // auth layer produces (an expired/invalid Nexrall JWT is a 401/403 with a
+                // completely different body — see middleware/auth.js). Reports of this exact
+                // error on Anthropic's own CLI describe it as intermittent and gone on retry, not
+                // a real permissions failure — so unlike every OTHER 4xx below (which are
+                // deterministic given the same body and must not be retried), this one gets a
+                // short, capped number of attempts before being treated as terminal. Capped well
+                // below MAX_RETRIES so a genuinely revoked/banned key still fails fast instead of
+                // burning the whole reconnect budget on something that will never succeed.
+                const FORBIDDEN_RETRY_LIMIT = 2;
+                if (response.status === 403) {
+                    const bodyText = await response.text().catch(() => '');
+                    let isUpstreamForbidden = false;
+                    try {
+                        const parsed = JSON.parse(bodyText);
+                        isUpstreamForbidden = parsed?.error?.type === 'forbidden';
+                    }
+                    catch { /* not JSON — not this shape, fall through as terminal below */ }
+                    if (isUpstreamForbidden) {
+                        if (attempt < FORBIDDEN_RETRY_LIMIT && canRetry()) {
+                            reportRetry('Upstream rejected the request — retrying');
+                            await sleepWithinBudget(backoffMs(attempt));
+                            continue;
+                        }
+                        // Exhausted the short in-connect-loop attempt budget, but this is still the
+                        // SAME transient upstream shape (not a real permissions failure) — it must not
+                        // die here after only ~2-4s of backoff. `forbiddenExhausted` makes the final
+                        // throw below tag `retryable: true` so the OUTER stream-retry loop (which owns
+                        // the shared 5-minute reconnect budget — see MAX_TOTAL_RETRY_MS) picks it back
+                        // up and keeps trying, instead of surfacing a bare terminal "API error 403"
+                        // while minutes of retry budget were still available.
+                        forbiddenExhausted = true;
+                        errorBodyOverride = bodyText;
+                        break;
+                    }
+                    // Not the known transient shape — treat as terminal, but reuse the body we
+                    // already consumed (node-fetch bodies are single-use) instead of losing it.
+                    errorBodyOverride = bodyText;
+                    break;
+                }
                 // 410 Gone — a resume was refused because the buffered window no longer contains
                 // our position (we were away too long, or the turn produced a huge amount in the
                 // meantime). Continuity can't be proven, and silently skipping frames would corrupt
@@ -468,7 +514,11 @@ async function streamChat(messages, options, onEvent) {
             // Tag a 402 (pre-flight "wallet already empty" gate — see routes/code.js) so the
             // agent loop can distinguish it from a generic error and surface the low/zero-
             // balance topup nudge immediately, instead of a plain "API error 402" message.
-            throw Object.assign(new Error(errMsg), { status: response.status, balance });
+            //
+            // `retryable: true` on `forbiddenExhausted` hands the transient 403-upstream-forbidden
+            // case (see above) to the outer stream-retry loop instead of letting it die as a
+            // terminal error the moment the short in-connect-loop budget runs out.
+            throw Object.assign(new Error(errMsg), { status: response.status, balance, ...(forbiddenExhausted ? { retryable: true } : {}) });
         }
         if (!response.body) {
             throw new Error('Response body is null');
@@ -841,6 +891,16 @@ async function streamChat(messages, options, onEvent) {
                         case 'error': {
                             const message = typeof evt.message === 'string' ? evt.message :
                                 typeof evt.error === 'string' ? evt.error : 'Unknown SSE error';
+                            // The GET /chat/resume tail loop sends this when the turn's Redis frame
+                            // buffer developed a gap (trimmed window, a swallowed flush error, or the
+                            // owning pod died) or the turn is simply gone — see routes/code.js. Unlike
+                            // `isRetryableStreamMsg` below, this is NOT a fuzzy text match: the backend
+                            // sets the flag explicitly, so it can never silently stop matching if either
+                            // side rewrites the English message. There is no cursor left to resume
+                            // from — a plain "retryable" resume-with-Last-Event-ID would just 410 again
+                            // — so this always needs a fresh turnId, which the outer loop mints via
+                            // `forceRestart`.
+                            const notResumable = evt.notResumable === true;
                             // Transient upstream failure before any output → let the outer loop retry it
                             // transparently instead of killing the turn (this is the "Overloaded" case).
                             // But never retry once the turn's message has already been delivered in
@@ -852,6 +912,11 @@ async function streamChat(messages, options, onEvent) {
                                 onEvent({ type: 'error', message });
                                 resolve();
                             }
+                            else if (notResumable && (!emittedToCaller || allowRestartAfterRender)) {
+                                clearInterval(heartbeatWatchdog);
+                                stream.destroy?.();
+                                reject(Object.assign(tagTransient(new Error(message)), { forceRestart: true }));
+                            }
                             else if (isRetryableStreamMsg(message) && (!emittedToCaller || allowRestartAfterRender)) {
                                 clearInterval(heartbeatWatchdog);
                                 stream.destroy?.();
@@ -939,6 +1004,38 @@ async function streamChat(messages, options, onEvent) {
                     throw err;
                 const e = err;
                 if (e.retryable && sAttempt < MAX_RETRIES && canRetry()) {
+                    // The backend explicitly said this turnId's buffer is unrecoverable (gap in the
+                    // Redis frame stream, or the owning pod is gone — see the `notResumable` case in
+                    // client.ts's SSE parser). Resuming with the same `lastEventId` would just hit
+                    // the same wall again, so — exactly like the inline 410-while-resuming handling
+                    // above — release the old claim, mint a fresh turnId, and restart clean instead
+                    // of falling into the "prefer resuming" branch below.
+                    if (e.forceRestart) {
+                        await cancelTurn(turnId);
+                        turnId = (0, crypto_1.randomUUID)();
+                        resuming = false;
+                        serverResumable = false;
+                        lastEventId = 0;
+                        carryText = [];
+                        carryToolUse = [];
+                        const hadRendered = emittedAnythingAcrossAttempts;
+                        const renderedChars = emittedCharsAcrossAttempts;
+                        emittedAnythingAcrossAttempts = false;
+                        emittedCharsAcrossAttempts = 0;
+                        if (hadRendered && !allowRestartAfterRender) {
+                            throw new Error('Connection lost and this turn could no longer be resumed. Send your message again.');
+                        }
+                        if (hadRendered) {
+                            onEvent({
+                                type: 'stream_restart',
+                                reason: err.message || 'Could not resume — restarting this turn',
+                                discardedChars: renderedChars,
+                            });
+                        }
+                        reportRetry('Could not resume — restarting this turn');
+                        await sleepWithinBudget(backoffMs(sAttempt));
+                        continue;
+                    }
                     // PREFER RESUMING over restarting.
                     //
                     // The turn is still generating on the server (a dropped socket no longer aborts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexrall/code-core",
-  "version": "1.4.14",
+  "version": "1.4.16",
   "description": "Core agent loop, tools, and extension primitives for Nexrall Code — embed an AI coding agent in any Node.js application.",
   "license": "MIT",
   "author": "Nexrall <support@nexrall.com> (https://nexrall.com)",