@tormentalabs/claude-code-wire-compat 0.1.0-rc.15 → 0.1.0-rc.17

package/CHANGELOG.md

@@ -2,7 +2,143 @@
 
 All notable changes to this project will be documented in this file.
 
-## [0.1.0-rc.15] - Unreleased
+## [0.1.0-rc.17] - Unreleased
+
+### Added
+
+- **Root `suppressIdentityBlock` (seam S8).** The canonical identity block was
+  composed unconditionally, so a consumer switch whose meaning is "send neither
+  canonical block" — `token_economy.lean_system_non_main` in the `opencode`
+  plugin, which removed billing AND identity before it migrated to this package
+  — was a silent no-op. `suppressIdentityBlock: true` omits the identity block
+  entirely, which with `suppressBillingBlock` makes four canonical prefixes
+  legitimate: `[billing, identity]`, `[identity]`, `[billing]` and `[]`. Only a
+  boolean is accepted; anything else is `INVALID_INPUT`.
+  `evidence.identityBlockSuppressed` is emitted only when the block was actually
+  removed, mirroring `billingBlockSuppressed` exactly, so evidence stays
+  byte-identical for every request that ignores the seam. Recorded in
+  `docs/source-trace.md` as governance ledger L16.
+
+  This is a DIFFERENT field from the L10 `cacheControl.suppressIdentityBlock`,
+  which keeps the block and drops only its `cache_control` marker. The name
+  collision is deliberate — symmetry with `suppressBillingBlock` at the root was
+  judged worth more than a novel name — and the JSDoc of each field states what
+  it does and names the other by its full path.
+
+  The caller-block drop stays UNCONDITIONAL: a caller block byte-equal to the
+  identity text is removed even when the canonical one was suppressed, matching
+  the genuine client and keeping the parser's absence check below sound.
+
+- **`preserveThinkingBlockCacheControl` (seam S9).** `thinking` and
+  `redacted_thinking` blocks were pinned to a strict allowlist — `signature`,
+  `thinking`, `type` and `data`, `type` — so a request carrying `cache_control`
+  on a reasoning block was rejected outright with `INVALID_INPUT`. The consumer
+  had no legal way out, and this is a PRODUCTION failure rather than a test
+  artefact: the Anthropic API answers a mutated reasoning block with
+
+  > `400 ... thinking or redacted_thinking blocks in the latest assistant`
+  > `message cannot be modified. These blocks must remain as they were in the`
+  > `original response.`
+
+  so `delete block.cache_control` before the call is itself the modification
+  that triggers the 400. `preserveThinkingBlockCacheControl: true` accepts the
+  key and copies it to the body VERBATIM — caller key order intact, no TTL
+  applied, no breakpoint placed. Only a boolean is accepted; anything else is
+  `INVALID_INPUT`.
+
+  The allowlist grows by `cache_control` and by NOTHING else: an unknown key on
+  a reasoning block is still `INVALID_INPUT` with the seam active. The value
+  passes the same `cache_control` validator every other block uses —
+  `{ type: "ephemeral" }` with an optional `ttl` — so a malformed marker still
+  fails closed; the `scope` key that `text` blocks tolerate for legacy reasons
+  is deliberately NOT accepted, the API never returning it on a reasoning block.
+  The marker takes no part in this package's cache-control machinery:
+  `applySystemCacheControl` is untouched and `applyMessageCacheControl` already
+  exempts reasoning blocks from both the strip and the breakpoint pass.
+
+  `evidence.thinkingBlockCacheControlPreserved` is emitted only when the seam
+  was active AND at least one emitted block actually carried a marker — opting
+  in without using it records nothing — mirroring `billingBlockSuppressed`
+  exactly, so evidence stays byte-identical for every request that ignores the
+  seam. `parseBuiltClaudeCodeRequest` CONFIRMS that claim against the body
+  before it checks byte length or digest, so a forgery that is byte-length
+  preserving and evidence-self-consistent is refused by the structural check
+  rather than incidentally by arithmetic. Recorded in `docs/source-trace.md` as
+  governance ledger L17.
+
+### Changed
+
+- **`parseBuiltClaudeCodeRequest` no longer INFERS the canonical prefix from the
+  identity block's position; it READS the length from evidence and VERIFIES it
+  structurally.** With two independent seams an empty prefix is
+  indistinguishable from a caller-only array, so position inference is no longer
+  decidable: the rc.16 discriminator would have hit its unconditional failure
+  path on every request built with both seams active. The parser now takes
+  `evidence.billingBlockSuppressed` and `evidence.identityBlockSuppressed` as
+  the claimed prefix length and confirms every block that claim implies —
+  billing by its fixed `x-anthropic-billing-header: cc_version=` head (the tail
+  is per-request), identity by the byte-exact identity text. This is strictly
+  stronger than what it replaces, which never inspected the billing slot at all:
+  an envelope built with `suppressBillingBlock` whose evidence hid that fact was
+  previously accepted.
+
+  Verification is **asymmetric, deliberately**. A claim that identity was
+  suppressed is refuted by finding the identity text ANYWHERE in the array,
+  which is sound because `buildCanonicalSystem` drops caller blocks equal to it
+  unconditionally and merges runs with `\n`, so the text cannot legitimately
+  survive. There is no mirror check for billing: a caller block may legitimately
+  begin with the billing header text, so its presence proves nothing.
+
+  The match is on TEXT, never on `cache_control` — the L10 seam can legitimately
+  emit the identity block with no marker — and the assertion remains an
+  EQUALITY.
+
+- **`emittedSystemBlockCount` is computed from both seams instead of a
+  constant.** `CANONICAL_SYSTEM_BLOCKS` and `CANONICAL_SYSTEM_BLOCKS_WITHOUT_BILLING`
+  were removed: a constant cannot express the empty prefix the two seams produce
+  together. The build path now subtracts one slot per canonical block that
+  actually survived.
+
+## [0.1.0-rc.16] - Unreleased
+
+### Added
+
+- **`suppressBillingBlock` (seam S7).** The canonical billing block at `system[0]`
+  was composed unconditionally, so a consumer switch whose meaning is "do not
+  send the billing block" — `CLAUDE_CODE_ATTRIBUTION_HEADER=0` in
+  `opencode-anthropic-fix` — was a silent no-op. `suppressBillingBlock: true`
+  emits `[identity]` as the canonical prefix instead of `[billing, identity]`.
+  Only a boolean is accepted; anything else is `INVALID_INPUT`.
+  `evidence.billingBlockSuppressed` is emitted only when the block was actually
+  removed, so evidence stays byte-identical for every request that ignores the
+  seam. Suppressing the block changes what Anthropic sees for attribution
+  purposes: that is a deliberate consumer decision, and the package does not
+  guard it. Recorded in `docs/source-trace.md` as governance ledger L15.
+
+### Changed
+
+- **`parseBuiltClaudeCodeRequest` infers the canonical system prefix
+  structurally.** The flag never reaches the wire, so the parser can no longer
+  subtract a constant. It locates the byte-exact identity text — index 1 means a
+  two-block prefix, index 0 means a one-block prefix, neither means the envelope
+  was not produced by this package — matching on TEXT and never on
+  `cache_control`, because `cacheControl.suppressIdentityBlock` can legitimately
+  emit the identity block with no cache marker. The assertion remains an
+  equality.
+
+### Fixed
+
+- **`evidence.systemBlockCount` counted the caller's blocks, not the emitted
+  ones.** `buildCanonicalSystem` merges adjacent caller blocks that share a
+  `cache_control` and drops any block equal to the identity text, so the emitted
+  array was routinely shorter than the caller's while the parser asserted
+  equality against it. Any request with two or more mergeable system blocks was
+  rejected by `parseBuiltClaudeCodeRequest` with an opaque `INVALID_INPUT` and
+  `safeDetails: {}` — a 403 in production with no diagnosable cause, since the
+  parser's only consumer is a proxy validating envelopes from a Worker. Evidence
+  now records the length of the array actually serialized.
+
+## [0.1.0-rc.15] - 2026-07-28
 
