@buoy-gg/ask-buoy 7.0.38 → 7.0.40

package/lib/commonjs/store/transcriptPersistence.js

@@ -1 +1,297 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.TRANSCRIPT_KEY=void 0,exports.buildPayload=buildPayload,exports.clearTranscript=clearTranscript,exports.fitToCaps=fitToCaps,exports.parsePayload=parsePayload,exports.readTranscript=readTranscript,exports.writeTranscript=writeTranscript;var _sharedUi=require("@buoy-gg/shared-ui"),_wire=require("../sync/wire");const TRANSCRIPT_KEY=exports.TRANSCRIPT_KEY=`${_sharedUi.devToolsStorageKeys.base}_ask_buoy_transcript`,VERSION=1,MAX_MESSAGES=60,MAX_BYTES=256e3,DROPPED_RESULT="[not kept across a restart — read it again if you need it]";function scrub(e){return e?(0,_wire.redactForWire)(e):e}function settle(e){const r=!0===e.streaming;return{...e,text:scrub(e.text),streaming:!1,reasoning:e.reasoning?.map(e=>({...e,text:scrub(e.text)})),toolCalls:e.toolCalls.map(e=>{const r=e.params?scrub(e.params):void 0,{result:t,...s}=e;return"running"===e.status?{...s,params:r,status:"failed",summary:"Interrupted"}:{...s,params:r}}),error:e.error??(r&&!e.text?"This answer was interrupted — the app restarted mid-turn.":void 0)}}function withoutResults(e){return e.map(e=>"tool-results"===e.role?{...e,results:e.results.map(e=>({...e,content:DROPPED_RESULT}))}:(e.role,{...e,text:scrub(e.text)}))}function fitToCaps(e){let r={...e,messages:e.messages.slice(-MAX_MESSAGES),history:e.history.slice(2*-MAX_MESSAGES)},t=JSON.stringify(r);for(;t.length>MAX_BYTES&&r.messages.length>1;)r={...r,messages:r.messages.slice(1),history:r.history.slice(Math.min(2,r.history.length))},t=JSON.stringify(r);return r}function storableApproval(e){if(!e)return null;const r=e.params;if(!r)return null;let t;try{t=JSON.stringify(r)}catch{return null}return(0,_wire.redactForWire)(t)!==t?null:{id:e.id,toolId:e.toolId,action:e.action,label:scrub(e.label),description:e.description?scrub(e.description):void 0,reason:scrub(e.reason),params:r,targetDigest:e.targetDigest}}function isStoredApproval(e){if("object"!=typeof e||null===e)return!1;const r=e;return"string"==typeof r.id&&"string"==typeof r.toolId&&"string"==typeof r.action&&"string"==typeof r.label&&"string"==typeof r.reason&&"object"==typeof r.params&&null!==r.params}function storableLedger(e){if(!e?.length)return;const r=e.filter(e=>{try{const r=JSON.stringify(e);return(0,_wire.redactForWire)(r)===r}catch{return!1}});return r.length?r:void 0}function buildPayload(e){return fitToCaps({v:VERSION,savedAt:Date.now(),messages:e.messages.map(settle),history:withoutResults(e.history),answers:e.answers,usage:e.usage,pending:storableApproval(e.pending),ledger:storableLedger(e.ledger),queued:e.queued?.length?e.queued.map(e=>({id:e.id,text:scrub(e.text)})):void 0})}function parsePayload(e){if(!e)return null;try{const r=JSON.parse(e);return r?.v===VERSION&&Array.isArray(r.messages)?0===r.messages.length?null:{v:VERSION,savedAt:"number"==typeof r.savedAt?r.savedAt:0,messages:r.messages,history:Array.isArray(r.history)?r.history:[],answers:r.answers??{},usage:r.usage??{input:0,output:0,requests:0},pending:isStoredApproval(r.pending)?r.pending:null,ledger:Array.isArray(r.ledger)?r.ledger.filter(e=>"object"==typeof e&&null!==e&&"string"==typeof e.id):void 0,queued:Array.isArray(r.queued)?r.queued.filter(e=>"object"==typeof e&&null!==e&&"string"==typeof e.id&&"string"==typeof e.text):void 0}:null}catch{return null}}async function readTranscript(){try{return parsePayload(await _sharedUi.persistentStorage.getItem(TRANSCRIPT_KEY))}catch{return null}}async function writeTranscript(e){try{await _sharedUi.persistentStorage.setItem(TRANSCRIPT_KEY,JSON.stringify(e))}catch{}}async function clearTranscript(){try{await _sharedUi.persistentStorage.removeItem(TRANSCRIPT_KEY)}catch{}}
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.TRANSCRIPT_KEY = void 0;
+exports.buildPayload = buildPayload;
+exports.clearTranscript = clearTranscript;
+exports.fitToCaps = fitToCaps;
+exports.parsePayload = parsePayload;
+exports.readTranscript = readTranscript;
+exports.writeTranscript = writeTranscript;
+var _sharedUi = require("@buoy-gg/shared-ui");
+var _wire = require("../sync/wire");
+/**
+ * The conversation, across a reload or a crash.
+ *
+ * This reverses a deliberate earlier decision, so the reasoning is worth
+ * stating. The transcript used to live only in memory because it can quote
+ * anything the agent read — a storage value, a response body, a customer
+ * record — and a Buoy key on disk is readable by the Storage tool, which the
+ * unauthenticated broker mirrors to every connected dashboard. That risk did
+ * not go away; it is now a trade the host app makes knowingly, and can decline
+ * with `askBuoy={{ persistTranscript: false }}`.
+ *
+ * What lowers it:
+ * - Tool RESULTS are never written. The model's saved history keeps the shape
+ *   of each round (which tool ran, what it was asked) and replaces every result
+ *   payload with a placeholder — so the agent resumes knowing what it did, not
+ *   what it saw. Raw payloads are the sensitive part and they stay in memory.
+ * - Everything written passes `redactForWire`, the same credential scrubber the
+ *   broker wire uses.
+ * - It is capped, oldest-first, so a long QA session cannot grow a file without
+ *   bound.
+ * - "New conversation" deletes it, rather than leaving the last chat on disk.
+ */
+
+/** `@react_buoy` prefix, so the Storage tool treats it as one of its own. */
+const TRANSCRIPT_KEY = exports.TRANSCRIPT_KEY = `${_sharedUi.devToolsStorageKeys.base}_ask_buoy_transcript`;
+
+/**
+ * Bumped when the saved shape changes; an older payload is dropped, not parsed.
