@yeaft/webchat-agent 1.0.264 → 1.0.265

package/local-runtime/version.json

@@ -1 +1 @@
-{"version":"1.0.264"}
+{"version":"1.0.265"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "1.0.264",
+  "version": "1.0.265",
   "description": "Remote worker agent for Yeaft Web Code Agent — connects the native Yeaft engine, CLI providers, and workbench tools",
   "main": "index.js",
   "type": "module",

package/yeaft/archive/tool-results.js

@@ -77,7 +77,7 @@ export async function archiveOne({ root, scopeDir, message }) {
   await fs.mkdir(dirname(path), { recursive: true });
   await fs.writeFile(path, body, 'utf8');
   const sizeStr = formatSize(body.length);
-  const preview = body.slice(0, STUB_PREVIEW_LEN).replace(/\s+/g, ' ');
+  const preview = body.slice(0, STUB_PREVIEW_LEN).toWellFormed().replace(/\s+/g, ' ');
   const stub = {
     role: 'tool',
     toolCallId,

package/yeaft/llm/adapter.js

@@ -419,6 +419,56 @@ export function redactRawRequest(req) {
   return { url: req.url, method: req.method, headers, body: req.body };
 }
 
+/**
+ * Return a wire-safe copy of a JSON-compatible value.
+ *
+ * JavaScript strings may contain lone UTF-16 surrogates. JSON.stringify keeps
+ * them as `\\ud800`-style escapes, but strict API servers reject them because
+ * they cannot represent Unicode scalar values in UTF-8. Replace only malformed
+ * code units with U+FFFD; valid surrogate pairs (including emoji) are kept.
+ *
+ * @param {any} value
+ * @returns {any}
+ */
+export function toWellFormedJson(value) {
+  // Let the native serializer retain its complete semantics first: toJSON,
+  // boxed primitives, non-finite numbers, array holes, and omitted values.
+  const serialized = JSON.stringify(value, (_key, child) => {
+    if (typeof child === 'string') return child.toWellFormed();
+    // JSON.stringify invokes the replacer before unboxing String objects.
+    // String#valueOf checks the real [[StringData]] internal slot across realms;
+    // unlike instanceof or Object#toString, it cannot be spoofed by a caller.
+    if (child && typeof child === 'object') {
+      try {
+        return String.prototype.valueOf.call(child).toWellFormed();
+      } catch (err) {
+        if (!(err instanceof TypeError)) throw err;
+      }
+    }
+    return child;
+  });
+  if (serialized === undefined) return undefined;
+
+  // The replacer cannot rename object keys. Rebuild only the already-serialized
+  // plain JSON tree so malformed keys are fixed too. Null-prototype containers
+  // keep an own "__proto__" key as data rather than invoking the legacy setter.
+  const normalizeKeys = child => {
+    if (Array.isArray(child)) return child.map(normalizeKeys);
+    if (!child || typeof child !== 'object') return child;
+    const out = Object.create(null);
+    for (const [key, nested] of Object.entries(child)) {
+      Object.defineProperty(out, key.toWellFormed(), {
+        value: normalizeKeys(nested),
+        enumerable: true,
+        configurable: true,
+        writable: true,
+      });
+    }
+    return out;
+  };
+  return normalizeKeys(JSON.parse(serialized));
+}
+
 /**
  * Snapshot a Fetch Response's headers into a plain object for the debug
  * panel. Defensive against polyfilled / mocked Response shapes that don't

package/yeaft/llm/anthropic.js

@@ -19,6 +19,7 @@ import {
   redactRawRequest,
   safeHeaders,
   SseLineBuffer,
+  toWellFormedJson,
 } from './adapter.js';
 import {
   normalizeEffort,
@@ -261,6 +262,7 @@ export class AnthropicAdapter extends LLMAdapter {
 
