@buoy-gg/ask-buoy 7.0.33 → 7.0.34

package/lib/commonjs/store/useAskBuoy.js

@@ -1,299 +1 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.useAskBuoy = useAskBuoy;
-exports.useAskBuoyState = useAskBuoyState;
-var _react = require("react");
-var _reactNative = require("react-native");
-var _sharedUi = require("@buoy-gg/shared-ui");
-var _agentCore = require("@buoy-gg/agent-core");
-var _askBuoyStore = require("./askBuoyStore");
-/**
- * Wire the sheet to the agent.
- *
- * Two things here are load-bearing:
- *
- * 1. DISPATCH GOES THROUGH `dispatchToolAction`, the same on-device seam a
- *    Scenario step and a desktop click use. No second adapter map, nothing
- *    that can drift from what the broker sees.
- * 2. THE SESSION IS REBUILT WHEN THE TOOL LIST CHANGES. The adapter map is a
- *    memo whose contents depend on which packages resolved and whether a
- *    QueryClientProvider is above FloatingDevTools — it is per-app and per
- *    render, never a constant. A session that cached the tool list at open
- *    would offer the model tools that are no longer there.
- */
-
-const isRelease = typeof __DEV__ !== "undefined" && !__DEV__;
-function useAskBuoyState() {
-  return (0, _react.useSyncExternalStore)(_askBuoyStore.askBuoyStore.subscribe, _askBuoyStore.askBuoyStore.getState, _askBuoyStore.askBuoyStore.getState);
-}
-function useAskBuoy(config) {
-  const state = useAskBuoyState();
-  const sessionRef = (0, _react.useRef)(null);
-  const abortRef = (0, _react.useRef)(null);
-  // Read through a ref where a stable callback needs the LATEST config (the
-  // onEvent tap) without re-creating the callback per render.
-  const configRef = (0, _react.useRef)(config);
-  configRef.current = config;
-  const configured = !!config?.endpoint && !!config?.model;
-
-  // Recomputed each render: the set of dispatchable tools is not a constant.
-  //
-  // `getSnapshot` is folded in here because half of Buoy's read surface is not
-  // an action at all — console entries, network events, routes and env live
-  // only in the adapter's snapshot. Without this the model is offered a
-  // console tool whose sole action wipes the logs, and no way to read them.
-  const availableActions = (0, _react.useMemo)(() => {
-    try {
-      const actions = (0, _sharedUi.listToolActions)();
-      for (const toolId of (0, _sharedUi.listSnapshotToolIds)()) {
-        if (!actions[toolId]) actions[toolId] = [];
-        if (!actions[toolId].includes(_agentCore.SNAPSHOT_ACTION)) {
-          actions[toolId] = [_agentCore.SNAPSHOT_ACTION, ...actions[toolId]];
-        }
-      }
-      return actions;
-    } catch {
-      return {};
-    }
-  }, []);
-  const toolKey = Object.keys(availableActions).sort().join(",");
-  (0, _react.useEffect)(() => {
-    _askBuoyStore.askBuoyStore.setConfigured(configured);
-    if (!configured || !config) {
-      sessionRef.current = null;
-      _askBuoyStore.askBuoyStore.setNotice("Ask Buoy isn't set up in this app yet. A developer needs to point it at your team's AI endpoint.");
-      return;
-    }
-    // The classic first-run mistake, caught statically: a provider's own URL
-    // with the wrong protocol fails with a raw error that says nothing about
-    // the one-line fix. ONLY the canonical provider hosts are checked — a
-    // gateway may legitimately speak either protocol on any path (our own dev
-    // gateway serves OpenAI framing on /v1/messages, and a path-based version
-    // of this check flagged it on the first device run).
-    const protocol = config.protocol ?? "anthropic";
-    if (isRelease && config.apiKey) {
-      _askBuoyStore.askBuoyStore.setNotice("This build carries a plaintext apiKey — that's dev-only and it ships to every install. Use the headers callback with your own gateway for distributed builds.");
-    } else if (protocol === "anthropic" && /^https?:\/\/api\.openai\.com\//i.test(config.endpoint)) {
-      _askBuoyStore.askBuoyStore.setNotice('This endpoint is api.openai.com but the protocol is "anthropic". Set protocol: "openai" in the askBuoy config.');
-    } else if (protocol === "openai" && /^https?:\/\/api\.anthropic\.com\//i.test(config.endpoint)) {
-      _askBuoyStore.askBuoyStore.setNotice('This endpoint is api.anthropic.com but the protocol is "openai". Remove protocol or set it to "anthropic".');
-    } else {
-      _askBuoyStore.askBuoyStore.setNotice(null);
-    }
-
-    // Reuse the held session while nothing material changed. The transcript
-    // already survives close/reopen in the module store; without this the
-    // session and ledger did not — reopening the sheet swapped in an empty
-    // ledger (undo bar gone, agent changes still live in the app) and a blank
-    // model memory behind a transcript that still showed the conversation.
-    // The tool list is deliberately NOT part of this signature. Packages
-    // register a frame or two apart, so `toolKey` legitimately changes right
-    // after open — and keying on it silently rebuilt the session mid-chat,
-    // throwing away the conversation, the model's memory and the undo ledger
-    // while the transcript (a separate store) kept rendering as if nothing
-    // happened. Verified on device: a destructive change went unrecorded
-    // because it landed in a ledger that had just been replaced.
