@buoy-gg/agent-core 7.0.41 → 7.0.43

package/lib/commonjs/session.js

@@ -1,393 +1 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "compressConsumed", {
-  enumerable: true,
-  get: function () {
-    return _historyBudget.compressConsumed;
-  }
-});
-exports.createAskBuoySession = createAskBuoySession;
-exports.resumableHistory = resumableHistory;
-Object.defineProperty(exports, "trimHistory", {
-  enumerable: true,
-  get: function () {
-    return _historyBudget.trimHistory;
-  }
-});
-Object.defineProperty(exports, "trimHistoryReport", {
-  enumerable: true,
-  get: function () {
-    return _historyBudget.trimHistoryReport;
-  }
-});
-var _catalog = require("./catalog/catalog.g");
-var _buildContextPack = require("./context/buildContextPack");
-var _runAgentTurn = require("./engine/runAgentTurn");
-var _systemPrompt = require("./engine/systemPrompt");
-var _ledger = require("./effects/ledger");
-var _evidence = require("./engine/evidence");
-var _tokenCalibration = require("./engine/tokenCalibration");
-var _historyBudget = require("./engine/historyBudget");
-var _anthropic = require("./providers/anthropic");
-var _openai = require("./providers/openai");
-var _policy = require("./policy/policy");
-var _redact = require("./policy/redact");
-/**
- * A conversation, with everything wired up.
- *
- * This is the one-call surface the UI packages use. It owns the pieces that
- * have to agree with each other across a whole session — the provider, the
- * catalog filtered to what this device can actually do, the system prompt
- * (the stable part built once after grounding, the RIGHT NOW part re-read every
- * turn), the effect ledger, and the message history —
- * so a chat UI is a message list plus a text box rather than an orchestrator.
- */
-
-/**
- * A stored history, made safe to send as the start of a new request.
- *
- * Two things make a saved conversation unusable as-is.
- *
- * A history captured mid-turn ends with an assistant message whose `tool_use`
- * blocks were never answered, or with the `tool_result`s and no reply after
- * them. Every provider rejects both: the blocks must pair up. So this rewinds
- * to the last COMPLETE round — an assistant message that made no tool calls,
- * which is where a conversation is always safe to resume from.
- *
- * And thinking blocks are dropped. Anthropic needs them replayed only when the
- * very next thing sent is that turn's `tool_result`s; a restored conversation
- * always resumes with a fresh user message instead, so their signatures are
- * dead weight at best and a stale-signature 400 at worst.
- */
-// Re-exported: these were defined here before the engine needed them too, and
-// the tests and the package surface still reach them through this module.
-
-function resumableHistory(history) {
-  let end = history.length;
-  while (end > 0) {
-    const m = history[end - 1];
-    if (m.role === "assistant" && !m.toolCalls?.length) break;
-    end -= 1;
-  }
-  return history.slice(0, end).map(m => m.role === "assistant" && m.thinking ? {
-    ...m,
-    thinking: undefined
-  } : m);
-}
-function createAskBuoySession(config) {
-  const catalog = config.catalog ?? _catalog.CATALOG;
-  const ledger = new _ledger.EffectLedger();
-  const policy = config.policy ?? {};
-  let messages = [];
-  /**
-   * Image-URL provenance for the whole conversation, not one turn of it.
-   *
-   * "Show me the shop as pictures" and "no, actually render them" are two
-   * turns; the second has no tool calls of its own, so a per-turn set held
-   * nothing and every image was stripped out from under the model. It kept
-   * describing artwork that was not on screen. The rule is unchanged — a URL
-   * still has to have been READ — the window is just the conversation. Reset
-   * with the conversation.
-   */
-  const seenUrls = new Set();
-  /**
-   * Every result's full text, for `ask-buoy.retrieve` — see engine/evidence.ts.
-   * Conversation-scoped like `seenUrls`: "what were the stats in that response"
-   * is a normal second message. Cleared with the conversation; never persisted.
