@namzu/bedrock 1.0.3 → 2.0.0

package/CHANGELOG.md

@@ -1,5 +1,245 @@
 # Changelog
 
+## 2.0.0
+
+### Major Changes
+
+- 935b8f3: Three controls a caller could set that the runtime then quietly declined to apply.
+
+  - **`toolChoice: 'none'` permitted tool calls on two drivers.** It means the model must not call a tool. One driver mapped it to the wire's "auto" and the other to `{ type: 'auto' }` — both of which say the model _may_. A caller that had forbidden tool use got a request that allowed it, with nothing in the response to say so. The runtime depends on the guarantee: an advisory consultation passes `'none'` so the advisor answers in prose, into a turn where no executor is waiting for a tool call. Both drivers now answer `'none'` by sending no tools at all, which no wire format can misread.
+
+  - **`memoryLimitMb` and `maxProcesses` were dropped by the stronger isolation tiers.** They were applied inside the unconfined tier's branch only, so asking for namespace or profile isolation silently removed the blast-radius caps — a control failing in the one direction nobody checks. They are the same shell builtin on every tier; the stronger tiers now apply them one level in, inside the wrapper they already spawn through, and keep doing their own job. The sibling backend in the sandbox package already refuses per-sandbox controls it cannot enforce rather than ignoring them; this is the same rule, satisfied by enforcing.
+
+  - **`AgentManager.dispose()` cancelled nothing.** It called `cancelAll('' as RunId)`, and `cancelAll` filters by parent run — no task has an empty parent, so it matched nothing, and the next lines cleared the instance map. Every live child was released without its abort controller firing: the work kept running, the budget kept draining, and nothing was left holding a reference to stop it. It now cancels every live child before dropping them. `cancelAll` stays scoped to one parent, which is its actual job.
+
+  `toBedrockToolConfig` and `buildLimitedSpawn` are exported so the mapping and the spawn shape can be asserted directly rather than through a live process.
+
+### Minor Changes
+
+- 935b8f3: Prompt caching is now requested, not just measured.
+
+  The driver read the cache-hit and cache-write counters off every response
+  and never asked for caching, so both were permanently zero: the entire
+  static prefix — tool schemas, system instructions, the whole conversation
+  so far — was re-sent and re-billed at full rate on every single turn of
+  every run. Nothing failed, which is why it went unnoticed; it was purely
+  money and latency.
+
+  A breakpoint on this wire is a content BLOCK rather than an annotation on a
+  neighbouring one: everything ahead of it in render order is cached. Render
+  order is tools → system → messages, so the driver places one at the tail of
+  each section, and each later breakpoint covers everything before it:
+
+  - after the tool schemas, which render first and are the largest static
+    segment — this keeps them cached even when the conversation below changes
+    every turn;
+  - after the last system block the runtime tagged as static, NOT at the end
+    of the system section. The per-run dynamic tail comes after that tag; a
+    breakpoint over text that changes every run invalidates the entry each
+    turn and bills a cache write for nothing;
+  - after the last message, so the next iteration — which only appends —
+    reads all the prior history at cache rates.
+
+  Three breakpoints, one under the wire's limit of four. None are placed
+  unless the caller sets `cacheControl`, and none are placed over system
+  text with nothing static in it or on a message with no content.
+
+- 935b8f3: Every driver can now see.
+
+  These three dropped `attachments` outright, so a user who attached a
+  screenshot got a turn about nothing. `supportsVision: false` said so, which
+  made the declaration honest and the driver useless — and it was the last
+  place in the estate where a namzu capability existed on one driver and
+  silently did not on another.
+
+  Each wire carries an image differently, so this is one intent and three
+  mappings:
+
+  - **Converse**: raw bytes in an image content block beside the text. The
+    tool-result path already did this; the user path never looked at
+    `attachments`.
+  - **The two-dialect HTTP driver**: a `data:` URI content part on one
+    dialect, a base64 source block on the other.
+  - **The gateway driver**: a `data:` URI content part.
+
+  Across all three: a media type the endpoint cannot decode is named in the
+  text rather than sent, because a payload it rejects fails the whole request
+  and losing the turn is worse than losing sight of one image. A message with
+  no attachments keeps its plain-string content, so nothing about an ordinary
+  request changes shape. Several attachments on one message are carried in
+  order.
+
+  An image inside a **tool result** still degrades to a text placeholder on
+  the HTTP and gateway drivers: a tool message is text-only in those dialects,
+  so there is nowhere to put it. Converse carries it, and always did.
+
+### Patch Changes
+
+- 935b8f3: The conversation cache anchor advances, so the next request can read it.
+
+  A single breakpoint at the conversation tail writes a new cache entry every
+  turn and reads none of them: by the next request the tail has moved, so the
+  marker sits somewhere the previous entry does not cover. The tools and
+  system tiers keep hitting through their own breakpoints — which is exactly
+  what made this invisible. Only the messages tier silently re-billed as a
+  write.
+
+  Both drivers now place a second anchor one turn back, which is where the
+  previous request put its tail marker and therefore the prefix that is
