@buoy-gg/agent-core 7.0.35 → 7.0.36

package/lib/typescript/engine/systemPrompt.d.ts

@@ -41,9 +41,50 @@ export interface SystemPromptInput {
     context?: ContextPack;
     isRelease: boolean;
     readOnly: boolean;
+    /**
+     * Who turned read-only on. The APP configuring it is a rule the user cannot
+     * change; the DEVICE toggle is the person in front of the phone choosing to
+     * look without touching — and the model should tell them where to turn it
+     * off rather than send them to a developer.
+     */
+    readOnlySource?: "app" | "device";
     requireApproval: string[];
+    /**
+     * The user turned approval cards off on this device. Distinct from an empty
+     * `requireApproval`, which is the APP choosing full auto-run: here a gate
+     * exists and the person in front of the phone waived it, so the model is
+     * told plainly that nothing will stop a destructive call.
+     */
+    approvalsBypassed?: boolean;
     appName?: string;
     platform?: string;
 }
 export declare function buildSystemPrompt(input: SystemPromptInput): string;
+/**
+ * The per-turn block: what the app is showing at the moment the user typed.
+ * Rendered AFTER the cached prompt (see ProviderRequest.systemVolatile), so it
+ * can change on every message without invalidating anything.
+ *
+ * Returns undefined when nothing was readable — the prompt then says so, so the
+ * model knows to read for itself rather than assume the block was empty
+ * because the app is.
+ */
+export declare function buildLiveBlock(live: Record<string, unknown> | undefined, 
+/**
+ * What this conversation has already changed, newest last.
+ *
+ * The ledger existed from the start and the model could never see it. Two
+ * failures came out of that. Asked "what have you changed?" it answered from
+ * memory of its own sentences, which drifts and cannot survive a reload. And
+ * reading a value it had itself overwritten three turns earlier, it reported
+ * the number as the app's own — the same "never fake the answer" problem as
+ * a network override, with the model as the one deceived.
+ *
+ * Short by construction: tool, action and a label per entry, capped. It is a
+ * reminder of what happened, not a replay of it.
+ */
+changes?: {
+    label: string;
+    undone: boolean;
+}[]): string;
 //# sourceMappingURL=systemPrompt.d.ts.map

package/lib/typescript/engine/systemPrompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"systemPrompt.d.ts","sourceRoot":"","sources":["../../../src/engine/systemPrompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CA2FlE"}
+{"version":3,"file":"systemPrompt.d.ts","sourceRoot":"","sources":["../../../src/engine/systemPrompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE/C,MAAM,WAAW,WAAW;IAC1B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;IAClC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CA2HlE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;AACzC;;;;;;;;;;;;GAYG;AACH,OAAO,CAAC,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,EAAE,GAC7C,MAAM,CAgBR"}

package/lib/typescript/engine/textToolCalls.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Recovering a tool call a model wrote as TEXT instead of calling.
+ *
+ * Every provider here is sent real tool definitions, and most models use them.
+ * Some don't — under a gateway, after a clarifying question, or just on the
+ * wrong roll, a model answers with the call spelled out as JSON:
+ *
+ *     ```json
+ *     {"calls":[{"tool":"buoy_zustand","action":"setState","params":{…}}],
+ *      "reply":"Done — I added one Jigglypuff to your bag."}
+ *     ```
+ *
+ * Left alone this is the worst outcome the product has: the user said "yes,
+ * go ahead", nothing happened, and what they got back was a wall of JSON
+ * claiming it did. The same class of problem as the parameter aliases in
+ * normalizeParams — models reach for a convention they know, and meeting them
+ * costs one parse.
+ *
+ * Two halves, and the first is why this file exists at all:
+ *
+ * 1. {@link couldBeToolCallEnvelope} runs on every delta, because the decision
+ *    has to be made BEFORE the text reaches the screen. Streamed text cannot
+ *    be taken back. It withholds only what could still be an envelope and
+ *    releases the moment it can't be.
+ * 2. {@link parseTextToolCalls} turns the finished blob into ordinary calls,
+ *    which then go through validation, the policy, and approval exactly like a
+ *    native one. Nothing here decides that a call is allowed to run — a
+ *    recovered destructive call still stops at the same approval sheet.
+ */
+import type { ToolCall } from "../providers/types";
+import type { ToolDescriptor } from "../types";
+/**
+ * Could the text so far still turn out to be a tool-call envelope?
+ *
+ * False the instant it can't be, so an ordinary answer streams exactly as it
+ * did before — the window this holds is one opening brace plus a key name.
+ */
+export declare function couldBeToolCallEnvelope(text: string): boolean;
+export interface SalvagedCalls {
+    calls: ToolCall[];
+    /** The prose the envelope carried, if any. The JSON itself is never shown. */
+    reply: string;
+}
+/**
+ * Read a text envelope as tool calls, or nothing if that is not what it is.
+ *
+ * Deliberately strict about the SHAPE and loose about the spelling: it will
+ * not turn arbitrary JSON into calls (a model showing the user a response body
+ * must still be shown), but it accepts every naming convention a model might
+ * carry over — `tool`/`name`, `params`/`input`/`arguments`, one call or many.
+ */
+export declare function parseTextToolCalls(text: string, catalog: ToolDescriptor[]): SalvagedCalls | undefined;
+/**
+ * Appended to a recovered call's result, so the model corrects itself for the
+ * rest of the conversation instead of writing the next one as text too.
+ */
+export declare const SALVAGE_NOTE = "\n\n[You wrote this call as JSON in your reply instead of calling the tool. It was recovered and run this time. Call tools through the tool interface \u2014 text is shown to the user as-is, and a call written there does not run.]";
+//# sourceMappingURL=textToolCalls.d.ts.map

