product-console-companion 0.7.1 → 0.7.2

package/dist/api-key-caller.js

@@ -16,6 +16,7 @@ import { join } from 'node:path';
 import { buildLocalDesignContext } from './design-context.js';
 import { buildLocalRepoContext, listRepoFiles } from './local-scan.js';
 import { appendDiffToVolatile, prepareShipmentAnalysis } from './shipment.js';
+import { replyText, streamWithFallback } from './text-model.js';
 const MAX_CANDIDATE_FILES = 8;
 /** A skip threshold, not a truncation — a file over this is left OUT of what's read entirely
  *  (with a note in the log), rather than read and cut off partway through. The whole point of
@@ -25,7 +26,7 @@ const MAX_FILE_BYTES = 512 * 1024;
 /** Structured model-only call used by the investigation reader. The reader, not this call and
  * not the model, owns every repository read and evidence id. */
 export async function runStructuredModelCall(client, request) {
-    const stream = client.messages.stream({
+    const stream = streamWithFallback(client, {
         model: request.model,
         max_tokens: request.maxTokens,
         thinking: { type: 'adaptive' },
@@ -46,14 +47,12 @@ export async function runStructuredModelCall(client, request) {
         }
         throw error;
     }
-    if (message.stop_reason === 'refusal')
-        throw new Error('The model declined the structured investigation call.');
     if (message.stop_reason === 'max_tokens')
         throw new Error('budget_exhausted: the structured investigation call reached its output-token limit.');
-    const text = message.content.find((block) => block.type === 'text');
-    if (!text || text.type !== 'text')
+    const text = replyText(message, 'The model declined the structured investigation call.');
+    if (!text)
         throw new Error('The structured investigation call returned no text.');
-    return JSON.parse(text.text);
+    return JSON.parse(text);
 }
 export const fileSelectSchema = {
     type: 'object',

package/dist/claude-cli-caller.js

@@ -19,6 +19,7 @@ import { StringDecoder } from 'node:string_decoder';
 import { assertSingleLineArguments } from './cli-arguments.js';
 import { gitErrorMessage } from './sandbox.js';
 import { appendDiffToVolatile, prepareShipmentAnalysis } from './shipment.js';
+import { ModelRefusalError } from './text-model.js';
 /** Independent of --max-budget-usd — a dollar cap doesn't prevent a network-stall hang. No
  *  automatic retry on top of this (see cli.ts): auto-retry would risk double-spending the
  *  customer's own subscription/API quota. */
@@ -85,6 +86,7 @@ async function runViaCli(spec, maxBudgetUsd, repoPath, connectionless = false) {
         assertSingleLineArguments('claude', args);
         const filesRead = new Set();
         let resultEnvelope = null;
+        let lastStopReason = null;
         let stderrTail = '';
         let timedOut = false;
         let stdinError = null;
@@ -152,6 +154,9 @@ async function runViaCli(spec, maxBudgetUsd, repoPath, connectionless = false) {
                 resultEnvelope = event;
             }
             else if (eventType === 'assistant') {
+                const stopReason = event.message?.stop_reason;
+                if (typeof stopReason === 'string')
+                    lastStopReason = stopReason;
                 const blocks = event.message?.content ?? [];
                 for (const b of blocks) {
                     if (b.type === 'tool_use' && b.name === 'Read' && b.input?.file_path) {
@@ -211,6 +216,11 @@ async function runViaCli(spec, maxBudgetUsd, repoPath, connectionless = false) {
             const message = envelope.errors?.length ? envelope.errors.join('; ') : envelope.result;
             throw new Error(message || 'Unknown claude CLI error');
         }
+        // A refused turn can still end in a non-error result envelope; its result is empty or partial
+        // text, so it must fail here rather than be returned (or JSON-parsed) as an answer.
+        if (envelope.stop_reason === 'refusal' || lastStopReason === 'refusal') {
+            throw new ModelRefusalError('The model declined this request.');
+        }
         if (capturedStdinError) {
             throw promptWriteFailure(capturedStdinError);
         }

