llmz 1.0.1 → 1.0.3

package/dist/inspection.d.ts

@@ -36,3 +36,5 @@ export type InspectionOptions = {
 export type Inspector = (value: unknown, options: InspectionOptions) => string;
 /** The shared boundary for values displayed in prompts, reports, and memory inventories. */
 export declare function createInspector(onInspect?: OnInspect): Inspector;
+/** Isolate evidence from subsequent guest mutations without invoking getters. */
+export declare function snapshotInspectionValue(value: unknown, copies?: WeakMap<object, unknown>): unknown;

package/dist/{native-DvTH9vFe.js → native-BGW5kBlv.js}

@@ -1,6 +1,6 @@
 import { Y as __exportAll, i as getMultilineComment } from "./utils-BOFzb8Ok.js";
-import { b as InvalidConfigurationError } from "./errors-H4JJFH3S.js";
-import { i as formatTypings, t as getTypings } from "./typings-D9_aC8aq.js";
+import { b as InvalidConfigurationError } from "./errors-Crk5P8jo.js";
+import { i as formatTypings, t as getTypings } from "./typings-BEVDvtuk.js";
 //#region src/chat/response.ts
 const presets = {
 	markdown: { instructions: "Write natural Markdown directly in the assistant response. Use paragraphs, lists, links, and code blocks where useful. Do not wrap the entire response in JSON or a Markdown fence." },
@@ -32,15 +32,20 @@ function resolveResponse(response = "markdown") {
 //#endregion
 //#region src/runtime/native-tools.ts
 const WORKER_RESPONSE_INSTRUCTION = "You are running in worker mode. Respond only with a run_javascript tool call. Keep assistant text empty: do not send messages, preambles, progress updates, explanations, acknowledgements such as \"Done\", Markdown, or JSON outside the tool call. This applies before and after tools, during recovery, and when completing the task.";
+const EXECUTION_DESCRIPTION = "Execute a JavaScript program in the sandbox. This is the only native tool; business functions are called INSIDE its code, using their documented signatures. It is not a search engine: never submit search terms, user questions, answers, or business tool names as code. Await business calls, then return inspect(value) to read their results, or return exit(name, payload) to select a registered outcome. See \"run_javascript syntax\" and the examples.";
 const RUN_JAVASCRIPT_TOOL = {
 	name: "run_javascript",
-	description: "Run business tools, send requested chat components, or finish a worker task by executing JavaScript. For text plus actions, write the requested text as a preamble to this tool call; do not end with a text-only answer before the actions. Exact requested text needs no separator before this call: do not append a space or newline to the preamble. An ordinary chat reply with no remaining action needs no tool call just to finish the turn. Code displayed in an answer is text, not a program to execute. See \"run_javascript syntax\" and the documented functions and memory.",
+	description: `${EXECUTION_DESCRIPTION} For a requested text message plus an action or component, include the assistant text AND this tool call in the same response. A plain assistant reply needs no tool call when no action remains.`,
 	parameters: {
 		type: "object",
 		properties: { code: {
 			type: "string",
-			minLength: 1,
-			description: "JavaScript source with an explicit return statement. Top-level await is supported."
+			description: [
+				"The body of an async JavaScript program. Top-level await and return are supported. No Markdown fences, XML wrappers, imports, or TypeScript annotations.",
+				"Call business functions using the actual API declarations. A string parameter takes a string; an object parameter takes its documented fields. Do not put a query or reply here instead of a program.",
+				"<example purpose=\"JavaScript syntax only\">const total = 17 + 25; return inspect(total);</example>",
+				"The example tags are documentation only. The code value must contain only executable JavaScript. End with return inspect(value), or return exit(\"registered_name\", payload) with the actual outcome name and required payload. These are JavaScript functions, not separate native tools."
+			].join("\n\n")
 		} },
 		required: ["code"],
 		additionalProperties: false
@@ -51,7 +56,7 @@ function getRunJavaScriptTool(chat) {
 	if (chat) return RUN_JAVASCRIPT_TOOL;
 	return {
 		...RUN_JAVASCRIPT_TOOL,
-		description: `${WORKER_RESPONSE_INSTRUCTION} See "run_javascript syntax" and the documented functions and memory.`
+		description: `${WORKER_RESPONSE_INSTRUCTION} ${EXECUTION_DESCRIPTION}`
 	};
 }
 /** Validate the entire response before any delivery or business action begins. */
@@ -88,6 +93,118 @@ function validateNativeToolCalls(calls) {
 	};
 }
 //#endregion
+//#region src/prompts/native-examples.ts
+/** Documentation only. These strings never become session messages or native tool calls. */
+const call = (code) => `<native_tool_call name="run_javascript">
+<arguments>
+${JSON.stringify({ code }, null, 2)}
+</arguments>
+</native_tool_call>`;
+const turn = (content) => `<assistant_turn>
+${content}
+</assistant_turn>`;
+const example = (name, content) => `<example name="${name}">
+${content}
+</example>`;
+/** Static examples teach syntax without guessing inputs for arbitrary application schemas. */
+function getNativeExamples(capabilities) {
+	const examples = [];
+	if (capabilities.chat) examples.push(example("answer_without_actions", `<situation>
+The user asks for the opening time. The task instructions already say the shop opens at 9 AM. No action is needed.
