chore(deps): Bump the node group in /sdk/node with 3 updates

[dependabot]

Bumps the node group in /sdk/node with 3 updates: @responsibleai/agent-hooks, @napi-rs/cli and @types/node.

Updates @responsibleai/agent-hooks from 0.1.0-alpha.4 to 0.1.0-alpha.5

Changelog

Sourced from @​responsibleai/agent-hooks's changelog.

0.1.0-alpha.5 — tag v0.1.0-alpha.5

• Python: Verdict.allow() constructor sugar, completing the cross-SDK vocabulary: Rust Verdict::allow, TypeScript Verdict.allow(), .NET Verdict.Allow and Go AllowVerdict already existed; Python exposed only the module-level ALLOW constant. The Python README interceptor example now uses the sugar throughout.
• npm: prebuilt linux-arm64-gnu binary. The TypeScript loader gains a fifth platform package (@responsibleai/agent-hooks-linux-arm64-gnu, aarch64-unknown-linux-gnu), built natively on the arm64 hosted runner. musl (Alpine) targets remain unshipped — the pipeline builds on native runners only, and linux-x64-musl does not ship either; a musl pair can land together later.
• §12.1 admits incremental mediation. Previously a host had to assemble the complete response before post_model_call with no exception, so a host mediating a stream incrementally (e.g. per ACS §18.1) could not make a coherent conformance claim. §12.1 now carries an exception: a host declaring buffered_output: false MAY evaluate incrementally under a bounded-exposure accounting discipline (verdict-covered release, terminating deny that withholds the unreleased remainder, fail-closed residue at end of stream, §6.1-gated durability covering withheld-but-permitted content). The capability stays declaration-only: the §12.1a declaration and §13.3 claim MUST state the exposure bound, and conformance vectors for the accounting discipline are future work. §12.1 also now distinguishes an errored model call (handled per §6.1, no post_model_call) from the stream_incomplete shape, which is for hosts that cannot buffer. Additive; no version-surface change.
• §12.1a defines the caller and pins released-content identity. The caller is any consumer outside the host's enforcement boundary, observers, callbacks, and preview channels included, and the content released once the verdict permits MUST be the verdicted (post-transform) content — a host MUST NOT rewrite content between the verdict and its release.

Commits

• 6195293 chore(typescript): regenerate binding.js for the alpha.5 version bump
• 94f5042 chore(release): bump version surfaces to 0.1.0-alpha.5
• 76c19f1 feat(typescript): ship a prebuilt linux-arm64-gnu platform package
• f548ec1 fix(typescript): regenerate binding.js with @​napi-rs/cli 3.8.0
• 8bd90a6 chore(deps-dev): bump the node group in /sdk/typescript with 2 updates
• 697f08c chore(deps): bump the rust group across 1 directory with 3 updates
• See full diff in compare view

Updates @napi-rs/cli from 3.8.2 to 3.8.5

Commits

• a5b5f27 chore(release): publish
• 980b0b3 fix(cli): validate publish-effective exports in threadless wasi pre-publish (...
• f5c8872 chore(deps): lock file maintenance (#3435)
• 956e452 chore: release (#3448)
• 73048f5 chore(release): publish
• 61fae8a fix(napi): stop unloading addons with live native code, preserve non-Error re...
• 93e86ce chore(release): publish
• 2c90599 fix(cli): support npm 12 pack output (#3449)
• 360b1ec fix(wasi): avoid randomness during module registration (#3447)
• b648c40 build(deps): bump nanoid from 3.3.16 to 3.3.18 (#3446)
• Additional commits viewable in compare view

Updates @types/node from 26.1.2 to 26.2.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions