@buoy-gg/agent-core 7.0.33

package/lib/commonjs/policy/labels.js

@@ -0,0 +1,303 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.humanise = humanise;
+exports.titleCall = titleCall;
+exports.toolTitle = toolTitle;
+var _catalog = require("../catalog/catalog.g");
+/**
+ * Human titles for tool calls.
+ *
+ * The catalog's `summary` field is written FOR THE MODEL — "Navigate the
+ * device to a concrete path (pushes by default; replace:true swaps the
+ * current screen)". Shown to a QA person in a 300pt-wide chat row it was
+ * truncated to "Navigate the device to a concrete path (pushes by default;
+ * replace:tru…", which is the worst of both worlds: too long to fit and too
+ * technical to help. The transcript, the changes bar and the approval card
+ * all render THIS layer instead: a short present-tense sentence with the one
+ * or two parameters a person would recognise ("Open /bag", "Update the cart
+ * store"), and the catalog sentence is kept alongside as the expandable
+ * "what this does" detail.
+ *
+ * Phrases are keyed `toolId.action`. `{a|b.c}` interpolates the first defined
+ * string/number among those parameter paths; a placeholder that resolves to
+ * nothing disappears with its surrounding space. Anything not phrased here
+ * falls back to the humanised action name plus the tool title, which is
+ * still short and still honest — never the model-facing paragraph.
+ */
+
+const PHRASES = {
+  // Routes
+  "route-events.getSnapshot": "Check which screen is open",
+  "route-events.getCurrentRoute": "Check the current screen",
+  "route-events.navigate": "Open {path}",
+  "route-events.stackGoBack": "Go back one screen",
+  "route-events.stackNavigateToIndex": "Jump to screen {index} in the stack",
+  "route-events.stackPopToIndex": "Go back to screen {index}",
+  "route-events.stackPopToTop": "Go back to the first screen",
+  // State stores
+  "zustand.listStores": "List the app's stores",
+  "zustand.getStoreState": "Read the {storeName} store",
+  "zustand.getChangeDetail": "Inspect a store change",
+  "zustand.setState": "Update the {storeName} store",
+  "zustand.rehydrate": "Reload the {storeName} store from disk",
+  "redux.getState": "Read the Redux state",
+  "redux.getActionDetail": "Inspect a Redux action",
+  "redux.dispatch": "Dispatch {action.type}",
+  "jotai.listAtoms": "List the app's atoms",
+  "jotai.getAtomValue": "Read atom {label}",
+  "jotai.getChangeDetail": "Inspect an atom change",
+  "jotai.setAtom": "Set atom {label}",
+  // React Query
+  "query.listQueries": "List cached queries",
+  "query.getQueryData": "Read cached data for {queryHash}",
+  "query.refetch": "Refetch {queryHash}",
+  "query.invalidate": "Refresh {queryHash}",
+  "query.reset": "Reset {queryHash}",
+  "query.remove": "Drop {queryHash} from the cache",
+  "query.setQueryData": "Replace cached data for {queryHash|queryKey}",
+  "query.triggerError": "Force {queryHash} into an error",
+  "query.restoreError": "Clear the forced error on {queryHash}",
+  "query.triggerLoading": "Force {queryHash} to keep loading",
+  "query.restoreLoading": "Clear the forced loading on {queryHash}",
+  "query.clearQueryCache": "Clear the query cache",
+  "query.clearMutationCache": "Clear the mutation cache",
+  // Network
+  "network.getSnapshot": "Read recent network requests",
+  "network.getCaptureStatus": "Check network capture",
+  "network.getEventBody": "Read a request's body",
+  "network.setPinned": "Pin a request",
+  "network.setSaved": "Save a request",
+  "network.removeSavedRecord": "Remove saved request {key}",
+  "network.clearSavedRequests": "Clear saved requests",
+  "network.clearPinnedRequests": "Clear pinned requests",
+  "network.listOverrideRules": "List network overrides",
+  "network.getOverrideRuleBody": "Read a network override",
+  "network.debugOverrides": "Check overrides for {url}",
+  "network.upsertOverrideRule": "Add a network override",
+  "network.deleteOverrideRule": "Delete a network override",
+  "network.clearOverrideRules": "Clear all network overrides",
+  // Storage
+  "storage.async.getAllKeys": "List saved storage keys",
+  "storage.async.multiGet": "Read saved values",
+  "storage.async.getItem": "Read saved value {key}",
+  "storage.async.setItem": "Save {key}",
+  "storage.async.removeItem": "Delete saved value {key}",
+  "storage.async.multiRemove": "Delete saved values",
+  "storage.async.multiSet": "Save several values",
+  "storage.async.clear": "Clear all saved app data",
+  "storage.clearAppStorage": "Clear all saved app data",
+  "storage.getEventDetail": "Inspect a storage change",
+  "storage.timeTravel.undo": "Undo a storage change",
+  "storage.timeTravel.jump": "Rewind storage to an earlier point",
+  "storage.mmkv.snapshot": "Read MMKV storage",
+  "storage.mmkv.get": "Read {key} from MMKV",
+  "storage.mmkv.set": "Save {key} to MMKV",
+  "storage.mmkv.remove": "Delete {key} from MMKV",
+  "storage.secure.keys": "List secure storage keys",
+  "storage.secure.snapshot": "Read secure storage",
+  "storage.secure.get": "Read secure value {key}",
+  "storage.secure.set": "Save secure value {key}",
+  "storage.secure.delete": "Delete secure value {key}",
+  // Console / env / events
+  "console.getSnapshot": "Read recent console logs",
+  "console.clearEntries": "Clear the console",
+  "env.getSnapshot": "Read environment variables",
+  "events.exportEvents": "Export recent events",
+  "events.setEnabledSources": "Change which events are recorded",
+  "sentry.getSnapshot": "Read what's been sent to Sentry",
+  "sentry.clearEnvelopes": "Clear captured Sentry traffic",
+  // Ask Buoy's own session
+  "ask-buoy.listChanges": "List Ask Buoy's changes",
+  "ask-buoy.undoAll": "Undo everything Ask Buoy changed",
+  // Screen
+  "highlight-updates.describeScreen": "Look at what's on screen",
+  "highlight-updates.tapElement": "Tap {query|testID|text}",
+  "highlight-updates.waitFor": "Wait for {query|testID}",
+  "highlight-updates.locateComponent": "Find {query} on screen",
+  "highlight-updates.getRenderDetail": "Inspect a component's renders",
+  "highlight-updates.beginMeasurement": "Start counting renders",
+  "highlight-updates.endMeasurement": "Stop counting renders",
+  "highlight-updates.clearRenderCounts": "Clear render counts",
+  "debug-borders.cycleMode": "Cycle debug borders",
+  "debug-borders.setMode": "Set debug borders to {mode}",
