@ai-ecoverse/slicc-agent 3.48.1 → 3.50.0

package/dist/sprinkles/sprinkles.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/sprinkles/sprinkles.ts"],
-  "sourcesContent": ["import type { Context, JsonValue } from '@earendil-works/chord';\nimport { defineDoc } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv } from '@earendil-works/pi-durable/env';\nimport { normalize } from '../kernel/paths.ts';\n\nexport { SPRINKLE_KIND, type Sprinkle } from './kind.ts';\n\nexport const SPRINKLES_DIR = '/home/sprinkles';\nexport const WELCOME = 'welcome';\nexport const SUGGESTIONS = 'suggestions';\nexport const SUGGESTIONS_DIR = '/home/.gelatiere';\nexport const SUGGESTIONS_STORE = `${SUGGESTIONS_DIR}/suggestions.json`;\nexport const WELCOMED = '/home/.welcomed';\nexport const WELCOME_PROFILE = '/home/.welcome.json';\nexport const DEFAULT_ICON = 'sparkles';\n\nexport type SprinkleMethod = 'readFile' | 'exists' | 'getState' | 'setState';\n\nexport const SprinklesDoc = defineDoc<{\n  owners: Record<string, string>;\n  state: Record<string, JsonValue>;\n  welcomed: boolean;\n}>({\n  kind: 'slicc.sprinkles',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ owners: {}, state: {}, welcomed: false }),\n});\n\nfunction decode(text: string): string {\n  return text\n    .replace(/&lt;/g, '<')\n    .replace(/&gt;/g, '>')\n    .replace(/&quot;/g, '\"')\n    .replace(/&#39;/g, \"'\")\n    .replace(/&amp;/g, '&');\n}\n\nexport function describe(name: string, html: string): { title: string; icon: string } {\n  const title = /<title>([\\s\\S]*?)<\\/title>/i.exec(html)?.[1]?.trim();\n  const icon =\n    /<link\\b[^>]*\\brel=[\"']icon[\"'][^>]*\\bhref=[\"']([^\"']+)[\"']/i.exec(html)?.[1] ??\n    /<link\\b[^>]*\\bhref=[\"']([^\"']+)[\"'][^>]*\\brel=[\"']icon[\"']/i.exec(html)?.[1];\n  return { title: title ? decode(title) : name, icon: icon ?? DEFAULT_ICON };\n}\n\nexport const NAME = /^[a-z0-9][a-z0-9._-]{0,63}$/;\n\nexport async function sprinkleFiles(\n  env: Pick<ExecutionEnv, 'listDir'>,\n  dir: string,\n  context: Context\n): Promise<{ name: string; path: string }[]> {\n  const listed = await env.listDir(dir, context);\n  if (!listed.ok) return [];\n  const out = new Map<string, string>();\n  for (const entry of [...listed.value].sort((a, b) => a.name.localeCompare(b.name))) {\n    if (entry.kind !== 'directory' && entry.name.endsWith('.shtml')) {\n      const name = entry.name.slice(0, -'.shtml'.length);\n      if (NAME.test(name)) out.set(name, `${dir}/${entry.name}`);\n    }\n    if (entry.kind === 'directory' && NAME.test(entry.name) && !out.has(entry.name)) {\n      const inner = await env.listDir(`${dir}/${entry.name}`, context);\n      if (inner.ok && inner.value.some((item) => item.name === `${entry.name}.shtml`))\n        out.set(entry.name, `${dir}/${entry.name}/${entry.name}.shtml`);\n    }\n  }\n  return [...out].map(([name, path]) => ({ name, path }));\n}\n\nexport function homePath(path: unknown): string {\n  if (typeof path !== 'string' || !path) throw new Error('a sprinkle reads files by absolute path');\n  const mapped = path.startsWith('/shared/') ? `/home/${path.slice('/shared/'.length)}` : path;\n  const segments = mapped.split('/');\n  if (segments.includes('.') || segments.includes('..'))\n    throw new Error(`a sprinkle reads paths without . or .. segments, not ${path}`);\n  const resolved = normalize(mapped);\n  if (resolved !== '/home' && !resolved.startsWith('/home/'))\n    throw new Error(`a sprinkle can only read files in /home, not ${path}`);\n  return resolved;\n}\n\nexport const NO_EXEC =\n  \"sprinkles can't run commands in SLICC; send the agent a message with slicc.lick() and let it run them\";\n"],