-    const signature = [config.endpoint, config.protocol ?? "anthropic", config.model].join("|");
-    const held = _askBuoyStore.askBuoyStore.getHeldSession();
-    if (held && held.signature === signature) {
-      sessionRef.current = held.session;
-      held.session.setAvailableActions(availableActions);
-      _askBuoyStore.askBuoyStore.setLedger(held.session.ledger);
-      return;
-    }
-    const session = (0, _agentCore.createAskBuoySession)({
-      endpoint: config.endpoint,
-      protocol: config.protocol ?? "anthropic",
-      model: config.model,
-      headers: config.headers,
-      apiKey: config.apiKey,
-      maxTokens: config.maxTokens,
-      anthropicVersion: config.anthropicVersion,
-      requestOverrides: config.requestOverrides,
-      // Host-declared custom tools join the built-in catalog. toProviderTools
-      // still filters against the live registry, so a descriptor whose
-      // `custom:<id>` adapter never registered is simply not offered.
-      catalog: config.tools?.length ? [..._agentCore.CATALOG, ...config.tools] : undefined,
-      dispatch: _sharedUi.dispatchToolAction,
-      readSnapshot: _sharedUi.readToolSnapshot,
-      availableActions,
-      policy: config.policy,
-      context: config.context,
-      isRelease,
-      appName: config.appName,
-      platform: _reactNative.Platform.OS,
-      requestApproval: input => _askBuoyStore.askBuoyStore.askApproval(input)
-    });
-    sessionRef.current = session;
-    _askBuoyStore.askBuoyStore.holdSession(session, signature);
-    _askBuoyStore.askBuoyStore.setLedger(session.ledger);
-
-    // The registry publishes on mount, a frame or two after first paint. Warm
-    // the grounding once it is there so the first question does not pay for it.
-    let cancelled = false;
-    void (0, _sharedUi.waitForToolRegistry)().then(ready => {
-      if (ready && !cancelled) void session.prime();
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [configured, config, availableActions, toolKey]);
-
-  /** Stream one turn into a fresh assistant bubble. Callers set up the user side. */
-  const runTurn = (0, _react.useCallback)(text => {
-    const session = sessionRef.current;
-    if (!session) return;
-    _askBuoyStore.askBuoyStore.beginTurn();
-    const messageId = _askBuoyStore.askBuoyStore.startAssistant();
-    const controller = new AbortController();
-    abortRef.current = controller;
-    const onEvent = configRef.current?.onEvent;
-    void (async () => {
-      try {
-        for await (const ev of session.send(text, controller.signal)) {
-          _askBuoyStore.askBuoyStore.applyEvent(messageId, ev);
-          if (onEvent) {
-            try {
-              onEvent(ev);
-            } catch {
-              // The audit tap must never take the chat down.
-            }
-          }
-        }
-      } catch (err) {
-        _askBuoyStore.askBuoyStore.applyEvent(messageId, {
-          type: "error",
-          message: err instanceof Error ? err.message : "Something went wrong talking to your AI endpoint."
-        });
-      } finally {
-        _askBuoyStore.askBuoyStore.finishAssistant(messageId);
-        abortRef.current = null;
-      }
-    })();
-  }, []);
-  const send = (0, _react.useCallback)(text => {
-    const trimmed = text.trim();
-    if (!sessionRef.current || !trimmed) return;
-
-    // Typed mid-turn: park it. The composer already cleared the field, and
-    // silently dropping the words was the worst of all outcomes.
-    if (_askBuoyStore.askBuoyStore.getState().busy) {
-      _askBuoyStore.askBuoyStore.setQueued(trimmed);
-      return;
-    }
-
-    // Typing past an Ask block IS an answer: the block is skipped and locks.
-    // Without this the composer stayed on "Pick an option above…" forever and
-    // a stale choice sat tappable in the history.
-    const awaiting = _askBuoyStore.askBuoyStore.getState().awaitingBlockId;
-    if (awaiting) _askBuoyStore.askBuoyStore.recordAnswer({
-      blockId: awaiting,
-      kind: "skipped"
-    });
-    _askBuoyStore.askBuoyStore.addUser(trimmed);
-    runTurn(trimmed);
-  }, [runTurn]);
-  const retry = (0, _react.useCallback)(() => {
-    const {
-      messages,
-      busy
-    } = _askBuoyStore.askBuoyStore.getState();
-    if (busy || !sessionRef.current) return;
-    const lastUser = [...messages].reverse().find(m => m.role === "user");
-    if (!lastUser) return;
-    // Replace the failed bubble rather than stacking a second one under it.
-    const last = messages[messages.length - 1];
-    if (last && last.role === "assistant" && last.error) _askBuoyStore.askBuoyStore.removeMessage(last.id);
-    runTurn(lastUser.text);
-  }, [runTurn]);
-  const stop = (0, _react.useCallback)(() => {
-    // A pending approval parks an unresolved promise inside the engine; the
-    // abort signal is only read between steps, so Stop must also answer the
-    // approval (as declined) or the generator hangs forever.
-    if (_askBuoyStore.askBuoyStore.getState().pending) _askBuoyStore.askBuoyStore.answerApproval(false);
-    abortRef.current?.abort();
-    abortRef.current = null;
-  }, []);
-
-  // Flush the parked message the moment the turn ends.
