@ai-ecoverse/slicc-agent 3.43.0 → 3.44.0

package/dist/kernel/env.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/kernel/env.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type BinaryReader,\n  type DirReader,\n  type ExecutionEnv,\n  type ExecutionError,\n  err,\n  FileError,\n  type FileInfo,\n  type FileWatcher,\n  ok,\n  type Result,\n  type ShellExecOptions,\n  type ShellExecResult,\n  type TextLineReader,\n  type WatchChange,\n  type WatchTarget,\n} from '@earendil-works/pi-durable/env';\nimport type { Activity } from './activity.ts';\nimport type { KernelClient, KernelProcess } from './client.ts';\nimport { execute } from './exec.ts';\nimport { attempt, info, KernelDirReader, SnapshotLines, SnapshotReader } from './files.ts';\nimport type { ProcessGroups } from './groups.ts';\nimport { dirname, normalize, resolve } from './paths.ts';\nimport { nativeWatch, type PollOptions, pollWatch, RESCAN_MS } from './watch.ts';\n\nexport interface KernelEnvOptions {\n  cwd: string;\n  id?: string;\n  watch?: PollOptions;\n  activity?: Activity;\n  groups?: ProcessGroups;\n  owner?: number;\n  exports?: Readonly<Record<string, string>>;\n}\n\nexport function quote(value: string): string {\n  return `'${value.replace(/'/g, \"'\\\\''\")}'`;\n}\n\nexport function prefixed(\n  command: string,\n  exports: Readonly<Record<string, string>> | undefined\n): string {\n  const names = Object.keys(exports ?? {}).filter((name) => /^[A-Z_][A-Z0-9_]*$/.test(name));\n  if (!names.length) return command;\n  return `export ${names.map((name) => `${name}=${quote((exports as Record<string, string>)[name] as string)}`).join(' ')}; ${command}`;\n}\n\ntype FileResult<T> = Promise<Result<T, FileError>>;\n\nexport class SliccKernelEnv implements ExecutionEnv {\n  readonly id: string;\n  cwd: string;\n  readonly #client: KernelClient;\n  readonly #watchers = new Set<FileWatcher>();\n  readonly #poll: PollOptions;\n  readonly #activity: Activity | undefined;\n  readonly #groups: ProcessGroups | undefined;\n  readonly #owner: number | undefined;\n  readonly #exports: Readonly<Record<string, string>> | undefined;\n\n  constructor(client: KernelClient, options: KernelEnvOptions) {\n    this.#client = client;\n    this.cwd = options.cwd;\n    this.id = options.id ?? 'slicc-kernel';\n    this.#poll = options.watch ?? {};\n    this.#activity = options.activity;\n    this.#groups = options.groups;\n    this.#owner = options.owner;\n    this.#exports = options.exports;\n  }\n\n  #path(path: string): string {\n    return resolve(this.cwd, path);\n  }\n\n  #written(path: string): string {\n    const resolved = this.#path(path);\n    this.#activity?.wrote(resolved);\n    return resolved;\n  }\n\n  get #fs() {\n    return this.#client.fs;\n  }\n\n  async absolutePath(path: string): FileResult<string> {\n    return ok(this.#path(path));\n  }\n\n  async joinPath(parts: string[]): FileResult<string> {\n    return ok(normalize(parts.join('/')));\n  }\n\n  readTextFile(path: string, context: Context): FileResult<string> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, () => this.#fs.readText(resolved));\n  }\n\n  readBinaryFile(path: string, context: Context): FileResult<Uint8Array> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, () => this.#fs.readFile(resolved));\n  }\n\n  async openTextLineReader(path: string, context: Context): FileResult<TextLineReader> {\n    const text = await this.readTextFile(path, context);\n    return text.ok ? ok(new SnapshotLines(text.value)) : text;\n  }\n\n  async readTextLines(\n    path: string,\n    options: { maxLines?: number } | undefined,\n    context: Context\n  ): FileResult<string[]> {\n    if (options?.maxLines !== undefined && options.maxLines <= 0) return ok([]);\n    const text = await this.readTextFile(path, context);\n    if (!text.ok) return text;\n    const reader = new SnapshotLines(text.value);\n    const lines: string[] = [];\n    for (\n      let line = await reader.readLine();\n      line.ok && line.value;\n      line = await reader.readLine()\n    ) {\n      if (options?.maxLines !== undefined && lines.length >= options.maxLines) break;\n      lines.push(line.value.text);\n    }\n    return ok(lines);\n  }\n\n  openBinaryReader(\n    path: string,\n    options: { noFollow?: boolean } | undefined,\n    context: Context\n  ): FileResult<BinaryReader> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, async () => {\n      if (options?.noFollow && (await this.#fs.lstat(resolved)).isSymbolicLink) {\n        throw new FileError('invalid', 'Refusing to follow a symbolic link', resolved);\n      }\n      const stat = await this.#fs.stat(resolved);\n      if (stat.isDirectory) throw new FileError('is_directory', 'Is a directory', resolved);\n      if (!stat.isFile) throw new FileError('invalid', 'Not a regular file', resolved);\n      return new SnapshotReader(await this.#fs.readFile(resolved), info(resolved, stat));\n    });\n  }\n\n  writeFile(path: string, content: string | Uint8Array, context: Context): FileResult<void> {\n    const resolved = this.#written(path);\n    return attempt(context, resolved, async () => {\n      await this.#fs.mkdir(dirname(resolved));\n      await this.#fs.writeFile(resolved, content);\n    });\n  }\n\n  appendFile(path: string, content: string | Uint8Array, context: Context): FileResult<void> {\n    const resolved = this.#written(path);\n    return attempt(context, resolved, async () => {\n      const before = (await this.#fs.exists(resolved))\n        ? await this.#fs.readFile(resolved)\n        : new Uint8Array();\n      const added = typeof content === 'string' ? new TextEncoder().encode(content) : content;\n      const all = new Uint8Array(before.length + added.length);\n      all.set(before);\n      all.set(added, before.length);\n      await this.#fs.mkdir(dirname(resolved));\n      await this.#fs.writeFile(resolved, all);\n    });\n  }\n\n  truncateFile(path: string, size: number, context: Context): FileResult<void> {\n    const resolved = this.#written(path);\n    if (!Number.isSafeInteger(size) || size < 0) {\n      return Promise.resolve(\n        err(new FileError('invalid', 'File size must be a non-negative integer', resolved))\n      );\n    }\n    return attempt(context, resolved, async () => {\n      const before = await this.#fs.readFile(resolved);\n      const after = new Uint8Array(size);\n      after.set(before.subarray(0, size));\n      await this.#fs.writeFile(resolved, after);\n    });\n  }\n\n  flushFile(path: string, context: Context): FileResult<void> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, async () => {\n      if ((await this.#fs.stat(resolved)).isDirectory)\n        throw Object.assign(new Error('Is a directory'), { code: 'EISDIR' });\n    });\n  }\n\n  renameFile(sourcePath: string, destinationPath: string, context: Context): FileResult<void> {\n    const source = this.#written(sourcePath);\n    return attempt(context, source, () => this.#fs.rename(source, this.#written(destinationPath)));\n  }\n\n  fileInfo(path: string, context: Context): FileResult<FileInfo> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, async () => info(resolved, await this.#fs.lstat(resolved)));\n  }\n\n  async listDir(path: string, context: Context): FileResult<FileInfo[]> {\n    const reader = await this.openDirReader(path, context);\n    if (!reader.ok) return reader;\n    return ok(await (reader.value as KernelDirReader).rest());\n  }\n\n  openDirReader(path: string, context: Context): FileResult<DirReader> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, async () => {\n      if (!(await this.#fs.stat(resolved)).isDirectory) {\n        throw Object.assign(new Error('Not a directory'), { code: 'ENOTDIR' });\n      }\n      return new KernelDirReader(this.#fs, resolved, await this.#fs.readdir(resolved));\n    });\n  }\n\n  watch(\n    targets: readonly WatchTarget[],\n    onChange: (change: WatchChange) => void,\n    context: Context\n  ): FileResult<FileWatcher> {\n    return attempt(context, this.cwd, async () => {\n      let absorb: (paths: readonly string[]) => void = () => undefined;\n      const reported = (change: WatchChange) => {\n        if ('paths' in change) absorb(change.paths);\n        onChange(change);\n      };\n      const native =\n        this.#poll.mode === 'polling'\n          ? undefined\n          : await nativeWatch(this.#fs, this.cwd, targets, reported);\n      const intervalMs = native ? (this.#poll.rescanMs ?? RESCAN_MS) : this.#poll.intervalMs;\n      const polled = await pollWatch(this.#fs, this.cwd, targets, onChange, {\n        ...(intervalMs === undefined ? {} : { intervalMs }),\n      });\n      absorb = (paths) => polled.absorb(paths);\n      const watcher: FileWatcher = native\n        ? {\n            mode: 'native',\n            async close(closing: Context) {\n              await native.close(closing);\n              await polled.close(closing);\n            },\n          }\n        : polled;\n      this.#watchers.add(watcher);\n      return {\n        mode: watcher.mode,\n        close: async (closing: Context) => {\n          this.#watchers.delete(watcher);\n          await watcher.close(closing);\n        },\n      };\n    });\n  }\n\n  canonicalPath(path: string, context: Context): FileResult<string> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, () => this.#fs.realpath(resolved));\n  }\n\n  async exists(path: string, context: Context): FileResult<boolean> {\n    const found = await this.fileInfo(path, context);\n    if (found.ok) return ok(true);\n    return found.error.code === 'not_found' ? ok(false) : found;\n  }\n\n  createDir(\n    path: string,\n    _options: { recursive?: boolean } | undefined,\n    context: Context\n  ): FileResult<void> {\n    const resolved = this.#written(path);\n    return attempt(context, resolved, () => this.#fs.mkdir(resolved));\n  }\n\n  remove(\n    path: string,\n    options: { recursive?: boolean; force?: boolean } | undefined,\n    context: Context\n  ): FileResult<void> {\n    const resolved = this.#written(path);\n    return attempt(context, resolved, async () => {\n      if (!options?.recursive) {\n        const stat = await this.#fs.lstat(resolved).catch((error: unknown) => {\n          if (options?.force) return undefined;\n          throw error;\n        });\n        if (stat?.isDirectory) throw Object.assign(new Error('Is a directory'), { code: 'EISDIR' });\n      }\n      await this.#fs.rm(resolved, { force: options?.force ?? false });\n    });\n  }\n\n  async createTempDir(prefix: string | undefined, context: Context): FileResult<string> {\n    const path = `/tmp/${prefix ?? 'tmp-'}${crypto.randomUUID()}`;\n    return attempt(context, path, async () => {\n      await this.#fs.mkdir(path);\n      return path;\n    });\n  }\n\n  async createTempFile(\n    options: { prefix?: string; suffix?: string } | undefined,\n    context: Context\n  ): FileResult<string> {\n    const dir = await this.createTempDir('tmp-', context);\n    if (!dir.ok) return dir;\n    const path = `${dir.value}/${options?.prefix ?? ''}${crypto.randomUUID()}${options?.suffix ?? ''}`;\n    return attempt(context, path, async () => {\n      await this.#fs.writeFile(path, '');\n      return path;\n    });\n  }\n\n  exec(\n    command: string | readonly string[],\n    options: ShellExecOptions | undefined,\n    context: Context\n  ): Promise<Result<ShellExecResult, ExecutionError>> {\n    const ended = this.#activity?.began();\n    const line = typeof command === 'string' ? prefixed(command, this.#exports) : command;\n    const groups = this.#groups;\n    const owner = this.#owner;\n    if (!groups || owner === undefined)\n      return execute(this.#client, this.cwd, line, options, context).finally(ended);\n    return this.#grouped(groups, owner, line, options, context).finally(ended);\n  }\n\n  async #grouped(\n    groups: ProcessGroups,\n    owner: number,\n    line: string | readonly string[],\n    options: ShellExecOptions | undefined,\n    context: Context\n  ): Promise<Result<ShellExecResult, ExecutionError>> {\n    for (let wait = groups.pending(owner); wait; wait = groups.pending(owner)) await wait;\n    const pgid = groups.shared(owner);\n    const release = pgid === undefined && groups.joins() ? groups.reserve(owner) : () => undefined;\n    const spawned = (process: KernelProcess) => {\n      groups.track(owner, process);\n      release();\n    };\n    const join = groups.joins()\n      ? {\n          ...(pgid === undefined ? {} : { pgid }),\n          refused: (code: string) => groups.refused(owner, code),\n        }\n      : undefined;\n    return execute(this.#client, this.cwd, line, options, context, spawned, join).finally(release);\n  }\n\n  async cleanup(context: Context): Promise<void> {\n    for (const watcher of [...this.#watchers]) await watcher.close(context);\n    this.#watchers.clear();\n  }\n}\n\nexport const HOME = '/home';\n\nexport type EnvTargetLike = { cwd?: string; conversationId?: number; read?: unknown };\n\nexport function kernelEnvironment(\n  client: KernelClient,\n  options: Omit<KernelEnvOptions, 'cwd'> & {\n    identify?: (target: EnvTargetLike, context: Context) => Promise<Record<string, string>>;\n  } = {}\n): (target: EnvTargetLike, context?: Context) => SliccKernelEnv | Promise<SliccKernelEnv> {\n  const { identify, ...rest } = options;\n  const make = (target: EnvTargetLike, exports?: Record<string, string>) =>\n    new SliccKernelEnv(client, {\n      ...rest,\n      cwd: target.cwd ?? HOME,\n      ...(target.conversationId === undefined ? {} : { owner: target.conversationId }),\n      ...(exports ? { exports } : {}),\n    });\n  return (target, context) =>\n    identify && context\n      ? identify(target, context).then((exports) => make(target, exports))\n      : make(target);\n}\n"],
