network-ai 5.12.6 → 5.13.0

package/dist/lib/telemetry-provider.d.ts

@@ -163,4 +163,76 @@ export declare class CapturingTelemetryProvider implements ITelemetryProvider {
  * semantics of `StreamingBaseAdapter`.
  */
 export declare function createOtelHooks(provider: ITelemetryProvider): ExecutionHook[];
+/** Span/event name emitted for a classifier refusal. */
+export declare const REFUSAL_EVENT = "model.refusal";
+/** Span/event name emitted when a fallback model serves a turn. */
+export declare const FALLBACK_SERVED_EVENT = "model.fallback_served";
+/** Argument to {@link RefusalTelemetry.recordRefusal}. */
+export interface RefusalEventInfo {
+    model: string;
+    category: string | null;
+    agentId?: string;
+}
+/** Argument to {@link RefusalTelemetry.recordFallbackServed}. */
+export interface FallbackServedInfo {
+    requestedModel: string;
+    servedModel: string;
+    agentId?: string;
+}
+/** Point-in-time counters from {@link RefusalTelemetry.snapshot}. */
+export interface RefusalSnapshot {
+    refusals: number;
+    fallbackServed: number;
+    /** Refusals never served by a fallback — the gap to alert on. */
+    unservedRefusals: number;
+    byCategory: Record<string, number>;
+    byModel: Record<string, number>;
+}
+/**
+ * Refusal/fallback observability.
+ *
+ * A classifier refusal is a successful **HTTP 200**, so monitoring built on
+ * error rates or 5xx responses never sees it. `RefusalTelemetry` records each
+ * refusal and each fallback-served response as discrete **non-error** signals,
+ * keeps counters, and exposes the gap between them (`unservedRefusalCount`) so
+ * you can alert when refusals are not being served by a fallback.
+ *
+ * It satisfies the `RefusalTelemetrySink` contract consumed by
+ * {@link ../lib/model-gateway!GovernedModelGateway}. Pass an
+ * {@link ITelemetryProvider} to also emit spans to your tracing backend.
+ *
+ * @example
+ * ```typescript
+ * const refusals = new RefusalTelemetry(new CapturingTelemetryProvider());
+ * const gateway = new GovernedModelGateway({ caller, primaryModel, fallbackModels, telemetry: refusals });
+ * // ...later
+ * if (refusals.unservedRefusalCount > 0) alert('refusals are reaching users');
+ * ```
+ */
+export declare class RefusalTelemetry {
+    private readonly provider;
+    private _refusals;
+    private _fallbackServed;
+    private readonly _byCategory;
+    private readonly _byModel;
+    constructor(provider?: ITelemetryProvider);
+    /** Record a classifier refusal (counted as a signal, never as an error). */
+    recordRefusal(info: RefusalEventInfo): void;
+    /** Record that a fallback model served a turn the primary declined. */
+    recordFallbackServed(info: FallbackServedInfo): void;
+    /** Total refusals observed. */
+    get refusalCount(): number;
+    /** Total fallback-served responses observed. */
+    get fallbackServedCount(): number;
+    /** Refusals that were never served by a fallback (the gap to alert on). */
+    get unservedRefusalCount(): number;
+    /** Refusal counts keyed by classifier category. */
+    byCategory(): Record<string, number>;
+    /** A full counter snapshot. */
+    snapshot(): RefusalSnapshot;
+    /** Reset all counters. */
+    reset(): void;
+    /** Emit a discrete non-error span for a refusal/fallback signal. @internal */
+    private emit;
+}
 //# sourceMappingURL=telemetry-provider.d.ts.map

package/dist/lib/telemetry-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry-provider.d.ts","sourceRoot":"","sources":["../../lib/telemetry-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,iBAAiB,CAAC;AAMlE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IACxB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,cAAc,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzE;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;IAE7D;;;;;OAKG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,EAAE,UAAU,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAEnF;;;;;OAKG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CAC9E;AAMD;;;;GAIG;AACH,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,kBAAkB;IAClB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,cAAc,GAAG,MAAM;IAC9D,kBAAkB;IAClB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,EAAE,WAAW,CAAC,EAAE,cAAc,GAAG,IAAI;IACrF,kBAAkB;IAClB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,cAAc,GAAG,IAAI;CAChF;AAMD;;;;;;;;;;;;;GAaG;AACH,qBAAa,0BAA2B,YAAW,kBAAkB;IACnE,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,CAAM;IACpC,OAAO,CAAC,OAAO,CAAK;IAEpB,kBAAkB;IAClB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,GAAE,cAAmB,GAAG,MAAM;IAMhE,kBAAkB;IAClB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,EAAE,UAAU,GAAE,cAAmB,GAAG,IAAI;IAQtF,kBAAkB;IAClB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,GAAE,cAAmB,GAAG,IAAI;IAMhF,sDAAsD;IACtD,KAAK,IAAI,IAAI;CAId;AASD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,kBAAkB,GAAG,aAAa,EAAE,CAyD7E"}