-  const queued = state.queued;
-  (0, _react.useEffect)(() => {
-    if (!state.busy && queued) {
-      _askBuoyStore.askBuoyStore.setQueued(null);
-      send(queued);
-    }
-  }, [state.busy, queued, send]);
-  const reset = (0, _react.useCallback)(() => {
-    abortRef.current?.abort();
-    sessionRef.current?.reset();
-    _askBuoyStore.askBuoyStore.reset();
-  }, []);
-  const approve = (0, _react.useCallback)(approved => {
-    _askBuoyStore.askBuoyStore.answerApproval(approved);
-  }, []);
-  const answer = (0, _react.useCallback)(a => {
-    _askBuoyStore.askBuoyStore.recordAnswer(a);
-    // Plain words to the model, never JSON: "Business checkout", "Yes, go ahead."
-    send((0, _agentCore.answerToText)(a));
-  }, [send]);
-
-  /**
-   * Block buttons. `send` is a chat reply; `dispatch` runs the action through
-   * `runGatedAction` — the SAME validation, policy and ledger path a model
-   * call takes, minus the model. The first version called `dispatchToolAction`
-   * raw, which made a model-authored button an invisible, ungoverned,
-   * unundoable mutation while the `buoy_ui` schema promised the opposite.
-   * The human's tap satisfies `requireApproval`; deny lists, read-only mode
-   * and release refusals still stand. Button state is tracked so a tap shows
-   * running → done and can't double-fire.
-   * (`minimize` / `openTool` are the sheet's to handle; see AskBuoyModal.)
-   */
-  const runAction = (0, _react.useCallback)(async (action, blockId) => {
-    if (action.send) {
-      send(action.send);
-      return;
-    }
-    if (!action.dispatch) return;
-    const key = `${blockId}:${action.label}`;
-    const ledger = _askBuoyStore.askBuoyStore.getLedger();
-    if (!ledger) {
-      _askBuoyStore.askBuoyStore.setNotice(`${action.label} failed — no active Ask Buoy session.`);
-      return;
-    }
-    _askBuoyStore.askBuoyStore.setActionState(key, "running");
-    const outcome = await (0, _agentCore.runGatedAction)({
-      toolId: action.dispatch.toolId,
-      action: action.dispatch.action,
-      params: action.dispatch.params ?? {},
-      dispatch: _sharedUi.dispatchToolAction,
-      ledger,
-      policy: config?.policy ?? {},
-      isRelease,
-      // Same merged catalog the session offers, so a button on a custom
-      // tool's block is not refused as unknown.
-      catalog: config?.tools?.length ? [..._agentCore.CATALOG, ...config.tools] : undefined
-    });
-    if (outcome.ok) {
-      _askBuoyStore.askBuoyStore.setActionState(key, "done");
-    } else {
-      _askBuoyStore.askBuoyStore.setActionState(key, "failed");
-      _askBuoyStore.askBuoyStore.setNotice(`${action.label} failed — ${outcome.error}`);
-    }
-  }, [send, config]);
-  return {
-    state,
-    send,
-    stop,
-    reset,
-    approve,
-    retry,
-    answer,
-    runAction,
-    configured,
-    toolCount: Object.keys(availableActions).length
-  };
-}
-//# sourceMappingURL=useAskBuoy.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.useAskBuoy=useAskBuoy,exports.useAskBuoyState=useAskBuoyState;var _react=require("react"),_reactNative=require("react-native"),_sharedUi=require("@buoy-gg/shared-ui"),_agentCore=require("@buoy-gg/agent-core"),_askBuoyStore=require("./askBuoyStore");const isRelease="undefined"!=typeof __DEV__&&!__DEV__;function useAskBuoyState(){return(0,_react.useSyncExternalStore)(_askBuoyStore.askBuoyStore.subscribe,_askBuoyStore.askBuoyStore.getState,_askBuoyStore.askBuoyStore.getState)}function useAskBuoy(e){const o=useAskBuoyState(),t=(0,_react.useRef)(null),r=(0,_react.useRef)(null),s=(0,_react.useRef)(e);s.current=e;const a=!!e?.endpoint&&!!e?.model,n=(0,_react.useMemo)(()=>{try{const e=(0,_sharedUi.listToolActions)();for(const o of(0,_sharedUi.listSnapshotToolIds)())e[o]||(e[o]=[]),e[o].includes(_agentCore.SNAPSHOT_ACTION)||(e[o]=[_agentCore.SNAPSHOT_ACTION,...e[o]]);return e}catch{return{}}},[]),u=Object.keys(n).sort().join(",");(0,_react.useEffect)(()=>{if(_askBuoyStore.askBuoyStore.setConfigured(a),!a||!e)return t.current=null,void _askBuoyStore.askBuoyStore.setNotice("Ask Buoy isn't set up in this app yet. A developer needs to point it at your team's AI endpoint.");const o=e.protocol??"anthropic";isRelease&&e.apiKey?_askBuoyStore.askBuoyStore.setNotice("This build carries a plaintext apiKey — that's dev-only and it ships to every install. Use the headers callback with your own gateway for distributed builds."):"anthropic"===o&&/^https?:\/\/api\.openai\.com\//i.test(e.endpoint)?