@buoy-gg/agent-core 7.0.41 → 7.0.43

package/lib/commonjs/engine/effectFor.js

@@ -1,223 +1 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.effectFor = effectFor;
-var _policy = require("../policy/policy");
-var _digest = require("../effects/digest");
-/**
- * Turn a completed mutation into a ledger entry.
- *
- * The shape is Scenarios' `extractEffect`, but the classification here is much
- * more conservative, because auditing the catalog's undo claims found almost
- * all of them unsound: the information needed to reverse a call usually does
- * not survive the call. So an effect is only marked reversible when THIS
- * module can point at the exact input the reversal needs.
- *
- * Everything else becomes `state-write` (changed something, no automatic
- * inverse) or `transient` (one-shot). Both are shown to the user as such. A
- * banner that says "4 changes" and then reverses one of them is worse than a
- * banner that admits three of them are permanent.
- */
-
-/**
- * The largest prior value an undo will hold. The ledger is persisted with the
- * transcript under a 256KB cap; a payload past this is recorded as a visible,
- * honestly-permanent change instead of silently evicting the conversation.
- */
-const MAX_UNDO_JSON_CHARS = 64_000;
-
-/** The `getQueryData` read the engine takes on both sides of a cache write. */
-
-const cacheRead = v => v && typeof v === "object" ? v : undefined;
-
-/**
- * How each query change is actually put back, named in the row so the bar is
- * useful rather than merely honest. A cache edit's real inverse is a refetch:
- * the tool's own description says a cache edit "lasts until the next
- * successful refetch".
- */
-const QUERY_RESTORES = {
-  setQueryData: "query.invalidate",
-  triggerError: "query.restoreError",
-  triggerLoading: "query.restoreLoading",
-  setOnline: "query.setOnline"
-};
-function effectFor(toolId, descriptor, params, result, before, /** The query cache read before and after a `setQueryData` — see runAgentTurn. */
-cache) {
-  const label = (0, _policy.describeCall)(toolId, descriptor, params);
-  const rec = result ?? {};
-
-  // A network override rule. Reversible ONLY when we created it: `upsert` with
-  // an id that already exists UPDATES that rule in place, so deleting it would
-  // destroy a rule the user had set up themselves rather than undo our change.
-  // The model supplying no id is the create case.
-  if (toolId === "network" && descriptor.action === "upsertOverrideRule") {
-    const rule = rec.rule;
-    const ruleId = rule?.id ?? rec.id;
-    const wasCreate = params.id === undefined;
-    if (ruleId && wasCreate) return {
-      kind: "network-override",
-      ruleId,
-      label
-    };
-    return {
-      kind: "state-write",
-      toolId,
-      action: descriptor.action,
-      label
-    };
-  }
-
-  // Impersonation. `stopImpersonation` restores the identity but ALSO re-runs
-  // the data nuke — it clears react-query, redux, AsyncStorage and MMKV per
-  // the app's dataNukeSettings. So this is reversible in the sense that
-  // matters (the user stops being someone else) and the label has to say the
-  // rest out loud, because caches do not come back.
-  if (toolId === "impersonate" && descriptor.action === "startImpersonation") {
-    return {
-      kind: "impersonation",
-      label: `${label} — stopping also clears cached app data`
-    };
-  }
-
-  // Storage, reversible because we read the old value first (see captureBefore).
-  // `before` is undefined when the pre-read could not be made — an MMKV write
-  // with no instance, a secure key behind biometrics — and that must fall
-  // through to a one-off rather than claim an undo it cannot perform.
-  if (toolId === "storage" && typeof params.key === "string" && before) {
-    const isMmkv = descriptor.action.startsWith("mmkv.");
-    const writeAction = isMmkv ? "mmkv.set" : "async.setItem";
-    return {
-      kind: "storage-write",
-      toolId,
-      action: writeAction,
-      key: params.key,
-      instanceId: isMmkv && typeof params.instanceId === "string" ? params.instanceId : undefined,
-      before: before.had ? before.value : undefined,
-      wrote: typeof params.value === "string" ? params.value : undefined,
-      removeAction: isMmkv ? "mmkv.remove" : "async.removeItem",
-      label
-    };
-  }
-
-  /**
-   * A cache edit is a CHANGE, not a one-shot.
-   *
-   * `setQueryData` is the headline write of the whole product — "THE way to
-   * change what a server-backed screen shows" — and it fell through to
-   * `transient` here, which the changes bar deliberately does not count. So
-   * the sheet said "Anything it changes shows up in a bar at the top, and you
-   * can undo it" and then changed the screen in front of you with no row, no
-   * count and no undo. Same for `triggerError` and `triggerLoading`: the app
-   * is left showing a failure state that nothing on screen admits to putting
-   * there, which is exactly how a QA tester files a bug against a state Buoy
-   * created.
