@buoy-gg/agent-core 7.0.34 → 7.0.36

package/lib/typescript/engine/runAgentTurn.d.ts

@@ -20,10 +20,46 @@ import type { DispatchFn, SnapshotFn, ToolDescriptor } from "../types";
 import type { AgentMessage, Provider } from "../providers/types";
 import { EffectLedger } from "../effects/ledger";
 import { type AskBuoyPolicy } from "../policy/policy";
+import { digestOf } from "../effects/digest";
 import { type Block } from "../blocks/types";
 export type TurnEvent = {
     type: "text";
     delta: string;
+    /**
+     * This delta opens a new round of the same answer.
+     *
+     * One assistant bubble spans every round of a multi-step run, so without
+     * a marker the last sentence of one round and the first of the next are
+     * concatenated — "…resets every launch.Here's the full picture…". The
+     * ENGINE is the only layer that knows where a round ends: the UI sees a
+     * flat stream of deltas, and the tool events it used to infer the
+     * boundary from are not always there (a declined approval runs no tool).
+     */
+    breakBefore?: boolean;
+}
+/**
+ * The model's own reasoning for this turn, when the provider reports any.
+ *
+ * Only some models produce it: Claude emits thinking blocks by default, and
+ * an OpenAI reasoning model reports a summary; gpt-4.1 and friends produce
+ * nothing here at all. So a UI showing this must be honest about it being
+ * absent rather than looking broken.
+ */
+ | {
+    type: "reasoning";
+    text: string;
+}
+/**
+ * Whole rounds were dropped from the model's memory before this turn.
+ *
+ * Yielded by the SESSION (which owns trimming), never by the engine. The
+ * screen still shows those rounds, so without this the transcript and the
+ * model silently disagree — the user asks "turn off that override" and the
+ * model, having lost the round that armed it, asks which one.
+ */
+ | {
+    type: "history-trimmed";
+    droppedRounds: number;
 } | {
     type: "tool-start";
     id: string;
@@ -33,11 +69,31 @@ export type TurnEvent = {
     label: string;
     /** The catalog sentence, for a row the user expands. */
     description: string;
+    /**
+     * What the model actually asked for, post-validation. The label says
+     * "Open /bag"; this says which path, which key, which value — the
+     * difference between "a step ran" and "here is what it did".
+     */
+    params: Record<string, unknown>;
+    /** read / write / destructive, from the catalog. */
+    effect: "read" | "write" | "destructive";
 } | {
     type: "tool-end";
     id: string;
     ok: boolean;
     summary: string;
+    /** Wall time for the dispatch, so a slow step is findable. */
+    durationMs: number;
+    /**
+     * The redacted result the MODEL was given, capped. Present only for a
+     * step that succeeded.
+     *
+     * This is what turns a trace into a debugging artefact: "the write
+     * succeeded" and "the write returned `{ok:false}`" look identical
+     * without it, and the second is usually the bug. It is the same
+     * redacted string the receipt is built from — never the raw value.
+     */
+    result?: string;
 }
 /** A block to render — a receipt from a tool result, or a model-authored block. */
  | {
@@ -61,11 +117,20 @@ export type TurnEvent = {
     type: "error";
     message: string;
 }
-/** Token usage for one provider request, when the provider reports it. */
+/**
+ * Token usage for one provider request, when the provider reports it.
+ * `cacheRead`/`cacheWrite` are the prompt-cache counters (see TokenUsage —
+ * without them a cached Claude request looks nearly free) and `model` is
+ * the id the provider actually SERVED, which is what a cost table or a
+ * benchmark needs when a gateway alias drifts to a new snapshot.
+ */
  | {
     type: "usage";
     input: number;
     output: number;
+    cacheRead?: number;
+    cacheWrite?: number;
+    model?: string;
 } | {
     type: "done";
 };
@@ -74,6 +139,8 @@ export interface RunTurnInput {
     catalog: ToolDescriptor[];
     messages: AgentMessage[];
     system: string;
+    /** Per-turn "right now" block. See ProviderRequest.systemVolatile. */
+    systemVolatile?: string;
     model: string;
     maxTokens: number;
     dispatch: DispatchFn;
@@ -99,10 +166,57 @@ export interface RunTurnInput {
         label: string;
         description: string;
         reason: string;
+        /**
+         * The exact call being asked about.
+         *
+         * The UI does not render it — an approval prompt shows the effect, not the
+         * payload. It travels so a card that OUTLIVES this turn can still run it:
+         * the sheet persists an unanswered approval, and after a reload the
+         * generator holding this promise no longer exists, so Allow has to
+         * re-dispatch the call itself.
+         */
+        params: Record<string, unknown>;
+        /**
+         * A fingerprint of the value this call is about to overwrite, read at the
+         * moment the question was asked — see `readTargetDigest`. A card that comes
+         * back after a restart re-reads and compares before it writes; a card
+         * answered live never needs it. Absent when the target cannot be read.
+         */
+        targetDigest?: string;
     }) => Promise<boolean>;
     signal?: AbortSignal;
+    /**
+     * Every http(s) URL this CONVERSATION has read out of a tool result. Owned
+     * by the session so it outlives one turn: "now show me those as pictures"
+     * is a normal second message, and a per-turn set answered it by silently
+     * stripping every image — the model then described artwork the user could
+     * not see. Provenance is still enforced, just over the whole conversation
+     * rather than one turn of it. Omitted (tests, one-shot callers) means a
+     * fresh per-turn set.
+     */
+    seenUrls?: Set<string>;
 }
 export declare function runAgentTurn(input: RunTurnInput): AsyncGenerator<TurnEvent, AgentMessage[], void>;
+export { digestOf };
+/**
+ * Fingerprint the value a write is about to replace.
+ *
+ * Built for the approval card that outlives its turn: the app crashed with
+ * "Set bag line L-01 qty to 14" still asking, relaunched, and the card came
+ * back — and Allow wrote qty 14 against whatever the bag was NOW, maybe a
+ * different account, maybe a line that no longer existed. A hash of the
+ * params alone would not catch that (same label, same params, different
+ * world). So the card carries a digest of the TARGET at ask time, and a
+ * restored Allow re-reads and compares before it writes. Undefined when the
+ * target cannot be read — then the card can only warn, not check.
+ */
+export declare function readTargetDigest(input: {
+    toolId: string;
+    action: string;
+    params: Record<string, unknown>;
+    dispatch: DispatchFn;
+    catalog?: ToolDescriptor[];
+}): Promise<string | undefined>;
 export interface GatedActionInput {
     toolId: string;
     action: string;

