@openclaw/ai 2026.9.7 → 2026.10.1-beta.1

package/README.md

@@ -21,7 +21,10 @@ Provider ids, credentials, model catalogs, retries, and failover remain
 application concerns. OpenClaw supplies those policies around this package.
 Host policy (request fetch guarding, secret redaction, strict-tool defaults,
 provider plugin hooks, and diagnostics logging) can be injected with
-`configureAiTransportHost`; the defaults are inert.
+`configureAiTransportHost`; the defaults are inert. Node callers that need
+runtime-local policy can use `createNodeLlmRuntime`; it preserves that host across
+provider work without replacing the process default. `createLlmRuntime` continues
+to use the process-default host.
 
 The explicit `@openclaw/ai/internal/anthropic`, `google-model-family`, `openai`,
 `openai-completions-compat`, `openai-responses-payload-policy`, `retry-after`, `runtime`, `shared`, and

package/dist/{anthropic-Cw2pgccz.mjs → anthropic-CZv6XFER.mjs}

@@ -1,18 +1,18 @@
 import { t as __exportAll } from "./rolldown-runtime-BhDjJH2R.mjs";
-import { S as supportsClaudeAdaptiveThinking, b as resolveClaudeSonnet5ModelIdentity, v as resolveClaudeOpus5ModelIdentity, y as resolveClaudeSonnet55ModelIdentity } from "./src-H4aXcFuX.mjs";
-import { t as AssistantMessageEventStream } from "./event-stream-vd9UnCAU.mjs";
-import { _ as requiresClaudeAdaptiveThinking, b as usesClaudeFable5MessagesContract, f as applyClaudeRequestContract, g as prepareClaudeNoPrefillRequestContext, n as getAiTransportHost, p as buildAnthropicClaudeCodeIdentity, r as resolveAiTransportHeaderSentinels, v as resolveAnthropicThinkingEffort, x as usesClaudeStreamingRefusalContract } from "./host-CHi3X87F.mjs";
-import { t as MALFORMED_STREAMING_FRAGMENT_ERROR_MESSAGE } from "./transport-utils-C-4bf2Ok.mjs";
-import { A as applyAnthropicRequestCacheControl, B as ANTHROPIC_SERVER_SIDE_FALLBACKS, C as applyAnthropicThinkingBindingControls, D as applyAnthropicContextManagementToRequest, F as resolveAnthropicCacheOptions, J as usesFoundryBearerAuth, K as isAnthropicOAuthApiKey, N as isDirectAnthropicModel, R as resolveAnthropicRequestBetaHeader, d as convertAnthropicTools, f as buildAnthropicReplayPlan, g as normalizeAnthropicToolCallId, h as suppressAnthropicCompaction, j as buildAnthropicSystemBlocks, l as buildAnthropicGenerationParams, p as isAnthropicReplayRejection, q as omitFoundryBearerCredentialHeaders, t as consumeAnthropicStream, u as convertAnthropicMessages } from "./anthropic-stream-reducer-D9MCkl8Z.mjs";
-import { t as resolveCacheRetention } from "./cache-retention-0x979a5V.mjs";
-import { D as parseJsonWithRepair, m as notifyProviderHttpResponse, n as assignTransportErrorDetails, u as finalizeTransportStream } from "./transport-stream-shared-Dh5qKJ8e.mjs";
-import { n as buildBaseOptions, r as clampMaxTokensToModel, t as adjustMaxTokensForThinking } from "./simple-options-CGAkCwtM.mjs";
+import { S as supportsClaudeAdaptiveThinking, b as resolveClaudeSonnet5ModelIdentity, v as resolveClaudeOpus5ModelIdentity } from "./src-B0NIt2UK.mjs";
+import { t as AssistantMessageEventStream } from "./event-stream-C5AbCAaZ.mjs";
+import { S as resolveAnthropicThinkingEffort, T as usesClaudeStreamingRefusalContract, _ as buildAnthropicClaudeCodeIdentity, a as resolveAiTransportHeaderSentinels, b as prepareClaudeNoPrefillRequestContext, r as getAiTransportHost, x as requiresClaudeAdaptiveThinking } from "./host-DCW52iHe.mjs";
+import { n as MALFORMED_STREAMING_FRAGMENT_ERROR_MESSAGE } from "./text-signature-MLwfi6fq.mjs";
