@ai-ecoverse/slicc-agent 3.52.1 → 4.1.0

package/README.md

@@ -112,7 +112,7 @@ With users, each cone and each scoop is a kernel user, and works as that user:
 
 `@ai-ecoverse/slicc-agent/agent-worker` is a complete agent worker. It waits for the page kernel's port, then:
 - attaches to the kernel and routes every cross-origin `fetch` through the kernel's transport, whose router picks a linked `slicc` exit, the extension or the page's own fetch, and every `<port>.kernel.localhost` request to the kernel's loopback (`loopbackFetch`). Same-origin and credentialed (`credentials: 'include'`) requests, and all of them when the kernel has no transport (`traits.unavailable`), use the worker's own fetch, since only it carries the browser's cookies. The system prompt names the route from the traits at attach: `traits.exit` (`{ kind: 'local' | 'remote' | 'tailnet', caps }`, from slicc-bios while it has a default exit) says a linked slicc exit, one on another device or the tailnet's exit node, and any other kind a linked exit, and without it `crossOrigin: 'cors'` says the page's own fetch;
-- opens the encrypted credential store, the AWS Bedrock provider and the session in OPFS SQLite;
+- opens the vault-backed credentials (see Credentials), the AWS Bedrock provider and the session in OPFS SQLite;
 - installs durable's coding tools and SLICC's system prompt, and serves the agent.
 
 The system prompt has a `system` section generated at startup from the running worker (`sliccPrompt(facts)`, `systemSection`). It covers:
@@ -131,17 +131,17 @@ const owner = await startAgent({
 });
 ```
 
-`runAgentWorker(self, options)` is the same with its parts replaceable (model, providers, kernel attach, credentials, storage).
+`runAgentWorker(self, options)` is the same with its parts replaceable (model, providers, kernel attach, the account store, storage).
 
-**Providers.** The first provider is AWS Bedrock with a Bedrock API key as the bearer token; the default model is `us.anthropic.claude-sonnet-5-5`. Requests go to `us-west-2` unless the stored credential names another region (`AWS_REGION`, set by `connect`'s `region`). The default applies when the credential is read, so keys stored earlier get it too. The settings UI has no region field yet. Bedrock sends no CORS headers, so it needs a CORS-free transport, and its account says so (`needs: 'cors-free-transport'`).
+**Providers.** The first provider is AWS Bedrock with a Bedrock API key as the bearer token; the default model is `us.anthropic.claude-sonnet-5-5`. Requests go to `us-west-2` unless the account's `region` field names another one (`AWS_REGION`). The account publishes that field as `fields: [{ name: 'region', label: 'Region' }]`, and `connect` takes it. Bedrock sends no CORS headers, so it needs a CORS-free transport, and its account says so (`needs: 'cors-free-transport'`).
 
-**Adobe.** `adobeProvider()` reaches Adobe's LLM proxy (`ADOBE_PROXY`) with the user's IMS token as a bearer. Its models come from the proxy's `/v1/config` once a token is stored: Anthropic-style models go through pi-ai's `anthropic-messages` API at the proxy root, `api: 'openai'` models through `openai-completions` under `/v1`, and hidden ones are skipped. Every request to the proxy (turns on either API, Clef, `/v1/config` and `/v1/usage`) carries an `X-Session-Id` that is fixed for the worker and an `X-Slicc-Version` (slicc-agent's version, `adobeProvider({ session, version })`); the proxy refuses turns without them. They're added where the request is built, over the caller's and the model's headers, because pi-ai 1.0.4 keeps a provider's `headers` but never sends them. The account is a sign-in (`auth: 'oauth'`): `AgentSettings.signIn('adobe')` returns the IMS `clientId`, `scopes` and `imsEnvironment` from `/v1/config`, fetched in the worker through the transport. The page runs the IMS popup and passes the token to `connect`, so `createAgentModel(connection, { login })` takes a `login(providerId, signIn, { signal })` that returns a token. While it runs, the account shows as `signing-in` (spectrum ≥ 1.34.0), and `SettingsPort.cancel(id)` aborts the signal; a cancelled sign-in never connects, even if the login resolves late. The adapter calls `login` before anything else in the click's task, so the page can open its popup while it still has the user's gesture, and `signIn()` then fetches the IMS options lazily. The weekly budget from `/v1/usage` is in the settings state as `budget` (refreshed on connect and every five minutes), and the `tray` adapter shows it in spectrum's TrayStatus. Until the proxy allows `*.sliccy.ai` (vibemigration#228), Adobe needs a CORS-free transport like Bedrock. An expired session's error card (a 401, or a refusal whose type or message says the token is invalid or expired) offers **Log in**; any other refusal, such as a 403 `missing_required_header`, shows the proxy's message, with the HTTP status and error type below it (`403 missing_required_header`) and **Retry**.
+**Adobe.** `adobeProvider()` reaches Adobe's LLM proxy (`ADOBE_PROXY`) with the user's IMS token as a bearer. Its models come from the proxy's `/v1/config` once a token is stored: Anthropic-style models go through pi-ai's `anthropic-messages` API at the proxy root, `api: 'openai'` models through `openai-completions` under `/v1`, and hidden ones are skipped. Every request to the proxy (turns on either API, Clef, `/v1/config` and `/v1/usage`) carries an `X-Session-Id` that is fixed for the worker and an `X-Slicc-Version` (slicc-agent's version, `adobeProvider({ session, version })`); the proxy refuses turns without them. They're added where the request is built, over the caller's and the model's headers, because pi-ai 1.0.4 keeps a provider's `headers` but never sends them. The account is a sign-in (`auth: 'oauth'`): `AgentSettings.signIn('adobe')` returns the IMS `clientId`, `scopes` and `imsEnvironment` from `/v1/config`, fetched in the worker through the transport. The page runs the IMS popup and seals the token in the vault itself (bios: `seal { kind: 'model', provider: 'adobe', name: 'ADOBE_IMS_TOKEN', source: 'oauth:adobe', expiresAt }`), so `createAgentModel(connection, { login })` takes a `login(providerId, signIn, { signal })` that resolves `{ sealed: true }`; the adapter then calls `connect('adobe')` with no secret. A `login` that still returns a token is refused with "Adobe sign-in needs seven's vault: update seven", and the token never reaches the worker. IMS gives no refresh token, so an expired record shows the account as `expired`, and Sign in (or Reconnect) runs `login` again. While it runs, the account shows as `signing-in` (spectrum ≥ 1.34.0), and `SettingsPort.cancel(id)` aborts the signal; a cancelled sign-in never connects, even if the login resolves late. The adapter calls `login` before anything else in the click's task, so the page can open its popup while it still has the user's gesture, and `signIn()` then fetches the IMS options lazily. The weekly budget from `/v1/usage` is in the settings state as `budget` (refreshed on connect and every five minutes), and the `tray` adapter shows it in spectrum's TrayStatus. Until the proxy allows `*.sliccy.ai` (vibemigration#228), Adobe needs a CORS-free transport like Bedrock. An expired session's error card (a 401, or a refusal whose type or message says the token is invalid or expired) offers **Log in**; any other refusal, such as a 403 `missing_required_header`, shows the proxy's message, with the HTTP status and error type below it (`403 missing_required_header`) and **Retry**.
 
 **Classifiers.** The Adobe provider also registers Cloudflare's Clef classifiers as `adobe/clef` and `adobe/clef-flash` (`adobeClassifiers()`): `type: 'classifier'` models on pi-ai's `cloudflare-workers-ai-system-one` API with `baseUrl: <proxy>/v1/ai`, so `models.classify(model, { state, questions })` posts `{ model: '@cf/cloudflare/clef', input }` to the proxy's `/v1/ai/run` with the IMS token as the bearer. The provider maps its short ids to the Workers AI names, and pi parses the answers and prices the usage ($0.24 per million input tokens for Clef, $0.09 for Clef Flash, nothing for output), which counts against the same weekly budget. They are classifiers only: `models.getModels()`, the settings `models` and the picker list chat models, and `models.getAvailableOfType('classifier', 'adobe')` returns them only while an Adobe token is stored.
 
-**Model credentials.** They live in the IndexedDB database `slicc-agent-credentials`, sealed with AES-GCM under a non-extractable key that never leaves WebCrypto. They never enter the session database or the transcript, and followers never see them.
+**Model credentials.** They live in the vault, never in the worker (see Credentials).
 
-**Settings.** The `slicc.agent.settings` service shows the models and accounts and takes `connect(providerId, apiKey)` and `disconnect(providerId)`.
+**Settings.** The `slicc.agent.settings` service shows the models and accounts and takes `connect(providerId, secret, fields)` and `disconnect(providerId)`. An account's `id` is its lookup key: the pi-ai provider id for model accounts (the vault record's `provider`), and `mcp:<server>` for MCP servers (the record's `server` is the `mcp.json` key); `provider` is only the display name. Accounts whose key the agent reads from the vault carry `store: 'vault'`: spectrum (SPEC-S4) `put`s the key into the vault itself, then calls `connect(id)` with no secret, and the agent rereads `records()`. `fields` holds an account's non-secret settings (`Account.fields`, unknown names ignored), kept in `/.slicc/accounts.json`. `disconnect` clears them; removing the key is spectrum's `vault.remove(name, kind)`, since the agent port can't remove records. `connect` with a secret is refused for every model account ("API keys are kept in seven's vault: update seven"); the only secret it still takes is an MCP sign-in's callback answer.
 
 ### In slicc-spectrum
 
@@ -158,7 +158,7 @@ app.model = { ...createKernelModel({ kernel, root }), ...createAgentModel(agent,
 
 The adapter keeps the replicated transcript and maps it on every update. User, assistant and compaction entries become messages; tool results fill in the tool calls they answer; the generation in flight shows as a streaming message; retries and running compactions show as system messages. A failed generation ends in an error card whose action fits the error: credential errors (an invalid or missing key, 401/403, not authorized) open settings, a model the account can't use offers the model picker, and anything else offers Retry. A content-filter stop is different: every later request resends the content that tripped the filter, so Retry, and any new message, would be stopped again. Content-filter stops are Bedrock's `content_filtered` and `guardrail_intervened`, Anthropic's `sensitive` and refusals, and OpenAI's `content_filter`. Their card leads with "The model's content filter stopped this reply." and offers **Drop the last turn** (spectrum ≥ 1.12.0). `AgentControl.rewind(messageId)` finds the user turn before that message and forks the cone's conversation at the entry before it (`Conversation.fork`, so `pi.agent` comes back as it was there). It points the cone at the fork and returns the turn's prompt, which spectrum puts back into the composer. Forking the very first turn creates a fresh conversation with the same model and thinking level. The filtered branch stays in storage, off the active path. The fork starts with a `slicc.rewound` entry that shows as a "Rewound 1 turn" notice, and clicking the card of an earlier filtered turn rewinds that turn.
 
-Each cone's active conversation is in the session document `slicc.agents` (the root until the first rewind). The host's transcript follows it across forks. Rewinding is refused while the cone itself is running or has queued input, because a fork starts with an empty inbox, but never because its scoops are busy (see Cones and scoops). A background compaction still running on the old branch finishes there. A fork also starts with fresh `pi.usage`. Credential and model errors lead with a plain sentence ("Bedrock rejected the API key.", "This model isn't available with the current account.") and keep the provider's raw error as `detail`, which spectrum (≥ 1.11.0) shows underneath. `busy()` and `queue()` read durable's live and inbox documents. Steering is the default (#4): a send or a steer goes out with `whenBusy: 'steer'`, so while a run is going it joins after the current tool round, and a `queue` send is a follow-up. User messages carry `delivered` from the host's deliveries; entries the host didn't record (from before a reload) count as steered when they follow a tool result. Cones and scoops are below; the freezer and questions come later. Licks show as spectrum's lick cards (below). slicc-spectrum is an optional peer dependency (≥ 1.39.0, whose Freezer shows every conversation with its kind and Open, Thaw and Remove; 1.40.0 also shows each cone's `title`, the Freezer row's title, so same-named cones are told apart), used for types only, so package managers don't install it next to the agent.
+Each cone's active conversation is in the session document `slicc.agents` (the root until the first rewind). The host's transcript follows it across forks. Rewinding is refused while the cone itself is running or has queued input, because a fork starts with an empty inbox, but never because its scoops are busy (see Cones and scoops). A background compaction still running on the old branch finishes there. A fork also starts with fresh `pi.usage`. Credential and model errors lead with a plain sentence ("Bedrock rejected the API key.", "This model isn't available with the current account.") and keep the provider's raw error as `detail`, which spectrum (≥ 1.11.0) shows underneath. `busy()` and `queue()` read durable's live and inbox documents. Steering is the default (#4): a send or a steer goes out with `whenBusy: 'steer'`, so while a run is going it joins after the current tool round, and a `queue` send is a follow-up. User messages carry `delivered` from the host's deliveries; entries the host didn't record (from before a reload) count as steered when they follow a tool result. Cones and scoops are below; the freezer and questions come later. Licks show as spectrum's lick cards (below). slicc-spectrum is an optional peer dependency (≥ 1.59.0, the lowest whose monitor, tray and panel types match the agent's; `npm run typecheck` fails on anything older), used for types only, so package managers don't install it next to the agent.
 
 Each agent in `list()` has a real `contextFill` and `unread`:
 - **`contextFill`** is the context the agent uses, as a share of its model's `contextWindow` from the settings' model list. The tokens are those of the newest assistant's usage after the active head, counted the way pi-ai's `calculateContextTokens` does (`totalTokens`, or input, output and both cache counts). Aborted and failed turns don't count. After a compaction, the kept turns' usage no longer counts. Until the next turn reports its usage, the fill is estimated the way pi does it, at four characters a token, over the summary and the kept entries (without the system prompt and tools). An unknown model also reads 0. The Monitor's "Fullest context" and its context alerts use the same functions (`src/context.ts`).
@@ -341,7 +341,7 @@ MCP servers reachable over Streamable HTTP become native agent tools. The client
 
 **Per agent.** Today every cone reads the one file in `/home` and gets every enabled server. A scoop doesn't read a file of its own: it inherits its cone's servers, and a role's `tools:` or `agent --tools` list narrows them. A list with no `mcp__` entry gets no MCP servers. A list with `mcp__docs__search` or `mcp__docs__*` keeps only those, and `codemode` is added so codemode tools stay reachable. The resource tools must be listed by name, and they reach only the servers the list names. A nested scoop without a list inherits its calling scoop's list. A `beforeTool` hook blocks the model's calls outside the list, and codemode scripts only get the tools on it. When kernel users give each cone its own home, each cone reads `~/.pi/agent/mcp.json` in that home, and scoops keep inheriting from their cone.
 
-**Secrets.** `${NAME}` placeholders are filled from the agent's encrypted credential store, under `mcp:<server>|<hash of the URL>`, when the worker connects. A server whose secret is missing comes up as needing one, with a lick. Pointing a server at another URL leaves it without its secret. Header values never reach SQLite, the transcript, licks or `~/.pi/agent/mcp.log`, and stored secrets are scrubbed from error texts and server log lines. **OAuth.** A server without an `Authorization` header that answers 401 needs a sign-in, as in pi. Its row in Settings › MCP servers offers Connect, which opens a pop-up on the authorization server, found through the server's protected-resource metadata (RFC 9728) or `oauth.authServerMetadataUrl`. SLICC registers itself dynamically as a public client named `SLICC` (`oauth.clientName` changes it), or uses `oauth.clientId`, with PKCE S256 and the redirect URI `https://<origin>/oauth/mcp-callback`. slicc-bios serves that path from `dist/oauth/mcp-callback.html` in this package. The callback page hands the code back over the `slicc-mcp-oauth` BroadcastChannel and clears it from its address. The worker exchanges the code, checking `state` and `iss`, and keeps the tokens with the client and discovery state in the encrypted store under the server's name and URL. Tokens are refreshed when the server answers 401. When the refresh fails, the row asks for a sign-in again. Disconnect deletes the whole grant. `oauth.scope` sets the scopes, else the server's advertised ones are used. `clientSecret`, `callbackPort`, `callbackUrl` and `clientRegistration` are refused, because SLICC signs in as a public client through its own page.
+**Secrets.** `${NAME}` placeholders resolve to the vault's placeholders for that server (`records()`: an `mcp` record with `server` equal to the `mcp.json` key and that name, else the server's only record when the headers use one name, else an unbound record of that name, which covers mcpcat's `${MCP_<NAME>_TOKEN}` bridge tokens). The headers go out holding placeholders, and the vault fills them in its `mcp` op, only for that server's registered URL. A server whose record is missing comes up as needing one, with a lick, and reconnects when the record appears. The worker never holds a value; server log lines are scrubbed through the vault before they reach `~/.pi/agent/mcp.log`. **OAuth.** A server without an `Authorization` header that answers 401 needs a sign-in, as in pi. Its row in Settings › MCP servers offers Connect, which opens a pop-up on the authorization server, found through the server's protected-resource metadata (RFC 9728) or `oauth.authServerMetadataUrl`. SLICC registers itself dynamically as a public client named `SLICC` (`oauth.clientName` changes it), or uses `oauth.clientId`, with PKCE S256 and the redirect URI `https://<origin>/oauth/mcp-callback`. slicc-bios serves that path from `dist/oauth/mcp-callback.html` in this package. The callback page hands the code back over the `slicc-mcp-oauth` BroadcastChannel and clears it from its address. Before the pop-up opens, the worker registers the server's `tokenUrl` (the discovered `token_endpoint`, else `<authServer>/token`) with the vault. It exchanges the code, checking `state` and `iss`, as a prepared `mcp` request to that `tokenUrl`, and hands the token response straight to the vault's `grant`; the raw response is dropped, and pi-mcp keeps only the reply, which holds placeholders, with the client and discovery state in `/.slicc/accounts.json` under the server's name and URL. When the server answers 401, the worker asks the vault to `refresh` once and sends again; pi-mcp's own refresh is off, because the refresh token is a placeholder. When that fails, the row shows the sign-in as expired. Disconnect deletes the local state; spectrum removes the vault records. Without a vault, the exchange is refused ("MCP sign-in needs seven's vault: update seven") before any token is issued. `oauth.scope` sets the scopes, else the server's advertised ones are used. `clientSecret`, `callbackPort`, `callbackUrl` and `clientRegistration` are refused, because SLICC signs in as a public client through its own page.