+{"version":3,"file":"telemetry-provider.d.ts","sourceRoot":"","sources":["../../lib/telemetry-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,iBAAiB,CAAC;AAMlE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;CACtD;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;IACxB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,cAAc,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzE;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,cAAc,GAAG,MAAM,CAAC;IAE7D;;;;;OAKG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,EAAE,UAAU,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAEnF;;;;;OAKG;IACH,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;CAC9E;AAMD;;;;GAIG;AACH,qBAAa,qBAAsB,YAAW,kBAAkB;IAC9D,kBAAkB;IAClB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,cAAc,GAAG,MAAM;IAC9D,kBAAkB;IAClB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,EAAE,WAAW,CAAC,EAAE,cAAc,GAAG,IAAI;IACrF,kBAAkB;IAClB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,cAAc,GAAG,IAAI;CAChF;AAMD;;;;;;;;;;;;;GAaG;AACH,qBAAa,0BAA2B,YAAW,kBAAkB;IACnE,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,CAAM;IACpC,OAAO,CAAC,OAAO,CAAK;IAEpB,kBAAkB;IAClB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,GAAE,cAAmB,GAAG,MAAM;IAMhE,kBAAkB;IAClB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,OAAO,EAAE,UAAU,GAAE,cAAmB,GAAG,IAAI;IAQtF,kBAAkB;IAClB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,GAAE,cAAmB,GAAG,IAAI;IAMhF,sDAAsD;IACtD,KAAK,IAAI,IAAI;CAId;AASD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,kBAAkB,GAAG,aAAa,EAAE,CAyD7E;AAMD,wDAAwD;AACxD,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,mEAAmE;AACnE,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,0DAA0D;AAC1D,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qEAAqE;AACrE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiC;IAC1D,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkC;gBAE/C,QAAQ,CAAC,EAAE,kBAAkB;IAIzC,4EAA4E;IAC5E,aAAa,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI;IAQ3C,uEAAuE;IACvE,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI;IASpD,+BAA+B;IAC/B,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,gDAAgD;IAChD,IAAI,mBAAmB,IAAI,MAAM,CAEhC;IAED,2EAA2E;IAC3E,IAAI,oBAAoB,IAAI,MAAM,CAEjC;IAED,mDAAmD;IACnD,UAAU,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAMpC,+BAA+B;IAC/B,QAAQ,IAAI,eAAe;IAY3B,0BAA0B;IAC1B,KAAK,IAAI,IAAI;IAOb,8EAA8E;IAC9E,OAAO,CAAC,IAAI;CAUb"}

package/dist/lib/telemetry-provider.js

@@ -48,7 +48,7 @@
  * ```
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CapturingTelemetryProvider = exports.NullTelemetryProvider = void 0;
+exports.RefusalTelemetry = exports.FALLBACK_SERVED_EVENT = exports.REFUSAL_EVENT = exports.CapturingTelemetryProvider = exports.NullTelemetryProvider = void 0;
 exports.createOtelHooks = createOtelHooks;
 // ============================================================================
 // NULL PROVIDER (default — zero overhead when no telemetry is configured)
@@ -204,4 +204,112 @@ function createOtelHooks(provider) {
         },
     ];
 }
+// ============================================================================
+// REFUSAL OBSERVABILITY
+// ============================================================================
+/** Span/event name emitted for a classifier refusal. */
+exports.REFUSAL_EVENT = 'model.refusal';
+/** Span/event name emitted when a fallback model serves a turn. */
+exports.FALLBACK_SERVED_EVENT = 'model.fallback_served';
+/**
+ * Refusal/fallback observability.
+ *
+ * A classifier refusal is a successful **HTTP 200**, so monitoring built on
+ * error rates or 5xx responses never sees it. `RefusalTelemetry` records each
+ * refusal and each fallback-served response as discrete **non-error** signals,
+ * keeps counters, and exposes the gap between them (`unservedRefusalCount`) so
+ * you can alert when refusals are not being served by a fallback.
+ *
+ * It satisfies the `RefusalTelemetrySink` contract consumed by
+ * {@link ../lib/model-gateway!GovernedModelGateway}. Pass an
+ * {@link ITelemetryProvider} to also emit spans to your tracing backend.
