@skaile/workspaces 0.41.6 → 0.42.1

package/CHANGELOG.md

@@ -1,5 +1,88 @@
 # Changelog
 
+## 0.42.1
+
+### Patch Changes
+
+- [#193](https://github.com/skaile-ai/workspaces/pull/193) [`baba456`](https://github.com/skaile-ai/workspaces/commit/baba4560efb4e710a89600552643cf06b1c4dac4) Thanks [@peteralbert](https://github.com/peteralbert)! - ConnectorManager now rejects two filesystem-face connectors that resolve to the
+  **same** absolute mount target. Previously both bound silently — one shadowing
+  the other, order-dependent — making the misconfig impossible to diagnose from the
+  runtime. Setup now throws a clear error naming both connector ids and the shared
+  path; a nested-target overlap (e.g. `/skaile` vs `/skaile/workspace`) is logged
+  as a warning. Distinct targets, including the per-id default `.mounts/<id>`, are
+  unaffected.
+
+## 0.42.0
+
+### Minor Changes
+
+- [#187](https://github.com/skaile-ai/workspaces/pull/187) [`67b88c7`](https://github.com/skaile-ai/workspaces/commit/67b88c75be6ef0aae6a20f28e62de412c7a998d1) Thanks [@peteralbert](https://github.com/peteralbert)! - Runner reads CONNECTOR.md/MCP.md body and injects preset custom instructions into the agent system prompt. `ConnectorDeclaration` and `McpServerDeclaration` gain an optional `instructions` field populated from the materialized markdown body. Connector instructions are emitted eagerly in the `## Connectors` system-prompt section; MCP server instructions in a new `## MCP server guidance` section. When the body is empty (today's platform output) no block is added — safe to ship ahead of the platform side.
+
+- [#186](https://github.com/skaile-ai/workspaces/pull/186) [`83c7f9c`](https://github.com/skaile-ai/workspaces/commit/83c7f9c4651aea27df0db220f4e9ff9ce80be89a) Thanks [@peteralbert](https://github.com/peteralbert)! - Fix the rclone VFS stale-tail read bug at the source ([#183](https://github.com/skaile-ai/workspaces/issues/183)). A writable
+  rclone-backed mount (SharePoint / OneDrive / WebDAV / Google Drive) can serve a
+  **non-truncated** VFS cache item after a remote file is replaced by a _shorter_
+  version: the read returns `[new bytes][leftover tail of the older, longer
+version]`, and `statSync` reports the inflated size, so the on-disk length is no
+  signal. This used to be masked by the `text/html` `</html>`-truncation heuristic
+  removed in 0.41.6.
+
+  The read path now gates the served bytes against the **authoritative remote
+  size** instead of any content heuristic:
+
+  - `RcloneProcessManager.statSize(handle, relPath)` queries the `operations/stat`
+    rc endpoint, which resolves the object against the backend directly and so
+    returns the true remote size, bypassing the VFS cache. New exported helpers
+    `fetchAuthoritativeSize` (and the internal `_operationsStatTarget`) back it.
+  - The `sharepoint` / `webdav` / `googledrive` connectors attach an
+    `authoritativeSize(relPath)` hook (new `AuthoritativeSizeProvider` type) to
+    their `ConnectorHandle.state`, wired to `statSize`.
+  - `handleMountResourceRequest` (now async) duck-types that hook and truncates
+    the read to the authoritative size — slicing the Buffer _before_ any utf-8
+    decode, so multibyte content is never split mid-character. Absent hook (local
+    mounts) or `null` (object missing / rc call failed) ⇒ on-disk bytes served
+    unchanged.
+
+  Other candidate fixes were rejected: `vfs/forget` + re-read (re-downloads on
+  every changed read), tuning `--vfs-cache-mode`/`--dir-cache-time` (per-read
+  latency, doesn't address the non-truncation), and write-path `O_TRUNC` (our
+  write path already truncates via FUSE; the bug is on remote-side rewrites).
+  Fleet-managed mounts have no in-container rc server, so the host fleet remains
+  responsible for their invalidation — a documented follow-up.
+
+  All additions are new exports; no public surface was removed.
+
+### Patch Changes
+
+- [#189](https://github.com/skaile-ai/workspaces/pull/189) [`81e2da1`](https://github.com/skaile-ai/workspaces/commit/81e2da1a8a1cce5ebca4252afa4e7e2366e1da64) Thanks [@peteralbert](https://github.com/peteralbert)! - Fleet read-only mount barrier now tracks the actual mount state across three surfaces instead of two. A `healthy` fleet-health verdict lifts the connect-time not-ready barrier (previously a late-arriving live bind that propagated under the barrier stayed masked even after it went healthy), and a connector that only had the static boot-time barrier is promoted to a health gate when a fleet verdict arrives, so the authoritative platform signal can lift it. A new `degraded` verdict (live and readable but writes failing) downgrades the barrier to a read-only-readable surface — the live content stays visible while writes are blocked — via the new `MountPlaceholderBarrier.exposeReadOnly` (read-only self-bind, chmod fallback) instead of masking the whole workspace with an opaque tmpfs. The not-live/unreadable `error` verdict keeps the opaque mask. The fleet-health flag dispatcher forwards `degraded` distinctly rather than collapsing it to `error`.
+
+- [#190](https://github.com/skaile-ai/workspaces/pull/190) [`b862087`](https://github.com/skaile-ai/workspaces/commit/b8620870f88876cd4fbd023896aecf18a12b31f8) Thanks [@peteralbert](https://github.com/peteralbert)! - Stop an agent assistant message from swallowing the conversation ([#841](https://github.com/skaile-ai/workspaces/issues/841)). A
+  single agent `text` block could run three things together: verbatim
+  `[function_calls]…[invoke name="Bash"]…[/antml:invoke]` tool-call XML (the same call
+  was _also_ executed as a structured tool_use), the genuine answer, and a
+  hallucinated `[User]: "…"` follow-up turn — so the user's real next message
+  never became its own prompt and the chat looked garbled.
+
+  Two-part fix:
+
+  - **Prompt shape (primary).** `enrichPromptWithHistory` (session dispatcher) no
+    longer renders prior turns as a bare `[User]:` / `[Assistant]:` transcript,
+    which the model latched onto and auto-completed. History is now emitted as
+    read-only `<turn role="…">…</turn>` elements inside `<conversation_history>`
+    with an explicit "do not continue this — it is context, not a turn to extend"
+    instruction, removing the completion affordance.
+
+  - **Emit-point sanitizer (defense-in-depth).** A new pure
+    `sanitizeAssistantText` (bridge, beside `scrub-transcript.ts`) strips leaked
+    `[function_calls]…[/function_calls]` / `[invoke]…[/antml:invoke]` blocks and trailing
+    fabricated `[User]:` / `[Assistant]:` role turns from assistant text before it
+    is emitted/persisted. It is conservative — only clearly-leaked control markup
+    is removed; mid-prose bracketed text survives. It runs at every claude-sdk
+    emit point that produces durable assistant text: the final `result.summary`
+    (the single persisted copy of the answer), per-text-block mapping, and the
+    streaming path. For streaming, `streamingSafeSanitize` holds back any trailing
+    partial marker and the forwarded `_textDelta` carries the sanitized suffix, so
+    a marker split across deltas is never half-emitted into the stored transcript.
+
 ## 0.41.6
 
