@buoy-gg/ask-buoy 7.0.33

package/lib/commonjs/sync/askBuoySyncAdapter.js

@@ -0,0 +1,119 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.askBuoySyncAdapter = exports.ASK_BUOY_ADAPTER_VERSION = void 0;
+var _wire = require("./wire");
+var _agentCore = require("@buoy-gg/agent-core");
+var _askBuoyStore = require("../store/askBuoyStore");
+/**
+ * The sync adapter, so Buoy Desktop and MCP can see what Ask Buoy is doing.
+ *
+ * Read-heavy on purpose. There is no `send` action: letting a remote client
+ * put words in the agent's mouth would mean anyone who can reach the broker —
+ * which has no authentication at all, binds 0.0.0.0, and accepts any client
+ * calling itself "Dashboard" — could drive a mutating agent on a tester's
+ * device. The chat is initiated on-device, by a person, full stop.
+ *
+ * `undoAll` IS exposed, because the asymmetry is deliberate: putting things
+ * back is the safe direction, and a dev watching from the desktop should be
+ * able to clean up a device without walking over to it.
+ *
+ * The transcript is redacted before it crosses the wire. Action results the
+ * agent read can contain storage values and response bodies, and this socket
+ * broadcasts to every connected dashboard — it already leaks license keys the
+ * same way.
+ */
+
+const ASK_BUOY_ADAPTER_VERSION = exports.ASK_BUOY_ADAPTER_VERSION = 1;
+const askBuoySyncAdapter = exports.askBuoySyncAdapter = {
+  version: ASK_BUOY_ADAPTER_VERSION,
+  getSnapshot() {
+    const state = _askBuoyStore.askBuoyStore.getState();
+    const ledger = _askBuoyStore.askBuoyStore.getLedger();
+    const entries = ledger?.list() ?? [];
+    const outstanding = entries.filter(e => !e.undoneAt);
+    return {
+      version: ASK_BUOY_ADAPTER_VERSION,
+      busy: state.busy,
+      configured: state.configured,
+      notice: state.notice,
+      messageCount: state.messages.length,
+      // Only the shape of the conversation, never tool payloads.
+      messages: state.messages.map(m => ({
+        id: m.id,
+        role: m.role,
+        text: (0, _wire.redactForWire)(m.text),
+        streaming: !!m.streaming,
+        toolCalls: m.toolCalls.map(c => ({
+          toolId: c.toolId,
+          action: c.action,
+          status: c.status
+        }))
+      })),
+      // Session token totals, so a desktop/MCP observer can meter cost.
+      usage: state.usage,
+      pendingApproval: state.pending ? {
+        toolId: state.pending.toolId,
+        action: state.pending.action,
+        label: state.pending.label
+      } : null,
+      changes: {
+        // Transients (navigation, taps) are one-shot actions, not changes —
+        // same rule as the on-device bar, so desktop and device tell one story.
+        reversible: outstanding.filter(e => (0, _agentCore.isReversible)(e.effect)).length,
+        permanent: outstanding.filter(e => e.effect.kind !== "transient" && !(0, _agentCore.isReversible)(e.effect)).length,
+        transients: outstanding.filter(e => e.effect.kind === "transient").length,
+        items: outstanding.map(e => ({
+          kind: e.effect.kind,
+          label: e.effect.label
+        }))
+      }
+    };
+  },
+  subscribe(onChange) {
+    const offStore = _askBuoyStore.askBuoyStore.subscribe(onChange);
+    const offLedger = _askBuoyStore.askBuoyStore.getLedger()?.subscribe(onChange);
+    return () => {
+      offStore();
+      offLedger?.();
+    };
+  },
+  actions: {
+    /** What the agent changed, and whether it can be put back. */
+    listChanges: () => {
+      const entries = _askBuoyStore.askBuoyStore.getLedger()?.list() ?? [];
+      return entries.filter(e => !e.undoneAt).map(e => ({
+        id: e.id,
+        at: e.at,
+        toolId: e.toolId,
+        action: e.action,
+        kind: e.effect.kind,
+        label: e.effect.label,
+        reversible: (0, _agentCore.isReversible)(e.effect)
+      }));
+    },
+    /** Put back everything that can be put back. Safe direction only. */
+    undoAll: async () => {
+      const ledger = _askBuoyStore.askBuoyStore.getLedger();
+      if (!ledger) return {
+        ok: false,
+        error: "No Ask Buoy session on this device."
