@buoy-gg/agent-core 7.0.41 → 7.0.42

package/lib/module/session.js

@@ -1,369 +1 @@
-"use strict";
-
-/**
- * A conversation, with everything wired up.
- *
- * This is the one-call surface the UI packages use. It owns the pieces that
- * have to agree with each other across a whole session — the provider, the
- * catalog filtered to what this device can actually do, the system prompt
- * (the stable part built once after grounding, the RIGHT NOW part re-read every
- * turn), the effect ledger, and the message history —
- * so a chat UI is a message list plus a text box rather than an orchestrator.
- */
-import { CATALOG } from "./catalog/catalog.g";
-import { buildContextDigest, buildLiveContext } from "./context/buildContextPack";
-import { runAgentTurn } from "./engine/runAgentTurn";
-import { buildLiveBlock, buildSystemPrompt, listableProcedures } from "./engine/systemPrompt";
-import { EffectLedger } from "./effects/ledger";
-import { EvidenceStore } from "./engine/evidence";
-import { TokenCalibration } from "./engine/tokenCalibration";
-import { compressConsumed, trimHistory, trimHistoryReport } from "./engine/historyBudget";
-import { createAnthropicProvider } from "./providers/anthropic";
-import { createOpenAIProvider } from "./providers/openai";
-import { resolveRequireApproval } from "./policy/policy";
-import { registerSelfEndpoint } from "./policy/redact";
-/**
- * A stored history, made safe to send as the start of a new request.
- *
- * Two things make a saved conversation unusable as-is.
- *
- * A history captured mid-turn ends with an assistant message whose `tool_use`
- * blocks were never answered, or with the `tool_result`s and no reply after
- * them. Every provider rejects both: the blocks must pair up. So this rewinds
- * to the last COMPLETE round — an assistant message that made no tool calls,
- * which is where a conversation is always safe to resume from.
- *
- * And thinking blocks are dropped. Anthropic needs them replayed only when the
- * very next thing sent is that turn's `tool_result`s; a restored conversation
- * always resumes with a fresh user message instead, so their signatures are
- * dead weight at best and a stale-signature 400 at worst.
- */
-// Re-exported: these were defined here before the engine needed them too, and
-// the tests and the package surface still reach them through this module.
-export { compressConsumed, trimHistory, trimHistoryReport };
-export function resumableHistory(history) {
-  let end = history.length;
-  while (end > 0) {
-    const m = history[end - 1];
-    if (m.role === "assistant" && !m.toolCalls?.length) break;
-    end -= 1;
-  }
-  return history.slice(0, end).map(m => m.role === "assistant" && m.thinking ? {
-    ...m,
-    thinking: undefined
-  } : m);
-}
-export function createAskBuoySession(config) {
-  const catalog = config.catalog ?? CATALOG;
-  const ledger = new EffectLedger();
-  const policy = config.policy ?? {};
-  let messages = [];
-  /**
-   * Image-URL provenance for the whole conversation, not one turn of it.
-   *
-   * "Show me the shop as pictures" and "no, actually render them" are two
-   * turns; the second has no tool calls of its own, so a per-turn set held
-   * nothing and every image was stripped out from under the model. It kept
-   * describing artwork that was not on screen. The rule is unchanged — a URL
-   * still has to have been READ — the window is just the conversation. Reset
-   * with the conversation.
-   */
-  const seenUrls = new Set();
-  /**
-   * Every result's full text, for `ask-buoy.retrieve` — see engine/evidence.ts.
-   * Conversation-scoped like `seenUrls`: "what were the stats in that response"
-   * is a normal second message. Cleared with the conversation; never persisted.
-   */
-  const evidence = new EvidenceStore();
-  /** Chars-per-token as measured on THIS session's provider — see engine/tokenCalibration.ts. */
-  const calibration = new TokenCalibration();
-  let system;
-  let primed = false;
-  /** See `setApprovalBypass`. Consulted per turn, never captured. */
-  let bypassApproval = false;
-  /** Actions the user waived the card for in this conversation — see RunTurnInput.trusted. */
-  const trusted = new Set();
-  /** See `setReadOnly`. */
-  let deviceReadOnly = false;
-  /**
-   * Rounds dropped by `restore` — reported on the first send, because there is
-   * no open turn to carry the event when the restore happens.
-   */
-  let trimmedOnRestore = 0;
-  /**
-   * Which conversation is live. Bumped by `reset`.
-   *
-   * A turn's history is committed when its generator drains, and a turn does
-   * not stop the moment Stop is pressed — an in-flight dispatch has to settle
