samagotchi 0.120.0 → 0.121.1

data/lib/samagotchi/bridge_client.rb

@@ -8,6 +8,7 @@ require_relative "worker_sidecar"
 require_relative "bridge_secret"
 require_relative "delivery"
 require_relative "chi_invocation"
+require_relative "bridge_client/stream_open"
 require_relative "bridge_client/sse_parser"
 require_relative "bridge_client/event_stream"
 require_relative "bridge_client/stream_request"
@@ -15,8 +16,8 @@ require_relative "bridge_client/stream_request"
 module Samagotchi
   # Client side of a session worker's Bridge: the 127.0.0.1 HTTP + SSE server
   # each SessionManager worker runs for its Engine (see Bridge). Discovery goes
-  # through the worker's `bridge.json` sidecar (WorkerSidecar) in the session
-  # directory.
+  # through WorkerLink (the worker's `bridge.json` sidecar, WorkerSidecar, in
+  # the session directory); .for_sidecar makes the client.
   #
   # Requests are raw one-shot HTTP/1.1 over a TCPSocket (`Connection: close`),
   # exactly what the Bridge's minimal server expects.
@@ -27,7 +28,7 @@ module Samagotchi
     # The request header that carries the Bridge's secret (Bridge#secret_ok?).
     SECRET_HEADER = BridgeSecret::HEADER
     STREAM_CONNECT_ATTEMPTS = 3
-    # Seconds #stream waits for the Bridge's response headers, per attempt:
+    # Seconds #open_stream waits for the Bridge's response headers:
     # a worker that took the connection and froze must not hold the web's
     # proxy thread (as EventStream::HEADER_TIMEOUT for the TUI's).
     STREAM_HEADER_TIMEOUT = 5.0
@@ -49,7 +50,7 @@ module Samagotchi
     Response = Struct.new(:status, :body, keyword_init: true) do
       def ok? = status == 200
 
-      # The Bridge refused it for want of its secret (BridgeSecret::REFUSED says what to do).
+      # The Bridge refused it for want of its secret (BridgeSecret.refused says what to do).
       def secret_refused? = BridgeSecret.refused?(status, body)
 
       # @return [Hash, nil] the body parsed as JSON, or nil when it is not
@@ -75,14 +76,6 @@ module Samagotchi
       "this session's worker runs an older chi and can't #{cant}; restart it: #{restart} (its turns still work)"
     end
 
-    # The live Bridge's sidecar in +session_dir+, or nil. A sidecar whose
-    # port refuses a quick connect is stale (its worker died) and is removed.
-    # @param session_dir [String]
-    # @return [WorkerSidecar, nil]
-    def self.live_sidecar(session_dir, host: HOST)
-      WorkerSidecar.live(session_dir, unlink: true, host: host)
-    end
-
     # The one way a client is made for a worker: its port and its secret
     # come from the same sidecar read, so a respawned worker (a new port, a
     # new secret) is reached by a client made after it, never by hand.
@@ -94,24 +87,11 @@ module Samagotchi
       new(session_id: session_id, port: sidecar.port, secret: sidecar.secret, host: host, read_timeout: read_timeout)
     end
 
-    # @return [BridgeClient, nil] a client for the live Bridge in +session_dir+
-    def self.discover(session_id, session_dir:, host: HOST, read_timeout: READ_TIMEOUT)
-      for_sidecar(session_id, live_sidecar(session_dir, host: host), host: host, read_timeout: read_timeout)
-    end
-
     # How often a wait for a new worker's Bridge looks: a missing sidecar is
     # one stat, and a 0.1 s step cost a create up to 0.1 s (the web's
     # create landed on 0.53/0.63/0.73 s).
     SPAWN_POLL_INTERVAL = 0.02
 
