@ai-ecoverse/slicc-agent 3.31.0 → 3.33.0

package/README.md

@@ -31,6 +31,11 @@ await agent.prompt('What is in /home?');
 - `hostAgent(agent)` serves the agent with pi's protocol: a pi-server with one session, `agent`, whose Chord services are `slicc.agent.control` (send with `whenBusy` `steer`, `followUp` or `reject`, wait, withdraw, abort, compact) and `slicc.agent.transcript` (the conversation's durable view as replicated state, plus `deliveries`: how each user entry was delivered, `run`, `steer` or `follow-up`, derived by the host from where each send it accepted was placed: after a tool result it steered, queued first it's a follow-up or a late steer per its `whenBusy`, placed at once it started a run). `serveConnections(self, host)` hands it every `MessagePort` the page sends.
 - `@ai-ecoverse/slicc-agent/page` has what the page needs (`startAgent`, `connectAgent`) without the agent's runtime: no pi-durable, pi-ai, providers or SQLite, which load only in the worker. `@ai-ecoverse/slicc-agent/spectrum` is just as light, and a test keeps both that way.
 - `startAgent({ worker })` takes the Web Lock `slicc-agent`, so one tab at a time owns the agent worker, and waits while another tab holds it. `connect()` returns an `AgentConnection` (`control`, `transcript`, `prompt()`), `restart()` replaces the worker (durable resumes from SQLite), and `release()` stops it and lets the next tab take over. `port()` returns a raw `MessagePort` into the worker instead, for another tab: hand it over (through a SharedWorker, say), and that tab calls `connectAgent(port)`. A caller that already holds the lock passes `held: true`. A connection's `closed` resolves when its port ends (with the error, if any), and from then on its states keep their last values.
+- **Followers over a link** (PR 18): `port({ readOnly: true })` and `connect({ readOnly: true })` give a view-only connection.
+  - **What a view-only connection can do:** it sees the transcript, the agents, settings state and remote-control `watch`, and may call `wait` and `changesOpen`.
+  - **What it can't:** every other `AgentControl` method, settings action and remote-control `prompt` or `abort` is refused with `EACCES` ("this follower can watch, but not send, steer or abort"). Send and compact answer `accepted: false` with that code. The worker serves view-only ports from a second pi-server whose session gets these narrowed services.
+  - **Carrying the connection over a byte stream:** `linkEndpoint({ write, close })` is a `PortEndpoint` that `connectAgent` accepts. Feed it the stream's bytes with `receive(bytes)` and its end with `end(error?)`. On the owner's side, `bridgePort(port, { write, close })` does the same for the `MessagePort` from `port()`.
+  - **The bytes:** each `PortChannel` message becomes a frame: a `u32` big-endian length, then a tag (0 data, 1 hello with the server id, 2 close), then the payload. A frame is at most 16 MiB, and a malformed one ends the link.
 
 ### Bash and files on slicc-kernel
 
@@ -262,7 +267,7 @@ MCP servers reachable over Streamable HTTP become native agent tools. The client
 
 **Per agent.** Today every cone reads the one file in `/home` and gets every enabled server. A scoop doesn't read a file of its own: it inherits its cone's servers, and a role's `tools:` or `agent --tools` list narrows them. A list with no `mcp__` entry gets no MCP servers. A list with `mcp__docs__search` or `mcp__docs__*` keeps only those, and `codemode` is added so codemode tools stay reachable. The resource tools must be listed by name, and they reach only the servers the list names. A nested scoop without a list inherits its calling scoop's list. A `beforeTool` hook blocks the model's calls outside the list, and codemode scripts only get the tools on it. When kernel users give each cone its own home, each cone reads `~/.pi/agent/mcp.json` in that home, and scoops keep inheriting from their cone.
 
-**Secrets.** `${NAME}` placeholders are filled from the agent's encrypted credential store, under `mcp:<server>|<hash of the URL>`, when the worker connects. A server whose secret is missing comes up as needing one, with a lick. Pointing a server at another URL leaves it without its secret. Header values never reach SQLite, the transcript, licks or `~/.pi/agent/mcp.log`, and stored secrets are scrubbed from error texts and server log lines. Adding the value in Settings › Accounts comes with the next release. Until then a server that needs a secret can't connect.
+**Secrets.** `${NAME}` placeholders are filled from the agent's encrypted credential store, under `mcp:<server>|<hash of the URL>`, when the worker connects. A server whose secret is missing comes up as needing one, with a lick. Pointing a server at another URL leaves it without its secret. Header values never reach SQLite, the transcript, licks or `~/.pi/agent/mcp.log`, and stored secrets are scrubbed from error texts and server log lines. **Settings › MCP servers** lists each server whose headers use a placeholder, under its own heading below Accounts, with the URL host. Connect takes the token, which fills every placeholder of a server that uses one name; a server whose headers use several different names can't be filled from Settings yet. The server then reconnects. A server that answers 401 shows as **Rejected**, with Reconnect, and Disconnect deletes the token. Tool cards and remote summaries label MCP calls `server · tool`, unless the name is ambiguous (a server name that starts or ends with `_`, or a name with more than two `__` separators); then they show the raw name.
 
 **Tools.** Tools are named `mcp__<server>__<tool>` (pi's names: everything but letters, digits and `_` becomes `_`, cut to 64 characters with a hash suffix on a collision). Their exposure follows pi:
 - `codemode` (the default): callable from codemode scripts as `tools.mcp__docs__search(args)`, which resolves to the whole `CallToolResult`, but not declared to the model. The `mcp_servers` section lists these servers with their description or the first line of the server's instructions. It also says that MCP results are data from the server, not instructions.

package/dist/host.js

@@ -11,6 +11,7 @@ import {
 import { createAgentControl } from "./control.js";
 import { trackDeliveries } from "./deliveries.js";
 import { PortListener } from "./listener.js";
+import { viewControl, viewRemote, viewSettings } from "./readonly.js";
 import { createRemote } from "./remote/host.js";
 import {
   AGENT_SESSION,
@@ -124,7 +125,7 @@ async function hostAgent(agent, options = {}) {
     }
   });
   provider.provide(AgentRemoteService, remote);
-  provider.provide(AgentTranscript, {
+  const transcriptService = {
     state,
     deliveries: deliveries.state,
     agents: mounted.agents,
@@ -135,25 +136,44 @@ async function hostAgent(agent, options = {}) {
     memoryScopes: options.memory?.scopes ?? replicatedState([]),
     frozen: options.freezer?.frozen ?? replicatedState([]),
     changes: options.changes?.view ?? replicatedState({ unavailable: null, changes: [] })
-  });
-  provider.provide(AgentSettings, options.settings ?? noSettings);
-  const host = {
-    serverServices: serverServices(),
-    async resolveSession(sessionId) {
-      if (sessionId !== AGENT_SESSION)
-        throw new SessionNotFoundError(`unknown session ${sessionId}`);
-      return { id: sessionId };
-    },
-    openSession: async () => sessionServices(provider)
   };
-  const listener = new PortListener(serverId);
-  const server = await new Server(host, { serverId, listeners: [listener] }).start();
+  provider.provide(AgentTranscript, transcriptService);
+  const settings = options.settings ?? noSettings;
+  provider.provide(AgentSettings, settings);
+  const viewer = new RemoteServiceProvider([
+    { service: AgentControl, mode: "singleton" },
+    { service: AgentTranscript, mode: "singleton" },
+    { service: AgentSettings, mode: "singleton" },
+    { service: AgentRemoteService, mode: "singleton" }
+  ]);
+  viewer.provide(AgentControl, viewControl(control));
+  viewer.provide(AgentTranscript, transcriptService);
+  viewer.provide(AgentSettings, viewSettings(settings));
+  viewer.provide(AgentRemoteService, viewRemote(remote));
+  const serve = async (id, services) => {
+    const host = {
+      serverServices: serverServices(),
+      async resolveSession(sessionId) {
+        if (sessionId !== AGENT_SESSION)
+          throw new SessionNotFoundError(`unknown session ${sessionId}`);
+        return { id: sessionId };
+      },
+      openSession: async () => sessionServices(services)
+    };
+    const listener = new PortListener(id);
+    const server = await new Server(host, { serverId: id, listeners: [listener] }).start();
+    return { listener, server };
+  };
+  const full = await serve(serverId, provider);
+  const view = await serve(crypto.randomUUID(), viewer);
   return {
     serverId,
     agent,
-    connect: (endpoint) => listener.connect(endpoint),
+    connect: (endpoint, connectOptions) => (connectOptions?.readOnly ? view : full).listener.connect(endpoint),
     async close() {
-      await server.close();
+      await full.server.close();
+      await view.server.close();
+      viewer.dispose();
       await remote.dispose();
       provider.dispose();
       deliveries.dispose();

