@burtson-labs/bandit-engine 2.0.102 → 2.0.104

package/dist/{chat-PMO3WTM4.mjs → chat-TIX4XHMD.mjs}

@@ -1,6 +1,6 @@
 import {
   chat_default
-} from "./chunk-R3HBSHLE.mjs";
+} from "./chunk-EGIUL7QB.mjs";
 import "./chunk-ONQMRE2G.mjs";
 import "./chunk-KYC7CC6C.mjs";
 import "./chunk-BN3D45E2.mjs";
@@ -13,4 +13,4 @@ import "./chunk-BJTO5JO5.mjs";
 export {
   chat_default as default
 };
-//# sourceMappingURL=chat-PMO3WTM4.mjs.map
+//# sourceMappingURL=chat-TIX4XHMD.mjs.map

package/dist/{chunk-7NXSMMCU.mjs → chunk-BJOPAWGI.mjs}

@@ -9738,7 +9738,7 @@ var MCPToolsTabV2_default = MCPToolsTabV2;
 
 // src/management/management.tsx
 import { jsx as jsx14, jsxs as jsxs14 } from "react/jsx-runtime";
-var preloadChatPage = () => import("./chat-PMO3WTM4.mjs");
+var preloadChatPage = () => import("./chat-TIX4XHMD.mjs");
 var buildCapabilitiesUrl = (gatewayApiUrl) => {
   const trimmed = gatewayApiUrl.replace(/\/$/, "");
   if (trimmed.endsWith("/api")) {
@@ -11104,4 +11104,4 @@ export {
   useGatewayMemory,
   management_default
 };
-//# sourceMappingURL=chunk-7NXSMMCU.mjs.map
+//# sourceMappingURL=chunk-BJOPAWGI.mjs.map

