@buoy-gg/ask-buoy 7.0.35 → 7.0.38

package/lib/module/store/useAskBuoy.js

@@ -1,394 +1 @@
-"use strict";
-
-/**
- * Wire the sheet to the agent.
- *
- * Two things here are load-bearing:
- *
- * 1. DISPATCH GOES THROUGH `dispatchToolAction`, the same on-device seam a
- *    Scenario step and a desktop click use. No second adapter map, nothing
- *    that can drift from what the broker sees.
- * 2. THE SESSION IS REBUILT WHEN THE TOOL LIST CHANGES. The adapter map is a
- *    memo whose contents depend on which packages resolved and whether a
- *    QueryClientProvider is above FloatingDevTools — it is per-app and per
- *    render, never a constant. A session that cached the tool list at open
- *    would offer the model tools that are no longer there.
- */
-import { useCallback, useEffect, useMemo, useRef, useSyncExternalStore } from "react";
-import { Platform } from "react-native";
-import { dispatchToolAction, listSnapshotToolIds, listToolActions, readToolSnapshot, waitForToolRegistry } from "@buoy-gg/shared-ui";
-import { answerToText, CATALOG, createAskBuoySession, runGatedAction, SNAPSHOT_ACTION } from "@buoy-gg/agent-core";
-import { askBuoyStore } from "./askBuoyStore";
-import { buildPayload, clearTranscript, readTranscript, writeTranscript } from "./transcriptPersistence";
-const isRelease = typeof __DEV__ !== "undefined" && !__DEV__;
-
-/** Long enough to coalesce a streaming answer's deltas, short enough to beat a crash. */
-const SAVE_DEBOUNCE_MS = 600;
-export function useAskBuoyState() {
-  return useSyncExternalStore(askBuoyStore.subscribe, askBuoyStore.getState, askBuoyStore.getState);
-}
-export function useAskBuoy(config) {
-  const state = useAskBuoyState();
-  const sessionRef = useRef(null);
-  /** One restore attempt per mount — see the note at the read. */
-  const restoredRef = useRef(false);
-  const abortRef = useRef(null);
-  // Read through a ref where a stable callback needs the LATEST config (the
-  // onEvent tap) without re-creating the callback per render.
-  const configRef = useRef(config);
-  configRef.current = config;
-  const configured = !!config?.endpoint && !!config?.model;
-  /**
-   * On by default. The conversation surviving a reload is what makes the tool
-   * usable while iterating, and it is the only thing that survives a crash —
-   * but it puts the chat on disk, so a host handling regulated data can say no.
-   */
-  const persist = config?.persistTranscript !== false;
-
-  // Recomputed each render: the set of dispatchable tools is not a constant.
-  //
-  // `getSnapshot` is folded in here because half of Buoy's read surface is not
-  // an action at all — console entries, network events, routes and env live
-  // only in the adapter's snapshot. Without this the model is offered a
-  // console tool whose sole action wipes the logs, and no way to read them.
-  const availableActions = useMemo(() => {
-    try {
-      const actions = listToolActions();
-      for (const toolId of listSnapshotToolIds()) {
-        if (!actions[toolId]) actions[toolId] = [];
-        if (!actions[toolId].includes(SNAPSHOT_ACTION)) {
-          actions[toolId] = [SNAPSHOT_ACTION, ...actions[toolId]];
-        }
-      }
-      return actions;
-    } catch {
-      return {};
-    }
-  }, []);
-  const toolKey = Object.keys(availableActions).sort().join(",");
-  useEffect(() => {
-    askBuoyStore.setConfigured(configured);
-    // Stamped on the store so an exported run says what it ran against.
-    askBuoyStore.setMeta({
-      model: config?.model,
-      protocol: config?.protocol ?? (config ? "anthropic" : undefined),
-      appName: config?.appName,
-      platform: Platform.OS,
-      build: isRelease ? "release" : "development"
-    });
-    if (!configured || !config) {
-      sessionRef.current = null;
-      askBuoyStore.setNotice("Ask Buoy isn't set up in this app yet. A developer needs to point it at your team's AI endpoint.");
-      return;
-    }
-    // The classic first-run mistake, caught statically: a provider's own URL
-    // with the wrong protocol fails with a raw error that says nothing about
-    // the one-line fix. ONLY the canonical provider hosts are checked — a
-    // gateway may legitimately speak either protocol on any path (our own dev
-    // gateway serves OpenAI framing on /v1/messages, and a path-based version
-    // of this check flagged it on the first device run).