package/lib/typescript/engine/textToolCalls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"textToolCalls.d.ts","sourceRoot":"","sources":["../../../src/engine/textToolCalls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AA0B/C;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ7D;AA+JD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,cAAc,EAAE,GACxB,aAAa,GAAG,SAAS,CA+B3B;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY,0OAC2M,CAAC"}

package/lib/typescript/index.d.ts

@@ -9,15 +9,17 @@
  */
 export type { ActionDescriptor, ActionEffect, DispatchFn, JsonSchema, ReleaseBehavior, SnapshotFn, ToolDescriptor, UndoSpec, } from "./types";
 export { CATALOG, CATALOG_ACTION_COUNT, CATALOG_TOOL_COUNT } from "./catalog/catalog.g";
+export { CATALOG_ACTIONS, type CatalogAction, type CatalogActionMap, type CatalogToolId, } from "./catalog/catalog.types.g";
 export { fromProviderToolName, toProviderToolName, toProviderTools, type ProviderTool, type ToProviderToolsOptions, } from "./catalog/toProviderTools";
 export { applyDefaults, validateParams, type ValidationResult, } from "./catalog/validateParams";
 export { projectSnapshot, SNAPSHOT_ACTION } from "./catalog/snapshotReads";
+export { normalizeParams, aliasNote, hashQueryKey } from "./catalog/normalizeParams";
 export { createAnthropicProvider } from "./providers/anthropic";
 export { createOpenAIProvider } from "./providers/openai";
 export type { AgentMessage, Provider, ProviderConfig, ProviderRequest, StreamEvent, ThinkingBlock, TokenUsage, ToolCall, ToolResult, } from "./providers/types";
-export { runAgentTurn, runGatedAction, type GatedActionInput, type GatedActionOutcome, type RunTurnInput, type TurnEvent, } from "./engine/runAgentTurn";
-export { buildSystemPrompt, type ContextPack, type SystemPromptInput, } from "./engine/systemPrompt";
-export { buildContextDigest, type BuildContextInput } from "./context/buildContextPack";
+export { runAgentTurn, runGatedAction, readTargetDigest, digestOf, type GatedActionInput, type GatedActionOutcome, type RunTurnInput, type TurnEvent, } from "./engine/runAgentTurn";
+export { buildLiveBlock, buildSystemPrompt, type ContextPack, type SystemPromptInput, } from "./engine/systemPrompt";
+export { buildContextDigest, buildLiveContext, type BuildContextInput, } from "./context/buildContextPack";
 export { EffectLedger, isReversible, type AppliedEffect, type LedgerEntry, type RevertOutcome, } from "./effects/ledger";
 export { humanise, titleCall, toolTitle } from "./policy/labels";
 export * from "./blocks/types";