-  "mappings": "AACA,SAAS,iBAAiB;AAE1B,SAAS,iBAAiB;AAE1B,SAAS,qBAAoC;AAEtC,MAAM,gBAAgB;AACtB,MAAM,UAAU;AAChB,MAAM,cAAc;AACpB,MAAM,kBAAkB;AACxB,MAAM,oBAAoB,GAAG,eAAe;AAC5C,MAAM,WAAW;AACjB,MAAM,kBAAkB;AACxB,MAAM,eAAe;AAIrB,MAAM,eAAe,UAIzB;AAAA,EACD,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,UAAU,MAAM;AAC3D,CAAC;AAED,SAAS,OAAO,MAAsB;AACpC,SAAO,KACJ,QAAQ,SAAS,GAAG,EACpB,QAAQ,SAAS,GAAG,EACpB,QAAQ,WAAW,GAAG,EACtB,QAAQ,UAAU,GAAG,EACrB,QAAQ,UAAU,GAAG;AAC1B;AAEO,SAAS,SAAS,MAAc,MAA+C;AACpF,QAAM,QAAQ,8BAA8B,KAAK,IAAI,IAAI,CAAC,GAAG,KAAK;AAClE,QAAM,OACJ,8DAA8D,KAAK,IAAI,IAAI,CAAC,KAC5E,8DAA8D,KAAK,IAAI,IAAI,CAAC;AAC9E,SAAO,EAAE,OAAO,QAAQ,OAAO,KAAK,IAAI,MAAM,MAAM,QAAQ,aAAa;AAC3E;AAEO,MAAM,OAAO;AAEpB,eAAsB,cACpB,KACA,KACA,SAC2C;AAC3C,QAAM,SAAS,MAAM,IAAI,QAAQ,KAAK,OAAO;AAC7C,MAAI,CAAC,OAAO,GAAI,QAAO,CAAC;AACxB,QAAM,MAAM,oBAAI,IAAoB;AACpC,aAAW,SAAS,CAAC,GAAG,OAAO,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC,GAAG;AAClF,QAAI,MAAM,SAAS,eAAe,MAAM,KAAK,SAAS,QAAQ,GAAG;AAC/D,YAAM,OAAO,MAAM,KAAK,MAAM,GAAG,CAAC,SAAS,MAAM;AACjD,UAAI,KAAK,KAAK,IAAI,EAAG,KAAI,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,EAAE;AAAA,IAC3D;AACA,QAAI,MAAM,SAAS,eAAe,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,IAAI,GAAG;AAC/E,YAAM,QAAQ,MAAM,IAAI,QAAQ,GAAG,GAAG,IAAI,MAAM,IAAI,IAAI,OAAO;AAC/D,UAAI,MAAM,MAAM,MAAM,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG,MAAM,IAAI,QAAQ;AAC5E,YAAI,IAAI,MAAM,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,IAAI,MAAM,IAAI,QAAQ;AAAA,IAClE;AAAA,EACF;AACA,SAAO,CAAC,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,EAAE,MAAM,KAAK,EAAE;AACxD;AAEO,SAAS,SAAS,MAAuB;AAC9C,MAAI,OAAO,SAAS,YAAY,CAAC,KAAM,OAAM,IAAI,MAAM,yCAAyC;AAChG,QAAM,SAAS,KAAK,WAAW,UAAU,IAAI,SAAS,KAAK,MAAM,WAAW,MAAM,CAAC,KAAK;AACxF,QAAM,WAAW,OAAO,MAAM,GAAG;AACjC,MAAI,SAAS,SAAS,GAAG,KAAK,SAAS,SAAS,IAAI;AAClD,UAAM,IAAI,MAAM,wDAAwD,IAAI,EAAE;AAChF,QAAM,WAAW,UAAU,MAAM;AACjC,MAAI,aAAa,WAAW,CAAC,SAAS,WAAW,QAAQ;AACvD,UAAM,IAAI,MAAM,gDAAgD,IAAI,EAAE;AACxE,SAAO;AACT;AAEO,MAAM,UACX;",
+  "sourcesContent": ["import type { Context, JsonValue } from '@earendil-works/chord';\nimport { defineDoc } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv } from '@earendil-works/pi-durable/env';\nimport { normalize } from '../kernel/paths.ts';\n\nexport { SPRINKLE_KIND, type Sprinkle } from './kind.ts';\n\nexport const SPRINKLES_DIR = '/home/sprinkles';\nexport const WELCOME = 'welcome';\nexport const SUGGESTIONS = 'suggestions';\nexport const SUGGESTIONS_DIR = '/home/.gelatiere';\nexport const SUGGESTIONS_STORE = `${SUGGESTIONS_DIR}/suggestions.json`;\nexport const WELCOMED = '/home/.welcomed';\nexport const WELCOME_PROFILE = '/home/.welcome.json';\nexport const DEFAULT_ICON = 'sparkles';\n\nexport type SprinkleMethod = 'readFile' | 'exists' | 'getState' | 'setState';\n\nexport const SprinklesDoc = defineDoc<{\n  owners: Record<string, string>;\n  state: Record<string, JsonValue>;\n  welcomed: boolean;\n}>({\n  kind: 'slicc.sprinkles',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ owners: {}, state: {}, welcomed: false }),\n});\n\nfunction decode(text: string): string {\n  return text\n    .replace(/&lt;/g, '<')\n    .replace(/&gt;/g, '>')\n    .replace(/&quot;/g, '\"')\n    .replace(/&#39;/g, \"'\")\n    .replace(/&amp;/g, '&');\n}\n\nexport function describe(name: string, html: string): { title: string; icon: string } {\n  const title = /<title>([\\s\\S]*?)<\\/title>/i.exec(html)?.[1]?.trim();\n  const icon =\n    /<link\\b[^>]*\\brel=[\"']icon[\"'][^>]*\\bhref=[\"']([^\"']+)[\"']/i.exec(html)?.[1] ??\n    /<link\\b[^>]*\\bhref=[\"']([^\"']+)[\"'][^>]*\\brel=[\"']icon[\"']/i.exec(html)?.[1];\n  return { title: title ? decode(title) : name, icon: icon ?? DEFAULT_ICON };\n}\n\nexport const NAME = /^[a-z0-9][a-z0-9._-]{0,63}$/;\n\nexport async function sprinkleFiles(\n  env: Pick<ExecutionEnv, 'listDir'>,\n  dir: string,\n  context: Context\n): Promise<{ name: string; path: string }[]> {\n  const listed = await env.listDir(dir, context);\n  if (!listed.ok) return [];\n  const out = new Map<string, string>();\n  for (const entry of [...listed.value].sort((a, b) => a.name.localeCompare(b.name))) {\n    if (entry.kind !