@harrylabsj/kiwi 0.7.22 → 0.9.0

package/dist/agent/context/fencing.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Model-visible external data fencing.
+ *
+ * Protocol payloads are verified before this module is called. This module
+ * only creates a sanitized copy for prompts/UI and must never mutate the
+ * payload used for signatures, digests, or ledger events.
+ */
+export type ExternalSource = "a2a_message" | "catalog" | "merchant_api" | "buyer_message" | "human_review" | "ucp_profile" | "metric";
+export declare const DEFAULT_FENCE_MAX_CHARS = 12000;
+export declare const DEFAULT_MEMORY_VALUE_MAX_CHARS = 4000;
+/** Sanitize one untrusted string without changing the caller's value. */
+export declare function sanitizeModelText(input: string, options?: {
+    maxChars?: number;
+    marker?: string;
+}): string;
+/** True when a value carries one of Kiwi's model-visible external-data fences. */
+export declare function containsExternalFence(value: unknown): boolean;
+/** Sanitize every string in a JSON-like value without mutating the source. */
+export declare function sanitizeModelValue(value: unknown, options?: {
+    maxChars?: number;
+    depth?: number;
+    marker?: string;
+}): unknown;
+/** Wrap sanitized data in a fixed, source-specific fence. */
+export declare function fenceModelPayload(source: ExternalSource, payload: unknown, options?: {
+    maxChars?: number;
+}): string;

