@immediately-run/sdk 0.57.1 → 0.57.4

package/dist/agentChatClient.cjs

@@ -0,0 +1,112 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var agentChatClient_exports = {};
+__export(agentChatClient_exports, {
+  createChatModelClient: () => createChatModelClient
+});
+module.exports = __toCommonJS(agentChatClient_exports);
+var import_llm = require("./llm");
+function toChatMessages(system, messages) {
+  const out = [];
+  if (system) out.push({ role: "system", content: [{ type: "text", text: system }] });
+  for (const m of messages) {
+    const content = m.content.map((b) => {
+      if (b.type === "text") return { type: "text", text: b.text };
+      if (b.type === "tool_use") return { type: "tool-use", id: b.id, name: b.name, input: b.input };
+      if (b.type === "image") return { type: "image", mimeType: b.mimeType, data: b.data };
+      if (b.type === "reasoning") {
+        return b.redactedData !== void 0 ? { type: "reasoning-redacted", data: b.redactedData } : { type: "reasoning", text: b.text, ...b.signature ? { signature: b.signature } : {} };
+      }
+      return {
+        type: "tool-result",
+        toolCallId: b.tool_use_id,
+        content: b.content,
+        ...b.is_error ? { isError: true } : {}
+      };
+    });
+    out.push({ role: m.role, content });
+  }
+  return out;
+}
+function toChatTools(tools) {
+  return tools.map((t) => ({ name: t.name, description: t.description, inputSchema: t.input_schema }));
+}
+const mapStop = (s) => s === "tool" ? "tool_use" : s === "length" ? "max_tokens" : "end_turn";
+function createChatModelClient() {
+  return {
+    async createMessage(req) {
+      const chatReq = {
+        messages: toChatMessages(req.system, req.messages),
+        ...req.tools.length ? { tools: toChatTools(req.tools) } : {},
+        modelHint: "smart",
+        // Hand the loop's abort signal to the host so a stop aborts the in-flight
+        // upstream request (host stops generating + billing), not just the app-side
+        // iterator. `chat()` peels it off before the wire params.
+        ...req.signal ? { signal: req.signal } : {}
+      };
+      let text = "";
+      const toolUses = [];
+      const reasoning = [];
+      let stopReason = "end_turn";
+      let usage;
+      const gen = (0, import_llm.chat)(chatReq);
+      for (; ; ) {
+        const step = await gen.next();
+        if (step.done) {
+          stopReason = mapStop(step.value.stopReason);
+          break;
+        }
+        const d = step.value;
+        if (d.type === "text-delta") {
+          text += d.text;
+          req.onTextDelta?.(d.text);
+        } else if (d.type === "tool-call") {
+          toolUses.push({
+            type: "tool_use",
+            id: d.id,
+            name: d.name,
+            input: d.input ?? {}
+          });
+        } else if (d.type === "reasoning-delta") {
+          req.onReasoningDelta?.(d.text);
+        } else if (d.type === "reasoning") {
+          reasoning.push({ type: "reasoning", text: d.text, ...d.signature ? { signature: d.signature } : {} });
+        } else if (d.type === "reasoning-redacted") {
+          reasoning.push({ type: "reasoning", text: "", redactedData: d.data });
+        } else if (d.type === "usage") {
+          usage = {
+            inputTokens: d.inputTokens,
+            outputTokens: d.outputTokens,
+            ...d.cacheReadTokens !== void 0 ? { cacheReadTokens: d.cacheReadTokens } : {},
+            ...d.cacheWriteTokens !== void 0 ? { cacheWriteTokens: d.cacheWriteTokens } : {}
+          };
+        }
+      }
+      const content = [...reasoning];
+      if (text) content.push({ type: "text", text });
+      content.push(...toolUses);
+      return { content, stopReason, ...usage ? { usage } : {} };
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createChatModelClient
+});
+//# sourceMappingURL=agentChatClient.cjs.map