package/lib/typescript/engine/runAgentTurn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runAgentTurn.d.ts","sourceRoot":"","sources":["../../../src/engine/runAgentTurn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAoB,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAKzF,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAwB,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,YAAY,EAAgB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAK5E,OAAO,EAAc,KAAK,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAOzD,MAAM,MAAM,SAAS,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;CACrB,GACD;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAChE,mFAAmF;GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE;AACzD,oFAAoF;GAClF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1C;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACpC,0EAA0E;GACxE;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,oEAAoE;IACpE,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAwDD,wBAAuB,YAAY,CACjC,KAAK,EAAE,YAAY,GAClB,cAAc,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,CA+UjD;AA8BD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,UAAU,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,wCAAwC;IACxC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAuCzF"}
+{"version":3,"file":"runAgentTurn.d.ts","sourceRoot":"","sources":["../../../src/engine/runAgentTurn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAoB,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAOzF,OAAO,KAAK,EACV,YAAY,EACZ,QAAQ,EAKT,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAgB,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAG5E,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAG7C,OAAO,EAAc,KAAK,KAAK,EAAE,MAAM,iBAAiB,CAAC;AA4CzD,MAAM,MAAM,SAAS,GACjB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AACH;;;;;;;GAOG;GACD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACrC;;;;;;;GAOG;GACD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAClD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,oDAAoD;IACpD,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,aAAa,CAAC;CAC1C,GACD;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACH,mFAAmF;GACjF;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE;AACzD,oFAAoF;GAClF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC1C;IACE,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACpC;;;;;;GAMG;GACD;IACE,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErB,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,UAAU,CAAC;IAC1B,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,iFAAiF;IACjF,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5C,oEAAoE;IACpE,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf;;;;;;;;WAQG;QACH,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC;;;;;WAKG;QACH,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACxB;AA4FD,wBAAuB,YAAY,CACjC,KAAK,EAAE,YAAY,GAClB,cAAc,CAAC,SAAS,EAAE,YAAY,EAAE,EAAE,IAAI,CAAC,CA+/BjD;AA8BD,OAAO,EAAE,QAAQ,EAAE,CAAC;AAEpB;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,UAAU,CAAC;IACrB,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;CAC5B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQ9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,UAAU,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,wCAAwC;IACxC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC7B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmEzF"}