+  already cached.
+
+  It matters most where the history grows fastest. Pending tool results
+  collapse into a single message, so a fan-out of ten parallel calls appends
+  twenty content blocks in one turn — far enough to push the prior boundary
+  out of reach of a backward scan that stops at the first non-empty message.
+
+  This spends the fourth of the four allowed breakpoints, previously
+  documented as deliberately unspent. It is spent on the one tier that was
+  never hitting. A conversation with a single message still gets one anchor,
+  because there is nowhere behind it to put a second.
+
+- 935b8f3: Retry now works on the bedrock driver, and the shared classifier reads a
+  status wherever a vendor hides it.
+
+  An unclassified error is treated as non-retryable, which is the right
+  default — but it meant the retry policy was effectively dead on this
+  driver, and the one failure most worth backing off from was the one that
+  killed the run. The service reports failures as named exception classes,
+  and the classifier looked at neither the name nor the status, because the
+  status lives in a metadata bag rather than on the error.
+
+  - `classifyProviderError` now also reads `$metadata.httpStatusCode`. A
+    status is a status wherever it hides, and this helps any driver — first
+    or third party — whose SDK reports it that way.
+  - The bedrock driver maps its own exception vocabulary to provider error
+    codes: throttling and quota to `rate_limit`, unavailable and not-ready to
+    `overloaded`, internal and stream faults to `server_error`, and the
+    non-retryable ones (`ValidationException`, `AccessDeniedException`,
+    `ResourceNotFoundException`) to their exact codes so they fail fast
+    instead of burning the retry budget.
+
+  The vocabulary lives in the driver rather than the shared classifier: a
+  driver knows its own vendor's error names, and the classifier should stay
+  generic. An unrecognised exception passes through untouched — an honest
+  unknown beats a confident wrong classification.
+
+- 935b8f3: Lift the dependency floor to versions without published advisories
+
+  Eighty-two open advisories collapsed to a handful of real decisions, because most of them were the same package reached through one path.
+
+  The telemetry exporters carried a serialization library with twenty-four advisories against it, two of them critical. The exporters move from the 0.57 line to 0.221, and the stable packages beside them from 1.x to 2.x — a major bump for this package, since a consumer pinning the older peers must move with it.
+
+  The two vendor driver SDKs move to their current releases, closing the advisories that came with them.
+
+  The test runner accounted for fourteen critical advisories on its own. It is a development dependency and never reaches a published artifact, but it runs in CI against the repository's own contents, so it moves to the first patched release rather than being waved through as out-of-scope.
+
+- 935b8f3: Stop dropping tool-failure status on Bedrock, and stop accepting a sandbox
+  egress policy this backend cannot enforce.
+
+  - **Bedrock** flattened every failed tool result into an ordinary success.
+    The executor computed `isError`, the SSE and A2A bridges carried it, and
+    the driver dropped it — even though Converse has a first-class
+    `toolResult.status`. The model's trained tool-failure recovery path keys
+    off that field, so namzu was relying on prose formatting to convey "that
+    call failed".
+
+    Scope note: the five OpenAI-shaped drivers are NOT affected, because
+    Chat Completions has no error field on a tool message at all. The error
+    reaches those models inside the result text, which is the only channel
+    the protocol has.
+
+  - **Docker sandbox** accepted `EgressPolicy` and silently ignored it. A
+    host that set `deny-all` believed the container had no network and it had
+    whatever `network` was configured. A security control that is accepted
+    and ignored is worse than one that does not exist. Now: `deny-all` maps
+    to `--network none` (which Docker enforces natively), `allow-all` keeps
+    the configured network, and `static` / `resolver` **throw** — this
+    backend has no proxy to filter hosts through, and downgrading a
+    restrictive policy to "allow everything" is exactly the failure worth
+    refusing.
+
+  - **Docker sandbox** containers now run with `--cap-drop=ALL` and
+    `--security-opt=no-new-privileges`, plus an opt-in `runAsUser`.
+    `CAP_DAC_OVERRIDE` alone walks past the read-only bind mounts the layout
+    sets up, and without `no-new-privileges` a setuid binary in the image
+    re-escalates.
+
+- 935b8f3: Stop dumping a tool result's base64 payload into the prompt.
+
+  Four drivers mishandled a tool result carrying content blocks, each in its
+  own way: bedrock and the http driver's anthropic dialect `JSON.stringify`d
+  the whole array, putting a screenshot's base64 into the prompt as JSON
+  text; openrouter and the http driver's openai dialect passed the array
+  through raw to an endpoint expecting a string; lmstudio folded it into a
+  template literal, producing `[object Object]` per block. The model cannot
+  decode any of it, and it costs a fortune in tokens.
+
+  - The three text-only wires now flatten with the SDK's existing helper,
+    which names a non-text block and its size instead of inlining it. The
+    openai and ollama drivers already did this — the helper was there and
+    four callers were missing.
+  - **bedrock sends the image as an image.** That wire carries images
+    natively, so a placeholder would be a downgrade the other drivers accept
