@poncho-ai/harness 0.59.17 → 0.59.19

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @poncho-ai/harness@0.59.17 build /home/runner/work/poncho-ai/poncho-ai/packages/harness
+> @poncho-ai/harness@0.59.19 build /home/runner/work/poncho-ai/poncho-ai/packages/harness
 > node scripts/embed-docs.js && tsup src/index.ts --format esm --dts
 
 [embed-docs] Generated poncho-docs.ts with 4 topics
@@ -9,8 +9,8 @@
 CLI Target: es2022
 ESM Build start
 ESM dist/isolate-F2PPSUL6.js 53.82 KB
-ESM dist/index.js            571.82 KB
-ESM ⚡️ Build success in 264ms
+ESM dist/index.js            572.59 KB
+ESM ⚡️ Build success in 249ms
 DTS Build start
-DTS ⚡️ Build success in 7586ms
-DTS dist/index.d.ts 104.01 KB
+DTS ⚡️ Build success in 7835ms
+DTS dist/index.d.ts 104.09 KB

package/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @poncho-ai/harness
 
+## 0.59.19
+
+### Patch Changes
+
+- [#186](https://github.com/cesr/poncho-ai/pull/186) [`b12ccbf`](https://github.com/cesr/poncho-ai/commit/b12ccbf1de63a5ef996b0896898c2afe7238a271) Thanks [@cesr](https://github.com/cesr)! - Stamp the tool-call id onto completed-tool activity lines (`{tcid:<id>}`
+  appended after any human detail). Display clients can now join a tool pill to
+  its full input/output by id instead of by tool-name + position. The old
+  positional/name match misaligns whenever parallel tool calls in a turn
+  complete out of declaration order, and can never reach a subagent's
+  inner-tool results; id-joining fixes both. The token sits after the first
+  `(...)` detail group, so existing clients that only parse inside it are
+  unaffected, and it is stripped from model-visible interruption text via the
+  new `stripPillMetaTokens` export.
+
+## 0.59.18
+
+### Patch Changes
+
+- [#184](https://github.com/cesr/poncho-ai/pull/184) [`12ce2be`](https://github.com/cesr/poncho-ai/commit/12ce2be01c9d98b1d9aa634d4d8051c4c0094a44) Thanks [@cesr](https://github.com/cesr)! - Add `browser_download` so the agent can save files from the browser into the
+  VFS. The tool fetches a file using the page's logged-in session (so it works
+  for files behind a login) and writes the bytes straight to the tenant's VFS via
+  `ToolContext.vfs` — never through the model. `url` defaults to the current page,
+  or pass a same-origin link's href. The fetch runs inside the page (`evaluate`),
+  so it works identically for local and remote/cloud browsers (bytes return over
+  CDP). Capped at 25 MB. The harness browser system prompt now documents it under
+  a "Saving files" section.
+
 ## 0.59.17
 
 ### Patch Changes

package/dist/index.d.ts

@@ -2135,6 +2135,7 @@ declare const flushTurnDraft: (draft: TurnDraftState) => void;
 declare const buildToolCompletedText: (event: AgentEvent & {
     type: "tool:completed";
 }) => string;
+declare const stripPillMetaTokens: (line: string) => string;
 declare const recordStandardTurnEvent: (draft: TurnDraftState, event: AgentEvent) => void;
 declare const buildAssistantMetadata: (draft: TurnDraftState, sectionsOverride?: TurnSection[], opts?: {
     id?: string;
@@ -2418,4 +2419,4 @@ type NewEntryNoId = NewConversationEntry extends infer T ? T extends NewConversa
  */
 declare const appendEntriesSafe: (store: ConversationStore, conversation: Pick<Conversation, "conversationId" | "ownerId" | "tenantId">, entries: NewEntryNoId[], log: Logger) => Promise<ConversationEntry[]>;
 
