@burdenoff/fe-libs 2026.1027.9 → 2026.1027.11

package/dist/shared/agent-tools/adapters/assistant.d.ts

@@ -38,7 +38,20 @@ export interface ClientToolOffer {
     tools: readonly AnyDefinedAgentTool[];
     manifest: ClientToolManifestEntry[];
 }
-export declare function offerClientTools(tools?: readonly AnyDefinedAgentTool[]): ClientToolOffer;
+export declare function offerClientTools(options: {
+    writeCapable: boolean;
+}, tools?: readonly AnyDefinedAgentTool[]): ClientToolOffer;
+/**
+ * Whether a mode that must not change data may still offer `tool`: it reads
+ * (`readOnly`) or only moves the person around the app (`navigation`).
+ *
+ * ★ BOFF-9908: Ask is promised read-only, so it is offered nothing else — not
+ * the confirmation-gated actions, not the canvas edits, and not the generic
+ * `ui_click` / `ui_fill` / `ui_select` / `ui_press_key`, which can press any
+ * ordinary button. The runner executes only offered tools, so leaving a tool
+ * out of the offer is what keeps the mode read-only.
+ */
+export declare function isReadOnlyModeTool(tool: AnyDefinedAgentTool): boolean;
 /**
  * The tools registered right now, as the prompt's `clientTools`. Product tools
  * come first, then the shared ones (`app_`, `ui_`), so if the cap is reached
@@ -60,7 +73,7 @@ export declare const CLIENT_TOOL_ORPHAN_MS = 20000;
 /** The well-formed entries of an untrusted `clientToolRequests` value. */
 export declare function parseClientToolRequests(raw: unknown): ClientToolRequest[];
 export interface ClientToolRunnerOptions {
-    /** The definitions this turn advertised (`offerClientTools().tools`). */
+    /** The definitions this turn advertised (`offerClientTools(...).tools`). */
     tools: readonly AnyDefinedAgentTool[];
     /** Post one result to the sandbox. Rejects when the post did not land. */
     post: (callId: string, result: AgentToolResult) => Promise<void>;