+      };
+      const outcome = await ledger.revertAll(_wire.dispatchToolAction);
+      return {
+        ok: true,
+        ...outcome
+      };
+    },
+    /** Clear the transcript and the ledger. Does not undo anything. */
+    reset: () => {
+      _askBuoyStore.askBuoyStore.reset();
+      return {
+        ok: true
+      };
+    }
+  }
+};
+//# sourceMappingURL=askBuoySyncAdapter.js.map

package/lib/commonjs/sync/askBuoySyncAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_wire","require","_agentCore","_askBuoyStore","ASK_BUOY_ADAPTER_VERSION","exports","askBuoySyncAdapter","version","getSnapshot","state","askBuoyStore","getState","ledger","getLedger","entries","list","outstanding","filter","e","undoneAt","busy","configured","notice","messageCount","messages","length","map","m","id","role","text","redactForWire","streaming","toolCalls","c","toolId","action","status","usage","pendingApproval","pending","label","changes","reversible","isReversible","effect","permanent","kind","transients","items","subscribe","onChange","offStore","offLedger","actions","listChanges","at","undoAll","ok","error","outcome","revertAll","dispatchToolAction","reset"],"sourceRoot":"../../../src","sources":["sync/askBuoySyncAdapter.ts"],"mappings":";;;;;;AAkBA,IAAAA,KAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,aAAA,GAAAF,OAAA;AApBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKO,MAAMG,wBAAwB,GAAAC,OAAA,CAAAD,wBAAA,GAAG,CAAC;AAElC,MAAME,kBAAkB,GAAAD,OAAA,CAAAC,kBAAA,GAAG;EAChCC,OAAO,EAAEH,wBAAwB;EAEjCI,WAAWA,CAAA,EAAG;IACZ,MAAMC,KAAK,GAAGC,0BAAY,CAACC,QAAQ,CAAC,CAAC;IACrC,MAAMC,MAAM,GAAGF,0BAAY,CAACG,SAAS,CAAC,CAAC;IACvC,MAAMC,OAAO,GAAGF,MAAM,EAAEG,IAAI,CAAC,CAAC,IAAI,EAAE;IACpC,MAAMC,WAAW,GAAGF,OAAO,CAACG,MAAM,CAAEC,CAAC,IAAK,CAACA,CAAC,CAACC,QAAQ,CAAC;IAEtD,OAAO;MACLZ,OAAO,EAAEH,wBAAwB;MACjCgB,IAAI,EAAEX,KAAK,CAACW,IAAI;MAChBC,UAAU,EAAEZ,KAAK,CAACY,UAAU;MAC5BC,MAAM,EAAEb,KAAK,CAACa,MAAM;MACpBC,YAAY,EAAEd,KAAK,CAACe,QAAQ,CAACC,MAAM;MACnC;MACAD,QAAQ,EAAEf,KAAK,CAACe,QAAQ,CAACE,GAAG,CAAEC,CAAC,KAAM;QACnCC,EAAE,EAAED,CAAC,CAACC,EAAE;QACRC,IAAI,EAAEF,CAAC,CAACE,IAAI;QACZC,IAAI,EAAE,IAAAC,mBAAa,EAACJ,CAAC,CAACG,IAAI,CAAC;QAC3BE,SAAS,EAAE,CAAC,CAACL,CAAC,CAACK,SAAS;QACxBC,SAAS,EAAEN,CAAC,CAACM,SAAS,CAACP,GAAG,CAAEQ,CAAC,KAAM;UACjCC,MAAM,EAAED,CAAC,CAACC,MAAM;UAChBC,MAAM,EAAEF,CAAC,CAACE,MAAM;UAChBC,MAAM,EAAEH,CAAC,CAACG;QACZ,CAAC,CAAC;MACJ,CAAC,CAAC,CAAC;MACH;MACAC,KAAK,EAAE7B,KAAK,CAAC6B,KAAK;MAClBC,eAAe,EAAE9B,KAAK,CAAC+B,OAAO,GAC1B;QACEL,MAAM,EAAE1B,KAAK,CAAC+B,OAAO,CAACL,MAAM;QAC5BC,MAAM,EAAE3B,KAAK,CAAC+B,OAAO,CAACJ,MAAM;QAC5BK,KAAK,EAAEhC,KAAK,CAAC+B,OAAO,CAACC;MACvB,CAAC,GACD,IAAI;MACRC,OAAO,EAAE;QACP;QACA;QACAC,UAAU,EAAE3B,WAAW,CAACC,MAAM,CAAEC,CAAC,IAAK,IAAA0B,uBAAY,EAAC1B,CAAC,CAAC2B,MAAM,CAAC,CAAC,CAACpB,MAAM;QACpEqB,SAAS,EAAE9B,WAAW,CAACC,MAAM,CAC1BC,CAAC,IAAKA,CAAC,CAAC2B,MAAM,CAACE,IAAI,KAAK,WAAW,IAAI,CAAC,IAAAH,uBAAY,EAAC1B,CAAC,CAAC2B,MAAM,CAChE,CAAC,CAACpB,MAAM;QACRuB,UAAU,EAAEhC,WAAW,CAACC,MAAM,CAAEC,CAAC,IAAKA,CAAC,CAAC2B,MAAM,CAACE,IAAI,KAAK,WAAW,CAAC,CAACtB,MAAM;QAC3EwB,KAAK,EAAEjC,WAAW,CAACU,GAAG,CAAER,CAAC,KAAM;UAAE6B,IAAI,EAAE7B,CAAC,CAAC2B,MAAM,CAACE,IAAI;UAAEN,KAAK,EAAEvB,CAAC,CAAC2B,MAAM,CAACJ;QAAM,CAAC,CAAC;MAChF;IACF,CAAC;EACH,CAAC;EAEDS,SAASA,CAACC,QAAoB,EAAE;IAC9B,MAAMC,QAAQ,GAAG1C,0BAAY,CAACwC,SAAS,CAACC,QAAQ,CAAC;IACjD,MAAME,SAAS,GAAG3C,0BAAY,CAACG,SAAS,CAAC,CAAC,EAAEqC,SAAS,CAACC,QAAQ,CAAC;IAC/D,OAAO,MAAM;MACXC,QAAQ,CAAC,CAAC;MACVC,SAAS,GAAG,CAAC;IACf,CAAC;EACH,CAAC;EAEDC,OAAO,EAAE;IACP;IACAC,WAAW,EAAEA,CAAA,KAAM;MACjB,MAAMzC,OAAO,GAAGJ,0BAAY,CAACG,SAAS,CAAC,CAAC,EAAEE,IAAI,CAAC,CAAC,IAAI,EAAE;MACtD,OAAOD,OAAO,CACXG,MAAM,CAAEC,CAAC,IAAK,CAACA,CAAC,CAACC,QAAQ,CAAC,CAC1BO,GAAG,CAAER,CAAC,KAAM;QACXU,EAAE,EAAEV,CAAC,CAACU,EAAE;QACR4B,EAAE,EAAEtC,CAAC,CAACsC,EAAE;QACRrB,MAAM,EAAEjB,CAAC,CAACiB,MAAM;QAChBC,MAAM,EAAElB,CAAC,CAACkB,MAAM;QAChBW,IAAI,EAAE7B,CAAC,CAAC2B,MAAM,CAACE,IAAI;QACnBN,KAAK,EAAEvB,CAAC,CAAC2B,MAAM,CAACJ,KAAK;QACrBE,UAAU,EAAE,IAAAC,uBAAY,EAAC1B,CAAC,CAAC2B,MAAM;MACnC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;IACAY,OAAO,EAAE,MAAAA,CAAA,KAAY;MACnB,MAAM7C,MAAM,GAAGF,0BAAY,CAACG,SAAS,CAAC,CAAC;MACvC,IAAI,CAACD,MAAM,EAAE,OAAO;QAAE8C,EAAE,EAAE,KAAK;QAAEC,KAAK,EAAE;MAAsC,CAAC;MAC/E,MAAMC,OAAO,GAAG,MAAMhD,MAAM,CAACiD,SAAS,CAACC,wBAAkB,CAAC;MAC1D,OAAO;QAAEJ,EAAE,EAAE,IAAI;QAAE,GAAGE;MAAQ,CAAC;IACjC,CAAC;IAED;IACAG,KAAK,EAAEA,CAAA,KAAM;MACXrD,0BAAY,CAACqD,KAAK,CAAC,CAAC;MACpB,OAAO;QAAEL,EAAE,EAAE;MAAK,CAAC;IACrB;EACF;AACF,CAAC","ignoreList":[]}