-   *
-   * `setQueryData` is now a real `query-write` above, because the engine
-   * reads the query's data before the write (captureStoreState) — the same
-   * pre-read that makes storage reversible. The rest — triggerError,
-   * triggerLoading, setOnline, a setQueryData whose pre-read failed — stay
-   * `state-write` (visible, honestly permanent): this module only claims an
-   * undo it can actually perform, and the label carries the real revert so
-   * the row is still useful.
-   */
-  if (toolId === "query" && descriptor.action === "setQueryData") {
-    const prior = cacheRead(cache?.before);
-    const queryHash = typeof params.queryHash === "string" ? params.queryHash : prior?.queryHash;
-    if (prior?.found === true && typeof queryHash === "string") {
-      const had = prior.hasData !== false && prior.data !== undefined;
-      const beforeData = had ? prior.data : undefined;
-      if ((0, _digest.jsonLength)(beforeData) <= MAX_UNDO_JSON_CHARS) {
-        const after = cacheRead(cache?.after);
-        const wroteDigest = after?.found === true && after.hasData !== false ? (0, _digest.digestOf)(after.data) : undefined;
-        return {
-          kind: "query-write",
-          queryHash,
-          before: beforeData,
-          wroteDigest,
-          label
-        };
-      }
-      return {
-        kind: "state-write",
-        toolId,
-        action: descriptor.action,
-        label: `${label} — prior value too large to hold for undo; undo with query.invalidate`
-      };
-    }
-  }
-
-  // Loading and error pins have a documented, exact inverse by queryHash.
-  if (toolId === "query" && typeof params.queryHash === "string") {
-    const inverse = descriptor.action === "triggerLoading" ? "restoreLoading" : descriptor.action === "triggerError" ? "restoreError" : undefined;
-    if (inverse) {
-      return {
-        kind: "inverse-call",
-        toolId,
-        action: inverse,
-        params: {
-          queryHash: params.queryHash
-        },
-        label
-      };
-    }
-  }
-
-  // A refetch or invalidate brings the server's data back; it changes nothing
-  // Undo could put back. Counting it "permanent" read as if Ask Buoy had left
-  // the app altered after a plain refresh.
-  if (toolId === "query" && ["refetch", "invalidate", "restoreLoading"].includes(descriptor.action)) {
-    return {
-      kind: "transient",
-      label
-    };
-  }
-
-  // A rule's switch, reversible because the engine read the flag first
-  // (captureRuleSwitch). A toggle that left the flag where it was is no change.
-  if (toolId === "network" && (descriptor.action === "setOverrideRuleEnabled" || descriptor.action === "setOverridesEnabled") && before?.had && (before.value === "true" || before.value === "false")) {
-    const was = before.value === "true";
-    const now = params.enabled === true;
-    if (was === now) return undefined;
-    const inverseParams = descriptor.action === "setOverrideRuleEnabled" ? {
-      id: params.id,
-      enabled: was
-    } : {
-      enabled: was
-    };
-    return {
-      kind: "inverse-call",
-      toolId,
-      action: descriptor.action,
-      params: inverseParams,
-      label
-    };
-  }
-  if (toolId === "query" && descriptor.effect !== "read") {
-    const restores = QUERY_RESTORES[descriptor.action];
-    return {
-      kind: "state-write",
-      toolId,
-      action: descriptor.action,
-      label: restores ? `${label} — undo with ${restores}` : label
-    };
-  }
-
-  // Wipes with no captured prior state are permanent. Say so rather than
-  // filing them under something Undo appears to cover.
