@ai-ecoverse/slicc-agent 5.2.0 → 5.4.0

package/dist/guests/client.js

@@ -0,0 +1,138 @@
+import { createHost, isChordError, replicatedState } from "@earendil-works/chord";
+import { lasting } from "../client.js";
+import {
+  AgentGuestService,
+  CONTROL_METHODS
+} from "../services.js";
+import { AGENT_HOST, kept, plain, replicated } from "../serving.js";
+import { PortLink } from "../wire.js";
+const GUEST_ONLY = "a guest can only watch and send messages";
+const SEAT_REFUSED = "This guest link isn't valid any more.";
+const SAID = {
+  revoked: "This guest seat was revoked.",
+  empty: "There is nothing to send.",
+  "too-long": "That message is too long for a guest seat.",
+  gone: "The cone this seat shares is gone.",
+  unavailable: "Messages from guests need a review, and this agent can't review them yet."
+};
+const proposedSentence = (reason) => SAID[reason] ?? "The message was not delivered.";
+const refusal = (message, code = "EACCES") => Object.assign(new Error(message), { code });
+async function connectGuest(endpoint) {
+  const link = new PortLink(endpoint);
+  let serverId;
+  try {
+    serverId = await link.hello;
+  } catch {
+    throw refusal(SEAT_REFUSED);
+  }
+  const host = createHost({ name: `guest:${crypto.randomUUID()}`, kind: "client" });
+  host.connect(link);
+  const handle = host.get(AgentGuestService, {}, { at: AGENT_HOST });
+  const fail = async (error) => {
+    handle.release();
+    link.close("handshake failed");
+    await host.close();
+    throw error;
+  };
+  try {
+    await Promise.race([
+      handle.ready,
+      link.ended.then(() => {
+        throw refusal(SEAT_REFUSED);
+      })
+    ]);
+  } catch (error) {
+    return fail(isChordError(error) && error.code === "forbidden" ? refusal(SEAT_REFUSED) : error);
+  }
+  if (handle.kind !== "guest") return fail(refusal(SEAT_REFUSED));
+  const transcriptMember = handle.transcript;
+  const seatMember = handle.seat;
+  const proposalsMember = handle.proposals;
+  const keeping = [transcriptMember, seatMember, proposalsMember].map(kept);
+  await Promise.race([Promise.all(keeping.map((keep) => keep.ready)), link.ended]);
+  const call = handle.propose;
+  const propose = async (request) => {
+    try {
+      return await host.root((ctx) => call([request], ctx), {});
+    } catch (error) {
+      throw plain(error);
+    }
+  };
+  const guest = seatMember.value;
+  const refuse = () => Promise.reject(refusal(GUEST_ONLY));
+  const control = Object.fromEntries(
+    CONTROL_METHODS.map((name) => [name, refuse])
+  );
+  control.send = async (request) => {
+    if (request.attachments?.length)
+      return {
+        accepted: false,
+        submissionId: null,
+        error: { code: "EACCES", message: "A guest can't attach files." }
+      };
+    const proposed = await propose({ text: request.text, requestId: request.requestId });
+    if (proposed.state === "submitted")
+      return { accepted: true, submissionId: proposed.submissionId, error: null };
+    if (proposed.state === "pending")
+      return { accepted: true, submissionId: proposed.approval, error: null };
+    return {
+      accepted: false,
+      submissionId: null,
+      error: { code: "EACCES", message: proposedSentence(proposed.reason) }
+    };
+  };
+  const transcript = lasting(replicated(transcriptMember));
+  const proposals = lasting(replicated(proposalsMember));
+  let open = true;
+  const finish = () => {
+    if (!open) return;
+    open = false;
+    transcript.freeze();
+    proposals.freeze();
+    for (const keep of keeping) keep.stop();
+    handle.release();
+  };
+  const closed = link.ended.then((reason) => {
+    finish();
+    return reason;
+  });
+  const settings = {
+    state: replicatedState({ models: [], accounts: [] }),
+    connect: refuse,
+    disconnect: refuse,
+    signIn: refuse,
+    dismissMoved: refuse
+  };
+  return {
+    serverId,
+    guest,
+    control,
+    transcript: transcript.state,
+    proposals: proposals.state,
+    deliveries: replicatedState({}),
+    agents: replicatedState({
+      active: guest.agentId,
+      agents: [
+        { id: guest.agentId, name: guest.name, kind: "cone", parentId: null, role: null }
+      ]
+    }),
+    settings,
+    closed,
+    propose,
+    prompt: refuse,
+    webhook: refuse,
+    async close() {
+      finish();
+      link.close("closed");
+      await closed;
+      await host.close();
+    }
+  };
+}
+export {
+  GUEST_ONLY,
+  SEAT_REFUSED,
+  connectGuest,
+  proposedSentence
+};
+//# sourceMappingURL=client.js.map

package/dist/guests/client.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/guests/client.ts"],
+  "sourcesContent": ["import { createHost, isChordError, type Readable, replicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport { type AgentConnection, lasting } from '../client.ts';\nimport {\n  type AgentControl,\n  AgentGuestService,\n  type AgentSettings,\n  CONTROL_METHODS,\n  type GuestProposal,\n  type GuestShown,\n  type SendResponse,\n} from '../services.ts';\nimport { AGENT_HOST, kept, plain, type Remote, replicated } from '../serving.ts';\nimport { type PortEndpoint, PortLink } from '../wire.ts';\nimport type { Proposed, ProposeRequest } from './index.ts';\n\nexport const GUEST_ONLY = 'a guest can only watch and send messages';\nexport const SEAT_REFUSED = \"This guest link isn't valid any more.