-    const protocol = config.protocol ?? "anthropic";
-    if (isRelease && config.apiKey) {
-      askBuoyStore.setNotice("This build carries a plaintext apiKey — that's dev-only and it ships to every install. Use the headers callback with your own gateway for distributed builds.");
-    } else if (protocol === "anthropic" && /^https?:\/\/api\.openai\.com\//i.test(config.endpoint)) {
-      askBuoyStore.setNotice('This endpoint is api.openai.com but the protocol is "anthropic". Set protocol: "openai" in the askBuoy config.');
-    } else if (protocol === "openai" && /^https?:\/\/api\.anthropic\.com\//i.test(config.endpoint)) {
-      askBuoyStore.setNotice('This endpoint is api.anthropic.com but the protocol is "openai". Remove protocol or set it to "anthropic".');
-    } else {
-      askBuoyStore.setNotice(null);
-    }
-
-    // Reuse the held session while nothing material changed. The transcript
-    // already survives close/reopen in the module store; without this the
-    // session and ledger did not — reopening the sheet swapped in an empty
-    // ledger (undo bar gone, agent changes still live in the app) and a blank
-    // model memory behind a transcript that still showed the conversation.
-    // The tool list is deliberately NOT part of this signature. Packages
-    // register a frame or two apart, so `toolKey` legitimately changes right
-    // after open — and keying on it silently rebuilt the session mid-chat,
-    // throwing away the conversation, the model's memory and the undo ledger
-    // while the transcript (a separate store) kept rendering as if nothing
-    // happened. Verified on device: a destructive change went unrecorded
-    // because it landed in a ledger that had just been replaced.
-    const signature = [config.endpoint, config.protocol ?? "anthropic", config.model].join("|");
-    const held = askBuoyStore.getHeldSession();
-    if (held && held.signature === signature) {
-      sessionRef.current = held.session;
-      held.session.setAvailableActions(availableActions);
-      askBuoyStore.setLedger(held.session.ledger);
-      return;
-    }
-    const session = createAskBuoySession({
-      endpoint: config.endpoint,
-      protocol: config.protocol ?? "anthropic",
-      model: config.model,
-      headers: config.headers,
-      apiKey: config.apiKey,
-      maxTokens: config.maxTokens,
-      anthropicVersion: config.anthropicVersion,
-      requestOverrides: config.requestOverrides,
-      // Host-declared custom tools join the built-in catalog. toProviderTools
-      // still filters against the live registry, so a descriptor whose
-      // `custom:<id>` adapter never registered is simply not offered.
-      catalog: config.tools?.length ? [...CATALOG, ...config.tools] : undefined,
-      dispatch: dispatchToolAction,
-      readSnapshot: readToolSnapshot,
-      availableActions,
-      policy: config.policy,
-      context: config.context,
-      isRelease,
-      appName: config.appName,
-      platform: Platform.OS,
-      requestApproval: input => askBuoyStore.askApproval(input)
-    });
-    sessionRef.current = session;
-    askBuoyStore.holdSession(session, signature);
-    askBuoyStore.setLedger(session.ledger);
-
-    /**
-     * Bring the last conversation back — both halves of it.
-     *
-     * The transcript and the model's memory are separate things (the store and
-     * the session), and restoring only the first is worse than restoring
-     * neither: the user reads a conversation the agent has no recollection of,
-     * and "undo that" or "now do the same for Pikachu" lands on an empty
-     * history. So the session is restored in the same pass, and only into a
-     * session this effect just built.
-     */
-    // The registry publishes on mount, a frame or two after first paint. Warm
-    // the grounding once it is there so the first question does not pay for it.
-    let cancelled = false;
-    void waitForToolRegistry().then(ready => {
-      if (ready && !cancelled) void session.prime();
-    });
-
-    /**
-     * NOT gated on `cancelled`, and once per mount.
-     *
-     * The disk read races the tool registry, and it was losing about half the
-     * time. `availableActions` legitimately changes a frame or two after open
-     * (see the note above) — that re-runs this effect, whose cleanup sets
-     * `cancelled`, and the in-flight restore then threw its result away. The
-     * second pass takes the held-session branch and returns early, so nothing
-     * ever retried: the conversation was on disk, read correctly, and dropped
-     * on the floor. Caught by the e2e, where one test restored and the next
-     * did not, with no difference between them.
-     *
-     * Safe to leave running: `hydrate` refuses if anything has been said since,
-     * and `restore` refuses a session that already has history. Resolved
-     * against `sessionRef.current` rather than the captured `session` so a
-     * genuine reconfiguration mid-read restores into the session in use.