-    # Wait for a freshly spawned worker to publish its Bridge.
-    # @param timeout [Float] seconds
-    # @return [BridgeClient, nil] nil when no live sidecar appeared in time
-    def self.wait_for(session_id, session_dir:, timeout:, host: HOST)
-      sidecar = poll(timeout, interval: SPAWN_POLL_INTERVAL) { live_sidecar(session_dir, host: host) }
-      for_sidecar(session_id, sidecar, host: host)
-    end
-
     # Call the block every +interval+ seconds until it returns a truthy value
     # or +timeout+ seconds have passed (it is always called at least once).
     # @return [Object, nil] the block's first truthy value
@@ -314,22 +294,26 @@ module Samagotchi
     # @return [Array(Integer, Object)] the status and the parsed JSON body
     #   (nil when it isn't JSON); [nil, nil] when no reply came
     def get(path)
+      response = get_response(path)
+      [response.status, response.json]
+    rescue StandardError
+      [nil, nil]
+    end
+
+    # GET /session/:id/<path>, preserving the raw response and raising on I/O.
+    # @return [Response]
+    def get_response(path)
       sock = TCPSocket.new(@host, @port)
       sock.write("GET /session/#{@session_id}/#{path} HTTP/1.1\r\nHost: #{@host}:#{@port}\r\n#{secret_line}Connection: close\r\n\r\n")
       response = read_reply(sock, path)
-      sock.close rescue nil
       # A 500 whose text has "200" in it is not a 200.
       status = response && response[STATUS_LINE, 1]
-      return [nil, nil] unless status
+      raise IOError, "bridge #{path}: invalid response status" unless status
 
       body = response.split("\r\n\r\n", 2)[1] || ""
-      [status.to_i, begin
-        JSON.parse(body)
-      rescue JSON::ParserError
-        nil
-      end]
-    rescue StandardError
-      [nil, nil]
+      Response.new(status: status.to_i, body: body)
+    ensure
+      sock&.close rescue nil
     end
 
     # Monotonic SSE cursor of the live Engine, from GET /session/:id/state.
@@ -342,46 +326,49 @@ module Samagotchi
       nil
     end
 
-    # GET /session/:id/stream: yield the raw SSE body bytes as they arrive
-    # until the Bridge closes the stream.
-    # @param query [String] "" or "?from_seq=N"
-    # @param last_event_id [String, nil] reconnect cursor; the Bridge prefers it
-    #   over ?from_seq
-    # @param running [#call, nil] asked before every read, and every
-    #   STREAM_POLL seconds of silence: the stream ends once it returns
-    #   false. A quiet stream is never cut otherwise.
+    # Open GET /session/:id/stream and classify the response before the
+    # caller answers its own request.
     # @param header_timeout [Float] see STREAM_HEADER_TIMEOUT
-    def stream(query: "", last_event_id: nil, running: nil, header_timeout: STREAM_HEADER_TIMEOUT)
-      sock = nil
-      # Absorb the probe→connect race around a resumed worker's bridge:
-      # the sidecar probe can succeed a moment before the worker dies (or
-      # the bridge socket briefly refuses). A few quick bounded retries
-      # avoid the silent empty-200 that EventSource would otherwise keep
-      # re-opening.
-      status = nil
-      STREAM_CONNECT_ATTEMPTS.times do |attempt|
-        sock, status = connect_stream(query: query, last_event_id: last_event_id, timeout: header_timeout)
-        break if sock
-
-        sleep(0.15 * (attempt + 1))
-      end
-      return unless sock
-
-      # A refusal (a 403 such as bridge_secret) is no event stream: its JSON
-      # isn't passed on as one.
-      if status == 403
-        sock.close rescue nil
-        return
+    # @param attempts [Integer] retries for connection failures only
+    # @yield [sock] called after response headers arrive, before classifying a
+    #   refusal; EventStream uses it to publish the socket for #close
+    # @return [StreamOpen::Opened, StreamOpen::Refused, StreamOpen::Unreachable]
+    def open_stream(query: "", last_event_id: nil, header_timeout: STREAM_HEADER_TIMEOUT,
+                    attempts: STREAM_CONNECT_ATTEMPTS)
+      count = 0
+      while count < attempts
+        count += 1
+        connection = connect_stream(query: query, last_event_id: last_event_id, timeout: header_timeout)
+        if connection
+          sock, status, headers = connection
+          unless !block_given? || yield(sock)
+            sock.close rescue nil
+            return StreamOpen::Unreachable.new(attempts: count)
+          end
+          return StreamOpen.classify(sock, status, headers)
+        end
+        sleep(0.15 * count) if count < attempts
       end
+      StreamOpen::Unreachable.new(attempts: count)
+    rescue Errno::ETIMEDOUT
+      StreamOpen::Unreachable.new(attempts: [count, 1].max)
+    rescue SystemCallError, SocketError, IOError
+      StreamOpen::Unreachable.new(attempts: [count, 1].max)
+    end
 