 
 **Settings › MCP servers** lists each server whose headers use a placeholder, under its own heading below Accounts, with the URL host. Connect takes the token, which fills every placeholder of a server that uses one name; a server whose headers use several different names can't be filled from Settings yet. The server then reconnects. A server that answers 401 shows as **Rejected**, with Reconnect, and Disconnect deletes the token. Tool cards and remote summaries label MCP calls `server · tool`, unless the name is ambiguous (a server name that starts or ends with `_`, or a name with more than two `__` separators); then they show the raw name.
 
@@ -514,7 +514,7 @@ The process table is the worker's root client's `ps()`. Each process is named af
 - `paused`.
 
 **What the feed never holds:** environment variables, tool arguments, task inputs and credentials.
-- **Command lines** lose the `export …;` prefix the kernel environment adds to agent commands, are joined, scrubbed of the MCP servers' stored secrets, run through the memory redaction (which also catches `NAME=value` for secret-like names, and `--token x`), and cut to 160 characters. Error texts get the same treatment.
+- **Command lines** lose the `export …;` prefix the kernel environment adds to agent commands, are joined, run through the memory redaction (which also catches `NAME=value` for secret-like names, and `--token x`), and cut to 160 characters. Error texts get the same treatment.
 - **View-only connections** get their own state from the worker, in which each command is only its program name, so the arguments never cross the link.
 - **Users mode:** the human's panel is root's, so it sees every process. A cone's bound client would see only its own, by the kernel's hidepid.
 
@@ -588,7 +588,7 @@ It prints the tab's stdout and stderr on their own streams and exits with its co
 
 **The bridge** is the `slicc.agent.pages` service, a sibling of `slicc.agent.remote` with the same long-poll stream: `open(tab)`, `report(stream, tab)`, `next(stream, waitMs)`, `answer(stream, id, result)` and `close(stream)`. A tab reports `{ tab, kinds: ['panel'], cone, visible, focused, lastActive }`. Each request goes to exactly one tab and is never retried elsewhere: the `--tab` tab, the `SLICC_TAB` tab if it's open, otherwise the tab on the caller's cone that is visible and focused, then visible, then the latest active. A tab is dropped when it closes its stream, when its attachment goes, or after 30 s without a poll, and each attachment reaches only its own streams.
 
-**The page side.** `createAgentModel(connection, { page: { tab, run } })` starts a `PageAdapter`. It reports the tab's selected cone (`AgentAdapter.active()`, or a scoop's cone), `document.visibilityState`, `document.hasFocus()` and the time of the last pointer or key event, debounced by 250 ms. It answers each request with `run(argv, caller)`, which bios points at spectrum's `panelCommand` (≥ 1.59.0). `PageRun` uses the agent's own types, so the peer range stays `^1.39.0`, and `test/integration/panel-run.ts` type-checks `(argv, caller) => panelCommand(app, argv, caller)` against it. The integration test runs the real `panelCommand` on a `<slicc-app>` with the dummy model under the agent's ports. Without `run` the tab never registers, so the bridge works with older spectrums too.
+**The page side.** `createAgentModel(connection, { page: { tab, run } })` starts a `PageAdapter`. It reports the tab's selected cone (`AgentAdapter.active()`, or a scoop's cone), `document.visibilityState`, `document.hasFocus()` and the time of the last pointer or key event, debounced by 250 ms. It answers each request with `run(argv, caller)`, which bios points at spectrum's `panelCommand` (≥ 1.59.0). `PageRun` uses the agent's own types, and `test/integration/panel-run.ts` type-checks `(argv, caller) => panelCommand(app, argv, caller)` against it. The integration test runs the real `panelCommand` on a `<slicc-app>` with the dummy model under the agent's ports. Without `run` the tab never registers, so the bridge works with older spectrums too.
 
 **Followers never execute.** Read-only attachments (`owner.port({ readOnly: true })`) and attachments made with `owner.port({ pages: false })`, which bios uses for link followers, get a `slicc.agent.pages` whose `open` answers `{ error }`, so they are never chosen.
 
@@ -606,14 +606,18 @@ It prints the tab's stdout and stderr on their own streams and exits with its co
 
 ### Credentials
 
-The agent never holds a secret's value. Values live in the vault (`vault.sliccy.ai`); the agent sees names and placeholders (`fnox_proxy_…`), and every text that could reach the model is scrubbed through the vault first. The design is secrets rev 4 (§3.15–§3.18), and this part is AGENT-S1.
+The agent never holds a secret's value. Values live in the vault (`vault.sliccy.ai`); the agent sees names and placeholders (`fnox_proxy_…`), and every text that could reach the model is scrubbed through the vault first. The design is secrets rev 4 (§3.12, §3.15–§3.18); scrubbing is AGENT-S1 and the model and MCP transport VAULT-2 (slicc-agent 4.0.0). Without a vault port there are no model credentials.
 
-- **The port.** bios posts `{ kernel, admin, vault, scrub }` to the worker, where `vault` is a `MessagePort` to the vault frame (role `agent`) and `scrub` the last-known `{ needed, version }`, or `null` when no vault ever connected. On a vault reload it posts `{ vault, scrub }` again, and the worker resends its unanswered ops. Without a port, or with `needed: false`, nothing is sent and every scrub is the identity. A `version` newer than the last pair read counts as `needed` until the new pair arrives.
-- **The wire.** Requests are `{ id, op, ... }` and answers `{ id, ok }` or `{ id, error }`, in request order: `redact { texts }` (strings and `Uint8Array`s, answered in the same order and types, with `version`), and the stream ops `redactStream`, `push { chunk }`, `end` and `drop`, each with the worker's `stream` id. The vault may push `{ scrub }` and `{ locked }` at any time.
+- **The port.** bios posts `{ kernel, admin, vault, scrub }` to the worker, where `vault` is a `MessagePort` to the vault frame (role `agent`) and `scrub` the last-known `{ needed, version }`, or `null` when no vault ever connected. On a vault reload it posts `{ vault, scrub }` again, and the worker resends its unanswered ops. The agent port gets no events, so bios also posts `{ locked }` (a boolean, from the page port's `status`) whenever the lock changes; the worker reads the initial state from the vault's `welcome`. Without a port, or with `needed: false`, nothing is sent and every scrub is the identity. A `version` newer than the last pair read counts as `needed` until the new pair arrives.
+- **The wire** is slicc-vault's `AgentOp`/`AgentReply` (`@ai-ecoverse/slicc-vault`, types only). Requests are `{ v: 1, id, op, ... }` and answers `{ v: 1, id, op, ... }` or `{ v: 1, id, error: { code, message } }`, in request order: `redact { texts }` (strings and `Uint8Array`s, answered in the same order and types, with `version`), the stream ops `redactStream`, `push { chunk }`, `end` and `drop` with the worker's string `stream` id, and `model`, `mcp`, `records`, `grant`, `refresh` and `endpoints`. The vault's first message, `welcome`, carries `status.scrub` and `status.locked`; version bumps come only from bios's `{ scrub }` posts and the `version` in answers.
+- **Credentials by placeholder.** `records()` lists the `model` and `mcp` records (names, placeholders, states, never values). It is read at start, whenever `version` changes, and after `connect` and `disconnect`. The read-only `CredentialStore` behind pi-ai returns a model record's placeholder as the API key (found by `kind: 'model'` and `provider`), with the account's non-secret fields as its env (Bedrock's `region` as `AWS_REGION`); writing to it throws.
+- **The transport.** The worker's `fetch` is `vaultFetch`: a request to a configured provider's base URL (Bedrock's standard `bedrock-runtime.*.amazonaws.com` and `-fips` endpoints included, so the AWS SDK's bearer requests are covered), or one carrying a model placeholder in its URL or headers, goes out as `model { provider?, request }`; MCP requests go out as `mcp { server, request }`, discovery and client registration included. The vault returns the request scrubbed over every value and with the credential filled in its headers or URL, and the existing transport sends it (`loopbackFetch` for a server on `http://<port>.kernel.localhost`); the response comes back directly. `EAGAIN` prepares the request once more; a refusal becomes a response (403 for `EACCES`, with the vault's sentence); a 401 calls `refresh { provider | server }` once and sends again. Anything else passes through, and without a vault every request does. Transport errors name only the method and origin, never a prepared URL or header.
+- **Endpoints.** `endpoints { model: [{ provider, url }], mcp: [{ server, url, names?, tokenUrl? }] }` is sent when the port opens and whenever the providers, the accounts or `mcp.json` change: every https base URL of every provider, and every server URL with the `${NAME}`s its headers use. Registrations only add.
 - **`slicc-secrets`**, a built-in extension modelled on [pi-fnox](https://github.com/Bucurenciu-Cristian/pi-fnox) (MIT, © 2026 Kicky), with its hooks mapped to pi-durable: `secret list --json` in the home env at start and whenever `version` changes (pi-fnox's `fnox export`; nothing goes into the worker's environment); an `afterTool` hook scrubbing every result's text, diagnostics and string `details` (pi-fnox's `tool_result`); a `secrets` system section with the names, placeholders, where each works and how to use them (`before_agent_start`); and `/secrets`, answered locally as a `slicc.secrets` entry (`/fnox-list`; reloading is automatic). When at least one secret is `shell = true`, every conversation command runs as `fnox exec --shell-grants -- <argv>` (pi-fnox's `spawnHook`). slicc-agent doesn't depend on `@kickythrust/pi-fnox`. Every conversation keeps the extension: new ones are pinned at creation, and conversations stored with an extension list that lacks it get it back at start.
 - **Where text is scrubbed before anything keeps or cuts it:** command output, per stream, before the bash tool's tail window, the spill file and the live slot; `read`'s bytes (images aren't, and files over 8 MiB stream in 1 MiB chunks); MCP results before their middle cut and progress text; codemode output before its cut; user and remote sends after skill expansion; every lick (sprinkle sends and scoop results included) before triage and the outbox; and memory writes, before the pattern redaction. Remote-control summaries are built from stored entries only.
 - **The hold.** A vault that doesn't answer within 2 s reads as `waiting`. Nothing unscrubbed is appended: tool results, sends and licks wait in memory, model requests wait before they start, and command output held past 32 MiB kills the command with "output held: waiting for the vault". The state is the transcript's `vault` field (`{ port, needed, version, locked, held }`), and remote `watch` streams get a `notice` "waiting for the vault" and one when it answers again.
 - **In spectrum.** The agent port's `hold()` is `{ reason: 'locked', held }` while the vault needs a passkey, `{ reason: 'waiting', held }` while scrubbing is needed and the port isn't `ready`, and `null` otherwise, with a `hold` event on each change (and `null` when it clears); spectrum (≥ 1.62.0) shows it above the composer, and older spectrum ignores it. While a hold is up, the worker's active cone is busy (`working` when it isn't running), so the composer steers and queues; a send made during the hold waits in the tab, shown in that cone's queue, and goes to the worker once the hold clears; removing it before then means it's never sent. `/secrets` entries (`slicc.secrets`) show as a "Secrets listed" notice.
+- **Tests.** The worker never compiles values: `src/` takes only `import type { Hit }` from [`@ai-ecoverse/slicc-scrub`](https://www.npmjs.com/package/@ai-ecoverse/slicc-scrub), the vault's scrubber, and the package is a devDependency. The fake vault the tests use scrubs with that package, and its `vectors.json` (every form, line-wrapped base64 and hex included) runs through each scrub point and each cut. A suite-wide check asserts that no captured model request, entry, slot or memory file holds any form of a seeded value.
 
 ## The kernel
 

package/dist/client.js

@@ -40,7 +40,7 @@ function lasting(state) {
 function lastingSettings(settings, hold) {
   return {
     state: hold(settings.state),
-    connect: (providerId, secret, region, context) => settings.connect(providerId, secret, region, context),
+    connect: (providerId, secret, fields, context) => settings.connect(providerId, secret, fields, context),
     disconnect: (providerId, context) => settings.disconnect(providerId, context),
     signIn: (providerId, context) => settings.signIn(providerId, context)
   };
@@ -78,6 +78,7 @@ async function connectAgent(endpoint, options = {}) {
     agents,
     views,
     commands,
+    privateRevision,
     sprinkles,
     memories,
     memoryScopes,
@@ -111,6 +112,7 @@ async function connectAgent(endpoint, options = {}) {
     agents: hold(agents),
     views: hold(views),
     commands: hold(commands),
+    privateRevision: hold(privateRevision),
     sprinkles: hold(sprinkles),
     memories: hold(memories),
     memoryScopes: hold(memoryScopes),

package/dist/client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/client.ts"],