package/dist/host.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/host.ts"],
-  "sourcesContent": ["import {\n  type Context,\n  createRemoteServiceEndpoint,\n  RemoteServiceProvider,\n  replicatedState,\n} from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport {\n  type RoutedServerServiceHost,\n  type RoutedSessionAttachment,\n  type RoutedSessionHandle,\n  Server,\n  type ServerHost,\n  SessionNotFoundError,\n} from '@earendil-works/pi-server';\nimport type { Agent } from './agent.ts';\nimport type { ChangesView } from './changes/git.ts';\nimport type { ChangesRuntime } from './changes/index.ts';\nimport { createAgentControl, type HostLicks, type HostScoops } from './control.ts';\nimport { trackDeliveries } from './deliveries.ts';\nimport type { FreezerRuntime, FrozenCone } from './freezer/index.ts';\nimport { PortListener } from './listener.ts';\nimport type { McpRuntime } from './mcp/index.ts';\nimport type { MemoryEntry, MemoryScope } from './memory/format.ts';\nimport type { MemoryRuntime } from './memory/index.ts';\nimport { createRemote } from './remote/host.ts';\nimport {\n  AGENT_SESSION,\n  AgentControl,\n  AgentRemoteService,\n  AgentSessions,\n  AgentSettings,\n  AgentTranscript,\n  type Command,\n} from './services.ts';\nimport type { SkillsRuntime } from './skills/index.ts';\nimport type { SprinklesRuntime } from './sprinkles/index.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\nimport { agentViews } from './views.ts';\nimport type { PortEndpoint } from './wire.ts';\n\nexport interface AgentHost {\n  readonly serverId: string;\n  readonly agent: Agent;\n  connect(endpoint: PortEndpoint): void;\n  close(): Promise<void>;\n}\n\nfunction endpointFor(provider: RemoteServiceProvider): RoutedSessionAttachment {\n  const endpoint = createRemoteServiceEndpoint(provider);\n  return {\n    invokeService: (call, publish, context) =>\n      endpoint.invoke(call, (id, update) => publish(id, update, context), context),\n    release: () => endpoint.dispose(),\n  };\n}\n\nfunction sessionServices(provider: RemoteServiceProvider): RoutedSessionHandle {\n  return {\n    attachClient: () => endpointFor(provider),\n    close: async () => {},\n  };\n}\n\nfunction serverServices(): RoutedServerServiceHost {\n  return {\n    attachClient(presentation) {\n      const provider = new RemoteServiceProvider([{ service: AgentSessions, mode: 'singleton' }]);\n      provider.provide(AgentSessions, {\n        attach: (sessionId, context) => presentation.attachSession(sessionId, context),\n        detach: (context) => presentation.detachSession(context),\n      });\n      const attachment = endpointFor(provider);\n      return {\n        invokeService: attachment.invokeService,\n        release(context) {\n          attachment.release(context);\n          provider.dispose();\n        },\n      };\n    },\n  };\n}\n\nconst noSettings: AgentSettings = {\n  state: replicatedState({ models: [], accounts: [] }),\n  connect: async () => {\n    throw new Error('this agent has no accounts');\n  },\n  disconnect: async () => {},\n  signIn: async () => null,\n};\n\nasync function follow(agent: Agent, context: Context) {\n  let attached = await agent.cone().viewState(context);\n  const state = replicatedState<ConversationView>(attached.value);\n  const mirror = (value: ConversationView, from: Context) => state.replace(from, value);\n  let off = attached.subscribe(mirror);\n  const stop = agent.onCone(async (conversation) => {\n    const next = await conversation.viewState(context);\n    off();\n    attached.dispose();\n    attached = next;\n    state.replace(context, next.value);\n    off = next.subscribe(mirror);\n  });\n  return {\n    state,\n    dispose() {\n      stop();\n      off();\n      attached.dispose();\n    },\n  };\n}\n\nexport async function hostAgent(\n  agent: Agent,\n  options: {\n    serverId?: string;\n    context?: Context;\n    settings?: AgentSettings;\n    licks?: HostLicks;\n    scoops?: HostScoops;\n    skills?: SkillsRuntime;\n    sprinkles?: SprinklesRuntime;\n    memory?: MemoryRuntime;\n    freezer?: FreezerRuntime;\n    changes?: ChangesRuntime;\n    mcp?: Pick<McpRuntime, 'close'>;\n  } = {}\n): Promise<AgentHost> {\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const serverId = options.serverId ?? crypto.randomUUID();\n  const transcript = await follow(agent, context);\n  const { state } = transcript;\n  const mounted = await agentViews(agent, context);\n  const touch = () => options.freezer?.touch();\n  const untouch = [state.subscribe(touch), mounted.views.subscribe(touch)];\n  const provider = new RemoteServiceProvider([\n    { service: AgentControl, mode: 'singleton' },\n    { service: AgentTranscript, mode: 'singleton' },\n    { service: AgentSettings, mode: 'singleton' },\n    { service: AgentRemoteService, mode: 'singleton' },\n  ]);\n  const deliveries = trackDeliveries(agent.harness, state, context);\n  const control = createAgentControl(\n    agent.harness,\n    agent,\n    deliveries,\n    options.licks,\n    options.scoops,\n    options.skills,\n    options.sprinkles,\n    options.memory,\n    options.freezer,\n    options.changes\n  );\n  provider.provide(AgentControl, control);\n  const remote = createRemote({\n    harness: agent.harness,\n    send: (request, using) => control.send(request, using),\n    async conversation(agentId, using) {\n      if (!agentId) return agent.cone();\n      const found = await agent.agents.conversation(agentId, using);\n      if (!found) throw new Error(`There is no agent ${agentId}.`);\n      return found;\n    },\n  });\n  provider.provide(AgentRemoteService, remote);\n  provider.provide(AgentTranscript, {\n    state,\n    deliveries: deliveries.state,\n    agents: mounted.agents,\n    views: mounted.views,\n    commands: options.skills?.commands ?? replicatedState<Command[]>([]),\n    sprinkles: options.sprinkles?.sprinkles ?? replicatedState<Sprinkle[]>([]),\n    memories: options.memory?.memories ?? replicatedState<MemoryEntry[]>([]),\n    memoryScopes: options.memory?.scopes ?? replicatedState<MemoryScope[]>([]),\n    frozen: options.freezer?.frozen ?? replicatedState<FrozenCone[]>([]),\n    changes:\n      options.changes?.view ?? replicatedState<ChangesView>({ unavailable: null, changes: [] }),\n  });\n  provider.provide(AgentSettings, options.settings ?? noSettings);\n  const host: ServerHost = {\n    serverServices: serverServices(),\n    async resolveSession(sessionId) {\n      if (sessionId !== AGENT_SESSION)\n        throw new SessionNotFoundError(`unknown session ${sessionId}`);\n      return { id: sessionId };\n    },\n    openSession: async () => sessionServices(provider),\n  };\n  const listener = new PortListener(serverId);\n  const server = await new Server(host, { serverId, listeners: [listener] }).start();\n  return {\n    serverId,\n    agent,\n    connect: (endpoint) => listener.connect(endpoint),\n    async close() {\n      await server.close();\n      await remote.dispose();\n      provider.dispose();\n      deliveries.dispose();\n      transcript.dispose();\n      mounted.dispose();\n      for (const off of untouch) off();\n      options.freezer?.close();\n      await options.changes?.close(context);\n      await options.memory?.close(context);\n      await options.sprinkles?.close(context);\n      await options.skills?.close(context);\n      await options.mcp?.close(context);\n      await options.scoops?.runtime.close(context);\n      await options.licks?.sources.close(context);\n      await agent.close();\n    },\n  };\n}\n"],
-  "mappings": "AAAA;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AAEnC;AAAA,EAIE;AAAA,EAEA;AAAA,OACK;AAIP,SAAS,0BAA2D;AACpE,SAAS,uBAAuB;AAEhC,SAAS,oBAAoB;AAI7B,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAIP,SAAS,kBAAkB;AAU3B,SAAS,YAAY,UAA0D;AAC7E,QAAM,WAAW,4BAA4B,QAAQ;AACrD,SAAO;AAAA,IACL,eAAe,CAAC,MAAM,SAAS,YAC7B,SAAS,OAAO,MAAM,CAAC,IAAI,WAAW,QAAQ,IAAI,QAAQ,OAAO,GAAG,OAAO;AAAA,IAC7E,SAAS,MAAM,SAAS,QAAQ;AAAA,EAClC;AACF;AAEA,SAAS,gBAAgB,UAAsD;AAC7E,SAAO;AAAA,IACL,cAAc,MAAM,YAAY,QAAQ;AAAA,IACxC,OAAO,YAAY;AAAA,IAAC;AAAA,EACtB;AACF;AAEA,SAAS,iBAA0C;AACjD,SAAO;AAAA,IACL,aAAa,cAAc;AACzB,YAAM,WAAW,IAAI,sBAAsB,CAAC,EAAE,SAAS,eAAe,MAAM,YAAY,CAAC,CAAC;AAC1F,eAAS,QAAQ,eAAe;AAAA,QAC9B,QAAQ,CAAC,WAAW,YAAY,aAAa,cAAc,WAAW,OAAO;AAAA,QAC7E,QAAQ,CAAC,YAAY,aAAa,cAAc,OAAO;AAAA,MACzD,CAAC;AACD,YAAM,aAAa,YAAY,QAAQ;AACvC,aAAO;AAAA,QACL,eAAe,WAAW;AAAA,QAC1B,QAAQ,SAAS;AACf,qBAAW,QAAQ,OAAO;AAC1B,mBAAS,QAAQ;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,aAA4B;AAAA,EAChC,OAAO,gBAAgB,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,EACnD,SAAS,YAAY;AACnB,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAAA,EACA,YAAY,YAAY;AAAA,EAAC;AAAA,EACzB,QAAQ,YAAY;AACtB;AAEA,eAAe,OAAO,OAAc,SAAkB;AACpD,MAAI,WAAW,MAAM,MAAM,KAAK,EAAE,UAAU,OAAO;AACnD,QAAM,QAAQ,gBAAkC,SAAS,KAAK;AAC9D,QAAM,SAAS,CAAC,OAAyB,SAAkB,MAAM,QAAQ,MAAM,KAAK;AACpF,MAAI,MAAM,SAAS,UAAU,MAAM;AACnC,QAAM,OAAO,MAAM,OAAO,OAAO,iBAAiB;AAChD,UAAM,OAAO,MAAM,aAAa,UAAU,OAAO;AACjD,QAAI;AACJ,aAAS,QAAQ;AACjB,eAAW;AACX,UAAM,QAAQ,SAAS,KAAK,KAAK;AACjC,UAAM,KAAK,UAAU,MAAM;AAAA,EAC7B,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AACR,WAAK;AACL,UAAI;AACJ,eAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AACF;AAEA,eAAsB,UACpB,OACA,UAYI,CAAC,GACe;AACpB,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,QAAQ,YAAY,OAAO,WAAW;AACvD,QAAM,aAAa,MAAM,OAAO,OAAO,OAAO;AAC9C,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,UAAU,MAAM,WAAW,OAAO,OAAO;AAC/C,QAAM,QAAQ,MAAM,QAAQ,SAAS,MAAM;AAC3C,QAAM,UAAU,CAAC,MAAM,UAAU,KAAK,GAAG,QAAQ,MAAM,UAAU,KAAK,CAAC;AACvE,QAAM,WAAW,IAAI,sBAAsB;AAAA,IACzC,EAAE,SAAS,cAAc,MAAM,YAAY;AAAA,IAC3C,EAAE,SAAS,iBAAiB,MAAM,YAAY;AAAA,IAC9C,EAAE,SAAS,eAAe,MAAM,YAAY;AAAA,IAC5C,EAAE,SAAS,oBAAoB,MAAM,YAAY;AAAA,EACnD,CAAC;AACD,QAAM,aAAa,gBAAgB,MAAM,SAAS,OAAO,OAAO;AAChE,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACA,WAAS,QAAQ,cAAc,OAAO;AACtC,QAAM,SAAS,aAAa;AAAA,IAC1B,SAAS,MAAM;AAAA,IACf,MAAM,CAAC,SAAS,UAAU,QAAQ,KAAK,SAAS,KAAK;AAAA,IACrD,MAAM,aAAa,SAAS,OAAO;AACjC,UAAI,CAAC,QAAS,QAAO,MAAM,KAAK;AAChC,YAAM,QAAQ,MAAM,MAAM,OAAO,aAAa,SAAS,KAAK;AAC5D,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,OAAO,GAAG;AAC3D,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACD,WAAS,QAAQ,oBAAoB,MAAM;AAC3C,WAAS,QAAQ,iBAAiB;AAAA,IAChC;AAAA,IACA,YAAY,WAAW;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,OAAO,QAAQ;AAAA,IACf,UAAU,QAAQ,QAAQ,YAAY,gBAA2B,CAAC,CAAC;AAAA,IACnE,WAAW,QAAQ,WAAW,aAAa,gBAA4B,CAAC,CAAC;AAAA,IACzE,UAAU,QAAQ,QAAQ,YAAY,gBAA+B,CAAC,CAAC;AAAA,IACvE,cAAc,QAAQ,QAAQ,UAAU,gBAA+B,CAAC,CAAC;AAAA,IACzE,QAAQ,QAAQ,SAAS,UAAU,gBAA8B,CAAC,CAAC;AAAA,IACnE,SACE,QAAQ,SAAS,QAAQ,gBAA6B,EAAE,aAAa,MAAM,SAAS,CAAC,EAAE,CAAC;AAAA,EAC5F,CAAC;AACD,WAAS,QAAQ,eAAe,QAAQ,YAAY,UAAU;AAC9D,QAAM,OAAmB;AAAA,IACvB,gBAAgB,eAAe;AAAA,IAC/B,MAAM,eAAe,WAAW;AAC9B,UAAI,cAAc;AAChB,cAAM,IAAI,qBAAqB,mBAAmB,SAAS,EAAE;AAC/D,aAAO,EAAE,IAAI,UAAU;AAAA,IACzB;AAAA,IACA,aAAa,YAAY,gBAAgB,QAAQ;AAAA,EACnD;AACA,QAAM,WAAW,IAAI,aAAa,QAAQ;AAC1C,QAAM,SAAS,MAAM,IAAI,OAAO,MAAM,EAAE,UAAU,WAAW,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM;AACjF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,CAAC,aAAa,SAAS,QAAQ,QAAQ;AAAA,IAChD,MAAM,QAAQ;AACZ,YAAM,OAAO,MAAM;AACnB,YAAM,OAAO,QAAQ;AACrB,eAAS,QAAQ;AACjB,iBAAW,QAAQ;AACnB,iBAAW,QAAQ;AACnB,cAAQ,QAAQ;AAChB,iBAAW,OAAO,QAAS,KAAI;AAC/B,cAAQ,SAAS,MAAM;AACvB,YAAM,QAAQ,SAAS,MAAM,OAAO;AACpC,YAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,YAAM,QAAQ,WAAW,MAAM,OAAO;AACtC,YAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,YAAM,QAAQ,KAAK,MAAM,OAAO;AAChC,YAAM,QAAQ,QAAQ,QAAQ,MAAM,OAAO;AAC3C,YAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO;AAC1C,YAAM,MAAM,MAAM;AAAA,IACpB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import {\n  type Context,\n  createRemoteServiceEndpoint,\n  RemoteServiceProvider,\n  replicatedState,\n} from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport {\n  type RoutedServerServiceHost,\n  type RoutedSessionAttachment,\n  type RoutedSessionHandle,\n  Server,\n  type ServerHost,\n  SessionNotFoundError,\n} from '@earendil-works/pi-server';\nimport type { Agent } from './agent.ts';\nimport type { ChangesView } from './changes/git.ts';\nimport type { ChangesRuntime } from './changes/index.ts';\nimport { createAgentControl, type HostLicks, type HostScoops } from './control.ts';\nimport { trackDeliveries } from './deliveries.ts';\nimport type { FreezerRuntime, FrozenCone } from './freezer/index.ts';\nimport { PortListener } from './listener.ts';\nimport type { McpRuntime } from './mcp/index.ts';\nimport type { MemoryEntry, MemoryScope } from './memory/format.ts';\nimport type { MemoryRuntime } from './memory/index.ts';\nimport { viewControl, viewRemote, viewSettings } from './readonly.ts';\nimport { createRemote } from './remote/host.ts';\nimport {\n  AGENT_SESSION,\n  AgentControl,\n  AgentRemoteService,\n  AgentSessions,\n  AgentSettings,\n  AgentTranscript,\n  type Command,\n} from './services.ts';\nimport type { SkillsRuntime } from './skills/index.ts';\nimport type { SprinklesRuntime } from './sprinkles/index.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\nimport { agentViews } from './views.ts';\nimport type { PortEndpoint } from './wire.ts';\n\nexport interface AgentHost {\n  readonly serverId: string;\n  readonly agent: Agent;\n  connect(endpoint: PortEndpoint, options?: { readOnly?: boolean }): void;\n  close(): Promise<void>;\n}\n\nfunction endpointFor(provider: RemoteServiceProvider): RoutedSessionAttachment {\n  const endpoint = createRemoteServiceEndpoint(provider);\n  return {\n    invokeService: (call, publish, context) =>\n      endpoint.invoke(call, (id, update) => publish(id, update, context), context),\n    release: () => endpoint.dispose(),\n  };\n}\n\nfunction sessionServices(provider: RemoteServiceProvider): RoutedSessionHandle {\n  return {\n    attachClient: () => endpointFor(provider),\n    close: async () => {},\n  };\n}\n\nfunction serverServices(): RoutedServerServiceHost {\n  return {\n    attachClient(presentation) {\n      const provider = new RemoteServiceProvider([{ service: AgentSessions, mode: 'singleton' }]);\n      provider.provide(AgentSessions, {\n        attach: (sessionId, context) => presentation.attachSession(sessionId, context),\n        detach: (context) => presentation.detachSession(context),\n      });\n      const attachment = endpointFor(provider);\n      return {\n        invokeService: attachment.invokeService,\n        release(context) {\n          attachment.release(context);\n          provider.dispose();\n        },\n      };\n    },\n  };\n}\n\nconst noSettings: AgentSettings = {\n  state: replicatedState({ models: [], accounts: [] }),\n  connect: async () => {\n    throw new Error('this agent has no accounts');\n  },\n  disconnect: async () => {},\n  signIn: async () => null,\n};\n\nasync function follow(agent: Agent, context: Context) {\n  let attached = await agent.cone().viewState(context);\n  const state = replicatedState<ConversationView>(attached.value);\n  const mirror = (value: ConversationView, from: Context) => state.replace(from, value);\n  let off = attached.subscribe(mirror);\n  const stop = agent.onCone(async (conversation) => {\n    const next = await conversation.viewState(context);\n    off();\n    attached.dispose();\n    attached = next;\n    state.replace(context, next.value);\n    off = next.subscribe(mirror);\n  });\n  return {\n    state,\n    dispose() {\n      stop();\n      off();\n      attached.dispose();\n    },\n  };\n}\n\nexport async function hostAgent(\n  agent: Agent,\n  options: {\n    serverId?: string;\n    context?: Context;\n    settings?: AgentSettings;\n    licks?: HostLicks;\n    scoops?: HostScoops;\n    skills?: SkillsRuntime;\n    sprinkles?: SprinklesRuntime;\n    memory?: MemoryRuntime;\n    freezer?: FreezerRuntime;\n    changes?: ChangesRuntime;\n    mcp?: Pick<McpRuntime, 'close'>;\n  } = {}\n): Promise<AgentHost> {\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const serverId = options.serverId ?? crypto.randomUUID();\n  const transcript = await follow(agent, context);\n  const { state } = transcript;\n  const mounted = await agentViews(agent, context);\n  const touch = () => options.freezer?.touch();\n  const untouch = [state.subscribe(touch), mounted.views.subscribe(touch)];\n  const provider = new RemoteServiceProvider([\n    { service: AgentControl, mode: 'singleton' },\n    { service: AgentTranscript, mode: 'singleton' },\n    { service: AgentSettings, mode: 'singleton' },\n    { service: AgentRemoteService, mode: 'singleton' },\n  ]);\n  const deliveries = trackDeliveries(agent.harness, state, context);\n  const control = createAgentControl(\n    agent.harness,\n    agent,\n    deliveries,\n    options.licks,\n    options.scoops,\n    options.skills,\n    options.sprinkles,\n    options.memory,\n    options.freezer,\n    options.changes\n  );\n  provider.provide(AgentControl, control);\n  const remote = createRemote({\n    harness: agent.harness,\n    send: (request, using) => control.send(request, using),\n    async conversation(agentId, using) {\n      if (!agentId) return agent.cone();\n      const found = await agent.agents.conversation(agentId, using);\n      if (!found) throw new Error(`There is no agent ${agentId}.`);\n      return found;\n    },\n  });\n  provider.provide(AgentRemoteService, remote);\n  const transcriptService = {\n    state,\n    deliveries: deliveries.state,\n    agents: mounted.agents,\n    views: mounted.views,\n    commands: options.skills?.commands ?? replicatedState<Command[]>([]),\n    sprinkles: options.sprinkles?.sprinkles ?? replicatedState<Sprinkle[]>([]),\n    memories: options.memory?.memories ?? replicatedState<MemoryEntry[]>([]),\n    memoryScopes: options.memory?.scopes ?? replicatedState<MemoryScope[]>([]),\n    frozen: options.freezer?.frozen ?? replicatedState<FrozenCone[]>([]),\n    changes:\n      options.changes?.view ?? replicatedState<ChangesView>({ unavailable: null, changes: [] }),\n  };\n  provider.provide(AgentTranscript, transcriptService);\n  const settings = options.settings ?? noSettings;\n  provider.provide(AgentSettings, settings);\n  const viewer = new RemoteServiceProvider([\n    { service: AgentControl, mode: 'singleton' },\n    { service: AgentTranscript, mode: 'singleton' },\n    { service: AgentSettings, mode: 'singleton' },\n    { service: AgentRemoteService, mode: 'singleton' },\n  ]);\n  viewer.provide(AgentControl, viewControl(control));\n  viewer.provide(AgentTranscript, transcriptService);\n  viewer.provide(AgentSettings, viewSettings(settings));\n  viewer.provide(AgentRemoteService, viewRemote(remote));\n  const serve = async (id: string, services: RemoteServiceProvider) => {\n    const host: ServerHost = {\n      serverServices: serverServices(),\n      async resolveSession(sessionId) {\n        if (sessionId !== AGENT_SESSION)\n          throw new SessionNotFoundError(`unknown session ${sessionId}`);\n        return { id: sessionId };\n      },\n      openSession: async () => sessionServices(services),\n    };\n    const listener = new PortListener(id);\n    const server = await new Server(host, { serverId: id, listeners: [listener] }).start();\n    return { listener, server };\n  };\n  const full = await serve(serverId, provider);\n  const view = await serve(crypto.randomUUID(), viewer);\n  return {\n    serverId,\n    agent,\n    connect: (endpoint, connectOptions) =>\n      (connectOptions?.readOnly ? view : full).listener.connect(endpoint),\n    async close() {\n      await full.server.close();\n      await view.server.close();\n      viewer.dispose();\n      await remote.dispose();\n      provider.dispose();\n      deliveries.dispose();\n      transcript.dispose();\n      mounted.dispose();\n      for (const off of untouch) off();\n      options.freezer?.close();\n      await options.changes?.close(context);\n      await options.memory?.close(context);\n      await options.sprinkles?.close(context);\n      await options.skills?.close(context);\n      await options.mcp?.close(context);\n      await options.scoops?.runtime.close(context);\n      await options.licks?.sources.close(context);\n      await agent.close();\n    },\n  };\n}\n"],
+  "mappings": "AAAA;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,0BAA0B;AAEnC;AAAA,EAIE;AAAA,EAEA;AAAA,OACK;AAIP,SAAS,0BAA2D;AACpE,SAAS,uBAAuB;AAEhC,SAAS,oBAAoB;AAI7B,SAAS,aAAa,YAAY,oBAAoB;AACtD,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAIP,SAAS,kBAAkB;AAU3B,SAAS,YAAY,UAA0D;AAC7E,QAAM,WAAW,4BAA4B,QAAQ;AACrD,SAAO;AAAA,IACL,eAAe,CAAC,MAAM,SAAS,YAC7B,SAAS,OAAO,MAAM,CAAC,IAAI,WAAW,QAAQ,IAAI,QAAQ,OAAO,GAAG,OAAO;AAAA,IAC7E,SAAS,MAAM,SAAS,QAAQ;AAAA,EAClC;AACF;AAEA,SAAS,gBAAgB,UAAsD;AAC7E,SAAO;AAAA,IACL,cAAc,MAAM,YAAY,QAAQ;AAAA,IACxC,OAAO,YAAY;AAAA,IAAC;AAAA,EACtB;AACF;AAEA,SAAS,iBAA0C;AACjD,SAAO;AAAA,IACL,aAAa,cAAc;AACzB,YAAM,WAAW,IAAI,sBAAsB,CAAC,EAAE,SAAS,eAAe,MAAM,YAAY,CAAC,CAAC;AAC1F,eAAS,QAAQ,eAAe;AAAA,QAC9B,QAAQ,CAAC,WAAW,YAAY,aAAa,cAAc,WAAW,OAAO;AAAA,QAC7E,QAAQ,CAAC,YAAY,aAAa,cAAc,OAAO;AAAA,MACzD,CAAC;AACD,YAAM,aAAa,YAAY,QAAQ;AACvC,aAAO;AAAA,QACL,eAAe,WAAW;AAAA,QAC1B,QAAQ,SAAS;AACf,qBAAW,QAAQ,OAAO;AAC1B,mBAAS,QAAQ;AAAA,QACnB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,MAAM,aAA4B;AAAA,EAChC,OAAO,gBAAgB,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,EACnD,SAAS,YAAY;AACnB,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAAA,EACA,YAAY,YAAY;AAAA,EAAC;AAAA,EACzB,QAAQ,YAAY;AACtB;AAEA,eAAe,OAAO,OAAc,SAAkB;AACpD,MAAI,WAAW,MAAM,MAAM,KAAK,EAAE,UAAU,OAAO;AACnD,QAAM,QAAQ,gBAAkC,SAAS,KAAK;AAC9D,QAAM,SAAS,CAAC,OAAyB,SAAkB,MAAM,QAAQ,MAAM,KAAK;AACpF,MAAI,MAAM,SAAS,UAAU,MAAM;AACnC,QAAM,OAAO,MAAM,OAAO,OAAO,iBAAiB;AAChD,UAAM,OAAO,MAAM,aAAa,UAAU,OAAO;AACjD,QAAI;AACJ,aAAS,QAAQ;AACjB,eAAW;AACX,UAAM,QAAQ,SAAS,KAAK,KAAK;AACjC,UAAM,KAAK,UAAU,MAAM;AAAA,EAC7B,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA,UAAU;AACR,WAAK;AACL,UAAI;AACJ,eAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AACF;AAEA,eAAsB,UACpB,OACA,UAYI,CAAC,GACe;AACpB,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,QAAQ,YAAY,OAAO,WAAW;AACvD,QAAM,aAAa,MAAM,OAAO,OAAO,OAAO;AAC9C,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,UAAU,MAAM,WAAW,OAAO,OAAO;AAC/C,QAAM,QAAQ,MAAM,QAAQ,SAAS,MAAM;AAC3C,QAAM,UAAU,CAAC,MAAM,UAAU,KAAK,GAAG,QAAQ,MAAM,UAAU,KAAK,CAAC;AACvE,QAAM,WAAW,IAAI,sBAAsB;AAAA,IACzC,EAAE,SAAS,cAAc,MAAM,YAAY;AAAA,IAC3C,EAAE,SAAS,iBAAiB,MAAM,YAAY;AAAA,IAC9C,EAAE,SAAS,eAAe,MAAM,YAAY;AAAA,IAC5C,EAAE,SAAS,oBAAoB,MAAM,YAAY;AAAA,EACnD,CAAC;AACD,QAAM,aAAa,gBAAgB,MAAM,SAAS,OAAO,OAAO;AAChE,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACV;AACA,WAAS,QAAQ,cAAc,OAAO;AACtC,QAAM,SAAS,aAAa;AAAA,IAC1B,SAAS,MAAM;AAAA,IACf,MAAM,CAAC,SAAS,UAAU,QAAQ,KAAK,SAAS,KAAK;AAAA,IACrD,MAAM,aAAa,SAAS,OAAO;AACjC,UAAI,CAAC,QAAS,QAAO,MAAM,KAAK;AAChC,YAAM,QAAQ,MAAM,MAAM,OAAO,aAAa,SAAS,KAAK;AAC5D,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,OAAO,GAAG;AAC3D,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACD,WAAS,QAAQ,oBAAoB,MAAM;AAC3C,QAAM,oBAAoB;AAAA,IACxB;AAAA,IACA,YAAY,WAAW;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,OAAO,QAAQ;AAAA,IACf,UAAU,QAAQ,QAAQ,YAAY,gBAA2B,CAAC,CAAC;AAAA,IACnE,WAAW,QAAQ,WAAW,aAAa,gBAA4B,CAAC,CAAC;AAAA,IACzE,UAAU,QAAQ,QAAQ,YAAY,gBAA+B,CAAC,CAAC;AAAA,IACvE,cAAc,QAAQ,QAAQ,UAAU,gBAA+B,CAAC,CAAC;AAAA,IACzE,QAAQ,QAAQ,SAAS,UAAU,gBAA8B,CAAC,CAAC;AAAA,IACnE,SACE,QAAQ,SAAS,QAAQ,gBAA6B,EAAE,aAAa,MAAM,SAAS,CAAC,EAAE,CAAC;AAAA,EAC5F;AACA,WAAS,QAAQ,iBAAiB,iBAAiB;AACnD,QAAM,WAAW,QAAQ,YAAY;AACrC,WAAS,QAAQ,eAAe,QAAQ;AACxC,QAAM,SAAS,IAAI,sBAAsB;AAAA,IACvC,EAAE,SAAS,cAAc,MAAM,YAAY;AAAA,IAC3C,EAAE,SAAS,iBAAiB,MAAM,YAAY;AAAA,IAC9C,EAAE,SAAS,eAAe,MAAM,YAAY;AAAA,IAC5C,EAAE,SAAS,oBAAoB,MAAM,YAAY;AAAA,EACnD,CAAC;AACD,SAAO,QAAQ,cAAc,YAAY,OAAO,CAAC;AACjD,SAAO,QAAQ,iBAAiB,iBAAiB;AACjD,SAAO,QAAQ,eAAe,aAAa,QAAQ,CAAC;AACpD,SAAO,QAAQ,oBAAoB,WAAW,MAAM,CAAC;AACrD,QAAM,QAAQ,OAAO,IAAY,aAAoC;AACnE,UAAM,OAAmB;AAAA,MACvB,gBAAgB,eAAe;AAAA,MAC/B,MAAM,eAAe,WAAW;AAC9B,YAAI,cAAc;AAChB,gBAAM,IAAI,qBAAqB,mBAAmB,SAAS,EAAE;AAC/D,eAAO,EAAE,IAAI,UAAU;AAAA,MACzB;AAAA,MACA,aAAa,YAAY,gBAAgB,QAAQ;AAAA,IACnD;AACA,UAAM,WAAW,IAAI,aAAa,EAAE;AACpC,UAAM,SAAS,MAAM,IAAI,OAAO,MAAM,EAAE,UAAU,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,EAAE,MAAM;AACrF,WAAO,EAAE,UAAU,OAAO;AAAA,EAC5B;AACA,QAAM,OAAO,MAAM,MAAM,UAAU,QAAQ;AAC3C,QAAM,OAAO,MAAM,MAAM,OAAO,WAAW,GAAG,MAAM;AACpD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,SAAS,CAAC,UAAU,oBACjB,gBAAgB,WAAW,OAAO,MAAM,SAAS,QAAQ,QAAQ;AAAA,IACpE,MAAM,QAAQ;AACZ,YAAM,KAAK,OAAO,MAAM;AACxB,YAAM,KAAK,OAAO,MAAM;AACxB,aAAO,QAAQ;AACf,YAAM,OAAO,QAAQ;AACrB,eAAS,QAAQ;AACjB,iBAAW,QAAQ;AACnB,iBAAW,QAAQ;AACnB,cAAQ,QAAQ;AAChB,iBAAW,OAAO,QAAS,KAAI;AAC/B,cAAQ,SAAS,MAAM;AACvB,YAAM,QAAQ,SAAS,MAAM,OAAO;AACpC,YAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,YAAM,QAAQ,WAAW,MAAM,OAAO;AACtC,YAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,YAAM,QAAQ,KAAK,MAAM,OAAO;AAChC,YAAM,QAAQ,QAAQ,QAAQ,MAAM,OAAO;AAC3C,YAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO;AAC1C,YAAM,MAAM,MAAM;AAAA,IACpB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/link.js

