github-router 0.3.271 → 0.3.274

package/dist/{peer-mcp-personas-CN8xaXcV.js → peer-mcp-personas-pzk1zcDa.js}

@@ -1,6 +1,6 @@
 import { t as getPackageVersion } from "./version-_Q1WpsQp.js";
 import { t as PATHS } from "./paths-Bg1_DWhi.js";
-import { A as state, C as GITHUB_GRAPHQL_URL, D as githubAgentGraphQLHeaders, E as copilotVersion, O as githubAgentHeaders, S as GITHUB_API_BASE_URL, T as copilotHeaders, b as sanitizeTransportText, d as resolveModel, f as sleep$2, g as HTTPError, h as isAllowedCopilotHost, i as tryRefreshAndRetry, v as classifyTransportError, w as copilotBaseUrl, x as withTransientRetry, y as fetchWithTransientRetry } from "./token-iaSGp76k.js";
+import { A as state, C as GITHUB_GRAPHQL_URL, D as githubAgentGraphQLHeaders, E as copilotVersion, O as githubAgentHeaders, S as GITHUB_API_BASE_URL, T as copilotHeaders, b as sanitizeTransportText, d as resolveModel, f as sleep$2, g as HTTPError, h as isAllowedCopilotHost, i as tryRefreshAndRetry, v as classifyTransportError, w as copilotBaseUrl, x as withTransientRetry, y as fetchWithTransientRetry } from "./token-Bz6HoH2H.js";
 import { a as resolveExecutable, c as runManagedExeCapture, i as parseIntEnv, l as spawnTaskkillBestEffort, r as parseBoolEnv } from "./exec-y8C_MU8A.js";
 import { i as registerExitHandlers$1, n as getInstanceUuid, r as recordWorkerRepo, t as WorktreeRegistry } from "./lifecycle-0XrazT05.js";
 import { t as MCP_WORKSPACE_HEADER } from "./mcp-workspace-header-CGJbNeHb.js";
@@ -272,6 +272,12 @@ function envInt$1(key, fallback) {
 }
 const UPSTREAM_FETCH_TIMEOUT_MS = envInt$1("UPSTREAM_FETCH_TIMEOUT_MS", 0);
 const UPSTREAM_INACTIVITY_TIMEOUT_MS = envInt$1("UPSTREAM_INACTIVITY_TIMEOUT_MS", 3e5);
+function upstreamAllowH2() {
+	return process.env.GH_ROUTER_UPSTREAM_ALLOW_H2 === "1";
+}
+function upstreamMaxConnections() {
+	return envInt$1("GH_ROUTER_UPSTREAM_MAX_CONNECTIONS", 256);
+}
 //#endregion
 //#region src/lib/toolbelt/path-inject.ts
 /**
@@ -27399,7 +27405,6 @@ function classifyNamedStreamError(errName, errMessage) {
 }
 function classifyStreamError(details) {
 	if (details.name === "AbortError" || details.name === "InactivityTimeout" || details.name === "TimeoutError" || details.name === "timeout_error") return "timeout_error";
-	if (details.classification === "transient") return "overloaded_error";
 	return "api_error";
 }
 function formatStreamErrorMessage(details) {
@@ -27426,7 +27431,7 @@ function logStreamError(routePath, error, bytesRelayed) {
 }
 //#endregion
 //#region src/lib/thinking-history-repair.ts
-const THINKING_INTEGRITY_ERROR_RES = [/messages\.(\d+)\.content\.\d+:\s*`thinking` or `redacted_thinking` blocks in the latest assistant message cannot be modified/, /messages\.(\d+)\.content\.\d+:\s*Invalid `signature` in `thinking` block/];
+const THINKING_INTEGRITY_ERROR_RES = [/messages\.(\d+)\.content\.(\d+):\s*`thinking` or `redacted_thinking` blocks in the latest assistant message cannot be modified/, /messages\.(\d+)\.content\.(\d+):\s*Invalid `signature` in `thinking` block/];
 const MAX_REMEMBERED_REPAIRS = 1e3;
 const OMITTED_THINKING_PLACEHOLDER = "[prior reasoning omitted]";
 const repairSalt = randomBytes(32);
@@ -27467,7 +27472,7 @@ function signedBlockFingerprint(_messageIndex, content) {
 	}
 	return signedBlocks > 0 ? hash.digest("hex") : void 0;
 }
-function repairMessageAt(parsed, messageIndex) {
+function repairAtArrayIndex(parsed, messageIndex) {
 	if (!Array.isArray(parsed.messages)) return declined("no-messages-array", { messageIndex });
 	const messages = [...parsed.messages];
 	const detail = {
@@ -27514,6 +27519,102 @@ function repairMessageAt(parsed, messageIndex) {
 		}
 	};
 }
+/** Roles in order, for a decline log. Roles only, so it carries no content. */
+function roleSequenceOf(messages) {
+	return messages.map((message) => isRecord(message) && typeof message.role === "string" ? message.role : "unknown").join(",");
+}
+/** Elements upstream would not count as a conversation turn. */
+function isHoistedElement(message) {
+	if (!isRecord(message)) return false;
+	return message.role !== "user" && message.role !== "assistant";
+}
+/**
+* Translate an upstream-reported message index into an index in THIS array,
+* skipping elements upstream would not have counted.