 ### Patch Changes

package/dist/{asset-feeds-FKD5AB2R.js → asset-feeds-UPJJGR3O.js}

@@ -1,9 +1,9 @@
-import './chunk-MVXXAXDW.js';
+import './chunk-KYQNWFJV.js';
 import './chunk-ZAP2BDHG.js';
-import { factoryAssetRoots } from './chunk-JAOXG3LL.js';
-import { scanRepo } from './chunk-NQDJQ7WB.js';
+import { factoryAssetRoots } from './chunk-HVCZLD5Z.js';
+import { scanRepo } from './chunk-GJI6FZ56.js';
 import './chunk-DZCK7GRW.js';
-import './chunk-B5PEERRZ.js';
+import './chunk-6IDBWPK2.js';
 import './chunk-GEEW6SY2.js';
 import './chunk-XGCXFX7X.js';
 import './chunk-O4JH3KUE.js';
@@ -17,7 +17,7 @@ async function libraryAssets() {
   const notes = [];
   try {
     const [{ openLibraryManager }, { skaileHomeDir }] = await Promise.all([
-      import('./open-library-QSIPFN5N.js'),
+      import('./open-library-EV7UCOFU.js'),
       import('./library/index.js')
     ]);
     const { manager, close } = await openLibraryManager();
@@ -46,7 +46,7 @@ async function libraryAssets() {
 async function storeAssets(projectDir) {
   const notes = [];
   try {
-    const { resolveCatalogSource } = await import('./open-library-QSIPFN5N.js');
+    const { resolveCatalogSource } = await import('./open-library-EV7UCOFU.js');
     const { source, close } = await resolveCatalogSource({ projectDir });
     try {
       const assets = await source.listAssets();
@@ -120,5 +120,5 @@ async function gatherAssetFeeds(am, projectDir) {
 }
 
 export { gatherAssetFeeds };
-//# sourceMappingURL=asset-feeds-FKD5AB2R.js.map
-//# sourceMappingURL=asset-feeds-FKD5AB2R.js.map
+//# sourceMappingURL=asset-feeds-UPJJGR3O.js.map
+//# sourceMappingURL=asset-feeds-UPJJGR3O.js.map