-  "sourcesContent": ["import {\n  type Context,\n  createRemoteServiceBinding,\n  type ReplicatedState,\n} from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport { Client, createClientServiceTransport } from '@earendil-works/pi-client';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { ChangesView } from './changes/git.ts';\nimport type { FrozenCone } from './freezer/index.ts';\nimport type { MemoryEntry, MemoryScope } from './memory/format.ts';\nimport type { AgentRemote } from './remote/host.ts';\nimport type { AgentPages } from './remote/pages.ts';\nimport type { VaultState } from './secrets/vault.ts';\nimport {\n  AGENT_SESSION,\n  AgentControl,\n  AgentPagesService,\n  AgentRemoteService,\n  AgentSessions,\n  AgentSettings,\n  type AgentsSummary,\n  AgentTranscript,\n  type Command,\n  type Delivered,\n  type MonitorFeed,\n  type SendMode,\n} from './services.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\nimport { PortChannel, type PortEndpoint } from './wire.ts';\n\nexport interface AgentConnection {\n  readonly serverId: string;\n  readonly control: AgentControl;\n  readonly transcript: ReplicatedState<ConversationView>;\n  readonly deliveries: ReplicatedState<Record<string, Delivered>>;\n  readonly agents?: ReplicatedState<AgentsSummary>;\n  readonly views?: ReplicatedState<Record<string, ConversationView>>;\n  readonly commands?: ReplicatedState<Command[]>;\n  readonly sprinkles?: ReplicatedState<Sprinkle[]>;\n  readonly memories?: ReplicatedState<MemoryEntry[]>;\n  readonly memoryScopes?: ReplicatedState<MemoryScope[]>;\n  readonly frozen?: ReplicatedState<FrozenCone[]>;\n  readonly changes?: ReplicatedState<ChangesView>;\n  readonly monitor?: ReplicatedState<MonitorFeed>;\n  readonly vault?: ReplicatedState<VaultState>;\n  readonly settings: AgentSettings;\n  readonly remote?: AgentRemote;\n  readonly pages?: AgentPages;\n  readonly closed: Promise<Error | undefined>;\n  prompt(text: string, whenBusy?: SendMode): Promise<string>;\n  webhook(\n    name: string,\n    delivery: { id?: string | null; headers?: Record<string, string>; body: string }\n  ): Promise<{ delivered: boolean }>;\n  close(): Promise<void>;\n}\n\nexport interface Lasting<T> {\n  readonly state: ReplicatedState<T>;\n  freeze(): void;\n}\n\nexport function lasting<T>(state: ReplicatedState<T>): Lasting<T> {\n  let last: T | undefined;\n  let frozen = false;\n  const read = () => {\n    if (frozen) return last;\n    try {\n      last = state.value;\n    } catch {}\n    return last;\n  };\n  return {\n    state: {\n      get value() {\n        return read();\n      },\n      subscribe: (listener) => (frozen ? () => undefined : state.subscribe(listener)),\n    },\n    freeze() {\n      read();\n      frozen = true;\n    },\n  };\n}\n\nfunction lastingSettings(\n  settings: AgentSettings,\n  hold: <T>(state: ReplicatedState<T>) => ReplicatedState<T>\n): AgentSettings {\n  return {\n    state: hold(settings.state),\n    connect: (providerId, secret, region, context) =>\n      settings.connect(providerId, secret, region, context),\n    disconnect: (providerId, context) => settings.disconnect(providerId, context),\n    signIn: (providerId, context) => settings.signIn(providerId, context),\n  };\n}\n\nfunction attached(client: Client): Promise<void> {\n  return new Promise((resolve) => {\n    const stop = client.onAttachmentChange(() => {\n      stop();\n      resolve();\n    });\n  });\n}\n\nexport async function connectAgent(\n  endpoint: PortEndpoint,\n  options: { context?: Context } = {}\n): Promise<AgentConnection> {\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const channel = new PortChannel(endpoint);\n  const serverId = await channel.hello;\n  const client = await Client.connect({ serverId, transportFactory: channel.transport });\n  const server = createRemoteServiceBinding({\n    services: [AgentSessions],\n    transport: createClientServiceTransport(client, () => ({ serverId })),\n    bound: true,\n  });\n  const ready = attached(client);\n  await server.use(AgentSessions).attach(AGENT_SESSION, context);\n  await ready;\n  const session = createRemoteServiceBinding({\n    services: [AgentControl, AgentTranscript, AgentSettings, AgentRemoteService, AgentPagesService],\n    transport: createClientServiceTransport(client, () => client.attachment),\n    bound: true,\n  });\n  const control = session.use(AgentControl);\n  const {\n    state: transcript,\n    deliveries,\n    agents,\n    views,\n    commands,\n    sprinkles,\n    memories,\n    memoryScopes,\n    frozen,\n    changes,\n    monitor,\n    vault,\n  } = session.use(AgentTranscript);\n  const settings = session.use(AgentSettings);\n  const remote = session.use(AgentRemoteService);\n  const pages = session.use(AgentPagesService);\n  await session.ready(context);\n  const held: Lasting<unknown>[] = [];\n  const hold = <T>(state: ReplicatedState<T>): ReplicatedState<T> => {\n    const kept = lasting(state);\n    held.push(kept as Lasting<unknown>);\n    return kept.state;\n  };\n  const freeze = () => {\n    for (const kept of held) kept.freeze();\n  };\n  const closed = channel.ended.then((reason) => {\n    freeze();\n    return reason;\n  });\n  return {\n    serverId,\n    control,\n    transcript: hold(transcript),\n    deliveries: hold(deliveries),\n    agents: hold(agents),\n    views: hold(views),\n    commands: hold(commands),\n    sprinkles: hold(sprinkles),\n    memories: hold(memories),\n    memoryScopes: hold(memoryScopes),\n    frozen: hold(frozen),\n    changes: hold(changes),\n    monitor: hold(monitor),\n    vault: hold(vault),\n    settings: lastingSettings(settings, hold),\n    remote,\n    pages,\n    closed,\n    webhook(name, delivery) {\n      return control.webhook(\n        name,\n        { id: delivery.id ?? null, headers: delivery.headers ?? {}, body: delivery.body },\n        context\n      );\n    },\n    async prompt(text, whenBusy = 'followUp') {\n      const sent = await control.send({ text, whenBusy, requestId: null }, context);\n      if (!sent.accepted) throw new Error(`${sent.error.code}: ${sent.error.message}`);\n      const settled = await control.wait(sent.submissionId, context);\n      if (settled.status !== 'done') throw new Error(`unanswered: ${settled.reason}`);\n      return settled.text;\n    },\n    async close() {\n      freeze();\n      await server.use(AgentSessions).detach(context);\n      await session.dispose(context);\n      await server.dispose(context);\n      await client.dispose();\n    },\n  };\n}\n"],
-  "mappings": "AAAA;AAAA,EAEE;AAAA,OAEK;AACP,SAAS,0BAA0B;AACnC,SAAS,QAAQ,oCAAoC;AAQrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OAKK;AAEP,SAAS,mBAAsC;AAkCxC,SAAS,QAAW,OAAuC;AAChE,MAAI;AACJ,MAAI,SAAS;AACb,QAAM,OAAO,MAAM;AACjB,QAAI,OAAQ,QAAO;AACnB,QAAI;AACF,aAAO,MAAM;AAAA,IACf,QAAQ;AAAA,IAAC;AACT,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,OAAO;AAAA,MACL,IAAI,QAAQ;AACV,eAAO,KAAK;AAAA,MACd;AAAA,MACA,WAAW,CAAC,aAAc,SAAS,MAAM,SAAY,MAAM,UAAU,QAAQ;AAAA,IAC/E;AAAA,IACA,SAAS;AACP,WAAK;AACL,eAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,gBACP,UACA,MACe;AACf,SAAO;AAAA,IACL,OAAO,KAAK,SAAS,KAAK;AAAA,IAC1B,SAAS,CAAC,YAAY,QAAQ,QAAQ,YACpC,SAAS,QAAQ,YAAY,QAAQ,QAAQ,OAAO;AAAA,IACtD,YAAY,CAAC,YAAY,YAAY,SAAS,WAAW,YAAY,OAAO;AAAA,IAC5E,QAAQ,CAAC,YAAY,YAAY,SAAS,OAAO,YAAY,OAAO;AAAA,EACtE;AACF;AAEA,SAAS,SAAS,QAA+B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,OAAO,OAAO,mBAAmB,MAAM;AAC3C,WAAK;AACL,cAAQ;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,aACpB,UACA,UAAiC,CAAC,GACR;AAC1B,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,UAAU,IAAI,YAAY,QAAQ;AACxC,QAAM,WAAW,MAAM,QAAQ;AAC/B,QAAM,SAAS,MAAM,OAAO,QAAQ,EAAE,UAAU,kBAAkB,QAAQ,UAAU,CAAC;AACrF,QAAM,SAAS,2BAA2B;AAAA,IACxC,UAAU,CAAC,aAAa;AAAA,IACxB,WAAW,6BAA6B,QAAQ,OAAO,EAAE,SAAS,EAAE;AAAA,IACpE,OAAO;AAAA,EACT,CAAC;AACD,QAAM,QAAQ,SAAS,MAAM;AAC7B,QAAM,OAAO,IAAI,aAAa,EAAE,OAAO,eAAe,OAAO;AAC7D,QAAM;AACN,QAAM,UAAU,2BAA2B;AAAA,IACzC,UAAU,CAAC,cAAc,iBAAiB,eAAe,oBAAoB,iBAAiB;AAAA,IAC9F,WAAW,6BAA6B,QAAQ,MAAM,OAAO,UAAU;AAAA,IACvE,OAAO;AAAA,EACT,CAAC;AACD,QAAM,UAAU,QAAQ,IAAI,YAAY;AACxC,QAAM;AAAA,IACJ,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,QAAQ,IAAI,eAAe;AAC/B,QAAM,WAAW,QAAQ,IAAI,aAAa;AAC1C,QAAM,SAAS,QAAQ,IAAI,kBAAkB;AAC7C,QAAM,QAAQ,QAAQ,IAAI,iBAAiB;AAC3C,QAAM,QAAQ,MAAM,OAAO;AAC3B,QAAM,OAA2B,CAAC;AAClC,QAAM,OAAO,CAAI,UAAkD;AACjE,UAAM,OAAO,QAAQ,KAAK;AAC1B,SAAK,KAAK,IAAwB;AAClC,WAAO,KAAK;AAAA,EACd;AACA,QAAM,SAAS,MAAM;AACnB,eAAW,QAAQ,KAAM,MAAK,OAAO;AAAA,EACvC;AACA,QAAM,SAAS,QAAQ,MAAM,KAAK,CAAC,WAAW;AAC5C,WAAO;AACP,WAAO;AAAA,EACT,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY,KAAK,UAAU;AAAA,IAC3B,YAAY,KAAK,UAAU;AAAA,IAC3B,QAAQ,KAAK,MAAM;AAAA,IACnB,OAAO,KAAK,KAAK;AAAA,IACjB,UAAU,KAAK,QAAQ;AAAA,IACvB,WAAW,KAAK,SAAS;AAAA,IACzB,UAAU,KAAK,QAAQ;AAAA,IACvB,cAAc,KAAK,YAAY;AAAA,IAC/B,QAAQ,KAAK,MAAM;AAAA,IACnB,SAAS,KAAK,OAAO;AAAA,IACrB,SAAS,KAAK,OAAO;AAAA,IACrB,OAAO,KAAK,KAAK;AAAA,IACjB,UAAU,gBAAgB,UAAU,IAAI;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,MAAM,UAAU;AACtB,aAAO,QAAQ;AAAA,QACb;AAAA,QACA,EAAE,IAAI,SAAS,MAAM,MAAM,SAAS,SAAS,WAAW,CAAC,GAAG,MAAM,SAAS,KAAK;AAAA,QAChF;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,OAAO,MAAM,WAAW,YAAY;AACxC,YAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,OAAO;AAC5E,UAAI,CAAC,KAAK,SAAU,OAAM,IAAI,MAAM,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,OAAO,EAAE;AAC/E,YAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,cAAc,OAAO;AAC7D,UAAI,QAAQ,WAAW,OAAQ,OAAM,IAAI,MAAM,eAAe,QAAQ,MAAM,EAAE;AAC9E,aAAO,QAAQ;AAAA,IACjB;AAAA,IACA,MAAM,QAAQ;AACZ,aAAO;AACP,YAAM,OAAO,IAAI,aAAa,EAAE,OAAO,OAAO;AAC9C,YAAM,QAAQ,QAAQ,OAAO;AAC7B,YAAM,OAAO,QAAQ,OAAO;AAC5B,YAAM,OAAO,QAAQ;AAAA,IACvB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import {\n  type Context,\n  createRemoteServiceBinding,\n  type ReplicatedState,\n} from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport { Client, createClientServiceTransport } from '@earendil-works/pi-client';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { ChangesView } from './changes/git.ts';\nimport type { FrozenCone } from './freezer/index.ts';\nimport type { MemoryEntry, MemoryScope } from './memory/format.ts';\nimport type { AgentRemote } from './remote/host.ts';\nimport type { AgentPages } from './remote/pages.ts';\nimport type { VaultState } from './secrets/vault.ts';\nimport {\n  AGENT_SESSION,\n  AgentControl,\n  AgentPagesService,\n  AgentRemoteService,\n  AgentSessions,\n  AgentSettings,\n  type AgentsSummary,\n  AgentTranscript,\n  type Command,\n  type Delivered,\n  type MonitorFeed,\n  type PrivateRevision,\n  type SendMode,\n} from './services.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\nimport { PortChannel, type PortEndpoint } from './wire.ts';\n\nexport interface AgentConnection {\n  readonly serverId: string;\n  readonly control: AgentControl;\n  readonly transcript: ReplicatedState<ConversationView>;\n  readonly deliveries: ReplicatedState<Record<string, Delivered>>;\n  readonly agents?: ReplicatedState<AgentsSummary>;\n  readonly views?: ReplicatedState<Record<string, ConversationView>>;\n  readonly commands?: ReplicatedState<Command[]>;\n  readonly privateRevision?: ReplicatedState<PrivateRevision>;\n  readonly sprinkles?: ReplicatedState<Sprinkle[]>;\n  readonly memories?: ReplicatedState<MemoryEntry[]>;\n  readonly memoryScopes?: ReplicatedState<MemoryScope[]>;\n  readonly frozen?: ReplicatedState<FrozenCone[]>;\n  readonly changes?: ReplicatedState<ChangesView>;\n  readonly monitor?: ReplicatedState<MonitorFeed>;\n  readonly vault?: ReplicatedState<VaultState>;\n  readonly settings: AgentSettings;\n  readonly remote?: AgentRemote;\n  readonly pages?: AgentPages;\n  readonly closed: Promise<Error | undefined>;\n  prompt(text: string, whenBusy?: SendMode): Promise<string>;\n  webhook(\n    name: string,\n    delivery: { id?: string | null; headers?: Record<string, string>; body: string }\n  ): Promise<{ delivered: boolean }>;\n  close(): Promise<void>;\n}\n\nexport interface Lasting<T> {\n  readonly state: ReplicatedState<T>;\n  freeze(): void;\n}\n\nexport function lasting<T>(state: ReplicatedState<T>): Lasting<T> {\n  let last: T | undefined;\n  let frozen = false;\n  const read = () => {\n    if (frozen) return last;\n    try {\n      last = state.value;\n    } catch {}\n    return last;\n  };\n  return {\n    state: {\n      get value() {\n        return read();\n      },\n      subscribe: (listener) => (frozen ? () => undefined : state.subscribe(listener)),\n    },\n    freeze() {\n      read();\n      frozen = true;\n    },\n  };\n}\n\nfunction lastingSettings(\n  settings: AgentSettings,\n  hold: <T>(state: ReplicatedState<T>) => ReplicatedState<T>\n): AgentSettings {\n  return {\n    state: hold(settings.state),\n    connect: (providerId, secret, fields, context) =>\n      settings.connect(providerId, secret, fields, context),\n    disconnect: (providerId, context) => settings.disconnect(providerId, context),\n    signIn: (providerId, context) => settings.signIn(providerId, context),\n  };\n}\n\nfunction attached(client: Client): Promise<void> {\n  return new Promise((resolve) => {\n    const stop = client.onAttachmentChange(() => {\n      stop();\n      resolve();\n    });\n  });\n}\n\nexport async function connectAgent(\n  endpoint: PortEndpoint,\n  options: { context?: Context } = {}\n): Promise<AgentConnection> {\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const channel = new PortChannel(endpoint);\n  const serverId = await channel.hello;\n  const client = await Client.connect({ serverId, transportFactory: channel.transport });\n  const server = createRemoteServiceBinding({\n    services: [AgentSessions],\n    transport: createClientServiceTransport(client, () => ({ serverId })),\n    bound: true,\n  });\n  const ready = attached(client);\n  await server.use(AgentSessions).attach(AGENT_SESSION, context);\n  await ready;\n  const session = createRemoteServiceBinding({\n    services: [AgentControl, AgentTranscript, AgentSettings, AgentRemoteService, AgentPagesService],\n    transport: createClientServiceTransport(client, () => client.attachment),\n    bound: true,\n  });\n  const control = session.use(AgentControl);\n  const {\n    state: transcript,\n    deliveries,\n    agents,\n    views,\n    commands,\n    privateRevision,\n    sprinkles,\n    memories,\n    memoryScopes,\n    frozen,\n    changes,\n    monitor,\n    vault,\n  } = session.use(AgentTranscript);\n  const settings = session.use(AgentSettings);\n  const remote = session.use(AgentRemoteService);\n  const pages = session.use(AgentPagesService);\n  await session.ready(context);\n  const held: Lasting<unknown>[] = [];\n  const hold = <T>(state: ReplicatedState<T>): ReplicatedState<T> => {\n    const kept = lasting(state);\n    held.push(kept as Lasting<unknown>);\n    return kept.state;\n  };\n  const freeze = () => {\n    for (const kept of held) kept.freeze();\n  };\n  const closed = channel.ended.then((reason) => {\n    freeze();\n    return reason;\n  });\n  return {\n    serverId,\n    control,\n    transcript: hold(transcript),\n    deliveries: hold(deliveries),\n    agents: hold(agents),\n    views: hold(views),\n    commands: hold(commands),\n    privateRevision: hold(privateRevision),\n    sprinkles: hold(sprinkles),\n    memories: hold(memories),\n    memoryScopes: hold(memoryScopes),\n    frozen: hold(frozen),\n    changes: hold(changes),\n    monitor: hold(monitor),\n    vault: hold(vault),\n    settings: lastingSettings(settings, hold),\n    remote,\n    pages,\n    closed,\n    webhook(name, delivery) {\n      return control.webhook(\n        name,\n        { id: delivery.id ?? null, headers: delivery.headers ?? {}, body: delivery.body },\n        context\n      );\n    },\n    async prompt(text, whenBusy = 'followUp') {\n      const sent = await control.send({ text, whenBusy, requestId: null }, context);\n      if (!sent.accepted) throw new Error(`${sent.error.code}: ${sent.error.message}`);\n      const settled = await control.wait(sent.submissionId, context);\n      if (settled.status !== 'done') throw new Error(`unanswered: ${settled.reason}`);\n      return settled.text;\n    },\n    async close() {\n      freeze();\n      await server.use(AgentSessions).detach(context);\n      await session.dispose(context);\n      await server.dispose(context);\n      await client.dispose();\n    },\n  };\n}\n"],