 ### Fixed
 

package/dist/betas.d.ts

@@ -12,6 +12,14 @@ export interface ComposeBetasInput {
      * `docs/source-trace.md`, governance ledger L10.
      */
     readonly additionalBetas?: readonly string[];
+    /**
+     * Package extension, not observed upstream behaviour. Beta identifiers
+     * removed from the emitted set AFTER composition and AFTER the
+     * `additionalBetas` merge, so suppression beats addition. An identifier that
+     * is not in the composed set is a silent no-op. See `docs/source-trace.md`,
+     * governance ledger L14.
+     */
+    readonly suppressBetas?: readonly string[];
     /**
      * Package extension, not observed upstream behaviour. Forces (`true`) or
      * suppresses (`false`) the 1M-context beta for this request, overriding the
@@ -19,5 +27,16 @@ export interface ComposeBetasInput {
      */
     readonly use1MContextOverride?: boolean;
 }
+/**
+ * Reports the emitted beta set together with the identifiers `suppressBetas`
+ * actually removed. `suppressedBetaNames` is empty when the seam is unused or
+ * matched nothing, which is what keeps the evidence key absent for every
+ * request built before the seam existed.
+ */
+export interface ComposedBetas {
+    readonly betas: readonly string[];
+    readonly suppressedBetaNames: readonly string[];
+}
 export declare function composeBetas(input: ComposeBetasInput, profile?: ClaudeCodeProtocolProfile): readonly string[];
+export declare function composeBetasWithAudit(input: ComposeBetasInput, profile?: ClaudeCodeProtocolProfile): ComposedBetas;
 //# sourceMappingURL=betas.d.ts.map