package/dist/agent/context/fencing.js

@@ -0,0 +1,126 @@
+/**
+ * Model-visible external data fencing.
+ *
+ * Protocol payloads are verified before this module is called. This module
+ * only creates a sanitized copy for prompts/UI and must never mutate the
+ * payload used for signatures, digests, or ledger events.
+ */
+import { inspect } from "node:util";
+export const DEFAULT_FENCE_MAX_CHARS = 12_000;
+export const DEFAULT_MEMORY_VALUE_MAX_CHARS = 4_000;
+const TURN_MARKER = /(\r?\n\s*\r?\n\s*)(human|assistant|system|user)\s*:/gi;
+const LEADING_TURN_MARKER = /^\s*(human|assistant|system|user)\s*:/i;
+const SPECIAL_TOKEN = /<\s*\/?\s*(?:(?:[a-z][\w.-]{0,30}:)?(?:transcript|conversation|function_calls|function_results|invoke|tool_use|tool_result|system|human|user|assistant)|[a-z][\w.-]{0,30}:(?:parameter|result))\b[^<>]{0,160}>|<\|[^|<>\r\n]{1,64}\|>/gi;
+const INVISIBLE_RANGES = [
+    [0x00ad, 0x00ad],
+    [0x061c, 0x061c],
+    [0x180e, 0x180e],
+    [0x200b, 0x200f],
+    [0x2028, 0x2029],
+    [0x202a, 0x202e],
+    [0x2060, 0x2064],
+    [0x2066, 0x2069],
+    [0xfeff, 0xfeff],
+    [0xfff9, 0xfffb],
+    [0xe0000, 0xe007f],
+    [0xe0100, 0xe01ef],
+];
+function isInvisible(codePoint) {
+    return INVISIBLE_RANGES.some(([start, end]) => codePoint >= start && codePoint <= end);
+}
+function removeInvisibleAndControl(input) {
+    return Array.from(input, (character) => {
+        const codePoint = character.codePointAt(0) ?? 0;
+        if (isInvisible(codePoint))
+            return "";
+        if (codePoint <= 0x08 ||
+            (codePoint >= 0x0b && codePoint <= 0x1f) ||
+            (codePoint >= 0x7f && codePoint <= 0x9f)) {
+            return " ";
+        }
+        return character;
+    }).join("");
+}
+function truncate(text, maxChars) {
+    if (text.length <= maxChars)
+        return text;
+    if (maxChars <= 1)
+        return "…".slice(0, maxChars);
+    return `${text.slice(0, maxChars - 1)}…`;
+}
+/** Sanitize one untrusted string without changing the caller's value. */
+export function sanitizeModelText(input, options = {}) {
+    const maxChars = Math.max(1, options.maxChars ?? DEFAULT_FENCE_MAX_CHARS);
+    const marker = options.marker ?? "";
+    let text = removeInvisibleAndControl(input.normalize("NFKC"));
+    // Repeat because removing one token can expose another adjacent token.
+    for (let i = 0; i < 3; i += 1) {
+        const next = text.replace(SPECIAL_TOKEN, " ").replace(TURN_MARKER, "$1");
+        const cleaned = next.replace(LEADING_TURN_MARKER, "");
+        if (cleaned === text)
+            break;
+        text = cleaned;
+    }
+    if (marker !== "") {
+        const escaped = marker.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        text = text.replace(new RegExp(`<\\s*/?\\s*${escaped}(?![A-Za-z0-9_])(?:[^<>]*>)?`, "gi"), " ");
+    }
+    return truncate(text, maxChars);
+}
+function modelValue(payload) {
+    if (typeof payload === "string")
+        return payload;
+    try {
+        return JSON.stringify(payload) ?? "null";
+    }
+    catch {
+        return inspect(payload, { depth: 5, breakLength: 120 });
+    }
+}
+/** True when a value carries one of Kiwi's model-visible external-data fences. */
+export function containsExternalFence(value) {
+    if (typeof value === "string")
+        return /<\s*\/?\s*kiwi_(?:external|memory)_data(?:_|\b)/i.test(value);
+    if (Array.isArray(value))
+        return value.some(containsExternalFence);
+    if (value !== null && typeof value === "object") {
+        return Object.values(value).some(containsExternalFence);
+    }
+    return false;
+}
+/** Sanitize every string in a JSON-like value without mutating the source. */
+export function sanitizeModelValue(value, options = {}) {
+    const maxChars = Math.max(1, options.maxChars ?? DEFAULT_MEMORY_VALUE_MAX_CHARS);
+    const maxDepth = Math.max(1, Math.min(options.depth ?? 8, 20));
+    const visit = (entry, depth) => {
+        if (depth > maxDepth)
+            return "[nested value omitted]";
+        if (typeof entry === "string")
+            return sanitizeModelText(entry, { maxChars, marker: options.marker });
+        if (Array.isArray(entry))
+            return entry.map((item) => visit(item, depth + 1));
+        if (entry !== null && typeof entry === "object") {
+            return Object.fromEntries(Object.entries(entry).map(([key, item]) => [
+                sanitizeModelText(key, { maxChars: 128, marker: options.marker }),
+                visit(item, depth + 1),
+            ]));
+        }
+        return entry;
+    };
+    const sanitized = visit(value, 0);
+    const serialized = modelValue(sanitized);
+    if (serialized.length <= maxChars)
+        return sanitized;
+    return sanitizeModelText(serialized, { maxChars, marker: options.marker });
+}
+/** Wrap sanitized data in a fixed, source-specific fence. */
+export function fenceModelPayload(source, payload, options = {}) {
+    const label = `kiwi_external_data_${source}`;
+    const marker = `<${label}>`;
+    const body = sanitizeModelText(modelValue(payload), {
+        maxChars: options.maxChars ?? DEFAULT_FENCE_MAX_CHARS,
+        marker: label,
+    });
+    return `${marker}\n${body}\n</${label}>`;
+}
+//# sourceMappingURL=fencing.js.map