package/lib/commonjs/sync/askBuoySyncAdapter.test.js

@@ -0,0 +1,136 @@
+"use strict";
+
+var _vitest = require("vitest");
+var _agentCore = require("@buoy-gg/agent-core");
+var _askBuoySyncAdapter = require("./askBuoySyncAdapter");
+var _wire = require("./wire");
+var _askBuoyStore = require("../store/askBuoyStore");
+/**
+ * What Ask Buoy is allowed to put on the broker wire, and what it refuses to
+ * accept from it.
+ *
+ * Both directions matter. The broker has no authentication, accepts any client
+ * that calls itself "Dashboard", and forwards to every connected dashboard — it
+ * already broadcasts license keys that way. So: no tool results go out, and no
+ * remote client can make the agent say anything.
+ */
+
+(0, _vitest.beforeEach)(() => {
+  _askBuoyStore.askBuoyStore.reset();
+  _askBuoyStore.askBuoyStore.setLedger(null);
+});
+(0, _vitest.describe)("the wire surface", () => {
+  (0, _vitest.it)("exposes no action that can make the agent talk", () => {
+    // A `send` here would let anyone on the LAN drive a mutating agent on a
+    // tester's phone. The conversation starts on-device, by a person.
+    const actions = Object.keys(_askBuoySyncAdapter.askBuoySyncAdapter.actions);
+    (0, _vitest.expect)(actions).not.toContain("send");
+    (0, _vitest.expect)(actions).not.toContain("ask");
+    (0, _vitest.expect)(actions).not.toContain("prompt");
+    (0, _vitest.expect)(actions.sort()).toEqual(["listChanges", "reset", "undoAll"]);
+  });
+  (0, _vitest.it)("puts the shape of the conversation on the wire, never tool payloads", () => {
+    _askBuoyStore.askBuoyStore.addUser("what is in storage");
+    const id = _askBuoyStore.askBuoyStore.startAssistant();
+    _askBuoyStore.askBuoyStore.applyEvent(id, {
+      type: "tool-start",
+      id: "c1",
+      toolId: "storage",
+      action: "async.getItem",
+      label: "Read session",
+      description: "Read one AsyncStorage key"
+    });
+    _askBuoyStore.askBuoyStore.applyEvent(id, {
+      type: "tool-end",
+      id: "c1",
+      ok: true,
+      summary: "eyJhbGciOiJIUzI1NiJ9.super.secret"
+    });
+    const snap = _askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot();
+    const call = snap.messages[1].toolCalls[0];
+    (0, _vitest.expect)(call).toEqual({
+      toolId: "storage",
+      action: "async.getItem",
+      status: "ok"
+    });
+    // The result summary is not on the wire at all — there is no field for it.
+    (0, _vitest.expect)(JSON.stringify(snap)).not.toContain("super.secret");
+  });
+  (0, _vitest.it)("redacts credentials that made it into the assistant's prose", () => {
+    _askBuoyStore.askBuoyStore.addUser("show me the auth header");
+    const id = _askBuoyStore.askBuoyStore.startAssistant();
+    _askBuoyStore.askBuoyStore.applyEvent(id, {
+      type: "text",
+      delta: "It sends Authorization: Bearer abcdef0123456789ghijkl to the API."
+    });
+    const snap = _askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot();
+    (0, _vitest.expect)(JSON.stringify(snap)).not.toContain("abcdef0123456789ghijkl");
+  });
+  (0, _vitest.it)("reports reversible and permanent changes separately", () => {
+    const ledger = new _agentCore.EffectLedger();
+    _askBuoyStore.askBuoyStore.setLedger(ledger);
+    ledger.record("storage", "async.setItem", {
+      kind: "storage-write",
+      toolId: "storage",
+      action: "async.setItem",
+      key: "points",
+      before: "240",
+      label: "Set points to 1500"
+    });
+    ledger.record("perf-monitor", "clearAll", {
+      kind: "transient",
+      label: "Cleared samples"
+    });
+    // A store write with no captured prior state: recorded, visible, and
+    // NOT something Undo can deliver — it must count as permanent.