+  // Impersonate
+  "impersonate.searchUsers": "Search users for {query}",
+  "impersonate.startImpersonation": "Impersonate {user.name|user.email|user.id}",
+  "impersonate.stopImpersonation": "Stop impersonating",
+  "impersonate.pauseImpersonation": "Pause impersonation",
+  "impersonate.resumeImpersonation": "Resume impersonation",
+  "impersonate.clearHistory": "Clear impersonation history",
+  // App / time machine / scenarios / perf
+  "app.ping": "Check the app is responding",
+  "app.reloadApp": "Reload the app",
+  "time-machine.list": "List saved snapshots",
+  "time-machine.capture": "Save a snapshot {name}",
+  "time-machine.captureBaseline": "Save a baseline snapshot",
+  "time-machine.restore": "Restore snapshot {id}",
+  "time-machine.preview": "Preview snapshot {id}",
+  "time-machine.inspect": "Inspect snapshot {id}",
+  "time-machine.delete": "Delete snapshot {id}",
+  "time-machine.rename": "Rename a snapshot to {name}",
+  "time-machine.duplicate": "Duplicate snapshot {id}",
+  "time-machine.wipeAll": "Delete every snapshot",
+  "scenarios.listScenarios": "List scenarios",
+  "scenarios.getScenario": "Read scenario {id}",
+  "scenarios.run": "Run scenario {id}",
+  "scenarios.preview": "Preview scenario {id}",
+  "scenarios.deactivate": "Stop the active scenario",
+  "scenarios.delete": "Delete scenario {id}",
+  "perf-monitor.startRecording": "Start recording performance",
+  "perf-monitor.stopRecording": "Stop recording performance",
+  "perf-monitor.mark": "Mark {label} on the timeline",
+  "perf-monitor.loadReport": "Load a performance report",
+  "perf-monitor.clearAll": "Clear all performance reports",
+  "js-top.sample": "Sample the JS thread",
+  "js-top.getOriginDetail": "Inspect {key} on the JS thread",
+  // Assets / images
+  "assets.list": "List bundled assets",
+  "assets.getDetail": "Inspect an asset",
+  "assets.rescan": "Rescan bundled assets",
+  "assets.measureSizes": "Measure asset sizes",
+  "images.list": "List loaded images",
+  "images.getDetail": "Inspect an image",
+  "images.getCaptureStatus": "Check image capture",
+  "images.retry": "Retry loading an image",
+  "images.flash": "Flash an image on screen",
+  "images.setNetworkMode": "Set image network mode to {mode}",
+  "images.clearExpoCaches": "Clear the image caches",
+  // TV
+  "tv-remote.arm": "Start capturing remote presses",
+  "tv-remote.disarm": "Stop capturing remote presses",
+  "focus-inspector.rescan": "Rescan focusable elements",
+  "focus-inspector.focusElement": "Move focus to an element"
+};
+
+/** Boolean-switch actions read better as two sentences than one template. */
+const SWITCHES = {
+  "query.setOnline": {
+    param: "online",
+    on: "Put the app back online",
+    off: "Take the app offline"
+  },
+  "network.setOverridesEnabled": {
+    param: "enabled",
+    on: "Turn network overrides on",
+    off: "Turn network overrides off"
+  },
+  "network.setOverrideRuleEnabled": {
+    param: "enabled",
+    on: "Enable a network override",
+    off: "Disable a network override"
+  },
+  "highlight-updates.setEnabled": {
+    param: "enabled",
+    on: "Turn render highlighting on",
+    off: "Turn render highlighting off"
+  },
+  "perf-monitor.setEnabled": {
+    param: "enabled",
+    on: "Turn the perf monitor on",
+    off: "Turn the perf monitor off"
+  },
+  "js-top.setEnabled": {
+    param: "enabled",
+    on: "Turn JS Top on",
+    off: "Turn JS Top off"
+  },
+  "images.setBlankImages": {
+    param: "enabled",
+    on: "Blank out every image",
+    off: "Show images again"
+  },
+  "focus-inspector.setTracking": {
+    param: "enabled",
+    on: "Start tracking focus",
+    off: "Stop tracking focus"
+  },
+  "highlight-updates.setSilentTracking": {
+    param: "enabled",
+    on: "Track renders silently",
+    off: "Stop silent render tracking"
+  }
+};
+const TOOL_TITLES = Object.fromEntries(_catalog.CATALOG.map(t => [t.toolId, cleanTitle(t.title)]));
+
+/** "JS TOP (JS-thread task manager)" → "JS Top"; everything else as-is. */
+function cleanTitle(title) {
+  const base = title.replace(/\s*\(.*\)\s*$/, "").trim();
+  if (base !== base.toUpperCase() || base.length <= 3) return base;
+  return base.split(" ").map(w => w.length <= 2 ? w : w.charAt(0) + w.slice(1).toLowerCase()).join(" ");
+}
+
+/** The display name of a tool: "Routes", "Zustand", "React Query". */
+function toolTitle(toolId) {
+  return TOOL_TITLES[toolId] ?? humanise(toolId);
+}
+const MAX_VALUE = 48;
+function readPath(params, path) {
+  let cur = params;
+  for (const seg of path.split(".")) {
+    if (!cur || typeof cur !== "object") return undefined;
+    cur = cur[seg];
+  }
+  if (typeof cur === "string" && cur.trim()) return truncate(cur.trim());
+  if (typeof cur === "number") return String(cur);
+  return undefined;
+}
+function truncate(value) {
+  return value.length > MAX_VALUE ? `${value.slice(0, MAX_VALUE - 1)}…` : value;
+}
+function fill(template, params) {
+  return template.replace(/\{([^}]+)\}/g, (_, spec) => {
+    for (const path of spec.split("|")) {
+      const v = readPath(params, path.trim());
+      if (v !== undefined) return v;
+    }
+    return "";
+  }).replace(/\s{2,}/g, " ").trim();
+}
+
+/** `getStoreState` → "Get store state"; `async.getItem` → "Get item". */
+function humanise(action) {
+  const last = action.split(".").pop() ?? action;
+  const words = last.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/[-_]+/g, " ").toLowerCase();
+  return words.charAt(0).toUpperCase() + words.slice(1);
+}
+
+/** The one or two parameters a person would recognise in a fallback title. */
+function notableParams(params) {
+  const parts = [];
+  for (const key of ["key", "id", "url", "name", "route", "path", "userId", "storeId", "type"]) {
+    const v = readPath(params, key);
+    if (v !== undefined) parts.push(v);
+    if (parts.length >= 2) break;
+  }
+  return parts.join(", ");
+}
+
+/**
+ * A short, present-tense title for a call — the thing a transcript row, a
+ * ledger row and an approval card all show first.
+ */
+function titleCall(toolId, action, params) {
+  const key = `${toolId}.${action}`;
+  const sw = SWITCHES[key];
+  if (sw) return params[sw.param] === false ? sw.off : sw.on;
+  const phrase = PHRASES[key];
+  if (phrase) {
+    const out = fill(phrase, params);
+    if (out) return out;
+  }
+
+  // Generic verbs the whole suite shares.
