@buoy-gg/agent-core 7.0.35 → 7.0.36

package/lib/commonjs/session.js

@@ -3,13 +3,32 @@
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
+Object.defineProperty(exports, "compressConsumed", {
+  enumerable: true,
+  get: function () {
+    return _historyBudget.compressConsumed;
+  }
+});
 exports.createAskBuoySession = createAskBuoySession;
 exports.resumableHistory = resumableHistory;
+Object.defineProperty(exports, "trimHistory", {
+  enumerable: true,
+  get: function () {
+    return _historyBudget.trimHistory;
+  }
+});
+Object.defineProperty(exports, "trimHistoryReport", {
+  enumerable: true,
+  get: function () {
+    return _historyBudget.trimHistoryReport;
+  }
+});
 var _catalog = require("./catalog/catalog.g");
 var _buildContextPack = require("./context/buildContextPack");
 var _runAgentTurn = require("./engine/runAgentTurn");
 var _systemPrompt = require("./engine/systemPrompt");
 var _ledger = require("./effects/ledger");
+var _historyBudget = require("./engine/historyBudget");
 var _anthropic = require("./providers/anthropic");
 var _openai = require("./providers/openai");
 var _policy = require("./policy/policy");
@@ -20,43 +39,11 @@ var _redact = require("./policy/redact");
  * This is the one-call surface the UI packages use. It owns the pieces that
  * have to agree with each other across a whole session — the provider, the
  * catalog filtered to what this device can actually do, the system prompt
- * (built once, after grounding), the effect ledger, and the message history —
+ * (the stable part built once after grounding, the RIGHT NOW part re-read every
+ * turn), the effect ledger, and the message history —
  * so a chat UI is a message list plus a text box rather than an orchestrator.
  */
 
-/**
- * A long QA session must not die on the provider's context limit with an
- * opaque error — the transcript grows without bound (tool results are the
- * heavy part), so the OLDEST rounds are dropped once the history passes a
- * budget. Rounds are dropped whole — a round starts at a user message — so
- * the assistant/tool-result pairing every provider requires stays intact and
- * the history still begins with a user message.
- */
-const MAX_HISTORY_CHARS = 150_000;
-const MIN_KEEP_MESSAGES = 4;
-function messageSize(m) {
-  try {
-    return JSON.stringify(m).length;
-  } catch {
-    return 0;
-  }
-}
-function trimHistory(messages) {
-  let total = 0;
-  for (const m of messages) total += messageSize(m);
-  if (total <= MAX_HISTORY_CHARS) return messages;
-  const out = [...messages];
-  while (out.length > MIN_KEEP_MESSAGES && total > MAX_HISTORY_CHARS) {
-    total -= messageSize(out[0]);
-    out.shift();
-    while (out.length > MIN_KEEP_MESSAGES && out[0].role !== "user") {
-      total -= messageSize(out[0]);
-      out.shift();
-    }
-  }
-  return out;
-}
-
 /**
  * A stored history, made safe to send as the start of a new request.
  *
@@ -73,6 +60,9 @@ function trimHistory(messages) {
  * always resumes with a fresh user message instead, so their signatures are
  * dead weight at best and a stale-signature 400 at worst.
  */
+// Re-exported: these were defined here before the engine needed them too, and
+// the tests and the package surface still reach them through this module.
+
 function resumableHistory(history) {
   let end = history.length;
   while (end > 0) {
@@ -90,8 +80,50 @@ function createAskBuoySession(config) {
   const ledger = new _ledger.EffectLedger();
   const policy = config.policy ?? {};
   let messages = [];
+  /**
+   * Image-URL provenance for the whole conversation, not one turn of it.
+   *
+   * "Show me the shop as pictures" and "no, actually render them" are two
+   * turns; the second has no tool calls of its own, so a per-turn set held
+   * nothing and every image was stripped out from under the model. It kept
+   * describing artwork that was not on screen. The rule is unchanged — a URL
+   * still has to have been READ — the window is just the conversation. Reset
+   * with the conversation.
+   */
+  const seenUrls = new Set();
   let system;
   let primed = false;
+  /** See `setApprovalBypass`. Consulted per turn, never captured. */
+  let bypassApproval = false;
+  /** See `setReadOnly`. */
+  let deviceReadOnly = false;
+  /**
+   * Rounds dropped by `restore` — reported on the first send, because there is
+   * no open turn to carry the event when the restore happens.
+   */
+  let trimmedOnRestore = 0;
+  /**
+   * Which conversation is live. Bumped by `reset`.
+   *
+   * A turn's history is committed when its generator drains, and a turn does
+   * not stop the moment Stop is pressed — an in-flight dispatch has to settle
+   * first, and nothing can pull a store write back out of an adapter. So the
+   * sequence Stop -> "New conversation" -> the write finishes used to end with
+   * the OLD turn assigning its whole history over the empty one: a chat the
+   * user had just cleared came back, carrying a change they never saw made.
+   * The turn still finishes and its effect still lands in the app; it simply
+   * no longer owns a conversation that has moved on.
+   */
+  let generation = 0;
+  /**
+   * The grounding probe's result, held past `prime`.
+   *
+   * The system prompt is a pure function of this plus the policy, and the
+   * approval paragraph changes when the device toggle does — holding the
+   * digest lets the prompt be rebuilt without re-probing the app for state it
+   * already read.
+   */
+  let digest = {};
   /**
    * `storage key -> the live store that owns it`, derived from the grounding.
    *
@@ -105,16 +137,62 @@ function createAskBuoySession(config) {
   // So the agent's own requests to the model endpoint never come back to it
   // out of the network tool — that would feed it its own auth headers.