package/dist/agentChatClient.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agentChatClient.ts"],"sourcesContent":["// A {@link ModelClient} (the `agentLoop.ts` provider seam) backed by the host\n// `llm.chat` slot — the SDK {@link chat} stream. PORTED from agent-demo\n// `src/lib/chatModelClient.ts` (GROVE_AGENT_SPEC §7: the loop seam, shared).\n//\n// The provider AND the model are the USER's host-side preference — this client names\n// neither. The app holds no secret/`net:fetch` grant; it needs only the `llm:chat`\n// capability (elevated, app-scoped: a fork earns it by ordinary consent).\nimport { chat } from './llm';\nimport type { ChatRequest, ChatDelta, ContentPart } from './llm';\nimport type { AgentMessage, ModelClient, ReasoningBlock, TextBlock, TokenUsage, ToolUseBlock } from './agentLoop';\nimport type { AgentTool } from './agentLoop';\n\n// The loop's Anthropic-shaped conversation → the chat slot's tool-aware ChatRequest.\n// The agentic history round-trips: a `tool_use` block becomes a `tool-use` content\n// part, a `tool_result` becomes a `tool-result` part.\nfunction toChatMessages(system: string | undefined, messages: AgentMessage[]): ChatRequest['messages'] {\n  const out: ChatRequest['messages'] = [];\n  if (system) out.push({ role: 'system', content: [{ type: 'text', text: system }] });\n  for (const m of messages) {\n    const content: ContentPart[] = m.content.map((b): ContentPart => {\n      if (b.type === 'text') return { type: 'text', text: b.text };\n      if (b.type === 'tool_use') return { type: 'tool-use', id: b.id, name: b.name, input: b.input };\n      // An image the model should LOOK at (the transport already accepts it when the\n      // provider advertises `features.vision`).\n      if (b.type === 'image') return { type: 'image', mimeType: b.mimeType, data: b.data };\n      // Echo the model's own reasoning back. Some providers REQUIRE it (with its\n      // signature) for the next turn of a tool-use chain to be accepted; the host\n      // adapter puts it in the position that provider wants.\n      if (b.type === 'reasoning') {\n        return b.redactedData !== undefined\n          ? { type: 'reasoning-redacted', data: b.redactedData }\n          : { type: 'reasoning', text: b.text, ...(b.signature ? { signature: b.signature } : {}) };\n      }\n      return {\n        type: 'tool-result',\n        toolCallId: b.tool_use_id,\n        content: b.content,\n        ...(b.is_error ? { isError: true } : {}),\n      };\n    });\n    out.push({ role: m.role, content });\n  }\n  return out;\n}\n\nfunction toChatTools(tools: AgentTool[]): NonNullable<ChatRequest['tools']> {\n  return tools.map((t) => ({ name: t.name, description: t.description, inputSchema: t.input_schema }));\n}\n\n// ChatResult.stopReason ('end'|'length'|'tool'|'filtered') → the loop's\n// Anthropic-style stop reason (the loop branches on 'tool_use' to keep iterating).\nconst mapStop = (s: string): string => (s === 'tool' ? 'tool_use' : s === 'length' ? 'max_tokens' : 'end_turn');\n\n/** A {@link ModelClient} over the host `llm.chat` slot. Streams text deltas (forwarded\n * to `onTextDelta`) and assembles tool calls; the resolved provider + model are the\n * user's preference, never named here. Requires the `llm:chat` capability. */\nexport function createChatModelClient(): ModelClient {\n  return {\n    async createMessage(req) {\n      const chatReq: ChatRequest = {\n        messages: toChatMessages(req.system, req.messages),\n        ...(req.tools.length ? { tools: toChatTools(req.tools) } : {}),\n        modelHint: 'smart',\n        // Hand the loop's abort signal to the host so a stop aborts the in-flight\n        // upstream request (host stops generating + billing), not just the app-side\n        // iterator. `chat()` peels it off before the wire params.\n        ...(req.signal ? { signal: req.signal } : {}),\n      };\n      let text = '';\n      const toolUses: ToolUseBlock[] = [];\n      // Reasoning blocks for this turn, in the order the provider emitted them.\n      const reasoning: ReasoningBlock[] = [];\n      let stopReason = 'end_turn';\n      // The provider `usage` delta — the loop reads it to drive compaction/spend\n      // rather than discarding it. Absent when the provider reports none; the loop\n      // then falls back to a char/4 estimate.\n      let usage: TokenUsage | undefined;\n      const gen = chat(chatReq);\n      for (;;) {\n        const step = await gen.next();\n        if (step.done) {\n          stopReason = mapStop(step.value.stopReason);\n          break;\n        }\n        const d: ChatDelta = step.value;\n        if (d.type === 'text-delta') {\n          text += d.text;\n          req.onTextDelta?.(d.text);\n        } else if (d.type === 'tool-call') {\n          toolUses.push({\n            type: 'tool_use',\n            id: d.id,\n            name: d.name,\n            input: (d.input ?? {}) as Record<string, unknown>,\n          });\n        } else if (d.type === 'reasoning-delta') {\n          // Live only — the WHOLE block arrives as its own delta, carrying the\n          // signature. Accumulating the slices here instead would silently lose it.\n          req.onReasoningDelta?.(d.text);\n        } else if (d.type === 'reasoning') {\n          reasoning.push({ type: 'reasoning', text: d.text, ...(d.signature ? { signature: d.signature } : {}) });\n        } else if (d.type === 'reasoning-redacted') {\n          reasoning.push({ type: 'reasoning', text: '', redactedData: d.data });\n        } else if (d.type === 'usage') {\n          // Carry the cache counters through verbatim, INCLUDING their absence: a\n          // provider that reports nothing must not look like one that cached nothing.\n          usage = {\n            inputTokens: d.inputTokens,\n            outputTokens: d.outputTokens,\n            ...(d.cacheReadTokens !== undefined ? { cacheReadTokens: d.cacheReadTokens } : {}),\n            ...(d.cacheWriteTokens !== undefined ? { cacheWriteTokens: d.cacheWriteTokens } : {}),\n          };\n        }\n      }\n      // Reasoning comes FIRST in the turn: it is what the model did before answering,\n      // and it is the order a provider that requires the echo expects to read back.\n      const content: (TextBlock | ToolUseBlock | ReasoningBlock)[] = [...reasoning];\n      if (text) content.push({ type: 'text', text });\n      content.push(...toolUses);\n      return { content, stopReason, ...(usage ? { usage } : {}) };\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAOA,iBAAqB;AAQrB,SAAS,eAAe,QAA4B,UAAmD;AACrG,QAAM,MAA+B,CAAC;AACtC,MAAI,OAAQ,KAAI,KAAK,EAAE,MAAM,UAAU,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,CAAC,EAAE,CAAC;AAClF,aAAW,KAAK,UAAU;AACxB,UAAM,UAAyB,EAAE,QAAQ,IAAI,CAAC,MAAmB;AAC/D,UAAI,EAAE,SAAS,OAAQ,QAAO,EAAE,MAAM,QAAQ,MAAM,EAAE,KAAK;AAC3D,UAAI,EAAE,SAAS,WAAY,QAAO,EAAE,MAAM,YAAY,IAAI,EAAE,IAAI,MAAM,EAAE,MAAM,OAAO,EAAE,MAAM;AAG7F,UAAI,EAAE,SAAS,QAAS,QAAO,EAAE,MAAM,SAAS,UAAU,EAAE,UAAU,MAAM,EAAE,KAAK;AAInF,UAAI,EAAE,SAAS,aAAa;AAC1B,eAAO,EAAE,iBAAiB,SACtB,EAAE,MAAM,sBAAsB,MAAM,EAAE,aAAa,IACnD,EAAE,MAAM,aAAa,MAAM,EAAE,MAAM,GAAI,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,IAAI,CAAC,EAAG;AAAA,MAC5F;AACA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY,EAAE;AAAA,QACd,SAAS,EAAE;AAAA,QACX,GAAI,EAAE,WAAW,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MACxC;AAAA,IACF,CAAC;AACD,QAAI,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAAuD;AAC1E,SAAO,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,EAAE,aAAa,aAAa,EAAE,aAAa,EAAE;AACrG;AAIA,MAAM,UAAU,CAAC,MAAuB,MAAM,SAAS,aAAa,MAAM,WAAW,eAAe;AAK7F,SAAS,wBAAqC;AACnD,SAAO;AAAA,IACL,MAAM,cAAc,KAAK;AACvB,YAAM,UAAuB;AAAA,QAC3B,UAAU,eAAe,IAAI,QAAQ,IAAI,QAAQ;AAAA,QACjD,GAAI,IAAI,MAAM,SAAS,EAAE,OAAO,YAAY,IAAI,KAAK,EAAE,IAAI,CAAC;AAAA,QAC5D,WAAW;AAAA;AAAA;AAAA;AAAA,QAIX,GAAI,IAAI,SAAS,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;AAAA,MAC7C;AACA,UAAI,OAAO;AACX,YAAM,WAA2B,CAAC;AAElC,YAAM,YAA8B,CAAC;AACrC,UAAI,aAAa;AAIjB,UAAI;AACJ,YAAM,UAAM,iBAAK,OAAO;AACxB,iBAAS;AACP,cAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,YAAI,KAAK,MAAM;AACb,uBAAa,QAAQ,KAAK,MAAM,UAAU;AAC1C;AAAA,QACF;AACA,cAAM,IAAe,KAAK;AAC1B,YAAI,EAAE,SAAS,cAAc;AAC3B,kBAAQ,EAAE;AACV,cAAI,cAAc,EAAE,IAAI;AAAA,QAC1B,WAAW,EAAE,SAAS,aAAa;AACjC,mBAAS,KAAK;AAAA,YACZ,MAAM;AAAA,YACN,IAAI,EAAE;AAAA,YACN,MAAM,EAAE;AAAA,YACR,OAAQ,EAAE,SAAS,CAAC;AAAA,UACtB,CAAC;AAAA,QACH,WAAW,EAAE,SAAS,mBAAmB;AAGvC,cAAI,mBAAmB,EAAE,IAAI;AAAA,QAC/B,WAAW,EAAE,SAAS,aAAa;AACjC,oBAAU,KAAK,EAAE,MAAM,aAAa,MAAM,EAAE,MAAM,GAAI,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,IAAI,CAAC,EAAG,CAAC;AAAA,QACxG,WAAW,EAAE,SAAS,sBAAsB;AAC1C,oBAAU,KAAK,EAAE,MAAM,aAAa,MAAM,IAAI,cAAc,EAAE,KAAK,CAAC;AAAA,QACtE,WAAW,EAAE,SAAS,SAAS;AAG7B,kBAAQ;AAAA,YACN,aAAa,EAAE;AAAA,YACf,cAAc,EAAE;AAAA,YAChB,GAAI,EAAE,oBAAoB,SAAY,EAAE,iBAAiB,EAAE,gBAAgB,IAAI,CAAC;AAAA,YAChF,GAAI,EAAE,qBAAqB,SAAY,EAAE,kBAAkB,EAAE,iBAAiB,IAAI,CAAC;AAAA,UACrF;AAAA,QACF;AAAA,MACF;AAGA,YAAM,UAAyD,CAAC,GAAG,SAAS;AAC5E,UAAI,KAAM,SAAQ,KAAK,EAAE,MAAM,QAAQ,KAAK,CAAC;AAC7C,cAAQ,KAAK,GAAG,QAAQ;AACxB,aAAO,EAAE,SAAS,YAAY,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,IAC5D;AAAA,EACF;AACF;","names":[]}