+ *
+ * @example
+ * ```typescript
+ * const refusals = new RefusalTelemetry(new CapturingTelemetryProvider());
+ * const gateway = new GovernedModelGateway({ caller, primaryModel, fallbackModels, telemetry: refusals });
+ * // ...later
+ * if (refusals.unservedRefusalCount > 0) alert('refusals are reaching users');
+ * ```
+ */
+class RefusalTelemetry {
+    provider;
+    _refusals = 0;
+    _fallbackServed = 0;
+    _byCategory = new Map();
+    _byModel = new Map();
+    constructor(provider) {
+        this.provider = provider;
+    }
+    /** Record a classifier refusal (counted as a signal, never as an error). */
+    recordRefusal(info) {
+        this._refusals++;
+        const cat = info.category ?? 'unspecified';
+        this._byCategory.set(cat, (this._byCategory.get(cat) ?? 0) + 1);
+        this._byModel.set(info.model, (this._byModel.get(info.model) ?? 0) + 1);
+        this.emit(exports.REFUSAL_EVENT, { model: info.model, category: cat, agentId: info.agentId ?? '' });
+    }
+    /** Record that a fallback model served a turn the primary declined. */
+    recordFallbackServed(info) {
+        this._fallbackServed++;
+        this.emit(exports.FALLBACK_SERVED_EVENT, {
+            requestedModel: info.requestedModel,
+            servedModel: info.servedModel,
+            agentId: info.agentId ?? '',
+        });
+    }
+    /** Total refusals observed. */
+    get refusalCount() {
+        return this._refusals;
+    }
+    /** Total fallback-served responses observed. */
+    get fallbackServedCount() {
+        return this._fallbackServed;
+    }
+    /** Refusals that were never served by a fallback (the gap to alert on). */
+    get unservedRefusalCount() {
+        return Math.max(0, this._refusals - this._fallbackServed);
+    }
+    /** Refusal counts keyed by classifier category. */
+    byCategory() {
+        const out = {};
+        for (const [k, v] of this._byCategory)
+            out[k] = v;
+        return out;
+    }
+    /** A full counter snapshot. */
+    snapshot() {
+        const byModel = {};
+        for (const [k, v] of this._byModel)
+            byModel[k] = v;
+        return {
+            refusals: this._refusals,
+            fallbackServed: this._fallbackServed,
+            unservedRefusals: this.unservedRefusalCount,
+            byCategory: this.byCategory(),
+            byModel,
+        };
+    }
+    /** Reset all counters. */
+    reset() {
+        this._refusals = 0;
+        this._fallbackServed = 0;
+        this._byCategory.clear();
+        this._byModel.clear();
+    }
+    /** Emit a discrete non-error span for a refusal/fallback signal. @internal */
+    emit(name, attributes) {
+        if (!this.provider)
+            return;
+        try {
+            const id = this.provider.startSpan(name, attributes);
+            // A refusal is a successful HTTP 200 — close the span 'ok', never 'error'.
+            this.provider.endSpan(id, 'ok', attributes);
+        }
+        catch {
+            // Telemetry must never throw.
+        }
+    }
+}
+exports.RefusalTelemetry = RefusalTelemetry;
 //# sourceMappingURL=telemetry-provider.js.map

package/dist/lib/telemetry-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry-provider.js","sourceRoot":"","sources":["../../lib/telemetry-provider.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;;;AAsKH,0CAyDC;AA5JD,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAE/E;;;;GAIG;AACH,MAAa,qBAAqB;IAChC,kBAAkB;IAClB,SAAS,CAAC,KAAa,EAAE,WAA4B,IAAY,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7E,kBAAkB;IAClB,OAAO,CAAC,OAAe,EAAE,OAAuB,EAAE,WAA4B,IAAS,CAAC;IACxF,kBAAkB;IAClB,WAAW,CAAC,OAAe,EAAE,KAAa,EAAE,WAA4B,IAAS,CAAC;CACnF;AAPD,sDAOC;AAED,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAa,0BAA0B;IACrC,8DAA8D;IACrD,KAAK,GAAmB,EAAE,CAAC;IAC5B,OAAO,GAAG,CAAC,CAAC;IAEpB,kBAAkB;IAClB,SAAS,CAAC,IAAY,EAAE,aAA6B,EAAE;QACrD,MAAM,MAAM,GAAG,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACpG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,OAAO,CAAC,MAAc,EAAE,MAAsB,EAAE,aAA6B,EAAE;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,kBAAkB;IAClB,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,aAA6B,EAAE;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,sDAAsD;IACtD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,CAAC;CACF;AAjCD,gEAiCC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,eAAe,CAAC,QAA4B;IAC1D,OAAO;QACL;YACE,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,GAAG;YACb,OAAO,CAAC,GAAgB;gBACtB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE;wBACnD,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,MAAM,EAAG,GAAG,CAAC,OAA+B,CAAC,MAAM,IAAI,EAAE;wBACzD,KAAK,EAAE,GAAG,CAAC,KAAK;qBACjB,CAAC,CAAC;oBACH,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,uCAAuC;gBACzC,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;SACF;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,GAAG;YACb,OAAO,CAAC,GAAgB;gBACtB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAuB,CAAC;oBACpE,IAAI,MAAM,EAAE,CAAC;wBACX,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;4BAC7B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;yBACtC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ;gBACV,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG;YACb,OAAO,CAAC,GAAgB;gBACtB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAuB,CAAC;oBACpE,IAAI,MAAM,EAAE,CAAC;wBACX,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;4BAChC,YAAY,EAAG,GAAG,CAAC,KAA2B,EAAE,OAAO,IAAI,SAAS;yBACrE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ;gBACV,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"telemetry-provider.js","sourceRoot":"","sources":["../../lib/telemetry-provider.