package/dist/betas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"betas.d.ts","sourceRoot":"","sources":["../src/betas.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,gBAAgB,CAAC;AAmBxB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AA+BD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,iBAAiB,EACxB,OAAO,GAAE,yBAAuD,GAC/D,SAAS,MAAM,EAAE,CAyFnB"}
+{"version":3,"file":"betas.d.ts","sourceRoot":"","sources":["../src/betas.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,gBAAgB,CAAC;AAmBxB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;CACjD;AAkCD,wBAAgB,YAAY,CAC1B,KAAK,EAAE,iBAAiB,EACxB,OAAO,GAAE,yBAAuD,GAC/D,SAAS,MAAM,EAAE,CAEnB;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,iBAAiB,EACxB,OAAO,GAAE,yBAAuD,GAC/D,aAAa,CA+Gf"}

package/dist/betas.js

@@ -4,7 +4,8 @@ import { ClaudeCodeWireError } from "./contracts.js";
 import { supportsMidConversationSystem, supportsStructuredOutputs, } from "./model-capabilities.js";
 import { CLAUDE_CODE_2_1_195_PROFILE } from "./profiles/claude-code-2.1.195.js";
 /**
- * Bounds the caller-supplied beta list. The header is a comma-joined single
+ * Bounds a caller-supplied beta list (`additionalBetas` and `suppressBetas`
+ * share these rules verbatim). The header is a comma-joined single
  * field, so a comma, control character, or whitespace in an entry would let a
  * caller synthesize extra beta values (or, with CR/LF, an entirely separate
  * header). The allowlist below is deliberately narrower than the observed
@@ -28,7 +29,11 @@ function validateAdditionalBetas(value) {
         return entry;
     });
 }
+const NO_SUPPRESSED_BETAS = Object.freeze([]);
 export function composeBetas(input, profile = CLAUDE_CODE_2_1_195_PROFILE) {
+    return composeBetasWithAudit(input, profile).betas;
+}
+export function composeBetasWithAudit(input, profile = CLAUDE_CODE_2_1_195_PROFILE) {
     const out = [];
     const policy = profile.betaPolicy;
     const experimental = policy.experimentalBetasEnabled;
@@ -102,6 +107,30 @@ export function composeBetas(input, profile = CLAUDE_CODE_2_1_195_PROFILE) {
                 out.push(beta);
         }
     }
-    return Object.freeze(out);
+    // Package extension. The suppression filter is deliberately LAST: it runs
+    // after the canonical composition and after the `additionalBetas` merge, so
+    // an identifier named by both seams does not reach the wire. Removal is
+    // reported in composed order, never in caller order, and an identifier that
+    // was never composed is a silent no-op because a consumer cannot know which
+    // betas this package derives for a given model.
+    if (input.suppressBetas === undefined) {
+        return Object.freeze({
+            betas: Object.freeze(out),
+            suppressedBetaNames: NO_SUPPRESSED_BETAS,
+        });
+    }
+    const suppressed = new Set(validateAdditionalBetas(input.suppressBetas));
+    const kept = [];
+    const removed = [];
+    for (const beta of out) {
+        if (suppressed.has(beta))
+            removed.push(beta);
+        else
+            kept.push(beta);
+    }
+    return Object.freeze({
+        betas: Object.freeze(kept),
+        suppressedBetaNames: Object.freeze(removed),
+    });
 }
 //# sourceMappingURL=betas.js.map