package/dist/agentChatClient.d.cts

@@ -0,0 +1,9 @@
+import { ModelClient } from './agentLoop.cjs';
+import './agentSteering.cjs';
+
+/** A {@link ModelClient} over the host `llm.chat` slot. Streams text deltas (forwarded
+ * to `onTextDelta`) and assembles tool calls; the resolved provider + model are the
+ * user's preference, never named here. Requires the `llm:chat` capability. */
+declare function createChatModelClient(): ModelClient;
+
+export { createChatModelClient };

package/dist/agentChatClient.d.ts

@@ -0,0 +1,9 @@
+import { ModelClient } from './agentLoop.js';
+import './agentSteering.js';
+
+/** A {@link ModelClient} over the host `llm.chat` slot. Streams text deltas (forwarded
+ * to `onTextDelta`) and assembles tool calls; the resolved provider + model are the
+ * user's preference, never named here. Requires the `llm:chat` capability. */
+declare function createChatModelClient(): ModelClient;
+
+export { createChatModelClient };

package/dist/agentChatClient.js

@@ -0,0 +1,89 @@
+import "./chunk-VHAA22YE.js";
+import { chat } from "./llm";
+function toChatMessages(system, messages) {
+  const out = [];
+  if (system) out.push({ role: "system", content: [{ type: "text", text: system }] });
+  for (const m of messages) {
+    const content = m.content.map((b) => {
+      if (b.type === "text") return { type: "text", text: b.text };
+      if (b.type === "tool_use") return { type: "tool-use", id: b.id, name: b.name, input: b.input };
+      if (b.type === "image") return { type: "image", mimeType: b.mimeType, data: b.data };
+      if (b.type === "reasoning") {
+        return b.redactedData !== void 0 ? { type: "reasoning-redacted", data: b.redactedData } : { type: "reasoning", text: b.text, ...b.signature ? { signature: b.signature } : {} };
+      }
+      return {
+        type: "tool-result",
+        toolCallId: b.tool_use_id,
+        content: b.content,
+        ...b.is_error ? { isError: true } : {}
+      };
+    });
+    out.push({ role: m.role, content });
+  }
+  return out;
+}
+function toChatTools(tools) {
+  return tools.map((t) => ({ name: t.name, description: t.description, inputSchema: t.input_schema }));
+}
+const mapStop = (s) => s === "tool" ? "tool_use" : s === "length" ? "max_tokens" : "end_turn";
+function createChatModelClient() {
+  return {
+    async createMessage(req) {
+      const chatReq = {
+        messages: toChatMessages(req.system, req.messages),
+        ...req.tools.length ? { tools: toChatTools(req.tools) } : {},
+        modelHint: "smart",
+        // Hand the loop's abort signal to the host so a stop aborts the in-flight
+        // upstream request (host stops generating + billing), not just the app-side
+        // iterator. `chat()` peels it off before the wire params.
+        ...req.signal ? { signal: req.signal } : {}
+      };
+      let text = "";
+      const toolUses = [];
+      const reasoning = [];
+      let stopReason = "end_turn";
+      let usage;
+      const gen = chat(chatReq);
+      for (; ; ) {
+        const step = await gen.next();
+        if (step.done) {
+          stopReason = mapStop(step.value.stopReason);
+          break;
+        }
+        const d = step.value;
+        if (d.type === "text-delta") {
+          text += d.text;
+          req.onTextDelta?.(d.text);
+        } else if (d.type === "tool-call") {
+          toolUses.push({
+            type: "tool_use",
+            id: d.id,
+            name: d.name,
+            input: d.input ?? {}
+          });
+        } else if (d.type === "reasoning-delta") {
+          req.onReasoningDelta?.(d.text);
+        } else if (d.type === "reasoning") {
+          reasoning.push({ type: "reasoning", text: d.text, ...d.signature ? { signature: d.signature } : {} });
+        } else if (d.type === "reasoning-redacted") {
+          reasoning.push({ type: "reasoning", text: "", redactedData: d.data });
+        } else if (d.type === "usage") {
+          usage = {
+            inputTokens: d.inputTokens,
+            outputTokens: d.outputTokens,
+            ...d.cacheReadTokens !== void 0 ? { cacheReadTokens: d.cacheReadTokens } : {},
+            ...d.cacheWriteTokens !== void 0 ? { cacheWriteTokens: d.cacheWriteTokens } : {}
+          };
+        }
+      }
+      const content = [...reasoning];
+      if (text) content.push({ type: "text", text });
+      content.push(...toolUses);
+      return { content, stopReason, ...usage ? { usage } : {} };
+    }
+  };
+}
+export {
+  createChatModelClient
+};
+//# sourceMappingURL=agentChatClient.js.map