package/dist/{chunk-R3HBSHLE.mjs → chunk-EGIUL7QB.mjs}

@@ -436,6 +436,14 @@ var stripSourcesForDisplay = (content) => {
   );
   return c.replace(/\s+$/u, "");
 };
+var linkifyCitations = (content, sources) => {
+  if (!content || sources.length === 0) return content;
+  const link = (text) => text.replace(/\[(\d{1,2})\]/g, (full, num) => {
+    const src = sources[parseInt(num, 10) - 1];
+    return src ? `[\\[${num}\\]](${src.url})` : full;
+  });
+  return content.split(/(```[\s\S]*?```)/g).map((seg, i) => i % 2 === 0 ? link(seg) : seg).join("");
+};
 var domainOf = (url) => {
   try {
     return new URL(url).hostname.replace(/^www\./, "");
@@ -633,7 +641,7 @@ var ChatMessages = ({
                   /* @__PURE__ */ jsx6(
                     StreamingMarkdown_default,
                     {
-                      content: stripSourcesForDisplay(content),
+                      content: linkifyCitations(stripSourcesForDisplay(content), parseWebSources(content)),
                       isStreaming: isStreaming && isLast,
                       sources: sourceSummaries
                     }
@@ -3644,7 +3652,7 @@ TOOL USAGE PROTOCOL (conservative approach)
   * web_search() - when asked about recent/current events, breaking news, live information (weather, prices, sports scores), or when you need to look up documentation, libraries, APIs, error messages, or verify a specific fact
   * web_fetch() - to read the FULL contents of a specific URL you already have. Reach for this when the user wants to "tell me more", "go deeper", "read/open that article", or asks for details about a specific source, link, or article from an EARLIER answer: take that item's URL from the previous Sources list in this conversation and fetch it, then answer from the page's actual content (not just the prior summary)
   * image_generation() - ONLY when explicitly asked to create or generate an image
-  * create_file({"content": "...", "filename": "report.docx", "format": "docx"}) - when the user asks for a downloadable FILE (a document, spreadsheet, slides, markdown, code, etc.) or to "export"/"download"/"save" something. Formats: md, txt, csv, json, html, xml, yaml, docx, pptx. For docx/pptx write well-structured Markdown (use "## " headings to start each slide for pptx). It returns a temporary download link \u2014 ALWAYS tell the user the file expires (~1 hour). If it is unclear whether they want it shown inline vs. as a downloadable file, use ask_user first.
+  * create_file({"content": "...", "filename": "report.docx", "format": "docx"}) - when the user asks for a downloadable FILE (a document, spreadsheet, slides, markdown, code, etc.) or to "export"/"download"/"save" something. Formats: md, txt, csv, json, html, xml, yaml, docx, pptx. PDF is NOT a supported format \u2014 if the user asks for a PDF, create a docx instead. For docx/pptx write well-structured Markdown (use "## " headings to start each slide for pptx). It returns a temporary download link \u2014 ALWAYS tell the user the file expires (~1 hour). If it is unclear whether they want it shown inline vs. as a downloadable file, use ask_user first.
   * ask_user({"questions": [{"question": "...", "header": "Format", "options": [{"label": "Inline (Recommended)"}, {"label": "Download a file"}]}]}) - when you are genuinely BLOCKED on a decision that is the USER's to make and cannot resolve from the request, context, or sensible defaults (e.g. show content inline vs. let them download it, which format/option they want). Renders clickable options the user answers in one step \u2014 better than asking in prose and ending your turn. Give 1-4 questions, each with 2-4 options; if one is clearly best, list it first and append " (Recommended)". The user may also type their own answer; act on it directly.
 - For general questions about concepts, definitions, explanations, or how-to topics, use your built-in knowledge WITHOUT calling tools.
 - Examples of what NOT to use tools for: "who are you?", "what is React?", "explain machine learning", "how does X work?", general programming questions.
@@ -3830,16 +3838,50 @@ ${fn}(${argStr})
 \`\`\``;
               }
             }
-            if (!/```(?:tool_code|TOOL_CODE)/.test(fullMessage)) {
-              const plainToolFence = /```[a-zA-Z0-9_-]*[ \t]*\n([ \t]*(?:web_search|web_fetch|image_generation|create_file|ask_user)[\s\S]*?)\n```/;
-              const fm = fullMessage.match(plainToolFence);
-              if (fm) {
-                fullMessage = fullMessage.replace(plainToolFence, `\`\`\`tool_code
-${fm[1].trim()}
-\`\`\``);
+            const extractToolCalls = (message) => {
+              const KNOWN = ["web_search", "web_fetch", "image_generation", "create_file", "ask_user", "ask-user"];
+              const out = [];
+              const nameRe = new RegExp(`\\b(${KNOWN.join("|")})\\s*\\(`, "g");
+              let m;
+              while ((m = nameRe.exec(message)) !== null) {
+                const functionName = m[1];
+                const openIdx = m.index + m[0].length - 1;
+                let depth = 0;
+                let i = openIdx;
+                let inStr = false;
+                let esc = false;
+                for (; i < message.length; i++) {
+                  const ch = message[i];
+                  if (inStr) {
+                    if (esc) esc = false;
+                    else if (ch === "\\") esc = true;
+                    else if (ch === '"') inStr = false;
+                  } else if (ch === '"') inStr = true;
+                  else if (ch === "(") depth++;
+                  else if (ch === ")") {
+                    depth--;
+                    if (depth === 0) {
+                      i++;
+                      break;
+                    }
+                  }
+                }
+                if (depth !== 0) continue;
+                const params = message.slice(openIdx + 1, i - 1).trim();
+                let start = m.index;
+                let end = i;
+                const fenceOpen = message.slice(0, m.index).match(/```[a-zA-Z0-9_-]*[ \t]*\n[ \t]*$/);
+                if (fenceOpen) {
+                  start = m.index - fenceOpen[0].length;
+                  const fenceClose = message.slice(i).match(/^[ \t]*\n```/);
+                  if (fenceClose) end = i + fenceClose[0].length;
+                }
+                out.push({ raw: message.slice(start, end), functionName, params });
+                nameRe.lastIndex = i;
               }
-            }
-            const toolCallMatches = fullMessage.match(/```(?:tool_code|TOOL_CODE)\s*\n([^`]+)\n```/gi);
+              return out;
+            };
+            const toolCallMatches = extractToolCalls(fullMessage);
             let enhancedMessage = fullMessage;
             const summarizableResults = [];
             const inlineImageBlocks = [];
@@ -3847,13 +3889,10 @@ ${fm[1].trim()}
             if (toolCallMatches && toolCallMatches.length > 0 && mcpToolsAvailable) {
               debugLogger.info("Detected tool calls in AI response", {
                 toolCallCount: toolCallMatches.length,
-                toolCalls: toolCallMatches
+                toolCalls: toolCallMatches.map((t) => t.functionName)
               });
-              for (const match of toolCallMatches) {
-                const toolCallCode = match.replace(/```(?:tool_code|TOOL_CODE)\s*\n|\n```/gi, "").trim();
-                const functionCallMatch = toolCallCode.match(/^(\w+)\(\s*(.*?)\s*\)$/);
-                if (!functionCallMatch) continue;
-                const [, functionName, params] = functionCallMatch;
+              for (const call of toolCallMatches) {
+                const { raw: match, functionName, params } = call;
                 try {
                   let parsedParams = {};
                   const raw = params.trim();
@@ -4017,6 +4056,29 @@ _This link is temporary and expires in about ${mins} minutes._`;
                 try {
                   const toolResultsText = summarizableResults.map((r) => `## ${r.name}
 ${r.output}`).join("\n\n");
+                  const dedupeSources = (arr) => {
+                    const seen = /* @__PURE__ */ new Set();
+                    return arr.filter((s) => seen.has(s.url) ? false : (seen.add(s.url), true));
+                  };
+                  const citeDomain = (u) => {
+                    try {
+                      return new URL(u).hostname.replace(/^www\./, "");
+                    } catch {
+                      return u;
+                    }
+                  };
+                  const buildCitationGuide = () => {
+                    const cite = dedupeSources(collectedSources).slice(0, 6);
+                    if (!cite.length)
+                      return `
+
+Do NOT add citations, footnotes, superscript reference numbers, or a Sources list \u2014 sources are attached automatically.`;
+                    const list = cite.map((s, i) => `[${i + 1}] ${s.title || citeDomain(s.url)}`).join("\n");
+                    return `
+
+When a statement is supported by one of the sources below, add an inline citation right after it using that source's number in square brackets \u2014 e.g. [1] or [2]. Use ONLY these numbers, never invent one, never use superscripts, and do NOT write your own Sources/References list (the numbered list is attached automatically below your answer):
+${list}`;
+                  };
                   const MAX_CHAIN_ROUNDS = 4;
                   const enabledToolsForChain = getEnabledMCPToolsForAI();
                   const convo = [
@@ -4032,7 +4094,7 @@ ${r.output}`).join("\n\n");
 ${toolResultsText}
 ===END TOOL RESULTS===
 