-     */
-    if (persist && !restoredRef.current) {
-      restoredRef.current = true;
-      void readTranscript().then(saved => {
-        if (!saved) return;
-        const hydrated = askBuoyStore.hydrate({
-          messages: saved.messages,
-          answers: saved.answers,
-          usage: saved.usage
-        });
-        if (hydrated) sessionRef.current?.restore(saved.history);
-      });
-    }
-    return () => {
-      cancelled = true;
-    };
-  }, [configured, config, availableActions, toolKey, persist]);
-
-  /**
-   * Save on change: coalesced while a turn streams, immediate the moment it ends.
-   *
-   * The debounce exists because a streaming answer changes the store on every
-   * delta, and writing a whole transcript per token would cost more than the
-   * turn does. But applying it to the END of a turn as well left a window
-   * where the finished answer was on screen and not yet on disk — a crash or a
-   * fast reload inside it lost the whole turn, which is precisely the case
-   * this feature exists for. An e2e that relaunched as soon as the answer
-   * rendered lost it every time, and that is a real user doing a fast reload,
-   * not a harness artefact.
-   *
-   * Saving still happens DURING a turn as well, which is what lets a bubble
-   * the app died in come back marked interrupted rather than blank.
-   */
-  const messages = state.messages;
-  const answers = state.answers;
-  const usage = state.usage;
-  const busy = state.busy;
-  useEffect(() => {
-    if (!persist) return;
-    if (messages.length === 0) return;
-    const write = () => {
-      void writeTranscript(buildPayload({
-        messages,
-        history: sessionRef.current?.messages ?? [],
-        answers,
-        usage
-      }));
-    };
-    if (!busy) {
-      write();
-      return;
-    }
-    const timer = setTimeout(write, SAVE_DEBOUNCE_MS);
-    return () => clearTimeout(timer);
-  }, [persist, busy, messages, answers, usage]);
-
-  /** Stream one turn into a fresh assistant bubble. Callers set up the user side. */
-  const runTurn = useCallback(text => {
-    const session = sessionRef.current;
-    if (!session) return;
-    askBuoyStore.beginTurn();
-    const messageId = askBuoyStore.startAssistant();
-    const controller = new AbortController();
-    abortRef.current = controller;
-    const onEvent = configRef.current?.onEvent;
-    void (async () => {
-      try {
-        for await (const ev of session.send(text, controller.signal)) {
-          askBuoyStore.applyEvent(messageId, ev);
-          if (onEvent) {
-            try {
-              onEvent(ev);
-            } catch {
-              // The audit tap must never take the chat down.
-            }
-          }
-        }
-      } catch (err) {
-        askBuoyStore.applyEvent(messageId, {
-          type: "error",
-          message: err instanceof Error ? err.message : "Something went wrong talking to your AI endpoint."
-        });
-      } finally {
-        askBuoyStore.finishAssistant(messageId);
-        abortRef.current = null;
-      }
-    })();
-  }, []);
-  const send = useCallback(text => {
-    const trimmed = text.trim();
-    if (!sessionRef.current || !trimmed) return;
-
-    // Typed mid-turn: park it. The composer already cleared the field, and
-    // silently dropping the words was the worst of all outcomes.
-    if (askBuoyStore.getState().busy) {
-      askBuoyStore.setQueued(trimmed);
-      return;
-    }
-
-    // Typing past an Ask block IS an answer: the block is skipped and locks.
-    // Without this the composer stayed on "Pick an option above…" forever and
-    // a stale choice sat tappable in the history.
-    const awaiting = askBuoyStore.getState().awaitingBlockId;
-    if (awaiting) askBuoyStore.recordAnswer({
-      blockId: awaiting,
-      kind: "skipped"
-    });
-    askBuoyStore.addUser(trimmed);
-    runTurn(trimmed);
-  }, [runTurn]);
-  const retry = useCallback(() => {
-    const {
-      messages,
-      busy
-    } = askBuoyStore.getState();
-    if (busy || !sessionRef.current) return;
-    const lastUser = [...messages].reverse().find(m => m.role === "user");
-    if (!lastUser) return;
-    // Replace the failed bubble rather than stacking a second one under it.
-    const last = messages[messages.length - 1];
-    if (last && last.role === "assistant" && last.error) askBuoyStore.removeMessage(last.id);
-    runTurn(lastUser.text);
-  }, [runTurn]);
-  const stop = useCallback(() => {
-    // A pending approval parks an unresolved promise inside the engine; the
-    // abort signal is only read between steps, so Stop must also answer the
-    // approval (as declined) or the generator hangs forever.