-  "mappings": "AACA;AAAA,EAKE;AAAA,EACA;AAAA,EAGA;AAAA,OAOK;AAGP,SAAS,eAAe;AACxB,SAAS,SAAS,MAAM,iBAAiB,eAAe,sBAAsB;AAE9E,SAAS,SAAS,WAAW,eAAe;AAC5C,SAAS,aAA+B,WAAW,iBAAiB;AAY7D,SAAS,MAAM,OAAuB;AAC3C,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AAEO,SAAS,SACd,SACA,SACQ;AACR,QAAM,QAAQ,OAAO,KAAK,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,qBAAqB,KAAK,IAAI,CAAC;AACzF,MAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,SAAO,UAAU,MAAM,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,MAAO,QAAmC,IAAI,CAAW,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,KAAK,OAAO;AACrI;AAIO,MAAM,eAAuC;AAAA,EACzC;AAAA,EACT;AAAA,EACS;AAAA,EACA,YAAY,oBAAI,IAAiB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAAsB,SAA2B;AAC3D,SAAK,UAAU;AACf,SAAK,MAAM,QAAQ;AACnB,SAAK,KAAK,QAAQ,MAAM;AACxB,SAAK,QAAQ,QAAQ,SAAS,CAAC;AAC/B,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ;AACvB,SAAK,SAAS,QAAQ;AACtB,SAAK,WAAW,QAAQ;AAAA,EAC1B;AAAA,EAEA,MAAM,MAAsB;AAC1B,WAAO,QAAQ,KAAK,KAAK,IAAI;AAAA,EAC/B;AAAA,EAEA,SAAS,MAAsB;AAC7B,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,SAAK,WAAW,MAAM,QAAQ;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,MAAM;AACR,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,aAAa,MAAkC;AACnD,WAAO,GAAG,KAAK,MAAM,IAAI,CAAC;AAAA,EAC5B;AAAA,EAEA,MAAM,SAAS,OAAqC;AAClD,WAAO,GAAG,UAAU,MAAM,KAAK,GAAG,CAAC,CAAC;AAAA,EACtC;AAAA,EAEA,aAAa,MAAc,SAAsC;AAC/D,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,MAAM,KAAK,IAAI,SAAS,QAAQ,CAAC;AAAA,EACrE;AAAA,EAEA,eAAe,MAAc,SAA0C;AACrE,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,MAAM,KAAK,IAAI,SAAS,QAAQ,CAAC;AAAA,EACrE;AAAA,EAEA,MAAM,mBAAmB,MAAc,SAA8C;AACnF,UAAM,OAAO,MAAM,KAAK,aAAa,MAAM,OAAO;AAClD,WAAO,KAAK,KAAK,GAAG,IAAI,cAAc,KAAK,KAAK,CAAC,IAAI;AAAA,EACvD;AAAA,EAEA,MAAM,cACJ,MACA,SACA,SACsB;AACtB,QAAI,SAAS,aAAa,UAAa,QAAQ,YAAY,EAAG,QAAO,GAAG,CAAC,CAAC;AAC1E,UAAM,OAAO,MAAM,KAAK,aAAa,MAAM,OAAO;AAClD,QAAI,CAAC,KAAK,GAAI,QAAO;AACrB,UAAM,SAAS,IAAI,cAAc,KAAK,KAAK;AAC3C,UAAM,QAAkB,CAAC;AACzB,aACM,OAAO,MAAM,OAAO,SAAS,GACjC,KAAK,MAAM,KAAK,OAChB,OAAO,MAAM,OAAO,SAAS,GAC7B;AACA,UAAI,SAAS,aAAa,UAAa,MAAM,UAAU,QAAQ,SAAU;AACzE,YAAM,KAAK,KAAK,MAAM,IAAI;AAAA,IAC5B;AACA,WAAO,GAAG,KAAK;AAAA,EACjB;AAAA,EAEA,iBACE,MACA,SACA,SAC0B;AAC1B,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,UAAI,SAAS,aAAa,MAAM,KAAK,IAAI,MAAM,QAAQ,GAAG,gBAAgB;AACxE,cAAM,IAAI,UAAU,WAAW,sCAAsC,QAAQ;AAAA,MAC/E;AACA,YAAM,OAAO,MAAM,KAAK,IAAI,KAAK,QAAQ;AACzC,UAAI,KAAK,YAAa,OAAM,IAAI,UAAU,gBAAgB,kBAAkB,QAAQ;AACpF,UAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,UAAU,WAAW,sBAAsB,QAAQ;AAC/E,aAAO,IAAI,eAAe,MAAM,KAAK,IAAI,SAAS,QAAQ,GAAG,KAAK,UAAU,IAAI,CAAC;AAAA,IACnF,CAAC;AAAA,EACH;AAAA,EAEA,UAAU,MAAc,SAA8B,SAAoC;AACxF,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,YAAM,KAAK,IAAI,MAAM,QAAQ,QAAQ,CAAC;AACtC,YAAM,KAAK,IAAI,UAAU,UAAU,OAAO;AAAA,IAC5C,CAAC;AAAA,EACH;AAAA,EAEA,WAAW,MAAc,SAA8B,SAAoC;AACzF,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,YAAM,SAAU,MAAM,KAAK,IAAI,OAAO,QAAQ,IAC1C,MAAM,KAAK,IAAI,SAAS,QAAQ,IAChC,IAAI,WAAW;AACnB,YAAM,QAAQ,OAAO,YAAY,WAAW,IAAI,YAAY,EAAE,OAAO,OAAO,IAAI;AAChF,YAAM,MAAM,IAAI,WAAW,OAAO,SAAS,MAAM,MAAM;AACvD,UAAI,IAAI,MAAM;AACd,UAAI,IAAI,OAAO,OAAO,MAAM;AAC5B,YAAM,KAAK,IAAI,MAAM,QAAQ,QAAQ,CAAC;AACtC,YAAM,KAAK,IAAI,UAAU,UAAU,GAAG;AAAA,IACxC,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,MAAc,MAAc,SAAoC;AAC3E,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,QAAI,CAAC,OAAO,cAAc,IAAI,KAAK,OAAO,GAAG;AAC3C,aAAO,QAAQ;AAAA,QACb,IAAI,IAAI,UAAU,WAAW,4CAA4C,QAAQ,CAAC;AAAA,MACpF;AAAA,IACF;AACA,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,YAAM,SAAS,MAAM,KAAK,IAAI,SAAS,QAAQ;AAC/C,YAAM,QAAQ,IAAI,WAAW,IAAI;AACjC,YAAM,IAAI,OAAO,SAAS,GAAG,IAAI,CAAC;AAClC,YAAM,KAAK,IAAI,UAAU,UAAU,KAAK;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA,EAEA,UAAU,MAAc,SAAoC;AAC1D,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,WAAK,MAAM,KAAK,IAAI,KAAK,QAAQ,GAAG;AAClC,cAAM,OAAO,OAAO,IAAI,MAAM,gBAAgB,GAAG,EAAE,MAAM,SAAS,CAAC;AAAA,IACvE,CAAC;AAAA,EACH;AAAA,EAEA,WAAW,YAAoB,iBAAyB,SAAoC;AAC1F,UAAM,SAAS,KAAK,SAAS,UAAU;AACvC,WAAO,QAAQ,SAAS,QAAQ,MAAM,KAAK,IAAI,OAAO,QAAQ,KAAK,SAAS,eAAe,CAAC,CAAC;AAAA,EAC/F;AAAA,EAEA,SAAS,MAAc,SAAwC;AAC7D,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,YAAY,KAAK,UAAU,MAAM,KAAK,IAAI,MAAM,QAAQ,CAAC,CAAC;AAAA,EAC9F;AAAA,EAEA,MAAM,QAAQ,MAAc,SAA0C;AACpE,UAAM,SAAS,MAAM,KAAK,cAAc,MAAM,OAAO;AACrD,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,WAAO,GAAG,MAAO,OAAO,MAA0B,KAAK,CAAC;AAAA,EAC1D;AAAA,EAEA,cAAc,MAAc,SAAyC;AACnE,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,UAAI,EAAE,MAAM,KAAK,IAAI,KAAK,QAAQ,GAAG,aAAa;AAChD,cAAM,OAAO,OAAO,IAAI,MAAM,iBAAiB,GAAG,EAAE,MAAM,UAAU,CAAC;AAAA,MACvE;AACA,aAAO,IAAI,gBAAgB,KAAK,KAAK,UAAU,MAAM,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAAA,IACjF,CAAC;AAAA,EACH;AAAA,EAEA,MACE,SACA,UACA,SACyB;AACzB,WAAO,QAAQ,SAAS,KAAK,KAAK,YAAY;AAC5C,UAAI,SAA6C,MAAM;AACvD,YAAM,WAAW,CAAC,WAAwB;AACxC,YAAI,WAAW,OAAQ,QAAO,OAAO,KAAK;AAC1C,iBAAS,MAAM;AAAA,MACjB;AACA,YAAM,SACJ,KAAK,MAAM,SAAS,YAChB,SACA,MAAM,YAAY,KAAK,KAAK,KAAK,KAAK,SAAS,QAAQ;AAC7D,YAAM,aAAa,SAAU,KAAK,MAAM,YAAY,YAAa,KAAK,MAAM;AAC5E,YAAM,SAAS,MAAM,UAAU,KAAK,KAAK,KAAK,KAAK,SAAS,UAAU;AAAA,QACpE,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,MACnD,CAAC;AACD,eAAS,CAAC,UAAU,OAAO,OAAO,KAAK;AACvC,YAAM,UAAuB,SACzB;AAAA,QACE,MAAM;AAAA,QACN,MAAM,MAAM,SAAkB;AAC5B,gBAAM,OAAO,MAAM,OAAO;AAC1B,gBAAM,OAAO,MAAM,OAAO;AAAA,QAC5B;AAAA,MACF,IACA;AACJ,WAAK,UAAU,IAAI,OAAO;AAC1B,aAAO;AAAA,QACL,MAAM,QAAQ;AAAA,QACd,OAAO,OAAO,YAAqB;AACjC,eAAK,UAAU,OAAO,OAAO;AAC7B,gBAAM,QAAQ,MAAM,OAAO;AAAA,QAC7B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,cAAc,MAAc,SAAsC;AAChE,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,MAAM,KAAK,IAAI,SAAS,QAAQ,CAAC;AAAA,EACrE;AAAA,EAEA,MAAM,OAAO,MAAc,SAAuC;AAChE,UAAM,QAAQ,MAAM,KAAK,SAAS,MAAM,OAAO;AAC/C,QAAI,MAAM,GAAI,QAAO,GAAG,IAAI;AAC5B,WAAO,MAAM,MAAM,SAAS,cAAc,GAAG,KAAK,IAAI;AAAA,EACxD;AAAA,EAEA,UACE,MACA,UACA,SACkB;AAClB,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,WAAO,QAAQ,SAAS,UAAU,MAAM,KAAK,IAAI,MAAM,QAAQ,CAAC;AAAA,EAClE;AAAA,EAEA,OACE,MACA,SACA,SACkB;AAClB,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,UAAI,CAAC,SAAS,WAAW;AACvB,cAAM,OAAO,MAAM,KAAK,IAAI,MAAM,QAAQ,EAAE,MAAM,CAAC,UAAmB;AACpE,cAAI,SAAS,MAAO,QAAO;AAC3B,gBAAM;AAAA,QACR,CAAC;AACD,YAAI,MAAM,YAAa,OAAM,OAAO,OAAO,IAAI,MAAM,gBAAgB,GAAG,EAAE,MAAM,SAAS,CAAC;AAAA,MAC5F;AACA,YAAM,KAAK,IAAI,GAAG,UAAU,EAAE,OAAO,SAAS,SAAS,MAAM,CAAC;AAAA,IAChE,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,QAA4B,SAAsC;AACpF,UAAM,OAAO,QAAQ,UAAU,MAAM,GAAG,OAAO,WAAW,CAAC;AAC3D,WAAO,QAAQ,SAAS,MAAM,YAAY;AACxC,YAAM,KAAK,IAAI,MAAM,IAAI;AACzB,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,eACJ,SACA,SACoB;AACpB,UAAM,MAAM,MAAM,KAAK,cAAc,QAAQ,OAAO;AACpD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAO,GAAG,IAAI,KAAK,IAAI,SAAS,UAAU,EAAE,GAAG,OAAO,WAAW,CAAC,GAAG,SAAS,UAAU,EAAE;AAChG,WAAO,QAAQ,SAAS,MAAM,YAAY;AACxC,YAAM,KAAK,IAAI,UAAU,MAAM,EAAE;AACjC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,KACE,SACA,SACA,SACkD;AAClD,UAAM,QAAQ,KAAK,WAAW,MAAM;AACpC,UAAM,OAAO,OAAO,YAAY,WAAW,SAAS,SAAS,KAAK,QAAQ,IAAI;AAC9E,UAAM,SAAS,KAAK;AACpB,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,UAAU,UAAU;AACvB,aAAO,QAAQ,KAAK,SAAS,KAAK,KAAK,MAAM,SAAS,OAAO,EAAE,QAAQ,KAAK;AAC9E,WAAO,KAAK,SAAS,QAAQ,OAAO,MAAM,SAAS,OAAO,EAAE,QAAQ,KAAK;AAAA,EAC3E;AAAA,EAEA,MAAM,SACJ,QACA,OACA,MACA,SACA,SACkD;AAClD,aAAS,OAAO,OAAO,QAAQ,KAAK,GAAG,MAAM,OAAO,OAAO,QAAQ,KAAK,EAAG,OAAM;AACjF,UAAM,OAAO,OAAO,OAAO,KAAK;AAChC,UAAM,UAAU,SAAS,UAAa,OAAO,MAAM,IAAI,OAAO,QAAQ,KAAK,IAAI,MAAM;AACrF,UAAM,UAAU,CAAC,YAA2B;AAC1C,aAAO,MAAM,OAAO,OAAO;AAC3B,cAAQ;AAAA,IACV;AACA,UAAM,OAAO,OAAO,MAAM,IACtB;AAAA,MACE,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,KAAK;AAAA,MACrC,SAAS,CAAC,SAAiB,OAAO,QAAQ,OAAO,IAAI;AAAA,IACvD,IACA;AACJ,WAAO,QAAQ,KAAK,SAAS,KAAK,KAAK,MAAM,SAAS,SAAS,SAAS,IAAI,EAAE,QAAQ,OAAO;AAAA,EAC/F;AAAA,EAEA,MAAM,QAAQ,SAAiC;AAC7C,eAAW,WAAW,CAAC,GAAG,KAAK,SAAS,EAAG,OAAM,QAAQ,MAAM,OAAO;AACtE,SAAK,UAAU,MAAM;AAAA,EACvB;AACF;AAEO,MAAM,OAAO;AAIb,SAAS,kBACd,QACA,UAEI,CAAC,GACmF;AACxF,QAAM,EAAE,UAAU,GAAG,KAAK,IAAI;AAC9B,QAAM,OAAO,CAAC,QAAuB,YACnC,IAAI,eAAe,QAAQ;AAAA,IACzB,GAAG;AAAA,IACH,KAAK,OAAO,OAAO;AAAA,IACnB,GAAI,OAAO,mBAAmB,SAAY,CAAC,IAAI,EAAE,OAAO,OAAO,eAAe;AAAA,IAC9E,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B,CAAC;AACH,SAAO,CAAC,QAAQ,YACd,YAAY,UACR,SAAS,QAAQ,OAAO,EAAE,KAAK,CAAC,YAAY,KAAK,QAAQ,OAAO,CAAC,IACjE,KAAK,MAAM;AACnB;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type BinaryReader,\n  type DirReader,\n  type ExecutionEnv,\n  type ExecutionError,\n  err,\n  FileError,\n  type FileInfo,\n  type FileWatcher,\n  ok,\n  type Result,\n  type ShellExecOptions,\n  type ShellExecResult,\n  type TextLineReader,\n  type WatchChange,\n  type WatchTarget,\n} from '@earendil-works/pi-durable/env';\nimport { mimeOf } from '../images/index.ts';\nimport type { Scrub } from '../secrets/scrub.ts';\nimport type { Activity } from './activity.ts';\nimport type { KernelClient, KernelProcess } from './client.ts';\nimport { type ExecHooks, execute } from './exec.ts';\nimport { attempt, info, KernelDirReader, SnapshotLines, SnapshotReader } from './files.ts';\nimport type { ProcessGroups } from './groups.ts';\nimport { dirname, normalize, resolve } from './paths.ts';\nimport { nativeWatch, type PollOptions, pollWatch, RESCAN_MS } from './watch.ts';\n\nexport interface KernelEnvOptions {\n  cwd: string;\n  id?: string;\n  watch?: PollOptions;\n  activity?: Activity;\n  groups?: ProcessGroups;\n  owner?: number;\n  exports?: Readonly<Record<string, string>>;\n  scrub?: Scrub;\n  spawn?: (argv: readonly string[]) => readonly string[];\n}\n\nexport const STREAMED_READ = 8 * 1024 * 1024;\nexport const READ_CHUNK = 1024 * 1024;\n\nexport async function scrubbedFile(scrub: Scrub, bytes: Uint8Array): Promise<Uint8Array> {\n  if (mimeOf(bytes)) return bytes;\n  if (bytes.length <= STREAMED_READ) return (await scrub.texts([bytes]))[0] as Uint8Array;\n  const stream = scrub.stream();\n  const parts: Uint8Array[] = [];\n  for (let at = 0; at < bytes.length; at += READ_CHUNK)\n    parts.push(await stream.push(bytes.subarray(at, at + READ_CHUNK)));\n  parts.push(await stream.end());\n  const all = new Uint8Array(parts.reduce((sum, part) => sum + part.length, 0));\n  let offset = 0;\n  for (const part of parts) {\n    all.set(part, offset);\n    offset += part.length;\n  }\n  return all;\n}\n\nexport function quote(value: string): string {\n  return `'${value.replace(/'/g, \"'\\\\''\")}'`;\n}\n\nexport function prefixed(\n  command: string,\n  exports: Readonly<Record<string, string>> | undefined\n): string {\n  const names = Object.keys(exports ?? {}).filter((name) => /^[A-Z_][A-Z0-9_]*$/.test(name));\n  if (!names.length) return command;\n  return `export ${names.map((name) => `${name}=${quote((exports as Record<string, string>)[name] as string)}`).join(' ')}; ${command}`;\n}\n\ntype FileResult<T> = Promise<Result<T, FileError>>;\n\nexport class SliccKernelEnv implements ExecutionEnv {\n  readonly id: string;\n  cwd: string;\n  readonly #client: KernelClient;\n  readonly #watchers = new Set<FileWatcher>();\n  readonly #poll: PollOptions;\n  readonly #activity: Activity | undefined;\n  readonly #groups: ProcessGroups | undefined;\n  readonly #owner: number | undefined;\n  readonly #exports: Readonly<Record<string, string>> | undefined;\n  readonly #hooks: ExecHooks;\n  readonly #scrub: Scrub | undefined;\n\n  constructor(client: KernelClient, options: KernelEnvOptions) {\n    this.#client = client;\n    this.cwd = options.cwd;\n    this.id = options.id ?? 'slicc-kernel';\n    this.#poll = options.watch ?? {};\n    this.#activity = options.activity;\n    this.#groups = options.groups;\n    this.#owner = options.owner;\n    this.#exports = options.exports;\n    this.#scrub = options.scrub;\n    const scrub = options.scrub;\n    this.#hooks = {\n      ...(scrub ? { scrub: () => scrub.stream() } : {}),\n      ...(options.spawn ? { spawn: options.spawn } : {}),\n    };\n  }\n\n  #path(path: string): string {\n    return resolve(this.cwd, path);\n  }\n\n  #written(path: string): string {\n    const resolved = this.#path(path);\n    this.#activity?.wrote(resolved);\n    return resolved;\n  }\n\n  get #fs() {\n    return this.#client.fs;\n  }\n\n  async absolutePath(path: string): FileResult<string> {\n    return ok(this.#path(path));\n  }\n\n  async joinPath(parts: string[]): FileResult<string> {\n    return ok(normalize(parts.join('/')));\n  }\n\n  readTextFile(path: string, context: Context): FileResult<string> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, () => this.#fs.readText(resolved));\n  }\n\n  readBinaryFile(path: string, context: Context): FileResult<Uint8Array> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, () => this.#fs.readFile(resolved));\n  }\n\n  async openTextLineReader(path: string, context: Context): FileResult<TextLineReader> {\n    const text = await this.readTextFile(path, context);\n    return text.ok ? ok(new SnapshotLines(text.value)) : text;\n  }\n\n  async readTextLines(\n    path: string,\n    options: { maxLines?: number } | undefined,\n    context: Context\n  ): FileResult<string[]> {\n    if (options?.maxLines !== undefined && options.maxLines <= 0) return ok([]);\n    const text = await this.readTextFile(path, context);\n    if (!text.ok) return text;\n    const reader = new SnapshotLines(text.value);\n    const lines: string[] = [];\n    for (\n      let line = await reader.readLine();\n      line.ok && line.value;\n      line = await reader.readLine()\n    ) {\n      if (options?.maxLines !== undefined && lines.length >= options.maxLines) break;\n      lines.push(line.value.text);\n    }\n    return ok(lines);\n  }\n\n  openBinaryReader(\n    path: string,\n    options: { noFollow?: boolean } | undefined,\n    context: Context\n  ): FileResult<BinaryReader> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, async () => {\n      if (options?.noFollow && (await this.#fs.lstat(resolved)).isSymbolicLink) {\n        throw new FileError('invalid', 'Refusing to follow a symbolic link', resolved);\n      }\n      const stat = await this.#fs.stat(resolved);\n      if (stat.isDirectory) throw new FileError('is_directory', 'Is a directory', resolved);\n      if (!stat.isFile) throw new FileError('invalid', 'Not a regular file', resolved);\n      const bytes = await this.#fs.readFile(resolved);\n      if (!this.#scrub) return new SnapshotReader(bytes, info(resolved, stat));\n      const shown = await scrubbedFile(this.#scrub, bytes);\n      return new SnapshotReader(shown, { ...info(resolved, stat), size: shown.length });\n    });\n  }\n\n  writeFile(path: string, content: string | Uint8Array, context: Context): FileResult<void> {\n    const resolved = this.#written(path);\n    return attempt(context, resolved, async () => {\n      await this.#fs.mkdir(dirname(resolved));\n      await this.#fs.writeFile(resolved, content);\n    });\n  }\n\n  appendFile(path: string, content: string | Uint8Array, context: Context): FileResult<void> {\n    const resolved = this.#written(path);\n    return attempt(context, resolved, async () => {\n      const before = (await this.#fs.exists(resolved))\n        ? await this.#fs.readFile(resolved)\n        : new Uint8Array();\n      const added = typeof content === 'string' ? new TextEncoder().encode(content) : content;\n      const all = new Uint8Array(before.length + added.length);\n      all.set(before);\n      all.set(added, before.length);\n      await this.#fs.mkdir(dirname(resolved));\n      await this.#fs.writeFile(resolved, all);\n    });\n  }\n\n  truncateFile(path: string, size: number, context: Context): FileResult<void> {\n    const resolved = this.#written(path);\n    if (!Number.isSafeInteger(size) || size < 0) {\n      return Promise.resolve(\n        err(new FileError('invalid', 'File size must be a non-negative integer', resolved))\n      );\n    }\n    return attempt(context, resolved, async () => {\n      const before = await this.#fs.readFile(resolved);\n      const after = new Uint8Array(size);\n      after.set(before.subarray(0, size));\n      await this.#fs.writeFile(resolved, after);\n    });\n  }\n\n  flushFile(path: string, context: Context): FileResult<void> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, async () => {\n      if ((await this.