mixdog 0.9.63 → 0.9.65

package/src/runtime/agent/orchestrator/providers/anthropic-max-tokens.mjs

@@ -32,7 +32,7 @@ const MAX_TOKENS = {
 // garbage, whitespace) are treated as UNSET — not as "use the default cap
 // outright" — so catalog/fallback still decide for low-cap models. Raw env
 // truthiness must never bypass resolution.
-export function envAnthropicMaxOutputOverride() {
+function envAnthropicMaxOutputOverride() {
     const raw = process.env[ENV_VAR];
     if (raw == null || String(raw).trim() === '') return null;
     const n = Number(raw);
@@ -40,14 +40,14 @@ export function envAnthropicMaxOutputOverride() {
     return Math.floor(n);
 }
 
-export function resolveAnthropicSafetyCap() {
+function resolveAnthropicSafetyCap() {
     return envAnthropicMaxOutputOverride() ?? DEFAULT_SAFETY_CAP;
 }
 
 // Pure lookup over an already-loaded catalog array (disk cache or in-memory
 // mirror) — no I/O, no caching strategy. Callers own how/when the array is
 // loaded/refreshed.
-export function lookupCatalogOutputTokens(models, id) {
+function lookupCatalogOutputTokens(models, id) {
     if (!id || !Array.isArray(models)) return null;
     const entry = models.find(m => m?.id === id);
     const out = Number(entry?.outputTokens);
@@ -59,7 +59,7 @@ export function lookupCatalogOutputTokens(models, id) {
 // the legacy 4.x line (this is the claude-sonnet-5 fix: 16384 was starving
 // visible output once extended thinking ate into the same hard cap). Keep
 // sonnet-4-x conservative at 16384; only bump 5+.
-export function fallbackAnthropicMaxTokens(model) {
+function fallbackAnthropicMaxTokens(model) {
     if (MAX_TOKENS[model]) return MAX_TOKENS[model];
     const id = String(model || '').toLowerCase();
     if (id.includes('opus')) return 65536;