   (0, _redact.registerSelfEndpoint)(config.endpoint);
-  const provider = config.protocol === "openai" ? (0, _openai.createOpenAIProvider)(config) : (0, _anthropic.createAnthropicProvider)(config);
+  const provider = config.provider ?? (config.protocol === "openai" ? (0, _openai.createOpenAIProvider)(config) : (0, _anthropic.createAnthropicProvider)(config));
 
   // Mutable: the device's tool list fills in over the first frames and can
   // change while the sheet is open. See setAvailableActions.
   let availableActions = config.availableActions;
   let availableToolIds = Object.keys(availableActions);
+
+  /**
+   * THE policy object the engine reads, mutated in place.
+   *
+   * One object for the life of the session, not a fresh one per turn: the
+   * engine reads `policy.readOnly` and the approval lists at each call, so a
+   * toggle flipped mid-turn lands on the very next call of that turn. A new
+   * object per turn would leave a running turn on the old rules until it
+   * finished — "Read only" switched on while the agent was writing would let
+   * the rest of the batch through.
+   */
+  const live = {
+    ...policy
+  };
+  function refreshLive() {
+    for (const k of Object.keys(live)) delete live[k];
+    Object.assign(live, policy);
+    if (bypassApproval) {
+      live.requireApproval = [];
+      live.requireApprovalFor = [];
+    }
+    // OR, never override: the device can narrow, the app's own read-only stands.
+    if (deviceReadOnly) live.readOnly = true;
+  }
+  function activePolicy() {
+    return live;
+  }
+  function composeSystem() {
+    system = (0, _systemPrompt.buildSystemPrompt)({
+      catalog,
+      context: {
+        ...config.context,
+        digest: {
+          ...digest,
+          ...config.context?.digest
+        }
+      },
+      isRelease: config.isRelease,
+      readOnly: live.readOnly ?? false,
+      readOnlySource: policy.readOnly ? "app" : deviceReadOnly ? "device" : undefined,
+      requireApproval: (0, _policy.resolveRequireApproval)(live),
+      approvalsBypassed: bypassApproval,
+      appName: config.appName,
+      platform: config.platform
+    });
+  }
   async function prime() {
     if (primed) return;
     primed = true;
-    let digest = {};
+    digest = {};
     try {
       digest = await (0, _buildContextPack.buildContextDigest)({
         dispatch: config.dispatch,
@@ -131,21 +209,7 @@ function createAskBuoySession(config) {
       const store = raw;
       if (store?.persistsTo && store.name) storeKeyOwners[store.persistsTo] = store.name;
     }
-    system = (0, _systemPrompt.buildSystemPrompt)({
-      catalog,
-      context: {
-        ...config.context,
-        digest: {
-          ...digest,
-          ...config.context?.digest
-        }
-      },
-      isRelease: config.isRelease,
-      readOnly: policy.readOnly ?? false,
-      requireApproval: (0, _policy.resolveRequireApproval)(policy),
-      appName: config.appName,
-      platform: config.platform
-    });
+    composeSystem();
   }
   return {
     ledger,
@@ -157,35 +221,122 @@ function createAskBuoySession(config) {
       availableActions = actions;
       availableToolIds = Object.keys(actions);
     },
+    setApprovalBypass(enabled) {
+      if (bypassApproval === enabled) return;
+      bypassApproval = enabled;
+      refreshLive();
+      // The prompt tells the model whether a card will appear before its
+      // change lands; leaving that paragraph stale would have it announce an
+      // approval step that no longer exists. Rebuilt from the held digest, so
+      // toggling mid-conversation costs nothing and re-reads nothing.
+      if (system) composeSystem();
+    },
+    setReadOnly(enabled) {
+      if (deviceReadOnly === enabled) return;
+      deviceReadOnly = enabled;
+      refreshLive();
+      if (system) composeSystem();
+    },
     restore(history) {
       // Only into a session that has not been talked to. Restoring over a live
       // conversation would drop whatever was said since the app started.
       if (messages.length > 0) return;
-      messages = trimHistory(resumableHistory(history));
+      const report = (0, _historyBudget.trimHistoryReport)(resumableHistory(history));
+      messages = report.messages;
+      trimmedOnRestore = report.droppedRounds;
     },
     async *send(text, signal) {
+      /**
+       * Captured FIRST, before any await.
+       *
+       * Priming and the live-context probes are awaits like any other, and a
+       * reset can land inside them. Reading the generation after them would
+       * pick up the NEW conversation's value and let this turn commit into it —
+       * the precise bug this guards against, reintroduced one line lower.
+       */
+      const myGeneration = generation;
       await prime();
-      messages.push({
+      // The RIGHT NOW block: re-read on EVERY turn, not once at open. The
+      // stable digest above was once the whole picture, and it was built
+      // before the user had navigated anywhere — so the query that owned the
+      // screen they were looking at was simply not in the prompt. This is the
+      // uncached tail of the system prompt (see ProviderRequest.systemVolatile).
+      let live;
+      try {
+        live = await (0, _buildContextPack.buildLiveContext)({
+          dispatch: config.dispatch,
+          readSnapshot: config.readSnapshot,
+          availableToolIds,
+          availableActions
+        });
+      } catch {
+        live = undefined;
+      }
+      /**
+       * The conversation was cleared while this turn was still getting ready.
+       *
+       * Priming and the live probes take real time, so "New conversation"
+       * lands here often enough to matter. Abandoning now costs nothing: the
+       * model has not been asked anything yet.
+       */
+      if (myGeneration !== generation) {
+        yield {
+          type: "done"
+        };
+        return;
+      }
+
+      /**
+       * The turn works on its OWN array, and `messages` is assigned in exactly
+       * one place — the commit at the bottom.