package/dist/agent/context/fencing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fencing.js","sourceRoot":"","sources":["../../../src/agent/context/fencing.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAWpC,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAC9C,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAEpD,MAAM,WAAW,GAAG,uDAAuD,CAAC;AAC5E,MAAM,mBAAmB,GAAG,wCAAwC,CAAC;AACrE,MAAM,aAAa,GAAG,yOAAyO,CAAC;AAEhQ,MAAM,gBAAgB,GAAgC;IACpD,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,OAAO,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,SAAS,WAAW,CAAC,SAAiB;IACpC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,SAAS,IAAI,KAAK,IAAI,SAAS,IAAI,GAAG,CAAC,CAAC;AACzF,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE;QACrC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,WAAW,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,IACE,SAAS,IAAI,IAAI;YACjB,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC;YACxC,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,EACxC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,QAAQ,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,UAAkD,EAAE;IAEpD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,uBAAuB,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACpC,IAAI,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,uEAAuE;IACvE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM;QAC5B,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,cAAc,OAAO,8BAA8B,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,kDAAkD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAChC,KAAc,EACd,UAAkE,EAAE;IAEpE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,8BAA8B,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAa,EAAW,EAAE;QACvD,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAO,wBAAwB,CAAC;QACtD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,iBAAiB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7E,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;gBACpE,iBAAiB,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;gBACjE,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;aACvB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,iBAAiB,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,iBAAiB,CAC/B,MAAsB,EACtB,OAAgB,EAChB,UAAiC,EAAE;IAEnC,MAAM,KAAK,GAAG,sBAAsB,MAAM,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,KAAK,GAAG,CAAC;IAC5B,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;QAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,uBAAuB;QACrD,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,OAAO,GAAG,MAAM,KAAK,IAAI,OAAO,KAAK,GAAG,CAAC;AAC3C,CAAC"}

package/dist/agent/context/grounding.d.ts

@@ -0,0 +1,18 @@
+/** Deterministic first-read grounding primitives for model turns. */
+export interface GroundingContext {
+    latestUserText: string;
+    sessionState: Readonly<Record<string, unknown>>;
+}
+export interface GroundingRead {
+    tool: string;
+    arguments: Record<string, unknown>;
+    reason: string;
+}
+export interface GroundingRule {
+    name: string;
+    priority: number;
+    match(context: GroundingContext): GroundingRead | undefined;
+}
+export declare function firstGroundingRead(rules: readonly GroundingRule[], context: GroundingContext): GroundingRead | undefined;
+/** Return at most maxReads unique read-only tools in deterministic priority order. */
+export declare function groundingReads(rules: readonly GroundingRule[], context: GroundingContext, maxReads?: number): GroundingRead[];

package/dist/agent/context/grounding.js

@@ -0,0 +1,22 @@
+/** Deterministic first-read grounding primitives for model turns. */
+export function firstGroundingRead(rules, context) {
+    return groundingReads(rules, context, 1)[0];
+}
+/** Return at most maxReads unique read-only tools in deterministic priority order. */
+export function groundingReads(rules, context, maxReads = 2) {
+    const seen = new Set();
+    const reads = [];
+    for (const read of [...rules]
+        .sort((a, b) => a.priority - b.priority)
+        .map((rule) => rule.match(context))
+        .filter((read) => read !== undefined)) {
+        if (seen.has(read.tool))
+            continue;
+        seen.add(read.tool);
+        reads.push(read);
+        if (reads.length >= Math.max(1, maxReads))
+            break;
+    }
+    return reads;
+}
+//# sourceMappingURL=grounding.js.map

package/dist/agent/context/grounding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grounding.js","sourceRoot":"","sources":["../../../src/agent/context/grounding.ts"],"names":[],"mappings":"AAAA,qEAAqE;AAmBrE,MAAM,UAAU,kBAAkB,CAChC,KAA+B,EAC/B,OAAyB;IAEzB,OAAO,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAC5B,KAA+B,EAC/B,OAAyB,EACzB,QAAQ,GAAG,CAAC;IAEZ,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;SACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SAClC,MAAM,CAAC,CAAC,IAAI,EAAyB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC;YAAE,MAAM;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/agent/host/events.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Optional host-facing event protocol for Merchant Experience integrations.
+ *
+ * Events are projections for TUI/Web/Buddy hosts. They are not a second
+ * business state store: protocol, approval, task and ledger stores remain the
+ * sources of truth.
+ */
+export type AgentHostEventType = "message" | "text_delta" | "tool_call" | "tool_result" | "grounding_started" | "grounding_completed" | "ui" | "ui_partial" | "candidate_update" | "negotiation_update" | "progress" | "turn_complete" | "error";
+export interface AgentHostEvent<T = unknown> {
+    eventId: string;
+    sessionId: string;
+    sequence: number;
+    type: AgentHostEventType;
+    occurredAt: string;
+    data: T;
+}
+export interface AgentEventSink {
+    emit(event: AgentHostEvent): void | Promise<void>;
+}
+export declare const NOOP_EVENT_SINK: AgentEventSink;
+/** Tool inputs are operator-visible projections, never raw request/log payloads. */
+export declare function sanitizeHostEventData(type: AgentHostEventType, data: unknown): unknown;
+/** Preserve emit order even when the underlying sink performs asynchronous I/O. */
+export declare class SerializedEventSink implements AgentEventSink {
+    private readonly target;
+    private chain;
+    constructor(target: AgentEventSink);
+    emit(event: AgentHostEvent): Promise<void>;
+}
+/** Best-effort event emission; host transport failure must not fail a business action. */
+export declare function emitHostEvent(sink: AgentEventSink | undefined, event: AgentHostEvent): Promise<void>;