package/lib/typescript/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,QAAQ,GACT,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,aAAa,EACb,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAE3E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,YAAY,EACV,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,eAAe,EACf,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,EACR,UAAU,GACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,SAAS,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAExF,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjE,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EACL,MAAM,EACN,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,MAAM,EACN,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,YAAY,EACV,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,QAAQ,GACT,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EACL,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,aAAa,EACb,cAAc,EACd,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAErF,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,YAAY,EACV,YAAY,EACZ,QAAQ,EACR,cAAc,EACd,eAAe,EACf,WAAW,EACX,aAAa,EACb,UAAU,EACV,QAAQ,EACR,UAAU,GACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,QAAQ,EACR,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,SAAS,GACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,KAAK,iBAAiB,GACvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,aAAa,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjE,cAAc,gBAAgB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EACL,MAAM,EACN,YAAY,EACZ,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,QAAQ,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,MAAM,EACN,oBAAoB,EACpB,aAAa,EACb,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,oBAAoB,GAC1B,MAAM,WAAW,CAAC"}

package/lib/typescript/policy/labels.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"labels.d.ts","sourceRoot":"","sources":["../../../src/policy/labels.ts"],"names":[],"mappings":"AA+MA,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAgCD,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/C;AAaD;;;GAGG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAoBR"}
+{"version":3,"file":"labels.d.ts","sourceRoot":"","sources":["../../../src/policy/labels.ts"],"names":[],"mappings":"AAwNA,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEhD;AAuCD,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO/C;AAaD;;;GAGG;AACH,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAoBR"}

package/lib/typescript/policy/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/policy/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG/D;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC;IACjC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3D;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,0DAA0D;IAC1D,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wGAAwG;AACxG,eAAO,MAAM,wBAAwB,EAAE,YAAY,EAAoB,CAAC;AAExE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,EAAE,CAE5E;AAED,MAAM,MAAM,QAAQ,GAChB;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GACpB;IAAE,OAAO,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,2CAA2C;IAC3C,SAAS,EAAE,OAAO,CAAC;CACpB;AAKD,wBAAgB,MAAM,CAAC,EACrB,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,WAAW,GAAG,QAAQ,CAuExB;AAoBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,gBAAgB,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAER"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../src/policy/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG/D;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,eAAe,CAAC,EAAE,YAAY,EAAE,CAAC;IACjC;;;;OAIG;IACH,kBAAkB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3D;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;IACpB,0DAA0D;IAC1D,IAAI,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wGAAwG;AACxG,eAAO,MAAM,wBAAwB,EAAE,YAAY,EAAoB,CAAC;AAExE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,EAAE,CAE5E;AAED,MAAM,MAAM,QAAQ,GAChB;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GACpB;IAAE,OAAO,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,aAAa,CAAC;IACtB,2CAA2C;IAC3C,SAAS,EAAE,OAAO,CAAC;CACpB;AAKD,wBAAgB,MAAM,CAAC,EACrB,UAAU,EACV,MAAM,EACN,MAAM,EACN,SAAS,GACV,EAAE,WAAW,GAAG,QAAQ,CA2ExB;AAoBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,gBAAgB,EAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAER"}

package/lib/typescript/policy/redact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../src/policy/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAqDH;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAazD;AAQD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQ3D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOnD;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAYnE"}
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../src/policy/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAoEH;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAazD;AAuBD,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAgB3D;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAOnD;AAQD;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAYnE"}

package/lib/typescript/providers/anthropic.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAEV,QAAQ,EACR,cAAc,EAMf,MAAM,SAAS,CAAC;AAyCjB,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA0MxE"}
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAEV,QAAQ,EACR,cAAc,EAMf,MAAM,SAAS,CAAC;AA0EjB,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAqSxE"}

package/lib/typescript/providers/openai.d.ts

@@ -1,19 +1,3 @@
-/**
- * OpenAI chat-completions protocol.
- *
- * The differences from Anthropic that actually matter to the code:
- * - Tool results are their own `{role:"tool", tool_call_id, content}` MESSAGE,
- *   not blocks inside a user message.
- * - Tool arguments arrive as a JSON STRING, streamed in fragments, and are
- *   keyed by an `index` that is stable across deltas while `id`/`name` only
- *   appear on the first fragment.
- * - The stream DOES have a `data: [DONE]` sentinel, unlike Anthropic's.
- *
- * This adapter also serves Azure and any OpenAI-compatible org gateway, which
- * is the common shape for an internal LLM proxy. Note Anthropic's own
- * OpenAI-compatibility endpoint is explicitly not production-ready and silently
- * ignores several fields — use the native Anthropic adapter for Anthropic.
- */
 import type { Provider, ProviderConfig } from "./types";
 export declare function createOpenAIProvider(config: ProviderConfig): Provider;
 //# sourceMappingURL=openai.d.ts.map