package/dist/betas.js.map

@@ -1 +1 @@
-{"version":3,"file":"betas.js","sourceRoot":"","sources":["../src/betas.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAkChF;;;;;;;GAOG;AACH,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAChE,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAc,EAAU,EAAE;QAC1C,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,KAAK,CAAC,MAAM,GAAG,0BAA0B;YACzC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAwB,EACxB,UAAqC,2BAA2B;IAEhE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,wBAAwB,CAAC;IAErD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,kBAAkB;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,yDAAyD;IACzD,MAAM,mBAAmB,GACvB,KAAK,CAAC,oBAAoB,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,wBAAwB,IAAI,mBAAmB,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,IACE,MAAM,CAAC,0BAA0B;QACjC,KAAK,CAAC,YAAY,CAAC,mBAAmB,EACtC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,IACE,YAAY;QACZ,KAAK,CAAC,YAAY,CAAC,mBAAmB;QACtC,MAAM,CAAC,WAAW;QAClB,CAAC,MAAM,CAAC,sBAAsB;QAC9B,CAAC,KAAK,CAAC,qBAAqB,EAC5B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,IACE,MAAM,CAAC,yBAAyB;QAChC,YAAY;QACZ,KAAK,CAAC,YAAY,CAAC,mBAAmB,EACtC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,YAAY,IAAI,MAAM,CAAC,yBAAyB;QAClD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,iBAAiB;QACtD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpD,IACE,YAAY;QACZ,yBAAyB,CAAC,KAAK,CAAC,YAAY,CAAC;QAC7C,MAAM,CAAC,wBAAwB,EAC/B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,sEAAsE;IACtE,IAAI,YAAY;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,6BAA6B,CAAC,KAAK,CAAC,YAAY,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAErE,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,KAAK,IAAI;QACvB,YAAY;QACZ,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,EACtD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5E,IACE,MAAM,CAAC,qBAAqB;QAC5B,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,EACnD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,0EAA0E;IAE1E,4EAA4E;IAC5E,8EAA8E;IAC9E,qEAAqE;IACrE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"betas.js","sourceRoot":"","sources":["../src/betas.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,mCAAmC,CAAC;AAqDhF;;;;;;;;GAQG;AACH,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAChE,MAAM,0BAA0B,GAAG,GAAG,CAAC;AACvC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACjE,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAc,EAAU,EAAE;QAC1C,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,KAAK,CAAC,MAAM,GAAG,0BAA0B;YACzC,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,mBAAmB,CAAC,eAAe,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,mBAAmB,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjE,MAAM,UAAU,YAAY,CAC1B,KAAwB,EACxB,UAAqC,2BAA2B;IAEhE,OAAO,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAwB,EACxB,UAAqC,2BAA2B;IAEhE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,CAAC,wBAAwB,CAAC;IAErD,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,kBAAkB;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,yDAAyD;IACzD,MAAM,mBAAmB,GACvB,KAAK,CAAC,oBAAoB,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,wBAAwB,IAAI,mBAAmB,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,IACE,MAAM,CAAC,0BAA0B;QACjC,KAAK,CAAC,YAAY,CAAC,mBAAmB,EACtC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,IACE,YAAY;QACZ,KAAK,CAAC,YAAY,CAAC,mBAAmB;QACtC,MAAM,CAAC,WAAW;QAClB,CAAC,MAAM,CAAC,sBAAsB;QAC9B,CAAC,KAAK,CAAC,qBAAqB,EAC5B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IACD,IACE,MAAM,CAAC,yBAAyB;QAChC,YAAY;QACZ,KAAK,CAAC,YAAY,CAAC,mBAAmB,EACtC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,YAAY,IAAI,MAAM,CAAC,yBAAyB;QAClD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,iBAAiB;QACtD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpD,IACE,YAAY;QACZ,yBAAyB,CAAC,KAAK,CAAC,YAAY,CAAC;QAC7C,MAAM,CAAC,wBAAwB,EAC/B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,sEAAsE;IACtE,IAAI,YAAY;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,6BAA6B,CAAC,KAAK,CAAC,YAAY,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAErE,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,KAAK,IAAI;QACvB,YAAY;QACZ,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,EACtD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,kBAAkB;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC5E,IACE,MAAM,CAAC,qBAAqB;QAC5B,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,EACnD,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,0EAA0E;IAE1E,4EAA4E;IAC5E,8EAA8E;IAC9E,qEAAqE;IACrE,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,gDAAgD;IAChD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;YACzB,mBAAmB,EAAE,mBAAmB;SACzC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,uBAAuB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC1B,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC"}

