product-console-companion 0.7.0 → 0.7.2

package/dist/api-key-caller.js

@@ -16,6 +16,7 @@ import { join } from 'node:path';
 import { buildLocalDesignContext } from './design-context.js';
 import { buildLocalRepoContext, listRepoFiles } from './local-scan.js';
 import { appendDiffToVolatile, prepareShipmentAnalysis } from './shipment.js';
+import { replyText, streamWithFallback } from './text-model.js';
 const MAX_CANDIDATE_FILES = 8;
 /** A skip threshold, not a truncation — a file over this is left OUT of what's read entirely
  *  (with a note in the log), rather than read and cut off partway through. The whole point of
@@ -25,7 +26,7 @@ const MAX_FILE_BYTES = 512 * 1024;
 /** Structured model-only call used by the investigation reader. The reader, not this call and
  * not the model, owns every repository read and evidence id. */
 export async function runStructuredModelCall(client, request) {
-    const stream = client.messages.stream({
+    const stream = streamWithFallback(client, {
         model: request.model,
         max_tokens: request.maxTokens,
         thinking: { type: 'adaptive' },
@@ -46,14 +47,12 @@ export async function runStructuredModelCall(client, request) {
         }
         throw error;
     }
-    if (message.stop_reason === 'refusal')
-        throw new Error('The model declined the structured investigation call.');
     if (message.stop_reason === 'max_tokens')
         throw new Error('budget_exhausted: the structured investigation call reached its output-token limit.');
-    const text = message.content.find((block) => block.type === 'text');
-    if (!text || text.type !== 'text')
+    const text = replyText(message, 'The model declined the structured investigation call.');
+    if (!text)
         throw new Error('The structured investigation call returned no text.');
-    return JSON.parse(text.text);
+    return JSON.parse(text);
 }
 export const fileSelectSchema = {
     type: 'object',

package/dist/claude-cli-caller.js

@@ -19,6 +19,7 @@ import { StringDecoder } from 'node:string_decoder';
 import { assertSingleLineArguments } from './cli-arguments.js';
 import { gitErrorMessage } from './sandbox.js';
 import { appendDiffToVolatile, prepareShipmentAnalysis } from './shipment.js';
+import { ModelRefusalError } from './text-model.js';
 /** Independent of --max-budget-usd — a dollar cap doesn't prevent a network-stall hang. No
  *  automatic retry on top of this (see cli.ts): auto-retry would risk double-spending the
  *  customer's own subscription/API quota. */
@@ -85,6 +86,7 @@ async function runViaCli(spec, maxBudgetUsd, repoPath, connectionless = false) {
         assertSingleLineArguments('claude', args);
         const filesRead = new Set();
         let resultEnvelope = null;
+        let lastStopReason = null;
         let stderrTail = '';
         let timedOut = false;
         let stdinError = null;
@@ -152,6 +154,9 @@ async function runViaCli(spec, maxBudgetUsd, repoPath, connectionless = false) {
                 resultEnvelope = event;
             }
             else if (eventType === 'assistant') {
+                const stopReason = event.message?.stop_reason;
+                if (typeof stopReason === 'string')
+                    lastStopReason = stopReason;
                 const blocks = event.message?.content ?? [];
                 for (const b of blocks) {
                     if (b.type === 'tool_use' && b.name === 'Read' && b.input?.file_path) {
@@ -211,6 +216,11 @@ async function runViaCli(spec, maxBudgetUsd, repoPath, connectionless = false) {
             const message = envelope.errors?.length ? envelope.errors.join('; ') : envelope.result;
             throw new Error(message || 'Unknown claude CLI error');
         }
+        // A refused turn can still end in a non-error result envelope; its result is empty or partial
+        // text, so it must fail here rather than be returned (or JSON-parsed) as an answer.
+        if (envelope.stop_reason === 'refusal' || lastStopReason === 'refusal') {
+            throw new ModelRefusalError('The model declined this request.');
+        }
         if (capturedStdinError) {
             throw promptWriteFailure(capturedStdinError);
         }

package/dist/http-client.js

@@ -17,6 +17,7 @@ export const COMPANION_VERSION = packageVersion;
 export const COMPANION_CAPABILITIES = [
     'auto-surface-map@1',
     'auto-surface-mapper@1',
+    'auto-surface-mapper@2',
     'snapshot-read@1',
     'local-git-range@1',
     'verify-automatic-surface@1',