package/lib/typescript/providers/openai.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAEV,QAAQ,EACR,cAAc,EAGf,MAAM,SAAS,CAAC;AA2CjB,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA+GrE"}
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../../../src/providers/openai.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAEV,QAAQ,EACR,cAAc,EAIf,MAAM,SAAS,CAAC;AA6DjB,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CA+MrE"}

package/lib/typescript/providers/sse.d.ts

@@ -7,12 +7,93 @@
  * TV-CLI lanes never had it. So `readSse` degrades to reading the whole body
  * and replaying it as events rather than failing: a non-streaming answer is a
  * slower chat, while a hard failure is no chat at all.
+ *
+ * THE TWO PATHS MUST AGREE. They did not. The buffered path appended "\n\n" to
+ * the body before parsing, which turns an unterminated final frame — the exact
+ * signature of a cut connection — into a well-formed event. The streaming path
+ * discarded that same frame, as the SSE spec requires. So one lane invented a
+ * complete answer where the other saw a broken one. Now both discard it and
+ * both RECORD it (`SseReadStatus.truncated`), because "was this reply whole?"
+ * is a question the engine has to answer before it runs anything.
  */
 export interface SseEvent {
     event?: string;
     data: string;
 }
-export declare function readSse(response: Response): AsyncGenerator<SseEvent, void, void>;
+export interface SseReadStatus {
+    /**
+     * Non-blank bytes were left over at EOF: the stream stopped mid-frame.
+     *
+     * Discarding the partial frame is correct (SSE spec); pretending the stream
+     * ended cleanly is not. Providers pair this with their own terminal-marker
+     * check — a clean frame boundary with no `message_stop`/`[DONE]` is equally
+     * truncated, just tidier about it.
+     */
+    truncated: boolean;
+}
+export interface SseReadOptions {
+    status?: SseReadStatus;
+    /**
+     * Aborts the READ itself, not just the request.
+     *
+     * Normally redundant: a real `fetch` errors its response body when its
+     * signal aborts, so `reader.read()` rejects on its own. But Ask Buoy takes a
+     * host-supplied `fetch` (`ProviderConfig.fetch`), and a wrapper that returns
+     * a body it built itself — an interceptor, a replay harness, a polyfill —
+     * severs that link. Without this the idle timeout fires, aborts a signal
+     * nothing is listening to, and the turn parks on a read that never settles:
+     * exactly the hang the clock was added to end.
+     */
+    signal?: AbortSignal;
+    /**
+     * Called once per COMPLETE frame, including ones that yield nothing.
+     *
+     * The idle timeout hangs off this. A comment-only frame — `: OPENROUTER
+     * PROCESSING`, which is exactly what arrives during a long silence — is
+     * skipped by the parser and would otherwise look identical to a dead socket.
+     */
+    onFrame?: () => void;
+}
+/**
+ * Turn a stream of TEXT chunks into SSE frames.
+ *
+ * The one place framing happens, whatever produced the bytes: a `fetch` body
+ * reader, an `XMLHttpRequest` progress slice, or a whole body read at once on
+ * a runtime that cannot stream. Splitting it out is what lets the XHR
+ * transport exist without a second parser to keep in step with this one.
+ */
+export declare function framesFrom(chunks: AsyncIterable<string>, options?: SseReadOptions): AsyncGenerator<SseEvent, void, void>;
+export declare function readSse(response: Response, options?: SseReadOptions): AsyncGenerator<SseEvent, void, void>;
+/**
+ * A 200 that is not a stream at all.
+ *
+ * Gateways in front of a model do this: an auth proxy that has lost its
+ * upstream serves an HTML error page, a misrouted path serves an SPA shell,
+ * and a gateway that ignored `stream: true` serves one JSON object. Every one
+ * of those parses to zero SSE frames, so the old code read it as a model that
+ * had nothing to say and ended the turn with a blank bubble.
+ *
+ * Returns a message when the body should be treated as an error, and undefined
+ * when it looks like something the SSE reader can work with. Consumes the body
+ * only in the failing case.
+ */
+export declare function nonStreamProblem(response: Response): Promise<string | undefined>;
 /** Body text for a failed response, trimmed to something a user can read. */
 export declare function errorBody(response: Response): Promise<string>;
+/**
+ * The message for a stream that stopped before the provider said it was done.
+ *
+ * `truncated` distinguishes the two shapes: cut mid-frame (a dropped
+ * connection) versus a clean frame boundary with no terminal marker (a gateway
+ * that closes the socket instead of sending one). The second is a
+ * compatibility problem worth naming, because retrying it will not help.
+ */
+export declare function truncatedMessage(truncated: boolean): string;
+/**
+ * The message for arguments that would not parse, with enough in it to act on.
+ * `stopReason` "length" is the common cause — a reasoning model spends its
+ * budget thinking and the tool call is truncated mid-JSON — and the tail of
+ * the raw arguments says immediately whether that is what happened.
+ */
+export declare function unparseableMessage(name: string, args: string, stopReason?: string): string;
 //# sourceMappingURL=sse.d.ts.map