package/dist/build-request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build-request.d.ts","sourceRoot":"","sources":["../src/build-request.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,iCAAiC,EACjC,sBAAsB,EAMtB,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EAGvB,MAAM,gBAAgB,CAAC;AA6iCxB,2DAA2D;AAC3D,wBAAsB,iCAAiC,CACrD,KAAK,EAAE,0BAA0B,EACjC,OAAO,GAAE,yBAAuD,GAC/D,OAAO,CAAC,iCAAiC,CAAC,CAiF5C;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,sBAAsB,EAC7B,OAAO,GAAE,yBAAuD,GAC/D,OAAO,CAAC,sBAAsB,CAAC,CAqHjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAAuD,GAC/D,sBAAsB,CA+ExB"}
+{"version":3,"file":"build-request.d.ts","sourceRoot":"","sources":["../src/build-request.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,iCAAiC,EACjC,sBAAsB,EAMtB,yBAAyB,EACzB,0BAA0B,EAC1B,sBAAsB,EAGvB,MAAM,gBAAgB,CAAC;AAwvCxB,2DAA2D;AAC3D,wBAAsB,iCAAiC,CACrD,KAAK,EAAE,0BAA0B,EACjC,OAAO,GAAE,yBAAuD,GAC/D,OAAO,CAAC,iCAAiC,CAAC,CAiF5C;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,sBAAsB,EAC7B,OAAO,GAAE,yBAAuD,GAC/D,OAAO,CAAC,sBAAsB,CAAC,CA8JjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,yBAAuD,GAC/D,sBAAsB,CA+FxB"}