-export { type ActiveConversationRun, type ActiveSubagentRun, type AgentFrontmatter, AgentHarness, type AgentIdentity, type AgentLimitsConfig, type AgentModelConfig, AgentOrchestrator, type ApprovalEventItem, type ArchivedToolResult$1 as ArchivedToolResult, type BashConfig, BashEnvironmentManager, type BashExecutionLimits, type BuiltInToolToggles, CALLBACK_LOCK_STALE_MS, type CallbackStartedEntry, type CompactMessagesOptions, type CompactResult, type CompactionConfig, type ContinuationHooks, type Conversation, type ConversationCreateInit, type ConversationEntry, type ConversationState, type ConversationStatusSnapshot, type ConversationStore, type ConversationSummary, type CreateSkillToolsOptions, type CronJobConfig, DEFAULT_AGENT_DESCRIPTION, DEFAULT_AGENT_NAME, DEFAULT_MAX_STEPS, DEFAULT_MODEL_NAME, DEFAULT_MODEL_PROVIDER, DEFAULT_TAGLINE, DEFAULT_TEMPERATURE, DEFAULT_TIMEOUT, type DefaultAgentDefinitionOptions, type EventSink, type ExecuteTurnResult, type HarnessOptions, type HarnessRunOutput, type HistorySource, InMemoryConversationStore, InMemoryEngine, InMemoryStateStore, type IsolateBinding, type IsolateConfig, LocalMcpBridge, LocalUploadStore, MAX_CONCURRENT_SUBAGENTS, MAX_CONTINUATION_COUNT, MAX_SUBAGENT_CALLBACK_COUNT, MAX_SUBAGENT_NESTING, type MainMemory, type McpConfig, type MemoryConfig, type MemoryStore, type MessagingChannelConfig, type ModelProviderFactory, type MountProvider, type NetworkConfig, type NewConversationEntry, OPENAI_CODEX_CLIENT_ID, type OpenAICodexAuthConfig, type OpenAICodexDeviceAuthRequest, type OpenAICodexSession, type OrchestratorHooks, type OrchestratorOptions, type OtlpConfig, type OtlpOption, PONCHO_UPLOAD_SCHEME, type ParsedAgent, type PendingSubagentApproval, type PendingSubagentResult, type PendingToolCall, type PonchoConfig, PonchoFsAdapter, PostgresEngine, type ProviderConfig, type Recurrence, type RecurrenceType, type Reminder, type ReminderCreateInput, type ReminderStatus, type ReminderStore, type RemoteMcpServerConfig, type RunConversationTurnOpts, type RunConversationTurnResult, type RunOutcome, type RunRequest, type RuntimeRenderContext, S3UploadStore, STALE_SUBAGENT_THRESHOLD_MS, STORAGE_SCHEMA_VERSION, type SecretsStore, type SkillContextEntry, type SkillMetadata, type SkillSource, SqliteEngine, type StateConfig, type StateProviderName, type StateStore, type StorageConfig, type StorageEngine, type StorageFactoryOptions, type StorageProvider, type StoredApproval, type SubagentManager, type SubagentResult, type SubagentResultEntry, type SubagentSpawnResult, type SubagentSummary, type SubagentTranscript, type SubagentTranscriptMode, TOOL_RESULT_ARCHIVE_PARAM, type TelemetryConfig, TelemetryEmitter, type TenantTokenPayload, type ToolAccess, type ToolCall, ToolDispatcher, type ToolExecutionResult, type TurnDraftState, type TurnResultMetadata, type TurnSection, type UploadStore, type UploadsConfig, VFS_SCHEME, VercelBlobUploadStore, type VfsDirEntry, type VfsStat, type