+       *
+       * `runAgentTurn` pushes each round into the array it is handed. Handing
+       * it the session's own array made every push a live edit of session
+       * state, so a turn racing a reset wrote its whole history into the new
+       * conversation one push at a time and the commit guard had nothing left
+       * to protect. Copying makes ownership checkable in one place instead of
+       * spread across the loop.
+       */
+      const trimmed = (0, _historyBudget.trimHistoryReport)([...messages, {
         role: "user",
         text
-      });
-      messages = trimHistory(messages);
+      }]);
+      const working = trimmed.messages;
+      // Said once, before the answer it affects. The screen still shows the
+      // rounds the model just lost; this is the only thing that tells the two
+      // apart. See the `history-trimmed` event.
+      const droppedRounds = trimmed.droppedRounds + trimmedOnRestore;
+      trimmedOnRestore = 0;
+      if (droppedRounds > 0) yield {
+        type: "history-trimmed",
+        droppedRounds
+      };
       const gen = (0, _runAgentTurn.runAgentTurn)({
         provider,
         catalog,
-        messages,
+        messages: working,
         system: system,
+        systemVolatile: (0, _systemPrompt.buildLiveBlock)(live,
+        // What this conversation has already done to the app. See
+        // buildLiveBlock — without it the model answers "what have you
+        // changed?" from memory of its own sentences, and reports a value it
+        // overwrote itself as the app's own.
+        ledger.list().map(e => ({
+          label: `${e.toolId}.${e.action}${e.effect.label ? ` — ${e.effect.label}` : ""}`,
+          undone: e.undoneAt !== undefined
+        }))),
         model: config.model,
         maxTokens: config.maxTokens ?? 4096,
         dispatch: config.dispatch,
         readSnapshot: config.readSnapshot,
         storeKeyOwners,
         ledger,
-        policy,
+        policy: activePolicy(),
         isRelease: config.isRelease,
         availableToolIds,
         availableActions,
         requestApproval: config.requestApproval,
+        seenUrls,
         signal
       });
       let next = await gen.next();
@@ -194,11 +345,17 @@ function createAskBuoySession(config) {
         next = await gen.next();
       }
       // The generator's return value is the full history including tool turns.
-      messages = next.value;
+      // Committed only if this turn still owns the conversation — see
+      // `generation`.
+      if (myGeneration === generation) messages = next.value;
     },
     reset() {
+      // Before anything else: a turn still draining must not commit over this.
+      generation += 1;
       messages = [];
+      trimmedOnRestore = 0;
       ledger.clear();
+      seenUrls.clear();
       // The grounding digest is a snapshot of the app AT OPEN — stores and
       // routes registered since are invisible to it. A new conversation is
       // the natural moment to re-read the world.

package/lib/commonjs/session.js.map

@@ -1 +1 @@
