@burtson-labs/bandit-engine 2.0.102 → 2.0.104

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import {
   chat_default
-} from "./chunk-R3HBSHLE.mjs";
+} from "./chunk-EGIUL7QB.mjs";
 import {
   chat_provider_default
 } from "./chunk-VTKRZNLI.mjs";
@@ -10,7 +10,7 @@ import {
   useGatewayHealth,
   useGatewayMemory,
   useGatewayModels
-} from "./chunk-7NXSMMCU.mjs";
+} from "./chunk-BJOPAWGI.mjs";
 import "./chunk-KYC7CC6C.mjs";
 import "./chunk-HAUDGBUS.mjs";
 import "./chunk-BN3D45E2.mjs";

package/dist/management/management.js

@@ -20365,7 +20365,7 @@ var init_bandit_chat_logo = __esm({
 });
 
 // src/chat/source-chips.tsx
-var import_react43, import_material35, import_jsx_runtime35, parseWebSources, stripSourcesForDisplay, domainOf, SourceChip, SourceChips, source_chips_default;
+var import_react43, import_material35, import_jsx_runtime35, parseWebSources, stripSourcesForDisplay, linkifyCitations, domainOf, SourceChip, SourceChips, source_chips_default;
 var init_source_chips = __esm({
   "src/chat/source-chips.tsx"() {
     "use strict";
@@ -20400,6 +20400,14 @@ var init_source_chips = __esm({
       );
       return c.replace(/\s+$/u, "");
     };
+    linkifyCitations = (content, sources) => {
+      if (!content || sources.length === 0) return content;
+      const link = (text) => text.replace(/\[(\d{1,2})\]/g, (full, num) => {
+        const src = sources[parseInt(num, 10) - 1];
+        return src ? `[\\[${num}\\]](${src.url})` : full;
+      });
+      return content.split(/(```[\s\S]*?```)/g).map((seg, i) => i % 2 === 0 ? link(seg) : seg).join("");
+    };
     domainOf = (url) => {
       try {
         return new URL(url).hostname.replace(/^www\./, "");
@@ -20608,7 +20616,7 @@ var init_chat_messages = __esm({
                       /* @__PURE__ */ (0, import_jsx_runtime36.jsx)(
                         StreamingMarkdown_default,
                         {
-                          content: stripSourcesForDisplay(content),
+                          content: linkifyCitations(stripSourcesForDisplay(content), parseWebSources(content)),
                           isStreaming: isStreaming && isLast,
                           sources: sourceSummaries
                         }
@@ -23763,7 +23771,7 @@ TOOL USAGE PROTOCOL (conservative approach)
   * web_search() - when asked about recent/current events, breaking news, live information (weather, prices, sports scores), or when you need to look up documentation, libraries, APIs, error messages, or verify a specific fact
   * web_fetch() - to read the FULL contents of a specific URL you already have. Reach for this when the user wants to "tell me more", "go deeper", "read/open that article", or asks for details about a specific source, link, or article from an EARLIER answer: take that item's URL from the previous Sources list in this conversation and fetch it, then answer from the page's actual content (not just the prior summary)
   * image_generation() - ONLY when explicitly asked to create or generate an image
-  * create_file({"content": "...", "filename": "report.docx", "format": "docx"}) - when the user asks for a downloadable FILE (a document, spreadsheet, slides, markdown, code, etc.) or to "export"/"download"/"save" something. Formats: md, txt, csv, json, html, xml, yaml, docx, pptx. For docx/pptx write well-structured Markdown (use "## " headings to start each slide for pptx). It returns a temporary download link \u2014 ALWAYS tell the user the file expires (~1 hour). If it is unclear whether they want it shown inline vs. as a downloadable file, use ask_user first.
+  * create_file({"content": "...", "filename": "report.docx", "format": "docx"}) - when the user asks for a downloadable FILE (a document, spreadsheet, slides, markdown, code, etc.) or to "export"/"download"/"save" something. Formats: md, txt, csv, json, html, xml, yaml, docx, pptx. PDF is NOT a supported format \u2014 if the user asks for a PDF, create a docx instead. For docx/pptx write well-structured Markdown (use "## " headings to start each slide for pptx). It returns a temporary download link \u2014 ALWAYS tell the user the file expires (~1 hour). If it is unclear whether they want it shown inline vs. as a downloadable file, use ask_user first.
   * ask_user({"questions": [{"question": "...", "header": "Format", "options": [{"label": "Inline (Recommended)"}, {"label": "Download a file"}]}]}) - when you are genuinely BLOCKED on a decision that is the USER's to make and cannot resolve from the request, context, or sensible defaults (e.g. show content inline vs. let them download it, which format/option they want). Renders clickable options the user answers in one step \u2014 better than asking in prose and ending your turn. Give 1-4 questions, each with 2-4 options; if one is clearly best, list it first and append " (Recommended)". The user may also type their own answer; act on it directly.
 - For general questions about concepts, definitions, explanations, or how-to topics, use your built-in knowledge WITHOUT calling tools.
 - Examples of what NOT to use tools for: "who are you?", "what is React?", "explain machine learning", "how does X work?", general programming questions.
@@ -23949,16 +23957,50 @@ ${fn}(${argStr})
 \`\`\``;
                   }
                 }
-                if (!/```(?:tool_code|TOOL_CODE)/.test(fullMessage)) {
-                  const plainToolFence = /```[a-zA-Z0-9_-]*[ \t]*\n([ \t]*(?:web_search|web_fetch|image_generation|create_file|ask_user)[\s\S]*?)\n```/;
-                  const fm = fullMessage.match(plainToolFence);
