@tormentalabs/claude-code-wire-compat 0.5.0 → 0.7.0-rc.1

package/dist/violation.js

@@ -0,0 +1,210 @@
+// SPDX-License-Identifier: GPL-3.0-or-later
+/*
+ * Safe validation-failure diagnostics (decision P1.T1, D4).
+ *
+ * Every value produced here is safe by construction: reasons come from a
+ * closed set, path segments from a closed vocabulary of schema-defined keys
+ * plus numeric indices and the `*` placeholder for user-controlled keys, and
+ * reported code units only ever come from control or surrogate ranges. No
+ * caller text, key name or excerpt can leak through these fields.
+ */
+export const VIOLATION_REASONS = new Set([
+    "lone-surrogate",
+    "control-char",
+]);
+/**
+ * Schema-defined keys allowed verbatim in a violation path. Any other object
+ * key (tool input names, `input_schema` property names, arbitrary metadata
+ * members) is user-controlled text and is reported as `*`.
+ */
+const PATH_KEY_VOCABULARY = new Set([
+    "$schema",
+    "accept",
+    "additionalBetas",
+    "additionalProperties",
+    "anthropicAdditionalProtection",
+    "app",
+    "arch",
+    "accountUuid",
+    "body",
+    "cache_control",
+    "citations",
+    "clientApp",
+    "clientRequestId",
+    "claudeRemoteContainerId",
+    "claudeRemoteSessionId",
+    "content",
+    "context",
+    "crypto",
+    "data",
+    "default",
+    "defer_loading",
+    "description",
+    "deviceId",
+    "document",
+    "effort",
+    "enum",
+    "evidence",
+    "examples",
+    "extraHeaderPolicy",
+    "extraHeaders",
+    "headers",
+    "id",
+    "image",
+    "input",
+    "input_schema",
+    "input_examples",
+    "items",
+    "max_tokens",
+    "maxTokens",
+    "media_type",
+    "messages",
+    "metadata",
+    "metadataOverrides",
+    "method",
+    "model",
+    "name",
+    "os",
+    "output_config",
+    "profileOverride",
+    "properties",
+    "redacted_thinking",
+    "required",
+    "role",
+    "runtime",
+    "runtimeVersion",
+    "search_results",
+    "sessionId",
+    "signature",
+    "source",
+    "stainlessHelper",
+    "stainlessRetryCount",
+    "stop_sequences",
+    "stream",
+    "strict",
+    "system",
+    "text",
+    "thinking",
+    "timing",
+    "title",
+    "tool_name",
+    "tool_reference",
+    "tool_result",
+    "tool_use",
+    "tool_use_id",
+    "tools",
+    "type",
+    "url",
+    "user_id",
+    "userId",
+    "userIdFields",
+]);
+const MAX_PATH_SEGMENTS = 16;
+const MAX_PATH_LENGTH = 256;
+const TRUNCATION_MARKER = "...";
+const OPAQUE_SUBTREES = new Set([
+    "headers",
+    "input",
+    "input_schema",
+    "input_examples",
+    "metadata",
+    "metadataOverrides",
+    "userIdFields",
+    "extraHeaders",
+    "data",
+    "default",
+    "examples",
+]);
+function mapSegment(segment, opaque) {
+    if (typeof segment === "number") {
+        return Number.isSafeInteger(segment) &&
+            !Object.is(segment, -0) &&
+            segment >= 0 &&
+            segment <= 999_999
+            ? String(segment)
+            : "*";
+    }
+    return !opaque && PATH_KEY_VOCABULARY.has(segment) ? segment : "*";
+}
+/**
+ * Renders a pointer-like path (`/messages/0/content`) from walk segments.
+ * At most 16 segments, then a trailing `/...`; at most 256 characters.