-{"version":3,"names":["_catalog","require","_buildContextPack","_runAgentTurn","_systemPrompt","_ledger","_anthropic","_openai","_policy","_redact","MAX_HISTORY_CHARS","MIN_KEEP_MESSAGES","messageSize","m","JSON","stringify","length","trimHistory","messages","total","out","shift","role","resumableHistory","history","end","toolCalls","slice","map","thinking","undefined","createAskBuoySession","config","catalog","CATALOG","ledger","EffectLedger","policy","system","primed","storeKeyOwners","registerSelfEndpoint","endpoint","provider","protocol","createOpenAIProvider","createAnthropicProvider","availableActions","availableToolIds","Object","keys","prime","digest","buildContextDigest","dispatch","readSnapshot","raw","zustandStores","store","persistsTo","name","buildSystemPrompt","context","isRelease","readOnly","requireApproval","resolveRequireApproval","appName","platform","setAvailableActions","actions","restore","send","text","signal","push","gen","runAgentTurn","model","maxTokens","requestApproval","next","done","value","reset","clear"],"sourceRoot":"../../src","sources":["session.ts"],"mappings":";;;;;;;AASA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAF,OAAA;AACA,IAAAG,aAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,UAAA,GAAAL,OAAA;AACA,IAAAM,OAAA,GAAAN,OAAA;AAEA,IAAAO,OAAA,GAAAP,OAAA;AACA,IAAAQ,OAAA,GAAAR,OAAA;AAlBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAuEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMS,iBAAiB,GAAG,OAAO;AACjC,MAAMC,iBAAiB,GAAG,CAAC;AAE3B,SAASC,WAAWA,CAACC,CAAe,EAAU;EAC5C,IAAI;IACF,OAAOC,IAAI,CAACC,SAAS,CAACF,CAAC,CAAC,CAACG,MAAM;EACjC,CAAC,CAAC,MAAM;IACN,OAAO,CAAC;EACV;AACF;AAEA,SAASC,WAAWA,CAACC,QAAwB,EAAkB;EAC7D,IAAIC,KAAK,GAAG,CAAC;EACb,KAAK,MAAMN,CAAC,IAAIK,QAAQ,EAAEC,KAAK,IAAIP,WAAW,CAACC,CAAC,CAAC;EACjD,IAAIM,KAAK,IAAIT,iBAAiB,EAAE,OAAOQ,QAAQ;EAE/C,MAAME,GAAG,GAAG,CAAC,GAAGF,QAAQ,CAAC;EACzB,OAAOE,GAAG,CAACJ,MAAM,GAAGL,iBAAiB,IAAIQ,KAAK,GAAGT,iBAAiB,EAAE;IAClES,KAAK,IAAIP,WAAW,CAACQ,GAAG,CAAC,CAAC,CAAE,CAAC;IAC7BA,GAAG,CAACC,KAAK,CAAC,CAAC;IACX,OAAOD,GAAG,CAACJ,MAAM,GAAGL,iBAAiB,IAAIS,GAAG,CAAC,CAAC,CAAC,CAAEE,IAAI,KAAK,MAAM,EAAE;MAChEH,KAAK,IAAIP,WAAW,CAACQ,GAAG,CAAC,CAAC,CAAE,CAAC;MAC7BA,GAAG,CAACC,KAAK,CAAC,CAAC;IACb;EACF;EACA,OAAOD,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,gBAAgBA,CAACC,OAAuB,EAAkB;EACxE,IAAIC,GAAG,GAAGD,OAAO,CAACR,MAAM;EACxB,OAAOS,GAAG,GAAG,CAAC,EAAE;IACd,MAAMZ,CAAC,GAAGW,OAAO,CAACC,GAAG,GAAG,CAAC,CAAE;IAC3B,IAAIZ,CAAC,CAACS,IAAI,KAAK,WAAW,IAAI,CAACT,CAAC,CAACa,SAAS,EAAEV,MAAM,EAAE;IACpDS,GAAG,IAAI,CAAC;EACV;EACA,OAAOD,OAAO,CAACG,KAAK,CAAC,CAAC,EAAEF,GAAG,CAAC,CAACG,GAAG,CAAEf,CAAC,IACjCA,CAAC,CAACS,IAAI,KAAK,WAAW,IAAIT,CAAC,CAACgB,QAAQ,GAAG;IAAE,GAAGhB,CAAC;IAAEgB,QAAQ,EAAEC;EAAU,CAAC,GAAGjB,CACzE,CAAC;AACH;AAEO,SAASkB,oBAAoBA,CAACC,MAA4B,EAAkB;EACjF,MAAMC,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAIC,gBAAO;EACzC,MAAMC,MAAM,GAAG,IAAIC,oBAAY,CAAC,CAAC;EACjC,MAAMC,MAAM,GAAGL,MAAM,CAACK,MAAM,IAAI,CAAC,CAAC;EAClC,IAAInB,QAAwB,GAAG,EAAE;EACjC,IAAIoB,MAA0B;EAC9B,IAAIC,MAAM,GAAG,KAAK;EAClB;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,IAAIC,cAAsC,GAAG,CAAC,CAAC;;EAE/C;EACA;EACA,IAAAC,4BAAoB,EAACT,MAAM,CAACU,QAAQ,CAAC;EAErC,MAAMC,QAAkB,GACtBX,MAAM,CAACY,QAAQ,KAAK,QAAQ,GACxB,IAAAC,4BAAoB,EAACb,MAAM,CAAC,GAC5B,IAAAc,kCAAuB,EAACd,MAAM,CAAC;;EAErC;EACA;EACA,IAAIe,gBAAgB,GAAGf,MAAM,CAACe,gBAAgB;EAC9C,IAAIC,gBAAgB,GAAGC,MAAM,CAACC,IAAI,CAACH,gBAAgB,CAAC;EAEpD,eAAeI,KAAKA,CAAA,EAAkB;IACpC,IAAIZ,MAAM,EAAE;IACZA,MAAM,GAAG,IAAI;IACb,IAAIa,MAA+B,GAAG,CAAC,CAAC;IACxC,IAAI;MACFA,MAAM,GAAG,MAAM,IAAAC,oCAAkB,EAAC;QAChCC,QAAQ,EAAEtB,MAAM,CAACsB,QAAQ;QACzBC,YAAY,EAAEvB,MAAM,CAACuB,YAAY;QACjCP,gBAAgB;QAChBD;MACF,CAAC,CAAC;IACJ,CAAC,CAAC,MAAM;MACN;MACA;IAAA;IAEFP,cAAc,GAAG,CAAC,CAAC;IACnB,KAAK,MAAMgB,GAAG,IAAKJ,MAAM,CAACK,aAAa,IAA8B,EAAE,EAAE;MACvE,MAAMC,KAAK,GAAGF,GAA6C;MAC3D,IAAIE,KAAK,EAAEC,UAAU,IAAID,KAAK,CAACE,IAAI,EAAEpB,cAAc,CAACkB,KAAK,CAACC,UAAU,CAAC,GAAGD,KAAK,CAACE,IAAI;IACpF;IAEAtB,MAAM,GAAG,IAAAuB,+BAAiB,EAAC;MACzB5B,OAAO;MACP6B,OAAO,EAAE;QAAE,GAAG9B,MAAM,CAAC8B,OAAO;QAAEV,MAAM,EAAE;UAAE,GAAGA,MAAM;UAAE,GAAGpB,MAAM,CAAC8B,OAAO,EAAEV;QAAO;MAAE,CAAC;MAChFW,SAAS,EAAE/B,MAAM,CAAC+B,SAAS;MAC3BC,QAAQ,EAAE3B,MAAM,CAAC2B,QAAQ,IAAI,KAAK;MAClCC,eAAe,EAAE,IAAAC,8BAAsB,EAAC7B,MAAM,CAAC;MAC/C8B,OAAO,EAAEnC,MAAM,CAACmC,OAAO;MACvBC,QAAQ,EAAEpC,MAAM,CAACoC;IACnB,CAAC,CAAC;EACJ;EAEA,OAAO;IACLjC,MAAM;IACN,IAAIjB,QAAQA,CAAA,EAAG;MACb,OAAOA,QAAQ;IACjB,CAAC;IACDiC,KAAK;IAELkB,mBAAmBA,CAACC,OAAiC,EAAE;MACrDvB,gBAAgB,GAAGuB,OAAO;MAC1BtB,gBAAgB,GAAGC,MAAM,CAACC,IAAI,CAACoB,OAAO,CAAC;IACzC,CAAC;IAEDC,OAAOA,CAAC/C,OAAuB,EAAE;MAC/B;MACA;MACA,IAAIN,QAAQ,CAACF,MAAM,GAAG,CAAC,EAAE;MACzBE,QAAQ,GAAGD,WAAW,CAACM,gBAAgB,CAACC,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,OAAOgD,IAAIA,CAACC,IAAY,EAAEC,MAAoB,EAAE;MAC9C,MAAMvB,KAAK,CAAC,CAAC;MACbjC,QAAQ,CAACyD,IAAI,CAAC;QAAErD,IAAI,EAAE,MAAM;QAAEmD;MAAK,CAAC,CAAC;MACrCvD,QAAQ,GAAGD,WAAW,CAACC,QAAQ,CAAC;MAEhC,MAAM0D,GAAG,GAAG,IAAAC,0BAAY,EAAC;QACvBlC,QAAQ;QACRV,OAAO;QACPf,QAAQ;QACRoB,MAAM,EAAEA,MAAO;QACfwC,KAAK,EAAE9C,MAAM,CAAC8C,KAAK;QACnBC,SAAS,EAAE/C,MAAM,CAAC+C,SAAS,IAAI,IAAI;QACnCzB,QAAQ,EAAEtB,MAAM,CAACsB,QAAQ;QACzBC,YAAY,EAAEvB,MAAM,CAACuB,YAAY;QACjCf,cAAc;QACdL,MAAM;QACNE,MAAM;QACN0B,SAAS,EAAE/B,MAAM,CAAC+B,SAAS;QAC3Bf,gBAAgB;QAChBD,gBAAgB;QAChBiC,eAAe,EAAEhD,MAAM,CAACgD,eAAe;QACvCN;MACF,CAAC,CAAC;MAEF,IAAIO,IAAI,GAAG,MAAML,GAAG,CAACK,IAAI,CAAC,CAAC;MAC3B,OAAO,CAACA,IAAI,CAACC,IAAI,EAAE;QACjB,MAAMD,IAAI,CAACE,KAAK;QAChBF,IAAI,GAAG,MAAML,GAAG,CAACK,IAAI,CAAC,CAAC;MACzB;MACA;MACA/D,QAAQ,GAAG+D,IAAI,CAACE,KAAK;IACvB,CAAC;IAEDC,KAAKA,CAAA,EAAG;MACNlE,QAAQ,GAAG,EAAE;MACbiB,MAAM,CAACkD,KAAK,CAAC,CAAC;MACd;MACA;MACA;MACA9C,MAAM,GAAG,KAAK;IAChB;EACF,CAAC;AACH","ignoreList":[]}
+{"version":3,"names":["_catalog","require","_buildContextPack","_runAgentTurn","_systemPrompt","_ledger","_historyBudget","_anthropic","_openai","_policy","_redact","resumableHistory","history","end","length","m","role","toolCalls","slice","map","thinking","undefined","createAskBuoySession","config","catalog","CATALOG","ledger","EffectLedger","policy","messages","seenUrls","Set","system","primed","bypassApproval","deviceReadOnly","trimmedOnRestore","generation","digest","storeKeyOwners","registerSelfEndpoint","endpoint","provider","protocol","createOpenAIProvider","createAnthropicProvider","availableActions","availableToolIds","Object","keys","live","refreshLive","k","assign","requireApproval","requireApprovalFor","readOnly","activePolicy","composeSystem","buildSystemPrompt","context","isRelease","readOnlySource","resolveRequireApproval","approvalsBypassed","appName","platform","prime","buildContextDigest","dispatch","readSnapshot","raw","zustandStores","store","persistsTo","name","setAvailableActions","actions","setApprovalBypass","enabled","setReadOnly","restore","report","trimHistoryReport","droppedRounds","send","text","signal","myGeneration","buildLiveContext","type","trimmed","working","gen","runAgentTurn","systemVolatile","buildLiveBlock","list","e","label","toolId","action","effect","undone","undoneAt","model","maxTokens","requestApproval","next","done","value","reset","clear"],"sourceRoot":"../../src","sources":["session.