@@ -0,0 +1,146 @@
+const MAX_FRAME = 16 * 1024 * 1024;
+const DATA = 0;
+const HELLO = 1;
+const CLOSE = 2;
+function encodeFrame(frame) {
+  const body = frame instanceof Uint8Array ? frame : "hello" in frame ? new TextEncoder().encode(frame.hello) : new Uint8Array();
+  const tag = frame instanceof Uint8Array ? DATA : "hello" in frame ? HELLO : CLOSE;
+  const out = new Uint8Array(5 + body.length);
+  new DataView(out.buffer).setUint32(0, body.length + 1);
+  out[4] = tag;
+  out.set(body, 5);
+  return out;
+}
+class FrameReader {
+  #chunks = [];
+  #size = 0;
+  #take(count) {
+    const out = new Uint8Array(count);
+    let filled = 0;
+    while (filled < count) {
+      const head = this.#chunks[0];
+      const used = Math.min(head.length, count - filled);
+      out.set(head.subarray(0, used), filled);
+      filled += used;
+      if (used === head.length) this.#chunks.shift();
+      else this.#chunks[0] = head.subarray(used);
+    }
+    this.#size -= count;
+    return out;
+  }
+  #peek() {
+    const header = new Uint8Array(4);
+    let filled = 0;
+    for (const chunk of this.#chunks) {
+      const used = Math.min(chunk.length, 4 - filled);
+      header.set(chunk.subarray(0, used), filled);
+      filled += used;
+      if (filled === 4) break;
+    }
+    return new DataView(header.buffer).getUint32(0);
+  }
+  push(chunk) {
+    if (chunk.length) {
+      this.#chunks.push(chunk);
+      this.#size += chunk.length;
+    }
+    const frames = [];
+    while (this.#size >= 4) {
+      const length = this.#peek();
+      if (length < 1 || length > MAX_FRAME) throw new Error(`agent link frame of ${length} bytes`);
+      if (this.#size - 4 < length) break;
+      this.#take(4);
+      const frame = this.#take(length);
+      const tag = frame[0];
+      const body = frame.subarray(1);
+      if (tag === DATA) frames.push(body.slice());
+      else if (tag === HELLO) frames.push({ hello: new TextDecoder().decode(body) });
+      else if (tag === CLOSE) frames.push({ close: true });
+      else throw new Error(`agent link frame tag ${tag}`);
+    }
+    return frames;
+  }
+}
+function linkEndpoint(sink) {
+  const listeners = /* @__PURE__ */ new Map();
+  const reader = new FrameReader();
+  let ended = false;
+  const emit = (type, data) => {
+    for (const listener of listeners.get(type) ?? []) listener({ type, data });
+  };
+  const finish = (error) => {
+    if (ended) return;
+    ended = true;
+    emit(error ? "error" : "close");
+  };
+  return {
+    postMessage(message) {
+      if (!ended) sink.write(encodeFrame(message));
+    },
+    addEventListener(type, listener) {
+      listeners.set(type, [...listeners.get(type) ?? [], listener]);
+    },
+    close() {
+      if (ended) return;
+      ended = true;
+      sink.close();
+    },
+    receive(chunk) {
+      if (ended) return;
+      try {
+        for (const frame of reader.push(chunk)) emit("message", frame);
+      } catch (error) {
+        finish(error);
+        sink.close();
+      }
+    },
+    end: finish
+  };
+}
+function bridgePort(port, sink) {
+  const reader = new FrameReader();
+  let ended = false;
+  const stop = () => {
+    if (ended) return;
+    ended = true;
+    sink.close();
+  };
+  port.addEventListener("message", ({ data }) => {
+    if (!ended) sink.write(encodeFrame(data));
+    if (!(data instanceof Uint8Array) && data?.close) stop();
+  });
+  port.addEventListener("close", stop);
+  port.start?.();
+  const close = () => {
+    port.postMessage({ close: true });
+    port.close?.();
+  };
+  return {
+    receive(chunk) {
+      if (ended) return;
+      try {
+        for (const frame of reader.push(chunk)) {
+          if (frame instanceof Uint8Array) port.postMessage(frame, [frame.buffer]);
+          else port.postMessage(frame);
+        }
+      } catch {
+        ended = true;
+        close();
+        sink.close();
+      }
+    },
+    end() {
+      if (ended) return;
+      ended = true;
+      close();
+    }
+  };
+}
+export {
+  FrameReader,
+  MAX_FRAME,
+  bridgePort,
+  encodeFrame,
+  linkEndpoint
+};
+//# sourceMappingURL=link.js.map

package/dist/link.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/link.ts"],
+  "sourcesContent": ["import type { Frame, PortEndpoint } from './wire.ts';\n\nexport const MAX_FRAME = 16 * 1024 * 1024;\n\nconst DATA = 0;\nconst HELLO = 1;\nconst CLOSE = 2;\n\nexport interface ByteSink {\n  write(chunk: Uint8Array): void;\n  close(): void;\n}\n\nexport interface LinkEnd {\n  receive(chunk: Uint8Array): void;\n  end(error?: Error): void;\n}\n\nexport function encodeFrame(frame: Frame): Uint8Array {\n  const body =\n    frame instanceof Uint8Array\n      ? frame\n      : 'hello' in frame\n        ? new TextEncoder().encode(frame.hello)\n        : new Uint8Array();\n  const tag = frame instanceof Uint8Array ? DATA : 'hello' in frame ? HELLO : CLOSE;\n  const out = new Uint8Array(5 + body.length);\n  new DataView(out.buffer).setUint32(0, body.length + 1);\n  out[4] = tag;\n  out.set(body, 5);\n  return out;\n}\n\nexport class FrameReader {\n  readonly #chunks: Uint8Array[] = [];\n  #size = 0;\n\n  #take(count: number): Uint8Array {\n    const out = new Uint8Array(count);\n    let filled = 0;\n    while (filled < count) {\n      const head = this.#chunks[0] as Uint8Array;\n      const used = Math.min(head.length, count - filled);\n      out.set(head.subarray(0, used), filled);\n      filled += used;\n      if (used === head.length) this.#chunks.shift();\n      else this.#chunks[0] = head.subarray(used);\n    }\n    this.#size -= count;\n    return out;\n  }\n\n  #peek(): number {\n    const header = new Uint8Array(4);\n    let filled = 0;\n    for (const chunk of this.#chunks) {\n      const used = Math.min(chunk.length, 4 - filled);\n      header.set(chunk.subarray(0, used), filled);\n      filled += used;\n      if (filled === 4) break;\n    }\n    return new DataView(header.buffer).getUint32(0);\n  }\n\n  push(chunk: Uint8Array): Frame[] {\n    if (chunk.length) {\n      this.#chunks.push(chunk);\n      this.#size += chunk.length;\n    }\n    const frames: Frame[] = [];\n    while (this.#size >= 4) {\n      const length = this.#peek();\n      if (length < 1 || length > MAX_FRAME) throw new Error(`agent link frame of ${length} bytes`);\n      if (this.#size - 4 < length) break;\n      this.#take(4);\n      const frame = this.#take(length);\n      const tag = frame[0];\n      const body = frame.subarray(1);\n      if (tag === DATA) frames.push(body.slice());\n      else if (tag === HELLO) frames.push({ hello: new TextDecoder().decode(body) });\n      else if (tag === CLOSE) frames.push({ close: true });\n      else throw new Error(`agent link frame tag ${tag}`);\n    }\n    return frames;\n  }\n}\n\ntype Listener = (event: { type: string; data?: unknown }) => void;\n\nexport function linkEndpoint(sink: ByteSink): PortEndpoint & LinkEnd {\n  const listeners = new Map<string, Listener[]>();\n  const reader = new FrameReader();\n  let ended = false;\n  const emit = (type: string, data?: unknown) => {\n    for (const listener of listeners.get(type) ?? []) listener({ type, data });\n  };\n  const finish = (error?: Error) => {\n    if (ended) return;\n    ended = true;\n    emit(error ? 'error' : 'close');\n  };\n  return {\n    postMessage(message) {\n      if (!ended) sink.write(encodeFrame(message as Frame));\n    },\n    addEventListener(type: string, listener: Listener) {\n      listeners.set(type, [...(listeners.get(type) ?? []), listener]);\n    },\n    close() {\n      if (ended) return;\n      ended = true;\n      sink.close();\n    },\n    receive(chunk) {\n      if (ended) return;\n      try {\n        for (const frame of reader.push(chunk)) emit('message', frame);\n      } catch (error) {\n        finish(error as Error);\n        sink.close();\n      }\n    },\n    end: finish,\n  } as PortEndpoint & LinkEnd;\n}\n\nexport function bridgePort(port: PortEndpoint, sink: ByteSink): LinkEnd {\n  const reader = new FrameReader();\n  let ended = false;\n  const stop = () => {\n    if (ended) return;\n    ended = true;\n    sink.close();\n  };\n  port.addEventListener('message', ({ data }) => {\n    if (!ended) sink.write(encodeFrame(data as Frame));\n    if (!(data instanceof Uint8Array) && (data as { close?: boolean } | null)?.close) stop();\n  });\n  port.addEventListener('close', stop);\n  port.start?.();\n  const close = () => {\n    port.postMessage({ close: true } satisfies Frame);\n    port.close?.();\n  };\n  return {\n    receive(chunk) {\n      if (ended) return;\n      try {\n        for (const frame of reader.push(chunk)) {\n          if (frame instanceof Uint8Array) port.postMessage(frame, [frame.buffer]);\n          else port.postMessage(frame);\n        }\n      } catch {\n        ended = true;\n        close();\n        sink.close();\n      }\n    },\n    end() {\n      if (ended) return;\n      ended = true;\n      close();\n    },\n  };\n}\n"],
+  "mappings": "AAEO,MAAM,YAAY,KAAK,OAAO;AAErC,MAAM,OAAO;AACb,MAAM,QAAQ;AACd,MAAM,QAAQ;AAYP,SAAS,YAAY,OAA0B;AACpD,QAAM,OACJ,iBAAiB,aACb,QACA,WAAW,QACT,IAAI,YAAY,EAAE,OAAO,MAAM,KAAK,IACpC,IAAI,WAAW;AACvB,QAAM,MAAM,iBAAiB,aAAa,OAAO,WAAW,QAAQ,QAAQ;AAC5E,QAAM,MAAM,IAAI,WAAW,IAAI,KAAK,MAAM;AAC1C,MAAI,SAAS,IAAI,MAAM,EAAE,UAAU,GAAG,KAAK,SAAS,CAAC;AACrD,MAAI,CAAC,IAAI;AACT,MAAI,IAAI,MAAM,CAAC;AACf,SAAO;AACT;AAEO,MAAM,YAAY;AAAA,EACd,UAAwB,CAAC;AAAA,EAClC,QAAQ;AAAA,EAER,MAAM,OAA2B;AAC/B,UAAM,MAAM,IAAI,WAAW,KAAK;AAChC,QAAI,SAAS;AACb,WAAO,SAAS,OAAO;AACrB,YAAM,OAAO,KAAK,QAAQ,CAAC;AAC3B,YAAM,OAAO,KAAK,IAAI,KAAK,QAAQ,QAAQ,MAAM;AACjD,UAAI,IAAI,KAAK,SAAS,GAAG,IAAI,GAAG,MAAM;AACtC,gBAAU;AACV,UAAI,SAAS,KAAK,OAAQ,MAAK,QAAQ,MAAM;AAAA,UACxC,MAAK,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI;AAAA,IAC3C;AACA,SAAK,SAAS;AACd,WAAO;AAAA,EACT;AAAA,EAEA,QAAgB;AACd,UAAM,SAAS,IAAI,WAAW,CAAC;AAC/B,QAAI,SAAS;AACb,eAAW,SAAS,KAAK,SAAS;AAChC,YAAM,OAAO,KAAK,IAAI,MAAM,QAAQ,IAAI,MAAM;AAC9C,aAAO,IAAI,MAAM,SAAS,GAAG,IAAI,GAAG,MAAM;AAC1C,gBAAU;AACV,UAAI,WAAW,EAAG;AAAA,IACpB;AACA,WAAO,IAAI,SAAS,OAAO,MAAM,EAAE,UAAU,CAAC;AAAA,EAChD;AAAA,EAEA,KAAK,OAA4B;AAC/B,QAAI,MAAM,QAAQ;AAChB,WAAK,QAAQ,KAAK,KAAK;AACvB,WAAK,SAAS,MAAM;AAAA,IACtB;AACA,UAAM,SAAkB,CAAC;AACzB,WAAO,KAAK,SAAS,GAAG;AACtB,YAAM,SAAS,KAAK,MAAM;AAC1B,UAAI,SAAS,KAAK,SAAS,UAAW,OAAM,IAAI,MAAM,uBAAuB,MAAM,QAAQ;AAC3F,UAAI,KAAK,QAAQ,IAAI,OAAQ;AAC7B,WAAK,MAAM,CAAC;AACZ,YAAM,QAAQ,KAAK,MAAM,MAAM;AAC/B,YAAM,MAAM,MAAM,CAAC;AACnB,YAAM,OAAO,MAAM,SAAS,CAAC;AAC7B,UAAI,QAAQ,KAAM,QAAO,KAAK,KAAK,MAAM,CAAC;AAAA,eACjC,QAAQ,MAAO,QAAO,KAAK,EAAE,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC;AAAA,eACpE,QAAQ,MAAO,QAAO,KAAK,EAAE,OAAO,KAAK,CAAC;AAAA,UAC9C,OAAM,IAAI,MAAM,wBAAwB,GAAG,EAAE;AAAA,IACpD;AACA,WAAO;AAAA,EACT;AACF;AAIO,SAAS,aAAa,MAAwC;AACnE,QAAM,YAAY,oBAAI,IAAwB;AAC9C,QAAM,SAAS,IAAI,YAAY;AAC/B,MAAI,QAAQ;AACZ,QAAM,OAAO,CAAC,MAAc,SAAmB;AAC7C,eAAW,YAAY,UAAU,IAAI,IAAI,KAAK,CAAC,EAAG,UAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC3E;AACA,QAAM,SAAS,CAAC,UAAkB;AAChC,QAAI,MAAO;AACX,YAAQ;AACR,SAAK,QAAQ,UAAU,OAAO;AAAA,EAChC;AACA,SAAO;AAAA,IACL,YAAY,SAAS;AACnB,UAAI,CAAC,MAAO,MAAK,MAAM,YAAY,OAAgB,CAAC;AAAA,IACtD;AAAA,IACA,iBAAiB,MAAc,UAAoB;AACjD,gBAAU,IAAI,MAAM,CAAC,GAAI,UAAU,IAAI,IAAI,KAAK,CAAC,GAAI,QAAQ,CAAC;AAAA,IAChE;AAAA,IACA,QAAQ;AACN,UAAI,MAAO;AACX,cAAQ;AACR,WAAK,MAAM;AAAA,IACb;AAAA,IACA,QAAQ,OAAO;AACb,UAAI,MAAO;AACX,UAAI;AACF,mBAAW,SAAS,OAAO,KAAK,KAAK,EAAG,MAAK,WAAW,KAAK;AAAA,MAC/D,SAAS,OAAO;AACd,eAAO,KAAc;AACrB,aAAK,MAAM;AAAA,MACb;AAAA,IACF;AAAA,IACA,KAAK;AAAA,EACP;AACF;AAEO,SAAS,WAAW,MAAoB,MAAyB;AACtE,QAAM,SAAS,IAAI,YAAY;AAC/B,MAAI,QAAQ;AACZ,QAAM,OAAO,MAAM;AACjB,QAAI,MAAO;AACX,YAAQ;AACR,SAAK,MAAM;AAAA,EACb;AACA,OAAK,iBAAiB,WAAW,CAAC,EAAE,KAAK,MAAM;AAC7C,QAAI,CAAC,MAAO,MAAK,MAAM,YAAY,IAAa,CAAC;AACjD,QAAI,EAAE,gBAAgB,eAAgB,MAAqC,MAAO,MAAK;AAAA,EACzF,CAAC;AACD,OAAK,iBAAiB,SAAS,IAAI;AACnC,OAAK,QAAQ;AACb,QAAM,QAAQ,MAAM;AAClB,SAAK,YAAY,EAAE,OAAO,KAAK,CAAiB;AAChD,SAAK,QAAQ;AAAA,EACf;AACA,SAAO;AAAA,IACL,QAAQ,OAAO;AACb,UAAI,MAAO;AACX,UAAI;AACF,mBAAW,SAAS,OAAO,KAAK,KAAK,GAAG;AACtC,cAAI,iBAAiB,WAAY,MAAK,YAAY,OAAO,CAAC,MAAM,MAAM,CAAC;AAAA,cAClE,MAAK,YAAY,KAAK;AAAA,QAC7B;AAAA,MACF,QAAQ;AACN,gBAAQ;AACR,cAAM;AACN,aAAK,MAAM;AAAA,MACb;AAAA,IACF;AAAA,IACA,MAAM;AACJ,UAAI,MAAO;AACX,cAAQ;AACR,YAAM;AAAA,IACR;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/main.js

@@ -199,7 +199,7 @@ async function start(scope, port, options) {
   await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => void 0);
   const changes = attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS });
   return hostAgent(agent, {
-    settings: await createAgentSettings(models, credentials, providers),
+    settings: await createAgentSettings(models, credentials, providers, { mcp: mcpRuntime }),
     licks: { licks: licks.licks, sources },
     scoops: { scoops: scoops.scoops, runtime },
     skills: skillsRuntime,