+ */
+export function formatViolationPath(segments) {
+    let path = "";
+    let opaque = false;
+    for (let index = 0; index < segments.length; index += 1) {
+        const segment = mapSegment(segments[index] ?? "*", opaque);
+        const tailLength = index < segments.length - 1 ? 4 : 0;
+        if (index >= MAX_PATH_SEGMENTS ||
+            path.length + 1 + segment.length + tailLength > MAX_PATH_LENGTH) {
+            return `${path}/${TRUNCATION_MARKER}`;
+        }
+        path += `/${segment}`;
+        opaque ||= segment === "*" || OPAQUE_SUBTREES.has(segment);
+    }
+    return path || "/";
+}
+export function isValidViolationReason(value) {
+    return VIOLATION_REASONS.has(value);
+}
+const PATH_INDEX_SEGMENT = /^(?:0|[1-9]\d{0,5})$/u;
+/**
+ * Revalidates a formatted violation path for the redaction allowlist. Every
+ * segment must be a vocabulary key, a decimal index of at most 6 digits, `*`,
+ * or the single trailing truncation marker; the whole string is capped.
+ */
+export function isValidViolationPath(value) {
+    if (value.length === 0 || value.length > MAX_PATH_LENGTH)
+        return false;
+    if (!value.startsWith("/"))
+        return false;
+    if (value === "/")
+        return true;
+    const segments = value.slice(1).split("/");
+    if (segments.length > MAX_PATH_SEGMENTS + 1)
+        return false;
+    let opaque = false;
+    for (let index = 0; index < segments.length; index += 1) {
+        const segment = segments[index];
+        if (segment === undefined)
+            return false;
+        if (segment === TRUNCATION_MARKER)
+            return index === segments.length - 1;
+        if (index >= MAX_PATH_SEGMENTS)
+            return false;
+        if (segment === "*") {
+            opaque = true;
+            continue;
+        }
+        if (PATH_INDEX_SEGMENT.test(segment))
+            continue;
+        if (opaque || !PATH_KEY_VOCABULARY.has(segment))
+            return false;
+        opaque ||= OPAQUE_SUBTREES.has(segment);
+    }
+    return true;
+}
+/** Numeric range guard for `violationCodeUnit`: controls or surrogates only. */
+export function isValidViolationCodeUnit(value) {
+    if (!Number.isInteger(value) || Object.is(value, -0) || value < 0)
+        return false;
+    return (value <= 0x1f ||
+        (value >= 0x7f && value <= 0x9f) ||
+        (value >= 0xd800 && value <= 0xdfff));
+}
+/**
+ * Builds the safeDetails record for one text violation found at `path`.
+ * `inKey` distinguishes an offending object key from an offending value.
+ */
+export function violationDetails(violation, path, textLength, inKey) {
+    return {
+        violationReason: violation.reason,
+        violationPath: formatViolationPath(path),
+        violationOffset: violation.offset,
+        violationCodeUnit: violation.codeUnit,
+        violationTextLength: textLength,
+        violationInKey: inKey,
+    };
+}
+//# sourceMappingURL=violation.js.map