VirtualMount, abnormalEndResponse, appendEntriesSafe, applyTurnMetadata, buildAgentDirectoryName, buildApprovalCheckpoints, buildAssistantMetadata, buildSkillContextWindow, buildToolCompletedText, cloneSections, compactMessages, completeOpenAICodexDeviceAuth, computeNextOccurrence, createBashTool, createConversationStore, createConversationStoreFromEngine, createDefaultTools, createDeleteDirectoryTool, createDeleteTool, createEditTool, createMemoryStore, createMemoryStoreFromEngine, createMemoryTools, createModelProvider, createReminderStore, createReminderStoreFromEngine, createReminderTools, createSearchTools, createSecretsStore, createSkillTools, createStateStore, createStorageEngine, createSubagentTools, createTodoStoreFromEngine, createTurnDraftState, createUploadStore, createWriteTool, decodeFileInputData, defaultAgentDefinition, deleteOpenAICodexSession, deriveUploadKey, ensureAgentIdentity, estimateTokens, estimateTotalTokens, executeConversationTurn, findSafeSplitPoint, flushTurnDraft, generateAgentId, getAgentStoreDirectory, getModelContextWindow, getOpenAICodexAccessToken, getOpenAICodexAuthFilePath, getOpenAICodexRequiredScopes, getPendingSubagentResults, getPonchoStoreRoot, isMessageArray, jsonSchemaToZod, lastAssistantText, loadCanonicalHistory, loadPonchoConfig, loadRunHistory, loadSkillContext, loadSkillInstructions, loadSkillMetadata, loadSkillMetadataFromDirs, loadVfsSkillMetadata, mergeSkills, normalizeApprovalCheckpoint, normalizeOtlp, normalizeScriptPolicyPath, normalizeToolAccess, parseAgentFile, parseAgentMarkdown, parseSkillFrontmatter, ponchoDocsTool, readOpenAICodexSession, readSkillResource, realResponseText, recordStandardTurnEvent, renderAgentPrompt, resolveAgentIdentity, resolveCompactionConfig, resolveEnv, resolveMemoryConfig, resolveRunRequest, resolveSkillDirs, resolveStateConfig, runConversationTurn, slugifyStorageComponent, startOpenAICodexDeviceAuth, verifyTenantToken, withToolResultArchiveParam, writeOpenAICodexSession };
+export { type ActiveConversationRun, type ActiveSubagentRun, type AgentFrontmatter, AgentHarness, type AgentIdentity, type AgentLimitsConfig, type AgentModelConfig, AgentOrchestrator, type ApprovalEventItem, type ArchivedToolResult$1 as ArchivedToolResult, type BashConfig, BashEnvironmentManager, type BashExecutionLimits, type BuiltInToolToggles, CALLBACK_LOCK_STALE_MS, type CallbackStartedEntry, type CompactMessagesOptions, type CompactResult, type CompactionConfig, type ContinuationHooks, type Conversation, type ConversationCreateInit, type ConversationEntry, type ConversationState, type ConversationStatusSnapshot, type ConversationStore, type ConversationSummary, type CreateSkillToolsOptions, type CronJobConfig, DEFAULT_AGENT_DESCRIPTION, DEFAULT_AGENT_NAME, DEFAULT_MAX_STEPS, DEFAULT_MODEL_NAME, DEFAULT_MODEL_PROVIDER, DEFAULT_TAGLINE, DEFAULT_TEMPERATURE, DEFAULT_TIMEOUT, type DefaultAgentDefinitionOptions, type EventSink, type ExecuteTurnResult, type HarnessOptions, type HarnessRunOutput, type HistorySource, InMemoryConversationStore, InMemoryEngine, InMemoryStateStore, type IsolateBinding, type IsolateConfig, LocalMcpBridge, LocalUploadStore, MAX_CONCURRENT_SUBAGENTS, MAX_CONTINUATION_COUNT, MAX_SUBAGENT_CALLBACK_COUNT, MAX_SUBAGENT_NESTING, type MainMemory, type McpConfig, type MemoryConfig, type MemoryStore, type MessagingChannelConfig, type ModelProviderFactory, type MountProvider, type NetworkConfig, type NewConversationEntry, OPENAI_CODEX_CLIENT_ID, type OpenAICodexAuthConfig, type OpenAICodexDeviceAuthRequest, type OpenAICodexSession, type OrchestratorHooks, type OrchestratorOptions, type OtlpConfig, type OtlpOption, PONCHO_UPLOAD_SCHEME, type