_askBuoyStore.askBuoyStore.setNotice('This endpoint is api.openai.com but the protocol is "anthropic". Set protocol: "openai" in the askBuoy config.'):"openai"===o&&/^https?:\/\/api\.anthropic\.com\//i.test(e.endpoint)?_askBuoyStore.askBuoyStore.setNotice('This endpoint is api.anthropic.com but the protocol is "openai". Remove protocol or set it to "anthropic".'):_askBuoyStore.askBuoyStore.setNotice(null);const r=[e.endpoint,e.protocol??"anthropic",e.model].join("|"),s=_askBuoyStore.askBuoyStore.getHeldSession();if(s&&s.signature===r)return t.current=s.session,s.session.setAvailableActions(n),void _askBuoyStore.askBuoyStore.setLedger(s.session.ledger);const u=(0,_agentCore.createAskBuoySession)({endpoint:e.endpoint,protocol:e.protocol??"anthropic",model:e.model,headers:e.headers,apiKey:e.apiKey,maxTokens:e.maxTokens,anthropicVersion:e.anthropicVersion,requestOverrides:e.requestOverrides,catalog:e.tools?.length?[..._agentCore.CATALOG,...e.tools]:void 0,dispatch:_sharedUi.dispatchToolAction,readSnapshot:_sharedUi.readToolSnapshot,availableActions:n,policy:e.policy,context:e.context,isRelease:isRelease,appName:e.appName,platform:_reactNative.Platform.OS,requestApproval:e=>_askBuoyStore.askBuoyStore.askApproval(e)});t.current=u,_askBuoyStore.askBuoyStore.holdSession(u,r),_askBuoyStore.askBuoyStore.setLedger(u.ledger);let i=!1;return(0,_sharedUi.waitForToolRegistry)().then(e=>{e&&!i&&u.prime()}),()=>{i=!0}},[a,e,n,u]);const i=(0,_react.useCallback)(e=>{const o=t.current;if(!o)return;_askBuoyStore.askBuoyStore.beginTurn();const a=_askBuoyStore.askBuoyStore.startAssistant(),n=new AbortController;r.current=n;const u=s.current?.onEvent;(async()=>{try{for await(const t of o.send(e,n.signal))if(_askBuoyStore.askBuoyStore.applyEvent(a,t),u)try{u(t)}catch{}}catch(e){_askBuoyStore.askBuoyStore.applyEvent(a,{type:"error",message:e instanceof Error?e.message:"Something went wrong talking to your AI endpoint."})}finally{_askBuoyStore.askBuoyStore.finishAssistant(a),r.current=null}})()},[]),c=(0,_react.useCallback)(e=>{const o=e.trim();if(!t.current||!o)return;if(_askBuoyStore.askBuoyStore.getState().busy)return void _askBuoyStore.askBuoyStore.setQueued(o);const r=_askBuoyStore.askBuoyStore.getState().awaitingBlockId;r&&_askBuoyStore.askBuoyStore.recordAnswer({blockId:r,kind:"skipped"}),_askBuoyStore.askBuoyStore.addUser(o),i(o)},[i]),y=(0,_react.useCallback)(()=>{const{messages:e,busy:o}=_askBuoyStore.askBuoyStore.getState();if(o||!t.current)return;const r=[...e].reverse().find(e=>"user"===e.role);if(!r)return;const s=e[e.length-1];s&&"assistant"===s.role&&s.error&&_askBuoyStore.askBuoyStore.removeMessage(s.id),i(r.text)},[i]),l=(0,_react.useCallback)(()=>{_askBuoyStore.askBuoyStore.getState().pending&&_askBuoyStore.askBuoyStore.answerApproval(!1),r.current?.abort(),r.current=null},[]),k=o.queued;(0,_react.useEffect)(()=>{!o.busy&&k&&(_askBuoyStore.askBuoyStore.setQueued(null),c(k))},[o.busy,k,c]);const S=(0,_react.useCallback)(()=>{r.current?.abort(),t.current?.reset(),_askBuoyStore.askBuoyStore.reset()},[]),p=(0,_react.useCallback)(e=>{_askBuoyStore.askBuoyStore.answerApproval(e)},[]),d=(0,_react.useCallback)(e=>{_askBuoyStore.askBuoyStore.recordAnswer(e),c((0,_agentCore.answerToText)(e))},[c]),B=(0,_react.useCallback)(async(o,t)=>{if(o.send)return void c(o.send);if(!o.dispatch)return;const r=`${t}:${o.label}`,s=_askBuoyStore.askBuoyStore.getLedger();if(!s)return void _askBuoyStore.askBuoyStore.setNotice(`${o.label} failed — no active Ask Buoy session.`);_askBuoyStore.askBuoyStore.setActionState(r,"running");const a=await(0,_agentCore.runGatedAction)({toolId:o.dispatch.toolId,action:o.dispatch.action,params:o.dispatch.params??{},dispatch:_sharedUi.dispatchToolAction,ledger:s,policy:e?.policy??{},isRelease:isRelease,catalog:e?.tools?.length?[..._agentCore.CATALOG,...e.tools]:void 0});a.ok?_askBuoyStore.askBuoyStore.setActionState(r,"done"):(_askBuoyStore.askBuoyStore.setActionState(r,"failed"),_askBuoyStore.askBuoyStore.setNotice(`${o.label} failed — ${a.error}`))},[c,e]);return{state:o,send:c,stop:l,reset:S,approve:p,retry:y,answer:d,runAction:B,configured:a,toolCount:Object.keys(n).length}}

package/lib/commonjs/sync/askBuoySyncAdapter.js

@@ -1,119 +1 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.askBuoySyncAdapter = exports.ASK_BUOY_ADAPTER_VERSION = void 0;
-var _wire = require("./wire");
-var _agentCore = require("@buoy-gg/agent-core");
-var _askBuoyStore = require("../store/askBuoyStore");
-/**
- * The sync adapter, so Buoy Desktop and MCP can see what Ask Buoy is doing.