-Use them to fully complete my original request. If you still need to take an action I asked for (for example, actually create a file I want to download), call the appropriate tool now with a \`\`\`tool_code\`\`\` block. Otherwise give your final answer. Do NOT add citations, footnotes, superscript reference numbers (e.g. \xB9 \xB2 \xB3), or a Sources/References/Citations list \u2014 the sources are attached automatically below your answer. Just write the answer naturally.`
+Use them to fully complete my original request. If you still need to take an action I asked for (for example, actually create a file I want to download), call the appropriate tool now with a \`\`\`tool_code\`\`\` block. Otherwise give your final answer.${buildCitationGuide()}`
                     }
                   ];
                   const streamTurn = (req) => new Promise((resolve) => {
@@ -4178,7 +4240,7 @@ That step failed: ${e instanceof Error ? e.message : String(e)}`);
 ${roundOut.join("\n\n")}
 ===END TOOL RESULTS===
 
-Now give your final answer to my original request, or call another tool if you still genuinely need to. Do NOT add citations, footnotes, superscript reference numbers, or a Sources list \u2014 sources are attached automatically.`
+Now give your final answer to my original request, or call another tool if you still genuinely need to.${buildCitationGuide()}`
                     });
                   }
                   setIsThinking?.(false);
@@ -4191,7 +4253,7 @@ Now give your final answer to my original request, or call another tool if you s
                     const sourcesMd = collectedSources.length ? `
 
 **Sources**
-${collectedSources.slice(0, 6).map((s) => {
+${dedupeSources(collectedSources).slice(0, 6).map((s) => {
                       let domain = s.url;
                       try {
                         domain = new URL(s.url).hostname.replace(/^www\./, "");
@@ -10663,4 +10725,4 @@ var chat_default = Chat;
 export {
   chat_default
 };
-//# sourceMappingURL=chunk-R3HBSHLE.mjs.map
+//# sourceMappingURL=chunk-EGIUL7QB.mjs.map