package/lib/typescript/engine/systemPrompt.d.ts

@@ -41,9 +41,50 @@ export interface SystemPromptInput {
     context?: ContextPack;
     isRelease: boolean;
     readOnly: boolean;
+    /**
+     * Who turned read-only on. The APP configuring it is a rule the user cannot
+     * change; the DEVICE toggle is the person in front of the phone choosing to
+     * look without touching — and the model should tell them where to turn it
+     * off rather than send them to a developer.
+     */
+    readOnlySource?: "app" | "device";
     requireApproval: string[];
+    /**
+     * The user turned approval cards off on this device. Distinct from an empty
+     * `requireApproval`, which is the APP choosing full auto-run: here a gate
+     * exists and the person in front of the phone waived it, so the model is
+     * told plainly that nothing will stop a destructive call.
+     */
+    approvalsBypassed?: boolean;
     appName?: string;
     platform?: string;
 }
 export declare function buildSystemPrompt(input: SystemPromptInput): string;
+/**
+ * The per-turn block: what the app is showing at the moment the user typed.
+ * Rendered AFTER the cached prompt (see ProviderRequest.systemVolatile), so it
+ * can change on every message without invalidating anything.
+ *
+ * Returns undefined when nothing was readable — the prompt then says so, so the
+ * model knows to read for itself rather than assume the block was empty
+ * because the app is.
+ */
+export declare function buildLiveBlock(live: Record<string, unknown> | undefined, 
+/**
+ * What this conversation has already changed, newest last.
+ *
+ * The ledger existed from the start and the model could never see it. Two
+ * failures came out of that. Asked "what have you changed?" it answered from
+ * memory of its own sentences, which drifts and cannot survive a reload. And
+ * reading a value it had itself overwritten three turns earlier, it reported
+ * the number as the app's own — the same "never fake the answer" problem as
+ * a network override, with the model as the one deceived.
+ *
+ * Short by construction: tool, action and a label per entry, capped. It is a
+ * reminder of what happened, not a replay of it.
+ */
+changes?: {
+    label: string;
+    undone: boolean;
+}[]): string;
 //# sourceMappingURL=systemPrompt.d.ts.map

package/lib/typescript/engine/systemPrompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"systemPrompt.d.ts","sourceRoot":"","sources":["../../../src/engine/systemPrompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CA2FlE"}
+{"version":3,"file":"systemPrompt.d.ts","sourceRoot":"","sources":["../../../src/engine/systemPrompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IAClC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CA2HlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;AACzC;;;;;;;;;;;;GAYG;AACH,OAAO,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,EAAE,GAC7C,MAAM,CAgBR"}

