@animalabs/agent-framework 0.22.1 → 0.22.3

package/dist/src/safe-slice.js

@@ -2,9 +2,17 @@
  * Slice a string without splitting surrogate pairs.
  *
  * Regular String.prototype.slice can cut in the middle of a surrogate pair,
- * producing invalid UTF-16. This function adjusts the end index to avoid that.
+ * producing invalid UTF-16. Here no half of a pair faces a cut: a start on a
+ * low surrogate moves forward past it, and an end just after a high surrogate
+ * moves back before it, whether or not the other half is there. A start of 0
+ * and an end at or past the length cut nothing, so the string's own first and
+ * last units stay as they are.
  */
 export function safeSlice(str, start, end) {
+    // A low surrogate where the start cuts is a pair's second half, or a lone half: either way, skip it
+    const first = str.charCodeAt(start);
+    if (start > 0 && first >= 0xdc00 && first <= 0xdfff)
+        start += 1;
     if (end >= str.length)
         return str.slice(start);
     // If we're about to cut between a high and low surrogate, back up one char

package/dist/src/safe-slice.js.map

@@ -1 +1 @@
-{"version":3,"file":"safe-slice.js","sourceRoot":"","sources":["../../src/safe-slice.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,KAAa,EAAE,GAAW;IAC/D,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE/C,2EAA2E;IAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACrC,mDAAmD;QACnD,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"safe-slice.js","sourceRoot":"","sources":["../../src/safe-slice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,KAAa,EAAE,GAAW;IAC/D,oGAAoG;IACpG,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM;QAAE,KAAK,IAAI,CAAC,CAAC;IAEhE,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE/C,2EAA2E;IAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;QACrC,mDAAmD;QACnD,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/dist/src/shutdown.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shutdown.d.ts","sourceRoot":"","sources":["../../src/shutdown.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,EAAE,MAAM,GAAG,SAAqB,CAAC;AAEzE,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAK3E;AAED,qBAAa,oBAAqB,SAAQ,cAAc;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE;gBAAjB,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE;CAM/E;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE3D;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GACxF,OAAO,CAAC,IAAI,CAAC,CAuBf"}
+{"version":3,"file":"shutdown.d.ts","sourceRoot":"","sources":["../../src/shutdown.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,eAAO,MAAM,2BAA2B,EAAE,MAAM,GAAG,SAAqB,CAAC;AAEzE,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAK3E;AAED,qBAAa,oBAAqB,SAAQ,cAAc;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE;IAAtC,YAAqB,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAK7E;CACF;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE3D;AAED,wBAAsB,eAAe,CACnC,QAAQ,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GACxF,OAAO,CAAC,IAAI,CAAC,CAuBf"}

package/dist/src/shutdown.js.map

@@ -1 +1 @@
-{"version":3,"file":"shutdown.js","sourceRoot":"","sources":["../../src/shutdown.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAuB,SAAS,CAAC;AAEzE,MAAM,UAAU,uBAAuB,CAAC,SAA6B;IACnE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,UAAU,EAAE,CAAC;QAC5E,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,cAAc;IACjC;IAArB,YAAqB,OAAiB,EAAE,SAAiB,EAAE,QAAmB;QAC5E,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,KAAK,CAAC,4BAA4B,SAAS,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EACxG,4BAA4B,SAAS,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC1E,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAHxE,YAAO,GAAP,OAAO,CAAU;QAIpC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAA0D,EAAE,SAA6B;IAEzF,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAC3E,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC,CAAC,CAAC;IACJ,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC;;YACtC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAChE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,oBAAoB,CACtD,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CACrF,CAAC,EAAE,SAAS,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EACpD,oBAAoB,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"shutdown.js","sourceRoot":"","sources":["../../src/shutdown.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,CAAC,MAAM,2BAA2B,GAAuB,SAAS,CAAC;AAEzE,MAAM,UAAU,uBAAuB,CAAC,SAA6B;IACnE,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,UAAU,EAAE,CAAC;QAC5E,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,cAAc;IACjC,OAAO;IAA5B,YAAqB,OAAiB,EAAE,SAAiB,EAAE,QAAmB;QAC5E,KAAK,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,KAAK,CAAC,4BAA4B,SAAS,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EACxG,4BAA4B,SAAS,iBAAiB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC1E,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;uBAHxE,OAAO;QAI1B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAA0D,EAAE,SAA6B;IAEzF,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAC3E,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAChE,CAAC,CAAC,CAAC;IACJ,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC;;YACtC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBAChE,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,oBAAoB,CACtD,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CACrF,CAAC,EAAE,SAAS,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,cAAc,CAAC,MAAM,EACpD,oBAAoB,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/src/stored-removal.d.ts