\";\n\nconst SAID: Record<string, string> = {\n  revoked: 'This guest seat was revoked.',\n  empty: 'There is nothing to send.',\n  'too-long': 'That message is too long for a guest seat.',\n  gone: 'The cone this seat shares is gone.',\n  unavailable: \"Messages from guests need a review, and this agent can't review them yet.\",\n};\n\nexport const proposedSentence = (reason: string): string =>\n  SAID[reason] ?? 'The message was not delivered.';\n\nconst refusal = (message: string, code = 'EACCES') => Object.assign(new Error(message), { code });\n\nexport interface GuestConnection extends AgentConnection {\n  readonly guest: GuestShown;\n  propose(request: ProposeRequest): Promise<Proposed>;\n}\n\nexport async function connectGuest(endpoint: PortEndpoint): Promise<GuestConnection> {\n  const link = new PortLink(endpoint);\n  let serverId: string;\n  try {\n    serverId = await link.hello;\n  } catch {\n    throw refusal(SEAT_REFUSED);\n  }\n  const host = createHost({ name: `guest:${crypto.randomUUID()}`, kind: 'client' });\n  host.connect(link);\n  const handle = host.get(AgentGuestService, {}, { at: AGENT_HOST }) as unknown as Remote;\n  const fail = async (error: unknown): Promise<never> => {\n    handle.release();\n    link.close('handshake failed');\n    await host.close();\n    throw error;\n  };\n  try {\n    await Promise.race([\n      handle.ready,\n      link.ended.then(() => {\n        throw refusal(SEAT_REFUSED);\n      }),\n    ]);\n  } catch (error) {\n    return fail(isChordError(error) && error.code === 'forbidden' ? refusal(SEAT_REFUSED) : error);\n  }\n  if (handle.kind !== 'guest') return fail(refusal(SEAT_REFUSED));\n  const transcriptMember = handle.transcript as Readable<ConversationView | undefined>;\n  const seatMember = handle.seat as Readable<GuestShown | undefined>;\n  const proposalsMember = handle.proposals as Readable<GuestProposal[] | undefined>;\n  const keeping = [transcriptMember, seatMember, proposalsMember].map(kept);\n  await Promise.race([Promise.all(keeping.map((keep) => keep.ready)), link.ended]);\n  const call = handle.propose as (args: unknown[], ctx: unknown) => Promise<Proposed>;\n  const propose = async (request: ProposeRequest) => {\n    try {\n      return await host.root((ctx) => call([request], ctx), {});\n    } catch (error) {\n      throw plain(error);\n    }\n  };\n  const guest = seatMember.value as GuestShown;\n  const refuse = () => Promise.reject(refusal(GUEST_ONLY));\n  const control = Object.fromEntries(\n    CONTROL_METHODS.map((name) => [name, refuse])\n  ) as unknown as AgentControl;\n  control.send = async (request): Promise<SendResponse> => {\n    if (request.attachments?.length)\n      return {\n        accepted: false,\n        submissionId: null,\n        error: { code: 'EACCES', message: \"A guest can't attach files.\" },\n      };\n    const proposed = await propose({ text: request.text, requestId: request.requestId });\n    if (proposed.state === 'submitted')\n      return { accepted: true, submissionId: proposed.submissionId, error: null };\n    if (proposed.state === 'pending')\n      return { accepted: true, submissionId: proposed.approval, error: null };\n    return {\n      accepted: false,\n      submissionId: null,\n      error: { code: 'EACCES', message: proposedSentence(proposed.reason) },\n    };\n  };\n  const transcript = lasting(replicated(transcriptMember));\n  const proposals = lasting(replicated(proposalsMember));\n  let open = true;\n  const finish = () => {\n    if (!open) return;\n    open = false;\n    transcript.freeze();\n    proposals.freeze();\n    for (const keep of keeping) keep.stop();\n    handle.release();\n  };\n  const closed = link.ended.then((reason) => {\n    finish();\n    return reason;\n  });\n  const settings: AgentSettings = {\n    state: replicatedState({ models: [], accounts: [] }),\n    connect: refuse,\n    disconnect: refuse,\n    signIn: refuse,\n    dismissMoved: refuse,\n  };\n  return {\n    serverId,\n    guest,\n    control,\n    transcript: transcript.state,\n    proposals: proposals.state,\n    deliveries: replicatedState({}),\n    agents: replicatedState({\n      active: guest.agentId,\n      agents: [\n        { id: guest.agentId, name: guest.name, kind: 'cone' as const, parentId: null, role: null },\n      ],\n    }),\n    settings,\n    closed,\n    propose,\n    prompt: refuse,\n    webhook: refuse,\n    async close() {\n      finish();\n      link.close('closed');\n      await closed;\n      await host.close();\n    },\n  };\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,cAA6B,uBAAuB;AAEzE,SAA+B,eAAe;AAC9C;AAAA,EAEE;AAAA,EAEA;AAAA,OAIK;AACP,SAAS,YAAY,MAAM,OAAoB,kBAAkB;AACjE,SAA4B,gBAAgB;AAGrC,MAAM,aAAa;AACnB,MAAM,eAAe;AAE5B,MAAM,OAA+B;AAAA,EACnC,SAAS;AAAA,EACT,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,aAAa;AACf;AAEO,MAAM,mBAAmB,CAAC,WAC/B,KAAK,MAAM,KAAK;AAElB,MAAM,UAAU,CAAC,SAAiB,OAAO,aAAa,OAAO,OAAO,IAAI,MAAM,OAAO,GAAG,EAAE,KAAK,CAAC;AAOhG,eAAsB,aAAa,UAAkD;AACnF,QAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,KAAK;AAAA,EACxB,QAAQ;AACN,UAAM,QAAQ,YAAY;AAAA,EAC5B;AACA,QAAM,OAAO,WAAW,EAAE,MAAM,SAAS,OAAO,WAAW,CAAC,IAAI,MAAM,SAAS,CAAC;AAChF,OAAK,QAAQ,IAAI;AACjB,QAAM,SAAS,KAAK,IAAI,mBAAmB,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC;AACjE,QAAM,OAAO,OAAO,UAAmC;AACrD,WAAO,QAAQ;AACf,SAAK,MAAM,kBAAkB;AAC7B,UAAM,KAAK,MAAM;AACjB,UAAM;AAAA,EACR;AACA,MAAI;AACF,UAAM,QAAQ,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,KAAK,MAAM,KAAK,MAAM;AACpB,cAAM,QAAQ,YAAY;AAAA,MAC5B,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,KAAK,aAAa,KAAK,KAAK,MAAM,SAAS,cAAc,QAAQ,YAAY,IAAI,KAAK;AAAA,EAC/F;AACA,MAAI,OAAO,SAAS,QAAS,QAAO,KAAK