@skydiveai/pi-server 0.1.0-beta.2864 → 0.1.0-beta.2978

package/dist/index.mjs

@@ -919,6 +919,18 @@ function providerId(err, message) {
 */
 const CONTEXT_OVERFLOW_MESSAGE = /prompt is too long|context[_ ]length[_ ]exceeded|maximum context length|exceeds maximum token limit|input token count|too many tokens|exceeds the maximum/i;
 /**
+* A content-filter / model-safety termination message from any provider.
+* Used by BOTH the classifyCode message fallback and isModelProviderError's
+* gate (a shape recognized there must pass this gate or it never gets
+* classified), so it lives in one place rather than two copies kept "in
+* sync" by comment. Verified shapes (see classifyCode):
+*   - "Provider finish_reason: content_filter" (Anthropic/gateway 200 stream)
+*   - "This request triggered restrictions on violative cyber content ..."
+*   - "This request triggered cyber-related safeguards. ..."
+*   - "This content was flagged for possible cybersecurity risk. ..."
+*/
+const CONTENT_FILTER_MESSAGE = /finish_reason:\s*content_filter|content[_ ]filter|content[_ ]management[_ ]policy|violative cyber content|cyber[- ]related safeguards|cybersecurity risk|cyber verification program/i;
+/**
 * Map a provider error to a stable code. Prefers the provider's machine code
 * (OpenAI `error.code`, OpenRouter `error.metadata.error_type`) over message
 * text, then falls back to status + message regex for providers that don't
@@ -931,7 +943,7 @@ function classifyCode(status, message, code) {
 	if (status === 429 || code === "rate_limit_exceeded" || /rate[_ ]limit|too many requests|resource[_ ]exhausted/i.test(message)) return "rate_limited";
 	if (status === 529 || code === "provider_overloaded" || /overloaded/i.test(message)) return "provider_overloaded";
 	if (status === 503 || status === 504 || code === "provider_unavailable" || /no healthy upstream|upstream request timeout|stream timeout|service unavailable|unavailable|gateway/i.test(message)) return "provider_unavailable";
-	if (code === "content_filter" || /finish_reason:\s*content_filter|content[_ ]filter|content[_ ]management[_ ]policy/i.test(message)) return "content_filter";
+	if (code === "content_filter" || CONTENT_FILTER_MESSAGE.test(message)) return "content_filter";
 	return "provider_error";
 }
 /**
@@ -946,7 +958,7 @@ function isModelProviderError(err) {
 	if (numericStatus(e) !== null) return true;
 	if (e.error && typeof e.error === "object") return true;
 	const msg = messageText(err);
-	return /prompt is too long|context[_ ]length[_ ]exceeded|exceeds maximum token limit|input token count|rate[_ ]limit|overloaded|no healthy upstream|upstream request timeout|insufficient credits|requires more credits|credit balance is too low|payment required|purchase more credits|finish_reason:\s*content_filter|content[_ ]filter|content[_ ]management[_ ]policy/i.test(msg);
+	return /prompt is too long|context[_ ]length[_ ]exceeded|exceeds maximum token limit|input token count|rate[_ ]limit|overloaded|no healthy upstream|upstream request timeout|insufficient credits|requires more credits|credit balance is too low|payment required|purchase more credits/i.test(msg) || CONTENT_FILTER_MESSAGE.test(msg);
 }
 /** Build the structured, forwardable error from a thrown model-provider error. */
 function toModelProviderError(err) {
@@ -1509,6 +1521,21 @@ function parsePrefixedSignal(message) {
 	}
 }
 /**
+* The sandbox proxy's other 402 envelope (verified prod 2026-09-20): the
+* billing gate's body surfaces with the type/code at TOP level and the
+* versioned signal nested inside `message` —
+*   {"type":"billing_blocked","code":"billing_blocked","message":
+*    "ANYONE_BILLING_BLOCKED_V1:{\"blockReason\":\"insufficient_balance\",…}"}
+* — with no blockReason/error wrapper for nestedProxyEnvelopeSchema, so it
+* used to fall through and degrade to a generic model-provider error that
+* read as "The model stopped responding" on an out-of-credit org. The outer
+* shape is validated with a schema instead of ad-hoc casting, and only the
+* top-level `message` is peeled; a signal nested inside `error.message` is
+* handled below through nestedProxyEnvelopeSchema's full integrity checks
+* (validating type, code, blockReason, and message agreement).
+*/
+const topLevelMessageEnvelopeSchema = z.object({ message: z.string().optional() }).passthrough();
+/**
 * Decode only the versioned platform envelope. Anthropic and OpenAI prefix the
 * nested error message with HTTP 402. Google's SDK instead preserves the full
 * proxy response as JSON, so that outer shape is validated separately.
@@ -1517,16 +1544,24 @@ function parseBillingBlockedProviderSignal(message) {
 	const unwrapped = unwrapOpenAICompatStatusPrefix(message);
 	const direct = parsePrefixedSignal(unwrapped);
 	if (direct) return direct;
+	let body;
 	try {
-		const envelope = nestedProxyEnvelopeSchema.safeParse(JSON.parse(unwrapped));
-		if (!envelope.success) return null;
-		const nested = parsePrefixedSignal(envelope.data.error.message);
-		const topLevel = parsePrefixedSignal(envelope.data.message);
-		if (!nested || nested.blockReason !== envelope.data.blockReason || envelope.data.message !== nested.message && (!topLevel || topLevel.blockReason !== nested.blockReason || topLevel.message !== nested.message)) return null;
-		return nested;
+		body = JSON.parse(unwrapped);
 	} catch (_err) {
 		return null;
 	}
+	if (body === null || typeof body !== "object") return null;
+	const nested = topLevelMessageEnvelopeSchema.safeParse(body);
+	if (nested.success && nested.data.message) {
+		const signal = parsePrefixedSignal(nested.data.message);
+		if (signal) return signal;
+	}
+	const envelope = nestedProxyEnvelopeSchema.safeParse(body);
+	if (!envelope.success) return null;
+	const nestedError = parsePrefixedSignal(envelope.data.error.message);
+	const topLevel = parsePrefixedSignal(envelope.data.message);
+	if (!nestedError || nestedError.blockReason !== envelope.data.blockReason || envelope.data.message !== nestedError.message && (!topLevel || topLevel.blockReason !== nestedError.blockReason || topLevel.message !== nestedError.message)) return null;
+	return nestedError;
 }
 //#endregion
 //#region src/protocols/chat-completions.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skydiveai/pi-server",
-  "version": "0.1.0-beta.2864",
+  "version": "0.1.0-beta.2978",
   "homepage": "https://skydive.com",
   "license": "MIT",
   "author": "Create, Inc.",