+ *
+ * Purely ADDITIVE optional fields do not bump it — `pending` reads back as
+ * absent from a v1 file written before it existed, and throwing away someone's
+ * conversation to add a field they did not have is a worse trade than the one
+ * this version number exists to make.
+ */
+const VERSION = 1;
+
+/** Newest N bubbles. Beyond this a reader is scrolling history, not testing. */
+const MAX_MESSAGES = 60;
+
+/**
+ * Hard ceiling on the file. Blocks carry image URLs and table rows, so a
+ * message is not a small object; this is checked AFTER the message cap and
+ * drops from the oldest end until it fits.
+ */
+const MAX_BYTES = 256_000;
+
+/** What replaces a tool result. Addressed to the model, which will read it. */
+const DROPPED_RESULT = "[not kept across a restart — read it again if you need it]";
+
+/**
+ * An approval the user never answered.
+ *
+ * Saved with the conversation because an unanswered question is exactly the
+ * state a reload must not quietly resolve for them: nothing was tapped, so the
+ * change is still pending as far as they know. `params` is the real call —
+ * after a restart there is no turn left to resume, so Allow re-dispatches it.
+ */
+
+function scrub(text) {
+  return text ? (0, _wire.redactForWire)(text) : text;
+}
+
+/**
+ * A bubble as it should look after a restart.
+ *
+ * `streaming` is cleared because nothing is streaming into a bubble the app
+ * has just rebuilt, and a message caught mid-turn is marked as interrupted
+ * rather than left looking like a silent, empty answer — which is exactly the
+ * crash case this feature exists for. `actionState` is not saved at all: a
+ * button stuck on "running" would be a lie about work that died with the
+ * process.
+ */
+function settle(m) {
+  const cutOff = m.streaming === true;
+  return {
+    ...m,
+    text: scrub(m.text),
+    streaming: false,
+    // The thinking view's payloads go through the same scrubber as the answer:
+    // step parameters carry whatever the model passed a tool, which is exactly
+    // where a token ends up when the agent has been asked to set one.
+    reasoning: m.reasoning?.map(r => ({
+      ...r,
+      text: scrub(r.text)
+    })),
+    toolCalls: m.toolCalls.map(c => {
+      const params = c.params ? scrub(c.params) : undefined;
+      // `result` is dropped, never scrubbed. It is the tool payload itself —
+      // a store's whole state, a response body — and "tool results are never
+      // written to disk" is the promise this file is built on. It stays in
+      // memory for the thinking view and the JSON export.
+      const {
+        result: _dropped,
+        ...rest
+      } = c;
+      return c.status === "running" ? {
+        ...rest,
+        params,
+        status: "failed",
+        summary: "Interrupted"
+      } : {
+        ...rest,
+        params
+      };
+    }),
+    error: m.error ?? (cutOff && !m.text ? "This answer was interrupted — the app restarted mid-turn." : undefined)
+  };
+}
+
+/** Model history with every tool result replaced by a placeholder. */
+function withoutResults(history) {
+  return history.map(m => {
+    if (m.role === "tool-results") {
+      return {
+        ...m,
+        results: m.results.map(r => ({
+          ...r,
+          content: DROPPED_RESULT
+        }))
+      };
+    }
+    if (m.role === "assistant") return {
+      ...m,
+      text: scrub(m.text)
+    };
+    return {
+      ...m,
+      text: scrub(m.text)
+    };
+  });
+}
+
+/**
+ * Trim to the caps. Messages and history are trimmed together and from the
+ * same end, so what the user sees and what the model remembers stay the same
+ * conversation rather than drifting apart across restarts.
+ */
+function fitToCaps(payload) {
+  let out = {
+    ...payload,
+    messages: payload.messages.slice(-MAX_MESSAGES),
+    history: payload.history.slice(-MAX_MESSAGES * 2)
+  };
+  let json = JSON.stringify(out);
+  while (json.length > MAX_BYTES && out.messages.length > 1) {
+    out = {
+      ...out,
+      messages: out.messages.slice(1),
+      history: out.history.slice(Math.min(2, out.history.length))
+    };
+    json = JSON.stringify(out);
+  }
+  return out;
+}
+
+/**
+ * The pending approval, if it is safe to bring back.
+ *
+ * Params are NOT scrubbed on the way out, and that is the point of the check:
+ * a redacted token written back into the call is no longer the change the user
+ * was asked about, so re-running it would apply something they never saw. A
+ * call the wire scrubber touches at all is therefore not persisted — an action
+ * carrying a credential is precisely the one that should not come back after a
+ * restart and run itself. The card is lost in that case, which is the same
+ * behaviour as before this existed.
+ */
+function storableApproval(pending) {
+  // A RESTORED card is saved again too: reloading twice without answering must
+  // not be the thing that finally loses the question.
+  if (!pending) return null;
+  const params = pending.params;
+  if (!params) return null;
+  let json;
+  try {
+    json = JSON.stringify(params);
+  } catch {
+    return null;
+  }
+  if ((0, _wire.redactForWire)(json) !== json) return null;
+  return {
+    id: pending.id,
+    toolId: pending.toolId,
+    action: pending.action,
+    label: scrub(pending.label),
+    description: pending.description ? scrub(pending.description) : undefined,
+    reason: scrub(pending.reason),
+    params,
+    targetDigest: pending.targetDigest
+  };
+}
+function isStoredApproval(value) {
+  if (typeof value !== "object" || value === null) return false;
+  const v = value;
+  return typeof v.id === "string" && typeof v.toolId === "string" && typeof v.action === "string" && typeof v.label === "string" && typeof v.reason === "string" && typeof v.params === "object" && v.params !== null;
+}
+
+/**
+ * Ledger entries safe to write.
+ *
+ * Same rule as `storableApproval`: an entry the wire scrubber would touch
+ * carries a credential in the value it is holding for the undo, and scrubbing
+ * it would make the undo restore a redacted string over the real one. Such an
+ * entry is dropped rather than rewritten — losing an undo is recoverable,
+ * writing "[redacted]" into the user's storage is not.