+</situation>
+${turn(`<assistant_text>
+We open at 9 AM.
+</assistant_text>`)}
+<explanation>
+This is an ordinary assistant reply, with no native tool call. Its end gives the turn back to the user.
+</explanation>`));
+	examples.push(example("execute_and_inspect", `<situation>
+Compute the total of 17 and 25, and inspect the computed value before continuing.
+</situation>
+${turn(call("const total = 17 + 25; return inspect(total);"))}
+<tool_result>
+42
+</tool_result>
+<explanation>
+The code property contains executable JavaScript. Returning inspect(total) makes the result visible in the next response. The variable total is retained; do not recompute it just to read it.
+</explanation>`));
+	if (capabilities.tools) {
+		examples.push(example("search_then_use_the_result", `<fictional_api>
+exampleSearch(query: string): Promise<string>
+</fictional_api>
+<situation>
+Find whether blue mugs are available. Availability must come from a search.
+</situation>
+${turn(call("const products = await exampleSearch('blue mugs'); return inspect(products);"))}
+<tool_result>
+Blue mugs are available. Price: $12 each.
+</tool_result>
+${capabilities.chat ? turn(`<assistant_text>
+Blue mugs are available for $12 each.
+</assistant_text>`) : `<next_step>
+Use the inspected facts and retained products variable to continue the task. Do not repeat the successful search.
+</next_step>`}
+<explanation>
+The search phrase is a string argument to the business function. It is not executable JavaScript by itself. Await the function, then return inspect with its actual result. Do not write an answer before seeing that result.
+</explanation>`));
+		examples.push(example("object_arguments_and_independent_calls", `<fictional_api>
+exampleReadStock(input: { itemId: string }): Promise<{ count: number }>
+exampleReadPrice(input: { itemId: string }): Promise<{ amount: number }>
+</fictional_api>
+<situation>
+Read stock and price for the same item. Neither read depends on the other.
+</situation>
+${turn(call("const [stock, price] = await Promise.all([exampleReadStock({ itemId: 'MUG-7' }), exampleReadPrice({ itemId: 'MUG-7' })]); return inspect({ stock, price });"))}
+<explanation>
+These functions accept objects, unlike exampleSearch which accepts a string. Match the declared arguments. Both calls are awaited inside one program and their results are inspected together.
+</explanation>`));
+		examples.push(example("repair_a_search_phrase_submitted_as_code", `<fictional_api>
+exampleSearch(query: string): Promise<string>
+</fictional_api>
+<situation>
+The user asked about red mugs. The previous attempt submitted the words red mugs as JavaScript and failed to parse. No business tool ran.
+</situation>
+${turn(call("const matches = await exampleSearch('red mugs'); return inspect(matches);"))}
+<explanation>
+Repair the program by calling the actual business function. Do not resubmit the bare search phrase, quote the phrase as the entire program, or answer without retrieving the facts.
+</explanation>`));
+	}
+	if (capabilities.exits) examples.push(example("complete_with_a_typed_result", `<fictional_api>
+exit(name: "example_complete", payload: { total: number }): never
+</fictional_api>
+<situation>
+The required work is complete. The computed total, already inspected, is 42. Complete through the declared example_complete outcome.
+</situation>
+${turn(call("return exit('example_complete', { total: 42 });"))}
+<explanation>
+The first argument is the outcome name string. The second argument is its payload, matching the declaration. Do not pass one object containing name and payload. Do not submit the outcome name alone as code or report completion as prose.
+</explanation>`));
+	if (capabilities.chat && capabilities.components && capabilities.listen) examples.push(example("text_and_buttons_in_the_same_response", `<fictional_api>
+chat.exampleChoices(props: { options: Array<{ label: string, value: string }> }): void
+</fictional_api>
+<situation>
+The user requests an introduction in a text message, followed by buttons to shop or track an order.
+</situation>
+${turn(`<assistant_text>
+Hi, I'm your shopping assistant. I can help you shop or track an order.
+</assistant_text>
+${call("chat.exampleChoices({ options: [{ label: 'Shop', value: 'shop' }, { label: 'Track order', value: 'track' }] }); return exit('listen');")}`)}
+<explanation>
+Both the assistant text and the native tool call belong to ONE response. The text introduces the assistant; the program sends the buttons. Buttons alone would omit the requested text message. Text alone would omit the buttons. The component returns void and does not need inspection.
+</explanation>`));
+	return [
+		"<examples>",
+		"These are hypothetical demonstrations, NOT live conversation, task history, or evidence. Do not perform their tasks or copy their facts.",
+		"Names beginning with example are fictional and unavailable. Use the actual names and signatures under JavaScript API for your task.",
+		"The XML tags are documentation boundaries only. NEVER emit these tags, a serialized assistant_turn, or a textual native_tool_call. Use your actual native tool-calling interface.",
+		"Each assistant_turn shows one response. arguments contains the exact JSON shape to send to run_javascript; its code string is JavaScript. tool_result illustrates what the runtime reports afterward; never generate it yourself.",
