@buoy-gg/ask-buoy 7.0.34 → 7.0.36

package/lib/module/store/useAskBuoySettings.js

@@ -0,0 +1,9 @@
+"use strict";
+
+/** Subscribe the sheet to Ask Buoy's own preferences. */
+import { useSyncExternalStore } from "react";
+import { askBuoySettings } from "./askBuoySettings";
+export function useAskBuoySettings() {
+  return useSyncExternalStore(askBuoySettings.subscribe, askBuoySettings.get, askBuoySettings.get);
+}
+//# sourceMappingURL=useAskBuoySettings.js.map

package/lib/module/store/useAskBuoySettings.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["useSyncExternalStore","askBuoySettings","useAskBuoySettings","subscribe","get"],"sourceRoot":"../../../src","sources":["store/useAskBuoySettings.ts"],"mappings":";;AAAA;AACA,SAASA,oBAAoB,QAAQ,OAAO;AAE5C,SAASC,eAAe,QAA8B,mBAAmB;AAEzE,OAAO,SAASC,kBAAkBA,CAAA,EAAoB;EACpD,OAAOF,oBAAoB,CAACC,eAAe,CAACE,SAAS,EAAEF,eAAe,CAACG,GAAG,EAAEH,eAAe,CAACG,GAAG,CAAC;AAClG","ignoreList":[]}

package/lib/module/sync/askBuoySyncAdapter.js

@@ -1 +1,135 @@
-"use strict";import{dispatchToolAction,redactForWire}from"./wire";import{isReversible}from"@buoy-gg/agent-core";import{askBuoyStore}from"../store/askBuoyStore";export const ASK_BUOY_ADAPTER_VERSION=1;export const askBuoySyncAdapter={version:1,getSnapshot(){const e=askBuoyStore.getState(),t=askBuoyStore.getLedger(),o=(t?.list()??[]).filter(e=>!e.undoneAt);return{version:1,busy:e.busy,configured:e.configured,notice:e.notice,messageCount:e.messages.length,messages:e.messages.map(e=>({id:e.id,role:e.role,text:redactForWire(e.text),streaming:!!e.streaming,toolCalls:e.toolCalls.map(e=>({toolId:e.toolId,action:e.action,status:e.status}))})),usage:e.usage,pendingApproval:e.pending?{toolId:e.pending.toolId,action:e.pending.action,label:e.pending.label}:null,changes:{reversible:o.filter(e=>isReversible(e.effect)).length,permanent:o.filter(e=>"transient"!==e.effect.kind&&!isReversible(e.effect)).length,transients:o.filter(e=>"transient"===e.effect.kind).length,items:o.map(e=>({kind:e.effect.kind,label:e.effect.label}))}}},subscribe(e){const t=askBuoyStore.subscribe(e),o=askBuoyStore.getLedger()?.subscribe(e);return()=>{t(),o?.()}},actions:{listChanges:()=>(askBuoyStore.getLedger()?.list()??[]).filter(e=>!e.undoneAt).map(e=>({id:e.id,at:e.at,toolId:e.toolId,action:e.action,kind:e.effect.kind,label:e.effect.label,reversible:isReversible(e.effect)})),undoAll:async()=>{const e=askBuoyStore.getLedger();return e?{ok:!0,...await e.revertAll(dispatchToolAction)}:{ok:!1,error:"No Ask Buoy session on this device."}},reset:()=>(askBuoyStore.reset(),{ok:!0})}};
+"use strict";
+
+/**
+ * The sync adapter, so Buoy Desktop and MCP can see what Ask Buoy is doing.
+ *
+ * Read-heavy on purpose. There is no `send` action: letting a remote client
+ * put words in the agent's mouth would mean anyone who can reach the broker —
+ * which has no authentication at all, binds 0.0.0.0, and accepts any client
+ * calling itself "Dashboard" — could drive a mutating agent on a tester's
+ * device. The chat is initiated on-device, by a person, full stop.
+ *
+ * `undoAll` IS exposed, because the asymmetry is deliberate: putting things
+ * back is the safe direction, and a dev watching from the desktop should be
+ * able to clean up a device without walking over to it.
+ *
+ * The transcript is redacted before it crosses the wire. Action results the
+ * agent read can contain storage values and response bodies, and this socket
+ * broadcasts to every connected dashboard — it already leaks license keys the
+ * same way.
+ */
+import { resetConversation } from "../store/resetConversation";
+import { dispatchToolAction, redactForWire } from "./wire";
+import { isReversible } from "@buoy-gg/agent-core";
+import { askBuoyStore } from "../store/askBuoyStore";
+export const ASK_BUOY_ADAPTER_VERSION = 1;
+export const askBuoySyncAdapter = {
+  version: ASK_BUOY_ADAPTER_VERSION,
+  getSnapshot() {
+    const state = askBuoyStore.getState();
+    const ledger = askBuoyStore.getLedger();
+    const entries = ledger?.list() ?? [];
+    const outstanding = entries.filter(e => !e.undoneAt);
+    return {
+      version: ASK_BUOY_ADAPTER_VERSION,
+      busy: state.busy,
+      configured: state.configured,
+      notice: state.notice,
+      messageCount: state.messages.length,
+      // Only the shape of the conversation, never tool payloads.
+      messages: state.messages.map(m => ({
+        id: m.id,
+        role: m.role,
+        text: redactForWire(m.text),
+        streaming: !!m.streaming,
+        toolCalls: m.toolCalls.map(c => ({
+          toolId: c.toolId,
+          action: c.action,
+          status: c.status
+        }))
+      })),
+      // Session token totals, so a desktop/MCP observer can meter cost.
+      usage: state.usage,
+      pendingApproval: state.pending ? {
+        toolId: state.pending.toolId,
+        action: state.pending.action,
+        label: state.pending.label
+      } : null,
+      changes: {
+        // Transients (navigation, taps) are one-shot actions, not changes —
+        // same rule as the on-device bar, so desktop and device tell one story.
+        reversible: outstanding.filter(e => isReversible(e.effect)).length,
+        permanent: outstanding.filter(e => e.effect.kind !== "transient" && !isReversible(e.effect)).length,
+        transients: outstanding.filter(e => e.effect.kind === "transient").length,
+        items: outstanding.map(e => ({
+          kind: e.effect.kind,
+          label: e.effect.label
+        }))
+      }
+    };
+  },
+  subscribe(onChange) {
+    const offStore = askBuoyStore.subscribe(onChange);
+    const offLedger = askBuoyStore.getLedger()?.subscribe(onChange);
+    return () => {
+      offStore();
+      offLedger?.();
+    };
+  },
+  actions: {
+    /** What the agent changed, and whether it can be put back. */
+    listChanges: () => {
+      const entries = askBuoyStore.getLedger()?.list() ?? [];
+      return entries.filter(e => !e.undoneAt).map(e => ({
+        id: e.id,
+        at: e.at,
+        toolId: e.toolId,
+        action: e.action,
+        kind: e.effect.kind,
+        label: e.effect.label,
+        reversible: isReversible(e.effect)
+      }));
+    },
+    /** Put back everything that can be put back. Safe direction only. */
+    undoAll: async () => {
+      const ledger = askBuoyStore.getLedger();
+      if (!ledger) return {
+        ok: false,
+        error: "No Ask Buoy session on this device."
+      };
+      const outcome = await ledger.revertAll(dispatchToolAction);
+      return {
+        ok: true,
+        ...outcome
+      };
+    },
+    /**
+     * Undo what can be undone, then clear the transcript and the ledger.
+     *
+     * The same path as the sheet's "New conversation" (resetConversation.ts).
+     * This action used to clear unconditionally — no question, no undo — so a
+     * desktop click could drop the only undo record for changes still live on
+     * the tester's phone. Now it refuses to clear when a revert fails and says
+     * what is still applied; the dashboard decides whether to clear anyway
+     * by calling `undoAll` first or accepting the kept conversation.
+     */
+    reset: async () => {
+      const outcome = await resetConversation({
+        dispatch: dispatchToolAction,
+        undoFirst: true
+      });
+      if (!outcome.cleared) {
+        return {
+          ok: false,
+          error: `Couldn't undo ${outcome.failed.length} change${outcome.failed.length === 1 ? "" : "s"} — conversation kept.`,
+          failed: outcome.failed
+        };
+      }
+      return {
+        ok: true,
+        reverted: outcome.reverted
+      };
+    }
+  }
+};
+//# sourceMappingURL=askBuoySyncAdapter.js.map