#fs.stat(resolved)).isDirectory)\n        throw Object.assign(new Error('Is a directory'), { code: 'EISDIR' });\n    });\n  }\n\n  renameFile(sourcePath: string, destinationPath: string, context: Context): FileResult<void> {\n    const source = this.#written(sourcePath);\n    return attempt(context, source, () => this.#fs.rename(source, this.#written(destinationPath)));\n  }\n\n  fileInfo(path: string, context: Context): FileResult<FileInfo> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, async () => info(resolved, await this.#fs.lstat(resolved)));\n  }\n\n  async listDir(path: string, context: Context): FileResult<FileInfo[]> {\n    const reader = await this.openDirReader(path, context);\n    if (!reader.ok) return reader;\n    return ok(await (reader.value as KernelDirReader).rest());\n  }\n\n  openDirReader(path: string, context: Context): FileResult<DirReader> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, async () => {\n      if (!(await this.#fs.stat(resolved)).isDirectory) {\n        throw Object.assign(new Error('Not a directory'), { code: 'ENOTDIR' });\n      }\n      return new KernelDirReader(this.#fs, resolved, await this.#fs.readdir(resolved));\n    });\n  }\n\n  watch(\n    targets: readonly WatchTarget[],\n    onChange: (change: WatchChange) => void,\n    context: Context\n  ): FileResult<FileWatcher> {\n    return attempt(context, this.cwd, async () => {\n      let absorb: (paths: readonly string[]) => void = () => undefined;\n      const reported = (change: WatchChange) => {\n        if ('paths' in change) absorb(change.paths);\n        onChange(change);\n      };\n      const native =\n        this.#poll.mode === 'polling'\n          ? undefined\n          : await nativeWatch(this.#fs, this.cwd, targets, reported);\n      const intervalMs = native ? (this.#poll.rescanMs ?? RESCAN_MS) : this.#poll.intervalMs;\n      const polled = await pollWatch(this.#fs, this.cwd, targets, onChange, {\n        ...(intervalMs === undefined ? {} : { intervalMs }),\n      });\n      absorb = (paths) => polled.absorb(paths);\n      const watcher: FileWatcher = native\n        ? {\n            mode: 'native',\n            async close(closing: Context) {\n              await native.close(closing);\n              await polled.close(closing);\n            },\n          }\n        : polled;\n      this.#watchers.add(watcher);\n      return {\n        mode: watcher.mode,\n        close: async (closing: Context) => {\n          this.#watchers.delete(watcher);\n          await watcher.close(closing);\n        },\n      };\n    });\n  }\n\n  canonicalPath(path: string, context: Context): FileResult<string> {\n    const resolved = this.#path(path);\n    return attempt(context, resolved, () => this.#fs.realpath(resolved));\n  }\n\n  async exists(path: string, context: Context): FileResult<boolean> {\n    const found = await this.fileInfo(path, context);\n    if (found.ok) return ok(true);\n    return found.error.code === 'not_found' ? ok(false) : found;\n  }\n\n  createDir(\n    path: string,\n    _options: { recursive?: boolean } | undefined,\n    context: Context\n  ): FileResult<void> {\n    const resolved = this.#written(path);\n    return attempt(context, resolved, () => this.#fs.mkdir(resolved));\n  }\n\n  remove(\n    path: string,\n    options: { recursive?: boolean; force?: boolean } | undefined,\n    context: Context\n  ): FileResult<void> {\n    const resolved = this.#written(path);\n    return attempt(context, resolved, async () => {\n      if (!options?.recursive) {\n        const stat = await this.#fs.lstat(resolved).catch((error: unknown) => {\n          if (options?.force) return undefined;\n          throw error;\n        });\n        if (stat?.isDirectory) throw Object.assign(new Error('Is a directory'), { code: 'EISDIR' });\n      }\n      await this.#fs.rm(resolved, { force: options?.force ?? false });\n    });\n  }\n\n  async createTempDir(prefix: string | undefined, context: Context): FileResult<string> {\n    const path = `/tmp/${prefix ?? 'tmp-'}${crypto.randomUUID()}`;\n    return attempt(context, path, async () => {\n      await this.#fs.mkdir(path);\n      return path;\n    });\n  }\n\n  async createTempFile(\n    options: { prefix?: string; suffix?: string } | undefined,\n    context: Context\n  ): FileResult<string> {\n    const dir = await this.createTempDir('tmp-', context);\n    if (!dir.ok) return dir;\n    const path = `${dir.value}/${options?.prefix ?? ''}${crypto.randomUUID()}${options?.suffix ?? ''}`;\n    return attempt(context, path, async () => {\n      await this.#fs.writeFile(path, '');\n      return path;\n    });\n  }\n\n  exec(\n    command: string | readonly string[],\n    options: ShellExecOptions | undefined,\n    context: Context\n  ): Promise<Result<ShellExecResult, ExecutionError>> {\n    const ended = this.#activity?.began();\n    const line = typeof command === 'string' ? prefixed(command, this.#exports) : command;\n    const groups = this.#groups;\n    const owner = this.#owner;\n    if (!groups || owner === undefined)\n      return execute(\n        this.#client,\n        this.cwd,\n        line,\n        options,\n        context,\n        undefined,\n        undefined,\n        this.#hooks\n      ).finally(ended);\n    return this.#grouped(groups, owner, line, options, context).finally(ended);\n  }\n\n  async #grouped(\n    groups: ProcessGroups,\n    owner: number,\n    line: string | readonly string[],\n    options: ShellExecOptions | undefined,\n    context: Context\n  ): Promise<Result<ShellExecResult, ExecutionError>> {\n    for (let wait = groups.pending(owner); wait; wait = groups.pending(owner)) await wait;\n    const pgid = groups.shared(owner);\n    const release = pgid === undefined && groups.joins() ? groups.reserve(owner) : () => undefined;\n    const spawned = (process: KernelProcess) => {\n      groups.track(owner, process);\n      release();\n    };\n    const join = groups.joins()\n      ? {\n          ...(pgid === undefined ? {} : { pgid }),\n          refused: (code: string) => groups.refused(owner, code),\n        }\n      : undefined;\n    return execute(\n      this.#client,\n      this.cwd,\n      line,\n      options,\n      context,\n      spawned,\n      join,\n      this.#hooks\n    ).finally(release);\n  }\n\n  async cleanup(context: Context): Promise<void> {\n    for (const watcher of [...this.#watchers]) await watcher.close(context);\n    this.#watchers.clear();\n  }\n}\n\nexport const HOME = '/home';\n\nexport type EnvTargetLike = { cwd?: string; conversationId?: number; read?: unknown };\n\nexport function kernelEnvironment(\n  client: KernelClient,\n  options: Omit<KernelEnvOptions, 'cwd'> & {\n    identify?: (target: EnvTargetLike, context: Context) => Promise<Record<string, string>>;\n  } = {}\n): (target: EnvTargetLike, context?: Context) => SliccKernelEnv | Promise<SliccKernelEnv> {\n  const { identify, ...rest } = options;\n  const make = (target: EnvTargetLike, exports?: Record<string, string>) =>\n    new SliccKernelEnv(client, {\n      ...rest,\n      cwd: target.cwd ?? HOME,\n      ...(target.conversationId === undefined ? {} : { owner: target.conversationId }),\n      ...(exports ? { exports } : {}),\n    });\n  return (target, context) =>\n    identify && context\n      ? identify(target, context).then((exports) => make(target, exports))\n      : make(target);\n}\n"],
+  "mappings": "AACA;AAAA,EAKE;AAAA,EACA;AAAA,EAGA;AAAA,OAOK;AACP,SAAS,cAAc;AAIvB,SAAyB,eAAe;AACxC,SAAS,SAAS,MAAM,iBAAiB,eAAe,sBAAsB;AAE9E,SAAS,SAAS,WAAW,eAAe;AAC5C,SAAS,aAA+B,WAAW,iBAAiB;AAc7D,MAAM,gBAAgB,IAAI,OAAO;AACjC,MAAM,aAAa,OAAO;AAEjC,eAAsB,aAAa,OAAc,OAAwC;AACvF,MAAI,OAAO,KAAK,EAAG,QAAO;AAC1B,MAAI,MAAM,UAAU,cAAe,SAAQ,MAAM,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;AACxE,QAAM,SAAS,MAAM,OAAO;AAC5B,QAAM,QAAsB,CAAC;AAC7B,WAAS,KAAK,GAAG,KAAK,MAAM,QAAQ,MAAM;AACxC,UAAM,KAAK,MAAM,OAAO,KAAK,MAAM,SAAS,IAAI,KAAK,UAAU,CAAC,CAAC;AACnE,QAAM,KAAK,MAAM,OAAO,IAAI,CAAC;AAC7B,QAAM,MAAM,IAAI,WAAW,MAAM,OAAO,CAAC,KAAK,SAAS,MAAM,KAAK,QAAQ,CAAC,CAAC;AAC5E,MAAI,SAAS;AACb,aAAW,QAAQ,OAAO;AACxB,QAAI,IAAI,MAAM,MAAM;AACpB,cAAU,KAAK;AAAA,EACjB;AACA,SAAO;AACT;AAEO,SAAS,MAAM,OAAuB;AAC3C,SAAO,IAAI,MAAM,QAAQ,MAAM,OAAO,CAAC;AACzC;AAEO,SAAS,SACd,SACA,SACQ;AACR,QAAM,QAAQ,OAAO,KAAK,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,qBAAqB,KAAK,IAAI,CAAC;AACzF,MAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,SAAO,UAAU,MAAM,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,MAAO,QAAmC,IAAI,CAAW,CAAC,EAAE,EAAE,KAAK,GAAG,CAAC,KAAK,OAAO;AACrI;AAIO,MAAM,eAAuC;AAAA,EACzC;AAAA,EACT;AAAA,EACS;AAAA,EACA,YAAY,oBAAI,IAAiB;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAAsB,SAA2B;AAC3D,SAAK,UAAU;AACf,SAAK,MAAM,QAAQ;AACnB,SAAK,KAAK,QAAQ,MAAM;AACxB,SAAK,QAAQ,QAAQ,SAAS,CAAC;AAC/B,SAAK,YAAY,QAAQ;AACzB,SAAK,UAAU,QAAQ;AACvB,SAAK,SAAS,QAAQ;AACtB,SAAK,WAAW,QAAQ;AACxB,SAAK,SAAS,QAAQ;AACtB,UAAM,QAAQ,QAAQ;AACtB,SAAK,SAAS;AAAA,MACZ,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,OAAO,EAAE,IAAI,CAAC;AAAA,MAC/C,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAClD;AAAA,EACF;AAAA,EAEA,MAAM,MAAsB;AAC1B,WAAO,QAAQ,KAAK,KAAK,IAAI;AAAA,EAC/B;AAAA,EAEA,SAAS,MAAsB;AAC7B,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,SAAK,WAAW,MAAM,QAAQ;AAC9B,WAAO;AAAA,EACT;AAAA,EAEA,IAAI,MAAM;AACR,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,aAAa,MAAkC;AACnD,WAAO,GAAG,KAAK,MAAM,IAAI,CAAC;AAAA,EAC5B;AAAA,EAEA,MAAM,SAAS,OAAqC;AAClD,WAAO,GAAG,UAAU,MAAM,KAAK,GAAG,CAAC,CAAC;AAAA,EACtC;AAAA,EAEA,aAAa,MAAc,SAAsC;AAC/D,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,MAAM,KAAK,IAAI,SAAS,QAAQ,CAAC;AAAA,EACrE;AAAA,EAEA,eAAe,MAAc,SAA0C;AACrE,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,MAAM,KAAK,IAAI,SAAS,QAAQ,CAAC;AAAA,EACrE;AAAA,EAEA,MAAM,mBAAmB,MAAc,SAA8C;AACnF,UAAM,OAAO,MAAM,KAAK,aAAa,MAAM,OAAO;AAClD,WAAO,KAAK,KAAK,GAAG,IAAI,cAAc,KAAK,KAAK,CAAC,IAAI;AAAA,EACvD;AAAA,EAEA,MAAM,cACJ,MACA,SACA,SACsB;AACtB,QAAI,SAAS,aAAa,UAAa,QAAQ,YAAY,EAAG,QAAO,GAAG,CAAC,CAAC;AAC1E,UAAM,OAAO,MAAM,KAAK,aAAa,MAAM,OAAO;AAClD,QAAI,CAAC,KAAK,GAAI,QAAO;AACrB,UAAM,SAAS,IAAI,cAAc,KAAK,KAAK;AAC3C,UAAM,QAAkB,CAAC;AACzB,aACM,OAAO,MAAM,OAAO,SAAS,GACjC,KAAK,MAAM,KAAK,OAChB,OAAO,MAAM,OAAO,SAAS,GAC7B;AACA,UAAI,SAAS,aAAa,UAAa,MAAM,UAAU,QAAQ,SAAU;AACzE,YAAM,KAAK,KAAK,MAAM,IAAI;AAAA,IAC5B;AACA,WAAO,GAAG,KAAK;AAAA,EACjB;AAAA,EAEA,iBACE,MACA,SACA,SAC0B;AAC1B,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,UAAI,SAAS,aAAa,MAAM,KAAK,IAAI,MAAM,QAAQ,GAAG,gBAAgB;AACxE,cAAM,IAAI,UAAU,WAAW,sCAAsC,QAAQ;AAAA,MAC/E;AACA,YAAM,OAAO,MAAM,KAAK,IAAI,KAAK,QAAQ;AACzC,UAAI,KAAK,YAAa,OAAM,IAAI,UAAU,gBAAgB,kBAAkB,QAAQ;AACpF,UAAI,CAAC,KAAK,OAAQ,OAAM,IAAI,UAAU,WAAW,sBAAsB,QAAQ;AAC/E,YAAM,QAAQ,MAAM,KAAK,IAAI,SAAS,QAAQ;AAC9C,UAAI,CAAC,KAAK,OAAQ,QAAO,IAAI,eAAe,OAAO,KAAK,UAAU,IAAI,CAAC;AACvE,YAAM,QAAQ,MAAM,aAAa,KAAK,QAAQ,KAAK;AACnD,aAAO,IAAI,eAAe,OAAO,EAAE,GAAG,KAAK,UAAU,IAAI,GAAG,MAAM,MAAM,OAAO,CAAC;AAAA,IAClF,CAAC;AAAA,EACH;AAAA,EAEA,UAAU,MAAc,SAA8B,SAAoC;AACxF,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,YAAM,KAAK,IAAI,MAAM,QAAQ,QAAQ,CAAC;AACtC,YAAM,KAAK,IAAI,UAAU,UAAU,OAAO;AAAA,IAC5C,CAAC;AAAA,EACH;AAAA,EAEA,WAAW,MAAc,SAA8B,SAAoC;AACzF,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,YAAM,SAAU,MAAM,KAAK,IAAI,OAAO,QAAQ,IAC1C,MAAM,KAAK,IAAI,SAAS,QAAQ,IAChC,IAAI,WAAW;AACnB,YAAM,QAAQ,OAAO,YAAY,WAAW,IAAI,YAAY,EAAE,OAAO,OAAO,IAAI;AAChF,YAAM,MAAM,IAAI,WAAW,OAAO,SAAS,MAAM,MAAM;AACvD,UAAI,IAAI,MAAM;AACd,UAAI,IAAI,OAAO,OAAO,MAAM;AAC5B,YAAM,KAAK,IAAI,MAAM,QAAQ,QAAQ,CAAC;AACtC,YAAM,KAAK,IAAI,UAAU,UAAU,GAAG;AAAA,IACxC,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,MAAc,MAAc,SAAoC;AAC3E,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,QAAI,CAAC,OAAO,cAAc,IAAI,KAAK,OAAO,GAAG;AAC3C,aAAO,QAAQ;AAAA,QACb,IAAI,IAAI,UAAU,WAAW,4CAA4C,QAAQ,CAAC;AAAA,MACpF;AAAA,IACF;AACA,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,YAAM,SAAS,MAAM,KAAK,IAAI,SAAS,QAAQ;AAC/C,YAAM,QAAQ,IAAI,WAAW,IAAI;AACjC,YAAM,IAAI,OAAO,SAAS,GAAG,IAAI,CAAC;AAClC,YAAM,KAAK,IAAI,UAAU,UAAU,KAAK;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA,EAEA,UAAU,MAAc,SAAoC;AAC1D,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,WAAK,MAAM,KAAK,IAAI,KAAK,QAAQ,GAAG;AAClC,cAAM,OAAO,OAAO,IAAI,MAAM,gBAAgB,GAAG,EAAE,MAAM,SAAS,CAAC;AAAA,IACvE,CAAC;AAAA,EACH;AAAA,EAEA,WAAW,YAAoB,iBAAyB,SAAoC;AAC1F,UAAM,SAAS,KAAK,SAAS,UAAU;AACvC,WAAO,QAAQ,SAAS,QAAQ,MAAM,KAAK,IAAI,OAAO,QAAQ,KAAK,SAAS,eAAe,CAAC,CAAC;AAAA,EAC/F;AAAA,EAEA,SAAS,MAAc,SAAwC;AAC7D,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,YAAY,KAAK,UAAU,MAAM,KAAK,IAAI,MAAM,QAAQ,CAAC,CAAC;AAAA,EAC9F;AAAA,EAEA,MAAM,QAAQ,MAAc,SAA0C;AACpE,UAAM,SAAS,MAAM,KAAK,cAAc,MAAM,OAAO;AACrD,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,WAAO,GAAG,MAAO,OAAO,MAA0B,KAAK,CAAC;AAAA,EAC1D;AAAA,EAEA,cAAc,MAAc,SAAyC;AACnE,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,UAAI,EAAE,MAAM,KAAK,IAAI,KAAK,QAAQ,GAAG,aAAa;AAChD,cAAM,OAAO,OAAO,IAAI,MAAM,iBAAiB,GAAG,EAAE,MAAM,UAAU,CAAC;AAAA,MACvE;AACA,aAAO,IAAI,gBAAgB,KAAK,KAAK,UAAU,MAAM,KAAK,IAAI,QAAQ,QAAQ,CAAC;AAAA,IACjF,CAAC;AAAA,EACH;AAAA,EAEA,MACE,SACA,UACA,SACyB;AACzB,WAAO,QAAQ,SAAS,KAAK,KAAK,YAAY;AAC5C,UAAI,SAA6C,MAAM;AACvD,YAAM,WAAW,CAAC,WAAwB;AACxC,YAAI,WAAW,OAAQ,QAAO,OAAO,KAAK;AAC1C,iBAAS,MAAM;AAAA,MACjB;AACA,YAAM,SACJ,KAAK,MAAM,SAAS,YAChB,SACA,MAAM,YAAY,KAAK,KAAK,KAAK,KAAK,SAAS,QAAQ;AAC7D,YAAM,aAAa,SAAU,KAAK,MAAM,YAAY,YAAa,KAAK,MAAM;AAC5E,YAAM,SAAS,MAAM,UAAU,KAAK,KAAK,KAAK,KAAK,SAAS,UAAU;AAAA,QACpE,GAAI,eAAe,SAAY,CAAC,IAAI,EAAE,WAAW;AAAA,MACnD,CAAC;AACD,eAAS,CAAC,UAAU,OAAO,OAAO,KAAK;AACvC,YAAM,UAAuB,SACzB;AAAA,QACE,MAAM;AAAA,QACN,MAAM,MAAM,SAAkB;AAC5B,gBAAM,OAAO,MAAM,OAAO;AAC1B,gBAAM,OAAO,MAAM,OAAO;AAAA,QAC5B;AAAA,MACF,IACA;AACJ,WAAK,UAAU,IAAI,OAAO;AAC1B,aAAO;AAAA,QACL,MAAM,QAAQ;AAAA,QACd,OAAO,OAAO,YAAqB;AACjC,eAAK,UAAU,OAAO,OAAO;AAC7B,gBAAM,QAAQ,MAAM,OAAO;AAAA,QAC7B;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,cAAc,MAAc,SAAsC;AAChE,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,QAAQ,SAAS,UAAU,MAAM,KAAK,IAAI,SAAS,QAAQ,CAAC;AAAA,EACrE;AAAA,EAEA,MAAM,OAAO,MAAc,SAAuC;AAChE,UAAM,QAAQ,MAAM,KAAK,SAAS,MAAM,OAAO;AAC/C,QAAI,MAAM,GAAI,QAAO,GAAG,IAAI;AAC5B,WAAO,MAAM,MAAM,SAAS,cAAc,GAAG,KAAK,IAAI;AAAA,EACxD;AAAA,EAEA,UACE,MACA,UACA,SACkB;AAClB,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,WAAO,QAAQ,SAAS,UAAU,MAAM,KAAK,IAAI,MAAM,QAAQ,CAAC;AAAA,EAClE;AAAA,EAEA,OACE,MACA,SACA,SACkB;AAClB,UAAM,WAAW,KAAK,SAAS,IAAI;AACnC,WAAO,QAAQ,SAAS,UAAU,YAAY;AAC5C,UAAI,CAAC,SAAS,WAAW;AACvB,cAAM,OAAO,MAAM,KAAK,IAAI,MAAM,QAAQ,EAAE,MAAM,CAAC,UAAmB;AACpE,cAAI,SAAS,MAAO,QAAO;AAC3B,gBAAM;AAAA,QACR,CAAC;AACD,YAAI,MAAM,YAAa,OAAM,OAAO,OAAO,IAAI,MAAM,gBAAgB,GAAG,EAAE,MAAM,SAAS,CAAC;AAAA,MAC5F;AACA,YAAM,KAAK,IAAI,GAAG,UAAU,EAAE,OAAO,SAAS,SAAS,MAAM,CAAC;AAAA,IAChE,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cAAc,QAA4B,SAAsC;AACpF,UAAM,OAAO,QAAQ,UAAU,MAAM,GAAG,OAAO,WAAW,CAAC;AAC3D,WAAO,QAAQ,SAAS,MAAM,YAAY;AACxC,YAAM,KAAK,IAAI,MAAM,IAAI;AACzB,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,eACJ,SACA,SACoB;AACpB,UAAM,MAAM,MAAM,KAAK,cAAc,QAAQ,OAAO;AACpD,QAAI,CAAC,IAAI,GAAI,QAAO;AACpB,UAAM,OAAO,GAAG,IAAI,KAAK,IAAI,SAAS,UAAU,EAAE,GAAG,OAAO,WAAW,CAAC,GAAG,SAAS,UAAU,EAAE;AAChG,WAAO,QAAQ,SAAS,MAAM,YAAY;AACxC,YAAM,KAAK,IAAI,UAAU,MAAM,EAAE;AACjC,aAAO;AAAA,IACT,CAAC;AAAA,EACH;AAAA,EAEA,KACE,SACA,SACA,SACkD;AAClD,UAAM,QAAQ,KAAK,WAAW,MAAM;AACpC,UAAM,OAAO,OAAO,YAAY,WAAW,SAAS,SAAS,KAAK,QAAQ,IAAI;AAC9E,UAAM,SAAS,KAAK;AACpB,UAAM,QAAQ,KAAK;AACnB,QAAI,CAAC,UAAU,UAAU;AACvB,aAAO;AAAA,QACL,KAAK;AAAA,QACL,KAAK;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,KAAK;AAAA,MACP,EAAE,QAAQ,KAAK;AACjB,WAAO,KAAK,SAAS,QAAQ,OAAO,MAAM,SAAS,OAAO,EAAE,QAAQ,KAAK;AAAA,EAC3E;AAAA,EAEA,MAAM,SACJ,QACA,OACA,MACA,SACA,SACkD;AAClD,aAAS,OAAO,OAAO,QAAQ,KAAK,GAAG,MAAM,OAAO,OAAO,QAAQ,KAAK,EAAG,OAAM;AACjF,UAAM,OAAO,OAAO,OAAO,KAAK;AAChC,UAAM,UAAU,SAAS,UAAa,OAAO,MAAM,IAAI,OAAO,QAAQ,KAAK,IAAI,MAAM;AACrF,UAAM,UAAU,CAAC,YAA2B;AAC1C,aAAO,MAAM,OAAO,OAAO;AAC3B,cAAQ;AAAA,IACV;AACA,UAAM,OAAO,OAAO,MAAM,IACtB;AAAA,MACE,GAAI,SAAS,SAAY,CAAC,IAAI,EAAE,KAAK;AAAA,MACrC,SAAS,CAAC,SAAiB,OAAO,QAAQ,OAAO,IAAI;AAAA,IACvD,IACA;AACJ,WAAO;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,KAAK;AAAA,IACP,EAAE,QAAQ,OAAO;AAAA,EACnB;AAAA,EAEA,MAAM,QAAQ,SAAiC;AAC7C,eAAW,WAAW,CAAC,GAAG,KAAK,SAAS,EAAG,OAAM,QAAQ,MAAM,OAAO;AACtE,SAAK,UAAU,MAAM;AAAA,EACvB;AACF;AAEO,MAAM,OAAO;AAIb,SAAS,kBACd,QACA,UAEI,CAAC,GACmF;AACxF,QAAM,EAAE,UAAU,GAAG,KAAK,IAAI;AAC9B,QAAM,OAAO,CAAC,QAAuB,YACnC,IAAI,eAAe,QAAQ;AAAA,IACzB,GAAG;AAAA,IACH,KAAK,OAAO,OAAO;AAAA,IACnB,GAAI,OAAO,mBAAmB,SAAY,CAAC,IAAI,EAAE,OAAO,OAAO,eAAe;AAAA,IAC9E,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC/B,CAAC;AACH,SAAO,CAAC,QAAQ,YACd,YAAY,UACR,SAAS,QAAQ,OAAO,EAAE,KAAK,CAAC,YAAY,KAAK,QAAQ,OAAO,CAAC,IACjE,KAAK,MAAM;AACnB;",