-  if (descriptor.effect === "destructive") {
-    return {
-      kind: "state-write",
-      toolId,
-      action: descriptor.action,
-      label
-    };
-  }
-  return {
-    kind: "transient",
-    label
-  };
-}
-//# sourceMappingURL=effectFor.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.effectFor=effectFor;var _policy=require("../policy/policy");var _digest=require("../effects/digest");const MAX_UNDO_JSON_CHARS=64e3;const cacheRead=n=>n&&typeof n==="object"?n:void 0;const QUERY_RESTORES={setQueryData:"query.invalidate",triggerError:"query.restoreError",triggerLoading:"query.restoreLoading",setOnline:"query.setOnline"};function effectFor(n,t,i,l,u,c){const r=(0,_policy.describeCall)(n,t,i);const d=l??{};if(n==="network"&&t.action==="upsertOverrideRule"){const e=d.rule;const a=e?.id??d.id;const s=i.id===void 0;if(a&&s)return{kind:"network-override",ruleId:a,label:r};return{kind:"state-write",toolId:n,action:t.action,label:r}}if(n==="impersonate"&&t.action==="startImpersonation"){return{kind:"impersonation",label:`${r} \u2014 stopping also clears cached app data`}}if(n==="storage"&&typeof i.key==="string"&&u){const e=t.action.startsWith("mmkv.");const a=e?"mmkv.set":"async.setItem";return{kind:"storage-write",toolId:n,action:a,key:i.key,instanceId:e&&typeof i.instanceId==="string"?i.instanceId:void 0,before:u.had?u.value:void 0,wrote:typeof i.value==="string"?i.value:void 0,removeAction:e?"mmkv.remove":"async.removeItem",label:r}}if(n==="query"&&t.action==="setQueryData"){const e=cacheRead(c?.before);const a=typeof i.queryHash==="string"?i.queryHash:e?.queryHash;if(e?.found===true&&typeof a==="string"){const s=e.hasData!==false&&e.data!==void 0;const f=s?e.data:void 0;if((0,_digest.jsonLength)(f)<=MAX_UNDO_JSON_CHARS){const o=cacheRead(c?.after);const y=o?.found===true&&o.hasData!==false?(0,_digest.digestOf)(o.data):void 0;return{kind:"query-write",queryHash:a,before:f,wroteDigest:y,label:r}}return{kind:"state-write",toolId:n,action:t.action,label:`${r} \u2014 prior value too large to hold for undo; undo with query.invalidate`}}}if(n==="query"&&typeof i.queryHash==="string"){const e=t.action==="triggerLoading"?"restoreLoading":t.action==="triggerError"?"restoreError":void 0;if(e){return{kind:"inverse-call",toolId:n,action:e,params:{queryHash:i.queryHash},label:r}}}if(n==="query"&&["refetch","invalidate","restoreLoading"].includes(t.action)){return{kind:"transient",label:r}}if(n==="network"&&(t.action==="setOverrideRuleEnabled"||t.action==="setOverridesEnabled")&&u?.had&&(u.value==="true"||u.value==="false")){const e=u.value==="true";const a=i.enabled===true;if(e===a)return void 0;const s=t.action==="setOverrideRuleEnabled"?{id:i.id,enabled:e}:{enabled:e};return{kind:"inverse-call",toolId:n,action:t.action,params:s,label:r}}if(n==="query"&&t.effect!=="read"){const e=QUERY_RESTORES[t.action];return{kind:"state-write",toolId:n,action:t.action,label:e?`${r} \u2014 undo with ${e}`:r}}if(t.effect==="destructive"){return{kind:"state-write",toolId:n,action:t.action,label:r}}return{kind:"transient",label:r}}

package/lib/commonjs/engine/evidence.js

@@ -1,113 +1,5 @@
-"use strict";
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});exports.EvidenceStore=void 0;exports.compressedMarker=compressedMarker;exports.truncationMarker=truncationMarker;const DEFAULT_MAX_CHARS=4e6;const DEFAULT_MAX_ENTRIES=200;class EvidenceStore{entries=new Map;evictedRefs=new Set;chars=0;seq=0;constructor(e={}){this.maxChars=e.maxChars??DEFAULT_MAX_CHARS;this.maxEntries=e.maxEntries??DEFAULT_MAX_ENTRIES}stash(e){const t=`ev_${++this.seq}`;const s={...e,ref:t};this.entries.set(t,s);this.chars+=s.text.length;this.evict();return t}get(e){return this.entries.get(e)}wasEvicted(e){return this.evictedRefs.has(e)}get size(){return this.entries.size}get totalChars(){return this.chars}clear(){this.entries.clear();this.evictedRefs.clear();this.chars=0}evict(){for(const[e,t]of this.entries){const s=this.chars>this.maxChars||this.entries.size>this.maxEntries;if(!s||this.entries.size===1)return;this.entries.delete(e);this.evictedRefs.add(e);this.chars-=t.text.length}}}exports.EvidenceStore=EvidenceStore;const RETRIEVE_HINT="ask-buoy.retrieve";function truncationMarker(r,e){const t=r.toLocaleString("en-US");if(!e)return`
 
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.EvidenceStore = void 0;
-exports.compressedMarker = compressedMarker;
-exports.truncationMarker = truncationMarker;
-/**
- * The evidence store: every tool result this conversation produced, kept in
- * full so the model can go back to it.
- *
- * Two markers used to point nowhere. A result over 24 000 characters was cut
- * with "ask for a narrower slice" — and no tool offers one, so the bank has
- * cases tagged `capability` (Pokémon `stats` sit at offset ~180 000 of a
- * 400 000-character detail; unreadable by design). And a result compressed
- * out of memory said "ask again" — a re-dispatch returns the CURRENT value,
- * not what the model saw before it wrote, which is the one it needs when a
- * write is refused and it has to say what it changed FROM.