package/dist/main.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/main.ts"],
-  "sourcesContent": ["import { attachKernel } from '@ai-ecoverse/slicc-kernel';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { CredentialStore, Provider } from '@earendil-works/pi-ai';\nimport {\n  createRegistry,\n  type ModelRef,\n  type Storage,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { CodingTools } from '@earendil-works/pi-durable/tools';\nimport { type Agent, openAgent } from './agent.ts';\nimport { attachChanges, CHANGES_MS } from './changes/index.ts';\nimport {\n  codemodeExtension,\n  codemodeTool,\n  disabledBySettings,\n  locateWasm,\n  sandboxFactory,\n} from './codemode/index.ts';\nimport { EncryptedCredentialStore } from './credentials.ts';\nimport { attachFreezer } from './freezer/index.ts';\nimport { settingsText, titler } from './freezer/title.ts';\nimport { lateGelatiere } from './gelatiere/index.ts';\nimport { type AgentHost, hostAgent } from './host.ts';\nimport { imageReads } from './images/index.ts';\nimport { createActivity } from './kernel/activity.ts';\nimport type { KernelClient } from './kernel/client.ts';\nimport { HOME, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nimport { processGroups } from './kernel/groups.ts';\nimport { setupLicks } from './licks/index.ts';\nimport { setupMcp } from './mcp/index.ts';\nimport { setupMemory } from './memory/index.ts';\nimport { type Transport, transportFetch } from './net.ts';\nimport { sliccPrompt } from './prompt.ts';\nimport { identity } from './scoops/identity.ts';\nimport { type Assets, packageAssets, type ScoopsRuntime, setupScoops } from './scoops/index.ts';\nimport {\n  createAgentSettings,\n  createSliccModels,\n  DEFAULT_MODEL,\n  sliccProviders,\n} from './settings.ts';\nimport { RELOAD_MS, setupSkills } from './skills/index.ts';\nimport { setupSprinkles } from './sprinkles/index.ts';\nimport { openOpfsSqliteStorage } from './sqlite.ts';\nimport {\n  agentVersion,\n  browserConnected,\n  commandsOnPath,\n  kernelBoot,\n  transportName,\n} from './system.ts';\nimport { kernelPort, serveConnections, type WorkerScope } from './worker.ts';\n\nexport interface AgentWorkerScope extends WorkerScope {\n  fetch: typeof fetch;\n  location: { origin: string };\n}\n\nexport type KernelAttach = (port: MessagePort) => Promise<KernelClient & { transport: Transport }>;\n\nexport interface AgentWorkerOptions {\n  model?: ModelRef;\n  providers?: Provider[];\n  attach?: KernelAttach;\n  credentials?: () => Promise<CredentialStore>;\n  storage?: () => Promise<Storage>;\n  assets?: Assets;\n  codemodeWasm?: () => Promise<WebAssembly.Module | undefined>;\n  codemodeWorker?: string | URL;\n  catalog?: string;\n}\n\nasync function start(\n  scope: AgentWorkerScope,\n  port: Promise<MessagePort>,\n  options: AgentWorkerOptions\n): Promise<AgentHost> {\n  const attach: KernelAttach = options.attach ?? attachKernel;\n  const client = await attach(await port);\n  const native = scope.fetch.bind(scope);\n  scope.fetch = transportFetch(client.transport, scope.location.origin, native);\n  const facts = {\n    version: await agentVersion((url) => native(url)),\n    commands: await commandsOnPath(client),\n    transport: transportName(client.transport),\n    browser: await browserConnected(client),\n  };\n  const credentials = await (options.credentials ?? (() => EncryptedCredentialStore.open()))();\n  const providers = options.providers ?? sliccProviders();\n  const models = createSliccModels(credentials, providers);\n  const registry = createRegistry();\n  registry.install(CodingTools);\n  registry.install(sliccPrompt(facts));\n  registry.install(\n    imageReads(\n      (CodingTools.tools as readonly ToolRegistration[]).find(\n        (tool) => tool.name === 'read'\n      ) as ToolRegistration\n    )\n  );\n  const memory = setupMemory(registry);\n  const settings = await client.fs\n    .readFile(`${HOME}/.pi/agent/settings.json`)\n    .catch(() => undefined);\n  const coding = CodingTools.tools as readonly ToolRegistration[];\n  const mcp = setupMcp(registry);\n  const codemode = disabledBySettings(\n    settings === undefined ? undefined : new TextDecoder().decode(settings)\n  )\n    ? []\n    : [\n        codemodeTool({\n          declared: coding,\n          sandbox: sandboxFactory(\n            options.codemodeWasm ?? (() => locateWasm(native, new URL(import.meta.url))),\n            options.codemodeWorker\n          ),\n          extra: mcp.codemode,\n        }),\n      ];\n  registry.install(codemodeExtension(codemode));\n  const licks = setupLicks(registry);\n  const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);\n  const skills = setupSkills(registry, licks.licks);\n  const activity = createActivity();\n  const groups = processGroups(client);\n  const model = options.model ?? DEFAULT_MODEL;\n  let opened: Agent | undefined;\n  const environment = kernelEnvironment(client, {\n    activity,\n    groups,\n    identify: identity(() => opened?.agents, model),\n  });\n  const agent = await openAgent({\n    models,\n    model,\n    storage: await (options.storage ?? (() => openOpfsSqliteStorage()))(),\n    registry,\n    env: environment,\n  });\n  opened = agent;\n  const home = new SliccKernelEnv(client, { cwd: HOME });\n  const sources = licks.attach(agent, { env: home, home: HOME, activity });\n  await sources.start(BACKGROUND_CONTEXT);\n  await sources.boot(\n    { version: facts.version, boot: await kernelBoot(client) },\n    BACKGROUND_CONTEXT\n  );\n  const skillsRuntime = await skills.attach(\n    { env: home, home: HOME, assets: options.assets ?? packageAssets(), reloadMs: RELOAD_MS },\n    BACKGROUND_CONTEXT\n  );\n  const mcpRuntime = await mcp.attach(\n    {\n      env: home,\n      home: HOME,\n      credentials,\n      licks: licks.licks,\n      fetch: scope.fetch,\n      version: facts.version,\n      reloadMs: RELOAD_MS,\n      codemode: codemode.length > 0,\n      cors: client.transport.traits?.crossOrigin === 'cors',\n    },\n    BACKGROUND_CONTEXT\n  );\n  const gelatiere = lateGelatiere();\n  const sprinkles = await setupSprinkles().attach(\n    {\n      intercept: gelatiere.intercept,\n      harness: agent.harness,\n      agents: agent.agents,\n      licks: licks.licks,\n      env: home,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n    },\n    BACKGROUND_CONTEXT\n  );\n  let roles: ScoopsRuntime | undefined;\n  const memoryRuntime = await memory.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      env: home,\n      home: HOME,\n      reloadMs: RELOAD_MS,\n      roles: async (using) => roles?.roles(using),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const freezer = attachFreezer({\n    harness: agent.harness,\n    agents: agent.agents,\n    env: home,\n    extract: memory.extract,\n    title: titler(models, settingsText(home, HOME)),\n  });\n  licks.licks.guard(freezer.frozenTarget);\n  const runtime = await scoops.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      groups,\n      env: home,\n      home: HOME,\n      alive: alive(client),\n      reads: skillsRuntime.dirs,\n      sprinkle: sprinkles.command,\n      memory: memoryRuntime.command,\n      gelatiere: gelatiere.command,\n      freezer: freezer.command,\n      mcp: mcp.direct,\n      ...(options.assets ? { assets: options.assets } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  roles = runtime;\n  gelatiere.attach({\n    agents: agent.agents,\n    licks: licks.licks,\n    env: home,\n    home: HOME,\n    scoops: scoops.scoops,\n    roles: runtime.roles,\n    assets: options.assets ?? packageAssets(),\n    fetch: scope.fetch,\n    skills: skillsRuntime.skills,\n    ...(options.catalog ? { catalog: options.catalog } : {}),\n  });\n  await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => undefined);\n  const changes = attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS });\n  return hostAgent(agent, {\n    settings: await createAgentSettings(models, credentials, providers),\n    licks: { licks: licks.licks, sources },\n    scoops: { scoops: scoops.scoops, runtime },\n    skills: skillsRuntime,\n    sprinkles,\n    memory: memoryRuntime,\n    freezer,\n    changes,\n    mcp: mcpRuntime,\n  });\n}\n\nexport function alive(client: KernelClient) {\n  return async (pid: number): Promise<boolean> => {\n    if (!client.ps) return true;\n    return (await client.ps()).some((process) => process.pid === pid);\n  };\n}\n\nexport function runAgentWorker(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions = {}\n): Promise<AgentHost> {\n  const host = start(scope, kernelPort(scope), options);\n  host.catch(() => undefined);\n  serveConnections(scope, host);\n  return host;\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AAEnC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,mBAAmB;AAC5B,SAAqB,iBAAiB;AACtC,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,qBAAqB;AAC9B,SAAS,cAAc,cAAc;AACrC,SAAS,qBAAqB;AAC9B,SAAyB,iBAAiB;AAC1C,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAE/B,SAAS,MAAM,mBAAmB,sBAAsB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,mBAAmB;AAC5B,SAAyB,sBAAsB;AAC/C,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAsB,eAAmC,mBAAmB;AAC5E;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,mBAAmB;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAY,wBAA0C;AAqB/D,eAAe,MACb,OACA,MACA,SACoB;AACpB,QAAM,SAAuB,QAAQ,UAAU;AAC/C,QAAM,SAAS,MAAM,OAAO,MAAM,IAAI;AACtC,QAAM,SAAS,MAAM,MAAM,KAAK,KAAK;AACrC,QAAM,QAAQ,eAAe,OAAO,WAAW,MAAM,SAAS,QAAQ,MAAM;AAC5E,QAAM,QAAQ;AAAA,IACZ,SAAS,MAAM,aAAa,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAChD,UAAU,MAAM,eAAe,MAAM;AAAA,IACrC,WAAW,cAAc,OAAO,SAAS;AAAA,IACzC,SAAS,MAAM,iBAAiB,MAAM;AAAA,EACxC;AACA,QAAM,cAAc,OAAO,QAAQ,gBAAgB,MAAM,yBAAyB,KAAK,IAAI;AAC3F,QAAM,YAAY,QAAQ,aAAa,eAAe;AACtD,QAAM,SAAS,kBAAkB,aAAa,SAAS;AACvD,QAAM,WAAW,eAAe;AAChC,WAAS,QAAQ,WAAW;AAC5B,WAAS,QAAQ,YAAY,KAAK,CAAC;AACnC,WAAS;AAAA,IACP;AAAA,MACG,YAAY,MAAsC;AAAA,QACjD,CAAC,SAAS,KAAK,SAAS;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,WAAW,MAAM,OAAO,GAC3B,SAAS,GAAG,IAAI,0BAA0B,EAC1C,MAAM,MAAM,MAAS;AACxB,QAAM,SAAS,YAAY;AAC3B,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WAAW;AAAA,IACf,aAAa,SAAY,SAAY,IAAI,YAAY,EAAE,OAAO,QAAQ;AAAA,EACxE,IACI,CAAC,IACD;AAAA,IACE,aAAa;AAAA,MACX,UAAU;AAAA,MACV,SAAS;AAAA,QACP,QAAQ,iBAAiB,MAAM,WAAW,QAAQ,IAAI,IAAI,YAAY,GAAG,CAAC;AAAA,QAC1E,QAAQ;AAAA,MACV;AAAA,MACA,OAAO,IAAI;AAAA,IACb,CAAC;AAAA,EACH;AACJ,WAAS,QAAQ,kBAAkB,QAAQ,CAAC;AAC5C,QAAM,QAAQ,WAAW,QAAQ;AACjC,QAAM,SAAS,YAAY,UAAU,MAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,KAAK,CAAC;AAC3F,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK;AAChD,QAAM,WAAW,eAAe;AAChC,QAAM,SAAS,cAAc,MAAM;AACnC,QAAM,QAAQ,QAAQ,SAAS;AAC/B,MAAI;AACJ,QAAM,cAAc,kBAAkB,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,UAAU,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAChD,CAAC;AACD,QAAM,QAAQ,MAAM,UAAU;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,SAAS,OAAO,QAAQ,YAAY,MAAM,sBAAsB,IAAI;AAAA,IACpE;AAAA,IACA,KAAK;AAAA,EACP,CAAC;AACD,WAAS;AACT,QAAM,OAAO,IAAI,eAAe,QAAQ,EAAE,KAAK,KAAK,CAAC;AACrD,QAAM,UAAU,MAAM,OAAO,OAAO,EAAE,KAAK,MAAM,MAAM,MAAM,SAAS,CAAC;AACvE,QAAM,QAAQ,MAAM,kBAAkB;AACtC,QAAM,QAAQ;AAAA,IACZ,EAAE,SAAS,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM,EAAE;AAAA,IACzD;AAAA,EACF;AACA,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC,EAAE,KAAK,MAAM,MAAM,MAAM,QAAQ,QAAQ,UAAU,cAAc,GAAG,UAAU,UAAU;AAAA,IACxF;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAAA,IAC3B;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,OAAO,MAAM;AAAA,MACb,OAAO,MAAM;AAAA,MACb,SAAS,MAAM;AAAA,MACf,UAAU;AAAA,MACV,UAAU,SAAS,SAAS;AAAA,MAC5B,MAAM,OAAO,UAAU,QAAQ,gBAAgB;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,QAAM,YAAY,cAAc;AAChC,QAAM,YAAY,MAAM,eAAe,EAAE;AAAA,IACvC;AAAA,MACE,WAAW,UAAU;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,KAAK;AAAA,MACL,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,EACF;AACA,MAAI;AACJ,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,KAAK;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,OAAO,OAAO,UAAU,OAAO,MAAM,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,cAAc;AAAA,IAC5B,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,KAAK;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO,QAAQ,aAAa,MAAM,IAAI,CAAC;AAAA,EAChD,CAAC;AACD,QAAM,MAAM,MAAM,QAAQ,YAAY;AACtC,QAAM,UAAU,MAAM,OAAO;AAAA,IAC3B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,KAAK;AAAA,MACL,MAAM;AAAA,MACN,OAAO,MAAM,MAAM;AAAA,MACnB,OAAO,cAAc;AAAA,MACrB,UAAU,UAAU;AAAA,MACpB,QAAQ,cAAc;AAAA,MACtB,WAAW,UAAU;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,KAAK,IAAI;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AACA,UAAQ;AACR,YAAU,OAAO;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,KAAK;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ,UAAU,cAAc;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,QAAQ,cAAc;AAAA,IACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD,CAAC;AACD,QAAM,cAAc,OAAO,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACpE,QAAM,UAAU,cAAc,EAAE,QAAQ,MAAM,QAAQ,KAAK,MAAM,UAAU,WAAW,CAAC;AACvF,SAAO,UAAU,OAAO;AAAA,IACtB,UAAU,MAAM,oBAAoB,QAAQ,aAAa,SAAS;AAAA,IAClE,OAAO,EAAE,OAAO,MAAM,OAAO,QAAQ;AAAA,IACrC,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK;AAAA,EACP,CAAC;AACH;AAEO,SAAS,MAAM,QAAsB;AAC1C,SAAO,OAAO,QAAkC;AAC9C,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAQ,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG;AAAA,EAClE;AACF;AAEO,SAAS,eACd,OACA,UAA8B,CAAC,GACX;AACpB,QAAM,OAAO,MAAM,OAAO,WAAW,KAAK,GAAG,OAAO;AACpD,OAAK,MAAM,MAAM,MAAS;AAC1B,mBAAiB,OAAO,IAAI;AAC5B,SAAO;AACT;",
+  "sourcesContent": ["import { attachKernel } from '@ai-ecoverse/slicc-kernel';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { CredentialStore, Provider } from '@earendil-works/pi-ai';\nimport {\n  createRegistry,\n  type ModelRef,\n  type Storage,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { CodingTools } from '@earendil-works/pi-durable/tools';\nimport { type Agent, openAgent } from './agent.ts';\nimport { attachChanges, CHANGES_MS } from './changes/index.ts';\nimport {\n  codemodeExtension,\n  codemodeTool,\n  disabledBySettings,\n  locateWasm,\n  sandboxFactory,\n} from './codemode/index.ts';\nimport { EncryptedCredentialStore } from './credentials.ts';\nimport { attachFreezer } from './freezer/index.ts';\nimport { settingsText, titler } from './freezer/title.ts';\nimport { lateGelatiere } from './gelatiere/index.ts';\nimport { type AgentHost, hostAgent } from './host.ts';\nimport { imageReads } from './images/index.ts';\nimport { createActivity } from './kernel/activity.ts';\nimport type { KernelClient } from './kernel/client.ts';\nimport { HOME, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nimport { processGroups } from './kernel/groups.ts';\nimport { setupLicks } from './licks/index.ts';\nimport { setupMcp } from './mcp/index.ts';\nimport { setupMemory } from './memory/index.ts';\nimport { type Transport, transportFetch } from './net.ts';\nimport { sliccPrompt } from './prompt.ts';\nimport { identity } from './scoops/identity.ts';\nimport { type Assets, packageAssets, type ScoopsRuntime, setupScoops } from './scoops/index.ts';\nimport {\n  createAgentSettings,\n  createSliccModels,\n  DEFAULT_MODEL,\n  sliccProviders,\n} from './settings.ts';\nimport { RELOAD_MS, setupSkills } from './skills/index.ts';\nimport { setupSprinkles } from './sprinkles/index.ts';\nimport { openOpfsSqliteStorage } from './sqlite.ts';\nimport {\n  agentVersion,\n  browserConnected,\n  commandsOnPath,\n  kernelBoot,\n  transportName,\n} from './system.ts';\nimport { kernelPort, serveConnections, type WorkerScope } from './worker.ts';\n\nexport interface AgentWorkerScope extends WorkerScope {\n  fetch: typeof fetch;\n  location: { origin: string };\n}\n\nexport type KernelAttach = (port: MessagePort) => Promise<KernelClient & { transport: Transport }>;\n\nexport interface AgentWorkerOptions {\n  model?: ModelRef;\n  providers?: Provider[];\n  attach?: KernelAttach;\n  credentials?: () => Promise<CredentialStore>;\n  storage?: () => Promise<Storage>;\n  assets?: Assets;\n  codemodeWasm?: () => Promise<WebAssembly.Module | undefined>;\n  codemodeWorker?: string | URL;\n  catalog?: string;\n}\n\nasync function start(\n  scope: AgentWorkerScope,\n  port: Promise<MessagePort>,\n  options: AgentWorkerOptions\n): Promise<AgentHost> {\n  const attach: KernelAttach = options.attach ?? attachKernel;\n  const client = await attach(await port);\n  const native = scope.fetch.bind(scope);\n  scope.fetch = transportFetch(client.transport, scope.location.origin, native);\n  const facts = {\n    version: await agentVersion((url) => native(url)),\n    commands: await commandsOnPath(client),\n    transport: transportName(client.transport),\n    browser: await browserConnected(client),\n  };\n  const credentials = await (options.credentials ?? (() => EncryptedCredentialStore.open()))();\n  const providers = options.providers ?? sliccProviders();\n  const models = createSliccModels(credentials, providers);\n  const registry = createRegistry();\n  registry.install(CodingTools);\n  registry.install(sliccPrompt(facts));\n  registry.install(\n    imageReads(\n      (CodingTools.tools as readonly ToolRegistration[]).find(\n        (tool) => tool.name === 'read'\n      ) as ToolRegistration\n    )\n  );\n  const memory = setupMemory(registry);\n  const settings = await client.fs\n    .readFile(`${HOME}/.pi/agent/settings.json`)\n    .catch(() => undefined);\n  const coding = CodingTools.tools as readonly ToolRegistration[];\n  const mcp = setupMcp(registry);\n  const codemode = disabledBySettings(\n    settings === undefined ? undefined : new TextDecoder().decode(settings)\n  )\n    ? []\n    : [\n        codemodeTool({\n          declared: coding,\n          sandbox: sandboxFactory(\n            options.codemodeWasm ?? (() => locateWasm(native, new URL(import.meta.url))),\n            options.codemodeWorker\n          ),\n          extra: mcp.codemode,\n        }),\n      ];\n  registry.install(codemodeExtension(codemode));\n  const licks = setupLicks(registry);\n  const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);\n  const skills = setupSkills(registry, licks.licks);\n  const activity = createActivity();\n  const groups = processGroups(client);\n  const model = options.model ?? DEFAULT_MODEL;\n  let opened: Agent | undefined;\n  const environment = kernelEnvironment(client, {\n    activity,\n    groups,\n    identify: identity(() => opened?.agents, model),\n  });\n  const agent = await openAgent({\n    models,\n    model,\n    storage: await (options.storage ?? (() => openOpfsSqliteStorage()))(),\n    registry,\n    env: environment,\n  });\n  opened = agent;\n  const home = new SliccKernelEnv(client, { cwd: HOME });\n  const sources = licks.attach(agent, { env: home, home: HOME, activity });\n  await sources.start(BACKGROUND_CONTEXT);\n  await sources.boot(\n    { version: facts.version, boot: await kernelBoot(client) },\n    BACKGROUND_CONTEXT\n  );\n  const skillsRuntime = await skills.attach(\n    { env: home, home: HOME, assets: options.assets ?? packageAssets(), reloadMs: RELOAD_MS },\n    BACKGROUND_CONTEXT\n  );\n  const mcpRuntime = await mcp.attach(\n    {\n      env: home,\n      home: HOME,\n      credentials,\n      licks: licks.licks,\n      fetch: scope.fetch,\n      version: facts.version,\n      reloadMs: RELOAD_MS,\n      codemode: codemode.length > 0,\n      cors: client.transport.traits?.crossOrigin === 'cors',\n    },\n    BACKGROUND_CONTEXT\n  );\n  const gelatiere = lateGelatiere();\n  const sprinkles = await setupSprinkles().attach(\n    {\n      intercept: gelatiere.intercept,\n      harness: agent.harness,\n      agents: agent.agents,\n      licks: licks.licks,\n      env: home,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n    },\n    BACKGROUND_CONTEXT\n  );\n  let roles: ScoopsRuntime | undefined;\n  const memoryRuntime = await memory.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      env: home,\n      home: HOME,\n      reloadMs: RELOAD_MS,\n      roles: async (using) => roles?.roles(using),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const freezer = attachFreezer({\n    harness: agent.harness,\n    agents: agent.agents,\n    env: home,\n    extract: memory.extract,\n    title: titler(models, settingsText(home, HOME)),\n  });\n  licks.licks.guard(freezer.frozenTarget);\n  const runtime = await scoops.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      groups,\n      env: home,\n      home: HOME,\n      alive: alive(client),\n      reads: skillsRuntime.dirs,\n      sprinkle: sprinkles.command,\n      memory: memoryRuntime.command,\n      gelatiere: gelatiere.command,\n      freezer: freezer.command,\n      mcp: mcp.direct,\n      ...(options.assets ? { assets: options.assets } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  roles = runtime;\n  gelatiere.attach({\n    agents: agent.agents,\n    licks: licks.licks,\n    env: home,\n    home: HOME,\n    scoops: scoops.scoops,\n    roles: runtime.roles,\n    assets: options.assets ?? packageAssets(),\n    fetch: scope.fetch,\n    skills: skillsRuntime.skills,\n    ...(options.catalog ? { catalog: options.catalog } : {}),\n  });\n  await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => undefined);\n  const changes = attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS });\n  return hostAgent(agent, {\n    settings: await createAgentSettings(models, credentials, providers, { mcp: mcpRuntime }),\n    licks: { licks: licks.licks, sources },\n    scoops: { scoops: scoops.scoops, runtime },\n    skills: skillsRuntime,\n    sprinkles,\n    memory: memoryRuntime,\n    freezer,\n    changes,\n    mcp: mcpRuntime,\n  });\n}\n\nexport function alive(client: KernelClient) {\n  return async (pid: number): Promise<boolean> => {\n    if (!client.ps) return true;\n    return (await client.ps()).some((process) => process.pid === pid);\n  };\n}\n\nexport function runAgentWorker(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions = {}\n): Promise<AgentHost> {\n  const host = start(scope, kernelPort(scope), options);\n  host.catch(() => undefined);\n  serveConnections(scope, host);\n  return host;\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AAEnC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,mBAAmB;AAC5B,SAAqB,iBAAiB;AACtC,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,gCAAgC;AACzC,SAAS,qBAAqB;AAC9B,SAAS,cAAc,cAAc;AACrC,SAAS,qBAAqB;AAC9B,SAAyB,iBAAiB;AAC1C,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAE/B,SAAS,MAAM,mBAAmB,sBAAsB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAC3B,SAAS,gBAAgB;AACzB,SAAS,mBAAmB;AAC5B,SAAyB,sBAAsB;AAC/C,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAsB,eAAmC,mBAAmB;AAC5E;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,mBAAmB;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,YAAY,wBAA0C;AAqB/D,eAAe,MACb,OACA,MACA,SACoB;AACpB,QAAM,SAAuB,QAAQ,UAAU;AAC/C,QAAM,SAAS,MAAM,OAAO,MAAM,IAAI;AACtC,QAAM,SAAS,MAAM,MAAM,KAAK,KAAK;AACrC,QAAM,QAAQ,eAAe,OAAO,WAAW,MAAM,SAAS,QAAQ,MAAM;AAC5E,QAAM,QAAQ;AAAA,IACZ,SAAS,MAAM,aAAa,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAChD,UAAU,MAAM,eAAe,MAAM;AAAA,IACrC,WAAW,cAAc,OAAO,SAAS;AAAA,IACzC,SAAS,MAAM,iBAAiB,MAAM;AAAA,EACxC;AACA,QAAM,cAAc,OAAO,QAAQ,gBAAgB,MAAM,yBAAyB,KAAK,IAAI;AAC3F,QAAM,YAAY,QAAQ,aAAa,eAAe;AACtD,QAAM,SAAS,kBAAkB,aAAa,SAAS;AACvD,QAAM,WAAW,eAAe;AAChC,WAAS,QAAQ,WAAW;AAC5B,WAAS,QAAQ,YAAY,KAAK,CAAC;AACnC,WAAS;AAAA,IACP;AAAA,MACG,YAAY,MAAsC;AAAA,QACjD,CAAC,SAAS,KAAK,SAAS;AAAA,MAC1B;AAAA,IACF;AAAA,EACF;AACA,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,WAAW,MAAM,OAAO,GAC3B,SAAS,GAAG,IAAI,0BAA0B,EAC1C,MAAM,MAAM,MAAS;AACxB,QAAM,SAAS,YAAY;AAC3B,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WAAW;AAAA,IACf,aAAa,SAAY,SAAY,IAAI,YAAY,EAAE,OAAO,QAAQ;AAAA,EACxE,IACI,CAAC,IACD;AAAA,IACE,aAAa;AAAA,MACX,UAAU;AAAA,MACV,SAAS;AAAA,QACP,QAAQ,iBAAiB,MAAM,WAAW,QAAQ,IAAI,IAAI,YAAY,GAAG,CAAC;AAAA,QAC1E,QAAQ;AAAA,MACV;AAAA,MACA,OAAO,IAAI;AAAA,IACb,CAAC;AAAA,EACH;AACJ,WAAS,QAAQ,kBAAkB,QAAQ,CAAC;AAC5C,QAAM,QAAQ,WAAW,QAAQ;AACjC,QAAM,SAAS,YAAY,UAAU,MAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,KAAK,CAAC;AAC3F,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK;AAChD,QAAM,WAAW,eAAe;AAChC,QAAM,SAAS,cAAc,MAAM;AACnC,QAAM,QAAQ,QAAQ,SAAS;AAC/B,MAAI;AACJ,QAAM,cAAc,kBAAkB,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,UAAU,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,EAChD,CAAC;AACD,QAAM,QAAQ,MAAM,UAAU;AAAA,IAC5B;AAAA,IACA;AAAA,IACA,SAAS,OAAO,QAAQ,YAAY,MAAM,sBAAsB,IAAI;AAAA,IACpE;AAAA,IACA,KAAK;AAAA,EACP,CAAC;AACD,WAAS;AACT,QAAM,OAAO,IAAI,eAAe,QAAQ,EAAE,KAAK,KAAK,CAAC;AACrD,QAAM,UAAU,MAAM,OAAO,OAAO,EAAE,KAAK,MAAM,MAAM,MAAM,SAAS,CAAC;AACvE,QAAM,QAAQ,MAAM,kBAAkB;AACtC,QAAM,QAAQ;AAAA,IACZ,EAAE,SAAS,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM,EAAE;AAAA,IACzD;AAAA,EACF;AACA,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC,EAAE,KAAK,MAAM,MAAM,MAAM,QAAQ,QAAQ,UAAU,cAAc,GAAG,UAAU,UAAU;AAAA,IACxF;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAAA,IAC3B;AAAA,MACE,KAAK;AAAA,MACL,MAAM;AAAA,MACN;AAAA,MACA,OAAO,MAAM;AAAA,MACb,OAAO,MAAM;AAAA,MACb,SAAS,MAAM;AAAA,MACf,UAAU;AAAA,MACV,UAAU,SAAS,SAAS;AAAA,MAC5B,MAAM,OAAO,UAAU,QAAQ,gBAAgB;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,QAAM,YAAY,cAAc;AAChC,QAAM,YAAY,MAAM,eAAe,EAAE;AAAA,IACvC;AAAA,MACE,WAAW,UAAU;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,KAAK;AAAA,MACL,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,IACZ;AAAA,IACA;AAAA,EACF;AACA,MAAI;AACJ,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,KAAK;AAAA,MACL,MAAM;AAAA,MACN,UAAU;AAAA,MACV,OAAO,OAAO,UAAU,OAAO,MAAM,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,cAAc;AAAA,IAC5B,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,KAAK;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO,QAAQ,aAAa,MAAM,IAAI,CAAC;AAAA,EAChD,CAAC;AACD,QAAM,MAAM,MAAM,QAAQ,YAAY;AACtC,QAAM,UAAU,MAAM,OAAO;AAAA,IAC3B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,KAAK;AAAA,MACL,MAAM;AAAA,MACN,OAAO,MAAM,MAAM;AAAA,MACnB,OAAO,cAAc;AAAA,MACrB,UAAU,UAAU;AAAA,MACpB,QAAQ,cAAc;AAAA,MACtB,WAAW,UAAU;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,KAAK,IAAI;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AACA,UAAQ;AACR,YAAU,OAAO;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,KAAK;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ,UAAU,cAAc;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,QAAQ,cAAc;AAAA,IACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD,CAAC;AACD,QAAM,cAAc,OAAO,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACpE,QAAM,UAAU,cAAc,EAAE,QAAQ,MAAM,QAAQ,KAAK,MAAM,UAAU,WAAW,CAAC;AACvF,SAAO,UAAU,OAAO;AAAA,IACtB,UAAU,MAAM,oBAAoB,QAAQ,aAAa,WAAW,EAAE,KAAK,WAAW,CAAC;AAAA,IACvF,OAAO,EAAE,OAAO,MAAM,OAAO,QAAQ;AAAA,IACrC,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK;AAAA,EACP,CAAC;AACH;AAEO,SAAS,MAAM,QAAsB;AAC1C,SAAO,OAAO,QAAkC;AAC9C,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAQ,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG;AAAA,EAClE;AACF;AAEO,SAAS,eACd,OACA,UAA8B,CAAC,GACX;AACpB,QAAM,OAAO,MAAM,OAAO,WAAW,KAAK,GAAG,OAAO;AACpD,OAAK,MAAM,MAAM,MAAS;AAC1B,mBAAiB,OAAO,IAAI;AAC5B,SAAO;AACT;",
   "names": []
 }