+    only because their format has no room for one. Text and image survive as
+    separate blocks in order, and a media type the format does not accept
+    still degrades to a named placeholder rather than being smuggled through
+    as text.
+
+- 935b8f3: Four drivers dumped tool-result payloads into the prompt, and one ignored the strict-schema hint.
+
+  **A tool result carrying an image was `JSON.stringify`d** on four drivers, so a screenshot reached the model as a wall of quoted base64. The model paid for every character, could read none of them, and — worse — saw a serialized object where a picture should be, with nothing saying anything had been withheld. The SDK's `toolResultToText` exists for exactly this and produces a named placeholder reporting the media type and the size. All four now use it: `@namzu/bedrock`, both dialects of `@namzu/http`, and `@namzu/lmstudio`.
+
+  **`enforceToolInputSchema` was ignored by `@namzu/openai`.** It names the tools whose model-facing schema should be enforced by constrained generation rather than merely suggested; both sibling drivers consumed it. A caller who had asked for a guaranteed-valid tool input silently got a best-effort one and learned about it from a repair attempt. This is the wire the flag maps onto most directly — it takes the flag on the function itself. The existing test asserting the tools went through untouched read as "the hint is kept out of the request" and actually pinned "the hint does nothing"; it now asserts the hint is consumed and still never appears verbatim.
+
+  **An extended-thinking request is refused by `@namzu/openai` rather than dropped.** The parameter was accepted and ignored, so a caller who asked for reasoning got an ordinary completion with an empty reasoning list — which reads as "the model did not reason" rather than "nobody asked it to". Turning thinking off stays a no-op, since that is the state the driver is already in.
+
+  Eleven previously empty test files now cover these drivers, including the capability claims themselves: every driver that declares no vision, documents or tools is pinned against drift in both directions, because the runtime warns or fails on those flags before a request is built, and a flag flipped ahead of its mapping is as wrong as a mapping written without the flag.
+
+- 935b8f3: Overflow reaches the rescue that exists for it.
+
+  Overflow is the one 4xx the runtime can act on: it sheds history and
+  retries. Everything else in the 400 family is surfaced. So the rescue is
+  gated on the code being **exactly** `context_length_exceeded`, and anything
+  that misses that gate dies holding the remedy.
+
+  Three things missed it. Measured before and after, five of six realistic
+  overflow shapes never reached relief; now all six do.
+
+  - **The structural code was extracted and then discarded.** The cause-chain
+    walk returned the first `code` it found and fed it only to the two
+    transport-errno sets, so a provider that said `context_length_exceeded` in
+    the one field designed to say it was answered with a substring search that
+    did not match. A structural code is now consulted **before** the status,
+    because it is strictly more specific: a 400 is a category, the code is the
+    diagnosis. The gateway `type` discriminator and a nested error envelope
+    are read the same way.
+  - **The phrase list missed the common wordings.** "too long for", "maximum
+    length", "exceeds the maximum", "input is too large" all fell through to a
+    plain non-retryable invalid request.
+  - **The Converse driver pre-filed `ValidationException` as
+    `invalid_request`.** That name covers both a malformed request and a
+    prompt past the model's window, and only one of those is recoverable — so
+    guessing from the name made the recoverable case unrecoverable by
+    construction, because the shared classifier short-circuits on an error
+    that already carries a code and never read the body. It now hands that one
+    name to the classifier. The result is still a `ProviderError`, so the
+    driver's contract is unchanged; it just stops answering a question it
+    cannot answer from the name alone.
+
+  The rate-limit half of the same class is fixed alongside: a provider that
+  reports `rate_limit_exceeded` structurally under a 400 is now retryable
+  instead of being filed as a bad request.
+
+- 935b8f3: A user message can carry a document
+
+  Documents existed in the type system only in the tool-result direction, and both first-party drivers mapped images only on the input side. So "here is the contract, answer questions about it" — a mainstream workload — was reachable only by having a tool read the file and stringify it. That loses the provider's native document handling (page structure, built-in OCR, citations) and pays the text cost instead.
+
+  `UserMessage.attachments` is now `MessageAttachment[]`: an image or a document. The discriminant is optional and stays optional — an attachment without one is an image, which is what every attachment was before, so no existing caller changes.
+
+  `supportsDocuments` sits beside `supportsVision` in the driver capability declaration, and the runtime checks it the same way: a document sent to a driver that declares `false` warns before the request, or throws under `strictCapabilities`, instead of letting the model answer about a file it never saw. The two are counted separately because they are separate wire shapes and a driver can map one without the other.
+
+  The two first-party drivers map documents natively. The remaining five map images only and now say so; a document reaching them degrades to a named placeholder that says which kind was dropped, rather than one that calls a document an image.
+
 ## 1.0.3
 
