@buoy-gg/ask-buoy 7.0.40 → 7.0.42

package/lib/module/sync/askBuoySyncAdapter.js

@@ -1,148 +1 @@
-"use strict";
-
-/**
- * The sync adapter, so Buoy Desktop and MCP can see what Ask Buoy is doing.
- *
- * Read-heavy on purpose. There is no `send` action: letting a remote client
- * put words in the agent's mouth would mean anyone who can reach the broker —
- * which has no authentication at all, binds 0.0.0.0, and accepts any client
- * calling itself "Dashboard" — could drive a mutating agent on a tester's
- * device. The chat is initiated on-device, by a person, full stop.
- *
- * `undoAll` IS exposed, because the asymmetry is deliberate: putting things
- * back is the safe direction, and a dev watching from the desktop should be
- * able to clean up a device without walking over to it.
- *
- * The transcript is redacted before it crosses the wire. Action results the
- * agent read can contain storage values and response bodies, and this socket
- * broadcasts to every connected dashboard — it already leaks license keys the
- * same way.
- */
-import { resetConversation } from "../store/resetConversation";
-import { dispatchToolAction, redactForWire } from "./wire";
-import { isReversible } from "@buoy-gg/agent-core";
-import { askBuoyStore } from "../store/askBuoyStore";
-export const ASK_BUOY_ADAPTER_VERSION = 1;
-export const askBuoySyncAdapter = {
-  version: ASK_BUOY_ADAPTER_VERSION,
-  async dispose(cleanup) {
-    const ledger = askBuoyStore.getLedger();
-    for (const entry of ledger?.list() ?? []) {
-      if (entry.undoneAt) continue;
-      if (entry.effect.kind === "network-override") {
-        await cleanup("network", "deleteOverrideRule", {
-          id: entry.effect.ruleId
-        });
-      }
-      // Impersonation removes its own header without clearing host caches.
-      // Completed storage/query/state writes remain deliberate developer edits.
-    }
-  },
-  getSnapshot() {
-    const state = askBuoyStore.getState();
-    const ledger = askBuoyStore.getLedger();
-    const entries = ledger?.list() ?? [];
-    const outstanding = entries.filter(e => !e.undoneAt);
-    return {
-      version: ASK_BUOY_ADAPTER_VERSION,
-      busy: state.busy,
-      configured: state.configured,
-      notice: state.notice,
-      messageCount: state.messages.length,
-      // Only the shape of the conversation, never tool payloads.
-      messages: state.messages.map(m => ({
-        id: m.id,
-        role: m.role,
-        text: redactForWire(m.text),
-        streaming: !!m.streaming,
-        toolCalls: m.toolCalls.map(c => ({
-          toolId: c.toolId,
-          action: c.action,
-          status: c.status
-        }))
-      })),
-      // Session token totals, so a desktop/MCP observer can meter cost.
-      usage: state.usage,
-      pendingApproval: state.pending ? {
-        toolId: state.pending.toolId,
-        action: state.pending.action,
-        label: state.pending.label
-      } : null,
-      changes: {
-        // Transients (navigation, taps) are one-shot actions, not changes —
-        // same rule as the on-device bar, so desktop and device tell one story.
-        reversible: outstanding.filter(e => isReversible(e.effect)).length,
-        permanent: outstanding.filter(e => e.effect.kind !== "transient" && !isReversible(e.effect)).length,
-        transients: outstanding.filter(e => e.effect.kind === "transient").length,
-        items: outstanding.map(e => ({
-          kind: e.effect.kind,
-          label: e.effect.label
-        }))
-      }
-    };
-  },
-  subscribe(onChange) {
-    const offStore = askBuoyStore.subscribe(onChange);
-    const offLedger = askBuoyStore.getLedger()?.subscribe(onChange);
-    return () => {
-      offStore();
-      offLedger?.();
-    };
-  },
-  actions: {
-    /** What the agent changed, and whether it can be put back. */
-    listChanges: () => {