== 'directory' && entry.name.endsWith('.shtml')) {\n      const name = entry.name.slice(0, -'.shtml'.length);\n      if (NAME.test(name)) out.set(name, `${dir}/${entry.name}`);\n    }\n    if (entry.kind === 'directory' && NAME.test(entry.name) && !out.has(entry.name)) {\n      const inner = await env.listDir(`${dir}/${entry.name}`, context);\n      if (inner.ok && inner.value.some((item) => item.name === `${entry.name}.shtml`))\n        out.set(entry.name, `${dir}/${entry.name}/${entry.name}.shtml`);\n    }\n  }\n  return [...out].map(([name, path]) => ({ name, path }));\n}\n\nexport function homePath(path: unknown, shared = '/home', root = '/home'): string {\n  if (typeof path !== 'string' || !path) throw new Error('a sprinkle reads files by absolute path');\n  const mapped = path.startsWith('/shared/') ? `${shared}/${path.slice('/shared/'.length)}` : path;\n  const segments = mapped.split('/');\n  if (segments.includes('.') || segments.includes('..'))\n    throw new Error(`a sprinkle reads paths without . or .. segments, not ${path}`);\n  const resolved = normalize(mapped);\n  if (resolved !== root && !resolved.startsWith(`${root}/`))\n    throw new Error(`a sprinkle can only read files in ${root}, not ${path}`);\n  return resolved;\n}\n\nexport function sharedPaths(shared: string) {\n  return {\n    suggestionsDir: `${shared}/.gelatiere`,\n    suggestions: `${shared}/.gelatiere/suggestions.json`,\n    welcomed: `${shared}/.welcomed`,\n    profile: `${shared}/.welcome.json`,\n  };\n}\n\nexport const NO_EXEC =\n  \"sprinkles can't run commands in SLICC; send the agent a message with slicc.lick() and let it run them\";\n"],
+  "mappings": "AACA,SAAS,iBAAiB;AAE1B,SAAS,iBAAiB;AAE1B,SAAS,qBAAoC;AAEtC,MAAM,gBAAgB;AACtB,MAAM,UAAU;AAChB,MAAM,cAAc;AACpB,MAAM,kBAAkB;AACxB,MAAM,oBAAoB,GAAG,eAAe;AAC5C,MAAM,WAAW;AACjB,MAAM,kBAAkB;AACxB,MAAM,eAAe;AAIrB,MAAM,eAAe,UAIzB;AAAA,EACD,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,GAAG,UAAU,MAAM;AAC3D,CAAC;AAED,SAAS,OAAO,MAAsB;AACpC,SAAO,KACJ,QAAQ,SAAS,GAAG,EACpB,QAAQ,SAAS,GAAG,EACpB,QAAQ,WAAW,GAAG,EACtB,QAAQ,UAAU,GAAG,EACrB,QAAQ,UAAU,GAAG;AAC1B;AAEO,SAAS,SAAS,MAAc,MAA+C;AACpF,QAAM,QAAQ,8BAA8B,KAAK,IAAI,IAAI,CAAC,GAAG,KAAK;AAClE,QAAM,OACJ,8DAA8D,KAAK,IAAI,IAAI,CAAC,KAC5E,8DAA8D,KAAK,IAAI,IAAI,CAAC;AAC9E,SAAO,EAAE,OAAO,QAAQ,OAAO,KAAK,IAAI,MAAM,MAAM,QAAQ,aAAa;AAC3E;AAEO,MAAM,OAAO;AAEpB,eAAsB,cACpB,KACA,KACA,SAC2C;AAC3C,QAAM,SAAS,MAAM,IAAI,QAAQ,KAAK,OAAO;AAC7C,MAAI,CAAC,OAAO,GAAI,QAAO,CAAC;AACxB,QAAM,MAAM,oBAAI,IAAoB;AACpC,aAAW,SAAS,CAAC,GAAG,OAAO,KAAK,EAAE,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC,GAAG;AAClF,QAAI,MAAM,SAAS,eAAe,MAAM,KAAK,SAAS,QAAQ,GAAG;AAC/D,YAAM,OAAO,MAAM,KAAK,MAAM,GAAG,CAAC,SAAS,MAAM;AACjD,UAAI,KAAK,KAAK,IAAI,EAAG,KAAI,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,EAAE;AAAA,IAC3D;AACA,QAAI,MAAM,SAAS,eAAe,KAAK,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,MAAM,IAAI,GAAG;AAC/E,YAAM,QAAQ,MAAM,IAAI,QAAQ,GAAG,GAAG,IAAI,MAAM,IAAI,IAAI,OAAO;AAC/D,UAAI,MAAM,MAAM,MAAM,MAAM,KAAK,CAAC,SAAS,KAAK,SAAS,GAAG,MAAM,IAAI,QAAQ;AAC5E,YAAI,IAAI,MAAM,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,IAAI,MAAM,IAAI,QAAQ;AAAA,IAClE;AAAA,EACF;AACA,SAAO,CAAC,GAAG,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,EAAE,MAAM,KAAK,EAAE;AACxD;AAEO,SAAS,SAAS,MAAe,SAAS,SAAS,OAAO,SAAiB;AAChF,MAAI,OAAO,SAAS,YAAY,CAAC,KAAM,OAAM,IAAI,MAAM,yCAAyC;AAChG,QAAM,SAAS,KAAK,WAAW,UAAU,IAAI,GAAG,MAAM,IAAI,KAAK,MAAM,WAAW,MAAM,CAAC,KAAK;AAC5F,QAAM,WAAW,OAAO,MAAM,GAAG;AACjC,MAAI,SAAS,SAAS,GAAG,KAAK,SAAS,SAAS,IAAI;AAClD,UAAM,IAAI,MAAM,wDAAwD,IAAI,EAAE;AAChF,QAAM,WAAW,UAAU,MAAM;AACjC,MAAI,aAAa,QAAQ,CAAC,SAAS,WAAW,GAAG,IAAI,GAAG;AACtD,UAAM,IAAI,MAAM,qCAAqC,IAAI,SAAS,IAAI,EAAE;AAC1E,SAAO;AACT;AAEO,SAAS,YAAY,QAAgB;AAC1C,SAAO;AAAA,IACL,gBAAgB,GAAG,MAAM;AAAA,IACzB,aAAa,GAAG,MAAM;AAAA,IACtB,UAAU,GAAG,MAAM;AAAA,IACnB,SAAS,GAAG,MAAM;AAAA,EACpB;AACF;AAEO,MAAM,UACX;",
   "names": []
 }