-    if (askBuoyStore.getState().pending) askBuoyStore.answerApproval(false);
-    abortRef.current?.abort();
-    abortRef.current = null;
-  }, []);
-
-  // Flush the parked message the moment the turn ends.
-  const queued = state.queued;
-  useEffect(() => {
-    if (!state.busy && queued) {
-      askBuoyStore.setQueued(null);
-      send(queued);
-    }
-  }, [state.busy, queued, send]);
-  const reset = useCallback(() => {
-    abortRef.current?.abort();
-    sessionRef.current?.reset();
-    askBuoyStore.reset();
-    // "New conversation" means gone, not hidden. Leaving the last chat on disk
-    // after the user asked for a clean one is the opposite of what they said.
-    void clearTranscript();
-  }, []);
-  const approve = useCallback(approved => {
-    askBuoyStore.answerApproval(approved);
-  }, []);
-  const answer = useCallback(a => {
-    askBuoyStore.recordAnswer(a);
-    // Plain words to the model, never JSON: "Business checkout", "Yes, go ahead."
-    send(answerToText(a));
-  }, [send]);
-
-  /**
-   * Block buttons. `send` is a chat reply; `dispatch` runs the action through
-   * `runGatedAction` — the SAME validation, policy and ledger path a model
-   * call takes, minus the model. The first version called `dispatchToolAction`
-   * raw, which made a model-authored button an invisible, ungoverned,
-   * unundoable mutation while the `buoy_ui` schema promised the opposite.
-   * The human's tap satisfies `requireApproval`; deny lists, read-only mode
-   * and release refusals still stand. Button state is tracked so a tap shows
-   * running → done and can't double-fire.
-   * (`minimize` / `openTool` are the sheet's to handle; see AskBuoyModal.)
-   */
-  const runAction = useCallback(async (action, blockId) => {
-    if (action.send) {
-      send(action.send);
-      return;
-    }
-    if (!action.dispatch) return;
-    const key = `${blockId}:${action.label}`;
-    const ledger = askBuoyStore.getLedger();
-    if (!ledger) {
-      askBuoyStore.setNotice(`${action.label} failed — no active Ask Buoy session.`);
-      return;
-    }
-    askBuoyStore.setActionState(key, "running");
-    const outcome = await runGatedAction({
-      toolId: action.dispatch.toolId,
-      action: action.dispatch.action,
-      params: action.dispatch.params ?? {},
-      dispatch: dispatchToolAction,
-      ledger,
-      policy: config?.policy ?? {},
-      isRelease,
-      // Same merged catalog the session offers, so a button on a custom
-      // tool's block is not refused as unknown.
-      catalog: config?.tools?.length ? [...CATALOG, ...config.tools] : undefined
-    });
-    if (outcome.ok) {
-      askBuoyStore.setActionState(key, "done");
-    } else {
-      askBuoyStore.setActionState(key, "failed");
-      askBuoyStore.setNotice(`${action.label} failed — ${outcome.error}`);
-    }
-  }, [send, config]);
-  return {
-    state,
-    send,
-    stop,
-    reset,
-    approve,
-    retry,
-    answer,
-    runAction,
-    configured,
-    toolCount: Object.keys(availableActions).length
-  };
-}
-//# sourceMappingURL=useAskBuoy.js.map
+"use strict";import{getUseIsPro,hasAccountAccess,subscribeAccountAccess}from"@buoy-gg/shared-ui";import{useCallback,useEffect,useMemo,useRef,useState,useSyncExternalStore}from"react";import{Platform}from"react-native";import{dispatchToolAction,listSnapshotToolIds,listToolActions,readToolSnapshot,waitForToolRegistry}from"@buoy-gg/shared-ui";import{answerToText,CATALOG,createAskBuoySession,readTargetDigest,runGatedAction,SNAPSHOT_ACTION}from"@buoy-gg/agent-core";import{askBuoyStore,queuePauseReason,turnPhaseOf}from"./askBuoyStore";import{clearConversation,resetConversation}from"./resetConversation";import{buildPayload,readTranscript,writeTranscript}from"./transcriptPersistence";import{useAskBuoySettings}from"./useAskBuoySettings";const isRelease="undefined"!