+    # Read a successful stream opened by #open_stream.
+    # @param opened [StreamOpen::Opened]
+    # @param running [#call, nil] checked before every read and every
+    #   STREAM_POLL seconds of silence
+    def read_stream(opened, running: nil)
+      sock = opened.sock
       begin
         loop do
           if running
             break unless running.call
             next unless sock.wait_readable(STREAM_POLL)
           end
-          chunk = sock.readpartial(4096)
-          yield chunk
+          yield sock.readpartial(4096)
         rescue IOError, Errno::ECONNRESET, Errno::ECONNREFUSED # EOFError is an IOError
           break
         end

data/lib/samagotchi/bridge_secret.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "json"
+require_relative "chi_invocation"
 
 module Samagotchi
   # A session Bridge's secret, as both sides name it: the request header
@@ -12,16 +13,17 @@ module Samagotchi
     HEADER = "X-Chi-Bridge"
     # The 403's error.
     ERROR = "bridge_secret"
-    # What a request without this Bridge's secret, or with another one, is
-    # told, and what a client shows when it gets that: the asker comes from
-    # a chi that reads no secret, a chi web, an attached terminal or a
-    # session worker (a delegate's parent) started before chi was updated.
-    REFUSED = "the request didn't name this session worker's secret: a chi web, an attached terminal or a session " \
-              "worker started before chi was updated can't reach it; restart chi web, re-attach terminals " \
-              "(chi --attach ID) and restart the older session workers (chi sessions restart ID...)"
 
     module_function
 
+    # What every client shows when a worker refuses its secret.
+    def refused(session_id, via: ChiInvocation::HERE)
+      web = via.remote? ? via.web : "chi web"
+      "session #{session_id}'s worker refused this chi's request (it didn't name its secret): a chi web or " \
+        "terminal started before chi was updated can't reach it; restart #{web}, re-attach with " \
+        "#{via.attach(session_id)}, or restart the worker with #{via.command("sessions restart #{session_id}")}"
+    end
+
     # Whether a Bridge reply (+status+, raw +body+) is this refusal.
     def refused?(status, body)
       return false unless status.to_i == 403

data/lib/samagotchi/bundle_command/check.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require "prism"
 require "rbconfig"
 require "stringio"
 require "tmpdir"
@@ -214,8 +215,9 @@ module Samagotchi
         floor = lower_bound(manifest.requires_chi)
         return unless floor && File.file?(path(manifest.plugin[:file]))
 
-        calls = File.read(path(manifest.plugin[:file])).scan(API_CALL).flat_map { |call| [call, call.split(".").first(2).join(".")] }
-                    .uniq.select { |call| Plugin::Api::SINCE.key?(call) }
+        source = File.read(path(manifest.plugin[:file]))
+        calls = source.scan(API_CALL).flat_map { |call| [call, call.split(".").first(2).join(".")] }
+        calls = (calls + keyword_calls(source)).uniq.select { |call| Plugin::Api::SINCE.key?(call) }
         call = calls.max_by { |c| Gem::Version.new(Plugin::Api::SINCE[c]) } or return
         version = Plugin::Api::SINCE[call]
         return unless Gem::Version.new(version) > floor
@@ -226,6 +228,29 @@ module Samagotchi
                                                                                       fix: "requires_chi: \">= #{version}\"")
       end
 
+      # Each API call's keywords in +source+, as "chi.toolkit(groups:)": the
+      # call's receiver as written, its name and the keyword (Prism sees
+      # them with or without parens, over lines). Nothing when it doesn't parse.
+      def keyword_calls(source)
+        result = Prism.parse(source)
+        return [] unless result.success?
+
+        found = []
+        nodes = [result.value]
+        while (node = nodes.pop)
+          nodes.concat(node.compact_child_nodes)
+          next unless node.is_a?(Prism::CallNode) && node.receiver && node.arguments
+
+          call = "#{node.receiver.slice}.#{node.name}"
+          node.arguments.arguments.grep(Prism::KeywordHashNode).each do |hash|
+            hash.elements.each do |pair|
+              found << "#{call}(#{pair.key.unescaped}:)" if pair.is_a?(Prism::AssocNode) && pair.key.is_a?(Prism::SymbolNode)
+            end
+          end
+        end
+        found
+      end
+
       def lower_bound(requirement)
         requirement.to_s.split(",").filter_map do |part|
           version = part.strip[LOWER_BOUND, 1]