package/lib/module/sync/askBuoySyncAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["resetConversation","dispatchToolAction","redactForWire","isReversible","askBuoyStore","ASK_BUOY_ADAPTER_VERSION","askBuoySyncAdapter","version","getSnapshot","state","getState","ledger","getLedger","entries","list","outstanding","filter","e","undoneAt","busy","configured","notice","messageCount","messages","length","map","m","id","role","text","streaming","toolCalls","c","toolId","action","status","usage","pendingApproval","pending","label","changes","reversible","effect","permanent","kind","transients","items","subscribe","onChange","offStore","offLedger","actions","listChanges","at","undoAll","ok","error","outcome","revertAll","reset","dispatch","undoFirst","cleared","failed","reverted"],"sourceRoot":"../../../src","sources":["sync/askBuoySyncAdapter.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,iBAAiB,QAAQ,4BAA4B;AAC9D,SAASC,kBAAkB,EAAEC,aAAa,QAAQ,QAAQ;AAC1D,SAASC,YAAY,QAAQ,qBAAqB;AAClD,SAASC,YAAY,QAAQ,uBAAuB;AAEpD,OAAO,MAAMC,wBAAwB,GAAG,CAAC;AAEzC,OAAO,MAAMC,kBAAkB,GAAG;EAChCC,OAAO,EAAEF,wBAAwB;EAEjCG,WAAWA,CAAA,EAAG;IACZ,MAAMC,KAAK,GAAGL,YAAY,CAACM,QAAQ,CAAC,CAAC;IACrC,MAAMC,MAAM,GAAGP,YAAY,CAACQ,SAAS,CAAC,CAAC;IACvC,MAAMC,OAAO,GAAGF,MAAM,EAAEG,IAAI,CAAC,CAAC,IAAI,EAAE;IACpC,MAAMC,WAAW,GAAGF,OAAO,CAACG,MAAM,CAAEC,CAAC,IAAK,CAACA,CAAC,CAACC,QAAQ,CAAC;IAEtD,OAAO;MACLX,OAAO,EAAEF,wBAAwB;MACjCc,IAAI,EAAEV,KAAK,CAACU,IAAI;MAChBC,UAAU,EAAEX,KAAK,CAACW,UAAU;MAC5BC,MAAM,EAAEZ,KAAK,CAACY,MAAM;MACpBC,YAAY,EAAEb,KAAK,CAACc,QAAQ,CAACC,MAAM;MACnC;MACAD,QAAQ,EAAEd,KAAK,CAACc,QAAQ,CAACE,GAAG,CAAEC,CAAC,KAAM;QACnCC,EAAE,EAAED,CAAC,CAACC,EAAE;QACRC,IAAI,EAAEF,CAAC,CAACE,IAAI;QACZC,IAAI,EAAE3B,aAAa,CAACwB,CAAC,CAACG,IAAI,CAAC;QAC3BC,SAAS,EAAE,CAAC,CAACJ,CAAC,CAACI,SAAS;QACxBC,SAAS,EAAEL,CAAC,CAACK,SAAS,CAACN,GAAG,CAAEO,CAAC,KAAM;UACjCC,MAAM,EAAED,CAAC,CAACC,MAAM;UAChBC,MAAM,EAAEF,CAAC,CAACE,MAAM;UAChBC,MAAM,EAAEH,CAAC,CAACG;QACZ,CAAC,CAAC;MACJ,CAAC,CAAC,CAAC;MACH;MACAC,KAAK,EAAE3B,KAAK,CAAC2B,KAAK;MAClBC,eAAe,EAAE5B,KAAK,CAAC6B,OAAO,GAC1B;QACEL,MAAM,EAAExB,KAAK,CAAC6B,OAAO,CAACL,MAAM;QAC5BC,MAAM,EAAEzB,KAAK,CAAC6B,OAAO,CAACJ,MAAM;QAC5BK,KAAK,EAAE9B,KAAK,CAAC6B,OAAO,CAACC;MACvB,CAAC,GACD,IAAI;MACRC,OAAO,EAAE;QACP;QACA;QACAC,UAAU,EAAE1B,WAAW,CAACC,MAAM,CAAEC,CAAC,IAAKd,YAAY,CAACc,CAAC,CAACyB,MAAM,CAAC,CAAC,CAAClB,MAAM;QACpEmB,SAAS,EAAE5B,WAAW,CAACC,MAAM,CAC1BC,CAAC,IAAKA,CAAC,CAACyB,MAAM,CAACE,IAAI,KAAK,WAAW,IAAI,CAACzC,YAAY,CAACc,CAAC,CAACyB,MAAM,CAChE,CAAC,CAAClB,MAAM;QACRqB,UAAU,EAAE9B,WAAW,CAACC,MAAM,CAAEC,CAAC,IAAKA,CAAC,CAACyB,MAAM,CAACE,IAAI,KAAK,WAAW,CAAC,CAACpB,MAAM;QAC3EsB,KAAK,EAAE/B,WAAW,CAACU,GAAG,CAAER,CAAC,KAAM;UAAE2B,IAAI,EAAE3B,CAAC,CAACyB,MAAM,CAACE,IAAI;UAAEL,KAAK,EAAEtB,CAAC,CAACyB,MAAM,CAACH;QAAM,CAAC,CAAC;MAChF;IACF,CAAC;EACH,CAAC;EAEDQ,SAASA,CAACC,QAAoB,EAAE;IAC9B,MAAMC,QAAQ,GAAG7C,YAAY,CAAC2C,SAAS,CAACC,QAAQ,CAAC;IACjD,MAAME,SAAS,GAAG9C,YAAY,CAACQ,SAAS,CAAC,CAAC,EAAEmC,SAAS,CAACC,QAAQ,CAAC;IAC/D,OAAO,MAAM;MACXC,QAAQ,CAAC,CAAC;MACVC,SAAS,GAAG,CAAC;IACf,CAAC;EACH,CAAC;EAEDC,OAAO,EAAE;IACP;IACAC,WAAW,EAAEA,CAAA,KAAM;MACjB,MAAMvC,OAAO,GAAGT,YAAY,CAACQ,SAAS,CAAC,CAAC,EAAEE,IAAI,CAAC,CAAC,IAAI,EAAE;MACtD,OAAOD,OAAO,CACXG,MAAM,CAAEC,CAAC,IAAK,CAACA,CAAC,CAACC,QAAQ,CAAC,CAC1BO,GAAG,CAAER,CAAC,KAAM;QACXU,EAAE,EAAEV,CAAC,CAACU,EAAE;QACR0B,EAAE,EAAEpC,CAAC,CAACoC,EAAE;QACRpB,MAAM,EAAEhB,CAAC,CAACgB,MAAM;QAChBC,MAAM,EAAEjB,CAAC,CAACiB,MAAM;QAChBU,IAAI,EAAE3B,CAAC,CAACyB,MAAM,CAACE,IAAI;QACnBL,KAAK,EAAEtB,CAAC,CAACyB,MAAM,CAACH,KAAK;QACrBE,UAAU,EAAEtC,YAAY,CAACc,CAAC,CAACyB,MAAM;MACnC,CAAC,CAAC,CAAC;IACP,CAAC;IAED;IACAY,OAAO,EAAE,MAAAA,CAAA,KAAY;MACnB,MAAM3C,MAAM,GAAGP,YAAY,CAACQ,SAAS,CAAC,CAAC;MACvC,IAAI,CAACD,MAAM,EAAE,OAAO;QAAE4C,EAAE,EAAE,KAAK;QAAEC,KAAK,EAAE;MAAsC,CAAC;MAC/E,MAAMC,OAAO,GAAG,MAAM9C,MAAM,CAAC+C,SAAS,CAACzD,kBAAkB,CAAC;MAC1D,OAAO;QAAEsD,EAAE,EAAE,IAAI;QAAE,GAAGE;MAAQ,CAAC;IACjC,CAAC;IAED;AACJ;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACIE,KAAK,EAAE,MAAAA,CAAA,KAAY;MACjB,MAAMF,OAAO,GAAG,MAAMzD,iBAAiB,CAAC;QAAE4D,QAAQ,EAAE3D,kBAAkB;QAAE4D,SAAS,EAAE;MAAK,CAAC,CAAC;MAC1F,IAAI,CAACJ,OAAO,CAACK,OAAO,EAAE;QACpB,OAAO;UACLP,EAAE,EAAE,KAAK;UACTC,KAAK,EAAE,iBAAiBC,OAAO,CAACM,MAAM,CAACvC,MAAM,UAAUiC,OAAO,CAACM,MAAM,CAACvC,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,uBAAuB;UACpHuC,MAAM,EAAEN,OAAO,CAACM;QAClB,CAAC;MACH;MACA,OAAO;QAAER,EAAE,EAAE,IAAI;QAAES,QAAQ,EAAEP,OAAO,CAACO;MAAS,CAAC;IACjD;EACF;AACF,CAAC","ignoreList":[]}