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAUA,IAAAA,QAAA,GAAAC,OAAA;AACA,IAAAC,iBAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAF,OAAA;AACA,IAAAG,aAAA,GAAAH,OAAA;AACA,IAAAI,OAAA,GAAAJ,OAAA;AACA,IAAAK,cAAA,GAAAL,OAAA;AAOA,IAAAM,UAAA,GAAAN,OAAA;AACA,IAAAO,OAAA,GAAAP,OAAA;AAEA,IAAAQ,OAAA,GAAAR,OAAA;AACA,IAAAS,OAAA,GAAAT,OAAA;AA1BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAqHA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGO,SAASU,gBAAgBA,CAACC,OAAuB,EAAkB;EACxE,IAAIC,GAAG,GAAGD,OAAO,CAACE,MAAM;EACxB,OAAOD,GAAG,GAAG,CAAC,EAAE;IACd,MAAME,CAAC,GAAGH,OAAO,CAACC,GAAG,GAAG,CAAC,CAAE;IAC3B,IAAIE,CAAC,CAACC,IAAI,KAAK,WAAW,IAAI,CAACD,CAAC,CAACE,SAAS,EAAEH,MAAM,EAAE;IACpDD,GAAG,IAAI,CAAC;EACV;EACA,OAAOD,OAAO,CAACM,KAAK,CAAC,CAAC,EAAEL,GAAG,CAAC,CAACM,GAAG,CAAEJ,CAAC,IACjCA,CAAC,CAACC,IAAI,KAAK,WAAW,IAAID,CAAC,CAACK,QAAQ,GAAG;IAAE,GAAGL,CAAC;IAAEK,QAAQ,EAAEC;EAAU,CAAC,GAAGN,CACzE,CAAC;AACH;AAEO,SAASO,oBAAoBA,CAACC,MAA4B,EAAkB;EACjF,MAAMC,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAIC,gBAAO;EACzC,MAAMC,MAAM,GAAG,IAAIC,oBAAY,CAAC,CAAC;EACjC,MAAMC,MAAM,GAAGL,MAAM,CAACK,MAAM,IAAI,CAAC,CAAC;EAClC,IAAIC,QAAwB,GAAG,EAAE;EACjC;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,MAAMC,QAAQ,GAAG,IAAIC,GAAG,CAAS,CAAC;EAClC,IAAIC,MAA0B;EAC9B,IAAIC,MAAM,GAAG,KAAK;EAClB;EACA,IAAIC,cAAc,GAAG,KAAK;EAC1B;EACA,IAAIC,cAAc,GAAG,KAAK;EAC1B;AACF;AACA;AACA;EACE,IAAIC,gBAAgB,GAAG,CAAC;EACxB;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,IAAIC,UAAU,GAAG,CAAC;EAClB;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,IAAIC,MAA+B,GAAG,CAAC,CAAC;EACxC;AACF;AACA;AACA;AACA;AACA;AACA;AACA;EACE,IAAIC,cAAsC,GAAG,CAAC,CAAC;;EAE/C;EACA;EACA,IAAAC,4BAAoB,EAACjB,MAAM,CAACkB,QAAQ,CAAC;EAErC,MAAMC,QAAkB,GACtBnB,MAAM,CAACmB,QAAQ,KACdnB,MAAM,CAACoB,QAAQ,KAAK,QAAQ,GACzB,IAAAC,4BAAoB,EAACrB,MAAM,CAAC,GAC5B,IAAAsB,kCAAuB,EAACtB,MAAM,CAAC,CAAC;;EAEtC;EACA;EACA,IAAIuB,gBAAgB,GAAGvB,MAAM,CAACuB,gBAAgB;EAC9C,IAAIC,gBAAgB,GAAGC,MAAM,CAACC,IAAI,CAACH,gBAAgB,CAAC;;EAEpD;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;EACE,MAAMI,IAAmB,GAAG;IAAE,GAAGtB;EAAO,CAAC;EACzC,SAASuB,WAAWA,CAAA,EAAS;IAC3B,KAAK,MAAMC,CAAC,IAAIJ,MAAM,CAACC,IAAI,CAACC,IAAI,CAAC,EAA6B,OAAOA,IAAI,CAACE,CAAC,CAAC;IAC5EJ,MAAM,CAACK,MAAM,CAACH,IAAI,EAAEtB,MAAM,CAAC;IAC3B,IAAIM,cAAc,EAAE;MAClBgB,IAAI,CAACI,eAAe,GAAG,EAAE;MACzBJ,IAAI,CAACK,kBAAkB,GAAG,EAAE;IAC9B;IACA;IACA,IAAIpB,cAAc,EAAEe,IAAI,CAACM,QAAQ,GAAG,IAAI;EAC1C;EACA,SAASC,YAAYA,CAAA,EAAkB;IACrC,OAAOP,IAAI;EACb;EAEA,SAASQ,aAAaA,CAAA,EAAS;IAC7B1B,MAAM,GAAG,IAAA2B,+BAAiB,EAAC;MACzBnC,OAAO;MACPoC,OAAO,EAAE;QAAE,GAAGrC,MAAM,CAACqC,OAAO;QAAEtB,MAAM,EAAE;UAAE,GAAGA,MAAM;UAAE,GAAGf,MAAM,CAACqC,OAAO,EAAEtB;QAAO;MAAE,CAAC;MAChFuB,SAAS,EAAEtC,MAAM,CAACsC,SAAS;MAC3BL,QAAQ,EAAEN,IAAI,CAACM,QAAQ,IAAI,KAAK;MAChCM,cAAc,EAAElC,MAAM,CAAC4B,QAAQ,GAAG,KAAK,GAAGrB,cAAc,GAAG,QAAQ,GAAGd,SAAS;MAC/EiC,eAAe,EAAE,IAAAS,8BAAsB,EAACb,IAAI,CAAC;MAC7Cc,iBAAiB,EAAE9B,cAAc;MACjC+B,OAAO,EAAE1C,MAAM,CAAC0C,OAAO;MACvBC,QAAQ,EAAE3C,MAAM,CAAC2C;IACnB,CAAC,CAAC;EACJ;EAEA,eAAeC,KAAKA,CAAA,EAAkB;IACpC,IAAIlC,MAAM,EAAE;IACZA,MAAM,GAAG,IAAI;IACbK,MAAM,GAAG,CAAC,CAAC;IACX,IAAI;MACFA,MAAM,GAAG,MAAM,IAAA8B,oCAAkB,EAAC;QAChCC,QAAQ,EAAE9C,MAAM,CAAC8C,QAAQ;QACzBC,YAAY,EAAE/C,MAAM,CAAC+C,YAAY;QACjCvB,gBAAgB;QAChBD;MACF,CAAC,CAAC;IACJ,CAAC,CAAC,MAAM;MACN;MACA;IAAA;IAEFP,cAAc,GAAG,CAAC,CAAC;IACnB,KAAK,MAAMgC,GAAG,IAAKjC,MAAM,CAACkC,aAAa,IAA8B,EAAE,EAAE;MACvE,MAAMC,KAAK,GAAGF,GAA6C;MAC3D,IAAIE,KAAK,EAAEC,UAAU,IAAID,KAAK,CAACE,IAAI,EAAEpC,cAAc,CAACkC,KAAK,CAACC,UAAU,CAAC,GAAGD,KAAK,CAACE,IAAI;IACpF;IAEAjB,aAAa,CAAC,CAAC;EACjB;EAEA,OAAO;IACLhC,MAAM;IACN,IAAIG,QAAQA,CAAA,EAAG;MACb,OAAOA,QAAQ;IACjB,CAAC;IACDsC,KAAK;IAELS,mBAAmBA,CAACC,OAAiC,EAAE;MACrD/B,gBAAgB,GAAG+B,OAAO;MAC1B9B,gBAAgB,GAAGC,MAAM,CAACC,IAAI,CAAC4B,OAAO,CAAC;IACzC,CAAC;IAEDC,iBAAiBA,CAACC,OAAgB,EAAE;MAClC,IAAI7C,cAAc,KAAK6C,OAAO,EAAE;MAChC7C,cAAc,GAAG6C,OAAO;MACxB5B,WAAW,CAAC,CAAC;MACb;MACA;MACA;MACA;MACA,IAAInB,MAAM,EAAE0B,aAAa,CAAC,CAAC;IAC7B,CAAC;IAEDsB,WAAWA,CAACD,OAAgB,EAAE;MAC5B,IAAI5C,cAAc,KAAK4C,OAAO,EAAE;MAChC5C,cAAc,GAAG4C,OAAO;MACxB5B,WAAW,CAAC,CAAC;MACb,IAAInB,MAAM,EAAE0B,aAAa,CAAC,CAAC;IAC7B,CAAC;IAEDuB,OAAOA,CAACrE,OAAuB,EAAE;MAC/B;MACA;MACA,IAAIiB,QAAQ,CAACf,MAAM,GAAG,CAAC,EAAE;MACzB,MAAMoE,MAAM,GAAG,IAAAC,gCAAiB,EAACxE,gBAAgB,CAACC,OAAO,CAAC,CAAC;MAC3DiB,QAAQ,GAAGqD,MAAM,CAACrD,QAAQ;MAC1BO,gBAAgB,GAAG8C,MAAM,CAACE,aAAa;IACzC,CAAC;IAED,OAAOC,IAAIA,CAACC,IAAY,EAAEC,MAAoB,EAAE;MAC9C;AACN;AACA;AACA;AACA;AACA;AACA;AACA;MACM,MAAMC,YAAY,GAAGnD,UAAU;MAC/B,MAAM8B,KAAK,CAAC,CAAC;MACb;MACA;MACA;MACA;MACA;MACA,IAAIjB,IAAyC;MAC7C,IAAI;QACFA,IAAI,GAAG,MAAM,IAAAuC,kCAAgB,EAAC;UAC5BpB,QAAQ,EAAE9C,MAAM,CAAC8C,QAAQ;UACzBC,YAAY,EAAE/C,MAAM,CAAC+C,YAAY;UACjCvB,gBAAgB;UAChBD;QACF,CAAC,CAAC;MACJ,CAAC,CAAC,MAAM;QACNI,IAAI,GAAG7B,SAAS;MAClB;MACA;AACN;AACA;AACA;AACA;AACA;AACA;MACM,IAAImE,YAAY,KAAKnD,UAAU,EAAE;QAC/B,MAAM;UAAEqD,IAAI,EAAE;QAAO,CAAC;QACtB;MACF;;MAEA;AACN;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;MACM,MAAMC,OAAO,GAAG,IAAAR,gCAAiB,EAAC,CAAC,GAAGtD,QAAQ,EAAE;QAAEb,IAAI,EAAE,MAAe;QAAEsE;MAAK,CAAC,CAAC,CAAC;MACjF,MAAMM,OAAO,GAAGD,OAAO,CAAC9D,QAAQ;MAChC;MACA;MACA;MACA,MAAMuD,aAAa,GAAGO,OAAO,CAACP,aAAa,GAAGhD,gBAAgB;MAC9DA,gBAAgB,GAAG,CAAC;MACpB,IAAIgD,aAAa,GAAG,CAAC,EAAE,MAAM;QAAEM,IAAI,EAAE,iBAAiB;QAAEN;MAAc,CAAC;MAEvE,MAAMS,GAAG,GAAG,IAAAC,0BAAY,EAAC;QACvBpD,QAAQ;QACRlB,OAAO;QACPK,QAAQ,EAAE+D,OAAO;QACjB5D,MAAM,EAAEA,MAAO;QACf+D,cAAc,EAAE,IAAAC,4BAAc,EAC5B9C,IAAI;QACJ;QACA;QACA;QACA;QACAxB,MAAM,CAACuE,IAAI,CAAC,CAAC,CAAC9E,GAAG,CAAE+E,CAAC,KAAM;UACxBC,KAAK,EAAE,GAAGD,CAAC,CAACE,MAAM,IAAIF,CAAC,CAACG,MAAM,GAAGH,CAAC,CAACI,MAAM,CAACH,KAAK,GAAG,MAAMD,CAAC,CAACI,MAAM,CAACH,KAAK,EAAE,GAAG,EAAE,EAAE;UAC/EI,MAAM,EAAEL,CAAC,CAACM,QAAQ,KAAKnF;QACzB,CAAC,CAAC,CACJ,CAAC;QACDoF,KAAK,EAAElF,MAAM,CAACkF,KAAK;QACnBC,SAAS,EAAEnF,MAAM,CAACmF,SAAS,IAAI,IAAI;QACnCrC,QAAQ,EAAE9C,MAAM,CAAC8C,QAAQ;QACzBC,YAAY,EAAE/C,MAAM,CAAC+C,YAAY;QACjC/B,cAAc;QACdb,MAAM;QACNE,MAAM,EAAE6B,YAAY,CAAC,CAAC;QACtBI,SAAS,EAAEtC,MAAM,CAACsC,SAAS;QAC3Bd,gBAAgB;QAChBD,gBAAgB;QAChB6D,eAAe,EAAEpF,MAAM,CAACoF,eAAe;QACvC7E,QAAQ;QACRyD;MACF,CAAC,CAAC;MAEF,IAAIqB,IAAI,GAAG,MAAMf,GAAG,CAACe,IAAI,CAAC,CAAC;MAC3B,OAAO,CAACA,IAAI,CAACC,IAAI,EAAE;QACjB,MAAMD,IAAI,CAACE,KAAK;QAChBF,IAAI,GAAG,MAAMf,GAAG,CAACe,IAAI,CAAC,CAAC;MACzB;MACA;MACA;MACA;MACA,IAAIpB,YAAY,KAAKnD,UAAU,EAAER,QAAQ,GAAG+E,IAAI,CAACE,KAAK;IACxD,CAAC;IAEDC,KAAKA,CAAA,EAAG;MACN;MACA1E,UAAU,IAAI,CAAC;MACfR,QAAQ,GAAG,EAAE;MACbO,gBAAgB,GAAG,CAAC;MACpBV,MAAM,CAACsF,KAAK,CAAC,CAAC;MACdlF,QAAQ,CAACkF,KAAK,CAAC,CAAC;MAChB;MACA;MACA;MACA/E,MAAM,GAAG,KAAK;IAChB;EACF,CAAC;AACH","ignoreList":[]}

package/lib/module/blocks/receipts.js

@@ -44,6 +44,30 @@ function requestSummary(r) {
   };
 }
 
+/**
+ * The keys a partial MERGE patch actually changed.
+ *
+ * A merge cannot remove a key, so a key the patch omits is a key that did not
+ * change — and must not be reported. Diffing a store against the patch instead
+ * of against the store did exactly that: a one-field bag edit rendered