data/lib/samagotchi/bundles/claude-peer/manifest.yml

@@ -1,6 +1,6 @@
 ---
 name: claude-peer
-version: 0.4.3
+version: 0.4.5
 scope: system
 description: "Pair this session with a Claude Code session you work with: the claude_send tool and /claude send it a part of the work (a plan step, a diff, a finding) to validate or as context, and Claude's answer comes back as the claude-outbox context; /claude install-skill installs Claude's chi-peer skill, which pairs"
 trust_level: reviewed
@@ -12,7 +12,7 @@ plugin:
   file: plugin.rb
   sha256: sha256:50f427d3862ae9d0d15693b4d887c528162b96c0320cc663df89d59d830d4660
 scripts:
-  pair: sha256:bd850e8091098e249ac5b9b04a95a4d8a0dd8501cf9d58639a47d4f3bce1d757
+  pair: sha256:d8089ec422a816367d8c41393235223e06b21cbc0ae1e37b6fc22e94ea9a1497
   chi-peer-SKILL.md: sha256:b9366f8f4aee9c54d209368ce421eab7b971c03c75efab0415d1988fd40f9e60
 # The plugin needs Samagotchi::Plugin::Peer and chi.peer_source (chi 0.67.0).
 # An agreeing answer's closing wake (the skills say an OK wakes chi once)

data/lib/samagotchi/bundles/claude-peer/scripts/pair

@@ -26,17 +26,20 @@ while [ $# -gt 0 ]; do
   case "$1" in
     --inbox-socket)
       [ $# -ge 2 ] || usage
-      inbox=$2 shift 2
+      inbox=$2
+      shift 2
       [ -n "$inbox" ] || usage
       ;;
     --inbox-socket=*)
-      inbox=${1#--inbox-socket=} shift
+      inbox=${1#--inbox-socket=}
+      shift
       [ -n "$inbox" ] || usage
       ;;
     -h | --help) usage ;;
     *)
       [ -z "$target" ] || usage
-      target=$1 shift
+      target=$1
+      shift
       ;;
   esac
 done
@@ -84,10 +87,21 @@ case "$target" in
   *) id=$target ;;
 esac
 
-# A JSON string: backslashes, quotes, tabs and newlines escaped.
+# A JSON string: backslashes and quotes escaped, newlines, tabs and
+# carriage returns as \n, \t, \r, any other control character as \u00XX.
 json() {
-  printf '%s' "$1" | sed -e 's/\\/\\\\/g' -e 's/"/\\"/g' -e 's/	/\\t/g' |
-    awk 'BEGIN { ORS = ""; printf "\"" } NR > 1 { print "\\n" } { print } END { printf "\"" }'
+  printf '%s' "$1" | awk '
+    BEGIN {
+      ORS = ""; printf "\""
+      for (i = 1; i < 32; i++) esc[sprintf("%c", i)] = sprintf("\\u%04x", i)
+      esc["\t"] = "\\t"; esc["\r"] = "\\r"; esc["\\"] = "\\\\"; esc["\""] = "\\\""
+    }
+    NR > 1 { print "\\n" }
+    {
+      n = length($0)
+      for (i = 1; i <= n; i++) { c = substr($0, i, 1); print ((c in esc) ? esc[c] : c) }
+    }
+    END { printf "\"" }'
 }
 
 # Attaches a pushed source, unless the session has one of that name already.
@@ -147,6 +161,6 @@ attach claude-outbox --why "Claude's answers to what you sent it (claude-peer)"
 if [ -z "$inbox" ]; then
   echo "paired with chi $id (socket $sock)"
 else
-  echo "paired with chi $id (socket $inbox on chi's machine, forwarded from $sock)"
+  echo "paired with chi $id (socket $inbox on chi's machine, forwarded to this Claude's $sock)"
 fi
 $chi context ls "$id"