+    ledger.record("zustand", "setState", {
+      kind: "state-write",
+      toolId: "zustand",
+      action: "setState",
+      label: "Update the cart store"
+    });
+    const snap = _askBuoySyncAdapter.askBuoySyncAdapter.getSnapshot();
+    (0, _vitest.expect)(snap.changes.reversible).toBe(1);
+    // The transient is an ACTION, not a change — it must not inflate
+    // "permanent" (that read "Changed this app · N permanent" after a
+    // read-only tour). It is still reported, in its own count.
+    (0, _vitest.expect)(snap.changes.permanent).toBe(1);
+    (0, _vitest.expect)(snap.changes.transients).toBe(1);
+  });
+});
+(0, _vitest.describe)("redactForWire", () => {
+  (0, _vitest.it)("removes bearer tokens, JWTs, api keys and license keys", () => {
+    const cases = ["Authorization: Bearer abcdefghijklmnop123456", "token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9abcdefgh", "key sk-abcdefghijklmnop1234", "license BUOY-ABCD-1234-EFGH", 'the header is "x-api-key": "supersecretvalue"'];
+    for (const input of cases) {
+      (0, _vitest.expect)((0, _wire.redactForWire)(input)).toContain("removed]");
+    }
+  });
+  (0, _vitest.it)("leaves ordinary prose alone", () => {
+    const text = "The /menu call returned 200 with 12 items and the burger was in stock.";
+    (0, _vitest.expect)((0, _wire.redactForWire)(text)).toBe(text);
+  });
+});
+(0, _vitest.describe)("undo from the desktop", () => {
+  (0, _vitest.it)("is allowed, because putting things back is the safe direction", async () => {
+    const ledger = new _agentCore.EffectLedger();
+    _askBuoyStore.askBuoyStore.setLedger(ledger);
+    const store = new Map([["points", "1500"]]);
+    ledger.record("storage", "async.setItem", {
+      kind: "storage-write",
+      toolId: "storage",
+      action: "async.setItem",
+      key: "points",
+      before: "240",
+      label: "Set points to 1500"
+    });
+
+    // The adapter dispatches through the real seam; stub it at the ledger.
+    await ledger.revertAll(async (_t, action, params) => {
+      const p = params;
+      if (action === "async.setItem") store.set(p.key, p.value);
+      return undefined;
+    });
+    (0, _vitest.expect)(store.get("points")).toBe("240");
+  });
+});
+//# sourceMappingURL=askBuoySyncAdapter.test.js.map

package/lib/commonjs/sync/askBuoySyncAdapter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_vitest","require","_agentCore","_askBuoySyncAdapter","_wire","_askBuoyStore","beforeEach","askBuoyStore","reset","setLedger","describe","it","actions","Object","keys","askBuoySyncAdapter","expect","not","toContain","sort","toEqual","addUser","id","startAssistant","applyEvent","type","toolId","action","label","description","ok","summary","snap","getSnapshot","call","messages","toolCalls","status","JSON","stringify","delta","ledger","EffectLedger","record","kind","key","before","changes","reversible","toBe","permanent","transients","cases","input","redactForWire","text","store","Map","revertAll","_t","params","p","set","value","undefined","get"],"sourceRoot":"../../../src","sources":["sync/askBuoySyncAdapter.test.ts"],"mappings":";;AASA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAEA,IAAAE,mBAAA,GAAAF,OAAA;AACA,IAAAG,KAAA,GAAAH,OAAA;AACA,IAAAI,aAAA,GAAAJ,OAAA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAQA,IAAAK,kBAAU,EAAC,MAAM;EACfC,0BAAY,CAACC,KAAK,CAAC,CAAC;EACpBD,0BAAY,CAACE,SAAS,CAAC,IAAI,CAAC;AAC9B,CAAC,CAAC;AAEF,IAAAC,gBAAQ,EAAC,kBAAkB,EAAE,MAAM;EACjC,IAAAC,UAAE,EAAC,gDAAgD,EAAE,MAAM;IACzD;IACA;IACA,MAAMC,OAAO,GAAGC,MAAM,CAACC,IAAI,CAACC,sCAAkB,CAACH,OAAO,CAAC;IACvD,IAAAI,cAAM,EAACJ,OAAO,CAAC,CAACK,GAAG,CAACC,SAAS,CAAC,MAAM,CAAC;IACrC,IAAAF,cAAM,EAACJ,OAAO,CAAC,CAACK,GAAG,CAACC,SAAS,CAAC,KAAK,CAAC;IACpC,IAAAF,cAAM,EAACJ,OAAO,CAAC,CAACK,GAAG,CAACC,SAAS,CAAC,QAAQ,CAAC;IACvC,IAAAF,cAAM,EAACJ,OAAO,CAACO,IAAI,CAAC,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;EACrE,CAAC,CAAC;EAEF,IAAAT,UAAE,EAAC,qEAAqE,EAAE,MAAM;IAC9EJ,0BAAY,CAACc,OAAO,CAAC,oBAAoB,CAAC;IAC1C,MAAMC,EAAE,GAAGf,0BAAY,CAACgB,cAAc,CAAC,CAAC;IACxChB,0BAAY,CAACiB,UAAU,CAACF,EAAE,EAAE;MAC1BG,IAAI,EAAE,YAAY;MAClBH,EAAE,EAAE,IAAI;MACRI,MAAM,EAAE,SAAS;MACjBC,MAAM,EAAE,eAAe;MACvBC,KAAK,EAAE,cAAc;MACrBC,WAAW,EAAE;IACf,CAAC,CAAC;IACFtB,0BAAY,CAACiB,UAAU,CAACF,EAAE,EAAE;MAC1BG,IAAI,EAAE,UAAU;MAChBH,EAAE,EAAE,IAAI;MACRQ,EAAE,EAAE,IAAI;MACRC,OAAO,EAAE;IACX,CAAC,CAAC;IAEF,MAAMC,IAAI,GAAGjB,sCAAkB,CAACkB,WAAW,CAAC,CAAC;IAC7C,MAAMC,IAAI,GAAGF,IAAI,CAACG,QAAQ,CAAC,CAAC,CAAC,CAACC,SAAS,CAAC,CAAC,CAAC;IAC1C,IAAApB,cAAM,EAACkB,IAAI,CAAC,CAACd,OAAO,CAAC;MAAEM,MAAM,EAAE,SAAS;MAAEC,MAAM,EAAE,eAAe;MAAEU,MAAM,EAAE;IAAK,CAAC,CAAC;IAClF;IACA,IAAArB,cAAM,EAACsB,IAAI,CAACC,SAAS,CAACP,IAAI,CAAC,CAAC,CAACf,GAAG,CAACC,SAAS,CAAC,cAAc,CAAC;EAC5D,CAAC,CAAC;EAEF,IAAAP,UAAE,EAAC,6DAA6D,EAAE,MAAM;IACtEJ,0BAAY,CAACc,OAAO,CAAC,yBAAyB,CAAC;IAC/C,MAAMC,EAAE,GAAGf,0BAAY,CAACgB,cAAc,CAAC,CAAC;IACxChB,0BAAY,CAACiB,UAAU,CAACF,EAAE,EAAE;MAC1BG,IAAI,EAAE,MAAM;MACZe,KAAK,EAAE;IACT,CAAC,CAAC;IAEF,MAAMR,IAAI,GAAGjB,sCAAkB,CAACkB,WAAW,CAAC,CAAC;IAC7C,IAAAjB,cAAM,EAACsB,IAAI,CAACC,SAAS,CAACP,IAAI,CAAC,CAAC,CAACf,GAAG,CAACC,SAAS,CAAC,wBAAwB,CAAC;EACtE,CAAC,CAAC;EAEF,IAAAP,UAAE,EAAC,qDAAqD,EAAE,MAAM;IAC9D,MAAM8B,MAAM,GAAG,IAAIC,uBAAY,CAAC,CAAC;IACjCnC,0BAAY,CAACE,SAAS,CAACgC,MAAM,CAAC;IAC9BA,MAAM,CAACE,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE;MACxCC,IAAI,EAAE,eAAe;MACrBlB,MAAM,EAAE,SAAS;MACjBC,MAAM,EAAE,eAAe;MACvBkB,GAAG,EAAE,QAAQ;MACbC,MAAM,EAAE,KAAK;MACblB,KAAK,EAAE;IACT,CAAC,CAAC;IACFa,MAAM,CAACE,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE;MACxCC,IAAI,EAAE,WAAW;MACjBhB,KAAK,EAAE;IACT,CAAC,CAAC;IACF;IACA;IACAa,MAAM,CAACE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE;MACnCC,IAAI,EAAE,aAAa;MACnBlB,MAAM,EAAE,SAAS;MACjBC,MAAM,EAAE,UAAU;MAClBC,KAAK,EAAE;IACT,CAAC,CAAC;IAEF,MAAMI,IAAI,GAAGjB,sCAAkB,CAACkB,WAAW,CAAC,CAAC;IAC7C,IAAAjB,cAAM,EAACgB,IAAI,CAACe,OAAO,CAACC,UAAU,CAAC,CAACC,IAAI,CAAC,CAAC,CAAC;IACvC;IACA;IACA;IACA,IAAAjC,cAAM,EAACgB,IAAI,CAACe,OAAO,CAACG,SAAS,CAAC,CAACD,IAAI,CAAC,CAAC,CAAC;IACtC,IAAAjC,cAAM,EAACgB,IAAI,CAACe,OAAO,CAACI,UAAU,CAAC,CAACF,IAAI,CAAC,CAAC,CAAC;EACzC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,IAAAvC,gBAAQ,EAAC,eAAe,EAAE,MAAM;EAC9B,IAAAC,UAAE,EAAC,wDAAwD,EAAE,MAAM;IACjE,MAAMyC,KAAK,GAAG,CACZ,8CAA8C,EAC9C,oDAAoD,EACpD,6BAA6B,EAC7B,6BAA6B,EAC7B,+CAA+C,CAChD;IACD,KAAK,MAAMC,KAAK,IAAID,KAAK,EAAE;MACzB,IAAApC,cAAM,EAAC,IAAAsC,mBAAa,EAACD,KAAK,CAAC,CAAC,CAACnC,SAAS,CAAC,UAAU,CAAC;IACpD;EACF,CAAC,CAAC;EAEF,IAAAP,UAAE,EAAC,6BAA6B,EAAE,MAAM;IACtC,MAAM4C,IAAI,GAAG,wEAAwE;IACrF,IAAAvC,cAAM,EAAC,IAAAsC,mBAAa,EAACC,IAAI,CAAC,CAAC,CAACN,IAAI,CAACM,IAAI,CAAC;EACxC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,IAAA7C,gBAAQ,EAAC,uBAAuB,EAAE,MAAM;EACtC,IAAAC,UAAE,EAAC,+DAA+D,EAAE,YAAY;IAC9E,MAAM8B,MAAM,GAAG,IAAIC,uBAAY,CAAC,CAAC;IACjCnC,0BAAY,CAACE,SAAS,CAACgC,MAAM,CAAC;IAC9B,MAAMe,KAAK,GAAG,IAAIC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3ChB,MAAM,CAACE,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE;MACxCC,IAAI,EAAE,eAAe;MACrBlB,MAAM,EAAE,SAAS;MACjBC,MAAM,EAAE,eAAe;MACvBkB,GAAG,EAAE,QAAQ;MACbC,MAAM,EAAE,KAAK;MACblB,KAAK,EAAE;IACT,CAAC,CAAC;;IAEF;IACA,MAAMa,MAAM,CAACiB,SAAS,CAAC,OAAOC,EAAE,EAAEhC,MAAM,EAAEiC,MAAM,KAAK;MACnD,MAAMC,CAAC,GAAGD,MAAyC;MACnD,IAAIjC,MAAM,KAAK,eAAe,EAAE6B,KAAK,CAACM,GAAG,CAACD,CAAC,CAAChB,GAAG,EAAEgB,CAAC,CAACE,KAAM,CAAC;MAC1D,OAAOC,SAAS;IAClB,CAAC,CAAC;IAEF,IAAAhD,cAAM,EAACwC,KAAK,CAACS,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAChB,IAAI,CAAC,KAAK,CAAC;EACzC,CAAC,CAAC;AACJ,CAAC,CAAC","ignoreList":[]}