package/dist/agentChatClient.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agentChatClient.ts"],"sourcesContent":["// A {@link ModelClient} (the `agentLoop.ts` provider seam) backed by the host\n// `llm.chat` slot — the SDK {@link chat} stream. PORTED from agent-demo\n// `src/lib/chatModelClient.ts` (GROVE_AGENT_SPEC §7: the loop seam, shared).\n//\n// The provider AND the model are the USER's host-side preference — this client names\n// neither. The app holds no secret/`net:fetch` grant; it needs only the `llm:chat`\n// capability (elevated, app-scoped: a fork earns it by ordinary consent).\nimport { chat } from './llm';\nimport type { ChatRequest, ChatDelta, ContentPart } from './llm';\nimport type { AgentMessage, ModelClient, ReasoningBlock, TextBlock, TokenUsage, ToolUseBlock } from './agentLoop';\nimport type { AgentTool } from './agentLoop';\n\n// The loop's Anthropic-shaped conversation → the chat slot's tool-aware ChatRequest.\n// The agentic history round-trips: a `tool_use` block becomes a `tool-use` content\n// part, a `tool_result` becomes a `tool-result` part.\nfunction toChatMessages(system: string | undefined, messages: AgentMessage[]): ChatRequest['messages'] {\n  const out: ChatRequest['messages'] = [];\n  if (system) out.push({ role: 'system', content: [{ type: 'text', text: system }] });\n  for (const m of messages) {\n    const content: ContentPart[] = m.content.map((b): ContentPart => {\n      if (b.type === 'text') return { type: 'text', text: b.text };\n      if (b.type === 'tool_use') return { type: 'tool-use', id: b.id, name: b.name, input: b.input };\n      // An image the model should LOOK at (the transport already accepts it when the\n      // provider advertises `features.vision`).\n      if (b.type === 'image') return { type: 'image', mimeType: b.mimeType, data: b.data };\n      // Echo the model's own reasoning back. Some providers REQUIRE it (with its\n      // signature) for the next turn of a tool-use chain to be accepted; the host\n      // adapter puts it in the position that provider wants.\n      if (b.type === 'reasoning') {\n        return b.redactedData !== undefined\n          ? { type: 'reasoning-redacted', data: b.redactedData }\n          : { type: 'reasoning', text: b.text, ...(b.signature ? { signature: b.signature } : {}) };\n      }\n      return {\n        type: 'tool-result',\n        toolCallId: b.tool_use_id,\n        content: b.content,\n        ...(b.is_error ? { isError: true } : {}),\n      };\n    });\n    out.push({ role: m.role, content });\n  }\n  return out;\n}\n\nfunction toChatTools(tools: AgentTool[]): NonNullable<ChatRequest['tools']> {\n  return tools.map((t) => ({ name: t.name, description: t.description, inputSchema: t.input_schema }));\n}\n\n// ChatResult.stopReason ('end'|'length'|'tool'|'filtered') → the loop's\n// Anthropic-style stop reason (the loop branches on 'tool_use' to keep iterating).\nconst mapStop = (s: string): string => (s === 'tool' ? 'tool_use' : s === 'length' ? 'max_tokens' : 'end_turn');\n\n/** A {@link ModelClient} over the host `llm.chat` slot. Streams text deltas (forwarded\n * to `onTextDelta`) and assembles tool calls; the resolved provider + model are the\n * user's preference, never named here. Requires the `llm:chat` capability. */\nexport function createChatModelClient(): ModelClient {\n  return {\n    async createMessage(req) {\n      const chatReq: ChatRequest = {\n        messages: toChatMessages(req.system, req.messages),\n        ...(req.tools.length ? { tools: toChatTools(req.tools) } : {}),\n        modelHint: 'smart',\n        // Hand the loop's abort signal to the host so a stop aborts the in-flight\n        // upstream request (host stops generating + billing), not just the app-side\n        // iterator. `chat()` peels it off before the wire params.\n        ...(req.signal ? { signal: req.signal } : {}),\n      };\n      let text = '';\n      const toolUses: ToolUseBlock[] = [];\n      // Reasoning blocks for this turn, in the order the provider emitted them.\n      const reasoning: ReasoningBlock[] = [];\n      let stopReason = 'end_turn';\n      // The provider `usage` delta — the loop reads it to drive compaction/spend\n      // rather than discarding it. Absent when the provider reports none; the loop\n      // then falls back to a char/4 estimate.\n      let usage: TokenUsage | undefined;\n      const gen = chat(chatReq);\n      for (;;) {\n        const step = await gen.next();\n        if (step.done) {\n          stopReason = mapStop(step.value.stopReason);\n          break;\n        }\n        const d: ChatDelta = step.value;\n        if (d.type === 'text-delta') {\n          text += d.text;\n          req.onTextDelta?.(d.text);\n        } else if (d.type === 'tool-call') {\n          toolUses.push({\n            type: 'tool_use',\n            id: d.id,\n            name: d.name,\n            input: (d.input ?? {}) as Record<string, unknown>,\n          });\n        } else if (d.type === 'reasoning-delta') {\n          // Live only — the WHOLE block arrives as its own delta, carrying the\n          // signature. Accumulating the slices here instead would silently lose it.\n          req.onReasoningDelta?.(d.text);\n        } else if (d.type === 'reasoning') {\n          reasoning.push({ type: 'reasoning', text: d.text, ...(d.signature ? { signature: d.signature } : {}) });\n        } else if (d.type === 'reasoning-redacted') {\n          reasoning.push({ type: 'reasoning', text: '', redactedData: d.data });\n        } else if (d.type === 'usage') {\n          // Carry the cache counters through verbatim, INCLUDING their absence: a\n          // provider that reports nothing must not look like one that cached nothing.\n          usage = {\n            inputTokens: d.inputTokens,\n            outputTokens: d.outputTokens,\n            ...(d.cacheReadTokens !== undefined ? { cacheReadTokens: d.cacheReadTokens } : {}),\n            ...(d.cacheWriteTokens !== undefined ? { cacheWriteTokens: d.cacheWriteTokens } : {}),\n          };\n        }\n      }\n      // Reasoning comes FIRST in the turn: it is what the model did before answering,\n      // and it is the order a provider that requires the echo expects to read back.\n      const content: (TextBlock | ToolUseBlock | ReasoningBlock)[] = [...reasoning];\n      if (text) content.push({ type: 'text', text });\n      content.push(...toolUses);\n      return { content, stopReason, ...(usage ? { usage } : {}) };\n    },\n  };\n}\n"],"mappings":";AAOA,SAAS,YAAY;AAQrB,SAAS,eAAe,QAA4B,UAAmD;AACrG,QAAM,MAA+B,CAAC;AACtC,MAAI,OAAQ,KAAI,KAAK,EAAE,MAAM,UAAU,SAAS,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,CAAC,EAAE,CAAC;AAClF,aAAW,KAAK,UAAU;AACxB,UAAM,UAAyB,EAAE,QAAQ,IAAI,CAAC,MAAmB;AAC/D,UAAI,EAAE,SAAS,OAAQ,QAAO,EAAE,MAAM,QAAQ,MAAM,EAAE,KAAK;AAC3D,UAAI,EAAE,SAAS,WAAY,QAAO,EAAE,MAAM,YAAY,IAAI,EAAE,IAAI,MAAM,EAAE,MAAM,OAAO,EAAE,MAAM;AAG7F,UAAI,EAAE,SAAS,QAAS,QAAO,EAAE,MAAM,SAAS,UAAU,EAAE,UAAU,MAAM,EAAE,KAAK;AAInF,UAAI,EAAE,SAAS,aAAa;AAC1B,eAAO,EAAE,iBAAiB,SACtB,EAAE,MAAM,sBAAsB,MAAM,EAAE,aAAa,IACnD,EAAE,MAAM,aAAa,MAAM,EAAE,MAAM,GAAI,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,IAAI,CAAC,EAAG;AAAA,MAC5F;AACA,aAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY,EAAE;AAAA,QACd,SAAS,EAAE;AAAA,QACX,GAAI,EAAE,WAAW,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MACxC;AAAA,IACF,CAAC;AACD,QAAI,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAAA,EACpC;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAAuD;AAC1E,SAAO,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,EAAE,aAAa,aAAa,EAAE,aAAa,EAAE;AACrG;AAIA,MAAM,UAAU,CAAC,MAAuB,MAAM,SAAS,aAAa,MAAM,WAAW,eAAe;AAK7F,SAAS,wBAAqC;AACnD,SAAO;AAAA,IACL,MAAM,cAAc,KAAK;AACvB,YAAM,UAAuB;AAAA,QAC3B,UAAU,eAAe,IAAI,QAAQ,IAAI,QAAQ;AAAA,QACjD,GAAI,IAAI,MAAM,SAAS,EAAE,OAAO,YAAY,IAAI,KAAK,EAAE,IAAI,CAAC;AAAA,QAC5D,WAAW;AAAA;AAAA;AAAA;AAAA,QAIX,GAAI,IAAI,SAAS,EAAE,QAAQ,IAAI,OAAO,IAAI,CAAC;AAAA,MAC7C;AACA,UAAI,OAAO;AACX,YAAM,WAA2B,CAAC;AAElC,YAAM,YAA8B,CAAC;AACrC,UAAI,aAAa;AAIjB,UAAI;AACJ,YAAM,MAAM,KAAK,OAAO;AACxB,iBAAS;AACP,cAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,YAAI,KAAK,MAAM;AACb,uBAAa,QAAQ,KAAK,MAAM,UAAU;AAC1C;AAAA,QACF;AACA,cAAM,IAAe,KAAK;AAC1B,YAAI,EAAE,SAAS,cAAc;AAC3B,kBAAQ,EAAE;AACV,cAAI,cAAc,EAAE,IAAI;AAAA,QAC1B,WAAW,EAAE,SAAS,aAAa;AACjC,mBAAS,KAAK;AAAA,YACZ,MAAM;AAAA,YACN,IAAI,EAAE;AAAA,YACN,MAAM,EAAE;AAAA,YACR,OAAQ,EAAE,SAAS,CAAC;AAAA,UACtB,CAAC;AAAA,QACH,WAAW,EAAE,SAAS,mBAAmB;AAGvC,cAAI,mBAAmB,EAAE,IAAI;AAAA,QAC/B,WAAW,EAAE,SAAS,aAAa;AACjC,oBAAU,KAAK,EAAE,MAAM,aAAa,MAAM,EAAE,MAAM,GAAI,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,IAAI,CAAC,EAAG,CAAC;AAAA,QACxG,WAAW,EAAE,SAAS,sBAAsB;AAC1C,oBAAU,KAAK,EAAE,MAAM,aAAa,MAAM,IAAI,cAAc,EAAE,KAAK,CAAC;AAAA,QACtE,WAAW,EAAE,SAAS,SAAS;AAG7B,kBAAQ;AAAA,YACN,aAAa,EAAE;AAAA,YACf,cAAc,EAAE;AAAA,YAChB,GAAI,EAAE,oBAAoB,SAAY,EAAE,iBAAiB,EAAE,gBAAgB,IAAI,CAAC;AAAA,YAChF,GAAI,EAAE,qBAAqB,SAAY,EAAE,kBAAkB,EAAE,iBAAiB,IAAI,CAAC;AAAA,UACrF;AAAA,QACF;AAAA,MACF;AAGA,YAAM,UAAyD,CAAC,GAAG,SAAS;AAC5E,UAAI,KAAM,SAAQ,KAAK,EAAE,MAAM,QAAQ,KAAK,CAAC;AAC7C,cAAQ,KAAK,GAAG,QAAQ;AACxB,aAAO,EAAE,SAAS,YAAY,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,EAAG;AAAA,IAC5D;AAAA,EACF;AACF;","names":[]}