package/dist/agent/host/events.js

@@ -0,0 +1,62 @@
+/**
+ * Optional host-facing event protocol for Merchant Experience integrations.
+ *
+ * Events are projections for TUI/Web/Buddy hosts. They are not a second
+ * business state store: protocol, approval, task and ledger stores remain the
+ * sources of truth.
+ */
+import { sanitizeModelValue } from "../context/fencing.js";
+export const NOOP_EVENT_SINK = { emit: () => undefined };
+const SENSITIVE_EVENT_KEY = /authorization|bearer|token|secret|password|credential|private_key|vault/i;
+const MAX_REDACTION_DEPTH = 20;
+function redactSensitiveKeys(value, depth = 0) {
+    if (depth > MAX_REDACTION_DEPTH)
+        return "[nested value omitted]";
+    if (Array.isArray(value))
+        return value.map((entry) => redactSensitiveKeys(entry, depth + 1));
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
+            key,
+            SENSITIVE_EVENT_KEY.test(key) ? "[redacted]" : redactSensitiveKeys(entry, depth + 1),
+        ]));
+    }
+    return value;
+}
+/** Tool inputs are operator-visible projections, never raw request/log payloads. */
+export function sanitizeHostEventData(type, data) {
+    if (type !== "tool_call" && type !== "tool_result" && type !== "ui_partial" && type !== "text_delta")
+        return data;
+    try {
+        return sanitizeModelValue(redactSensitiveKeys(data), { maxChars: 4_000 });
+    }
+    catch {
+        return { note: "payload omitted" };
+    }
+}
+/** Preserve emit order even when the underlying sink performs asynchronous I/O. */
+export class SerializedEventSink {
+    target;
+    chain = Promise.resolve();
+    constructor(target) {
+        this.target = target;
+    }
+    emit(event) {
+        this.chain = this.chain.then(async () => {
+            await this.target.emit(event);
+        }).catch(() => undefined);
+        return this.chain;
+    }
+}
+/** Best-effort event emission; host transport failure must not fail a business action. */
+export async function emitHostEvent(sink, event) {
+    if (sink === undefined)
+        return;
+    try {
+        await sink.emit(event);
+    }
+    catch {
+        // Event delivery is an optional projection. The caller owns logging if it
+        // needs telemetry, while the business state remains authoritative.
+    }
+}
+//# sourceMappingURL=events.js.map

package/dist/agent/host/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../src/agent/host/events.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AA8B3D,MAAM,CAAC,MAAM,eAAe,GAAmB,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;AAEzE,MAAM,mBAAmB,GAAG,0EAA0E,CAAC;AACvG,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACpD,IAAI,KAAK,GAAG,mBAAmB;QAAE,OAAO,wBAAwB,CAAC;IACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;YACrE,GAAG;YACH,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC;SACrF,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,IAAwB,EAAE,IAAa;IAC3E,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAClH,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IACrC,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,OAAO,mBAAmB;IACb,MAAM,CAAiB;IAChC,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEjD,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,KAAqB;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAgC,EAChC,KAAqB;IAErB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,mEAAmE;IACrE,CAAC;AACH,CAAC"}

package/dist/agent/host/tui-renderer.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ */
+import type { Writable } from "node:stream";
+import type { AgentEventSink, AgentHostEvent } from "./events.js";
+declare function renderUi(component: string, payload: unknown): string[];
+/** Optional renderer for hosts that want readable TUI projections from events. */
+export declare class TuiEventSink implements AgentEventSink {
+    private readonly output;
+    private readonly theme;
+    constructor(output: Writable);
+    emit(event: AgentHostEvent): void;
+}
+export { renderUi as renderTuiEvent };