=typeof __DEV__&&!__DEV__;function questionBehind(e){for(const t of askBuoyStore.getState().messages)if(t.restored)for(const o of t.blocks){const t=o.block;if(t?.id!==e)continue;const s=t.question??t.label??t.title;return"string"==typeof s&&s.trim()?s.trim():void 0}}function readAvailableActions(){try{const e=listToolActions();for(const t of listSnapshotToolIds())e[t]||(e[t]=[]),e[t].includes(SNAPSHOT_ACTION)||(e[t]=[SNAPSHOT_ACTION,...e[t]]);return e}catch{return{}}}const SAVE_DEBOUNCE_MS=600;export function useAskBuoyState(){return useSyncExternalStore(askBuoyStore.subscribe,askBuoyStore.getState,askBuoyStore.getState)}export function useAskBuoy(e){const t=useAskBuoyState(),o=getUseIsPro()(),s=useRef(o);s.current=o;const r=useCallback((...e)=>hasAccountAccess()&&s.current?dispatchToolAction(...e):Promise.reject(new Error("Ask Buoy requires Pro access.")),[]),a=useRef(null),n=useRef(!1),i=useRef(null),u=useRef(e);u.current=e;const c=!!e?.endpoint&&!!e?.model,l=!1!==e?.persistTranscript,{bypassApprovals:d,readOnly:p}=useAskBuoySettings(),y=useRef(d);y.current=d;const k=useRef(p);k.current=p;const g=useCallback(()=>k.current?{...e?.policy??{},readOnly:!0}:e?.policy??{},[e]),[S,f]=useState(0);useEffect(()=>{let e=!1;return waitForToolRegistry().then(()=>{e||f(e=>e+1)}),()=>{e=!0}},[]);const h=useMemo(()=>readAvailableActions(),[S]),A=Object.keys(h).sort().join(",");useEffect(()=>{if(askBuoyStore.setConfigured(c),askBuoyStore.setMeta({model:e?.model,protocol:e?.protocol??(e?"anthropic":void 0),appName:e?.appName,platform:Platform.OS,build:isRelease?"release":"development"}),!c||!e)return a.current=null,void askBuoyStore.setNotice("Ask Buoy isn't set up in this app yet. A developer needs to point it at your team's AI endpoint.");const t=e.protocol??"anthropic";isRelease&&e.apiKey?askBuoyStore.setNotice("This build carries a plaintext apiKey — that's dev-only and it ships to every install. Use the headers callback with your own gateway for distributed builds."):"anthropic"===t&&/^https?:\/\/api\.openai\.com\//i.test(e.endpoint)?askBuoyStore.setNotice('This endpoint is api.openai.com but the protocol is "anthropic". Set protocol: "openai" in the askBuoy config.'):"openai"===t&&/^https?:\/\/api\.anthropic\.com\//i.test(e.endpoint)?askBuoyStore.setNotice('This endpoint is api.anthropic.com but the protocol is "openai". Remove protocol or set it to "anthropic".'):askBuoyStore.setNotice(null);const o=[e.endpoint,e.protocol??"anthropic",e.model].join("|"),s=askBuoyStore.getHeldSession();if(s&&s.signature===o)return a.current=s.session,s.session.setAvailableActions(h),s.session.setApprovalBypass(y.current),s.session.setReadOnly(k.current),void askBuoyStore.setLedger(s.session.ledger);const i=createAskBuoySession({endpoint:e.endpoint,protocol:e.protocol??"anthropic",model:e.model,headers:e.headers,apiKey:e.apiKey,maxTokens:e.maxTokens,anthropicVersion:e.anthropicVersion,requestOverrides:e.requestOverrides,catalog:e.tools?.length?[...CATALOG,...e.tools]:void 0,dispatch:r,readSnapshot:readToolSnapshot,availableActions:h,policy:e.policy,context:e.context,isRelease:isRelease,appName:e.appName,platform:Platform.OS,requestApproval:e=>askBuoyStore.askApproval(e)});a.current=i,i.setApprovalBypass(y.current),i.setReadOnly(k.current),askBuoyStore.holdSession(i,o),askBuoyStore.setLedger(i.ledger);let u=!1;return waitForToolRegistry().then(e=>{e&&!u&&i.prime()}),l&&!n.current&&(n.current=!0,readTranscript().then(e=>{e&&askBuoyStore.hydrate({messages:e.messages,answers:e.answers,usage:e.usage,queued:e.queued})&&(a.current?.restore(e.history),e.ledger?.length&&a.current?.ledger.restore(e.ledger),e.pending&&askBuoyStore.restorePending(e.pending))})),()=>{u=!0}},[c,e,h,A,l]),useEffect(()=>{a.current?.setApprovalBypass(d)},[d]),useEffect(()=>{a.current?.setReadOnly(p)},[p]);const B=t.messages,m=t.answers,b=t.usage,v=t.busy,T=t.pending,w=t.queued;useEffect(()=>{if(!l)return;if(0===B.length)return;const e=()=>{writeTranscript(buildPayload({messages:B,history:a.current?.messages??