package/dist/import-resolver.js

@@ -14,7 +14,7 @@ const JS_TO_TS = {
     '.mjs': ['.mts'],
     '.cjs': ['.cts'],
 };
-const BLOCKING = new Set([
+const BLOCKING_V1 = new Set([
     'unresolved_internal',
     'unresolved_dynamic',
     'declaration_only',
@@ -28,6 +28,16 @@ const BLOCKING = new Set([
     'limit_files',
     'limit_bytes',
 ]);
+/** Under @2, `limit_bytes` is a deliberate trim (nearest files kept), not a block. */
+const BLOCKING_V2 = new Set([...BLOCKING_V1].filter((code) => code !== 'limit_bytes'));
+/** Every mapper version this companion can produce; advertised as capabilities. */
+export const SUPPORTED_MAPPER_VERSIONS = [
+    'auto-surface-mapper@1',
+    'auto-surface-mapper@2',
+];
+export function isSupportedMapperVersion(value) {
+    return SUPPORTED_MAPPER_VERSIONS.includes(value);
+}
 export class MappingFailure extends Error {
     kind;
     code;
@@ -501,6 +511,8 @@ function seedRoots(seeds, workspace) {
 }
 export async function expandImports(input) {
     const settings = input.settings ?? DEFAULT_MAPPER_SETTINGS;
+    const mapperVersion = input.mapperVersion ?? 'auto-surface-mapper@1';
+    const blocking = mapperVersion === 'auto-surface-mapper@2' ? BLOCKING_V2 : BLOCKING_V1;
     const workspace = await discoverWorkspace(input.sandboxPath, input.tree);
     const diagnostics = [...workspace.diagnostics];
     const externals = [];
@@ -606,11 +618,11 @@ export async function expandImports(input) {
     const uniqueDiagnostics = [...new Map(diagnostics.map((entry) => [`${entry.code}\0${entry.path}\0${entry.detail}`, entry])).values()].sort(compareDiagnostic);
     const uniqueExternals = [...new Map(externals.map((entry) => [`${entry.from}\0${entry.specifier}`, entry])).values()].sort((a, b) => a.from.localeCompare(b.from) || a.specifier.localeCompare(b.specifier));
     return {
-        mapper: { version: 'auto-surface-mapper@1', settings },
+        mapper: { version: mapperVersion, settings },
         resolutionInputs: workspace.resolutionInputs,
         files,
         externals: uniqueExternals,
-        status: uniqueDiagnostics.some((diagnostic) => BLOCKING.has(diagnostic.code)) ? 'incomplete' : 'complete',
+        status: uniqueDiagnostics.some((diagnostic) => blocking.has(diagnostic.code)) ? 'incomplete' : 'complete',
         diagnostics: uniqueDiagnostics,
     };
 }

package/dist/investigation-reader.js

@@ -15,7 +15,7 @@ export const MAX_EVIDENCE_FILE_BYTES = 512 * 1024;
  * ceiling leaves at least 3x headroom while bounding serialized prompt overhead.
  */
 export const MAX_ASSESSMENT_PROMPT_CHARACTERS = 384 * 1024;
-export const INVESTIGATION_MODEL = 'claude-sonnet-5';
+export const INVESTIGATION_MODEL = 'claude-sonnet-5-5';
 const execFileAsync = promisify(execFile);
 export class MissingPolicy4ExecutionError extends Error {
     name = 'MissingPolicy4ExecutionError';