   "names": []
 }

package/dist/kernel/exec.js

@@ -7,6 +7,8 @@ import {
 import { descendants, REFUSED } from "./groups.js";
 import { resolve } from "./paths.js";
 const SHELL = ["bash", "-c"];
+const HELD_LIMIT = 32 * 1024 * 1024;
+const HELD = "output held: waiting for the vault";
 class Spill {
   #chunks = [];
   #limit;
@@ -39,17 +41,45 @@ class Spill {
     return path;
   }
 }
-function sink(stream, spill, options, context) {
+function sink(stream, spill, options, context, scrub) {
   const decoder = new StreamDecoder();
+  const emit = (bytes) => {
+    spill.add(bytes);
+    const text = decoder.decode(bytes);
+    if (text) options?.onOutput?.(text, context, { stream });
+  };
+  const flush = () => {
+    const text = decoder.decode();
+    if (text) options?.onOutput?.(text, context, { stream });
+  };
+  if (!scrub)
+    return {
+      push: emit,
+      end: async () => flush(),
+      drop: flush
+    };
+  let chain = Promise.resolve();
+  let dropped = false;
+  const live = (bytes) => {
+    if (!dropped) emit(bytes);
+  };
   return {
     push(bytes) {
-      spill.add(bytes);
-      const text = decoder.decode(bytes);
-      if (text) options?.onOutput?.(text, context, { stream });
+      scrub.held(bytes.length);
+      chain = chain.then(() => scrub.stream.push(bytes)).then((out) => {
+        scrub.held(-bytes.length);
+        live(out);
+      });
     },
-    end() {
-      const text = decoder.decode();
-      if (text) options?.onOutput?.(text, context, { stream });
+    async end() {
+      await chain;
+      live(await scrub.stream.end());
+      if (!dropped) flush();
+    },
+    drop() {
+      dropped = true;
+      chain.catch(() => void 0);
+      scrub.stream.drop();
     }
   };
 }
@@ -72,12 +102,30 @@ function guard(process, options, context, kill) {
     get ending() {
       return ending;
     },
+    stop,
     release() {
       clearTimeout(timer);
       context.abortSignal?.removeEventListener("abort", onAbort);
     }
   };
 }
+async function drained(sinks, context) {
+  const signal = context.abortSignal;
+  if (signal?.aborted) return "aborted";
+  let off = () => void 0;
+  const aborted = new Promise((resolve2) => {
+    const onAbort = () => resolve2("aborted");
+    signal?.addEventListener("abort", onAbort, { once: true });
+    off = () => signal?.removeEventListener("abort", onAbort);
+  });
+  const ends = Promise.all(sinks.map((each) => each.end())).then(() => void 0);
+  ends.catch(() => void 0);
+  try {
+    return await Promise.race([ends, aborted]);
+  } finally {
+    off();
+  }
+}
 async function start(client, argv, options, join) {
   if (join?.pgid !== void 0) {
     try {
@@ -90,14 +138,27 @@ async function start(client, argv, options, join) {
   }
   return { process: await client.spawn(argv, options), joined: false };
 }
-async function execute(client, cwd, command, options, context, spawned, join) {
-  const argv = typeof command === "string" ? [...SHELL, command] : [...command];
-  if (argv.length === 0) return err(new ExecutionError("spawn_error", "No program to run"));
+async function execute(client, cwd, command, options, context, spawned, join, hooks = {}) {
+  const given = typeof command === "string" ? [...SHELL, command] : [...command];
+  if (given.length === 0) return err(new ExecutionError("spawn_error", "No program to run"));
+  const argv = hooks.spawn ? [...hooks.spawn(given)] : given;
   if (context.abortSignal?.aborted)
     return err(new ExecutionError("aborted", "The command was aborted"));
   const spill = new Spill(options?.spill);
-  const out = sink("stdout", spill, options, context);
-  const errors = sink("stderr", spill, options, context);
+  let held = 0;
+  let overflowed = false;
+  let over = () => {
+    overflowed = true;
+  };
+  const scrubbed = () => hooks.scrub && {
+    stream: hooks.scrub(),
+    held(bytes) {
+      held += bytes;
+      if (held > HELD_LIMIT) over();
+    }
+  };
+  const out = sink("stdout", spill, options, context, scrubbed());
+  const errors = sink("stderr", spill, options, context, scrubbed());
   let started;
   try {
     started = await start(
@@ -123,13 +184,18 @@ async function execute(client, cwd, command, options, context, spawned, join) {
     context,
     () => join ? void sweep(client, process) : process.signal("SIGKILL")
   );
+  over = () => watch.stop("held");
+  if (overflowed) over();
   const exitCode = await process.exited.finally(() => watch.release());
-  out.end();
-  errors.end();
+  const ended = watch.ending ?? await drained([out, errors], context);
+  if (ended) {
+    out.drop();
+    errors.drop();
+  }
   const spillPath = await spill.write(client);
-  const ending = watch.ending;
+  const ending = watch.ending ?? ended;
   if (ending) {
-    const error = new ExecutionError(
+    const error = ending === "held" ? new ExecutionError("unknown", HELD) : new ExecutionError(
       ending,
       `The command was ${ending === "timeout" ? "timed out" : "aborted"}`
     );
@@ -139,6 +205,8 @@ async function execute(client, cwd, command, options, context, spawned, join) {
   return ok(spillPath ? { exitCode, spillPath } : { exitCode });
 }
 export {
+  HELD,
+  HELD_LIMIT,
   SHELL,
   execute,
   sweep

package/dist/kernel/exec.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/kernel/exec.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  ExecutionError,\n  err,\n  ok,\n  type Result,\n  type ShellExecOptions,\n  type ShellExecResult,\n  StreamDecoder,\n} from '@earendil-works/pi-durable/env';\nimport type { KernelClient, KernelProcess, SpawnOptions } from './client.ts';\nimport { descendants, REFUSED } from './groups.ts';\nimport { resolve } from './paths.ts';\n\nexport const SHELL = ['bash', '-c'] as const;\n\nclass Spill {\n  readonly #chunks: Uint8Array[] = [];\n  readonly #limit: { afterBytes: number; afterLines: number } | undefined;\n  #bytes = 0;\n  #lines = 0;\n\n  constructor(limit: ShellExecOptions['spill']) {\n    this.#limit = limit;\n  }\n\n  add(chunk: Uint8Array): void {\n    if (!this.#limit) return;\n    this.#chunks.push(chunk);\n    this.#bytes += chunk.length;\n    for (const byte of chunk) if (byte === 10) this.#lines++;\n  }\n\n  get over(): boolean {\n    const limit = this.#limit;\n    return (\n      limit !== undefined && (this.#bytes > limit.afterBytes || this.#lines > limit.afterLines)\n    );\n  }\n\n  async write(client: KernelClient): Promise<string | undefined> {\n    if (!this.over) return undefined;\n    const path = `/tmp/slicc-agent-output-${crypto.randomUUID()}.log`;\n    const all = new Uint8Array(this.#bytes);\n    let offset = 0;\n    for (const chunk of this.#chunks) {\n      all.set(chunk, offset);\n      offset += chunk.length;\n    }\n    await client.fs.mkdir('/tmp');\n    await client.fs.writeFile(path, all);\n    return path;\n  }\n}\n\nfunction sink(\n  stream: 'stdout' | 'stderr',\n  spill: Spill,\n  options: ShellExecOptions | undefined,\n  context: Context\n) {\n  const decoder = new StreamDecoder();\n  return {\n    push(bytes: Uint8Array) {\n      spill.add(bytes);\n      const text = decoder.decode(bytes);\n      if (text) options?.onOutput?.(text, context, { stream });\n    },\n    end() {\n      const text = decoder.decode();\n      if (text) options?.onOutput?.(text, context, { stream });\n    },\n  };\n}\n\ntype Ending = 'timeout' | 'aborted' | undefined;\n\nexport async function sweep(\n  client: Pick<KernelClient, 'kill' | 'ps'>,\n  process: KernelProcess\n): Promise<void> {\n  const table = (await client.ps?.().catch(() => undefined)) ?? [];\n  const pids = [process.pid, ...descendants(table, process.pid)];\n  await Promise.all(pids.map((pid) => client.kill?.(pid, 'SIGKILL').catch(() => undefined)));\n}\n\nfunction guard(\n  process: KernelProcess,\n  options: ShellExecOptions | undefined,\n  context: Context,\n  kill: () => void\n) {\n  let ending: Ending;\n  const stop = (why: Ending) => {\n    ending ??= why;\n    kill();\n  };\n  const timer =\n    options?.timeout === undefined\n      ? undefined\n      : setTimeout(() => stop('timeout'), options.timeout * 1000);\n  const onAbort = () => stop('aborted');\n  context.abortSignal?.addEventListener('abort', onAbort, { once: true });\n  if (context.abortSignal?.aborted) onAbort();\n  return {\n    get ending() {\n      return ending;\n    },\n    release() {\n      clearTimeout(timer);\n      context.abortSignal?.removeEventListener('abort', onAbort);\n    },\n  };\n}\n\nexport interface Join {\n  pgid?: number;\n  refused(code: string): void;\n}\n\nasync function start(\n  client: KernelClient,\n  argv: readonly string[],\n  options: SpawnOptions,\n  join: Join | undefined\n): Promise<{ process: KernelProcess; joined: boolean }> {\n  if (join?.pgid !== undefined) {\n    try {\n      return { process: await client.spawn(argv, { ...options, pgid: join.pgid }), joined: true };\n    } catch (error) {\n      const code = String((error as { code?: unknown }).code ?? '');\n      if (!REFUSED.has(code)) throw error;\n      join.refused(code);\n    }\n  }\n  return { process: await client.spawn(argv, options), joined: false };\n}\n\nexport async function execute(\n  client: KernelClient,\n  cwd: string,\n  command: string | readonly string[],\n  options: ShellExecOptions | undefined,\n  context: Context,\n  spawned?: (process: KernelProcess) => void,\n  join?: Join\n): Promise<Result<ShellExecResult, ExecutionError>> {\n  const argv = typeof command === 'string' ? [...SHELL, command] : [...command];\n  if (argv.length === 0) return err(new ExecutionError('spawn_error', 'No program to run'));\n  if (context.abortSignal?.aborted)\n    return err(new ExecutionError('aborted', 'The command was aborted'));\n  const spill = new Spill(options?.spill);\n  const out = sink('stdout', spill, options, context);\n  const errors = sink('stderr', spill, options, context);\n  let started: { process: KernelProcess; joined: boolean };\n  try {\n    started = await start(\n      client,\n      argv,\n      {\n        cwd: resolve(cwd, options?.cwd ?? '.'),\n        ...(options?.env ? { env: options.env } : {}),\n        onStdout: (bytes) => out.push(bytes),\n        onStderr: (bytes) => errors.push(bytes),\n      },\n      join\n    );\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return err(new ExecutionError('spawn_error', message));\n  }\n  const { process } = started;\n  spawned?.(process);\n  const watch = guard(process, options, context, () =>\n    join ? void sweep(client, process) : process.signal('SIGKILL')\n  );\n  const exitCode = await process.exited.finally(() => watch.release());\n  out.end();\n  errors.end();\n  const spillPath = await spill.write(client);\n  const ending = watch.ending;\n  if (ending) {\n    const error = new ExecutionError(\n      ending,\n      `The command was ${ending === 'timeout' ? 'timed out' : 'aborted'}`\n    );\n    if (spillPath) error.spillPath = spillPath;\n    return err(error);\n  }\n  return ok(spillPath ? { exitCode, spillPath } : { exitCode });\n}\n"],
-  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAIA;AAAA,OACK;AAEP,SAAS,aAAa,eAAe;AACrC,SAAS,eAAe;AAEjB,MAAM,QAAQ,CAAC,QAAQ,IAAI;AAElC,MAAM,MAAM;AAAA,EACD,UAAwB,CAAC;AAAA,EACzB;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EAET,YAAY,OAAkC;AAC5C,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,OAAyB;AAC3B,QAAI,CAAC,KAAK,OAAQ;AAClB,SAAK,QAAQ,KAAK,KAAK;AACvB,SAAK,UAAU,MAAM;AACrB,eAAW,QAAQ,MAAO,KAAI,SAAS,GAAI,MAAK;AAAA,EAClD;AAAA,EAEA,IAAI,OAAgB;AAClB,UAAM,QAAQ,KAAK;AACnB,WACE,UAAU,WAAc,KAAK,SAAS,MAAM,cAAc,KAAK,SAAS,MAAM;AAAA,EAElF;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,QAAI,CAAC,KAAK,KAAM,QAAO;AACvB,UAAM,OAAO,2BAA2B,OAAO,WAAW,CAAC;AAC3D,UAAM,MAAM,IAAI,WAAW,KAAK,MAAM;AACtC,QAAI,SAAS;AACb,eAAW,SAAS,KAAK,SAAS;AAChC,UAAI,IAAI,OAAO,MAAM;AACrB,gBAAU,MAAM;AAAA,IAClB;AACA,UAAM,OAAO,GAAG,MAAM,MAAM;AAC5B,UAAM,OAAO,GAAG,UAAU,MAAM,GAAG;AACnC,WAAO;AAAA,EACT;AACF;AAEA,SAAS,KACP,QACA,OACA,SACA,SACA;AACA,QAAM,UAAU,IAAI,cAAc;AAClC,SAAO;AAAA,IACL,KAAK,OAAmB;AACtB,YAAM,IAAI,KAAK;AACf,YAAM,OAAO,QAAQ,OAAO,KAAK;AACjC,UAAI,KAAM,UAAS,WAAW,MAAM,SAAS,EAAE,OAAO,CAAC;AAAA,IACzD;AAAA,IACA,MAAM;AACJ,YAAM,OAAO,QAAQ,OAAO;AAC5B,UAAI,KAAM,UAAS,WAAW,MAAM,SAAS,EAAE,OAAO,CAAC;AAAA,IACzD;AAAA,EACF;AACF;AAIA,eAAsB,MACpB,QACA,SACe;AACf,QAAM,QAAS,MAAM,OAAO,KAAK,EAAE,MAAM,MAAM,MAAS,KAAM,CAAC;AAC/D,QAAM,OAAO,CAAC,QAAQ,KAAK,GAAG,YAAY,OAAO,QAAQ,GAAG,CAAC;AAC7D,QAAM,QAAQ,IAAI,KAAK,IAAI,CAAC,QAAQ,OAAO,OAAO,KAAK,SAAS,EAAE,MAAM,MAAM,MAAS,CAAC,CAAC;AAC3F;AAEA,SAAS,MACP,SACA,SACA,SACA,MACA;AACA,MAAI;AACJ,QAAM,OAAO,CAAC,QAAgB;AAC5B,eAAW;AACX,SAAK;AAAA,EACP;AACA,QAAM,QACJ,SAAS,YAAY,SACjB,SACA,WAAW,MAAM,KAAK,SAAS,GAAG,QAAQ,UAAU,GAAI;AAC9D,QAAM,UAAU,MAAM,KAAK,SAAS;AACpC,UAAQ,aAAa,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACtE,MAAI,QAAQ,aAAa,QAAS,SAAQ;AAC1C,SAAO;AAAA,IACL,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA,UAAU;AACR,mBAAa,KAAK;AAClB,cAAQ,aAAa,oBAAoB,SAAS,OAAO;AAAA,IAC3D;AAAA,EACF;AACF;AAOA,eAAe,MACb,QACA,MACA,SACA,MACsD;AACtD,MAAI,MAAM,SAAS,QAAW;AAC5B,QAAI;AACF,aAAO,EAAE,SAAS,MAAM,OAAO,MAAM,MAAM,EAAE,GAAG,SAAS,MAAM,KAAK,KAAK,CAAC,GAAG,QAAQ,KAAK;AAAA,IAC5F,SAAS,OAAO;AACd,YAAM,OAAO,OAAQ,MAA6B,QAAQ,EAAE;AAC5D,UAAI,CAAC,QAAQ,IAAI,IAAI,EAAG,OAAM;AAC9B,WAAK,QAAQ,IAAI;AAAA,IACnB;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,OAAO,MAAM,MAAM,OAAO,GAAG,QAAQ,MAAM;AACrE;AAEA,eAAsB,QACpB,QACA,KACA,SACA,SACA,SACA,SACA,MACkD;AAClD,QAAM,OAAO,OAAO,YAAY,WAAW,CAAC,GAAG,OAAO,OAAO,IAAI,CAAC,GAAG,OAAO;AAC5E,MAAI,KAAK,WAAW,EAAG,QAAO,IAAI,IAAI,eAAe,eAAe,mBAAmB,CAAC;AACxF,MAAI,QAAQ,aAAa;AACvB,WAAO,IAAI,IAAI,eAAe,WAAW,yBAAyB,CAAC;AACrE,QAAM,QAAQ,IAAI,MAAM,SAAS,KAAK;AACtC,QAAM,MAAM,KAAK,UAAU,OAAO,SAAS,OAAO;AAClD,QAAM,SAAS,KAAK,UAAU,OAAO,SAAS,OAAO;AACrD,MAAI;AACJ,MAAI;AACF,cAAU,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,QACE,KAAK,QAAQ,KAAK,SAAS,OAAO,GAAG;AAAA,QACrC,GAAI,SAAS,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;AAAA,QAC3C,UAAU,CAAC,UAAU,IAAI,KAAK,KAAK;AAAA,QACnC,UAAU,CAAC,UAAU,OAAO,KAAK,KAAK;AAAA,MACxC;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,WAAO,IAAI,IAAI,eAAe,eAAe,OAAO,CAAC;AAAA,EACvD;AACA,QAAM,EAAE,QAAQ,IAAI;AACpB,YAAU,OAAO;AACjB,QAAM,QAAQ;AAAA,IAAM;AAAA,IAAS;AAAA,IAAS;AAAA,IAAS,MAC7C,OAAO,KAAK,MAAM,QAAQ,OAAO,IAAI,QAAQ,OAAO,SAAS;AAAA,EAC/D;AACA,QAAM,WAAW,MAAM,QAAQ,OAAO,QAAQ,MAAM,MAAM,QAAQ,CAAC;AACnE,MAAI,IAAI;AACR,SAAO,IAAI;AACX,QAAM,YAAY,MAAM,MAAM,MAAM,MAAM;AAC1C,QAAM,SAAS,MAAM;AACrB,MAAI,QAAQ;AACV,UAAM,QAAQ,IAAI;AAAA,MAChB;AAAA,MACA,mBAAmB,WAAW,YAAY,cAAc,SAAS;AAAA,IACnE;AACA,QAAI,UAAW,OAAM,YAAY;AACjC,WAAO,IAAI,KAAK;AAAA,EAClB;AACA,SAAO,GAAG,YAAY,EAAE,UAAU,UAAU,IAAI,EAAE,SAAS,CAAC;AAC9D;",