package/lib/typescript/providers/sse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/providers/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAsBD,wBAAuB,OAAO,CAC5B,QAAQ,EAAE,QAAQ,GACjB,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAkDtC;AAED,6EAA6E;AAC7E,wBAAsB,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAQnE"}
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../../../src/providers/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,WAAW,QAAQ;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;OAOG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;CACtB;AA6CD;;;;;;;GAOG;AACH,wBAAuB,UAAU,CAC/B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,EAC7B,OAAO,GAAE,cAAmB,GAC3B,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAUtC;AAED,wBAAuB,OAAO,CAC5B,QAAQ,EAAE,QAAQ,EAClB,OAAO,GAAE,cAAmB,GAC3B,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CA6EtC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAYtF;AAED,6EAA6E;AAC7E,wBAAsB,SAAS,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAQnE;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAI3D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAQ1F"}

package/lib/typescript/providers/streamTimer.d.ts

@@ -0,0 +1,59 @@
+/**
+ * The clock on a model request.
+ *
+ * There was none. A gateway that accepted the socket and then said nothing —
+ * an overloaded proxy, a dropped VPN, a laptop that slept mid-answer — left
+ * the turn running with the thinking strip animating until a person pressed
+ * Stop. The 180s turn deadline did not help: it is read at the TOP of a step
+ * (`runAgentTurn`), and a step parked inside `await fetch(...)` never reaches
+ * the next one.
+ *
+ * Two clocks, because the two silences mean different things:
+ *
+ * - CONNECT covers "no headers yet". Nothing has been generated, so nothing is
+ *   lost by giving up; 30s is already long for a gateway to acknowledge a POST.
+ * - IDLE covers "headers arrived, then nothing". This one has to be generous.
+ *   Anthropic sends `ping` frames, but an OpenAI-protocol reasoning model can
+ *   legitimately emit nothing for a long stretch while it thinks, and cutting
+ *   that off would look like a broken product. Any frame at all — a keepalive
+ *   comment included — resets it, so only total silence trips it.
+ *
+ * A timeout is NOT a retry. Nothing is re-sent: the request may have reached
+ * the model, and a duplicate turn is a duplicate bill and possibly duplicate
+ * writes. The turn ends with an honest notice and a Continue button.
+ */
+export declare const DEFAULT_CONNECT_TIMEOUT_MS = 30000;
+export declare const DEFAULT_IDLE_TIMEOUT_MS = 90000;
+export interface StreamTimerOptions {
+    connectTimeoutMs?: number;
+    idleTimeoutMs?: number;
+}
+export interface StreamTimer {
+    /**
+     * The signal to hand to `fetch`. Aborts when the caller's signal aborts OR
+     * when either clock runs out, so one signal covers all three.
+     */
+    readonly signal: AbortSignal | undefined;
+    /** Headers arrived: stop the connect clock, start the idle one. */
+    connected(): void;
+    /** A frame arrived: restart the idle clock. */
+    activity(): void;
+    /**
+     * Which clock fired, if either. Read in the provider's catch: an abort with
+     * a reason here is a timeout, an abort without one is the user's Stop.
+     */
+    readonly expired: "connect" | "idle" | undefined;
+    /** Message for the expired clock, or undefined if neither fired. */
+    message(): string | undefined;
+    /** Always call this — a live timer keeps the JS runtime awake. */
+    dispose(): void;
+}
+/**
+ * A timer over an optional caller signal.
+ *
+ * When no `AbortController` exists (a runtime old enough to lack it) this
+ * degrades to passing the caller's signal straight through with no clocks,
+ * rather than failing to send anything at all.
+ */
+export declare function createStreamTimer(callerSignal: AbortSignal | undefined, options?: StreamTimerOptions): StreamTimer;
+//# sourceMappingURL=streamTimer.d.ts.map