,QAAQ,YAAY,CAAC;AAC9D,QAAM,mBAAmB,OAAO;AAChC,QAAM,aAAa,OAAO;AAC1B,QAAM,kBAAkB,OAAO;AAC/B,QAAM,UAAU,CAAC,kBAAkB,YAAY,eAAe,EAAE,IAAI,IAAI;AACxE,QAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC;AAC/E,QAAM,OAAO,OAAO;AACpB,QAAM,UAAU,OAAO,YAA4B;AACjD,QAAI;AACF,aAAO,MAAM,KAAK,KAAK,CAAC,QAAQ,KAAK,CAAC,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC;AAAA,IAC1D,SAAS,OAAO;AACd,YAAM,MAAM,KAAK;AAAA,IACnB;AAAA,EACF;AACA,QAAM,QAAQ,WAAW;AACzB,QAAM,SAAS,MAAM,QAAQ,OAAO,QAAQ,UAAU,CAAC;AACvD,QAAM,UAAU,OAAO;AAAA,IACrB,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,MAAM,CAAC;AAAA,EAC9C;AACA,UAAQ,OAAO,OAAO,YAAmC;AACvD,QAAI,QAAQ,aAAa;AACvB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,cAAc;AAAA,QACd,OAAO,EAAE,MAAM,UAAU,SAAS,8BAA8B;AAAA,MAClE;AACF,UAAM,WAAW,MAAM,QAAQ,EAAE,MAAM,QAAQ,MAAM,WAAW,QAAQ,UAAU,CAAC;AACnF,QAAI,SAAS,UAAU;AACrB,aAAO,EAAE,UAAU,MAAM,cAAc,SAAS,cAAc,OAAO,KAAK;AAC5E,QAAI,SAAS,UAAU;AACrB,aAAO,EAAE,UAAU,MAAM,cAAc,SAAS,UAAU,OAAO,KAAK;AACxE,WAAO;AAAA,MACL,UAAU;AAAA,MACV,cAAc;AAAA,MACd,OAAO,EAAE,MAAM,UAAU,SAAS,iBAAiB,SAAS,MAAM,EAAE;AAAA,IACtE;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,WAAW,gBAAgB,CAAC;AACvD,QAAM,YAAY,QAAQ,WAAW,eAAe,CAAC;AACrD,MAAI,OAAO;AACX,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,KAAM;AACX,WAAO;AACP,eAAW,OAAO;AAClB,cAAU,OAAO;AACjB,eAAW,QAAQ,QAAS,MAAK,KAAK;AACtC,WAAO,QAAQ;AAAA,EACjB;AACA,QAAM,SAAS,KAAK,MAAM,KAAK,CAAC,WAAW;AACzC,WAAO;AACP,WAAO;AAAA,EACT,CAAC;AACD,QAAM,WAA0B;AAAA,IAC9B,OAAO,gBAAgB,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,IACnD,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,cAAc;AAAA,EAChB;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,WAAW;AAAA,IACvB,WAAW,UAAU;AAAA,IACrB,YAAY,gBAAgB,CAAC,CAAC;AAAA,IAC9B,QAAQ,gBAAgB;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,QAAQ;AAAA,QACN,EAAE,IAAI,MAAM,SAAS,MAAM,MAAM,MAAM,MAAM,QAAiB,UAAU,MAAM,MAAM,KAAK;AAAA,MAC3F;AAAA,IACF,CAAC;AAAA,IACD;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,MAAM,QAAQ;AACZ,aAAO;AACP,WAAK,MAAM,QAAQ;AACnB,YAAM;AACN,YAAM,KAAK,MAAM;AAAA,IACnB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/guests/guard.js

@@ -0,0 +1,38 @@
+import {
+  defineExtension,
+  hook,
+  LiveDoc,
+  ToolTask
+} from "@earendil-works/pi-durable";
+const GUEST_GUARD = "slicc-guest-guard";
+const GUEST_REQUEST = "guest:";
+const GUEST_TOOLS_BLOCKED = "Tool calls in a run a guest started need a review, which this agent can't do yet.";
+function guestGuard(harness) {
+  return defineExtension({
+    name: GUEST_GUARD,
+    hooks: [
+      hook(ToolTask, {
+        async beforeTool(_call, api, context) {
+          const live = await api.snapshot(LiveDoc, api.conversationId, context);
+          const inputs = live?.run?.inputs ?? [];
+          if (!inputs.length) return void 0;
+          const held = harness();
+          if (!held) return { block: GUEST_TOOLS_BLOCKED };
+          for (const id of inputs) {
+            const submission = await held.submission(id, context);
+            const record = submission ? await submission.status(context) : void 0;
+            if (record?.requestId?.startsWith(GUEST_REQUEST)) return { block: GUEST_TOOLS_BLOCKED };
+          }
+          return void 0;
+        }
+      })
+    ]
+  });
+}
+export {
+  GUEST_GUARD,
+  GUEST_REQUEST,
+  GUEST_TOOLS_BLOCKED,
+  guestGuard
+};
+//# sourceMappingURL=guard.js.map

package/dist/guests/guard.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/guests/guard.ts"],
+  "sourcesContent": ["import {\n  defineExtension,\n  type Extension,\n  type Harness,\n  hook,\n  LiveDoc,\n  ToolTask,\n} from '@earendil-works/pi-durable';\n\nexport const GUEST_GUARD = 'slicc-guest-guard';\nexport const GUEST_REQUEST = 'guest:';\nexport const GUEST_TOOLS_BLOCKED =\n  \"Tool calls in a run a guest started need a review, which this agent can't do yet.\";\n\nexport function guestGuard(harness: () => Pick<Harness, 'submission'> | undefined): Extension {\n  return defineExtension({\n    name: GUEST_GUARD,\n    hooks: [\n      hook(ToolTask, {\n        async beforeTool(_call, api, context) {\n          const live = await api.snapshot(LiveDoc, api.conversationId, context);\n          const inputs = live?.run?.inputs ?? [];\n          if (!inputs.length) return undefined;\n          const held = harness();\n          if (!held) return { block: GUEST_TOOLS_BLOCKED };\n          for (const id of inputs) {\n            const submission = await held.submission(id, context);\n            const record = submission ? await submission.status(context) : undefined;\n            if (record?.requestId?.startsWith(GUEST_REQUEST)) return { block: GUEST_TOOLS_BLOCKED };\n          }\n          return undefined;\n        },\n      }),\n    ],\n  });\n}\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,sBACX;AAEK,SAAS,WAAW,SAAmE;AAC5F,SAAO,gBAAgB;AAAA,IACrB,MAAM;AAAA,IACN,OAAO;AAAA,MACL,KAAK,UAAU;AAAA,QACb,MAAM,WAAW,OAAO,KAAK,SAAS;AACpC,gBAAM,OAAO,MAAM,IAAI,SAAS,SAAS,IAAI,gBAAgB,OAAO;AACpE,gBAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,cAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,gBAAM,OAAO,QAAQ;AACrB,cAAI,CAAC,KAAM,QAAO,EAAE,OAAO,oBAAoB;AAC/C,qBAAW,MAAM,QAAQ;AACvB,kBAAM,aAAa,MAAM,KAAK,WAAW,IAAI,OAAO;AACpD,kBAAM,SAAS,aAAa,MAAM,WAAW,OAAO,OAAO,IAAI;AAC/D,gBAAI,QAAQ,WAAW,WAAW,aAAa,EAAG,QAAO,EAAE,OAAO,oBAAoB;AAAA,UACxF;AACA,iBAAO;AAAA,QACT;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACH;",
+  "names": []
+}

package/dist/guests/index.js

@@ -0,0 +1,282 @@
+import { replicatedState } from "@earendil-works/chord";