-  "names": []
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  ExecutionError,\n  err,\n  ok,\n  type Result,\n  type ShellExecOptions,\n  type ShellExecResult,\n  StreamDecoder,\n} from '@earendil-works/pi-durable/env';\nimport type { ScrubStream } from '../secrets/scrub.ts';\nimport type { KernelClient, KernelProcess, SpawnOptions } from './client.ts';\nimport { descendants, REFUSED } from './groups.ts';\nimport { resolve } from './paths.ts';\n\nexport const SHELL = ['bash', '-c'] as const;\nexport const HELD_LIMIT = 32 * 1024 * 1024;\nexport const HELD = 'output held: waiting for the vault';\n\nexport interface ExecHooks {\n  scrub?: () => ScrubStream;\n  spawn?: (argv: readonly string[]) => readonly string[];\n}\n\nclass Spill {\n  readonly #chunks: Uint8Array[] = [];\n  readonly #limit: { afterBytes: number; afterLines: number } | undefined;\n  #bytes = 0;\n  #lines = 0;\n\n  constructor(limit: ShellExecOptions['spill']) {\n    this.#limit = limit;\n  }\n\n  add(chunk: Uint8Array): void {\n    if (!this.#limit) return;\n    this.#chunks.push(chunk);\n    this.#bytes += chunk.length;\n    for (const byte of chunk) if (byte === 10) this.#lines++;\n  }\n\n  get over(): boolean {\n    const limit = this.#limit;\n    return (\n      limit !== undefined && (this.#bytes > limit.afterBytes || this.#lines > limit.afterLines)\n    );\n  }\n\n  async write(client: KernelClient): Promise<string | undefined> {\n    if (!this.over) return undefined;\n    const path = `/tmp/slicc-agent-output-${crypto.randomUUID()}.log`;\n    const all = new Uint8Array(this.#bytes);\n    let offset = 0;\n    for (const chunk of this.#chunks) {\n      all.set(chunk, offset);\n      offset += chunk.length;\n    }\n    await client.fs.mkdir('/tmp');\n    await client.fs.writeFile(path, all);\n    return path;\n  }\n}\n\ninterface Sink {\n  push(bytes: Uint8Array): void;\n  end(): Promise<void>;\n  drop(): void;\n}\n\nfunction sink(\n  stream: 'stdout' | 'stderr',\n  spill: Spill,\n  options: ShellExecOptions | undefined,\n  context: Context,\n  scrub?: { stream: ScrubStream; held(bytes: number): void }\n): Sink {\n  const decoder = new StreamDecoder();\n  const emit = (bytes: Uint8Array) => {\n    spill.add(bytes);\n    const text = decoder.decode(bytes);\n    if (text) options?.onOutput?.(text, context, { stream });\n  };\n  const flush = () => {\n    const text = decoder.decode();\n    if (text) options?.onOutput?.(text, context, { stream });\n  };\n  if (!scrub)\n    return {\n      push: emit,\n      end: async () => flush(),\n      drop: flush,\n    };\n  let chain: Promise<void> = Promise.resolve();\n  let dropped = false;\n  const live = (bytes: Uint8Array) => {\n    if (!dropped) emit(bytes);\n  };\n  return {\n    push(bytes) {\n      scrub.held(bytes.length);\n      chain = chain\n        .then(() => scrub.stream.push(bytes))\n        .then((out) => {\n          scrub.held(-bytes.length);\n          live(out);\n        });\n    },\n    async end() {\n      await chain;\n      live(await scrub.stream.end());\n      if (!dropped) flush();\n    },\n    drop() {\n      dropped = true;\n      chain.catch(() => undefined);\n      scrub.stream.drop();\n    },\n  };\n}\n\ntype Ending = 'timeout' | 'aborted' | 'held' | undefined;\n\nexport async function sweep(\n  client: Pick<KernelClient, 'kill' | 'ps'>,\n  process: KernelProcess\n): Promise<void> {\n  const table = (await client.ps?.().catch(() => undefined)) ?? [];\n  const pids = [process.pid, ...descendants(table, process.pid)];\n  await Promise.all(pids.map((pid) => client.kill?.(pid, 'SIGKILL').catch(() => undefined)));\n}\n\nfunction guard(\n  process: KernelProcess,\n  options: ShellExecOptions | undefined,\n  context: Context,\n  kill: () => void\n) {\n  let ending: Ending;\n  const stop = (why: Ending) => {\n    ending ??= why;\n    kill();\n  };\n  const timer =\n    options?.timeout === undefined\n      ? undefined\n      : setTimeout(() => stop('timeout'), options.timeout * 1000);\n  const onAbort = () => stop('aborted');\n  context.abortSignal?.addEventListener('abort', onAbort, { once: true });\n  if (context.abortSignal?.aborted) onAbort();\n  return {\n    get ending() {\n      return ending;\n    },\n    stop,\n    release() {\n      clearTimeout(timer);\n      context.abortSignal?.removeEventListener('abort', onAbort);\n    },\n  };\n}\n\nasync function drained(sinks: readonly Sink[], context: Context): Promise<Ending> {\n  const signal = context.abortSignal;\n  if (signal?.aborted) return 'aborted';\n  let off = () => undefined as void;\n  const aborted = new Promise<Ending>((resolve) => {\n    const onAbort = () => resolve('aborted');\n    signal?.addEventListener('abort', onAbort, { once: true });\n    off = () => signal?.removeEventListener('abort', onAbort);\n  });\n  const ends = Promise.all(sinks.map((each) => each.end())).then(() => undefined);\n  ends.catch(() => undefined);\n  try {\n    return await Promise.race([ends, aborted]);\n  } finally {\n    off();\n  }\n}\n\nexport interface Join {\n  pgid?: number;\n  refused(code: string): void;\n}\n\nasync function start(\n  client: KernelClient,\n  argv: readonly string[],\n  options: SpawnOptions,\n  join: Join | undefined\n): Promise<{ process: KernelProcess; joined: boolean }> {\n  if (join?.pgid !== undefined) {\n    try {\n      return { process: await client.spawn(argv, { ...options, pgid: join.pgid }), joined: true };\n    } catch (error) {\n      const code = String((error as { code?: unknown }).code ?? '');\n      if (!REFUSED.has(code)) throw error;\n      join.refused(code);\n    }\n  }\n  return { process: await client.spawn(argv, options), joined: false };\n}\n\nexport async function execute(\n  client: KernelClient,\n  cwd: string,\n  command: string | readonly string[],\n  options: ShellExecOptions | undefined,\n  context: Context,\n  spawned?: (process: KernelProcess) => void,\n  join?: Join,\n  hooks: ExecHooks = {}\n): Promise<Result<ShellExecResult, ExecutionError>> {\n  const given = typeof command === 'string' ? [...SHELL, command] : [...command];\n  if (given.length === 0) return err(new ExecutionError('spawn_error', 'No program to run'));\n  const argv = hooks.spawn ? [...hooks.spawn(given)] : given;\n  if (context.abortSignal?.aborted)\n    return err(new ExecutionError('aborted', 'The command was aborted'));\n  const spill = new Spill(options?.spill);\n  let held = 0;\n  let overflowed = false;\n  let over = () => {\n    overflowed = true;\n  };\n  const scrubbed = () =>\n    hooks.scrub && {\n      stream: hooks.scrub(),\n      held(bytes: number) {\n        held += bytes;\n        if (held > HELD_LIMIT) over();\n      },\n    };\n  const out = sink('stdout', spill, options, context, scrubbed());\n  const errors = sink('stderr', spill, options, context, scrubbed());\n  let started: { process: KernelProcess; joined: boolean };\n  try {\n    started = await start(\n      client,\n      argv,\n      {\n        cwd: resolve(cwd, options?.cwd ?? '.'),\n        ...(options?.env ? { env: options.env } : {}),\n        onStdout: (bytes) => out.push(bytes),\n        onStderr: (bytes) => errors.push(bytes),\n      },\n      join\n    );\n  } catch (error) {\n    const message = error instanceof Error ? error.message : String(error);\n    return err(new ExecutionError('spawn_error', message));\n  }\n  const { process } = started;\n  spawned?.(process);\n  const watch = guard(process, options, context, () =>\n    join ? void sweep(client, process) : process.signal('SIGKILL')\n  );\n  over = () => watch.stop('held');\n  if (overflowed) over();\n  const exitCode = await process.exited.finally(() => watch.release());\n  const ended = watch.ending ?? (await drained([out, errors], context));\n  if (ended) {\n    out.drop();\n    errors.drop();\n  }\n  const spillPath = await spill.write(client);\n  const ending = watch.ending ?? ended;\n  if (ending) {\n    const error =\n      ending === 'held'\n        ? new ExecutionError('unknown', HELD)\n        : new ExecutionError(\n            ending,\n            `The command was ${ending === 'timeout' ? 'timed out' : 'aborted'}`\n          );\n    if (spillPath) error.spillPath = spillPath;\n    return err(error);\n  }\n  return ok(spillPath ? { exitCode, spillPath } : { exitCode });\n}\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EAIA;AAAA,OACK;AAGP,SAAS,aAAa,eAAe;AACrC,SAAS,eAAe;AAEjB,MAAM,QAAQ,CAAC,QAAQ,IAAI;AAC3B,MAAM,aAAa,KAAK,OAAO;AAC/B,MAAM,OAAO;AAOpB,MAAM,MAAM;AAAA,EACD,UAAwB,CAAC;AAAA,EACzB;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EAET,YAAY,OAAkC;AAC5C,SAAK,SAAS;AAAA,EAChB;AAAA,EAEA,IAAI,OAAyB;AAC3B,QAAI,CAAC,KAAK,OAAQ;AAClB,SAAK,QAAQ,KAAK,KAAK;AACvB,SAAK,UAAU,MAAM;AACrB,eAAW,QAAQ,MAAO,KAAI,SAAS,GAAI,MAAK;AAAA,EAClD;AAAA,EAEA,IAAI,OAAgB;AAClB,UAAM,QAAQ,KAAK;AACnB,WACE,UAAU,WAAc,KAAK,SAAS,MAAM,cAAc,KAAK,SAAS,MAAM;AAAA,EAElF;AAAA,EAEA,MAAM,MAAM,QAAmD;AAC7D,QAAI,CAAC,KAAK,KAAM,QAAO;AACvB,UAAM,OAAO,2BAA2B,OAAO,WAAW,CAAC;AAC3D,UAAM,MAAM,IAAI,WAAW,KAAK,MAAM;AACtC,QAAI,SAAS;AACb,eAAW,SAAS,KAAK,SAAS;AAChC,UAAI,IAAI,OAAO,MAAM;AACrB,gBAAU,MAAM;AAAA,IAClB;AACA,UAAM,OAAO,GAAG,MAAM,MAAM;AAC5B,UAAM,OAAO,GAAG,UAAU,MAAM,GAAG;AACnC,WAAO;AAAA,EACT;AACF;AAQA,SAAS,KACP,QACA,OACA,SACA,SACA,OACM;AACN,QAAM,UAAU,IAAI,cAAc;AAClC,QAAM,OAAO,CAAC,UAAsB;AAClC,UAAM,IAAI,KAAK;AACf,UAAM,OAAO,QAAQ,OAAO,KAAK;AACjC,QAAI,KAAM,UAAS,WAAW,MAAM,SAAS,EAAE,OAAO,CAAC;AAAA,EACzD;AACA,QAAM,QAAQ,MAAM;AAClB,UAAM,OAAO,QAAQ,OAAO;AAC5B,QAAI,KAAM,UAAS,WAAW,MAAM,SAAS,EAAE,OAAO,CAAC;AAAA,EACzD;AACA,MAAI,CAAC;AACH,WAAO;AAAA,MACL,MAAM;AAAA,MACN,KAAK,YAAY,MAAM;AAAA,MACvB,MAAM;AAAA,IACR;AACF,MAAI,QAAuB,QAAQ,QAAQ;AAC3C,MAAI,UAAU;AACd,QAAM,OAAO,CAAC,UAAsB;AAClC,QAAI,CAAC,QAAS,MAAK,KAAK;AAAA,EAC1B;AACA,SAAO;AAAA,IACL,KAAK,OAAO;AACV,YAAM,KAAK,MAAM,MAAM;AACvB,cAAQ,MACL,KAAK,MAAM,MAAM,OAAO,KAAK,KAAK,CAAC,EACnC,KAAK,CAAC,QAAQ;AACb,cAAM,KAAK,CAAC,MAAM,MAAM;AACxB,aAAK,GAAG;AAAA,MACV,CAAC;AAAA,IACL;AAAA,IACA,MAAM,MAAM;AACV,YAAM;AACN,WAAK,MAAM,MAAM,OAAO,IAAI,CAAC;AAC7B,UAAI,CAAC,QAAS,OAAM;AAAA,IACtB;AAAA,IACA,OAAO;AACL,gBAAU;AACV,YAAM,MAAM,MAAM,MAAS;AAC3B,YAAM,OAAO,KAAK;AAAA,IACpB;AAAA,EACF;AACF;AAIA,eAAsB,MACpB,QACA,SACe;AACf,QAAM,QAAS,MAAM,OAAO,KAAK,EAAE,MAAM,MAAM,MAAS,KAAM,CAAC;AAC/D,QAAM,OAAO,CAAC,QAAQ,KAAK,GAAG,YAAY,OAAO,QAAQ,GAAG,CAAC;AAC7D,QAAM,QAAQ,IAAI,KAAK,IAAI,CAAC,QAAQ,OAAO,OAAO,KAAK,SAAS,EAAE,MAAM,MAAM,MAAS,CAAC,CAAC;AAC3F;AAEA,SAAS,MACP,SACA,SACA,SACA,MACA;AACA,MAAI;AACJ,QAAM,OAAO,CAAC,QAAgB;AAC5B,eAAW;AACX,SAAK;AAAA,EACP;AACA,QAAM,QACJ,SAAS,YAAY,SACjB,SACA,WAAW,MAAM,KAAK,SAAS,GAAG,QAAQ,UAAU,GAAI;AAC9D,QAAM,UAAU,MAAM,KAAK,SAAS;AACpC,UAAQ,aAAa,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACtE,MAAI,QAAQ,aAAa,QAAS,SAAQ;AAC1C,SAAO;AAAA,IACL,IAAI,SAAS;AACX,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA,UAAU;AACR,mBAAa,KAAK;AAClB,cAAQ,aAAa,oBAAoB,SAAS,OAAO;AAAA,IAC3D;AAAA,EACF;AACF;AAEA,eAAe,QAAQ,OAAwB,SAAmC;AAChF,QAAM,SAAS,QAAQ;AACvB,MAAI,QAAQ,QAAS,QAAO;AAC5B,MAAI,MAAM,MAAM;AAChB,QAAM,UAAU,IAAI,QAAgB,CAACA,aAAY;AAC/C,UAAM,UAAU,MAAMA,SAAQ,SAAS;AACvC,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AACzD,UAAM,MAAM,QAAQ,oBAAoB,SAAS,OAAO;AAAA,EAC1D,CAAC;AACD,QAAM,OAAO,QAAQ,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,EAAE,KAAK,MAAM,MAAS;AAC9E,OAAK,MAAM,MAAM,MAAS;AAC1B,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,CAAC,MAAM,OAAO,CAAC;AAAA,EAC3C,UAAE;AACA,QAAI;AAAA,EACN;AACF;AAOA,eAAe,MACb,QACA,MACA,SACA,MACsD;AACtD,MAAI,MAAM,SAAS,QAAW;AAC5B,QAAI;AACF,aAAO,EAAE,SAAS,MAAM,OAAO,MAAM,MAAM,EAAE,GAAG,SAAS,MAAM,KAAK,KAAK,CAAC,GAAG,QAAQ,KAAK;AAAA,IAC5F,SAAS,OAAO;AACd,YAAM,OAAO,OAAQ,MAA6B,QAAQ,EAAE;AAC5D,UAAI,CAAC,QAAQ,IAAI,IAAI,EAAG,OAAM;AAC9B,WAAK,QAAQ,IAAI;AAAA,IACnB;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,OAAO,MAAM,MAAM,OAAO,GAAG,QAAQ,MAAM;AACrE;AAEA,eAAsB,QACpB,QACA,KACA,SACA,SACA,SACA,SACA,MACA,QAAmB,CAAC,GAC8B;AAClD,QAAM,QAAQ,OAAO,YAAY,WAAW,CAAC,GAAG,OAAO,OAAO,IAAI,CAAC,GAAG,OAAO;AAC7E,MAAI,MAAM,WAAW,EAAG,QAAO,IAAI,IAAI,eAAe,eAAe,mBAAmB,CAAC;AACzF,QAAM,OAAO,MAAM,QAAQ,CAAC,GAAG,MAAM,MAAM,KAAK,CAAC,IAAI;AACrD,MAAI,QAAQ,aAAa;AACvB,WAAO,IAAI,IAAI,eAAe,WAAW,yBAAyB,CAAC;AACrE,QAAM,QAAQ,IAAI,MAAM,SAAS,KAAK;AACtC,MAAI,OAAO;AACX,MAAI,aAAa;AACjB,MAAI,OAAO,MAAM;AACf,iBAAa;AAAA,EACf;AACA,QAAM,WAAW,MACf,MAAM,SAAS;AAAA,IACb,QAAQ,MAAM,MAAM;AAAA,IACpB,KAAK,OAAe;AAClB,cAAQ;AACR,UAAI,OAAO,WAAY,MAAK;AAAA,IAC9B;AAAA,EACF;AACF,QAAM,MAAM,KAAK,UAAU,OAAO,SAAS,SAAS,SAAS,CAAC;AAC9D,QAAM,SAAS,KAAK,UAAU,OAAO,SAAS,SAAS,SAAS,CAAC;AACjE,MAAI;AACJ,MAAI;AACF,cAAU,MAAM;AAAA,MACd;AAAA,MACA;AAAA,MACA;AAAA,QACE,KAAK,QAAQ,KAAK,SAAS,OAAO,GAAG;AAAA,QACrC,GAAI,SAAS,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;AAAA,QAC3C,UAAU,CAAC,UAAU,IAAI,KAAK,KAAK;AAAA,QACnC,UAAU,CAAC,UAAU,OAAO,KAAK,KAAK;AAAA,MACxC;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,WAAO,IAAI,IAAI,eAAe,eAAe,OAAO,CAAC;AAAA,EACvD;AACA,QAAM,EAAE,QAAQ,IAAI;AACpB,YAAU,OAAO;AACjB,QAAM,QAAQ;AAAA,IAAM;AAAA,IAAS;AAAA,IAAS;AAAA,IAAS,MAC7C,OAAO,KAAK,MAAM,QAAQ,OAAO,IAAI,QAAQ,OAAO,SAAS;AAAA,EAC/D;AACA,SAAO,MAAM,MAAM,KAAK,MAAM;AAC9B,MAAI,WAAY,MAAK;AACrB,QAAM,WAAW,MAAM,QAAQ,OAAO,QAAQ,MAAM,MAAM,QAAQ,CAAC;AACnE,QAAM,QAAQ,MAAM,UAAW,MAAM,QAAQ,CAAC,KAAK,MAAM,GAAG,OAAO;AACnE,MAAI,OAAO;AACT,QAAI,KAAK;AACT,WAAO,KAAK;AAAA,EACd;AACA,QAAM,YAAY,MAAM,MAAM,MAAM,MAAM;AAC1C,QAAM,SAAS,MAAM,UAAU;AAC/B,MAAI,QAAQ;AACV,UAAM,QACJ,WAAW,SACP,IAAI,eAAe,WAAW,IAAI,IAClC,IAAI;AAAA,MACF;AAAA,MACA,mBAAmB,WAAW,YAAY,cAAc,SAAS;AAAA,IACnE;AACN,QAAI,UAAW,OAAM,YAAY;AACjC,WAAO,IAAI,KAAK;AAAA,EAClB;AACA,SAAO,GAAG,YAAY,EAAE,UAAU,UAAU,IAAI,EAAE,SAAS,CAAC;AAC9D;",
+  "names": ["resolve"]
 }

package/dist/licks/licks.js

@@ -1,6 +1,7 @@
 import {
   defineDoc
 } from "@earendil-works/pi-durable";
+import { scrubTexts } from "../secrets/scrub.js";
 import {
   formatLick,
   lickId
@@ -83,6 +84,19 @@ function keyOf(event) {
   const base = `${event.target}|${event.channel}|${event.source}`;