package/dist/investigation-reader.js

@@ -15,7 +15,7 @@ export const MAX_EVIDENCE_FILE_BYTES = 512 * 1024;
  * ceiling leaves at least 3x headroom while bounding serialized prompt overhead.
  */
 export const MAX_ASSESSMENT_PROMPT_CHARACTERS = 384 * 1024;
-export const INVESTIGATION_MODEL = 'claude-sonnet-5';
+export const INVESTIGATION_MODEL = 'claude-sonnet-5-5';
 const execFileAsync = promisify(execFile);
 export class MissingPolicy4ExecutionError extends Error {
     name = 'MissingPolicy4ExecutionError';

package/dist/surface-mapper.js

@@ -7,7 +7,7 @@ import { DEFAULT_MAPPER_SETTINGS, enumerateTrackedFiles, expandImports, isSuppor
 import { repositoryMissingReason, spawnFailureCode } from './local-scan.js';
 import { createSandbox } from './sandbox.js';
 export const SURFACE_SEED_PROMPT_VERSION = 'map_module_seeds@1';
-export const SURFACE_SEED_MODEL = 'claude-sonnet-5';
+export const SURFACE_SEED_MODEL = 'claude-sonnet-5-5';
 const execFileAsync = promisify(execFile);
 const MODEL_ROLES = [
     'implementation',

package/dist/text-model.js

@@ -36,6 +36,34 @@ const PURPOSE_ERRORS = {
         empty: 'No result returned.',
     },
 };
+/** Server-side refusal fallback: on a policy decline the API re-runs the request on Anthropic's
+ * recommended substitute inside the same call. The scalar "default" form needs exactly this header
+ * (the array form is gated by -2026-06-01; pairing either header with the other form is a 400). */
+const FALLBACK_BETA = 'server-side-fallback-2026-07-01';
+/** SDK 0.111 types `fallbacks` as the array form only; the API also takes the scalar "default". */
+const DEFAULT_FALLBACKS = 'default';
+/** Every API-key call goes through here, so each one carries the refusal fallback. */
+export function streamWithFallback(client, params) {
+    return client.beta.messages.stream({ ...params, betas: [FALLBACK_BETA], fallbacks: DEFAULT_FALLBACKS });
+}
+/** stop_reason 'refusal' — after the fallback, the whole chain declined. Thrown before content is
+ * read, so a partial or empty reply is never parsed as a result. */
+export class ModelRefusalError extends Error {
+    category;
+    constructor(message, category = null) {
+        super(message);
+        this.name = 'ModelRefusalError';
+        this.category = category;
+    }
+}
+/** The reply text once a refusal is ruled out. A mid-output fallback continues the declined
+ * model's partial text in a later block, so every text block is joined; null when there is none. */
+export function replyText(message, refusal) {
+    if (message.stop_reason === 'refusal')
+        throw new ModelRefusalError(refusal, message.stop_details?.category ?? null);
+    const text = message.content.map((block) => (block.type === 'text' ? block.text : '')).join('');
+    return text || null;
+}
 function usageRecord(value) {
     if (!value || typeof value !== 'object' || Array.isArray(value))
         return null;
@@ -68,7 +96,7 @@ export function anthropicTextModel(client) {
         const content = request.purpose.endsWith(':file_select') && blocks.length === 1 && blocks[0].type === 'text'
             ? blocks[0].text
             : blocks;
-        const stream = client.messages.stream({
+        const stream = streamWithFallback(client, {
             model: request.model,
             max_tokens: request.maxTokens,
             thinking: { type: 'adaptive' },
@@ -83,11 +111,11 @@ export function anthropicTextModel(client) {
             refusal: `The model declined the ${request.purpose} call.`,
             empty: `The ${request.purpose} call returned no text.`,
         };
-        if (message.stop_reason === 'refusal' && errors.refusal)
-            throw new Error(errors.refusal);
-        const text = message.content.find((block) => block.type === 'text');
-        if (!text || text.type !== 'text')
+        // A purpose with no refusal wording of its own still fails as a refusal, under its empty-reply
+        // wording — never by reading whatever partial text the declined attempt left behind.
+        const text = replyText(message, errors.refusal ?? errors.empty);
+        if (!text)
             throw new Error(errors.empty);
-        return { text: text.text, usage: usageRecord(message.usage) };
+        return { text, usage: usageRecord(message.usage) };
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "product-console-companion",
-  "version": "0.7.1",
+  "version": "0.7.2",
   "description": "Local-first BYOS companion for the Fynch Product Console — reads code and runs AI calls from your own machine instead of the hosted server.",
   "type": "module",
   "license": "MIT",