[],answers:m,usage:b,pending:T,ledger:askBuoyStore.getLedger()?.list(),queued:w}))};if(!v)return void e();const t=setTimeout(e,600);return()=>clearTimeout(t)},[l,v,B,m,b,T,w]);const C=useCallback(e=>{if(!hasAccountAccess()||!s.current)return;const t=a.current;if(!t)return;askBuoyStore.beginTurn();const o=askBuoyStore.startAssistant(),r=new AbortController;i.current=r,t.setAvailableActions(readAvailableActions());const n=u.current?.onEvent;(async()=>{try{for await(const s of t.send(e,r.signal))if(askBuoyStore.applyEvent(o,s),n)try{n(s)}catch{}}catch(e){r.signal.aborted||askBuoyStore.applyEvent(o,{type:"error",message:e instanceof Error?e.message:"Something went wrong talking to your AI endpoint."})}finally{r.signal.aborted&&askBuoyStore.markStopped(o),askBuoyStore.finishAssistant(o),i.current=null}})()},[]),R=useCallback(e=>{if(!hasAccountAccess()||!s.current)return;const t=e.trim();if(!a.current||!t)return;if(askBuoyStore.getState().busy)return void askBuoyStore.enqueue(t);const o=askBuoyStore.getState().awaitingBlockId;o&&askBuoyStore.recordAnswer({blockId:o,kind:"skipped"}),askBuoyStore.addUser(t),C(t)},[C]),N=useCallback(()=>{const{messages:e,busy:t}=askBuoyStore.getState();if(t||!a.current)return;const o=[...e].reverse().find(e=>"user"===e.role);o&&C(o.text)},[C]),O=useCallback(()=>{askBuoyStore.requestStop(),askBuoyStore.getState().pending&&askBuoyStore.answerApproval(!1),i.current?.abort(),i.current=null},[]);useEffect(()=>{const e=subscribeAccountAccess(()=>{hasAccountAccess()||O()});return()=>{e(),O()}},[O]),useEffect(()=>{o||O()},[o,O]),useEffect(()=>{if(0===t.queued.length)return;if("idle"!==turnPhaseOf(t))return;if(null!==queuePauseReason(t))return;const e=askBuoyStore.shiftQueued();e&&R(e.text)},[t,R]);const E=useCallback(e=>askBuoyStore.takeQueuedToDraft(e),[]),I=useCallback(e=>askBuoyStore.removeQueued(e),[]),P=useCallback(()=>{i.current?.abort(),i.current=null,clearConversation()},[]),q=useCallback(()=>resetConversation({dispatch:dispatchToolAction,undoFirst:!0}),[]),x=useCallback(async t=>{const o=askBuoyStore.getLedger();if(!o)return void askBuoyStore.setNotice(`${t.label} couldn't run — no active Ask Buoy session.`);const s=e?.tools?.length?[...CATALOG,...e.tools]:void 0;if(t.targetDigest){const e=await readTargetDigest({toolId:t.toolId,action:t.action,params:t.params??{},dispatch:r,catalog:s});if(void 0!==e&&e!==t.targetDigest)return void askBuoyStore.addNote(`“${t.label}” wasn't applied — what it would change has moved on since the app restarted. Nothing was written. Ask again if you still want it.`)}const a=await runGatedAction({toolId:t.toolId,action:t.action,params:t.params??{},dispatch:r,ledger:o,policy:g(),isRelease:isRelease,catalog:s});a.ok?askBuoyStore.addNote(`Applied “${t.label}”, which was still waiting when the app restarted. Whatever else that answer was going to do is gone — ask again if there was more to it.`):askBuoyStore.setNotice(`${t.label} failed — ${a.error}`)},[e,g]),$=useCallback(e=>{const t=askBuoyStore.getState().pending,o="boolean"==typeof e?e:e.approved;askBuoyStore.answerApproval(e),t?.restored&&(o?x(t):askBuoyStore.addNote(`Skipped “${t.label}”. Nothing was changed.`))},[x]),_=useCallback(e=>{askBuoyStore.recordAnswer(e);const t=questionBehind(e.blockId);R(t?