-                  if (fm) {
-                    fullMessage = fullMessage.replace(plainToolFence, `\`\`\`tool_code
-${fm[1].trim()}
-\`\`\``);
+                const extractToolCalls = (message) => {
+                  const KNOWN = ["web_search", "web_fetch", "image_generation", "create_file", "ask_user", "ask-user"];
+                  const out = [];
+                  const nameRe = new RegExp(`\\b(${KNOWN.join("|")})\\s*\\(`, "g");
+                  let m;
+                  while ((m = nameRe.exec(message)) !== null) {
+                    const functionName = m[1];
+                    const openIdx = m.index + m[0].length - 1;
+                    let depth = 0;
+                    let i = openIdx;
+                    let inStr = false;
+                    let esc = false;
+                    for (; i < message.length; i++) {
+                      const ch = message[i];
+                      if (inStr) {
+                        if (esc) esc = false;
+                        else if (ch === "\\") esc = true;
+                        else if (ch === '"') inStr = false;
+                      } else if (ch === '"') inStr = true;
+                      else if (ch === "(") depth++;
+                      else if (ch === ")") {
+                        depth--;
+                        if (depth === 0) {
+                          i++;
+                          break;
+                        }
+                      }
+                    }
+                    if (depth !== 0) continue;
+                    const params = message.slice(openIdx + 1, i - 1).trim();
+                    let start = m.index;
+                    let end = i;
+                    const fenceOpen = message.slice(0, m.index).match(/```[a-zA-Z0-9_-]*[ \t]*\n[ \t]*$/);
+                    if (fenceOpen) {
+                      start = m.index - fenceOpen[0].length;
+                      const fenceClose = message.slice(i).match(/^[ \t]*\n```/);
+                      if (fenceClose) end = i + fenceClose[0].length;
+                    }
+                    out.push({ raw: message.slice(start, end), functionName, params });
+                    nameRe.lastIndex = i;
                   }
-                }
-                const toolCallMatches = fullMessage.match(/```(?:tool_code|TOOL_CODE)\s*\n([^`]+)\n```/gi);
+                  return out;
+                };
+                const toolCallMatches = extractToolCalls(fullMessage);
                 let enhancedMessage = fullMessage;
                 const summarizableResults = [];
                 const inlineImageBlocks = [];
@@ -23966,13 +24008,10 @@ ${fm[1].trim()}
                 if (toolCallMatches && toolCallMatches.length > 0 && mcpToolsAvailable) {
                   debugLogger.info("Detected tool calls in AI response", {
                     toolCallCount: toolCallMatches.length,
-                    toolCalls: toolCallMatches
+                    toolCalls: toolCallMatches.map((t) => t.functionName)
                   });
-                  for (const match of toolCallMatches) {
-                    const toolCallCode = match.replace(/```(?:tool_code|TOOL_CODE)\s*\n|\n```/gi, "").trim();
-                    const functionCallMatch = toolCallCode.match(/^(\w+)\(\s*(.*?)\s*\)$/);
-                    if (!functionCallMatch) continue;
-                    const [, functionName, params] = functionCallMatch;
+                  for (const call of toolCallMatches) {
+                    const { raw: match, functionName, params } = call;
                     try {
                       let parsedParams = {};
                       const raw = params.trim();
@@ -24136,6 +24175,29 @@ _This link is temporary and expires in about ${mins} minutes._`;
                     try {
                       const toolResultsText = summarizableResults.map((r) => `## ${r.name}
 ${r.output}`).join("\n\n");
+                      const dedupeSources = (arr) => {
+                        const seen = /* @__PURE__ */ new Set();
+                        return arr.filter((s) => seen.has(s.url) ? false : (seen.add(s.url), true));
+                      };
+                      const citeDomain = (u) => {
+                        try {
+                          return new URL(u).hostname.replace(/^www\./, "");
+                        } catch {
+                          return u;
+                        }
+                      };
+                      const buildCitationGuide = () => {
+                        const cite = dedupeSources(collectedSources).slice(0, 6);
+                        if (!cite.length)
+                          return `
+
+Do NOT add citations, footnotes, superscript reference numbers, or a Sources list \u2014 sources are attached automatically.`;
+                        const list = cite.map((s, i) => `[${i + 1}] ${s.title || citeDomain(s.url)}`).join("\n");
+                        return `
+
+When a statement is supported by one of the sources below, add an inline citation right after it using that source's number in square brackets \u2014 e.g. [1] or [2]. Use ONLY these numbers, never invent one, never use superscripts, and do NOT write your own Sources/References list (the numbered list is attached automatically below your answer):
+${list}`;
+                      };
                       const MAX_CHAIN_ROUNDS = 4;
                       const enabledToolsForChain = getEnabledMCPToolsForAI();
                       const convo = [
@@ -24151,7 +24213,7 @@ ${r.output}`).join("\n\n");
 ${toolResultsText}
 ===END TOOL RESULTS===
 