     const translatedTools = this.#translateTools(tools);
     if (translatedTools) body.tools = translatedTools;
+    const wireBody = toWellFormedJson(body);
 
     const url = `${this.#baseUrl}/v1/messages`;
     const headers = this.#headers();
@@ -268,7 +270,7 @@ export class AnthropicAdapter extends LLMAdapter {
     // Expose the raw request (auth-redacted) for the debug panel. The body
     // is captured verbatim — never truncated — so "copy request" matches
     // exactly what we POST to the LLM.
-    const rawRequest = redactRawRequest({ url, method: 'POST', headers, body });
+    const rawRequest = redactRawRequest({ url, method: 'POST', headers, body: wireBody });
 
     let response;
     try {
@@ -276,7 +278,7 @@ export class AnthropicAdapter extends LLMAdapter {
       response = await fetch(url, {
         method: 'POST',
         headers,
-        body: JSON.stringify(body),
+        body: JSON.stringify(wireBody),
         signal,
       });
     } catch (err) {
@@ -544,6 +546,7 @@ export class AnthropicAdapter extends LLMAdapter {
     if ((thinkingV1Enabled() || effortSource === 'user') && normEffort) {
       applyAnthropicThinking(body, model, normEffort, effortContext);
     }
+    const wireBody = toWellFormedJson(body);
 
     let response;
     try {
@@ -551,7 +554,7 @@ export class AnthropicAdapter extends LLMAdapter {
       response = await fetch(`${this.#baseUrl}/v1/messages`, {
         method: 'POST',
         headers: this.#headers(),
-        body: JSON.stringify(body),
+        body: JSON.stringify(wireBody),
         signal,
       });
     } catch (err) {

package/yeaft/llm/openai-responses.js

@@ -38,6 +38,7 @@ import {
   redactRawRequest,
   safeHeaders,
   SseLineBuffer,
+  toWellFormedJson,
 } from './adapter.js';
 import {
   normalizeEffort,
@@ -187,7 +188,7 @@ export class OpenAIResponsesAdapter extends LLMAdapter {
               type: 'function_call',
               call_id: tc.id,
               name: tc.name,
-              arguments: JSON.stringify(tc.input ?? {}),
+              arguments: JSON.stringify(toWellFormedJson(tc.input ?? {})),
             });
           }
         }
@@ -285,6 +286,7 @@ export class OpenAIResponsesAdapter extends LLMAdapter {
     }
 
     if (extraBody) Object.assign(body, extraBody);
+    const wireBody = toWellFormedJson(body);
 
     const url = `${this.#baseUrl}/responses`;
     const headers = {
@@ -294,7 +296,7 @@ export class OpenAIResponsesAdapter extends LLMAdapter {
 
     // Expose the raw request (auth-redacted) for the debug panel. See
     // `redactRawRequest` in adapter.js for the verbatim-design rationale.
-    const rawRequest = redactRawRequest({ url, method: 'POST', headers, body });
+    const rawRequest = redactRawRequest({ url, method: 'POST', headers, body: wireBody });
 
     let response;
     try {
@@ -302,7 +304,7 @@ export class OpenAIResponsesAdapter extends LLMAdapter {
       response = await fetch(url, {
         method: 'POST',
         headers,
-        body: JSON.stringify(body),
+        body: JSON.stringify(wireBody),
         signal,
       });
     } catch (err) {
@@ -540,6 +542,7 @@ export class OpenAIResponsesAdapter extends LLMAdapter {
     }
 
     if (extraBody) Object.assign(body, extraBody);
+    const wireBody = toWellFormedJson(body);
 
     let response;
     try {
@@ -550,7 +553,7 @@ export class OpenAIResponsesAdapter extends LLMAdapter {
           'Content-Type': 'application/json',
           'Authorization': `Bearer ${this.#apiKey}`,
         },
-        body: JSON.stringify(body),
+        body: JSON.stringify(wireBody),
         signal,
       });
     } catch (err) {