-      const entries = askBuoyStore.getLedger()?.list() ?? [];
-      return entries.filter(e => !e.undoneAt).map(e => ({
-        id: e.id,
-        at: e.at,
-        toolId: e.toolId,
-        action: e.action,
-        kind: e.effect.kind,
-        label: e.effect.label,
-        reversible: isReversible(e.effect)
-      }));
-    },
-    /** Put back everything that can be put back. Safe direction only. */
-    undoAll: async () => {
-      const ledger = askBuoyStore.getLedger();
-      if (!ledger) return {
-        ok: false,
-        error: "No Ask Buoy session on this device."
-      };
-      const outcome = await ledger.revertAll(dispatchToolAction);
-      return {
-        ok: true,
-        ...outcome
-      };
-    },
-    /**
-     * Undo what can be undone, then clear the transcript and the ledger.
-     *
-     * The same path as the sheet's "New conversation" (resetConversation.ts).
-     * This action used to clear unconditionally — no question, no undo — so a
-     * desktop click could drop the only undo record for changes still live on
-     * the tester's phone. Now it refuses to clear when a revert fails and says
-     * what is still applied; the dashboard decides whether to clear anyway
-     * by calling `undoAll` first or accepting the kept conversation.
-     */
-    reset: async () => {
-      const outcome = await resetConversation({
-        dispatch: dispatchToolAction,
-        undoFirst: true
-      });
-      if (!outcome.cleared) {
-        return {
-          ok: false,
-          error: `Couldn't undo ${outcome.failed.length} change${outcome.failed.length === 1 ? "" : "s"} — conversation kept.`,
-          failed: outcome.failed
-        };
-      }
-      return {
-        ok: true,
-        reverted: outcome.reverted
-      };
-    }
-  }
-};
-//# sourceMappingURL=askBuoySyncAdapter.js.map
+"use strict";import{resetConversation as d}from"../store/resetConversation";import{dispatchToolAction as l,redactForWire as c}from"./wire";import{isReversible as a}from"@buoy-gg/agent-core";import{askBuoyStore as r}from"../store/askBuoyStore";export const ASK_BUOY_ADAPTER_VERSION=1;export const askBuoySyncAdapter={version:ASK_BUOY_ADAPTER_VERSION,async dispose(e){const t=r.getLedger();for(const o of t?.list()??[]){if(o.undoneAt)continue;if(o.effect.kind==="network-override"){await e("network","deleteOverrideRule",{id:o.effect.ruleId})}}},getSnapshot(){const e=r.getState();const t=r.getLedger();const o=t?.list()??[];const s=o.filter(n=>!n.undoneAt);return{version:ASK_BUOY_ADAPTER_VERSION,busy:e.busy,configured:e.configured,notice:e.notice,messageCount:e.messages.length,messages:e.messages.map(n=>({id:n.id,role:n.role,text:c(n.text),streaming:!!n.streaming,toolCalls:n.toolCalls.map(i=>({toolId:i.toolId,action:i.action,status:i.status}))})),usage:e.usage,pendingApproval:e.pending?{toolId:e.pending.toolId,action:e.pending.action,label:e.pending.label}:null,changes:{reversible:s.filter(n=>a(n.effect)).length,permanent:s.filter(n=>n.effect.kind!=="transient"&&!a(n.effect)).length,transients:s.filter(n=>n.effect.kind==="transient").length,items:s.map(n=>({kind:n.effect.kind,label:n.effect.label}))}}},subscribe(e){const t=r.subscribe(e);const o=r.getLedger()?.subscribe(e);return()=>{t();o?.()}},actions:{listChanges:()=>{const e=r.getLedger()?.list()??[];return e.filter(t=>!t.undoneAt).map(t=>({id:t.id,at:t.at,toolId:t.toolId,action:t.action,kind:t.effect.kind,label:t.effect.label,reversible:a(t.effect)}))},undoAll:async()=>{const e=r.getLedger();if(!e)return{ok:false,error:"No Ask Buoy session on this device."};const t=await e.revertAll(l);return{ok:true,...t}},reset:async()=>{const e=await d({dispatch:l,undoFirst:true});if(!e.cleared){return{ok:false,error:`Couldn't undo ${e.failed.length} change${e.failed.length===1?"":"s"} \u2014 conversation kept.`,failed:e.failed}}return{ok:true,reverted:e.reverted}}}};