 ### Patch Changes

package/dist/__tests__/bedrock.test.js

@@ -39,6 +39,7 @@ describe('@namzu/bedrock', () => {
                 supportsStreaming: true,
                 supportsFunctionCalling: true,
                 supportsVision: false,
+                supportsDocuments: false,
             });
         });
         it('is exposed on the provider instance for runtime negotiation', () => {
@@ -46,5 +47,48 @@ describe('@namzu/bedrock', () => {
             expect(provider.capabilities).toEqual(BEDROCK_CAPABILITIES);
         });
     });
+    it('keeps the Namzu enforcement hint out of the Bedrock command', async () => {
+        const provider = new BedrockProvider({ region: 'us-east-1' });
+        let commandInput;
+        provider.client = {
+            send: async (command) => {
+                commandInput = command.input;
+                return {
+                    $metadata: { requestId: 'request-test' },
+                    stream: (async function* () { })(),
+                };
+            },
+        };
+        for await (const _chunk of provider.chatStream({
+            model: 'anthropic.claude-sonnet-5-v1:0',
+            messages: [{ role: 'user', content: 'edit' }],
+            tools: [
+                {
+                    type: 'function',
+                    function: {
+                        name: 'edit',
+                        description: 'Edit',
+                        parameters: { type: 'object' },
+                    },
+                },
+            ],
+            enforceToolInputSchema: ['edit'],
+        })) {
+            // Drain the empty test stream.
+        }
+        expect(commandInput).not.toHaveProperty('enforceToolInputSchema');
+        expect(commandInput?.toolConfig).toEqual({
+            tools: [
+                {
+                    toolSpec: {
+                        name: 'edit',
+                        description: 'Edit',
+                        inputSchema: { json: { type: 'object' } },
+                    },
+                },
+            ],
+            toolChoice: { auto: {} },
+        });
+    });
 });
 //# sourceMappingURL=bedrock.test.js.map