-   * first, and nothing can pull a store write back out of an adapter. So the
-   * sequence Stop -> "New conversation" -> the write finishes used to end with
-   * the OLD turn assigning its whole history over the empty one: a chat the
-   * user had just cleared came back, carrying a change they never saw made.
-   * The turn still finishes and its effect still lands in the app; it simply
-   * no longer owns a conversation that has moved on.
-   */
-  let generation = 0;
-  /**
-   * The grounding probe's result, held past `prime`.
-   *
-   * The system prompt is a pure function of this plus the policy, and the
-   * approval paragraph changes when the device toggle does — holding the
-   * digest lets the prompt be rebuilt without re-probing the app for state it
-   * already read.
-   */
-  let digest = {};
-  /**
-   * `storage key -> the live store that owns it`, derived from the grounding.
-   *
-   * Kept because the prompt alone is advice, and a cheap model skips advice the
-   * same way it skips an optional parameter. With this the ENGINE can tell,
-   * at dispatch time, that a storage write landed on a store's saved copy and
-   * therefore changed nothing the user can see.
-   */
-  let storeKeyOwners = {};
-
-  // So the agent's own requests to the model endpoint never come back to it
-  // out of the network tool — that would feed it its own auth headers.
-  registerSelfEndpoint(config.endpoint);
-  const provider = config.provider ?? (config.protocol === "openai" ? createOpenAIProvider(config) : createAnthropicProvider(config));
-
-  // Mutable: the device's tool list fills in over the first frames and can
-  // change while the sheet is open. See setAvailableActions.
-  let availableActions = config.availableActions;
-  let availableToolIds = Object.keys(availableActions);
-
-  /**
-   * THE policy object the engine reads, mutated in place.
-   *
-   * One object for the life of the session, not a fresh one per turn: the
-   * engine reads `policy.readOnly` and the approval lists at each call, so a
-   * toggle flipped mid-turn lands on the very next call of that turn. A new
-   * object per turn would leave a running turn on the old rules until it
-   * finished — "Read only" switched on while the agent was writing would let
-   * the rest of the batch through.
-   */
-  const live = {
-    ...policy
-  };
-  function refreshLive() {
-    for (const k of Object.keys(live)) delete live[k];
-    Object.assign(live, policy);
-    if (bypassApproval) {
-      live.requireApproval = [];
-      live.requireApprovalFor = [];
-    }
-    // OR, never override: the device can narrow, the app's own read-only stands.
-    if (deviceReadOnly) live.readOnly = true;
-  }
-  function activePolicy() {
-    return live;
-  }
-  function composeSystem() {
-    system = buildSystemPrompt({
-      catalog,
-      context: {
-        ...config.context,
-        digest: {
-          ...digest,
-          ...config.context?.digest
-        }
-      },
-      isRelease: config.isRelease,
-      readOnly: live.readOnly ?? false,
-      readOnlySource: policy.readOnly ? "app" : deviceReadOnly ? "device" : undefined,
-      requireApproval: resolveRequireApproval(live),
-      approvalsBypassed: bypassApproval,
-      appName: config.appName,
-      platform: config.platform,
-      availableToolIds
-    });
-  }
-  async function prime() {
-    if (primed) return;
-    primed = true;
-    digest = {};
-    try {
-      digest = await buildContextDigest({
-        dispatch: config.dispatch,
-        readSnapshot: config.readSnapshot,
-        availableToolIds,
-        availableActions
-      });
-    } catch {
-      // Grounding is an optimisation. A chat with no digest still works; a
-      // chat that refuses to open because a probe timed out does not.
-    }
-    storeKeyOwners = {};
-    for (const raw of digest.zustandStores ?? []) {
-      const store = raw;
-      if (store?.persistsTo && store.name) storeKeyOwners[store.persistsTo] = store.name;
-    }
-    composeSystem();
-  }
-  return {
-    ledger,
-    evidence,
-    calibration,
-    trustedActions: () => [...trusted],
-    untrust: key => {
-      trusted.delete(key);
-    },
-    get messages() {
-      return messages;
-    },
-    prime,
-    setAvailableActions(actions) {
-      availableActions = actions;
-      availableToolIds = Object.keys(actions);
-    },
-    setApprovalBypass(enabled) {
-      if (bypassApproval === enabled) return;
-      bypassApproval = enabled;
-      refreshLive();
-      // The prompt tells the model whether a card will appear before its
-      // change lands; leaving that paragraph stale would have it announce an