+  "mappings": "AAAA;AAAA,EAEE;AAAA,OAEK;AACP,SAAS,0BAA0B;AACnC,SAAS,QAAQ,oCAAoC;AAQrD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OAMK;AAEP,SAAS,mBAAsC;AAmCxC,SAAS,QAAW,OAAuC;AAChE,MAAI;AACJ,MAAI,SAAS;AACb,QAAM,OAAO,MAAM;AACjB,QAAI,OAAQ,QAAO;AACnB,QAAI;AACF,aAAO,MAAM;AAAA,IACf,QAAQ;AAAA,IAAC;AACT,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,OAAO;AAAA,MACL,IAAI,QAAQ;AACV,eAAO,KAAK;AAAA,MACd;AAAA,MACA,WAAW,CAAC,aAAc,SAAS,MAAM,SAAY,MAAM,UAAU,QAAQ;AAAA,IAC/E;AAAA,IACA,SAAS;AACP,WAAK;AACL,eAAS;AAAA,IACX;AAAA,EACF;AACF;AAEA,SAAS,gBACP,UACA,MACe;AACf,SAAO;AAAA,IACL,OAAO,KAAK,SAAS,KAAK;AAAA,IAC1B,SAAS,CAAC,YAAY,QAAQ,QAAQ,YACpC,SAAS,QAAQ,YAAY,QAAQ,QAAQ,OAAO;AAAA,IACtD,YAAY,CAAC,YAAY,YAAY,SAAS,WAAW,YAAY,OAAO;AAAA,IAC5E,QAAQ,CAAC,YAAY,YAAY,SAAS,OAAO,YAAY,OAAO;AAAA,EACtE;AACF;AAEA,SAAS,SAAS,QAA+B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,OAAO,OAAO,mBAAmB,MAAM;AAC3C,WAAK;AACL,cAAQ;AAAA,IACV,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAsB,aACpB,UACA,UAAiC,CAAC,GACR;AAC1B,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,UAAU,IAAI,YAAY,QAAQ;AACxC,QAAM,WAAW,MAAM,QAAQ;AAC/B,QAAM,SAAS,MAAM,OAAO,QAAQ,EAAE,UAAU,kBAAkB,QAAQ,UAAU,CAAC;AACrF,QAAM,SAAS,2BAA2B;AAAA,IACxC,UAAU,CAAC,aAAa;AAAA,IACxB,WAAW,6BAA6B,QAAQ,OAAO,EAAE,SAAS,EAAE;AAAA,IACpE,OAAO;AAAA,EACT,CAAC;AACD,QAAM,QAAQ,SAAS,MAAM;AAC7B,QAAM,OAAO,IAAI,aAAa,EAAE,OAAO,eAAe,OAAO;AAC7D,QAAM;AACN,QAAM,UAAU,2BAA2B;AAAA,IACzC,UAAU,CAAC,cAAc,iBAAiB,eAAe,oBAAoB,iBAAiB;AAAA,IAC9F,WAAW,6BAA6B,QAAQ,MAAM,OAAO,UAAU;AAAA,IACvE,OAAO;AAAA,EACT,CAAC;AACD,QAAM,UAAU,QAAQ,IAAI,YAAY;AACxC,QAAM;AAAA,IACJ,OAAO;AAAA,IACP;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,QAAQ,IAAI,eAAe;AAC/B,QAAM,WAAW,QAAQ,IAAI,aAAa;AAC1C,QAAM,SAAS,QAAQ,IAAI,kBAAkB;AAC7C,QAAM,QAAQ,QAAQ,IAAI,iBAAiB;AAC3C,QAAM,QAAQ,MAAM,OAAO;AAC3B,QAAM,OAA2B,CAAC;AAClC,QAAM,OAAO,CAAI,UAAkD;AACjE,UAAM,OAAO,QAAQ,KAAK;AAC1B,SAAK,KAAK,IAAwB;AAClC,WAAO,KAAK;AAAA,EACd;AACA,QAAM,SAAS,MAAM;AACnB,eAAW,QAAQ,KAAM,MAAK,OAAO;AAAA,EACvC;AACA,QAAM,SAAS,QAAQ,MAAM,KAAK,CAAC,WAAW;AAC5C,WAAO;AACP,WAAO;AAAA,EACT,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAY,KAAK,UAAU;AAAA,IAC3B,YAAY,KAAK,UAAU;AAAA,IAC3B,QAAQ,KAAK,MAAM;AAAA,IACnB,OAAO,KAAK,KAAK;AAAA,IACjB,UAAU,KAAK,QAAQ;AAAA,IACvB,iBAAiB,KAAK,eAAe;AAAA,IACrC,WAAW,KAAK,SAAS;AAAA,IACzB,UAAU,KAAK,QAAQ;AAAA,IACvB,cAAc,KAAK,YAAY;AAAA,IAC/B,QAAQ,KAAK,MAAM;AAAA,IACnB,SAAS,KAAK,OAAO;AAAA,IACrB,SAAS,KAAK,OAAO;AAAA,IACrB,OAAO,KAAK,KAAK;AAAA,IACjB,UAAU,gBAAgB,UAAU,IAAI;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,MAAM,UAAU;AACtB,aAAO,QAAQ;AAAA,QACb;AAAA,QACA,EAAE,IAAI,SAAS,MAAM,MAAM,SAAS,SAAS,WAAW,CAAC,GAAG,MAAM,SAAS,KAAK;AAAA,QAChF;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,OAAO,MAAM,WAAW,YAAY;AACxC,YAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,UAAU,WAAW,KAAK,GAAG,OAAO;AAC5E,UAAI,CAAC,KAAK,SAAU,OAAM,IAAI,MAAM,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,OAAO,EAAE;AAC/E,YAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,cAAc,OAAO;AAC7D,UAAI,QAAQ,WAAW,OAAQ,OAAM,IAAI,MAAM,eAAe,QAAQ,MAAM,EAAE;AAC9E,aAAO,QAAQ;AAAA,IACjB;AAAA,IACA,MAAM,QAAQ;AACZ,aAAO;AACP,YAAM,OAAO,IAAI,aAAa,EAAE,OAAO,OAAO;AAC9C,YAAM,QAAQ,QAAQ,OAAO;AAC7B,YAAM,OAAO,QAAQ,OAAO;AAC5B,YAAM,OAAO,QAAQ;AAAA,IACvB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/control.js

@@ -354,7 +354,10 @@ function createAgentControl(harness, target, deliveries, licks, scoops, skills,
         ...change.thinkingLevel ? { thinkingLevel: change.thinkingLevel } : {}
       },
       context
-    )
+    ),
+    async agentCommands(agentId, _context) {
+      return skills?.commandsFor(agentId) ?? [];
+    }
   };
 }
 export {

package/dist/control.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/control.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type AgentChange,\n  AssistantEntry,\n  type Conversation,\n  ConversationBusy,\n  type ConversationView,\n  type EntryId,\n  type EntryRecord,\n  type Harness,\n  type SubmissionId,\n  type UserInput,\n} from '@earendil-works/pi-durable';\nimport { answerText } from './agent.ts';\nimport type { Agents, ScoopRecord } from './agents.ts';\nimport { type ShownAttachment, splitUser, userParts } from './attachments.ts';\nimport type { ChangesRuntime } from './changes/index.ts';\nimport type { Cones } from './cone.ts';\nimport type { Deliveries } from './deliveries.ts';\nimport type { FreezerRuntime } from './freezer/index.ts';\nimport type { LickSources, Licks } from './licks/index.ts';\nimport { LICK_STATE_KIND } from './licks/state.ts';\nimport type { MemoryRuntime } from './memory/index.ts';\nimport type { Monitor } from './monitor/index.ts';\nimport type { Scoops, ScoopsRuntime } from './scoops/index.ts';\nimport { pinned, SECRETS_COMMAND, secretsEntry } from './secrets/extension.ts';\nimport type { SecretName } from './secrets/names.ts';\nimport { scrubItems, scrubText } from './secrets/scrub.ts';\nimport type {\n  AgentControl,\n  Created,\n  ImageRef,\n  LickResolved,\n  OperationError,\n  Rewound,\n  SendRequest,\n  SendResponse,\n  StoredImage,\n} from './services.ts';\nimport type { SkillsRuntime } from './skills/index.ts';\nimport type { SprinklesRuntime } from './sprinkles/index.ts';\nimport { saverFor, type Uploads } from './uploads.ts';\n\nexport interface HostLicks {\n  licks: Licks;\n  sources: LickSources;\n}\n\nexport interface HostScoops {\n  scoops: Scoops;\n  runtime: ScoopsRuntime;\n}\n\ntype WithAgents = { agents?: Agents };\n\nexport function readable(out: string): string {\n  const text = out.replace(/^(?:sub)?agent: /, '').trim();\n  const sentence = text.charAt(0).toUpperCase() + text.slice(1);\n  return /[.!?]$/.test(sentence) ? sentence : `${sentence}.`;\n}\n\nfunction created(run: () => Promise<string>): Promise<Created> {\n  return run().then(\n    (id) => ({ id, error: null }),\n    (error: Error) => ({ id: null, error: error.message })\n  );\n}\n\nfunction freezerControl(\n  freezer: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'> | undefined\n): Pick<AgentControl, 'freeze' | 'newChat' | 'thaw' | 'discard'> {\n  const needed = () => {\n    if (!freezer) throw new Error('This agent has no freezer.');\n    return freezer;\n  };\n  return {\n    freeze: (agentId, context) => created(async () => needed().freeze(agentId, context)),\n    newChat: (agentId, context) =>\n      created(async () => (await needed().newChat(agentId, context)) ?? ''),\n    thaw: (id, context) => created(async () => needed().thaw(id, context)),\n    discard: (id, context) =>\n      created(async () => {\n        await needed().discard(id, context);\n        return id;\n      }),\n  };\n}\n\nfunction changesControl(\n  changes: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'> | undefined\n): Pick<AgentControl, 'changesOpen' | 'changeAccept' | 'changeRevert'> {\n  const needed = () => {\n    if (!changes) throw new Error('This agent tracks no changes.');\n    return changes;\n  };\n  const done = (path: string, run: (runtime: NonNullable<typeof changes>) => Promise<void>) =>\n    created(async () => {\n      await run(needed());\n      return path;\n    });\n  return {\n    changesOpen: async (context) => changes?.open(context),\n    changeAccept: (path, context) => done(path, (runtime) => runtime.accept(path, context)),\n    changeRevert: (path, context) => done(path, (runtime) => runtime.revert(path, context)),\n  };\n}\n\nfunction memoryControl(\n  memory: Pick<MemoryRuntime, 'save' | 'remove'> | undefined\n): Pick<AgentControl, 'memorySave' | 'memoryRemove'> {\n  return {\n    async memorySave(draft, context) {\n      if (!memory) throw new Error('This agent has no memory.');\n      const { id, ...rest } = draft;\n      return memory.save({ ...rest, ...(id ? { id } : {}) }, context);\n    },\n    async memoryRemove(id, context) {\n      return { removed: memory ? await memory.remove(id, context) : false };\n    },\n  };\n}\n\nfunction sprinkleControl(\n  sprinkles: Pick<SprinklesRuntime, 'send' | 'call'> | undefined\n): Pick<AgentControl, 'sprinkleSend' | 'sprinkleCall'> {\n  return {\n    sprinkleSend: async (id, payload, context) =>\n      sprinkles ? sprinkles.send(id, payload, context) : { delivered: false },\n    async sprinkleCall(id, method, args, context) {\n      if (!sprinkles) throw new Error('This agent has no sprinkles.');\n      return sprinkles.call(id, method, args, context);\n    },\n  };\n}\n\nexport function submissionId(value: string): SubmissionId | undefined {\n  const id = Number(value);\n  return /^[1-9][0-9]*$/.test(value) && Number.isSafeInteger(id) ? (id as SubmissionId) : undefined;\n}\n\nfunction operationError(error: unknown): OperationError {\n  if (error instanceof ConversationBusy) return { code: 'busy', message: error.message };\n  return { code: 'failed', message: error instanceof Error ? error.message : String(error) };\n}\n\nasync function accepted(operation: () => Promise<{ id: number } | number>): Promise<SendResponse> {\n  try {\n    const result = await operation();\n    const id = typeof result === 'number' ? result : result.id;\n    return { accepted: true, submissionId: String(id), error: null };\n  } catch (error) {\n    return { accepted: false, submissionId: null, error: operationError(error) };\n  }\n}\n\nfunction cones(target: Conversation | Cones): Cones {\n  if ('cone' in target) return target;\n  return {\n    cone: () => target,\n    switchCone: async () => {\n      throw new Error('this conversation has no cone to rewind');\n    },\n  };\n}\n\ninterface Turn {\n  text: string;\n  attachments: ShownAttachment[];\n  at: EntryId | null;\n  files: boolean;\n}\n\ntype Block = { type?: string; name?: string };\n\nconst WRITERS = ['write', 'edit', 'bash', 'codemode'];\n\nfunction writesIn(entries: readonly EntryRecord[]): boolean {\n  return entries.some((entry) =>\n    (entry.model ?? []).some(\n      (message) =>\n        Array.isArray(message.content) &&\n        (message.content as Block[]).some(\n          (block) => block.type === 'toolCall' && WRITERS.includes(String(block.name))\n        )\n    )\n  );\n}\n\nfunction lastTurn(view: ConversationView, messageId: string | null): Turn | null {\n  const { entries } = view;\n  const target = entries.findIndex((entry) => `e${entry.id}` === messageId);\n  if (target < 0) return null;\n  const turn = entries.slice(0, target).findLastIndex((entry) => entry.kind === 'pi.user');\n  if (turn < 0) return null;\n  const user = entries[turn] as EntryRecord;\n  return {\n    ...splitUser(user.model?.[0]?.content),\n    at: entries[turn - 1]?.id ?? null,\n    files: writesIn(entries.slice(turn)),\n  };\n}\n\nfunction busy(view: ConversationView): boolean {\n  const live = view.docs['pi.live'] as { run?: unknown } | undefined;\n  const inbox = view.docs['pi.inbox'] as { items?: unknown[] } | undefined;\n  return Boolean(live?.run) || Boolean(inbox?.items?.length);\n}\n\ntype RewindDeps = {\n  harness: Harness;\n  agents?: Agents;\n  cone: Cones;\n  scoops?: HostScoops;\n};\n\nasync function turnIn(\n  harness: Harness,\n  conversation: Conversation,\n  messageId: string | null,\n  context: Context\n): Promise<{ turn: Turn; view: ConversationView } | Rewound> {\n  const attached = await conversation.viewState(context);\n  const view = attached.value;\n  attached.dispose();\n  const pending = (await harness.inspect(context)).submissions.some(\n    (submission) => submission.conversationId === conversation.id\n  );\n  if (pending || busy(view)) return { done: false, text: null, reason: 'busy' };\n  const turn = lastTurn(view, messageId);\n  return turn ? { turn, view } : { done: false, text: null, reason: 'no-turn' };\n}\n\nasync function forkAt(\n  harness: Harness,\n  conversation: Conversation,\n  found: { turn: Turn },\n  context: Context\n): Promise<Conversation> {\n  const ownership = { kind: 'ownerless' } as const;\n  if (found.turn.at !== null) return conversation.fork(found.turn.at, { ownership }, context);\n  const agent = await conversation.agent(context);\n  const change: AgentChange = {\n    model: agent.model ?? null,\n    thinkingLevel: agent.thinkingLevel,\n    extensions: agent.extensions,\n    tools: agent.tools,\n    instructions: agent.instructions ?? null,\n    cwd: agent.cwd ?? null,\n  };\n  return harness.createConversation({ ownership, agent: pinned(change) }, context);\n}\n\nasync function rewindAgent(\n  deps: RewindDeps,\n  agentId: string | null,\n  messageId: string | null,\n  context: Context\n): Promise<Rewound> {\n  const { harness, agents, cone, scoops } = deps;\n  const scoop = agentId && agents ? agents.state().scoops[agentId] : undefined;\n  if (agentId && agents && !scoop && agentId !== agents.activeCone())\n    await agents.selectCone(agentId, context);\n  const conversation =\n    scoop && agents\n      ? ((await agents.conversation(agentId as string, context)) as Conversation)\n      : cone.cone();\n  const found = await turnIn(harness, conversation, messageId, context);\n  if ('reason' in found) return found;\n  const fork = await forkAt(harness, conversation, found, context);\n  const changed =\n    scoops && agents && !scoop\n      ? await scoops.scoops.rewound(agents.activeCone(), fork, context)\n      : { stopped: [], restored: [] };\n  const files = found.turn.files;\n  await fork.submit(\n    { type: 'write', entry: { kind: 'slicc.rewound', data: { turns: 1, ...changed, files } } },\n    context\n  );\n  if (scoop && agents)\n    await agents.update((_tx, state) => {\n      const record = state.scoops[agentId as string] as ScoopRecord;\n      record.conversation = fork.id;\n      delete record.title;\n      delete record.titled;\n    }, context);\n  else await cone.switchCone(fork, context);\n  const { attachments } = found.turn;\n  return {\n    done: true,\n    text: found.turn.text,\n    reason: null,\n    ...(attachments.length ? { attachments } : {}),\n  };\n}\n\ntype Picture = { type?: string; data?: string; mimeType?: string };\n\nasync function storedImage(\n  harness: Harness,\n  ref: ImageRef,\n  context: Context\n): Promise<StoredImage> {\n  const entry = await harness.commit((tx) => tx.entry(ref.entry as EntryId), context);\n  const content = entry?.model?.