package/dist/build-request.js

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: GPL-3.0-or-later
-import { composeBetas } from "./betas.js";
+import { composeBetas, composeBetasWithAudit } from "./betas.js";
 import { ClaudeCodeWireError } from "./contracts.js";
 import { buildCountTokensBody, filterCountTokensBetas, TOKEN_COUNTING_BETA, } from "./count-tokens.js";
 import { createBillingBlock } from "./fingerprint.js";
@@ -10,7 +10,7 @@ import { CLAUDE_CODE_2_1_195_PROFILE } from "./profiles/claude-code-2.1.195.js";
 import { buildRedactedEvidence, toSafeErrorDetails } from "./redaction.js";
 import { buildCanonicalBody, canonicalCountTokensLists, } from "./request-body.js";
 import { sha256Hex } from "./sha256.js";
-import { buildCanonicalSystem } from "./system-prompt.js";
+import { buildCanonicalSystem, IDENTITY_TEXT } from "./system-prompt.js";
 import { isThinkingDisplayActive } from "./thinking.js";
 import { classifySurrogateAt } from "./unicode.js";
 const METHOD = "POST";
@@ -52,6 +52,10 @@ const INPUT_KEYS = new Set([
     "clientApp",
     "anthropicAdditionalProtection",
     "additionalBetas",
+    "suppressBetas",
+    "suppressBillingBlock",
+    "suppressIdentityBlock",
+    "preserveThinkingBlockCacheControl",
     "betaOverrides",
     "metadataOverrides",
     "extraHeaders",
@@ -79,6 +83,16 @@ const COUNT_TOKENS_INPUT_KEYS = new Set([
     "extraHeaders",
 ]);
 const BUILT_KEYS = new Set(["url", "method", "headers", "body", "evidence"]);
+/**
+ * The self-describing prefix of the canonical billing block's text.
+ *
+ * `buildBillingBlock` emits
+ * `x-anthropic-billing-header: cc_version=<version>.<fingerprint>; ...`, whose
+ * tail varies per request, so only this fixed head can anchor a structural
+ * check. It is what lets the parser CONFIRM that a request which claims to
+ * carry the billing block actually carries it.
+ */
+const BILLING_BLOCK_TEXT_PREFIX = "x-anthropic-billing-header: cc_version=";
 const EVIDENCE_KEYS = new Set([
     "profileId",
     "url",
@@ -92,6 +106,10 @@ const EVIDENCE_KEYS = new Set([
     "systemBlockCount",
     "capabilityDecisions",
     "droppedExtraHeaderNames",
+    "suppressedBetaNames",
+    "billingBlockSuppressed",
+    "identityBlockSuppressed",
+    "thinkingBlockCacheControlPreserved",
 ]);
 const CAPABILITY_KEYS = [
     "thinking",
@@ -493,6 +511,36 @@ function validateExtraHeaderPolicy(value) {
         fail();
     return value;
 }
+/**
+ * Validates the package-extension billing-block suppression flag.
+ *
+ * Only a boolean states a decision. A truthy string or `0` is a caller mistake
+ * rather than a coercion target, because coercing would silently change what
+ * Anthropic receives for attribution purposes.
+ */
+function validateSuppressBillingBlock(value) {
+    return parseBoolean(value);
+}
+/**
+ * Validates the package-extension identity-block suppression flag.
+ *
+ * Same contract as `validateSuppressBillingBlock`: only a boolean states a
+ * decision, because coercing a truthy string would silently drop a canonical
+ * block the genuine client always sends.
+ */
+function validateSuppressIdentityBlock(value) {
+    return parseBoolean(value);
+}
+/**
+ * Validates the package-extension thinking-block `cache_control` seam flag.
+ *
+ * Same contract as the suppression flags: only a boolean states a decision,
+ * because coercing a truthy string would silently widen the thinking-block
+ * allowlist this package pins against the genuine client.
+ */
+function validatePreserveThinkingBlockCacheControl(value) {
+    return parseBoolean(value);
+}
 function createEffectiveProfile(pinnedProfile, override) {
     if (override === undefined)
         return pinnedProfile;
@@ -552,6 +600,15 @@ function validateInput(input) {
     const extraHeaderPolicy = Object.hasOwn(input, "extraHeaderPolicy")
         ? validateExtraHeaderPolicy(ownValue(input, "extraHeaderPolicy"))
         : undefined;
+    const suppressBillingBlock = Object.hasOwn(input, "suppressBillingBlock")
+        ? validateSuppressBillingBlock(ownValue(input, "suppressBillingBlock"))
+        : false;
+    const suppressIdentityBlock = Object.hasOwn(input, "suppressIdentityBlock")
+        ? validateSuppressIdentityBlock(ownValue(input, "suppressIdentityBlock"))
+        : false;
+    const preserveThinkingBlockCacheControl = Object.hasOwn(input, "preserveThinkingBlockCacheControl")
+        ? validatePreserveThinkingBlockCacheControl(ownValue(input, "preserveThinkingBlockCacheControl"))
+        : false;
     return {
         source: input,
         clientRequestId,
@@ -559,6 +616,9 @@ function validateInput(input) {
         profileOverride,
         betaOverrides,
         extraHeaderPolicy,
+        suppressBillingBlock,
+        suppressIdentityBlock,
+        preserveThinkingBlockCacheControl,
     };
 }
 function validateCountTokensInput(input) {
@@ -786,8 +846,113 @@ function parseEvidence(value) {
                 droppedExtraHeaderNames: parseStringArray(ownValue(value, "droppedExtraHeaderNames")),
             }
             : {}),
+        ...(Object.hasOwn(value, "suppressedBetaNames")
+            ? {
+                suppressedBetaNames: parseStringArray(ownValue(value, "suppressedBetaNames")),
+            }
+            : {}),
+        ...(Object.hasOwn(value, "billingBlockSuppressed")
+            ? {
+                billingBlockSuppressed: parseBoolean(ownValue(value, "billingBlockSuppressed")),
+            }
+            : {}),
+        ...(Object.hasOwn(value, "identityBlockSuppressed")
+            ? {
+                identityBlockSuppressed: parseBoolean(ownValue(value, "identityBlockSuppressed")),
+            }
+            : {}),