@@ -0,0 +1,73 @@
+import { type BodyShard, type ContextManager, type MessageId } from '@animalabs/context-manager';
+type StoredLike = BodyShard & {
+    id: MessageId;
+};
+type Removals = Pick<ContextManager, 'removeMessage' | 'removeMessages'>;
+/** Minimal read surface the live-surgery helpers need from a ContextManager. */
+export interface SurgeryReadableCm {
+    getMessageCount(): number;
+    getMessageWindow(offset: number, limit: number, opts?: {
+        resolveBlobs?: boolean;
+        alignToBodyGroups?: boolean;
+    }): {
+        messages: Array<{
+            id: unknown;
+            bodyGroupId?: string;
+        }>;
+        startIndex: number;
+    };
+}
+/**
+ * Slot index of `messageId` on the active branch, or -1. Scans from the tail
+ * in blob-free windows: operator targets are almost always recent, and a
+ * full `getAllMessages()` re-inflates every attachment on the branch.
+ */
+export declare function locateMessageIndex(cm: SurgeryReadableCm, messageId: string): number;
+/** Tail-first scan resolving many ids at once; stops as soon as all are found. */
+export declare function locateMessageIndices(cm: SurgeryReadableCm, ids: Set<string>): Map<string, {
+    index: number;
+    bodyGroupId?: string;
+}>;
+/**
+ * Inclusive slot range of the body-group run containing `index` (the slot
+ * itself when it is not sharded). Delegates to the store's own
+ * `alignToBodyGroups` edge walk — one contiguity assumption, not two.
+ */
+export declare function bodyGroupRun(cm: SurgeryReadableCm, index: number): {
+    from: number;
+    to: number;
+    fromId: string;
+    toId: string;
+    group: boolean;
+};
+/**
+ * Remove the stored messages `first`..`last` (inclusive, in store order).
+ *
+ * A single message outside any body goes through `removeMessage`.
+ * context-manager's `removeMessage` refuses any message that carries a body
+ * group id, a one-shard body's included, so a shard, and any longer interval,
+ * goes through `removeMessages`, which refuses an interval that splits a
+ * body.
+ */
+export declare function removeStoredMessages(cm: Removals, first: StoredLike, last: StoredLike): void;
+/**
+ * Remove one stored message by its id, with the rest of its body when it's
+ * in one: a module or a coalescer removes a message it added by the id
+ * `addMessage` returned, which for a long message stored in shards is its
+ * first shard's.
+ */
+export declare function removeStoredMessage(cm: ContextManager, id: MessageId): void;
+/** removeStoredMessages for an interval known by its ids. */
+export declare function removeStoredInterval(cm: ContextManager, fromId: MessageId, toId: MessageId): void;
+/**
+ * The first and last positions (inclusive) of the body that holds
+ * `messages[index]`, read the way context-manager 0.14.0 reads bodies
+ * (`continuesBody`, pairwise in store order). A message outside any body is a
+ * body of its own.
+ */
+export declare function bodyRangeIn(messages: readonly unknown[], index: number): {
+    from: number;
+    to: number;
+};
+export {};
+//# sourceMappingURL=stored-removal.d.ts.map

package/dist/src/stored-removal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stored-removal.d.ts","sourceRoot":"","sources":["../../src/stored-removal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,SAAS,EAAE,KAAK,cAAc,EAAE,KAAK,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAE/G,KAAK,UAAU,GAAG,SAAS,GAAG;IAAE,EAAE,EAAE,SAAS,CAAA;CAAE,CAAC;AAChD,KAAK,QAAQ,GAAG,IAAI,CAAC,cAAc,EAAE,eAAe,GAAG,gBAAgB,CAAC,CAAC;AAEzE,gFAAgF;AAChF,MAAM,WAAW,iBAAiB;IAChC,eAAe,IAAI,MAAM,CAAC;IAC1B,gBAAgB,CACd,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,GAC7D;QAAE,QAAQ,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,OAAO,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACnF;AAID;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAGnF;AAED,kFAAkF;AAClF,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,iBAAiB,EACrB,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,GACf,GAAG,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBtD;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAC1B,EAAE,EAAE,iBAAiB,EACrB,KAAK,EAAE,MAAM,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAW5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAM5F;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAe3E;AAED,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAGjG;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAErG"}