package/lib/typescript/providers/streamTimer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamTimer.d.ts","sourceRoot":"","sources":["../../../src/providers/streamTimer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AACjD,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IACzC,mEAAmE;IACnE,SAAS,IAAI,IAAI,CAAC;IAClB,+CAA+C;IAC/C,QAAQ,IAAI,IAAI,CAAC;IACjB;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;IACjD,oEAAoE;IACpE,OAAO,IAAI,MAAM,GAAG,SAAS,CAAC;IAC9B,kEAAkE;IAClE,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,WAAW,GAAG,SAAS,EACrC,OAAO,GAAE,kBAAuB,GAC/B,WAAW,CAyFb"}

package/lib/typescript/providers/transport.d.ts

@@ -0,0 +1,40 @@
+/**
+ * How a request is SENT, decided before it is sent.
+ *
+ * The obvious place to add XHR was inside `readSse`, once a missing
+ * `response.body` had already proved that `fetch` could not stream. That is
+ * the wrong boundary and would have been a real bug: the POST has already
+ * happened by then, the reader has neither the URL nor the headers nor the
+ * body to repeat it, and issuing a second one would ask the model to generate
+ * the same answer twice — billed twice, and for a turn that writes, acted on
+ * twice. Transport is chosen up front; a response that has started is consumed
+ * exactly once, whatever it turns out to be.
+ *
+ * `auto` therefore learns rather than probes. The first request goes through
+ * `fetch`; if that response has no reader, the answer is buffered (as it
+ * always was on that runtime) and the SESSION remembers, so every later
+ * request uses XHR and streams. One buffered reply at the start of a bare-RN
+ * session, and nothing to configure.
+ */
+import type { ProviderConfig } from "./types";
+import { type SseEvent, type SseReadOptions } from "./sse";
+export type TransportKind = "fetch" | "xhr" | "auto";
+export interface OpenStreamRequest {
+    headers: Record<string, string>;
+    body: string;
+    signal?: AbortSignal;
+}
+export interface OpenStreamResult {
+    /** A message when the request failed or is not a stream; frames are empty. */
+    problem?: string;
+    frames(options?: SseReadOptions): AsyncGenerator<SseEvent, void, void>;
+}
+export interface Transport {
+    open(req: OpenStreamRequest): Promise<OpenStreamResult>;
+}
+/**
+ * One transport per provider instance, because the `auto` decision is worth
+ * remembering: re-learning it would buffer the first reply of every turn.
+ */
+export declare function createTransport(config: ProviderConfig): Transport;
+//# sourceMappingURL=transport.d.ts.map

package/lib/typescript/providers/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../src/providers/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAIL,KAAK,QAAQ,EACb,KAAK,cAAc,EACpB,MAAM,OAAO,CAAC;AAGf,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACzD;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,CAsEjE"}