package/dist/violation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"violation.js","sourceRoot":"","sources":["../src/violation.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAI5C;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,gBAAgB;IAChB,cAAc;CACf,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC;IACvD,SAAS;IACT,QAAQ;IACR,iBAAiB;IACjB,sBAAsB;IACtB,+BAA+B;IAC/B,KAAK;IACL,MAAM;IACN,aAAa;IACb,MAAM;IACN,eAAe;IACf,WAAW;IACX,WAAW;IACX,iBAAiB;IACjB,yBAAyB;IACzB,uBAAuB;IACvB,SAAS;IACT,SAAS;IACT,QAAQ;IACR,MAAM;IACN,SAAS;IACT,eAAe;IACf,aAAa;IACb,UAAU;IACV,UAAU;IACV,QAAQ;IACR,MAAM;IACN,UAAU;IACV,UAAU;IACV,mBAAmB;IACnB,cAAc;IACd,SAAS;IACT,IAAI;IACJ,OAAO;IACP,OAAO;IACP,cAAc;IACd,gBAAgB;IAChB,OAAO;IACP,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,UAAU;IACV,UAAU;IACV,mBAAmB;IACnB,QAAQ;IACR,OAAO;IACP,MAAM;IACN,IAAI;IACJ,eAAe;IACf,iBAAiB;IACjB,YAAY;IACZ,mBAAmB;IACnB,UAAU;IACV,MAAM;IACN,SAAS;IACT,gBAAgB;IAChB,gBAAgB;IAChB,WAAW;IACX,WAAW;IACX,QAAQ;IACR,iBAAiB;IACjB,qBAAqB;IACrB,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,UAAU;IACV,QAAQ;IACR,OAAO;IACP,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,UAAU;IACV,aAAa;IACb,OAAO;IACP,MAAM;IACN,KAAK;IACL,SAAS;IACT,QAAQ;IACR,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAChC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,SAAS;IACT,OAAO;IACP,cAAc;IACd,gBAAgB;IAChB,UAAU;IACV,mBAAmB;IACnB,cAAc;IACd,cAAc;IACd,MAAM;IACN,SAAS;IACT,UAAU;CACX,CAAC,CAAC;AAIH,SAAS,UAAU,CAAC,OAA6B,EAAE,MAAe;IAChE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC;YAClC,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;YACZ,OAAO,IAAI,OAAO;YAClB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACjB,CAAC,CAAC,GAAG,CAAC;IACV,CAAC;IACD,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAyC;IAEzC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,IACE,KAAK,IAAI,iBAAiB;YAC1B,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,GAAG,eAAe,EAC/D,CAAC;YACD,OAAO,GAAG,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;QACtB,MAAM,KAAK,OAAO,KAAK,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,IAAI,GAAG,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,OAAO,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAEnD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,QAAQ,CAAC,MAAM,GAAG,iBAAiB,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,OAAO,KAAK,iBAAiB;YAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACxE,IAAI,KAAK,IAAI,iBAAiB;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,GAAG,IAAI,CAAC;YACd,SAAS;QACX,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QAC/C,IAAI,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9D,MAAM,KAAK,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,OAAO,CACL,KAAK,IAAI,IAAI;QACb,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC;QAChC,CAAC,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAwB,EACxB,IAAqC,EACrC,UAAkB,EAClB,KAAc;IAEd,OAAO;QACL,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,aAAa,EAAE,mBAAmB,CAAC,IAAI,CAAC;QACxC,eAAe,EAAE,SAAS,CAAC,MAAM;QACjC,iBAAiB,EAAE,SAAS,CAAC,QAAQ;QACrC,mBAAmB,EAAE,UAAU;QAC/B,cAAc,EAAE,KAAK;KACtB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tormentalabs/claude-code-wire-compat",
-  "version": "0.5.0",
+  "version": "0.7.0-rc.1",
   "description": "Runtime-neutral Claude Code Messages wire compatibility primitives",
   "type": "module",
   "private": false,
@@ -37,6 +37,10 @@
     "./profiles/claude-code-2.1.233": {
       "types": "./dist/profiles/claude-code-2.1.233.d.ts",
       "import": "./dist/profiles/claude-code-2.1.233.js"
+    },