+import { C as isAnthropicReplayRejection, J as usesFoundryBearerAuth, K as isAnthropicOAuthApiKey, M as isDirectAnthropicModel, T as suppressAnthropicCompaction, l as buildAnthropicRequest, q as omitFoundryBearerCredentialHeaders, t as consumeAnthropicStream, u as prepareAnthropicRequest, z as supportsAnthropicServerSideFallback } from "./anthropic-stream-reducer-BQ1tjd7x.mjs";
+import { i as resolveCacheRetention, n as resolveCloudflareBaseUrl, r as buildCopilotDynamicHeaders } from "./cloudflare-5qSGvIUH.mjs";
+import { D as parseJsonWithRepair, m as notifyProviderHttpResponse, n as assignTransportErrorDetails, u as finalizeTransportStream } from "./transport-stream-shared-CxXXz_Dd.mjs";
+import { n as buildBaseOptions, r as clampMaxTokensToModel, t as adjustMaxTokensForThinking } from "./simple-options-BkKTXxhp.mjs";
 import { n as getEnvApiKey } from "./env-api-keys-CyX4VKGO.mjs";
 import { t as createDeferredEventBuffer } from "./deferred-event-buffer-DAvyP7qA.mjs";
-import { t as notifyLlmRequestActivity } from "./llm-request-activity-BjtkplhG.mjs";
-import { n as createAssistantOutput, t as transformProviderMessages } from "./provider-transcript-transform-JbFbHV8h.mjs";
-import { n as resolveOpencodeSessionHeaders } from "./session-affinity-Bcunsn4I.mjs";
-import { i as resolveCloudflareBaseUrl, n as hasCopilotVisionInput, t as buildCopilotDynamicHeaders } from "./github-copilot-headers-B37TB3rB.mjs";
+import { t as createAssistantOutput } from "./assistant-output-OLm-Oln0.mjs";
+import { t as notifyLlmRequestActivity } from "./llm-request-activity-D8f_oxHj.mjs";
+import { n as resolveOpencodeSessionHeaders } from "./session-affinity-DA4WHv1h.mjs";
+import { t as requireApiKey } from "./required-api-key-D4kn3252.mjs";
 import Anthropic from "@anthropic-ai/sdk";
 import { Stream } from "@anthropic-ai/sdk/core/streaming.js";
 //#region packages/ai/src/providers/anthropic.ts
@@ -28,13 +28,9 @@ function getAnthropicCompat(model) {
 	const isCloudflareAiGatewayAnthropic = model.provider === "cloudflare-ai-gateway" && model.baseUrl.includes("anthropic");
 	return {
 		supportsEagerToolInputStreaming: model.compat?.supportsEagerToolInputStreaming ?? !isFireworks,
-		sendSessionAffinityHeaders: model.compat?.sendSessionAffinityHeaders ?? (isFireworks || isCloudflareAiGatewayAnthropic),
-		allowEmptySignature: model.compat?.allowEmptySignature ?? false
+		sendSessionAffinityHeaders: model.compat?.sendSessionAffinityHeaders ?? (isFireworks || isCloudflareAiGatewayAnthropic)
 	};
 }
-function mergeHeaders(...headerSources) {
-	return Object.assign({}, ...headerSources);
-}
 const ANTHROPIC_MESSAGE_EVENTS = /* @__PURE__ */ new Set([
 	"message_start",
 	"message_delta",
@@ -76,36 +72,23 @@ const streamAnthropic = (model, context, options) => {
 				isOAuth = false;
 			} else {
 				const apiKey = requestOptions?.apiKey ?? getEnvApiKey(model.provider) ?? "";
-				let copilotDynamicHeaders;
-				if (model.provider === "github-copilot") {
-					const hasImages = hasCopilotVisionInput(requestContext.messages);
-					copilotDynamicHeaders = buildCopilotDynamicHeaders({
-						messages: requestContext.messages,
-						hasImages
-					});
-				}
+				const copilotDynamicHeaders = model.provider === "github-copilot" ? buildCopilotDynamicHeaders(requestContext.messages) : void 0;
 				const cacheSessionId = (requestOptions?.cacheRetention ?? resolveCacheRetention()) === "none" ? void 0 : requestOptions?.sessionId;