- *
- * So the full text is kept here, keyed by a short ref the markers carry, and
- * `ask-buoy.retrieve` reads any part of it back: a path, a substring, a
- * window. Borrowed from Strands' ContextOffloader (`retrieve_offloaded_content`
- * with pattern / line_range), minus the storage layer — this is in-memory and
- * per session on purpose: persisted transcripts deliberately carry no tool
- * result payloads (see ask-buoy transcriptPersistence.ts), and this must not
- * quietly change that.
- *
- * What goes in is what the MODEL was given: after `redact` (credential names
- * and value shapes) and `stripSelfTraffic`. Never the raw adapter value.
- *
- * Bounded by bytes and entries, oldest out first; an evicted ref is remembered
- * so the answer is "evicted" rather than "never existed" — the marker still
- * names a real thing, and the honest reply is to call the tool again.
- */
+[truncated \u2014 ${t} characters total. Ask for a narrower slice if you need more.]`;return`
 
-const DEFAULT_MAX_CHARS = 4_000_000;
-const DEFAULT_MAX_ENTRIES = 200;
-class EvidenceStore {
-  entries = new Map();
-  evictedRefs = new Set();
-  chars = 0;
-  seq = 0;
-  constructor(opts = {}) {
-    this.maxChars = opts.maxChars ?? DEFAULT_MAX_CHARS;
-    this.maxEntries = opts.maxEntries ?? DEFAULT_MAX_ENTRIES;
-  }
-
-  /** Keep a result. Returns its ref — `ev_<n>`, counting up for the life of the store. */
-  stash(input) {
-    const ref = `ev_${++this.seq}`;
-    const entry = {
-      ...input,
-      ref
-    };
-    // A single result larger than the whole store still gets a ref — it is
-    // the case the store exists for — and simply evicts everything else.
-    this.entries.set(ref, entry);
-    this.chars += entry.text.length;
-    this.evict();
-    return ref;
-  }
-  get(ref) {
-    return this.entries.get(ref);
-  }
-
-  /** True when the ref was real and has since been dropped for space. */
-  wasEvicted(ref) {
-    return this.evictedRefs.has(ref);
-  }
-  get size() {
-    return this.entries.size;
-  }
-  get totalChars() {
-    return this.chars;
-  }
-
-  /** New conversation: nothing from the old one is retrievable. */
-  clear() {
-    this.entries.clear();
-    this.evictedRefs.clear();
-    this.chars = 0;
-  }
-  evict() {
-    // Map iteration is insertion order, so the first key is the oldest.
-    for (const [ref, entry] of this.entries) {
-      const over = this.chars > this.maxChars || this.entries.size > this.maxEntries;
-      if (!over || this.entries.size === 1) return;
-      this.entries.delete(ref);
-      this.evictedRefs.add(ref);
-      this.chars -= entry.text.length;
-    }
-  }
-}
-
-// ── the markers ──────────────────────────────────────────────────────────────
-exports.EvidenceStore = EvidenceStore;
-const RETRIEVE_HINT = "ask-buoy.retrieve";
-
-/** The tail of a result cut at the engine's cap. */
-function truncationMarker(totalChars, ref) {
-  const size = totalChars.toLocaleString("en-US");
-  if (!ref) return `\n\n[truncated — ${size} characters total. Ask for a narrower slice if you need more.]`;
-  return `\n\n[truncated — ${size} characters total; ref ${ref}. Call ${RETRIEVE_HINT} {"ref":"${ref}"} to see its shape, then {"ref":"${ref}","path":"…"} or {"ref":"${ref}","pattern":"…"} to read the part you need.]`;
-}
-
-/** What a consumed result is replaced with when history is compressed. Keep the `[earlier result` prefix — historyBudget skips on it. */
-function compressedMarker(totalChars, ref) {
-  const size = totalChars.toLocaleString("en-US");
-  if (!ref) return `[earlier result — ${size} characters, already read. Ask again if you need it.]`;
-  return `[earlier result — ${size} characters, already read; ref ${ref}. ${RETRIEVE_HINT} {"ref":"${ref}",…} re-reads exactly what you saw then; calling the tool again gives the CURRENT value.]`;
-}
-//# sourceMappingURL=evidence.js.map
+[truncated \u2014 ${t} characters total; ref ${e}. Call ${RETRIEVE_HINT} {"ref":"${e}"} to see its shape, then {"ref":"${e}","path":"\u2026"} or {"ref":"${e}","pattern":"\u2026"} to read the part you need.]`}function compressedMarker(r,e){const t=r.toLocaleString("en-US");if(!e)return`[earlier result \u2014 ${t} characters, already read. Ask again if you need it.]`;return`[earlier result \u2014 ${t} characters, already read; ref ${e}. ${RETRIEVE_HINT} {"ref":"${e}",\u2026} re-reads exactly what you saw then; calling the tool again gives the CURRENT value.]`}