+*
+* Anthropic's Messages schema has no in-array `system` role, yet clients do
+* send one, and upstream evidently accepts it and drops it before validating —
+* which shifts every index after it. Returns undefined when nothing is hoisted
+* (the mapping would be the identity) or when the target does not exist.
+*/
+function hoistAdjustedIndex(messages, reportedIndex) {
+	let retained = 0;
+	for (let index = 0; index < messages.length; index++) {
+		if (isHoistedElement(messages[index])) continue;
+		if (retained === reportedIndex) return index === reportedIndex ? void 0 : index;
+		retained++;
+	}
+}
+/** True when `content[contentIndex]` is a signed thinking block. */
+function hasSignedBlockAt(content, contentIndex) {
+	if (!Array.isArray(content)) return false;
+	const block = content[contentIndex];
+	if (!isRecord(block)) return false;
+	return block.type === "thinking" || block.type === "redacted_thinking";
+}
+/**
+* Resolve the message upstream named, then repair it.
+*
+* DIRECT INDEX FIRST, hoist-adjusted index only as a fallback. The ordering is
+* the whole safety argument: every request that repairs correctly today takes
+* the direct path untouched, and the adjusted path runs only where the code
+* would otherwise have declined outright. Mapping first would REGRESS a working
+* case — with `[user, system, assistant]` and upstream naming `messages.2`, the
+* direct lookup repairs the assistant turn correctly while a retained-role
+* mapping yields only `[user, assistant]` and runs off the end.
+*
+* The fallback is self-validating rather than trusted: it is accepted only if
+* the block upstream actually named is a signed thinking block at the adjusted
+* position. If the index shift has some other cause, that check fails and the
+* original decline stands, so a wrong hypothesis fails closed instead of
+* stripping blocks from an innocent turn.
+*/
+/** True when `index` names an assistant carrying the block upstream reported. */
+function namesReportedBlock(messages, index, contentIndex) {
+	const message = messages[index];
+	if (!isRecord(message) || message.role !== "assistant") return false;
+	return hasSignedBlockAt(message.content, contentIndex);
+}
+/**
+* Resolve the message upstream named, then repair it.
+*
+* When nothing is hoisted, this array and upstream's are indexed alike, so the
+* reported index is used directly — the identity case, and the overwhelming
+* majority of traffic, whose behaviour is unchanged.
+*
+* When something IS hoisted, the two arrays provably disagree and the reported
+* index alone cannot say which turn was meant. Both the raw index and the
+* hoist-adjusted one can land on a signed assistant, and picking the raw one
+* blind would strip a healthy turn while leaving the corrupt one in place. So
+* the block index upstream reported is used as the tiebreak: whichever
+* candidate actually carries a signed block THERE is the one repaired. If both
+* do, the request is genuinely ambiguous and we decline — the client sees the
+* same 400 it would have seen anyway, with no innocent turn rewritten.