-				const created = createClient(model, apiKey, requestOptions?.thinkingEnabled === true, requestOptions?.interleavedThinking ?? true, shouldUseFineGrainedToolStreamingBeta(model, requestContext), resolveOpencodeSessionHeaders(model, requestOptions), copilotDynamicHeaders, cacheSessionId);
+				const created = createClient(model, apiKey, requestOptions?.thinkingEnabled === true, requestOptions?.interleavedThinking ?? true, Boolean(requestContext.tools?.length) && !getAnthropicCompat(model).supportsEagerToolInputStreaming, resolveOpencodeSessionHeaders(model, requestOptions), copilotDynamicHeaders, cacheSessionId);
 				client = created.client;
 				isOAuth = created.isOAuthToken;
 				serverSideFallback = created.serverSideFallback;
 				directApiKeyBetaHeader = created.directApiKeyBetaHeader;
 				claudeCodeVersion = created.claudeCodeVersion;
 			}
-			const builtParams = await buildParams(model, requestContext, isOAuth, requestOptions, serverSideFallback, claudeCodeVersion);
+			const builtParams = await buildAnthropicRequest(model, requestContext, requestOptions, "provider", isOAuth, serverSideFallback, claudeCodeVersion);
 			usedCompactionReplay = builtParams.usedCompactionReplay;
-			let params = builtParams.params;
-			const toolProjection = builtParams.toolProjection;
-			applyAnthropicContextManagementToRequest(params, model, requestOptions, directApiKeyBetaHeader);
-			const nextParams = await requestOptions?.onPayload?.(params, model);
-			if (nextParams !== void 0) params = nextParams;
-			applyClaudeRequestContract(params, model);
-			const betaHeader = resolveAnthropicRequestBetaHeader(params, directApiKeyBetaHeader);
+			const { params, headers } = await prepareAnthropicRequest(builtParams.params, model, requestOptions, directApiKeyBetaHeader);
 			const sdkRequestOptions = {
 				...requestOptions?.signal ? { signal: requestOptions.signal } : {},
 				...requestOptions?.timeoutMs !== void 0 ? { timeout: requestOptions.timeoutMs } : {},
 				maxRetries: 0,
-				headers: applyAnthropicThinkingBindingControls(params, betaHeader) ?? (betaHeader ? { "anthropic-beta": betaHeader } : void 0)
+				headers
 			};
 			const response = await client.messages.create({
 				...params,
@@ -124,7 +107,7 @@ const streamAnthropic = (model, context, options) => {
 				stream,
 				refusalBuffer,
 				isOAuthToken: isOAuth,
-				toolProjection,
+				toolProjection: builtParams.toolProjection,
 				profile: "provider"
 			});
 			finalizeTransportStream({
@@ -165,8 +148,7 @@ function normalizeAnthropicThinkingOptions(model, options) {
 	};
 }
 const streamSimpleAnthropic = (model, context, options) => {
-	const apiKey = options?.apiKey || getEnvApiKey(model.provider);
-	if (!apiKey) throw new Error(`No API key for provider: ${model.provider}`);
+	const apiKey = requireApiKey(model.provider, options?.apiKey);
 	const base = {
 		...buildBaseOptions(model, options, apiKey),
 		anthropicServerCompaction: options?.anthropicServerCompaction,
@@ -182,8 +164,8 @@ const streamSimpleAnthropic = (model, context, options) => {
 		...base,
 		thinkingEnabled: false
 	});
-	const reasoning = options?.reasoning === "off" ? mandatoryAdaptiveThinking ? "low" : "high" : options?.reasoning;
-	if (resolveClaudeOpus5ModelIdentity(model) || resolveClaudeSonnet5ModelIdentity(model)) return streamAnthropic(model, context, {
+	const reasoning = options?.reasoning === "off" ? "low" : options?.reasoning;
+	if (resolveClaudeOpus5ModelIdentity(model) || resolveClaudeSonnet5ModelIdentity(model) || reasoning && supportsClaudeAdaptiveThinking(model)) return streamAnthropic(model, context, {