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;;;AAsKH,0CAyDC;AA5JD,+EAA+E;AAC/E,0EAA0E;AAC1E,+EAA+E;AAE/E;;;;GAIG;AACH,MAAa,qBAAqB;IAChC,kBAAkB;IAClB,SAAS,CAAC,KAAa,EAAE,WAA4B,IAAY,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7E,kBAAkB;IAClB,OAAO,CAAC,OAAe,EAAE,OAAuB,EAAE,WAA4B,IAAS,CAAC;IACxF,kBAAkB;IAClB,WAAW,CAAC,OAAe,EAAE,KAAa,EAAE,WAA4B,IAAS,CAAC;CACnF;AAPD,sDAOC;AAED,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAa,0BAA0B;IACrC,8DAA8D;IACrD,KAAK,GAAmB,EAAE,CAAC;IAC5B,OAAO,GAAG,CAAC,CAAC;IAEpB,kBAAkB;IAClB,SAAS,CAAC,IAAY,EAAE,aAA6B,EAAE;QACrD,MAAM,MAAM,GAAG,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACpG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB;IAClB,OAAO,CAAC,MAAc,EAAE,MAAsB,EAAE,aAA6B,EAAE;QAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,kBAAkB;IAClB,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,aAA6B,EAAE;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,sDAAsD;IACtD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACtB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IACnB,CAAC;CACF;AAjCD,gEAiCC;AAED,+EAA+E;AAC/E,eAAe;AACf,+EAA+E;AAE/E,6EAA6E;AAC7E,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAgB,eAAe,CAAC,QAA4B;IAC1D,OAAO;QACL;YACE,IAAI,EAAE,oBAAoB;YAC1B,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,GAAG;YACb,OAAO,CAAC,GAAgB;gBACtB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,iBAAiB,EAAE;wBACnD,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,MAAM,EAAG,GAAG,CAAC,OAA+B,CAAC,MAAM,IAAI,EAAE;wBACzD,KAAK,EAAE,GAAG,CAAC,KAAK;qBACjB,CAAC,CAAC;oBACH,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,uCAAuC;gBACzC,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;SACF;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE,GAAG;YACb,OAAO,CAAC,GAAgB;gBACtB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAuB,CAAC;oBACpE,IAAI,MAAM,EAAE,CAAC;wBACX,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE;4BAC7B,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;yBACtC,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ;gBACV,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;SACF;QACD;YACE,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,SAAS;YAChB,QAAQ,EAAE,GAAG;YACb,OAAO,CAAC,GAAgB;gBACtB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAuB,CAAC;oBACpE,IAAI,MAAM,EAAE,CAAC;wBACX,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE;4BAChC,YAAY,EAAG,GAAG,CAAC,KAA2B,EAAE,OAAO,IAAI,SAAS;yBACrE,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,QAAQ;gBACV,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,wBAAwB;AACxB,+EAA+E;AAE/E,wDAAwD;AAC3C,QAAA,aAAa,GAAG,eAAe,CAAC;AAC7C,mEAAmE;AACtD,QAAA,qBAAqB,GAAG,uBAAuB,CAAC;AA0B7D;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAa,gBAAgB;IACV,QAAQ,CAAiC;IAClD,SAAS,GAAG,CAAC,CAAC;IACd,eAAe,GAAG,CAAC,CAAC;IACX,WAAW,GAAwB,IAAI,GAAG,EAAE,CAAC;IAC7C,QAAQ,GAAwB,IAAI,GAAG,EAAE,CAAC;IAE3D,YAAY,QAA6B;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,4EAA4E;IAC5E,aAAa,CAAC,IAAsB;QAClC,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,qBAAa,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,uEAAuE;IACvE,oBAAoB,CAAC,IAAwB;QAC3C,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,6BAAqB,EAAE;YAC/B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,gDAAgD;IAChD,IAAI,mBAAmB;QACrB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED,2EAA2E;IAC3E,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5D,CAAC;IAED,mDAAmD;IACnD,UAAU;QACR,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,+BAA+B;IAC/B,QAAQ;QACN,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,cAAc,EAAE,IAAI,CAAC,eAAe;YACpC,gBAAgB,EAAE,IAAI,CAAC,oBAAoB;YAC3C,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE;YAC7B,OAAO;SACR,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,8EAA8E;IACtE,IAAI,CAAC,IAAY,EAAE,UAA0B;QACnD,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACrD,2EAA2E;YAC3E,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;CACF;AApFD,4CAoFC"}

package/dist/lib/thinking-blocks.d.ts

@@ -0,0 +1,77 @@
+/**
+ * ThinkingBlockManager — thinking-block lifecycle across model switches.
+ *
+ * Frontier models with always-on adaptive thinking return `thinking` blocks
+ * whose `signature` ties them to the producing model. Two rules follow:
+ *
+ *   - **Same model, multi-turn:** pass thinking blocks back *unchanged* (the
+ *     signature is validated server-side).
+ *   - **Switching models (e.g. a refusal fallback):** *strip* `thinking` and
+ *     `redacted_thinking` blocks from prior turns — another model ignores them
+ *     but still bills them as input tokens.
+ *
+ * It also guards prompts against the `reasoning_extraction` refusal: asking a
+ * model to reproduce its internal reasoning as response text can be declined.