package/lib/module/sync/askBuoySyncAdapter.test.js

@@ -1 +1,140 @@
-"use strict";import{beforeEach,describe,expect,it}from"vitest";import{EffectLedger}from"@buoy-gg/agent-core";import{askBuoySyncAdapter}from"./askBuoySyncAdapter";import{redactForWire}from"./wire";import{askBuoyStore}from"../store/askBuoyStore";beforeEach(()=>{askBuoyStore.reset(),askBuoyStore.setLedger(null)}),describe("the wire surface",()=>{it("exposes no action that can make the agent talk",()=>{const e=Object.keys(askBuoySyncAdapter.actions);expect(e).not.toContain("send"),expect(e).not.toContain("ask"),expect(e).not.toContain("prompt"),expect(e.sort()).toEqual(["listChanges","reset","undoAll"])}),it("puts the shape of the conversation on the wire, never tool payloads",()=>{askBuoyStore.addUser("what is in storage");const e=askBuoyStore.startAssistant();askBuoyStore.applyEvent(e,{type:"tool-start",id:"c1",toolId:"storage",action:"async.getItem",label:"Read session",description:"Read one AsyncStorage key"}),askBuoyStore.applyEvent(e,{type:"tool-end",id:"c1",ok:!0,summary:"eyJhbGciOiJIUzI1NiJ9.super.secret"});const t=askBuoySyncAdapter.getSnapshot(),o=t.messages[1].toolCalls[0];expect(o).toEqual({toolId:"storage",action:"async.getItem",status:"ok"}),expect(JSON.stringify(t)).not.toContain("super.secret")}),it("redacts credentials that made it into the assistant's prose",()=>{askBuoyStore.addUser("show me the auth header");const e=askBuoyStore.startAssistant();askBuoyStore.applyEvent(e,{type:"text",delta:"It sends Authorization: Bearer abcdef0123456789ghijkl to the API."});const t=askBuoySyncAdapter.getSnapshot();expect(JSON.stringify(t)).not.toContain("abcdef0123456789ghijkl")}),it("reports reversible and permanent changes separately",()=>{const e=new EffectLedger;askBuoyStore.setLedger(e),e.record("storage","async.setItem",{kind:"storage-write",toolId:"storage",action:"async.setItem",key:"points",before:"240",label:"Set points to 1500"}),e.record("perf-monitor","clearAll",{kind:"transient",label:"Cleared samples"}),e.record("zustand","setState",{kind:"state-write",toolId:"zustand",action:"setState",label:"Update the cart store"});const t=askBuoySyncAdapter.getSnapshot();expect(t.changes.reversible).toBe(1),expect(t.changes.permanent).toBe(1),expect(t.changes.transients).toBe(1)})}),describe("redactForWire",()=>{it("removes bearer tokens, JWTs, api keys and license keys",()=>{const e=["Authorization: Bearer abcdefghijklmnop123456","token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9abcdefgh","key sk-abcdefghijklmnop1234","license BUOY-ABCD-1234-EFGH",'the header is "x-api-key": "supersecretvalue"'];for(const t of e)expect(redactForWire(t)).toContain("removed]")}),it("leaves ordinary prose alone",()=>{const e="The /menu call returned 200 with 12 items and the burger was in stock.";expect(redactForWire(e)).toBe(e)})}),describe("undo from the desktop",()=>{it("is allowed, because putting things back is the safe direction",async()=>{const e=new EffectLedger;askBuoyStore.setLedger(e);const t=new Map([["points","1500"]]);e.record("storage","async.setItem",{kind:"storage-write",toolId:"storage",action:"async.setItem",key:"points",before:"240",label:"Set points to 1500"}),await e.revertAll(async(e,o,s)=>{const a=s;"async.setItem"===o&&t.set(a.key,a.value)}),expect(t.get("points")).toBe("240")})});
+"use strict";
+
+/**
+ * What Ask Buoy is allowed to put on the broker wire, and what it refuses to
+ * accept from it.
+ *
+ * Both directions matter. The broker has no authentication, accepts any client
+ * that calls itself "Dashboard", and forwards to every connected dashboard — it
+ * already broadcasts license keys that way. So: no tool results go out, and no
+ * remote client can make the agent say anything.
+ */
+import { beforeEach, describe, expect, it } from "vitest";
+import { EffectLedger } from "@buoy-gg/agent-core";
+import { askBuoySyncAdapter } from "./askBuoySyncAdapter";
+import { redactForWire } from "./wire";
+import { askBuoyStore } from "../store/askBuoyStore";
+beforeEach(() => {
+  askBuoyStore.reset();
+  askBuoyStore.setLedger(null);
+});
+describe("the wire surface", () => {
+  it("exposes no action that can make the agent talk", () => {
+    // A `send` here would let anyone on the LAN drive a mutating agent on a
+    // tester's phone. The conversation starts on-device, by a person.
+    const actions = Object.keys(askBuoySyncAdapter.actions);
+    expect(actions).not.toContain("send");
+    expect(actions).not.toContain("ask");
+    expect(actions).not.toContain("prompt");
+    expect(actions.sort()).toEqual(["listChanges", "reset", "undoAll"]);
+  });
+  it("puts the shape of the conversation on the wire, never tool payloads", () => {
+    askBuoyStore.addUser("what is in storage");
+    const id = askBuoyStore.startAssistant();
+    askBuoyStore.applyEvent(id, {
+      type: "tool-start",
+      id: "c1",
+      toolId: "storage",
+      action: "async.getItem",
+      label: "Read session",
+      description: "Read one AsyncStorage key",
+      params: {
+        key: "session"
+      },
+      effect: "read"
+    });
+    askBuoyStore.applyEvent(id, {
+      type: "tool-end",
+      id: "c1",
+      ok: true,
+      durationMs: 12,
+      summary: "eyJhbGciOiJIUzI1NiJ9.super.secret"
+    });
+    const snap = askBuoySyncAdapter.getSnapshot();
+    const call = snap.messages[1].toolCalls[0];
+    expect(call).toEqual({
+      toolId: "storage",
+      action: "async.getItem",
+      status: "ok"
+    });
+    // The result summary is not on the wire at all — there is no field for it.
+    expect(JSON.stringify(snap)).not.toContain("super.secret");
+  });
+  it("redacts credentials that made it into the assistant's prose", () => {
+    askBuoyStore.addUser("show me the auth header");
+    const id = askBuoyStore.startAssistant();
+    askBuoyStore.applyEvent(id, {
+      type: "text",
+      delta: "It sends Authorization: Bearer abcdef0123456789ghijkl to the API."
+    });
+    const snap = askBuoySyncAdapter.getSnapshot();
+    expect(JSON.stringify(snap)).not.toContain("abcdef0123456789ghijkl");
+  });
+  it("reports reversible and permanent changes separately", () => {
+    const ledger = new EffectLedger();
+    askBuoyStore.setLedger(ledger);
+    ledger.record("storage", "async.setItem", {
+      kind: "storage-write",
+      toolId: "storage",
+      action: "async.setItem",
+      key: "points",
+      before: "240",
+      label: "Set points to 1500"
+    });
+    ledger.record("perf-monitor", "clearAll", {
+      kind: "transient",
+      label: "Cleared samples"
+    });
+    // A store write with no captured prior state: recorded, visible, and
+    // NOT something Undo can deliver — it must count as permanent.
+    ledger.record("zustand", "setState", {
+      kind: "state-write",
+      toolId: "zustand",
+      action: "setState",
+      label: "Update the cart store"
+    });
+    const snap = askBuoySyncAdapter.getSnapshot();
+    expect(snap.changes.reversible).toBe(1);
+    // The transient is an ACTION, not a change — it must not inflate
+    // "permanent" (that read "Changed this app · N permanent" after a
+    // read-only tour). It is still reported, in its own count.
+    expect(snap.changes.permanent).toBe(1);
+    expect(snap.changes.transients).toBe(1);
+  });
+});
+describe("redactForWire", () => {
+  it("removes bearer tokens, JWTs, api keys and license keys", () => {
+    const cases = ["Authorization: Bearer abcdefghijklmnop123456", "token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9abcdefgh", "key sk-abcdefghijklmnop1234", "license BUOY-ABCD-1234-EFGH", 'the header is "x-api-key": "supersecretvalue"'];
+    for (const input of cases) {
+      expect(redactForWire(input)).toContain("removed]");
+    }
+  });
+  it("leaves ordinary prose alone", () => {
+    const text = "The /menu call returned 200 with 12 items and the burger was in stock.";
+    expect(redactForWire(text)).toBe(text);
+  });
+});
+describe("undo from the desktop", () => {
+  it("is allowed, because putting things back is the safe direction", async () => {
+    const ledger = new EffectLedger();
+    askBuoyStore.setLedger(ledger);
+    const store = new Map([["points", "1500"]]);
+    ledger.record("storage", "async.setItem", {
+      kind: "storage-write",
+      toolId: "storage",
+      action: "async.setItem",
+      key: "points",
+      before: "240",
+      label: "Set points to 1500"
+    });
+
+    // The adapter dispatches through the real seam; stub it at the ledger.
+    await ledger.revertAll(async (_t, action, params) => {
+      const p = params;
+      if (action === "async.setItem") store.set(p.key, p.value);
+      return undefined;
+    });
+    expect(store.get("points")).toBe("240");
+  });
+});
+//# sourceMappingURL=askBuoySyncAdapter.test.js.map