+  const leaf = action.split(".").pop() ?? action;
+  if (leaf === "clearEvents") return `Clear the ${toolTitle(toolId)} timeline`;
+  if (leaf === "getSnapshot") return `Read ${toolTitle(toolId)}`;
+  const detail = notableParams(params);
+  const base = `${humanise(action)} in ${toolTitle(toolId)}`;
+  return detail ? `${base} (${detail})` : base;
+}
+//# sourceMappingURL=labels.js.map

package/lib/commonjs/policy/labels.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_catalog","require","PHRASES","SWITCHES","param","on","off","TOOL_TITLES","Object","fromEntries","CATALOG","map","t","toolId","cleanTitle","title","base","replace","trim","toUpperCase","length","split","w","charAt","slice","toLowerCase","join","toolTitle","humanise","MAX_VALUE","readPath","params","path","cur","seg","undefined","truncate","String","value","fill","template","_","spec","v","action","last","pop","words","notableParams","parts","key","push","titleCall","sw","phrase","out","leaf","detail"],"sourceRoot":"../../../src","sources":["policy/labels.ts"],"mappings":";;;;;;;;AAoBA,IAAAA,QAAA,GAAAC,OAAA;AApBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,MAAMC,OAA+B,GAAG;EACtC;EACA,0BAA0B,EAAE,4BAA4B;EACxD,8BAA8B,EAAE,0BAA0B;EAC1D,uBAAuB,EAAE,aAAa;EACtC,0BAA0B,EAAE,oBAAoB;EAChD,mCAAmC,EAAE,qCAAqC;EAC1E,8BAA8B,EAAE,2BAA2B;EAC3D,4BAA4B,EAAE,6BAA6B;EAE3D;EACA,oBAAoB,EAAE,uBAAuB;EAC7C,uBAAuB,EAAE,4BAA4B;EACrD,yBAAyB,EAAE,wBAAwB;EACnD,kBAAkB,EAAE,8BAA8B;EAClD,mBAAmB,EAAE,wCAAwC;EAC7D,gBAAgB,EAAE,sBAAsB;EACxC,uBAAuB,EAAE,wBAAwB;EACjD,gBAAgB,EAAE,wBAAwB;EAC1C,iBAAiB,EAAE,sBAAsB;EACzC,oBAAoB,EAAE,mBAAmB;EACzC,uBAAuB,EAAE,wBAAwB;EACjD,eAAe,EAAE,kBAAkB;EAEnC;EACA,mBAAmB,EAAE,qBAAqB;EAC1C,oBAAoB,EAAE,kCAAkC;EACxD,eAAe,EAAE,qBAAqB;EACtC,kBAAkB,EAAE,qBAAqB;EACzC,aAAa,EAAE,mBAAmB;EAClC,cAAc,EAAE,iCAAiC;EACjD,oBAAoB,EAAE,8CAA8C;EACpE,oBAAoB,EAAE,iCAAiC;EACvD,oBAAoB,EAAE,uCAAuC;EAC7D,sBAAsB,EAAE,mCAAmC;EAC3D,sBAAsB,EAAE,yCAAyC;EACjE,uBAAuB,EAAE,uBAAuB;EAChD,0BAA0B,EAAE,0BAA0B;EAEtD;EACA,qBAAqB,EAAE,8BAA8B;EACrD,0BAA0B,EAAE,uBAAuB;EACnD,sBAAsB,EAAE,uBAAuB;EAC/C,mBAAmB,EAAE,eAAe;EACpC,kBAAkB,EAAE,gBAAgB;EACpC,2BAA2B,EAAE,4BAA4B;EACzD,4BAA4B,EAAE,sBAAsB;EACpD,6BAA6B,EAAE,uBAAuB;EACtD,2BAA2B,EAAE,wBAAwB;EACrD,6BAA6B,EAAE,yBAAyB;EACxD,wBAAwB,EAAE,2BAA2B;EACrD,4BAA4B,EAAE,wBAAwB;EACtD,4BAA4B,EAAE,2BAA2B;EACzD,4BAA4B,EAAE,6BAA6B;EAE3D;EACA,0BAA0B,EAAE,yBAAyB;EACrD,wBAAwB,EAAE,mBAAmB;EAC7C,uBAAuB,EAAE,wBAAwB;EACjD,uBAAuB,EAAE,YAAY;EACrC,0BAA0B,EAAE,0BAA0B;EACtD,2BAA2B,EAAE,qBAAqB;EAClD,wBAAwB,EAAE,qBAAqB;EAC/C,qBAAqB,EAAE,0BAA0B;EACjD,yBAAyB,EAAE,0BAA0B;EACrD,wBAAwB,EAAE,0BAA0B;EACpD,yBAAyB,EAAE,uBAAuB;EAClD,yBAAyB,EAAE,oCAAoC;EAC/D,uBAAuB,EAAE,mBAAmB;EAC5C,kBAAkB,EAAE,sBAAsB;EAC1C,kBAAkB,EAAE,oBAAoB;EACxC,qBAAqB,EAAE,wBAAwB;EAC/C,qBAAqB,EAAE,0BAA0B;EACjD,yBAAyB,EAAE,qBAAqB;EAChD,oBAAoB,EAAE,yBAAyB;EAC/C,oBAAoB,EAAE,yBAAyB;EAC/C,uBAAuB,EAAE,2BAA2B;EAEpD;EACA,qBAAqB,EAAE,0BAA0B;EACjD,sBAAsB,EAAE,mBAAmB;EAC3C,iBAAiB,EAAE,4BAA4B;EAC/C,qBAAqB,EAAE,sBAAsB;EAC7C,0BAA0B,EAAE,kCAAkC;EAC9D,oBAAoB,EAAE,iCAAiC;EACvD,uBAAuB,EAAE,+BAA+B;EAExD;EACA,sBAAsB,EAAE,yBAAyB;EACjD,kBAAkB,EAAE,kCAAkC;EAEtD;EACA,kCAAkC,EAAE,0BAA0B;EAC9D,8BAA8B,EAAE,yBAAyB;EACzD,2BAA2B,EAAE,yBAAyB;EACtD,mCAAmC,EAAE,wBAAwB;EAC7D,mCAAmC,EAAE,+BAA+B;EACpE,oCAAoC,EAAE,wBAAwB;EAC9D,kCAAkC,EAAE,uBAAuB;EAC3D,qCAAqC,EAAE,qBAAqB;EAC5D,yBAAyB,EAAE,qBAAqB;EAChD,uBAAuB,EAAE,6BAA6B;EAEtD;EACA,yBAAyB,EAAE,0BAA0B;EACrD,gCAAgC,EAAE,4CAA4C;EAC9E,+BAA+B,EAAE,oBAAoB;EACrD,gCAAgC,EAAE,qBAAqB;EACvD,iCAAiC,EAAE,sBAAsB;EACzD,0BAA0B,EAAE,6BAA6B;EAEzD;EACA,UAAU,EAAE,6BAA6B;EACzC,eAAe,EAAE,gBAAgB;EACjC,mBAAmB,EAAE,sBAAsB;EAC3C,sBAAsB,EAAE,wBAAwB;EAChD,8BAA8B,EAAE,0BAA0B;EAC1D,sBAAsB,EAAE,uBAAuB;EAC/C,sBAAsB,EAAE,uBAAuB;EAC/C,sBAAsB,EAAE,uBAAuB;EAC/C,qBAAqB,EAAE,sBAAsB;EAC7C,qBAAqB,EAAE,6BAA6B;EACpD,wBAAwB,EAAE,yBAAyB;EACnD,sBAAsB,EAAE,uBAAuB;EAC/C,yBAAyB,EAAE,gBAAgB;EAC3C,uBAAuB,EAAE,oBAAoB;EAC7C,eAAe,EAAE,mBAAmB;EACpC,mBAAmB,EAAE,uBAAuB;EAC5C,sBAAsB,EAAE,0BAA0B;EAClD,kBAAkB,EAAE,sBAAsB;EAC1C,6BAA6B,EAAE,6BAA6B;EAC5D,4BAA4B,EAAE,4BAA4B;EAC1D,mBAAmB,EAAE,8BAA8B;EACnD,yBAAyB,EAAE,2BAA2B;EACtD,uBAAuB,EAAE,+BAA+B;EACxD,eAAe,EAAE,sBAAsB;EACvC,wBAAwB,EAAE,gCAAgC;EAE1D;EACA,aAAa,EAAE,qBAAqB;EACpC,kBAAkB,EAAE,kBAAkB;EACtC,eAAe,EAAE,uBAAuB;EACxC,qBAAqB,EAAE,qBAAqB;EAC5C,aAAa,EAAE,oBAAoB;EACnC,kBAAkB,EAAE,kBAAkB;EACtC,yBAAyB,EAAE,qBAAqB;EAChD,cAAc,EAAE,wBAAwB;EACxC,cAAc,EAAE,0BAA0B;EAC1C,uBAAuB,EAAE,kCAAkC;EAC3D,wBAAwB,EAAE,wBAAwB;EAElD;EACA,eAAe,EAAE,gCAAgC;EACjD,kBAAkB,EAAE,+BAA+B;EACnD,wBAAwB,EAAE,2BAA2B;EACrD,8BAA8B,EAAE;AAClC,CAAC;;AAED;AACA,MAAMC,QAAoE,GAAG;EAC3E,iBAAiB,EAAE;IAAEC,KAAK,EAAE,QAAQ;IAAEC,EAAE,EAAE,yBAAyB;IAAEC,GAAG,EAAE;EAAuB,CAAC;EAClG,6BAA6B,EAAE;IAAEF,KAAK,EAAE,SAAS;IAAEC,EAAE,EAAE,2BAA2B;IAAEC,GAAG,EAAE;EAA6B,CAAC;EACvH,gCAAgC,EAAE;IAAEF,KAAK,EAAE,SAAS;IAAEC,EAAE,EAAE,2BAA2B;IAAEC,GAAG,EAAE;EAA6B,CAAC;EAC1H,8BAA8B,EAAE;IAAEF,KAAK,EAAE,SAAS;IAAEC,EAAE,EAAE,6BAA6B;IAAEC,GAAG,EAAE;EAA+B,CAAC;EAC5H,yBAAyB,EAAE;IAAEF,KAAK,EAAE,SAAS;IAAEC,EAAE,EAAE,0BAA0B;IAAEC,GAAG,EAAE;EAA4B,CAAC;EACjH,mBAAmB,EAAE;IAAEF,KAAK,EAAE,SAAS;IAAEC,EAAE,EAAE,gBAAgB;IAAEC,GAAG,EAAE;EAAkB,CAAC;EACvF,uBAAuB,EAAE;IAAEF,KAAK,EAAE,SAAS;IAAEC,EAAE,EAAE,uBAAuB;IAAEC,GAAG,EAAE;EAAoB,CAAC;EACpG,6BAA6B,EAAE;IAAEF,KAAK,EAAE,SAAS;IAAEC,EAAE,EAAE,sBAAsB;IAAEC,GAAG,EAAE;EAAsB,CAAC;EAC3G,qCAAqC,EAAE;IAAEF,KAAK,EAAE,SAAS;IAAEC,EAAE,EAAE,wBAAwB;IAAEC,GAAG,EAAE;EAA8B;AAC9H,CAAC;AAED,MAAMC,WAAmC,GAAGC,MAAM,CAACC,WAAW,CAC5DC,gBAAO,CAACC,GAAG,CAAEC,CAAC,IAAK,CAACA,CAAC,CAACC,MAAM,EAAEC,UAAU,CAACF,CAAC,CAACG,KAAK,CAAC,CAAC,CACpD,CAAC;;AAED;AACA,SAASD,UAAUA,CAACC,KAAa,EAAU;EACzC,MAAMC,IAAI,GAAGD,KAAK,CAACE,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAACC,IAAI,CAAC,CAAC;EACtD,IAAIF,IAAI,KAAKA,IAAI,CAACG,WAAW,CAAC,CAAC,IAAIH,IAAI,CAACI,MAAM,IAAI,CAAC,EAAE,OAAOJ,IAAI;EAChE,OAAOA,IAAI,CACRK,KAAK,CAAC,GAAG,CAAC,CACVV,GAAG,CAAEW,CAAC,IAAMA,CAAC,CAACF,MAAM,IAAI,CAAC,GAAGE,CAAC,GAAGA,CAAC,CAACC,MAAM,CAAC,CAAC,CAAC,GAAGD,CAAC,CAACE,KAAK,CAAC,CAAC,CAAC,CAACC,WAAW,CAAC,CAAE,CAAC,CACxEC,IAAI,CAAC,GAAG,CAAC;AACd;;AAEA;AACO,SAASC,SAASA,CAACd,MAAc,EAAU;EAChD,OAAON,WAAW,CAACM,MAAM,CAAC,IAAIe,QAAQ,CAACf,MAAM,CAAC;AAChD;AAEA,MAAMgB,SAAS,GAAG,EAAE;AAEpB,SAASC,QAAQA,CAACC,MAA+B,EAAEC,IAAY,EAAsB;EACnF,IAAIC,GAAY,GAAGF,MAAM;EACzB,KAAK,MAAMG,GAAG,IAAIF,IAAI,CAACX,KAAK,CAAC,GAAG,CAAC,EAAE;IACjC,IAAI,CAACY,GAAG,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE,OAAOE,SAAS;IACrDF,GAAG,GAAIA,GAAG,CAA6BC,GAAG,CAAC;EAC7C;EACA,IAAI,OAAOD,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACf,IAAI,CAAC,CAAC,EAAE,OAAOkB,QAAQ,CAACH,GAAG,CAACf,IAAI,CAAC,CAAC,CAAC;EACtE,IAAI,OAAOe,GAAG,KAAK,QAAQ,EAAE,OAAOI,MAAM,CAACJ,GAAG,CAAC;EAC/C,OAAOE,SAAS;AAClB;AAEA,SAASC,QAAQA,CAACE,KAAa,EAAU;EACvC,OAAOA,KAAK,CAAClB,MAAM,GAAGS,SAAS,GAAG,GAAGS,KAAK,CAACd,KAAK,CAAC,CAAC,EAAEK,SAAS,GAAG,CAAC,CAAC,GAAG,GAAGS,KAAK;AAC/E;AAEA,SAASC,IAAIA,CAACC,QAAgB,EAAET,MAA+B,EAAU;EACvE,OAAOS,QAAQ,CACZvB,OAAO,CAAC,cAAc,EAAE,CAACwB,CAAC,EAAEC,IAAY,KAAK;IAC5C,KAAK,MAAMV,IAAI,IAAIU,IAAI,CAACrB,KAAK,CAAC,GAAG,CAAC,EAAE;MAClC,MAAMsB,CAAC,GAAGb,QAAQ,CAACC,MAAM,EAAEC,IAAI,CAACd,IAAI,CAAC,CAAC,CAAC;MACvC,IAAIyB,CAAC,KAAKR,SAAS,EAAE,OAAOQ,CAAC;IAC/B;IACA,OAAO,EAAE;EACX,CAAC,CAAC,CACD1B,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CACvBC,IAAI,CAAC,CAAC;AACX;;AAEA;AACO,SAASU,QAAQA,CAACgB,MAAc,EAAU;EAC/C,MAAMC,IAAI,GAAGD,MAAM,CAACvB,KAAK,CAAC,GAAG,CAAC,CAACyB,GAAG,CAAC,CAAC,IAAIF,MAAM;EAC9C,MAAMG,KAAK,GAAGF,IAAI,CACf5B,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CACtCA,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CACtBQ,WAAW,CAAC,CAAC;EAChB,OAAOsB,KAAK,CAACxB,MAAM,CAAC,CAAC,CAAC,CAACJ,WAAW,CAAC,CAAC,GAAG4B,KAAK,CAACvB,KAAK,CAAC,CAAC,CAAC;AACvD;;AAEA;AACA,SAASwB,aAAaA,CAACjB,MAA+B,EAAU;EAC9D,MAAMkB,KAAe,GAAG,EAAE;EAC1B,KAAK,MAAMC,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;IAC5F,MAAMP,CAAC,GAAGb,QAAQ,CAACC,MAAM,EAAEmB,GAAG,CAAC;IAC/B,IAAIP,CAAC,KAAKR,SAAS,EAAEc,KAAK,CAACE,IAAI,CAACR,CAAC,CAAC;IAClC,IAAIM,KAAK,CAAC7B,MAAM,IAAI,CAAC,EAAE;EACzB;EACA,OAAO6B,KAAK,CAACvB,IAAI,CAAC,IAAI,CAAC;AACzB;;AAEA;AACA;AACA;AACA;AACO,SAAS0B,SAASA,CACvBvC,MAAc,EACd+B,MAAc,EACdb,MAA+B,EACvB;EACR,MAAMmB,GAAG,GAAG,GAAGrC,MAAM,IAAI+B,MAAM,EAAE;EAEjC,MAAMS,EAAE,GAAGlD,QAAQ,CAAC+C,GAAG,CAAC;EACxB,IAAIG,EAAE,EAAE,OAAOtB,MAAM,CAACsB,EAAE,CAACjD,KAAK,CAAC,KAAK,KAAK,GAAGiD,EAAE,CAAC/C,GAAG,GAAG+C,EAAE,CAAChD,EAAE;EAE1D,MAAMiD,MAAM,GAAGpD,OAAO,CAACgD,GAAG,CAAC;EAC3B,IAAII,MAAM,EAAE;IACV,MAAMC,GAAG,GAAGhB,IAAI,CAACe,MAAM,EAAEvB,MAAM,CAAC;IAChC,IAAIwB,GAAG,EAAE,OAAOA,GAAG;EACrB;;EAEA;EACA,MAAMC,IAAI,GAAGZ,MAAM,CAACvB,KAAK,CAAC,GAAG,CAAC,CAACyB,GAAG,CAAC,CAAC,IAAIF,MAAM;EAC9C,IAAIY,IAAI,KAAK,aAAa,EAAE,OAAO,aAAa7B,SAAS,CAACd,MAAM,CAAC,WAAW;EAC5E,IAAI2C,IAAI,KAAK,aAAa,EAAE,OAAO,QAAQ7B,SAAS,CAACd,MAAM,CAAC,EAAE;EAE9D,MAAM4C,MAAM,GAAGT,aAAa,CAACjB,MAAM,CAAC;EACpC,MAAMf,IAAI,GAAG,GAAGY,QAAQ,CAACgB,MAAM,CAAC,OAAOjB,SAAS,CAACd,MAAM,CAAC,EAAE;EAC1D,OAAO4C,MAAM,GAAG,GAAGzC,IAAI,KAAKyC,MAAM,GAAG,GAAGzC,IAAI;AAC9C","ignoreList":[]}