+ * "− card_visa", "− tipRate", "− promoCode", telling the user the write had
+ * wiped four fields it never touched.
+ */
+function patchDiff(before, patch) {
+  const a = rec(before) ?? {};
+  const b = rec(patch) ?? {};
+  const out = [];
+  for (const k of Object.keys(b)) {
+    if (typeof a[k] === "function" || typeof b[k] === "function") continue;
+    if (JSON.stringify(a[k]) !== JSON.stringify(b[k])) out.push({
+      path: k,
+      before: a[k],
+      after: b[k]
+    });
+  }
+  return out;
+}
+
 /** Shallow diff of two plain objects: top-level keys that differ. */
 export function shallowDiff(before, after) {
   const a = rec(before) ?? {};
@@ -293,7 +317,17 @@ export function projectReceipt(input) {
     };
   }
   if (toolId === "zustand" && action === "setState" && r?.ok !== false) {
-    const changes = shallowDiff(rec(input.before)?.currentState ?? input.before, params.state);
+    // Diff the store as it WAS against the store as it IS — never against the
+    // request. What was asked for and what landed are different things: a
+    // `path` edit carries no `state` at all (so the whole store read as
+    // deleted), a keyed list edit is expanded by the adapter before it is
+    // applied, and a merge leaves every omitted key alone. Reading both sides
+    // back is the only version of this that cannot lie, and it costs one local
+    // dispatch — no model tokens. `after` is absent only on a host that could
+    // not re-read the store; the patch-shaped fallbacks below are for that.
+    const beforeState = rec(input.before)?.currentState ?? input.before;
+    const afterState = input.after === undefined ? undefined : rec(input.after)?.currentState ?? input.after;
+    const changes = afterState !== undefined ? shallowDiff(beforeState, afterState) : params.replace === true ? shallowDiff(beforeState, params.state) : patchDiff(beforeState, params.state);
     if (changes.length === 0) return undefined;
     return {
       id: id(),
@@ -652,6 +686,28 @@ export function projectReceipt(input) {
   }
 
   // ---- react-query ----------------------------------------------------
+  if (toolId === "query" && action === "setQueryData" && r?.ok !== false) {
+    /**
+     * What the CACHE looks like now against what it looked like before —
+     * never against the request, for the same reasons as the zustand diff
+     * above: a `path` edit carries no `data` at all, a keyed list edit is
+     * expanded by the adapter before it lands, and a merge leaves every
+     * omitted key alone. Both sides are read back through `getQueryData`, so
+     * the card shows what actually moved.
+     */
+    const beforeData = rec(input.before)?.data ?? input.before;
+    const afterData = input.after === undefined ? undefined : rec(input.after)?.data ?? input.after;
+    const changes = afterData !== undefined ? shallowDiff(beforeData, afterData) : patchDiff(beforeData, params.data);
+    if (changes.length === 0) return undefined;
+    const key = Array.isArray(params.queryKey) ? params.queryKey.filter(k => typeof k === "string").join(" › ") : undefined;
+    return {
+      id: id(),
+      kind: "diff",
+      title: `${key || str(params.queryHash) || "query"} — what changed`,
+      changes,
+      source: "changed"
+    };
+  }
   if (toolId === "query" && action === "listQueries" && r) {
     const qs = arr(r.queries).map(rec).filter(Boolean);
     if (qs.length === 0) return undefined;