package/dist/types/freezer/index.d.ts

@@ -2,6 +2,7 @@ import { type Context, type ReplicatedState } from '@earendil-works/chord';
 import type { EntryRecord, Harness } from '@earendil-works/pi-durable';
 import type { ExecutionEnv } from '@earendil-works/pi-durable/env';
 import { type Agents, type AgentsState, type FrozenRecord } from '../agents.ts';
+import { type Layout } from '../layout.ts';
 import type { LickTarget } from '../licks/lick.ts';
 export type Answer = {
     code: number;
@@ -32,6 +33,7 @@ export interface FreezerAttach {
     title?: (transcript: string, model: string, context: Context) => Promise<string | undefined>;
     extract?: (conversation: number, tail: number, context: Context, cone: string) => Promise<unknown>;
     now?: () => number;
+    layout?: Layout;
 }
 export interface FreezerRuntime {
     readonly frozen: ReplicatedState<FrozenCone[]>;
@@ -53,6 +55,6 @@ export declare function modelName(model: {
 } | undefined): string;
 export declare function firstLine(entries: readonly EntryRecord[]): string;
 export declare function markdown(record: Pick<FrozenRecord, 'title' | 'name' | 'model' | 'frozenAt'>, entries: readonly EntryRecord[]): string;
-export declare function thawedNote(kind: ConversationKind, name: string, folder: string, kept: boolean): string;
+export declare function thawedNote(kind: ConversationKind, name: string, folder: string, kept: boolean, home?: string): string;
 export declare function frozenTarget(state: Readonly<AgentsState>, target: LickTarget): Frozen | undefined;
 export declare function attachFreezer(options: FreezerAttach): FreezerRuntime;

package/dist/types/freezer/title.d.ts

@@ -2,5 +2,5 @@ import type { Context } from '@earendil-works/chord';
 import type { Models } from '@earendil-works/pi-ai/models';
 import type { ExecutionEnv } from '@earendil-works/pi-durable/env';
 export declare const TITLE_PROMPT = "Give this chat a title of three to six words that says what it was about. Answer with the title only, without quotes.";
-export declare function settingsText(env: Pick<ExecutionEnv, 'readTextFile'>, home: string): (context: Context) => Promise<string | undefined>;
+export declare function settingsText(env: Pick<ExecutionEnv, 'readTextFile'>, home: string, dir?: string): (context: Context) => Promise<string | undefined>;
 export declare function titler(models: Models, settings: (context: Context) => Promise<string | undefined>): (transcript: string, model: string, context: Context) => Promise<string | undefined>;

package/dist/types/gelatiere/index.d.ts

@@ -27,6 +27,14 @@ export interface GelatiereAttach {
     skills?: () => readonly {
         name: string;
     }[];
+    files?: ExecutionEnv;
+    profile?: string;
+    shared?: string;
+    as?: (caller: string | null, context: Context) => Promise<Caller | undefined>;
+}
+export interface Caller {
+    env: ExecutionEnv;
+    home: string;
 }
 export interface GelatiereRuntime {
     command(argv: readonly string[], caller: string | null, context: Context): Promise<Answer>;

package/dist/types/gelatiere/store.d.ts

@@ -33,5 +33,6 @@ export declare function fold(store: readonly Suggestion[], candidates: unknown,
     rejected: string[];
 };
 export declare function open(store: readonly Suggestion[]): Suggestion[];
-export declare function readStore(env: Pick<ExecutionEnv, 'readTextFile'>, context: Context): Promise<Suggestion[] | null>;
-export declare function writeStore(env: Pick<ExecutionEnv, 'writeFile' | 'createDir'>, store: readonly Suggestion[], context: Context): Promise<void>;
+export declare function storeOf(shared: string): string;
+export declare function readStore(env: Pick<ExecutionEnv, 'readTextFile'>, context: Context, file?: string): Promise<Suggestion[] | null>;
+export declare function writeStore(env: Pick<ExecutionEnv, 'writeFile' | 'createDir'>, store: readonly Suggestion[], context: Context, file?: string): Promise<void>;

package/dist/types/index.d.ts

@@ -7,7 +7,7 @@ export { CREDENTIALS_DATABASE, EncryptedCredentialStore } from './credentials.ts
 export { type AgentHost, type ConnectOptions, hostAgent } from './host.ts';
 export type { KernelClient, KernelFs, KernelProcess, KernelStat, SpawnOptions, } from './kernel/client.ts';
 export { HOME, type KernelEnvOptions, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';
-export { adminOver, type KernelAdmin, type KernelUser, type KernelUsers, serveAdmin, type UserClient, type UserClients, type UserConnect, type UserSpec, userClients, } from './kernel/users.ts';
+export { adminOver, type KernelAdmin, type KernelGroup, type KernelGroups, type KernelUser, type KernelUsers, serveAdmin, type UserClient, type UserClients, type UserConnect, type UserSpec, userClients, } from './kernel/users.ts';
 export { PortListener } from './listener.ts';
 export { type AgentWorkerOptions, type AgentWorkerScope, type KernelAttach, runAgentWorker, } from './main.ts';
 export { type Loopback, type Transport, type TransportResponse, transportFetch, } from './net.ts';

package/dist/types/kernel/accounts.d.ts

@@ -0,0 +1,29 @@
+import type { Agents, AgentsState } from '../agents.ts';
+import type { KernelClient } from './client.ts';
+import type { KernelGroups, UserClients, UserSpec } from './users.ts';
+export type UsersMode = 'off' | 'report' | 'enforce';
+export declare const SCOOP_UMASK = 23;
+export declare const CONE_UMASK = 63;
+export declare const CONE_HOME_MODE = 456;
+export declare const SCOOP_HOME_MODE = 1512;
+export declare const SUDO_GROUP = "sudo";
+export declare const CONE_PREFIX = "cone:";
+export declare const SCOOP_USER = "scoop-";
+export declare function scoopUser(folder: string): string;
+export declare function homeOf(user: string): string;
+export declare function userOf(state: Readonly<AgentsState>, agentId: string): string | undefined;
+export type Wanted = {
+    agentId: string;
+    cone: string | null;
+    spec: UserSpec;
+};
+export declare function wanted(state: Readonly<AgentsState>): Wanted[];
+export interface Accounts {
+    readonly mode: UsersMode;
+    agentOf(conversation: number | undefined): string | undefined;
+    home(agentId: string): string | undefined;
+    client(agentId: string): Promise<KernelClient>;
+    reconcile(): Promise<void>;
+    boot(): Promise<void>;
+}
+export declare function createAccounts(pool: UserClients, agents: () => Agents | undefined, mode?: UsersMode, groups?: KernelGroups, warn?: (message: string) => void): Accounts;