package/lib/module/sync/askBuoySyncAdapter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["beforeEach","describe","expect","it","EffectLedger","askBuoySyncAdapter","redactForWire","askBuoyStore","reset","setLedger","actions","Object","keys","not","toContain","sort","toEqual","addUser","id","startAssistant","applyEvent","type","toolId","action","label","description","params","key","effect","ok","durationMs","summary","snap","getSnapshot","call","messages","toolCalls","status","JSON","stringify","delta","ledger","record","kind","before","changes","reversible","toBe","permanent","transients","cases","input","text","store","Map","revertAll","_t","p","set","value","undefined","get"],"sourceRoot":"../../../src","sources":["sync/askBuoySyncAdapter.test.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,UAAU,EAAEC,QAAQ,EAAEC,MAAM,EAAEC,EAAE,QAAQ,QAAQ;AACzD,SAASC,YAAY,QAAQ,qBAAqB;AAElD,SAASC,kBAAkB,QAAQ,sBAAsB;AACzD,SAASC,aAAa,QAAQ,QAAQ;AACtC,SAASC,YAAY,QAAQ,uBAAuB;AAEpDP,UAAU,CAAC,MAAM;EACfO,YAAY,CAACC,KAAK,CAAC,CAAC;EACpBD,YAAY,CAACE,SAAS,CAAC,IAAI,CAAC;AAC9B,CAAC,CAAC;AAEFR,QAAQ,CAAC,kBAAkB,EAAE,MAAM;EACjCE,EAAE,CAAC,gDAAgD,EAAE,MAAM;IACzD;IACA;IACA,MAAMO,OAAO,GAAGC,MAAM,CAACC,IAAI,CAACP,kBAAkB,CAACK,OAAO,CAAC;IACvDR,MAAM,CAACQ,OAAO,CAAC,CAACG,GAAG,CAACC,SAAS,CAAC,MAAM,CAAC;IACrCZ,MAAM,CAACQ,OAAO,CAAC,CAACG,GAAG,CAACC,SAAS,CAAC,KAAK,CAAC;IACpCZ,MAAM,CAACQ,OAAO,CAAC,CAACG,GAAG,CAACC,SAAS,CAAC,QAAQ,CAAC;IACvCZ,MAAM,CAACQ,OAAO,CAACK,IAAI,CAAC,CAAC,CAAC,CAACC,OAAO,CAAC,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;EACrE,CAAC,CAAC;EAEFb,EAAE,CAAC,qEAAqE,EAAE,MAAM;IAC9EI,YAAY,CAACU,OAAO,CAAC,oBAAoB,CAAC;IAC1C,MAAMC,EAAE,GAAGX,YAAY,CAACY,cAAc,CAAC,CAAC;IACxCZ,YAAY,CAACa,UAAU,CAACF,EAAE,EAAE;MAC1BG,IAAI,EAAE,YAAY;MAClBH,EAAE,EAAE,IAAI;MACRI,MAAM,EAAE,SAAS;MACjBC,MAAM,EAAE,eAAe;MACvBC,KAAK,EAAE,cAAc;MACrBC,WAAW,EAAE,2BAA2B;MACxCC,MAAM,EAAE;QAAEC,GAAG,EAAE;MAAU,CAAC;MAC1BC,MAAM,EAAE;IACV,CAAC,CAAC;IACFrB,YAAY,CAACa,UAAU,CAACF,EAAE,EAAE;MAC1BG,IAAI,EAAE,UAAU;MAChBH,EAAE,EAAE,IAAI;MACRW,EAAE,EAAE,IAAI;MACRC,UAAU,EAAE,EAAE;MACdC,OAAO,EAAE;IACX,CAAC,CAAC;IAEF,MAAMC,IAAI,GAAG3B,kBAAkB,CAAC4B,WAAW,CAAC,CAAC;IAC7C,MAAMC,IAAI,GAAGF,IAAI,CAACG,QAAQ,CAAC,CAAC,CAAC,CAACC,SAAS,CAAC,CAAC,CAAC;IAC1ClC,MAAM,CAACgC,IAAI,CAAC,CAAClB,OAAO,CAAC;MAAEM,MAAM,EAAE,SAAS;MAAEC,MAAM,EAAE,eAAe;MAAEc,MAAM,EAAE;IAAK,CAAC,CAAC;IAClF;IACAnC,MAAM,CAACoC,IAAI,CAACC,SAAS,CAACP,IAAI,CAAC,CAAC,CAACnB,GAAG,CAACC,SAAS,CAAC,cAAc,CAAC;EAC5D,CAAC,CAAC;EAEFX,EAAE,CAAC,6DAA6D,EAAE,MAAM;IACtEI,YAAY,CAACU,OAAO,CAAC,yBAAyB,CAAC;IAC/C,MAAMC,EAAE,GAAGX,YAAY,CAACY,cAAc,CAAC,CAAC;IACxCZ,YAAY,CAACa,UAAU,CAACF,EAAE,EAAE;MAC1BG,IAAI,EAAE,MAAM;MACZmB,KAAK,EAAE;IACT,CAAC,CAAC;IAEF,MAAMR,IAAI,GAAG3B,kBAAkB,CAAC4B,WAAW,CAAC,CAAC;IAC7C/B,MAAM,CAACoC,IAAI,CAACC,SAAS,CAACP,IAAI,CAAC,CAAC,CAACnB,GAAG,CAACC,SAAS,CAAC,wBAAwB,CAAC;EACtE,CAAC,CAAC;EAEFX,EAAE,CAAC,qDAAqD,EAAE,MAAM;IAC9D,MAAMsC,MAAM,GAAG,IAAIrC,YAAY,CAAC,CAAC;IACjCG,YAAY,CAACE,SAAS,CAACgC,MAAM,CAAC;IAC9BA,MAAM,CAACC,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE;MACxCC,IAAI,EAAE,eAAe;MACrBrB,MAAM,EAAE,SAAS;MACjBC,MAAM,EAAE,eAAe;MACvBI,GAAG,EAAE,QAAQ;MACbiB,MAAM,EAAE,KAAK;MACbpB,KAAK,EAAE;IACT,CAAC,CAAC;IACFiB,MAAM,CAACC,MAAM,CAAC,cAAc,EAAE,UAAU,EAAE;MACxCC,IAAI,EAAE,WAAW;MACjBnB,KAAK,EAAE;IACT,CAAC,CAAC;IACF;IACA;IACAiB,MAAM,CAACC,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE;MACnCC,IAAI,EAAE,aAAa;MACnBrB,MAAM,EAAE,SAAS;MACjBC,MAAM,EAAE,UAAU;MAClBC,KAAK,EAAE;IACT,CAAC,CAAC;IAEF,MAAMQ,IAAI,GAAG3B,kBAAkB,CAAC4B,WAAW,CAAC,CAAC;IAC7C/B,MAAM,CAAC8B,IAAI,CAACa,OAAO,CAACC,UAAU,CAAC,CAACC,IAAI,CAAC,CAAC,CAAC;IACvC;IACA;IACA;IACA7C,MAAM,CAAC8B,IAAI,CAACa,OAAO,CAACG,SAAS,CAAC,CAACD,IAAI,CAAC,CAAC,CAAC;IACtC7C,MAAM,CAAC8B,IAAI,CAACa,OAAO,CAACI,UAAU,CAAC,CAACF,IAAI,CAAC,CAAC,CAAC;EACzC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF9C,QAAQ,CAAC,eAAe,EAAE,MAAM;EAC9BE,EAAE,CAAC,wDAAwD,EAAE,MAAM;IACjE,MAAM+C,KAAK,GAAG,CACZ,8CAA8C,EAC9C,oDAAoD,EACpD,6BAA6B,EAC7B,6BAA6B,EAC7B,+CAA+C,CAChD;IACD,KAAK,MAAMC,KAAK,IAAID,KAAK,EAAE;MACzBhD,MAAM,CAACI,aAAa,CAAC6C,KAAK,CAAC,CAAC,CAACrC,SAAS,CAAC,UAAU,CAAC;IACpD;EACF,CAAC,CAAC;EAEFX,EAAE,CAAC,6BAA6B,EAAE,MAAM;IACtC,MAAMiD,IAAI,GAAG,wEAAwE;IACrFlD,MAAM,CAACI,aAAa,CAAC8C,IAAI,CAAC,CAAC,CAACL,IAAI,CAACK,IAAI,CAAC;EACxC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEFnD,QAAQ,CAAC,uBAAuB,EAAE,MAAM;EACtCE,EAAE,CAAC,+DAA+D,EAAE,YAAY;IAC9E,MAAMsC,MAAM,GAAG,IAAIrC,YAAY,CAAC,CAAC;IACjCG,YAAY,CAACE,SAAS,CAACgC,MAAM,CAAC;IAC9B,MAAMY,KAAK,GAAG,IAAIC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3Cb,MAAM,CAACC,MAAM,CAAC,SAAS,EAAE,eAAe,EAAE;MACxCC,IAAI,EAAE,eAAe;MACrBrB,MAAM,EAAE,SAAS;MACjBC,MAAM,EAAE,eAAe;MACvBI,GAAG,EAAE,QAAQ;MACbiB,MAAM,EAAE,KAAK;MACbpB,KAAK,EAAE;IACT,CAAC,CAAC;;IAEF;IACA,MAAMiB,MAAM,CAACc,SAAS,CAAC,OAAOC,EAAE,EAAEjC,MAAM,EAAEG,MAAM,KAAK;MACnD,MAAM+B,CAAC,GAAG/B,MAAyC;MACnD,IAAIH,MAAM,KAAK,eAAe,EAAE8B,KAAK,CAACK,GAAG,CAACD,CAAC,CAAC9B,GAAG,EAAE8B,CAAC,CAACE,KAAM,CAAC;MAC1D,OAAOC,SAAS;IAClB,CAAC,CAAC;IAEF1D,MAAM,CAACmD,KAAK,CAACQ,GAAG,CAAC,QAAQ,CAAC,CAAC,CAACd,IAAI,CAAC,KAAK,CAAC;EACzC,CAAC,CAAC;AACJ,CAAC,CAAC","ignoreList":[]}