[ref.message]?.content;\n  const part = Array.isArray(content) ? (content[ref.part] as Picture | undefined) : undefined;\n  return part?.type === 'image' && part.data && part.mimeType\n    ? { data: part.data, mimeType: part.mimeType }\n    : { data: null, mimeType: null };\n}\n\nasync function contentOf(\n  text: string,\n  request: SendRequest,\n  conversation: Conversation,\n  uploads: Uploads | undefined,\n  context: Context\n): Promise<UserInput> {\n  if (!request.attachments?.length) return scrubText(text);\n  const saver = await saverFor(conversation, uploads, context);\n  return scrubItems(await userParts(text, request.attachments, saver));\n}\n\nexport function createAgentControl(\n  harness: Harness,\n  target: Conversation | Cones,\n  deliveries?: Deliveries,\n  licks?: HostLicks,\n  scoops?: HostScoops,\n  skills?: Pick<SkillsRuntime, 'expand'>,\n  sprinkles?: Pick<SprinklesRuntime, 'send' | 'call'>,\n  memory?: Pick<MemoryRuntime, 'save' | 'remove'>,\n  freezer?: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'>,\n  changes?: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'>,\n  monitor?: Pick<Monitor, 'open' | 'close'>,\n  secrets?: () => readonly SecretName[],\n  uploads?: Uploads\n): AgentControl {\n  const cone = cones(target);\n  const current = () => cone.cone();\n  const agents = (target as WithAgents).agents;\n  const conversationFor = async (agentId: string | null | undefined, context: Context) => {\n    if (!agentId || !agents) return current();\n    const found = await agents.conversation(agentId, context);\n    if (!found) throw new Error(`There is no agent ${agentId}.`);\n    return found;\n  };\n  const withdraw = async (conversation: Conversation, id: string, context: Context) => {\n    const parsed = submissionId(id);\n    if (parsed === undefined) return { outcome: 'not_found' as const };\n    const result = await harness.abortSubmission(parsed, context, conversation.id);\n    if (result === 'aborted') return { outcome: 'withdrawn' as const };\n    return {\n      outcome: result === 'not_found' ? ('not_found' as const) : ('already_placed' as const),\n    };\n  };\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n  const rewindIn = (agentId: string | null, messageId: string | null, context: Context) =>\n    serial(() => rewindAgent({ harness, agents, cone, scoops }, agentId, messageId, context));\n  const decide = (\n    agentId: string | null,\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved> =>\n    serial(async () => {\n      if (!licks) return { done: false, text: null, error: 'this agent has no licks' };\n      const action = state === 'confirmed' ? 'confirm' : 'dismiss';\n      try {\n        const conversation = await conversationFor(agentId, context);\n        const text = await licks.licks.decide(conversation, lickId, action, undefined, context);\n        await conversation.submit(\n          {\n            type: 'write',\n            entry: {\n              kind: LICK_STATE_KIND,\n              data: { lick: lickId, state, by: 'user' },\n              model: [\n                {\n                  role: 'user',\n                  content: `The user ${state} lick ${lickId}: ${text}`,\n                  timestamp: Date.now(),\n                },\n              ],\n            },\n          },\n          context\n        );\n        return { done: true, text, error: null };\n      } catch (error) {\n        return { done: false, text: null, error: (error as Error).message };\n      }\n    });\n  return {\n    send(request, context) {\n      return serial(async () => {\n        if (secrets && request.text.trim() === SECRETS_COMMAND)\n          return accepted(async () =>\n            (await conversationFor(request.agentId, context)).submit(\n              { type: 'write', entry: secretsEntry(secrets()) },\n              context\n            )\n          );\n        const response = await accepted(async () => {\n          const conversation = await conversationFor(request.agentId, context);\n          const expanded = skills\n            ? await skills.expand(request.text, context, conversation.id)\n            : request.text;\n          return conversation.submit(\n            {\n              type: 'input',\n              content: await contentOf(expanded, request, conversation, uploads, context),\n              whenBusy: request.whenBusy,\n              ...(request.requestId ? { requestId: request.requestId } : {}),\n            },\n            context\n          );\n        });\n        const id = response.submissionId === null ? undefined : submissionId(response.submissionId);\n        if (id !== undefined) deliveries?.expect(id, request.whenBusy);\n        return response;\n      });\n    },\n    rewind: (messageId, context) => rewindIn(null, messageId, context),\n    rewindAgent: (agentId, messageId, context) => rewindIn(agentId, messageId, context),\n\n    async wait(id, context) {\n      const parsed = submissionId(id);\n      const submission =\n        parsed === undefined ? undefined : await harness.submission(parsed, context);\n      if (!submission) throw new Error(`unknown submission ${id}`);\n      const settled = await submission.wait(context);\n      const { answer, reason } = settled as { answer?: EntryId; reason?: string };\n      if (answer === undefined) return { status: 'unanswered', text: null, reason: String(reason) };\n      const entry = await harness.commit((tx) => tx.entry(AssistantEntry, answer), context);\n      return { status: 'done', text: answerText(entry?.model?.[0]?.content), reason: null };\n    },\n    withdraw: (id, context) => withdraw(current(), id, context),\n    ...sprinkleControl(sprinkles),\n    ...memoryControl(memory),\n    ...freezerControl(freezer),\n    ...changesControl(changes),\n    monitorOpen: async (lease, resync, context) =>\n      monitor ? monitor.open(lease, resync, context) : { lease: '', ttlMs: 0 },\n    monitorClose: async (lease, context) => monitor?.close(lease, context),\n    image: (ref, context) => storedImage(harness, ref, context),\n    async unqueue(agentId, id, context) {\n      return withdraw(await conversationFor(agentId, context), id, context);\n    },\n    abort: (context) => current().abort(context),\n    compact: (instructions, context) =>\n      accepted(() => current().compact(instructions ?? undefined, context)),\n    compactAgent: (agentId, instructions, context) =>\n      accepted(async () =>\n        (await conversationFor(agentId, context)).compact(instructions ?? undefined, context)\n      ),\n    reset: (handoff, context) => current().reset(handoff ?? undefined, context),\n    resolveLick: (lickId, state, context) => decide(null, lickId, state, context),\n    resolveAgentLick: (agentId, lickId, state, context) => decide(agentId, lickId, state, context),\n    async webhook(name, delivery, context) {\n      const delivered = licks\n        ? await licks.sources.webhook(\n            name,\n            {\n              ...(delivery.id ? { id: delivery.id } : {}),\n              headers: delivery.headers,\n              body: delivery.body,\n            },\n            context\n          )\n        : false;\n      return { delivered };\n    },\n    async stopAgent(agentId, context) {\n      await (await conversationFor(agentId, context)).abort(context);\n    },\n    async selectCone(agentId, context) {\n      await agents?.selectCone(agentId, context);\n    },\n    createCone(name, context) {\n      return created(async () => {\n        if (!agents) throw new Error('This agent has a single cone.');\n        return agents.createCone(name, context);\n      });\n    },\n    createScoop(parentId, name, context) {\n      return created(async () => {\n        if (!scoops) throw new Error('This agent has no scoops.');\n        const roles = await scoops.runtime.roles(context);\n        const answer = await scoops.scoops.spawn(\n          { cone: parentId, name, prompts: [], fromAgent: false, limits: roles.limits },\n          context\n        );\n        if (answer.code !== 0) throw new Error(readable(answer.out));\n        return `scoop:${answer.out.trim()}`;\n      });\n    },\n    drop(agentId, context) {\n      return created(async () => {\n        if (!scoops) throw new Error('This agent has no scoops.');\n        const answer = await scoops.scoops.stop(agentId, false, context);\n        if (answer.code !== 0) throw new Error(readable(answer.out));\n        return agentId;\n      });\n    },\n    configure: async (change, context) =>\n      (await conversationFor(change.agentId, context)).configure(\n        {\n          ...(change.model ? { model: change.model } : {}),\n          ...(change.thinkingLevel ? { thinkingLevel: change.thinkingLevel } : {}),\n        },\n        context\n      ),\n  };\n}\n"],
-  "mappings": "AACA;AAAA,EAEE;AAAA,EAEA;AAAA,OAOK;AACP,SAAS,kBAAkB;AAE3B,SAA+B,WAAW,iBAAiB;AAM3D,SAAS,uBAAuB;AAIhC,SAAS,QAAQ,iBAAiB,oBAAoB;AAEtD,SAAS,YAAY,iBAAiB;AActC,SAAS,gBAA8B;AAchC,SAAS,SAAS,KAAqB;AAC5C,QAAM,OAAO,IAAI,QAAQ,oBAAoB,EAAE,EAAE,KAAK;AACtD,QAAM,WAAW,KAAK,OAAO,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC;AAC5D,SAAO,SAAS,KAAK,QAAQ,IAAI,WAAW,GAAG,QAAQ;AACzD;AAEA,SAAS,QAAQ,KAA8C;AAC7D,SAAO,IAAI,EAAE;AAAA,IACX,CAAC,QAAQ,EAAE,IAAI,OAAO,KAAK;AAAA,IAC3B,CAAC,WAAkB,EAAE,IAAI,MAAM,OAAO,MAAM,QAAQ;AAAA,EACtD;AACF;AAEA,SAAS,eACP,SAC+D;AAC/D,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,4BAA4B;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ,CAAC,SAAS,YAAY,QAAQ,YAAY,OAAO,EAAE,OAAO,SAAS,OAAO,CAAC;AAAA,IACnF,SAAS,CAAC,SAAS,YACjB,QAAQ,YAAa,MAAM,OAAO,EAAE,QAAQ,SAAS,OAAO,KAAM,EAAE;AAAA,IACtE,MAAM,CAAC,IAAI,YAAY,QAAQ,YAAY,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC;AAAA,IACrE,SAAS,CAAC,IAAI,YACZ,QAAQ,YAAY;AAClB,YAAM,OAAO,EAAE,QAAQ,IAAI,OAAO;AAClC,aAAO;AAAA,IACT,CAAC;AAAA,EACL;AACF;AAEA,SAAS,eACP,SACqE;AACrE,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAC7D,WAAO;AAAA,EACT;AACA,QAAM,OAAO,CAAC,MAAc,QAC1B,QAAQ,YAAY;AAClB,UAAM,IAAI,OAAO,CAAC;AAClB,WAAO;AAAA,EACT,CAAC;AACH,SAAO;AAAA,IACL,aAAa,OAAO,YAAY,SAAS,KAAK,OAAO;AAAA,IACrD,cAAc,CAAC,MAAM,YAAY,KAAK,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,OAAO,CAAC;AAAA,IACtF,cAAc,CAAC,MAAM,YAAY,KAAK,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,OAAO,CAAC;AAAA,EACxF;AACF;AAEA,SAAS,cACP,QACmD;AACnD,SAAO;AAAA,IACL,MAAM,WAAW,OAAO,SAAS;AAC/B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,YAAM,EAAE,IAAI,GAAG,KAAK,IAAI;AACxB,aAAO,OAAO,KAAK,EAAE,GAAG,MAAM,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC,EAAG,GAAG,OAAO;AAAA,IAChE;AAAA,IACA,MAAM,aAAa,IAAI,SAAS;AAC9B,aAAO,EAAE,SAAS,SAAS,MAAM,OAAO,OAAO,IAAI,OAAO,IAAI,MAAM;AAAA,IACtE;AAAA,EACF;AACF;AAEA,SAAS,gBACP,WACqD;AACrD,SAAO;AAAA,IACL,cAAc,OAAO,IAAI,SAAS,YAChC,YAAY,UAAU,KAAK,IAAI,SAAS,OAAO,IAAI,EAAE,WAAW,MAAM;AAAA,IACxE,MAAM,aAAa,IAAI,QAAQ,MAAM,SAAS;AAC5C,UAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8BAA8B;AAC9D,aAAO,UAAU,KAAK,IAAI,QAAQ,MAAM,OAAO;AAAA,IACjD;AAAA,EACF;AACF;AAEO,SAAS,aAAa,OAAyC;AACpE,QAAM,KAAK,OAAO,KAAK;AACvB,SAAO,gBAAgB,KAAK,KAAK,KAAK,OAAO,cAAc,EAAE,IAAK,KAAsB;AAC1F;AAEA,SAAS,eAAe,OAAgC;AACtD,MAAI,iBAAiB,iBAAkB,QAAO,EAAE,MAAM,QAAQ,SAAS,MAAM,QAAQ;AACrF,SAAO,EAAE,MAAM,UAAU,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AAC3F;AAEA,eAAe,SAAS,WAA0E;AAChG,MAAI;AACF,UAAM,SAAS,MAAM,UAAU;AAC/B,UAAM,KAAK,OAAO,WAAW,WAAW,SAAS,OAAO;AACxD,WAAO,EAAE,UAAU,MAAM,cAAc,OAAO,EAAE,GAAG,OAAO,KAAK;AAAA,EACjE,SAAS,OAAO;AACd,WAAO,EAAE,UAAU,OAAO,cAAc,MAAM,OAAO,eAAe,KAAK,EAAE;AAAA,EAC7E;AACF;AAEA,SAAS,MAAM,QAAqC;AAClD,MAAI,UAAU,OAAQ,QAAO;AAC7B,SAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,YAAY,YAAY;AACtB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAAA,EACF;AACF;AAWA,MAAM,UAAU,CAAC,SAAS,QAAQ,QAAQ,UAAU;AAEpD,SAAS,SAAS,SAA0C;AAC1D,SAAO,QAAQ;AAAA,IAAK,CAAC,WAClB,MAAM,SAAS,CAAC,GAAG;AAAA,MAClB,CAAC,YACC,MAAM,QAAQ,QAAQ,OAAO,KAC5B,QAAQ,QAAoB;AAAA,QAC3B,CAAC,UAAU,MAAM,SAAS,cAAc,QAAQ,SAAS,OAAO,MAAM,IAAI,CAAC;AAAA,MAC7E;AAAA,IACJ;AAAA,EACF;AACF;AAEA,SAAS,SAAS,MAAwB,WAAuC;AAC/E,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,SAAS,QAAQ,UAAU,CAAC,UAAU,IAAI,MAAM,EAAE,OAAO,SAAS;AACxE,MAAI,SAAS,EAAG,QAAO;AACvB,QAAM,OAAO,QAAQ,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,UAAU,MAAM,SAAS,SAAS;AACvF,MAAI,OAAO,EAAG,QAAO;AACrB,QAAM,OAAO,QAAQ,IAAI;AACzB,SAAO;AAAA,IACL,GAAG,UAAU,KAAK,QAAQ,CAAC,GAAG,OAAO;AAAA,IACrC,IAAI,QAAQ,OAAO,CAAC,GAAG,MAAM;AAAA,IAC7B,OAAO,SAAS,QAAQ,MAAM,IAAI,CAAC;AAAA,EACrC;AACF;AAEA,SAAS,KAAK,MAAiC;AAC7C,QAAM,OAAO,KAAK,KAAK,SAAS;AAChC,QAAM,QAAQ,KAAK,KAAK,UAAU;AAClC,SAAO,QAAQ,MAAM,GAAG,KAAK,QAAQ,OAAO,OAAO,MAAM;AAC3D;AASA,eAAe,OACb,SACA,cACA,WACA,SAC2D;AAC3D,QAAM,WAAW,MAAM,aAAa,UAAU,OAAO;AACrD,QAAM,OAAO,SAAS;AACtB,WAAS,QAAQ;AACjB,QAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO,GAAG,YAAY;AAAA,IAC3D,CAAC,eAAe,WAAW,mBAAmB,aAAa;AAAA,EAC7D;AACA,MAAI,WAAW,KAAK,IAAI,EAAG,QAAO,EAAE,MAAM,OAAO,MAAM,MAAM,QAAQ,OAAO;AAC5E,QAAM,OAAO,SAAS,MAAM,SAAS;AACrC,SAAO,OAAO,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,OAAO,MAAM,MAAM,QAAQ,UAAU;AAC9E;AAEA,eAAe,OACb,SACA,cACA,OACA,SACuB;AACvB,QAAM,YAAY,EAAE,MAAM,YAAY;AACtC,MAAI,MAAM,KAAK,OAAO,KAAM,QAAO,aAAa,KAAK,MAAM,KAAK,IAAI,EAAE,UAAU,GAAG,OAAO;AAC1F,QAAM,QAAQ,MAAM,aAAa,MAAM,OAAO;AAC9C,QAAM,SAAsB;AAAA,IAC1B,OAAO,MAAM,SAAS;AAAA,IACtB,eAAe,MAAM;AAAA,IACrB,YAAY,MAAM;AAAA,IAClB,OAAO,MAAM;AAAA,IACb,cAAc,MAAM,gBAAgB;AAAA,IACpC,KAAK,MAAM,OAAO;AAAA,EACpB;AACA,SAAO,QAAQ,mBAAmB,EAAE,WAAW,OAAO,OAAO,MAAM,EAAE,GAAG,OAAO;AACjF;AAEA,eAAe,YACb,MACA,SACA,WACA,SACkB;AAClB,QAAM,EAAE,SAAS,QAAQ,MAAM,OAAO,IAAI;AAC1C,QAAM,QAAQ,WAAW,SAAS,OAAO,MAAM,EAAE,OAAO,OAAO,IAAI;AACnE,MAAI,WAAW,UAAU,CAAC,SAAS,YAAY,OAAO,WAAW;AAC/D,UAAM,OAAO,WAAW,SAAS,OAAO;AAC1C,QAAM,eACJ,SAAS,SACH,MAAM,OAAO,aAAa,SAAmB,OAAO,IACtD,KAAK,KAAK;AAChB,QAAM,QAAQ,MAAM,OAAO,SAAS,cAAc,WAAW,OAAO;AACpE,MAAI,YAAY,MAAO,QAAO;AAC9B,QAAM,OAAO,MAAM,OAAO,SAAS,cAAc,OAAO,OAAO;AAC/D,QAAM,UACJ,UAAU,UAAU,CAAC,QACjB,MAAM,OAAO,OAAO,QAAQ,OAAO,WAAW,GAAG,MAAM,OAAO,IAC9D,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,EAAE;AAClC,QAAM,QAAQ,MAAM,KAAK;AACzB,QAAM,KAAK;AAAA,IACT,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,iBAAiB,MAAM,EAAE,OAAO,GAAG,GAAG,SAAS,MAAM,EAAE,EAAE;AAAA,IACzF;AAAA,EACF;AACA,MAAI,SAAS;AACX,UAAM,OAAO,OAAO,CAAC,KAAK,UAAU;AAClC,YAAM,SAAS,MAAM,OAAO,OAAiB;AAC7C,aAAO,eAAe,KAAK;AAC3B,aAAO,OAAO;AACd,aAAO,OAAO;AAAA,IAChB,GAAG,OAAO;AAAA,MACP,OAAM,KAAK,WAAW,MAAM,OAAO;AACxC,QAAM,EAAE,YAAY,IAAI,MAAM;AAC9B,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,MAAM,KAAK;AAAA,IACjB,QAAQ;AAAA,IACR,GAAI,YAAY,SAAS,EAAE,YAAY,IAAI,CAAC;AAAA,EAC9C;AACF;AAIA,eAAe,YACb,SACA,KACA,SACsB;AACtB,QAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC,OAAO,GAAG,MAAM,IAAI,KAAgB,GAAG,OAAO;AAClF,QAAM,UAAU,OAAO