+*/
+function repairMessageAt(parsed, messageIndex, contentIndex) {
+	if (!Array.isArray(parsed.messages)) return repairAtArrayIndex(parsed, messageIndex);
+	const messages = parsed.messages;
+	const hoistedCount = messages.filter((m) => isHoistedElement(m)).length;
+	const mapped = hoistedCount === 0 ? void 0 : hoistAdjustedIndex(messages, messageIndex);
+	const annotate = (outcome, extra = {}) => outcome.ok ? outcome : declined(outcome.decline.reason, {
+		...outcome.decline,
+		hoistedCount,
+		roleSequence: roleSequenceOf(messages),
+		...extra
+	});
+	if (hoistedCount === 0 || contentIndex === void 0 || mapped === void 0) return annotate(repairAtArrayIndex(parsed, messageIndex));
+	const directNames = namesReportedBlock(messages, messageIndex, contentIndex);
+	const mappedNames = namesReportedBlock(messages, mapped, contentIndex);
+	if (directNames && mappedNames) return declined("ambiguous-index", {
+		messageIndex,
+		messageCount: messages.length,
+		hoistedCount,
+		roleSequence: roleSequenceOf(messages),
+		mappedIndex: mapped
+	});
+	if (mappedNames) return annotate(repairAtArrayIndex(parsed, mapped), { mappedIndex: mapped });
+	return annotate(repairAtArrayIndex(parsed, messageIndex), { mappedIndex: mapped });
+}
 /**
 * Build a one-shot repair only for Copilot's known signed-thinking integrity
 * rejections. The upstream error is the oracle: valid omitted-display thinking
@@ -27528,13 +27629,15 @@ function repairRejectedThinkingHistory(rawBody, upstreamErrorText) {
 	if (!match) return declined("error-not-recognized");
 	const messageIndex = Number(match[1]);
 	if (!Number.isSafeInteger(messageIndex) || messageIndex < 0) return declined("message-index-invalid", { messageIndex });
+	const parsedContentIndex = Number(match[2]);
+	const contentIndex = Number.isSafeInteger(parsedContentIndex) && parsedContentIndex >= 0 ? parsedContentIndex : void 0;
 	let parsed;
 	try {
 		parsed = JSON.parse(rawBody);
 	} catch {
 		return declined("body-not-json", { messageIndex });
 	}
-	return repairMessageAt(parsed, messageIndex);
+	return repairMessageAt(parsed, messageIndex, contentIndex);
 }
 /**
 * Reapply a repair already proven successful in this process. Only salted
@@ -27557,7 +27660,7 @@ function repairKnownThinkingHistory(rawBody) {
 		if (!isRecord(message) || !Array.isArray(message.content)) continue;
 		const fingerprint = signedBlockFingerprint(index, message.content);
 		if (!fingerprint || !rememberedRepairs.has(fingerprint)) continue;
-		const attempt = repairMessageAt(parsed, index);
+		const attempt = repairAtArrayIndex(parsed, index);
 		if (!attempt.ok) continue;
 		totalRemovedBlocks += attempt.repair.removedBlocks;
 		repaired = {
@@ -34493,6 +34596,6 @@ function enumerateInjectedMcpToolNames(groupKeys, opts = {}) {
 	return [...new Set(names)];
 }
 //#endregion
-export { browserToolsEnabled as $, searchWeb as A, collapsePathKeys as At, buildAnthropicErrorEvent as B, withOneMSuffix as Bt, buildToolbeltAwareness as C, provisionAndIndexColbert as Ct, TOOLBELT_TOOLS$1 as D, CONDENSED_OPERATING_SEQUENCE as Dt, vscodeRipgrepPath as E, warmTreeSitterPool as Et, isAdvisorRequested as F, DEFAULT_PORT as Ft, relayAnthropicStream as G, isControllerClosedError as H, formatThinkingRepairDecline as I, UPSTREAM_FETCH_TIMEOUT_MS as It, agentToolsEnabled as J, handleMcpDelete as K, rememberThinkingHistoryRepair as L, UPSTREAM_INACTIVITY_TIMEOUT_MS as Lt, ADVISOR_TOOL_INSTRUCTIONS as M, DEFAULT_CLAUDE_MODEL_FALLBACKS as Mt, buildAdvisorStream as N, DEFAULT_CODEX_MODEL as Nt, assetFor as O, DEFINITION_OF_GREATNESS as Ot, injectAdvisorTool as P, DEFAULT_CODEX_MODEL_FALLBACKS as Pt, browserCompoundToolsEnabled as Q, repairKnownThinkingHistory as R, generateRandomPort as Rt, availableToolCommands as S, colbertDegradedWarning as St, toolbeltSkipSet as T, extractZipMember as Tt, logStreamError as U, buildOpenAIErrorEvent as V, withInstallLock as Vt, readIteratorWithTimeout as W, brainstormModel as X, artifactToolsEnabled as Y, browseAgentEnabled as Z, appendPlanReminder