package/dist/__tests__/bedrock.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"bedrock.test.js","sourceRoot":"","sources":["../../src/__tests__/bedrock.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEpF,6EAA6E;AAC7E,yEAAyE;AACzE,8CAA8C;AAC9C,UAAU,CAAC,GAAG,EAAE;IACf,IAAI,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;AACF,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC3D,eAAe,EAAE,CAAA;YACjB,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC1D,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YAC1E,eAAe,EAAE,CAAA;YACjB,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YAClE,eAAe,EAAE,CAAA;YACjB,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;YAC9D,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACvE,eAAe,EAAE,CAAA;YACjB,MAAM,IAAI,GAAG,gBAAgB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;YACxD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBACpC,aAAa,EAAE,IAAI;gBACnB,iBAAiB,EAAE,IAAI;gBACvB,uBAAuB,EAAE,IAAI;gBAC7B,cAAc,EAAE,KAAK;aACrB,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACtE,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;YAC7D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}
+{"version":3,"file":"bedrock.test.js","sourceRoot":"","sources":["../../src/__tests__/bedrock.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AACzD,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAEpF,6EAA6E;AAC7E,yEAAyE;AACzE,8CAA8C;AAC9C,UAAU,CAAC,GAAG,EAAE;IACf,IAAI,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,gBAAgB,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IACvC,CAAC;AACF,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC3D,eAAe,EAAE,CAAA;YACjB,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC1D,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;YAC1E,eAAe,EAAE,CAAA;YACjB,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAA;QACrE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YAClE,eAAe,EAAE,CAAA;YACjB,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;YAC9D,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;YACvE,eAAe,EAAE,CAAA;YACjB,MAAM,IAAI,GAAG,gBAAgB,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;YACxD,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YACjD,MAAM,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBACpC,aAAa,EAAE,IAAI;gBACnB,iBAAiB,EAAE,IAAI;gBACvB,uBAAuB,EAAE,IAAI;gBAC7B,cAAc,EAAE,KAAK;gBACrB,iBAAiB,EAAE,KAAK;aACxB,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACtE,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;YAC7D,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;QAC7D,IAAI,YAAiD,CACpD;QAAC,QAA2C,CAAC,MAAM,GAAG;YACtD,IAAI,EAAE,KAAK,EAAE,OAA2C,EAAE,EAAE;gBAC3D,YAAY,GAAG,OAAO,CAAC,KAAK,CAAA;gBAC5B,OAAO;oBACN,SAAS,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE;oBACxC,MAAM,EAAE,CAAC,KAAK,SAAS,CAAC,MAAK,CAAC,CAAC,EAAE;iBACjC,CAAA;YACF,CAAC;SACD,CAAA;QAED,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC;YAC9C,KAAK,EAAE,gCAAgC;YACvC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YAC7C,KAAK,EAAE;gBACN;oBACC,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE;wBACT,IAAI,EAAE,MAAM;wBACZ,WAAW,EAAE,MAAM;wBACnB,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;qBAC9B;iBACD;aACD;YACD,sBAAsB,EAAE,CAAC,MAAM,CAAC;SAChC,CAAC,EAAE,CAAC;YACJ,+BAA+B;QAChC,CAAC;QAED,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAA;QACjE,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE;gBACN;oBACC,QAAQ,EAAE;wBACT,IAAI,EAAE,MAAM;wBACZ,WAAW,EAAE,MAAM;wBACnB,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;qBACzC;iBACD;aACD;YACD,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;SACxB,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/__tests__/prompt-cache.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prompt-cache.test.d.ts.map

package/dist/__tests__/prompt-cache.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-cache.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/prompt-cache.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/prompt-cache.test.js