-      // approval step that no longer exists. Rebuilt from the held digest, so
-      // toggling mid-conversation costs nothing and re-reads nothing.
-      if (system) composeSystem();
-    },
-    setReadOnly(enabled) {
-      if (deviceReadOnly === enabled) return;
-      deviceReadOnly = enabled;
-      refreshLive();
-      if (system) composeSystem();
-    },
-    restore(history) {
-      // Only into a session that has not been talked to. Restoring over a live
-      // conversation would drop whatever was said since the app started.
-      if (messages.length > 0) return;
-      const report = trimHistoryReport(resumableHistory(history), calibration.charsPerToken, ledger.liveCallIds());
-      messages = report.messages;
-      trimmedOnRestore = report.droppedRounds;
-    },
-    async *send(text, signal) {
-      /**
-       * Captured FIRST, before any await.
-       *
-       * Priming and the live-context probes are awaits like any other, and a
-       * reset can land inside them. Reading the generation after them would
-       * pick up the NEW conversation's value and let this turn commit into it —
-       * the precise bug this guards against, reintroduced one line lower.
-       */
-      const myGeneration = generation;
-      await prime();
-      // The RIGHT NOW block: re-read on EVERY turn, not once at open. The
-      // stable digest above was once the whole picture, and it was built
-      // before the user had navigated anywhere — so the query that owned the
-      // screen they were looking at was simply not in the prompt. This is the
-      // uncached tail of the system prompt (see ProviderRequest.systemVolatile).
-      let live;
-      try {
-        live = await buildLiveContext({
-          dispatch: config.dispatch,
-          readSnapshot: config.readSnapshot,
-          availableToolIds,
-          availableActions
-        });
-      } catch {
-        live = undefined;
-      }
-      /**
-       * The conversation was cleared while this turn was still getting ready.
-       *
-       * Priming and the live probes take real time, so "New conversation"
-       * lands here often enough to matter. Abandoning now costs nothing: the
-       * model has not been asked anything yet.
-       */
-      if (myGeneration !== generation) {
-        yield {
-          type: "done",
-          stopReason: "superseded"
-        };
-        return;
-      }
-
-      /**
-       * The turn works on its OWN array, and `messages` is assigned in exactly
-       * one place — the commit at the bottom.
-       *
-       * `runAgentTurn` pushes each round into the array it is handed. Handing
-       * it the session's own array made every push a live edit of session
-       * state, so a turn racing a reset wrote its whole history into the new
-       * conversation one push at a time and the commit guard had nothing left
-       * to protect. Copying makes ownership checkable in one place instead of
-       * spread across the loop.
-       */
-      const trimmed = trimHistoryReport([...messages, {
-        role: "user",
-        text
-      }], calibration.charsPerToken, ledger.liveCallIds());
-      const working = trimmed.messages;
-      // Said once, before the answer it affects. The screen still shows the
-      // rounds the model just lost; this is the only thing that tells the two
-      // apart. See the `history-trimmed` event.
-      const droppedRounds = trimmed.droppedRounds + trimmedOnRestore;
-      trimmedOnRestore = 0;
-      if (droppedRounds > 0) yield {
-        type: "history-trimmed",
-        droppedRounds,
-        droppedPinned: trimmed.droppedPinned
-      };
-      const gen = runAgentTurn({
-        provider,
-        catalog,
-        messages: working,
-        system: system,
-        systemVolatile: buildLiveBlock(live,
-        // What this conversation has already done to the app. See
-        // buildLiveBlock — without it the model answers "what have you
-        // changed?" from memory of its own sentences, and reports a value it
-        // overwrote itself as the app's own.
-        ledger.list().map(e => ({
-          label: `${e.toolId}.${e.action}${e.effect.label ? ` — ${e.effect.label}` : ""}`,
-          undone: e.undoneAt !== undefined
-        }))),
-        model: config.model,
-        maxTokens: config.maxTokens ?? 4096,
-        dispatch: config.dispatch,
-        readSnapshot: config.readSnapshot,
-        storeKeyOwners,
-        ledger,
-        policy: activePolicy(),
-        isRelease: config.isRelease,
-        availableToolIds,
-        availableActions,
-        requestApproval: config.requestApproval,
-        seenUrls,
-        evidence,
-        calibration,