package/lib/commonjs/policy/policy.js

@@ -0,0 +1,143 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.DEFAULT_REQUIRE_APPROVAL = void 0;
+exports.decide = decide;
+exports.describeCall = describeCall;
+exports.resolveRequireApproval = resolveRequireApproval;
+var _labels = require("./labels");
+/**
+ * What the agent is allowed to do, decided before dispatch.
+ *
+ * The default: reads and writes auto-run — the banner plus the effect ledger
+ * keep the user in control — but DESTRUCTIVE actions need a human tap unless
+ * the app explicitly passes `requireApproval: []`. Auto-running wipes proved
+ * too sharp in live evals (five destructive calls in one confused turn), and
+ * the approval gate is also the blast-radius control if injected text in a
+ * tool result ever steers the model.
+ *
+ * The one thing the policy layer will not do is let the agent report success
+ * for an action that cannot work in this build. Several Buoy actions return
+ * `{ok:true}` and do nothing once `__DEV__` is false — `upsertOverrideRule`
+ * persists a rule the engine never consults — and a QA tester who files a bug
+ * against data that was never applied is a worse outcome than no agent at all.
+ * So `release !== "works"` is refused BEFORE dispatch, with the reason handed
+ * back to the model as the tool result, and `unknown` fails closed.
+ */
+
+/**
+ * One allow rule. A call is permitted when it matches ANY rule; every field a
+ * rule specifies must match. So a support seat that may impersonate and look
+ * at anything, and nothing else, is two rules:
+ *
+ *   allow: [{ effect: "read" }, { toolId: "impersonate" }]
+ */
+
+/** The one place the approval default lives; `decide` and the system prompt both resolve through it. */
+const DEFAULT_REQUIRE_APPROVAL = exports.DEFAULT_REQUIRE_APPROVAL = ["destructive"];
+function resolveRequireApproval(policy) {
+  return policy.requireApproval ?? DEFAULT_REQUIRE_APPROVAL;
+}
+/** SecureStore VALUE reads — gated behind `policy.secureReads`. Names stay open. */
+const SECURE_VALUE_READS = new Set(["secure.get", "secure.snapshot"]);
+function decide({
+  descriptor,
+  toolId,
+  policy,
+  isRelease
+}) {
+  for (const rule of policy.deny ?? []) {
+    if (rule.toolId === toolId && (!rule.action || rule.action === descriptor.action)) {
+      return {
+        verdict: "refuse",
+        reason: "This action is disabled in this app."
+      };
+    }
+  }
+  if (isRelease && descriptor.release !== "works") {
+    return {
+      verdict: "refuse",
+      reason: releaseRefusal(descriptor)
+    };
+  }
+  if (policy.allow) {
+    const permitted = policy.allow.some(rule => (rule.toolId === undefined || rule.toolId === toolId) && (rule.action === undefined || rule.action === descriptor.action) && (rule.effect === undefined || rule.effect === descriptor.effect));
+    if (!permitted) {
+      return {
+        verdict: "refuse",
+        reason: "This action isn't on Ask Buoy's allow list in this app."
+      };
+    }
+  }
+  if (toolId === "storage" && SECURE_VALUE_READS.has(descriptor.action) && policy.secureReads !== true) {
+    return {
+      verdict: "refuse",
+      reason: "Reading SecureStore values is off by default — they are credentials, and they would be sent to the configured model endpoint. Key names are still readable via secure.keys; the app can opt in with policy.secureReads: true."
+    };
+  }
+  if (descriptor.effect !== "read" && policy.readOnly) {
+    return {
+      verdict: "refuse",
+      reason: "Ask Buoy is in read-only mode in this app, so it can look at state but not change it."