package/dist/agentContext.cjs

@@ -0,0 +1,69 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var agentContext_exports = {};
+__export(agentContext_exports, {
+  renderAgentContext: () => renderAgentContext,
+  useAgentContext: () => useAgentContext
+});
+module.exports = __toCommonJS(agentContext_exports);
+var import_react = require("react");
+var import_TinkerableContext = require("./TinkerableContext");
+var import_auth = require("./auth");
+var import_mounts = require("./mounts");
+var import_fence = require("./fence");
+function useAgentContext(app = {}) {
+  const tinker = (0, import_react.useContext)(import_TinkerableContext.TinkerableContext);
+  const auth = (0, import_auth.useAuth)();
+  const mounts = (0, import_mounts.useMounts)();
+  const nav = tinker?.navigationState;
+  return {
+    repository: nav?.repository ?? "",
+    revision: nav?.ref ?? "",
+    ...auth.status === "signed-in" || auth.status === "signed-out" ? { signedIn: auth.status === "signed-in" } : {},
+    // unknown ⇒ omitted, never guessed
+    mounts: mounts.map((m) => ({ path: m.path, ...m.mode ? { mode: m.mode } : {} })),
+    // Fail-closed (PERSISTENCE §7A.6): a git-backed source classifies shared until
+    // sole authorship of the full reachable history is verifiable — which it is not
+    // today — so both packagings (dispatched repo, fork's own repo) read as
+    // "treated as if others can write".
+    sourceShared: true,
+    sourceSharedBasis: "git-indeterminate",
+    ...app
+  };
+}
+function renderAgentContext(block) {
+  const payload = {
+    repository: block.repository,
+    revision: block.revision,
+    ...block.signedIn === void 0 ? {} : { signedIn: block.signedIn },
+    mounts: block.mounts,
+    sourceShared: block.sourceShared,
+    ...block.entryPath !== void 0 ? { entryPath: block.entryPath } : {},
+    ...block.entryTitle !== void 0 ? { entryTitle: block.entryTitle } : {},
+    ...block.heading !== void 0 ? { heading: block.heading } : {},
+    ...block.selection !== void 0 ? { selection: block.selection } : {}
+  };
+  return (0, import_fence.fenceUntrusted)("agent-context", JSON.stringify(payload, null, 2));
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  renderAgentContext,
+  useAgentContext
+});
+//# sourceMappingURL=agentContext.cjs.map