package/dist/agent/host/tui-renderer.js

@@ -0,0 +1,125 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ */
+import { createTheme } from "../../tui/styles.js";
+function asRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
+}
+function display(value) {
+    if (value === null || value === undefined)
+        return "—";
+    if (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+        return String(value);
+    return JSON.stringify(value) ?? "—";
+}
+function renderUi(component, payload) {
+    const value = asRecord(payload);
+    if (component === "merchant_digest") {
+        const snapshot = asRecord(value.snapshot);
+        const alerts = asRecord(snapshot.alerts);
+        const metrics = Array.isArray(snapshot.metrics) ? snapshot.metrics : [];
+        return [
+            "[经营摘要] " + display(value.title),
+            ...metrics.slice(0, 8).map((metric) => {
+                const item = asRecord(metric);
+                return `  ${display(item.name)}: ${display(item.value)} ${display(item.unit)}`;
+            }),
+            `  活跃磋商 ${display(alerts.active_negotiations)} · 人工审核 ${display(alerts.human_reviews)} · 待审批 ${display(alerts.pending_actions)}`,
+        ];
+    }
+    if (component === "metrics") {
+        const points = Array.isArray(value.points) ? value.points : [];
+        return [
+            `[指标] ${display(value.metric)}（${display(value.period)} / ${display(value.granularity)}）`,
+            ...points.slice(0, 20).map((point) => {
+                const item = asRecord(point);
+                return `  ${display(item.date)}  ${display(item.value)}`;
+            }),
+            ...(typeof value.note === "string" && value.note !== "" ? [`  说明：${value.note}`] : []),
+        ];
+    }
+    if (component === "catalog") {
+        const products = Array.isArray(value.products) ? value.products : [];
+        const health = asRecord(value.health);
+        return [
+            `[目录] 共 ${display(health.total)} 件 · active ${display(health.active)} · paused ${display(health.paused)} · 缺货 ${display(health.out_of_stock)}`,
+            ...products.slice(0, 20).map((product) => {
+                const item = asRecord(product);
+                return `  ${display(item.sku)}  ${display(item.title)}  价格 ${display(item.price)}  库存 ${display(item.stock)}`;
+            }),
+        ];
+    }
+    if (component === "negotiations") {
+        const rows = Array.isArray(payload) ? payload : [];
+        return [
+            `[磋商] ${rows.length} 条`,
+            ...rows.slice(0, 20).map((row) => {
+                const item = asRecord(row);
+                return `  ${display(item.negotiation_id)}  ${display(item.phase)}  ${display(item.updated_at)}`;
+            }),
+        ];
+    }
+    if (component === "human_review") {
+        const rows = Array.isArray(value.reviews) ? value.reviews : [];
+        return [
+            `[人工审核] ${rows.length} 条`,
+            ...rows.slice(0, 20).map((row) => {
+                const item = asRecord(row);
+                return `  ${display(item.review_id)}  ${display(item.severity)}  ${display(item.reason)}`;
+            }),
+        ];
+    }
+    if (component === "change_preview") {
+        const changes = Array.isArray(value.changes) ? value.changes : [];
+        return [
+            `[变更预览] ${display(value.headline)}（${display(value.status)}）`,
+            ...changes.slice(0, 20).map((change) => {
+                const item = asRecord(change);
+                return `  ${display(item.field)}: ${display(item.before)} → ${display(item.after)}`;
+            }),
+            ...(typeof value.note === "string" && value.note !== "" ? [`  说明：${value.note}`] : []),
+        ];
+    }
+    if (component === "suggestions") {
+        const suggestions = Array.isArray(value.suggestions) ? value.suggestions : [];
+        return ["[建议]", ...suggestions.slice(0, 4).map((suggestion) => `  · ${display(suggestion)}`)];
+    }
+    return [`[ui] ${component}`];
+}
+/** Optional renderer for hosts that want readable TUI projections from events. */
+export class TuiEventSink {
+    output;
+    theme;
+    constructor(output) {
+        this.output = output;
+        this.theme = createTheme(output);
+    }
+    emit(event) {
+        const data = asRecord(event.data);
+        let lines = [];
+        if (event.type === "message" && typeof data.text === "string" && data.role !== "user") {
+            lines = [data.text];
+        }
+        else if (event.type === "grounding_started") {
+            lines = [`[数据] 正在读取 ${display(data.tool)}…`];
+        }
+        else if (event.type === "grounding_completed") {
+            lines = [`[数据] ${display(data.tool)}：${display(data.status)}`];
+        }
+        else if (event.type === "ui") {
+            lines = renderUi(display(data.component), data.payload);
+        }
+        else if (event.type === "error") {
+            lines = [`[错误] ${display(data.message)}`];
+        }
+        for (const line of lines)
+            this.output.write(`${this.theme.decorate(line)}\n`);
+    }
+}
+export { renderUi as renderTuiEvent };
+//# sourceMappingURL=tui-renderer.js.map