package/lib/module/sync/wire.js

@@ -1 +1,47 @@
-"use strict";export{dispatchToolAction}from"@buoy-gg/shared-ui";const PATTERNS=[{re:/\bBearer\s+[A-Za-z0-9._~+/-]{12,}=*/gi,label:"[bearer token removed]"},{re:/\beyJ[A-Za-z0-9._-]{20,}/g,label:"[jwt removed]"},{re:/\bsk-[A-Za-z0-9_-]{16,}/g,label:"[api key removed]"},{re:/\bBUOY-[A-Z0-9-]{8,}/g,label:"[license key removed]"},{re:/("|')?(authorization|x-api-key|api[_-]?key|password|secret|access_token|refresh_token)\1?\s*[:=]\s*("|')?[^\s"',}]{6,}/gi,label:"[credential removed]"}];export function redactForWire(e){if(!e)return e;let r=e;for(const{re:e,label:o}of PATTERNS)r=r.replace(e,o);return r}
+"use strict";
+
+/**
+ * What the sync adapter is allowed to put on the broker wire.
+ *
+ * The broker has no authentication, `cors.origin: "*"`, binds every interface,
+ * and forwards to every connected dashboard — it already broadcasts each
+ * device's license key to every socket. A chat transcript is not a safe thing
+ * to add to that channel unfiltered: the agent reads storage values, network
+ * response bodies and user records, and any of it can end up quoted in an
+ * answer.
+ *
+ * So text crossing the wire is scrubbed for the shapes that are unambiguously
+ * credentials. This is a reduction in blast radius, not a guarantee — the real
+ * guarantee is that tool RESULTS never cross at all (see askBuoySyncAdapter).
+ */
+export { dispatchToolAction } from "@buoy-gg/shared-ui";
+const PATTERNS = [{
+  re: /\bBearer\s+[A-Za-z0-9._~+/-]{12,}=*/gi,
+  label: "[bearer token removed]"
+}, {
+  re: /\beyJ[A-Za-z0-9._-]{20,}/g,
+  label: "[jwt removed]"
+}, {
+  re: /\bsk-[A-Za-z0-9_-]{16,}/g,
+  label: "[api key removed]"
+}, {
+  re: /\bBUOY-[A-Z0-9-]{8,}/g,
+  label: "[license key removed]"
+},
+// Common "key: value" credential shapes in a quoted payload.
+{
+  re: /("|')?(authorization|x-api-key|api[_-]?key|password|secret|access_token|refresh_token)\1?\s*[:=]\s*("|')?[^\s"',}]{6,}/gi,
+  label: "[credential removed]"
+}];
+export function redactForWire(text) {
+  if (!text) return text;
+  let out = text;
+  for (const {
+    re,
+    label
+  } of PATTERNS) {
+    out = out.replace(re, label);
+  }
+  return out;
+}
+//# sourceMappingURL=wire.js.map

package/lib/module/sync/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["dispatchToolAction","PATTERNS","re","label","redactForWire","text","out","replace"],"sourceRoot":"../../../src","sources":["sync/wire.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASA,kBAAkB,QAAQ,oBAAoB;AAEvD,MAAMC,QAAyC,GAAG,CAChD;EAAEC,EAAE,EAAE,uCAAuC;EAAEC,KAAK,EAAE;AAAyB,CAAC,EAChF;EAAED,EAAE,EAAE,2BAA2B;EAAEC,KAAK,EAAE;AAAgB,CAAC,EAC3D;EAAED,EAAE,EAAE,0BAA0B;EAAEC,KAAK,EAAE;AAAoB,CAAC,EAC9D;EAAED,EAAE,EAAE,uBAAuB;EAAEC,KAAK,EAAE;AAAwB,CAAC;AAC/D;AACA;EACED,EAAE,EAAE,0HAA0H;EAC9HC,KAAK,EAAE;AACT,CAAC,CACF;AAED,OAAO,SAASC,aAAaA,CAACC,IAAY,EAAU;EAClD,IAAI,CAACA,IAAI,EAAE,OAAOA,IAAI;EACtB,IAAIC,GAAG,GAAGD,IAAI;EACd,KAAK,MAAM;IAAEH,EAAE;IAAEC;EAAM,CAAC,IAAIF,QAAQ,EAAE;IACpCK,GAAG,GAAGA,GAAG,CAACC,OAAO,CAACL,EAAE,EAAEC,KAAK,CAAC;EAC9B;EACA,OAAOG,GAAG;AACZ","ignoreList":[]}

package/lib/module/types.js

@@ -1 +1,4 @@
-"use strict";export{};
+"use strict";
+
+export {};
+//# sourceMappingURL=types.js.map

package/lib/module/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../src","sources":["types.ts"],"mappings":"","ignoreList":[]}

package/lib/typescript/blocks/AskBlocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AskBlocks.d.ts","sourceRoot":"","sources":["../../../src/blocks/AskBlocks.tsx"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAMjF,wBAAgB,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,+BA+CvD;AAED,wBAAgB,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,+BAqCzD;AAED,wBAAgB,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,+BAqDrD"}

package/lib/typescript/blocks/BlockRenderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BlockRenderer.d.ts","sourceRoot":"","sources":["../../../src/blocks/BlockRenderer.tsx"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AA+CjD,wBAAgB,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,KAAK,CAAA;CAAE,+BAMxD"}