package/dist/src/stored-removal.js

@@ -0,0 +1,100 @@
+import { bodyBoundsIn } from '@animalabs/context-manager';
+const SURGERY_SCAN_WINDOW = 500;
+/**
+ * Slot index of `messageId` on the active branch, or -1. Scans from the tail
+ * in blob-free windows: operator targets are almost always recent, and a
+ * full `getAllMessages()` re-inflates every attachment on the branch.
+ */
+export function locateMessageIndex(cm, messageId) {
+    const hit = locateMessageIndices(cm, new Set([messageId])).get(messageId);
+    return hit ? hit.index : -1;
+}
+/** Tail-first scan resolving many ids at once; stops as soon as all are found. */
+export function locateMessageIndices(cm, ids) {
+    const found = new Map();
+    const total = cm.getMessageCount();
+    for (let end = total; end > 0 && found.size < ids.size; end -= SURGERY_SCAN_WINDOW) {
+        const start = Math.max(0, end - SURGERY_SCAN_WINDOW);
+        const { messages, startIndex } = cm.getMessageWindow(start, end - start, { resolveBlobs: false });
+        for (let i = messages.length - 1; i >= 0; i--) {
+            const id = String(messages[i].id);
+            if (ids.has(id) && !found.has(id)) {
+                found.set(id, {
+                    index: startIndex + i,
+                    ...(messages[i].bodyGroupId ? { bodyGroupId: messages[i].bodyGroupId } : {}),
+                });
+            }
+        }
+    }
+    return found;
+}
+/**
+ * Inclusive slot range of the body-group run containing `index` (the slot
+ * itself when it is not sharded). Delegates to the store's own
+ * `alignToBodyGroups` edge walk — one contiguity assumption, not two.
+ */
+export function bodyGroupRun(cm, index) {
+    const win = cm.getMessageWindow(index, 1, { alignToBodyGroups: true, resolveBlobs: false });
+    const from = win.startIndex;
+    const to = win.startIndex + win.messages.length - 1;
+    return {
+        from,
+        to,
+        fromId: String(win.messages[0].id),
+        toId: String(win.messages[win.messages.length - 1].id),
+        group: win.messages[0].bodyGroupId !== undefined,
+    };
+}
+/**
+ * Remove the stored messages `first`..`last` (inclusive, in store order).
+ *
+ * A single message outside any body goes through `removeMessage`.
+ * context-manager's `removeMessage` refuses any message that carries a body
+ * group id, a one-shard body's included, so a shard, and any longer interval,
+ * goes through `removeMessages`, which refuses an interval that splits a
+ * body.
+ */
+export function removeStoredMessages(cm, first, last) {
+    if (first.id === last.id && !first.bodyGroupId) {
+        cm.removeMessage(first.id);
+        return;
+    }
+    cm.removeMessages(first.id, last.id);
+}
+/**
+ * Remove one stored message by its id, with the rest of its body when it's
+ * in one: a module or a coalescer removes a message it added by the id
+ * `addMessage` returned, which for a long message stored in shards is its
+ * first shard's.
+ */
+export function removeStoredMessage(cm, id) {
+    const message = cm.getMessage(id);
+    if (!message?.bodyGroupId) {
+        cm.removeMessage(id);
+        return;
+    }
+    // Found in blob-free windows: a full read of the branch would inflate every
+    // attachment on it, once for each message a sweep removes.
+    const index = locateMessageIndex(cm, String(id));
+    if (index < 0) {
+        cm.removeMessage(id);
+        return;
+    }
+    const run = bodyGroupRun(cm, index);
+    cm.removeMessages(run.fromId, run.toId);
+}
+/** removeStoredMessages for an interval known by its ids. */
+export function removeStoredInterval(cm, fromId, toId) {
+    const first = cm.getMessage(fromId);
+    removeStoredMessages(cm, first ?? { id: fromId }, { id: toId });
+}
+/**
+ * The first and last positions (inclusive) of the body that holds
+ * `messages[index]`, read the way context-manager 0.14.0 reads bodies
+ * (`continuesBody`, pairwise in store order). A message outside any body is a
+ * body of its own.
+ */
+export function bodyRangeIn(messages, index) {
+    return bodyBoundsIn(messages, index);
+}
+//# sourceMappingURL=stored-removal.js.map

package/dist/src/stored-removal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stored-removal.js","sourceRoot":"","sources":["../../src/stored-removal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAuD,MAAM,4BAA4B,CAAC;AAe/G,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAqB,EAAE,SAAiB;IACzE,MAAM,GAAG,GAAG,oBAAoB,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1E,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAClC,EAAqB,EACrB,GAAgB;IAEhB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAmD,CAAC;IACzE,MAAM,KAAK,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC;IACnC,KAAK,IAAI,GAAG,GAAG,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,mBAAmB,EAAE,CAAC;QACnF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,mBAAmB,CAAC,CAAC;QACrD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,GAAG,GAAG,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAClG,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;oBACZ,KAAK,EAAE,UAAU,GAAG,CAAC;oBACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,EAAqB,EACrB,KAAa;IAEb,MAAM,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC;IAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,OAAO;QACL,IAAI;QACJ,EAAE;QACF,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS;KACjD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,EAAY,EAAE,KAAiB,EAAE,IAAgB;IACpF,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC/C,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAkB,EAAE,EAAa;IACnE,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAsB,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;QAC1B,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,4EAA4E;IAC5E,2DAA2D;IAC3D,MAAM,KAAK,GAAG,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACpC,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAmB,EAAE,GAAG,CAAC,IAAiB,CAAC,CAAC;AACpE,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,EAAkB,EAAE,MAAiB,EAAE,IAAe;IACzF,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAsB,CAAC;IACzD,oBAAoB,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,QAA4B,EAAE,KAAa;IACrE,OAAO,YAAY,CAAC,QAAqD,EAAE,KAAK,CAAC,CAAC;AACpF,CAAC"}