@@ -0,0 +1,68 @@
+import { describe, expect, it } from 'vitest';
+import { parseBedrockUsage } from '../client.js';
+/**
+ * Cache reads and cache writes are priced differently from ordinary input,
+ * so folding either into the prompt count misreports what a run cost — and
+ * misreports it silently, because the total still looks plausible.
+ *
+ * The counters are also the only evidence that the breakpoints are working
+ * at all: a run whose cached count stays at zero is paying full price for
+ * a prefix it believes is cached, and nothing else says so.
+ */
+describe('cache counters are reported on their own axis', () => {
+    it('keeps reads out of the prompt count', () => {
+        const usage = parseBedrockUsage({
+            inputTokens: 10,
+            outputTokens: 2,
+            cacheReadInputTokenCount: 900,
+        });
+        expect(usage.promptTokens).toBe(10);
+        expect(usage.cachedTokens).toBe(900);
+    });
+    it('keeps writes on their own axis too', () => {
+        const usage = parseBedrockUsage({
+            inputTokens: 10,
+            outputTokens: 2,
+            cacheWriteInputTokenCount: 40,
+        });
+        expect(usage.cacheWriteTokens).toBe(40);
+        expect(usage.promptTokens).toBe(10);
+    });
+    it('reports both when both happen in one turn', () => {
+        const usage = parseBedrockUsage({
+            inputTokens: 10,
+            outputTokens: 2,
+            cacheReadInputTokenCount: 900,
+            cacheWriteInputTokenCount: 40,
+        });
+        expect(usage).toMatchObject({ cachedTokens: 900, cacheWriteTokens: 40 });
+    });
+    it('reads an absent counter as zero, not undefined', () => {
+        const usage = parseBedrockUsage({ inputTokens: 5, outputTokens: 1 });
+        // A consumer summing these must not have to guard every field; an
+        // undefined here becomes NaN one addition later.
+        expect(usage.cachedTokens).toBe(0);
+        expect(usage.cacheWriteTokens).toBe(0);
+    });
+    it('totals input and output, and nothing else', () => {
+        const usage = parseBedrockUsage({
+            inputTokens: 10,
+            outputTokens: 2,
+            cacheReadInputTokenCount: 900,
+        });
+        // Cached reads are already counted upstream; adding them here would
+        // double-count the same tokens in the run's own ledger.
+        expect(usage.totalTokens).toBe(12);
+    });
+    it('reads a missing usage payload as all zeros', () => {
+        const usage = parseBedrockUsage(undefined);
+        expect(usage).toEqual({
+            promptTokens: 0,
+            completionTokens: 0,
+            totalTokens: 0,
+            cachedTokens: 0,
+            cacheWriteTokens: 0,
+        });
+    });
+});
+//# sourceMappingURL=prompt-cache.test.js.map

package/dist/__tests__/prompt-cache.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-cache.test.js","sourceRoot":"","sources":["../../src/__tests__/prompt-cache.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD;;;;;;;;GAQG;AAEH,QAAQ,CAAC,+CAA+C,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC9C,MAAM,KAAK,GAAG,iBAAiB,CAAC;YAC/B,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,CAAC;YACf,wBAAwB,EAAE,GAAG;SAC7B,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC7C,MAAM,KAAK,GAAG,iBAAiB,CAAC;YAC/B,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,CAAC;YACf,yBAAyB,EAAE,EAAE;SAC7B,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,KAAK,GAAG,iBAAiB,CAAC;YAC/B,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,CAAC;YACf,wBAAwB,EAAE,GAAG;YAC7B,yBAAyB,EAAE,EAAE;SAC7B,CAAC,CAAA;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACzD,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAA;QAEpE,kEAAkE;QAClE,iDAAiD;QACjD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,KAAK,GAAG,iBAAiB,CAAC;YAC/B,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,CAAC;YACf,wBAAwB,EAAE,GAAG;SAC7B,CAAC,CAAA;QAEF,oEAAoE;QACpE,wDAAwD;QACxD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACrD,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAE1C,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACrB,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;SACnB,CAAC,CAAA;IACH,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/__tests__/tool-choice-none.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tool-choice-none.test.d.ts.map

package/dist/__tests__/tool-choice-none.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-choice-none.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/tool-choice-none.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/tool-choice-none.test.js