+    };
+  }
+  for (const rule of policy.requireApprovalFor ?? []) {
+    if (rule.toolId === toolId && (!rule.action || rule.action === descriptor.action)) {
+      return {
+        verdict: "needs-approval",
+        reason: "This app asks for a tap before this particular action runs."
+      };
+    }
+  }
+  if (descriptor.effect === "read") return {
+    verdict: "allow"
+  };
+  if (resolveRequireApproval(policy).includes(descriptor.effect)) {
+    return {
+      verdict: "needs-approval",
+      reason: descriptor.effect === "destructive" ? "This will wipe or reset something and can't be undone." : "This will change the app's state."
+    };
+  }
+  return {
+    verdict: "allow"
+  };
+}
+
+/**
+ * The message the model gets back instead of a result. Written to be relayed
+ * to a non-developer, because it usually will be.
+ */
+function releaseRefusal(d) {
+  const base = `\`${d.action}\` does not work in this build (a release build).`;
+  switch (d.release) {
+    case "noop":
+      return `${base} It would report success and change nothing, so Buoy refused to run it rather than let you be told it worked. ${d.releaseNote ?? ""}`.trim();
+    case "empty":
+      return `${base} It relies on React's developer hook, which React Native only installs in development builds, so it can only ever return empty results here. ${d.releaseNote ?? ""}`.trim();
+    case "throws":
+      return `${base} It is explicitly disabled outside development. ${d.releaseNote ?? ""}`.trim();
+    default:
+      return `${base} Buoy could not confirm it behaves correctly outside development, so it refused rather than guess.`;
+  }
+}
+
+/**
+ * A short, domain-flavoured title for what a call will do — the first line of
+ * a transcript row, a ledger row and an approval card.
+ *
+ * The raw tool payload is deliberately NOT what gets shown. A QA person cannot
+ * evaluate `redux_dispatch({type:'SET_ENTITLEMENTS', payload:{...}})`, and an
+ * approval prompt nobody can read is a rubber stamp, which is worse than no
+ * prompt because it looks like oversight.
+ *
+ * Nor is the catalog `summary`: that sentence is written for the model and
+ * ran to three lines in a phone-width row before it was cut off. The phrasing
+ * lives in ./labels.ts; the catalog sentence travels separately on the event
+ * as `description`, for a row the user chooses to expand.
+ */
+function describeCall(toolId, descriptor, params) {
+  return (0, _labels.titleCall)(toolId, descriptor.action, params);
+}
+//# sourceMappingURL=policy.js.map

package/lib/commonjs/policy/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_labels","require","DEFAULT_REQUIRE_APPROVAL","exports","resolveRequireApproval","policy","requireApproval","SECURE_VALUE_READS","Set","decide","descriptor","toolId","isRelease","rule","deny","action","verdict","reason","release","releaseRefusal","allow","permitted","some","undefined","effect","has","secureReads","readOnly","requireApprovalFor","includes","d","base","releaseNote","trim","describeCall","params","titleCall"],"sourceRoot":"../../../src","sources":["policy/policy.ts"],"mappings":";;;;;;;;;AAmBA,IAAAA,OAAA,GAAAC,OAAA;AAnBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;;AAyCA;AACO,MAAMC,wBAAwC,GAAAC,OAAA,CAAAD,wBAAA,GAAG,CAAC,aAAa,CAAC;AAEhE,SAASE,sBAAsBA,CAACC,MAAqB,EAAkB;EAC5E,OAAOA,MAAM,CAACC,eAAe,IAAIJ,wBAAwB;AAC3D;AAeA;AACA,MAAMK,kBAAkB,GAAG,IAAIC,GAAG,CAAC,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAE9D,SAASC,MAAMA,CAAC;EACrBC,UAAU;EACVC,MAAM;EACNN,MAAM;EACNO;AACW,CAAC,EAAY;EACxB,KAAK,MAAMC,IAAI,IAAIR,MAAM,CAACS,IAAI,IAAI,EAAE,EAAE;IACpC,IAAID,IAAI,CAACF,MAAM,KAAKA,MAAM,KAAK,CAACE,IAAI,CAACE,MAAM,IAAIF,IAAI,CAACE,MAAM,KAAKL,UAAU,CAACK,MAAM,CAAC,EAAE;MACjF,OAAO;QAAEC,OAAO,EAAE,QAAQ;QAAEC,MAAM,EAAE;MAAuC,CAAC;IAC9E;EACF;EAEA,IAAIL,SAAS,IAAIF,UAAU,CAACQ,OAAO,KAAK,OAAO,EAAE;IAC/C,OAAO;MACLF,OAAO,EAAE,QAAQ;MACjBC,MAAM,EAAEE,cAAc,CAACT,UAAU;IACnC,CAAC;EACH;EAEA,IAAIL,MAAM,CAACe,KAAK,EAAE;IAChB,MAAMC,SAAS,GAAGhB,MAAM,CAACe,KAAK,CAACE,IAAI,CAChCT,IAAI,IACH,CAACA,IAAI,CAACF,MAAM,KAAKY,SAAS,IAAIV,IAAI,CAACF,MAAM,KAAKA,MAAM,MACnDE,IAAI,CAACE,MAAM,KAAKQ,SAAS,IAAIV,IAAI,CAACE,MAAM,KAAKL,UAAU,CAACK,MAAM,CAAC,KAC/DF,IAAI,CAACW,MAAM,KAAKD,SAAS,IAAIV,IAAI,CAACW,MAAM,KAAKd,UAAU,CAACc,MAAM,CACnE,CAAC;IACD,IAAI,CAACH,SAAS,EAAE;MACd,OAAO;QACLL,OAAO,EAAE,QAAQ;QACjBC,MAAM,EAAE;MACV,CAAC;IACH;EACF;EAEA,IACEN,MAAM,KAAK,SAAS,IACpBJ,kBAAkB,CAACkB,GAAG,CAACf,UAAU,CAACK,MAAM,CAAC,IACzCV,MAAM,CAACqB,WAAW,KAAK,IAAI,EAC3B;IACA,OAAO;MACLV,OAAO,EAAE,QAAQ;MACjBC,MAAM,EACJ;IACJ,CAAC;EACH;EAEA,IAAIP,UAAU,CAACc,MAAM,KAAK,MAAM,IAAInB,MAAM,CAACsB,QAAQ,EAAE;IACnD,OAAO;MACLX,OAAO,EAAE,QAAQ;MACjBC,MAAM,EACJ;IACJ,CAAC;EACH;EAEA,KAAK,MAAMJ,IAAI,IAAIR,MAAM,CAACuB,kBAAkB,IAAI,EAAE,EAAE;IAClD,IAAIf,IAAI,CAACF,MAAM,KAAKA,MAAM,KAAK,CAACE,IAAI,CAACE,MAAM,IAAIF,IAAI,CAACE,MAAM,KAAKL,UAAU,CAACK,MAAM,CAAC,EAAE;MACjF,OAAO;QACLC,OAAO,EAAE,gBAAgB;QACzBC,MAAM,EAAE;MACV,CAAC;IACH;EACF;EAEA,IAAIP,UAAU,CAACc,MAAM,KAAK,MAAM,EAAE,OAAO;IAAER,OAAO,EAAE;EAAQ,CAAC;EAE7D,IAAIZ,sBAAsB,CAACC,MAAM,CAAC,CAACwB,QAAQ,CAACnB,UAAU,CAACc,MAAM,CAAC,EAAE;IAC9D,OAAO;MACLR,OAAO,EAAE,gBAAgB;MACzBC,MAAM,EACJP,UAAU,CAACc,MAAM,KAAK,aAAa,GAC/B,wDAAwD,GACxD;IACR,CAAC;EACH;EAEA,OAAO;IAAER,OAAO,EAAE;EAAQ,CAAC;AAC7B;;AAEA;AACA;AACA;AACA;AACA,SAASG,cAAcA,CAACW,CAAmB,EAAU;EACnD,MAAMC,IAAI,GAAG,KAAKD,CAAC,CAACf,MAAM,mDAAmD;EAC7E,QAAQe,CAAC,CAACZ,OAAO;IACf,KAAK,MAAM;MACT,OAAO,GAAGa,IAAI,iHAAiHD,CAAC,CAACE,WAAW,IAAI,EAAE,EAAE,CAACC,IAAI,CAAC,CAAC;IAC7J,KAAK,OAAO;MACV,OAAO,GAAGF,IAAI,gJAAgJD,CAAC,CAACE,WAAW,IAAI,EAAE,EAAE,CAACC,IAAI,CAAC,CAAC;IAC5L,KAAK,QAAQ;MACX,OAAO,GAAGF,IAAI,mDAAmDD,CAAC,CAACE,WAAW,IAAI,EAAE,EAAE,CAACC,IAAI,CAAC,CAAC;IAC/F;MACE,OAAO,GAAGF,IAAI,oGAAoG;EACtH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,YAAYA,CAC1BvB,MAAc,EACdD,UAA4B,EAC5ByB,MAA+B,EACvB;EACR,OAAO,IAAAC,iBAAS,EAACzB,MAAM,EAAED,UAAU,CAACK,MAAM,EAAEoB,MAAM,CAAC;AACrD","ignoreList":[]}

