@yeaft/webchat-agent 0.1.564 → 0.1.567

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "0.1.564",
+  "version": "0.1.567",
   "description": "Remote agent for Yeaft WebChat — connects worker machines to the central server",
   "main": "index.js",
   "type": "module",

package/unify/llm/adapter.js

@@ -103,6 +103,58 @@ export class LLMAbortError extends Error {
 
 // ─── task-344: Raw payload redaction helper ────────────────────
 
+/**
+ * task-344 follow-up (N2): cap raw payload size exposed via onRawExchange.
+ * Prevents the web debug store from linear-growing when a single turn
+ * sends / receives megabytes of content. 256 KiB per field per turn.
+ */
+export const RAW_PAYLOAD_CAP_BYTES = 256 * 1024;
+
+/**
+ * Truncate a string to at most `cap` bytes (UTF-8). When within cap the
+ * original is returned; otherwise a prefix with a trailing
+ * `…[truncated, original N bytes]` marker. Non-string inputs pass through.
+ *
+ * @param {string} s
+ * @param {number} [cap=RAW_PAYLOAD_CAP_BYTES]
+ * @returns {string}
+ */
+export function capRawString(s, cap = RAW_PAYLOAD_CAP_BYTES) {
+  if (typeof s !== 'string') return s;
+  const encoder = new TextEncoder();
+  const fullBytes = encoder.encode(s);
+  if (fullBytes.length <= cap) return s;
+  const decoder = new TextDecoder('utf-8', { fatal: false });
+  const prefix = decoder.decode(fullBytes.slice(0, cap));
+  return `${prefix}…[truncated, original ${fullBytes.length} bytes]`;
+}
+
+/**
+ * Cap the `body` field of a rawRequest envelope. JSON-stringifies objects
+ * before sizing so an oversized `messages` array does not escape the cap.
+ * When truncation fires, body becomes a string (JSON prefix + marker);
+ * objects under cap stay objects.
+ *
+ * @param {{ url: string, method: string, headers: object, body: any }} req
+ * @param {number} [cap=RAW_PAYLOAD_CAP_BYTES]
+ * @returns {{ url: string, method: string, headers: object, body: any }}
+ */
+export function capRawRequest(req, cap = RAW_PAYLOAD_CAP_BYTES) {
+  if (!req || typeof req !== 'object') return req;
+  let body = req.body;
+  if (body != null && typeof body !== 'string') {
+    let serialized;
+    try { serialized = JSON.stringify(body); }
+    catch { serialized = String(body); }
+    if (typeof serialized === 'string' && new TextEncoder().encode(serialized).length > cap) {
+      body = capRawString(serialized, cap);
+    }
+  } else if (typeof body === 'string') {
+    body = capRawString(body, cap);
+  }
+  return { url: req.url, method: req.method, headers: req.headers, body };
+}
+
 /**
  * Redact sensitive headers (API keys / bearer tokens) from a raw request
  * shape before exposing it to debug UI. Always returns a NEW object — never

package/unify/llm/anthropic.js

@@ -14,6 +14,9 @@ import {
   LLMServerError,
   LLMAbortError,
   redactRawRequest,
+  capRawRequest,
+  capRawString,
+  RAW_PAYLOAD_CAP_BYTES,
 } from './adapter.js';
 import {
   normalizeEffort,
@@ -182,7 +185,8 @@ export class AnthropicAdapter extends LLMAdapter {
     };
 
     // task-344: expose raw request (redacted) for debug panel.
-    const rawRequest = redactRawRequest({ url, method: 'POST', headers, body });
+    // task-344 follow-up (N2): cap body to RAW_PAYLOAD_CAP_BYTES.
+    const rawRequest = capRawRequest(redactRawRequest({ url, method: 'POST', headers, body }));
 
     const response = await fetch(url, {
       method: 'POST',
@@ -203,7 +207,8 @@ export class AnthropicAdapter extends LLMAdapter {
               headers: response.headers && typeof response.headers.entries === 'function'
                 ? Object.fromEntries(response.headers.entries())
                 : {},
-              body: errorBody,
+              // task-344 follow-up (N2): cap error body.
+              body: capRawString(errorBody),
             },
           });
         } catch { /* ignore */ }
@@ -219,7 +224,11 @@ export class AnthropicAdapter extends LLMAdapter {
     let currentToolName = null;
     let currentToolInput = '';
     // task-344: accumulate raw SSE body for debug exposure.
+    // task-344 follow-up (N2): cap growth — once past RAW_PAYLOAD_CAP_BYTES
+    // we freeze the captured body and record total-bytes-seen separately.
     let rawSseBody = '';
+    let rawSseTotalBytes = 0;
+    let rawSseCapped = false;
     const responseHeaders = response.headers && typeof response.headers.entries === 'function'
       ? Object.fromEntries(response.headers.entries())
       : {};
@@ -232,7 +241,20 @@ export class AnthropicAdapter extends LLMAdapter {
 