- *
- * Read-heavy on purpose. There is no `send` action: letting a remote client
- * put words in the agent's mouth would mean anyone who can reach the broker —
- * which has no authentication at all, binds 0.0.0.0, and accepts any client
- * calling itself "Dashboard" — could drive a mutating agent on a tester's
- * device. The chat is initiated on-device, by a person, full stop.
- *
- * `undoAll` IS exposed, because the asymmetry is deliberate: putting things
- * back is the safe direction, and a dev watching from the desktop should be
- * able to clean up a device without walking over to it.
- *
- * The transcript is redacted before it crosses the wire. Action results the
- * agent read can contain storage values and response bodies, and this socket
- * broadcasts to every connected dashboard — it already leaks license keys the
- * same way.
- */
-
-const ASK_BUOY_ADAPTER_VERSION = exports.ASK_BUOY_ADAPTER_VERSION = 1;
-const askBuoySyncAdapter = exports.askBuoySyncAdapter = {
-  version: ASK_BUOY_ADAPTER_VERSION,
-  getSnapshot() {
-    const state = _askBuoyStore.askBuoyStore.getState();
-    const ledger = _askBuoyStore.askBuoyStore.getLedger();
-    const entries = ledger?.list() ?? [];
-    const outstanding = entries.filter(e => !e.undoneAt);
-    return {
-      version: ASK_BUOY_ADAPTER_VERSION,
-      busy: state.busy,
-      configured: state.configured,
-      notice: state.notice,
-      messageCount: state.messages.length,
-      // Only the shape of the conversation, never tool payloads.
-      messages: state.messages.map(m => ({
-        id: m.id,
-        role: m.role,
-        text: (0, _wire.redactForWire)(m.text),
-        streaming: !!m.streaming,
-        toolCalls: m.toolCalls.map(c => ({
-          toolId: c.toolId,
-          action: c.action,
-          status: c.status
-        }))
-      })),
-      // Session token totals, so a desktop/MCP observer can meter cost.
-      usage: state.usage,
-      pendingApproval: state.pending ? {
-        toolId: state.pending.toolId,
-        action: state.pending.action,
-        label: state.pending.label
-      } : null,
-      changes: {
-        // Transients (navigation, taps) are one-shot actions, not changes —
-        // same rule as the on-device bar, so desktop and device tell one story.
-        reversible: outstanding.filter(e => (0, _agentCore.isReversible)(e.effect)).length,
-        permanent: outstanding.filter(e => e.effect.kind !== "transient" && !(0, _agentCore.isReversible)(e.effect)).length,
-        transients: outstanding.filter(e => e.effect.kind === "transient").length,
-        items: outstanding.map(e => ({
-          kind: e.effect.kind,
-          label: e.effect.label
-        }))
-      }
-    };
-  },
-  subscribe(onChange) {
-    const offStore = _askBuoyStore.askBuoyStore.subscribe(onChange);
-    const offLedger = _askBuoyStore.askBuoyStore.getLedger()?.subscribe(onChange);
-    return () => {
-      offStore();
-      offLedger?.();
-    };
-  },
-  actions: {
-    /** What the agent changed, and whether it can be put back. */
-    listChanges: () => {
-      const entries = _askBuoyStore.askBuoyStore.getLedger()?.list() ?? [];
-      return entries.filter(e => !e.undoneAt).map(e => ({
-        id: e.id,
-        at: e.at,
-        toolId: e.toolId,
-        action: e.action,
-        kind: e.effect.kind,
-        label: e.effect.label,
-        reversible: (0, _agentCore.isReversible)(e.effect)
-      }));
-    },
-    /** Put back everything that can be put back. Safe direction only. */
-    undoAll: async () => {
-      const ledger = _askBuoyStore.askBuoyStore.getLedger();
-      if (!ledger) return {
-        ok: false,
-        error: "No Ask Buoy session on this device."