-        trusted,
-        procedures: listableProcedures(config.context?.procedures, availableToolIds),
-        signal
-      });
-      let next = await gen.next();
-      while (!next.done) {
-        yield next.value;
-        next = await gen.next();
-      }
-      // The generator's return value is the full history including tool turns.
-      // Committed only if this turn still owns the conversation — see
-      // `generation`.
-      if (myGeneration === generation) messages = next.value;
-    },
-    reset() {
-      // Before anything else: a turn still draining must not commit over this.
-      generation += 1;
-      messages = [];
-      trimmedOnRestore = 0;
-      ledger.clear();
-      seenUrls.clear();
-      evidence.clear();
-      trusted.clear();
-      // The grounding digest is a snapshot of the app AT OPEN — stores and
-      // routes registered since are invisible to it. A new conversation is
-      // the natural moment to re-read the world.
-      primed = false;
-    }
-  };
-}
-//# sourceMappingURL=session.js.map
+"use strict";import{CATALOG as H}from"./catalog/catalog.g";import{buildContextDigest as g,buildLiveContext as G}from"./context/buildContextPack";import{runAgentTurn as N}from"./engine/runAgentTurn";import{buildLiveBlock as z,buildSystemPrompt as D,listableProcedures as F}from"./engine/systemPrompt";import{EffectLedger as K}from"./effects/ledger";import{EvidenceStore as U}from"./engine/evidence";import{TokenCalibration as V}from"./engine/tokenCalibration";import{compressConsumed as J,trimHistory as M,trimHistoryReport as T}from"./engine/historyBudget";import{createAnthropicProvider as Q}from"./providers/anthropic";import{createOpenAIProvider as W}from"./providers/openai";import{resolveRequireApproval as X}from"./policy/policy";import{registerSelfEndpoint as Y}from"./policy/redact";export{J as compressConsumed,M as trimHistory,T as trimHistoryReport};export function resumableHistory(e){let a=e.length;while(a>0){const r=e[a-1];if(r.role==="assistant"&&!r.toolCalls?.length)break;a-=1}return e.slice(0,a).map(r=>r.role==="assistant"&&r.thinking?{...r,thinking:void 0}:r)}export function createAskBuoySession(e){const a=e.catalog??H;const r=new K;const b=e.policy??{};let n=[];const P=new Set;const k=new U;const d=new V;let c;let w=false;let m=false;const u=new Set;let y=false;let v=0;let f=0;let h={};let O={};Y(e.endpoint);const B=e.provider??(e.protocol==="openai"?W(e):Q(e));let i=e.availableActions;let l=Object.keys(i);const s={...b};function C(){for(const t of Object.keys(s))delete s[t];Object.assign(s,b);if(m){s.requireApproval=[];s.requireApprovalFor=[]}if(y)s.readOnly=true}function $(){return s}function S(){c=D({catalog:a,context:{...e.context,digest:{...h,...e.context?.digest}},isRelease:e.isRelease,readOnly:s.readOnly??false,readOnlySource:b.readOnly?"app":y?"device":void 0,requireApproval:X(s),approvalsBypassed:m,appName:e.appName,platform:e.platform,availableToolIds:l})}async function q(){if(w)return;w=true;h={};try{h=await g({dispatch:e.dispatch,readSnapshot:e.readSnapshot,availableToolIds:l,availableActions:i})}catch{}O={};for(const t of h.zustandStores??[]){const o=t;if(o?.persistsTo&&o.name)O[o.persistsTo]=o.name}S()}return{ledger:r,evidence:k,calibration:d,trustedActions:()=>[...u],untrust:t=>{u.delete(t)},get messages(){return n},prime:q,setAvailableActions(t){i=t;l=Object.keys(t)},setApprovalBypass(t){if(m===t)return;m=t;C();if(c)S()},setReadOnly(t){if(y===t)return;y=t;C();if(c)S()},restore(t){if(n.length>0)return;const o=T(resumableHistory(t),d.charsPerToken,r.liveCallIds());n=o.messages;v=o.droppedRounds},async*send(t,o){const I=f;await q();let x;try{x=await G({dispatch:e.dispatch,readSnapshot:e.readSnapshot,availableToolIds:l,availableActions:i})}catch{x=void 0}if(I!==f){yield{type:"done",stopReason:"superseded"};return}const R=T([...n,{role:"user",text:t}],d.charsPerToken,r.liveCallIds());const E=R.messages;const L=R.droppedRounds+v;v=0;if(L>0)yield{type:"history-trimmed",droppedRounds:L,droppedPinned:R.droppedPinned};const j=N({provider:B,catalog:a,messages:E,system:c,systemVolatile:z(x,r.list().map(p=>({label:`${p.toolId}.${p.action}${p.effect.label?` \u2014 ${p.effect.label}`:""}`,undone:p.undoneAt!==void 0}))),model:e.model,maxTokens:e.maxTokens??4096,dispatch:e.dispatch,readSnapshot:e.readSnapshot,storeKeyOwners:O,ledger:r,policy:$(),isRelease:e.isRelease,availableToolIds:l,availableActions:i,requestApproval:e.requestApproval,seenUrls:P,evidence:k,calibration:d,trusted:u,procedures:F(e.context?.procedures,l),signal:o});let A=await j.next();while(!A.done){yield A.value;A=await j.next()}if(I===f)n=A.value},reset(){f+=1;n=[];v=0;r.clear();P.clear();k.clear();u.clear();w=false}}}