package/lib/typescript/providers/types.d.ts

@@ -55,6 +55,35 @@ export type AgentMessage = {
     role: "tool-results";
     results: ToolResult[];
 };
+/**
+ * Why a stream ended, and whether what arrived can be acted on.
+ *
+ * `completed` is the ONLY value that admits tool calls for execution. The
+ * distinction exists because a truncated response is indistinguishable from a
+ * finished one by content alone: a connection cut after the model emitted
+ * `{"key":"cart","value":[]}` leaves valid JSON and a plausible plan, and the
+ * engine used to run it. See `StreamEvent.error.kind` for the other half.
+ */
+export type StreamOutcome = 
+/** A terminal marker arrived: `message_stop` (Anthropic) or `[DONE]` (OpenAI). */
+"completed"
+/**
+ * Terminal marker arrived, but the model was cut off at `max_tokens` mid-plan.
+ * The text it managed is real; any tool calls in it are half a thought and
+ * are NOT executed.
+ */
+ | "output-limited";
+/**
+ * Why a stream failed. `provider` is the model or gateway saying so; the other
+ * two are this side deciding the response cannot be trusted.
+ */
+export type StreamErrorKind = 
+/** The provider reported it: HTTP error, or an `error` event on a 200. */
+"provider"
+/** The stream ended with no terminal marker. Bare EOF is never success. */
+ | "truncated"
+/** No headers within `connectTimeoutMs`, or no bytes within `idleTimeoutMs`. */
+ | "timeout";
 /** Incremental output from a streaming turn. */
 export type StreamEvent = {
     type: "text";
@@ -72,10 +101,22 @@ export type StreamEvent = {
  | {
     type: "error";
     message: string;
-} | {
+    kind: StreamErrorKind;
+}
+/**
+ * The stream ended in a state worth acting on. A provider that cannot say
+ * this yields an `error` instead — there is no third way out.
+ *
+ * `model` is the id the provider actually SERVED — `message_start.message.model`
+ * on Anthropic, the chunk's `model` on OpenAI — which differs from the one
+ * requested whenever a gateway resolves an alias to a dated snapshot.
+ */
+ | {
     type: "done";
+    outcome: StreamOutcome;
     stopReason?: string;
     usage?: TokenUsage;
+    model?: string;
 };
 export interface TokenUsage {
     input: number;
@@ -84,8 +125,10 @@ export interface TokenUsage {
      * Anthropic's prompt-cache counters, when the provider reports them.
      * `cacheRead` is the prefix that was served from cache at 0.1x — the whole
      * point of caching — and `cacheWrite` is the prefix stored at 1.25x on the
-     * request that populated it. Both are reported SEPARATELY from `input` by
-     * the API, so a cached request shows a tiny `input` and a large `cacheRead`
+     * request that populated it. On Anthropic both are reported SEPARATELY from
+     * `input`, so a cached request shows a tiny `input` and a large `cacheRead`;
+     * on the OpenAI protocol `cacheRead` (from `prompt_tokens_details.cached_tokens`)
+     * is INCLUDED in `input` — never add the two there. Otherwise a cached request shows a tiny `input` and a large `cacheRead`
      * rather than a smaller `input`; adding them is what gives the real total.
      */
     cacheRead?: number;
@@ -94,6 +137,13 @@ export interface TokenUsage {
 export interface ProviderRequest {
     messages: AgentMessage[];
     system: string;
+    /**
+     * The part of the system prompt that changes every turn — the "right now"
+     * picture of the app (current route, mounted queries, recent requests).
+     * Kept apart from `system` so a provider that caches the stable prefix can
+     * append this AFTER its cache breakpoint instead of invalidating it.
+     */
+    systemVolatile?: string;
     tools: ProviderTool[];
     model: string;
     maxTokens: number;
@@ -132,6 +182,25 @@ export interface ProviderConfig {
      * Set false for a gateway that rejects unknown `cache_control` fields.
      */
     cache?: boolean;
+    /**
+     * How long to wait for response HEADERS before giving up. Default 30s.
+     *
+     * There was no clock here at all: a gateway that accepted the socket and
+     * never replied left the turn spinning until someone pressed Stop, with the
+     * thinking strip still animating. A timeout is not a retry — nothing is
+     * re-sent, because a request that may have reached the model is not safe to
+     * duplicate.
+     */
+    connectTimeoutMs?: number;
+    /**
+     * How long to wait between BYTES once the stream is open. Default 90s.
+     *
+     * Deliberately generous. Anthropic sends `ping` frames, but an OpenAI-protocol
+     * reasoning model can legitimately produce nothing for a long stretch while
+     * it thinks, and cutting that off looks exactly like a broken product. Only
+     * total silence counts — any frame, including a keepalive comment, resets it.
+     */
+    idleTimeoutMs?: number;
     /**
      * Extra fields merged into every request BODY, last — `temperature`, a
      * gateway's routing hints, whatever the endpoint demands that this config
@@ -140,6 +209,25 @@ export interface ProviderConfig {
      * stream) win only if you don't override them, so use with care.
      */
     requestOverrides?: Record<string, unknown>;
+    /**
+     * How to send the request: `fetch`, `xhr`, or `auto` (the default).
+     *
+     * `auto` starts with `fetch` and switches to XHR for the rest of the session
+     * if that first response turns out to have no readable body — which is React
+     * Native's own `fetch`, and every runtime without `expo/fetch` installed as
+     * the global. Pin it to `"xhr"` in a bare-RN app to stream from the very
+     * first reply instead of the second; pin it to `"fetch"` to rule XHR out.
+     * See providers/transport.ts for why the choice cannot be made later.
+     */
+    transport?: "fetch" | "xhr" | "auto";
+    /**
+     * The fetch to send requests with. Default: the global one. A harness
+     * passes its own so a network interceptor that wraps the global fetch
+     * stays off model traffic (it would otherwise capture — and could
+     * override — the agent's own requests), and so it can keep every request
+     * body it sent.
+     */
+    fetch?: typeof fetch;
 }
 export interface Provider {
     readonly protocol: "anthropic" | "openai";