+		capabilities.chat ? "assistant_text means ordinary user-facing text, outside tool arguments. When text and a call appear in the same assistant_turn, produce both in that response. Follow the real task’s language, style and silence requirements." : "This is worker mode. Every demonstrated assistant_turn contains a native tool call and NO assistant text. Continue using calls after inspection as well.",
+		...examples,
+		"Apply the demonstrated syntax to your actual task. The real API and task instructions are authoritative; fictional functions and facts are not available.",
+		"</examples>"
+	].join("\n\n");
+}
+//#endregion
 //#region src/prompts/native.ts
 var native_exports = /* @__PURE__ */ __exportAll({ getNativeSystemMessage: () => getNativeSystemMessage });
 const runJavaScriptSyntax = [
@@ -122,7 +239,7 @@ function runtimeRules(props, chat) {
 	}
 	rules.push("Execution may overlap the remaining response stream. The runtime waits for the stream, code, and queued message deliveries before the next response.", "# Memory", "Declare retained variables at top level with const or let. Bare assignment only updates a variable already declared in this program or listed in Memory. Named variables survive transcript compaction; assignment age records when they were set, not when the underlying data was fetched.", "Object properties are immutable snapshots. Replace a writable property completely, such as account.profile = { ...account.profile, age: 42 }; nested edits are forbidden and replacements are schema-validated.", "$return is the latest successful inspection result. $iterations is read-only retained history, newest first: [0] is the last settled iteration and [1] the preceding one. The current execution is not included. Entries without results still occupy indexes; check hasResult. Compaction prunes automatic results. Assign useful data to named variables to retain it independently.", "# Recovery", "Execution reports identify completed actions, inspected values, memory changes, and errors. Reuse preserved variables and completed actions; retry only failed work. Build completion payloads from those values, not by calling successful tools again. An inspection has already run the recorded calls; it is not a dry run.", "An operational error does not by itself finish the task. Inspect the actual error, repair its cause when safe and authorized, then retry. Unchanged retries do not establish that recovery is exhausted. If another response must diagnose the error, return inspect({ errors, completed }) or let the error reach the runtime. Honor task instructions defining terminal failure outcomes.");
 	if (hasExits) rules.push("Use a failure exit only when recovery is unavailable, unsafe, forbidden, its budget is exhausted, or task instructions make the failure terminal. Do not select failure in advance for an unseen error. Do not turn an unexpected exception or rejected Promise.allSettled entry directly into failure completion: first expose it with inspect or let it reach the runtime, then diagnose the actual cause and available recovery tools. Explicit task instructions may define an error as terminal.");
-	rules.push("A thinking interruption stops the current program and requests another model response. Statements after the interruption have not run; continue with a new program without repeating completed actions.", "Respect tool-attempt limits separately from the model-response budget. An empty successful inspection result is not a failure.");
+	rules.push("A tool may request forced inspection through ThinkSignal. The tool succeeded and its context is returned to JavaScript. Other calls and assignments continue normally. At the end of the program, forced inspection takes precedence over completion: review the reported results as an inspect() call, then continue from retained values without repeating successful calls.", "Respect tool-attempt limits separately from the model-response budget. An empty successful inspection result is not a failure.");
 	return rules.join("\n\n");
 }
 async function describeRuntimeAPI(props, chat) {
@@ -152,8 +269,16 @@ async function getNativeSystemMessage(props) {
 	const protocol = [
 		runJavaScriptSyntax,
 		runtimeRules(props, chat),
-		...chat ? ["# Assistant response", (props.response ?? resolveResponse()).instructions] : []
+		...chat ? ["# Assistant response", (props.response ?? resolveResponse()).instructions] : [],
+		getNativeExamples({
+			chat,
+			tools: declarations.length > 0,
+			components: props.components.size > 0,
+			exits: props.exits.length > 0,
+			listen: props.exits.some((exit) => exit.name === "listen")
+		})
 	].join("\n\n");
+	const delivery = chat ? ["# Assistant text delivery", "When answering, write only the final user-facing answer, once. Do not output private thinking, drafts, or thinking tags. This governs assistant text only: still call required tools, send requested components, and provide requested progress updates. Preserve literal text or code the user explicitly asks you to reproduce."].join("\n\n") : "";
 	return {
 		message: {
 			role: "system",
@@ -163,13 +288,14 @@ async function getNativeSystemMessage(props) {
 				"These TypeScript declarations describe functions inside run_javascript. Object properties, their types, values, and read/write rules are listed in Memory.",
 				tools,
 				"# Task instructions",
-				instructions
+				instructions,
+				...delivery ? [delivery] : []
 			].join("\n\n")
 		},
 		parts: {
 			instructions,
 			tools,
-			protocol
+			protocol: [protocol, delivery].filter(Boolean).join("\n\n")
 		}
 	};
 }