package/dist/{asset-feeds-FKD5AB2R.js.map → asset-feeds-UPJJGR3O.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAkEA,eAAe,aAAA,GAAyE;AACtF,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,EAAE,kBAAA,EAAmB,EAAG,EAAE,eAAe,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI;AAAA,MACpE,OAAO,4BAAmB,CAAA;AAAA,MAC1B,OAAO,oBAA4B;AAAA,KACpC,CAAA;AACD,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,IAAA,CAAK,aAAA,EAAc,EAAG,SAAS,CAAA;AACvD,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,UAAU,CAAC,CAAA;AACzF,MAAA,MAAM,UAA0B,EAAC;AACjC,MAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,QAAA,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,EAAG;AAC3B,QAAA,KAAA,MAAW,CAAA,IAAK,SAAS,GAAA,CAAI,IAAA,EAAM,WAAW,GAAA,CAAI,IAAI,EAAE,CAAA,EAAG;AACzD,UAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,QAChB;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAIxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,YAAY,CAAA,CAAE,UAAA;AAAA,QACd,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AAIF,MAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,MAAM,CAAA;AACxC,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAI,KAAA,EAAM;AAAA,EAC3C;AACF;AAGA,eAAe,YAAY,MAAA,EAA2C;AACpE,EAAA,MAAM,KAAM,MAAA,CAA4D,WAAA;AACxE,EAAA,IAAI,OAAO,EAAA,KAAO,UAAA,EAAY,OAAO,EAAC;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,IAAA,CAAK,MAAM,CAAA;AACpC,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,UAAU,EAAC;AAC7C;AAQA,SAAS,aAAa,EAAA,EAAsD;AAC1E,EAAA,OAAO,GAAG,MAAA,EAAO;AACnB;AAUA,SAAS,aAAA,GAAgE;AACvE,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,KAAA,MAAW,KAAK,QAAA,CAAS,IAAA,EAAM,gBAAgB,CAAA,EAAG,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAClE;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,UAAU,aAAA,EAAc;AAC9B,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA,CAAI,QAAA,EAAU,YAAA,CAAa,EAAE,CAAC,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,OAAO,CAAA;AAAA,MAC9B,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-FKD5AB2R.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex` (filesystem\n *   scan of each library's `path`).\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport { existsSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogDomain,\n  type CatalogEntry,\n  factoryAssetRoots,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  /**\n   * Display-only domain metadata, keyed (by the consumer) on `slug`. Populated\n   * from the store's `catalog.listDomains` when the connected catalog source\n   * exposes it; empty otherwise. The manage TUI joins `entry.domainSlug` → a\n   * domain for grouping headers, descriptions, and relation badges.\n   */\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/sources/` cache). Each\n * library's `path` is scanned with `scanRepo` and tagged with\n * `repository = \"library:<name>\"` so the manage TUI groups them into their\n * own headers.\n */\nasync function libraryAssets(): Promise<{ entries: CatalogEntry[]; notes: FeedNote[] }> {\n  const notes: FeedNote[] = [];\n  try {\n    const [{ openLibraryManager }, { skaileHomeDir }] = await Promise.all([\n      import(\"./open-library.ts\"),\n      import(\"@skaile/workspaces/library\"),\n    ]);\n    const { manager, close } = await openLibraryManager();\n    try {\n      const sourcesDir = path.join(skaileHomeDir(), \"sources\");\n      const libs = (await manager.listLibraries()).filter((l) => !l.path.startsWith(sourcesDir));\n      const entries: CatalogEntry[] = [];\n      for (const lib of libs) {\n        if (!existsSync(lib.path)) continue;\n        for (const e of scanRepo(lib.path, `library:${lib.name}`)) {\n          entries.push(e);\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        domainSlug: a.domainSlug,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      // Domains are optional on the catalog source — only the store backend\n      // (post Part 4 `catalog.listDomains`) exposes them. Duck-type the call so\n      // older sources and the local catalog degrade to no domains, not an error.\n      const domains = await loadDomains(source);\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], domains: [], notes };\n  }\n}\n\n/** Optional `listDomains` capability — returns `[]` when the source lacks it. */\nasync function loadDomains(source: unknown): Promise<CatalogDomain[]> {\n  const fn = (source as { listDomains?: () => Promise<CatalogDomain[]> }).listDomains;\n  if (typeof fn !