+        // Rehydrated here because `assertExactKeys` above already accepts the key:
+        // omitting this branch would silently DROP it, and the round-trip equality
+        // every seam test asserts would fail on an envelope that is entirely legal.
+        ...(Object.hasOwn(value, "thinkingBlockCacheControlPreserved")
+            ? {
+                thinkingBlockCacheControlPreserved: parseBoolean(ownValue(value, "thinkingBlockCacheControlPreserved")),
+            }
+            : {}),
     };
 }
+/** Reads an own property of a value that is not asserted to be a record. */
+function ownProperty(value, key) {
+    return isRecord(value) && Object.hasOwn(value, key)
+        ? ownValue(value, key)
+        : undefined;
+}
+/**
+ * Reports whether the emitted `messages` carry a reasoning block that actually
+ * kept a `cache_control` key.
+ *
+ * This is what makes `evidence.thinkingBlockCacheControlPreserved` a record of
+ * what the seam DID rather than of what it was allowed to do, and it is the
+ * check that refutes an envelope claiming the seam over a body carrying no such
+ * block. Presence of the KEY is the test, not truthiness: `cache_control: null`
+ * is a preserved marker too, exactly as it is on every other block type.
+ */
+function hasThinkingBlockCacheControl(messages) {
+    if (!Array.isArray(messages))
+        return false;
+    return messages.some((message) => {
+        const content = ownProperty(message, "content");
+        return (Array.isArray(content) &&
+            content.some((block) => {
+                const type = ownProperty(block, "type");
+                return ((type === "thinking" || type === "redacted_thinking") &&
+                    ownProperty(block, "cache_control") !== undefined);
+            }));
+    });
+}
+/** Reads a system block's `text` without asserting the block's shape. */
+function systemBlockText(block) {
+    return ownProperty(block, "text");
+}
+/** Recognises the canonical billing block by its fixed, self-describing head. */
+function isBillingBlockText(text) {
+    return typeof text === "string" && text.startsWith(BILLING_BLOCK_TEXT_PREFIX);
+}
+/**
+ * VERIFIES how many canonical blocks the emitted `system` array carries.
+ *
+ * The root seams `suppressBillingBlock` and `suppressIdentityBlock` make four
+ * prefixes legitimate — `[billing, identity]`, `[identity]`, `[billing]` and
+ * `[]` — so no probe over the array alone can tell them apart: an empty prefix
+ * is indistinguishable from a caller-only array. The prefix length is therefore
+ * READ from the evidence flags, which the builder emits only when suppression
+ * actually removed a block.
+ *
+ * Evidence is not trusted blindly. Each block the flags claim is present is
+ * confirmed in place: billing by its `x-anthropic-billing-header: cc_version=`
+ * head (its tail is per-request), identity by the byte-exact `IDENTITY_TEXT`;
+ * a claim that identity was suppressed is confirmed by that text being absent
+ * from the whole array. This is strictly stronger than the position probe it
+ * replaces, which never checked the billing slot at all. Never `cache_control`:
+ * the
+ * `cacheControl.suppressIdentityBlock` seam can emit the identity block with no
+ * marker, so a marker probe would misread a legitimate request.
+ */
+function canonicalSystemPrefixLength(system, billingSuppressed, identitySuppressed) {
+    let index = 0;
+    if (!billingSuppressed) {
+        if (!isBillingBlockText(systemBlockText(system[index])))
+            fail();
+        index += 1;
+    }
+    if (identitySuppressed) {
+        // The identity text cannot appear ANYWHERE in a body built with the seam
+        // active: `buildCanonicalSystem` drops a caller block equal to it
+        // unconditionally, and merging joins with `\n`, so no merged run can equal
+        // it either. Absence is therefore checkable, which is what refutes a claim
+        // of suppression made over a body that still carries the block.
+        //
+        // No mirror check exists for billing: a caller block may legitimately begin
+        // with the billing header text, so its presence proves nothing.
+        if (system.some((block) => systemBlockText(block) === IDENTITY_TEXT)) {
+            fail();
+        }
+        return index;
+    }
+    if (systemBlockText(system[index]) !== IDENTITY_TEXT)
+        fail();
+    return index + 1;
+}
 function parseBody(value) {
     let parsed;
     try {
@@ -858,6 +1023,12 @@ function evidenceRequest(input, callerModel) {
         request.capabilities = input.capabilities;
     if (input.betaOverrides !== undefined)
         request.betaOverrides = input.betaOverrides;
+    // The body builder owns the thinking-block allowlist, so the seam flag has to
+    // reach it. It is forwarded only when the caller stated it, keeping the
+    // normalized request shape identical for every request that ignores the seam.
+    if (input.preserveThinkingBlockCacheControl !== undefined)
+        request.preserveThinkingBlockCacheControl =
+            input.preserveThinkingBlockCacheControl;
     if (input.thinking !== undefined)
         request.thinking = input.thinking;
     if (input.effort !== undefined)
@@ -978,9 +1149,9 @@ export async function buildClaudeCodeRequest(input, profile = CLAUDE_CODE_2_1_19
         });
         const billing = await createBillingBlock(fingerprintText(validated.source), effectiveProfile.cliVersion, validated.crypto);
         const metadata = buildCorrelatedMetadata(identity, validated.source.metadata, validated.source.metadataOverrides);
-        const system = buildCanonicalSystem(validated.source.system, billing, identity);