data/lib/samagotchi/bundles/codex-peer/manifest.yml

@@ -1,6 +1,6 @@
 ---
 name: codex-peer
-version: 0.3.3
+version: 0.3.4
 scope: system
 description: "Pair this session with an OpenAI Codex CLI session you work with: the codex_send tool and /codex send it a part of the work (a plan step, a diff, a finding) to validate or as context, with codex queue, and Codex's answer comes back as the codex-outbox context; /codex install-skill installs Codex's chi-peer skill, which pairs"
 trust_level: reviewed
@@ -12,7 +12,7 @@ plugin:
   file: plugin.rb
   sha256: sha256:b03465566272891237ac1906980ff6956579a4703d3a42c414ce50a81de551f6
 scripts:
-  pair: sha256:0830dcb856debea0e4a2a0eb0da8a73b9e9ac2444da957d2928ec734280186a1
+  pair: sha256:a61c3d311ce3f3e5386e90f0f867f649a39763a5883877e731e43d84dd9c85aa
   chi-peer-SKILL.md: sha256:7c392ac04c115ea1e762ad562b5c4c44c3eca71558ba5d9dfeaeabdd533b6a82
 # The plugin needs Samagotchi::Plugin::Peer and chi.peer_source (chi 0.67.0).
 # An agreeing answer's closing wake (the skills say an OK wakes chi once)

data/lib/samagotchi/bundles/codex-peer/scripts/pair

@@ -93,10 +93,21 @@ MSG
   exit 1
 }
 
-# A JSON string: backslashes, quotes, tabs and newlines escaped.
+# A JSON string: backslashes and quotes escaped, newlines, tabs and
+# carriage returns as \n, \t, \r, any other control character as \u00XX.
 json() {
-  printf '%s' "$1" | sed -e 's/\\/\\\\/g' -e 's/"/\\"/g' -e 's/	/\\t/g' |
-    awk 'BEGIN { ORS = ""; printf "\"" } NR > 1 { print "\\n" } { print } END { printf "\"" }'
+  printf '%s' "$1" | awk '
+    BEGIN {
+      ORS = ""; printf "\""
+      for (i = 1; i < 32; i++) esc[sprintf("%c", i)] = sprintf("\\u%04x", i)
+      esc["\t"] = "\\t"; esc["\r"] = "\\r"; esc["\\"] = "\\\\"; esc["\""] = "\\\""
+    }
+    NR > 1 { print "\\n" }
+    {
+      n = length($0)
+      for (i = 1; i <= n; i++) { c = substr($0, i, 1); print ((c in esc) ? esc[c] : c) }
+    }
+    END { printf "\"" }'
 }
 
 # Attaches a pushed source, unless the session has one of that name already.

data/lib/samagotchi/bundles/dev/manifest.yml

@@ -1,10 +1,10 @@
 ---
 name: dev
-version: 0.7.2
+version: 0.7.3
 scope: system
 description: "Developer tools"
 trust_level: reviewed
-requires_chi: ">= 0.107.0"
+requires_chi: ">= 0.121.0"
 includes:
 - known-names
 - mcp

data/lib/samagotchi/bundles/github-pr/manifest.yml

@@ -1,6 +1,6 @@
 ---
 name: github-pr
-version: 0.5.0
+version: 0.5.1
 scope: system
 description: Attaches the branch's open GitHub pull request to a session as context (and any PR URL with chi context add or the web's "+ URL"); the agent gets a note when reviews, comments, checks or its state change; in the web, a path:line in an answer links to that line of the PR; the auto_attach setting can offer the PR with a card first, or attach nothing
 trust_level: reviewed
@@ -11,7 +11,7 @@ needs:
   hint: brew install gh, then gh auth login
 plugin:
   file: plugin.rb
-  sha256: sha256:b9e3d7a837ecaa2b0e53f3d62d2ccedd532f4d1b5d6faefd5adc9570cb3c4efe
+  sha256: sha256:cfadb7668528302b3631681e570899230b6878c80ccbc87dfb16c80d43dead7b
 scripts:
   pr_context.rb: sha256:a883d2780e89c68c0d7b6d5e0fcb22c273f17bb167e79064e0e99db6bd2ee6f0
 context_providers:

data/lib/samagotchi/bundles/github-pr/plugin.rb

@@ -649,12 +649,8 @@ class LineLinker
     out << head[pos..] << text[MAX_SCAN..].to_s
   end
 