== \"function\") return [];\n  const domains = await fn.call(source);\n  return Array.isArray(domains) ? domains : [];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which now merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Provided as a\n * function rather than an inline call so the caller can supply a fresh\n * `AssetManager` instance.\n */\nfunction sourceAssets(am: { search: () => CatalogEntry[] }): CatalogEntry[] {\n  return am.search();\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Synchronous, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nfunction factoryAssets(): { entries: CatalogEntry[]; notes: FeedNote[] } {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      for (const e of scanRepo(root, \"skaile-factory\")) entries.push(e);\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local + synchronous, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: { search: () => CatalogEntry[] },\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = factoryAssets();\n  return {\n    entries: [\n      ...tag(\"source\", sourceAssets(am)),\n      ...tag(\"library\", libs.entries),\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    domains: store.domains,\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}
+{"version":3,"sources":["../cli/src/asset-feeds.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAkEA,eAAe,aAAA,GAAyE;AACtF,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,CAAC,EAAE,kBAAA,EAAmB,EAAG,EAAE,eAAe,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI;AAAA,MACpE,OAAO,4BAAmB,CAAA;AAAA,MAC1B,OAAO,oBAA4B;AAAA,KACpC,CAAA;AACD,IAAA,MAAM,EAAE,OAAA,EAAS,KAAA,EAAM,GAAI,MAAM,kBAAA,EAAmB;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAkB,IAAA,CAAA,IAAA,CAAK,aAAA,EAAc,EAAG,SAAS,CAAA;AACvD,MAAA,MAAM,IAAA,GAAA,CAAQ,MAAM,OAAA,CAAQ,aAAA,EAAc,EAAG,MAAA,CAAO,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,IAAA,CAAK,UAAA,CAAW,UAAU,CAAC,CAAA;AACzF,MAAA,MAAM,UAA0B,EAAC;AACjC,MAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,QAAA,IAAI,CAAC,UAAA,CAAW,GAAA,CAAI,IAAI,CAAA,EAAG;AAC3B,QAAA,KAAA,MAAW,CAAA,IAAK,SAAS,GAAA,CAAI,IAAA,EAAM,WAAW,GAAA,CAAI,IAAI,EAAE,CAAA,EAAG;AACzD,UAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,QAChB;AAAA,MACF;AACA,MAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,IAC1B,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,WAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAYA,eAAe,YAAY,UAAA,EAIxB;AACD,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,oBAAA,EAAqB,GAAI,MAAM,OAAO,4BAAmB,CAAA;AACjE,IAAA,MAAM,EAAE,QAAQ,KAAA,EAAM,GAAI,MAAM,oBAAA,CAAqB,EAAE,YAAY,CAAA;AACnE,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,EAAW;AACvC,MAAA,MAAM,OAAA,GAA0B,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,IAAA,EAAO,EAAE,IAAA,IAAsB,OAAA;AAAA,QAC/B,WAAA,EAAa,EAAE,WAAA,IAAe,EAAA;AAAA,QAC9B,MAAA,EAAQ,CAAA,QAAA,EAAW,CAAA,CAAE,EAAE,CAAA,CAAA;AAAA,QACvB,WAAW,CAAA,CAAE,SAAA;AAAA,QACb,MAAM,CAAA,CAAE,IAAA;AAAA,QACR,YAAY,CAAA,CAAE,UAAA;AAAA,QACd,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,UAAU,EAAC;AAAA,QACX,cAAc;AAAC,OACjB,CAAE,CAAA;AAIF,MAAA,MAAM,OAAA,GAAU,MAAM,WAAA,CAAY,MAAM,CAAA;AACxC,MAAA,OAAO,EAAE,OAAA,EAAS,OAAA,EAAS,KAAA,EAAM;AAAA,IACnC,CAAA,SAAE;AACA,MAAA,KAAA,EAAM;AAAA,IACR;AAAA,EACF,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAG3D,IAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,GAAG,CAAA,EAAG;AACvB,MAAA,KAAA,CAAM,KAAK,EAAE,IAAA,EAAM,OAAA,EAAS,OAAA,EAAS,KAAK,CAAA;AAAA,IAC5C;AACA,IAAA,OAAO,EAAE,OAAA,EAAS,IAAI,OAAA,EAAS,IAAI,KAAA,EAAM;AAAA,EAC3C;AACF;AAGA,eAAe,YAAY,MAAA,EAA2C;AACpE,EAAA,MAAM,KAAM,MAAA,CAA4D,WAAA;AACxE,EAAA,IAAI,OAAO,EAAA,KAAO,UAAA,EAAY,OAAO,EAAC;AACtC,EAAA,MAAM,OAAA,GAAU,MAAM,EAAA,CAAG,IAAA,CAAK,MAAM,CAAA;AACpC,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,UAAU,EAAC;AAC7C;AAQA,SAAS,aAAa,EAAA,EAAsD;AAC1E,EAAA,OAAO,GAAG,MAAA,EAAO;AACnB;AAUA,SAAS,aAAA,GAAgE;AACvE,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,IAAI;AACF,IAAA,MAAM,UAA0B,EAAC;AACjC,IAAA,KAAA,MAAW,IAAA,IAAQ,mBAAkB,EAAG;AACtC,MAAA,KAAA,MAAW,KAAK,QAAA,CAAS,IAAA,EAAM,gBAAgB,CAAA,EAAG,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,IAClE;AACA,IAAA,OAAO,EAAE,SAAS,KAAA,EAAM;AAAA,EAC1B,SAAS,GAAA,EAAK;AACZ,IAAA,KAAA,CAAM,IAAA,CAAK;AAAA,MACT,IAAA,EAAM,SAAA;AAAA,MACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA,KACzD,CAAA;AACD,IAAA,OAAO,EAAE,OAAA,EAAS,EAAC,EAAG,KAAA,EAAM;AAAA,EAC9B;AACF;AAGA,SAAS,GAAA,CAAI,QAAqB,OAAA,EAAwC;AACxE,EAAA,OAAO,QAAQ,GAAA,CAAI,CAAC,WAAW,EAAE,MAAA,EAAQ,OAAM,CAAE,CAAA;AACnD;AASA,eAAsB,gBAAA,CACpB,IACA,UAAA,EAC0B;AAC1B,EAAA,MAAM,CAAC,IAAA,EAAM