+import { BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
+import { InboxDoc } from "@earendil-works/pi-durable";
+import { scrubText } from "../secrets/scrub.js";
+import { GUEST_INPUT_KIND, guestContent } from "./attribution.js";
+import { GUEST_REQUEST } from "./guard.js";
+import {
+  checkDraft,
+  cleanLabel,
+  GuestsDoc,
+  liveSeat,
+  MAX_SEAT_MS
+} from "./seats.js";
+const MAX_PROPOSAL = 32e3;
+const MAX_REQUEST = 128;
+const KEPT_DELIVERED = 100;
+const LONGEST_TIMER = 2 ** 31 - 1;
+const copy = (value) => JSON.parse(JSON.stringify(value));
+const unanswered = (reason) => ({
+  state: "unanswered",
+  submissionId: null,
+  reason
+});
+function prune(all, at) {
+  for (const [id, record] of Object.entries(all)) {
+    const over = record.revoked ?? record.expiresAt;
+    if (over !== null && at - over > MAX_SEAT_MS) delete all[id];
+  }
+}
+async function withdrawQueued(harness, agents, record, using) {
+  const conversation = await agents.conversation(record.agentId, using);
+  if (!conversation) return;
+  const queued = await harness.commit(
+    async (tx) => (await tx.doc(InboxDoc, conversation.id)).items.filter((item) => {
+      const entry = item.entry;
+      return entry?.kind === GUEST_INPUT_KIND && entry.data?.seat === record.id;
+    }).map((item) => item.id),
+    using
+  );
+  for (const id of queued) await harness.abortSubmission(id, using, conversation.id);
+}
+async function deliver(record, text, approval, requestId, agents, using) {
+  const conversation = await agents.conversation(record.agentId, using);
+  if (!conversation) return unanswered("gone");
+  const data = { seat: record.id, name: record.label, approval };
+  const submitted = await conversation.submit(
+    {
+      type: "input",
+      content: guestContent(record.label, text),
+      whenBusy: "followUp",
+      entry: { kind: GUEST_INPUT_KIND, data: { ...data } },
+      requestId
+    },
+    using
+  );
+  return { state: "submitted", submissionId: String(submitted.id), reason: null };
+}
+async function prepare(record, request) {
+  const text = typeof request?.text === "string" ? request.text.trim() : "";
+  if (!text) return unanswered("empty");
+  if (text.length > MAX_PROPOSAL) return unanswered("too-long");
+  const asked = typeof request.requestId === "string" && request.requestId && request.requestId.length <= MAX_REQUEST ? request.requestId : crypto.randomUUID();
+  return { text: await scrubText(text), requestId: `${GUEST_REQUEST}${record.id}:${asked}` };
+}
+async function place(record, prepared, options, using) {
+  const gate = record.gates.messages;
+  if (gate === "off")
+    return deliver(record, prepared.text, null, prepared.requestId, options.agents, using);
+  if (!options.approvals) return unanswered("unavailable");
+  const item = await options.approvals.request(
+    {
+      kind: "guest-message",
+      seat: record.id,
+      agentId: record.agentId,
+      requester: { kind: "guest", name: record.label, seat: record.id },
+      tier: gate,
+      detail: { text: prepared.text, attachments: [] }
+    },
+    using
+  );
+  if (item.state !== "pending") return unanswered(item.reason ?? item.state);
+  return { state: "pending", submissionId: null, approval: item.id, reason: null };
+}
+function keyedLine() {
+  const locks = /* @__PURE__ */ new Map();
+  return (id, run) => {
+    const next = (locks.get(id) ?? Promise.resolve()).then(run, run);
+    const settled = next.catch(() => void 0);
+    locks.set(id, settled);
+    void settled.then(() => {
+      if (locks.get(id) === settled) locks.delete(id);
+    });
+    return next;
+  };
+}
+const pendingIn = (approvals) => (id) => (approvals?.state.value ?? []).filter((item) => item.seat === id && item.state === "pending").length;
+function shownSeats(records, links, at, pendingOf) {
+  return Object.values(records).filter((record) => liveSeat(record, at)).sort((a, b) => a.createdAt - b.createdAt || a.id.localeCompare(b.id)).map((record) => ({
+    id: record.id,
+    label: record.label,
+    agentId: record.agentId,
+    createdAt: record.createdAt,
+    expiresAt: record.expiresAt,
+    gates: { ...record.gates },
+    connected: (links.get(record.id) ?? 0) > 0,
+    pending: pendingOf(record.id)
+  }));
+}
+async function createGuests(options) {
+  const { harness, agents } = options;
+  const now = options.now ?? Date.now;
+  const context = options.context ?? BACKGROUND_CONTEXT;
+  const records = await harness.commit(
+    async (tx) => copy((await tx.doc(GuestsDoc)).seats),
+    context
+  );
+  const links = /* @__PURE__ */ new Map();
+  const ended = /* @__PURE__ */ new Set();
+  const gone = /* @__PURE__ */ new Set();
+  const shown = () => shownSeats(records, links, now(), pendingIn(options.approvals));
+  const seats = replicatedState(shown());
+  let timer;
+  const locked = keyedLine();
+  const cleanup = (record, using) => locked(record.id, async () => {
+    await withdrawQueued(harness, agents, record, using);
+    await options.approvals?.withdrawSeat(record.id, using);
+  });
+  const end = (id, using = context) => {
+    const record = records[id];
+    if (gone.has(id) || !record) return Promise.resolve();
+    gone.add(id);
+    for (const listener of [...ended]) listener(id);
+    return cleanup(record, using);
+  };
+  const publish = () => {
+    const at = now();
+    for (const record of Object.values(records))
+      if (!liveSeat(record, at)) void end(record.id).catch(() => void 0);
+    seats.replace(context, shown());