package/lib/commonjs/policy/redact.js

@@ -0,0 +1,135 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.isSelfTraffic = isSelfTraffic;
+exports.redact = redact;
+exports.registerSelfEndpoint = registerSelfEndpoint;
+exports.stripSelfTraffic = stripSelfTraffic;
+/**
+ * Scrub tool results before they leave the device.
+ *
+ * Two separate reasons, and the second is the one people forget:
+ *
+ * 1. EGRESS. Tool results go to the customer's own model endpoint. That is
+ *    their data boundary, not ours — but a response body carrying an
+ *    `Authorization` header or a Buoy `licenseKey` is a credential, and
+ *    credentials do not belong in a chat transcript that may be retained for
+ *    30 days for abuse monitoring.
+ * 2. SELF-INJECTION. Buoy's own network interceptor captures the agent's
+ *    requests to the model endpoint. Without exclusion, the model reads back
+ *    its own request headers — including whatever the host app's `headers()`
+ *    returned — out of `network.getRequests`. That is a credential leak and a
+ *    prompt-injection channel in one call.
+ */
+
+const SECRET_KEYS = ["authorization", "cookie", "set-cookie", "x-api-key", "api-key", "apikey", "proxy-authorization", "x-auth-token", "licensekey", "license_key", "refresh_token", "access_token", "id_token", "password", "secret", "client_secret"];
+const REDACTED = "[redacted by Buoy]";
+
+/**
+ * Credential SHAPES, for values whose key name gives nothing away — a JWT
+ * stored under `session`, a Bearer header quoted inside a response body. The
+ * key-name check alone let those through whole. Same shapes the broker wire
+ * scrubber uses; duplicated here because agent-core cannot depend on ask-buoy.
+ */
+const SECRET_VALUE_PATTERNS = [{
+  re: /\bBearer\s+[A-Za-z0-9._~+/-]{12,}=*/gi,
+  label: "[bearer token removed]"
+}, {
+  re: /\beyJ[A-Za-z0-9._-]{20,}/g,
+  label: "[jwt removed]"
+}, {
+  re: /\bsk-[A-Za-z0-9_-]{16,}/g,
+  label: "[api key removed]"
+}, {
+  re: /\bBUOY-[A-Z0-9-]{8,}/g,
+  label: "[license key removed]"
+}, {
+  re: /("|')?(authorization|x-api-key|api[_-]?key|password|secret|access_token|refresh_token)\1?\s*[:=]\s*("|')?[^\s"',}]{6,}/gi,
+  label: "[credential removed]"
+}];
+function scrubString(s) {
+  let out = s;
+  for (const {
+    re,
+    label
+  } of SECRET_VALUE_PATTERNS) {
+    out = out.replace(re, label);
+  }
+  return out;
+}
+function isSecretKey(key) {
+  const k = key.toLowerCase();
+  return SECRET_KEYS.some(s => k === s || k.endsWith(s) || k.includes(s));
+}
+
+/**
+ * Deep-redact by key name AND by value shape. Depth-limited because tool
+ * results can be deeply nested state trees and a runaway walk on a megabyte
+ * payload is a frame drop on the JS thread the app is also using.
+ */
+function redact(value, depth = 0) {
+  if (typeof value === "string") return scrubString(value);
+  if (depth > 12 || value === null || typeof value !== "object") return value;
+  if (Array.isArray(value)) {
+    return value.map(v => redact(v, depth + 1));
+  }
+  const out = {};
+  for (const [key, v] of Object.entries(value)) {
+    out[key] = isSecretKey(key) ? REDACTED : redact(v, depth + 1);
+  }
+  return out;
+}
+
+/**
+ * Hosts that must never appear in a tool result, because they are the agent's
+ * own traffic. Registered by the runtime from the configured endpoint.
+ */
+const selfHosts = new Set();
+function registerSelfEndpoint(endpoint) {
+  try {
+    // No URL polyfill assumptions — a plain parse is enough for a host match.
+    const match = /^[a-z]+:\/\/([^/?#]+)/i.exec(endpoint);
+    if (match?.[1]) selfHosts.add(match[1].toLowerCase());
+  } catch {
+    /* an unparseable endpoint just means no exclusion */
+  }
+}
+function isSelfTraffic(url) {
+  if (typeof url !== "string") return false;
+  const lower = url.toLowerCase();
+  for (const host of selfHosts) {
+    if (lower.includes(host)) return true;
+  }
+  return false;
+}
+function hasSelfUrl(item) {
+  if (!item || typeof item !== "object") return false;
+  const rec = item;
+  return isSelfTraffic(rec.url ?? rec.uri ?? rec.href);
+}
+
+/**
+ * Drop the agent's own requests out of a network-shaped result before the
+ * model sees them.
+ *
+ * WALKS INTO OBJECTS, not just top-level arrays. A network reader returns
+ * `{ totalCaptured, requests: [...] }`, not a bare array, and a version of
+ * this that only handled the bare array quietly did nothing — the agent's own
+ * POST to the model endpoint, headers and all, came straight back to it out
+ * of the network read. Depth-limited for the same reason `redact` is: this
+ * runs on the JS thread the app is drawing on.