+ */
+function storableLedger(entries) {
+  if (!entries?.length) return undefined;
+  const kept = entries.filter(e => {
+    try {
+      const json = JSON.stringify(e);
+      return (0, _wire.redactForWire)(json) === json;
+    } catch {
+      return false;
+    }
+  });
+  return kept.length ? kept : undefined;
+}
+function buildPayload(input) {
+  return fitToCaps({
+    v: VERSION,
+    savedAt: Date.now(),
+    messages: input.messages.map(settle),
+    history: withoutResults(input.history),
+    answers: input.answers,
+    usage: input.usage,
+    pending: storableApproval(input.pending),
+    ledger: storableLedger(input.ledger),
+    queued: input.queued?.length ? input.queued.map(q => ({
+      id: q.id,
+      text: scrub(q.text)
+    })) : undefined
+  });
+}
+
+/** Anything unparseable, or from an older shape, is treated as "no transcript". */
+function parsePayload(raw) {
+  if (!raw) return null;
+  try {
+    const parsed = JSON.parse(raw);
+    if (parsed?.v !== VERSION || !Array.isArray(parsed.messages)) return null;
+    if (parsed.messages.length === 0) return null;
+    return {
+      v: VERSION,
+      savedAt: typeof parsed.savedAt === "number" ? parsed.savedAt : 0,
+      messages: parsed.messages,
+      history: Array.isArray(parsed.history) ? parsed.history : [],
+      answers: parsed.answers ?? {},
+      usage: parsed.usage ?? {
+        input: 0,
+        output: 0,
+        requests: 0
+      },
+      pending: isStoredApproval(parsed.pending) ? parsed.pending : null,
+      ledger: Array.isArray(parsed.ledger) ? parsed.ledger.filter(e => typeof e === "object" && e !== null && typeof e.id === "string") : undefined,
+      queued: Array.isArray(parsed.queued) ? parsed.queued.filter(q => typeof q === "object" && q !== null && typeof q.id === "string" && typeof q.text === "string") : undefined
+    };
+  } catch {
+    return null;
+  }
+}
+async function readTranscript() {
+  try {
+    return parsePayload(await _sharedUi.persistentStorage.getItem(TRANSCRIPT_KEY));
+  } catch {
+    return null;
+  }
+}
+async function writeTranscript(payload) {
+  try {
+    await _sharedUi.persistentStorage.setItem(TRANSCRIPT_KEY, JSON.stringify(payload));
+  } catch {
+    // A transcript that cannot be saved must never break the chat that
+    // produced it.
+  }
+}
+async function clearTranscript() {
+  try {
+    await _sharedUi.persistentStorage.removeItem(TRANSCRIPT_KEY);
+  } catch {
+    /* nothing to do — see writeTranscript */
+  }
+}
+//# sourceMappingURL=transcriptPersistence.js.map

package/lib/commonjs/store/transcriptPersistence.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_sharedUi","require","_wire","TRANSCRIPT_KEY","exports","devToolsStorageKeys","base","VERSION","MAX_MESSAGES","MAX_BYTES","DROPPED_RESULT","scrub","text","redactForWire","settle","m","cutOff","streaming","reasoning","map","r","toolCalls","c","params","undefined","result","_dropped","rest","status","summary","error","withoutResults","history","role","results","content","fitToCaps","payload","out","messages","slice","json","JSON","stringify","length","Math","min","storableApproval","pending","id","toolId","action","label","description","reason","targetDigest","isStoredApproval","value","v","storableLedger","entries","kept","filter","e","buildPayload","input","savedAt","Date","now","answers","usage","ledger","queued","q","parsePayload","raw","parsed","parse","Array","isArray","output","requests","readTranscript","persistentStorage","getItem","writeTranscript","setItem","clearTranscript","removeItem"],"sourceRoot":"../../../src","sources":["store/transcriptPersistence.ts"],"mappings":";;;;;;;;;;;;AAsBA,IAAAA,SAAA,GAAAC,OAAA;AAIA,IAAAC,KAAA,GAAAD,OAAA;AA1BA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACO,MAAME,cAAc,GAAAC,OAAA,CAAAD,cAAA,GAAG,GAAGE,6BAAmB,CAACC,IAAI,sBAAsB;;AAE/E;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,OAAO,GAAG,CAAC;;AAEjB;AACA,MAAMC,YAAY,GAAG,EAAE;;AAEvB;AACA;AACA;AACA;AACA;AACA,MAAMC,SAAS,GAAG,OAAO;;AAEzB;AACA,MAAMC,cAAc,GAAG,4DAA4D;;AAEnF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAyCA,SAASC,KAAKA,CAACC,IAAY,EAAU;EACnC,OAAOA,IAAI,GAAG,IAAAC,mBAAa,EAACD,IAAI,CAAC,GAAGA,IAAI;AAC1C;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASE,MAAMA,CAACC,CAAc,EAAe;EAC3C,MAAMC,MAAM,GAAGD,CAAC,CAACE,SAAS,KAAK,IAAI;EACnC,OAAO;IACL,GAAGF,CAAC;IACJH,IAAI,EAAED,KAAK,CAACI,CAAC,CAACH,IAAI,CAAC;IACnBK,SAAS,EAAE,KAAK;IAChB;IACA;IACA;IACAC,SAAS,EAAEH,CAAC,CAACG,SAAS,EAAEC,GAAG,CAAEC,CAAC,KAAM;MAAE,GAAGA,CAAC;MAAER,IAAI,EAAED,KAAK,CAACS,CAAC,CAACR,IAAI;IAAE,CAAC,CAAC,CAAC;IACnES,SAAS,EAAEN,CAAC,CAACM,SAAS,CAACF,GAAG,CAAEG,CAAC,IAAK;MAChC,MAAMC,MAAM,GAAGD,CAAC,CAACC,MAAM,GAAGZ,KAAK,CAACW,CAAC,CAACC,MAAM,CAAC,GAAGC,SAAS;MACrD;MACA;MACA;MACA;MACA,MAAM;QAAEC,MAAM,EAAEC,QAAQ;QAAE,GAAGC;MAAK,CAAC,GAAGL,CAAC;MACvC,OAAOA,CAAC,CAACM,MAAM,KAAK,SAAS,GACzB;QAAE,GAAGD,IAAI;QAAEJ,MAAM;QAAEK,MAAM,EAAE,QAAiB;QAAEC,OAAO,EAAE;MAAc,CAAC,GACtE;QAAE,GAAGF,IAAI;QAAEJ;MAAO,CAAC;IACzB,CAAC,CAAC;IACFO,KAAK,EACHf,CAAC,CAACe,KAAK,KACNd,MAAM,IAAI,CAACD,CAAC,CAACH,IAAI,GAAG,2DAA2D,GAAGY,SAAS;EAChG,CAAC;AACH;;AAEA;AACA,SAASO,cAAcA,CAACC,OAAuB,EAAkB;EAC/D,OAAOA,OAAO,CAACb,GAAG,CAAEJ,CAAC,IAAK;IACxB,IAAIA,CAAC,CAACkB,IAAI,KAAK,cAAc,EAAE;MAC7B,OAAO;QAAE,GAAGlB,CAAC;QAAEmB,OAAO,EAAEnB,CAAC,CAACmB,OAAO,CAACf,GAAG,CAAEC,CAAC,KAAM;UAAE,GAAGA,CAAC;UAAEe,OAAO,EAAEzB;QAAe,CAAC,CAAC;MAAE,CAAC;IACrF;IACA,IAAIK,CAAC,CAACkB,IAAI,KAAK,WAAW,EAAE,OAAO;MAAE,GAAGlB,CAAC;MAAEH,IAAI,EAAED,KAAK,CAACI,CAAC,CAACH,IAAI;IAAE,CAAC;IAChE,OAAO;MAAE,GAAGG,CAAC;MAAEH,IAAI,EAAED,KAAK,CAACI,CAAC,CAACH,IAAI;IAAE,CAAC;EACtC,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASwB,SAASA,CAACC,OAAyB,EAAoB;EACrE,IAAIC,GAAqB,GAAG;IAC1B,GAAGD,OAAO;IACVE,QAAQ,EAAEF,OAAO,CAACE,QAAQ,CAACC,KAAK,CAAC,CAAChC,YAAY,CAAC;IAC/CwB,OAAO,EAAEK,OAAO,CAACL,OAAO,CAACQ,KAAK,CAAC,CAAChC,YAAY,GAAG,CAAC;EAClD,CAAC;EACD,IAAIiC,IAAI,GAAGC,IAAI,CAACC,SAAS,CAACL,GAAG,CAAC;EAC9B,OAAOG,IAAI,CAACG,MAAM,GAAGnC,SAAS,IAAI6B,GAAG,CAACC,QAAQ,CAACK,MAAM,GAAG,CAAC,EAAE;IACzDN,GAAG,GAAG;MACJ,GAAGA,GAAG;MACNC,QAAQ,EAAED,GAAG,CAACC,QAAQ,CAACC,KAAK,CAAC,CAAC,CAAC;MAC/BR,OAAO,EAAEM,GAAG,CAACN,OAAO,CAACQ,KAAK,CAACK,IAAI,CAACC,GAAG,CAAC,CAAC,EAAER,GAAG,CAACN,OAAO,CAACY,MAAM,CAAC;IAC5D,CAAC;IACDH,IAAI,GAAGC,IAAI,CAACC,SAAS,CAACL,GAAG,CAAC;EAC5B;EACA,OAAOA,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASS,gBAAgBA,CAACC,OAA2C,EAAyB;EAC5F;EACA;EACA,IAAI,CAACA,OAAO,EAAE,OAAO,IAAI;EACzB,MAAMzB,MAAM,GAAGyB,OAAO,CAACzB,MAAM;EAC7B,IAAI,CAACA,MAAM,EAAE,OAAO,IAAI;EACxB,IAAIkB,IAAY;EAChB,IAAI;IACFA,IAAI,GAAGC,IAAI,CAACC,SAAS,CAACpB,MAAM,CAAC;EAC/B,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;EACA,IAAI,IAAAV,mBAAa,EAAC4B,IAAI,CAAC,KAAKA,IAAI,EAAE,OAAO,IAAI;EAC7C,OAAO;IACLQ,EAAE,EAAED,OAAO,CAACC,EAAE;IACdC,MAAM,EAAEF,OAAO,CAACE,MAAM;IACtBC,MAAM,EAAEH,OAAO,CAACG,MAAM;IACtBC,KAAK,EAAEzC,KAAK,CAACqC,OAAO,CAACI,KAAK,CAAC;IAC3BC,WAAW,EAAEL,OAAO,CAACK,WAAW,GAAG1C,KAAK,CAACqC,OAAO,CAACK,WAAW,CAAC,GAAG7B,SAAS;IACzE8B,MAAM,EAAE3C,KAAK,CAACqC,OAAO,CAACM,MAAM,CAAC;IAC7B/B,MAAM;IACNgC,YAAY,EAAEP,OAAO,CAACO;EACxB,CAAC;AACH;AAEA,SAASC,gBAAgBA,CAACC,KAAc,EAA2B;EACjE,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,EAAE,OAAO,KAAK;EAC7D,MAAMC,CAAC,GAAGD,KAAgC;EAC1C,OACE,OAAOC,CAAC,CAACT,EAAE,KAAK,QAAQ,IACxB,OAAOS,CAAC,CAACR,MAAM,KAAK,QAAQ,IAC5B,OAAOQ,CAAC,CAACP,MAAM,KAAK,QAAQ,IAC5B,OAAOO,CAAC,CAACN,KAAK,KAAK,QAAQ,IAC3B,OAAOM,CAAC,CAACJ,MAAM,KAAK,QAAQ,IAC5B,OAAOI,CAAC,CAACnC,MAAM,KAAK,QAAQ,IAC5BmC,CAAC,CAACnC,MAAM,KAAK,IAAI;AAErB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASoC,cAAcA,CAACC,OAAkC,EAA6B;EACrF,IAAI,CAACA,OAAO,EAAEhB,MAAM,EAAE,OAAOpB,SAAS;EACtC,MAAMqC,IAAI,GAAGD,OAAO,CAACE,MAAM,CAAEC,CAAC,IAAK;IACjC,IAAI;MACF,MAAMtB,IAAI,GAAGC,IAAI,CAACC,SAAS,CAACoB,CAAC,CAAC;MAC9B,OAAO,IAAAlD,mBAAa,EAAC4B,IAAI,CAAC,KAAKA,IAAI;IACrC,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF,CAAC,CAAC;EACF,OAAOoB,IAAI,CAACjB,MAAM,GAAGiB,IAAI,GAAGrC,SAAS;AACvC;AAEO,SAASwC,YAAYA,CAACC,KAQ5B,EAAoB;EACnB,OAAO7B,SAAS,CAAC;IACfsB,CAAC,EAAEnD,OAAO;IACV2D,OAAO,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC;IACnB7B,QAAQ,EAAE0B,KAAK,CAAC1B,QAAQ,CAACpB,GAAG,CAACL,MAAM,CAAC;IACpCkB,OAAO,EAAED,cAAc,CAACkC,KAAK,CAACjC,OAAO,CAAC;IACtCqC,OAAO,EAAEJ,KAAK,CAACI,OAAO;IACtBC,KAAK,EAAEL,KAAK,CAACK,KAAK;IAClBtB,OAAO,EAAED,gBAAgB,CAACkB,KAAK,CAACjB,OAAO,CAAC;IACxCuB,MAAM,EAAEZ,cAAc,CAACM,KAAK,CAACM,MAAM,CAAC;IACpCC,MAAM,EAAEP,KAAK,CAACO,MAAM,EAAE5B,MAAM,GACxBqB,KAAK,CAACO,MAAM,CAACrD,GAAG,CAAEsD,CAAC,KAAM;MAAExB,EAAE,EAAEwB,CAAC,CAACxB,EAAE;MAAErC,IAAI,EAAED,KAAK,CAAC8D,CAAC,CAAC7D,IAAI;IAAE,CAAC,CAAC,CAAC,GAC5DY;EACN,CAAC,CAAC;AACJ;;AAEA;AACO,SAASkD,YAAYA,CAACC,GAAkB,EAA2B;EACxE,IAAI,CAACA,GAAG,EAAE,OAAO,IAAI;EACrB,IAAI;IACF,MAAMC,MAAM,GAAGlC,IAAI,CAACmC