 		...base,
 		thinkingEnabled: true,
 		effort: resolveAnthropicThinkingEffort(model, reasoning)
@@ -192,14 +174,6 @@ const streamSimpleAnthropic = (model, context, options) => {
 		...base,
 		thinkingEnabled: mandatoryAdaptiveThinking
 	});
-	if (supportsClaudeAdaptiveThinking(model)) {
-		const effort = resolveAnthropicThinkingEffort(model, reasoning);
-		return streamAnthropic(model, context, {
-			...base,
-			thinkingEnabled: true,
-			effort
-		});
-	}
 	const adjusted = adjustMaxTokensForThinking(base.maxTokens, model.maxTokens ?? base.maxTokens, reasoning, options?.thinkingBudgets);
 	const thinkingEnabled = adjusted.thinkingBudget >= ANTHROPIC_MIN_THINKING_BUDGET_TOKENS;
 	const maxTokens = thinkingEnabled ? adjusted.maxTokens : clampMaxTokensToModel(model, options?.maxTokens ?? model.maxTokens);
@@ -210,15 +184,6 @@ const streamSimpleAnthropic = (model, context, options) => {
 		thinkingBudgetTokens: thinkingEnabled ? adjusted.thinkingBudget : void 0
 	});
 };
-/**
-* Server-side refusal fallback is a first-party Claude API beta: proxies and
-* Bedrock/Vertex/Foundry reject the `fallbacks` param, and OAuth (Claude Code
-* identity) requests are excluded until the beta is verified there.
-*/
-function supportsAnthropicServerSideFallback(model) {
-	if (!usesClaudeFable5MessagesContract(model) && resolveClaudeOpus5ModelIdentity(model) === void 0 && resolveClaudeSonnet55ModelIdentity(model) === void 0 || model.provider !== "anthropic") return false;
-	return isDirectAnthropicModel(model);
-}
 function createClient(model, apiKey, thinkingEnabled, interleavedThinking, useFineGrainedToolStreamingBeta, optionsHeaders, dynamicHeaders, sessionId) {
 	const needsInterleavedBeta = interleavedThinking && !supportsClaudeAdaptiveThinking(model);
 	const betaFeatures = [];
@@ -236,112 +201,52 @@ function createClient(model, apiKey, thinkingEnabled, interleavedThinking, useFi
 		"anthropic-dangerous-direct-browser-access": "true",
 		...betaFeatures.length > 0 ? { "anthropic-beta": betaFeatures.join(",") } : {}
 	};
-	if (model.provider === "cloudflare-ai-gateway") return {
-		client: new Anthropic({
-			...clientOptions,
-			apiKey,
-			authToken: null,
-			baseURL: resolveCloudflareBaseUrl(model),
-			defaultHeaders: mergeHeaders({
-				accept: baseHeaders.accept,
-				"anthropic-dangerous-direct-browser-access": "true",
-				Authorization: null,
-				...betaFeatures.length > 0 ? { "anthropic-beta": betaFeatures.join(",") } : {}
-			}, model.headers, optionsHeaders)
-		}),
-		isOAuthToken: false,
-		serverSideFallback: false
-	};
+	let configuredApiKey = apiKey;
+	let authToken = null;
+	let defaultHeaders;
+	let isOAuthToken = false;
+	let serverSideFallback = false;
+	let directApiKeyBetaHeader;
+	let claudeCodeVersion;
 	const isCopilot = model.provider === "github-copilot";
-	if (isCopilot || usesFoundryBearerAuth({
+	if (model.provider === "cloudflare-ai-gateway") {
+		clientOptions.baseURL = resolveCloudflareBaseUrl(model);
+		defaultHeaders = Object.assign({}, baseHeaders, { Authorization: null }, model.headers, optionsHeaders);
+	} else if (isCopilot || usesFoundryBearerAuth({
 		...model,
 		headers: resolveAiTransportHeaderSentinels(model.headers)
-	})) return {
-		client: new Anthropic({
-			...clientOptions,
-			apiKey: null,
-			authToken: apiKey,
-			defaultHeaders: mergeHeaders(baseHeaders, isCopilot ? model.headers : omitFoundryBearerCredentialHeaders(model.headers), dynamicHeaders, optionsHeaders)