package/lib/typescript/engine/textToolCalls.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Recovering a tool call a model wrote as TEXT instead of calling.
+ *
+ * Every provider here is sent real tool definitions, and most models use them.
+ * Some don't — under a gateway, after a clarifying question, or just on the
+ * wrong roll, a model answers with the call spelled out as JSON:
+ *
+ *     ```json
+ *     {"calls":[{"tool":"buoy_zustand","action":"setState","params":{…}}],
+ *      "reply":"Done — I added one Jigglypuff to your bag."}
+ *     ```
+ *
+ * Left alone this is the worst outcome the product has: the user said "yes,
+ * go ahead", nothing happened, and what they got back was a wall of JSON
+ * claiming it did. The same class of problem as the parameter aliases in
+ * normalizeParams — models reach for a convention they know, and meeting them
+ * costs one parse.
+ *
+ * Two halves, and the first is why this file exists at all:
+ *
+ * 1. {@link couldBeToolCallEnvelope} runs on every delta, because the decision
+ *    has to be made BEFORE the text reaches the screen. Streamed text cannot
+ *    be taken back. It withholds only what could still be an envelope and
+ *    releases the moment it can't be.
+ * 2. {@link parseTextToolCalls} turns the finished blob into ordinary calls,
+ *    which then go through validation, the policy, and approval exactly like a
+ *    native one. Nothing here decides that a call is allowed to run — a
+ *    recovered destructive call still stops at the same approval sheet.
+ */
+import type { ToolCall } from "../providers/types";
+import type { ToolDescriptor } from "../types";
+/**
+ * Could the text so far still turn out to be a tool-call envelope?
+ *
+ * False the instant it can't be, so an ordinary answer streams exactly as it
+ * did before — the window this holds is one opening brace plus a key name.
+ */
+export declare function couldBeToolCallEnvelope(text: string): boolean;
+export interface SalvagedCalls {
+    calls: ToolCall[];
+    /** The prose the envelope carried, if any. The JSON itself is never shown. */
+    reply: string;
+}
+/**
+ * Read a text envelope as tool calls, or nothing if that is not what it is.
+ *
+ * Deliberately strict about the SHAPE and loose about the spelling: it will
+ * not turn arbitrary JSON into calls (a model showing the user a response body
+ * must still be shown), but it accepts every naming convention a model might
+ * carry over — `tool`/`name`, `params`/`input`/`arguments`, one call or many.
+ */
+export declare function parseTextToolCalls(text: string, catalog: ToolDescriptor[]): SalvagedCalls | undefined;
+/**
+ * Appended to a recovered call's result, so the model corrects itself for the
+ * rest of the conversation instead of writing the next one as text too.
+ */
+export declare const SALVAGE_NOTE = "\n\n[You wrote this call as JSON in your reply instead of calling the tool. It was recovered and run this time. Call tools through the tool interface \u2014 text is shown to the user as-is, and a call written there does not run.]";
+//# sourceMappingURL=textToolCalls.d.ts.map

package/lib/typescript/engine/textToolCalls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"textToolCalls.d.ts","sourceRoot":"","sources":["../../../src/engine/textToolCalls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AA0B/C;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ7D;AA+JD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EAAE,GACxB,aAAa,GAAG,SAAS,CA+B3B;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,0OAC2M,CAAC"}

package/lib/typescript/index.d.ts

@@ -9,15 +9,17 @@
  */
 export type { ActionDescriptor, ActionEffect, DispatchFn, JsonSchema, ReleaseBehavior, SnapshotFn, ToolDescriptor, UndoSpec, } from "./types";
 export { CATALOG, CATALOG_ACTION_COUNT, CATALOG_TOOL_COUNT } from "./catalog/catalog.g";
+export { CATALOG_ACTIONS, type CatalogAction, type CatalogActionMap, type CatalogToolId, } from "./catalog/catalog.types.g";