,KAAK,CAACF,GAAG,CAA8B;IAC3D,IAAIC,MAAM,EAAElB,CAAC,KAAKnD,OAAO,IAAI,CAACuE,KAAK,CAACC,OAAO,CAACH,MAAM,CAACrC,QAAQ,CAAC,EAAE,OAAO,IAAI;IACzE,IAAIqC,MAAM,CAACrC,QAAQ,CAACK,MAAM,KAAK,CAAC,EAAE,OAAO,IAAI;IAC7C,OAAO;MACLc,CAAC,EAAEnD,OAAO;MACV2D,OAAO,EAAE,OAAOU,MAAM,CAACV,OAAO,KAAK,QAAQ,GAAGU,MAAM,CAACV,OAAO,GAAG,CAAC;MAChE3B,QAAQ,EAAEqC,MAAM,CAACrC,QAAQ;MACzBP,OAAO,EAAE8C,KAAK,CAACC,OAAO,CAACH,MAAM,CAAC5C,OAAO,CAAC,GAAG4C,MAAM,CAAC5C,OAAO,GAAG,EAAE;MAC5DqC,OAAO,EAAEO,MAAM,CAACP,OAAO,IAAI,CAAC,CAAC;MAC7BC,KAAK,EAAEM,MAAM,CAACN,KAAK,IAAI;QAAEL,KAAK,EAAE,CAAC;QAAEe,MAAM,EAAE,CAAC;QAAEC,QAAQ,EAAE;MAAE,CAAC;MAC3DjC,OAAO,EAAEQ,gBAAgB,CAACoB,MAAM,CAAC5B,OAAO,CAAC,GAAG4B,MAAM,CAAC5B,OAAO,GAAG,IAAI;MACjEuB,MAAM,EAAEO,KAAK,CAACC,OAAO,CAACH,MAAM,CAACL,MAAM,CAAC,GAChCK,MAAM,CAACL,MAAM,CAACT,MAAM,CACjBC,CAAC,IACA,OAAOA,CAAC,KAAK,QAAQ,IAAIA,CAAC,KAAK,IAAI,IAAI,OAAQA,CAAC,CAAiBd,EAAE,KAAK,QAC5E,CAAC,GACDzB,SAAS;MACbgD,MAAM,EAAEM,KAAK,CAACC,OAAO,CAACH,MAAM,CAACJ,MAAM,CAAC,GAChCI,MAAM,CAACJ,MAAM,CAACV,MAAM,CACjBW,CAAC,IACA,OAAOA,CAAC,KAAK,QAAQ,IACrBA,CAAC,KAAK,IAAI,IACV,OAAQA,CAAC,CAAmBxB,EAAE,KAAK,QAAQ,IAC3C,OAAQwB,CAAC,CAAmB7D,IAAI,KAAK,QACzC,CAAC,GACDY;IACN,CAAC;EACH,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF;AAEO,eAAe0D,cAAcA,CAAA,EAAqC;EACvE,IAAI;IACF,OAAOR,YAAY,CAAC,MAAMS,2BAAiB,CAACC,OAAO,CAACjF,cAAc,CAAC,CAAC;EACtE,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF;AAEO,eAAekF,eAAeA,CAAChD,OAAyB,EAAiB;EAC9E,IAAI;IACF,MAAM8C,2BAAiB,CAACG,OAAO,CAACnF,cAAc,EAAEuC,IAAI,CAACC,SAAS,CAACN,OAAO,CAAC,CAAC;EAC1E,CAAC,CAAC,MAAM;IACN;IACA;EAAA;AAEJ;AAEO,eAAekD,eAAeA,CAAA,EAAkB;EACrD,IAAI;IACF,MAAMJ,2BAAiB,CAACK,UAAU,CAACrF,cAAc,CAAC;EACpD,CAAC,CAAC,MAAM;IACN;EAAA;AAEJ","ignoreList":[]}

package/lib/commonjs/store/transcriptPersistence.test.js

@@ -1 +1,333 @@
-"use strict";var _vitest=require("vitest"),_transcriptPersistence=require("./transcriptPersistence");const msg=(t={})=>({id:"m1",role:"assistant",text:"ok",toolCalls:[],blocks:[],...t}),build=(t,e=[])=>(0,_transcriptPersistence.buildPayload)({messages:t,history:e,answers:{},usage:{input:0,output:0,requests:0}});(0,_vitest.describe)("what reaches the disk",()=>{(0,_vitest.it)("never writes a tool result",()=>{const t=build([msg()],[{role:"user",text:"what's in the bag?"},{role:"assistant",text:"",toolCalls:[{id:"c1",name:"buoy_zustand",input:{}}]},{role:"tool-results",results:[{toolCallId:"c1",content:'{"lines":[{"card":"4111111111111111"}]}'}]},{role:"assistant",text:"Five items."}]),e=JSON.stringify(t);(0,_vitest.expect)(e).not.toContain("4111111111111111"),(0,_vitest.expect)(t.history.map(t=>t.role)).toEqual(["user","assistant","tool-results","assistant"])}),(0,_vitest.it)("never writes a step's result, even when it writes the step",()=>{const t=build([msg({toolCalls:[{id:"c1",toolId:"zustand",action:"getStoreState",label:"Read the bag",status:"ok",summary:"Done",params:'{"storeName":"bag"}',result:'{"card":"4111111111111111"}'}]})]);(0,_vitest.expect)(JSON.stringify(t)).not.toContain("4111111111111111"),(0,_vitest.expect)(t.messages[0].toolCalls[0].result).toBeUndefined(),(0,_vitest.expect)(t.messages[0].toolCalls[0].action).toBe("getStoreState")}),(0,_vitest.it)("scrubs credential shapes out of what the agent said",()=>{const t=build([msg({text:"The header was Bearer abcdefghijklmnop123456"})]);(0,_vitest.expect)(t.messages[0].text).not.toContain("abcdefghijklmnop123456")}),(0,_vitest.it)("caps a long session instead of growing a file forever",()=>{const t=Array.from({length:400},(t,e)=>msg({id:`m${e}`,text:`answer ${e}`})),e=build(t);(0,_vitest.expect)(e.messages.length).toBeLessThanOrEqual(60),(0,_vitest.expect)(e.messages[e.messages.length-1].text).toBe("answer 399")}),(0,_vitest.it)("drops from the oldest end until a heavy transcript fits",()=>{const t=Array.from({length:20},(t,e)=>msg({id:`m${e}`,text:"x".repeat(4e4)})),e=(0,_transcriptPersistence.fitToCaps)({v:1,savedAt:0,messages:t,history:[],answers:{},usage:{input:0,output:0,requests:0}});(0,_vitest.expect)(JSON.stringify(e).length).toBeLessThanOrEqual(256e3),(0,_vitest.expect)(e.messages.length).toBeGreaterThan(0)})}),(0,_vitest.describe)("what comes back",()=>{(0,_vitest.it)("marks a turn the app died in as interrupted rather than blank",()=>{const t=build([msg({text:"",streaming:!0})]);(0,_vitest.expect)(t.messages[0].streaming).toBe(!1),(0,_vitest.expect)(t.messages[0].error).toMatch(/interrupted/i)}),(0,_vitest.it)("never restores a tool call still claiming to run",()=>{const t=build([msg({streaming:!0,toolCalls:[{id:"c1",toolId:"storage",action:"set",label:"Write a key",status:"running"}]})]);(0,_vitest.expect)(t.messages[0].toolCalls[0].status).toBe("failed"),(0,_vitest.expect)(t.messages[0].toolCalls[0].summary).toBe("Interrupted")}),(0,_vitest.it)("keeps an answer that already finished exactly as it was",()=>{const t=build([msg({text:"Five items.",streaming:!1})]);(0,_vitest.expect)(t.messages[0].error).toBeUndefined(),(0,_vitest.expect)(t.messages[0].text).toBe("Five items.")