-Use them to fully complete my original request. If you still need to take an action I asked for (for example, actually create a file I want to download), call the appropriate tool now with a \`\`\`tool_code\`\`\` block. Otherwise give your final answer. Do NOT add citations, footnotes, superscript reference numbers (e.g. \xB9 \xB2 \xB3), or a Sources/References/Citations list \u2014 the sources are attached automatically below your answer. Just write the answer naturally.`
+Use them to fully complete my original request. If you still need to take an action I asked for (for example, actually create a file I want to download), call the appropriate tool now with a \`\`\`tool_code\`\`\` block. Otherwise give your final answer.${buildCitationGuide()}`
                         }
                       ];
                       const streamTurn = (req) => new Promise((resolve) => {
@@ -24297,7 +24359,7 @@ That step failed: ${e instanceof Error ? e.message : String(e)}`);
 ${roundOut.join("\n\n")}
 ===END TOOL RESULTS===
 
-Now give your final answer to my original request, or call another tool if you still genuinely need to. Do NOT add citations, footnotes, superscript reference numbers, or a Sources list \u2014 sources are attached automatically.`
+Now give your final answer to my original request, or call another tool if you still genuinely need to.${buildCitationGuide()}`
                         });
                       }
                       setIsThinking?.(false);
@@ -24310,7 +24372,7 @@ Now give your final answer to my original request, or call another tool if you s
                         const sourcesMd = collectedSources.length ? `
 
 **Sources**
-${collectedSources.slice(0, 6).map((s) => {
+${dedupeSources(collectedSources).slice(0, 6).map((s) => {
                           let domain = s.url;
                           try {
                             domain = new URL(s.url).hostname.replace(/^www\./, "");