`${t} — ${answerToText(e)}`:answerToText(e))},[R]),L=useCallback(async(t,o)=>{if(!hasAccountAccess()||!s.current)return void askBuoyStore.setNotice("Ask Buoy requires Pro access.");if(t.send)return void R(t.send);if(!t.dispatch)return;const a=`${o}:${t.label}`,n=askBuoyStore.getLedger();if(!n)return void askBuoyStore.setNotice(`${t.label} failed — no active Ask Buoy session.`);askBuoyStore.setActionState(a,"running");const i=await runGatedAction({toolId:t.dispatch.toolId,action:t.dispatch.action,params:t.dispatch.params??{},dispatch:r,ledger:n,policy:g(),isRelease:isRelease,catalog:e?.tools?.length?[...CATALOG,...e.tools]:void 0});i.ok?askBuoyStore.setActionState(a,"done"):(askBuoyStore.setActionState(a,"failed"),askBuoyStore.setNotice(`${t.label} failed — ${i.error}`))},[R,e,g]);return{state:t,send:R,stop:O,reset:P,undoThenReset:q,approve:$,retry:N,answer:_,runAction:L,editQueued:E,removeQueued:I,configured:c,toolCount:Object.keys(h).length,availableToolIds:Object.keys(h)}}

package/lib/module/store/useAskBuoySettings.js

@@ -1,9 +1 @@
-"use strict";
-
-/** Subscribe the sheet to Ask Buoy's own preferences. */
-import { useSyncExternalStore } from "react";
-import { askBuoySettings } from "./askBuoySettings";
-export function useAskBuoySettings() {
-  return useSyncExternalStore(askBuoySettings.subscribe, askBuoySettings.get, askBuoySettings.get);
-}
-//# sourceMappingURL=useAskBuoySettings.js.map
+"use strict";import{useSyncExternalStore}from"react";import{askBuoySettings}from"./askBuoySettings";export function useAskBuoySettings(){return useSyncExternalStore(askBuoySettings.subscribe,askBuoySettings.get,askBuoySettings.get)}

package/lib/module/sync/askBuoySyncAdapter.js

@@ -1,114 +1 @@
-"use strict";
-
-/**
- * The sync adapter, so Buoy Desktop and MCP can see what Ask Buoy is doing.
- *
- * Read-heavy on purpose. There is no `send` action: letting a remote client
- * put words in the agent's mouth would mean anyone who can reach the broker —
- * which has no authentication at all, binds 0.0.0.0, and accepts any client
- * calling itself "Dashboard" — could drive a mutating agent on a tester's
- * device. The chat is initiated on-device, by a person, full stop.
- *
- * `undoAll` IS exposed, because the asymmetry is deliberate: putting things
- * back is the safe direction, and a dev watching from the desktop should be
- * able to clean up a device without walking over to it.
- *
- * The transcript is redacted before it crosses the wire. Action results the
- * agent read can contain storage values and response bodies, and this socket
- * broadcasts to every connected dashboard — it already leaks license keys the
- * same way.
- */
-import { dispatchToolAction, redactForWire } from "./wire";
-import { isReversible } from "@buoy-gg/agent-core";
-import { askBuoyStore } from "../store/askBuoyStore";
-export const ASK_BUOY_ADAPTER_VERSION = 1;
-export const askBuoySyncAdapter = {
-  version: ASK_BUOY_ADAPTER_VERSION,
-  getSnapshot() {
-    const state = askBuoyStore.getState();
-    const ledger = askBuoyStore.getLedger();
-    const entries = ledger?.list() ?? [];
-    const outstanding = entries.filter(e => !e.undoneAt);
-    return {
-      version: ASK_BUOY_ADAPTER_VERSION,
-      busy: state.busy,
-      configured: state.configured,
-      notice: state.notice,
-      messageCount: state.messages.length,
-      // Only the shape of the conversation, never tool payloads.
-      messages: state.messages.map(m => ({
-        id: m.id,
-        role: m.role,
-        text: redactForWire(m.text),
-        streaming: !!m.streaming,
-        toolCalls: m.toolCalls.map(c => ({
-          toolId: c.toolId,
-          action: c.action,
-          status: c.status
-        }))
-      })),
-      // Session token totals, so a desktop/MCP observer can meter cost.