package/src/runtime/agent/orchestrator/providers/anthropic-messages.mjs

@@ -0,0 +1,333 @@
+// Anthropic model catalog + message conversion helpers, extracted from anthropic.mjs.
+import { createRequire } from 'node:module';
+import { getAgentApiKey } from '../../../shared/provider-api-key.mjs';
+import { sanitizeToolPairs, sanitizeAnthropicContentPairs, foldUserTextIntoToolResultTail } from '../session/context-utils.mjs';
+import {
+    ANTHROPIC_RETRY_BACKOFF_MS,
+    ANTHROPIC_RETRY_JITTER_RATIO,
+    AnthropicFallbackTriggeredError,
+    anthropicMaxAttempts,
+    anthropicRequestTimeoutMs,
+    classifyError,
+    midstreamBackoffFor,
+    sleepWithAbort,
+    withRetry,
+    retryAfterMsFromError,
+} from './retry-classifier.mjs';
+import { traceAgentUsage } from '../agent-trace.mjs';
+import {
+    PROVIDER_FIRST_BYTE_TIMEOUT_MS,
+    createTimeoutSignal,
+    createPassthroughSignal,
+} from '../stall-policy.mjs';
+import { createAbortController } from '../../../shared/abort-controller.mjs';
+import {
+    ANTHROPIC_MAX_MIDSTREAM_RETRIES,
+    parseSSEStream,
+    _classifyMidstreamError,
+} from './anthropic-sse.mjs';
+import { buildAnthropicBetaHeaders, supportsAnthropicFastMode } from './anthropic-betas.mjs';
+import {
+    applyAnthropicEffortToBody,
+    effortValuesForModel,
+    shouldIncludeEffortBeta,
+} from './anthropic-effort.mjs';
+import { normalizeContentForAnthropic } from './media-normalization.mjs';
+import { enrichModels } from './model-catalog.mjs';
+import { sanitizeModelList } from './model-list-sanitize.mjs';
+import { makeModelCache } from './model-cache.mjs';
+import { resolveAnthropicMaxTokens } from './anthropic-max-tokens.mjs';
+import { getLlmDispatcher } from '../../../shared/llm/http-agent.mjs';
+import { notifyCurrentAnthropicRateLimit } from './admission-scheduler.mjs';
+import {
+    ANTHROPIC_CACHE_TTL_STABLE as CACHE_TTL_STABLE,
+    ANTHROPIC_CACHE_TTL_VOLATILE as CACHE_TTL_VOLATILE,
+    applyAnthropicCacheMarkers,
+    clampAnthropicThinkingBudget as clampThinkingBudgetTokens,
+    deferredAnthropicTools as sharedDeferredAnthropicTools,
+    requestAnthropicTools as sharedRequestAnthropicTools,
+    normalizeAnthropicNonStreamingResponse,
+    resolveAnthropicCacheTtls as resolveCacheTtls,
+    sanitizeAnthropicInputSchema,
+    toAnthropicToolChoice,
+} from './lib/anthropic-request-utils.mjs';
+
+
+export const require = createRequire(import.meta.url);
+let _Anthropic = null;
+export function loadAnthropic() {
+    if (!_Anthropic) {
+        const mod = require('@anthropic-ai/sdk');
+        _Anthropic = mod.default || mod.Anthropic || mod;
+    }
+    return _Anthropic;
+}
+
+// Abort-aware mid-stream backoff sleep → shared sleepWithAbort
+// (retry-classifier.mjs). abortMessage preserves the prior fallback text.
+export function _midstreamSleepWithAbort(ms, signal) {
+    return sleepWithAbort(ms, signal, undefined, 'Anthropic mid-stream retry backoff aborted');
+}
+
+// 4-BP cache policy aligned with anthropic-oauth — system + tier3 +
+// messages-tail. Tool schemas sit before system and are covered by the system
+// breakpoint, so they do not spend a separate cache_control slot. 1h TTL
+// requires the extended-cache-ttl beta header, which we set on the client via
+// defaultHeaders below.
+
+// BP3 (tier3) rides its own `system` role block (the 3rd system block, tagged
+// cacheTier:'tier3'). buildSystemBlocks applies the tier3 1h cache_control to
+// that block; BP1/BP2 take the system TTL. Mirrors anthropic-oauth.mjs.
+
+export function buildSystemBlocks(systemMsgs, systemTtl, tier3Ttl) {
+    // systemMsgs is an array of { content, cacheTier }. Each non-empty element
+    // becomes its own content block: cacheTier:'tier3' (BP3 sessionMarker) gets
+    // tier3Ttl, every other block (BP1/BP2) gets systemTtl. A null TTL leaves
+    // the corresponding block uncached.
+    const items = Array.isArray(systemMsgs)
+        ? systemMsgs
+            .map(m => ({
+                text: typeof m?.content === 'string' ? m.content.trim() : '',
+                tier: m?.cacheTier === 'tier3' ? 'tier3' : 'system',
+            }))
+            .filter(it => it.text)