+ */
+function stripSelfTraffic(value, depth = 0) {
+  if (depth > 6 || value === null || typeof value !== "object") return value;
+  if (Array.isArray(value)) {
+    return value.filter(item => !hasSelfUrl(item)).map(item => stripSelfTraffic(item, depth + 1));
+  }
+  const out = {};
+  for (const [key, v] of Object.entries(value)) {
+    out[key] = stripSelfTraffic(v, depth + 1);
+  }
+  return out;
+}
+//# sourceMappingURL=redact.js.map

package/lib/commonjs/policy/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["SECRET_KEYS","REDACTED","SECRET_VALUE_PATTERNS","re","label","scrubString","s","out","replace","isSecretKey","key","k","toLowerCase","some","endsWith","includes","redact","value","depth","Array","isArray","map","v","Object","entries","selfHosts","Set","registerSelfEndpoint","endpoint","match","exec","add","isSelfTraffic","url","lower","host","hasSelfUrl","item","rec","uri","href","stripSelfTraffic","filter"],"sourceRoot":"../../../src","sources":["policy/redact.ts"],"mappings":";;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,MAAMA,WAAW,GAAG,CAClB,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,SAAS,EACT,QAAQ,EACR,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,eAAe,EACf,cAAc,EACd,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,CAChB;AAED,MAAMC,QAAQ,GAAG,oBAAoB;;AAErC;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,qBAAsD,GAAG,CAC7D;EAAEC,EAAE,EAAE,uCAAuC;EAAEC,KAAK,EAAE;AAAyB,CAAC,EAChF;EAAED,EAAE,EAAE,2BAA2B;EAAEC,KAAK,EAAE;AAAgB,CAAC,EAC3D;EAAED,EAAE,EAAE,0BAA0B;EAAEC,KAAK,EAAE;AAAoB,CAAC,EAC9D;EAAED,EAAE,EAAE,uBAAuB;EAAEC,KAAK,EAAE;AAAwB,CAAC,EAC/D;EACED,EAAE,EAAE,0HAA0H;EAC9HC,KAAK,EAAE;AACT,CAAC,CACF;AAED,SAASC,WAAWA,CAACC,CAAS,EAAU;EACtC,IAAIC,GAAG,GAAGD,CAAC;EACX,KAAK,MAAM;IAAEH,EAAE;IAAEC;EAAM,CAAC,IAAIF,qBAAqB,EAAE;IACjDK,GAAG,GAAGA,GAAG,CAACC,OAAO,CAACL,EAAE,EAAEC,KAAK,CAAC;EAC9B;EACA,OAAOG,GAAG;AACZ;AAEA,SAASE,WAAWA,CAACC,GAAW,EAAW;EACzC,MAAMC,CAAC,GAAGD,GAAG,CAACE,WAAW,CAAC,CAAC;EAC3B,OAAOZ,WAAW,CAACa,IAAI,CAAEP,CAAC,IAAKK,CAAC,KAAKL,CAAC,IAAIK,CAAC,CAACG,QAAQ,CAACR,CAAC,CAAC,IAAIK,CAAC,CAACI,QAAQ,CAACT,CAAC,CAAC,CAAC;AAC3E;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASU,MAAMA,CAACC,KAAc,EAAEC,KAAK,GAAG,CAAC,EAAW;EACzD,IAAI,OAAOD,KAAK,KAAK,QAAQ,EAAE,OAAOZ,WAAW,CAACY,KAAK,CAAC;EACxD,IAAIC,KAAK,GAAG,EAAE,IAAID,KAAK,KAAK,IAAI,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE,OAAOA,KAAK;EAE3E,IAAIE,KAAK,CAACC,OAAO,CAACH,KAAK,CAAC,EAAE;IACxB,OAAOA,KAAK,CAACI,GAAG,CAAEC,CAAC,IAAKN,MAAM,CAACM,CAAC,EAAEJ,KAAK,GAAG,CAAC,CAAC,CAAC;EAC/C;EAEA,MAAMX,GAA4B,GAAG,CAAC,CAAC;EACvC,KAAK,MAAM,CAACG,GAAG,EAAEY,CAAC,CAAC,IAAIC,MAAM,CAACC,OAAO,CAACP,KAAgC,CAAC,EAAE;IACvEV,GAAG,CAACG,GAAG,CAAC,GAAGD,WAAW,CAACC,GAAG,CAAC,GAAGT,QAAQ,GAAGe,MAAM,CAACM,CAAC,EAAEJ,KAAK,GAAG,CAAC,CAAC;EAC/D;EACA,OAAOX,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA,MAAMkB,SAAS,GAAG,IAAIC,GAAG,CAAS,CAAC;AAE5B,SAASC,oBAAoBA,CAACC,QAAgB,EAAQ;EAC3D,IAAI;IACF;IACA,MAAMC,KAAK,GAAG,wBAAwB,CAACC,IAAI,CAACF,QAAQ,CAAC;IACrD,IAAIC,KAAK,GAAG,CAAC,CAAC,EAAEJ,SAAS,CAACM,GAAG,CAACF,KAAK,CAAC,CAAC,CAAC,CAACjB,WAAW,CAAC,CAAC,CAAC;EACvD,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ;AAEO,SAASoB,aAAaA,CAACC,GAAY,EAAW;EACnD,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE,OAAO,KAAK;EACzC,MAAMC,KAAK,GAAGD,GAAG,CAACrB,WAAW,CAAC,CAAC;EAC/B,KAAK,MAAMuB,IAAI,IAAIV,SAAS,EAAE;IAC5B,IAAIS,KAAK,CAACnB,QAAQ,CAACoB,IAAI,CAAC,EAAE,OAAO,IAAI;EACvC;EACA,OAAO,KAAK;AACd;AAEA,SAASC,UAAUA,CAACC,IAAa,EAAW;EAC1C,IAAI,CAACA,IAAI,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE,OAAO,KAAK;EACnD,MAAMC,GAAG,GAAGD,IAA+B;EAC3C,OAAOL,aAAa,CAACM,GAAG,CAACL,GAAG,IAAIK,GAAG,CAACC,GAAG,IAAID,GAAG,CAACE,IAAI,CAAC;AACtD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,gBAAgBA,CAACxB,KAAc,EAAEC,KAAK,GAAG,CAAC,EAAW;EACnE,IAAIA,KAAK,GAAG,CAAC,IAAID,KAAK,KAAK,IAAI,IAAI,OAAOA,KAAK,KAAK,QAAQ,EAAE,OAAOA,KAAK;EAE1E,IAAIE,KAAK,CAACC,OAAO,CAACH,KAAK,CAAC,EAAE;IACxB,OAAOA,KAAK,CAACyB,MAAM,CAAEL,IAAI,IAAK,CAACD,UAAU,CAACC,IAAI,CAAC,CAAC,CAAChB,GAAG,CAAEgB,IAAI,IAAKI,gBAAgB,CAACJ,IAAI,EAAEnB,KAAK,GAAG,CAAC,CAAC,CAAC;EACnG;EAEA,MAAMX,GAA4B,GAAG,CAAC,CAAC;EACvC,KAAK,MAAM,CAACG,GAAG,EAAEY,CAAC,CAAC,IAAIC,MAAM,CAACC,OAAO,CAACP,KAAgC,CAAC,EAAE;IACvEV,GAAG,CAACG,GAAG,CAAC,GAAG+B,gBAAgB,CAACnB,CAAC,EAAEJ,KAAK,GAAG,CAAC,CAAC;EAC3C;EACA,OAAOX,GAAG;AACZ","ignoreList":[]}