package/dist/mcp/config.js

@@ -56,7 +56,7 @@ function checkHeaders(name, headers) {
     if (literalSecret(header, value))
       return fail(
         name,
-        `headers.${header} holds a literal secret. mcp.json is readable by every agent: write \${NAME} instead, and add the value in Settings \u203A Accounts`,
+        `headers.${header} holds a literal secret. mcp.json is readable by every agent: write \${NAME} instead, and add the value in Settings \u203A MCP servers`,
         `headers.${header}`
       );
   }
@@ -101,7 +101,7 @@ function checkTransport(name, value) {
   if (secret)
     return fail(
       name,
-      `${secret} holds a literal secret. Put it in a header as \${NAME} and add the value in Settings \u203A Accounts`,
+      `${secret} holds a literal secret. Put it in a header as \${NAME} and add the value in Settings \u203A MCP servers`,
       "url"
     );
   return void 0;

package/dist/mcp/config.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/mcp/config.ts"],
-  "sourcesContent": ["import { hash } from '../licks/sources.ts';\n\nexport type McpExposure = 'codemode' | 'deferred' | 'direct' | 'hidden';\n\nexport interface McpServerConfig {\n  url: string;\n  headers?: Record<string, string>;\n  exposure?: McpExposure;\n  toolExposure?: Record<string, McpExposure>;\n  enabled?: boolean;\n  timeout?: number;\n  description?: string;\n}\n\nexport interface McpServerEntry {\n  name: string;\n  config: McpServerConfig;\n}\n\nexport interface McpConfigProblem {\n  server?: string;\n  field?: string;\n  message: string;\n}\n\nexport interface McpConfig {\n  servers: McpServerEntry[];\n  problems: McpConfigProblem[];\n}\n\nconst SERVER_NAME = /^[A-Za-z0-9_-]+$/;\nconst EXPOSURES: readonly string[] = ['codemode', 'deferred', 'direct', 'hidden'];\nconst ALIASES: Record<string, McpExposure> = { 'codemode-deferred': 'codemode' };\nconst ACCEPTED = new Set([\n  'type',\n  'url',\n  'headers',\n  'exposure',\n  'toolExposure',\n  'enabled',\n  'timeout',\n  'description',\n]);\nconst SECRET_HEADER = /authorization|cookie|token|key|secret|password|session/i;\nconst SECRET_PARAM = /token|key|secret|password|signature|sig|auth|code/i;\nconst PLACEHOLDER = /\\$\\{([A-Za-z_][A-Za-z0-9_]*)\\}/g;\nconst SCHEME = /^\\s*(?:bearer|basic|token|apikey|api-key)\\s+/i;\nconst MAX_TOOL_NAME = 64;\nexport const DEFAULT_TIMEOUT_SECONDS = 60;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction alias(value: unknown): unknown {\n  return typeof value === 'string' ? (ALIASES[value] ?? value) : value;\n}\n\nfunction isExposure(value: unknown): value is McpExposure {\n  return typeof value === 'string' && EXPOSURES.includes(value);\n}\n\nexport function placeholders(value: string): string[] {\n  return [...value.matchAll(PLACEHOLDER)].map((match) => match[1] as string);\n}\n\nexport function literalSecret(header: string, value: string): boolean {\n  if (!SECRET_HEADER.test(header)) return false;\n  return value.replace(PLACEHOLDER, '').replace(SCHEME, '').trim() !== '';\n}\n\nfunction urlSecret(url: URL): string | undefined {\n  if (url.username || url.password) return 'url';\n  for (const name of url.searchParams.keys()) if (SECRET_PARAM.test(name)) return `url ?${name}`;\n  return undefined;\n}\n\ntype Checked = McpServerConfig | McpConfigProblem;\n\nfunction fail(server: string, message: string, field?: string): McpConfigProblem {\n  return { server, ...(field ? { field } : {}), message };\n}\n\nfunction checkHeaders(name: string, headers: unknown): McpConfigProblem | undefined {\n  if (headers === undefined) return undefined;\n  if (!isRecord(headers) || !Object.values(headers).every((value) => typeof value === 'string'))\n    return fail(name, 'headers must map names to strings', 'headers');\n  for (const [header, value] of Object.entries(headers as Record<string, string>)) {\n    if (value.trim().startsWith('!'))\n      return fail(\n        name,\n        `headers.${header} runs a command, which SLICC can't do`,\n        `headers.${header}`\n      );\n    if (literalSecret(header, value))\n      return fail(\n        name,\n        `headers.${header} holds a literal secret. mcp.json is readable by every agent: write \\${NAME} instead, and add the value in Settings \u203A Accounts`,\n        `headers.${header}`\n      );\n  }\n  return undefined;\n}\n\nfunction checkExposures(\n  name: string,\n  value: Record<string, unknown>\n): McpConfigProblem | undefined {\n  const allowed = EXPOSURES.map((item) => `\"${item}\"`).join(', ');\n  if (value.exposure !== undefined && !isExposure(value.exposure))\n    return fail(name, `exposure must be one of ${allowed}`, 'exposure');\n  if (value.toolExposure === undefined) return undefined;\n  if (!isRecord(value.toolExposure))\n    return fail(name, 'toolExposure must map tool names to exposures', 'toolExposure');\n  for (const [tool, exposure] of Object.entries(value.toolExposure))\n    if (!isExposure(exposure))\n      return fail(name, `toolExposure \"${tool}\" must be one of ${allowed}`, `toolExposure.${tool}`);\n  return undefined;\n}\n\nfunction checkFields(name: string, value: Record<string, unknown>): McpConfigProblem | undefined {\n  if (value.enabled !== undefined && typeof value.enabled !== 'boolean')\n    return fail(name, 'enabled must be a boolean', 'enabled');\n  if (value.description !== undefined && typeof value.description !== 'string')\n    return fail(name, 'description must be a string', 'description');\n  if (value.timeout !== undefined && (typeof value.timeout !== 'number' || !(value.timeout > 0)))\n    return fail(name, 'timeout must be a positive number of seconds', 'timeout');\n  return undefined;\n}\n\nfunction checkTransport(\n  name: string,\n  value: Record<string, unknown>\n): McpConfigProblem | undefined {\n  if (value.command !== undefined || value.type === 'stdio')\n    return fail(name, 'stdio servers need slicc-kernel#68, so this one is skipped', 'command');\n  if (value.type === 'sse')\n    return fail(\n      name,\n      'the legacy SSE transport is not supported; use the streamable HTTP URL',\n      'type'\n    );\n  if (value.type !== undefined && value.type !== 'http' && value.type !== 'streamable-http')\n    return fail(name, 'type must be \"http\" or \"streamable-http\"', 'type');\n  if (typeof value.url !== 'string') return fail(name, 'needs a \"url\" (streamable HTTP)', 'url');\n  if (!URL.canParse(value.url) || !/^https?:$/.test(new URL(value.url).protocol))\n    return fail(name, 'url must be an http or https URL', 'url');\n  const secret = urlSecret(new URL(value.url));\n  if (secret)\n    return fail(\n      name,\n      `${secret} holds a literal secret. Put it in a header as \\${NAME} and add the value in Settings \u203A Accounts`,\n      'url'\n    );\n  return undefined;\n}\n\nexport function validateServer(name: string, raw: unknown): Checked {\n  if (!SERVER_NAME.test(name))\n    return fail(name, `invalid server name \"${name}\" (use letters, digits, \"_\" and \"-\")`);\n  if (!isRecord(raw)) return fail(name, 'must be an object');\n  const value: Record<string, unknown> = { ...raw, exposure: alias(raw.exposure) };\n  if (raw.exposure === undefined) delete value.exposure;\n  if (isRecord(raw.toolExposure))\n    value.toolExposure = Object.fromEntries(\n      Object.entries(raw.toolExposure).map(([tool, exposure]) => [tool, alias(exposure)])\n    );\n  for (const key of Object.keys(value))\n    if (key === 'oauth' || key === 'auth')\n      return fail(name, `${key} is not supported in SLICC yet`, key);\n  const problem =\n    checkTransport(name, value) ??\n    checkHeaders(name, value.headers) ??\n    checkExposures(name, value) ??\n    checkFields(name, value);\n  if (problem) return problem;\n  const config: Record<string, unknown> = {};\n  for (const [key, entry] of Object.entries(value))\n    if (ACCEPTED.has(key) && key !== 'type') config[key] = entry;\n  return config as unknown as McpServerConfig;\n}\n\nfunction canonical(name: string): string {\n  return name.replace(/-/g, '_');\n}\n\nexport function parseMcpConfig(text: string | undefined): McpConfig {\n  if (text === undefined || text.trim() === '') return { servers: [], problems: [] };\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch (error) {\n    return { servers: [], problems: [{ message: `not valid JSON: ${(error as Error).message}` }] };\n  }\n  if (!isRecord(parsed) || (parsed.mcpServers !== undefined && !isRecord(parsed.mcpServers)))\n    return { servers: [], problems: [{ message: 'mcpServers must be an object' }] };\n  const servers: McpServerEntry[] = [];\n  const problems: McpConfigProblem[] = [];\n  const seen = new Set<string>();\n  for (const [name, raw] of Object.entries((parsed.mcpServers ?? {}) as Record<string, unknown>)) {\n    const checked = validateServer(name, raw);\n    if ('message' in checked) {\n      problems.push(checked);\n      continue;\n    }\n    if (seen.has(canonical(name))) {\n      problems.push(fail(name, 'names that differ only in \"-\" and \"_\" count as the same server'));\n      continue;\n    }\n    seen.add(canonical(name));\n    servers.push({ name, config: checked });\n  }\n  return { servers, problems };\n}\n\nfunction patternRegExp(pattern: string): RegExp {\n  const source = pattern\n    .split('*')\n    .map((part) => part.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&'))\n    .join('.*');\n  return new RegExp(`^${source}$`);\n}\n\nexport function nameMatcher(entries: readonly string[]): (name: string) => boolean {\n  const names = new Set(entries.filter((entry) => !entry.includes('*')));\n  const patterns = entries.filter((entry) => entry.includes('*')).map(patternRegExp);\n  return (name) => names.has(name) || patterns.some((pattern) => pattern.test(name));\n}\n\nexport function toolExposure(config: McpServerConfig, tool: string): McpExposure {\n  const overrides = config.toolExposure ?? {};\n  const exact = overrides[tool];\n  if (exact !== undefined) return exact;\n  for (const [pattern, exposure] of Object.entries(overrides))\n    if (pattern.includes('*') && patternRegExp(pattern).test(tool)) return exposure;\n  return config.exposure ?? 'codemode';\n}\n\nexport function mcpNamespace(server: string): string {\n  return `mcp__${canonical(server)}`;\n}\n\nexport function mcpToolName(\n  server: string,\n  tool: string,\n  taken: (name: string) => boolean = () => false\n): string {\n  const name = `mcp__${server}__${tool}`.replace(/[^A-Za-z0-9_]/g, '_');\n  if (name.length <= MAX_TOOL_NAME && !taken(name)) return name;\n  const suffix = hash(`${server}\\0${tool}`).padStart(7, '0').slice(0, 7);\n  return `${name.slice(0, MAX_TOOL_NAME - suffix.length - 1)}_${suffix}`;\n}\n\nexport function sameConfig(a: McpServerConfig, b: McpServerConfig): boolean {\n  return JSON.stringify(a) === JSON.stringify(b);\n}\n"],
+  "sourcesContent": ["import { hash } from '../licks/sources.ts';\n\nexport type McpExposure = 'codemode' | 'deferred' | 'direct' | 'hidden';\n\nexport interface McpServerConfig {\n  url: string;\n  headers?: Record<string, string>;\n  exposure?: McpExposure;\n  toolExposure?: Record<string, McpExposure>;\n  enabled?: boolean;\n  timeout?: number;\n  description?: string;\n}\n\nexport interface McpServerEntry {\n  name: string;\n  config: McpServerConfig;\n}\n\nexport interface McpConfigProblem {\n  server?: string;\n  field?: string;\n  message: string;\n}\n\nexport interface McpConfig {\n  servers: McpServerEntry[];\n  problems: McpConfigProblem[];\n}\n\nconst SERVER_NAME = /^[A-Za-z0-9_-]+$/;\nconst EXPOSURES: readonly string[] = ['codemode', 'deferred', 'direct', 'hidden'];\nconst ALIASES: Record<string, McpExposure> = { 'codemode-deferred': 'codemode' };\nconst ACCEPTED = new Set([\n  'type',\n  'url',\n  'headers',\n  'exposure',\n  'toolExposure',\n  'enabled',\n  'timeout',\n  'description',\n]);\nconst SECRET_HEADER = /authorization|cookie|token|key|secret|password|session/i;\nconst SECRET_PARAM = /token|key|secret|password|signature|sig|auth|code/i;\nconst PLACEHOLDER = /\\$\\{([A-Za-z_][A-Za-z0-9_]*)\\}/g;\nconst SCHEME = /^\\s*(?:bearer|basic|token|apikey|api-key)\\s+/i;\nconst MAX_TOOL_NAME = 64;\nexport const DEFAULT_TIMEOUT_SECONDS = 60;\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction alias(value: unknown): unknown {\n  return typeof value === 'string' ? (ALIASES[value] ?? value) : value;\n}\n\nfunction isExposure(value: unknown): value is McpExposure {\n  return typeof value === 'string' && EXPOSURES.includes(value);\n}\n\nexport function placeholders(value: string): string[] {\n  return [...value.matchAll(PLACEHOLDER)].map((match) => match[1] as string);\n}\n\nexport function literalSecret(header: string, value: string): boolean {\n  if (!SECRET_HEADER.test(header)) return false;\n  return value.replace(PLACEHOLDER, '').replace(SCHEME, '').trim() !== '';\n}\n\nfunction urlSecret(url: URL): string | undefined {\n  if (url.username || url.password) return 'url';\n  for (const name of url.searchParams.keys()) if (SECRET_PARAM.test(name)) return `url ?${name}`;\n  return undefined;\n}\n\ntype Checked = McpServerConfig | McpConfigProblem;\n\nfunction fail(server: string, message: string, field?: string): McpConfigProblem {\n  return { server, ...