+    if (timer) clearTimeout(timer);
+    timer = void 0;
+    const next = Math.min(
+      ...Object.values(records).filter((record) => liveSeat(record, at) && record.expiresAt !== null).map((record) => record.expiresAt)
+    );
+    if (Number.isFinite(next))
+      timer = setTimeout(publish, Math.min(Math.max(0, next - at), LONGEST_TIMER));
+  };
+  publish();
+  const write = (change) => harness.commit(async (tx) => {
+    const doc = await tx.doc(GuestsDoc);
+    const changed = change(doc.seats);
+    return changed ? copy(changed) : void 0;
+  }, context);
+  const delivering = /* @__PURE__ */ new Set();
+  const deliverOne = (seat, item) => locked(seat, async () => {
+    const record = records[seat];
+    if (!record || !liveSeat(record, now())) return;
+    await deliverLocked(record, item);
+  });
+  const deliverLocked = async (record, item) => {
+    const text = item.detail.text ?? "";
+    const requestId = `${GUEST_REQUEST}${record.id}:${item.id}`;
+    const sent = await deliver(record, text, item.id, requestId, agents, context);
+    if (sent.state !== "submitted") return;
+    const changed = await write((all) => {
+      const kept = all[record.id];
+      if (!kept) return void 0;
+      kept.delivered = [...kept.delivered ?? [], item.id].slice(-KEPT_DELIVERED);
+      return kept;
+    });
+    if (changed) records[record.id] = changed;
+  };
+  const approved = (items) => {
+    for (const item of items) {
+      if (item.kind !== "guest-message" || item.state !== "approved" || !item.seat) continue;
+      const record = records[item.seat];
+      if (!record || !liveSeat(record, now()) || delivering.has(item.id)) continue;
+      if (record.delivered?.includes(item.id)) continue;
+      delivering.add(item.id);
+      void deliverOne(record.id, item).catch(() => void 0);
+    }
+  };
+  const offPending = options.approvals?.state.subscribe((items) => {
+    seats.replace(context, shown());
+    approved(items);
+  });
+  approved(options.approvals?.state.value ?? []);
+  const current = (guest) => {
+    const record = records[guest.id];
+    return record && liveSeat(record, now()) && record.epoch === guest.epoch ? record : void 0;
+  };
+  return {
+    seats,
+    async open(draft, using) {
+      const at = now();
+      const problem = checkDraft(draft, at);
+      if (problem) return { seat: null, error: problem };
+      if (!agents.state().cones[draft.agentId])
+        return { seat: null, error: `There is no cone ${draft.agentId}.` };
+      const record = {
+        id: draft.id,
+        label: cleanLabel(draft.label),
+        agentId: draft.agentId,
+        expiresAt: draft.expiresAt,
+        gates: { messages: draft.gates.messages, tools: draft.gates.tools },
+        createdAt: at,
+        epoch: 1,
+        revoked: null
+      };
+      const kept = await harness.commit(async (tx) => {
+        const doc = await tx.doc(GuestsDoc);
+        if (doc.seats[record.id]) return null;
+        prune(doc.seats, at);
+        doc.seats[record.id] = copy(record);
+        return copy(doc.seats);
+      }, using);
+      if (!kept) return { seat: null, error: "That guest seat already exists." };
+      for (const id of Object.keys(records)) delete records[id];
+      Object.assign(records, kept);
+      publish();
+      return { seat: shown().find((seat) => seat.id === record.id), error: null };
+    },
+    async revoke(id, using) {
+      const at = now();
+      const changed = await write((all) => {
+        const record = all[id];
+        if (!record || record.revoked !== null) return void 0;
+        record.revoked = at;
+        record.epoch += 1;
+        return record;
+      });
+      if (!changed) return { revoked: false };
+      records[id] = changed;
+      const ending = end(id, using);
+      publish();
+      await ending;
+      return { revoked: true };
+    },
+    admit(id, label) {
+      const record = records[id];
+      if (!record || !liveSeat(record, now()) || record.label !== cleanLabel(label)) return null;
+      return { id: record.id, name: record.label, epoch: record.epoch };
+    },
+    record: (id) => records[id],
+    current,
+    joined(id) {
+      links.set(id, (links.get(id) ?? 0) + 1);
+      seats.replace(context, shown());
+      let left = false;
+      return () => {
+        if (left) return;
+        left = true;
+        links.set(id, (links.get(id) ?? 1) - 1);
+        seats.replace(context, shown());
+      };
+    },
+    onEnd(listener) {
+      ended.add(listener);
+      return () => ended.delete(listener);
+    },
+    async propose(guest, request, using) {
+      const record = current(guest);
+      if (!record) return unanswered("revoked");
+      const prepared = await prepare(record, request);
+      if ("state" in prepared) return prepared;
+      return locked(record.id, async () => {
+        const still = current(guest);
+        return still ? place(still, prepared, options, using) : unanswered("revoked");
+      });
+    },
+    dispose() {
+      if (timer) clearTimeout(timer);
+      offPending?.();
+      ended.clear();
+    }
+  };
+}
+export {
+  MAX_PROPOSAL,
+  createGuests
+};
+//# sourceMappingURL=index.js.map

package/dist/guests/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/guests/index.ts"],
+  "sourcesContent": ["import { type Context, type ReplicatedState, replicatedState } from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport { type Harness, InboxDoc } from '@earendil-works/pi-durable';\nimport type { Agents } from '../agents.ts';\nimport type { Approval, Approvals } from '../approvals/index.ts';\nimport { scrubText } from '../secrets/scrub.ts';\nimport type { GuestPrincipal } from '../serving.ts';\nimport { GUEST_INPUT_KIND, type GuestInput, guestContent } from './attribution.ts';\nimport { GUEST_REQUEST } from './guard.ts';\nimport {\n  checkDraft,\n  cleanLabel,\n  type GuestDraft,\n  type GuestSeat,\n  GuestsDoc,\n  liveSeat,\n  MAX_SEAT_MS,\n  type SeatRecord,\n} from './seats.ts';\n\nexport type GuestOpened = { seat: GuestSeat; error: null } | { seat: null; error: string };\n\nexport type Proposed =\n  | { state: 'submitted'; submissionId: string; reason: null }\n  | { state: 'pending'; submissionId: null; approval: string; reason: null }\n  | { state: 'unanswered'; submissionId: null; reason: string };\n\nexport interface ProposeRequest {\n  text: string;\n  requestId: string | null;\n}\n\nexport interface Guests {\n  readonly seats: ReplicatedState<GuestSeat[]>;\n  open(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  revoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n  admit(id: string, label: string): GuestPrincipal | null;\n  record(id: string): SeatRecord | undefined;\n  current(guest: GuestPrincipal): SeatRecord | undefined;\n  joined(id: string): () => void;\n  onEnd(listener: (id: string) => void): () => void;\n  propose(guest: GuestPrincipal, request: ProposeRequest, context: Context): Promise<Proposed>;\n  dispose(): void;\n}\n\nexport interface GuestsOptions {\n  harness: Pick<Harness, 'commit' | 'abortSubmission'>;\n  agents: Pick<Agents, 'state' | 'conversation'>;\n  approvals?: Pick<Approvals, 'state' | 'request' | 'withdrawSeat'>;\n  now?: () => number;\n  context?: Context;\n}\n\nexport const MAX_PROPOSAL = 32_000;\nconst MAX_REQUEST = 128;\nconst KEPT_DELIVERED = 100;\nconst LONGEST_TIMER = 2 ** 31 - 1;\n\nconst copy = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst unanswered = (reason: string): Proposed => ({\n  state: 'unanswered',\n  submissionId: null,\n  reason,\n});\n\nfunction prune(all: Record<string, SeatRecord>, at: number) {\n  for (const [id, record] of Object.entries(all)) {\n    const over = record.revoked ?? record.expiresAt;\n    if (over !== null && at - over > MAX_SEAT_MS) delete all[id];\n  }\n}\n\nasync function withdrawQueued(\n  harness: GuestsOptions['harness'],\n  agents: GuestsOptions['agents'],\n  record: SeatRecord,\n  using: Context\n) {\n  const conversation = await agents.conversation(record.agentId, using);\n  if (!conversation) return;\n  const queued = await harness.commit(\n    async (tx) =>\n      (await tx.doc(InboxDoc, conversation.id)).items\n        .filter((item) => {\n          const entry = item.entry as { kind?: string; data?: { seat?: unknown } } | undefined;\n          return entry?.kind === GUEST_INPUT_KIND && entry.data?.seat === record.id;\n        })\n        .map((item) => item.id),\n    using\n  );\n  for (const id of queued) await harness.abortSubmission(id, using, conversation.id);\n}\n\nasync function deliver(\n  record: SeatRecord,\n  text: string,\n  approval: string | null,\n  requestId: string,\n  agents: GuestsOptions['agents'],\n  using: Context\n): Promise<Proposed> {\n  const conversation = await agents.conversation(record.agentId, using);\n  if (!conversation) return unanswered('gone');\n  const data: GuestInput = { seat: record.id, name: record.label, approval };\n  const submitted = await conversation.submit(\n    {\n      type: 'input',\n      content: guestContent(record.label, text),\n      whenBusy: 'followUp',\n      entry: { kind: GUEST_INPUT_KIND, data: { ...data } },\n      requestId,\n    },\n    using\n  );\n  return { state: 'submitted', submissionId: String(submitted.id), reason: null };\n}\n\ntype Prepared = { text: string; requestId: string };\n\nasync function prepare(record: SeatRecord, request: ProposeRequest): Promise<Prepared | Proposed> {\n  const text = typeof request?.text === 'string' ? request.text.trim() : '';\n  if (!text) return unanswered('empty');\n  if (text.length > MAX_PROPOSAL) return unanswered('too-long');\n  const asked =\n    typeof request.requestId === 'string' &&\n    request.requestId &&\n    request.requestId.length <= MAX_REQUEST\n      ? request.requestId\n      : crypto.randomUUID();\n  return { text: await scrubText(text), requestId: `${GUEST_REQUEST}${record.id}:${asked}` };\n}\n\nasync function place(\n  record: SeatRecord,\n  prepared: Prepared,\n  options: GuestsOptions,\n  using: Context\n): Promise<Proposed> {\n  const gate = record.gates.messages;\n  if (gate === 'off')\n    return deliver(record, prepared.text, null, prepared.requestId, options.agents, using);\n  if (!options.approvals) return unanswered('unavailable');\n  const item = await options.approvals.request(\n    {\n      kind: 'guest-message',\n      seat: record.id,\n      agentId: record.agentId,\n      requester: { kind: 'guest', name: record.label, seat: record.id },\n      tier: gate,\n      detail: { text: prepared.text, attachments: [] },\n    },\n    using\n  );\n  if (item.state !