package/dist/agentContext.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agentContext.tsx"],"sourcesContent":["// The deixis context block (GROVE_AGENT_SPEC §5) — platform primitive B.\n//\n// The user's first questions are indexical: *this* wiki, *this* entry, *this*\n// section. The agent should never need a tool call to know where it is. The SDK\n// assembles the PLATFORM half (repository/ref, sign-in status, mounts, source trust)\n// and the app spreads in its local fields (entry, heading, selection).\n//\n// TWO RULES (normative, G-GA-5):\n//   1. The block is DATA IN A FENCE — never instructions (threat_model P8) — and it\n//      EGRESSES to the provider like everything else in the prompt (R-GA-6), which\n//      is exactly why identity stays out: `signedIn` is a boolean from the baseline\n//      `auth:status` projection; the login/user belongs to `auth:identity`, and\n//      collapsing that split (threat_model T6) widens the egress for convenience.\n//   2. `signedIn` is OMITTED while auth status is `unknown` — three states, because\n//      collapsing `unknown` to `false` is the R3-300 false-banner bug class.\nimport { useContext } from 'react';\nimport { TinkerableContext } from './TinkerableContext';\nimport { useAuth } from './auth';\nimport { useMounts } from './mounts';\nimport { fenceUntrusted } from './fence';\n\n/** The app-local half of the deixis block — supplied by the app at call time. */\nexport interface AgentContextAppFields {\n  /** The entry the reader is on (app router's key/path). */\n  entryPath?: string;\n  /** Its display title. */\n  entryTitle?: string;\n  /** The `#fragment` the app resolved — \"the section you're looking at\". */\n  heading?: string;\n  /** Future: selected text as deixis. */\n  selection?: string;\n}\n\n/** The whole block, as it enters the loop. */\nexport interface AgentContextBlock {\n  repository: string;\n  revision: string;\n  /** Omitted while auth status is `unknown` (R3-300). Status only — never identity. */\n  signedIn?: boolean;\n  mounts: Array<{ path: string; mode?: string }>;\n  /** Whether the source is treated as \"others can write here\" (feeds the reach\n   * card's row and the copy under it). */\n  sourceShared: boolean;\n  /** Why `sourceShared` reads as it does — today the git classifier is fail-closed\n   * indeterminate (`PERSISTENCE §7A.6` Q11), so a git-backed corpus is treated as\n   * shared with the softer copy; a mount trust-mode API would replace this basis. */\n  sourceSharedBasis: 'git-indeterminate' | 'mount-trust-mode';\n  entryPath?: string;\n  entryTitle?: string;\n  heading?: string;\n  selection?: string;\n}\n\n/**\n * Assemble the deixis block: the platform fields from the SDK's own state, the app's\n * local fields spread in. Additive-only; the app passes new local fields as they\n * exist.\n */\nexport function useAgentContext(app: AgentContextAppFields = {}): AgentContextBlock {\n  const tinker = useContext(TinkerableContext);\n  const auth = useAuth();\n  const mounts = useMounts();\n  const nav = tinker?.navigationState;\n  return {\n    repository: nav?.repository ?? '',\n    revision: nav?.ref ?? '',\n    ...(auth.status === 'signed-in' || auth.status === 'signed-out' ? { signedIn: auth.status === 'signed-in' } : {}), // unknown ⇒ omitted, never guessed\n    mounts: mounts.map((m) => ({ path: m.path, ...(m.mode ? { mode: m.mode } : {}) })),\n    // Fail-closed (PERSISTENCE §7A.6): a git-backed source classifies shared until\n    // sole authorship of the full reachable history is verifiable — which it is not\n    // today — so both packagings (dispatched repo, fork's own repo) read as\n    // \"treated as if others can write\".\n    sourceShared: true,\n    sourceSharedBasis: 'git-indeterminate',\n    ...app,\n  };\n}\n\n/** Serialize the block as the fenced data segment that enters the system prompt.\n * Every field is attacker-influenced only through repo/mount metadata — still, the\n * fence is unconditional (R-GA-7): the block is corpus-derived data. */\nexport function renderAgentContext(block: AgentContextBlock): string {\n  // Field allowlist, deliberately: nothing joins the prompt except the fields named\n  // here (G-GA-5's allowlist assertion reads this shape).\n  const payload = {\n    repository: block.repository,\n    revision: block.revision,\n    ...(block.signedIn === undefined ? {} : { signedIn: block.signedIn }),\n    mounts: block.mounts,\n    sourceShared: block.sourceShared,\n    ...(block.entryPath !== undefined ? { entryPath: block.entryPath } : {}),\n    ...(block.entryTitle !== undefined ? { entryTitle: block.entryTitle } : {}),\n    ...(block.heading !== undefined ? { heading: block.heading } : {}),\n    ...(block.selection !== undefined ? { selection: block.selection } : {}),\n  };\n  return fenceUntrusted('agent-context', JSON.stringify(payload, null, 2));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAeA,mBAA2B;AAC3B,+BAAkC;AAClC,kBAAwB;AACxB,oBAA0B;AAC1B,mBAA+B;AAuCxB,SAAS,gBAAgB,MAA6B,CAAC,GAAsB;AAClF,QAAM,aAAS,yBAAW,0CAAiB;AAC3C,QAAM,WAAO,qBAAQ;AACrB,QAAM,aAAS,yBAAU;AACzB,QAAM,MAAM,QAAQ;AACpB,SAAO;AAAA,IACL,YAAY,KAAK,cAAc;AAAA,IAC/B,UAAU,KAAK,OAAO;AAAA,IACtB,GAAI,KAAK,WAAW,eAAe,KAAK,WAAW,eAAe,EAAE,UAAU,KAAK,WAAW,YAAY,IAAI,CAAC;AAAA;AAAA,IAC/G,QAAQ,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC,EAAG,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,IAKjF,cAAc;AAAA,IACd,mBAAmB;AAAA,IACnB,GAAG;AAAA,EACL;AACF;AAKO,SAAS,mBAAmB,OAAkC;AAGnE,QAAM,UAAU;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,UAAU,MAAM;AAAA,IAChB,GAAI,MAAM,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAAA,IACnE,QAAQ,MAAM;AAAA,IACd,cAAc,MAAM;AAAA,IACpB,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,IACtE,GAAI,MAAM,eAAe,SAAY,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,IACzE,GAAI,MAAM,YAAY,SAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IAChE,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,EACxE;AACA,aAAO,6BAAe,iBAAiB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AACzE;","names":[]}