   return event.coalesce === false ? `${base}|${event.eventId ?? lickId()}` : base;
 }
+async function scrubbedLick(event) {
+  const fields = ["title", "text", "body", "triage"].filter(
+    (key) => event[key] !== void 0
+  );
+  const items = event.items ?? [];
+  const scrubbed = await scrubTexts([...fields.map((key) => event[key]), ...items]);
+  const out = { ...event };
+  fields.forEach((key, at) => {
+    out[key] = scrubbed[at];
+  });
+  if (event.items) out.items = scrubbed.slice(fields.length);
+  return out;
+}
 function createLicks(host) {
   const handlers = /* @__PURE__ */ new Map();
   let lock = Promise.resolve();
@@ -173,7 +187,8 @@ function createLicks(host) {
     triage(next) {
       judge = next;
     },
-    async deliver(incoming, context) {
+    async deliver(raw, context) {
+      const incoming = await scrubbedLick(raw);
       const blocked = check?.(incoming.target);
       const event = blocked ? frozenNotice(incoming, blocked) : incoming;
       if (judge && event.triage && await seenBefore(event, context)) return;
@@ -246,6 +261,7 @@ export {
   createLicks,
   frozenNotice,
   render,
+  scrubbedLick,
   strongest
 };
 //# sourceMappingURL=licks.js.map

package/dist/licks/licks.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/licks/licks.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type Conversation,\n  defineDoc,\n  type Harness,\n  type SubmissionId,\n} from '@earendil-works/pi-durable';\nimport {\n  formatLick,\n  type Lick,\n  type LickAction,\n  type LickChannel,\n  type LickSeverity,\n  type LickTarget,\n  lickId,\n} from './lick.ts';\nimport { entryLick, LICK_STATE_KIND, type LickDecision, lickDecisions } from './state.ts';\nimport { skipEntry, skips, type Triage, type Verdict } from './triage.ts';\n\nexport interface LickEvent {\n  channel: LickChannel;\n  source: string;\n  title: string;\n  text: string;\n  body?: string;\n  items?: string[];\n  count?: number;\n  target: LickTarget;\n  coalesce?: boolean;\n  severity?: LickSeverity;\n  eventId?: string;\n  at?: number;\n  triage?: string;\n}\n\ntype Pending = {\n  lick: Lick;\n  items: string[];\n  body: string | null;\n};\n\ntype Queue = {\n  submission: number | null;\n  pending: Pending | null;\n};\n\ntype OutboxState = {\n  queues: Record<string, Queue>;\n  events: Record<string, string[]>;\n};\n\nexport const LicksOutbox = defineDoc<OutboxState>({\n  kind: 'slicc.licks',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ queues: {}, events: {} }),\n});\n\nexport interface LickHandler {\n  confirm?(lick: Lick, reason: string | undefined, context: Context): Promise<string | undefined>;\n  dismiss?(lick: Lick, reason: string | undefined, context: Context): Promise<string | undefined>;\n}\n\nexport interface LickFound {\n  lick: Lick;\n  decision: LickDecision | undefined;\n}\n\nexport interface Licks {\n  deliver(event: LickEvent, context: Context): Promise<void>;\n  flush(context: Context): Promise<void>;\n  find(conversation: Conversation, id: string, context: Context): Promise<LickFound | undefined>;\n  decide(\n    conversation: Conversation,\n    id: string,\n    action: LickAction,\n    reason: string | undefined,\n    context: Context\n  ): Promise<string>;\n  handle(channel: LickChannel, handler: LickHandler): void;\n  pending(context: Context): Promise<number>;\n  forget(target: LickTarget, channel: LickChannel, source: string, context: Context): Promise<void>;\n  guard(check: (target: LickTarget) => Blocked | undefined): void;\n  triage(judge: Triage): void;\n}\n\nexport type Blocked = { id: string; name: string; at: number };\n\nexport function frozenNotice(event: LickEvent, blocked: Blocked): LickEvent {\n  return {\n    channel: event.channel,\n    source: `frozen:${event.source}`,\n    title: `${blocked.name} is frozen`,\n    text: `${event.title} was skipped`,\n    body: `${event.target} belongs to ${blocked.name}, which is frozen (${blocked.id}). Thaw it in the Freezer to get its licks again.`,\n    target: 'cone',\n    severity: 'warn',\n    eventId: `${blocked.id}|${event.target}|${event.channel}|${event.source}|${blocked.at}`,\n  };\n}\n\nexport interface LicksHost {\n  harness: Harness;\n  resolve(target: LickTarget, channel: LickChannel, context: Context): Promise<Conversation>;\n}\n\nexport const MAX_ITEMS = 50;\nexport const MAX_EVENTS = 64;\n\nexport function render(pending: Pending): Lick {\n  const shown = pending.items.slice(0, MAX_ITEMS);\n  const more = pending.items.length - shown.length;\n  const lines = [\n    ...(pending.body ? [pending.body] : []),\n    ...shown,\n    ...(more > 0 ? [`\u2026 and ${more} more`] : []),\n  ];\n  const { body: _, ...lick } = pending.lick;\n  return lines.length ? { ...lick, body: lines.join('\\n') } : lick;\n}\n\nconst RANK: Record<LickSeverity, number> = { warn: 1, error: 2 };\n\nexport function strongest(\n  a: LickSeverity | undefined,\n  b: LickSeverity | undefined\n): LickSeverity | undefined {\n  if (!a) return b;\n  if (!b) return a;\n  return RANK[b] > RANK[a] ? b : a;\n}\n\nfunction merge(pending: Pending, event: LickEvent, now: number): Pending {\n  const items = [...pending.items];\n  for (const item of event.items ?? []) if (!items.includes(item)) items.push(item);\n  const { severity: _, ...lick } = pending.lick;\n  const severity = strongest(pending.lick.severity, event.severity);\n  return {\n    lick: {\n      ...lick,\n      title: event.title,\n      text: event.text,\n      count: pending.lick.count + (event.count ?? 1),\n      at: event.at ?? now,\n      ...(severity ? { severity } : {}),\n    },\n    items,\n    body: event.body ?? pending.body,\n  };\n}\n\nfunction fresh(event: LickEvent, now: number, listed: LickAction[] | undefined): Pending {\n  return {\n    lick: {\n      id: lickId(),\n      channel: event.channel,\n      source: event.source,\n      title: event.title,\n      text: event.text,\n      count: event.count ?? 1,\n      at: now,\n      ...(listed ? { actions: listed } : {}),\n      ...(event.severity ? { severity: event.severity } : {}),\n    },\n    items: [...new Set(event.items ?? [])],\n    body: event.body ?? null,\n  };\n}\n\nfunction keyOf(event: LickEvent): string {\n  const base = `${event.target}|${event.channel}|${event.source}`;\n  return event.coalesce === false ? `${base}|${event.eventId ?? lickId()}` : base;\n}\n\nexport function createLicks(host: Promise<LicksHost>): Licks {\n  const handlers = new Map<LickChannel, LickHandler>();\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n\n  const actions = (channel: LickChannel): LickAction[] | undefined => {\n    const handler = handlers.get(channel);\n    const list: LickAction[] = [];\n    if (handler?.confirm) list.push('confirm');\n    if (handler?.dismiss) list.push('dismiss');\n    return list.length ? list : undefined;\n  };\n\n  async function previous(\n    harness: Harness,\n    id: number | null,\n    context: Context\n  ): Promise<'queued' | 'withdrawn' | 'gone'> {\n    if (id === null) return 'gone';\n    const submission = await harness.submission(id as SubmissionId, context);\n    const record = await submission?.status(context);\n    if (record?.status === 'queued') return 'queued';\n    return record?.status === 'unanswered' && record.reason === 'aborted' ? 'withdrawn' : 'gone';\n  }\n\n  async function settled(key: string, context: Context): Promise<Queue | undefined> {\n    const { harness } = await host;\n    const queue = (await harness.snapshot(LicksOutbox, context))?.queues[key];\n    if (!queue) return undefined;\n    const before = await previous(harness, queue.submission, context);\n    if (before === 'queued') return undefined;\n    if (queue.pending && before === 'gone') return queue;\n    await harness.commit(async (tx) => {\n      const doc = await tx.doc(LicksOutbox);\n      if (doc.queues[key]?.submission === queue.submission) delete doc.queues[key];\n    }, context);\n    return undefined;\n  }\n\n  async function flushKey(key: string, context: Context): Promise<void> {\n    const { harness, resolve } = await host;\n    const queue = await settled(key, context);\n    if (!queue?.pending) return;\n    const lick = render(queue.pending);\n    const target = key.split('|')[0] as LickTarget;\n    const conversation = await resolve(target, queue.pending.lick.channel, context);\n    const submission = await conversation.submit(\n      {\n        type: 'input',\n        content: formatLick(lick),\n        whenBusy: 'steer',\n        requestId: `lick:${lick.id}`,\n      },\n      context\n    );\n    await harness.commit(async (tx) => {\n      const doc = await tx.doc(LicksOutbox);\n      doc.queues[key] = { submission: submission.id, pending: null };\n    }, context);\n  }\n\n  async function flushAll(context: Context): Promise<void> {\n    const { harness } = await host;\n    const keys = Object.keys((await harness.snapshot(LicksOutbox, context))?.queues ?? {});\n    for (const key of keys) await flushKey(key, context);\n  }\n\n  async function find(\n    conversation: Conversation,\n    id: string,\n    context: Context\n  ): Promise<LickFound | undefined> {\n    const { entries } = await conversation.context(context);\n    const lick = entries.map(entryLick).find((candidate) => candidate?.id === id);\n    if (!lick) return undefined;\n    return { lick, decision: lickDecisions(entries).get(id) };\n  }\n\n  async function judged(event: LickEvent, context: Context): Promise<Verdict | undefined> {\n    if (!judge || !event.triage) return undefined;\n    return judge(event, context).catch(() => undefined);\n  }\n\n  async function seenBefore(event: LickEvent, context: Context): Promise<boolean> {\n    if (event.eventId === undefined) return false;\n    const { harness } = await host;\n    const events = (await harness.snapshot(LicksOutbox, context))?.events ?? {};\n    return (events[`${event.channel}|${event.source}`] ?? []).includes(event.eventId);\n  }\n\n  async function record(event: LickEvent, verdict: Verdict, now: number, context: Context) {\n    const conversation = await (await host).resolve(event.target, event.channel, context);\n    await conversation.submit(skipEntry(event, verdict, now), context);\n  }\n\n  let check: ((target: LickTarget) => Blocked | undefined) | undefined;\n  let judge: Triage | undefined;\n  return {\n    guard(next) {\n      check = next;\n    },\n    triage(next) {\n      judge = next;\n    },\n    async deliver(incoming, context) {\n      const blocked = check?.(incoming.target);\n      const event = blocked ? frozenNotice(incoming, blocked) : incoming;\n      if (judge && event.triage && (await seenBefore(event, context))) return;\n      const verdict = await judged(event, context);\n      const skipped = skips(verdict);\n      return serial(async () => {\n        const { harness } = await host;\n        const key = keyOf(event);\n        await settled(key, context);\n        const stream = `${event.channel}|${event.source}`;\n        const now = event.at ?? Date.now();\n        if (skipped) {\n          if (await seenBefore(event, context)) return;\n          await record(event, verdict, now, context);\n        }\n        const accepted = await harness.commit(async (tx) => {\n          const doc = await tx.doc(LicksOutbox);\n          const seen = doc.events[stream] ?? [];\n          if (event.eventId !== undefined) {\n            if (seen.includes(event.eventId)) return false;\n            doc.events[stream] = [...seen, event.eventId].slice(-MAX_EVENTS);\n          }\n          if (skipped) return false;\n          const queue = doc.queues[key] ?? { submission: null, pending: null };\n          queue.pending = queue.pending\n            ? merge(queue.pending, event, now)\n            : fresh(event, now, actions(event.channel));\n          doc.queues[key] = queue;\n          return true;\n        }, context);\n        if (accepted) await flushKey(key, context);\n      });\n    },\n    flush: (context) => serial(() => flushAll(context)),\n    find,\n    async decide(conversation, id, action, reason, context) {\n      const found = await find(conversation, id, context);\n      if (!found) throw new Error(`There is no lick ${id} in this conversation.`);\n      if (found.decision) throw new Error(`Lick ${id} is already ${found.decision}.`);\n      if (!found.lick.actions?.includes(action))\n        throw new Error(`Lick ${id} (${found.lick.channel}) has no ${action} action.`);\n      const run = handlers.get(found.lick.channel)?.[action];\n      if (!run) throw new Error(`Lick ${id} (${found.lick.channel}) has no ${action} action.`);\n      return (await run(found.lick, reason, context)) ?? `Lick ${id} ${action}ed.`;\n    },\n    handle(channel, handler) {\n      handlers.set(channel, handler);\n    },\n    forget(target, channel, source, context) {\n      return serial(async () => {\n        const { harness } = await host;\n        const key = `${target}|${channel}|${source}`;\n        await harness.commit(async (tx) => {\n          const doc = await tx.doc(LicksOutbox);\n          const queue = doc.queues[key];\n          if (queue?.pending) queue.pending = null;\n        }, context);\n      });\n    },\n    async pending(context) {\n      const { harness } = await host;\n      const queues = (await harness.snapshot(LicksOutbox, context))?.queues ?? {};\n      return Object.values(queues).filter((queue) => queue.submission !== null || queue.pending)\n        .length;\n    },\n  };\n}\n\nexport { LICK_STATE_KIND };\n"],