+        : [];
+    // Anthropic caps cache_control breakpoints at 4 per request; defensively
+    // cap it here too so an unexpectedly large systemMsgs array can never
+    // mark more than 4 blocks (extras keep their text, just lose the
+    // cache_control breakpoint, not the block itself). Mirrors
+    // anthropic-oauth.mjs.
+    const MAX_SYSTEM_BREAKPOINTS = 4;
+    let bpCount = 0;
+    return items.map(it => {
+        const block = { type: 'text', text: it.text };
+        const ttl = it.tier === 'tier3' ? tier3Ttl : systemTtl;
+        if (ttl && bpCount < MAX_SYSTEM_BREAKPOINTS) {
+            block.cache_control = ttl;
+            bpCount++;
+        }
+        return block;
+    });
+}
+
+export const MODELS = [
+    { id: 'claude-opus-4-8', name: 'Claude Opus 4.8', provider: 'anthropic', family: 'opus', contextWindow: 1000000 },
+    { id: 'claude-opus-4-7', name: 'Claude Opus 4.7', provider: 'anthropic', family: 'opus', contextWindow: 1000000 },
+    { id: 'claude-opus-4-6', name: 'Claude Opus 4.6', provider: 'anthropic', family: 'opus', contextWindow: 1000000 },
+    { id: 'claude-sonnet-4-6', name: 'Claude Sonnet 4.6', provider: 'anthropic', family: 'sonnet', contextWindow: 1000000 },
+    { id: 'claude-haiku-4-5-20251001', name: 'Claude Haiku 4.5', provider: 'anthropic', family: 'haiku', contextWindow: 200000 },
+];
+export const ANTHROPIC_VERSION = '2023-06-01';
+
+export function _prettyName(id, family) {
+    const v = String(id || '').match(/^claude-[a-z]+-(\d+)(?:-(\d+))?/i);
+    const base = family ? family[0].toUpperCase() + family.slice(1) : 'Claude';
+    return v ? `${base} ${v[1]}${v[2] ? `.${v[2]}` : ''}` : base;
+}
+
+export function _defaultContextForModel(id, family) {
+    const text = String(id || '');
+    const version = text.match(/^claude-[a-z]+-(\d+)(?:-(\d+))?/i);
+    if (Number(version?.[1] || 0) >= 5) return 1000000;
+    if (/^claude-(opus|sonnet)-4-(6|7|8)(?:$|-)/i.test(text)) return 1000000;
+    if (family && family !== 'other') return 200000;
+    return 200000;
+}
+
+export function _capabilitySupported(capability) {
+    return capability === true || capability?.supported === true;
+}
+
+export function _normalizeAnthropicModel(raw, provider = 'anthropic') {
+    const id = raw?.id || raw?.name || raw?.model;
+    if (!id) return null;
+    const familyMatch = String(id).match(/^claude-([a-z]+)/i);
+    const family = familyMatch ? familyMatch[1].toLowerCase() : 'other';
+    const dated = /-\d{8}$/.test(String(id));
+    const versioned = !dated && /^claude-[a-z]+-\d+(?:-\d+)?$/i.test(String(id));
+    const effortValues = effortValuesForModel(raw?.capabilities, id);
+    return {
+        id,
+        display: raw?.display_name || raw?.displayName || raw?.display || _prettyName(id, family),
+        family,
+        provider,
+        contextWindow: raw?.context_window || raw?.max_context_window || raw?.max_input_tokens || raw?.input_token_limit || raw?.inputTokenLimit || _defaultContextForModel(id, family),
+        outputTokens: raw?.max_tokens || raw?.max_output_tokens || raw?.output_token_limit || raw?.outputTokenLimit || null,
+        tier: dated ? 'dated' : versioned ? 'version' : 'family',
+        latest: false,
+        supportsReasoning: effortValues.length > 0 || _capabilitySupported(raw?.capabilities?.thinking),
+        reasoningOptions: effortValues.length ? [{ type: 'effort', values: effortValues }] : [],
+    };
+}
+// Family-based heuristic so new model ids (including custom user-configured
+// ones) resolve a sensible max_tokens without requiring a code change.
+// The API-key provider has no catalog cache of its own — it reads the same
+// anthropic-oauth-models.json disk cache (read-only) that the OAuth provider
+// maintains. Both providers hit the same Anthropic /v1/models catalog, so a
+// per-model outputTokens entry is valid regardless of which auth path wrote
+// it. If this provider is ever run standalone without the OAuth provider
+// ever having populated the cache, loadSync() simply returns null and we
+// fall through to the shared static heuristic in anthropic-max-tokens.mjs.
+const ANTHROPIC_OAUTH_MODEL_CACHE_TTL_MS = 24 * 60 * 60_000;