package/dist/types/kernel/agent-users.d.ts

@@ -0,0 +1,37 @@
+import type { Context } from '@earendil-works/chord';
+import type { Agents, AgentsState } from '../agents.ts';
+import type { GelatiereAttach } from '../gelatiere/index.ts';
+import { type Layout } from '../layout.ts';
+import type { LickDir } from '../licks/sources.ts';
+import type { Spools } from '../scoops/index.ts';
+import type { SkillPeople } from '../skills/index.ts';
+import type { SprinklePlace, SprinklesAttach } from '../sprinkles/index.ts';
+import { type Accounts, type UsersMode } from './accounts.ts';
+import type { KernelClient } from './client.ts';
+import { type EnvRoute, type EnvTargetLike, SliccKernelEnv } from './env.ts';
+import type { UserClients } from './users.ts';
+export interface AgentUsers {
+    readonly accounts: Accounts;
+    readonly layout: Layout;
+    readonly spools: Spools;
+    readonly enforced: boolean;
+    readonly people: SkillPeople;
+    follow(runtimes: readonly {
+        reload?(context: Context): Promise<void>;
+        reconcile?(context: Context): Promise<void>;
+    }[]): void;
+    lickDirs(): Promise<LickDir[]>;
+    sprinklePlaces(): SprinklePlace[];
+    sprinkles(): Partial<SprinklesAttach>;
+    envOfAgent(agentId: string): Promise<SliccKernelEnv | undefined>;
+    gelatiere(root: SliccKernelEnv): Promise<Partial<GelatiereAttach>>;
+    route(target: EnvTargetLike): Promise<EnvRoute | undefined>;
+    start(agents: Agents): Promise<void>;
+    close(): void;
+}
+export declare function modeOf(client: KernelClient): UsersMode;
+export declare function missingSupport(pool: UserClients | undefined, client: KernelClient, requested: boolean | undefined): Promise<string[]>;
+export declare function warnSupport(pool: UserClients | undefined, client: KernelClient, requested: boolean | undefined, report?: (message: string) => void): Promise<void>;
+export declare function legacyCwd(state: Readonly<AgentsState>, agentId: string, cwd: string): boolean;
+export declare function spoolScript(user: string, dir: string): string;
+export declare function agentUsers(pool: UserClients, client: KernelClient, root: SliccKernelEnv, agents: () => Agents | undefined): AgentUsers;

package/dist/types/kernel/env.d.ts

@@ -70,7 +70,13 @@ export type EnvTargetLike = {
     conversationId?: number;
     read?: unknown;
 };
+export type EnvRoute = {
+    client: KernelClient;
+    home: string;
+    cwd?: string;
+};
 export declare function kernelEnvironment(client: KernelClient, options?: Omit<KernelEnvOptions, 'cwd'> & {
     identify?: (target: EnvTargetLike, context: Context) => Promise<Record<string, string>>;
+    route?: (target: EnvTargetLike) => Promise<EnvRoute | undefined>;
 }): (target: EnvTargetLike, context?: Context) => SliccKernelEnv | Promise<SliccKernelEnv>;
 export {};

package/dist/types/kernel/users.d.ts

@@ -15,6 +15,7 @@ export interface UserSpec {
     groups?: string[];
     umask?: number;
     homeGroup?: string;
+    homeMode?: number;
 }
 export interface KernelUsers {
     add(spec: UserSpec): Promise<KernelUser>;
@@ -22,6 +23,17 @@ export interface KernelUsers {
         keepHome?: boolean;
     }): Promise<boolean>;
     list(): Promise<KernelUser[]>;
+    mode?: string;
+}
+export interface KernelGroup {
+    name: string;
+    gid: number;
+    members: string[];
+}
+export interface KernelGroups {
+    list(): Promise<KernelGroup[]>;
+    addMember(group: string, user: string): Promise<unknown>;
+    removeMember(group: string, user: string): Promise<unknown>;
 }
 export interface UserConnect {
     user?: string;
@@ -30,10 +42,12 @@ export interface UserConnect {
 export interface KernelSource {
     connect(options?: UserConnect): Promise<Transferable>;
     users?: KernelUsers;
+    groups?: KernelGroups;
 }
 export interface KernelAdmin {
     connect(options: UserConnect): Promise<MessagePort>;
     users: KernelUsers;
+    groups: KernelGroups;
     close(): void;
 }
 export declare function serveAdmin(port: PortEndpoint, source: KernelSource): void;
@@ -46,6 +60,7 @@ export type UserClient = KernelClient & {
 };
 export interface UserClients {
     readonly users: KernelUsers;
+    readonly groups: KernelGroups;
     client(agentId: string, user: string): Promise<UserClient>;
     drop(agentId: string): Promise<void>;
     close(): Promise<void>;

package/dist/types/layout.d.ts

@@ -0,0 +1,26 @@
+import type { Context } from '@earendil-works/chord';
+import type { ExecutionEnv } from '@earendil-works/pi-durable/env';
+import type { AgentsState } from './agents.ts';
+export declare const SCOOPS_ROOT = "/scoops";
+export declare const SESSIONS: {
+    tmp: string;
+    durable: string;
+};
+export declare const ROOT_USER = "root";
+export declare const AGENT_DIR = "/etc/slicc/agent";
+export declare const ROOT_HOME = "/root";
+export declare const SHARED_DIR = "/var/lib/slicc/agent/shared";
+export type Persist = 'tmp' | 'durable';
+export interface Layout {
+    readonly users: boolean;
+    scoopRoot(folder: string): string;
+    workspace(folder: string): string;
+    reports(folder: string, cone: string): string;
+    sessions(persist: Persist, user: string | null): string;
+    homeOf(user: string | null): string;
+    envFor(user: string | null, context: Context): Promise<ExecutionEnv | undefined>;
+    ownDir(path: string, user: string | null, context: Context): Promise<void>;
+}
+export declare const LEGACY: Layout;
+export declare function agentOfUser(state: Readonly<AgentsState>, user: string): string | undefined;
+export declare function usersLayout(state: () => Readonly<AgentsState>, envOf: (agentId: string, home: string) => Promise<ExecutionEnv>, root: Pick<ExecutionEnv, 'exec'>): Layout;