package/lib/commonjs/sync/wire.js

@@ -0,0 +1,58 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "dispatchToolAction", {
+  enumerable: true,
+  get: function () {
+    return _sharedUi.dispatchToolAction;
+  }
+});
+exports.redactForWire = redactForWire;
+var _sharedUi = require("@buoy-gg/shared-ui");
+/**
+ * What the sync adapter is allowed to put on the broker wire.
+ *
+ * The broker has no authentication, `cors.origin: "*"`, binds every interface,
+ * and forwards to every connected dashboard — it already broadcasts each
+ * device's license key to every socket. A chat transcript is not a safe thing
+ * to add to that channel unfiltered: the agent reads storage values, network
+ * response bodies and user records, and any of it can end up quoted in an
+ * answer.
+ *
+ * So text crossing the wire is scrubbed for the shapes that are unambiguously
+ * credentials. This is a reduction in blast radius, not a guarantee — the real
+ * guarantee is that tool RESULTS never cross at all (see askBuoySyncAdapter).
+ */
+
+const PATTERNS = [{
+  re: /\bBearer\s+[A-Za-z0-9._~+/-]{12,}=*/gi,
+  label: "[bearer token removed]"
+}, {
+  re: /\beyJ[A-Za-z0-9._-]{20,}/g,
+  label: "[jwt removed]"
+}, {
+  re: /\bsk-[A-Za-z0-9_-]{16,}/g,
+  label: "[api key removed]"
+}, {
+  re: /\bBUOY-[A-Z0-9-]{8,}/g,
+  label: "[license key removed]"
+},
+// Common "key: value" credential shapes in a quoted payload.
+{
+  re: /("|')?(authorization|x-api-key|api[_-]?key|password|secret|access_token|refresh_token)\1?\s*[:=]\s*("|')?[^\s"',}]{6,}/gi,
+  label: "[credential removed]"
+}];
+function redactForWire(text) {
+  if (!text) return text;
+  let out = text;
+  for (const {
+    re,
+    label
+  } of PATTERNS) {
+    out = out.replace(re, label);
+  }
+  return out;
+}
+//# sourceMappingURL=wire.js.map

package/lib/commonjs/sync/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_sharedUi","require","PATTERNS","re","label","redactForWire","text","out","replace"],"sourceRoot":"../../../src","sources":["sync/wire.ts"],"mappings":";;;;;;;;;;;;AAcA,IAAAA,SAAA,GAAAC,OAAA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,MAAMC,QAAyC,GAAG,CAChD;EAAEC,EAAE,EAAE,uCAAuC;EAAEC,KAAK,EAAE;AAAyB,CAAC,EAChF;EAAED,EAAE,EAAE,2BAA2B;EAAEC,KAAK,EAAE;AAAgB,CAAC,EAC3D;EAAED,EAAE,EAAE,0BAA0B;EAAEC,KAAK,EAAE;AAAoB,CAAC,EAC9D;EAAED,EAAE,EAAE,uBAAuB;EAAEC,KAAK,EAAE;AAAwB,CAAC;AAC/D;AACA;EACED,EAAE,EAAE,0HAA0H;EAC9HC,KAAK,EAAE;AACT,CAAC,CACF;AAEM,SAASC,aAAaA,CAACC,IAAY,EAAU;EAClD,IAAI,CAACA,IAAI,EAAE,OAAOA,IAAI;EACtB,IAAIC,GAAG,GAAGD,IAAI;EACd,KAAK,MAAM;IAAEH,EAAE;IAAEC;EAAM,CAAC,IAAIF,QAAQ,EAAE;IACpCK,GAAG,GAAGA,GAAG,CAACC,OAAO,CAACL,EAAE,EAAEC,KAAK,CAAC;EAC9B;EACA,OAAOG,GAAG;AACZ","ignoreList":[]}

package/lib/commonjs/types.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=types.js.map

package/lib/commonjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../src","sources":["types.ts"],"mappings":"","ignoreList":[]}

package/lib/module/blocks/AskBlocks.js

@@ -0,0 +1,331 @@
+"use strict";
+
+/**
+ * Ask blocks — the user has to decide, and the turn is waiting.