package/lib/module/sync/askBuoySyncAdapter.test.js

@@ -1,140 +1 @@
-"use strict";
-
-/**
- * What Ask Buoy is allowed to put on the broker wire, and what it refuses to
- * accept from it.
- *
- * Both directions matter. The broker has no authentication, accepts any client
- * that calls itself "Dashboard", and forwards to every connected dashboard — it
- * already broadcasts license keys that way. So: no tool results go out, and no
- * remote client can make the agent say anything.
- */
-import { beforeEach, describe, expect, it } from "vitest";
-import { EffectLedger } from "@buoy-gg/agent-core";
-import { askBuoySyncAdapter } from "./askBuoySyncAdapter";
-import { redactForWire } from "./wire";
-import { askBuoyStore } from "../store/askBuoyStore";
-beforeEach(() => {
-  askBuoyStore.reset();
-  askBuoyStore.setLedger(null);
-});
-describe("the wire surface", () => {
-  it("exposes no action that can make the agent talk", () => {
-    // A `send` here would let anyone on the LAN drive a mutating agent on a
-    // tester's phone. The conversation starts on-device, by a person.
-    const actions = Object.keys(askBuoySyncAdapter.actions);
-    expect(actions).not.toContain("send");
-    expect(actions).not.toContain("ask");
-    expect(actions).not.toContain("prompt");
-    expect(actions.sort()).toEqual(["listChanges", "reset", "undoAll"]);
-  });
-  it("puts the shape of the conversation on the wire, never tool payloads", () => {
-    askBuoyStore.addUser("what is in storage");
-    const id = askBuoyStore.startAssistant();
-    askBuoyStore.applyEvent(id, {
-      type: "tool-start",
-      id: "c1",
-      toolId: "storage",
-      action: "async.getItem",
-      label: "Read session",
-      description: "Read one AsyncStorage key",
-      params: {
-        key: "session"
-      },
-      effect: "read"
-    });
-    askBuoyStore.applyEvent(id, {
-      type: "tool-end",
-      id: "c1",
-      ok: true,
-      durationMs: 12,
-      summary: "eyJhbGciOiJIUzI1NiJ9.super.secret"
-    });
-    const snap = askBuoySyncAdapter.getSnapshot();
-    const call = snap.messages[1].toolCalls[0];
-    expect(call).toEqual({
-      toolId: "storage",
-      action: "async.getItem",
-      status: "ok"
-    });
-    // The result summary is not on the wire at all — there is no field for it.
-    expect(JSON.stringify(snap)).not.toContain("super.secret");
-  });
-  it("redacts credentials that made it into the assistant's prose", () => {
-    askBuoyStore.addUser("show me the auth header");
-    const id = askBuoyStore.startAssistant();
-    askBuoyStore.applyEvent(id, {
-      type: "text",
-      delta: "It sends Authorization: Bearer abcdef0123456789ghijkl to the API."
-    });
-    const snap = askBuoySyncAdapter.getSnapshot();
-    expect(JSON.stringify(snap)).not.toContain("abcdef0123456789ghijkl");
-  });
-  it("reports reversible and permanent changes separately", () => {
-    const ledger = new EffectLedger();
-    askBuoyStore.setLedger(ledger);
-    ledger.record("storage", "async.setItem", {
-      kind: "storage-write",
-      toolId: "storage",
-      action: "async.setItem",
-      key: "points",
-      before: "240",
-      label: "Set points to 1500"
-    });
-    ledger.record("perf-monitor", "clearAll", {
-      kind: "transient",
-      label: "Cleared samples"
-    });
-    // A store write with no captured prior state: recorded, visible, and
-    // NOT something Undo can deliver — it must count as permanent.
-    ledger.record("zustand", "setState", {
-      kind: "state-write",
-      toolId: "zustand",
-      action: "setState",
-      label: "Update the cart store"
-    });
-    const snap = askBuoySyncAdapter.getSnapshot();
-    expect(snap.changes.reversible).toBe(1);
-    // The transient is an ACTION, not a change — it must not inflate
-    // "permanent" (that read "Changed this app · N permanent" after a
-    // read-only tour). It is still reported, in its own count.
-    expect(snap.changes.permanent).toBe(1);
-    expect(snap.changes.transients).toBe(1);
-  });
-});
-describe("redactForWire", () => {
-  it("removes bearer tokens, JWTs, api keys and license keys", () => {
-    const cases = ["Authorization: Bearer abcdefghijklmnop123456", "token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9abcdefgh", "key sk-abcdefghijklmnop1234", "license BUOY-ABCD-1234-EFGH", 'the header is "x-api-key": "supersecretvalue"'];