+    "./profiles/claude-code-2.1.280": {
+      "types": "./dist/profiles/claude-code-2.1.280.d.ts",
+      "import": "./dist/profiles/claude-code-2.1.280.js"
     }
   },
   "types": "./dist/index.d.ts",
@@ -51,7 +55,7 @@
     "format:check": "prettier --check .",
     "test": "vitest run",
     "test:coverage": "vitest run --coverage",
-    "test:pack": "node scripts/verify-packed-consumers.mjs",
+    "test:pack": "npm run build && node scripts/verify-packed-consumers.mjs",
     "pack:check": "npm pack --dry-run && publint && attw --pack . --profile esm-only",
     "fixtures:check": "node scripts/seal-golden-fixtures.mjs --check",
     "fixtures:seal": "node scripts/seal-golden-fixtures.mjs --write",

package/src/betas.ts

@@ -11,8 +11,10 @@ import {
   supportsStructuredOutputs,
 } from "./model-capabilities.js";
 import { BETA_REGISTRY_2_1_233 } from "./profiles/beta-registry-2.1.233.js";
+import { BETA_REGISTRY_2_1_280 } from "./profiles/beta-registry-2.1.280.js";
 import { CLAUDE_CODE_2_1_195_PROFILE } from "./profiles/claude-code-2.1.195.js";
 import { CLAUDE_CODE_2_1_233_PROFILE } from "./profiles/claude-code-2.1.233.js";
+import { CLAUDE_CODE_2_1_280_PROFILE } from "./profiles/claude-code-2.1.280.js";
 
 /*
  * Provenance. The emitted order is a port of the genuine client's base beta set
@@ -41,13 +43,22 @@ interface BetaRegistryEntry {
  * The entries the push sites below require, as a structural contract rather
  * than a reference to one concrete registry.
  *
- * Registry versions have different key sets. Every key here except
- * `NARRATION_SUMMARIES` is present in all of them, so those push sites index
- * directly. `NARRATION_SUMMARIES` is optional because upstream removed it after
- * 2.1.195 (see `src/profiles/beta-registry-2.1.233.ts`): its push site survives
- * and becomes inert when the resolved registry has no entry to push. Making the
- * optionality part of the TYPE is what forces every future registry to be
- * checked against the push sites at compile time instead of at runtime.
+ * Registry versions have different key sets. Every REQUIRED key here is present
+ * in all of them, so those push sites index directly. The optional ones are
+ * optional because they exist in some registry versions and not others, and a
+ * push site whose key is absent becomes inert: it evaluates its gates, finds no
+ * entry, pushes nothing, and the surrounding order closes up with no gap.
+ * Making the optionality part of the TYPE is what forces every future registry
+ * to be checked against the push sites at compile time instead of at runtime.
+ *
+ * `NARRATION_SUMMARIES` is optional in the older direction -- upstream removed
+ * it after 2.1.195 (see `src/profiles/beta-registry-2.1.233.ts`). The keys
+ * added for 2.1.280 -- the remaining optional members declared below -- are
+ * optional in the newer direction: they are absent from the 2.1.195 registry,
+ * and all but `PER_MESSAGE_EFFORT` are absent from the 2.1.233 one. `PER_MESSAGE_EFFORT` IS declared by the 2.1.233 registry, so
+ * registry absence does not keep its site inert there; what does is the
+ * catalogue, because no 2.1.233 model declares the backing capability. The two
+ * mechanisms are not interchangeable and both are load-bearing.