-  # The URL for +path+'s lines +from+..+to+ (+to+ nil: one line), or nil:
-  # no PR has the file, or more than one does.
-  def url_for(path, from, to = nil) = line_for(path, from, to)&.fetch(:url)
-
-  # {url:, diff:, path:, line:, end_line:} for +path+'s lines (see #url_for),
-  # or nil.
+  # {url:, diff:, path:, line:, end_line:} for +path+'s lines +from+..+to+
+  # (+to+ nil: one line), or nil: no PR has the file, or more than one does.
   def line_for(path, from, to = nil)
     found = @prs.filter_map do |pr, data|
       file = resolve(data.files, path)

data/lib/samagotchi/bundles/mcp/manifest.yml

@@ -1,12 +1,12 @@
 ---
 name: mcp
-version: 0.7.1
+version: 0.7.2
 scope: system
 description: "Tools from MCP servers (stdio): each server in config.yml bundles: mcp: servers: runs for the session; their tools go into chi's tool index: the model searches them with find_tools and calls one with call_tool (<server>/<tool>); /mcp lists them"
 trust_level: reviewed
 files: {}
 plugin:
   file: plugin.rb
-  sha256: sha256:67b1ed9337236deb366459aaaed4e49f0d3122a0b38f3ff9328babcd332c0182
+  sha256: sha256:c4bb4cf99ad43168ea68c25283a153c5dea1e5be123743c8a4c1278c16b5ea90
 # 0.67.0 is the release with chi.tool_source (the core tool index the bundle publishes into).
-requires_chi: ">= 0.67.0"
+requires_chi: ">= 0.121.0"

data/lib/samagotchi/bundles/mcp/plugin.rb

@@ -354,6 +354,7 @@ class Plugin
   def register(chi)
     @chi = chi
     ctx = chi.ctx
+    @ctx = ctx
     configs = @settings["servers"]
     configs = {} unless configs.is_a?(Hash)
     unless configs.empty?
@@ -952,7 +953,10 @@ class Plugin
     return "No servers. Add them in config.yml under `bundles: mcp: servers:` (docs/plugins.md, The mcp bundle)." if @servers.empty?
 
     servers = @servers.map do |server|
-      head = "**#{server.name}**: #{state_text(server)}"
+      marker = if @source && !@source.declared_groups.include?(server.name)
+                 " (not in toolkit #{@ctx.toolkit})"
+               end
+      head = "**#{server.name}**: #{state_text(server)}#{marker}"
       # Sorted: a server lists its tools in its own (often grouped) order.
       tools = server.tools.sort_by(&:name).map { |t| ["- `#{t.server}/#{t.name}`", mark(t)].compact.join(" ") }
       tools.empty? ? head : "#{head}\n#{tools.join("\n")}"

data/lib/samagotchi/bundles/system/manifest.yml

@@ -1,6 +1,6 @@
 ---
 name: samagotchi-system
-version: 0.120.0
+version: 0.121.1
 scope: system
 description: Default system memories — identity, self map, config modification protocol, memory guide and the delegated-session rules
 files:

data/lib/samagotchi/child_move.rb

@@ -6,7 +6,7 @@ require "time"
 require_relative "atomic_file"
 require_relative "session"
 require_relative "session_inbox"
-require_relative "worker_sidecar"
+require_relative "worker_link"
 require_relative "log"
 require_relative "tools/delegate_cursor"
 
@@ -93,13 +93,11 @@ module Samagotchi
     # installed (SessionManager.worker_command): it moves.
     # @return [String, nil]
     def unmovable(child_id, state_dir:)
-      owner = SessionManager.session_owner(child_id, state_dir: state_dir) or return nil
-      return "open in a chi REPL; close it there" if owner.tui?
+      link = WorkerLink.resolve(Session.session_dir(child_id, state_dir: state_dir), unlink: false)
+      return "open in a chi REPL; close it there" if link.owner&.tui?
+      return nil if !link.live? || link.features.include?(FEATURE)
 
-      sidecar = WorkerSidecar.live(Session.session_dir(child_id, state_dir: state_dir), unlink: false)
-      return nil if sidecar.nil? || sidecar.features.include?(FEATURE)
-
-      "older chi worker#{" #{sidecar.version}" if sidecar.version}; restart it"
+      "older chi worker#{" #{link.version}" if link.version}; restart it"
     end
 
     # Move +ids+ (direct children of +from+) to +to+: the intent, the

data/lib/samagotchi/children_status.rb

@@ -5,6 +5,7 @@ require_relative "session"
 require_relative "archive_store"
 require_relative "git_head"
 require_relative "reply_wait"
+require_relative "worker_link"
 require_relative "tools/delegate"
 require_relative "tools/delegate_cursor"
 