== 'pending') return unanswered(item.reason ?? item.state);\n  return { state: 'pending', submissionId: null, approval: item.id, reason: null };\n}\n\nfunction keyedLine() {\n  const locks = new Map<string, Promise<unknown>>();\n  return <T>(id: string, run: () => Promise<T>): Promise<T> => {\n    const next = (locks.get(id) ?? Promise.resolve()).then(run, run);\n    const settled = next.catch(() => undefined);\n    locks.set(id, settled);\n    void settled.then(() => {\n      if (locks.get(id) === settled) locks.delete(id);\n    });\n    return next;\n  };\n}\n\nconst pendingIn =\n  (approvals: GuestsOptions['approvals']) =>\n  (id: string): number =>\n    (approvals?.state.value ?? []).filter((item) => item.seat === id && item.state === 'pending')\n      .length;\n\nfunction shownSeats(\n  records: Record<string, SeatRecord>,\n  links: ReadonlyMap<string, number>,\n  at: number,\n  pendingOf: (id: string) => number\n): GuestSeat[] {\n  return Object.values(records)\n    .filter((record) => liveSeat(record, at))\n    .sort((a, b) => a.createdAt - b.createdAt || a.id.localeCompare(b.id))\n    .map((record) => ({\n      id: record.id,\n      label: record.label,\n      agentId: record.agentId,\n      createdAt: record.createdAt,\n      expiresAt: record.expiresAt,\n      gates: { ...record.gates },\n      connected: (links.get(record.id) ?? 0) > 0,\n      pending: pendingOf(record.id),\n    }));\n}\n\nexport async function createGuests(options: GuestsOptions): Promise<Guests> {\n  const { harness, agents } = options;\n  const now = options.now ?? Date.now;\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const records: Record<string, SeatRecord> = await harness.commit(\n    async (tx) => copy((await tx.doc(GuestsDoc)).seats),\n    context\n  );\n  const links = new Map<string, number>();\n  const ended = new Set<(id: string) => void>();\n  const gone = new Set<string>();\n  const shown = () => shownSeats(records, links, now(), pendingIn(options.approvals));\n  const seats = replicatedState<GuestSeat[]>(shown());\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const locked = keyedLine();\n  const cleanup = (record: SeatRecord, using: Context) =>\n    locked(record.id, async () => {\n      await withdrawQueued(harness, agents, record, using);\n      await options.approvals?.withdrawSeat(record.id, using);\n    });\n  const end = (id: string, using: Context = context): Promise<void> => {\n    const record = records[id];\n    if (gone.has(id) || !record) return Promise.resolve();\n    gone.add(id);\n    for (const listener of [...ended]) listener(id);\n    return cleanup(record, using);\n  };\n  const publish = () => {\n    const at = now();\n    for (const record of Object.values(records))\n      if (!liveSeat(record, at)) void end(record.id).catch(() => undefined);\n    seats.replace(context, shown());\n    if (timer) clearTimeout(timer);\n    timer = undefined;\n    const next = Math.min(\n      ...Object.values(records)\n        .filter((record) => liveSeat(record, at) && record.expiresAt !== null)\n        .map((record) => record.expiresAt as number)\n    );\n    if (Number.isFinite(next))\n      timer = setTimeout(publish, Math.min(Math.max(0, next - at), LONGEST_TIMER));\n  };\n  publish();\n  const write = (change: (seats: Record<string, SeatRecord>) => SeatRecord | undefined) =>\n    harness.commit(async (tx) => {\n      const doc = await tx.doc(GuestsDoc);\n      const changed = change(doc.seats);\n      return changed ? copy(changed) : undefined;\n    }, context);\n  const delivering = new Set<string>();\n  const deliverOne = (seat: string, item: Approval) =>\n    locked(seat, async () => {\n      const record = records[seat];\n      if (!record || !liveSeat(record, now())) return;\n      await deliverLocked(record, item);\n    });\n  const deliverLocked = async (record: SeatRecord, item: Approval) => {\n    const text = (item.detail as { text?: string }).text ?? '';\n    const requestId = `${GUEST_REQUEST}${record.id}:${item.id}`;\n    const sent = await deliver(record, text, item.id, requestId, agents, context);\n    if (sent.state !== 'submitted') return;\n    const changed = await write((all) => {\n      const kept = all[record.id];\n      if (!kept) return undefined;\n      kept.delivered = [...(kept.delivered ?? []), item.id].slice(-KEPT_DELIVERED);\n      return kept;\n    });\n    if (changed) records[record.id] = changed;\n  };\n  const approved = (items: readonly Approval[]) => {\n    for (const item of items) {\n      if (item.kind !== 'guest-message' || item.state !== 'approved' || !item.seat) continue;\n      const record = records[item.seat];\n      if (!record || !liveSeat(record, now()) || delivering.has(item.id)) continue;\n      if (record.delivered?.includes(item.id)) continue;\n      delivering.add(item.id);\n      void deliverOne(record.id, item).catch(() => undefined);\n    }\n  };\n  const offPending = options.approvals?.state.subscribe((items) => {\n    seats.replace(context, shown());\n    approved(items);\n  });\n  approved(options.approvals?.state.value ?? []);\n  const current = (guest: GuestPrincipal) => {\n    const record = records[guest.id];\n    return record && liveSeat(record, now()) && record.epoch === guest.epoch ? record : undefined;\n  };\n  return {\n    seats,\n    async open(draft, using) {\n      const at = now();\n      const problem = checkDraft(draft, at);\n      if (problem) return { seat: null, error: problem };\n      if (!agents.state().cones[draft.agentId])\n        return { seat: null, error: `There is no cone ${draft.agentId}.