package/dist/agentContext.d.cts

@@ -0,0 +1,45 @@
+/** The app-local half of the deixis block — supplied by the app at call time. */
+interface AgentContextAppFields {
+    /** The entry the reader is on (app router's key/path). */
+    entryPath?: string;
+    /** Its display title. */
+    entryTitle?: string;
+    /** The `#fragment` the app resolved — "the section you're looking at". */
+    heading?: string;
+    /** Future: selected text as deixis. */
+    selection?: string;
+}
+/** The whole block, as it enters the loop. */
+interface AgentContextBlock {
+    repository: string;
+    revision: string;
+    /** Omitted while auth status is `unknown` (R3-300). Status only — never identity. */
+    signedIn?: boolean;
+    mounts: Array<{
+        path: string;
+        mode?: string;
+    }>;
+    /** Whether the source is treated as "others can write here" (feeds the reach
+     * card's row and the copy under it). */
+    sourceShared: boolean;
+    /** Why `sourceShared` reads as it does — today the git classifier is fail-closed
+     * indeterminate (`PERSISTENCE §7A.6` Q11), so a git-backed corpus is treated as
+     * shared with the softer copy; a mount trust-mode API would replace this basis. */
+    sourceSharedBasis: 'git-indeterminate' | 'mount-trust-mode';
+    entryPath?: string;
+    entryTitle?: string;
+    heading?: string;
+    selection?: string;
+}
+/**
+ * Assemble the deixis block: the platform fields from the SDK's own state, the app's
+ * local fields spread in. Additive-only; the app passes new local fields as they
+ * exist.
+ */
+declare function useAgentContext(app?: AgentContextAppFields): AgentContextBlock;
+/** Serialize the block as the fenced data segment that enters the system prompt.
+ * Every field is attacker-influenced only through repo/mount metadata — still, the
+ * fence is unconditional (R-GA-7): the block is corpus-derived data. */
+declare function renderAgentContext(block: AgentContextBlock): string;
+
+export { type AgentContextAppFields, type AgentContextBlock, renderAgentContext, useAgentContext };

package/dist/agentContext.d.ts

@@ -0,0 +1,45 @@
+/** The app-local half of the deixis block — supplied by the app at call time. */
+interface AgentContextAppFields {
+    /** The entry the reader is on (app router's key/path). */
+    entryPath?: string;
+    /** Its display title. */
+    entryTitle?: string;
+    /** The `#fragment` the app resolved — "the section you're looking at". */
+    heading?: string;
+    /** Future: selected text as deixis. */
+    selection?: string;
+}
+/** The whole block, as it enters the loop. */
+interface AgentContextBlock {
+    repository: string;
+    revision: string;
+    /** Omitted while auth status is `unknown` (R3-300). Status only — never identity. */
+    signedIn?: boolean;
+    mounts: Array<{
+        path: string;
+        mode?: string;
+    }>;
+    /** Whether the source is treated as "others can write here" (feeds the reach
+     * card's row and the copy under it). */
+    sourceShared: boolean;
+    /** Why `sourceShared` reads as it does — today the git classifier is fail-closed
+     * indeterminate (`PERSISTENCE §7A.6` Q11), so a git-backed corpus is treated as
+     * shared with the softer copy; a mount trust-mode API would replace this basis. */
+    sourceSharedBasis: 'git-indeterminate' | 'mount-trust-mode';
+    entryPath?: string;
+    entryTitle?: string;
+    heading?: string;
+    selection?: string;
+}
+/**
+ * Assemble the deixis block: the platform fields from the SDK's own state, the app's
+ * local fields spread in. Additive-only; the app passes new local fields as they
+ * exist.
+ */
+declare function useAgentContext(app?: AgentContextAppFields): AgentContextBlock;
+/** Serialize the block as the fenced data segment that enters the system prompt.
+ * Every field is attacker-influenced only through repo/mount metadata — still, the
+ * fence is unconditional (R-GA-7): the block is corpus-derived data. */
+declare function renderAgentContext(block: AgentContextBlock): string;
+
+export { type AgentContextAppFields, type AgentContextBlock, renderAgentContext, useAgentContext };

package/dist/agentContext.js

@@ -0,0 +1,45 @@
+import "./chunk-VHAA22YE.js";
+import { useContext } from "react";
+import { TinkerableContext } from "./TinkerableContext";
+import { useAuth } from "./auth";
+import { useMounts } from "./mounts";
+import { fenceUntrusted } from "./fence";
+function useAgentContext(app = {}) {
+  const tinker = useContext(TinkerableContext);
+  const auth = useAuth();
+  const mounts = useMounts();
+  const nav = tinker?.navigationState;
+  return {
+    repository: nav?.repository ?? "",
+    revision: nav?.ref ?? "",
+    ...auth.status === "signed-in" || auth.status === "signed-out" ? { signedIn: auth.status === "signed-in" } : {},
+    // unknown ⇒ omitted, never guessed
+    mounts: mounts.map((m) => ({ path: m.path, ...m.mode ? { mode: m.mode } : {} })),
+    // Fail-closed (PERSISTENCE §7A.6): a git-backed source classifies shared until
+    // sole authorship of the full reachable history is verifiable — which it is not
+    // today — so both packagings (dispatched repo, fork's own repo) read as
+    // "treated as if others can write".
+    sourceShared: true,
+    sourceSharedBasis: "git-indeterminate",
+    ...app
+  };
+}
+function renderAgentContext(block) {
+  const payload = {
+    repository: block.repository,
+    revision: block.revision,
+    ...block.signedIn === void 0 ? {} : { signedIn: block.signedIn },
+    mounts: block.mounts,
+    sourceShared: block.sourceShared,
+    ...block.entryPath !== void 0 ? { entryPath: block.entryPath } : {},
+    ...block.entryTitle !== void 0 ? { entryTitle: block.entryTitle } : {},
+    ...block.heading !== void 0 ? { heading: block.heading } : {},
+    ...block.selection !== void 0 ? { selection: block.selection } : {}
+  };
+  return fenceUntrusted("agent-context", JSON.stringify(payload, null, 2));
+}
+export {
+  renderAgentContext,
+  useAgentContext
+};
+//# sourceMappingURL=agentContext.js.map

