fix(core-agent): prevent plain-text tool call leaks

packages/core-agent/README.md

@@ -0,0 +1,40 @@
+# Core Agent
+
+Shared agent runtime for AIRI. This package provides chat orchestration, context
+and session contracts, response parsing, and LLM streaming.
+
+## When to use it
+
+Use the public exports for agent behavior shared by multiple applications.
+Keep Vue stores, UI state, and application-specific tools in their owning packages.
+
+## LLM streaming
+
+Import `streamFrom` and `StreamFromOptions` from `@proj-airi/core-agent`.
+Pass the model, chat provider, messages, and optional tools and callbacks.
+Await the returned promise to handle completion or failure.
+
+The runtime checks text and reasoning for serialized calls to registered tools.
+It buffers JSON candidates until the step ends. Valid ordinary objects retain
+their nested examples. Native tool activity does not disable this check.
+
+Each channel has a parse-work budget for each step. The budget permits candidate
+lengths to total at most eight times the channel length, measured in UTF-16 code units.
+Valid objects need one pass. The budget adds no size or depth limit to valid objects.
+
+If malformed candidates exhaust the budget, the response rejects with
+`Model output exceeded the JSON inspection work limit.`
+The runtime discards unchecked buffered output and skips message, finish, and usage callbacks.
+Earlier streamed output and native tool side effects cannot be rolled back.
+Deeply malformed output can fail this check even without a tool call.
+This error does not establish tool incompatibility. The Stage UI store does not
+retry it or change the tool compatibility cache.
+
+## Development
+
+Build the public exports before tests in consuming packages:
+
+```shell
+pnpm -F @proj-airi/core-agent build
+pnpm -F @proj-airi/core-agent exec vitest run
+```

packages/core-agent/src/index.ts

@@ -28,6 +28,7 @@ export { createContextRegistry } from './runtime/context-registry'
 export { useLlmmarkerParser } from './runtime/llm-marker-parser'
 export {
   isContentArrayRelatedError,
+  isPlainTextToolCallError,
   isToolRelatedError,
   modelKey,
   sanitizeMessages,