-      };
-      const outcome = await ledger.revertAll(_wire.dispatchToolAction);
-      return {
-        ok: true,
-        ...outcome
-      };
-    },
-    /** Clear the transcript and the ledger. Does not undo anything. */
-    reset: () => {
-      _askBuoyStore.askBuoyStore.reset();
-      return {
-        ok: true
-      };
-    }
-  }
-};
-//# sourceMappingURL=askBuoySyncAdapter.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.askBuoySyncAdapter=exports.ASK_BUOY_ADAPTER_VERSION=void 0;var _wire=require("./wire"),_agentCore=require("@buoy-gg/agent-core"),_askBuoyStore=require("../store/askBuoyStore");const ASK_BUOY_ADAPTER_VERSION=exports.ASK_BUOY_ADAPTER_VERSION=1,askBuoySyncAdapter=exports.askBuoySyncAdapter={version:ASK_BUOY_ADAPTER_VERSION,getSnapshot(){const e=_askBuoyStore.askBuoyStore.getState(),t=_askBuoyStore.askBuoyStore.getLedger(),o=(t?.list()??[]).filter(e=>!e.undoneAt);return{version:ASK_BUOY_ADAPTER_VERSION,busy:e.busy,configured:e.configured,notice:e.notice,messageCount:e.messages.length,messages:e.messages.map(e=>({id:e.id,role:e.role,text:(0,_wire.redactForWire)(e.text),streaming:!!e.streaming,toolCalls:e.toolCalls.map(e=>({toolId:e.toolId,action:e.action,status:e.status}))})),usage:e.usage,pendingApproval:e.pending?{toolId:e.pending.toolId,action:e.pending.action,label:e.pending.label}:null,changes:{reversible:o.filter(e=>(0,_agentCore.isReversible)(e.effect)).length,permanent:o.filter(e=>"transient"!==e.effect.kind&&!(0,_agentCore.isReversible)(e.effect)).length,transients:o.filter(e=>"transient"===e.effect.kind).length,items:o.map(e=>({kind:e.effect.kind,label:e.effect.label}))}}},subscribe(e){const t=_askBuoyStore.askBuoyStore.subscribe(e),o=_askBuoyStore.askBuoyStore.getLedger()?.subscribe(e);return()=>{t(),o?.()}},actions:{listChanges:()=>(_askBuoyStore.askBuoyStore.getLedger()?.list()??[]).filter(e=>!e.undoneAt).map(e=>({id:e.id,at:e.at,toolId:e.toolId,action:e.action,kind:e.effect.kind,label:e.effect.label,reversible:(0,_agentCore.isReversible)(e.effect)})),undoAll:async()=>{const e=_askBuoyStore.askBuoyStore.getLedger();return e?{ok:!0,...await e.revertAll(_wire.dispatchToolAction)}:{ok:!1,error:"No Ask Buoy session on this device."}},reset:()=>(_askBuoyStore.askBuoyStore.reset(),{ok:!0})}};

package/lib/commonjs/sync/askBuoySyncAdapter.test.js

@@ -1,136 +1 @@
-"use strict";
-
-var _vitest = require("vitest");
-var _agentCore = require("@buoy-gg/agent-core");
-var _askBuoySyncAdapter = require("./askBuoySyncAdapter");
-var _wire = require("./wire");
-var _askBuoyStore = require("../store/askBuoyStore");
-/**
- * What Ask Buoy is allowed to put on the broker wire, and what it refuses to
- * accept from it.
- *
- * Both directions matter. The broker has no authentication, accepts any client
- * that calls itself "Dashboard", and forwards to every connected dashboard — it
- * already broadcasts license keys that way. So: no tool results go out, and no
- * remote client can make the agent say anything.
- */
-
-(0, _vitest.beforeEach)(() => {
-  _askBuoyStore.askBuoyStore.reset();
-  _askBuoyStore.askBuoyStore.setLedger(null);
-});
-(0, _vitest.describe)("the wire surface", () => {
-  (0, _vitest.it)("exposes no action that can make the agent talk", () => {
-    // A `send` here would let anyone on the LAN drive a mutating agent on a
-    // tester's phone. The conversation starts on-device, by a person.
-    const actions = Object.keys(_askBuoySyncAdapter.askBuoySyncAdapter.actions);
-    (0, _vitest.expect)(actions).not.toContain("send");
-    (0, _vitest.expect)(actions).not.toContain("ask");
-    (0, _vitest.expect)(actions).not.toContain("prompt");
-    (0, _vitest.expect)(actions.sort()).toEqual(["listChanges", "reset", "undoAll"]);
-  });
-  (0, _vitest.it)("puts the shape of the conversation on the wire, never tool payloads", () => {
-    _askBuoyStore.askBuoyStore.addUser("what is in storage");
-    const id = _askBuoyStore.askBuoyStore.startAssistant();
-    _askBuoyStore.askBuoyStore.applyEvent(id, {
-      type: "tool-start",
-      id: "c1",
-      toolId: "storage",
-      action: "async.getItem",
-      label: "Read session",
-      description: "Read one AsyncStorage key"
-    });
-    _askBuoyStore.askBuoyStore.applyEvent(id, {
-      type: "tool-end",
-      id: "c1",
-      ok: true,
-      summary: "eyJhbGciOiJIUzI1NiJ9.super.secret"
-    });
-    const snap = _askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot();
-    const call = snap.messages[1].toolCalls[0];
-    (0, _vitest.expect)(call).toEqual({
-      toolId: "storage",
-      action: "async.getItem",
-      status: "ok"
-    });
-    // The result summary is not on the wire at all — there is no field for it.
-    (0, _vitest.expect)(JSON.stringify(snap)).not.toContain("super.secret");
-  });
-  (0, _vitest.it)("redacts credentials that made it into the assistant's prose", () => {
-    _askBuoyStore.askBuoyStore.addUser("show me the auth header");
-    const id = _askBuoyStore.askBuoyStore.startAssistant();
-    _askBuoyStore.askBuoyStore.applyEvent(id, {
-      type: "text",
-      delta: "It sends Authorization: Bearer abcdef0123456789ghijkl to the API."