,QAAQ,IAAI,OAAO,GAAG;AAC7C,QAAM,OAAO,MAAM,QAAQ,OAAO,IAAK,QAAQ,IAAI,IAAI,IAA4B;AACnF,SAAO,MAAM,SAAS,WAAW,KAAK,QAAQ,KAAK,WAC/C,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK,SAAS,IAC3C,EAAE,MAAM,MAAM,UAAU,KAAK;AACnC;AAEA,eAAe,UACb,MACA,SACA,cACA,SACA,SACoB;AACpB,MAAI,CAAC,QAAQ,aAAa,OAAQ,QAAO,UAAU,IAAI;AACvD,QAAM,QAAQ,MAAM,SAAS,cAAc,SAAS,OAAO;AAC3D,SAAO,WAAW,MAAM,UAAU,MAAM,QAAQ,aAAa,KAAK,CAAC;AACrE;AAEO,SAAS,mBACd,SACA,QACA,YACA,OACA,QACA,QACA,WACA,QACA,SACA,SACA,SACA,SACA,SACc;AACd,QAAM,OAAO,MAAM,MAAM;AACzB,QAAM,UAAU,MAAM,KAAK,KAAK;AAChC,QAAM,SAAU,OAAsB;AACtC,QAAM,kBAAkB,OAAO,SAAoC,YAAqB;AACtF,QAAI,CAAC,WAAW,CAAC,OAAQ,QAAO,QAAQ;AACxC,UAAM,QAAQ,MAAM,OAAO,aAAa,SAAS,OAAO;AACxD,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,OAAO,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,WAAW,OAAO,cAA4B,IAAY,YAAqB;AACnF,UAAM,SAAS,aAAa,EAAE;AAC9B,QAAI,WAAW,OAAW,QAAO,EAAE,SAAS,YAAqB;AACjE,UAAM,SAAS,MAAM,QAAQ,gBAAgB,QAAQ,SAAS,aAAa,EAAE;AAC7E,QAAI,WAAW,UAAW,QAAO,EAAE,SAAS,YAAqB;AACjE,WAAO;AAAA,MACL,SAAS,WAAW,cAAe,cAAyB;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AACA,QAAM,WAAW,CAAC,SAAwB,WAA0B,YAClE,OAAO,MAAM,YAAY,EAAE,SAAS,QAAQ,MAAM,OAAO,GAAG,SAAS,WAAW,OAAO,CAAC;AAC1F,QAAM,SAAS,CACb,SACA,QACA,OACA,YAEA,OAAO,YAAY;AACjB,QAAI,CAAC,MAAO,QAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,0BAA0B;AAC/E,UAAM,SAAS,UAAU,cAAc,YAAY;AACnD,QAAI;AACF,YAAM,eAAe,MAAM,gBAAgB,SAAS,OAAO;AAC3D,YAAM,OAAO,MAAM,MAAM,MAAM,OAAO,cAAc,QAAQ,QAAQ,QAAW,OAAO;AACtF,YAAM,aAAa;AAAA,QACjB;AAAA,UACE,MAAM;AAAA,UACN,OAAO;AAAA,YACL,MAAM;AAAA,YACN,MAAM,EAAE,MAAM,QAAQ,OAAO,IAAI,OAAO;AAAA,YACxC,OAAO;AAAA,cACL;AAAA,gBACE,MAAM;AAAA,gBACN,SAAS,YAAY,KAAK,SAAS,MAAM,KAAK,IAAI;AAAA,gBAClD,WAAW,KAAK,IAAI;AAAA,cACtB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,aAAO,EAAE,MAAM,MAAM,MAAM,OAAO,KAAK;AAAA,IACzC,SAAS,OAAO;AACd,aAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAQ,MAAgB,QAAQ;AAAA,IACpE;AAAA,EACF,CAAC;AACH,SAAO;AAAA,IACL,KAAK,SAAS,SAAS;AACrB,aAAO,OAAO,YAAY;AACxB,YAAI,WAAW,QAAQ,KAAK,KAAK,MAAM;AACrC,iBAAO;AAAA,YAAS,aACb,MAAM,gBAAgB,QAAQ,SAAS,OAAO,GAAG;AAAA,cAChD,EAAE,MAAM,SAAS,OAAO,aAAa,QAAQ,CAAC,EAAE;AAAA,cAChD;AAAA,YACF;AAAA,UACF;AACF,cAAM,WAAW,MAAM,SAAS,YAAY;AAC1C,gBAAM,eAAe,MAAM,gBAAgB,QAAQ,SAAS,OAAO;AACnE,gBAAM,WAAW,SACb,MAAM,OAAO,OAAO,QAAQ,MAAM,SAAS,aAAa,EAAE,IAC1D,QAAQ;AACZ,iBAAO,aAAa;AAAA,YAClB;AAAA,cACE,MAAM;AAAA,cACN,SAAS,MAAM,UAAU,UAAU,SAAS,cAAc,SAAS,OAAO;AAAA,cAC1E,UAAU,QAAQ;AAAA,cAClB,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,YAC9D;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AACD,cAAM,KAAK,SAAS,iBAAiB,OAAO,SAAY,aAAa,SAAS,YAAY;AAC1F,YAAI,OAAO,OAAW,aAAY,OAAO,IAAI,QAAQ,QAAQ;AAC7D,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,CAAC,WAAW,YAAY,SAAS,MAAM,WAAW,OAAO;AAAA,IACjE,aAAa,CAAC,SAAS,WAAW,YAAY,SAAS,SAAS,WAAW,OAAO;AAAA,IAElF,MAAM,KAAK,IAAI,SAAS;AACtB,YAAM,SAAS,aAAa,EAAE;AAC9B,YAAM,aACJ,WAAW,SAAY,SAAY,MAAM,QAAQ,WAAW,QAAQ,OAAO;AAC7E,UAAI,CAAC,WAAY,OAAM,IAAI,MAAM,sBAAsB,EAAE,EAAE;AAC3D,YAAM,UAAU,MAAM,WAAW,KAAK,OAAO;AAC7C,YAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,UAAI,WAAW,OAAW,QAAO,EAAE,QAAQ,cAAc,MAAM,MAAM,QAAQ,OAAO,MAAM,EAAE;AAC5F,YAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,OAAO;AACpF,aAAO,EAAE,QAAQ,QAAQ,MAAM,WAAW,OAAO,QAAQ,CAAC,GAAG,OAAO,GAAG,QAAQ,KAAK;AAAA,IACtF;AAAA,IACA,UAAU,CAAC,IAAI,YAAY,SAAS,QAAQ,GAAG,IAAI,OAAO;AAAA,IAC1D,GAAG,gBAAgB,SAAS;AAAA,IAC5B,GAAG,cAAc,MAAM;AAAA,IACvB,GAAG,eAAe,OAAO;AAAA,IACzB,GAAG,eAAe,OAAO;AAAA,IACzB,aAAa,OAAO,OAAO,QAAQ,YACjC,UAAU,QAAQ,KAAK,OAAO,QAAQ,OAAO,IAAI,EAAE,OAAO,IAAI,OAAO,EAAE;AAAA,IACzE,cAAc,OAAO,OAAO,YAAY,SAAS,MAAM,OAAO,OAAO;AAAA,IACrE,OAAO,CAAC,KAAK,YAAY,YAAY,SAAS,KAAK,OAAO;AAAA,IAC1D,MAAM,QAAQ,SAAS,IAAI,SAAS;AAClC,aAAO,SAAS,MAAM,gBAAgB,SAAS,OAAO,GAAG,IAAI,OAAO;AAAA,IACtE;AAAA,IACA,OAAO,CAAC,YAAY,QAAQ,EAAE,MAAM,OAAO;AAAA,IAC3C,SAAS,CAAC,cAAc,YACtB,SAAS,MAAM,QAAQ,EAAE,QAAQ,gBAAgB,QAAW,OAAO,CAAC;AAAA,IACtE,cAAc,CAAC,SAAS,cAAc,YACpC;AAAA,MAAS,aACN,MAAM,gBAAgB,SAAS,OAAO,GAAG,QAAQ,gBAAgB,QAAW,OAAO;AAAA,IACtF;AAAA,IACF,OAAO,CAAC,SAAS,YAAY,QAAQ,EAAE,MAAM,WAAW,QAAW,OAAO;AAAA,IAC1E,aAAa,CAAC,QAAQ,OAAO,YAAY,OAAO,MAAM,QAAQ,OAAO,OAAO;AAAA,IAC5E,kBAAkB,CAAC,SAAS,QAAQ,OAAO,YAAY,OAAO,SAAS,QAAQ,OAAO,OAAO;AAAA,IAC7F,MAAM,QAAQ,MAAM,UAAU,SAAS;AACrC,YAAM,YAAY,QACd,MAAM,MAAM,QAAQ;AAAA,QAClB;AAAA,QACA;AAAA,UACE,GAAI,SAAS,KAAK,EAAE,IAAI,SAAS,GAAG,IAAI,CAAC;AAAA,UACzC,SAAS,SAAS;AAAA,UAClB,MAAM,SAAS;AAAA,QACjB;AAAA,QACA;AAAA,MACF,IACA;AACJ,aAAO,EAAE,UAAU;AAAA,IACrB;AAAA,IACA,MAAM,UAAU,SAAS,SAAS;AAChC,aAAO,MAAM,gBAAgB,SAAS,OAAO,GAAG,MAAM,OAAO;AAAA,IAC/D;AAAA,IACA,MAAM,WAAW,SAAS,SAAS;AACjC,YAAM,QAAQ,WAAW,SAAS,OAAO;AAAA,IAC3C;AAAA,IACA,WAAW,MAAM,SAAS;AACxB,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAC5D,eAAO,OAAO,WAAW,MAAM,OAAO;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,IACA,YAAY,UAAU,MAAM,SAAS;AACnC,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,cAAM,QAAQ,MAAM,OAAO,QAAQ,MAAM,OAAO;AAChD,cAAM,SAAS,MAAM,OAAO,OAAO;AAAA,UACjC,EAAE,MAAM,UAAU,MAAM,SAAS,CAAC,GAAG,WAAW,OAAO,QAAQ,MAAM,OAAO;AAAA,UAC5E;AAAA,QACF;AACA,YAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,SAAS,OAAO,GAAG,CAAC;AAC3D,eAAO,SAAS,OAAO,IAAI,KAAK,CAAC;AAAA,MACnC,CAAC;AAAA,IACH;AAAA,IACA,KAAK,SAAS,SAAS;AACrB,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,cAAM,SAAS,MAAM,OAAO,OAAO,KAAK,SAAS,OAAO,OAAO;AAC/D,YAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,SAAS,OAAO,GAAG,CAAC;AAC3D,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,WAAW,OAAO,QAAQ,aACvB,MAAM,gBAAgB,OAAO,SAAS,OAAO,GAAG;AAAA,MAC/C;AAAA,QACE,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,QAC9C,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;AAAA,MACxE;AAAA,MACA;AAAA,IACF;AAAA,EACJ;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type AgentChange,\n  AssistantEntry,\n  type Conversation,\n  ConversationBusy,\n  type ConversationView,\n  type EntryId,\n  type EntryRecord,\n  type Harness,\n  type SubmissionId,\n  type UserInput,\n} from '@earendil-works/pi-durable';\nimport { answerText } from './agent.ts';\nimport type { Agents, ScoopRecord } from './agents.ts';\nimport { type ShownAttachment, splitUser, userParts } from './attachments.ts';\nimport type { ChangesRuntime } from './changes/index.ts';\nimport type { Cones } from './cone.ts';\nimport type { Deliveries } from './deliveries.ts';\nimport type { FreezerRuntime } from './freezer/index.ts';\nimport type { LickSources, Licks } from './licks/index.ts';\nimport { LICK_STATE_KIND } from './licks/state.ts';\nimport type { MemoryRuntime } from './memory/index.ts';\nimport type { Monitor } from './monitor/index.ts';\nimport type { Scoops, ScoopsRuntime } from './scoops/index.ts';\nimport { pinned, SECRETS_COMMAND, secretsEntry } from './secrets/extension.ts';\nimport type { SecretName } from './secrets/names.ts';\nimport { scrubItems, scrubText } from './secrets/scrub.ts';\nimport type {\n  AgentControl,\n  Created,\n  ImageRef,\n  LickResolved,\n  OperationError,\n  Rewound,\n  SendRequest,\n  SendResponse,\n  StoredImage,\n} from './services.ts';\nimport type { SkillsRuntime } from './skills/index.ts';\nimport type { SprinklesRuntime } from './sprinkles/index.ts';\nimport { saverFor, type Uploads } from './uploads.ts';\n\nexport interface HostLicks {\n  licks: Licks;\n  sources: LickSources;\n}\n\nexport interface HostScoops {\n  scoops: Scoops;\n  runtime: ScoopsRuntime;\n}\n\ntype WithAgents = { agents?: Agents };\n\nexport function readable(out: string): string {\n  const text = out.replace(/^(?:sub)?agent: /, '').trim();\n  const sentence = text.charAt(0).toUpperCase() + text.slice(1);\n  return /[.!?]$/.test(sentence) ? sentence : `${sentence}.`;\n}\n\nfunction created(run: () => Promise<string>): Promise<Created> {\n  return run().then(\n    (id) => ({ id, error: null }),\n    (error: Error) => ({ id: null, error: error.message })\n  );\n}\n\nfunction freezerControl(\n  freezer: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'> | undefined\n): Pick<AgentControl, 'freeze' | 'newChat' | 'thaw' | 'discard'> {\n  const needed = () => {\n    if (!freezer) throw new Error('This agent has no freezer.');\n    return freezer;\n  };\n  return {\n    freeze: (agentId, context) => created(async () => needed().freeze(agentId, context)),\n    newChat: (agentId, context) =>\n      created(async () => (await needed().newChat(agentId, context)) ?? ''),\n    thaw: (id, context) => created(async () => needed().thaw(id, context)),\n    discard: (id, context) =>\n      created(async () => {\n        await needed().discard(id, context);\n        return id;\n      }),\n  };\n}\n\nfunction changesControl(\n  changes: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'> | undefined\n): Pick<AgentControl, 'changesOpen' | 'changeAccept' | 'changeRevert'> {\n  const needed = () => {\n    if (!changes) throw new Error('This agent tracks no changes.');\n    return changes;\n  };\n  const done = (path: string, run: (runtime: NonNullable<typeof changes>) => Promise<void>) =>\n    created(async () => {\n      await run(needed());\n      return path;\n    });\n  return {\n    changesOpen: async (context) => changes?.open(context),\n    changeAccept: (path, context) => done(path, (runtime) => runtime.accept(path, context)),\n    changeRevert: (path, context) => done(path, (runtime) => runtime.revert(path, context)),\n  };\n}\n\nfunction memoryControl(\n  memory: Pick<MemoryRuntime, 'save' | 'remove'> | undefined\n): Pick<AgentControl, 'memorySave' | 'memoryRemove'> {\n  return {\n    async memorySave(draft, context) {\n      if (!memory) throw new Error('This agent has no memory.');\n      const { id, ...rest } = draft;\n      return memory.save({ ...rest, ...(id ? { id } : {}) }, context);\n    },\n    async memoryRemove(id, context) {\n      return { removed: memory ? await memory.remove(id, context) : false };\n    },\n  };\n}\n\nfunction sprinkleControl(\n  sprinkles: Pick<SprinklesRuntime, 'send' | 'call'> | undefined\n): Pick<AgentControl, 'sprinkleSend' | 'sprinkleCall'> {\n  return {\n    sprinkleSend: async (id, payload, context) =>\n      sprinkles ? sprinkles.send(id, payload, context) : { delivered: false },\n    async sprinkleCall(id, method, args, context) {\n      if (!sprinkles) throw new Error('This agent has no sprinkles.');\n      return sprinkles.call(id, method, args, context);\n    },\n  };\n}\n\nexport function submissionId(value: string): SubmissionId | undefined {\n  const id = Number(value);\n  return /^[1-9][0-9]*$/.test(value) && Number.isSafeInteger(id) ? (id as SubmissionId) : undefined;\n}\n\nfunction operationError(error: unknown): OperationError {\n  if (error instanceof ConversationBusy) return { code: 'busy', message: error.message };\n  return { code: 'failed', message: error instanceof Error ? error.message : String(error) };\n}\n\nasync function accepted(operation: () => Promise<{ id: number } | number>): Promise<SendResponse> {\n  try {\n    const result = await operation();\n    const id = typeof result === 'number' ? result : result.id;\n    return { accepted: true, submissionId: String(id), error: null };\n  } catch (error) {\n    return { accepted: false, submissionId: null, error: operationError(error) };\n  }\n}\n\nfunction cones(target: Conversation | Cones): Cones {\n  if ('cone' in target) return target;\n  return {\n    cone: () => target,\n    switchCone: async () => {\n      throw new Error('this conversation has no cone to rewind');\n    },\n  };\n}\n\ninterface Turn {\n  text: string;\n  attachments: ShownAttachment[];\n  at: EntryId | null;\n  files: boolean;\n}\n\ntype Block = { type?: string; name?: string };\n\nconst WRITERS = ['write', 'edit', 'bash', 'codemode'];\n\nfunction writesIn(entries: readonly EntryRecord[]): boolean {\n  return entries.some((entry) =>\n    (entry.model ?? []).some(\n      (message) =>\n        Array.isArray(message.content) &&\n        (message.content as Block[]).some(\n          (block) => block.type === 'toolCall' && WRITERS.includes(String(block.name))\n        )\n    )\n  );\n}\n\nfunction lastTurn(view: ConversationView, messageId: string | null): Turn | null {\n  const { entries } = view;\n  const target = entries.findIndex((entry) => `e${entry.id}` === messageId);\n  if (target < 0) return null;\n  const turn = entries.slice(0, target).findLastIndex((entry) => entry.kind === 'pi.user');\n  if (turn < 0) return null;\n  const user = entries[turn] as EntryRecord;\n  return {\n    ...splitUser(user.model?.[0]?.content),\n    at: entries[turn - 1]?.id ?? null,\n    files: writesIn(entries.slice(turn)),\n  };\n}\n\nfunction busy(view: ConversationView): boolean {\n  const live = view.docs['pi.live'] as { run?: unknown } | undefined;\n  const inbox = view.docs['pi.inbox'] as { items?: unknown[] } | undefined;\n  return Boolean(live?.run) || Boolean(inbox?.items?.length);\n}\n\ntype RewindDeps = {\n  harness: Harness;\n  agents?: Agents;\n  cone: Cones;\n  scoops?: HostScoops;\n};\n\nasync function turnIn(\n  harness: Harness,\n  conversation: Conversation,\n  messageId: string | null,\n  context: Context\n): Promise<{ turn: Turn; view: ConversationView } | Rewound> {\n  const attached = await conversation.viewState(context);\n  const view = attached.value;\n  attached.dispose();\n  const pending = (await harness.inspect(context)).submissions.some(\n    (submission) => submission.conversationId === conversation.id\n  );\n  if (pending || busy(view)) return { done: false, text: null, reason: 'busy' };\n  const turn = lastTurn(view, messageId);\n  return turn ? { turn, view } : { done: false, text: null, reason: 'no-turn' };\n}\n\nasync function forkAt(\n  harness: Harness,\n  conversation: Conversation,\n  found: { turn: Turn },\n  context: Context\n): Promise<Conversation> {\n  const ownership = { kind: 'ownerless' } as const;\n  if (found.turn.at !== null) return conversation.fork(found.turn.at, { ownership }, context);\n  const agent = await conversation.agent(context);\n  const change: AgentChange = {\n    model: agent.model ?? null,\n    thinkingLevel: agent.thinkingLevel,\n    extensions: agent.extensions,\n    tools: agent.tools,\n    instructions: agent.instructions ?? null,\n    cwd: agent.cwd ?? null,\n  };\n  return harness.createConversation({ ownership, agent: pinned(change) }, context);\n}\n\nasync function rewindAgent(\n  deps: RewindDeps,\n  agentId: string | null,\n  messageId: string | null,\n  context: Context\n): Promise<Rewound> {\n  const { harness, agents, cone, scoops } = deps;\n  const scoop = agentId && agents ? agents.state().scoops[agentId] : undefined;\n  if (agentId && agents && !scoop && agentId !