@buoy-gg/agent-core 7.0.62 → 7.0.64

package/lib/typescript/policy/redact.d.ts

@@ -14,6 +14,7 @@
  *    returned — out of `network.getRequests`. That is a credential leak and a
  *    prompt-injection channel in one call.
  */
+export declare function isSecretKey(key: string, scope?: "tool" | "route"): boolean;
 /**
  * Deep-redact by key name AND by value shape. Depth-limited because tool
  * results can be deeply nested state trees and a runaway walk on a megabyte

package/lib/typescript/policy/turnScope.d.ts

@@ -0,0 +1,13 @@
+export type TurnScope = "question" | "task";
+export declare function classifyTurn(text: string): TurnScope;
+export declare const QUESTION_DECLINED = "The user asked a question; this change was not made. Answer from what you can read.";
+export interface TapTarget {
+    label?: string;
+    text?: string;
+    name?: string;
+    role?: string;
+    via?: string;
+}
+export declare function isQuestionLookup(toolId: string, action: string, params: Record<string, unknown>, targets?: TapTarget[]): boolean;
+export declare function tapLabels(screen: unknown, params: Record<string, unknown>): TapTarget[];
+//# sourceMappingURL=turnScope.d.ts.map

package/lib/typescript/providers/anthropic.d.ts

@@ -21,6 +21,10 @@
  *    turn it came from whenever that turn's tool results are sent back. An
  *    adapter that keeps only text and tool_use 400s on the second request of
  *    every tool-using turn — which is every turn Ask Buoy actually makes.
+ *    Only the CURRENT turn's thinking is replayed. A block is bound to the
+ *    system prompt it was made with, and the "right now" block at the end of
+ *    `system` changes every user turn, so an older turn's thinking 400s with
+ *    "The `system` prompt differs" on the user's second message.
  */
 import type { Provider, ProviderConfig } from "./types";
 export declare function createAnthropicProvider(config: ProviderConfig): Provider;

package/lib/typescript/providers/openai.d.ts

@@ -1,3 +1,32 @@
+/**
+ * OpenAI chat-completions protocol.
+ *
+ * The differences from Anthropic that actually matter to the code:
+ * - Tool results are their own `{role:"tool", tool_call_id, content}` MESSAGE,
+ *   not blocks inside a user message.
+ * - Tool arguments arrive as a JSON STRING, streamed in fragments, and are
+ *   keyed by an `index` that is stable across deltas while `id`/`name` only
+ *   appear on the first fragment.
+ * - The stream DOES have a `data: [DONE]` sentinel, unlike Anthropic's.
+ *
+ * This adapter also serves Azure and any OpenAI-compatible org gateway, which
+ * is the common shape for an internal LLM proxy. Note Anthropic's own
+ * OpenAI-compatibility endpoint is explicitly not production-ready and silently
+ * ignores several fields — use the native Anthropic adapter for Anthropic.
+ *
+ * THE 1024-CHAR TRAP. Azure caps a function description at 1024 chars, so
+ * this adapter trims to fit. The catalog renders a tool's summary FIRST and
+ * its `Actions:` list LAST, and every tool's full description is longer than
+ * the cap — so trimming `t.description` silently removed every action line
+ * for 23 of the 24 tools — the 24th kept one line of sixteen — measured
+ * against the catalog as it is. A model on this protocol (api.openai.com, Azure,
+ * OpenRouter, fal — every row of the model-floor sweep) saw a summary cut
+ * mid-sentence and a bare `action` enum: no per-action summary, no
+ * [DESTRUCTIVE] / [changes state] tag, no "prefer X over Y" guidance, and a
+ * catalog wording change could not move its score. So the description is
+ * the SUMMARY only, and the `Actions:` block goes into
+ * `parameters.properties.action.description`, which nothing caps.
+ */
 import type { Provider, ProviderConfig } from "./types";
 export declare function createOpenAIProvider(config: ProviderConfig): Provider;
 //# sourceMappingURL=openai.d.ts.map

package/lib/typescript/providers/types.d.ts

@@ -53,6 +53,15 @@ export type ThinkingBlock = {
 export type AgentMessage = {
     role: "user";
     text: string;
+    /** Claude user turns have an ID; engine notes keep the current turn. */
+    turnId?: string;
+    source?: "engine";
+    systemNotice?: boolean;
+    /** Captured once, then kept with this real user turn. */
+    liveBlock?: {
+        placement: "append" | "system-msg";
+        text: string;
+    };
 } | {
     role: "assistant";
     text: string;
@@ -79,7 +88,7 @@ export type StreamOutcome =
  * The text it managed is real; any tool calls in it are half a thought and
  * are NOT executed.
  */
- | "output-limited";
+ | "output-limited" | "refused" | "context-limited";
 /**
  * Why a stream failed. `provider` is the model or gateway saying so; the other
  * two are this side deciding the response cannot be trusted.
@@ -177,12 +186,33 @@ export interface ProviderRequest {
      */
     systemVolatile?: string;
     tools: ProviderTool[];
+    toolChoice?: "auto" | "none";
     model: string;
     maxTokens: number;
     signal?: AbortSignal;
     meta?: RequestMeta;
 }
+export interface FeedOptions {
+    liveBlock?: "system-tail" | "append" | "system-msg";
+    freezeHistory?: boolean;
+    notices?: "today" | "system-msg";
+    cacheLayout?: "today" | "tools-bp";
+    maxTokens?: number;
+    effort?: "low" | "medium" | "high";
+    thinking?: "adaptive" | "disabled";
+    parallelHint?: boolean;
+    promptStyle?: "shared" | "calm";
+    earlyStopHint?: boolean;
+    stateOwnerHint?: boolean;
+    screenProofHint?: boolean;
+    freshProofHint?: boolean;
+    actionScopeHint?: boolean;
+    keepStateRule?: boolean;
+    thinkingDisplay?: "summarized";
+}
+export declare function isRealUserMessage(m: AgentMessage): boolean;
 export interface ProviderConfig {
+    feedOptions?: FeedOptions;
     /** The org's gateway, or the provider's own URL for the dev-only direct mode. */
     endpoint: string;
     /**
@@ -246,6 +276,7 @@ export interface ProviderConfig {
      * doesn't model. The escape hatch that keeps one config type honest across
      * every OpenAI-compatible gateway; core fields (model, messages, tools,
      * stream) win only if you don't override them, so use with care.
+     * Claude protects feed fields and drops OpenAI-only fields.
      */
     requestOverrides?: Record<string, unknown>;
     /**