ParsedAgent, type PendingSubagentApproval, type PendingSubagentResult, type PendingToolCall, type PonchoConfig, PonchoFsAdapter, PostgresEngine, type ProviderConfig, type Recurrence, type RecurrenceType, type Reminder, type ReminderCreateInput, type ReminderStatus, type ReminderStore, type RemoteMcpServerConfig, type RunConversationTurnOpts, type RunConversationTurnResult, type RunOutcome, type RunRequest, type RuntimeRenderContext, S3UploadStore, STALE_SUBAGENT_THRESHOLD_MS, STORAGE_SCHEMA_VERSION, type SecretsStore, type SkillContextEntry, type SkillMetadata, type SkillSource, SqliteEngine, type StateConfig, type StateProviderName, type StateStore, type StorageConfig, type StorageEngine, type StorageFactoryOptions, type StorageProvider, type StoredApproval, type SubagentManager, type SubagentResult, type SubagentResultEntry, type SubagentSpawnResult, type SubagentSummary, type SubagentTranscript, type SubagentTranscriptMode, TOOL_RESULT_ARCHIVE_PARAM, type TelemetryConfig, TelemetryEmitter, type TenantTokenPayload, type ToolAccess, type ToolCall, ToolDispatcher, type ToolExecutionResult, type TurnDraftState, type TurnResultMetadata, type TurnSection, type UploadStore, type UploadsConfig, VFS_SCHEME, VercelBlobUploadStore, type VfsDirEntry, type VfsStat, type VirtualMount, abnormalEndResponse, appendEntriesSafe, applyTurnMetadata, buildAgentDirectoryName, buildApprovalCheckpoints, buildAssistantMetadata, buildSkillContextWindow, buildToolCompletedText, cloneSections, compactMessages, completeOpenAICodexDeviceAuth, computeNextOccurrence, createBashTool, createConversationStore, createConversationStoreFromEngine, createDefaultTools, createDeleteDirectoryTool, createDeleteTool, createEditTool, createMemoryStore, createMemoryStoreFromEngine, createMemoryTools, createModelProvider, createReminderStore, createReminderStoreFromEngine, createReminderTools, createSearchTools, createSecretsStore, createSkillTools, createStateStore, createStorageEngine, createSubagentTools, createTodoStoreFromEngine, createTurnDraftState, createUploadStore, createWriteTool, decodeFileInputData, defaultAgentDefinition, deleteOpenAICodexSession, deriveUploadKey, ensureAgentIdentity, estimateTokens, estimateTotalTokens, executeConversationTurn, findSafeSplitPoint, flushTurnDraft, generateAgentId, getAgentStoreDirectory, getModelContextWindow, getOpenAICodexAccessToken, getOpenAICodexAuthFilePath, getOpenAICodexRequiredScopes, getPendingSubagentResults, getPonchoStoreRoot, isMessageArray, jsonSchemaToZod, lastAssistantText, loadCanonicalHistory, loadPonchoConfig, loadRunHistory, loadSkillContext, loadSkillInstructions, loadSkillMetadata, loadSkillMetadataFromDirs, loadVfsSkillMetadata, mergeSkills, normalizeApprovalCheckpoint, normalizeOtlp, normalizeScriptPolicyPath, normalizeToolAccess, parseAgentFile, parseAgentMarkdown, parseSkillFrontmatter, ponchoDocsTool, readOpenAICodexSession, readSkillResource, realResponseText, recordStandardTurnEvent, renderAgentPrompt, resolveAgentIdentity, resolveCompactionConfig, resolveEnv, resolveMemoryConfig, resolveRunRequest, resolveSkillDirs, resolveStateConfig, runConversationTurn, slugifyStorageComponent, startOpenAICodexDeviceAuth, stripPillMetaTokens, verifyTenantToken, withToolResultArchiveParam, writeOpenAICodexSession };