+ *
+ * Satisfies the `ThinkingSink` contract consumed by
+ * {@link ../lib/model-gateway!GovernedModelGateway}, which calls
+ * {@link ThinkingBlockManager.stripForModelSwitch} on a cross-model retry — but
+ * only when it is *not* redeeming a fallback credit (credit redemption requires
+ * an exact body match, so blocks stay).
+ *
+ * @module ThinkingBlockManager
+ * @version 1.0.0
+ * @license MIT
+ */
+import type { ModelMessage } from './model-gateway';
+/** Result of {@link ThinkingBlockManager.guardAgainstReasoningExtraction}. */
+export interface ReasoningExtractionCheck {
+    /** Whether any reasoning-extraction phrasing was detected. */
+    flagged: boolean;
+    /** The matched substrings, for surfacing to the caller. */
+    matches: string[];
+}
+/**
+ * Manages thinking blocks across same-model turns and cross-model fallbacks.
+ *
+ * @example
+ * ```typescript
+ * const thinking = new ThinkingBlockManager();
+ * const gateway = new GovernedModelGateway({ caller, primaryModel, fallbackModels, thinking });
+ *
+ * // Guard a system prompt before sending it to a refusal-prone model:
+ * const check = thinking.guardAgainstReasoningExtraction(systemPrompt);
+ * if (check.flagged) console.warn('reasoning-extraction risk:', check.matches);
+ * ```
+ */
+export declare class ThinkingBlockManager {
+    /**
+     * Strip model-bound thinking blocks from prior assistant turns before a
+     * cross-model retry. `fallback`, `text`, and tool blocks are preserved; only
+     * `thinking` / `redacted_thinking` blocks are removed. Messages whose content
+     * is not a block array are returned untouched.
+     *
+     * @param messages  The conversation to clean.
+     * @returns         A new array with model-bound blocks removed.
+     */
+    stripForModelSwitch(messages: ModelMessage[]): ModelMessage[];
+    /**
+     * Identity transform documenting the same-model rule: thinking blocks must be
+     * passed back **unchanged** when continuing on the same model.
+     *
+     * @param messages  The conversation.
+     * @returns         The same messages, unchanged.
+     */
+    preserveForSameModel(messages: ModelMessage[]): ModelMessage[];
+    /** Whether any message carries a model-bound thinking block. */
+    hasThinkingBlocks(messages: ModelMessage[]): boolean;
+    /**
+     * Detect prompt text that asks a model to reproduce its internal reasoning as
+     * response text — which can trigger a `reasoning_extraction` refusal. Read the
+     * structured `thinking` blocks instead of prompting for reasoning in the body.
+     *
+     * @param text  The prompt or instruction to inspect.
+     */
+    guardAgainstReasoningExtraction(text: string): ReasoningExtractionCheck;
+}
+//# sourceMappingURL=thinking-blocks.d.ts.map

package/dist/lib/thinking-blocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"thinking-blocks.d.ts","sourceRoot":"","sources":["../../lib/thinking-blocks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAqB,MAAM,iBAAiB,CAAC;AAavE,8EAA8E;AAC9E,MAAM,WAAW,wBAAwB;IACvC,8DAA8D;IAC9D,OAAO,EAAE,OAAO,CAAC;IACjB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,oBAAoB;IAE/B;;;;;;;;OAQG;IACH,mBAAmB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE;IAU7D;;;;;;OAMG;IACH,oBAAoB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE;IAI9D,gEAAgE;IAChE,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,OAAO;IAMpD;;;;;;OAMG;IACH,+BAA+B,CAAC,IAAI,EAAE,MAAM,GAAG,wBAAwB;CAUxE"}

package/dist/lib/thinking-blocks.js

@@ -0,0 +1,106 @@
+"use strict";
+/**
+ * ThinkingBlockManager — thinking-block lifecycle across model switches.
+ *
+ * Frontier models with always-on adaptive thinking return `thinking` blocks
+ * whose `signature` ties them to the producing model. Two rules follow:
+ *
+ *   - **Same model, multi-turn:** pass thinking blocks back *unchanged* (the
+ *     signature is validated server-side).
+ *   - **Switching models (e.g. a refusal fallback):** *strip* `thinking` and
+ *     `redacted_thinking` blocks from prior turns — another model ignores them
+ *     but still bills them as input tokens.
+ *
+ * It also guards prompts against the `reasoning_extraction` refusal: asking a
+ * model to reproduce its internal reasoning as response text can be declined.
+ *
+ * Satisfies the `ThinkingSink` contract consumed by
+ * {@link ../lib/model-gateway!GovernedModelGateway}, which calls
+ * {@link ThinkingBlockManager.stripForModelSwitch} on a cross-model retry — but
+ * only when it is *not* redeeming a fallback credit (credit redemption requires
+ * an exact body match, so blocks stay).