package/lib/module/types.js

@@ -1,2 +1 @@
 "use strict";
-//# sourceMappingURL=types.js.map

package/lib/typescript/catalog/catalog.g.d.ts

@@ -2,10 +2,10 @@
  * GENERATED by scripts/gen-agent-catalog.mjs — do not edit.
  * Source: packages/agent-core/src/catalog/catalog.source.json
  *
- * 26 Buoy tools, 218 actions.
+ * 27 Buoy tools, 229 actions.
  */
 import type { ToolDescriptor } from "../types";
 export declare const CATALOG: ToolDescriptor[];
-export declare const CATALOG_TOOL_COUNT = 26;
-export declare const CATALOG_ACTION_COUNT = 218;
+export declare const CATALOG_TOOL_COUNT = 27;
+export declare const CATALOG_ACTION_COUNT = 229;
 //# sourceMappingURL=catalog.g.d.ts.map

package/lib/typescript/catalog/catalog.types.g.d.ts

@@ -5,9 +5,9 @@
  * The catalog's tool ids and action names as types, so a wrong name fails
  * at compile time. `catalog.g.ts` carries the data.
  *
- * 26 Buoy tools, 218 actions.
+ * 27 Buoy tools, 229 actions.
  */
-export type CatalogToolId = "env" | "console" | "sentry" | "jotai" | "route-events" | "debug-borders" | "zustand" | "redux" | "impersonate" | "query" | "events" | "network" | "js-top" | "app" | "time-machine" | "storage" | "highlight-updates" | "scenarios" | "perf-monitor" | "assets" | "tv-remote" | "focus-inspector" | "images" | "ask-buoy" | "push-notifications" | "image-overlay";
+export type CatalogToolId = "env" | "console" | "sentry" | "jotai" | "route-events" | "debug-borders" | "zustand" | "redux" | "impersonate" | "query" | "events" | "network" | "js-top" | "app" | "time-machine" | "clock" | "storage" | "highlight-updates" | "scenarios" | "perf-monitor" | "assets" | "tv-remote" | "focus-inspector" | "images" | "ask-buoy" | "push-notifications" | "image-overlay";
 export interface CatalogActionMap {
     "env": "getSnapshot";
     "console": "getSnapshot" | "clearEntries";
@@ -24,6 +24,7 @@ export interface CatalogActionMap {
     "js-top": "sample" | "getOriginDetail" | "setEnabled" | "pause" | "resume" | "clear";
     "app": "ping" | "reloadApp";
     "time-machine": "list" | "capture" | "captureBaseline" | "wipeAll" | "restore" | "preview" | "inspect" | "delete" | "rename" | "duplicate" | "setExclusions" | "setScope" | "setRestoreRoute";
+    "clock": "getState" | "setTime" | "shift" | "freeze" | "resume" | "setRate" | "reset" | "updateSettings" | "jumpToTokenExpiry" | "failNextRequest" | "stopTokenCheck";
     "storage": "getRequiredKeys" | "async.getAllKeys" | "async.multiGet" | "async.getItem" | "async.setItem" | "async.removeItem" | "async.multiRemove" | "async.multiSet" | "async.clear" | "clearAppStorage" | "getEventDetail" | "clearEvents" | "timeTravel.undo" | "timeTravel.jump" | "mmkv.snapshot" | "mmkv.get" | "mmkv.set" | "mmkv.remove" | "secure.keys" | "secure.snapshot" | "secure.get" | "secure.set" | "secure.delete";
     "highlight-updates": "describeScreen" | "tapElement" | "waitFor" | "beginMeasurement" | "endMeasurement" | "locateComponent" | "getRenderDetail" | "setEnabled" | "toggle" | "setSilentTracking" | "toggleFreeze" | "setSpotlight" | "clearRenderCounts" | "startTouchCapture" | "stopTouchCapture" | "clearTouchCapture" | "readTouchCapture";
     "scenarios": "listScenarios" | "getScenario" | "save" | "acceptDraft" | "discardDraft" | "preview" | "run" | "deactivate" | "delete" | "setFolder" | "listFolders" | "getActive" | "export";