,KAAK,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI,CAAC,aAAA,EAAc,EAAG,WAAA,CAAY,UAAU,CAAC,CAAC,CAAA;AAClF,EAAA,MAAM,UAAU,aAAA,EAAc;AAC9B,EAAA,OAAO;AAAA,IACL,OAAA,EAAS;AAAA,MACP,GAAG,GAAA,CAAI,QAAA,EAAU,YAAA,CAAa,EAAE,CAAC,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,SAAA,EAAW,IAAA,CAAK,OAAO,CAAA;AAAA,MAC9B,GAAG,GAAA,CAAI,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAAA,MACjC,GAAG,GAAA,CAAI,OAAA,EAAS,KAAA,CAAM,OAAO;AAAA,KAC/B;AAAA,IACA,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,KAAA,EAAO,CAAC,GAAG,IAAA,CAAK,KAAA,EAAO,GAAG,KAAA,CAAM,KAAA,EAAO,GAAG,OAAA,CAAQ,KAAK;AAAA,GACzD;AACF","file":"asset-feeds-UPJJGR3O.js","sourcesContent":["/**\n * asset-feeds.ts — gather installable assets from every feed the manage TUI\n * surfaces.\n *\n * Four feeds, normalized into `CatalogEntry`:\n * - **Project sources** — `skaile.yaml` `sources:` entries (scanned via\n *   `AssetManager.search()`; the new `sources:` field is merged into the\n *   legacy repositories map in `AssetManager.loadConfig`).\n * - **Local libraries** — user authoring places from `LocalIndex` (filesystem\n *   scan of each library's `path`).\n * - **Factory assets** — the bundled first-party `factory-assets` tree\n *   (`factoryAssetRoots()`), scanned from disk. Always present; no network.\n * - **Remote store** — the configured catalog source when `catalog.url` is\n *   not `local`. Failures are non-fatal — they surface as notes.\n */\n\nimport { existsSync } from \"node:fs\";\nimport * as path from \"node:path\";\nimport {\n  type AssetKind,\n  type CatalogDomain,\n  type CatalogEntry,\n  factoryAssetRoots,\n  scanRepo,\n} from \"@skaile/workspaces/core\";\n\n/** One non-fatal note returned to the caller for surfacing in the UI. */\nexport interface FeedNote {\n  feed: \"sources\" | \"libraries\" | \"store\" | \"factory\";\n  message: string;\n}\n\n/**\n * Which feed an asset came from. This is the top-level grouping axis in the\n * manage TUI (\"where is this skill coming from?\") and is intentionally distinct\n * from `publisher` (asset-intrinsic identity): the same publisher can legitimately\n * appear under more than one origin (e.g. a github repo you added as a `source`\n * that is also listed in the remote `store`).\n */\nexport type AssetOrigin = \"source\" | \"library\" | \"factory\" | \"store\";\n\n/** A catalog entry tagged with the feed it was gathered from. */\nexport interface OriginEntry {\n  origin: AssetOrigin;\n  entry: CatalogEntry;\n}\n\nexport interface AssetFeedResult {\n  entries: OriginEntry[];\n  /**\n   * Display-only domain metadata, keyed (by the consumer) on `slug`. Populated\n   * from the store's `catalog.listDomains` when the connected catalog source\n   * exposes it; empty otherwise. The manage TUI joins `entry.domainSlug` → a\n   * domain for grouping headers, descriptions, and relation badges.\n   */\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}\n\n/**\n * Pull assets from local libraries (the authoring places under\n * `~/.skaile/libraries/<name>/`, not the `~/.skaile/sources/` cache). Each\n * library's `path` is scanned with `scanRepo` and tagged with\n * `repository = \"library:<name>\"` so the manage TUI groups them into their\n * own headers.\n */\nasync function libraryAssets(): Promise<{ entries: CatalogEntry[]; notes: FeedNote[] }> {\n  const notes: FeedNote[] = [];\n  try {\n    const [{ openLibraryManager }, { skaileHomeDir }] = await Promise.all([\n      import(\"./open-library.ts\"),\n      import(\"@skaile/workspaces/library\"),\n    ]);\n    const { manager, close } = await openLibraryManager();\n    try {\n      const sourcesDir = path.join(skaileHomeDir(), \"sources\");\n      const libs = (await manager.listLibraries()).filter((l) => !l.path.startsWith(sourcesDir));\n      const entries: CatalogEntry[] = [];\n      for (const lib of libs) {\n        if (!existsSync(lib.path)) continue;\n        for (const e of scanRepo(lib.path, `library:${lib.name}`)) {\n          entries.push(e);\n        }\n      }\n      return { entries, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    notes.push({\n      feed: \"libraries\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/**\n * Pull a (best-effort) snapshot of the connected remote store catalog.\n *\n * - Returns no entries when the resolved catalog is local-only or the host\n *   is unreachable (the failure becomes a note, not an exception).