-    });
-    const snap = _askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot();
-    (0, _vitest.expect)(JSON.stringify(snap)).not.toContain("abcdef0123456789ghijkl");
-  });
-  (0, _vitest.it)("reports reversible and permanent changes separately", () => {
-    const ledger = new _agentCore.EffectLedger();
-    _askBuoyStore.askBuoyStore.setLedger(ledger);
-    ledger.record("storage", "async.setItem", {
-      kind: "storage-write",
-      toolId: "storage",
-      action: "async.setItem",
-      key: "points",
-      before: "240",
-      label: "Set points to 1500"
-    });
-    ledger.record("perf-monitor", "clearAll", {
-      kind: "transient",
-      label: "Cleared samples"
-    });
-    // A store write with no captured prior state: recorded, visible, and
-    // NOT something Undo can deliver — it must count as permanent.
-    ledger.record("zustand", "setState", {
-      kind: "state-write",
-      toolId: "zustand",
-      action: "setState",
-      label: "Update the cart store"
-    });
-    const snap = _askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot();
-    (0, _vitest.expect)(snap.changes.reversible).toBe(1);
-    // The transient is an ACTION, not a change — it must not inflate
-    // "permanent" (that read "Changed this app · N permanent" after a
-    // read-only tour). It is still reported, in its own count.
-    (0, _vitest.expect)(snap.changes.permanent).toBe(1);
-    (0, _vitest.expect)(snap.changes.transients).toBe(1);
-  });
-});
-(0, _vitest.describe)("redactForWire", () => {
-  (0, _vitest.it)("removes bearer tokens, JWTs, api keys and license keys", () => {
-    const cases = ["Authorization: Bearer abcdefghijklmnop123456", "token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9abcdefgh", "key sk-abcdefghijklmnop1234", "license BUOY-ABCD-1234-EFGH", 'the header is "x-api-key": "supersecretvalue"'];
-    for (const input of cases) {
-      (0, _vitest.expect)((0, _wire.redactForWire)(input)).toContain("removed]");
-    }
-  });
-  (0, _vitest.it)("leaves ordinary prose alone", () => {
-    const text = "The /menu call returned 200 with 12 items and the burger was in stock.";
-    (0, _vitest.expect)((0, _wire.redactForWire)(text)).toBe(text);
-  });
-});
-(0, _vitest.describe)("undo from the desktop", () => {
-  (0, _vitest.it)("is allowed, because putting things back is the safe direction", async () => {
-    const ledger = new _agentCore.EffectLedger();
-    _askBuoyStore.askBuoyStore.setLedger(ledger);
-    const store = new Map([["points", "1500"]]);
-    ledger.record("storage", "async.setItem", {
-      kind: "storage-write",
-      toolId: "storage",
-      action: "async.setItem",
-      key: "points",
-      before: "240",
-      label: "Set points to 1500"
-    });
-
-    // The adapter dispatches through the real seam; stub it at the ledger.
-    await ledger.revertAll(async (_t, action, params) => {
-      const p = params;
-      if (action === "async.setItem") store.set(p.key, p.value);
-      return undefined;
-    });
-    (0, _vitest.expect)(store.get("points")).toBe("240");
-  });
-});
-//# sourceMappingURL=askBuoySyncAdapter.test.js.map
+"use strict";var _vitest=require("vitest"),_agentCore=require("@buoy-gg/agent-core"),_askBuoySyncAdapter=require("./askBuoySyncAdapter"),_wire=require("./wire"),_askBuoyStore=require("../store/askBuoyStore");(0,_vitest.beforeEach)(()=>{_askBuoyStore.askBuoyStore.reset(),_askBuoyStore.askBuoyStore.setLedger(null)}),(0,_vitest.describe)("the wire surface",()=>{(0,_vitest.it)("exposes no action that can make the agent talk",()=>{const e=Object.keys(_askBuoySyncAdapter.askBuoySyncAdapter.actions);(0,_vitest.expect)(e).not.toContain("send"),(0,_vitest.expect)(e).not.toContain("ask"),(0,_vitest.expect)(e).not.toContain("prompt"),(0,_vitest.expect)(e.sort()).toEqual(["listChanges","reset","undoAll"])}),(0,_vitest.it)("puts the shape of the conversation on the wire, never tool payloads",()=>{_askBuoyStore.askBuoyStore.addUser("what is in storage");const e=_askBuoyStore.askBuoyStore.startAssistant();_askBuoyStore.askBuoyStore.applyEvent(e,{type:"tool-start",id:"c1",toolId:"storage",action:"async.getItem",label:"Read session",description:"Read one AsyncStorage key"}),_askBuoyStore.askBuoyStore.applyEvent(e,{type:"tool-end",id:"c1",ok:!0,summary:"eyJhbGciOiJIUzI1NiJ9.super.secret"});const t=_askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot(),s=t.messages[1].toolCalls[0];(0,_vitest.expect)(s).toEqual({toolId:"storage",action:"async.getItem",status:"ok"}),(0,_vitest.expect)(JSON.stringify(t)).not.toContain("super.secret")}),(0,_vitest.it)("redacts credentials that made it into the assistant's prose",()=>{_askBuoyStore.askBuoyStore.addUser("show me the auth header");const e=_askBuoyStore.askBuoyStore.startAssistant();_askBuoyStore.askBuoyStore.applyEvent(e,{type:"text",delta:"It sends Authorization: Bearer abcdef0123456789ghijkl to the API."