package/lib/typescript/providers/problem.d.ts

@@ -1,23 +1,3 @@
-/**
- * What kind of failure a provider reported — decided once, from the status,
- * the error type and the message, so the engine can act on the KIND rather
- * than grep a string.
- *
- * Only two kinds are acted on, and both only when nothing has been generated:
- *
- * - `throttled` — 429 / 529 / 503, a `rate_limit_error` or `overloaded_error`
- *   frame, or a body that says so. Waiting and asking again is the right move;
- *   the request never reached a model.
- * - `overflow` — the provider refused the request as too big. Trimming older
- *   history and asking once more is the right move; the proactive budget is
- *   an estimate (chars ÷ 4) and JSON tokenizes worse than prose.
- *
- * Everything else — auth, a bad schema, an unknown model, a mid-answer
- * `api_error` — is reported and NOT retried. The phrase lists are the union
- * observed across provider responses by the Strands SDK (harness-sdk
- * `381ab48`, `models/anthropic.ts` + `models/openai/errors.ts`, Apache-2.0),
- * matched case-insensitively on the lowered message.
- */
 export type ProblemKind = "throttled" | "overflow" | "auth" | "other";
 export interface StreamProblem {
     kind: ProblemKind;

package/lib/typescript/providers/streamTimer.d.ts

@@ -1,27 +1,3 @@
-/**
- * The clock on a model request.
- *
- * There was none. A gateway that accepted the socket and then said nothing —
- * an overloaded proxy, a dropped VPN, a laptop that slept mid-answer — left
- * the turn running with the thinking strip animating until a person pressed
- * Stop. The 180s turn deadline did not help: it is read at the TOP of a step
- * (`runAgentTurn`), and a step parked inside `await fetch(...)` never reaches
- * the next one.
- *
- * Two clocks, because the two silences mean different things:
- *
- * - CONNECT covers "no headers yet". Nothing has been generated, so nothing is
- *   lost by giving up; 30s is already long for a gateway to acknowledge a POST.
- * - IDLE covers "headers arrived, then nothing". This one has to be generous.
- *   Anthropic sends `ping` frames, but an OpenAI-protocol reasoning model can
- *   legitimately emit nothing for a long stretch while it thinks, and cutting
- *   that off would look like a broken product. Any frame at all — a keepalive
- *   comment included — resets it, so only total silence trips it.
- *
- * A timeout is NOT a retry. Nothing is re-sent: the request may have reached
- * the model, and a duplicate turn is a duplicate bill and possibly duplicate
- * writes. The turn ends with an honest notice and a Continue button.
- */
 export declare const DEFAULT_CONNECT_TIMEOUT_MS = 30000;
 export declare const DEFAULT_IDLE_TIMEOUT_MS = 90000;
 export interface StreamTimerOptions {

package/lib/typescript/realNow.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The device's real clock.
+ *
+ * @buoy-gg/clock can override the APP's clock (Date.now, new Date). Buoy's
+ * own bookkeeping must keep real time regardless: license expiry, sync
+ * throttles and request deadlines would otherwise lock tools or stall when
+ * someone travels a month ahead. The clock package publishes the real clock
+ * on `globalThis.__buoyRealNow`; without it, Date.now is already real.
+ */
+export declare function realNow(): number;
+/**
+ * setTimeout that a clock jump never fires early. @buoy-gg/clock tracks the
+ * app's timers so a jump ahead can run the ones that come due; Buoy's own
+ * deadlines and heartbeats must not be among them.
+ */
+export declare function realSetTimeout(callback: () => void, ms: number): ReturnType<typeof setTimeout>;
+export declare function realClearTimeout(handle: unknown): void;
+//# sourceMappingURL=realNow.d.ts.map