\n * - Maps `CatalogAsset` → `CatalogEntry`, carrying `publisher`, `repo`, and\n *   `category` straight through and using `source = \"store://<id>\"`; per-file\n *   `source` paths are not available for remote assets so the canonical ref is\n *   a stable placeholder.\n */\nasync function storeAssets(projectDir: string): Promise<{\n  entries: CatalogEntry[];\n  domains: CatalogDomain[];\n  notes: FeedNote[];\n}> {\n  const notes: FeedNote[] = [];\n  try {\n    const { resolveCatalogSource } = await import(\"./open-library.ts\");\n    const { source, close } = await resolveCatalogSource({ projectDir });\n    try {\n      const assets = await source.listAssets();\n      const entries: CatalogEntry[] = assets.map((a) => ({\n        name: a.name,\n        kind: (a.kind as AssetKind) ?? \"skill\",\n        description: a.description ?? \"\",\n        source: `store://${a.id}`,\n        publisher: a.publisher,\n        repo: a.repo,\n        domainSlug: a.domainSlug,\n        category: a.category,\n        version: a.version,\n        requires: [],\n        dependencies: [],\n      }));\n      // Domains are optional on the catalog source — only the store backend\n      // (post Part 4 `catalog.listDomains`) exposes them. Duck-type the call so\n      // older sources and the local catalog degrade to no domains, not an error.\n      const domains = await loadDomains(source);\n      return { entries, domains, notes };\n    } finally {\n      close();\n    }\n  } catch (err) {\n    const msg = err instanceof Error ? err.message : String(err);\n    // Local-only catalog throws a recognizable message — silence it; absence\n    // is the user's choice, not an error.\n    if (!/local/i.test(msg)) {\n      notes.push({ feed: \"store\", message: msg });\n    }\n    return { entries: [], domains: [], notes };\n  }\n}\n\n/** Optional `listDomains` capability — returns `[]` when the source lacks it. */\nasync function loadDomains(source: unknown): Promise<CatalogDomain[]> {\n  const fn = (source as { listDomains?: () => Promise<CatalogDomain[]> }).listDomains;\n  if (typeof fn !== \"function\") return [];\n  const domains = await fn.call(source);\n  return Array.isArray(domains) ? domains : [];\n}\n\n/**\n * Project-source feed: leans on `AssetManager.search()`, which now merges\n * `skaile.yaml`'s `sources:` field into the repositories map. Provided as a\n * function rather than an inline call so the caller can supply a fresh\n * `AssetManager` instance.\n */\nfunction sourceAssets(am: { search: () => CatalogEntry[] }): CatalogEntry[] {\n  return am.search();\n}\n\n/**\n * Factory-asset feed: scan the bundled first-party `factory-assets` tree(s)\n * resolved by `factoryAssetRoots()` (the `SKAILE_FACTORY_ASSETS_DIR` override\n * layer ahead of the bundled tree). Synchronous, no network — the entries are\n * the built-in skills / connectors / bundles that ship with `@skaile/workspaces`.\n * `factoryAssetRoots()` already dedupes, so the env override pointing at the\n * bundled dir collapses to one root.\n */\nfunction factoryAssets(): { entries: CatalogEntry[]; notes: FeedNote[] } {\n  const notes: FeedNote[] = [];\n  try {\n    const entries: CatalogEntry[] = [];\n    for (const root of factoryAssetRoots()) {\n      for (const e of scanRepo(root, \"skaile-factory\")) entries.push(e);\n    }\n    return { entries, notes };\n  } catch (err) {\n    notes.push({\n      feed: \"factory\",\n      message: err instanceof Error ? err.message : String(err),\n    });\n    return { entries: [], notes };\n  }\n}\n\n/** Tag a flat entry list with a single origin. */\nfunction tag(origin: AssetOrigin, entries: CatalogEntry[]): OriginEntry[] {\n  return entries.map((entry) => ({ origin, entry }));\n}\n\n/**\n * Run all feeds and return a single normalized result.\n *\n * Feeds run in parallel where possible — the store fetch is the slow one\n * (one HTTP call) and is fired alongside the local library walk. The factory\n * scan is local + synchronous, so it runs inline.\n */\nexport async function gatherAssetFeeds(\n  am: { search: () => CatalogEntry[] },\n  projectDir: string,\n): Promise<AssetFeedResult> {\n  const [libs, store] = await Promise.all([libraryAssets(), storeAssets(projectDir)]);\n  const factory = factoryAssets();\n  return {\n    entries: [\n      ...tag(\"source\", sourceAssets(am)),\n      ...tag(\"library\", libs.entries),\n      ...tag(\"factory\", factory.entries),\n      ...tag(\"store\", store.entries),\n    ],\n    domains: store.domains,\n    notes: [...libs.notes, ...store.notes, ...factory.notes],\n  };\n}\n"]}