@@ -0,0 +1,76 @@
+import { describe, expect, it } from 'vitest';
+import { toBedrockToolConfig } from '../client.js';
+/**
+ * `toolChoice: 'none'` means the model must not call a tool. This driver
+ * mapped it to the wire's "auto", which means the model MAY — the exact
+ * opposite of what the caller asked for, and silent.
+ *
+ * The runtime relies on it: an advisory consultation passes `'none'` so the
+ * advisor answers in prose. Under this driver the advisor could emit a tool
+ * call instead, into a turn with no executor waiting for one.
+ *
+ * The fix is not a better mapping. Every version of every wire format
+ * agrees a model cannot call a tool it was never given, so `'none'` sends
+ * no tools at all — a guarantee rather than a request.
+ */
+const TOOLS = [
+    {
+        type: 'function',
+        function: { name: 'read', description: 'read a file', parameters: { type: 'object' } },
+    },
+];
+describe("a caller that said 'none' gets no tools on the wire", () => {
+    it('omits the tool config entirely', () => {
+        expect(toBedrockToolConfig({ model: 'm', messages: [], tools: TOOLS, toolChoice: 'none' })).toBe(undefined);
+    });
+    it('omits it even when the history contains tool blocks', () => {
+        const config = toBedrockToolConfig({
+            model: 'm',
+            messages: [
+                {
+                    role: 'assistant',
+                    content: null,
+                    toolCalls: [{ id: 'c1', type: 'function', function: { name: 'read', arguments: '{}' } }],
+                },
+                { role: 'tool', content: 'ok', toolCallId: 'c1' },
+            ],
+            toolChoice: 'none',
+        });
+        expect(config).toBe(undefined);
+    });
+});
+describe('the other choices still reach the wire unchanged', () => {
+    it('maps auto', () => {
+        const config = toBedrockToolConfig({
+            model: 'm',
+            messages: [],
+            tools: TOOLS,
+            toolChoice: 'auto',
+        });
+        expect(config?.toolChoice).toEqual({ auto: {} });
+        expect(config?.tools).toHaveLength(1);
+    });
+    it('maps required', () => {
+        const config = toBedrockToolConfig({
+            model: 'm',
+            messages: [],
+            tools: TOOLS,
+            toolChoice: 'required',
+        });
+        expect(config?.toolChoice).toEqual({ any: {} });
+    });
+    it('maps a named tool', () => {
+        const config = toBedrockToolConfig({
+            model: 'm',
+            messages: [],
+            tools: TOOLS,
+            toolChoice: { type: 'function', function: { name: 'read' } },
+        });
+        expect(config?.toolChoice).toEqual({ tool: { name: 'read' } });
+    });
+    it('defaults to auto when the caller said nothing', () => {
+        const config = toBedrockToolConfig({ model: 'm', messages: [], tools: TOOLS });
+        expect(config?.toolChoice).toEqual({ auto: {} });
+    });
+});
+//# sourceMappingURL=tool-choice-none.test.js.map

package/dist/__tests__/tool-choice-none.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-choice-none.test.js","sourceRoot":"","sources":["../../src/__tests__/tool-choice-none.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAElD;;;;;;;;;;;;GAYG;AAEH,MAAM,KAAK,GAAG;IACb;QACC,IAAI,EAAE,UAAmB;QACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;KACtF;CACD,CAAA;AAED,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACpE,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACzC,MAAM,CACL,mBAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CACnF,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAClB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAClC,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE;gBACT;oBACC,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC;iBACxF;gBACD,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;aACQ;YAC1D,UAAU,EAAE,MAAM;SAClB,CAAC,CAAA;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QACpB,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAClC,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,MAAM;SAClB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;QAChD,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;QACxB,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAClC,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,UAAU;SACtB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC5B,MAAM,MAAM,GAAG,mBAAmB,CAAC;YAClC,KAAK,EAAE,GAAG;YACV,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;SAC5D,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9E,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/__tests__/tool-content-blocks.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tool-content-blocks.test.d.ts.map

package/dist/__tests__/tool-content-blocks.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-content-blocks.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/tool-content-blocks.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/tool-content-blocks.test.js