});const t=_askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot();(0,_vitest.expect)(JSON.stringify(t)).not.toContain("abcdef0123456789ghijkl")}),(0,_vitest.it)("reports reversible and permanent changes separately",()=>{const e=new _agentCore.EffectLedger;_askBuoyStore.askBuoyStore.setLedger(e),e.record("storage","async.setItem",{kind:"storage-write",toolId:"storage",action:"async.setItem",key:"points",before:"240",label:"Set points to 1500"}),e.record("perf-monitor","clearAll",{kind:"transient",label:"Cleared samples"}),e.record("zustand","setState",{kind:"state-write",toolId:"zustand",action:"setState",label:"Update the cart store"});const t=_askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot();(0,_vitest.expect)(t.changes.reversible).toBe(1),(0,_vitest.expect)(t.changes.permanent).toBe(1),(0,_vitest.expect)(t.changes.transients).toBe(1)})}),(0,_vitest.describe)("redactForWire",()=>{(0,_vitest.it)("removes bearer tokens, JWTs, api keys and license keys",()=>{const e=["Authorization: Bearer abcdefghijklmnop123456","token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9abcdefgh","key sk-abcdefghijklmnop1234","license BUOY-ABCD-1234-EFGH",'the header is "x-api-key": "supersecretvalue"'];for(const t of e)(0,_vitest.expect)((0,_wire.redactForWire)(t)).toContain("removed]")}),(0,_vitest.it)("leaves ordinary prose alone",()=>{const e="The /menu call returned 200 with 12 items and the burger was in stock.";(0,_vitest.expect)((0,_wire.redactForWire)(e)).toBe(e)})}),(0,_vitest.describe)("undo from the desktop",()=>{(0,_vitest.it)("is allowed, because putting things back is the safe direction",async()=>{const e=new _agentCore.EffectLedger;_askBuoyStore.askBuoyStore.setLedger(e);const t=new Map([["points","1500"]]);e.record("storage","async.setItem",{kind:"storage-write",toolId:"storage",action:"async.setItem",key:"points",before:"240",label:"Set points to 1500"}),await e.revertAll(async(e,s,o)=>{const a=o;"async.setItem"===s&&t.set(a.key,a.value)}),(0,_vitest.expect)(t.get("points")).toBe("240")})});

package/lib/commonjs/sync/wire.js

@@ -1,58 +1 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-Object.defineProperty(exports, "dispatchToolAction", {
-  enumerable: true,
-  get: function () {
-    return _sharedUi.dispatchToolAction;
-  }
-});
-exports.redactForWire = redactForWire;
-var _sharedUi = require("@buoy-gg/shared-ui");
-/**
- * What the sync adapter is allowed to put on the broker wire.
- *
- * The broker has no authentication, `cors.origin: "*"`, binds every interface,
- * and forwards to every connected dashboard — it already broadcasts each
- * device's license key to every socket. A chat transcript is not a safe thing
- * to add to that channel unfiltered: the agent reads storage values, network
- * response bodies and user records, and any of it can end up quoted in an
- * answer.
- *
- * So text crossing the wire is scrubbed for the shapes that are unambiguously
- * credentials. This is a reduction in blast radius, not a guarantee — the real
- * guarantee is that tool RESULTS never cross at all (see askBuoySyncAdapter).
- */
-
-const PATTERNS = [{
-  re: /\bBearer\s+[A-Za-z0-9._~+/-]{12,}=*/gi,
-  label: "[bearer token removed]"
-}, {
-  re: /\beyJ[A-Za-z0-9._-]{20,}/g,
-  label: "[jwt removed]"
-}, {
-  re: /\bsk-[A-Za-z0-9_-]{16,}/g,
-  label: "[api key removed]"
-}, {
-  re: /\bBUOY-[A-Z0-9-]{8,}/g,
-  label: "[license key removed]"
-},
-// Common "key: value" credential shapes in a quoted payload.
-{
-  re: /("|')?(authorization|x-api-key|api[_-]?key|password|secret|access_token|refresh_token)\1?\s*[:=]\s*("|')?[^\s"',}]{6,}/gi,
-  label: "[credential removed]"
-}];
-function redactForWire(text) {
-  if (!text) return text;
-  let out = text;
-  for (const {
-    re,
-    label
-  } of PATTERNS) {
-    out = out.replace(re, label);
-  }
-  return out;
-}
-//# sourceMappingURL=wire.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),Object.defineProperty(exports,"dispatchToolAction",{enumerable:!0,get:function(){return _sharedUi.dispatchToolAction}}),exports.redactForWire=redactForWire;var _sharedUi=require("@buoy-gg/shared-ui");const PATTERNS=[{re:/\bBearer\s+[A-Za-z0-9._~+/-]{12,}=*/gi,label:"[bearer token removed]"},{re:/\beyJ[A-Za-z0-9._-]{20,}/g,label:"[jwt removed]"},{re:/\bsk-[A-Za-z0-9_-]{16,}/g,label:"[api key removed]"},{re:/\bBUOY-[A-Z0-9-]{8,}/g,label:"[license key removed]"},{re:/("|')?(authorization|x-api-key|api[_-]?key|password|secret|access_token|refresh_token)\1?\s*[:=]\s*("|')?[^\s"',}]{6,}/gi,label:"[credential removed]"}];function redactForWire(e){if(!e)return e;let r=e;for(const{re:e,label:o}of PATTERNS)r=r.replace(e,o);return r}

package/lib/commonjs/types.js

@@ -1,6 +1 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-//# sourceMappingURL=types.js.map
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0});