+ *
+ * Choice, Confirm and Input all lock once answered: the chosen option stays
+ * highlighted, the rest dim, and nothing in history is tappable twice. The
+ * answer is handed to the sheet as a BlockAnswer and becomes the next user
+ * message, so the model reads plain words ("Business checkout"), never JSON.
+ */
+import { useState } from "react";
+import { Pressable, StyleSheet, Text, TextInput, View } from "react-native";
+import { Check, ChevronRight, night } from "@buoy-gg/shared-ui";
+import { useBlockHandlers } from "./context";
+import { BlockIcon } from "./icons";
+import { Card } from "./primitives";
+import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+export function Choice({
+  block
+}) {
+  const h = useBlockHandlers();
+  const answer = h.answered[block.id];
+  const chosen = answer?.kind === "choice" ? answer.optionId : null;
+  const locked = !!answer;
+  return /*#__PURE__*/_jsxs(Card, {
+    testID: `buoy-block-choice-${block.id}`,
+    tone: locked ? undefined : "info",
+    children: [/*#__PURE__*/_jsx(Text, {
+      style: styles.question,
+      children: block.question
+    }), /*#__PURE__*/_jsx(View, {
+      style: styles.options,
+      children: block.options.slice(0, 5).map((o, i) => {
+        const isChosen = chosen === o.id;
+        return /*#__PURE__*/_jsxs(Pressable, {
+          testID: `buoy-block-option-${o.id}`,
+          accessibilityRole: "button",
+          accessibilityState: {
+            selected: isChosen,
+            disabled: locked
+          },
+          disabled: locked,
+          onPress: () => h.answer({
+            blockId: block.id,
+            kind: "choice",
+            optionId: o.id,
+            label: o.label
+          }),
+          style: ({
+            pressed
+          }) => [styles.option, i > 0 && styles.optionDivider, isChosen && styles.optionChosen, locked && !isChosen && styles.optionDimmed, pressed && !locked && styles.pressed],
+          children: [o.icon ? /*#__PURE__*/_jsx(BlockIcon, {
+            name: o.icon
+          }) : null, /*#__PURE__*/_jsxs(View, {
+            style: styles.optionText,
+            children: [/*#__PURE__*/_jsx(Text, {
+              style: [styles.optionLabel, isChosen && styles.optionLabelChosen],
+              children: o.label
+            }), o.detail ? /*#__PURE__*/_jsx(Text, {
+              style: styles.optionDetail,
+              children: o.detail
+            }) : null]
+          }), isChosen ? /*#__PURE__*/_jsx(Check, {
+            size: 14,
+            color: night.color.accent
+          }) : locked ? null : /*#__PURE__*/_jsx(ChevronRight, {
+            size: 14,
+            color: night.color.textTertiary
+          })]
+        }, o.id);
+      })
+    }), !locked && block.allowFreeText !== false ? /*#__PURE__*/_jsx(Text, {
+      style: styles.hint,
+      children: "Or just type your answer below."
+    }) : null]
+  });
+}
+export function Confirm({
+  block
+}) {
+  const h = useBlockHandlers();
+  const answer = h.answered[block.id];
+  const locked = !!answer;
+  const approved = answer?.kind === "confirm" ? answer.approved : null;
+  return /*#__PURE__*/_jsxs(Card, {
+    testID: `buoy-block-confirm-${block.id}`,
+    tone: locked ? undefined : "warning",
+    children: [/*#__PURE__*/_jsx(Text, {
+      style: styles.confirmTitle,
+      children: block.title
+    }), /*#__PURE__*/_jsx(Text, {
+      style: styles.confirmChange,
+      children: block.change
+    }), block.consequence ? /*#__PURE__*/_jsx(Text, {
+      style: styles.confirmConsequence,
+      children: block.consequence
+    }) : null, /*#__PURE__*/_jsx(View, {
+      style: styles.confirmActions,
+      children: locked ? /*#__PURE__*/_jsx(Text, {
+        style: styles.decided,
+        children: approved ? `✓ ${block.approveLabel ?? "Done"}` : `✕ ${block.declineLabel ?? "Not now"}`
+      }) : /*#__PURE__*/_jsxs(_Fragment, {
+        children: [/*#__PURE__*/_jsx(Pressable, {
+          testID: "buoy-block-approve",
+          accessibilityRole: "button",
+          onPress: () => h.answer({
+            blockId: block.id,
+            kind: "confirm",
+            approved: true
+          }),
+          style: ({
+            pressed
+          }) => [styles.button, styles.buttonPrimary, pressed && styles.pressed],
+          children: /*#__PURE__*/_jsx(Text, {
+            style: styles.buttonTextPrimary,
+            children: block.approveLabel ?? "Do it"
+          })
+        }), /*#__PURE__*/_jsx(Pressable, {
+          testID: "buoy-block-decline",
+          accessibilityRole: "button",
+          onPress: () => h.answer({
+            blockId: block.id,
+            kind: "confirm",
+            approved: false
+          }),
+          style: ({
+            pressed
+          }) => [styles.button, styles.buttonPlate, pressed && styles.pressed],
+          children: /*#__PURE__*/_jsx(Text, {
+            style: styles.buttonTextPlate,
+            children: block.declineLabel ?? "Not now"