package/dist/index.js

@@ -10855,6 +10855,9 @@ Browser sessions (cookies, localStorage, login state) are automatically saved an
 - Use \`browser_screenshot\` only when you need to see visual layout or images. Screenshots consume significantly more tokens.
 - The accessibility tree may be sparse on some pages. If \`browser_snapshot\` returns little or no content, fall back to \`browser_content\` or \`browser_screenshot\`.
 
+### Saving files
+To keep a file the page offers (a PDF, CSV, image, export, etc.), use \`browser_download\` to save it into the user's filesystem. It fetches with the browser's logged-in session, so it works for files behind a login. For a download link, get its href from a snapshot and pass it as \`url\`; for a file that opens in the browser, navigate to it and call \`browser_download\` with no \`url\`. The bytes go straight to the filesystem (not through the chat), so prefer this over screenshotting or copy-pasting file contents.
+
 ### Tabs and resources
 Each conversation gets its own browser tab sharing a single browser instance. Call \`browser_close\` when done to free the tab. If you don't close it, the tab stays open and the user can continue interacting with it.` : "";
     const mainMemory = await memoryPromise;
@@ -12736,8 +12739,10 @@ var buildToolCompletedText = (event) => {
   if (event.tool === "web_search" && Array.isArray(output?.results)) {
     text += ` \u2014 ${output.results.length} result${output.results.length !== 1 ? "s" : ""}`;
   }
+  if (event.toolCallId) text += ` {tcid:${event.toolCallId}}`;
   return text;
 };
+var stripPillMetaTokens = (line) => line.replace(/\s*\{tcid:[^}]+\}/g, "");
 var recordStandardTurnEvent = (draft, event) => {
   if (event.type === "model:chunk") {
     if (draft.currentTools.length > 0) {
@@ -13619,7 +13624,7 @@ var AgentOrchestrator = class {
             for (const a of decidedApprovals) {
               if (a.decision === "approved" && a.toolCallId) {
                 callsToExecute.push({ id: a.toolCallId, name: a.tool, input: a.input });
-                const toolText = `- done \`${a.tool}\``;
+                const toolText = `- done \`${a.tool}\`` + (a.toolCallId ? ` {tcid:${a.toolCallId}}` : "");
                 draft.toolTimeline.push(toolText);
                 draft.currentTools.push(toolText);
               } else if (a.toolCallId) {
@@ -14780,8 +14785,10 @@ var runConversationTurn = async (opts) => {
       const parts = [];
       if (draft.assistantResponse.length > 0) parts.push(draft.assistantResponse);
       if (draft.toolTimeline.length > 0) {
-        parts.push(`Tool activity before interruption:
-${draft.toolTimeline.join("\n")}`);
+        parts.push(
+          `Tool activity before interruption:
+${draft.toolTimeline.map(stripPillMetaTokens).join("\n")}`
+        );
       }
       parts.push(`[This turn was interrupted: ${reason}. The work above may be incomplete.]`);
       return [
@@ -14988,6 +14995,7 @@ export {
   runConversationTurn,
   slugifyStorageComponent,
   startOpenAICodexDeviceAuth,
+  stripPillMetaTokens,
   verifyTenantToken,
   withToolResultArchiveParam,
   writeOpenAICodexSession

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poncho-ai/harness",
-  "version": "0.59.17",
+  "version": "0.59.19",
   "description": "Agent execution runtime - conversation loop, tool dispatch, streaming",
   "repository": {
     "type": "git",

package/src/harness.ts

@@ -2376,6 +2376,9 @@ Browser sessions (cookies, localStorage, login state) are automatically saved an
 - Use \`browser_screenshot\` only when you need to see visual layout or images. Screenshots consume significantly more tokens.
 - The accessibility tree may be sparse on some pages. If \`browser_snapshot\` returns little or no content, fall back to \`browser_content\` or \`browser_screenshot\`.
 
+### Saving files
+To keep a file the page offers (a PDF, CSV, image, export, etc.), use \`browser_download\` to save it into the user's filesystem. It fetches with the browser's logged-in session, so it works for files behind a login. For a download link, get its href from a snapshot and pass it as \`url\`; for a file that opens in the browser, navigate to it and call \`browser_download\` with no \`url\`. The bytes go straight to the filesystem (not through the chat), so prefer this over screenshotting or copy-pasting file contents.
+
 ### Tabs and resources
 Each conversation gets its own browser tab sharing a single browser instance. Call \`browser_close\` when done to free the tab. If you don't close it, the tab stays open and the user can continue interacting with it.`
       : "";

package/src/orchestrator/index.ts

@@ -13,6 +13,7 @@ export {
   cloneSections,
   flushTurnDraft,
   buildToolCompletedText,
+  stripPillMetaTokens,
   recordStandardTurnEvent,
   buildAssistantMetadata,
   executeConversationTurn,

package/src/orchestrator/orchestrator.ts

@@ -904,7 +904,8 @@ export class AgentOrchestrator {
             for (const a of decidedApprovals) {
               if (a.decision === "approved" && a.toolCallId) {
                 callsToExecute.push({ id: a.toolCallId, name: a.tool, input: a.input });
-                const toolText = `- done \`${a.tool}\``;
+                const toolText =
+                  `- done \`${a.tool}\`` + (a.toolCallId ? ` {tcid:${a.toolCallId}}` : "");
                 draft.toolTimeline.push(toolText);
                 draft.currentTools.push(toolText);
               } else if (a.toolCallId) {

package/src/orchestrator/run-conversation-turn.ts

@@ -35,6 +35,7 @@ import {
   createTurnDraftState,
   executeConversationTurn,
   flushTurnDraft,
+  stripPillMetaTokens,
 } from "./turn.js";
 
