jeopi-agent-core 16.4.4 → 16.4.5

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [16.4.5] - 2026-08-03
+
+### Fixed
+
+- Fixed the agent stopping mid-task with raw `<invoke name="…">` markup printed in the reply. When a native-tool-calling model emitted its tool call as visible text instead of a `tool_use` block, the turn carried zero runnable calls, so the loop treated it as a finished answer and the announced work never ran. Such turns are now re-materialized into real tool calls and dispatched normally; the leaked markup is stripped from the visible text. Turns that merely quote tool syntax inside a fenced code block are left untouched, and owned/in-band dialect sessions are unaffected (their stream wrapper already handles this).
+
 ## [16.4.3] - 2026-07-22
 
 ### Fixed

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "jeopi-agent-core",
-	"version": "16.4.4",
+	"version": "16.4.5",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"homepage": "https://github.com/akillness/jeopi",
 	"author": "Can Boluk",
@@ -35,12 +35,12 @@
 		"fmt": "biome format --write ."
 	},
 	"dependencies": {
-		"jeopi-ai": "16.4.4",
-		"jeopi-catalog": "16.4.4",
-		"jeopi-natives": "16.4.4",
-		"jeopi-utils": "16.4.4",
-		"jeopi-wire": "16.4.4",
-		"jeopi-snapcompact": "16.4.4",
+		"jeopi-ai": "16.4.5",
+		"jeopi-catalog": "16.4.5",
+		"jeopi-natives": "16.4.5",
+		"jeopi-utils": "16.4.5",
+		"jeopi-wire": "16.4.5",
+		"jeopi-snapcompact": "16.4.5",
 		"@opentelemetry/api": "^1.9.1"
 	},
 	"devDependencies": {

package/src/agent-loop.ts

@@ -24,6 +24,7 @@ import {
 	encodeInbandToolHistory,
 	renderInbandToolPrompt,
 	renderToolExamples,
+	salvageLeakedToolCalls,
 	wrapInbandToolStream,
 } from "jeopi-ai/dialect";
 import * as AIError from "jeopi-ai/error";
@@ -38,7 +39,7 @@ import {
 	signalListLabel,
 } from "jeopi-ai/utils/harmony-leak";
 import { preferredDialect } from "jeopi-catalog/identity";
-import { sanitizeText, structuredCloneJSON } from "jeopi-utils";
+import { logger, sanitizeText, structuredCloneJSON } from "jeopi-utils";
 import { INTENT_FIELD } from "jeopi-wire";
 import { type AgentRunCoverage, type AgentRunSummary, ToolCallBlockedError } from "./run-collector";
 import {
@@ -1233,6 +1234,12 @@ async function streamAssistantResponse(
 		};
 	}
 
+	// Tool catalog as sent natively this turn. Empty under an owned dialect (the
+	// wire carries no `tools`), which is exactly when leaked-markup salvage must
+	// NOT run — that path already re-materializes in-band calls via the stream
+	// wrapper, and double-parsing would duplicate every call.
+	const nativeWireTools: Context["tools"] = ownedDialect ? undefined : llmContext.tools;
+
 	const streamFunction = streamFn || streamSimple;
 
 	const dynamicReasoning = config.getReasoning?.();
@@ -1427,6 +1434,7 @@ async function streamAssistantResponse(
 								throw new HarmonyLeakInterruption(detection, removed, recovered);
 							}
 						}
+						finalMessage = applyLeakedToolCallSalvage(finalMessage, nativeWireTools, config);
 						finalMessage = snapshotAssistantMessage(finalMessage);
 						// Expand inline macros (and any other registered rewrite) on the
 						// finalized message before it reaches the context, the UI, or tool
@@ -1529,6 +1537,7 @@ async function streamAssistantResponse(
 					throw new HarmonyLeakInterruption(detection, removed, recovered);
 				}
 			}
+			trailing = applyLeakedToolCallSalvage(trailing, nativeWireTools, config);
 			trailing = snapshotAssistantMessage(trailing);
 			if (addedPartial) {
 				context.messages[context.messages.length - 1] = trailing;
@@ -1606,6 +1615,30 @@ function recoverTransientErrorToolTurn(
 	};
 }
 
+/**
+ * Re-materialize tool calls a native-tool-calling model wrote as visible text.
+ *
+ * Without this the turn holds zero runnable tool calls, so the loop treats it
+ * as a finished answer: the raw `<invoke …>` markup renders to the user and the
+ * work the model announced never runs. `salvageLeakedToolCalls` only fires on
+ * unambiguous leaks (see its guards); anything else returns the message
+ * untouched.
+ */
+function applyLeakedToolCallSalvage(
+	message: AssistantMessage,
+	nativeWireTools: Context["tools"],
+	config: AgentLoopConfig,
+): AssistantMessage {
+	const salvaged = salvageLeakedToolCalls(message, nativeWireTools);
+	if (!salvaged) return message;
+	logger.warn("Recovered tool calls emitted as text", {
+		model: config.model.id,
+		provider: config.model.provider,
+		tools: salvaged.calls.map(call => call.name),
+	});
+	return salvaged.message;
+}
+
 function emitDiscardedHarmonyPartial(
 	partialMessage: AssistantMessage | null,
 	stream: EventStream<AgentEvent, AgentMessage[]>,