-    for (const input of cases) {
-      expect(redactForWire(input)).toContain("removed]");
-    }
-  });
-  it("leaves ordinary prose alone", () => {
-    const text = "The /menu call returned 200 with 12 items and the burger was in stock.";
-    expect(redactForWire(text)).toBe(text);
-  });
-});
-describe("undo from the desktop", () => {
-  it("is allowed, because putting things back is the safe direction", async () => {
-    const ledger = new EffectLedger();
-    askBuoyStore.setLedger(ledger);
-    const store = new Map([["points", "1500"]]);
-    ledger.record("storage", "async.setItem", {
-      kind: "storage-write",
-      toolId: "storage",
-      action: "async.setItem",
-      key: "points",
-      before: "240",
-      label: "Set points to 1500"
-    });
-
-    // The adapter dispatches through the real seam; stub it at the ledger.
-    await ledger.revertAll(async (_t, action, params) => {
-      const p = params;
-      if (action === "async.setItem") store.set(p.key, p.value);
-      return undefined;
-    });
-    expect(store.get("points")).toBe("240");
-  });
-});
-//# sourceMappingURL=askBuoySyncAdapter.test.js.map
+"use strict";import{beforeEach as g,describe as r,expect as s,it as a}from"vitest";import{EffectLedger as d}from"@buoy-gg/agent-core";import{askBuoySyncAdapter as n}from"./askBuoySyncAdapter";import{redactForWire as l}from"./wire";import{askBuoyStore as o}from"../store/askBuoyStore";g(()=>{o.reset();o.setLedger(null)});r("the wire surface",()=>{a("exposes no action that can make the agent talk",()=>{const e=Object.keys(n.actions);s(e).not.toContain("send");s(e).not.toContain("ask");s(e).not.toContain("prompt");s(e.sort()).toEqual(["listChanges","reset","undoAll"])});a("puts the shape of the conversation on the wire, never tool payloads",()=>{o.addUser("what is in storage");const e=o.startAssistant();o.applyEvent(e,{type:"tool-start",id:"c1",toolId:"storage",action:"async.getItem",label:"Read session",description:"Read one AsyncStorage key",params:{key:"session"},effect:"read"});o.applyEvent(e,{type:"tool-end",id:"c1",ok:true,durationMs:12,summary:"eyJhbGciOiJIUzI1NiJ9.super.secret"});const t=n.getSnapshot();const i=t.messages[1].toolCalls[0];s(i).toEqual({toolId:"storage",action:"async.getItem",status:"ok"});s(JSON.stringify(t)).not.toContain("super.secret")});a("redacts credentials that made it into the assistant's prose",()=>{o.addUser("show me the auth header");const e=o.startAssistant();o.applyEvent(e,{type:"text",delta:"It sends Authorization: Bearer abcdef0123456789ghijkl to the API."});const t=n.getSnapshot();s(JSON.stringify(t)).not.toContain("abcdef0123456789ghijkl")});a("reports reversible and permanent changes separately",()=>{const e=new d;o.setLedger(e);e.record("storage","async.setItem",{kind:"storage-write",toolId:"storage",action:"async.setItem",key:"points",before:"240",label:"Set points to 1500"});e.record("perf-monitor","clearAll",{kind:"transient",label:"Cleared samples"});e.record("zustand","setState",{kind:"state-write",toolId:"zustand",action:"setState",label:"Update the cart store"});const t=n.getSnapshot();s(t.changes.reversible).toBe(1);s(t.changes.permanent).toBe(1);s(t.changes.transients).toBe(1)})});r("redactForWire",()=>{a("removes bearer tokens, JWTs, api keys and license keys",()=>{const e=["Authorization: Bearer abcdefghijklmnop123456","token eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9abcdefgh","key sk-abcdefghijklmnop1234","license BUOY-ABCD-1234-EFGH",'the header is "x-api-key": "supersecretvalue"'];for(const t of e){s(l(t)).toContain("removed]")}});a("leaves ordinary prose alone",()=>{const e="The /menu call returned 200 with 12 items and the burger was in stock.";s(l(e)).toBe(e)})});r("undo from the desktop",()=>{a("is allowed, because putting things back is the safe direction",async()=>{const e=new d;o.setLedger(e);const t=new Map([["points","1500"]]);e.record("storage","async.setItem",{kind:"storage-write",toolId:"storage",action:"async.setItem",key:"points",before:"240",label:"Set points to 1500"});await e.revertAll(async(i,p,h)=>{const c=h;if(p==="async.setItem")t.set(c.key,c.value);return void 0});s(t.get("points")).toBe("240")})});