  */
 export interface ComposableBetaRegistry {
   readonly CLAUDE_CODE: BetaRegistryEntry;
@@ -60,7 +71,12 @@ export interface ComposableBetaRegistry {
   readonly STRUCTURED_OUTPUTS: BetaRegistryEntry;
   readonly PROMPT_CACHING_SCOPE: BetaRegistryEntry;
   readonly MID_CONVERSATION_SYSTEM: BetaRegistryEntry;
+  readonly PER_MESSAGE_EFFORT?: BetaRegistryEntry;
+  readonly MID_CONV_TOOL_CHANGE?: BetaRegistryEntry;
+  readonly MID_CONVERSATION_SYSTEM_CLEAR_AT?: BetaRegistryEntry;
   readonly EFFORT: BetaRegistryEntry;
+  readonly THINKING_BINDING_CONTROLS?: BetaRegistryEntry;
+  readonly THINKING_DISPLAY_UPDATES?: BetaRegistryEntry;
   readonly SPEED: BetaRegistryEntry;
   readonly AFK_MODE: BetaRegistryEntry;
   readonly EXTENDED_CACHE_TTL: BetaRegistryEntry;
@@ -73,6 +89,7 @@ const PROFILE_BETA_REGISTRIES: ReadonlyMap<string, ComposableBetaRegistry> =
   new Map<string, ComposableBetaRegistry>([
     [CLAUDE_CODE_2_1_195_PROFILE.id, BETA_REGISTRY],
     [CLAUDE_CODE_2_1_233_PROFILE.id, BETA_REGISTRY_2_1_233],
+    [CLAUDE_CODE_2_1_280_PROFILE.id, BETA_REGISTRY_2_1_280],
   ]);
 
 /**
@@ -84,8 +101,17 @@ const PROFILE_BETA_REGISTRIES: ReadonlyMap<string, ComposableBetaRegistry> =
  * give `composeBetas` a second, differently-worded opinion about profile
  * validity. Standalone callers keep the 2.1.195 behaviour they had before
  * profiles were a parameter.
+ *
+ * Exported for tests only, and deliberately NOT re-exported from
+ * `src/index.ts`: the public runtime surface stays closed. That fallback is
+ * precisely why a test needs to reach this function. A profile bound to the
+ * wrong registry, or to none, silently composes against 2.1.195 instead of
+ * failing, and every required key of `ComposableBetaRegistry` currently
+ * carries an identical header in all three registries -- so a mis-binding
+ * changes no emitted byte and no behavioural suite can see it. Asking this
+ * function directly is the only way to observe the binding at all.
  */
-function resolveBetaRegistry(
+export function resolveBetaRegistry(
   profile: ClaudeCodeProtocolProfile,
 ): ComposableBetaRegistry {
   return PROFILE_BETA_REGISTRIES.get(profile.id) ?? BETA_REGISTRY;
@@ -96,6 +122,17 @@ export interface ComposeBetasInput {
   readonly normalizedId: string;
   readonly capabilities: ClaudeCodeCapabilities;
   readonly thinkingDisplayActive: boolean;
+  /**
+   * Whether a `thinking` object of type `adaptive` or `enabled` will reach the
+   * wire for this request AND the model is interleaved-thinking capable, i.e.
+   * upstream `ac` minus its `Fg()` term. Compute it with `isThinkingActive`
+   * from `./thinking.js`; never re-derive it at a call site.
+   *
+   * Required rather than optional: it is a total function of inputs every call
+   * site already holds, and requiring it is what forces a new call site to
+   * decide rather than silently inherit a default.
+   */
+  readonly thinkingActive: boolean;
   readonly cacheTtl?: "5m" | "1h" | null;
   readonly speed?: "standard" | "fast" | null;
   /**
@@ -129,6 +166,19 @@ export interface ComposeBetasInput {
 export interface ComposedBetas {
   readonly betas: readonly string[];
   readonly suppressedBetaNames: readonly string[];
+  /**
+   * Present only when push site 12b fired. This is the body-side half of a
+   * beta/body pair: the site pushes the display-updates beta AND decides that
+   * the body's `thinking` object carries `display: "updates"`. The consumer is
+   * the canonical body builder (`buildCanonicalBody`), which hands it to
+   * `resolveThinking`.
+   *
+   * `suppressBetas` cannot unset it. Suppressing the beta identifier removes
+   * the HEADER only; the body keeps `display: "updates"`. That matches the
+   * existing coupled pair where suppressing `effort-2025-11-24` leaves
+   * `output_config.effort` in the body.