 export { fromProviderToolName, toProviderToolName, toProviderTools, type ProviderTool, type ToProviderToolsOptions, } from "./catalog/toProviderTools";
 export { applyDefaults, validateParams, type ValidationResult, } from "./catalog/validateParams";
 export { projectSnapshot, SNAPSHOT_ACTION } from "./catalog/snapshotReads";
+export { normalizeParams, aliasNote, hashQueryKey } from "./catalog/normalizeParams";
 export { createAnthropicProvider } from "./providers/anthropic";
 export { createOpenAIProvider } from "./providers/openai";
-export type { AgentMessage, Provider, ProviderConfig, ProviderRequest, StreamEvent, TokenUsage, ToolCall, ToolResult, } from "./providers/types";
-export { runAgentTurn, runGatedAction, type GatedActionInput, type GatedActionOutcome, type RunTurnInput, type TurnEvent, } from "./engine/runAgentTurn";
-export { buildSystemPrompt, type ContextPack, type SystemPromptInput, } from "./engine/systemPrompt";
-export { buildContextDigest, type BuildContextInput } from "./context/buildContextPack";
+export type { AgentMessage, Provider, ProviderConfig, ProviderRequest, StreamEvent, ThinkingBlock, TokenUsage, ToolCall, ToolResult, } from "./providers/types";
+export { runAgentTurn, runGatedAction, readTargetDigest, digestOf, type GatedActionInput, type GatedActionOutcome, type RunTurnInput, type TurnEvent, } from "./engine/runAgentTurn";
+export { buildLiveBlock, buildSystemPrompt, type ContextPack, type SystemPromptInput, } from "./engine/systemPrompt";
+export { buildContextDigest, buildLiveContext, type BuildContextInput, } from "./context/buildContextPack";
 export { EffectLedger, isReversible, type AppliedEffect, type LedgerEntry, type RevertOutcome, } from "./effects/ledger";
 export { humanise, titleCall, toolTitle } from "./policy/labels";
 export * from "./blocks/types";
@@ -25,5 +27,6 @@ export { UI_TOOL_NAME, UI_PARAMS, uiProviderTool, buildUiBlock } from "./blocks/
 export { projectReceipt, shallowDiff, type ReceiptInput } from "./blocks/receipts";
 export { decide, describeCall, DEFAULT_REQUIRE_APPROVAL, resolveRequireApproval, type AllowRule, type AskBuoyPolicy, type Decision, } from "./policy/policy";
 export { redact, registerSelfEndpoint, isSelfTraffic, stripSelfTraffic, } from "./policy/redact";
-export { createAskBuoySession, type AskBuoySession, type AskBuoySessionConfig } from "./session";
+export { idFactory, RUN_ID } from "./blocks/runId";
+export { createAskBuoySession, resumableHistory, type AskBuoySession, type AskBuoySessionConfig, } from "./session";
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,QAAQ,GACT,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,aAAa,EACb,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,YAAY,EACV,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,eAAe,EACf,WAAW,EACX,UAAU,EACV,QAAQ,EACR,UAAU,GACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,SAAS,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAExF,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjE,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EACL,MAAM,EACN,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,MAAM,EACN,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,KAAK,oBAAoB,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,QAAQ,GACT,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,aAAa,EACb,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAErF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,YAAY,EACV,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,eAAe,EACf,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,EACR,UAAU,GACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,QAAQ,EACR,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,SAAS,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,iBAAiB,GACvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjE,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EACL,MAAM,EACN,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,MAAM,EACN,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC"}