== agents.activeCone())\n    await agents.selectCone(agentId, context);\n  const conversation =\n    scoop && agents\n      ? ((await agents.conversation(agentId as string, context)) as Conversation)\n      : cone.cone();\n  const found = await turnIn(harness, conversation, messageId, context);\n  if ('reason' in found) return found;\n  const fork = await forkAt(harness, conversation, found, context);\n  const changed =\n    scoops && agents && !scoop\n      ? await scoops.scoops.rewound(agents.activeCone(), fork, context)\n      : { stopped: [], restored: [] };\n  const files = found.turn.files;\n  await fork.submit(\n    { type: 'write', entry: { kind: 'slicc.rewound', data: { turns: 1, ...changed, files } } },\n    context\n  );\n  if (scoop && agents)\n    await agents.update((_tx, state) => {\n      const record = state.scoops[agentId as string] as ScoopRecord;\n      record.conversation = fork.id;\n      delete record.title;\n      delete record.titled;\n    }, context);\n  else await cone.switchCone(fork, context);\n  const { attachments } = found.turn;\n  return {\n    done: true,\n    text: found.turn.text,\n    reason: null,\n    ...(attachments.length ? { attachments } : {}),\n  };\n}\n\ntype Picture = { type?: string; data?: string; mimeType?: string };\n\nasync function storedImage(\n  harness: Harness,\n  ref: ImageRef,\n  context: Context\n): Promise<StoredImage> {\n  const entry = await harness.commit((tx) => tx.entry(ref.entry as EntryId), context);\n  const content = entry?.model?.[ref.message]?.content;\n  const part = Array.isArray(content) ? (content[ref.part] as Picture | undefined) : undefined;\n  return part?.type === 'image' && part.data && part.mimeType\n    ? { data: part.data, mimeType: part.mimeType }\n    : { data: null, mimeType: null };\n}\n\nasync function contentOf(\n  text: string,\n  request: SendRequest,\n  conversation: Conversation,\n  uploads: Uploads | undefined,\n  context: Context\n): Promise<UserInput> {\n  if (!request.attachments?.length) return scrubText(text);\n  const saver = await saverFor(conversation, uploads, context);\n  return scrubItems(await userParts(text, request.attachments, saver));\n}\n\nexport function createAgentControl(\n  harness: Harness,\n  target: Conversation | Cones,\n  deliveries?: Deliveries,\n  licks?: HostLicks,\n  scoops?: HostScoops,\n  skills?: Pick<SkillsRuntime, 'expand' | 'commandsFor'>,\n  sprinkles?: Pick<SprinklesRuntime, 'send' | 'call'>,\n  memory?: Pick<MemoryRuntime, 'save' | 'remove'>,\n  freezer?: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'>,\n  changes?: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'>,\n  monitor?: Pick<Monitor, 'open' | 'close'>,\n  secrets?: () => readonly SecretName[],\n  uploads?: Uploads\n): AgentControl {\n  const cone = cones(target);\n  const current = () => cone.cone();\n  const agents = (target as WithAgents).agents;\n  const conversationFor = async (agentId: string | null | undefined, context: Context) => {\n    if (!agentId || !agents) return current();\n    const found = await agents.conversation(agentId, context);\n    if (!found) throw new Error(`There is no agent ${agentId}.`);\n    return found;\n  };\n  const withdraw = async (conversation: Conversation, id: string, context: Context) => {\n    const parsed = submissionId(id);\n    if (parsed === undefined) return { outcome: 'not_found' as const };\n    const result = await harness.abortSubmission(parsed, context, conversation.id);\n    if (result === 'aborted') return { outcome: 'withdrawn' as const };\n    return {\n      outcome: result === 'not_found' ? ('not_found' as const) : ('already_placed' as const),\n    };\n  };\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n  const rewindIn = (agentId: string | null, messageId: string | null, context: Context) =>\n    serial(() => rewindAgent({ harness, agents, cone, scoops }, agentId, messageId, context));\n  const decide = (\n    agentId: string | null,\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved> =>\n    serial(async () => {\n      if (!licks) return { done: false, text: null, error: 'this agent has no licks' };\n      const action = state === 'confirmed' ? 'confirm' : 'dismiss';\n      try {\n        const conversation = await conversationFor(agentId, context);\n        const text = await licks.licks.decide(conversation, lickId, action, undefined, context);\n        await conversation.submit(\n          {\n            type: 'write',\n            entry: {\n              kind: LICK_STATE_KIND,\n              data: { lick: lickId, state, by: 'user' },\n              model: [\n                {\n                  role: 'user',\n                  content: `The user ${state} lick ${lickId}: ${text}`,\n                  timestamp: Date.now(),\n                },\n              ],\n            },\n          },\n          context\n        );\n        return { done: true, text, error: null };\n      } catch (error) {\n        return { done: false, text: null, error: (error as Error).message };\n      }\n    });\n  return {\n    send(request, context) {\n      return serial(async () => {\n        if (secrets && request.text.trim() === SECRETS_COMMAND)\n          return accepted(async () =>\n            (await conversationFor(request.agentId, context)).submit(\n              { type: 'write', entry: secretsEntry(secrets()) },\n              context\n            )\n          );\n        const response = await accepted(async () => {\n          const conversation = await conversationFor(request.agentId, context);\n          const expanded = skills\n            ? await skills.expand(request.text, context, conversation.id)\n            : request.text;\n          return conversation.submit(\n            {\n              type: 'input',\n              content: await contentOf(expanded, request, conversation, uploads, context),\n              whenBusy: request.whenBusy,\n              ...(request.requestId ? { requestId: request.requestId } : {}),\n            },\n            context\n          );\n        });\n        const id = response.submissionId === null ? undefined : submissionId(response.submissionId);\n        if (id !== undefined) deliveries?.expect(id, request.whenBusy);\n        return response;\n      });\n    },\n    rewind: (messageId, context) => rewindIn(null, messageId, context),\n    rewindAgent: (agentId, messageId, context) => rewindIn(agentId, messageId, context),\n\n    async wait(id, context) {\n      const parsed = submissionId(id);\n      const submission =\n        parsed === undefined ? undefined : await harness.submission(parsed, context);\n      if (!submission) throw new Error(`unknown submission ${id}`);\n      const settled = await submission.wait(context);\n      const { answer, reason } = settled as { answer?: EntryId; reason?: string };\n      if (answer === undefined) return { status: 'unanswered', text: null, reason: String(reason) };\n      const entry = await harness.commit((tx) => tx.entry(AssistantEntry, answer), context);\n      return { status: 'done', text: answerText(entry?.model?.[0]?.content), reason: null };\n    },\n    withdraw: (id, context) => withdraw(current(), id, context),\n    ...sprinkleControl(sprinkles),\n    ...memoryControl(memory),\n    ...freezerControl(freezer),\n    ...changesControl(changes),\n    monitorOpen: async (lease, resync, context) =>\n      monitor ? monitor.open(lease, resync, context) : { lease: '', ttlMs: 0 },\n    monitorClose: async (lease, context) => monitor?.close(lease, context),\n    image: (ref, context) => storedImage(harness, ref, context),\n    async unqueue(agentId, id, context) {\n      return withdraw(await conversationFor(agentId, context), id, context);\n    },\n    abort: (context) => current().abort(context),\n    compact: (instructions, context) =>\n      accepted(() => current().compact(instructions ?? undefined, context)),\n    compactAgent: (agentId, instructions, context) =>\n      accepted(async () =>\n        (await conversationFor(agentId, context)).compact(instructions ?? undefined, context)\n      ),\n    reset: (handoff, context) => current().reset(handoff ?? undefined, context),\n    resolveLick: (lickId, state, context) => decide(null, lickId, state, context),\n    resolveAgentLick: (agentId, lickId, state, context) => decide(agentId, lickId, state, context),\n    async webhook(name, delivery, context) {\n      const delivered = licks\n        ? await licks.sources.webhook(\n            name,\n            {\n              ...(delivery.id ? { id: delivery.id } : {}),\n              headers: delivery.headers,\n              body: delivery.body,\n            },\n            context\n          )\n        : false;\n      return { delivered };\n    },\n    async stopAgent(agentId, context) {\n      await (await conversationFor(agentId, context)).abort(context);\n    },\n    async selectCone(agentId, context) {\n      await agents?.selectCone(agentId, context);\n    },\n    createCone(name, context) {\n      return created(async () => {\n        if (!agents) throw new Error('This agent has a single cone.');\n        return agents.createCone(name, context);\n      });\n    },\n    createScoop(parentId, name, context) {\n      return created(async () => {\n        if (!scoops) throw new Error('This agent has no scoops.');\n        const roles = await scoops.runtime.roles(context);\n        const answer = await scoops.scoops.spawn(\n          { cone: parentId, name, prompts: [], fromAgent: false, limits: roles.limits },\n          context\n        );\n        if (answer.code !== 0) throw new Error(readable(answer.out));\n        return `scoop:${answer.out.trim()}`;\n      });\n    },\n    drop(agentId, context) {\n      return created(async () => {\n        if (!scoops) throw new Error('This agent has no scoops.');\n        const answer = await scoops.scoops.stop(agentId, false, context);\n        if (answer.code !== 0) throw new Error(readable(answer.out));\n        return agentId;\n      });\n    },\n    configure: async (change, context) =>\n      (await conversationFor(change.agentId, context)).configure(\n        {\n          ...(change.model ? { model: change.model } : {}),\n          ...(change.thinkingLevel ? { thinkingLevel: change.thinkingLevel } : {}),\n        },\n        context\n      ),\n    async agentCommands(agentId, _context) {\n      return skills?.commandsFor(agentId) ?? [];\n    },\n  };\n}\n"],
+  "mappings": "AACA;AAAA,EAEE;AAAA,EAEA;AAAA,OAOK;AACP,SAAS,kBAAkB;AAE3B,SAA+B,WAAW,iBAAiB;AAM3D,SAAS,uBAAuB;AAIhC,SAAS,QAAQ,iBAAiB,oBAAoB;AAEtD,SAAS,YAAY,iBAAiB;AActC,SAAS,gBAA8B;AAchC,SAAS,SAAS,KAAqB;AAC5C,QAAM,OAAO,IAAI,QAAQ,oBAAoB,EAAE,EAAE,KAAK;AACtD,QAAM,WAAW,KAAK,OAAO,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC;AAC5D,SAAO,SAAS,KAAK,QAAQ,IAAI,WAAW,GAAG,QAAQ;AACzD;AAEA,SAAS,QAAQ,KAA8C;AAC7D,SAAO,IAAI,EAAE;AAAA,IACX,CAAC,QAAQ,EAAE,IAAI,OAAO,KAAK;AAAA,IAC3B,CAAC,WAAkB,EAAE,IAAI,MAAM,OAAO,MAAM,QAAQ;AAAA,EACtD;AACF;AAEA,SAAS,eACP,SAC+D;AAC/D,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,4BAA4B;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ,CAAC,SAAS,YAAY,QAAQ,YAAY,OAAO,EAAE,OAAO,SAAS,OAAO,CAAC;AAAA,IACnF,SAAS,CAAC,SAAS,YACjB,QAAQ,YAAa,MAAM,OAAO,EAAE,QAAQ,SAAS,OAAO,KAAM,EAAE;AAAA,IACtE,MAAM,CAAC,IAAI,YAAY,QAAQ,YAAY,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC;AAAA,IACrE,SAAS,CAAC,IAAI,YACZ,QAAQ,YAAY;AAClB,YAAM,OAAO,EAAE,QAAQ,IAAI,OAAO;AAClC,aAAO;AAAA,IACT,CAAC;AAAA,EACL;AACF;AAEA,SAAS,eACP,SACqE;AACrE,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAC7D,WAAO;AAAA,EACT;AACA,QAAM,OAAO,CAAC,MAAc,QAC1B,QAAQ,YAAY;AAClB,UAAM,IAAI,OAAO,CAAC;AAClB,WAAO;AAAA,EACT,CAAC;AACH,SAAO;AAAA,IACL,aAAa,OAAO,YAAY,SAAS,KAAK,OAAO;AAAA,IACrD,cAAc,CAAC,MAAM,YAAY,KAAK,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,OAAO,CAAC;AAAA,IACtF,cAAc,CAAC,MAAM,YAAY,KAAK,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,OAAO,CAAC;AAAA,EACxF;AACF;AAEA,SAAS,cACP,QACmD;AACnD,SAAO;AAAA,IACL,MAAM,WAAW,OAAO,SAAS;AAC/B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,YAAM,EAAE,IAAI,GAAG,KAAK,IAAI;AACxB,aAAO,OAAO,KAAK,EAAE,GAAG,MAAM,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC,EAAG,GAAG,OAAO;AAAA,IAChE;AAAA,IACA,MAAM,aAAa,IAAI,SAAS;AAC9B,aAAO,EAAE,SAAS,SAAS,MAAM,OAAO,OAAO,IAAI,OAAO,IAAI,MAAM;AAAA,IACtE;AAAA,EACF;AACF;AAEA,SAAS,gBACP,WACqD;AACrD,SAAO;AAAA,IACL,cAAc,OAAO,IAAI,SAAS,YAChC,YAAY,UAAU,KAAK,IAAI,SAAS,OAAO,IAAI,EAAE,WAAW,MAAM;AAAA,IACxE,MAAM,aAAa,IAAI,QAAQ,MAAM,SAAS;AAC5C,UAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8BAA8B;AAC9D,aAAO,UAAU,KAAK,IAAI,QAAQ,MAAM,OAAO;AAAA,IACjD;AAAA,EACF;AACF;AAEO,SAAS,aAAa,OAAyC;AACpE,QAAM,KAAK,OAAO,KAAK;AACvB,SAAO,gBAAgB,KAAK,KAAK,KAAK,OAAO,cAAc,EAAE,IAAK,KAAsB;AAC1F;AAEA,SAAS,eAAe,OAAgC;AACtD,MAAI,iBAAiB,iBAAkB,QAAO,EAAE,MAAM,QAAQ,SAAS,MAAM,QAAQ;AACrF,SAAO,EAAE,MAAM,UAAU,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AAC3F;AAEA,eAAe,SAAS,WAA0E;AAChG,MAAI;AACF,UAAM,SAAS,MAAM,UAAU;AAC/B,UAAM,KAAK,OAAO,WAAW,WAAW,SAAS,OAAO;AACxD,WAAO,EAAE,UAAU,MAAM,cAAc,OAAO,EAAE,GAAG,OAAO,KAAK;AAAA,EACjE,SAAS,OAAO;AACd,WAAO,EAAE,UAAU,OAAO,cAAc,MAAM,OAAO,eAAe,KAAK,EAAE;AAAA,EAC7E;AACF;AAEA,SAAS,MAAM,QAAqC;AAClD,MAAI,UAAU,OAAQ,QAAO;AAC7B,SAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,YAAY,YAAY;AACtB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAAA,EACF;AACF;AAWA,MAAM,UAAU,CAAC,SAAS,QAAQ,QAAQ,UAAU;AAEpD,SAAS,SAAS,SAA0C;AAC1D,SAAO,QAAQ;AAAA,IAAK,CAAC,WAClB,MAAM,SAAS,CAAC,GAAG;AAAA,MAClB,CAAC,YACC,MAAM,QAAQ,QAAQ,OAAO,KAC5B,QAAQ,QAAoB;AAAA,QAC3B,CAAC,UAAU,MAAM,SAAS,cAAc,QAAQ,SAAS,OAAO,MAAM,IAAI,CAAC;AAAA,MAC7E;AAAA,IACJ;AAAA,EACF;AACF;AAEA,SAAS,SAAS,MAAwB,WAAuC;AAC/E,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,SAAS,QAAQ,UAAU,CAAC,UAAU,IAAI,MAAM,EAAE,OAAO,SAAS;AACxE,MAAI,SAAS,EAAG,QAAO;AACvB,QAAM,OAAO,QAAQ,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,UAAU,MAAM,SAAS,SAAS;AACvF,MAAI,OAAO,EAAG,QAAO;AACrB,QAAM,OAAO,QAAQ,IAAI;AACzB,SAAO;AAAA,IACL,GAAG,UAAU,KAAK,QAAQ,CAAC,GAAG,OAAO;AAAA,IACrC,IAAI,QAAQ,OAAO,CAAC,GAAG,MAAM;AAAA,IAC7B,OAAO,SAAS,QAAQ,MAAM,IAAI,CAAC;AAAA,EACrC;AACF;AAEA,SAAS,KAAK,MAAiC;AAC7C,QAAM,OAAO,KAAK,KAAK,SAAS;AAChC,QAAM,QAAQ,KAAK,KAAK,UAAU;AAClC,SAAO,QAAQ,MAAM,GAAG,KAAK,QAAQ,OAAO,OAAO,MAAM;AAC3D;AASA,eAAe,OACb,SACA,cACA,WACA,SAC2D;AAC3D,QAAM,WAAW,MAAM,aAAa,UAAU,OAAO;AACrD,QAAM,OAAO,SAAS;AACtB,WAAS,QAAQ;AACjB,QAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO,GAAG,YAAY;AAAA,IAC3D,CAAC,eAAe,WAAW,mBAAmB,aAAa;AAAA,EAC7D;AACA,MAAI,WAAW,KAAK,IAAI,EAAG,QAAO,EAAE,MAAM,OAAO,MAAM,MAAM,QAAQ,OAAO;AAC5E,QAAM,OAAO,SAAS,MAAM,SAAS;AACrC,SAAO,OAAO,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,OAAO,MAAM,MAAM,QAAQ,UAAU;AAC9E;AAEA,eAAe,OACb,SACA,cACA,OACA,SACuB;AACvB,QAAM,YAAY,EAAE,MAAM,YAAY;AACtC,MAAI,MAAM,KAAK,OAAO,KAAM,QAAO,aAAa,KAAK,MAAM,KAAK,IAAI,EAAE,UAAU,GAAG,OAAO;AAC1F,QAAM,QAAQ,MAAM,aAAa,MAAM,OAAO;AAC9C,QAAM,SAAsB;AAAA,IAC1B,OAAO,MAAM,SAAS;AAAA,IACtB,eAAe,MAAM;AAAA,IACrB,YAAY,MAAM;AAAA