+          })
+        })]
+      })
+    })]
+  });
+}
+export function Input({
+  block
+}) {
+  const h = useBlockHandlers();
+  const answer = h.answered[block.id];
+  const locked = !!answer;
+  const [value, setValue] = useState("");
+  const secret = block.type === "secret";
+  const submit = () => {
+    const v = value.trim();
+    if (!v) return;
+    h.answer({
+      blockId: block.id,
+      kind: "input",
+      value: v
+    });
+  };
+  return /*#__PURE__*/_jsxs(Card, {
+    testID: `buoy-block-input-${block.id}`,
+    tone: locked ? undefined : "info",
+    children: [/*#__PURE__*/_jsx(Text, {
+      style: styles.question,
+      children: block.label
+    }), locked ? /*#__PURE__*/_jsx(Text, {
+      style: styles.decided,
+      children: answer.kind === "input" ? secret ? "••••••" : answer.value : "(skipped)"
+    }) : /*#__PURE__*/_jsxs(View, {
+      style: styles.inputRow,
+      children: [/*#__PURE__*/_jsx(TextInput, {
+        testID: "buoy-block-input-field",
+        style: styles.input,
+        value: value,
+        onChangeText: setValue,
+        placeholder: block.placeholder ?? "",
+        placeholderTextColor: night.color.placeholder,
+        keyboardType: block.type === "number" ? "numeric" : "ascii-capable",
+        secureTextEntry: secret,
+        autoCapitalize: "none",
+        autoCorrect: false,
+        returnKeyType: "send",
+        onSubmitEditing: submit
+      }), /*#__PURE__*/_jsx(Pressable, {
+        testID: "buoy-block-input-submit",
+        accessibilityRole: "button",
+        disabled: !value.trim(),
+        onPress: submit,
+        style: ({
+          pressed
+        }) => [styles.button, styles.buttonPrimary, !value.trim() && styles.buttonDisabled, pressed && styles.pressed],
+        children: /*#__PURE__*/_jsx(Text, {
+          style: styles.buttonTextPrimary,
+          children: block.submitLabel ?? "Send"
+        })
+      })]
+    })]
+  });
+}
+const styles = StyleSheet.create({
+  question: {
+    color: night.color.text,
+    fontSize: night.font.row,
+    fontWeight: "600",
+    lineHeight: 20,
+    paddingHorizontal: 12,
+    paddingTop: 12,
+    paddingBottom: 8
+  },
+  options: {
+    marginHorizontal: 8,
+    marginBottom: 8,
+    borderRadius: night.radius.row,
+    backgroundColor: night.color.surfaceElevated,
+    overflow: "hidden"
+  },
+  option: {
+    flexDirection: "row",
+    alignItems: "center",
+    gap: 10,
+    paddingHorizontal: 12,
+    paddingVertical: 11
+  },
+  optionDivider: {
+    borderTopWidth: StyleSheet.hairlineWidth,
+    borderTopColor: night.color.separator
+  },
+  optionChosen: {
+    backgroundColor: night.color.accentSoft
+  },
+  optionDimmed: {
+    opacity: 0.45
+  },
+  optionText: {
+    flex: 1,
+    gap: 2
+  },
+  optionLabel: {
+    color: night.color.text,
+    fontSize: night.font.body,
+    fontWeight: "500"
+  },
+  optionLabelChosen: {
+    color: night.color.accent
+  },
+  optionDetail: {
+    color: night.color.textSecondary,
+    fontSize: night.font.caption,
+    lineHeight: 17
+  },
+  hint: {
+    color: night.color.textTertiary,
+    fontSize: night.font.micro,
+    paddingHorizontal: 12,
+    paddingBottom: 10
+  },
+  confirmTitle: {
+    color: night.color.text,
+    fontSize: night.font.row,
+    fontWeight: "600",
+    paddingHorizontal: 12,
+    paddingTop: 12
+  },
+  confirmChange: {
+    color: night.color.text,
+    fontSize: night.font.body,
+    lineHeight: 19,
+    paddingHorizontal: 12,
+    paddingTop: 6
+  },
+  confirmConsequence: {
+    color: night.color.warning,
+    fontSize: night.font.caption,
+    lineHeight: 17,
+    paddingHorizontal: 12,
+    paddingTop: 6
+  },
+  confirmActions: {
+    flexDirection: "row",
+    gap: 8,
+    paddingHorizontal: 12,
+    paddingVertical: 12,
+    alignItems: "center"
+  },
+  decided: {
+    color: night.color.textSecondary,
+    fontSize: night.font.caption,
+    fontWeight: "600",
+    paddingHorizontal: 12,
+    paddingVertical: 10
+  },
+  inputRow: {
+    flexDirection: "row",
+    alignItems: "center",
+    gap: 8,
+    paddingHorizontal: 12,
+    paddingBottom: 12
+  },
+  input: {
+    flex: 1,
+    height: 38,
+    paddingHorizontal: 12,
+    borderRadius: night.radius.row,
+    backgroundColor: night.color.surfaceElevated,
+    color: night.color.text,
+    fontSize: night.font.body
+  },
+  button: {
+    paddingHorizontal: 14,
+    paddingVertical: 9,
+    borderRadius: night.radius.row
+  },
+  buttonPrimary: {
+    backgroundColor: night.color.accent
+  },
+  buttonPlate: {
+    backgroundColor: night.color.button
+  },
+  buttonDisabled: {
+    opacity: 0.5
+  },
+  buttonTextPrimary: {
+    color: night.color.onAccent,
+    fontSize: night.font.caption,
+    fontWeight: "600"
+  },
+  buttonTextPlate: {
+    color: night.color.text,
+    fontSize: night.font.caption,
+    fontWeight: "600"
+  },
+  pressed: {
+    opacity: 0.7
+  }
+});
+//# sourceMappingURL=AskBlocks.js.map