package/lib/typescript/blocks/ChromePrototypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChromePrototypes.d.ts","sourceRoot":"","sources":["../../../src/blocks/ChromePrototypes.tsx"],"names":[],"mappings":"AAqBA,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,EAAE,EAAqB,EAAE,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,+BAaxE;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,+BAY9E;AAED,gDAAgD;AAChD,wBAAgB,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,+BAatD;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,gCAiB7B;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,EAAE,EAAE,EAAE,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,+BAQnD;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,+BAE/C;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,EAAE,IAAI,EAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,+BAuB5D"}

package/lib/typescript/blocks/DataBlocks.d.ts

@@ -5,9 +5,46 @@ export declare function Table({ block }: {
 export declare function KeyValue({ block }: {
     block: KeyValueBlock;
 }): import("react").JSX.Element;
+/**
+ * Keys carry the index as well as the id.
+ *
+ * The ids in here come from the app's own data, and app data is not required
+ * to be unique — a Poké Mart bag in this repo holds two lines sharing one
+ * `lineId`, which is a bug in that app but must not be one in a devtool
+ * rendering it. Paging made it visible: the duplicate sat past the initial cap,
+ * so React only saw the collision on the first "Show more".
+ */
+/**
+ * What a tapped list row does.
+ *
+ * A row can carry a picture and an action, and they want the same gesture. The
+ * picture wins the row body — looking at a thing must not fire it — and the
+ * action keeps its label as its own control. A row with no picture is
+ * unchanged: the whole row runs the action, which is what it did before rows
+ * could open.
+ */
+export declare function listRowBehaviour(item: Pick<ListBlock["items"][number], "image" | "action">): {
+    /** Tapping the row body enlarges the picture. */
+    canExpand: boolean;
+    /** Tapping the row body runs the action (only when there is no picture). */
+    rowRunsAction: boolean;
+    /** The action label needs to be its own pressable. */
+    actionIsOwnControl: boolean;
+};
 export declare function List({ block }: {
     block: ListBlock;
 }): import("react").JSX.Element;
+/**
+ * What a write changed. Folded by default (see `Card`), and drilled into
+ * rather than dumped.
+ *
+ * A changed field is rendered by the same tree diff viewer the Zustand and
+ * Storage tools use, with unchanged branches hidden — so editing one line of a
+ * bag shows `qty  4 => 14` and not both copies of a fifty-key array serialised
+ * to JSON, which is what the reader was given before and could not read. Only
+ * a scalar keeps the plain −/+ pair: a tree of one root node says less than
+ * the two values side by side.
+ */
 export declare function Diff({ block }: {
     block: DiffBlock;
 }): import("react").JSX.Element;
@@ -17,6 +54,11 @@ export declare function Chart({ block }: {
 export declare function Steps({ block }: {
     block: StepsBlock;
 }): import("react").JSX.Element;
+/**
+ * Router, per rule4: two specialised components rather than one that changes
+ * shape. A `cond ? <A/> : <B/>` inside a single component is the Fabric
+ * view-index hazard, and these two subtrees have nothing in common.
+ */
 export declare function Code({ block }: {
     block: CodeBlock;
 }): import("react").JSX.Element;

package/lib/typescript/blocks/DataBlocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DataBlocks.d.ts","sourceRoot":"","sources":["../../../src/blocks/DataBlocks.tsx"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,SAAS,EACd,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,UAAU,EAChB,MAAM,qBAAqB,CAAC;AAqB7B,wBAAgB,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,+BA4BrD;AAED,wBAAgB,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,+BAqB3D;AAED;;;;;;;;GAQG;AACH;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG;IAC5F,iDAAiD;IACjD,SAAS,EAAE,OAAO,CAAC;IACnB,4EAA4E;IAC5E,aAAa,EAAE,OAAO,CAAC;IACvB,sDAAsD;IACtD,kBAAkB,EAAE,OAAO,CAAC;CAC7B,CAOA;AAED,wBAAgB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BAoFnD;AAmBD;;;;;;;;;;GAUG;AACH,wBAAgB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BA+CnD;AAED,wBAAgB,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,+BAoBrD;AAED,wBAAgB,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,+BAarD;AAsDD;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BAInD;AAED,wBAAgB,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,+BAYvD;AAED,wBAAgB,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,+BA6BzD"}

package/lib/typescript/blocks/ExtraBlocks.d.ts

@@ -1,4 +1,10 @@
-import type { BannerBlock, CardBlock, CardCarouselBlock, CheckpointBlock, ClaimBlock, CompareBlock, DateTimeBlock, DetailsBlock, FileBlock, FormBlock, MultiSelectBlock, PlanBlock, ProposalBlock, ScreenshotBlock, SelectBlock, SliderBlock, SparklineBlock, SuggestionsBlock, TabsBlock, TaskBlock, TimelineBlock, UploadBlock } from "@buoy-gg/agent-core";
+/**
+ * Second-wave blocks from the survey (plan §11). Prototype-quality on purpose:
+ * each one exists so it can be judged on the review page, and the ones that
+ * survive get the same care as the first wave.
+ */
+import { type ReactNode } from "react";
+import type { BannerBlock, Block, CardBlock, CardCarouselBlock, CheckpointBlock, ClaimBlock, CompareBlock, DateTimeBlock, DetailsBlock, FileBlock, FormBlock, MultiSelectBlock, PlanBlock, ProposalBlock, ScreenshotBlock, SelectBlock, SliderBlock, SparklineBlock, SuggestionsBlock, TabsBlock, TaskBlock, TimelineBlock, UploadBlock } from "@buoy-gg/agent-core";
 export declare function Suggestions({ block }: {
     block: SuggestionsBlock;
 }): import("react").JSX.Element;
@@ -26,8 +32,29 @@ export declare function Claim({ block }: {
 export declare function Details({ block }: {
     block: DetailsBlock;
 }): import("react").JSX.Element;
-export declare function Tabs({ block }: {
+/**
+ * The tool-header segmented control, not a strip of this block's own.
+ *
+ * `NightSegmented` is what the dial settings and the network tool mount, so a
+ * tabbed block now reads as part of the same product rather than as a
+ * lookalike drawn next to it. `sm` is its compact variant, which is what a
+ * control inside a chat bubble wants.
+ *
+ * Keyed by INDEX, not label: two tabs may legitimately share a label, and a
+ * duplicate key would collapse them into one.
+ */
+export declare function Tabs({ block, renderNested, }: {
     block: TabsBlock;
+    /**
+     * Renders the block inside the active tab.
+     *
+     * Passed in rather than imported: this is the only place a block renders
+     * another block, and importing BlockRenderer here closed a require cycle
+     * (BlockRenderer -> ExtraBlocks -> BlockRenderer) that Metro warned about on
+     * every launch — the kind that leaves one of the two modules holding
+     * uninitialised values depending on which is reached first.
+     */
+    renderNested?: (block: Block) => ReactNode;
 }): import("react").JSX.Element;
 export declare function Timeline({ block }: {
     block: TimelineBlock;