-      usage: state.usage,
-      pendingApproval: state.pending ? {
-        toolId: state.pending.toolId,
-        action: state.pending.action,
-        label: state.pending.label
-      } : null,
-      changes: {
-        // Transients (navigation, taps) are one-shot actions, not changes —
-        // same rule as the on-device bar, so desktop and device tell one story.
-        reversible: outstanding.filter(e => isReversible(e.effect)).length,
-        permanent: outstanding.filter(e => e.effect.kind !== "transient" && !isReversible(e.effect)).length,
-        transients: outstanding.filter(e => e.effect.kind === "transient").length,
-        items: outstanding.map(e => ({
-          kind: e.effect.kind,
-          label: e.effect.label
-        }))
-      }
-    };
-  },
-  subscribe(onChange) {
-    const offStore = askBuoyStore.subscribe(onChange);
-    const offLedger = askBuoyStore.getLedger()?.subscribe(onChange);
-    return () => {
-      offStore();
-      offLedger?.();
-    };
-  },
-  actions: {
-    /** What the agent changed, and whether it can be put back. */
-    listChanges: () => {
-      const entries = askBuoyStore.getLedger()?.list() ?? [];
-      return entries.filter(e => !e.undoneAt).map(e => ({
-        id: e.id,
-        at: e.at,
-        toolId: e.toolId,
-        action: e.action,
-        kind: e.effect.kind,
-        label: e.effect.label,
-        reversible: isReversible(e.effect)
-      }));
-    },
-    /** Put back everything that can be put back. Safe direction only. */
-    undoAll: async () => {
-      const ledger = askBuoyStore.getLedger();
-      if (!ledger) return {
-        ok: false,
-        error: "No Ask Buoy session on this device."
-      };
-      const outcome = await ledger.revertAll(dispatchToolAction);
-      return {
-        ok: true,
-        ...outcome
-      };
-    },
-    /** Clear the transcript and the ledger. Does not undo anything. */
-    reset: () => {
-      askBuoyStore.reset();
-      return {
-        ok: true
-      };
-    }
-  }
-};
-//# sourceMappingURL=askBuoySyncAdapter.js.map
+"use strict";import{resetConversation}from"../store/resetConversation";import{dispatchToolAction,redactForWire}from"./wire";import{isReversible}from"@buoy-gg/agent-core";import{askBuoyStore}from"../store/askBuoyStore";export const ASK_BUOY_ADAPTER_VERSION=1;export const askBuoySyncAdapter={version:1,async dispose(e){const t=askBuoyStore.getLedger();for(const o of t?.list()??[])o.undoneAt||"network-override"===o.effect.kind&&await e("network","deleteOverrideRule",{id:o.effect.ruleId})},getSnapshot(){const e=askBuoyStore.getState(),t=askBuoyStore.getLedger(),o=(t?.list()??[]).filter(e=>!e.undoneAt);return{version:1,busy:e.busy,configured:e.configured,notice:e.notice,messageCount:e.messages.length,messages:e.messages.map(e=>({id:e.id,role:e.role,text:redactForWire(e.text),streaming:!!e.streaming,toolCalls:e.toolCalls.map(e=>({toolId:e.toolId,action:e.action,status:e.status}))})),usage:e.usage,pendingApproval:e.pending?{toolId:e.pending.toolId,action:e.pending.action,label:e.pending.label}:null,changes:{reversible:o.filter(e=>isReversible(e.effect)).length,permanent:o.filter(e=>"transient"!==e.effect.kind&&!isReversible(e.effect)).length,transients:o.filter(e=>"transient"===e.effect.kind).length,items:o.map(e=>({kind:e.effect.kind,label:e.effect.label}))}}},subscribe(e){const t=askBuoyStore.subscribe(e),o=askBuoyStore.getLedger()?.subscribe(e);return()=>{t(),o?.()}},actions:{listChanges:()=>(askBuoyStore.getLedger()?.list()??[]).filter(e=>!e.undoneAt).map(e=>({id:e.id,at:e.at,toolId:e.toolId,action:e.action,kind:e.effect.kind,label:e.effect.label,reversible:isReversible(e.effect)})),undoAll:async()=>{const e=askBuoyStore.getLedger();return e?{ok:!0,...await e.revertAll(dispatchToolAction)}:{ok:!1,error:"No Ask Buoy session on this device."}},reset:async()=>{const e=await resetConversation({dispatch:dispatchToolAction,undoFirst:!0});return e.cleared?{ok:!0,reverted:e.reverted}:{ok:!1,error:`Couldn't undo ${e.failed.length} change${1===e.failed.length?"":"s"} — conversation kept.`,failed:e.failed}}}};