         const chunkText = decoder.decode(value, { stream: true });
         buffer += chunkText;
-        rawSseBody += chunkText;
+        // task-344 follow-up (N2): size-capped capture.
+        rawSseTotalBytes += value.byteLength;
+        if (!rawSseCapped) {
+          if (rawSseTotalBytes <= RAW_PAYLOAD_CAP_BYTES) {
+            rawSseBody += chunkText;
+          } else {
+            // Append enough of this chunk to meet the cap, then freeze.
+            const remaining = RAW_PAYLOAD_CAP_BYTES - (rawSseTotalBytes - value.byteLength);
+            if (remaining > 0) {
+              rawSseBody += chunkText.slice(0, remaining);
+            }
+            rawSseCapped = true;
+          }
+        }
         const lines = buffer.split('\n');
         buffer = lines.pop() || ''; // Keep incomplete line
 
@@ -325,12 +347,16 @@ export class AnthropicAdapter extends LLMAdapter {
       // task-344: emit raw exchange after stream completes (or errors).
       if (onRawExchange) {
         try {
+          // task-344 follow-up (N2): append truncation marker when capped.
+          const finalBody = rawSseCapped
+            ? `${rawSseBody}…[truncated, original ${rawSseTotalBytes} bytes]`
+            : rawSseBody;
           onRawExchange({
             rawRequest,
             rawResponse: {
               status: responseStatus,
               headers: responseHeaders,
-              body: rawSseBody,
+              body: finalBody,
               format: 'sse',
             },
           });

package/unify/llm/chat-completions.js

@@ -28,6 +28,9 @@ import {
   LLMServerError,
   LLMAbortError,
   redactRawRequest,
+  capRawRequest,
+  capRawString,
+  RAW_PAYLOAD_CAP_BYTES,
 } from './adapter.js';
 import {
   normalizeEffort,
@@ -239,7 +242,8 @@ export class ChatCompletionsAdapter extends LLMAdapter {
     };
 
     // task-344: expose raw request (redacted) for debug panel.
-    const rawRequest = redactRawRequest({ url, method: 'POST', headers, body });
+    // task-344 follow-up (N2): cap body size.
+    const rawRequest = capRawRequest(redactRawRequest({ url, method: 'POST', headers, body }));
 
     const response = await fetch(url, {
       method: 'POST',
@@ -259,7 +263,8 @@ export class ChatCompletionsAdapter extends LLMAdapter {
               headers: response.headers && typeof response.headers.entries === 'function'
                 ? Object.fromEntries(response.headers.entries())
                 : {},
-              body: errorBody,
+              // task-344 follow-up (N2): cap error body.
+              body: capRawString(errorBody),
             },
           });
         } catch { /* ignore */ }
@@ -272,7 +277,10 @@ export class ChatCompletionsAdapter extends LLMAdapter {
     const decoder = new TextDecoder();
     let buffer = '';
     // task-344: accumulate raw SSE body + headers/status for debug exposure.
+    // task-344 follow-up (N2): cap growth at RAW_PAYLOAD_CAP_BYTES.
     let rawSseBody = '';
+    let rawSseTotalBytes = 0;
+    let rawSseCapped = false;
     const responseHeaders = response.headers && typeof response.headers.entries === 'function'
       ? Object.fromEntries(response.headers.entries())
       : {};
@@ -290,7 +298,19 @@ export class ChatCompletionsAdapter extends LLMAdapter {
 
         const chunkText = decoder.decode(value, { stream: true });
         buffer += chunkText;
-        rawSseBody += chunkText;
+        // task-344 follow-up (N2): size-capped capture.
+        rawSseTotalBytes += value.byteLength;
+        if (!rawSseCapped) {
+          if (rawSseTotalBytes <= RAW_PAYLOAD_CAP_BYTES) {
+            rawSseBody += chunkText;
+          } else {
+            const remaining = RAW_PAYLOAD_CAP_BYTES - (rawSseTotalBytes - value.byteLength);
+            if (remaining > 0) {
+              rawSseBody += chunkText.slice(0, remaining);
+            }
+            rawSseCapped = true;
+          }
+        }
         const lines = buffer.split('\n');
         buffer = lines.pop() || '';
 
@@ -377,12 +397,16 @@ export class ChatCompletionsAdapter extends LLMAdapter {
       // task-344: emit raw exchange after stream completes.
       if (onRawExchange) {
         try {
+          // task-344 follow-up (N2): append truncation marker when capped.
+          const finalBody = rawSseCapped
+            ? `${rawSseBody}…[truncated, original ${rawSseTotalBytes} bytes]`
+            : rawSseBody;
           onRawExchange({
             rawRequest,
             rawResponse: {
               status: responseStatus,
               headers: responseHeaders,
-              body: rawSseBody,
+              body: finalBody,
               format: 'sse',
             },
           });