package/dist/{native-Bm6L9zOb.cjs → native-sbuzbLbY.cjs}

@@ -1,6 +1,6 @@
 const require_utils = require("./utils-CTlsXvdj.cjs");
-const require_errors = require("./errors-IhnTKUp7.cjs");
-const require_typings = require("./typings-C1ihexWE.cjs");
+const require_errors = require("./errors-C6ppQUZX.cjs");
+const require_typings = require("./typings-BA_XxAcY.cjs");
 //#region src/chat/response.ts
 const presets = {
 	markdown: { instructions: "Write natural Markdown directly in the assistant response. Use paragraphs, lists, links, and code blocks where useful. Do not wrap the entire response in JSON or a Markdown fence." },
@@ -32,15 +32,20 @@ function resolveResponse(response = "markdown") {
 //#endregion
 //#region src/runtime/native-tools.ts
 const WORKER_RESPONSE_INSTRUCTION = "You are running in worker mode. Respond only with a run_javascript tool call. Keep assistant text empty: do not send messages, preambles, progress updates, explanations, acknowledgements such as \"Done\", Markdown, or JSON outside the tool call. This applies before and after tools, during recovery, and when completing the task.";
+const EXECUTION_DESCRIPTION = "Execute a JavaScript program in the sandbox. This is the only native tool; business functions are called INSIDE its code, using their documented signatures. It is not a search engine: never submit search terms, user questions, answers, or business tool names as code. Await business calls, then return inspect(value) to read their results, or return exit(name, payload) to select a registered outcome. See \"run_javascript syntax\" and the examples.";
 const RUN_JAVASCRIPT_TOOL = {
 	name: "run_javascript",
-	description: "Run business tools, send requested chat components, or finish a worker task by executing JavaScript. For text plus actions, write the requested text as a preamble to this tool call; do not end with a text-only answer before the actions. Exact requested text needs no separator before this call: do not append a space or newline to the preamble. An ordinary chat reply with no remaining action needs no tool call just to finish the turn. Code displayed in an answer is text, not a program to execute. See \"run_javascript syntax\" and the documented functions and memory.",
+	description: `${EXECUTION_DESCRIPTION} For a requested text message plus an action or component, include the assistant text AND this tool call in the same response. A plain assistant reply needs no tool call when no action remains.`,
 	parameters: {
 		type: "object",
 		properties: { code: {
 			type: "string",
-			minLength: 1,
-			description: "JavaScript source with an explicit return statement. Top-level await is supported."
+			description: [
+				"The body of an async JavaScript program. Top-level await and return are supported. No Markdown fences, XML wrappers, imports, or TypeScript annotations.",
+				"Call business functions using the actual API declarations. A string parameter takes a string; an object parameter takes its documented fields. Do not put a query or reply here instead of a program.",
+				"<example purpose=\"JavaScript syntax only\">const total = 17 + 25; return inspect(total);</example>",
+				"The example tags are documentation only. The code value must contain only executable JavaScript. End with return inspect(value), or return exit(\"registered_name\", payload) with the actual outcome name and required payload. These are JavaScript functions, not separate native tools."
+			].join("\n\n")
 		} },
 		required: ["code"],
 		additionalProperties: false
@@ -51,7 +56,7 @@ function getRunJavaScriptTool(chat) {
 	if (chat) return RUN_JAVASCRIPT_TOOL;
 	return {
 		...RUN_JAVASCRIPT_TOOL,
-		description: `${WORKER_RESPONSE_INSTRUCTION} See "run_javascript syntax" and the documented functions and memory.`
+		description: `${WORKER_RESPONSE_INSTRUCTION} ${EXECUTION_DESCRIPTION}`
 	};
 }
 /** Validate the entire response before any delivery or business action begins. */
@@ -88,6 +93,118 @@ function validateNativeToolCalls(calls) {
 	};
 }
 //#endregion
+//#region src/prompts/native-examples.ts
+/** Documentation only. These strings never become session messages or native tool calls. */
+const call = (code) => `<native_tool_call name="run_javascript">
+<arguments>
+${JSON.stringify({ code }, null, 2)}
+</arguments>
+</native_tool_call>`;
+const turn = (content) => `<assistant_turn>
+${content}
+</assistant_turn>`;
+const example = (name, content) => `<example name="${name}">
+${content}
+</example>`;
+/** Static examples teach syntax without guessing inputs for arbitrary application schemas. */
+function getNativeExamples(capabilities) {
+	const examples = [];
+	if (capabilities.chat) examples.push(example("answer_without_actions", `<situation>
+The user asks for the opening time. The task instructions already say the shop opens at 9 AM. No action is needed.
+</situation>
+${turn(`<assistant_text>
+We open at 9 AM.
+</assistant_text>`)}
+<explanation>
+This is an ordinary assistant reply, with no native tool call. Its end gives the turn back to the user.
+</explanation>`));
+	examples.push(example("execute_and_inspect", `<situation>
+Compute the total of 17 and 25, and inspect the computed value before continuing.
+</situation>
+${turn(call("const total = 17 + 25; return inspect(total);"))}