as _, MAX_RESPONSE_BODY_BYTES as _t, buildPeerAwarenessSnippet as a, scribeModel as at, runWorkerAgent as b, provisionBrowserAssets as bt, personasFor as c, shimDefaultsToXhigh as ct, EXPLORE_DEFAULT_MODEL as d, getTokenCount as dt, fleetToolsEnabled as et, EXPLORE_DEFAULT_THINKING as f, assembleResponsesPayload as ft, TEST_DEFAULT_MODEL as g, createChatCompletions as gt, REVIEW_DEFAULT_MODEL as h, createResponses as ht, buildAgentPrompt as i, scoutModel as it, ADVISOR_INTERNAL_TOOL_NAME as j, toolbeltPathOverride as jt, satisfiesMinVersion as k, shouldUseInsecureTls as kt, BROWSE_DEFAULT_MODEL as l, countTokens as lt, PLAN_DEFAULT_MODEL as m, pickEndpoint as mt, MCP_GROUPS as n, nativeSubagentModel as nt, buildPeerAwarenessSummary as o, standInToolEnabled as ot, IMPLEMENT_DEFAULT_MODEL as p, resolveMcpToolTimeoutMs as pt, handleMcpPost as q, assertMcpToolSurfaceConsistent as r, reviewerModel as rt, enumerateInjectedMcpToolNames as s, workerToolsEnabled as st, GROUP_META as t, geminiAvailable as tt, DEFAULT_MODEL as u, createMessages as ut, resolveModeDefaults as v, readResponseBodyCapped as vt, toolbeltEnabled as w, extractTarGzMember as wt, buildEnv as x, hasSupportedBrowserInstalled as xt, resolveWorkerRunOpts as y, parseJsonOrDiagnose as yt, repairRejectedThinkingHistory as z, pickClaudeDefault as zt };
+export { browserToolsEnabled as $, searchWeb as A, collapsePathKeys as At, buildAnthropicErrorEvent as B, upstreamAllowH2 as Bt, buildToolbeltAwareness as C, provisionAndIndexColbert as Ct, TOOLBELT_TOOLS$1 as D, CONDENSED_OPERATING_SEQUENCE as Dt, vscodeRipgrepPath as E, warmTreeSitterPool as Et, isAdvisorRequested as F, DEFAULT_PORT as Ft, relayAnthropicStream as G, isControllerClosedError as H, withOneMSuffix as Ht, formatThinkingRepairDecline as I, UPSTREAM_FETCH_TIMEOUT_MS as It, agentToolsEnabled as J, handleMcpDelete as K, rememberThinkingHistoryRepair as L, UPSTREAM_INACTIVITY_TIMEOUT_MS as Lt, ADVISOR_TOOL_INSTRUCTIONS as M, DEFAULT_CLAUDE_MODEL_FALLBACKS as Mt, buildAdvisorStream as N, DEFAULT_CODEX_MODEL as Nt, assetFor as O, DEFINITION_OF_GREATNESS as Ot, injectAdvisorTool as P, DEFAULT_CODEX_MODEL_FALLBACKS as Pt, browserCompoundToolsEnabled as Q, repairKnownThinkingHistory as R, generateRandomPort as Rt, availableToolCommands as S, colbertDegradedWarning as St, toolbeltSkipSet as T, extractZipMember as Tt, logStreamError as U, withInstallLock as Ut, buildOpenAIErrorEvent as V, upstreamMaxConnections as Vt, readIteratorWithTimeout as W, brainstormModel as X, artifactToolsEnabled as Y, browseAgentEnabled as Z, appendPlanReminder as _, MAX_RESPONSE_BODY_BYTES as _t, buildPeerAwarenessSnippet as a, scribeModel as at, runWorkerAgent as b, provisionBrowserAssets as bt, personasFor as c, shimDefaultsToXhigh as ct, EXPLORE_DEFAULT_MODEL as d, getTokenCount as dt, fleetToolsEnabled as et, EXPLORE_DEFAULT_THINKING as f, assembleResponsesPayload as ft, TEST_DEFAULT_MODEL as g, createChatCompletions as gt, REVIEW_DEFAULT_MODEL as h, createResponses as ht, buildAgentPrompt as i, scoutModel as it, ADVISOR_INTERNAL_TOOL_NAME as j, toolbeltPathOverride as jt, satisfiesMinVersion as k, shouldUseInsecureTls as kt, BROWSE_DEFAULT_MODEL as l, countTokens as lt, PLAN_DEFAULT_MODEL as m, pickEndpoint as mt, MCP_GROUPS as n, nativeSubagentModel as nt, buildPeerAwarenessSummary as o, standInToolEnabled as ot, IMPLEMENT_DEFAULT_MODEL as p, resolveMcpToolTimeoutMs as pt, handleMcpPost as q, assertMcpToolSurfaceConsistent as r, reviewerModel as rt, enumerateInjectedMcpToolNames as s, workerToolsEnabled as st, GROUP_META as t, geminiAvailable as tt, DEFAULT_MODEL as u, createMessages as ut, resolveModeDefaults as v, readResponseBodyCapped as vt, toolbeltEnabled as w, extractTarGzMember as wt, buildEnv as x, hasSupportedBrowserInstalled as xt, resolveWorkerRunOpts as y, parseJsonOrDiagnose as yt, repairRejectedThinkingHistory as z, pickClaudeDefault as zt };
 
-//# sourceMappingURL=peer-mcp-personas-CN8xaXcV.js.map
+//# sourceMappingURL=peer-mcp-personas-pzk1zcDa.js.map