package/dist/shared/agent-tools/adapters/assistant.js

@@ -18,14 +18,17 @@ function c(e) {
 		}
 	};
 }
-function l(e = r()) {
-	let t = u(e), n = new Set(t.map((e) => e.name));
+function l(e, t = r()) {
+	let n = e.writeCapable ? t : t.filter(u), i = d(n), a = new Set(i.map((e) => e.name));
 	return {
-		tools: e.filter((e) => n.has(e.name)),
-		manifest: t
+		tools: n.filter((e) => a.has(e.name)),
+		manifest: i
 	};
 }
-function u(e = r()) {
+function u(e) {
+	return e.annotations?.readOnly === !0 || e.annotations?.navigation === !0;
+}
+function d(e = r()) {
 	let n = (e) => e.startsWith("app_") || e.startsWith("ui_"), i = [...e.filter((e) => !n(e.name)), ...e.filter((e) => n(e.name))], a = [], o = 2;
 	for (let e of i) {
 		let n = c(e), r = s.encode(JSON.stringify(n)).length + 1;
@@ -37,14 +40,14 @@ function u(e = r()) {
 	}
 	return a;
 }
-var d = /^ct_[0-9a-f]{32}$/, f = 4, p = 2e4;
-function m(e) {
+var f = /^ct_[0-9a-f]{32}$/, p = 4, m = 2e4;
+function h(e) {
 	if (!Array.isArray(e)) return [];
 	let t = [];
-	for (let n of e.slice(0, f)) {
+	for (let n of e.slice(0, p)) {
 		if (typeof n != "object" || !n || Array.isArray(n)) continue;
 		let { callId: e, tool: r, input: i } = n;
-		typeof e != "string" || !d.test(e) || typeof r != "string" || r.length === 0 || r.length > 64 || typeof i != "object" || !i || Array.isArray(i) || t.push({
+		typeof e != "string" || !f.test(e) || typeof r != "string" || r.length === 0 || r.length > 64 || typeof i != "object" || !i || Array.isArray(i) || t.push({
 			callId: e,
 			tool: r,
 			input: i
@@ -52,7 +55,7 @@ function m(e) {
 	}
 	return t;
 }
-function h(r) {
+function g(r) {
 	let a = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Set(), s = !1, c = r.now ?? Date.now, l = r.orphanMs ?? 2e4, u = c(), d, f = () => {
 		d !== void 0 && clearInterval(d), d = void 0;
 	}, p = () => {
@@ -63,7 +66,7 @@ function h(r) {
 				f();
 			}
 		}, Math.max(1e3, Math.floor(l / 4))));
-	}, h = () => {
+	}, m = () => {
 		if (!r.onActivity) return;
 		let e = [...a.keys()].map((e) => g.get(e)).filter((e) => typeof e == "string");
 		r.onActivity(e.length > 0 ? e.join(", ") : null);
@@ -81,20 +84,20 @@ function h(r) {
 			return;
 		}
 		let l = new AbortController();
-		a.set(t.callId, l), g.set(t.callId, c.title), h(), p(), i(c, t.input, {
+		a.set(t.callId, l), g.set(t.callId, c.title), m(), p(), i(c, t.input, {
 			initiator: "assistant",
 			signal: l.signal
 		}).then((e) => {
 			if (!l.signal.aborted) return _(t.callId, e);
 		}).finally(() => {
-			a.delete(t.callId), g.delete(t.callId), h();
+			a.delete(t.callId), g.delete(t.callId), m();
 		});
 	};
 	return {
 		receive(e) {
 			if (s) return;
 			u = c();
-			let t = m(e), n = new Set(t.map((e) => e.callId));
+			let t = h(e), n = new Set(t.map((e) => e.callId));
 			for (let [e, t] of a) n.has(e) || t.abort();
 			for (let e of t) o.has(e.callId) || v(e);
 		},
@@ -107,4 +110,4 @@ function h(r) {
 	};
 }
 //#endregion
-export { a as CLIENT_TOOL_MANIFEST_MAX_BYTES, o as CLIENT_TOOL_MANIFEST_MAX_TOOLS, p as CLIENT_TOOL_ORPHAN_MS, u as buildClientToolManifest, h as createClientToolRunner, l as offerClientTools, m as parseClientToolRequests };
+export { a as CLIENT_TOOL_MANIFEST_MAX_BYTES, o as CLIENT_TOOL_MANIFEST_MAX_TOOLS, m as CLIENT_TOOL_ORPHAN_MS, d as buildClientToolManifest, g as createClientToolRunner, u as isReadOnlyModeTool, l as offerClientTools, h as parseClientToolRequests };

package/dist/shared/agent-tools/shell/shellTools.js

@@ -110,6 +110,7 @@ function p(e) {
 			title: "Open a page",
 			description: "Opens a page of the app in the person's tab. Pass a page label from app_list_pages (e.g. \"Runs\") or an in-app path starting with \"/\". Refused while the current page has unsaved changes.",
 			input: i.strictObject({ destination: i.string().trim().min(1).max(200).describe("A page label from app_list_pages, or an in-app path starting with \"/\".") }),
+			annotations: { navigation: !0 },
 			execute: ({ destination: t }) => {
 				let r = e();
 				d(r);
@@ -133,6 +134,7 @@ function p(e) {
 				"dark",
 				"system"
 			]).describe("The appearance to switch to.") }),
+			annotations: { navigation: !0 },
 			execute: ({ mode: t }) => {
 				let { setThemeMode: r } = e();
 				if (!r) throw new n("NEEDS_USER", "This app does not let the theme be changed here.");

package/dist/shared/agent-tools/types.d.ts

@@ -26,6 +26,13 @@ export interface AgentToolAnnotations {
     untrustedContent?: boolean;
     /** The tool changes something that matters: it is confirmed before it runs. */
     consequential?: boolean;
+    /**
+     * The tool changes only where the person is in the app (the page, the
+     * appearance), never their data. A read-only assistant mode offers it along
+     * with the `readOnly` tools (`offerClientTools`). Not a WebMCP hint: it is
+     * never sent to the browser or to the assistant.
+     */
+    navigation?: boolean;
 }
 /** What the confirmation dialog says. Plain text — never markup. */
 export interface AgentToolConfirmation {