package/dist/agentContext.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/agentContext.tsx"],"sourcesContent":["// The deixis context block (GROVE_AGENT_SPEC §5) — platform primitive B.\n//\n// The user's first questions are indexical: *this* wiki, *this* entry, *this*\n// section. The agent should never need a tool call to know where it is. The SDK\n// assembles the PLATFORM half (repository/ref, sign-in status, mounts, source trust)\n// and the app spreads in its local fields (entry, heading, selection).\n//\n// TWO RULES (normative, G-GA-5):\n//   1. The block is DATA IN A FENCE — never instructions (threat_model P8) — and it\n//      EGRESSES to the provider like everything else in the prompt (R-GA-6), which\n//      is exactly why identity stays out: `signedIn` is a boolean from the baseline\n//      `auth:status` projection; the login/user belongs to `auth:identity`, and\n//      collapsing that split (threat_model T6) widens the egress for convenience.\n//   2. `signedIn` is OMITTED while auth status is `unknown` — three states, because\n//      collapsing `unknown` to `false` is the R3-300 false-banner bug class.\nimport { useContext } from 'react';\nimport { TinkerableContext } from './TinkerableContext';\nimport { useAuth } from './auth';\nimport { useMounts } from './mounts';\nimport { fenceUntrusted } from './fence';\n\n/** The app-local half of the deixis block — supplied by the app at call time. */\nexport interface AgentContextAppFields {\n  /** The entry the reader is on (app router's key/path). */\n  entryPath?: string;\n  /** Its display title. */\n  entryTitle?: string;\n  /** The `#fragment` the app resolved — \"the section you're looking at\". */\n  heading?: string;\n  /** Future: selected text as deixis. */\n  selection?: string;\n}\n\n/** The whole block, as it enters the loop. */\nexport interface AgentContextBlock {\n  repository: string;\n  revision: string;\n  /** Omitted while auth status is `unknown` (R3-300). Status only — never identity. */\n  signedIn?: boolean;\n  mounts: Array<{ path: string; mode?: string }>;\n  /** Whether the source is treated as \"others can write here\" (feeds the reach\n   * card's row and the copy under it). */\n  sourceShared: boolean;\n  /** Why `sourceShared` reads as it does — today the git classifier is fail-closed\n   * indeterminate (`PERSISTENCE §7A.6` Q11), so a git-backed corpus is treated as\n   * shared with the softer copy; a mount trust-mode API would replace this basis. */\n  sourceSharedBasis: 'git-indeterminate' | 'mount-trust-mode';\n  entryPath?: string;\n  entryTitle?: string;\n  heading?: string;\n  selection?: string;\n}\n\n/**\n * Assemble the deixis block: the platform fields from the SDK's own state, the app's\n * local fields spread in. Additive-only; the app passes new local fields as they\n * exist.\n */\nexport function useAgentContext(app: AgentContextAppFields = {}): AgentContextBlock {\n  const tinker = useContext(TinkerableContext);\n  const auth = useAuth();\n  const mounts = useMounts();\n  const nav = tinker?.navigationState;\n  return {\n    repository: nav?.repository ?? '',\n    revision: nav?.ref ?? '',\n    ...(auth.status === 'signed-in' || auth.status === 'signed-out' ? { signedIn: auth.status === 'signed-in' } : {}), // unknown ⇒ omitted, never guessed\n    mounts: mounts.map((m) => ({ path: m.path, ...(m.mode ? { mode: m.mode } : {}) })),\n    // Fail-closed (PERSISTENCE §7A.6): a git-backed source classifies shared until\n    // sole authorship of the full reachable history is verifiable — which it is not\n    // today — so both packagings (dispatched repo, fork's own repo) read as\n    // \"treated as if others can write\".\n    sourceShared: true,\n    sourceSharedBasis: 'git-indeterminate',\n    ...app,\n  };\n}\n\n/** Serialize the block as the fenced data segment that enters the system prompt.\n * Every field is attacker-influenced only through repo/mount metadata — still, the\n * fence is unconditional (R-GA-7): the block is corpus-derived data. */\nexport function renderAgentContext(block: AgentContextBlock): string {\n  // Field allowlist, deliberately: nothing joins the prompt except the fields named\n  // here (G-GA-5's allowlist assertion reads this shape).\n  const payload = {\n    repository: block.repository,\n    revision: block.revision,\n    ...(block.signedIn === undefined ? {} : { signedIn: block.signedIn }),\n    mounts: block.mounts,\n    sourceShared: block.sourceShared,\n    ...(block.entryPath !== undefined ? { entryPath: block.entryPath } : {}),\n    ...(block.entryTitle !== undefined ? { entryTitle: block.entryTitle } : {}),\n    ...(block.heading !== undefined ? { heading: block.heading } : {}),\n    ...(block.selection !== undefined ? { selection: block.selection } : {}),\n  };\n  return fenceUntrusted('agent-context', JSON.stringify(payload, null, 2));\n}\n"],"mappings":";AAeA,SAAS,kBAAkB;AAC3B,SAAS,yBAAyB;AAClC,SAAS,eAAe;AACxB,SAAS,iBAAiB;AAC1B,SAAS,sBAAsB;AAuCxB,SAAS,gBAAgB,MAA6B,CAAC,GAAsB;AAClF,QAAM,SAAS,WAAW,iBAAiB;AAC3C,QAAM,OAAO,QAAQ;AACrB,QAAM,SAAS,UAAU;AACzB,QAAM,MAAM,QAAQ;AACpB,SAAO;AAAA,IACL,YAAY,KAAK,cAAc;AAAA,IAC/B,UAAU,KAAK,OAAO;AAAA,IACtB,GAAI,KAAK,WAAW,eAAe,KAAK,WAAW,eAAe,EAAE,UAAU,KAAK,WAAW,YAAY,IAAI,CAAC;AAAA;AAAA,IAC/G,QAAQ,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC,EAAG,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,IAKjF,cAAc;AAAA,IACd,mBAAmB;AAAA,IACnB,GAAG;AAAA,EACL;AACF;AAKO,SAAS,mBAAmB,OAAkC;AAGnE,QAAM,UAAU;AAAA,IACd,YAAY,MAAM;AAAA,IAClB,UAAU,MAAM;AAAA,IAChB,GAAI,MAAM,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,MAAM,SAAS;AAAA,IACnE,QAAQ,MAAM;AAAA,IACd,cAAc,MAAM;AAAA,IACpB,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,IACtE,GAAI,MAAM,eAAe,SAAY,EAAE,YAAY,MAAM,WAAW,IAAI,CAAC;AAAA,IACzE,GAAI,MAAM,YAAY,SAAY,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,IAChE,GAAI,MAAM,cAAc,SAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,EACxE;AACA,SAAO,eAAe,iBAAiB,KAAK,UAAU,SAAS,MAAM,CAAC,CAAC;AACzE;","names":[]}