package/dist/src/thinking-token-stamp.js.map

@@ -1 +1 @@
-{"version":3,"file":"thinking-token-stamp.js","sourceRoot":"","sources":["../../src/thinking-token-stamp.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,SAAS,aAAa,CAAC,KAAmB;IACxC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAI,KAAiC,CAAC,SAAS,CAAC;QACzD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;QAChD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB;IACxC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAC;QACtE,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC;YAAC,CAAC;YACtE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,UAAU;YACb,qEAAqE;YACrE,uDAAuD;YACvD,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAC;QACzG;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAsB,EAAE,YAAoB;IACtF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAEvE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAI,KAAqC,CAAC,aAAa,CAAC;QACrE,MAAM,CAAC,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC;YAAE,WAAW,IAAI,CAAC,CAAC;;YACvB,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,OAAO,CAAC;IACtD,CAAC;IACD,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;IACxC,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAEjC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAI,KAAqC,CAAC,aAAa,CAAC;QACrE,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAkB,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"thinking-token-stamp.js","sourceRoot":"","sources":["../../src/thinking-token-stamp.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,SAAS,aAAa,CAAC,KAAmB;IACxC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAI,KAAiC,CAAC,SAAS,CAAC;QACzD,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;QAChD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB;IACxC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAC;QACtE,KAAK,UAAU,EAAE,CAAC;YAChB,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,GAAG,EAAE,CAAC;YAAC,CAAC;YACtE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,UAAU;YACb,qEAAqE;YACrE,uDAAuD;YACvD,OAAO,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAC;QACzG;YACE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAAsB,EAAE,YAAoB;IACtF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAEvE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAI,KAAqC,CAAC,aAAa,CAAC;QACrE,MAAM,CAAC,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC;YAAE,WAAW,IAAI,CAAC,CAAC;;YACvB,OAAO,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,OAAO,CAAC;IACtD,CAAC;IACD,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACpC,MAAM,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;IACxC,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IAEjC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,OAAO,GAAI,KAAqC,CAAC,aAAa,CAAC;QACrE,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;QAC5E,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAkB,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/tool-image-ledger.d.ts