-		}),
-		isOAuthToken: false,
-		serverSideFallback: false
-	};
-	if (isAnthropicOAuthApiKey(apiKey)) {
+	})) {
+		configuredApiKey = null;
+		authToken = apiKey;
+		defaultHeaders = Object.assign({}, baseHeaders, isCopilot ? model.headers : omitFoundryBearerCredentialHeaders(model.headers), dynamicHeaders, optionsHeaders);
+	} else if (isAnthropicOAuthApiKey(apiKey)) {
 		const identity = buildAnthropicClaudeCodeIdentity([
 			"claude-code-20250219",
 			"oauth-2025-04-20",
 			...betaFeatures
 		].join(","), model.headers, optionsHeaders);
-		return {
-			client: new Anthropic({
-				...clientOptions,
-				apiKey: null,
-				authToken: apiKey,
-				defaultHeaders: identity.headers
-			}),
-			isOAuthToken: true,
-			serverSideFallback: false,
-			claudeCodeVersion: identity.version
-		};
+		configuredApiKey = null;
+		authToken = apiKey;
+		defaultHeaders = identity.headers;
+		isOAuthToken = true;
+		claudeCodeVersion = identity.version;
+	} else {
+		serverSideFallback = model.provider === "anthropic" && supportsAnthropicServerSideFallback(model);
+		defaultHeaders = Object.assign({}, baseHeaders, sessionId && getAnthropicCompat(model).sendSessionAffinityHeaders ? { "x-session-affinity": sessionId } : {}, model.headers, optionsHeaders);
+		if (isDirectAnthropicModel(model)) directApiKeyBetaHeader = Object.entries(defaultHeaders).findLast(([name]) => name.toLowerCase() === "anthropic-beta")?.[1] ?? "";
 	}
-	const serverSideFallback = supportsAnthropicServerSideFallback(model);
-	const defaultHeaders = mergeHeaders(baseHeaders, sessionId && getAnthropicCompat(model).sendSessionAffinityHeaders ? { "x-session-affinity": sessionId } : {}, model.headers, optionsHeaders);
 	return {
 		client: new Anthropic({
 			...clientOptions,
-			apiKey,
-			authToken: null,
+			apiKey: configuredApiKey,
+			authToken,
 			defaultHeaders
 		}),
-		isOAuthToken: false,
+		isOAuthToken,
 		serverSideFallback,
-		directApiKeyBetaHeader: isDirectAnthropicModel(model) ? Object.entries(defaultHeaders).findLast(([name]) => name.toLowerCase() === "anthropic-beta")?.[1] ?? "" : void 0
+		directApiKeyBetaHeader,
+		claudeCodeVersion
 	};
 }
-async function buildParams(model, context, isOAuthTokenResult, options, serverSideFallback = false, claudeCodeVersion) {
-	const replayThinkingEnabled = requiresClaudeAdaptiveThinking(model) || options?.thinkingEnabled === true;
-	const { cacheControl, supportsCacheControlOnTools } = resolveAnthropicCacheOptions(model, options?.cacheRetention);
-	const system = buildAnthropicSystemBlocks(context.systemPrompt, isOAuthTokenResult, cacheControl, claudeCodeVersion);
-	const compat = getAnthropicCompat(model);
-	const convertedTools = context.tools ? convertAnthropicTools(context.tools, isOAuthTokenResult, compat.supportsEagerToolInputStreaming) : void 0;
-	const tools = convertedTools?.tools;
-	const toolProjection = convertedTools?.projection;
-	const replayPlan = buildAnthropicReplayPlan(context.messages, model, {
-		enabled: !isOAuthTokenResult && options?.anthropicServerCompaction === true,
-		authProfileId: options?.authProfileId,
-		sessionId: options?.sessionId
-	});
-	const cacheBreakpointOptOutMessageIndexes = /* @__PURE__ */ new Set();
-	const params = {
-		model: model.id,
-		messages: await convertAnthropicMessages(transformProviderMessages(replayPlan.messages, model, normalizeAnthropicToolCallId), model, isOAuthTokenResult, {
-			profile: "provider",
-			allowEmptySignature: compat.allowEmptySignature,
-			compaction: replayPlan.compaction,