package/lib/typescript/policy/labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"labels.d.ts","sourceRoot":"","sources":["../../../src/policy/labels.ts"],"names":[],"mappings":"AA+MA,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAgCD,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/C;AAaD;;;GAGG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAoBR"}
+{"version":3,"file":"labels.d.ts","sourceRoot":"","sources":["../../../src/policy/labels.ts"],"names":[],"mappings":"AAwNA,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAuCD,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/C;AAaD;;;GAGG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAoBR"}

package/lib/typescript/policy/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/policy/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG/D;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC;IACjC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3D;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,0DAA0D;IAC1D,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wGAAwG;AACxG,eAAO,MAAM,wBAAwB,EAAE,YAAY,EAAoB,CAAC;AAExE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,EAAE,CAE5E;AAED,MAAM,MAAM,QAAQ,GAChB;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GACpB;IAAE,OAAO,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,2CAA2C;IAC3C,SAAS,EAAE,OAAO,CAAC;CACpB;AAKD,wBAAgB,MAAM,CAAC,EACrB,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,WAAW,GAAG,QAAQ,CAuExB;AAoBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,gBAAgB,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAER"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/policy/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG/D;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC;IACjC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3D;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,0DAA0D;IAC1D,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wGAAwG;AACxG,eAAO,MAAM,wBAAwB,EAAE,YAAY,EAAoB,CAAC;AAExE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,EAAE,CAE5E;AAED,MAAM,MAAM,QAAQ,GAChB;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GACpB;IAAE,OAAO,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,2CAA2C;IAC3C,SAAS,EAAE,OAAO,CAAC;CACpB;AAKD,wBAAgB,MAAM,CAAC,EACrB,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,WAAW,GAAG,QAAQ,CA2ExB;AAoBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,gBAAgB,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAER"}

package/lib/typescript/policy/redact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../src/policy/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAqDH;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAazD;AAQD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQ3D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOnD;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAYnE"}
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../src/policy/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAoEH;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAazD;AAuBD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAgB3D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOnD;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAYnE"}

package/lib/typescript/providers/anthropic.d.ts

@@ -16,6 +16,11 @@
  *    user content array with any text after, and that user message must
  *    immediately follow the assistant turn. "Here are the results:" placed
  *    before the blocks is an instant 400.
+ * 5. Every current Claude model thinks by DEFAULT, and a `thinking` block must
+ *    be replayed VERBATIM (signature and all) at the FRONT of the assistant
+ *    turn it came from whenever that turn's tool results are sent back. An
+ *    adapter that keeps only text and tool_use 400s on the second request of
+ *    every tool-using turn — which is every turn Ask Buoy actually makes.
  */
 import type { Provider, ProviderConfig } from "./types";
 export declare function createAnthropicProvider(config: ProviderConfig): Provider;