@@ -132,14 +132,16 @@ export type ParsedImagePlaceholder =
     /** The placeholder exactly as it appears in the text. */
     text: string;
 }
-/** An RFC-005 reference stub whose testimony says image — bytes live
+/** An RFC-005 reference stub whose text shows an image type — bytes live
  *  behind fetch_reference, never in this ledger. Occupies a slot so the
  *  index cannot slide past it. */
  | {
     kind: 'reference';
     refId: string;
-    /** Mime sniffed from the stub text; null when the stub names none. */
-    mediaType: string | null;
+    /** The image type the stub shows, as a stub shows a type (sanitized and
+     *  bounded), lowercased: the first `image/` token in its text, which can
+     *  come from its name. */
+    mediaType: string;
     offset: number;
     /** The stub line exactly as it appears in the text. */
     text: string;
@@ -150,26 +152,92 @@ export type ParsedImagePlaceholder =
  * untrusted — a tool result can quote someone else's placeholder verbatim —
  * so the caller MUST cross-check a resolved ref's provenance against the
  * tool_result block it was found in before handing out bytes.
+ *
+ * Decided from the text alone, so a stored result counts the same however
+ * long ago it was written, across restarts and registry evictions. A
+ * reference stub is a slot when its text shows an image type, and a
+ * non-image reference is no slot. A line shaped like a stub but longer than
+ * buildReferenceStub writes (REFERENCE_STUB_MAX_CHARS) is quoted text and no
+ * slot either, so a slot's text is bounded wherever it is kept.
  */
 export declare function parseImagePlaceholders(text: string): ParsedImagePlaceholder[];
 /**
- * Cut `text` to at most `cap` chars WITHOUT losing or splitting an image
- * slot. The stored tool_result text is the only place the inventory
- * discovers tool images, while the live wire still delivers every image
- * regardless of text length — so a slot dropped by truncation is an image
- * the resident saw that the index silently slides past (the #104 failure,
- * one representation over). Returns the head to keep and the slots that
- * fell at or past the cut, to be re-appended verbatim after the truncation
- * notice. A slot straddling the cut moves the cut back to its start, so the
- * head never contains a partial slot (a partial reference-stub line would
- * otherwise still re-parse and be counted twice).
+ * The most image slots a stored copy keeps past its cut: a bound on what it
+ * carries there, set at the ledger's entry limit, the most images it holds
+ * bytes for. Serializing a result retains its images in order before their
+ * placeholders are written, and every agent's ledger is built with the
+ * defaults, so once a result is stored a save can reach bytes for at most
+ * its newest DEFAULT_TOOL_IMAGE_LEDGER_MAX_ENTRIES images, fewer when the
+ * ledger's limit on held characters binds first, and an inline image older
+ * than those can only fail. Image stubs and quoted placeholders count toward
+ * the bound too, so where they follow a result's images past the cut, the
+ * newest slots kept can leave out an image whose bytes the ledger still
+ * holds.
  */
-export declare function splitPreservingImageSlots(text: string, cap: number): {
+export declare const MAX_KEPT_IMAGE_SLOTS = 64;
+/** The ranges `[start, end)` of a tool result's text that its live copy
+ *  showed beside its images: each text block up to where the live copy cut it
+ *  at the inline cap (toolResultCutAt), and every other block whole. They
+ *  come in text order and never overlap, as the blocks do, and
+ *  cutStoredToolResult relies on that. */
+export type ShownRanges = ReadonlyArray<readonly [number, number]>;
+/** A tool result's stored copy, cut at its inline cap. */
+export interface StoredCut {
+    /** The text before the cut. */
     head: string;
-    tail: string[];
-};
-/** Text to append after a truncation notice so the preserved slots stay
- *  parseable (each reference stub on its own line). Empty when none. */
-export declare function formatPreservedImageSlots(tail: string[]): string;
+    /** The image slots past the cut that the stored copy re-appends after its
+     *  truncation notice, in text order: the newest MAX_KEPT_IMAGE_SLOTS of
+     *  those the live copy showed. */
+    kept: string[];
+    /** How many image slots past the cut the live copy showed. */
+    fell: number;
+}
+/**
+ * Where a tool result's text longer than `cap` is cut: by its stored copy
+ * (cutStoredToolResult), by history's own truncation (truncateForHistory),
+ * and by its live copy, for each text block beside an image
+ * (tryNativeToolResultContent, framework.ts), so the stored copy and the live
+ * copy cut alike. The text's length when it isn't longer than `cap`.
+ *
+ * The cut is made at the cap, or before it when the cap would split a
+ * surrogate pair (safeSlice's rule), and that is where the moves back are
+ * measured from. It moves back to the start of a placeholder it would split,
+ * and then to the start of a stub-shaped line it would split when at most
+ * REFERENCE_STUB_MAX_CHARS of the line lie before it, since that part could
+ * still read as a slot. So no slot straddles the cut, and the text before it
+ * never ends in part of one. A longer part, which can't parse as a slot,
+ * stays before the cut. Each move back lands on a `[`, so it splits no pair.
+ */
+export declare function toolResultCutAt(text: string, cap: number): number;
+/**
+ * Cut a tool result's text at its inline `cap` as its stored copy keeps it
+ * (toolResultCutAt): the stored copy keeps what the live copy showed. A text
+ * within the cap is all head, with nothing kept after it.
+ *
+ * `shown` is what the live copy showed beside the stored text: null when the
+ * live copy was the text itself, as for every result that carried no inline
+ * image. Then what the cut keeps is exactly what the resident saw, and
+ * nothing past it is kept (#403). A result that carried an inline image went
+ * to the model as native blocks (tryNativeToolResultContent, framework.ts),
+ * every image whatever the text's length, so its stored text is the only
+ * place save_recent_image's inventory finds them, and a slot dropped by the
+ * cut would be an image the resident saw that the index slides past (#104).
+ * The image slots past the cut that lie wholly within what the live copy
+ * showed are kept, the newest MAX_KEPT_IMAGE_SLOTS of them, since the
+ * inventory counts from the end.
+ */
+export declare function cutStoredToolResult(text: string, cap: number, shown: ShownRanges | null): StoredCut;
+/** What a stored copy re-appends after its truncation notice: the kept
+ *  slots, each on its own line so a reference stub stays parseable, under a
+ *  note saying how many fell past the cut, and how many of those were left
+ *  out and aren't counted. Empty when none fell past the cut. */
+export declare function formatKeptImageSlots(cut: StoredCut): string;
+/**
+ * The image slots a tool result's stored copy holds: its text's, or, when the
+ * text is longer than `cap`, those the cut keeps, in head and after the
+ * notice (cutStoredToolResult). The notice itself holds none. For counting a
+ * result before its stored copy is written, as it will count after.
+ */
+export declare function storedImageSlots(text: string, cap: number, shown: ShownRanges | null): ParsedImagePlaceholder[];
 export declare function sha256Hex(bytes: Buffer): string;
 //# sourceMappingURL=tool-image-ledger.d.ts.map