package/lib/module/sync/wire.js

@@ -1,47 +1 @@
-"use strict";
-
-/**
- * What the sync adapter is allowed to put on the broker wire.
- *
- * The broker has no authentication, `cors.origin: "*"`, binds every interface,
- * and forwards to every connected dashboard — it already broadcasts each
- * device's license key to every socket. A chat transcript is not a safe thing
- * to add to that channel unfiltered: the agent reads storage values, network
- * response bodies and user records, and any of it can end up quoted in an
- * answer.
- *
- * So text crossing the wire is scrubbed for the shapes that are unambiguously
- * credentials. This is a reduction in blast radius, not a guarantee — the real
- * guarantee is that tool RESULTS never cross at all (see askBuoySyncAdapter).
- */
-export { dispatchToolAction } from "@buoy-gg/shared-ui";
-const PATTERNS = [{
-  re: /\bBearer\s+[A-Za-z0-9._~+/-]{12,}=*/gi,
-  label: "[bearer token removed]"
-}, {
-  re: /\beyJ[A-Za-z0-9._-]{20,}/g,
-  label: "[jwt removed]"
-}, {
-  re: /\bsk-[A-Za-z0-9_-]{16,}/g,
-  label: "[api key removed]"
-}, {
-  re: /\bBUOY-[A-Z0-9-]{8,}/g,
-  label: "[license key removed]"
-},
-// Common "key: value" credential shapes in a quoted payload.
-{
-  re: /("|')?(authorization|x-api-key|api[_-]?key|password|secret|access_token|refresh_token)\1?\s*[:=]\s*("|')?[^\s"',}]{6,}/gi,
-  label: "[credential removed]"
-}];
-export function redactForWire(text) {
-  if (!text) return text;
-  let out = text;
-  for (const {
-    re,
-    label
-  } of PATTERNS) {
-    out = out.replace(re, label);
-  }
-  return out;
-}
-//# sourceMappingURL=wire.js.map
+"use strict";export{dispatchToolAction}from"@buoy-gg/shared-ui";const t=[{re:/\bBearer\s+[A-Za-z0-9._~+/-]{12,}=*/gi,label:"[bearer token removed]"},{re:/\beyJ[A-Za-z0-9._-]{20,}/g,label:"[jwt removed]"},{re:/\bsk-[A-Za-z0-9_-]{16,}/g,label:"[api key removed]"},{re:/\bBUOY-[A-Z0-9-]{8,}/g,label:"[license key removed]"},{re:/("|')?(authorization|x-api-key|api[_-]?key|password|secret|access_token|refresh_token)\1?\s*[:=]\s*("|')?[^\s"',}]{6,}/gi,label:"[credential removed]"}];export function redactForWire(e){if(!e)return e;let r=e;for(const{re:o,label:a}of t){r=r.replace(o,a)}return r}