package/dist/asset-manager/index.js

@@ -1,11 +1,11 @@
-export { AssetManager, parseCanonicalLockKey } from '../chunk-TNYWP6EQ.js';
-export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-TB342H55.js';
-import '../chunk-MVXXAXDW.js';
+export { AssetManager, parseCanonicalLockKey } from '../chunk-5VMVNQGB.js';
+export { createScaffold, deployAll, installAgent, removeAsset } from '../chunk-SURALYSM.js';
+import '../chunk-KYQNWFJV.js';
 import '../chunk-ZAP2BDHG.js';
-import '../chunk-JAOXG3LL.js';
-import '../chunk-NQDJQ7WB.js';
+import '../chunk-HVCZLD5Z.js';
+import '../chunk-GJI6FZ56.js';
 import '../chunk-DZCK7GRW.js';
-import '../chunk-B5PEERRZ.js';
+import '../chunk-6IDBWPK2.js';
 import '../chunk-GEEW6SY2.js';
 import '../chunk-XGCXFX7X.js';
 import '../chunk-O4JH3KUE.js';

package/dist/asset-manager/installer.js

@@ -1,10 +1,10 @@
-export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-TB342H55.js';
-import '../chunk-MVXXAXDW.js';
+export { createScaffold, deployAll, deployAsset, removeAsset } from '../chunk-SURALYSM.js';
+import '../chunk-KYQNWFJV.js';
 import '../chunk-ZAP2BDHG.js';
-import '../chunk-JAOXG3LL.js';
-import '../chunk-NQDJQ7WB.js';
+import '../chunk-HVCZLD5Z.js';
+import '../chunk-GJI6FZ56.js';
 import '../chunk-DZCK7GRW.js';
-import '../chunk-B5PEERRZ.js';
+import '../chunk-6IDBWPK2.js';
 import '../chunk-GEEW6SY2.js';
 import '../chunk-XGCXFX7X.js';
 import '../chunk-O4JH3KUE.js';

package/dist/bridge/drivers/claude-sdk.js

@@ -1,7 +1,7 @@
 import { dispatchCapability } from '../../chunk-RRVQAE5D.js';
 import { fetchProviderModels } from '../../chunk-BMQKMOQY.js';
 import { AuthError, classifyClaudeSdkError, reclassifyAuthAsAccountUnavailable, AccountUnavailableError } from '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-KM6DCR7A.js';
+import { BUILTIN_DRIVER_CATALOG, AgentDriver, getBridgeLogger } from '../../chunk-OCAQH66V.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-JB35MVBN.js';
 import '../../chunk-NSBPE2FW.js';
@@ -12,6 +12,97 @@ import { homedir } from 'os';
 import { join } from 'path';
 import * as zNS from 'zod';
 