package/dist/surface-mapper.js

@@ -3,11 +3,11 @@ import { execFile } from 'node:child_process';
 import { statSync } from 'node:fs';
 import { promisify } from 'node:util';
 import { hasLinkedPathComponent } from './investigation-reader.js';
-import { DEFAULT_MAPPER_SETTINGS, enumerateTrackedFiles, expandImports, MappingFailure, trackedNamedPathStatus, } from './import-resolver.js';
+import { DEFAULT_MAPPER_SETTINGS, enumerateTrackedFiles, expandImports, isSupportedMapperVersion, MappingFailure, trackedNamedPathStatus, } from './import-resolver.js';
 import { repositoryMissingReason, spawnFailureCode } from './local-scan.js';
 import { createSandbox } from './sandbox.js';
 export const SURFACE_SEED_PROMPT_VERSION = 'map_module_seeds@1';
-export const SURFACE_SEED_MODEL = 'claude-sonnet-5';
+export const SURFACE_SEED_MODEL = 'claude-sonnet-5-5';
 const execFileAsync = promisify(execFile);
 const MODEL_ROLES = [
     'implementation',
@@ -191,6 +191,9 @@ function seedPrompt(claim, trackedPaths) {
 }
 export async function mapSurfaceSnapshot(input) {
     const { claim, sandboxPath, tree } = input;
+    if (!isSupportedMapperVersion(claim.mapperVersion)) {
+        throw new MappingFailure('stable', 'mapper_version_unsupported', `Unsupported mapper version ${String(claim.mapperVersion)}`);
+    }
     const diagnostics = [];
     const namedPaths = [];
     const namedSeeds = [];
@@ -275,6 +278,7 @@ export async function mapSurfaceSnapshot(input) {
         tree,
         seeds,
         settings: claim.mapperSettings,
+        mapperVersion: claim.mapperVersion,
     });
     const expansion = diagnostics.some((diagnostic) => diagnostic.code === 'named_path_unverifiable')
         ? { ...expanded, status: 'incomplete' }

package/dist/text-model.js

@@ -36,6 +36,34 @@ const PURPOSE_ERRORS = {
         empty: 'No result returned.',
     },
 };
+/** Server-side refusal fallback: on a policy decline the API re-runs the request on Anthropic's
+ * recommended substitute inside the same call. The scalar "default" form needs exactly this header
+ * (the array form is gated by -2026-06-01; pairing either header with the other form is a 400). */
+const FALLBACK_BETA = 'server-side-fallback-2026-07-01';
+/** SDK 0.111 types `fallbacks` as the array form only; the API also takes the scalar "default". */
+const DEFAULT_FALLBACKS = 'default';
+/** Every API-key call goes through here, so each one carries the refusal fallback. */
+export function streamWithFallback(client, params) {
+    return client.beta.messages.stream({ ...params, betas: [FALLBACK_BETA], fallbacks: DEFAULT_FALLBACKS });
+}
+/** stop_reason 'refusal' — after the fallback, the whole chain declined. Thrown before content is
+ * read, so a partial or empty reply is never parsed as a result. */
+export class ModelRefusalError extends Error {
+    category;
+    constructor(message, category = null) {
+        super(message);
+        this.name = 'ModelRefusalError';
+        this.category = category;
+    }
+}
+/** The reply text once a refusal is ruled out. A mid-output fallback continues the declined
+ * model's partial text in a later block, so every text block is joined; null when there is none. */
+export function replyText(message, refusal) {
+    if (message.stop_reason === 'refusal')
+        throw new ModelRefusalError(refusal, message.stop_details?.category ?? null);
+    const text = message.content.map((block) => (block.type === 'text' ? block.text : '')).join('');
+    return text || null;
+}
 function usageRecord(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
         return null;
@@ -68,7 +96,7 @@ export function anthropicTextModel(client) {
         const content = request.purpose.endsWith(':file_select') && blocks.length === 1 && blocks[0].type === 'text'
             ? blocks[0].text
             : blocks;
-        const stream = client.messages.stream({
+        const stream = streamWithFallback(client, {
             model: request.model,
             max_tokens: request.maxTokens,
             thinking: { type: 'adaptive' },
@@ -83,11 +111,11 @@ export function anthropicTextModel(client) {
             refusal: `The model declined the ${request.purpose} call.`,
             empty: `The ${request.purpose} call returned no text.`,
         };
-        if (message.stop_reason === 'refusal' && errors.refusal)
-            throw new Error(errors.refusal);
-        const text = message.content.find((block) => block.type === 'text');
-        if (!text || text.type !== 'text')
+        // A purpose with no refusal wording of its own still fails as a refusal, under its empty-reply
+        // wording — never by reading whatever partial text the declined attempt left behind.
+        const text = replyText(message, errors.refusal ?? errors.empty);
+        if (!text)
             throw new Error(errors.empty);
-        return { text: text.text, usage: usageRecord(message.usage) };
+        return { text, usage: usageRecord(message.usage) };
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "product-console-companion",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Local-first BYOS companion for the Fynch Product Console — reads code and runs AI calls from your own machine instead of the hosted server.",
   "type": "module",
   "license": "MIT",