}),(0,_vitest.it)("treats anything it cannot trust as no transcript at all",()=>{(0,_vitest.expect)((0,_transcriptPersistence.parsePayload)(null)).toBeNull(),(0,_vitest.expect)((0,_transcriptPersistence.parsePayload)("not json")).toBeNull(),(0,_vitest.expect)((0,_transcriptPersistence.parsePayload)(JSON.stringify({v:0,messages:[msg()]}))).toBeNull(),(0,_vitest.expect)((0,_transcriptPersistence.parsePayload)(JSON.stringify({v:1,messages:[]}))).toBeNull()}),(0,_vitest.it)("round-trips a real conversation",()=>{const t=build([msg({role:"user",text:"hi"}),msg({id:"m2",text:"hello"})]),e=(0,_transcriptPersistence.parsePayload)(JSON.stringify(t));(0,_vitest.expect)(e?.messages.map(t=>t.text)).toEqual(["hi","hello"])})}),(0,_vitest.describe)("an unanswered approval",()=>{const t={id:"c1",toolId:"zustand",action:"setState",label:"Update the Poké Mart bag store",description:"Change a live zustand store.",reason:"This will change the app's state.",params:{storeName:"bag",data:{lines:[]}},resolve:()=>{}},e=(e={})=>(0,_transcriptPersistence.buildPayload)({messages:[msg()],history:[],answers:{},usage:{input:0,output:0,requests:0},pending:{...t,...e}});(0,_vitest.it)("survives the round trip with the exact call it asked about",()=>{const t=(0,_transcriptPersistence.parsePayload)(JSON.stringify(e()));(0,_vitest.expect)(t?.pending).toMatchObject({toolId:"zustand",action:"setState",label:"Update the Poké Mart bag store",params:{storeName:"bag",data:{lines:[]}}})}),(0,_vitest.it)("is saved again after it has already been restored once",()=>{(0,_vitest.expect)(e({restored:!0}).pending).toBeTruthy()}),(0,_vitest.it)("is dropped rather than scrubbed when the call carries a credential",()=>{const t=e({params:{key:"auth",value:"Bearer abcdefghijklmnop123456"}});(0,_vitest.expect)(t.pending).toBeNull(),(0,_vitest.expect)(JSON.stringify(t)).not.toContain("abcdefghijklmnop123456")}),(0,_vitest.it)("reads back as absent from a transcript written before it existed",()=>{const t=build([msg()]);(0,_vitest.expect)((0,_transcriptPersistence.parsePayload)(JSON.stringify(t))?.pending).toBeNull()}),(0,_vitest.it)("refuses a malformed one rather than restoring half a question",()=>{const t=JSON.stringify({...build([msg()]),pending:{toolId:"zustand"}});(0,_vitest.expect)((0,_transcriptPersistence.parsePayload)(t)?.pending).toBeNull()})}),(0,_vitest.describe)("the effect ledger",()=>{const t={id:"fx-1-1",at:1,toolId:"storage",action:"async.setItem",effect:{kind:"storage-write",toolId:"storage",action:"async.setItem",label:"Save @qa/key",key:"@qa/key",had:!0,previous:"old value"}},e=t=>(0,_transcriptPersistence.buildPayload)({messages:[msg()],history:[],answers:{},usage:{input:0,output:0,requests:0},ledger:t});(0,_vitest.it)("survives the round trip with the prior value an undo needs",()=>{const s=(0,_transcriptPersistence.parsePayload)(JSON.stringify(e([t])));(0,_vitest.expect)(s?.ledger).toHaveLength(1),(0,_vitest.expect)(s?.ledger?.[0]).toMatchObject({toolId:"storage",action:"async.setItem"})}),(0,_vitest.it)("drops an entry holding a credential rather than rewriting it",()=>{const s={...t,effect:{...t.effect,previous:"Bearer abcdefghijklmnop123456"}},a=e([s]);(0,_vitest.expect)(a.ledger).toBeUndefined(),(0,_vitest.expect)(JSON.stringify(a)).not.toContain("abcdefghijklmnop123456")}),(0,_vitest.it)("reads back as absent from a transcript written before it existed",()=>{(0,_vitest.expect)((0,_transcriptPersistence.parsePayload)(JSON.stringify(build([msg()])))?.ledger).toBeUndefined()})});
+"use strict";
+
+var _vitest = require("vitest");
+var _transcriptPersistence = require("./transcriptPersistence");
+/**
+ * What a saved conversation is allowed to contain, and what it looks like on
+ * the way back in.