+        const system = buildCanonicalSystem(validated.source.system, billing, identity, validated.suppressBillingBlock, validated.suppressIdentityBlock);
         const canonicalBody = buildCanonicalBody(evidenceRequest(validated.source, validated.source.model), effectiveModel, system, metadata, effectiveProfile);
-        const betas = composeBetas({
+        const composedBetas = composeBetasWithAudit({
             rawModel: validated.source.model,
             normalizedId: resolvedModel.id,
             capabilities,
@@ -994,10 +1165,14 @@ export async function buildClaudeCodeRequest(input, profile = CLAUDE_CODE_2_1_19
             ...(validated.source.additionalBetas === undefined
                 ? {}
                 : { additionalBetas: validated.source.additionalBetas }),
+            ...(validated.source.suppressBetas === undefined
+                ? {}
+                : { suppressBetas: validated.source.suppressBetas }),
             ...(validated.betaOverrides?.use1MContext === undefined
                 ? {}
                 : { use1MContextOverride: validated.betaOverrides.use1MContext }),
         }, effectiveProfile);
+        const betas = composedBetas.betas;
         const headerPlan = buildOrderedHeaderPlan({
             accessToken: validated.source.accessToken,
             runtime: identity,
@@ -1024,11 +1199,45 @@ export async function buildClaudeCodeRequest(input, profile = CLAUDE_CODE_2_1_19
             logicalHeaders: headers,
             betaFeatures: betas,
             body,
+            // The canonical system merges adjacent caller blocks and drops any
+            // block equal to the identity text, so only the emitted count keeps
+            // `systemBlockCount === body.system.length - <canonical>` true.
+            // Symmetric arithmetic over the two suppression seams: each canonical
+            // block that survived costs one slot. A single constant cannot express
+            // the empty prefix both seams together produce.
+            emittedSystemBlockCount: system.length -
+                (validated.suppressBillingBlock ? 0 : 1) -
+                (validated.suppressIdentityBlock ? 0 : 1),
             // Emitted only for the opted-in policy, so evidence for every other
             // request keeps the shape it had before the seam existed.
             ...(validated.extraHeaderPolicy === "dropConflicting"
                 ? { droppedExtraHeaderNames: headerPlan.droppedExtraHeaderNames }
                 : {}),
+            // Emitted only when suppression actually removed something, so
+            // evidence for every request that ignores the seam is unchanged.
+            ...(composedBetas.suppressedBetaNames.length === 0
+                ? {}
+                : { suppressedBetaNames: composedBetas.suppressedBetaNames }),
+            // Emitted only when the billing block was actually removed, so the
+            // audit records the attribution decision without inventing a key for
+            // every request that leaves the canonical prefix intact.
+            ...(validated.suppressBillingBlock
+                ? { billingBlockSuppressed: true }
+                : {}),
+            // Emitted only when the identity block was actually removed, on the
+            // same terms as `billingBlockSuppressed`: the parser reads both flags
+            // to know the length of the canonical prefix it must verify.
+            ...(validated.suppressIdentityBlock
+                ? { identityBlockSuppressed: true }
+                : {}),
+            // Emitted only when the seam was active AND a reasoning block actually
+            // carried the marker. Opting in without using it records nothing, so
+            // the audit states what happened on the wire rather than what the
+            // caller was permitted to do.
+            ...(validated.preserveThinkingBlockCacheControl &&
+                hasThinkingBlockCacheControl(canonicalBody["messages"])
+                ? { thinkingBlockCacheControlPreserved: true }
+                : {}),
         }, validated.crypto);
         return deepFreeze({
             url: effectiveProfile.endpoint,
@@ -1068,6 +1277,15 @@ export function parseBuiltClaudeCodeRequest(value, profile = CLAUDE_CODE_2_1_195
         const parsedBody = parseBody(body);
         const headers = parseHeaders(ownValue(value, "headers"));
         const evidence = parseEvidence(ownValue(value, "evidence"));
+        // Reading evidence is not trusting evidence. A claim that the seam
+        // preserved a marker is confirmed against the body, and it is confirmed
+        // HERE — before the byte-length and digest checks — so that a forgery which
+        // is byte-length preserving and evidence-self-consistent is refused by the
+        // structural check rather than incidentally by arithmetic.
+        if (evidence.thinkingBlockCacheControlPreserved === true &&
+            !hasThinkingBlockCacheControl(parsedBody["messages"])) {
+            fail();
+        }
         const sessionId = headerValue(headers, "x-claude-code-session-id");
         const additionalHeaders = splitDynamicAndExtraHeaders(headers);
         const expectedHeaders = buildOrderedHeaders({
@@ -1105,7 +1323,8 @@ export function parseBuiltClaudeCodeRequest(value, profile = CLAUDE_CODE_2_1_195
                     : -1) ||
             evidence.systemBlockCount !==
                 (Array.isArray(parsedBody["system"])
-                    ? parsedBody["system"].length - 2
+                    ? parsedBody["system"].length -
+                        canonicalSystemPrefixLength(parsedBody["system"], evidence.billingBlockSuppressed === true, evidence.identityBlockSuppressed === true)
                     : -1)) {
             fail();
         }