package/lib/module/types.js

@@ -1,4 +1 @@
-"use strict";
-
-export {};
-//# sourceMappingURL=types.js.map
+"use strict";export{};

package/lib/typescript/blocks/context.d.ts

@@ -8,6 +8,7 @@
  */
 import { type ReactNode } from "react";
 import type { BlockAction, BlockAnswer } from "@buoy-gg/agent-core";
+import type { RuleState } from "./ruleStates";
 export interface BlockHandlers {
     /** An Ask block was answered. Becomes the next user message. */
     answer: (answer: BlockAnswer) => void;
@@ -25,6 +26,8 @@ export interface BlockHandlers {
         minimize?: boolean;
         dispatch?: boolean;
     };
+    /** Override rules changed since their cards were drawn, by rule id. See ruleStates.ts. */
+    rules?: Record<string, RuleState>;
 }
 export declare function BlockHandlersProvider({ value, children, }: {
     value: BlockHandlers;

package/lib/typescript/blocks/ruleStates.d.ts

@@ -0,0 +1,15 @@
+/**
+ * What the ledger knows about each override rule since its card was drawn.
+ *
+ * A rule card is a receipt: it records the rule as the call left it. Undo
+ * then deleted the rule and the card kept saying ON, with a "Turn off" button
+ * aimed at a rule that no longer existed. The ledger has the later facts, so
+ * the card reads them from here instead of trusting its own snapshot.
+ */
+import type { LedgerEntry } from "@buoy-gg/agent-core";
+export interface RuleState {
+    enabled?: boolean;
+    deleted?: boolean;
+}
+export declare function ruleStatesFrom(entries: LedgerEntry[]): Record<string, RuleState>;
+//# sourceMappingURL=ruleStates.d.ts.map

package/lib/typescript/components/ChangesBar.d.ts

@@ -1,9 +1,10 @@
-import { type EffectLedger } from "@buoy-gg/agent-core";
+import { type EffectLedger, type LedgerEntry } from "@buoy-gg/agent-core";
 export interface ChangesBarProps {
     ledger: EffectLedger | null;
     onUndoAll: () => void;
     expanded: boolean;
     onToggle: () => void;
 }
+export declare function useLedgerEntries(ledger: EffectLedger | null): LedgerEntry[];
 export declare function ChangesBar({ ledger, onUndoAll, expanded, onToggle }: ChangesBarProps): import("react").JSX.Element | null;
 //# sourceMappingURL=ChangesBar.d.ts.map

package/lib/typescript/sync/askBuoySyncAdapter.d.ts

@@ -35,7 +35,7 @@ export declare const askBuoySyncAdapter: {
             permanent: number;
             transients: number;
             items: {
-                kind: "network-override" | "impersonation" | "storage-write" | "query-write" | "state-write" | "transient";
+                kind: "network-override" | "impersonation" | "storage-write" | "query-write" | "inverse-call" | "state-write" | "transient";
                 label: string;
             }[];
         };
@@ -48,7 +48,7 @@ export declare const askBuoySyncAdapter: {
             at: number;
             toolId: string;
             action: string;
-            kind: "network-override" | "impersonation" | "storage-write" | "query-write" | "state-write" | "transient";
+            kind: "network-override" | "impersonation" | "storage-write" | "query-write" | "inverse-call" | "state-write" | "transient";
             label: string;
             reversible: boolean;
         }[];