-   */
-  const evidence = new _evidence.EvidenceStore();
-  /** Chars-per-token as measured on THIS session's provider — see engine/tokenCalibration.ts. */
-  const calibration = new _tokenCalibration.TokenCalibration();
-  let system;
-  let primed = false;
-  /** See `setApprovalBypass`. Consulted per turn, never captured. */
-  let bypassApproval = false;
-  /** Actions the user waived the card for in this conversation — see RunTurnInput.trusted. */
-  const trusted = new Set();
-  /** See `setReadOnly`. */
-  let deviceReadOnly = false;
-  /**
-   * Rounds dropped by `restore` — reported on the first send, because there is
-   * no open turn to carry the event when the restore happens.
-   */
-  let trimmedOnRestore = 0;
-  /**
-   * Which conversation is live. Bumped by `reset`.
-   *
-   * A turn's history is committed when its generator drains, and a turn does
-   * not stop the moment Stop is pressed — an in-flight dispatch has to settle
-   * first, and nothing can pull a store write back out of an adapter. So the
-   * sequence Stop -> "New conversation" -> the write finishes used to end with
-   * the OLD turn assigning its whole history over the empty one: a chat the
-   * user had just cleared came back, carrying a change they never saw made.
-   * The turn still finishes and its effect still lands in the app; it simply
-   * no longer owns a conversation that has moved on.
-   */
-  let generation = 0;
-  /**
-   * The grounding probe's result, held past `prime`.
-   *
-   * The system prompt is a pure function of this plus the policy, and the
-   * approval paragraph changes when the device toggle does — holding the
-   * digest lets the prompt be rebuilt without re-probing the app for state it
-   * already read.
-   */
-  let digest = {};
-  /**
-   * `storage key -> the live store that owns it`, derived from the grounding.
-   *
-   * Kept because the prompt alone is advice, and a cheap model skips advice the
-   * same way it skips an optional parameter. With this the ENGINE can tell,
-   * at dispatch time, that a storage write landed on a store's saved copy and
-   * therefore changed nothing the user can see.
-   */
-  let storeKeyOwners = {};
-
-  // So the agent's own requests to the model endpoint never come back to it
-  // out of the network tool — that would feed it its own auth headers.
-  (0, _redact.registerSelfEndpoint)(config.endpoint);
-  const provider = config.provider ?? (config.protocol === "openai" ? (0, _openai.createOpenAIProvider)(config) : (0, _anthropic.createAnthropicProvider)(config));
-
-  // Mutable: the device's tool list fills in over the first frames and can
-  // change while the sheet is open. See setAvailableActions.
-  let availableActions = config.availableActions;
-  let availableToolIds = Object.keys(availableActions);
-
-  /**
-   * THE policy object the engine reads, mutated in place.
-   *
-   * One object for the life of the session, not a fresh one per turn: the
-   * engine reads `policy.readOnly` and the approval lists at each call, so a
-   * toggle flipped mid-turn lands on the very next call of that turn. A new
-   * object per turn would leave a running turn on the old rules until it
-   * finished — "Read only" switched on while the agent was writing would let
-   * the rest of the batch through.
-   */
-  const live = {
-    ...policy
-  };
-  function refreshLive() {
-    for (const k of Object.keys(live)) delete live[k];
-    Object.assign(live, policy);
-    if (bypassApproval) {
-      live.requireApproval = [];
-      live.requireApprovalFor = [];
-    }
-    // OR, never override: the device can narrow, the app's own read-only stands.
-    if (deviceReadOnly) live.readOnly = true;
-  }
-  function activePolicy() {
-    return live;
-  }
-  function composeSystem() {
-    system = (0, _systemPrompt.buildSystemPrompt)({
-      catalog,
-      context: {
-        ...config.context,
-        digest: {
-          ...digest,
-          ...config.context?.digest
-        }
-      },
-      isRelease: config.isRelease,
-      readOnly: live.readOnly ?? false,
-      readOnlySource: policy.readOnly ? "app" : deviceReadOnly ? "device" : undefined,
-      requireApproval: (0, _policy.resolveRequireApproval)(live),
-      approvalsBypassed: bypassApproval,
-      appName: config.appName,
-      platform: config.platform,
-      availableToolIds
-    });
-  }
-  async function prime() {
-    if (primed) return;
-    primed = true;
-    digest = {};
-    try {
-      digest = await (0, _buildContextPack.buildContextDigest)({
-        dispatch: config.dispatch,
-        readSnapshot: config.readSnapshot,
-        availableToolIds,
-        availableActions
-      });
-    } catch {
-      // Grounding is an optimisation. A chat with no digest still works; a
-      // chat that refuses to open because a probe timed out does not.