 const log = createLogger("orchestrator");
@@ -435,7 +436,11 @@ export const runConversationTurn = async (
       const parts: string[] = [];
       if (draft.assistantResponse.length > 0) parts.push(draft.assistantResponse);
       if (draft.toolTimeline.length > 0) {
-        parts.push(`Tool activity before interruption:\n${draft.toolTimeline.join("\n")}`);
+        parts.push(
+          `Tool activity before interruption:\n${draft.toolTimeline
+            .map(stripPillMetaTokens)
+            .join("\n")}`,
+        );
       }
       parts.push(`[This turn was interrupted: ${reason}. The work above may be incomplete.]`);
       return [

package/src/orchestrator/turn.ts

@@ -120,9 +120,25 @@ export const buildToolCompletedText = (event: AgentEvent & { type: "tool:complet
     text += ` \u2014 ${(output.results as unknown[]).length} result${(output.results as unknown[]).length !== 1 ? "s" : ""}`;
   }
 
+  // Trailing machine token: the tool-call id this pill corresponds to. Lets a
+  // display client join the pill to its full input/output by id rather than
+  // by tool-name+position (which misaligns whenever parallel tool calls in a
+  // turn complete out of declaration order, and can't reach a subagent's
+  // inner-tool results at all). Appended AFTER any human detail/parens so
+  // older clients \u2014 which only read inside the first `(...)` \u2014 ignore it.
+  // Stripped from model-visible interruption text via stripPillMetaTokens.
+  if (event.toolCallId) text += ` {tcid:${event.toolCallId}}`;
+
   return text;
 };
 
+// Remove machine tokens (e.g. `{tcid:\u2026}`) that buildToolCompletedText appends
+// to activity lines for the display client. Use anywhere a tool-timeline line
+// is folded into MODEL-visible text (e.g. interruption reconstruction) so the
+// internal id never leaks into the prompt.
+export const stripPillMetaTokens = (line: string): string =>
+  line.replace(/\s*\{tcid:[^}]+\}/g, "");
+
 export const recordStandardTurnEvent = (draft: TurnDraftState, event: AgentEvent): void => {
   if (event.type === "model:chunk") {
     if (draft.currentTools.length > 0) {

package/test/pill-tool-call-id.test.ts

@@ -0,0 +1,56 @@
+import { describe, expect, it } from "vitest";
+import type { AgentEvent } from "@poncho-ai/sdk";
+import { buildToolCompletedText, stripPillMetaTokens } from "../src/orchestrator/turn.js";
+
+const completed = (over: Partial<AgentEvent & { type: "tool:completed" }>) =>
+  buildToolCompletedText({
+    type: "tool:completed",
+    tool: "bash",
+    toolCallId: "toolu_abc123",
+    input: { command: "ls -la" },
+    output: {},
+    duration: 45,
+    outputTokenEstimate: 0,
+    ...over,
+  } as AgentEvent & { type: "tool:completed" });
+
+describe("buildToolCompletedText tcid token", () => {
+  it("appends the tool-call id after the human detail", () => {
+    const line = completed({});
+    expect(line).toContain("- done `bash`");
+    expect(line).toContain("(45ms, ls -la)");
+    expect(line.endsWith("{tcid:toolu_abc123}")).toBe(true);
+    // Token sits AFTER the first (...) detail group so old clients ignore it.
+    expect(line.indexOf("{tcid:")).toBeGreaterThan(line.indexOf(")"));
+  });
+
+  it("omits the token when there is no tool-call id", () => {
+    const line = completed({ toolCallId: undefined as unknown as string });
+    expect(line).not.toContain("{tcid:");
+  });
+
+  it("keeps the id intact alongside the subagent token", () => {
+    const line = completed({
+      tool: "spawn_subagent",
+      toolCallId: "toolu_xyz",
+      input: { task: "research" },
+      output: { subagentId: "conv_child" },
+    });
+    expect(line).toContain("[subagent:conv_child]");
+    expect(line).toContain("{tcid:toolu_xyz}");
+  });
+});
+
+describe("stripPillMetaTokens", () => {
+  it("removes the tcid token (and its leading space) for model-visible text", () => {
+    expect(stripPillMetaTokens("- done `bash` (45ms, ls) {tcid:toolu_abc}")).toBe(
+      "- done `bash` (45ms, ls)",
+    );
+  });
+
+  it("is a no-op for lines without a token", () => {
+    expect(stripPillMetaTokens("- start `web_search` (\"q\")")).toBe(
+      "- start `web_search` (\"q\")",
+    );
+  });
+});