package/dist/agent/host/tui-renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tui-renderer.js","sourceRoot":"","sources":["../../../src/agent/host/tui-renderer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/G,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiB,EAAE,OAAgB;IACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;YAChC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9B,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,CAAC,CAAC;YACF,UAAU,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,WAAW,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE;SACjI,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,QAAQ,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG;YACzF,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC7B,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3D,CAAC,CAAC;YACF,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO;YACL,UAAU,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;YAC9I,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAC/B,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChH,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO;YACL,QAAQ,IAAI,CAAC,MAAM,IAAI;YACvB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC3B,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClG,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,UAAU,IAAI,CAAC,MAAM,IAAI;YACzB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC3B,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5F,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,gBAAgB,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO;YACL,UAAU,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG;YAC7D,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC9B,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACtF,CAAC,CAAC;YACF,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,kFAAkF;AAClF,MAAM,OAAO,YAAY;IACN,MAAM,CAAW;IACjB,KAAK,CAAiC;IAEvD,YAAY,MAAgB;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,MAA6B,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC,KAAqB;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtF,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC9C,KAAK,GAAG,CAAC,aAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAChD,KAAK,GAAG,CAAC,QAAQ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC/B,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAClC,KAAK,GAAG,CAAC,QAAQ,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;CACF;AAED,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,CAAC"}

package/dist/agent/host/web-renderer.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ */
+import type { AgentHostEvent } from "./events.js";
+export interface MerchantWebMessage {
+    role: "user" | "assistant" | "system";
+    text: string;
+    sequence: number;
+    occurredAt: string;
+}
+export interface MerchantWebToolState {
+    tool: string;
+    callId: string;
+    status: "running" | "ok" | "error";
+    input?: unknown;
+    summary?: string;
+    partial?: unknown;
+}
+export interface MerchantWebViewState {
+    lastSequence: number;
+    streamText: string;
+    messages: MerchantWebMessage[];
+    grounding: Record<string, {
+        tool: string;
+        status: string;
+    }>;
+    tools: Record<string, MerchantWebToolState>;
+    ui: Record<string, {
+        payload: unknown;
+        sequence: number;
+    }>;
+    candidates: Record<string, {
+        status: string;
+        preview?: unknown;
+    }>;
+    negotiations: Record<string, {
+        phase: string;
+        summary: string;
+    }>;
+    progress: Array<{
+        message: string;
+        operation?: string;
+        step?: string;
+    }>;
+    errors: Array<{
+        code: string;
+        message: string;
+        retryable?: boolean;
+    }>;
+    replayGap?: {
+        after: number;
+        oldest: number;
+    };
+}
+/**
+ * Framework-neutral reducer for Web/Buddy hosts.
+ *
+ * It is intentionally a state reducer rather than a DOM/React renderer. The
+ * transport may replay events, so duplicate or older sequence numbers are
+ * ignored. All values are copied and sanitized before entering view state.
+ */
+export declare class MerchantWebEventRenderer {
+    private state;
+    get snapshot(): MerchantWebViewState;
+    reset(): void;
+    applyReplayGap(after: number, oldest: number): void;
+    apply(event: AgentHostEvent): MerchantWebViewState;
+}