-    }
-    storeKeyOwners = {};
-    for (const raw of digest.zustandStores ?? []) {
-      const store = raw;
-      if (store?.persistsTo && store.name) storeKeyOwners[store.persistsTo] = store.name;
-    }
-    composeSystem();
-  }
-  return {
-    ledger,
-    evidence,
-    calibration,
-    trustedActions: () => [...trusted],
-    untrust: key => {
-      trusted.delete(key);
-    },
-    get messages() {
-      return messages;
-    },
-    prime,
-    setAvailableActions(actions) {
-      availableActions = actions;
-      availableToolIds = Object.keys(actions);
-    },
-    setApprovalBypass(enabled) {
-      if (bypassApproval === enabled) return;
-      bypassApproval = enabled;
-      refreshLive();
-      // The prompt tells the model whether a card will appear before its
-      // change lands; leaving that paragraph stale would have it announce an
-      // approval step that no longer exists. Rebuilt from the held digest, so
-      // toggling mid-conversation costs nothing and re-reads nothing.
-      if (system) composeSystem();
-    },
-    setReadOnly(enabled) {
-      if (deviceReadOnly === enabled) return;
-      deviceReadOnly = enabled;
-      refreshLive();
-      if (system) composeSystem();
-    },
-    restore(history) {
-      // Only into a session that has not been talked to. Restoring over a live
-      // conversation would drop whatever was said since the app started.
-      if (messages.length > 0) return;
-      const report = (0, _historyBudget.trimHistoryReport)(resumableHistory(history), calibration.charsPerToken, ledger.liveCallIds());
-      messages = report.messages;
-      trimmedOnRestore = report.droppedRounds;
-    },
-    async *send(text, signal) {
-      /**
-       * Captured FIRST, before any await.
-       *
-       * Priming and the live-context probes are awaits like any other, and a
-       * reset can land inside them. Reading the generation after them would
-       * pick up the NEW conversation's value and let this turn commit into it —
-       * the precise bug this guards against, reintroduced one line lower.
-       */
-      const myGeneration = generation;
-      await prime();
-      // The RIGHT NOW block: re-read on EVERY turn, not once at open. The
-      // stable digest above was once the whole picture, and it was built
-      // before the user had navigated anywhere — so the query that owned the
-      // screen they were looking at was simply not in the prompt. This is the
-      // uncached tail of the system prompt (see ProviderRequest.systemVolatile).
-      let live;
-      try {
-        live = await (0, _buildContextPack.buildLiveContext)({
-          dispatch: config.dispatch,
-          readSnapshot: config.readSnapshot,
-          availableToolIds,
-          availableActions
-        });
-      } catch {
-        live = undefined;
-      }
-      /**
-       * The conversation was cleared while this turn was still getting ready.
-       *
-       * Priming and the live probes take real time, so "New conversation"
-       * lands here often enough to matter. Abandoning now costs nothing: the
-       * model has not been asked anything yet.
-       */
-      if (myGeneration !== generation) {
-        yield {
-          type: "done",
-          stopReason: "superseded"
-        };
-        return;
-      }
-
-      /**
-       * The turn works on its OWN array, and `messages` is assigned in exactly
-       * one place — the commit at the bottom.
-       *
-       * `runAgentTurn` pushes each round into the array it is handed. Handing
-       * it the session's own array made every push a live edit of session
-       * state, so a turn racing a reset wrote its whole history into the new
-       * conversation one push at a time and the commit guard had nothing left
-       * to protect. Copying makes ownership checkable in one place instead of
-       * spread across the loop.