+const _sharedOAuthModelCache = makeModelCache({
+    fileName: 'anthropic-oauth-models.json',
+    ttlMs: ANTHROPIC_OAUTH_MODEL_CACHE_TTL_MS,
+    version: 1,
+});
+
+// In-memory mirror populated by this provider's own listModels() fetch.
+// API-key-only installs never have the OAuth provider write the shared disk
+// cache, so without this mirror catalog outputTokens would stay invisible to
+// resolveMaxTokens until an OAuth session runs. listModels() results flow in
+// here (memory only — the disk cache stays OAuth-owned/read-only for us).
+let _apiKeyCatalogMirror = null;
+export function _setApiKeyCatalogMirror(value) { _apiKeyCatalogMirror = value; }
+
+function _catalogOutputTokensFromSharedCache(model) {
+    if (!model) return null;
+    try {
+        const models = Array.isArray(_apiKeyCatalogMirror)
+            ? _apiKeyCatalogMirror
+            : _sharedOAuthModelCache.loadSync();
+        if (!Array.isArray(models)) return null;
+        const entry = models.find(m => m?.id === model);
+        const out = Number(entry?.outputTokens);
+        return Number.isFinite(out) && out > 0 ? out : null;
+    } catch {
+        return null;
+    }
+}
+
+export function resolveMaxTokens(model) {
+    return resolveAnthropicMaxTokens(model, { catalogLookup: _catalogOutputTokensFromSharedCache });
+}
+
+// Test-only escape hatch for scripts/anthropic-maxtokens-test.mjs.
+export const _test = {
+    resolveMaxTokens,
+    deferredAnthropicTools,
+    requestAnthropicTools,
+    sanitizeInputSchema: (schema, toolName) => sanitizeAnthropicInputSchema(schema, toolName, 'anthropic'),
+};
+
+// Anthropic forbids oneOf / allOf / anyOf at the TOP level of input_schema.
+// Mirror the same sanitizer as anthropic-oauth.mjs so both providers are safe.
+// Map the orchestrator-level opts.toolChoice into Anthropic's tool_choice.
+// Only 'none' is activated: it lets the hard-cap final turn keep the tool
+// DEFINITIONS in-request (so the tools->system->messages prefix — and its
+// prompt-cache prefix — stay byte-identical to prior turns) while forbidding
+// tool USE, so the model can only emit text. Forced values
+// ('required'->{type:'any'}, {name}->{type:'tool'}) are deliberately NOT
+// mapped: Anthropic returns a 400 for any forced tool_choice while
+// extended/adaptive thinking is enabled, and the only caller that sets
+// opts.toolChoice='required' (the forced-first-tool turn) runs with
+// effort/thinking active on reasoning models — activating it would convert a
+// previously-harmless no-op into a hard 400 on exactly that turn. Attached
+// only when the request actually carries tools (see _doSend). Mirrors
+// anthropic-oauth.mjs.
+export function deferredAnthropicTools(activeTools, messages, opts) {
+    return sharedDeferredAnthropicTools(activeTools, messages, opts, 'anthropic');
+}
+export function requestAnthropicTools(tools, messages, opts) {
+    return sharedRequestAnthropicTools(tools, messages, opts, 'anthropic');
+}
+export function toAnthropicMessages(messages) {
+    // Marker-free lowering. cache_control is applied AFTER sanitization by
+    // applyAnthropicCacheMarkers() so that block drops/inserts/reorders
+    // performed by sanitizeAnthropicContentPairs cannot move or delete a
+    // marked block (the root cause of the sporadic COLD-turn cache miss:
+    // pre-sanitize markers landed on blocks the sanitizer then rewrote, so
+    // the provider-visible breakpoint diverged from the cached one).
+    const result = [];
+    for (let idx = 0; idx < messages.length; idx++) {
+        const m = messages[idx];
+        if (m.role === 'system') continue;
+        if (m.role === 'assistant' && (m.toolCalls?.length || m.assistantBlocks?.length || m.thinkingBlocks?.length)) {
+            let content;
+            if (m.assistantBlocks?.length) {
+                content = m.assistantBlocks.slice();
+            } else {
+                content = [];
+                // Adaptive-thinking round-trip: prior-turn thinking blocks are
+                // REQUIRED back, unmodified (signature intact; empty thinking
+                // field allowed), and MUST precede tool_use blocks.