package/lib/typescript/providers/anthropic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAEV,QAAQ,EACR,cAAc,EAKf,MAAM,SAAS,CAAC;AAsCjB,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAkLxE"}
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAEV,QAAQ,EACR,cAAc,EAMf,MAAM,SAAS,CAAC;AA0EjB,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAqSxE"}

package/lib/typescript/providers/openai.d.ts

@@ -1,19 +1,3 @@
-/**
- * OpenAI chat-completions protocol.
- *
- * The differences from Anthropic that actually matter to the code:
- * - Tool results are their own `{role:"tool", tool_call_id, content}` MESSAGE,
- *   not blocks inside a user message.
- * - Tool arguments arrive as a JSON STRING, streamed in fragments, and are
- *   keyed by an `index` that is stable across deltas while `id`/`name` only
- *   appear on the first fragment.
- * - The stream DOES have a `data: [DONE]` sentinel, unlike Anthropic's.
- *
- * This adapter also serves Azure and any OpenAI-compatible org gateway, which
- * is the common shape for an internal LLM proxy. Note Anthropic's own
- * OpenAI-compatibility endpoint is explicitly not production-ready and silently
- * ignores several fields — use the native Anthropic adapter for Anthropic.
- */
 import type { Provider, ProviderConfig } from "./types";
 export declare function createOpenAIProvider(config: ProviderConfig): Provider;
 //# sourceMappingURL=openai.d.ts.map

package/lib/typescript/providers/openai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAEV,QAAQ,EACR,cAAc,EAGf,MAAM,SAAS,CAAC;AA2CjB,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA+GrE"}
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/providers/openai.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAEV,QAAQ,EACR,cAAc,EAIf,MAAM,SAAS,CAAC;AA6DjB,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA+MrE"}

package/lib/typescript/providers/sse.d.ts

@@ -7,12 +7,93 @@
  * TV-CLI lanes never had it. So `readSse` degrades to reading the whole body
  * and replaying it as events rather than failing: a non-streaming answer is a
  * slower chat, while a hard failure is no chat at all.
+ *
+ * THE TWO PATHS MUST AGREE. They did not. The buffered path appended "\n\n" to
+ * the body before parsing, which turns an unterminated final frame — the exact
+ * signature of a cut connection — into a well-formed event. The streaming path
+ * discarded that same frame, as the SSE spec requires. So one lane invented a
+ * complete answer where the other saw a broken one. Now both discard it and
+ * both RECORD it (`SseReadStatus.truncated`), because "was this reply whole?"
+ * is a question the engine has to answer before it runs anything.
  */
 export interface SseEvent {
     event?: string;
     data: string;
 }
-export declare function readSse(response: Response): AsyncGenerator<SseEvent, void, void>;
+export interface SseReadStatus {
+    /**
+     * Non-blank bytes were left over at EOF: the stream stopped mid-frame.
+     *
+     * Discarding the partial frame is correct (SSE spec); pretending the stream
+     * ended cleanly is not. Providers pair this with their own terminal-marker
+     * check — a clean frame boundary with no `message_stop`/`[DONE]` is equally
+     * truncated, just tidier about it.
+     */
+    truncated: boolean;
+}
+export interface SseReadOptions {
+    status?: SseReadStatus;
+    /**
+     * Aborts the READ itself, not just the request.
+     *
+     * Normally redundant: a real `fetch` errors its response body when its
+     * signal aborts, so `reader.read()` rejects on its own. But Ask Buoy takes a
+     * host-supplied `fetch` (`ProviderConfig.fetch`), and a wrapper that returns
+     * a body it built itself — an interceptor, a replay harness, a polyfill —
+     * severs that link. Without this the idle timeout fires, aborts a signal
+     * nothing is listening to, and the turn parks on a read that never settles:
+     * exactly the hang the clock was added to end.
+     */
+    signal?: AbortSignal;
+    /**
+     * Called once per COMPLETE frame, including ones that yield nothing.
+     *
+     * The idle timeout hangs off this. A comment-only frame — `: OPENROUTER
+     * PROCESSING`, which is exactly what arrives during a long silence — is
+     * skipped by the parser and would otherwise look identical to a dead socket.
+     */
+    onFrame?: () => void;
+}
+/**
+ * Turn a stream of TEXT chunks into SSE frames.
+ *
+ * The one place framing happens, whatever produced the bytes: a `fetch` body
+ * reader, an `XMLHttpRequest` progress slice, or a whole body read at once on
+ * a runtime that cannot stream. Splitting it out is what lets the XHR
+ * transport exist without a second parser to keep in step with this one.
+ */
+export declare function framesFrom(chunks: AsyncIterable<string>, options?: SseReadOptions): AsyncGenerator<SseEvent, void, void>;
+export declare function readSse(response: Response, options?: SseReadOptions): AsyncGenerator<SseEvent, void, void>;
+/**
+ * A 200 that is not a stream at all.
+ *
+ * Gateways in front of a model do this: an auth proxy that has lost its
+ * upstream serves an HTML error page, a misrouted path serves an SPA shell,
+ * and a gateway that ignored `stream: true` serves one JSON object. Every one
+ * of those parses to zero SSE frames, so the old code read it as a model that
+ * had nothing to say and ended the turn with a blank bubble.
+ *
+ * Returns a message when the body should be treated as an error, and undefined
+ * when it looks like something the SSE reader can work with. Consumes the body
+ * only in the failing case.
+ */
+export declare function nonStreamProblem(response: Response): Promise<string | undefined>;
 /** Body text for a failed response, trimmed to something a user can read. */
 export declare function errorBody(response: Response): Promise<string>;
+/**
+ * The message for a stream that stopped before the provider said it was done.
+ *
+ * `truncated` distinguishes the two shapes: cut mid-frame (a dropped
+ * connection) versus a clean frame boundary with no terminal marker (a gateway
+ * that closes the socket instead of sending one). The second is a
+ * compatibility problem worth naming, because retrying it will not help.
+ */
+export declare function truncatedMessage(truncated: boolean): string;
+/**
+ * The message for arguments that would not parse, with enough in it to act on.
+ * `stopReason` "length" is the common cause — a reasoning model spends its
+ * budget thinking and the tool call is truncated mid-JSON — and the tail of
+ * the raw arguments says immediately whether that is what happened.
+ */
+export declare function unparseableMessage(name: string, args: string, stopReason?: string): string;
 //# sourceMappingURL=sse.d.ts.map