package/dist/src/tool-image-ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-image-ledger.d.ts","sourceRoot":"","sources":["../../src/tool-image-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,WAAW,yBAA0B,SAAQ,iBAAiB;IAClE,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,yBAAyB,CAAA;CAAE;AAC1D,qFAAqF;GACnF;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AACjD,8EAA8E;GAC5E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1B,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4EAA4E;AAC5E,eAAO,MAAM,mCAAmC,QAAmB,CAAC;AACpE,eAAO,MAAM,qCAAqC,KAAK,CAAC;AAExD,qBAAa,eAAe;IAC1B;yEACqE;IACrE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAqB;IAC3C,OAAO,CAAC,OAAO,CAAK;IACpB,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgD;IACzE,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;gBAExB,OAAO,GAAE,sBAA2B;IAKhD;;;;;;;;OAQG;IACH,MAAM,CAAC,MAAM,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,iBAAiB;IAyCrB,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe;IAQpC,4EAA4E;IAC5E,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIlE,sDAAsD;IACtD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,eAAe;IAQvB;8EAC0E;IAC1E,OAAO,CAAC,cAAc;CAUvB;AAOD,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,QAAwB,CAAC;AAIvD,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAE9D;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,8FAA8F;AAC9F,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAK3G;AAED,MAAM,MAAM,sBAAsB;AAChC,uEAAuE;AACrE;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AACD;;kCAEkC;GAChC;IACA,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAOJ;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAW7E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAUrG;AAED;wEACwE;AACxE,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAIhE;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C"}
+{"version":3,"file":"tool-image-ledger.d.ts","sourceRoot":"","sources":["../../src/tool-image-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAMH,MAAM,WAAW,iBAAiB;IAChC,gGAAgG;IAChG,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,mDAAmD;AACnD,MAAM,WAAW,yBAA0B,SAAQ,iBAAiB;IAClE,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,yBAAyB,CAAA;CAAE;AAC1D,qFAAqF;GACnF;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AACjD,8EAA8E;GAC5E;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1B,MAAM,WAAW,sBAAsB;IACrC,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4EAA4E;AAC5E,eAAO,MAAM,mCAAmC,QAAmB,CAAC;AACpE,eAAO,MAAM,qCAAqC,KAAK,CAAC;AAExD,qBAAa,eAAe;IAC1B;yEACqE;IACrE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAqB;IAC3C,OAAO,CAAC,OAAO,CAAK;IACpB,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgD;IACzE,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA6B;IACtD,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IAEpC,YAAY,OAAO,GAAE,sBAA2B,EAG/C;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,MAAM,EAAE;QACb,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,iBAAiB,CAuCpB;IAED,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAMnC;IAED,4EAA4E;IAC5E,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEjE;IAED,sDAAsD;IACtD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,CAAC,eAAe;IAQvB;8EAC0E;IAC1E,OAAO,CAAC,cAAc;CAUvB;AAOD,2EAA2E;AAC3E,eAAO,MAAM,iBAAiB,QAAwB,CAAC;AAKvD,eAAO,MAAM,mBAAmB,6BAA6B,CAAC;AAE9D;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,8FAA8F;AAC9F,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAK3G;AAED,MAAM,MAAM,sBAAsB;AAChC,uEAAuE;AACrE;IACA,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;CACd;AACD;;kCAEkC;GAChC;IACA,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd;;8BAE0B;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAgBJ;;;;;;;;;;;;;GAaG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAa7E;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,KAAwC,CAAC;AAE1E;;;;0CAI0C;AAC1C,MAAM,MAAM,WAAW,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEnE,0DAA0D;AAC1D,MAAM,WAAW,SAAS;IACxB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb;;sCAEkC;IAClC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBjE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,CAgBnG;AAED;;;iEAGiE;AACjE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,SAAS,GAAG,MAAM,CAQ3D;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,sBAAsB,EAAE,CAG/G;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C"}