-       */
-      const trimmed = (0, _historyBudget.trimHistoryReport)([...messages, {
-        role: "user",
-        text
-      }], calibration.charsPerToken, ledger.liveCallIds());
-      const working = trimmed.messages;
-      // Said once, before the answer it affects. The screen still shows the
-      // rounds the model just lost; this is the only thing that tells the two
-      // apart. See the `history-trimmed` event.
-      const droppedRounds = trimmed.droppedRounds + trimmedOnRestore;
-      trimmedOnRestore = 0;
-      if (droppedRounds > 0) yield {
-        type: "history-trimmed",
-        droppedRounds,
-        droppedPinned: trimmed.droppedPinned
-      };
-      const gen = (0, _runAgentTurn.runAgentTurn)({
-        provider,
-        catalog,
-        messages: working,
-        system: system,
-        systemVolatile: (0, _systemPrompt.buildLiveBlock)(live,
-        // What this conversation has already done to the app. See
-        // buildLiveBlock — without it the model answers "what have you
-        // changed?" from memory of its own sentences, and reports a value it
-        // overwrote itself as the app's own.
-        ledger.list().map(e => ({
-          label: `${e.toolId}.${e.action}${e.effect.label ? ` — ${e.effect.label}` : ""}`,
-          undone: e.undoneAt !== undefined
-        }))),
-        model: config.model,
-        maxTokens: config.maxTokens ?? 4096,
-        dispatch: config.dispatch,
-        readSnapshot: config.readSnapshot,
-        storeKeyOwners,
-        ledger,
-        policy: activePolicy(),
-        isRelease: config.isRelease,
-        availableToolIds,
-        availableActions,
-        requestApproval: config.requestApproval,
-        seenUrls,
-        evidence,
-        calibration,
-        trusted,
-        procedures: (0, _systemPrompt.listableProcedures)(config.context?.procedures, availableToolIds),
-        signal
-      });
-      let next = await gen.next();
-      while (!next.done) {
-        yield next.value;
-        next = await gen.next();
-      }
-      // The generator's return value is the full history including tool turns.
-      // Committed only if this turn still owns the conversation — see
-      // `generation`.
-      if (myGeneration === generation) messages = next.value;
-    },
-    reset() {
-      // Before anything else: a turn still draining must not commit over this.
-      generation += 1;
-      messages = [];
-      trimmedOnRestore = 0;
-      ledger.clear();
-      seenUrls.clear();
-      evidence.clear();
-      trusted.clear();
-      // The grounding digest is a snapshot of the app AT OPEN — stores and
-      // routes registered since are invisible to it. A new conversation is
-      // the natural moment to re-read the world.
-      primed = false;
-    }
-  };
-}
-//# sourceMappingURL=session.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:true});Object.defineProperty(exports,"compressConsumed",{enumerable:true,get:function(){return _historyBudget.compressConsumed}});exports.createAskBuoySession=createAskBuoySession;exports.resumableHistory=resumableHistory;Object.defineProperty(exports,"trimHistory",{enumerable:true,get:function(){return _historyBudget.trimHistory}});Object.defineProperty(exports,"trimHistoryReport",{enumerable:true,get:function(){return _historyBudget.trimHistoryReport}});var _catalog=require("./catalog/catalog.g");var _buildContextPack=require("./context/buildContextPack");var _runAgentTurn=require("./engine/runAgentTurn");var _systemPrompt=require("./engine/systemPrompt");var _ledger=require("./effects/ledger");var _evidence=require("./engine/evidence");var _tokenCalibration=require("./engine/tokenCalibration");var _historyBudget=require("./engine/historyBudget");var _anthropic=require("./providers/anthropic");var _openai=require("./providers/openai");var _policy=require("./policy/policy");var _redact=require("./policy/redact");function resumableHistory(e){let n=e.length;while(n>0){const r=e[n-1];if(r.role==="assistant"&&!r.toolCalls?.length)break;n-=1}return e.slice(0,n).map(r=>r.role==="assistant"&&r.thinking?