solrouter 0.4.0 → 0.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "solrouter",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Local privacy router for coding tools: pseudonymises every request before it leaves your machine, and sends work a frontier model would refuse to an uncensored open-weight model you control.",
   "type": "module",
   "bin": {

package/src/server.js

@@ -102,7 +102,7 @@ export function startServer(cfg) {
         // stream live. If the whole short response is a refusal and mode is auto,
         // we discard it and reroute to the private/uncensored leg.
         const COMMIT_AT = 380;               // chars of answer text that means "real answer"
-        let committed = false, held = "", acc = "";
+        let committed = false, held = "", acc = "", refusalLikely = false;
         for (;;) {
           const { done, value } = await reader.read();
           if (done) break;
@@ -110,11 +110,14 @@ export function startServer(cfg) {
           acc += extractSseText(chunk);
           if (committed) { emit(chunk); continue; }
           held += chunk;
-          if (acc.replace(/\s/g, "").length >= COMMIT_AT) { committed = true; emit(held); held = ""; }
+          // Lock onto a refusal as soon as its opening matches — then never commit,
+          // so even a long, multi-paragraph refusal gets fully buffered and rerouted.
+          if (!refusalLikely && isRefusal(acc)) refusalLikely = true;
+          if (!refusalLikely && acc.replace(/\s/g, "").length >= COMMIT_AT) { committed = true; emit(held); held = ""; }
         }
 
         let leg = s.leg, refused = false, model = s.model;
-        if (!committed && s.mode === "auto" && isRefusal(acc)) {
+        if (!committed && s.mode === "auto" && refusalLikely) {
           // Streamed refusal → reroute to the uncensored private leg.
           const pr = await privateReply(cfg, s.maskedPrompt);
           if (pr.ok && pr.reply) {