package/lib/typescript/blocks/ExtraBlocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExtraBlocks.d.ts","sourceRoot":"","sources":["../../../src/blocks/ExtraBlocks.tsx"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAA+B,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAGpE,OAAO,KAAK,EACV,WAAW,EACX,KAAK,EACL,SAAS,EACT,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,SAAS,EACT,SAAS,EAET,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,eAAe,EACf,WAAW,EACX,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,SAAS,EACT,aAAa,EACb,WAAW,EACZ,MAAM,qBAAqB,CAAC;AAQ7B,wBAAgB,WAAW,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,+BAiBjE;AAGD,wBAAgB,WAAW,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,+BAuCjE;AAMD,wBAAgB,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,+BAiDvD;AA6CD,wBAAgB,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,+BAiBvD;AAGD,wBAAgB,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,+BA8B3D;AAwDD,wBAAgB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BAgBnD;AAED,wBAAgB,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,+BAyB3D;AAGD,wBAAgB,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,+BA4BrD;AAGD,wBAAgB,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,+BAWzD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,IAAI,CAAC,EACnB,KAAK,EACL,YAAY,GACb,EAAE;IACD,KAAK,EAAE,SAAS,CAAC;IACjB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,SAAS,CAAC;CAC5C,+BAeA;AAMD,wBAAgB,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,+BAwB3D;AAGD,wBAAgB,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,cAAc,CAAA;CAAE,+BAmB7D;AAED,wBAAgB,QAAQ,gCAUvB;AAGD,wBAAgB,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,+BAmBzD;AAsBD,wBAAgB,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BAMvD;AAED,wBAAgB,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,iBAAiB,CAAA;CAAE,+BAWnE;AAGD,wBAAgB,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,eAAe,CAAA;CAAE,+BAU/D;AAGD,wBAAgB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BAgBnD;AAED,wBAAgB,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,eAAe,CAAA;CAAE,+BAS/D;AAED,wBAAgB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BAanD;AAGD,wBAAgB,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,+BASvD;AAED,wBAAgB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BAUnD;AAED,wBAAgB,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,WAAW,CAAA;CAAE,+BAavD"}

package/lib/typescript/blocks/MediaBlocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MediaBlocks.d.ts","sourceRoot":"","sources":["../../../src/blocks/MediaBlocks.tsx"],"names":[],"mappings":"AAYA,OAAO,EAAQ,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAIhE,wBAAgB,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,cAAc,CAAA;CAAE,+BA+C7D"}

package/lib/typescript/blocks/ReceiptBlocks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReceiptBlocks.d.ts","sourceRoot":"","sources":["../../../src/blocks/ReceiptBlocks.tsx"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AA8B7B,wBAAgB,WAAW,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,+BA0BjE;AAQD,wBAAgB,WAAW,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,gBAAgB,CAAA;CAAE,+BA2BjE;AAED,wBAAgB,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,+BAgC3D;AAED,wBAAgB,cAAc,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,mBAAmB,CAAA;CAAE,+BAsBvE;AAED,wBAAgB,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,eAAe,CAAA;CAAE,+BA0B/D;AASD,wBAAgB,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,YAAY,CAAA;CAAE,+BAiBzD;AAED,wBAAgB,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,UAAU,CAAA;CAAE,+BAYrD;AAED,sEAAsE;AACtE,wBAAgB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,+BAqBnD"}

package/lib/typescript/blocks/blockText.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Blocks as plain text — for Copy, and for the ticket draft's own Copy.
+ *
+ * `transcriptToText` used to serialise prose and tool rows only, so a
+ * conversation whose whole point was the finding card at the end pasted into
+ * Jira WITHOUT the finding. Covers the kinds that carry facts a person would
+ * paste; everything else becomes one line naming what was on screen, so the
+ * paste says a card existed rather than silently skipping it.
+ */
+import type { Block } from "@buoy-gg/agent-core";
+export declare function blockToText(block: Block): string | null;
+/** Several blocks, blank-line separated, skipping the ones with nothing to say. */
+export declare function blocksToText(blocks: Block[]): string[];
+//# sourceMappingURL=blockText.d.ts.map

package/lib/typescript/blocks/blockText.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blockText.d.ts","sourceRoot":"","sources":["../../../src/blocks/blockText.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAIjD,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,IAAI,CAwCvD;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAEtD"}

package/lib/typescript/blocks/blockText.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=blockText.test.d.ts.map

package/lib/typescript/blocks/blockText.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blockText.test.d.ts","sourceRoot":"","sources":["../../../src/blocks/blockText.test.ts"],"names":[],"mappings":""}

package/lib/typescript/blocks/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/blocks/context.tsx"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAA6B,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAClE,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEpE,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;IACtC,2BAA2B;IAC3B,SAAS,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACtC,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC,CAAC;IAC5D,8EAA8E;IAC9E,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,kFAAkF;IAClF,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3E;AAWD,wBAAgB,qBAAqB,CAAC,EACpC,KAAK,EACL,QAAQ,GACT,EAAE;IACD,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,SAAS,CAAC;CACrB,+BAEA;AAED,wBAAgB,gBAAgB,IAAI,aAAa,CAEhD;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAEtE"}

package/lib/typescript/blocks/icons.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"icons.d.ts","sourceRoot":"","sources":["../../../src/blocks/icons.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,wBAAgB,SAAS,CAAC,EAAE,IAAI,EAAE,IAAS,EAAE,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,+BAmB/E"}

package/lib/typescript/blocks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/blocks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACxF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC9I,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC"}

package/lib/typescript/blocks/listRow.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=listRow.test.d.ts.map

package/lib/typescript/blocks/listRow.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listRow.test.d.ts","sourceRoot":"","sources":["../../../src/blocks/listRow.test.ts"],"names":[],"mappings":""}

package/lib/typescript/blocks/pageState.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The arithmetic behind a block's "+N more" footer, separated from the hook so
+ * it can be tested without a renderer.
+ *
+ * The rule that matters: a control is offered ONLY when it changes what is on
+ * screen. The previous version derived "+N more" from a `total` the source
+ * reported while deriving the tap target from the array actually in hand, so a
+ * block holding five items and claiming six rendered a "+1 more" with nothing
+ * to reveal — a button that did nothing when tapped. This takes a count and a
+ * limit and nothing else, so `canExpand` is the same fact as `hidden > 0`.
+ */
+export interface PageState {
+    /** Held but not rendered. */
+    hidden: number;
+    /** What one more tap reveals. */
+    next: number;
+    /** Something beyond the initial cap is on screen. */
+    expanded: boolean;
+    canExpand: boolean;
+    canCollapse: boolean;
+}
+export declare function pageState(count: number, cap: number, limit: number, step: number): PageState;
+//# sourceMappingURL=pageState.d.ts.map

package/lib/typescript/blocks/pageState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pageState.d.ts","sourceRoot":"","sources":["../../../src/blocks/pageState.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,WAAW,SAAS;IACxB,6BAA6B;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,CAc5F"}

package/lib/typescript/blocks/pageState.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pageState.test.d.ts.map

package/lib/typescript/blocks/pageState.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pageState.test.d.ts","sourceRoot":"","sources":["../../../src/blocks/pageState.test.ts"],"names":[],"mappings":""}