{...r,thinking:void 0}:r)}function createAskBuoySession(e){const n=e.catalog??_catalog.CATALOG;const r=new _ledger.EffectLedger;const A=e.policy??{};let o=[];const R=new Set;const g=new _evidence.EvidenceStore;const p=new _tokenCalibration.TokenCalibration;let u;let k=false;let c=false;const y=new Set;let m=false;let v=0;let b=0;let f={};let x={};(0,_redact.registerSelfEndpoint)(e.endpoint);const j=e.provider??(e.protocol==="openai"?(0,_openai.createOpenAIProvider)(e):(0,_anthropic.createAnthropicProvider)(e));let l=e.availableActions;let i=Object.keys(l);const s={...A};function S(){for(const t of Object.keys(s))delete s[t];Object.assign(s,A);if(c){s.requireApproval=[];s.requireApprovalFor=[]}if(m)s.readOnly=true}function H(){return s}function O(){u=(0,_systemPrompt.buildSystemPrompt)({catalog:n,context:{...e.context,digest:{...f,...e.context?.digest}},isRelease:e.isRelease,readOnly:s.readOnly??false,readOnlySource:A.readOnly?"app":m?"device":void 0,requireApproval:(0,_policy.resolveRequireApproval)(s),approvalsBypassed:c,appName:e.appName,platform:e.platform,availableToolIds:i})}async function w(){if(k)return;k=true;f={};try{f=await(0,_buildContextPack.buildContextDigest)({dispatch:e.dispatch,readSnapshot:e.readSnapshot,availableToolIds:i,availableActions:l})}catch{}x={};for(const t of f.zustandStores??[]){const a=t;if(a?.persistsTo&&a.name)x[a.persistsTo]=a.name}O()}return{ledger:r,evidence:g,calibration:p,trustedActions:()=>[...y],untrust:t=>{y.delete(t)},get messages(){return o},prime:w,setAvailableActions(t){l=t;i=Object.keys(t)},setApprovalBypass(t){if(c===t)return;c=t;S();if(u)O()},setReadOnly(t){if(m===t)return;m=t;S();if(u)O()},restore(t){if(o.length>0)return;const a=(0,_historyBudget.trimHistoryReport)(resumableHistory(t),p.charsPerToken,r.liveCallIds());o=a.messages;v=a.droppedRounds},async*send(t,a){const _=b;await w();let q;try{q=await(0,_buildContextPack.buildLiveContext)({dispatch:e.dispatch,readSnapshot:e.readSnapshot,availableToolIds:i,availableActions:l})}catch{q=void 0}if(_!==b){yield{type:"done",stopReason:"superseded"};return}const P=(0,_historyBudget.trimHistoryReport)([...o,{role:"user",text:t}],p.charsPerToken,r.liveCallIds());const B=P.messages;const C=P.droppedRounds+v;v=0;if(C>0)yield{type:"history-trimmed",droppedRounds:C,droppedPinned:P.droppedPinned};const T=(0,_runAgentTurn.runAgentTurn)({provider:j,catalog:n,messages:B,system:u,systemVolatile:(0,_systemPrompt.buildLiveBlock)(q,r.list().map(d=>({label:`${d.toolId}.${d.action}${d.effect.label?` \u2014 ${d.effect.label}`:""}`,undone:d.undoneAt!==void 0}))),model:e.model,maxTokens:e.maxTokens??4096,dispatch:e.dispatch,readSnapshot:e.readSnapshot,storeKeyOwners:x,ledger:r,policy:H(),isRelease:e.isRelease,availableToolIds:i,availableActions:l,requestApproval:e.requestApproval,seenUrls:R,evidence:g,calibration:p,trusted:y,procedures:(0,_systemPrompt.listableProcedures)(e.context?.procedures,i),signal:a});let h=await T.next();while(!h.done){yield h.value;h=await T.next()}if(_===b)o=h.value},reset(){b+=1;o=[];v=0;r.clear();R.clear();g.clear();y.clear();k=false}}}

package/lib/commonjs/types.js

@@ -1,2 +1 @@
 "use strict";
-//# sourceMappingURL=types.js.map