@@ -106,7 +107,7 @@ module Samagotchi
     # The keys of a children_of row that state_of and child read, for a
     # session counts loaded itself.
     def summary_of(session, state_dir:)
-      live = SessionManager.worker_live?(session.id, state_dir: state_dir)
+      live = WorkerLink.resolve(Session.session_dir(session.id, state_dir: state_dir), unlink: false).worker_owned?
       { live: live, busy: live && session.status == Session::STATUS_RUNNING, status: session.status,
         updated_at: session.updated_at, waiting: session.waiting_question(live: live)&.dig(:kind),
         preview: session.last_prompt.to_s }

data/lib/samagotchi/engine.rb

@@ -377,6 +377,7 @@ module Samagotchi
       # A cut tool output is saved whole in the session's folder.
       @kernel.session_dir = -> { @session&.id && Session.session_dir(@session.id, state_dir: session_state_dir) }
       @kernel.guardrail_gate = @guardrail_wiring.gate
+      @kernel.participant_turn = -> { Steer.participant_author?(turn_author) }
       # The turn-end warm-up; the kernel asks it for a slot pin per request.
       @prompt_warmup = PromptWarmup.new
       @kernel.warmup = @prompt_warmup

data/lib/samagotchi/guardrail_wiring.rb

@@ -271,7 +271,14 @@ module Samagotchi
       # System 1: the ask is judged before the user sees it, and in `on` mode
       # one that passes every gate is allowed once without reaching them
       # (docs/guardrails.md, "System 1").
-      judgment = system_one_judge(payload)
+      judgment = begin
+        system_one_judge(payload)
+      rescue LLM::RequestCancelled
+        return turn_stopped(verdict)
+      end
+      # A turn stopped while the judge was asked opens no card.
+      return turn_stopped(verdict) if @cancelled_lookup.call
+
       if judgment && judgment[:auto]
         verdict.judgment = { id: judgment[:id], p: judgment[:p] }
         verdict.settle!(:allow, decided_by: "system one")
@@ -286,6 +293,12 @@ module Samagotchi
 
     private
 
+    # The deny for a call whose turn was stopped before its ask reached the
+    # user (as Guardrails::Gate words one stopped before the vote).
+    def turn_stopped(verdict)
+      verdict.settle!(:deny, decided_by: "core", note: "The turn was stopped before the user was asked.")
+    end
+
     # The judgments log (SystemOne::Log), beside the approvals store; nil
     # while there is no store dir.
     def system_one_log
@@ -319,6 +332,8 @@ module Samagotchi
                                                             entries: entries),
                    questions: { SystemOne::ApprovalQuestion::ID => SystemOne::ApprovalQuestion.question },
                    cancel_controller: @cancel_controller.call)
+      rescue LLM::RequestCancelled
+        raise
       rescue StandardError => e
         # The client already turns every failure it knows into a nil; this is
         # the unexpected one. Either way the ask goes to the user.
@@ -338,6 +353,8 @@ module Samagotchi
                         latency_ms: latency_ms, decision: decision, origin: "live")
       # A judgment the log cannot hold is no judgment: the user is asked.
       { id: id, p: p, auto: auto && !id.nil? }
+    rescue LLM::RequestCancelled
+      raise
     rescue StandardError => e
       # The approval never fails because of System 1.
       Samagotchi::Log.warn(:guardrails, "system_one_judgment_failed", error: "#{e.class}: #{e.message}")
@@ -408,7 +425,7 @@ module Samagotchi
                   "deny"
                 end
       end
-      system_one_log.label(id, label)
+      system_one_log.label(id, label, question_id: (answer.id if answer.is_a?(Samagotchi::QuestionAnswer)))
     rescue StandardError => e
       Samagotchi::Log.warn(:guardrails, "system_one_label_failed", error: "#{e.class}: #{e.message}")
       nil

data/lib/samagotchi/guardrails/parent_approvals.rb

@@ -69,6 +69,15 @@ module Samagotchi
         # memory-remove rule's ask, which a parent may answer.
         return false if fetch(facts, :rule).to_s == MEMORY_REMOVE_RULE
 
+        chi_files?(facts)
+      end
+
+      # Whether an approval's paths or command name chi's own dirs (#chi_dirs)
+      # or CHI_TEXT, whatever its rule: the part of #protected_facts? that
+      # System 1's SystemOne::SelfProtect shares.
+      def chi_files?(facts)
+        return false unless facts.is_a?(Hash)
+
         dirs = chi_dirs
         paths = Array(fetch(facts, :paths)).map(&:to_s).reject(&:empty?)
         return true if paths.any? { |path| dirs.any? { |dir| ProtectedPaths.within?(ProtectedPaths.real(path), dir) } }