package/lib/typescript/providers/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/providers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,oEAAoE;AACpE,MAAM,WAAW,QAAQ;IACvB,+DAA+D;IAC/D,EAAE,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC;AAEpD,gDAAgD;AAChD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE;AACvC,sEAAsE;GACpE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE;AAC5C,8EAA8E;GAC5E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,UAAU,CAAA;CAAE,CAAC;AAE9D,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC1C;;;;;OAKG;IACH,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;CACrE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/providers/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,oEAAoE;AACpE,MAAM,WAAW,QAAQ;IACvB,+DAA+D;IAC/D,EAAE,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC;AAEpD;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa;AACvB,kFAAkF;AAChF,WAAW;AACb;;;;GAIG;GACD,gBAAgB,CAAC;AAErB;;;GAGG;AACH,MAAM,MAAM,eAAe;AACzB,0EAA0E;AACxE,UAAU;AACZ,2EAA2E;GACzE,WAAW;AACb,gFAAgF;GAC9E,SAAS,CAAC;AAEd,gDAAgD;AAChD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE;AACvC,sEAAsE;GACpE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE;AAC5C,8EAA8E;GAC5E;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE;AAC3D;;;;;;;GAOG;GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;IACrC;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,QAAQ,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC1C;;;;;OAKG;IACH,IAAI,CAAC,GAAG,EAAE,eAAe,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;CACrE"}

package/lib/typescript/providers/xhrStream.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Streaming over `XMLHttpRequest`, for the runtimes where `fetch` cannot.
+ *
+ * React Native core still has no `response.body`: its `fetch` is the whatwg
+ * polyfill over XHR and resolves inside `xhr.onload`, i.e. after the ENTIRE
+ * body. Under Expo the global is `expo/fetch`, which does stream — but
+ * `EXPO_PUBLIC_USE_RN_FETCH=1` reverts that, and the bare-RN CLI, TV CLI and
+ * NativeScript lanes never had it at all. On those, every Ask Buoy answer
+ * appeared in one lump, however long the model took.
+ *
+ * XHR itself has streamed the whole time. `responseText` grows as bytes arrive
+ * and `onprogress` fires as it does, so slicing from the last offset gives the
+ * same incremental text a reader would. Two conditions, both easy to miss:
+ * the progress handler must be installed BEFORE `send()`, and `responseType`
+ * must stay text — anything else stops RN emitting progress at all.
+ *
+ * WHAT THIS IS NOT. It is not a second SSE parser: framing, the truncation
+ * rule and the terminal-marker contract all live in `sse.ts` and are shared
+ * verbatim. This file only produces text chunks.
+ */
+import { type SseEvent, type SseReadOptions } from "./sse";
+export interface XhrStreamRequest {
+    url: string;
+    headers: Record<string, string>;
+    body: string;
+    signal?: AbortSignal;
+}
+export interface XhrStreamResponse {
+    status: number;
+    ok: boolean;
+    contentType: string;
+    /** Whole body, for the non-2xx and not-a-stream paths. Reads what arrived. */
+    text(): Promise<string>;
+    frames(options?: SseReadOptions): AsyncGenerator<SseEvent, void, void>;
+}
+export declare function xhrAvailable(): boolean;
+/**
+ * Send the request and resolve once the HEADERS are in, so the caller can
+ * check the status and content type before deciding to read a stream — the
+ * same shape `fetch` offers, and the reason this can slot in beside it.
+ */
+export declare function xhrStream(req: XhrStreamRequest): Promise<XhrStreamResponse>;
+//# sourceMappingURL=xhrStream.d.ts.map

package/lib/typescript/providers/xhrStream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xhrStream.d.ts","sourceRoot":"","sources":["../../../src/providers/xhrStream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAc,KAAK,QAAQ,EAAE,KAAK,cAAc,EAAE,MAAM,OAAO,CAAC;AAKvE,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;CACxE;AAED,wBAAgB,YAAY,IAAI,OAAO,CAEtC;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA+K3E"}