+ *
+ * @module ThinkingBlockManager
+ * @version 1.0.0
+ * @license MIT
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ThinkingBlockManager = void 0;
+/** Block types tied to the producing model — dropped on a model switch. */
+const MODEL_BOUND_BLOCK_TYPES = new Set(['thinking', 'redacted_thinking']);
+/** Phrases that ask a model to reproduce its internal reasoning as response text. */
+const REASONING_EXTRACTION_PATTERNS = [
+    /\b(show|share|reveal|expose|print|output|reproduce|transcribe|echo|repeat)\b[^.?!]{0,40}\b(your|the)\b[^.?!]{0,20}\b(reasoning|thinking|thought process|chain[- ]of[- ]thought|inner monologue|scratchpad)\b/i,
+    /\b(explain|describe|walk me through|narrate)\b[^.?!]{0,30}\b(your|the)\b[^.?!]{0,20}\b(internal|raw|verbatim)\b[^.?!]{0,20}\b(reasoning|thinking|thoughts?)\b/i,
+    /\bthink(ing)?\b[^.?!]{0,20}\bout loud\b[^.?!]{0,30}\b(in|within|as part of)\b[^.?!]{0,20}\b(the )?(response|answer|output|final message)\b/i,
+    /\b(include|put|place)\b[^.?!]{0,20}\b(your|the)\b[^.?!]{0,20}\b(chain[- ]of[- ]thought|reasoning|thinking)\b[^.?!]{0,20}\bin\b[^.?!]{0,20}\b(the )?(response|answer|output)\b/i,
+];
+/**
+ * Manages thinking blocks across same-model turns and cross-model fallbacks.
+ *
+ * @example
+ * ```typescript
+ * const thinking = new ThinkingBlockManager();
+ * const gateway = new GovernedModelGateway({ caller, primaryModel, fallbackModels, thinking });
+ *
+ * // Guard a system prompt before sending it to a refusal-prone model:
+ * const check = thinking.guardAgainstReasoningExtraction(systemPrompt);
+ * if (check.flagged) console.warn('reasoning-extraction risk:', check.matches);
+ * ```
+ */
+class ThinkingBlockManager {
+    /**
+     * Strip model-bound thinking blocks from prior assistant turns before a
+     * cross-model retry. `fallback`, `text`, and tool blocks are preserved; only
+     * `thinking` / `redacted_thinking` blocks are removed. Messages whose content
+     * is not a block array are returned untouched.
+     *
+     * @param messages  The conversation to clean.
+     * @returns         A new array with model-bound blocks removed.
+     */
+    stripForModelSwitch(messages) {
+        return messages.map((msg) => {
+            if (!Array.isArray(msg.content))
+                return msg;
+            const blocks = msg.content;
+            const kept = blocks.filter((b) => !(b && typeof b === 'object' && MODEL_BOUND_BLOCK_TYPES.has(b.type)));
+            if (kept.length === blocks.length)
+                return msg;
+            return { ...msg, content: kept };
+        });
+    }
+    /**
+     * Identity transform documenting the same-model rule: thinking blocks must be
+     * passed back **unchanged** when continuing on the same model.
+     *
+     * @param messages  The conversation.
+     * @returns         The same messages, unchanged.
+     */
+    preserveForSameModel(messages) {
+        return messages;
+    }
+    /** Whether any message carries a model-bound thinking block. */
+    hasThinkingBlocks(messages) {
+        return messages.some((m) => Array.isArray(m.content) && m.content.some((b) => b && typeof b === 'object' && MODEL_BOUND_BLOCK_TYPES.has(b.type)));
+    }
+    /**
+     * Detect prompt text that asks a model to reproduce its internal reasoning as
+     * response text — which can trigger a `reasoning_extraction` refusal. Read the
+     * structured `thinking` blocks instead of prompting for reasoning in the body.
+     *
+     * @param text  The prompt or instruction to inspect.