@@ -0,0 +1,92 @@
+import { describe, expect, it } from 'vitest';
+import { toBedrockMessages } from '../client.js';
+/**
+ * A tool result carrying content blocks was `JSON.stringify`d into the
+ * text field, so a screenshot reached the model as a wall of quoted base64:
+ * unreadable, and paid for by the character.
+ *
+ * This driver does not map image content — `supportsVision` is false and
+ * says so — which makes the honest form the SDK's named placeholder. It
+ * reports what was there and how big it was, so the model knows something
+ * was withheld rather than believing it saw a JSON object.
+ */
+const PNG = 'iVBORw0KGgo=';
+function toolResultFor(content) {
+    const messages = toBedrockMessages([
+        { role: 'user', content: 'take a shot' },
+        {
+            role: 'assistant',
+            content: null,
+            toolCalls: [
+                { id: 'call_1', type: 'function', function: { name: 'screenshot', arguments: '{}' } },
+            ],
+        },
+        { role: 'tool', toolCallId: 'call_1', content },
+    ]);
+    const block = messages
+        .flatMap((m) => m.content ?? [])
+        .find((b) => b.toolResult);
+    return block.toolResult;
+}
+function textOf(result) {
+    const content = result.content;
+    return content.map((c) => c.text ?? '').join('\n');
+}
+describe('a tool result the wire cannot carry is described, not dumped', () => {
+    it('names the media type and size instead of the payload', () => {
+        const text = textOf(toolResultFor([{ type: 'image', mediaType: 'image/png', data: PNG }]));
+        expect(text).toContain('image/png');
+        expect(text).toMatch(/\d+(\.\d+)? (B|KB|MB)/);
+    });
+    it('does not put the base64 payload in the text', () => {
+        const text = textOf(toolResultFor([{ type: 'image', mediaType: 'image/png', data: 'A'.repeat(2048) }]));
+        // The bug in one assertion: the payload used to be JSON-quoted into
+        // the text field, so the model paid for 2048 unreadable characters.
+        expect(text).not.toContain('A'.repeat(64));
+    });
+    it('keeps the text blocks that sit alongside', () => {
+        const text = textOf(toolResultFor([
+            { type: 'text', text: 'captured the window' },
+            { type: 'image', mediaType: 'image/png', data: PNG },
+        ]));
+        expect(text).toContain('captured the window');
+        expect(text).toContain('image/png');
+    });
+    it('names a document by its filename', () => {
+        const text = textOf(toolResultFor([
+            { type: 'document', mediaType: 'application/pdf', data: 'JVBER', name: 'lease.pdf' },
+        ]));
+        expect(text).toContain('lease.pdf');
+        expect(text).toContain('application/pdf');
+    });
+});
+describe('the plain cases are unchanged', () => {
+    it('passes a string result straight through', () => {
+        expect(textOf(toolResultFor('just text'))).toBe('just text');
+    });
+    it('passes text-only blocks through as their text', () => {
+        expect(textOf(toolResultFor([{ type: 'text', text: 'only words' }]))).toBe('only words');
+    });
+    it('answers the tool call it was given', () => {
+        expect(toolResultFor('x').toolUseId).toBe('call_1');
+    });
+    it('groups results answering one turn into a single message', () => {
+        const messages = toBedrockMessages([
+            { role: 'user', content: 'read both' },
+            {
+                role: 'assistant',
+                content: null,
+                toolCalls: [
+                    { id: 'call_1', type: 'function', function: { name: 'read', arguments: '{}' } },
+                    { id: 'call_2', type: 'function', function: { name: 'read', arguments: '{}' } },
+                ],
+            },
+            { role: 'tool', toolCallId: 'call_1', content: 'one' },
+            { role: 'tool', toolCallId: 'call_2', content: 'two' },
+        ]);
+        const resultTurns = messages.filter((m) => (m.content ?? []).every((b) => b.toolResult));
+        expect(resultTurns).toHaveLength(1);
+        expect(resultTurns[0]?.content).toHaveLength(2);
+    });
+});
+//# sourceMappingURL=tool-content-blocks.test.js.map

package/dist/__tests__/tool-content-blocks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-content-blocks.test.js","sourceRoot":"","sources":["../../src/__tests__/tool-content-blocks.test.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD;;;;;;;;;GASG;AAEH,MAAM,GAAG,GAAG,cAAc,CAAA;AAE1B,SAAS,aAAa,CAAC,OAAgB;IACtC,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QAClC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE;QACxC;YACC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE;gBACV,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;aACrF;SACD;QACD,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE;KACA,CAAC,CAAA;IAEjD,MAAM,KAAK,GAAG,QAAQ;SACpB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;SAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA8B,CAAC,UAAU,CAAC,CAAA;IACzD,OAAQ,KAA4D,CAAC,UAAU,CAAA;AAChF,CAAC;AAED,SAAS,MAAM,CAAC,MAA+B;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAmC,CAAA;IAC1D,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACnD,CAAC;AAED,QAAQ,CAAC,8DAA8D,EAAE,GAAG,EAAE;IAC7E,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;QAE1F,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,CAClB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAClF,CAAA;QAED,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,CAClB,aAAa,CAAC;YACb,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE;YAC7C,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,EAAE;SACpD,CAAC,CACF,CAAA;QAED,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC3C,MAAM,IAAI,GAAG,MAAM,CAClB,aAAa,CAAC;YACb,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE;SACpF,CAAC,CACF,CAAA;QAED,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;IACzF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QAClE,MAAM,QAAQ,GAAG,iBAAiB,CAAC;YAClC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE;YACtC;gBACC,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE;oBACV,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;oBAC/E,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;iBAC/E;aACD;YACD,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;YACtD,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE;SACP,CAAC,CAAA;QAEjD,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA8B,CAAC,UAAU,CAAC,CAC1E,CAAA;QACD,MAAM,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/__tests__/vision.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=vision.test.d.ts.map

package/dist/__tests__/vision.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vision.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/vision.test.ts"],"names":[],"mappings":""}