package/dist/types/licks/index.d.ts

@@ -5,7 +5,7 @@ import { type Agents } from '../agents.ts';
 import type { Activity } from '../kernel/activity.ts';
 import type { LickChannel, LickTarget } from './lick.ts';
 import { type Licks } from './licks.ts';
-import { type LickSources } from './sources.ts';
+import { type LickDir, type LickSources } from './sources.ts';
 export interface LicksAgent {
     harness: Harness;
     root: Conversation;
@@ -21,6 +21,7 @@ export interface LicksSetup {
         now?: () => number;
         flushEvery?: number;
         activity?: Activity;
+        dirs?: () => Promise<readonly LickDir[]>;
     }): LickSources;
 }
 export declare function setupLicks(registry: Registry): LicksSetup;

package/dist/types/licks/sources.d.ts

@@ -5,6 +5,7 @@ import type { Activity } from '../kernel/activity.ts';
 import { type BootFacts } from './boot.ts';
 import { type ConfigError, type WebhookEntry } from './config.ts';
 import type { cronTask } from './extension.ts';
+import type { LickTarget } from './lick.ts';
 import type { LickEvent, Licks } from './licks.ts';
 export declare const SLICC_DIR = ".slicc";
 export interface LickSourcesOptions {
@@ -18,7 +19,16 @@ export interface LickSourcesOptions {
     now?: () => number;
     flushEvery?: number;
     activity?: Activity;
+    dirs?: () => readonly LickDir[] | Promise<readonly LickDir[]>;
 }
+export interface LickDir {
+    dir: string;
+    home: string;
+    cone: string | null;
+    env?: ExecutionEnv;
+}
+export declare function scopedTarget(target: LickTarget, cone: string | null): LickTarget;
+export declare function scopedName(name: string, cone: string | null): string;
 export interface WebhookDelivery {
     id?: string;
     headers?: Record<string, string>;
@@ -33,6 +43,6 @@ export interface LickSources {
 }
 export declare function hash(text: string): string;
 export declare function shortPath(path: string, home: string): string;
-export declare function configLick(error: ConfigError, home: string): LickEvent;
+export declare function configLick(error: ConfigError, home: string, cone?: string | null): LickEvent;
 export declare function webhookLick(name: string, entry: WebhookEntry, delivery: WebhookDelivery): LickEvent;
 export declare function createLickSources(options: LickSourcesOptions): LickSources;

package/dist/types/mcp/paths.d.ts

@@ -0,0 +1,3 @@
+export declare function configPath(home: string, dir?: string): string;
+export declare function logPath(home: string, dir?: string): string;
+export declare function shown(path: string, home: string): string;

package/dist/types/mcp/runtime.d.ts

@@ -8,12 +8,12 @@ import { McpCatalog } from './catalog.ts';
 import { type McpConfigProblem } from './config.ts';
 import { McpServerConnection } from './connection.ts';
 export declare const MCP_LOG_MAX_BYTES: number;
-export declare function configPath(home: string): string;
-export declare function logPath(home: string): string;
+export { configPath, logPath, shown } from './paths.ts';
 export interface McpAttach {
     licks: Licks;
     env: ExecutionEnv;
     home: string;
+    agentDir?: string;
     credentials: CredentialStore;
     fetch: typeof fetch;
     version: string;
@@ -35,7 +35,7 @@ export interface McpRuntime extends McpAccounts {
     reload(context: Context): Promise<void>;
     close(context: Context): Promise<void>;
 }
-export declare function problemLick(problem: McpConfigProblem, home: string): LickEvent;
+export declare function problemLick(problem: McpConfigProblem, home: string, dir?: string): LickEvent;
 export declare function stateLick(connection: McpServerConnection, cors: boolean): LickEvent | undefined;
 export declare function connectedLick(connection: McpServerConnection): LickEvent;
 export declare function logLine(server: string, params: unknown, secrets: readonly string[], at: Date): string;

package/dist/types/memory/prompt.d.ts

@@ -10,6 +10,7 @@ export type Host = {
     agents: Agents;
     env: ExecutionEnv;
     home: string;
+    agentDir?: string;
     files: MemoryFiles;
     changed: (context: Context) => Promise<void>;
 };

package/dist/types/memory/runtime.d.ts

@@ -32,6 +32,7 @@ export interface MemoryAttach {
     agents: Agents;
     env: ExecutionEnv;
     home: string;
+    agentDir?: string;
     reloadMs: number;
     idleCheckMs?: number;
     roles?: (context: Context) => Promise<{

package/dist/types/roles/roles.d.ts

@@ -54,4 +54,17 @@ export declare function loadRoles(options: LoadOptions, context: Context): Promi
 export declare function findRole(roles: readonly Role[], name: string): Role | undefined;
 export declare function manifestDirs(files: RoleFiles, root: string, context: Context): Promise<string[]>;
 export declare function agentPaths(dir: string, text: string): string[];
-export declare function packageDirs(files: RoleFiles, root: string, context: Context): Promise<string[]>;
+export declare const PACKAGE_ROOTS: string[];
+export interface PiPackage {
+    dir: string;
+    manifest: string;
+}
+export interface PiPackages {
+    packages: PiPackage[];
+    skipped: {
+        path: string;
+        message: string;
+    }[];
+}
+export declare function piPackages(files: RoleFiles, roots: readonly string[], context: Context): Promise<PiPackages>;
+export declare function packageDirs(files: RoleFiles, roots: readonly string[], context: Context): Promise<string[]>;