+     */
+    guardAgainstReasoningExtraction(text) {
+        const matches = [];
+        if (typeof text === 'string' && text.length > 0) {
+            for (const re of REASONING_EXTRACTION_PATTERNS) {
+                const m = text.match(re);
+                if (m && m[0])
+                    matches.push(m[0].trim());
+            }
+        }
+        return { flagged: matches.length > 0, matches };
+    }
+}
+exports.ThinkingBlockManager = ThinkingBlockManager;
+//# sourceMappingURL=thinking-blocks.js.map

package/dist/lib/thinking-blocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"thinking-blocks.js","sourceRoot":"","sources":["../../lib/thinking-blocks.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;;;AAIH,2EAA2E;AAC3E,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE3E,qFAAqF;AACrF,MAAM,6BAA6B,GAAa;IAC9C,+MAA+M;IAC/M,gKAAgK;IAChK,6IAA6I;IAC7I,gLAAgL;CACjL,CAAC;AAUF;;;;;;;;;;;;GAYG;AACH,MAAa,oBAAoB;IAE/B;;;;;;;;OAQG;IACH,mBAAmB,CAAC,QAAwB;QAC1C,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,GAAG,CAAC;YAC5C,MAAM,MAAM,GAAG,GAAG,CAAC,OAA8B,CAAC;YAClD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxG,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;gBAAE,OAAO,GAAG,CAAC;YAC9C,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,QAAwB;QAC3C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,gEAAgE;IAChE,iBAAiB,CAAC,QAAwB;QACxC,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,CAAC,OAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CACrJ,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,+BAA+B,CAAC,IAAY;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,KAAK,MAAM,EAAE,IAAI,6BAA6B,EAAE,CAAC;gBAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;CACF;AAxDD,oDAwDC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "network-ai",
-  "version": "5.12.6",
+  "version": "5.13.0",
   "description": "AI agent orchestration framework for TypeScript/Node.js - 29 adapters (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS, Copilot, LangGraph, Anthropic Computer Use, OpenAI Agents SDK, Vertex AI, Pydantic AI, Browser Agent, Hermes, Orchestrator, RLM + streaming variants). Built-in CLI, security, swarm intelligence, real-time streaming, and agentic workflow patterns.",
   "homepage": "https://network-ai.org",
   "main": "dist/index.js",
@@ -72,7 +72,8 @@
     "revoke-token": "python scripts/revoke_token.py",
     "socket:check": "node scripts/socket-check.js",
     "socket:check:local": "node scripts/socket-check.js --local",
-    "codeql:check": "node scripts/codeql-check.js"
+    "codeql:check": "node scripts/codeql-check.js",
+    "clawhub:check": "node scripts/clawhub-check.js"
   },
   "keywords": [
     "ai-agents",

package/scripts/clawhub-check.js

@@ -0,0 +1,176 @@
+#!/usr/bin/env node
+/**
+ * clawhub-check.js — ClawHub bundle hygiene guard for network-ai
+ *
+ * Verifies that a `clawhub publish .` from the repo root would bundle ONLY the
+ * intended Python-skill files — no draft notes, secrets, logs, TypeScript/npm
+ * docs, or Node tooling.
+ *
+ * ClawHub honours `.clawhubignore` (gitignore-style denylist) — NOT `.clawignore`
+ * and NOT `.gitignore`. This script replicates that exclusion against the repo,
+ * then asserts the surviving set is exactly the allowlist below. Any extra file
+ * is a leak that SkillSpector (NVIDIA, run by ClawHub on every publish) will
+ * scan — so we fail BEFORE publishing, not after.
+ *
+ * Usage:   node scripts/clawhub-check.js   |   npm run clawhub:check
+ * Exit:    0 = bundle clean   1 = leak, secret, or missing required file
+ */
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+const ROOT = path.join(__dirname, '..');
+
+// Files that SHOULD be in the published ClawHub skill bundle.
+const ALLOW_FILES = new Set([
+  'SKILL.md',
+  'swarm-blackboard.md',
+  'requirements.txt',
+  'skill.json',
+  '.clawhubignore',
+  '.clawignore',
+  'scripts/blackboard.py',
+  'scripts/check_permission.py',
+  'scripts/context_manager.py',
+  'scripts/revoke_token.py',
+  'scripts/swarm_guard.py',
+  'scripts/validate_token.py',
+]);
+
+// Directories allowed in the bundle (descended into for per-file checks).
+const ALLOW_DIRS = new Set(['scripts']);
+
+// Files that MUST be present (and not excluded) for the skill to function.
+const REQUIRED = [
+  'SKILL.md',
+  'swarm-blackboard.md',
+  'requirements.txt',
+  'scripts/blackboard.py',
+  'scripts/check_permission.py',
+  'scripts/context_manager.py',
+  'scripts/revoke_token.py',
+  'scripts/swarm_guard.py',
+  'scripts/validate_token.py',
+];
+
+// Hard-deny: these must NEVER appear in a bundle, even if mis-allowlisted.
+const SECRET_RE = /(^|\/)\.env(\.|$)|\.(log|pem|key|p12|pfx)$/i;
+
+// Directories never walked (and excluded by .clawhubignore anyway).