+<tool_result>
+42
+</tool_result>
+<explanation>
+The code property contains executable JavaScript. Returning inspect(total) makes the result visible in the next response. The variable total is retained; do not recompute it just to read it.
+</explanation>`));
+	if (capabilities.tools) {
+		examples.push(example("search_then_use_the_result", `<fictional_api>
+exampleSearch(query: string): Promise<string>
+</fictional_api>
+<situation>
+Find whether blue mugs are available. Availability must come from a search.
+</situation>
+${turn(call("const products = await exampleSearch('blue mugs'); return inspect(products);"))}
+<tool_result>
+Blue mugs are available. Price: $12 each.
+</tool_result>
+${capabilities.chat ? turn(`<assistant_text>
+Blue mugs are available for $12 each.
+</assistant_text>`) : `<next_step>
+Use the inspected facts and retained products variable to continue the task. Do not repeat the successful search.
+</next_step>`}
+<explanation>
+The search phrase is a string argument to the business function. It is not executable JavaScript by itself. Await the function, then return inspect with its actual result. Do not write an answer before seeing that result.
+</explanation>`));
+		examples.push(example("object_arguments_and_independent_calls", `<fictional_api>
+exampleReadStock(input: { itemId: string }): Promise<{ count: number }>
+exampleReadPrice(input: { itemId: string }): Promise<{ amount: number }>
+</fictional_api>
+<situation>
+Read stock and price for the same item. Neither read depends on the other.
+</situation>
+${turn(call("const [stock, price] = await Promise.all([exampleReadStock({ itemId: 'MUG-7' }), exampleReadPrice({ itemId: 'MUG-7' })]); return inspect({ stock, price });"))}
+<explanation>
+These functions accept objects, unlike exampleSearch which accepts a string. Match the declared arguments. Both calls are awaited inside one program and their results are inspected together.
+</explanation>`));
+		examples.push(example("repair_a_search_phrase_submitted_as_code", `<fictional_api>
+exampleSearch(query: string): Promise<string>
+</fictional_api>
+<situation>
+The user asked about red mugs. The previous attempt submitted the words red mugs as JavaScript and failed to parse. No business tool ran.
+</situation>
+${turn(call("const matches = await exampleSearch('red mugs'); return inspect(matches);"))}
+<explanation>
+Repair the program by calling the actual business function. Do not resubmit the bare search phrase, quote the phrase as the entire program, or answer without retrieving the facts.
+</explanation>`));
+	}
+	if (capabilities.exits) examples.push(example("complete_with_a_typed_result", `<fictional_api>
+exit(name: "example_complete", payload: { total: number }): never
+</fictional_api>
+<situation>
+The required work is complete. The computed total, already inspected, is 42. Complete through the declared example_complete outcome.
+</situation>
+${turn(call("return exit('example_complete', { total: 42 });"))}
+<explanation>
+The first argument is the outcome name string. The second argument is its payload, matching the declaration. Do not pass one object containing name and payload. Do not submit the outcome name alone as code or report completion as prose.
+</explanation>`));
+	if (capabilities.chat && capabilities.components && capabilities.listen) examples.push(example("text_and_buttons_in_the_same_response", `<fictional_api>
+chat.exampleChoices(props: { options: Array<{ label: string, value: string }> }): void
+</fictional_api>
+<situation>
+The user requests an introduction in a text message, followed by buttons to shop or track an order.
+</situation>
+${turn(`<assistant_text>
+Hi, I'm your shopping assistant. I can help you shop or track an order.
+</assistant_text>
+${call("chat.exampleChoices({ options: [{ label: 'Shop', value: 'shop' }, { label: 'Track order', value: 'track' }] }); return exit('listen');")}`)}
+<explanation>
+Both the assistant text and the native tool call belong to ONE response. The text introduces the assistant; the program sends the buttons. Buttons alone would omit the requested text message. Text alone would omit the buttons. The component returns void and does not need inspection.
+</explanation>`));
+	return [
+		"<examples>",
+		"These are hypothetical demonstrations, NOT live conversation, task history, or evidence. Do not perform their tasks or copy their facts.",
+		"Names beginning with example are fictional and unavailable. Use the actual names and signatures under JavaScript API for your task.",
+		"The XML tags are documentation boundaries only. NEVER emit these tags, a serialized assistant_turn, or a textual native_tool_call. Use your actual native tool-calling interface.",
+		"Each assistant_turn shows one response. arguments contains the exact JSON shape to send to run_javascript; its code string is JavaScript. tool_result illustrates what the runtime reports afterward; never generate it yourself.",
+		capabilities.chat ? "assistant_text means ordinary user-facing text, outside tool arguments. When text and a call appear in the same assistant_turn, produce both in that response. Follow the real task’s language, style and silence requirements." : "This is worker mode. Every demonstrated assistant_turn contains a native tool call and NO assistant text. Continue using calls after inspection as well.",