(field ? { field } : {}), message };\n}\n\nfunction checkHeaders(name: string, headers: unknown): McpConfigProblem | undefined {\n  if (headers === undefined) return undefined;\n  if (!isRecord(headers) || !Object.values(headers).every((value) => typeof value === 'string'))\n    return fail(name, 'headers must map names to strings', 'headers');\n  for (const [header, value] of Object.entries(headers as Record<string, string>)) {\n    if (value.trim().startsWith('!'))\n      return fail(\n        name,\n        `headers.${header} runs a command, which SLICC can't do`,\n        `headers.${header}`\n      );\n    if (literalSecret(header, value))\n      return fail(\n        name,\n        `headers.${header} holds a literal secret. mcp.json is readable by every agent: write \\${NAME} instead, and add the value in Settings \u203A MCP servers`,\n        `headers.${header}`\n      );\n  }\n  return undefined;\n}\n\nfunction checkExposures(\n  name: string,\n  value: Record<string, unknown>\n): McpConfigProblem | undefined {\n  const allowed = EXPOSURES.map((item) => `\"${item}\"`).join(', ');\n  if (value.exposure !== undefined && !isExposure(value.exposure))\n    return fail(name, `exposure must be one of ${allowed}`, 'exposure');\n  if (value.toolExposure === undefined) return undefined;\n  if (!isRecord(value.toolExposure))\n    return fail(name, 'toolExposure must map tool names to exposures', 'toolExposure');\n  for (const [tool, exposure] of Object.entries(value.toolExposure))\n    if (!isExposure(exposure))\n      return fail(name, `toolExposure \"${tool}\" must be one of ${allowed}`, `toolExposure.${tool}`);\n  return undefined;\n}\n\nfunction checkFields(name: string, value: Record<string, unknown>): McpConfigProblem | undefined {\n  if (value.enabled !== undefined && typeof value.enabled !== 'boolean')\n    return fail(name, 'enabled must be a boolean', 'enabled');\n  if (value.description !== undefined && typeof value.description !== 'string')\n    return fail(name, 'description must be a string', 'description');\n  if (value.timeout !== undefined && (typeof value.timeout !== 'number' || !(value.timeout > 0)))\n    return fail(name, 'timeout must be a positive number of seconds', 'timeout');\n  return undefined;\n}\n\nfunction checkTransport(\n  name: string,\n  value: Record<string, unknown>\n): McpConfigProblem | undefined {\n  if (value.command !== undefined || value.type === 'stdio')\n    return fail(name, 'stdio servers need slicc-kernel#68, so this one is skipped', 'command');\n  if (value.type === 'sse')\n    return fail(\n      name,\n      'the legacy SSE transport is not supported; use the streamable HTTP URL',\n      'type'\n    );\n  if (value.type !== undefined && value.type !== 'http' && value.type !== 'streamable-http')\n    return fail(name, 'type must be \"http\" or \"streamable-http\"', 'type');\n  if (typeof value.url !== 'string') return fail(name, 'needs a \"url\" (streamable HTTP)', 'url');\n  if (!URL.canParse(value.url) || !/^https?:$/.test(new URL(value.url).protocol))\n    return fail(name, 'url must be an http or https URL', 'url');\n  const secret = urlSecret(new URL(value.url));\n  if (secret)\n    return fail(\n      name,\n      `${secret} holds a literal secret. Put it in a header as \\${NAME} and add the value in Settings \u203A MCP servers`,\n      'url'\n    );\n  return undefined;\n}\n\nexport function validateServer(name: string, raw: unknown): Checked {\n  if (!SERVER_NAME.test(name))\n    return fail(name, `invalid server name \"${name}\" (use letters, digits, \"_\" and \"-\")`);\n  if (!isRecord(raw)) return fail(name, 'must be an object');\n  const value: Record<string, unknown> = { ...raw, exposure: alias(raw.exposure) };\n  if (raw.exposure === undefined) delete value.exposure;\n  if (isRecord(raw.toolExposure))\n    value.toolExposure = Object.fromEntries(\n      Object.entries(raw.toolExposure).map(([tool, exposure]) => [tool, alias(exposure)])\n    );\n  for (const key of Object.keys(value))\n    if (key === 'oauth' || key === 'auth')\n      return fail(name, `${key} is not supported in SLICC yet`, key);\n  const problem =\n    checkTransport(name, value) ??\n    checkHeaders(name, value.headers) ??\n    checkExposures(name, value) ??\n    checkFields(name, value);\n  if (problem) return problem;\n  const config: Record<string, unknown> = {};\n  for (const [key, entry] of Object.entries(value))\n    if (ACCEPTED.has(key) && key !== 'type') config[key] = entry;\n  return config as unknown as McpServerConfig;\n}\n\nfunction canonical(name: string): string {\n  return name.replace(/-/g, '_');\n}\n\nexport function parseMcpConfig(text: string | undefined): McpConfig {\n  if (text === undefined || text.trim() === '') return { servers: [], problems: [] };\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text);\n  } catch (error) {\n    return { servers: [], problems: [{ message: `not valid JSON: ${(error as Error).message}` }] };\n  }\n  if (!isRecord(parsed) || (parsed.mcpServers !== undefined && !isRecord(parsed.mcpServers)))\n    return { servers: [], problems: [{ message: 'mcpServers must be an object' }] };\n  const servers: McpServerEntry[] = [];\n  const problems: McpConfigProblem[] = [];\n  const seen = new Set<string>();\n  for (const [name, raw] of Object.entries((parsed.mcpServers ?? {}) as Record<string, unknown>)) {\n    const checked = validateServer(name, raw);\n    if ('message' in checked) {\n      problems.push(checked);\n      continue;\n    }\n    if (seen.has(canonical(name))) {\n      problems.push(fail(name, 'names that differ only in \"-\" and \"_\" count as the same server'));\n      continue;\n    }\n    seen.add(canonical(name));\n    servers.push({ name, config: checked });\n  }\n  return { servers, problems };\n}\n\nfunction patternRegExp(pattern: string): RegExp {\n  const source = pattern\n    .split('*')\n    .map((part) => part.replace(/[.+?^${}()|[\\]\\\\]/g, '\\\\$&'))\n    .join('.*');\n  return new RegExp(`^${source}$`);\n}\n\nexport function nameMatcher(entries: readonly string[]): (name: string) => boolean {\n  const names = new Set(entries.filter((entry) => !entry.includes('*')));\n  const patterns = entries.filter((entry) => entry.includes('*')).map(patternRegExp);\n  return (name) => names.has(name) || patterns.some((pattern) => pattern.test(name));\n}\n\nexport function toolExposure(config: McpServerConfig, tool: string): McpExposure {\n  const overrides = config.toolExposure ?? {};\n  const exact = overrides[tool];\n  if (exact !== undefined) return exact;\n  for (const [pattern, exposure] of Object.entries(overrides))\n    if (pattern.includes('*') && patternRegExp(pattern).test(tool)) return exposure;\n  return config.exposure ?? 'codemode';\n}\n\nexport function mcpNamespace(server: string): string {\n  return `mcp__${canonical(server)}`;\n}\n\nexport function mcpToolName(\n  server: string,\n  tool: string,\n  taken: (name: string) => boolean = () => false\n): string {\n  const name = `mcp__${server}__${tool}`.replace(/[^A-Za-z0-9_]/g, '_');\n  if (name.length <= MAX_TOOL_NAME && !taken(name)) return name;\n  const suffix = hash(`${server}\\0${tool}`).padStart(7, '0').slice(0, 7);\n  return `${name.slice(0, MAX_TOOL_NAME - suffix.length - 1)}_${suffix}`;\n}\n\nexport function sameConfig(a: McpServerConfig, b: McpServerConfig): boolean {\n  return JSON.stringify(a) === JSON.stringify(b);\n}\n"],
   "mappings": "AAAA,SAAS,YAAY;AA8BrB,MAAM,cAAc;AACpB,MAAM,YAA+B,CAAC,YAAY,YAAY,UAAU,QAAQ;AAChF,MAAM,UAAuC,EAAE,qBAAqB,WAAW;AAC/E,MAAM,WAAW,oBAAI,IAAI;AAAA,EACvB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AACD,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,cAAc;AACpB,MAAM,SAAS;AACf,MAAM,gBAAgB;AACf,MAAM,0BAA0B;AAEvC,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,MAAM,OAAyB;AACtC,SAAO,OAAO,UAAU,WAAY,QAAQ,KAAK,KAAK,QAAS;AACjE;AAEA,SAAS,WAAW,OAAsC;AACxD,SAAO,OAAO,UAAU,YAAY,UAAU,SAAS,KAAK;AAC9D;AAEO,SAAS,aAAa,OAAyB;AACpD,SAAO,CAAC,GAAG,MAAM,SAAS,WAAW,CAAC,EAAE,IAAI,CAAC,UAAU,MAAM,CAAC,CAAW;AAC3E;AAEO,SAAS,cAAc,QAAgB,OAAwB;AACpE,MAAI,CAAC,cAAc,KAAK,MAAM,EAAG,QAAO;AACxC,SAAO,MAAM,QAAQ,aAAa,EAAE,EAAE,QAAQ,QAAQ,EAAE,EAAE,KAAK,MAAM;AACvE;AAEA,SAAS,UAAU,KAA8B;AAC/C,MAAI,IAAI,YAAY,IAAI,SAAU,QAAO;AACzC,aAAW,QAAQ,IAAI,aAAa,KAAK,EAAG,KAAI,aAAa,KAAK,IAAI,EAAG,QAAO,QAAQ,IAAI;AAC5F,SAAO;AACT;AAIA,SAAS,KAAK,QAAgB,SAAiB,OAAkC;AAC/E,SAAO,EAAE,QAAQ,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC,GAAI,QAAQ;AACxD;AAEA,SAAS,aAAa,MAAc,SAAgD;AAClF,MAAI,YAAY,OAAW,QAAO;AAClC,MAAI,CAAC,SAAS,OAAO,KAAK,CAAC,OAAO,OAAO,OAAO,EAAE,MAAM,CAAC,UAAU,OAAO,UAAU,QAAQ;AAC1F,WAAO,KAAK,MAAM,qCAAqC,SAAS;AAClE,aAAW,CAAC,QAAQ,KAAK,KAAK,OAAO,QAAQ,OAAiC,GAAG;AAC/E,QAAI,MAAM,KAAK,EAAE,WAAW,GAAG;AAC7B,aAAO;AAAA,QACL;AAAA,QACA,WAAW,MAAM;AAAA,QACjB,WAAW,MAAM;AAAA,MACnB;AACF,QAAI,cAAc,QAAQ,KAAK;AAC7B,aAAO;AAAA,QACL;AAAA,QACA,WAAW,MAAM;AAAA,QACjB,WAAW,MAAM;AAAA,MACnB;AAAA,EACJ;AACA,SAAO;AACT;AAEA,SAAS,eACP,MACA,OAC8B;AAC9B,QAAM,UAAU,UAAU,IAAI,CAAC,SAAS,IAAI,IAAI,GAAG,EAAE,KAAK,IAAI;AAC9D,MAAI,MAAM,aAAa,UAAa,CAAC,WAAW,MAAM,QAAQ;AAC5D,WAAO,KAAK,MAAM,2BAA2B,OAAO,IAAI,UAAU;AACpE,MAAI,MAAM,iBAAiB,OAAW,QAAO;AAC7C,MAAI,CAAC,SAAS,MAAM,YAAY;AAC9B,WAAO,KAAK,MAAM,iDAAiD,cAAc;AACnF,aAAW,CAAC,MAAM,QAAQ,KAAK,OAAO,QAAQ,MAAM,YAAY;AAC9D,QAAI,CAAC,WAAW,QAAQ;AACtB,aAAO,KAAK,MAAM,iBAAiB,IAAI,oBAAoB,OAAO,IAAI,gBAAgB,IAAI,EAAE;AAChG,SAAO;AACT;AAEA,SAAS,YAAY,MAAc,OAA8D;AAC/F,MAAI,MAAM,YAAY,UAAa,OAAO,MAAM,YAAY;AAC1D,WAAO,KAAK,MAAM,6BAA6B,SAAS;AAC1D,MAAI,MAAM,gBAAgB,UAAa,OAAO,MAAM,gBAAgB;AAClE,WAAO,KAAK,MAAM,gCAAgC,aAAa;AACjE,MAAI,MAAM,YAAY,WAAc,OAAO,MAAM,YAAY,YAAY,EAAE,MAAM,UAAU;AACzF,WAAO,KAAK,MAAM,gDAAgD,SAAS;AAC7E,SAAO;AACT;AAEA,SAAS,eACP,MACA,OAC8B;AAC9B,MAAI,MAAM,YAAY,UAAa,MAAM,SAAS;AAChD,WAAO,KAAK,MAAM,8DAA8D,SAAS;AAC3F,MAAI,MAAM,SAAS;AACjB,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACF,MAAI,MAAM,SAAS,UAAa,MAAM,SAAS,UAAU,MAAM,SAAS;AACtE,WAAO,KAAK,MAAM,4CAA4C,MAAM;AACtE,MAAI,OAAO,MAAM,QAAQ,SAAU,QAAO,KAAK,MAAM,mCAAmC,KAAK;AAC7F,MAAI,CAAC,IAAI,SAAS,MAAM,GAAG,KAAK,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,GAAG,EAAE,QAAQ;AAC3E,WAAO,KAAK,MAAM,oCAAoC,KAAK;AAC7D,QAAM,SAAS,UAAU,IAAI,IAAI,MAAM,GAAG,CAAC;AAC3C,MAAI;AACF,WAAO;AAAA,MACL;AAAA,MACA,GAAG,MAAM;AAAA,MACT;AAAA,IACF;AACF,SAAO;AACT;AAEO,SAAS,eAAe,MAAc,KAAuB;AAClE,MAAI,CAAC,YAAY,KAAK,IAAI;AACxB,WAAO,KAAK,MAAM,wBAAwB,IAAI,sCAAsC;AACtF,MAAI,CAAC,SAAS,GAAG,EAAG,QAAO,KAAK,MAAM,mBAAmB;AACzD,QAAM,QAAiC,EAAE,GAAG,KAAK,UAAU,MAAM,IAAI,QAAQ,EAAE;AAC/E,MAAI,IAAI,aAAa,OAAW,QAAO,MAAM;AAC7C,MAAI,SAAS,IAAI,YAAY;AAC3B,UAAM,eAAe,OAAO;AAAA,MAC1B,OAAO,QAAQ,IAAI,YAAY,EAAE,IAAI,CAAC,CAAC,MAAM,QAAQ,MAAM,CAAC,MAAM,MAAM,QAAQ,CAAC,CAAC;AAAA,IACpF;AACF,aAAW,OAAO,OAAO,KAAK,KAAK;AACjC,QAAI,QAAQ,WAAW,QAAQ;AAC7B,aAAO,KAAK,MAAM,GAAG,GAAG,kCAAkC,GAAG;AACjE,QAAM,UACJ,eAAe,MAAM,KAAK,KAC1B,aAAa,MAAM,MAAM,OAAO,KAChC,eAAe,MAAM,KAAK,KAC1B,YAAY,MAAM,KAAK;AACzB,MAAI,QAAS,QAAO;AACpB,QAAM,SAAkC,CAAC;AACzC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK;AAC7C,QAAI,SAAS,IAAI,GAAG,KAAK,QAAQ,OAAQ,QAAO,GAAG,IAAI;AACzD,SAAO;AACT;AAEA,SAAS,UAAU,MAAsB;AACvC,SAAO,KAAK,QAAQ,MAAM,GAAG;AAC/B;AAEO,SAAS,eAAe,MAAqC;AAClE,MAAI,SAAS,UAAa,KAAK,KAAK,MAAM,GAAI,QAAO,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,EAAE;AACjF,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI;AAAA,EAC1B,SAAS,OAAO;AACd,WAAO,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,EAAE,SAAS,mBAAoB,MAAgB,OAAO,GAAG,CAAC,EAAE;AAAA,EAC/F;AACA,MAAI,CAAC,SAAS,MAAM,KAAM,OAAO,eAAe,UAAa,CAAC,SAAS,OAAO,UAAU;AACtF,WAAO,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,EAAE,SAAS,+BAA+B,CAAC,EAAE;AAChF,QAAM,UAA4B,CAAC;AACnC,QAAM,WAA+B,CAAC;AACtC,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAS,OAAO,cAAc,CAAC,CAA6B,GAAG;AAC9F,UAAM,UAAU,eAAe,MAAM,GAAG;AACxC,QAAI,aAAa,SAAS;AACxB,eAAS,KAAK,OAAO;AACrB;AAAA,IACF;AACA,QAAI,KAAK,IAAI,UAAU,IAAI,CAAC,GAAG;AAC7B,eAAS,KAAK,KAAK,MAAM,gEAAgE,CAAC;AAC1F;AAAA,IACF;AACA,SAAK,IAAI,UAAU,IAAI,CAAC;AACxB,YAAQ,KAAK,EAAE,MAAM,QAAQ,QAAQ,CAAC;AAAA,EACxC;AACA,SAAO,EAAE,SAAS,SAAS;AAC7B;AAEA,SAAS,cAAc,SAAyB;AAC9C,QAAM,SAAS,QACZ,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,KAAK,QAAQ,sBAAsB,MAAM,CAAC,EACxD,KAAK,IAAI;AACZ,SAAO,IAAI,OAAO,IAAI,MAAM,GAAG;AACjC;AAEO,SAAS,YAAY,SAAuD;AACjF,QAAM,QAAQ,IAAI,IAAI,QAAQ,OAAO,CAAC,UAAU,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AACrE,QAAM,WAAW,QAAQ,OAAO,CAAC,UAAU,MAAM,SAAS,GAAG,CAAC,EAAE,IAAI,aAAa;AACjF,SAAO,CAAC,SAAS,MAAM,IAAI,IAAI,KAAK,SAAS,KAAK,CAAC,YAAY,QAAQ,KAAK,IAAI,CAAC;AACnF;AAEO,SAAS,aAAa,QAAyB,MAA2B;AAC/E,QAAM,YAAY,OAAO,gBAAgB,CAAC;AAC1C,QAAM,QAAQ,UAAU,IAAI;AAC5B,MAAI,UAAU,OAAW,QAAO;AAChC,aAAW,CAAC,SAAS,QAAQ,KAAK,OAAO,QAAQ,SAAS;AACxD,QAAI,QAAQ,SAAS,GAAG,KAAK,cAAc,OAAO,EAAE,KAAK,IAAI,EAAG,QAAO;AACzE,SAAO,OAAO,YAAY;AAC5B;AAEO,SAAS,aAAa,QAAwB;AACnD,SAAO,QAAQ,UAAU,MAAM,CAAC;AAClC;AAEO,SAAS,YACd,QACA,MACA,QAAmC,MAAM,OACjC;AACR,QAAM,OAAO,QAAQ,MAAM,KAAK,IAAI,GAAG,QAAQ,kBAAkB,GAAG;AACpE,MAAI,KAAK,UAAU,iBAAiB,CAAC,MAAM,IAAI,EAAG,QAAO;AACzD,QAAM,SAAS,KAAK,GAAG,MAAM,KAAK,IAAI,EAAE,EAAE,SAAS,GAAG,GAAG,EAAE,MAAM,GAAG,CAAC;AACrE,SAAO,GAAG,KAAK,MAAM,GAAG,gBAAgB,OAAO,SAAS,CAAC,CAAC,IAAI,MAAM;AACtE;AAEO,SAAS,WAAW,GAAoB,GAA6B;AAC1E,SAAO,KAAK,UAAU,CAAC,MAAM,KAAK,UAAU,CAAC;AAC/C;",
   "names": []
 }