package/lib/typescript/providers/sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/providers/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAsBD,wBAAuB,OAAO,CAC5B,QAAQ,EAAE,QAAQ,GACjB,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAkDtC;AAED,6EAA6E;AAC7E,wBAAsB,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAQnE"}
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/providers/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;OAOG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AA6CD;;;;;;;GAOG;AACH,wBAAuB,UAAU,CAC/B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAC7B,OAAO,GAAE,cAAmB,GAC3B,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAUtC;AAED,wBAAuB,OAAO,CAC5B,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,cAAmB,GAC3B,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CA6EtC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAYtF;AAED,6EAA6E;AAC7E,wBAAsB,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAQnE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAI3D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ1F"}

package/lib/typescript/providers/streamTimer.d.ts

@@ -0,0 +1,59 @@
+/**
+ * The clock on a model request.
+ *
+ * There was none. A gateway that accepted the socket and then said nothing —
+ * an overloaded proxy, a dropped VPN, a laptop that slept mid-answer — left
+ * the turn running with the thinking strip animating until a person pressed
+ * Stop. The 180s turn deadline did not help: it is read at the TOP of a step
+ * (`runAgentTurn`), and a step parked inside `await fetch(...)` never reaches
+ * the next one.
+ *
+ * Two clocks, because the two silences mean different things:
+ *
+ * - CONNECT covers "no headers yet". Nothing has been generated, so nothing is
+ *   lost by giving up; 30s is already long for a gateway to acknowledge a POST.
+ * - IDLE covers "headers arrived, then nothing". This one has to be generous.
+ *   Anthropic sends `ping` frames, but an OpenAI-protocol reasoning model can
+ *   legitimately emit nothing for a long stretch while it thinks, and cutting
+ *   that off would look like a broken product. Any frame at all — a keepalive
+ *   comment included — resets it, so only total silence trips it.
+ *
+ * A timeout is NOT a retry. Nothing is re-sent: the request may have reached
+ * the model, and a duplicate turn is a duplicate bill and possibly duplicate
+ * writes. The turn ends with an honest notice and a Continue button.
+ */
+export declare const DEFAULT_CONNECT_TIMEOUT_MS = 30000;
+export declare const DEFAULT_IDLE_TIMEOUT_MS = 90000;
+export interface StreamTimerOptions {
+    connectTimeoutMs?: number;
+    idleTimeoutMs?: number;
+}
+export interface StreamTimer {
+    /**
+     * The signal to hand to `fetch`. Aborts when the caller's signal aborts OR
+     * when either clock runs out, so one signal covers all three.
+     */
+    readonly signal: AbortSignal | undefined;
+    /** Headers arrived: stop the connect clock, start the idle one. */
+    connected(): void;
+    /** A frame arrived: restart the idle clock. */
+    activity(): void;
+    /**
+     * Which clock fired, if either. Read in the provider's catch: an abort with
+     * a reason here is a timeout, an abort without one is the user's Stop.
+     */
+    readonly expired: "connect" | "idle" | undefined;
+    /** Message for the expired clock, or undefined if neither fired. */
+    message(): string | undefined;
+    /** Always call this — a live timer keeps the JS runtime awake. */
+    dispose(): void;
+}
+/**
+ * A timer over an optional caller signal.
+ *
+ * When no `AbortController` exists (a runtime old enough to lack it) this
+ * degrades to passing the caller's signal straight through with no clocks,
+ * rather than failing to send anything at all.
+ */
+export declare function createStreamTimer(callerSignal: AbortSignal | undefined, options?: StreamTimerOptions): StreamTimer;
+//# sourceMappingURL=streamTimer.d.ts.map

package/lib/typescript/providers/streamTimer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamTimer.d.ts","sourceRoot":"","sources":["../../../src/providers/streamTimer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IACzC,mEAAmE;IACnE,SAAS,IAAI,IAAI,CAAC;IAClB,+CAA+C;IAC/C,QAAQ,IAAI,IAAI,CAAC;IACjB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;IACjD,oEAAoE;IACpE,OAAO,IAAI,MAAM,GAAG,SAAS,CAAC;IAC9B,kEAAkE;IAClE,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,WAAW,GAAG,SAAS,EACrC,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CAyFb"}

package/lib/typescript/providers/transport.d.ts

@@ -0,0 +1,40 @@
+/**
+ * How a request is SENT, decided before it is sent.
+ *
+ * The obvious place to add XHR was inside `readSse`, once a missing
+ * `response.body` had already proved that `fetch` could not stream. That is
+ * the wrong boundary and would have been a real bug: the POST has already
+ * happened by then, the reader has neither the URL nor the headers nor the
+ * body to repeat it, and issuing a second one would ask the model to generate
+ * the same answer twice — billed twice, and for a turn that writes, acted on
+ * twice. Transport is chosen up front; a response that has started is consumed
+ * exactly once, whatever it turns out to be.
+ *
+ * `auto` therefore learns rather than probes. The first request goes through
+ * `fetch`; if that response has no reader, the answer is buffered (as it
+ * always was on that runtime) and the SESSION remembers, so every later
+ * request uses XHR and streams. One buffered reply at the start of a bare-RN
+ * session, and nothing to configure.
+ */
+import type { ProviderConfig } from "./types";
+import { type SseEvent, type SseReadOptions } from "./sse";
+export type TransportKind = "fetch" | "xhr" | "auto";
+export interface OpenStreamRequest {
+    headers: Record<string, string>;
+    body: string;
+    signal?: AbortSignal;
+}
+export interface OpenStreamResult {
+    /** A message when the request failed or is not a stream; frames are empty. */
+    problem?: string;
+    frames(options?: SseReadOptions): AsyncGenerator<SseEvent, void, void>;
+}
+export interface Transport {
+    open(req: OpenStreamRequest): Promise<OpenStreamResult>;
+}
+/**
+ * One transport per provider instance, because the `auto` decision is worth
+ * remembering: re-learning it would buffer the first reply of every turn.
+ */
+export declare function createTransport(config: ProviderConfig): Transport;
+//# sourceMappingURL=transport.d.ts.map

package/lib/typescript/providers/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/providers/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAIL,KAAK,QAAQ,EACb,KAAK,cAAc,EACpB,MAAM,OAAO,CAAC;AAGf,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACzD;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAsEjE"}