+   */
+  readonly thinkingDisplayOverride?: "updates";
 }
 
 /**
@@ -240,10 +290,151 @@ export function composeBetasWithAudit(
 
   // No web-search beta: upstream pushes it only for vertex and foundry.
   if (experimental) out.push(registry.PROMPT_CACHING_SCOPE.header);
-  if (supportsMidConversationSystem(input.normalizedId, profile))
+
+  /*
+   * Upstream `jR`. The local boolean below records that this site PUSHED, which
+   * is what sites 11b and 11c gate on -- upstream reads `Ee.includes(jR)`, the
+   * composed array, not the registry. Asking the registry instead would fire
+   * those two sites for a model this one skipped.
+   */
+  const midConversationSystemFired = supportsMidConversationSystem(
+    input.normalizedId,
+    profile,
+  );
+  if (midConversationSystemFired) {
     out.push(registry.MID_CONVERSATION_SYSTEM.header);
+  }
+
+  /*
+   * Site 11a. Upstream `wRt`, which reduces to
+   * `Fg() && mD(provider) && catalogue-declares-per_turn_effort`; the provider
+   * term is first-party here by construction.
+   */
+  const perMessageEffort = registry.PER_MESSAGE_EFFORT;
+  if (
+    experimental &&
+    input.capabilities.perTurnEffort &&
+    perMessageEffort !== undefined
+  ) {
+    out.push(perMessageEffort.header);
+  }
+
+  /*
+   * Site 11b. Upstream `oQt() && Tue(model)`. `Tue` opens with
+   * `if (!Fg() || !kue(e)) return false`, so the experimental gate is upstream's
+   * and not an addition. Step 3 of `Tue` -- which sends the beta for any model
+   * with NO catalogue entry -- is deliberately not ported; see the analysis
+   * document's divergence record.
+   */
+  const midConvToolChange = registry.MID_CONV_TOOL_CHANGE;
+  if (
+    experimental &&
+    midConversationSystemFired &&
+    input.capabilities.midConvToolChange &&
+    midConvToolChange !== undefined
+  ) {
+    out.push(midConvToolChange.header);
+  }
+
+  /*
+   * Site 11c. Upstream `Mo`, which is the one site whose experimental gate is
+   * invisible at the statement level -- `Mo` names no `Fg()` at all. The gate is
+   * reached three calls deep instead: `Mee` is `oRt(model) !== "off"`, `oRt`
+   * wraps `fur`, and `fur` opens by returning `"off"` when `Fg()` is false. So
+   * `experimental` is upstream's own conjunct here exactly as it is at 11a and
+   * 11b, and a reader who checks only the `Mo` expression will wrongly conclude
+   * it was invented. It was not.
+   *
+   * `Mo`'s remaining conjuncts are constants for this package. `!l7(querySource)`
+   * holds because `l7` is true only for the two auto-mode query sources. `!Vr`
+   * holds because `Vr` is a per-session latch, and a stateless package composes
+   * every request as a first request. `Mee`'s other terms are fixed on the
+   * first-party path. What is left is `Ee.includes(jR)`, which is precisely the
+   * `midConversationSystemFired` outcome recorded at site 11.
+   */
+  const midConversationSystemClearAt =
+    registry.MID_CONVERSATION_SYSTEM_CLEAR_AT;
+  if (
+    experimental &&
+    midConversationSystemFired &&
+    midConversationSystemClearAt !== undefined
+  ) {
+    out.push(midConversationSystemClearAt.header);
+  }
+
+  // Site 12.
   if (input.capabilities.effort) out.push(registry.EFFORT.header);
 
+  /*
+   * Site 12a. Upstream `er && Fg()` with the latch write, which on the pinned
+   * first-party path collapses to thinking-active AND experimental.
+   * The coupled body field `thinking.block_binding` is NOT emitted: it needs a
+   * host override this package cannot observe.