+                if (Array.isArray(m.thinkingBlocks)) {
+                    for (const tb of m.thinkingBlocks) {
+                        if (tb && typeof tb === 'object') content.push(tb);
+                    }
+                }
+                if (m.content) content.push({ type: 'text', text: m.content });
+                for (const tc of m.toolCalls || []) {
+                    content.push({
+                        type: 'tool_use',
+                        id: tc.id,
+                        name: tc.name,
+                        input: tc.arguments,
+                    });
+                }
+            }
+            result.push({ role: 'assistant', content });
+            continue;
+        }
+        if (m.role === 'tool') {
+            const last = result[result.length - 1];
+            const native = m.nativeToolSearch;
+            const nativeProvider = String(native?.provider || '').toLowerCase();
+            const anthropicNative = new Set(['anthropic', 'anthropic-oauth']);
+            const references = (!nativeProvider || anthropicNative.has(nativeProvider))
+                && Array.isArray(native?.toolReferences)
+                ? native.toolReferences.map((name) => String(name || '').trim()).filter(Boolean)
+                : [];
+            const block = {
+                type: 'tool_result',
+                tool_use_id: m.toolCallId || '',
+                content: references.length
+                    ? references.map((tool_name) => ({ type: 'tool_reference', tool_name }))
+                    : normalizeContentForAnthropic(m.content),
+                ...((m.toolKind === 'error' || m.isError === true) ? { is_error: true } : {}),
+            };
+            if (last?.role === 'user' && Array.isArray(last.content)) {
+                last.content.push(block);
+            }
+            else {
+                result.push({ role: 'user', content: [block] });
+            }
+            continue;
+        }
+        // First-party client parity: fold a user text turn that directly follows a
+        // tool_result turn into that tool_result's content (empty end_turn
+        // livelock prevention; see foldUserTextIntoToolResultTail).
+        //   EXCEPTION: steering-origin user messages (human/TUI interjections)
+        //   keep their own user turn so provenance survives — folding them would
+        //   disguise user input as tool output. Anthropic accepts a user text
+        //   message after a tool_result message, so the turn stays request-valid.
+        const isSteering = m.role === 'user' && m.meta?.source === 'steering';
+        if (m.role === 'user' && !isSteering
+            && foldUserTextIntoToolResultTail(result, normalizeContentForAnthropic(m.content))) {
+            continue;
+        }
+        result.push({ role: m.role, content: normalizeContentForAnthropic(m.content) });
+    }
+    return sanitizeAnthropicContentPairs(result);
+}
+
+// Test-only: expose the lowering so the steering-provenance test can assert
+// the API-key provider keeps steering-tagged user turns distinct (mirrors
+// anthropic-oauth._buildRequestBodyForCacheSmoke coverage).
+export function _toAnthropicMessagesForTest(messages) {
+    return toAnthropicMessages(messages);
+}
+
+// Applies cache_control markers to the FINAL, already-sanitized Anthropic
+// message array — by INVARIANT, never by pre-sanitize index. Because
+// sanitizeAnthropicContentPairs has already run (and must NOT run again
+// after this), the blocks we mark here are exactly the blocks the provider
+// sees, so the cache breakpoint is stable across turns.
+//   message-anchor: prefer a safe tool_result tail, then a previous real user
+//                   text turn if another slot remains. Synthetic
+//                   <system-reminder> messages and current pure-text prompts
+//                   are excluded so per-call volatileTail/current prompt
+//                   content never becomes a 1h prefix key.
+// messageTtl === null disables the tail. BP3 (tier3) now rides a system block,
+// so it is no longer marked here.
+// ANTHROPIC_MSG_SLOTS=0 is honoured upstream by passing messageTtl = null.