+		...examples,
+		"Apply the demonstrated syntax to your actual task. The real API and task instructions are authoritative; fictional functions and facts are not available.",
+		"</examples>"
+	].join("\n\n");
+}
+//#endregion
 //#region src/prompts/native.ts
 var native_exports = /* @__PURE__ */ require_utils.__exportAll({ getNativeSystemMessage: () => getNativeSystemMessage });
 const runJavaScriptSyntax = [
@@ -122,7 +239,7 @@ function runtimeRules(props, chat) {
 	}
 	rules.push("Execution may overlap the remaining response stream. The runtime waits for the stream, code, and queued message deliveries before the next response.", "# Memory", "Declare retained variables at top level with const or let. Bare assignment only updates a variable already declared in this program or listed in Memory. Named variables survive transcript compaction; assignment age records when they were set, not when the underlying data was fetched.", "Object properties are immutable snapshots. Replace a writable property completely, such as account.profile = { ...account.profile, age: 42 }; nested edits are forbidden and replacements are schema-validated.", "$return is the latest successful inspection result. $iterations is read-only retained history, newest first: [0] is the last settled iteration and [1] the preceding one. The current execution is not included. Entries without results still occupy indexes; check hasResult. Compaction prunes automatic results. Assign useful data to named variables to retain it independently.", "# Recovery", "Execution reports identify completed actions, inspected values, memory changes, and errors. Reuse preserved variables and completed actions; retry only failed work. Build completion payloads from those values, not by calling successful tools again. An inspection has already run the recorded calls; it is not a dry run.", "An operational error does not by itself finish the task. Inspect the actual error, repair its cause when safe and authorized, then retry. Unchanged retries do not establish that recovery is exhausted. If another response must diagnose the error, return inspect({ errors, completed }) or let the error reach the runtime. Honor task instructions defining terminal failure outcomes.");
 	if (hasExits) rules.push("Use a failure exit only when recovery is unavailable, unsafe, forbidden, its budget is exhausted, or task instructions make the failure terminal. Do not select failure in advance for an unseen error. Do not turn an unexpected exception or rejected Promise.allSettled entry directly into failure completion: first expose it with inspect or let it reach the runtime, then diagnose the actual cause and available recovery tools. Explicit task instructions may define an error as terminal.");
-	rules.push("A thinking interruption stops the current program and requests another model response. Statements after the interruption have not run; continue with a new program without repeating completed actions.", "Respect tool-attempt limits separately from the model-response budget. An empty successful inspection result is not a failure.");
+	rules.push("A tool may request forced inspection through ThinkSignal. The tool succeeded and its context is returned to JavaScript. Other calls and assignments continue normally. At the end of the program, forced inspection takes precedence over completion: review the reported results as an inspect() call, then continue from retained values without repeating successful calls.", "Respect tool-attempt limits separately from the model-response budget. An empty successful inspection result is not a failure.");
 	return rules.join("\n\n");
 }
 async function describeRuntimeAPI(props, chat) {
@@ -152,8 +269,16 @@ async function getNativeSystemMessage(props) {
 	const protocol = [
 		runJavaScriptSyntax,
 		runtimeRules(props, chat),
-		...chat ? ["# Assistant response", (props.response ?? resolveResponse()).instructions] : []
+		...chat ? ["# Assistant response", (props.response ?? resolveResponse()).instructions] : [],
+		getNativeExamples({
+			chat,
+			tools: declarations.length > 0,
+			components: props.components.size > 0,
+			exits: props.exits.length > 0,
+			listen: props.exits.some((exit) => exit.name === "listen")
+		})
 	].join("\n\n");
+	const delivery = chat ? ["# Assistant text delivery", "When answering, write only the final user-facing answer, once. Do not output private thinking, drafts, or thinking tags. This governs assistant text only: still call required tools, send requested components, and provide requested progress updates. Preserve literal text or code the user explicitly asks you to reproduce."].join("\n\n") : "";
 	return {
 		message: {
 			role: "system",
@@ -163,13 +288,14 @@ async function getNativeSystemMessage(props) {
 				"These TypeScript declarations describe functions inside run_javascript. Object properties, their types, values, and read/write rules are listed in Memory.",
 				tools,
 				"# Task instructions",
-				instructions
+				instructions,
+				...delivery ? [delivery] : []
 			].join("\n\n")
 		},
 		parts: {
 			instructions,
 			tools,
-			protocol
+			protocol: [protocol, delivery].filter(Boolean).join("\n\n")
 		}
 	};
 }