,IAClB,OAAO,MAAM;AAAA,IACb,cAAc,MAAM,gBAAgB;AAAA,IACpC,KAAK,MAAM,OAAO;AAAA,EACpB;AACA,SAAO,QAAQ,mBAAmB,EAAE,WAAW,OAAO,OAAO,MAAM,EAAE,GAAG,OAAO;AACjF;AAEA,eAAe,YACb,MACA,SACA,WACA,SACkB;AAClB,QAAM,EAAE,SAAS,QAAQ,MAAM,OAAO,IAAI;AAC1C,QAAM,QAAQ,WAAW,SAAS,OAAO,MAAM,EAAE,OAAO,OAAO,IAAI;AACnE,MAAI,WAAW,UAAU,CAAC,SAAS,YAAY,OAAO,WAAW;AAC/D,UAAM,OAAO,WAAW,SAAS,OAAO;AAC1C,QAAM,eACJ,SAAS,SACH,MAAM,OAAO,aAAa,SAAmB,OAAO,IACtD,KAAK,KAAK;AAChB,QAAM,QAAQ,MAAM,OAAO,SAAS,cAAc,WAAW,OAAO;AACpE,MAAI,YAAY,MAAO,QAAO;AAC9B,QAAM,OAAO,MAAM,OAAO,SAAS,cAAc,OAAO,OAAO;AAC/D,QAAM,UACJ,UAAU,UAAU,CAAC,QACjB,MAAM,OAAO,OAAO,QAAQ,OAAO,WAAW,GAAG,MAAM,OAAO,IAC9D,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,EAAE;AAClC,QAAM,QAAQ,MAAM,KAAK;AACzB,QAAM,KAAK;AAAA,IACT,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,iBAAiB,MAAM,EAAE,OAAO,GAAG,GAAG,SAAS,MAAM,EAAE,EAAE;AAAA,IACzF;AAAA,EACF;AACA,MAAI,SAAS;AACX,UAAM,OAAO,OAAO,CAAC,KAAK,UAAU;AAClC,YAAM,SAAS,MAAM,OAAO,OAAiB;AAC7C,aAAO,eAAe,KAAK;AAC3B,aAAO,OAAO;AACd,aAAO,OAAO;AAAA,IAChB,GAAG,OAAO;AAAA,MACP,OAAM,KAAK,WAAW,MAAM,OAAO;AACxC,QAAM,EAAE,YAAY,IAAI,MAAM;AAC9B,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,MAAM,KAAK;AAAA,IACjB,QAAQ;AAAA,IACR,GAAI,YAAY,SAAS,EAAE,YAAY,IAAI,CAAC;AAAA,EAC9C;AACF;AAIA,eAAe,YACb,SACA,KACA,SACsB;AACtB,QAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC,OAAO,GAAG,MAAM,IAAI,KAAgB,GAAG,OAAO;AAClF,QAAM,UAAU,OAAO,QAAQ,IAAI,OAAO,GAAG;AAC7C,QAAM,OAAO,MAAM,QAAQ,OAAO,IAAK,QAAQ,IAAI,IAAI,IAA4B;AACnF,SAAO,MAAM,SAAS,WAAW,KAAK,QAAQ,KAAK,WAC/C,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK,SAAS,IAC3C,EAAE,MAAM,MAAM,UAAU,KAAK;AACnC;AAEA,eAAe,UACb,MACA,SACA,cACA,SACA,SACoB;AACpB,MAAI,CAAC,QAAQ,aAAa,OAAQ,QAAO,UAAU,IAAI;AACvD,QAAM,QAAQ,MAAM,SAAS,cAAc,SAAS,OAAO;AAC3D,SAAO,WAAW,MAAM,UAAU,MAAM,QAAQ,aAAa,KAAK,CAAC;AACrE;AAEO,SAAS,mBACd,SACA,QACA,YACA,OACA,QACA,QACA,WACA,QACA,SACA,SACA,SACA,SACA,SACc;AACd,QAAM,OAAO,MAAM,MAAM;AACzB,QAAM,UAAU,MAAM,KAAK,KAAK;AAChC,QAAM,SAAU,OAAsB;AACtC,QAAM,kBAAkB,OAAO,SAAoC,YAAqB;AACtF,QAAI,CAAC,WAAW,CAAC,OAAQ,QAAO,QAAQ;AACxC,UAAM,QAAQ,MAAM,OAAO,aAAa,SAAS,OAAO;AACxD,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,OAAO,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,WAAW,OAAO,cAA4B,IAAY,YAAqB;AACnF,UAAM,SAAS,aAAa,EAAE;AAC9B,QAAI,WAAW,OAAW,QAAO,EAAE,SAAS,YAAqB;AACjE,UAAM,SAAS,MAAM,QAAQ,gBAAgB,QAAQ,SAAS,aAAa,EAAE;AAC7E,QAAI,WAAW,UAAW,QAAO,EAAE,SAAS,YAAqB;AACjE,WAAO;AAAA,MACL,SAAS,WAAW,cAAe,cAAyB;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AACA,QAAM,WAAW,CAAC,SAAwB,WAA0B,YAClE,OAAO,MAAM,YAAY,EAAE,SAAS,QAAQ,MAAM,OAAO,GAAG,SAAS,WAAW,OAAO,CAAC;AAC1F,QAAM,SAAS,CACb,SACA,QACA,OACA,YAEA,OAAO,YAAY;AACjB,QAAI,CAAC,MAAO,QAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,0BAA0B;AAC/E,UAAM,SAAS,UAAU,cAAc,YAAY;AACnD,QAAI;AACF,YAAM,eAAe,MAAM,gBAAgB,SAAS,OAAO;AAC3D,YAAM,OAAO,MAAM,MAAM,MAAM,OAAO,cAAc,QAAQ,QAAQ,QAAW,OAAO;AACtF,YAAM,aAAa;AAAA,QACjB;AAAA,UACE,MAAM;AAAA,UACN,OAAO;AAAA,YACL,MAAM;AAAA,YACN,MAAM,EAAE,MAAM,QAAQ,OAAO,IAAI,OAAO;AAAA,YACxC,OAAO;AAAA,cACL;AAAA,gBACE,MAAM;AAAA,gBACN,SAAS,YAAY,KAAK,SAAS,MAAM,KAAK,IAAI;AAAA,gBAClD,WAAW,KAAK,IAAI;AAAA,cACtB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,aAAO,EAAE,MAAM,MAAM,MAAM,OAAO,KAAK;AAAA,IACzC,SAAS,OAAO;AACd,aAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAQ,MAAgB,QAAQ;AAAA,IACpE;AAAA,EACF,CAAC;AACH,SAAO;AAAA,IACL,KAAK,SAAS,SAAS;AACrB,aAAO,OAAO,YAAY;AACxB,YAAI,WAAW,QAAQ,KAAK,KAAK,MAAM;AACrC,iBAAO;AAAA,YAAS,aACb,MAAM,gBAAgB,QAAQ,SAAS,OAAO,GAAG;AAAA,cAChD,EAAE,MAAM,SAAS,OAAO,aAAa,QAAQ,CAAC,EAAE;AAAA,cAChD;AAAA,YACF;AAAA,UACF;AACF,cAAM,WAAW,MAAM,SAAS,YAAY;AAC1C,gBAAM,eAAe,MAAM,gBAAgB,QAAQ,SAAS,OAAO;AACnE,gBAAM,WAAW,SACb,MAAM,OAAO,OAAO,QAAQ,MAAM,SAAS,aAAa,EAAE,IAC1D,QAAQ;AACZ,iBAAO,aAAa;AAAA,YAClB;AAAA,cACE,MAAM;AAAA,cACN,SAAS,MAAM,UAAU,UAAU,SAAS,cAAc,SAAS,OAAO;AAAA,cAC1E,UAAU,QAAQ;AAAA,cAClB,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,YAC9D;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AACD,cAAM,KAAK,SAAS,iBAAiB,OAAO,SAAY,aAAa,SAAS,YAAY;AAC1F,YAAI,OAAO,OAAW,aAAY,OAAO,IAAI,QAAQ,QAAQ;AAC7D,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,CAAC,WAAW,YAAY,SAAS,MAAM,WAAW,OAAO;AAAA,IACjE,aAAa,CAAC,SAAS,WAAW,YAAY,SAAS,SAAS,WAAW,OAAO;AAAA,IAElF,MAAM,KAAK,IAAI,SAAS;AACtB,YAAM,SAAS,aAAa,EAAE;AAC9B,YAAM,aACJ,WAAW,SAAY,SAAY,MAAM,QAAQ,WAAW,QAAQ,OAAO;AAC7E,UAAI,CAAC,WAAY,OAAM,IAAI,MAAM,sBAAsB,EAAE,EAAE;AAC3D,YAAM,UAAU,MAAM,WAAW,KAAK,OAAO;AAC7C,YAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,UAAI,WAAW,OAAW,QAAO,EAAE,QAAQ,cAAc,MAAM,MAAM,QAAQ,OAAO,MAAM,EAAE;AAC5F,YAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,OAAO;AACpF,aAAO,EAAE,QAAQ,QAAQ,MAAM,WAAW,OAAO,QAAQ,CAAC,GAAG,OAAO,GAAG,QAAQ,KAAK;AAAA,IACtF;AAAA,IACA,UAAU,CAAC,IAAI,YAAY,SAAS,QAAQ,GAAG,IAAI,OAAO;AAAA,IAC1D,GAAG,gBAAgB,SAAS;AAAA,IAC5B,GAAG,cAAc,MAAM;AAAA,IACvB,GAAG,eAAe,OAAO;AAAA,IACzB,GAAG,eAAe,OAAO;AAAA,IACzB,aAAa,OAAO,OAAO,QAAQ,YACjC,UAAU,QAAQ,KAAK,OAAO,QAAQ,OAAO,IAAI,EAAE,OAAO,IAAI,OAAO,EAAE;AAAA,IACzE,cAAc,OAAO,OAAO,YAAY,SAAS,MAAM,OAAO,OAAO;AAAA,IACrE,OAAO,CAAC,KAAK,YAAY,YAAY,SAAS,KAAK,OAAO;AAAA,IAC1D,MAAM,QAAQ,SAAS,IAAI,SAAS;AAClC,aAAO,SAAS,MAAM,gBAAgB,SAAS,OAAO,GAAG,IAAI,OAAO;AAAA,IACtE;AAAA,IACA,OAAO,CAAC,YAAY,QAAQ,EAAE,MAAM,OAAO;AAAA,IAC3C,SAAS,CAAC,cAAc,YACtB,SAAS,MAAM,QAAQ,EAAE,QAAQ,gBAAgB,QAAW,OAAO,CAAC;AAAA,IACtE,cAAc,CAAC,SAAS,cAAc,YACpC;AAAA,MAAS,aACN,MAAM,gBAAgB,SAAS,OAAO,GAAG,QAAQ,gBAAgB,QAAW,OAAO;AAAA,IACtF;AAAA,IACF,OAAO,CAAC,SAAS,YAAY,QAAQ,EAAE,MAAM,WAAW,QAAW,OAAO;AAAA,IAC1E,aAAa,CAAC,QAAQ,OAAO,YAAY,OAAO,MAAM,QAAQ,OAAO,OAAO;AAAA,IAC5E,kBAAkB,CAAC,SAAS,QAAQ,OAAO,YAAY,OAAO,SAAS,QAAQ,OAAO,OAAO;AAAA,IAC7F,MAAM,QAAQ,MAAM,UAAU,SAAS;AACrC,YAAM,YAAY,QACd,MAAM,MAAM,QAAQ;AAAA,QAClB;AAAA,QACA;AAAA,UACE,GAAI,SAAS,KAAK,EAAE,IAAI,SAAS,GAAG,IAAI,CAAC;AAAA,UACzC,SAAS,SAAS;AAAA,UAClB,MAAM,SAAS;AAAA,QACjB;AAAA,QACA;AAAA,MACF,IACA;AACJ,aAAO,EAAE,UAAU;AAAA,IACrB;AAAA,IACA,MAAM,UAAU,SAAS,SAAS;AAChC,aAAO,MAAM,gBAAgB,SAAS,OAAO,GAAG,MAAM,OAAO;AAAA,IAC/D;AAAA,IACA,MAAM,WAAW,SAAS,SAAS;AACjC,YAAM,QAAQ,WAAW,SAAS,OAAO;AAAA,IAC3C;AAAA,IACA,WAAW,MAAM,SAAS;AACxB,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAC5D,eAAO,OAAO,WAAW,MAAM,OAAO;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,IACA,YAAY,UAAU,MAAM,SAAS;AACnC,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,cAAM,QAAQ,MAAM,OAAO,QAAQ,MAAM,OAAO;AAChD,cAAM,SAAS,MAAM,OAAO,OAAO;AAAA,UACjC,EAAE,MAAM,UAAU,MAAM,SAAS,CAAC,GAAG,WAAW,OAAO,QAAQ,MAAM,OAAO;AAAA,UAC5E;AAAA,QACF;AACA,YAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,SAAS,OAAO,GAAG,CAAC;AAC3D,eAAO,SAAS,OAAO,IAAI,KAAK,CAAC;AAAA,MACnC,CAAC;AAAA,IACH;AAAA,IACA,KAAK,SAAS,SAAS;AACrB,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,cAAM,SAAS,MAAM,OAAO,OAAO,KAAK,SAAS,OAAO,OAAO;AAC/D,YAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,SAAS,OAAO,GAAG,CAAC;AAC3D,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,WAAW,OAAO,QAAQ,aACvB,MAAM,gBAAgB,OAAO,SAAS,OAAO,GAAG;AAAA,MAC/C;AAAA,QACE,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,QAC9C,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;AAAA,MACxE;AAAA,MACA;AAAA,IACF;AAAA,IACF,MAAM,cAAc,SAAS,UAAU;AACrC,aAAO,QAAQ,YAAY,OAAO,KAAK,CAAC;AAAA,IAC1C;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/freezer/index.js

@@ -6,9 +6,9 @@ import {
 } from "../agents.js";
 import { HOME } from "../kernel/env.js";
 import { LEGACY } from "../layout.js";
-import { redactSecrets } from "../memory/format.js";
 import { pinned } from "../secrets/extension.js";
-import { scrubText } from "../secrets/scrub.js";
+import { cleanTitle, TITLE_TURNS, titleDue } from "../titles/extension.js";
+import { scrubTranscript } from "../titles/generate.js";
 const THAWED_KIND = "slicc.thawed";
 const USAGE = `usage:
   freezer list         every conversation: id, kind, name, title, messages, when
@@ -18,10 +18,6 @@ const USAGE = `usage:
 Delete a cone, or start a new conversation, from the chat toolbar or the command palette.
 `;
 const TITLE_LENGTH = 60;
-const TITLE_WORDS = 6;
-const TITLE_TURNS = [1, 3];
-const TRIVIAL_WORDS = 4;
-const TRANSCRIPT_LENGTH = 4e3;
 const TOUCH_MS = 500;
 function textOf(entry) {
   return answerText(entry.model?.[0]?.content).trim();
@@ -87,26 +83,6 @@ async function inspect(harness, id, context) {
     entries: view.entries
   };
 }
-function trivial(text) {
-  const words = text.split(/\s+/).map((word) => word.replace(/\p{P}|\p{S}|\u200d|\ufe0f/gu, "")).filter(Boolean);
-  return words.length < TRIVIAL_WORDS && !(words.length === 1 && [...words[0]].length >= 8);
-}
-function titleDue(record, entries, final = false) {
-  const last = entries.at(-1);
-  const stop = last?.model?.[0]?.stopReason;
-  if (last?.kind !== "pi.assistant" || stop !== "stop") return void 0;
-  const said = entries.filter((entry) => entry.kind === "pi.user" && textOf(entry));
-  const greeting = !final && trivial(textOf(said[0] ?? {}));
-  const next = TITLE_TURNS.find((turn) => turn > (record.titled ?? 0) && !(greeting && turn === 1));
-  return next !== void 0 && said.length >= next ? said.length : void 0;
-}
-function cleanTitle(title) {
-  const clean = title?.replace(/\s+/g, " ").trim().replace(/^["'“”]+|["'“”]+$/g, "").replace(/\.+$/, "").trim().split(" ").slice(0, TITLE_WORDS).join(" ");
-  return clean ? clean.slice(0, TITLE_LENGTH) : void 0;
-}
-function transcriptOf(entries) {
-  return entries.filter((entry) => entry.kind === "pi.user" || entry.kind === "pi.assistant").map((entry) => `${entry.kind === "pi.user" ? "User" : "Agent"}: ${textOf(entry)}`).join("\n");
-}
 const kindOf = (scoop) => scoop.kind === "sync" ? "agent" : "scoop";
 async function rows(harness, state, cache, context, seen) {
   const stopped = async (conversation) => {
@@ -120,13 +96,12 @@ async function rows(harness, state, cache, context, seen) {
     const stats = await stopped(record.conversation);
     if (seen && (record.titled ?? 0) < TITLE_TURNS.at(-1)) {
       const { entries } = await inspect(harness, record.conversation, context);
-      seen(id, record, entries, stats.model, true);
+      seen(id, record, entries, stats.model);
     }
     return { ...stats, ...record.title ? { title: record.title } : {} };
   };
-  const running = async (id, record) => {
-    const { stats, entries } = await inspect(harness, record.conversation, context);
-    seen?.(id, record, entries, stats.model);
+  const running = async (record) => {
+    const { stats } = await inspect(harness, record.conversation, context);
     return { ...stats, ...record.title ? { title: record.title } : {} };
   };
   const out = [];
@@ -134,7 +109,7 @@ async function rows(harness, state, cache, context, seen) {
     out.push({
       id,
       name: cone.name,
-      ...await running(id, cone),
+      ...await running(cone),
       kind: "cone",
       live: true,
       thawedAs: null
@@ -157,7 +132,7 @@ async function rows(harness, state, cache, context, seen) {
     out.push({
       id,
       name: scoop.name,
-      ...on ? await running(id, scoop) : await ended(id, scoop),
+      ...on ? await running(scoop) : await ended(id, scoop),
       kind: kindOf(scoop),
       live: on,
       thawedAs: scoop.thawedAs ?? null
@@ -407,45 +382,33 @@ async function discardFrozen(options, id, context) {
 }
 function titling(options) {
   const { agents } = options;
-  const pending = /* @__PURE__ */ new Map();
-  const named = (entries, model, context) => scrubText(redactSecrets(transcriptOf(entries)).text).then(
-    (transcript) => options.title(
-      transcript.slice(0, TRANSCRIPT_LENGTH),
-      model,
-      context
-    )
+  const pending = /* @__PURE__ */ new Set();
+  const last = TITLE_TURNS.at(-1);
+  const named = (entries, model, context) => scrubTranscript(entries).then(
+    (transcript) => options.title(transcript, model, context)
   ).then(cleanTitle).catch(() => void 0);
-  const write = (id, titled, turns, title) => agents.update((_tx, doc) => {
-    const record = doc.cones[id] ?? doc.scoops[id];
-    if (record?.conversation !== titled.conversation) return;
-    record.titled = turns;
+  const write = (id, titled, title) => agents.update((_tx, doc) => {
+    const record = doc.scoops[id];
+    if (record?.conversation !== titled.conversation || (record.titled ?? 0) >= last) return;
+    record.titled = last;
     if (title) record.title = title;
-  }, BACKGROUND_CONTEXT);
-  const seen = (id, seenAs, entries, model, final) => {
-    const state = agents.state();
-    const titled = state.cones[id] ?? state.scoops[id];
-    if (titled?.conversation !== seenAs.conversation) return;
-    if (pending.get(id)?.conversation === titled.conversation) return;
-    const turns = titleDue(titled, entries, final);
-    const last = TITLE_TURNS.at(-1);
-    if (turns === void 0) {
-      if (final) void write(id, titled, last, void 0).catch(() => void 0);
+  }, BACKGROUND_CONTEXT).catch(() => void 0);
+  const seen = (id, seenAs, entries, model) => {
+    const titled = agents.state().scoops[id];
+    if (titled?.conversation !== seenAs.conversation || pending.has(id)) return;
+    if (titleDue(titled, entries, true) === void 0) {
+      void write(id, titled, void 0);
       return;
     }
-    const token = Symbol(id);
-    pending.set(id, { token, conversation: titled.conversation });
-    void named(entries, model, BACKGROUND_CONTEXT).then(
-      (title) => pending.get(id)?.token === token ? write(id, titled, final ? last : turns, title) : void 0
-    ).catch(() => void 0).finally(() => {
-      if (pending.get(id)?.token === token) pending.delete(id);
-    });
+    pending.add(id);
+    void named(entries, model, BACKGROUND_CONTEXT).then((title) => write(id, titled, title)).finally(() => pending.delete(id));
   };
-  return { pending, named, seen };
+  return { named, seen };
 }
 function attachFreezer(options) {
   const { harness, agents } = options;
   const now = options.now ?? Date.now;
-  const { pending, named, seen } = titling(options);
+  const { named, seen } = titling(options);
   const { frozen, refresh, touch, off } = listing(
     harness,
     agents,
@@ -525,7 +488,7 @@ function attachFreezer(options) {
       const cone = agents.state().cones[agentId];
       const scoop = agents.state().scoops[agentId];
       if (!cone && scoop && live(scoop)) {
-        pending.delete(agentId);
+        options.cancelTitle?.(agentId);
         await (await agents.conversation(agentId, context))?.reset(void 0, context);
         await agents.update((_tx, doc) => {
           const record2 = doc.scoops[agentId];
@@ -582,17 +545,13 @@ function attachFreezer(options) {
 }
 export {
   THAWED_KIND,
-  TITLE_TURNS,
   TOUCH_MS,
   USAGE,
   attachFreezer,
-  cleanTitle,
   firstLine,
   frozenTarget,
   markdown,
   modelName,
-  thawedNote,
-  titleDue,
-  trivial
+  thawedNote
 };
 //# sourceMappingURL=index.js.map