+// bridge/src/drivers/sanitize-assistant-text.ts
+var NS = "(?:[a-z][a-z0-9]*:)?";
+var FUNCTION_CALL_BLOCK = new RegExp(
+  `\\[\\s*${NS}function_calls\\s*\\][\\s\\S]*?\\[\\s*/\\s*${NS}function_calls\\s*\\]`,
+  "gi"
+);
+var INVOKE_BLOCK = new RegExp(
+  `\\[\\s*${NS}invoke\\b[\\s\\S]*?\\[\\s*/\\s*${NS}invoke\\s*\\]`,
+  "gi"
+);
+var ROLE_TURN_LINE = /^\s*\[(?:User|Assistant|System)\]\s*:/i;
+function sanitizeAssistantText(text) {
+  if (!text || text.indexOf("[") === -1 && text.indexOf("]") === -1) {
+    return text;
+  }
+  const stripped = text.replace(FUNCTION_CALL_BLOCK, "").replace(INVOKE_BLOCK, "");
+  let changed = stripped !== text;
+  let out = stripped;
+  const lines = out.split("\n");
+  let end = lines.length;
+  for (let i = lines.length - 1; i >= 0; i--) {
+    const line = lines[i] ?? "";
+    if (line.trim() === "") {
+      continue;
+    }
+    if (ROLE_TURN_LINE.test(line)) {
+      end = i;
+      continue;
+    }
+    break;
+  }
+  if (end < lines.length) {
+    out = lines.slice(0, end).join("\n");
+    changed = true;
+  }
+  return changed ? out.replace(/\s+$/, "") : out;
+}
+var TAG_PREFIXES = [
+  "function_call",
+  "function_cal",
+  "function_ca",
+  "function_c",
+  "function_",
+  "function",
+  "functio",
+  "functi",
+  "funct",
+  "func",
+  "fun",
+  "fu",
+  "f",
+  "invoke",
+  "invok",
+  "invo",
+  "inv",
+  "in",
+  "i",
+  "user",
+  "use",
+  "us",
+  "u",
+  "assistant",
+  "assistan",
+  "assista",
+  "assist",
+  "assis",
+  "assi",
+  "ass",
+  "as",
+  "a",
+  "system",
+  "syste",
+  "syst",
+  "sys",
+  "sy",
+  "s"
+].join("|");
+var PARTIAL_MARKER_TAIL = new RegExp(`\\[\\s*/?\\s*${NS}(?:${TAG_PREFIXES})?[^\\]]*$`, "i");
+var UNCLOSED_OPENER = new RegExp(`\\[\\s*${NS}function_calls\\s*\\]|\\[\\s*${NS}invoke\\b`, "i");
+function streamingSafeSanitize(text) {
+  let cleaned = sanitizeAssistantText(text);
+  const opener = UNCLOSED_OPENER.exec(cleaned);
+  if (opener && opener.index >= 0) {
+    cleaned = cleaned.slice(0, opener.index);
+  }
+  const tail = PARTIAL_MARKER_TAIL.exec(cleaned);
+  if (tail && tail.index >= 0) {
+    cleaned = cleaned.slice(0, tail.index);
+  }
+  return cleaned.replace(/\s+$/, "");
+}
 var STUB_TEXT = "[image removed: unprocessable image data]";
 var STUB_TEXT_OVERSIZED = "[image removed: image too large]";
 var MAX_IMAGE_BYTES = 5 * 1024 * 1024;
@@ -235,6 +326,12 @@ var ClaudeSdkDriver = class extends AgentDriver {
   sdk = null;
   toolIdToName = /* @__PURE__ */ new Map();
   prevText = "";
+  /**
+   * Count of sanitized characters already streamed for the current message.
+   * Lets {@link handleStreamEvent} emit only the newly-stable sanitized suffix
+   * as `_textDelta`, so a leaked marker that spans deltas is never half-sent.
+   */
+  emittedSanitizedLen = 0;
   /** Set once the streaming text of the current message classifies as a self-healable auth render. */
   suppressingAuthStream = false;
   /** Active query — may stay alive between turns if streamInput works. */
@@ -338,6 +435,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
     if (isFirstAttempt) this._lastTokens = null;
     this.running = true;
     this.prevText = "";
+    this.emittedSanitizedLen = 0;
     this.suppressingAuthStream = false;
     this.turnCompleted = false;
     const turnPromise = new Promise((resolve, reject) => {
@@ -928,6 +1026,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
     if (this.isSuppressibleAuthRender(agentMsg)) {
       this.log.info("suppressing SDK auth-error assistant text; self-heal will retry");
       this.prevText = "";
+      this.emittedSanitizedLen = 0;
       this.suppressingAuthStream = false;
       return;
     }
@@ -943,6 +1042,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
       }
     }
     this.prevText = "";
+    this.emittedSanitizedLen = 0;
     this.suppressingAuthStream = false;
     this.emit("agent-event", { type: "message_end", message: agentMsg });
   }
@@ -973,14 +1073,18 @@ var ClaudeSdkDriver = class extends AgentDriver {
         this.log.info("suppressing SDK auth-error stream; self-heal will retry");
       }
       if (this.suppressingAuthStream) return;
+      const safe = streamingSafeSanitize(this.prevText);
+      const sanitizedDelta = safe.slice(this.emittedSanitizedLen);
+      this.emittedSanitizedLen = safe.length;
+      if (sanitizedDelta.length === 0) return;
       const agentMsg = {
         role: "assistant",
-        content: [{ type: "text", text: this.prevText }]
+        content: [{ type: "text", text: safe }]
       };
       this.emit("agent-event", {
         type: "message_update",
         message: agentMsg,
-        _textDelta: delta
+        _textDelta: sanitizedDelta
       });
     }
   }
@@ -1029,17 +1133,18 @@ var ClaudeSdkDriver = class extends AgentDriver {
   }
   /** Emit the message_end (if any) + success result event for a clean turn. */
   handleSuccessResult(msg) {
-    if (msg.result) {
+    const result = msg.result != null ? sanitizeAssistantText(msg.result) : msg.result;
+    if (result) {
       const agentMsg = {
         role: "assistant",
-        content: msg.result
+        content: result
       };
       this.emit("agent-event", { type: "message_end", message: agentMsg });
     }
     this.emit("agent-event", {
       type: "result",
       subtype: msg.subtype,
-      summary: msg.result ?? "Task completed",
+      summary: result ?? "Task completed",
       costUsd: msg.total_cost_usd ?? 0,
       ...this._lastTokens ? { tokens: this._lastTokens } : {}
     });
@@ -1121,7 +1226,7 @@ var ClaudeSdkDriver = class extends AgentDriver {
     if (Array.isArray(content)) {
       for (const block of content) {
         if (block.type === "text") {
-          contentBlocks.push({ type: "text", text: block.text });
+          contentBlocks.push({ type: "text", text: sanitizeAssistantText(block.text) });
         } else if (block.type === "tool_use") {
           contentBlocks.push({
             type: "tool_use",