package/dist/prompts/native-examples.d.ts

@@ -0,0 +1,10 @@
+type Capabilities = {
+    chat: boolean;
+    tools: boolean;
+    components: boolean;
+    exits: boolean;
+    listen: boolean;
+};
+/** Static examples teach syntax without guessing inputs for arbitrary application schemas. */
+export declare function getNativeExamples(capabilities: Capabilities): string;
+export {};

package/dist/prompts/native-examples.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/prompts/reasoning.d.ts

@@ -0,0 +1,2 @@
+/** Supplement explicit reasoning disablement consistently across providers and fallbacks. */
+export declare function getReasoningHint(reasoningEffort?: string): string | undefined;

package/dist/prompts/reasoning.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/{quickjs-variant-DJwYDSsb.cjs → quickjs-variant-21IO97PF.cjs}

@@ -1,8 +1,8 @@
 const require_utils = require("./utils-CTlsXvdj.cjs");
-const require_errors = require("./errors-IhnTKUp7.cjs");
-const require_schema = require("./schema-DBkjo0b7.cjs");
-const require_truncate = require("./truncate-nV3Mxr6-.cjs");
-const require_typings = require("./typings-C1ihexWE.cjs");
+const require_errors = require("./errors-C6ppQUZX.cjs");
+const require_schema = require("./schema-CXlnbb3n.cjs");
+const require_truncate = require("./truncate-uomAMGPs.cjs");
+const require_typings = require("./typings-BA_XxAcY.cjs");
 //#region src/inspect.ts
 const SUBTITLE_LN = "--------------";
 const TRUNCATION_MARKER = "[truncated]";
@@ -401,7 +401,7 @@ function createInspector(onInspect) {
 		if (onInspect) try {
 			const budget = resolveInspectionBudget(value, formatting);
 			const output = onInspect(Object.freeze({
-				value: snapshot(value),
+				value: snapshotInspectionValue(value),
 				purpose: options.purpose,
 				maxTokens: budget.tokens,
 				preserve: budget.preserve,
@@ -413,12 +413,13 @@ function createInspector(onInspect) {
 		return inspect(value, void 0, formatting);
 	};
 }
-function snapshot(value, copies = /* @__PURE__ */ new WeakMap()) {
+/** Isolate evidence from subsequent guest mutations without invoking getters. */
+function snapshotInspectionValue(value, copies = /* @__PURE__ */ new WeakMap()) {
 	if (!value || typeof value !== "object") return typeof value === "function" ? "[Function]" : value;
 	if (copies.has(value)) return copies.get(value);
 	if (require_truncate.isTruncated(value)) {
 		copies.set(value, "[Circular]");
-		const copy = snapshot(value.value, copies);
+		const copy = snapshotInspectionValue(value.value, copies);
 		copies.set(value, copy);
 		return copy;
 	}
@@ -429,7 +430,7 @@ function snapshot(value, copies = /* @__PURE__ */ new WeakMap()) {
 		if (Array.isArray(value) && key === "length") continue;
 		const descriptor = Object.getOwnPropertyDescriptor(value, key);
 		if (descriptor) Object.defineProperty(copy, key, {
-			value: "value" in descriptor ? snapshot(descriptor.value, copies) : "[Getter]",
+			value: "value" in descriptor ? snapshotInspectionValue(descriptor.value, copies) : "[Getter]",
 			enumerable: descriptor.enumerable
 		});
 	}
@@ -1071,3 +1072,9 @@ Object.defineProperty(exports, "resolveInspectionBudget", {
 		return resolveInspectionBudget;
 	}
 });
+Object.defineProperty(exports, "snapshotInspectionValue", {
+	enumerable: true,
+	get: function() {
+		return snapshotInspectionValue;
+	}
+});