-			replayThinkingEnabled,
-			cacheBreakpointOptOutMessageIndexes
-		}),
-		max_tokens: options?.maxTokens ?? model.maxTokens,
-		stream: true
-	};
-	if (system) params.system = system;
-	if (serverSideFallback) params.fallbacks = ANTHROPIC_SERVER_SIDE_FALLBACKS;
-	Object.assign(params, buildAnthropicGenerationParams({
-		model,
-		options,
-		tools,
-		toolProjection,
-		profile: "provider"
-	}));
-	applyAnthropicRequestCacheControl(params, cacheControl, supportsCacheControlOnTools, cacheBreakpointOptOutMessageIndexes);
-	return {
-		params,
-		toolProjection,
-		usedCompactionReplay: replayPlan.compaction !== void 0
-	};
-}
-function shouldUseFineGrainedToolStreamingBeta(model, context) {
-	return Boolean(context.tools?.length) && !getAnthropicCompat(model).supportsEagerToolInputStreaming;
-}
 //#endregion
 export { streamAnthropic as n, streamSimpleAnthropic as r, anthropic_exports as t };

package/dist/{anthropic-payload-policy-NIPVYXPq.d.mts → anthropic-payload-policy-BhCcgNdm.d.mts}

@@ -1,6 +1,6 @@
-import "./index-D6KsSE74.mjs";
-import { O as Model } from "./types-CLLR3eB4.mjs";
-import { t as AnthropicContextManagementOptions } from "./provider-options-Df7ov0K1.mjs";
+import "./index-a8e_oKnu.mjs";
+import { k as Model } from "./types-DvzmWW8J.mjs";
+import { t as AnthropicContextManagementOptions } from "./provider-options-D5ABCV_l.mjs";
 import { TextBlockParam } from "@anthropic-ai/sdk/resources/messages.js";
 //#region packages/ai/src/transports/anthropic-payload-policy.d.ts
 /** @deprecated Anthropic-family provider payload helper; do not use from third-party plugins. */
@@ -48,7 +48,10 @@ declare function resolveAnthropicServerCompactionPlan(model: {
 declare function isDirectAnthropicModel(model: {
   provider?: unknown;
   baseUrl?: string;
+}, env?: {
+  ANTHROPIC_BASE_URL?: string;
 }): boolean;
+declare function supportsAnthropicServerSideFallback(model: Model<"anthropic-messages">): boolean;
 declare function isAnthropicServerToolClearingEnabled(model: {
   provider?: unknown;
   api?: unknown;
@@ -84,4 +87,4 @@ declare function applyAnthropicPayloadPolicyToParams(payloadObj: Record<string,
 /** @deprecated Anthropic-family provider payload helper; do not use from third-party plugins. */
 declare function applyAnthropicEphemeralCacheControlMarkers(payloadObj: Record<string, unknown>, cacheControl?: AnthropicEphemeralCacheControl | null): void;
 //#endregion
-export { buildAnthropicSystemBlocks as a, logAnthropicContextEdits as c, resolveAnthropicPayloadPolicy as d, resolveAnthropicRequestBetaHeader as f, applyAnthropicRequestCacheControl as i, resolveAnthropicCacheOptions as l, applyAnthropicEphemeralCacheControlMarkers as n, isAnthropicServerToolClearingEnabled as o, resolveAnthropicServerCompactionPlan as p, applyAnthropicPayloadPolicyToParams as r, isDirectAnthropicModel as s, applyAnthropicContextManagementToRequest as t, resolveAnthropicEphemeralCacheControl as u };
+export { buildAnthropicSystemBlocks as a, logAnthropicContextEdits as c, resolveAnthropicPayloadPolicy as d, resolveAnthropicRequestBetaHeader as f, applyAnthropicRequestCacheControl as i, resolveAnthropicCacheOptions as l, supportsAnthropicServerSideFallback as m, applyAnthropicEphemeralCacheControlMarkers as n, isAnthropicServerToolClearingEnabled as o, resolveAnthropicServerCompactionPlan as p, applyAnthropicPayloadPolicyToParams as r, isDirectAnthropicModel as s, applyAnthropicContextManagementToRequest as t, resolveAnthropicEphemeralCacheControl as u };