package/dist/types/scoops/cli.d.ts

@@ -2,6 +2,7 @@ import type { Context } from '@earendil-works/chord';
 import type { Harness } from '@earendil-works/pi-durable';
 import type { ExecutionEnv } from '@earendil-works/pi-durable/env';
 import type { Agents, AgentsState } from '../agents.ts';
+import { type Layout } from '../layout.ts';
 import { type Roles } from '../roles/roles.ts';
 import type { Request, Runner } from './requests.ts';
 import { type Answer, type Scoops } from './service.ts';
@@ -23,6 +24,7 @@ export interface CliOptions {
     gelatiere?: (argv: readonly string[], caller: string | null, context: Context) => Promise<Answer>;
     freezer?: (argv: readonly string[], caller: string | null, context: Context) => Promise<Answer>;
     models?: (argv: readonly string[], caller: string | null, context: Context) => Promise<Answer>;
+    layout?: Layout;
     panel?: (argv: readonly string[], caller: PanelCaller, context: Context) => Promise<Answer>;
 }
 export interface PanelCaller {
@@ -33,6 +35,7 @@ export interface PanelCaller {
 export type Deps = CliOptions & {
     now: () => number;
     sync: SyncState;
+    layout: Layout;
 };
 export interface Caller {
     id: string | null;
@@ -51,6 +54,8 @@ export declare const fail: (out: string, code?: number) => Answer;
 export declare function isAnswer(value: unknown): value is Answer;
 export declare function flags(argv: readonly string[], withValue: readonly string[]): Flags;
 export declare function last(parsed: Flags, flag: string): string | undefined;
+export declare class CallerError extends Error {
+}
 export declare function callerOf(agents: Agents, request: Request): Caller;
 export declare function readText(deps: Deps, value: string, request: Request, context: Context): Promise<string>;
 export declare function prompts(deps: Deps, argv: readonly string[], request: Request, context: Context): Promise<string[]>;

package/dist/types/scoops/extension.d.ts

@@ -1,11 +1,14 @@
 import type { Context } from '@earendil-works/chord';
 import { type ConversationId, type Extension, type Submission, type ToolRegistration, type Tx } from '@earendil-works/pi-durable';
 import { type ScoopRecord } from '../agents.ts';
+import { type Layout } from '../layout.ts';
 import type { LickEvent } from '../licks/licks.ts';
 import { type ScoopsHost } from './service.ts';
 export declare const PREVIEW = 1000;
 type Lookup = () => Promise<ScoopsHost>;
-export declare function scoopFacts(record: Pick<ScoopRecord, 'name' | 'folder' | 'role'>): string;
+export declare function scoopFacts(record: Pick<ScoopRecord, 'name' | 'folder' | 'role'> & {
+    cone?: string;
+}, layout?: Layout): string;
 export type ReportResult = {
     text: string;
     failed: string | null;
@@ -66,9 +69,9 @@ export declare function scoopTasks(lookup: Lookup): {
         phase: 'watch';
     }, null, object>;
 };
-export declare function scoopsExtension(tasks: ReturnType<typeof scoopTasks>): Extension;
+export declare function scoopsExtension(tasks: ReturnType<typeof scoopTasks>, layout?: () => Layout): Extension;
 export declare function allowed(record: Pick<ScoopRecord, 'folder'> & {
     roots?: ScoopRecord['roots'];
-}, coneCwd: string, path: string, writing: boolean, reads?: readonly string[]): boolean;
+}, coneCwd: string, path: string, writing: boolean, reads?: readonly string[], own?: string): boolean;
 export declare function guardExtension(lookup: Lookup, tools: readonly ToolRegistration[]): Extension;
 export {};

package/dist/types/scoops/index.d.ts

@@ -3,6 +3,7 @@ import type { Harness, Registry, ToolRegistration } from '@earendil-works/pi-dur
 import type { ExecutionEnv } from '@earendil-works/pi-durable/env';
 import { type Agents } from '../agents.ts';
 import type { ProcessGroups } from '../kernel/groups.ts';
+import { type Layout } from '../layout.ts';
 import type { Licks } from '../licks/licks.ts';
 import { type Roles } from '../roles/roles.ts';
 import { type CliOptions } from './cli.ts';
@@ -31,6 +32,14 @@ export interface AttachOptions {
     models?: CliOptions['models'];
     panel?: CliOptions['panel'];
     mcp?: (names: readonly string[]) => ToolRegistration[];
+    layout?: Layout;
+    enforced?: boolean;
+    spools?: Spools;
+    agentDir?: string;
+}
+export interface Spools {
+    users(): readonly string[];
+    prepare(user: string, dir: string, context: Context): Promise<void>;
 }
 export interface ScoopsRuntime {
     roles(context: Context): Promise<Roles>;

package/dist/types/scoops/requests.d.ts

@@ -13,6 +13,7 @@ export interface Request {
     pid: number | null;
     argv: string[];
     stdin: string;
+    user?: string;
 }
 export declare function parseRequest(id: string, bytes: Uint8Array): Request | undefined;
 export interface Runner {
@@ -29,5 +30,6 @@ export interface PlaneOptions {
     now?: () => number;
     sweepEvery?: number;
     mirror?: (context: Context) => Promise<void>;
+    user?: string;
 }
 export declare function controlPlane(env: ExecutionEnv, runner: Runner, options?: PlaneOptions): ControlPlane;