package/dist/mcp/connection.js

@@ -144,7 +144,7 @@ class McpServerConnection {
     void this.#drop(client);
   }
   signInMessage() {
-    return `MCP server "${this.name}" rejected the request as unauthorized (401). Check its token in Settings \u203A Accounts.`;
+    return `MCP server "${this.name}" rejected its token (401). Update it in Settings \u203A MCP servers.`;
   }
   #mark(state, error) {
     this.state = state;
@@ -279,7 +279,7 @@ class MissingSecret extends Error {
   names;
   constructor(names) {
     super(
-      `needs ${names.map((name) => `\${${name}}`).join(", ")}: add the value in Settings \u203A Accounts`
+      `needs ${names.map((name) => `\${${name}}`).join(", ")}: add the value in Settings \u203A MCP servers`
     );
     this.names = names;
   }

package/dist/mcp/connection.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/mcp/connection.ts"],
-  "sourcesContent": ["import {\n  type CallToolResult,\n  JSON_RPC_ERROR_CODES,\n  type ListResourcesResult,\n  type ListResourceTemplatesResult,\n  McpAuthRequiredError,\n  McpClient,\n  McpError,\n  McpHttpError,\n  type McpRequestOptions,\n  McpSessionExpiredError,\n  type Tool as McpTool,\n  type McpTransport,\n  type ReadResourceResult,\n  type Resource,\n  type ResourceTemplate,\n} from '@earendil-works/pi-mcp';\nimport { DEFAULT_TIMEOUT_SECONDS, type McpServerEntry } from './config.ts';\n\nexport type ServerState =\n  | 'connecting'\n  | 'connected'\n  | 'needs-auth'\n  | 'needs-secret'\n  | 'failed'\n  | 'closed';\n\nexport type TransportFactory = (\n  entry: McpServerEntry\n) => Promise<{ transport: McpTransport; secrets: string[] } | { missing: string[] }>;\n\nexport const CONNECT_RETRY_DELAYS_MS = [250, 1_000];\nexport const CLIENT_NAME = 'slicc';\n\nexport function errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function isTransient(error: unknown): boolean {\n  if (error instanceof McpHttpError)\n    return (\n      error.status === 408 || error.status === 429 || (error.status >= 500 && error.status !== 501)\n    );\n  return error instanceof TypeError;\n}\n\nexport function isMcpApp(item: { uri?: string; uriTemplate?: string; mimeType?: string }): boolean {\n  const uri = item.uri ?? item.uriTemplate ?? '';\n  return uri.startsWith('ui://') || /;\\s*profile\\s*=\\s*\"?mcp-app\"?/i.test(item.mimeType ?? '');\n}\n\nasync function withoutTemplates<T>(list: () => Promise<T>, empty: T): Promise<T> {\n  try {\n    return await list();\n  } catch (error) {\n    if (error instanceof McpError && error.code === JSON_RPC_ERROR_CODES.methodNotFound)\n      return empty;\n    throw error;\n  }\n}\n\nconst sleep = (ms: number, signal: AbortSignal) =>\n  new Promise<void>((resolve) => {\n    const timer = setTimeout(resolve, ms);\n    signal.addEventListener(\n      'abort',\n      () => {\n        clearTimeout(timer);\n        resolve();\n      },\n      { once: true }\n    );\n  });\n\nexport interface ConnectionOptions {\n  entry: McpServerEntry;\n  version: string;\n  transport: TransportFactory;\n  onTools: (connection: McpServerConnection) => void;\n  onChange?: (connection: McpServerConnection) => void;\n  onLog?: (connection: McpServerConnection, params: unknown) => void;\n}\n\nexport class McpServerConnection {\n  readonly entry: McpServerEntry;\n  state: ServerState = 'connecting';\n  error: string | undefined;\n  missing: string[] = [];\n  tools: McpTool[] = [];\n  hasResources = false;\n  resources: Resource[] = [];\n  resourceTemplates: ResourceTemplate[] = [];\n  instructions: string | undefined;\n  secrets: string[] = [];\n  #client: McpClient | undefined;\n  #opening: Promise<McpClient> | undefined;\n  readonly #shutdown = new AbortController();\n  readonly #busy = new Map<McpClient, number>();\n  #seen = false;\n  readonly #expired = new Set<McpClient>();\n  readonly #options: ConnectionOptions;\n\n  constructor(options: ConnectionOptions) {\n    this.entry = options.entry;\n    this.#options = options;\n  }\n\n  get name(): string {\n    return this.entry.name;\n  }\n\n  get timeoutMs(): number {\n    return (this.entry.config.timeout ?? DEFAULT_TIMEOUT_SECONDS) * 1000;\n  }\n\n  get live(): boolean {\n    return this.state === 'connected' || (this.state === 'connecting' && this.#seen);\n  }\n\n  get closed(): boolean {\n    return this.#shutdown.signal.aborted;\n  }\n\n  getClient(): Promise<McpClient> {\n    if (this.closed) return Promise.reject(new Error(`MCP server \"${this.name}\" is shut down`));\n    if (this.#client?.connectionState === 'connected') return Promise.resolve(this.#client);\n    this.#opening ??= this.#open().finally(() => {\n      this.#opening = undefined;\n    });\n    return this.#opening;\n  }\n\n  callTool(\n    name: string,\n    args: Record<string, unknown>,\n    options: McpRequestOptions\n  ): Promise<CallToolResult> {\n    return this.#with((client) => client.callTool(name, args, options));\n  }\n\n  readResource(uri: string, options: McpRequestOptions): Promise<ReadResourceResult> {\n    return this.#with((client) => client.readResource(uri, options), true);\n  }\n\n  resourcesPage(\n    cursor: string | undefined,\n    options: McpRequestOptions\n  ): Promise<ListResourcesResult> {\n    return this.#with((client) => client.listResourcesPage(cursor, options), true);\n  }\n\n  resourceTemplatesPage(\n    cursor: string | undefined,\n    options: McpRequestOptions\n  ): Promise<ListResourceTemplatesResult> {\n    return this.#with(\n      (client) =>\n        withoutTemplates(() => client.listResourceTemplatesPage(cursor, options), {\n          resourceTemplates: [],\n        }),\n      true\n    );\n  }\n\n  allResources(options: McpRequestOptions): Promise<Resource[]> {\n    return this.#with((client) => client.listResources(options), true);\n  }\n\n  allResourceTemplates(options: McpRequestOptions): Promise<ResourceTemplate[]> {\n    return this.#with(\n      (client) => withoutTemplates(() => client.listResourceTemplates(options), []),\n      true\n    );\n  }\n\n  async #with<T>(run: (client: McpClient) => Promise<T>, readOnly = false): Promise<T> {\n    for (let attempt = 1; ; attempt++) {\n      const client = await this.getClient();\n      this.#busy.set(client, (this.#busy.get(client) ?? 0) + 1);\n      try {\n        return await run(client);\n      } catch (error) {\n        if (readOnly && attempt === 1 && error instanceof McpHttpError && isTransient(error)) {\n          await sleep(CONNECT_RETRY_DELAYS_MS[0] as number, this.#shutdown.signal);\n          continue;\n        }\n        if (error instanceof McpSessionExpiredError && attempt === 1) {\n          if (this.#client === client) {\n            this.#client = undefined;\n            this.#expired.add(client);\n          }\n          continue;\n        }\n        if (!(error instanceof McpAuthRequiredError)) throw error;\n        await this.#drop(client);\n        this.#mark('needs-auth');\n        throw new Error(this.signInMessage());\n      } finally {\n        this.#release(client);\n      }\n    }\n  }\n\n  #release(client: McpClient): void {\n    const left = (this.#busy.get(client) as number) - 1;\n    this.#busy.set(client, left);\n    if (left > 0 || !this.#expired.delete(client)) return;\n    this.#busy.delete(client);\n    void this.#drop(client);\n  }\n\n  signInMessage(): string {\n    return `MCP server \"${this.name}\" rejected the request as unauthorized (401). Check its token in Settings \u203A Accounts.`;\n  }\n\n  #mark(state: ServerState, error?: string): void {\n    this.state = state;\n    this.error = error;\n    this.#options.onChange?.(this);\n  }\n\n  async #drop(client: McpClient): Promise<void> {\n    if (this.#client === client) this.#client = undefined;\n    await client.close().catch(() => undefined);\n  }\n\n  async #open(): Promise<McpClient> {\n    this.#mark('connecting');\n    for (let attempt = 0; ; attempt++) {\n      try {\n        return await this.#connectOnce();\n      } catch (error) {\n        const delay = CONNECT_RETRY_DELAYS_MS[attempt];\n        if (this.closed || delay === undefined || !isTransient(error)) throw this.#failed(error);\n        await sleep(delay, this.#shutdown.signal);\n        if (this.closed) throw this.#failed(error);\n      }\n    }\n  }\n\n  async #connectOnce(): Promise<McpClient> {\n    const made = await this.#options.transport(this.entry);\n    if ('missing' in made) {\n      this.missing = made.missing;\n      throw new MissingSecret(made.missing);\n    }\n    this.secrets = made.secrets;\n    const client = new McpClient({\n      name: CLIENT_NAME,\n      version: this.#options.version,\n      requestTimeoutMs: this.timeoutMs,\n    });\n    const log = this.#options.onLog;\n    if (log) client.onNotification('notifications/message', (params) => log(this, params));\n    let closing: Promise<void> | undefined;\n    const closeClient = () => {\n      closing ??= client.close().catch(() => undefined);\n      return closing;\n    };\n    this.#shutdown.signal.addEventListener('abort', closeClient, { once: true });\n    try {\n      await client.connect(made.transport);\n      client.onNotification('notifications/tools/list_changed', () => {\n        void this.#refreshTools(client);\n      });\n      client.onNotification('notifications/resources/list_changed', () => {\n        void this.#refreshResources(client);\n      });\n      const hasResources = client.serverCapabilities?.resources !== undefined;\n      const [tools, resources] = await Promise.all([\n        client.serverCapabilities?.tools ? client.listTools() : [],\n        hasResources ? this.#fetchResources(client) : { resources: [], resourceTemplates: [] },\n      ]);\n      if (this.closed) throw new Error('shut down while connecting');\n      if (client.connectionState !== 'connected') throw new Error('connection closed during setup');\n      this.#client = client;\n      this.tools = tools;\n      this.hasResources = hasResources;\n      this.resources = resources.resources;\n      this.resourceTemplates = resources.resourceTemplates;\n      this.instructions = client.instructions?.trim() || undefined;\n      this.missing = [];\n      this.#seen = true;\n      this.state = 'connected';\n      this.error = undefined;\n      this.#options.onTools(this);\n      this.#options.onChange?.(this);\n      return client;\n    } catch (error) {\n      await closeClient();\n      throw error;\n    } finally {\n      this.#shutdown.signal.removeEventListener('abort', closeClient);\n    }\n  }\n\n  async #fetchResources(client: McpClient) {\n    const [resources, resourceTemplates] = await Promise.all([\n      client.listResources().catch(() => [] as Resource[]),\n      withoutTemplates(() => client.listResourceTemplates(), [] as ResourceTemplate[]).catch(\n        () => [] as ResourceTemplate[]\n      ),\n    ]);\n    return {\n      resources: resources.filter((resource) => !isMcpApp(resource)),\n      resourceTemplates: resourceTemplates.filter((template) => !isMcpApp(template)),\n    };\n  }\n\n  #failed(error: unknown): Error {\n    if (error instanceof MissingSecret) {\n      this.#mark('needs-secret');\n      return new Error(error.message);\n    }\n    if (error instanceof McpAuthRequiredError && !this.closed) {\n      this.#mark('needs-auth');\n      return new Error(this.signInMessage());\n    }\n    this.#mark(this.closed ? 'closed' : 'failed', errorMessage(error));\n    return new Error(`MCP server \"${this.name}\" failed to connect: ${this.error}`);\n  }\n\n  async #refreshTools(client: McpClient): Promise<void> {\n    try {\n      const tools = await client.listTools();\n      if (this.#client !== client || this.closed) return;\n      this.tools = tools;\n      this.#options.onTools(this);\n    } catch (error) {\n      this.error = `Failed to refresh tools: ${errorMessage(error)}`;\n    }\n    this.#options.onChange?.(this);\n  }\n\n  async #refreshResources(client: McpClient): Promise<void> {\n    const { resources, resourceTemplates } = await this.#fetchResources(client);\n    if (this.#client !== client || this.closed) return;\n    this.resources = resources;\n    this.resourceTemplates = resourceTemplates;\n    this.#options.onTools(this);\n    this.#options.onChange?.(this);\n  }\n\n  async close(): Promise<void> {\n    this.#shutdown.abort();\n    this.state = 'closed';\n    this.#options.onChange?.(this);\n    const client = this.#client;\n    this.#client = undefined;\n    await Promise.allSettled([client?.close(), this.#opening]);\n  }\n}\n\nexport class MissingSecret extends Error {\n  readonly names: string[];\n\n  constructor(names: string[]) {\n    super(\n      `needs ${names.map((name) => `\\${${name}}`).join(', ')}: add the value in Settings \u203A Accounts`\n    );\n    this.names = names;\n  }\n}\n"],
+  "sourcesContent": ["import {\n  type CallToolResult,\n  JSON_RPC_ERROR_CODES,\n  type ListResourcesResult,\n  type ListResourceTemplatesResult,\n  McpAuthRequiredError,\n  McpClient,\n  McpError,\n  McpHttpError,\n  type McpRequestOptions,\n  McpSessionExpiredError,\n  type Tool as McpTool,\n  type McpTransport,\n  type ReadResourceResult,\n  type Resource,\n  type ResourceTemplate,\n} from '@earendil-works/pi-mcp';\nimport { DEFAULT_TIMEOUT_SECONDS, type McpServerEntry } from './config.ts';\n\nexport type ServerState =\n  | 'connecting'\n  | 'connected'\n  | 'needs-auth'\n  | 'needs-secret'\n  | 'failed'\n  | 'closed';\n\nexport type TransportFactory = (\n  entry: McpServerEntry\n) => Promise<{ transport: McpTransport; secrets: string[] } | { missing: string[] }>;\n\nexport const CONNECT_RETRY_DELAYS_MS = [250, 1_000];\nexport const CLIENT_NAME = 'slicc';\n\nexport function errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function isTransient(error: unknown): boolean {\n  if (error instanceof McpHttpError)\n    return (\n      error.status === 408 || error.status === 429 || (error.status >= 500 && error.status !== 501)\n    );\n  return error instanceof TypeError;\n}\n\nexport function isMcpApp(item: { uri?: string; uriTemplate?: string; mimeType?: string }): boolean {\n  const uri = item.uri ?? item.uriTemplate ?? '';\n  return uri.startsWith('ui://') || /;\\s*profile\\s*=\\s*\"?mcp-app\"?/i.test(item.mimeType ?? '');\n}\n\nasync function withoutTemplates<T>(list: () => Promise<T>, empty: T): Promise<T> {\n  try {\n    return await list();\n  } catch (error) {\n    if (error instanceof McpError && error.code === JSON_RPC_ERROR_CODES.methodNotFound)\n      return empty;\n    throw error;\n  }\n}\n\nconst sleep = (ms: number, signal: AbortSignal) =>\n  new Promise<void>((resolve) => {\n    const timer = setTimeout(resolve, ms);\n    signal.addEventListener(\n      'abort',\n      () => {\n        clearTimeout(timer);\n        resolve();\n      },\n      { once: true }\n    );\n  });\n\nexport interface ConnectionOptions {\n  entry: McpServerEntry;\n  version: string;\n  transport: TransportFactory;\n  onTools: (connection: McpServerConnection) => void;\n  onChange?: (connection: McpServerConnection) => void;\n  onLog?: (connection: McpServerConnection, params: unknown) => void;\n}\n\nexport class McpServerConnection {\n  readonly entry: McpServerEntry;\n  state: ServerState = 'connecting';\n  error: string | undefined;\n  missing: string[] = [];\n  tools: McpTool[] = [];\n  hasResources = false;\n  resources: Resource[] = [];\n  resourceTemplates: ResourceTemplate[] = [];\n  instructions: string | undefined;\n  secrets: string[] = [];\n  #client: McpClient | undefined;\n  #opening: Promise<McpClient> | undefined;\n  readonly #shutdown = new AbortController();\n  readonly #busy = new Map<McpClient, number>();\n  #seen = false;\n  readonly #expired = new Set<McpClient>();\n  readonly #options: ConnectionOptions;\n\n  constructor(options: ConnectionOptions) {\n    this.entry = options.entry;\n    this.