+const SKIP_DIRS = new Set(['.git', 'node_modules', 'dist']);
+
+const c = {
+  reset: '\x1b[0m', bold: '\x1b[1m', red: '\x1b[31m',
+  green: '\x1b[32m', yellow: '\x1b[33m', cyan: '\x1b[36m', gray: '\x1b[90m',
+};
+
+// ── Load .clawhubignore ──────────────────────────────────────────────────────
+
+const ignPath = path.join(ROOT, '.clawhubignore');
+if (!fs.existsSync(ignPath)) {
+  console.error(`${c.red}.clawhubignore not found — cannot verify bundle.${c.reset}`);
+  process.exit(1);
+}
+const patterns = fs.readFileSync(ignPath, 'utf8')
+  .split(/\r?\n/)
+  .map(l => l.trim())
+  .filter(l => l && !l.startsWith('#'));
+
+/** Convert a simple glob (only `*` is special, no `/`) to an anchored RegExp. */
+function globToRe(glob) {
+  let re = '';
+  for (const ch of glob) {
+    if (ch === '*') re += '[^/]*';
+    else re += ch.replace(/[.+^${}()|[\]\\?]/g, '\\$&');
+  }
+  return new RegExp('^' + re + '$');
+}
+
+/** Mirror .clawhubignore (gitignore-style) exclusion for one repo-relative path. */
+function isExcluded(relPath, isDir) {
+  const base = relPath.split('/').pop();
+  for (const pat of patterns) {
+    const dirPat = pat.endsWith('/');
+    const core = dirPat ? pat.slice(0, -1) : pat;
+    if (core.includes('/')) {
+      // Full-path pattern (e.g. "scripts/*.js")
+      if (globToRe(core).test(relPath)) return true;
+      if (relPath.startsWith(core + '/')) return true;
+    } else {
+      // Basename pattern (e.g. "*.ts", "comment.txt", "assets/")
+      if (core === base || core === relPath) return true;
+      if (core.includes('*') && globToRe(core).test(base)) return true;
+      if (dirPat && isDir && core === base) return true;
+    }
+  }
+  return false;
+}
+
+// ── Walk repo (root depth-1 + allowed subdirs) ───────────────────────────────
+
+const bundle = [];
+const leaks = [];
+
+for (const name of fs.readdirSync(ROOT)) {
+  if (SKIP_DIRS.has(name)) continue;
+  const isDir = fs.statSync(path.join(ROOT, name)).isDirectory();
+
+  if (isExcluded(name, isDir)) continue;
+
+  if (isDir) {
+    if (ALLOW_DIRS.has(name)) {
+      for (const child of fs.readdirSync(path.join(ROOT, name))) {
+        const crel = `${name}/${child}`;
+        const cIsDir = fs.statSync(path.join(ROOT, name, child)).isDirectory();
+        if (isExcluded(crel, cIsDir)) continue;
+        bundle.push(crel);
+        if (!ALLOW_FILES.has(crel)) leaks.push(crel);
+      }
+    } else {
+      // A non-allowlisted directory survived exclusion → leak.
+      bundle.push(name + '/');
+      leaks.push(name + '/  (directory — exclude in .clawhubignore)');
+    }
+  } else {
+    bundle.push(name);
+    if (!ALLOW_FILES.has(name)) leaks.push(name);
+  }
+}
+
+// ── Report ───────────────────────────────────────────────────────────────────
+
+console.log(`\n${c.bold}${c.cyan}ClawHub Bundle Hygiene Check${c.reset}`);
+console.log(`${c.gray}${'─'.repeat(50)}${c.reset}`);
+console.log(`Would publish ${bundle.length} item(s):`);
+const leakSet = new Set(leaks.map(l => l.split('  ')[0]));
+for (const b of [...bundle].sort()) {
+  const ok = !leakSet.has(b);
+  console.log(`  ${ok ? c.green + '✓' + c.reset : c.red + '✗' + c.reset} ${b}`);
+}
+
+const secretLeaks = bundle.filter(b => SECRET_RE.test(b));
+const missing = REQUIRED.filter(r => !fs.existsSync(path.join(ROOT, r)) || isExcluded(r, false));
+
+console.log(`\n${c.gray}${'─'.repeat(50)}${c.reset}`);
+let fail = false;
+
+if (leaks.length) {
+  fail = true;
+  console.log(`${c.red}${c.bold}LEAK${c.reset} — ${leaks.length} unintended item(s) would be published:`);
+  for (const l of leaks) console.log(`  ${c.red}• ${l}${c.reset}`);
+  console.log(`  ${c.gray}Add each to .clawhubignore (or to ALLOW_FILES here if genuinely intended).${c.reset}`);
+}
+if (secretLeaks.length) {
+  fail = true;
+  console.log(`${c.red}${c.bold}SECRET${c.reset} — secret/log file(s) in bundle: ${secretLeaks.join(', ')}`);
+}
+if (missing.length) {
+  fail = true;
+  console.log(`${c.red}${c.bold}MISSING${c.reset} — required skill file(s) absent or excluded: ${missing.join(', ')}`);
+}
+
+if (fail) process.exit(1);
+console.log(`${c.green}${c.bold}PASS${c.reset} — bundle contains only the intended Python-skill files.`);
+process.exit(0);

package/socket.json

@@ -417,6 +417,14 @@
       {
         "path": "dist/esm/run.js",
         "reason": "Intentional — ESM build output of run.ts. Same as dist/run.js — bootstraps the local orchestrator demo workflow when invoked directly by the operator."
+      },
+      {
+        "path": "scripts/socket-check.js",
+        "reason": "Intentional — dev/CI-only QA script. Uses child_process (spawnSync, shell:false) to invoke the Socket CLI via npx for supply-chain scanning. Never imported by the library and never executed by installing the package; runs only when a maintainer runs `npm run socket:check`."
+      },
+      {
+        "path": "scripts/codeql-check.js",
+        "reason": "Intentional — dev/CI-only QA script. Uses child_process (spawnSync, shell:false) to invoke the GitHub CLI (`gh api`) to query CodeQL code-scanning alerts. Never imported by the library and never executed by installing the package; runs only when a maintainer runs `npm run codeql:check`."
       }
     ],
     "filesystemAccess": [