-  "mappings": "AACA;AAAA,EAEE;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EAMA;AAAA,OACK;AACP,SAAS,WAAW,iBAAoC,qBAAqB;AAC7E,SAAS,WAAW,aAAwC;AAkCrD,MAAM,cAAc,UAAuB;AAAA,EAChD,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE;AAC3C,CAAC;AAgCM,SAAS,aAAa,OAAkB,SAA6B;AAC1E,SAAO;AAAA,IACL,SAAS,MAAM;AAAA,IACf,QAAQ,UAAU,MAAM,MAAM;AAAA,IAC9B,OAAO,GAAG,QAAQ,IAAI;AAAA,IACtB,MAAM,GAAG,MAAM,KAAK;AAAA,IACpB,MAAM,GAAG,MAAM,MAAM,eAAe,QAAQ,IAAI,sBAAsB,QAAQ,EAAE;AAAA,IAChF,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS,GAAG,QAAQ,EAAE,IAAI,MAAM,MAAM,IAAI,MAAM,OAAO,IAAI,MAAM,MAAM,IAAI,QAAQ,EAAE;AAAA,EACvF;AACF;AAOO,MAAM,YAAY;AAClB,MAAM,aAAa;AAEnB,SAAS,OAAO,SAAwB;AAC7C,QAAM,QAAQ,QAAQ,MAAM,MAAM,GAAG,SAAS;AAC9C,QAAM,OAAO,QAAQ,MAAM,SAAS,MAAM;AAC1C,QAAM,QAAQ;AAAA,IACZ,GAAI,QAAQ,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;AAAA,IACrC,GAAG;AAAA,IACH,GAAI,OAAO,IAAI,CAAC,cAAS,IAAI,OAAO,IAAI,CAAC;AAAA,EAC3C;AACA,QAAM,EAAE,MAAM,GAAG,GAAG,KAAK,IAAI,QAAQ;AACrC,SAAO,MAAM,SAAS,EAAE,GAAG,MAAM,MAAM,MAAM,KAAK,IAAI,EAAE,IAAI;AAC9D;AAEA,MAAM,OAAqC,EAAE,MAAM,GAAG,OAAO,EAAE;AAExD,SAAS,UACd,GACA,GAC0B;AAC1B,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,CAAC,EAAG,QAAO;AACf,SAAO,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI;AACjC;AAEA,SAAS,MAAM,SAAkB,OAAkB,KAAsB;AACvE,QAAM,QAAQ,CAAC,GAAG,QAAQ,KAAK;AAC/B,aAAW,QAAQ,MAAM,SAAS,CAAC,EAAG,KAAI,CAAC,MAAM,SAAS,IAAI,EAAG,OAAM,KAAK,IAAI;AAChF,QAAM,EAAE,UAAU,GAAG,GAAG,KAAK,IAAI,QAAQ;AACzC,QAAM,WAAW,UAAU,QAAQ,KAAK,UAAU,MAAM,QAAQ;AAChE,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,OAAO,MAAM;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ,KAAK,SAAS,MAAM,SAAS;AAAA,MAC5C,IAAI,MAAM,MAAM;AAAA,MAChB,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IACjC;AAAA,IACA;AAAA,IACA,MAAM,MAAM,QAAQ,QAAQ;AAAA,EAC9B;AACF;AAEA,SAAS,MAAM,OAAkB,KAAa,QAA2C;AACvF,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,IAAI,OAAO;AAAA,MACX,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,OAAO,MAAM,SAAS;AAAA,MACtB,IAAI;AAAA,MACJ,GAAI,SAAS,EAAE,SAAS,OAAO,IAAI,CAAC;AAAA,MACpC,GAAI,MAAM,WAAW,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,IACvD;AAAA,IACA,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;AAAA,IACrC,MAAM,MAAM,QAAQ;AAAA,EACtB;AACF;AAEA,SAAS,MAAM,OAA0B;AACvC,QAAM,OAAO,GAAG,MAAM,MAAM,IAAI,MAAM,OAAO,IAAI,MAAM,MAAM;AAC7D,SAAO,MAAM,aAAa,QAAQ,GAAG,IAAI,IAAI,MAAM,WAAW,OAAO,CAAC,KAAK;AAC7E;AAEO,SAAS,YAAY,MAAiC;AAC3D,QAAM,WAAW,oBAAI,IAA8B;AACnD,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,CAAC,YAAmD;AAClE,UAAM,UAAU,SAAS,IAAI,OAAO;AACpC,UAAM,OAAqB,CAAC;AAC5B,QAAI,SAAS,QAAS,MAAK,KAAK,SAAS;AACzC,QAAI,SAAS,QAAS,MAAK,KAAK,SAAS;AACzC,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B;AAEA,iBAAe,SACb,SACA,IACA,SAC0C;AAC1C,QAAI,OAAO,KAAM,QAAO;AACxB,UAAM,aAAa,MAAM,QAAQ,WAAW,IAAoB,OAAO;AACvE,UAAMA,UAAS,MAAM,YAAY,OAAO,OAAO;AAC/C,QAAIA,SAAQ,WAAW,SAAU,QAAO;AACxC,WAAOA,SAAQ,WAAW,gBAAgBA,QAAO,WAAW,YAAY,cAAc;AAAA,EACxF;AAEA,iBAAe,QAAQ,KAAa,SAA8C;AAChF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,SAAS,MAAM,QAAQ,SAAS,aAAa,OAAO,IAAI,OAAO,GAAG;AACxE,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,SAAS,MAAM,SAAS,SAAS,MAAM,YAAY,OAAO;AAChE,QAAI,WAAW,SAAU,QAAO;AAChC,QAAI,MAAM,WAAW,WAAW,OAAQ,QAAO;AAC/C,UAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,YAAM,MAAM,MAAM,GAAG,IAAI,WAAW;AACpC,UAAI,IAAI,OAAO,GAAG,GAAG,eAAe,MAAM,WAAY,QAAO,IAAI,OAAO,GAAG;AAAA,IAC7E,GAAG,OAAO;AACV,WAAO;AAAA,EACT;AAEA,iBAAe,SAAS,KAAa,SAAiC;AACpE,UAAM,EAAE,SAAS,QAAQ,IAAI,MAAM;AACnC,UAAM,QAAQ,MAAM,QAAQ,KAAK,OAAO;AACxC,QAAI,CAAC,OAAO,QAAS;AACrB,UAAM,OAAO,OAAO,MAAM,OAAO;AACjC,UAAM,SAAS,IAAI,MAAM,GAAG,EAAE,CAAC;AAC/B,UAAM,eAAe,MAAM,QAAQ,QAAQ,MAAM,QAAQ,KAAK,SAAS,OAAO;AAC9E,UAAM,aAAa,MAAM,aAAa;AAAA,MACpC;AAAA,QACE,MAAM;AAAA,QACN,SAAS,WAAW,IAAI;AAAA,QACxB,UAAU;AAAA,QACV,WAAW,QAAQ,KAAK,EAAE;AAAA,MAC5B;AAAA,MACA;AAAA,IACF;AACA,UAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,YAAM,MAAM,MAAM,GAAG,IAAI,WAAW;AACpC,UAAI,OAAO,GAAG,IAAI,EAAE,YAAY,WAAW,IAAI,SAAS,KAAK;AAAA,IAC/D,GAAG,OAAO;AAAA,EACZ;AAEA,iBAAe,SAAS,SAAiC;AACvD,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,OAAO,OAAO,MAAM,MAAM,QAAQ,SAAS,aAAa,OAAO,IAAI,UAAU,CAAC,CAAC;AACrF,eAAW,OAAO,KAAM,OAAM,SAAS,KAAK,OAAO;AAAA,EACrD;AAEA,iBAAe,KACb,cACA,IACA,SACgC;AAChC,UAAM,EAAE,QAAQ,IAAI,MAAM,aAAa,QAAQ,OAAO;AACtD,UAAM,OAAO,QAAQ,IAAI,SAAS,EAAE,KAAK,CAAC,cAAc,WAAW,OAAO,EAAE;AAC5E,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,EAAE,MAAM,UAAU,cAAc,OAAO,EAAE,IAAI,EAAE,EAAE;AAAA,EAC1D;AAEA,iBAAe,OAAO,OAAkB,SAAgD;AACtF,QAAI,CAAC,SAAS,CAAC,MAAM,OAAQ,QAAO;AACpC,WAAO,MAAM,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EACpD;AAEA,iBAAe,WAAW,OAAkB,SAAoC;AAC9E,QAAI,MAAM,YAAY,OAAW,QAAO;AACxC,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,UAAU,MAAM,QAAQ,SAAS,aAAa,OAAO,IAAI,UAAU,CAAC;AAC1E,YAAQ,OAAO,GAAG,MAAM,OAAO,IAAI,MAAM,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,MAAM,OAAO;AAAA,EAClF;AAEA,iBAAe,OAAO,OAAkB,SAAkB,KAAa,SAAkB;AACvF,UAAM,eAAe,OAAO,MAAM,MAAM,QAAQ,MAAM,QAAQ,MAAM,SAAS,OAAO;AACpF,UAAM,aAAa,OAAO,UAAU,OAAO,SAAS,GAAG,GAAG,OAAO;AAAA,EACnE;AAEA,MAAI;AACJ,MAAI;AACJ,SAAO;AAAA,IACL,MAAM,MAAM;AACV,cAAQ;AAAA,IACV;AAAA,IACA,OAAO,MAAM;AACX,cAAQ;AAAA,IACV;AAAA,IACA,MAAM,QAAQ,UAAU,SAAS;AAC/B,YAAM,UAAU,QAAQ,SAAS,MAAM;AACvC,YAAM,QAAQ,UAAU,aAAa,UAAU,OAAO,IAAI;AAC1D,UAAI,SAAS,MAAM,UAAW,MAAM,WAAW,OAAO,OAAO,EAAI;AACjE,YAAM,UAAU,MAAM,OAAO,OAAO,OAAO;AAC3C,YAAM,UAAU,MAAM,OAAO;AAC7B,aAAO,OAAO,YAAY;AACxB,cAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,cAAM,MAAM,MAAM,KAAK;AACvB,cAAM,QAAQ,KAAK,OAAO;AAC1B,cAAM,SAAS,GAAG,MAAM,OAAO,IAAI,MAAM,MAAM;AAC/C,cAAM,MAAM,MAAM,MAAM,KAAK,IAAI;AACjC,YAAI,SAAS;AACX,cAAI,MAAM,WAAW,OAAO,OAAO,EAAG;AACtC,gBAAM,OAAO,OAAO,SAAS,KAAK,OAAO;AAAA,QAC3C;AACA,cAAM,WAAW,MAAM,QAAQ,OAAO,OAAO,OAAO;AAClD,gBAAM,MAAM,MAAM,GAAG,IAAI,WAAW;AACpC,gBAAM,OAAO,IAAI,OAAO,MAAM,KAAK,CAAC;AACpC,cAAI,MAAM,YAAY,QAAW;AAC/B,gBAAI,KAAK,SAAS,MAAM,OAAO,EAAG,QAAO;AACzC,gBAAI,OAAO,MAAM,IAAI,CAAC,GAAG,MAAM,MAAM,OAAO,EAAE,MAAM,CAAC,UAAU;AAAA,UACjE;AACA,cAAI,QAAS,QAAO;AACpB,gBAAM,QAAQ,IAAI,OAAO,GAAG,KAAK,EAAE,YAAY,MAAM,SAAS,KAAK;AACnE,gBAAM,UAAU,MAAM,UAClB,MAAM,MAAM,SAAS,OAAO,GAAG,IAC/B,MAAM,OAAO,KAAK,QAAQ,MAAM,OAAO,CAAC;AAC5C,cAAI,OAAO,GAAG,IAAI;AAClB,iBAAO;AAAA,QACT,GAAG,OAAO;AACV,YAAI,SAAU,OAAM,SAAS,KAAK,OAAO;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,IACA,OAAO,CAAC,YAAY,OAAO,MAAM,SAAS,OAAO,CAAC;AAAA,IAClD;AAAA,IACA,MAAM,OAAO,cAAc,IAAI,QAAQ,QAAQ,SAAS;AACtD,YAAM,QAAQ,MAAM,KAAK,cAAc,IAAI,OAAO;AAClD,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,oBAAoB,EAAE,wBAAwB;AAC1E,UAAI,MAAM,SAAU,OAAM,IAAI,MAAM,QAAQ,EAAE,eAAe,MAAM,QAAQ,GAAG;AAC9E,UAAI,CAAC,MAAM,KAAK,SAAS,SAAS,MAAM;AACtC,cAAM,IAAI,MAAM,QAAQ,EAAE,KAAK,MAAM,KAAK,OAAO,YAAY,MAAM,UAAU;AAC/E,YAAM,MAAM,SAAS,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM;AACrD,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,QAAQ,EAAE,KAAK,MAAM,KAAK,OAAO,YAAY,MAAM,UAAU;AACvF,aAAQ,MAAM,IAAI,MAAM,MAAM,QAAQ,OAAO,KAAM,QAAQ,EAAE,IAAI,MAAM;AAAA,IACzE;AAAA,IACA,OAAO,SAAS,SAAS;AACvB,eAAS,IAAI,SAAS,OAAO;AAAA,IAC/B;AAAA,IACA,OAAO,QAAQ,SAAS,QAAQ,SAAS;AACvC,aAAO,OAAO,YAAY;AACxB,cAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,cAAM,MAAM,GAAG,MAAM,IAAI,OAAO,IAAI,MAAM;AAC1C,cAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,gBAAM,MAAM,MAAM,GAAG,IAAI,WAAW;AACpC,gBAAM,QAAQ,IAAI,OAAO,GAAG;AAC5B,cAAI,OAAO,QAAS,OAAM,UAAU;AAAA,QACtC,GAAG,OAAO;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,IACA,MAAM,QAAQ,SAAS;AACrB,YAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,YAAM,UAAU,MAAM,QAAQ,SAAS,aAAa,OAAO,IAAI,UAAU,CAAC;AAC1E,aAAO,OAAO,OAAO,MAAM,EAAE,OAAO,CAAC,UAAU,MAAM,eAAe,QAAQ,MAAM,OAAO,EACtF;AAAA,IACL;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type Conversation,\n  defineDoc,\n  type Harness,\n  type SubmissionId,\n} from '@earendil-works/pi-durable';\nimport { scrubTexts } from '../secrets/scrub.ts';\nimport {\n  formatLick,\n  type Lick,\n  type LickAction,\n  type LickChannel,\n  type LickSeverity,\n  type LickTarget,\n  lickId,\n} from './lick.ts';\nimport { entryLick, LICK_STATE_KIND, type LickDecision, lickDecisions } from './state.ts';\nimport { skipEntry, skips, type Triage, type Verdict } from './triage.ts';\n\nexport interface LickEvent {\n  channel: LickChannel;\n  source: string;\n  title: string;\n  text: string;\n  body?: string;\n  items?: string[];\n  count?: number;\n  target: LickTarget;\n  coalesce?: boolean;\n  severity?: LickSeverity;\n  eventId?: string;\n  at?: number;\n  triage?: string;\n}\n\ntype Pending = {\n  lick: Lick;\n  items: string[];\n  body: string | null;\n};\n\ntype Queue = {\n  submission: number | null;\n  pending: Pending | null;\n};\n\ntype OutboxState = {\n  queues: Record<string, Queue>;\n  events: Record<string, string[]>;\n};\n\nexport const LicksOutbox = defineDoc<OutboxState>({\n  kind: 'slicc.licks',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ queues: {}, events: {} }),\n});\n\nexport interface LickHandler {\n  confirm?(lick: Lick, reason: string | undefined, context: Context): Promise<string | undefined>;\n  dismiss?(lick: Lick, reason: string | undefined, context: Context): Promise<string | undefined>;\n}\n\nexport interface LickFound {\n  lick: Lick;\n  decision: LickDecision | undefined;\n}\n\nexport interface Licks {\n  deliver(event: LickEvent, context: Context): Promise<void>;\n  flush(context: Context): Promise<void>;\n  find(conversation: Conversation, id: string, context: Context): Promise<LickFound | undefined>;\n  decide(\n    conversation: Conversation,\n    id: string,\n    action: LickAction,\n    reason: string | undefined,\n    context: Context\n  ): Promise<string>;\n  handle(channel: LickChannel, handler: LickHandler): void;\n  pending(context: Context): Promise<number>;\n  forget(target: LickTarget, channel: LickChannel, source: string, context: Context): Promise<void>;\n  guard(check: (target: LickTarget) => Blocked | undefined): void;\n  triage(judge: Triage): void;\n}\n\nexport type Blocked = { id: string; name: string; at: number };\n\nexport function frozenNotice(event: LickEvent, blocked: Blocked): LickEvent {\n  return {\n    channel: event.channel,\n    source: `frozen:${event.source}`,\n    title: `${blocked.name} is frozen`,\n    text: `${event.title} was skipped`,\n    body: `${event.target} belongs to ${blocked.name}, which is frozen (${blocked.id}). Thaw it in the Freezer to get its licks again.`,\n    target: 'cone',\n    severity: 'warn',\n    eventId: `${blocked.id}|${event.target}|${event.channel}|${event.source}|${blocked.at}`,\n  };\n}\n\nexport interface LicksHost {\n  harness: Harness;\n  resolve(target: LickTarget, channel: LickChannel, context: Context): Promise<Conversation>;\n}\n\nexport const MAX_ITEMS = 50;\nexport const MAX_EVENTS = 64;\n\nexport function render(pending: Pending): Lick {\n  const shown = pending.items.slice(0, MAX_ITEMS);\n  const more = pending.items.length - shown.length;\n  const lines = [\n    ...(pending.body ? [pending.body] : []),\n    ...shown,\n    ...(more > 0 ? [`\u2026 and ${more} more`] : []),\n  ];\n  const { body: _, ...lick } = pending.lick;\n  return lines.length ? { ...lick, body: lines.join('\\n') } : lick;\n}\n\nconst RANK: Record<LickSeverity, number> = { warn: 1, error: 2 };\n\nexport function strongest(\n  a: LickSeverity | undefined,\n  b: LickSeverity | undefined\n): LickSeverity | undefined {\n  if (!a) return b;\n  if (!b) return a;\n  return RANK[b] > RANK[a] ? b : a;\n}\n\nfunction merge(pending: Pending, event: LickEvent, now: number): Pending {\n  const items = [...pending.items];\n  for (const item of event.items ?? []) if (!items.includes(item)) items.push(item);\n  const { severity: _, ...lick } = pending.lick;\n  const severity = strongest(pending.lick.severity, event.severity);\n  return {\n    lick: {\n      ...lick,\n      title: event.title,\n      text: event.text,\n      count: pending.lick.count + (event.count ?? 1),\n      at: event.at ?? now,\n      ...(severity ? { severity } : {}),\n    },\n    items,\n    body: event.body ?? pending.body,\n  };\n}\n\nfunction fresh(event: LickEvent, now: number, listed: LickAction[] | undefined): Pending {\n  return {\n    lick: {\n      id: lickId(),\n      channel: event.channel,\n      source: event.source,\n      title: event.title,\n      text: event.text,\n      count: event.count ?? 1,\n      at: now,\n      ...(listed ? { actions: listed } : {}),\n      ...(event.severity ? { severity: event.severity } : {}),\n    },\n    items: [...new Set(event.items ?? [])],\n    body: event.body ?? null,\n  };\n}\n\nfunction keyOf(event: LickEvent): string {\n  const base = `${event.target}|${event.channel}|${event.source}`;\n  return event.coalesce === false ? `${base}|${event.eventId ?? lickId()}` : base;\n}\n\nexport async function scrubbedLick(event: LickEvent): Promise<LickEvent> {\n  const fields = (['title', 'text', 'body', 'triage'] as const).filter(\n    (key) => event[key] !== undefined\n  );\n  const items = event.items ?? [];\n  const scrubbed = await scrubTexts([...fields.map((key) => event[key] as string), ...items]);\n  const out: LickEvent = { ...event };\n  fields.forEach((key, at) => {\n    out[key] = scrubbed[at] as string;\n  });\n  if (event.items) out.items = scrubbed.slice(fields.length);\n  return out;\n}\n\nexport function createLicks(host: Promise<LicksHost>): Licks {\n  const handlers = new Map<LickChannel, LickHandler>();\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n\n  const actions = (channel: LickChannel): LickAction[] | undefined => {\n    const handler = handlers.get(channel);\n    const list: LickAction[] = [];\n    if (handler?.confirm) list.push('confirm');\n    if (handler?.dismiss) list.push('dismiss');\n    return list.length ? list : undefined;\n  };\n\n  async function previous(\n    harness: Harness,\n    id: number | null,\n    context: Context\n  ): Promise<'queued' | 'withdrawn' | 'gone'> {\n    if (id === null) return 'gone';\n    const submission = await harness.submission(id as SubmissionId, context);\n    const record = await submission?.status(context);\n    if (record?.status === 'queued') return 'queued';\n    return record?.status === 'unanswered' && record.reason === 'aborted' ? 'withdrawn' : 'gone';\n  }\n\n  async function settled(key: string, context: Context): Promise<Queue | undefined> {\n    const { harness } = await host;\n    const queue = (await harness.snapshot(LicksOutbox, context))?.queues[key];\n    if (!queue) return undefined;\n    const before = await previous(harness, queue.submission, context);\n    if (before === 'queued') return undefined;\n    if (queue.pending && before === 'gone') return queue;\n    await harness.commit(async (tx) => {\n      const doc = await tx.doc(LicksOutbox);\n      if (doc.queues[key]?.submission === queue.submission) delete doc.queues[key];\n    }, context);\n    return undefined;\n  }\n\n  async function flushKey(key: string, context: Context): Promise<void> {\n    const { harness, resolve } = await host;\n    const queue = await settled(key, context);\n    if (!queue?.pending) return;\n    const lick = render(queue.pending);\n    const target = key.split('|')[0] as LickTarget;\n    const conversation = await resolve(target, queue.pending.lick.channel, context);\n    const submission = await conversation.submit(\n      {\n        type: 'input',\n        content: formatLick(lick),\n        whenBusy: 'steer',\n        requestId: `lick:${lick.id}`,\n      },\n      context\n    );\n    await harness.commit(async (tx) => {\n      const doc = await tx.doc(LicksOutbox);\n      doc.queues[key] = { submission: submission.id, pending: null };\n    }, context);\n  }\n\n  async function flushAll(context: Context): Promise<void> {\n    const { harness } = await host;\n    const keys = Object.keys((await harness.snapshot(LicksOutbox, context))?.queues ?? {});\n    for (const key of keys) await flushKey(key, context);\n  }\n\n  async function find(\n    conversation: Conversation,\n    id: string,\n    context: Context\n  ): Promise<LickFound | undefined> {\n    const { entries } = await conversation.context(context);\n    const lick = entries.map(entryLick).find((candidate) => candidate?.id === id);\n    if (!lick) return undefined;\n    return { lick, decision: lickDecisions(entries).get(id) };\n  }\n\n  async function judged(event: LickEvent, context: Context): Promise<Verdict | undefined> {\n    if (!judge || !event.triage) return undefined;\n    return judge(event, context).catch(() => undefined);\n  }\n\n  async function seenBefore(event: LickEvent, context: Context): Promise<boolean> {\n    if (event.eventId === undefined) return false;\n    const { harness } = await host;\n    const events = (await harness.snapshot(LicksOutbox, context))?.events ?? {};\n    return (events[`${event.channel}|${event.source}`] ?? []).includes(event.eventId);\n  }\n\n  async function record(event: LickEvent, verdict: Verdict, now: number, context: Context) {\n    const conversation = await (await host).resolve(event.target, event.channel, context);\n    await conversation.submit(skipEntry(event, verdict, now), context);\n  }\n\n  let check: ((target: LickTarget) => Blocked | undefined) | undefined;\n  let judge: Triage | undefined;\n  return {\n    guard(next) {\n      check = next;\n    },\n    triage(next) {\n      judge = next;\n    },\n    async deliver(raw, context) {\n      const incoming = await scrubbedLick(raw);\n      const blocked = check?.