+   */
+  const thinkingBindingControls = registry.THINKING_BINDING_CONTROLS;
+  if (
+    experimental &&
+    input.thinkingActive &&
+    thinkingBindingControls !== undefined
+  ) {
+    out.push(thinkingBindingControls.header);
+  }
+
+  /*
+   * Site 12b. Upstream guards the push with
+   * `(yc?.type === "adaptive" || yc?.type === "enabled") && ac && firstParty
+   *  && !callerSuppliedDisplay && ...` plus the simulate-proxy environment
+   * variable and a per-session latch. The reachable remainder of that guard is
+   * modelled below: `experimental` is upstream's `Fg()` term inside `ac`,
+   * `input.thinkingActive` is the thinking-type test together with the rest of
+   * `ac`, and `!input.thinkingDisplayActive` is the caller-supplied-display
+   * test. First-party is not modelled because this package only builds the
+   * first-party path, the simulate-proxy env var is not modelled because the
+   * package reads no environment, and the per-session latch is always empty in
+   * a stateless package that composes every request as a first request.
+   *
+   * The branch is additionally reached only when the display-mode resolver
+   * `Gxt` returns its connector-text result; its other results break out
+   * before the push. `!policy.thinkingSummariesShown` is that resolver's
+   * `sQt()` term, mapped onto the profile flag exactly as at the
+   * redact-thinking site above. See the 2.1.280 analysis document, §6.4, for
+   * the resolver itself.
+   *
+   * The resolver's other two diverting branches are already covered by
+   * `!thinkingDisplayActive`. A caller display of `"summarized"` takes the
+   * first branch, and `"omitted"` takes the second whenever the
+   * explicit-display flag is falsy, which is the only state this package can
+   * express -- it models no equivalent of that flag. Under a truthy
+   * explicit-display flag upstream would fall through and overwrite an
+   * explicit `"omitted"` with `"updates"`; that input is unreachable here, and
+   * is recorded rather than modelled.
+   *
+   * The site is coupled: it pushes the beta, records `display: "updates"` for
+   * the body builder, and removes the previously composed redact-thinking beta
+   * (upstream `qu()`).
+   *
+   * The splice sits INSIDE this block and is deliberately the LAST thing it
+   * does. At this point `out` holds only canonical pushes, because the caller
+   * `additionalBetas` merge runs later. So a caller who explicitly supplies
+   * `redact-thinking-2026-02-12` in `additionalBetas` still gets it, precisely
+   * because the merge's `if (!out.includes(beta))` test now succeeds. Moving
+   * the splice after the merge would silently eat that caller's entry.
+   */
+  const thinkingDisplayUpdates = registry.THINKING_DISPLAY_UPDATES;
+  let thinkingDisplayOverride: "updates" | undefined;
+  if (
+    experimental &&
+    input.thinkingActive &&
+    !policy.thinkingSummariesShown &&
+    !input.thinkingDisplayActive &&
+    thinkingDisplayUpdates !== undefined
+  ) {
+    out.push(thinkingDisplayUpdates.header);
+    thinkingDisplayOverride = "updates";
+    const redactIndex = out.indexOf(registry.REDACT_THINKING.header);
+    if (redactIndex !== -1) out.splice(redactIndex, 1);
+  }
+
   if (input.speed === "fast" && !out.includes(registry.SPEED.header)) {
     out.push(registry.SPEED.header);
   }
@@ -286,6 +477,9 @@ export function composeBetasWithAudit(
     return Object.freeze({
       betas: Object.freeze(out),
       suppressedBetaNames: NO_SUPPRESSED_BETAS,
+      ...(thinkingDisplayOverride === undefined
+        ? {}
+        : { thinkingDisplayOverride }),
     });
   }
   const suppressed = new Set(validateAdditionalBetas(input.suppressBetas));
@@ -298,5 +492,10 @@ export function composeBetasWithAudit(
   return Object.freeze({
     betas: Object.freeze(kept),
     suppressedBetaNames: Object.freeze(removed),
+    // The suppression filter above touches only the header list; the body
+    // half of the site-12b pair survives it by design.
+    ...(thinkingDisplayOverride === undefined
+      ? {}
+      : { thinkingDisplayOverride }),
   });
 }