+ *
+ * The transcript is on disk under a `@react_buoy` key now, which the Storage
+ * tool can read and the unauthenticated broker mirrors. Everything below is a
+ * property that keeps that trade bounded: no tool-result payloads, no
+ * credentials, no unbounded growth, and nothing that comes back claiming to
+ * still be running.
+ */
+
+const msg = (over = {}) => ({
+  id: "m1",
+  role: "assistant",
+  text: "ok",
+  toolCalls: [],
+  blocks: [],
+  ...over
+});
+const build = (messages, history = []) => (0, _transcriptPersistence.buildPayload)({
+  messages,
+  history,
+  answers: {},
+  usage: {
+    input: 0,
+    output: 0,
+    requests: 0
+  }
+});
+(0, _vitest.describe)("what reaches the disk", () => {
+  (0, _vitest.it)("never writes a tool result", () => {
+    // The payloads are the sensitive half: storage values, response bodies, a
+    // customer's record. The ROUND survives so the model can resume; what it
+    // saw does not.
+    const history = [{
+      role: "user",
+      text: "what's in the bag?"
+    }, {
+      role: "assistant",
+      text: "",
+      toolCalls: [{
+        id: "c1",
+        name: "buoy_zustand",
+        input: {}
+      }]
+    }, {
+      role: "tool-results",
+      results: [{
+        toolCallId: "c1",
+        content: '{"lines":[{"card":"4111111111111111"}]}'
+      }]
+    }, {
+      role: "assistant",
+      text: "Five items."
+    }];
+    const saved = build([msg()], history);
+    const json = JSON.stringify(saved);
+    (0, _vitest.expect)(json).not.toContain("4111111111111111");
+    // The round itself is intact, so the pairing every provider requires holds.
+    (0, _vitest.expect)(saved.history.map(m => m.role)).toEqual(["user", "assistant", "tool-results", "assistant"]);
+  });
+  (0, _vitest.it)("never writes a step's result, even when it writes the step", () => {
+    // The step survives so the trace still reads; the payload is the thing the
+    // no-tool-results-on-disk promise is about.
+    const saved = build([msg({
+      toolCalls: [{
+        id: "c1",
+        toolId: "zustand",
+        action: "getStoreState",
+        label: "Read the bag",
+        status: "ok",
+        summary: "Done",
+        params: '{"storeName":"bag"}',
+        result: '{"card":"4111111111111111"}'
+      }]
+    })]);
+    (0, _vitest.expect)(JSON.stringify(saved)).not.toContain("4111111111111111");
+    (0, _vitest.expect)(saved.messages[0].toolCalls[0].result).toBeUndefined();
+    (0, _vitest.expect)(saved.messages[0].toolCalls[0].action).toBe("getStoreState");
+  });
+  (0, _vitest.it)("scrubs credential shapes out of what the agent said", () => {
+    const saved = build([msg({
+      text: "The header was Bearer abcdefghijklmnop123456"
+    })]);
+    (0, _vitest.expect)(saved.messages[0].text).not.toContain("abcdefghijklmnop123456");
+  });
+  (0, _vitest.it)("caps a long session instead of growing a file forever", () => {
+    const many = Array.from({
+      length: 400
+    }, (_, i) => msg({
+      id: `m${i}`,
+      text: `answer ${i}`
+    }));
+    const saved = build(many);
+    (0, _vitest.expect)(saved.messages.length).toBeLessThanOrEqual(60);
+    // Newest kept, oldest dropped — the end of a session is the useful end.
+    (0, _vitest.expect)(saved.messages[saved.messages.length - 1].text).toBe("answer 399");
+  });
+  (0, _vitest.it)("drops from the oldest end until a heavy transcript fits", () => {
+    const heavy = Array.from({
+      length: 20
+    }, (_, i) => msg({
+      id: `m${i}`,
+      text: "x".repeat(40_000)
+    }));
+    const saved = (0, _transcriptPersistence.fitToCaps)({
+      v: 1,
+      savedAt: 0,
+      messages: heavy,
+      history: [],
+      answers: {},
+      usage: {
+        input: 0,
+        output: 0,
+        requests: 0
+      }
+    });
+    (0, _vitest.expect)(JSON.stringify(saved).length).toBeLessThanOrEqual(256_000);
+    (0, _vitest.expect)(saved.messages.length).toBeGreaterThan(0);
+  });
+});
+(0, _vitest.describe)("what comes back", () => {
+  (0, _vitest.it)("marks a turn the app died in as interrupted rather than blank", () => {
+    // The crash case this feature exists for. An empty bubble with no
+    // explanation reads as the model having nothing to say.
+    const saved = build([msg({
+      text: "",
+      streaming: true
+    })]);
+    (0, _vitest.expect)(saved.messages[0].streaming).toBe(false);
+    (0, _vitest.expect)(saved.messages[0].error).toMatch(/interrupted/i);
+  });
+  (0, _vitest.it)("never restores a tool call still claiming to run", () => {
+    const saved = build([msg({
+      streaming: true,
+      toolCalls: [{
+        id: "c1",
+        toolId: "storage",
+        action: "set",
+        label: "Write a key",
+        status: "running"
+      }]
+    })]);
+    (0, _vitest.expect)(saved.messages[0].toolCalls[0].status).toBe("failed");
+    (0, _vitest.expect)(saved.messages[0].toolCalls[0].summary).toBe("Interrupted");
+  });
+  (0, _vitest.it)("keeps an answer that already finished exactly as it was", () => {
+    const saved = build([msg({
+      text: "Five items.",
+      streaming: false
+    })]);
+    (0, _vitest.expect)(saved.messages[0].error).toBeUndefined();
+    (0, _vitest.expect)(saved.messages[0].text).toBe("Five items.");
+  });
+  (0, _vitest.it)("treats anything it cannot trust as no transcript at all", () => {
+    (0, _vitest.expect)((0, _transcriptPersistence.parsePayload)(null)).toBeNull();
+    (0, _vitest.expect)((0, _transcriptPersistence.parsePayload)("not json")).toBeNull();
+    // An older shape is dropped, not coerced — a half-read transcript is worse
+    // than a missing one.