package/dist/src/tool-image-ledger.js

@@ -26,6 +26,7 @@
  * of bytes from another surface is the failure this exists to end.
  */
 import { createHash, randomBytes } from 'node:crypto';
+import { REFERENCE_STUB_MAX_CHARS, referenceTypeLabel } from './mcpl/references.js';
 import { safeSlice } from './safe-slice.js';
 /** 96 MB of base64 ≈ 72 MB of image bytes — a few dozen world snapshots. */
 export const DEFAULT_TOOL_IMAGE_LEDGER_MAX_CHARS = 96 * 1024 * 1024;
@@ -143,8 +144,9 @@ function mintLedgerNonce() {
 }
 /** Grammar of a ref this module mints: `img_<ledger nonce>_<sequence>`. */
 export const TOOL_IMAGE_REF_RE = /^img_[0-9a-z]+_\d+$/;
-/** RFC 6838 type/subtype token characters (lowercased); no parameters. */
-const MEDIA_TYPE_ESSENCE_RE = /^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/;
+/** RFC 6838 type/subtype token characters (lowercased), each name at most
+ *  127 characters (its section 4.2); no parameters. */
+const MEDIA_TYPE_ESSENCE_RE = /^[a-z0-9!#$&^_.+-]{1,127}\/[a-z0-9!#$&^_.+-]{1,127}$/;
 export const FALLBACK_MEDIA_TYPE = 'application/octet-stream';
 /**
  * The one spelling the placeholder grammar accepts: trimmed, lowercased, the
@@ -166,8 +168,17 @@ export function formatToolImagePlaceholder(mediaType, sizeLabel, ref) {
         ? `[image: ${mime}, ${sizeLabel}]`
         : `[image: ${mime}, ${sizeLabel}, ref ${ref}]`;
 }
-const PLACEHOLDER_RE = /\[image: ([a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+), (~?[\d.]+(?:B|KB|MB))(?:, ref (img_[0-9a-z]+_\d+))?\]/g;
-/** `[ref_1_ab3d] cam.png — image/png, 1.2MB claimed — from tool result — …` (one line). */
+/**
+ * `[image: image/png, ~691KB, ref img_k7x3q2_7]`. Each part is bounded by
+ * what formatToolImagePlaceholder writes, so text shaped like a placeholder
+ * but longer is no slot: a type and a subtype name at RFC 6838's 127
+ * characters each (normalizeMediaType writes none longer), and a size's
+ * number, a ledger nonce and a sequence at 16 characters each, a safe
+ * integer's digits.
+ */
+const PLACEHOLDER_RE = /\[image: ([a-z0-9!#$&^_.+-]{1,127}\/[a-z0-9!#$&^_.+-]{1,127}), (~?[\d.]{1,16}(?:B|KB|MB))(?:, ref (img_[0-9a-z]{1,16}_\d{1,16}))?\]/g;
+/** `[ref_1_ab3d] cam.png — image/png, 1.2MB claimed — from tool result — …`
+ *  (one line, at most REFERENCE_STUB_MAX_CHARS long: see parseImagePlaceholders). */
 const REFERENCE_STUB_RE = /^\[(ref_[0-9a-z]+_[0-9a-z]+)\] ([^\n]*)$/gm;
 const IMAGE_MIME_RE = /\bimage\/[a-z0-9!#$&^_.+-]+/i;
 /**
@@ -176,6 +187,13 @@ const IMAGE_MIME_RE = /\bimage\/[a-z0-9!#$&^_.+-]+/i;
  * untrusted — a tool result can quote someone else's placeholder verbatim —
  * so the caller MUST cross-check a resolved ref's provenance against the
  * tool_result block it was found in before handing out bytes.
+ *
+ * Decided from the text alone, so a stored result counts the same however
+ * long ago it was written, across restarts and registry evictions. A
+ * reference stub is a slot when its text shows an image type, and a
+ * non-image reference is no slot. A line shaped like a stub but longer than
+ * buildReferenceStub writes (REFERENCE_STUB_MAX_CHARS) is quoted text and no
+ * slot either, so a slot's text is bounded wherever it is kept.
  */
 export function parseImagePlaceholders(text) {
     const out = [];
@@ -183,43 +201,128 @@ export function parseImagePlaceholders(text) {
         out.push({ kind: 'inline', mediaType: m[1], sizeLabel: m[2], ref: m[3] ?? null, offset: m.index ?? 0, text: m[0] });
     }
     for (const m of text.matchAll(REFERENCE_STUB_RE)) {
-        const mime = m[2].match(IMAGE_MIME_RE);
-        out.push({ kind: 'reference', refId: m[1], mediaType: mime ? mime[0].toLowerCase() : null, offset: m.index ?? 0, text: m[0] });
+        if (m[0].length > REFERENCE_STUB_MAX_CHARS)
+            continue;
+        const shown = m[2].match(IMAGE_MIME_RE);
+        if (!shown)
+            continue;
+        out.push({ kind: 'reference', refId: m[1], mediaType: referenceTypeLabel(shown[0]).toLowerCase(), offset: m.index ?? 0, text: m[0] });
     }
     out.sort((a, b) => a.offset - b.offset);
     return out;
 }
 /**
- * Cut `text` to at most `cap` chars WITHOUT losing or splitting an image
- * slot. The stored tool_result text is the only place the inventory
- * discovers tool images, while the live wire still delivers every image
- * regardless of text length — so a slot dropped by truncation is an image
- * the resident saw that the index silently slides past (the #104 failure,
- * one representation over). Returns the head to keep and the slots that
- * fell at or past the cut, to be re-appended verbatim after the truncation
- * notice. A slot straddling the cut moves the cut back to its start, so the
- * head never contains a partial slot (a partial reference-stub line would
- * otherwise still re-parse and be counted twice).
+ * The most image slots a stored copy keeps past its cut: a bound on what it
+ * carries there, set at the ledger's entry limit, the most images it holds
+ * bytes for. Serializing a result retains its images in order before their
+ * placeholders are written, and every agent's ledger is built with the
+ * defaults, so once a result is stored a save can reach bytes for at most
+ * its newest DEFAULT_TOOL_IMAGE_LEDGER_MAX_ENTRIES images, fewer when the
+ * ledger's limit on held characters binds first, and an inline image older
+ * than those can only fail. Image stubs and quoted placeholders count toward
+ * the bound too, so where they follow a result's images past the cut, the
+ * newest slots kept can leave out an image whose bytes the ledger still
+ * holds.
+ */
+export const MAX_KEPT_IMAGE_SLOTS = DEFAULT_TOOL_IMAGE_LEDGER_MAX_ENTRIES;
+/**
+ * Where a tool result's text longer than `cap` is cut: by its stored copy
+ * (cutStoredToolResult), by history's own truncation (truncateForHistory),
+ * and by its live copy, for each text block beside an image