package/src/runtime/agent/orchestrator/providers/anthropic-model-resolve.mjs

@@ -29,7 +29,7 @@ export async function _loadModelCache() {
     return _modelCache.loadSync();
 }
 
-export async function _saveModelCache(models) {
+async function _saveModelCache(models) {
     _modelCache.save(models);
 }
 
@@ -112,7 +112,7 @@ function _defaultContextForModel(id, family) {
 
 // Mark the highest-numbered version per family as `latest: true`. Uses a simple
 // lexicographic comparison on the numeric parts embedded in the id.
-export function _markLatestByFamily(models) {
+function _markLatestByFamily(models) {
     const byFamily = new Map();
     for (const m of models) {
         if (m.tier !== 'version') continue;

package/src/runtime/agent/orchestrator/providers/anthropic-oauth-credentials.mjs

@@ -31,10 +31,10 @@ function assertSafeTokenURL(rawURL) {
     return rawURL;
 }
 export const TOKEN_URL = assertSafeTokenURL(process.env.ANTHROPIC_OAUTH_TOKEN_URL || 'https://platform.claude.com/v1/oauth/token');
-export const DEFAULT_CREDENTIALS_PATH = join(resolvePluginData(), 'anthropic-oauth-credentials.json');
-export const CLAUDE_CODE_CLIENT_ID = process.env.ANTHROPIC_OAUTH_CLIENT_ID || '9d1c250a-e61b-44d9-88ed-5944d1962f5e';
+const DEFAULT_CREDENTIALS_PATH = join(resolvePluginData(), 'anthropic-oauth-credentials.json');
+const CLAUDE_CODE_CLIENT_ID = process.env.ANTHROPIC_OAUTH_CLIENT_ID || '9d1c250a-e61b-44d9-88ed-5944d1962f5e';
 export const TOKEN_REFRESH_SKEW_MS = 5 * 60_000;
-export const ANTHROPIC_OAUTH_REFRESH_DISABLED_ENV = 'MIXDOG_ANTHROPIC_OAUTH_REFRESH_DISABLED';
+const ANTHROPIC_OAUTH_REFRESH_DISABLED_ENV = 'MIXDOG_ANTHROPIC_OAUTH_REFRESH_DISABLED';
 const CLAUDE_AI_AUTHORIZE_URL = 'https://claude.com/cai/oauth/authorize';
 const ALL_OAUTH_SCOPES = [
     'org:create_api_key',
@@ -71,7 +71,7 @@ function _pushUnique(list, value) {
     if (!list.includes(value)) list.push(value);
 }
 
-export function credentialCandidates() {
+function credentialCandidates() {
     const bound = boundProviderAuthPath('anthropic-oauth');
     if (bound) return [resolve(bound)];
     const explicit = process.env.ANTHROPIC_OAUTH_CREDENTIALS_PATH;

package/src/runtime/agent/orchestrator/providers/anthropic-oauth.mjs

@@ -94,7 +94,7 @@ function formatRetryAfter(ms) {
     return `${Math.ceil(n)}ms`;
 }
 
-export function anthropicQuotaError(status, headers, bodyText = '') {
+function anthropicQuotaError(status, headers, bodyText = '') {
     const retryAfterMs = retryAfterMsFromError({ headers, response: { headers } });
     const retryAfter = formatRetryAfter(retryAfterMs);
     const detail = bodyText ? `: ${String(bodyText).slice(0, 200)}` : '';