package/dist/types/scoops/service.d.ts

@@ -3,9 +3,10 @@ import { type AgentChange, type AnyTask, type Conversation, type Harness, type T
 import type { ExecutionEnv } from '@earendil-works/pi-durable/env';
 import { type Agents, type AgentsState, type Mark, type ScoopRecord } from '../agents.ts';
 import type { ProcessGroups } from '../kernel/groups.ts';
+import { type Layout } from '../layout.ts';
 import type { Licks } from '../licks/licks.ts';
 import type { Role } from '../roles/roles.ts';
-export declare const SCOOPS_ROOT = "/scoops";
+export { SCOOPS_ROOT } from '../layout.ts';
 export declare const LEDGER_SIZE = 512;
 export type Feed = {
     scoop: string;
@@ -51,6 +52,8 @@ export interface ScoopsHost {
     reads?: () => readonly string[];
     files?: Pick<ExecutionEnv, 'remove' | 'createDir'>;
     mcp?: (names: readonly string[]) => ToolRegistration[];
+    layout?: Layout;
+    enforced?: boolean;
 }
 export interface Rewound {
     stopped: string[];
@@ -94,7 +97,7 @@ export interface SpawnRequest {
     request?: string;
     limits: Limits;
 }
-export declare function workspace(folder: string): string;
+export declare function workspace(folder: string, layout?: Layout): string;
 export declare function tail(conversation: Conversation, context: Context): Promise<Mark>;
 export declare function turnStart(conversation: Conversation, context: Context): Promise<number>;
 export declare function coneOf(state: Readonly<AgentsState>, conversation: number): string | undefined;
@@ -123,4 +126,3 @@ export declare function modelOf(value: string | undefined): {
     modelId: string;
 } | undefined;
 export type Scoops = ReturnType<typeof createScoops>;
-export {};

package/dist/types/scoops/sync.d.ts

@@ -3,11 +3,8 @@ import type { EntryRecord } from '@earendil-works/pi-durable';
 import type { ScoopRecord } from '../agents.ts';
 import { type Caller, type Deps } from './cli.ts';
 import type { Request } from './requests.ts';
-import { type Answer } from './service.ts';
-export declare const SESSIONS: {
-    tmp: string;
-    durable: string;
-};
+import type { Answer } from './service.ts';
+export { SESSIONS } from '../layout.ts';
 type Ending = 'cancel' | 'detach';
 interface Pending {
     end: (ending: Ending) => void;
@@ -16,7 +13,13 @@ export interface SyncState {
     pending: Map<string, Pending>;
 }
 export declare function transcript(record: ScoopRecord, entries: readonly EntryRecord[]): string;
+export type Shared = {
+    path: string;
+    write: boolean;
+};
+export declare function sharesOf(home: string, cwd: string, workdir: string | undefined, readOnly: readonly string[]): Shared[];
+export declare function shareScript(home: string, shares: readonly Shared[]): string;
+export declare function shareNote(shares: readonly Shared[]): string;
 export declare function runSync(deps: Deps, request: Request, who: Caller, context: Context): Promise<Answer>;
 export declare function cancelSync(deps: Deps, requestId: string, _context: Context): Promise<Answer>;
 export declare function detachSync(deps: Deps, requestId: string, _context: Context): Promise<Answer>;
-export {};

package/dist/types/skills/index.d.ts

@@ -3,7 +3,7 @@ import { type Extension, type Registry } from '@earendil-works/pi-durable';
 import type { ExecutionEnv } from '@earendil-works/pi-durable/env';
 import type { Licks } from '../licks/licks.ts';
 import type { Command } from '../services.ts';
-import { type Diagnostic, type Skill } from './skills.ts';
+import { type Diagnostic, type Skill, type SkillRoot } from './skills.ts';
 import { type PromptTemplate } from './templates.ts';
 export declare const BUILTIN_SKILLS: string[];
 export declare const BUILTIN_PROMPTS: string[];
@@ -16,16 +16,24 @@ export interface SkillsRuntime {
     skills(): readonly Skill[];
     dirs(): string[];
     templates(): readonly PromptTemplate[];
-    expand(text: string, context: Context): Promise<string>;
+    expand(text: string, context: Context, conversationId?: number): Promise<string>;
     reload(context: Context): Promise<void>;
     close(context: Context): Promise<void>;
 }
 export interface SkillsAttach {
     env: ExecutionEnv;
     home: string;
+    agentDir?: string;
     assets?: (path: string) => Promise<string>;
     reloadMs: number;
+    people?: SkillPeople;
 }
+export interface SkillPeople {
+    homes(): readonly string[];
+    homeOf(conversationId: number | undefined): string | undefined;
+    envOf(home: string): Promise<ExecutionEnv | undefined>;
+}
+export declare function userRoots(homes: readonly string[]): SkillRoot[];
 export interface SkillsSetup {
     extension: Extension;
     attach(options: SkillsAttach, context: Context): Promise<SkillsRuntime>;

package/dist/types/sprinkles/index.d.ts

@@ -28,8 +28,23 @@ export interface SprinklesAttach {
     reloadMs: number;
     dir?: string;
     intercept?: (id: string, payload: SprinklePayload, context: Context) => Promise<boolean>;
+    places?: () => readonly SprinklePlace[];
+    envOf?: (agentId: string, context: Context) => Promise<ExecutionEnv | undefined>;
+    homeOf?: (agentId: string) => string | undefined;
+    shared?: string;
 }
+export interface SprinklePlace {
+    dir: string;
+    cone: string;
+}
+export declare function liveOwner(agents: Agents, owner: string | undefined): string | undefined;
 export declare function ownerOf(agents: Agents, owner: string | undefined): string;
+export declare const NO_OWNER = "this sprinkle has no owner, so it can only be shown";
+export declare function ownedRead(files: ExecutionEnv, asked: string, home: string, using: Context): Promise<{
+    files: ExecutionEnv;
+    path: string;
+    check: () => Promise<void>;
+}>;
 export declare function setupSprinkles(): {
     attach(options: SprinklesAttach, context: Context): Promise<SprinklesRuntime>;
 };

package/dist/types/sprinkles/sprinkles.d.ts

@@ -24,5 +24,11 @@ export declare function sprinkleFiles(env: Pick<ExecutionEnv, 'listDir'>, dir: s
     name: string;
     path: string;
 }[]>;
-export declare function homePath(path: unknown): string;
+export declare function homePath(path: unknown, shared?: string, root?: string): string;
+export declare function sharedPaths(shared: string): {
+    suggestionsDir: string;
+    suggestions: string;
+    welcomed: string;
+    profile: string;
+};
 export declare const NO_EXEC = "sprinkles can't run commands in SLICC; send the agent a message with slicc.lick() and let it run them";