#options = options;\n  }\n\n  get name(): string {\n    return this.entry.name;\n  }\n\n  get timeoutMs(): number {\n    return (this.entry.config.timeout ?? DEFAULT_TIMEOUT_SECONDS) * 1000;\n  }\n\n  get live(): boolean {\n    return this.state === 'connected' || (this.state === 'connecting' && this.#seen);\n  }\n\n  get closed(): boolean {\n    return this.#shutdown.signal.aborted;\n  }\n\n  getClient(): Promise<McpClient> {\n    if (this.closed) return Promise.reject(new Error(`MCP server \"${this.name}\" is shut down`));\n    if (this.#client?.connectionState === 'connected') return Promise.resolve(this.#client);\n    this.#opening ??= this.#open().finally(() => {\n      this.#opening = undefined;\n    });\n    return this.#opening;\n  }\n\n  callTool(\n    name: string,\n    args: Record<string, unknown>,\n    options: McpRequestOptions\n  ): Promise<CallToolResult> {\n    return this.#with((client) => client.callTool(name, args, options));\n  }\n\n  readResource(uri: string, options: McpRequestOptions): Promise<ReadResourceResult> {\n    return this.#with((client) => client.readResource(uri, options), true);\n  }\n\n  resourcesPage(\n    cursor: string | undefined,\n    options: McpRequestOptions\n  ): Promise<ListResourcesResult> {\n    return this.#with((client) => client.listResourcesPage(cursor, options), true);\n  }\n\n  resourceTemplatesPage(\n    cursor: string | undefined,\n    options: McpRequestOptions\n  ): Promise<ListResourceTemplatesResult> {\n    return this.#with(\n      (client) =>\n        withoutTemplates(() => client.listResourceTemplatesPage(cursor, options), {\n          resourceTemplates: [],\n        }),\n      true\n    );\n  }\n\n  allResources(options: McpRequestOptions): Promise<Resource[]> {\n    return this.#with((client) => client.listResources(options), true);\n  }\n\n  allResourceTemplates(options: McpRequestOptions): Promise<ResourceTemplate[]> {\n    return this.#with(\n      (client) => withoutTemplates(() => client.listResourceTemplates(options), []),\n      true\n    );\n  }\n\n  async #with<T>(run: (client: McpClient) => Promise<T>, readOnly = false): Promise<T> {\n    for (let attempt = 1; ; attempt++) {\n      const client = await this.getClient();\n      this.#busy.set(client, (this.#busy.get(client) ?? 0) + 1);\n      try {\n        return await run(client);\n      } catch (error) {\n        if (readOnly && attempt === 1 && error instanceof McpHttpError && isTransient(error)) {\n          await sleep(CONNECT_RETRY_DELAYS_MS[0] as number, this.#shutdown.signal);\n          continue;\n        }\n        if (error instanceof McpSessionExpiredError && attempt === 1) {\n          if (this.#client === client) {\n            this.#client = undefined;\n            this.#expired.add(client);\n          }\n          continue;\n        }\n        if (!(error instanceof McpAuthRequiredError)) throw error;\n        await this.#drop(client);\n        this.#mark('needs-auth');\n        throw new Error(this.signInMessage());\n      } finally {\n        this.#release(client);\n      }\n    }\n  }\n\n  #release(client: McpClient): void {\n    const left = (this.#busy.get(client) as number) - 1;\n    this.#busy.set(client, left);\n    if (left > 0 || !this.#expired.delete(client)) return;\n    this.#busy.delete(client);\n    void this.#drop(client);\n  }\n\n  signInMessage(): string {\n    return `MCP server \"${this.name}\" rejected its token (401). Update it in Settings \u203A MCP servers.`;\n  }\n\n  #mark(state: ServerState, error?: string): void {\n    this.state = state;\n    this.error = error;\n    this.#options.onChange?.(this);\n  }\n\n  async #drop(client: McpClient): Promise<void> {\n    if (this.#client === client) this.#client = undefined;\n    await client.close().catch(() => undefined);\n  }\n\n  async #open(): Promise<McpClient> {\n    this.#mark('connecting');\n    for (let attempt = 0; ; attempt++) {\n      try {\n        return await this.#connectOnce();\n      } catch (error) {\n        const delay = CONNECT_RETRY_DELAYS_MS[attempt];\n        if (this.closed || delay === undefined || !isTransient(error)) throw this.#failed(error);\n        await sleep(delay, this.#shutdown.signal);\n        if (this.closed) throw this.#failed(error);\n      }\n    }\n  }\n\n  async #connectOnce(): Promise<McpClient> {\n    const made = await this.#options.transport(this.entry);\n    if ('missing' in made) {\n      this.missing = made.missing;\n      throw new MissingSecret(made.missing);\n    }\n    this.secrets = made.secrets;\n    const client = new McpClient({\n      name: CLIENT_NAME,\n      version: this.#options.version,\n      requestTimeoutMs: this.timeoutMs,\n    });\n    const log = this.#options.onLog;\n    if (log) client.onNotification('notifications/message', (params) => log(this, params));\n    let closing: Promise<void> | undefined;\n    const closeClient = () => {\n      closing ??= client.close().catch(() => undefined);\n      return closing;\n    };\n    this.#shutdown.signal.addEventListener('abort', closeClient, { once: true });\n    try {\n      await client.connect(made.transport);\n      client.onNotification('notifications/tools/list_changed', () => {\n        void this.#refreshTools(client);\n      });\n      client.onNotification('notifications/resources/list_changed', () => {\n        void this.#refreshResources(client);\n      });\n      const hasResources = client.serverCapabilities?.resources !== undefined;\n      const [tools, resources] = await Promise.all([\n        client.serverCapabilities?.tools ? client.listTools() : [],\n        hasResources ? this.#fetchResources(client) : { resources: [], resourceTemplates: [] },\n      ]);\n      if (this.closed) throw new Error('shut down while connecting');\n      if (client.connectionState !== 'connected') throw new Error('connection closed during setup');\n      this.#client = client;\n      this.tools = tools;\n      this.hasResources = hasResources;\n      this.resources = resources.resources;\n      this.resourceTemplates = resources.resourceTemplates;\n      this.instructions = client.instructions?.trim() || undefined;\n      this.missing = [];\n      this.#seen = true;\n      this.state = 'connected';\n      this.error = undefined;\n      this.#options.onTools(this);\n      this.#options.onChange?.(this);\n      return client;\n    } catch (error) {\n      await closeClient();\n      throw error;\n    } finally {\n      this.#shutdown.signal.removeEventListener('abort', closeClient);\n    }\n  }\n\n  async #fetchResources(client: McpClient) {\n    const [resources, resourceTemplates] = await Promise.all([\n      client.listResources().catch(() => [] as Resource[]),\n      withoutTemplates(() => client.listResourceTemplates(), [] as ResourceTemplate[]).catch(\n        () => [] as ResourceTemplate[]\n      ),\n    ]);\n    return {\n      resources: resources.filter((resource) => !isMcpApp(resource)),\n      resourceTemplates: resourceTemplates.filter((template) => !isMcpApp(template)),\n    };\n  }\n\n  #failed(error: unknown): Error {\n    if (error instanceof MissingSecret) {\n      this.#mark('needs-secret');\n      return new Error(error.message);\n    }\n    if (error instanceof McpAuthRequiredError && !this.closed) {\n      this.#mark('needs-auth');\n      return new Error(this.signInMessage());\n    }\n    this.#mark(this.closed ? 'closed' : 'failed', errorMessage(error));\n    return new Error(`MCP server \"${this.name}\" failed to connect: ${this.error}`);\n  }\n\n  async #refreshTools(client: McpClient): Promise<void> {\n    try {\n      const tools = await client.listTools();\n      if (this.#client !== client || this.closed) return;\n      this.tools = tools;\n      this.#options.onTools(this);\n    } catch (error) {\n      this.error = `Failed to refresh tools: ${errorMessage(error)}`;\n    }\n    this.#options.onChange?.(this);\n  }\n\n  async #refreshResources(client: McpClient): Promise<void> {\n    const { resources, resourceTemplates } = await this.#fetchResources(client);\n    if (this.#client !== client || this.closed) return;\n    this.resources = resources;\n    this.resourceTemplates = resourceTemplates;\n    this.#options.onTools(this);\n    this.#options.onChange?.(this);\n  }\n\n  async close(): Promise<void> {\n    this.#shutdown.abort();\n    this.state = 'closed';\n    this.#options.onChange?.(this);\n    const client = this.#client;\n    this.#client = undefined;\n    await Promise.allSettled([client?.close(), this.#opening]);\n  }\n}\n\nexport class MissingSecret extends Error {\n  readonly names: string[];\n\n  constructor(names: string[]) {\n    super(\n      `needs ${names.map((name) => `\\${${name}}`).join(', ')}: add the value in Settings \u203A MCP servers`\n    );\n    this.names = names;\n  }\n}\n"],
   "mappings": "AAAA;AAAA,EAEE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OAMK;AACP,SAAS,+BAAoD;AActD,MAAM,0BAA0B,CAAC,KAAK,GAAK;AAC3C,MAAM,cAAc;AAEpB,SAAS,aAAa,OAAwB;AACnD,SAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;AAEO,SAAS,YAAY,OAAyB;AACnD,MAAI,iBAAiB;AACnB,WACE,MAAM,WAAW,OAAO,MAAM,WAAW,OAAQ,MAAM,UAAU,OAAO,MAAM,WAAW;AAE7F,SAAO,iBAAiB;AAC1B;AAEO,SAAS,SAAS,MAA0E;AACjG,QAAM,MAAM,KAAK,OAAO,KAAK,eAAe;AAC5C,SAAO,IAAI,WAAW,OAAO,KAAK,iCAAiC,KAAK,KAAK,YAAY,EAAE;AAC7F;AAEA,eAAe,iBAAoB,MAAwB,OAAsB;AAC/E,MAAI;AACF,WAAO,MAAM,KAAK;AAAA,EACpB,SAAS,OAAO;AACd,QAAI,iBAAiB,YAAY,MAAM,SAAS,qBAAqB;AACnE,aAAO;AACT,UAAM;AAAA,EACR;AACF;AAEA,MAAM,QAAQ,CAAC,IAAY,WACzB,IAAI,QAAc,CAAC,YAAY;AAC7B,QAAM,QAAQ,WAAW,SAAS,EAAE;AACpC,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AACJ,mBAAa,KAAK;AAClB,cAAQ;AAAA,IACV;AAAA,IACA,EAAE,MAAM,KAAK;AAAA,EACf;AACF,CAAC;AAWI,MAAM,oBAAoB;AAAA,EACtB;AAAA,EACT,QAAqB;AAAA,EACrB;AAAA,EACA,UAAoB,CAAC;AAAA,EACrB,QAAmB,CAAC;AAAA,EACpB,eAAe;AAAA,EACf,YAAwB,CAAC;AAAA,EACzB,oBAAwC,CAAC;AAAA,EACzC;AAAA,EACA,UAAoB,CAAC;AAAA,EACrB;AAAA,EACA;AAAA,EACS,YAAY,IAAI,gBAAgB;AAAA,EAChC,QAAQ,oBAAI,IAAuB;AAAA,EAC5C,QAAQ;AAAA,EACC,WAAW,oBAAI,IAAe;AAAA,EAC9B;AAAA,EAET,YAAY,SAA4B;AACtC,SAAK,QAAQ,QAAQ;AACrB,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,IAAI,OAAe;AACjB,WAAO,KAAK,MAAM;AAAA,EACpB;AAAA,EAEA,IAAI,YAAoB;AACtB,YAAQ,KAAK,MAAM,OAAO,WAAW,2BAA2B;AAAA,EAClE;AAAA,EAEA,IAAI,OAAgB;AAClB,WAAO,KAAK,UAAU,eAAgB,KAAK,UAAU,gBAAgB,KAAK;AAAA,EAC5E;AAAA,EAEA,IAAI,SAAkB;AACpB,WAAO,KAAK,UAAU,OAAO;AAAA,EAC/B;AAAA,EAEA,YAAgC;AAC9B,QAAI,KAAK,OAAQ,QAAO,QAAQ,OAAO,IAAI,MAAM,eAAe,KAAK,IAAI,gBAAgB,CAAC;AAC1F,QAAI,KAAK,SAAS,oBAAoB,YAAa,QAAO,QAAQ,QAAQ,KAAK,OAAO;AACtF,SAAK,aAAa,KAAK,MAAM,EAAE,QAAQ,MAAM;AAC3C,WAAK,WAAW;AAAA,IAClB,CAAC;AACD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,SACE,MACA,MACA,SACyB;AACzB,WAAO,KAAK,MAAM,CAAC,WAAW,OAAO,SAAS,MAAM,MAAM,OAAO,CAAC;AAAA,EACpE;AAAA,EAEA,aAAa,KAAa,SAAyD;AACjF,WAAO,KAAK,MAAM,CAAC,WAAW,OAAO,aAAa,KAAK,OAAO,GAAG,IAAI;AAAA,EACvE;AAAA,EAEA,cACE,QACA,SAC8B;AAC9B,WAAO,KAAK,MAAM,CAAC,WAAW,OAAO,kBAAkB,QAAQ,OAAO,GAAG,IAAI;AAAA,EAC/E;AAAA,EAEA,sBACE,QACA,SACsC;AACtC,WAAO,KAAK;AAAA,MACV,CAAC,WACC,iBAAiB,MAAM,OAAO,0BAA0B,QAAQ,OAAO,GAAG;AAAA,QACxE,mBAAmB,CAAC;AAAA,MACtB,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA,EAEA,aAAa,SAAiD;AAC5D,WAAO,KAAK,MAAM,CAAC,WAAW,OAAO,cAAc,OAAO,GAAG,IAAI;AAAA,EACnE;AAAA,EAEA,qBAAqB,SAAyD;AAC5E,WAAO,KAAK;AAAA,MACV,CAAC,WAAW,iBAAiB,MAAM,OAAO,sBAAsB,OAAO,GAAG,CAAC,CAAC;AAAA,MAC5E;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,MAAS,KAAwC,WAAW,OAAmB;AACnF,aAAS,UAAU,KAAK,WAAW;AACjC,YAAM,SAAS,MAAM,KAAK,UAAU;AACpC,WAAK,MAAM,IAAI,SAAS,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC;AACxD,UAAI;AACF,eAAO,MAAM,IAAI,MAAM;AAAA,MACzB,SAAS,OAAO;AACd,YAAI,YAAY,YAAY,KAAK,iBAAiB,gBAAgB,YAAY,KAAK,GAAG;AACpF,gBAAM,MAAM,wBAAwB,CAAC,GAAa,KAAK,UAAU,MAAM;AACvE;AAAA,QACF;AACA,YAAI,iBAAiB,0BAA0B,YAAY,GAAG;AAC5D,cAAI,KAAK,YAAY,QAAQ;AAC3B,iBAAK,UAAU;AACf,iBAAK,SAAS,IAAI,MAAM;AAAA,UAC1B;AACA;AAAA,QACF;AACA,YAAI,EAAE,iBAAiB,sBAAuB,OAAM;AACpD,cAAM,KAAK,MAAM,MAAM;AACvB,aAAK,MAAM,YAAY;AACvB,cAAM,IAAI,MAAM,KAAK,cAAc,CAAC;AAAA,MACtC,UAAE;AACA,aAAK,SAAS,MAAM;AAAA,MACtB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,SAAS,QAAyB;AAChC,UAAM,OAAQ,KAAK,MAAM,IAAI,MAAM,IAAe;AAClD,SAAK,MAAM,IAAI,QAAQ,IAAI;AAC3B,QAAI,OAAO,KAAK,CAAC,KAAK,SAAS,OAAO,MAAM,EAAG;AAC/C,SAAK,MAAM,OAAO,MAAM;AACxB,SAAK,KAAK,MAAM,MAAM;AAAA,EACxB;AAAA,EAEA,gBAAwB;AACtB,WAAO,eAAe,KAAK,IAAI;AAAA,EACjC;AAAA,EAEA,MAAM,OAAoB,OAAsB;AAC9C,SAAK,QAAQ;AACb,SAAK,QAAQ;AACb,SAAK,SAAS,WAAW,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,QAAkC;AAC5C,QAAI,KAAK,YAAY,OAAQ,MAAK,UAAU;AAC5C,UAAM,OAAO,MAAM,EAAE,MAAM,MAAM,MAAS;AAAA,EAC5C;AAAA,EAEA,MAAM,QAA4B;AAChC,SAAK,MAAM,YAAY;AACvB,aAAS,UAAU,KAAK,WAAW;AACjC,UAAI;AACF,eAAO,MAAM,KAAK,aAAa;AAAA,MACjC,SAAS,OAAO;AACd,cAAM,QAAQ,wBAAwB,OAAO;AAC7C,YAAI,KAAK,UAAU,UAAU,UAAa,CAAC,YAAY,KAAK,EAAG,OAAM,KAAK,QAAQ,KAAK;AACvF,cAAM,MAAM,OAAO,KAAK,UAAU,MAAM;AACxC,YAAI,KAAK,OAAQ,OAAM,KAAK,QAAQ,KAAK;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,eAAmC;AACvC,UAAM,OAAO,MAAM,KAAK,SAAS,UAAU,KAAK,KAAK;AACrD,QAAI,aAAa,MAAM;AACrB,WAAK,UAAU,KAAK;AACpB,YAAM,IAAI,cAAc,KAAK,OAAO;AAAA,IACtC;AACA,SAAK,UAAU,KAAK;AACpB,UAAM,SAAS,IAAI,UAAU;AAAA,MAC3B,MAAM;AAAA,MACN,SAAS,KAAK,SAAS;AAAA,MACvB,kBAAkB,KAAK;AAAA,IACzB,CAAC;AACD,UAAM,MAAM,KAAK,SAAS;AAC1B,QAAI,IAAK,QAAO,eAAe,yBAAyB,CAAC,WAAW,IAAI,MAAM,MAAM,CAAC;AACrF,QAAI;AACJ,UAAM,cAAc,MAAM;AACxB,kBAAY,OAAO,MAAM,EAAE,MAAM,MAAM,MAAS;AAChD,aAAO;AAAA,IACT;AACA,SAAK,UAAU,OAAO,iBAAiB,SAAS,aAAa,EAAE,MAAM,KAAK,CAAC;AAC3E,QAAI;AACF,YAAM,OAAO,QAAQ,KAAK,SAAS;AACnC,aAAO,eAAe,oCAAoC,MAAM;AAC9D,aAAK,KAAK,cAAc,MAAM;AAAA,MAChC,CAAC;AACD,aAAO,eAAe,wCAAwC,MAAM;AAClE,aAAK,KAAK,kBAAkB,MAAM;AAAA,MACpC,CAAC;AACD,YAAM,eAAe,OAAO,oBAAoB,cAAc;AAC9D,YAAM,CAAC,OAAO,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,QAC3C,OAAO,oBAAoB,QAAQ,OAAO,UAAU,IAAI,CAAC;AAAA,QACzD,eAAe,KAAK,gBAAgB,MAAM,IAAI,EAAE,WAAW,CAAC,GAAG,mBAAmB,CAAC,EAAE;AAAA,MACvF,CAAC;AACD,UAAI,KAAK,OAAQ,OAAM,IAAI,MAAM,4BAA4B;AAC7D,UAAI,OAAO,oBAAoB,YAAa,OAAM,IAAI,MAAM,gCAAgC;AAC5F,WAAK,UAAU;AACf,WAAK,QAAQ;AACb,WAAK,eAAe;AACpB,WAAK,YAAY,UAAU;AAC3B,WAAK,oBAAoB,UAAU;AACnC,WAAK,eAAe,OAAO,cAAc,KAAK,KAAK;AACnD,WAAK,UAAU,CAAC;AAChB,WAAK,QAAQ;AACb,WAAK,QAAQ;AACb,WAAK,QAAQ;AACb,WAAK,SAAS,QAAQ,IAAI;AAC1B,WAAK,SAAS,WAAW,IAAI;AAC7B,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,YAAY;AAClB,YAAM;AAAA,IACR,UAAE;AACA,WAAK,UAAU,OAAO,oBAAoB,SAAS,WAAW;AAAA,IAChE;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,QAAmB;AACvC,UAAM,CAAC,WAAW,iBAAiB,IAAI,MAAM,QAAQ,IAAI;AAAA,MACvD,OAAO,cAAc,EAAE,MAAM,MAAM,CAAC,CAAe;AAAA,MACnD,iBAAiB,MAAM,OAAO,sBAAsB,GAAG,CAAC,CAAuB,EAAE;AAAA,QAC/E,MAAM,CAAC;AAAA,MACT;AAAA,IACF,CAAC;AACD,WAAO;AAAA,MACL,WAAW,UAAU,OAAO,CAAC,aAAa,CAAC,SAAS,QAAQ,CAAC;AAAA,MAC7D,mBAAmB,kBAAkB,OAAO,CAAC,aAAa,CAAC,SAAS,QAAQ,CAAC;AAAA,IAC/E;AAAA,EACF;AAAA,EAEA,QAAQ,OAAuB;AAC7B,QAAI,iBAAiB,eAAe;AAClC,WAAK,MAAM,cAAc;AACzB,aAAO,IAAI,MAAM,MAAM,OAAO;AAAA,IAChC;AACA,QAAI,iBAAiB,wBAAwB,CAAC,KAAK,QAAQ;AACzD,WAAK,MAAM,YAAY;AACvB,aAAO,IAAI,MAAM,KAAK,cAAc,CAAC;AAAA,IACvC;AACA,SAAK,MAAM,KAAK,SAAS,WAAW,UAAU,aAAa,KAAK,CAAC;AACjE,WAAO,IAAI,MAAM,eAAe,KAAK,IAAI,wBAAwB,KAAK,KAAK,EAAE;AAAA,EAC/E;AAAA,EAEA,MAAM,cAAc,QAAkC;AACpD,QAAI;AACF,YAAM,QAAQ,MAAM,OAAO,UAAU;AACrC,UAAI,KAAK,YAAY,UAAU,KAAK,OAAQ;AAC5C,WAAK,QAAQ;AACb,WAAK,SAAS,QAAQ,IAAI;AAAA,IAC5B,SAAS,OAAO;AACd,WAAK,QAAQ,4BAA4B,aAAa,KAAK,CAAC;AAAA,IAC9D;AACA,SAAK,SAAS,WAAW,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,kBAAkB,QAAkC;AACxD,UAAM,EAAE,WAAW,kBAAkB,IAAI,MAAM,KAAK,gBAAgB,MAAM;AAC1E,QAAI,KAAK,YAAY,UAAU,KAAK,OAAQ;AAC5C,SAAK,YAAY;AACjB,SAAK,oBAAoB;AACzB,SAAK,SAAS,QAAQ,IAAI;AAC1B,SAAK,SAAS,WAAW,IAAI;AAAA,EAC/B;AAAA,EAEA,MAAM,QAAuB;AAC3B,SAAK,UAAU,MAAM;AACrB,SAAK,QAAQ;AACb,SAAK,SAAS,WAAW,IAAI;AAC7B,UAAM,SAAS,KAAK;AACpB,SAAK,UAAU;AACf,UAAM,QAAQ,WAAW,CAAC,QAAQ,MAAM,GAAG,KAAK,QAAQ,CAAC;AAAA,EAC3D;AACF;AAEO,MAAM,sBAAsB,MAAM;AAAA,EAC9B;AAAA,EAET,YAAY,OAAiB;AAC3B;AAAA,MACE,SAAS,MAAM,IAAI,CAAC,SAAS,MAAM,IAAI,GAAG,EAAE,KAAK,IAAI,CAAC;AAAA,IACxD;AACA,SAAK,QAAQ;AAAA,EACf;AACF;",
   "names": []
 }