+ * (tryNativeToolResultContent, framework.ts), so the stored copy and the live
+ * copy cut alike. The text's length when it isn't longer than `cap`.
+ *
+ * The cut is made at the cap, or before it when the cap would split a
+ * surrogate pair (safeSlice's rule), and that is where the moves back are
+ * measured from. It moves back to the start of a placeholder it would split,
+ * and then to the start of a stub-shaped line it would split when at most
+ * REFERENCE_STUB_MAX_CHARS of the line lie before it, since that part could
+ * still read as a slot. So no slot straddles the cut, and the text before it
+ * never ends in part of one. A longer part, which can't parse as a slot,
+ * stays before the cut. Each move back lands on a `[`, so it splits no pair.
  */
-export function splitPreservingImageSlots(text, cap) {
-    const slots = parseImagePlaceholders(text);
-    let cutAt = cap;
-    for (const slot of slots) {
-        if (slot.offset < cutAt && slot.offset + slot.text.length > cutAt)
-            cutAt = slot.offset;
+export function toolResultCutAt(text, cap) {
+    if (text.length <= cap)
+        return text.length;
+    let cutAt = safeSlice(text, 0, cap).length;
+    // Neither grammar crosses a newline, so only the line holding the cut can
+    // be split; it is read whole, as the parser reads it.
+    const lineStart = text.lastIndexOf('\n', cutAt - 1) + 1;
+    const newline = text.indexOf('\n', cutAt);
+    const line = text.slice(lineStart, newline === -1 ? text.length : newline);
+    for (const m of line.matchAll(PLACEHOLDER_RE)) {
+        const start = lineStart + (m.index ?? 0);
+        if (start < cutAt && start + m[0].length > cutAt)
+            cutAt = start;
     }
-    return {
-        head: safeSlice(text, 0, cutAt),
-        tail: slots.filter((slot) => slot.offset >= cutAt).map((slot) => slot.text),
-    };
+    for (const m of line.matchAll(REFERENCE_STUB_RE)) {
+        const start = lineStart + (m.index ?? 0);
+        if (start < cutAt && start + m[0].length > cutAt && cutAt - start <= REFERENCE_STUB_MAX_CHARS)
+            cutAt = start;
+    }
+    return cutAt;
 }
-/** Text to append after a truncation notice so the preserved slots stay
- *  parseable (each reference stub on its own line). Empty when none. */
-export function formatPreservedImageSlots(tail) {
-    if (tail.length === 0)
+/**
+ * Cut a tool result's text at its inline `cap` as its stored copy keeps it
+ * (toolResultCutAt): the stored copy keeps what the live copy showed. A text
+ * within the cap is all head, with nothing kept after it.
+ *
+ * `shown` is what the live copy showed beside the stored text: null when the
+ * live copy was the text itself, as for every result that carried no inline
+ * image. Then what the cut keeps is exactly what the resident saw, and
+ * nothing past it is kept (#403). A result that carried an inline image went
+ * to the model as native blocks (tryNativeToolResultContent, framework.ts),
+ * every image whatever the text's length, so its stored text is the only
+ * place save_recent_image's inventory finds them, and a slot dropped by the
+ * cut would be an image the resident saw that the index slides past (#104).
+ * The image slots past the cut that lie wholly within what the live copy
+ * showed are kept, the newest MAX_KEPT_IMAGE_SLOTS of them, since the
+ * inventory counts from the end.
+ */
+export function cutStoredToolResult(text, cap, shown) {
+    const cutAt = toolResultCutAt(text, cap);
+    const head = text.slice(0, cutAt);
+    if (shown === null)
+        return { head, kept: [], fell: 0 };
+    // The slots and the ranges both come in text order, so one pass walks
+    // them together: a range that ends where a slot starts, or before, holds
+    // no later slot either.
+    const past = [];
+    let r = 0;
+    for (const slot of parseImagePlaceholders(text)) {
+        if (slot.offset < cutAt)
+            continue;
+        while (r < shown.length && shown[r][1] <= slot.offset)
+            r++;
+        const range = shown[r];
+        if (range && slot.offset >= range[0] && slot.offset + slot.text.length <= range[1])
+            past.push(slot);
+    }
+    return { head, kept: past.slice(-MAX_KEPT_IMAGE_SLOTS).map((slot) => slot.text), fell: past.length };
+}
+/** What a stored copy re-appends after its truncation notice: the kept
+ *  slots, each on its own line so a reference stub stays parseable, under a
+ *  note saying how many fell past the cut, and how many of those were left
+ *  out and aren't counted. Empty when none fell past the cut. */
+export function formatKeptImageSlots(cut) {
+    if (cut.fell === 0)
         return '';
-    return `\n[${tail.length} image slot(s) fell past the cut; kept here in order so save_recent_image still counts them:]\n`
-        + tail.join('\n');
+    const leftOut = cut.fell - cut.kept.length;
+    const note = leftOut === 0
+        ? `${cut.fell} image slot(s) fell past the cut; kept here in order so save_recent_image still counts them:`
+        : `${cut.fell} image slot(s) fell past the cut. The last ${cut.kept.length} are kept here in order so `
+            + `save_recent_image still counts them; the ${leftOut} before them are left out, and it doesn't count them:`;
+    return `\n[${note}]\n${cut.kept.join('\n')}`;
+}
+/**
+ * The image slots a tool result's stored copy holds: its text's, or, when the
+ * text is longer than `cap`, those the cut keeps, in head and after the
+ * notice (cutStoredToolResult). The notice itself holds none. For counting a
+ * result before its stored copy is written, as it will count after.
+ */
+export function storedImageSlots(text, cap, shown) {
+    const cut = cutStoredToolResult(text, cap, shown);
+    return parseImagePlaceholders(cut.head + formatKeptImageSlots(cut));
 }
 export function sha256Hex(bytes) {
     return createHash('sha256').update(bytes).digest('hex');