package/dist/{quickjs-variant-DlPi9-Sx.js → quickjs-variant-CtuGagsb.js}

@@ -1,8 +1,8 @@
 import { a as getTokenizer } from "./utils-BOFzb8Ok.js";
-import { A as MemoryValueError, N as ReservedIdentifierError, b as InvalidConfigurationError, k as MemoryCapacityError, o as AssignmentError } from "./errors-H4JJFH3S.js";
-import { i as toModelSchema } from "./schema-Aer_W7Al.js";
-import { n as isTruncated } from "./truncate-BSoH2-nY.js";
-import { t as getTypings } from "./typings-D9_aC8aq.js";
+import { A as MemoryValueError, P as ReservedIdentifierError, b as InvalidConfigurationError, k as MemoryCapacityError, o as AssignmentError } from "./errors-Crk5P8jo.js";
+import { i as toModelSchema } from "./schema-GE4ISPCR.js";
+import { n as isTruncated } from "./truncate-BEKbdo3t.js";
+import { t as getTypings } from "./typings-BEVDvtuk.js";
 //#region src/inspect.ts
 const SUBTITLE_LN = "--------------";
 const TRUNCATION_MARKER = "[truncated]";
@@ -401,7 +401,7 @@ function createInspector(onInspect) {
 		if (onInspect) try {
 			const budget = resolveInspectionBudget(value, formatting);
 			const output = onInspect(Object.freeze({
-				value: snapshot(value),
+				value: snapshotInspectionValue(value),
 				purpose: options.purpose,
 				maxTokens: budget.tokens,
 				preserve: budget.preserve,
@@ -413,12 +413,13 @@ function createInspector(onInspect) {
 		return inspect(value, void 0, formatting);
 	};
 }
-function snapshot(value, copies = /* @__PURE__ */ new WeakMap()) {
+/** Isolate evidence from subsequent guest mutations without invoking getters. */
+function snapshotInspectionValue(value, copies = /* @__PURE__ */ new WeakMap()) {
 	if (!value || typeof value !== "object") return typeof value === "function" ? "[Function]" : value;
 	if (copies.has(value)) return copies.get(value);
 	if (isTruncated(value)) {
 		copies.set(value, "[Circular]");
-		const copy = snapshot(value.value, copies);
+		const copy = snapshotInspectionValue(value.value, copies);
 		copies.set(value, copy);
 		return copy;
 	}
@@ -429,7 +430,7 @@ function snapshot(value, copies = /* @__PURE__ */ new WeakMap()) {
 		if (Array.isArray(value) && key === "length") continue;
 		const descriptor = Object.getOwnPropertyDescriptor(value, key);
 		if (descriptor) Object.defineProperty(copy, key, {
-			value: "value" in descriptor ? snapshot(descriptor.value, copies) : "[Getter]",
+			value: "value" in descriptor ? snapshotInspectionValue(descriptor.value, copies) : "[Getter]",
 			enumerable: descriptor.enumerable
 		});
 	}
@@ -981,4 +982,4 @@ const configureQuickJS = (variant) => {
 };
 const getQuickJSVariant = () => _activeVariant;
 //#endregion
-export { cloneMemoryValue as a, freezeMemoryValue as c, TERMINATION_BINDING_NAMES as d, createInspector as f, resolveInspectionBudget as h, renderMemory as i, RESERVED_RUNTIME_NAMES as l, limitInspectionOutput as m, getQuickJSVariant as n, decodeMemoryValue as o, inspect as p, Memory as r, encodeMemoryValue as s, configureQuickJS as t, RUNTIME_BINDING_NAMES as u };
+export { cloneMemoryValue as a, freezeMemoryValue as c, TERMINATION_BINDING_NAMES as d, createInspector as f, resolveInspectionBudget as g, limitInspectionOutput as h, renderMemory as i, RESERVED_RUNTIME_NAMES as l, inspect as m, getQuickJSVariant as n, decodeMemoryValue as o, snapshotInspectionValue as p, Memory as r, encodeMemoryValue as s, configureQuickJS as t, RUNTIME_BINDING_NAMES as u };

package/dist/runtime/chat-completion.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/runtime/chat-last-speaker.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/runtime/empty-completion.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/runtime/execution-report.d.ts

@@ -2,12 +2,15 @@ import { type InspectionPolicyLookup } from '../inspect.js';
 import { type InspectionIdentity, type Inspector } from '../inspection.js';
 import type { MemoryReport } from '../session/memory.js';
 import { type ExecutionActivity } from './execution-activity.js';
+import { type ForcedInspection } from './forced-inspection.js';
 export { renderMessageDeliveries } from './execution-activity.js';
 export type ExecutionOutcome = {
     type: 'inspect';
     value: unknown;
     available: boolean;
     explicit: boolean;
+    forcedInspections?: readonly ForcedInspection[];
+    downstreamError?: unknown;
 } | {
     type: 'exit';
     name: string;

package/dist/runtime/forced-inspection.d.ts

@@ -0,0 +1,13 @@
+import { type InspectionPolicyLookup } from '../inspect.js';
+import type { InspectionIdentity, Inspector } from '../inspection.js';
+/** A successful business result that must be shown before this turn may complete. */
+export type ForcedInspection = {
+    tool: string;
+    toolCallId: string;
+    line?: number;
+    reason: string;
+    value: unknown;
+    metadata?: Record<string, unknown>;
+};
+/** Keep attribution and content together, using the same display budgets as inspect(). */
+export declare function renderForcedInspection(inspections: readonly ForcedInspection[], inspector: Inspector, identity: InspectionIdentity, maxTokens: number, policies?: InspectionPolicyLookup): string;

package/dist/runtime/forced-inspection.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/runtime/javascript-api.d.ts

@@ -2,6 +2,7 @@ import type { ComponentRegistry, RenderedComponent } from '../chat/component.js'
 import type { Iteration } from '../context.js';
 import { ThinkSignal } from '../errors.js';
 import type { Exit } from '../exit.js';
+import type { ForcedInspection } from './forced-inspection.js';
 /** A child message keeps its identity from preparation through acknowledged delivery. */
 export type PreparedMessage = {
     id: string;
@@ -33,6 +34,8 @@ export type JavaScriptApi = {
     getTerminalOutcome(): TerminalOutcome | undefined;
     /** The first host interruption closes execution before guest handlers can consume it. */
     getInterruption(): ThinkSignal | undefined;
+    requestInspection(inspection: ForcedInspection): void;
+    getForcedInspections(): readonly ForcedInspection[];
     throwIfTerminated(): void;
     track<T>(operation: () => Promise<T>): Promise<T>;
     assertOpen(): void;

package/dist/runtime/think-signal.test.d.ts

@@ -0,0 +1 @@
+export {};