(incoming.target);\n      const event = blocked ? frozenNotice(incoming, blocked) : incoming;\n      if (judge && event.triage && (await seenBefore(event, context))) return;\n      const verdict = await judged(event, context);\n      const skipped = skips(verdict);\n      return serial(async () => {\n        const { harness } = await host;\n        const key = keyOf(event);\n        await settled(key, context);\n        const stream = `${event.channel}|${event.source}`;\n        const now = event.at ?? Date.now();\n        if (skipped) {\n          if (await seenBefore(event, context)) return;\n          await record(event, verdict, now, context);\n        }\n        const accepted = await harness.commit(async (tx) => {\n          const doc = await tx.doc(LicksOutbox);\n          const seen = doc.events[stream] ?? [];\n          if (event.eventId !== undefined) {\n            if (seen.includes(event.eventId)) return false;\n            doc.events[stream] = [...seen, event.eventId].slice(-MAX_EVENTS);\n          }\n          if (skipped) return false;\n          const queue = doc.queues[key] ?? { submission: null, pending: null };\n          queue.pending = queue.pending\n            ? merge(queue.pending, event, now)\n            : fresh(event, now, actions(event.channel));\n          doc.queues[key] = queue;\n          return true;\n        }, context);\n        if (accepted) await flushKey(key, context);\n      });\n    },\n    flush: (context) => serial(() => flushAll(context)),\n    find,\n    async decide(conversation, id, action, reason, context) {\n      const found = await find(conversation, id, context);\n      if (!found) throw new Error(`There is no lick ${id} in this conversation.`);\n      if (found.decision) throw new Error(`Lick ${id} is already ${found.decision}.`);\n      if (!found.lick.actions?.includes(action))\n        throw new Error(`Lick ${id} (${found.lick.channel}) has no ${action} action.`);\n      const run = handlers.get(found.lick.channel)?.[action];\n      if (!run) throw new Error(`Lick ${id} (${found.lick.channel}) has no ${action} action.`);\n      return (await run(found.lick, reason, context)) ?? `Lick ${id} ${action}ed.`;\n    },\n    handle(channel, handler) {\n      handlers.set(channel, handler);\n    },\n    forget(target, channel, source, context) {\n      return serial(async () => {\n        const { harness } = await host;\n        const key = `${target}|${channel}|${source}`;\n        await harness.commit(async (tx) => {\n          const doc = await tx.doc(LicksOutbox);\n          const queue = doc.queues[key];\n          if (queue?.pending) queue.pending = null;\n        }, context);\n      });\n    },\n    async pending(context) {\n      const { harness } = await host;\n      const queues = (await harness.snapshot(LicksOutbox, context))?.queues ?? {};\n      return Object.values(queues).filter((queue) => queue.submission !== null || queue.pending)\n        .length;\n    },\n  };\n}\n\nexport { LICK_STATE_KIND };\n"],
+  "mappings": "AACA;AAAA,EAEE;AAAA,OAGK;AACP,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EAMA;AAAA,OACK;AACP,SAAS,WAAW,iBAAoC,qBAAqB;AAC7E,SAAS,WAAW,aAAwC;AAkCrD,MAAM,cAAc,UAAuB;AAAA,EAChD,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE;AAC3C,CAAC;AAgCM,SAAS,aAAa,OAAkB,SAA6B;AAC1E,SAAO;AAAA,IACL,SAAS,MAAM;AAAA,IACf,QAAQ,UAAU,MAAM,MAAM;AAAA,IAC9B,OAAO,GAAG,QAAQ,IAAI;AAAA,IACtB,MAAM,GAAG,MAAM,KAAK;AAAA,IACpB,MAAM,GAAG,MAAM,MAAM,eAAe,QAAQ,IAAI,sBAAsB,QAAQ,EAAE;AAAA,IAChF,QAAQ;AAAA,IACR,UAAU;AAAA,IACV,SAAS,GAAG,QAAQ,EAAE,IAAI,MAAM,MAAM,IAAI,MAAM,OAAO,IAAI,MAAM,MAAM,IAAI,QAAQ,EAAE;AAAA,EACvF;AACF;AAOO,MAAM,YAAY;AAClB,MAAM,aAAa;AAEnB,SAAS,OAAO,SAAwB;AAC7C,QAAM,QAAQ,QAAQ,MAAM,MAAM,GAAG,SAAS;AAC9C,QAAM,OAAO,QAAQ,MAAM,SAAS,MAAM;AAC1C,QAAM,QAAQ;AAAA,IACZ,GAAI,QAAQ,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;AAAA,IACrC,GAAG;AAAA,IACH,GAAI,OAAO,IAAI,CAAC,cAAS,IAAI,OAAO,IAAI,CAAC;AAAA,EAC3C;AACA,QAAM,EAAE,MAAM,GAAG,GAAG,KAAK,IAAI,QAAQ;AACrC,SAAO,MAAM,SAAS,EAAE,GAAG,MAAM,MAAM,MAAM,KAAK,IAAI,EAAE,IAAI;AAC9D;AAEA,MAAM,OAAqC,EAAE,MAAM,GAAG,OAAO,EAAE;AAExD,SAAS,UACd,GACA,GAC0B;AAC1B,MAAI,CAAC,EAAG,QAAO;AACf,MAAI,CAAC,EAAG,QAAO;AACf,SAAO,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI;AACjC;AAEA,SAAS,MAAM,SAAkB,OAAkB,KAAsB;AACvE,QAAM,QAAQ,CAAC,GAAG,QAAQ,KAAK;AAC/B,aAAW,QAAQ,MAAM,SAAS,CAAC,EAAG,KAAI,CAAC,MAAM,SAAS,IAAI,EAAG,OAAM,KAAK,IAAI;AAChF,QAAM,EAAE,UAAU,GAAG,GAAG,KAAK,IAAI,QAAQ;AACzC,QAAM,WAAW,UAAU,QAAQ,KAAK,UAAU,MAAM,QAAQ;AAChE,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,GAAG;AAAA,MACH,OAAO,MAAM;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,OAAO,QAAQ,KAAK,SAAS,MAAM,SAAS;AAAA,MAC5C,IAAI,MAAM,MAAM;AAAA,MAChB,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IACjC;AAAA,IACA;AAAA,IACA,MAAM,MAAM,QAAQ,QAAQ;AAAA,EAC9B;AACF;AAEA,SAAS,MAAM,OAAkB,KAAa,QAA2C;AACvF,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,IAAI,OAAO;AAAA,MACX,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,MAAM,MAAM;AAAA,MACZ,OAAO,MAAM,SAAS;AAAA,MACtB,IAAI;AAAA,MACJ,GAAI,SAAS,EAAE,SAAS,OAAO,IAAI,CAAC;AAAA,MACpC,GAAI,MAAM,WAAW,EAAE,UAAU,MAAM,SAAS,IAAI,CAAC;AAAA,IACvD;AAAA,IACA,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;AAAA,IACrC,MAAM,MAAM,QAAQ;AAAA,EACtB;AACF;AAEA,SAAS,MAAM,OAA0B;AACvC,QAAM,OAAO,GAAG,MAAM,MAAM,IAAI,MAAM,OAAO,IAAI,MAAM,MAAM;AAC7D,SAAO,MAAM,aAAa,QAAQ,GAAG,IAAI,IAAI,MAAM,WAAW,OAAO,CAAC,KAAK;AAC7E;AAEA,eAAsB,aAAa,OAAsC;AACvE,QAAM,SAAU,CAAC,SAAS,QAAQ,QAAQ,QAAQ,EAAY;AAAA,IAC5D,CAAC,QAAQ,MAAM,GAAG,MAAM;AAAA,EAC1B;AACA,QAAM,QAAQ,MAAM,SAAS,CAAC;AAC9B,QAAM,WAAW,MAAM,WAAW,CAAC,GAAG,OAAO,IAAI,CAAC,QAAQ,MAAM,GAAG,CAAW,GAAG,GAAG,KAAK,CAAC;AAC1F,QAAM,MAAiB,EAAE,GAAG,MAAM;AAClC,SAAO,QAAQ,CAAC,KAAK,OAAO;AAC1B,QAAI,GAAG,IAAI,SAAS,EAAE;AAAA,EACxB,CAAC;AACD,MAAI,MAAM,MAAO,KAAI,QAAQ,SAAS,MAAM,OAAO,MAAM;AACzD,SAAO;AACT;AAEO,SAAS,YAAY,MAAiC;AAC3D,QAAM,WAAW,oBAAI,IAA8B;AACnD,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,CAAC,YAAmD;AAClE,UAAM,UAAU,SAAS,IAAI,OAAO;AACpC,UAAM,OAAqB,CAAC;AAC5B,QAAI,SAAS,QAAS,MAAK,KAAK,SAAS;AACzC,QAAI,SAAS,QAAS,MAAK,KAAK,SAAS;AACzC,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B;AAEA,iBAAe,SACb,SACA,IACA,SAC0C;AAC1C,QAAI,OAAO,KAAM,QAAO;AACxB,UAAM,aAAa,MAAM,QAAQ,WAAW,IAAoB,OAAO;AACvE,UAAMA,UAAS,MAAM,YAAY,OAAO,OAAO;AAC/C,QAAIA,SAAQ,WAAW,SAAU,QAAO;AACxC,WAAOA,SAAQ,WAAW,gBAAgBA,QAAO,WAAW,YAAY,cAAc;AAAA,EACxF;AAEA,iBAAe,QAAQ,KAAa,SAA8C;AAChF,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,SAAS,MAAM,QAAQ,SAAS,aAAa,OAAO,IAAI,OAAO,GAAG;AACxE,QAAI,CAAC,MAAO,QAAO;AACnB,UAAM,SAAS,MAAM,SAAS,SAAS,MAAM,YAAY,OAAO;AAChE,QAAI,WAAW,SAAU,QAAO;AAChC,QAAI,MAAM,WAAW,WAAW,OAAQ,QAAO;AAC/C,UAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,YAAM,MAAM,MAAM,GAAG,IAAI,WAAW;AACpC,UAAI,IAAI,OAAO,GAAG,GAAG,eAAe,MAAM,WAAY,QAAO,IAAI,OAAO,GAAG;AAAA,IAC7E,GAAG,OAAO;AACV,WAAO;AAAA,EACT;AAEA,iBAAe,SAAS,KAAa,SAAiC;AACpE,UAAM,EAAE,SAAS,QAAQ,IAAI,MAAM;AACnC,UAAM,QAAQ,MAAM,QAAQ,KAAK,OAAO;AACxC,QAAI,CAAC,OAAO,QAAS;AACrB,UAAM,OAAO,OAAO,MAAM,OAAO;AACjC,UAAM,SAAS,IAAI,MAAM,GAAG,EAAE,CAAC;AAC/B,UAAM,eAAe,MAAM,QAAQ,QAAQ,MAAM,QAAQ,KAAK,SAAS,OAAO;AAC9E,UAAM,aAAa,MAAM,aAAa;AAAA,MACpC;AAAA,QACE,MAAM;AAAA,QACN,SAAS,WAAW,IAAI;AAAA,QACxB,UAAU;AAAA,QACV,WAAW,QAAQ,KAAK,EAAE;AAAA,MAC5B;AAAA,MACA;AAAA,IACF;AACA,UAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,YAAM,MAAM,MAAM,GAAG,IAAI,WAAW;AACpC,UAAI,OAAO,GAAG,IAAI,EAAE,YAAY,WAAW,IAAI,SAAS,KAAK;AAAA,IAC/D,GAAG,OAAO;AAAA,EACZ;AAEA,iBAAe,SAAS,SAAiC;AACvD,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,OAAO,OAAO,MAAM,MAAM,QAAQ,SAAS,aAAa,OAAO,IAAI,UAAU,CAAC,CAAC;AACrF,eAAW,OAAO,KAAM,OAAM,SAAS,KAAK,OAAO;AAAA,EACrD;AAEA,iBAAe,KACb,cACA,IACA,SACgC;AAChC,UAAM,EAAE,QAAQ,IAAI,MAAM,aAAa,QAAQ,OAAO;AACtD,UAAM,OAAO,QAAQ,IAAI,SAAS,EAAE,KAAK,CAAC,cAAc,WAAW,OAAO,EAAE;AAC5E,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,EAAE,MAAM,UAAU,cAAc,OAAO,EAAE,IAAI,EAAE,EAAE;AAAA,EAC1D;AAEA,iBAAe,OAAO,OAAkB,SAAgD;AACtF,QAAI,CAAC,SAAS,CAAC,MAAM,OAAQ,QAAO;AACpC,WAAO,MAAM,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EACpD;AAEA,iBAAe,WAAW,OAAkB,SAAoC;AAC9E,QAAI,MAAM,YAAY,OAAW,QAAO;AACxC,UAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,UAAM,UAAU,MAAM,QAAQ,SAAS,aAAa,OAAO,IAAI,UAAU,CAAC;AAC1E,YAAQ,OAAO,GAAG,MAAM,OAAO,IAAI,MAAM,MAAM,EAAE,KAAK,CAAC,GAAG,SAAS,MAAM,OAAO;AAAA,EAClF;AAEA,iBAAe,OAAO,OAAkB,SAAkB,KAAa,SAAkB;AACvF,UAAM,eAAe,OAAO,MAAM,MAAM,QAAQ,MAAM,QAAQ,MAAM,SAAS,OAAO;AACpF,UAAM,aAAa,OAAO,UAAU,OAAO,SAAS,GAAG,GAAG,OAAO;AAAA,EACnE;AAEA,MAAI;AACJ,MAAI;AACJ,SAAO;AAAA,IACL,MAAM,MAAM;AACV,cAAQ;AAAA,IACV;AAAA,IACA,OAAO,MAAM;AACX,cAAQ;AAAA,IACV;AAAA,IACA,MAAM,QAAQ,KAAK,SAAS;AAC1B,YAAM,WAAW,MAAM,aAAa,GAAG;AACvC,YAAM,UAAU,QAAQ,SAAS,MAAM;AACvC,YAAM,QAAQ,UAAU,aAAa,UAAU,OAAO,IAAI;AAC1D,UAAI,SAAS,MAAM,UAAW,MAAM,WAAW,OAAO,OAAO,EAAI;AACjE,YAAM,UAAU,MAAM,OAAO,OAAO,OAAO;AAC3C,YAAM,UAAU,MAAM,OAAO;AAC7B,aAAO,OAAO,YAAY;AACxB,cAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,cAAM,MAAM,MAAM,KAAK;AACvB,cAAM,QAAQ,KAAK,OAAO;AAC1B,cAAM,SAAS,GAAG,MAAM,OAAO,IAAI,MAAM,MAAM;AAC/C,cAAM,MAAM,MAAM,MAAM,KAAK,IAAI;AACjC,YAAI,SAAS;AACX,cAAI,MAAM,WAAW,OAAO,OAAO,EAAG;AACtC,gBAAM,OAAO,OAAO,SAAS,KAAK,OAAO;AAAA,QAC3C;AACA,cAAM,WAAW,MAAM,QAAQ,OAAO,OAAO,OAAO;AAClD,gBAAM,MAAM,MAAM,GAAG,IAAI,WAAW;AACpC,gBAAM,OAAO,IAAI,OAAO,MAAM,KAAK,CAAC;AACpC,cAAI,MAAM,YAAY,QAAW;AAC/B,gBAAI,KAAK,SAAS,MAAM,OAAO,EAAG,QAAO;AACzC,gBAAI,OAAO,MAAM,IAAI,CAAC,GAAG,MAAM,MAAM,OAAO,EAAE,MAAM,CAAC,UAAU;AAAA,UACjE;AACA,cAAI,QAAS,QAAO;AACpB,gBAAM,QAAQ,IAAI,OAAO,GAAG,KAAK,EAAE,YAAY,MAAM,SAAS,KAAK;AACnE,gBAAM,UAAU,MAAM,UAClB,MAAM,MAAM,SAAS,OAAO,GAAG,IAC/B,MAAM,OAAO,KAAK,QAAQ,MAAM,OAAO,CAAC;AAC5C,cAAI,OAAO,GAAG,IAAI;AAClB,iBAAO;AAAA,QACT,GAAG,OAAO;AACV,YAAI,SAAU,OAAM,SAAS,KAAK,OAAO;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,IACA,OAAO,CAAC,YAAY,OAAO,MAAM,SAAS,OAAO,CAAC;AAAA,IAClD;AAAA,IACA,MAAM,OAAO,cAAc,IAAI,QAAQ,QAAQ,SAAS;AACtD,YAAM,QAAQ,MAAM,KAAK,cAAc,IAAI,OAAO;AAClD,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,oBAAoB,EAAE,wBAAwB;AAC1E,UAAI,MAAM,SAAU,OAAM,IAAI,MAAM,QAAQ,EAAE,eAAe,MAAM,QAAQ,GAAG;AAC9E,UAAI,CAAC,MAAM,KAAK,SAAS,SAAS,MAAM;AACtC,cAAM,IAAI,MAAM,QAAQ,EAAE,KAAK,MAAM,KAAK,OAAO,YAAY,MAAM,UAAU;AAC/E,YAAM,MAAM,SAAS,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM;AACrD,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,QAAQ,EAAE,KAAK,MAAM,KAAK,OAAO,YAAY,MAAM,UAAU;AACvF,aAAQ,MAAM,IAAI,MAAM,MAAM,QAAQ,OAAO,KAAM,QAAQ,EAAE,IAAI,MAAM;AAAA,IACzE;AAAA,IACA,OAAO,SAAS,SAAS;AACvB,eAAS,IAAI,SAAS,OAAO;AAAA,IAC/B;AAAA,IACA,OAAO,QAAQ,SAAS,QAAQ,SAAS;AACvC,aAAO,OAAO,YAAY;AACxB,cAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,cAAM,MAAM,GAAG,MAAM,IAAI,OAAO,IAAI,MAAM;AAC1C,cAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,gBAAM,MAAM,MAAM,GAAG,IAAI,WAAW;AACpC,gBAAM,QAAQ,IAAI,OAAO,GAAG;AAC5B,cAAI,OAAO,QAAS,OAAM,UAAU;AAAA,QACtC,GAAG,OAAO;AAAA,MACZ,CAAC;AAAA,IACH;AAAA,IACA,MAAM,QAAQ,SAAS;AACrB,YAAM,EAAE,QAAQ,IAAI,MAAM;AAC1B,YAAM,UAAU,MAAM,QAAQ,SAAS,aAAa,OAAO,IAAI,UAAU,CAAC;AAC1E,aAAO,OAAO,OAAO,MAAM,EAAE,OAAO,CAAC,UAAU,MAAM,eAAe,QAAQ,MAAM,OAAO,EACtF;AAAA,IACL;AAAA,EACF;AACF;",
   "names": ["record"]
 }

package/dist/main.js

@@ -34,6 +34,10 @@ import { sliccPrompt } from "./prompt.js";
 import { createPages } from "./remote/pages.js";
 import { identity } from "./scoops/identity.js";
 import { packageAssets, setupScoops } from "./scoops/index.js";
+import { repin, secretsExtension, shellGrants } from "./secrets/extension.js";
+import { secretNames } from "./secrets/names.js";
+import { scrubWith } from "./secrets/scrub.js";
+import { listenVault, Vault } from "./secrets/vault.js";
 import {
   createAgentSettings,
   createSliccModels,
@@ -82,10 +86,25 @@ async function codemodeTools(client, options, native, extra) {
   ];
 }
 const MCP_CALLBACK = "/oauth/mcp-callback";
-async function start(scope, ports, options) {
+async function openRepinned(options, base) {
+  const storage = await (options.storage ?? (() => openOpfsSqliteStorage()))();
+  return openAgent({
+    ...base,
+    storage,
+    beforeResume: (harness, using) => repin(harness, storage, using)
+  });
+}
+async function secretsFor(home, vault) {
+  scrubWith(vault);
+  const names = secretNames(home, vault);
+  await names.refresh(BACKGROUND_CONTEXT);
+  return names;
+}
+async function start(scope, ports, options, vault) {
   const { client, users } = await attached(ports, options);
   const home = new SliccKernelEnv(client, { cwd: HOME });
   await privateStore(home);
+  const names = await secretsFor(home, vault);
   const native = scope.fetch.bind(scope);
   scope.fetch = transportFetch(client.transport, scope.location.origin, native);
   const facts = {
@@ -117,6 +136,7 @@ async function start(scope, ports, options) {
   licks.licks.triage(lickTriage(models));
   const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);
   const skills = setupSkills(registry, licks.licks);
+  registry.install(secretsExtension({ names, vault }));
   const activity = createActivity();
   const groups = processGroups(client);
   const model = options.model ?? DEFAULT_MODEL;
@@ -124,15 +144,11 @@ async function start(scope, ports, options) {
   const environment = kernelEnvironment(client, {
     activity,
     groups,
-    identify: identity(() => opened?.agents, model)
-  });
-  const agent = await openAgent({
-    models,
-    model,
-    storage: await (options.storage ?? (() => openOpfsSqliteStorage()))(),
-    registry,
-    env: environment
+    identify: identity(() => opened?.agents, model),
+    scrub: vault,
+    spawn: shellGrants(names)
   });
+  const agent = await openRepinned(options, { models, model, registry, env: environment });
   opened = agent;
   const sources = licks.attach(agent, { env: home, home: HOME, activity });
   await sources.start(BACKGROUND_CONTEXT);
@@ -240,6 +256,7 @@ async function start(scope, ports, options) {
     pages,
     mcp: mcpRuntime,
     ...users ? { users } : {},
+    secrets: { vault: vault.state, list: () => names.state.value, close: names.close },
     monitor: {
       kernel: client,
       groups,
@@ -255,7 +272,9 @@ function alive(client) {
   };
 }
 function runAgentWorker(scope, options = {}) {
-  const host = start(scope, kernelPorts(scope), options);
+  const vault = new Vault();
+  listenVault(scope, vault);
+  const host = start(scope, kernelPorts(scope), options, vault);
   host.catch(() => void 0);
   serveConnections(scope, host);
   return host;