+    (0, _vitest.expect)((0, _transcriptPersistence.parsePayload)(JSON.stringify({
+      v: 0,
+      messages: [msg()]
+    }))).toBeNull();
+    (0, _vitest.expect)((0, _transcriptPersistence.parsePayload)(JSON.stringify({
+      v: 1,
+      messages: []
+    }))).toBeNull();
+  });
+  (0, _vitest.it)("round-trips a real conversation", () => {
+    const saved = build([msg({
+      role: "user",
+      text: "hi"
+    }), msg({
+      id: "m2",
+      text: "hello"
+    })]);
+    const back = (0, _transcriptPersistence.parsePayload)(JSON.stringify(saved));
+    (0, _vitest.expect)(back?.messages.map(m => m.text)).toEqual(["hi", "hello"]);
+  });
+});
+
+/**
+ * The card the user never answered.
+ *
+ * An unanswered question that disappears on reload reads as consent nobody
+ * gave — nothing was tapped, so as far as the user is concerned the change is
+ * still waiting for them.
+ */
+(0, _vitest.describe)("an unanswered approval", () => {
+  const pending = {
+    id: "c1",
+    toolId: "zustand",
+    action: "setState",
+    label: "Update the Poké Mart bag store",
+    description: "Change a live zustand store.",
+    reason: "This will change the app's state.",
+    params: {
+      storeName: "bag",
+      data: {
+        lines: []
+      }
+    },
+    resolve: () => {}
+  };
+  const withPending = (over = {}) => (0, _transcriptPersistence.buildPayload)({
+    messages: [msg()],
+    history: [],
+    answers: {},
+    usage: {
+      input: 0,
+      output: 0,
+      requests: 0
+    },
+    pending: {
+      ...pending,
+      ...over
+    }
+  });
+  (0, _vitest.it)("survives the round trip with the exact call it asked about", () => {
+    const back = (0, _transcriptPersistence.parsePayload)(JSON.stringify(withPending()));
+    // The params are what makes the restored card answerable at all: the turn
+    // that asked is gone, so Allow has to re-dispatch this itself.
+    (0, _vitest.expect)(back?.pending).toMatchObject({
+      toolId: "zustand",
+      action: "setState",
+      label: "Update the Poké Mart bag store",
+      params: {
+        storeName: "bag",
+        data: {
+          lines: []
+        }
+      }
+    });
+  });
+  (0, _vitest.it)("is saved again after it has already been restored once", () => {
+    // Reloading twice without answering must not be the thing that finally
+    // loses the question.
+    (0, _vitest.expect)(withPending({
+      restored: true
+    }).pending).toBeTruthy();
+  });
+  (0, _vitest.it)("is dropped rather than scrubbed when the call carries a credential", () => {
+    // Scrubbing would change the call: a redacted token written back is not
+    // the change the user was shown. So the card is lost instead — an action
+    // carrying a credential is the one that must not re-run itself unattended.
+    const saved = withPending({
+      params: {
+        key: "auth",
+        value: "Bearer abcdefghijklmnop123456"
+      }
+    });
+    (0, _vitest.expect)(saved.pending).toBeNull();
+    (0, _vitest.expect)(JSON.stringify(saved)).not.toContain("abcdefghijklmnop123456");
+  });
+  (0, _vitest.it)("reads back as absent from a transcript written before it existed", () => {
+    const old = build([msg()]);
+    (0, _vitest.expect)((0, _transcriptPersistence.parsePayload)(JSON.stringify(old))?.pending).toBeNull();
+  });
+  (0, _vitest.it)("refuses a malformed one rather than restoring half a question", () => {
+    const raw = JSON.stringify({
+      ...build([msg()]),
+      pending: {
+        toolId: "zustand"
+      }
+    });
+    (0, _vitest.expect)((0, _transcriptPersistence.parsePayload)(raw)?.pending).toBeNull();
+  });
+});
+
+/**
+ * The undo bar, across a restart.
+ *
+ * The ledger is the ONLY undo surface and it used to die with the JS context:
+ * the transcript came back with its "saved" lines and receipt cards intact
+ * while the bar vanished and the changes stayed applied.
+ */
+(0, _vitest.describe)("the effect ledger", () => {
+  const entry = {
+    id: "fx-1-1",
+    at: 1,
+    toolId: "storage",
+    action: "async.setItem",
+    effect: {
+      kind: "storage-write",
+      toolId: "storage",
+      action: "async.setItem",
+      label: "Save @qa/key",
+      key: "@qa/key",
+      had: true,
+      previous: "old value"
+    }
+  };
+  const withLedger = entries => (0, _transcriptPersistence.buildPayload)({
+    messages: [msg()],
+    history: [],
+    answers: {},
+    usage: {
+      input: 0,
+      output: 0,
+      requests: 0
+    },
+    ledger: entries
+  });
+  (0, _vitest.it)("survives the round trip with the prior value an undo needs", () => {
+    const back = (0, _transcriptPersistence.parsePayload)(JSON.stringify(withLedger([entry])));
+    (0, _vitest.expect)(back?.ledger).toHaveLength(1);
+    (0, _vitest.expect)(back?.ledger?.[0]).toMatchObject({
+      toolId: "storage",
+      action: "async.setItem"
+    });
+  });
+  (0, _vitest.it)("drops an entry holding a credential rather than rewriting it", () => {
+    // Scrubbing would make the undo restore "[redacted]" over the real value.
+    const secret = {
+      ...entry,
+      effect: {
+        ...entry.effect,
+        previous: "Bearer abcdefghijklmnop123456"
+      }
+    };
+    const saved = withLedger([secret]);
+    (0, _vitest.expect)(saved.ledger).toBeUndefined();
+    (0, _vitest.expect)(JSON.stringify(saved)).not.toContain("abcdefghijklmnop123456");
+  });
+  (0, _vitest.it)("reads back as absent from a transcript written before it existed", () => {
+    (0, _vitest.expect)((0, _transcriptPersistence.parsePayload)(JSON.stringify(build([msg()])))?.ledger).toBeUndefined();
+  });
+});
+//# sourceMappingURL=transcriptPersistence.test.js.map