` };\n      const record: SeatRecord = {\n        id: draft.id,\n        label: cleanLabel(draft.label),\n        agentId: draft.agentId,\n        expiresAt: draft.expiresAt,\n        gates: { messages: draft.gates.messages, tools: draft.gates.tools },\n        createdAt: at,\n        epoch: 1,\n        revoked: null,\n      };\n      const kept = await harness.commit(async (tx) => {\n        const doc = await tx.doc(GuestsDoc);\n        if (doc.seats[record.id]) return null;\n        prune(doc.seats, at);\n        doc.seats[record.id] = copy(record);\n        return copy(doc.seats);\n      }, using);\n      if (!kept) return { seat: null, error: 'That guest seat already exists.' };\n      for (const id of Object.keys(records)) delete records[id];\n      Object.assign(records, kept);\n      publish();\n      return { seat: shown().find((seat) => seat.id === record.id) as GuestSeat, error: null };\n    },\n    async revoke(id, using) {\n      const at = now();\n      const changed = await write((all) => {\n        const record = all[id];\n        if (!record || record.revoked !== null) return undefined;\n        record.revoked = at;\n        record.epoch += 1;\n        return record;\n      });\n      if (!changed) return { revoked: false };\n      records[id] = changed;\n      const ending = end(id, using);\n      publish();\n      await ending;\n      return { revoked: true };\n    },\n    admit(id, label) {\n      const record = records[id];\n      if (!record || !liveSeat(record, now()) || record.label !== cleanLabel(label)) return null;\n      return { id: record.id, name: record.label, epoch: record.epoch };\n    },\n    record: (id) => records[id],\n    current,\n    joined(id) {\n      links.set(id, (links.get(id) ?? 0) + 1);\n      seats.replace(context, shown());\n      let left = false;\n      return () => {\n        if (left) return;\n        left = true;\n        links.set(id, (links.get(id) ?? 1) - 1);\n        seats.replace(context, shown());\n      };\n    },\n    onEnd(listener) {\n      ended.add(listener);\n      return () => ended.delete(listener);\n    },\n    async propose(guest, request, using) {\n      const record = current(guest);\n      if (!record) return unanswered('revoked');\n      const prepared = await prepare(record, request);\n      if ('state' in prepared) return prepared;\n      return locked(record.id, async () => {\n        const still = current(guest);\n        return still ? place(still, prepared, options, using) : unanswered('revoked');\n      });\n    },\n    dispose() {\n      if (timer) clearTimeout(timer);\n      offPending?.();\n      ended.clear();\n    },\n  };\n}\n"],
+  "mappings": "AAAA,SAA6C,uBAAuB;AACpE,SAAS,0BAA0B;AACnC,SAAuB,gBAAgB;AAGvC,SAAS,iBAAiB;AAE1B,SAAS,kBAAmC,oBAAoB;AAChE,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAmCA,MAAM,eAAe;AAC5B,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB,KAAK,KAAK;AAEhC,MAAM,OAAO,CAAI,UAAgB,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAEjE,MAAM,aAAa,CAAC,YAA8B;AAAA,EAChD,OAAO;AAAA,EACP,cAAc;AAAA,EACd;AACF;AAEA,SAAS,MAAM,KAAiC,IAAY;AAC1D,aAAW,CAAC,IAAI,MAAM,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,UAAM,OAAO,OAAO,WAAW,OAAO;AACtC,QAAI,SAAS,QAAQ,KAAK,OAAO,YAAa,QAAO,IAAI,EAAE;AAAA,EAC7D;AACF;AAEA,eAAe,eACb,SACA,QACA,QACA,OACA;AACA,QAAM,eAAe,MAAM,OAAO,aAAa,OAAO,SAAS,KAAK;AACpE,MAAI,CAAC,aAAc;AACnB,QAAM,SAAS,MAAM,QAAQ;AAAA,IAC3B,OAAO,QACJ,MAAM,GAAG,IAAI,UAAU,aAAa,EAAE,GAAG,MACvC,OAAO,CAAC,SAAS;AAChB,YAAM,QAAQ,KAAK;AACnB,aAAO,OAAO,SAAS,oBAAoB,MAAM,MAAM,SAAS,OAAO;AAAA,IACzE,CAAC,EACA,IAAI,CAAC,SAAS,KAAK,EAAE;AAAA,IAC1B;AAAA,EACF;AACA,aAAW,MAAM,OAAQ,OAAM,QAAQ,gBAAgB,IAAI,OAAO,aAAa,EAAE;AACnF;AAEA,eAAe,QACb,QACA,MACA,UACA,WACA,QACA,OACmB;AACnB,QAAM,eAAe,MAAM,OAAO,aAAa,OAAO,SAAS,KAAK;AACpE,MAAI,CAAC,aAAc,QAAO,WAAW,MAAM;AAC3C,QAAM,OAAmB,EAAE,MAAM,OAAO,IAAI,MAAM,OAAO,OAAO,SAAS;AACzE,QAAM,YAAY,MAAM,aAAa;AAAA,IACnC;AAAA,MACE,MAAM;AAAA,MACN,SAAS,aAAa,OAAO,OAAO,IAAI;AAAA,MACxC,UAAU;AAAA,MACV,OAAO,EAAE,MAAM,kBAAkB,MAAM,EAAE,GAAG,KAAK,EAAE;AAAA,MACnD;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACA,SAAO,EAAE,OAAO,aAAa,cAAc,OAAO,UAAU,EAAE,GAAG,QAAQ,KAAK;AAChF;AAIA,eAAe,QAAQ,QAAoB,SAAuD;AAChG,QAAM,OAAO,OAAO,SAAS,SAAS,WAAW,QAAQ,KAAK,KAAK,IAAI;AACvE,MAAI,CAAC,KAAM,QAAO,WAAW,OAAO;AACpC,MAAI,KAAK,SAAS,aAAc,QAAO,WAAW,UAAU;AAC5D,QAAM,QACJ,OAAO,QAAQ,cAAc,YAC7B,QAAQ,aACR,QAAQ,UAAU,UAAU,cACxB,QAAQ,YACR,OAAO,WAAW;AACxB,SAAO,EAAE,MAAM,MAAM,UAAU,IAAI,GAAG,WAAW,GAAG,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK,GAAG;AAC3F;AAEA,eAAe,MACb,QACA,UACA,SACA,OACmB;AACnB,QAAM,OAAO,OAAO,MAAM;AAC1B,MAAI,SAAS;AACX,WAAO,QAAQ,QAAQ,SAAS,MAAM,MAAM,SAAS,WAAW,QAAQ,QAAQ,KAAK;AACvF,MAAI,CAAC,QAAQ,UAAW,QAAO,WAAW,aAAa;AACvD,QAAM,OAAO,MAAM,QAAQ,UAAU;AAAA,IACnC;AAAA,MACE,MAAM;AAAA,MACN,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,WAAW,EAAE,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,OAAO,GAAG;AAAA,MAChE,MAAM;AAAA,MACN,QAAQ,EAAE,MAAM,SAAS,MAAM,aAAa,CAAC,EAAE;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,MAAI,KAAK,UAAU,UAAW,QAAO,WAAW,KAAK,UAAU,KAAK,KAAK;AACzE,SAAO,EAAE,OAAO,WAAW,cAAc,MAAM,UAAU,KAAK,IAAI,QAAQ,KAAK;AACjF;AAEA,SAAS,YAAY;AACnB,QAAM,QAAQ,oBAAI,IAA8B;AAChD,SAAO,CAAI,IAAY,QAAsC;AAC3D,UAAM,QAAQ,MAAM,IAAI,EAAE,KAAK,QAAQ,QAAQ,GAAG,KAAK,KAAK,GAAG;AAC/D,UAAM,UAAU,KAAK,MAAM,MAAM,MAAS;AAC1C,UAAM,IAAI,IAAI,OAAO;AACrB,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,MAAM,IAAI,EAAE,MAAM,QAAS,OAAM,OAAO,EAAE;AAAA,IAChD,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,MAAM,YACJ,CAAC,cACD,CAAC,QACE,WAAW,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,MAAM,KAAK,UAAU,SAAS,EACzF;AAEP,SAAS,WACP,SACA,OACA,IACA,WACa;AACb,SAAO,OAAO,OAAO,OAAO,EACzB,OAAO,CAAC,WAAW,SAAS,QAAQ,EAAE,CAAC,EACvC,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC,EACpE,IAAI,CAAC,YAAY;AAAA,IAChB,IAAI,OAAO;AAAA,IACX,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,IACzB,YAAY,MAAM,IAAI,OAAO,EAAE,KAAK,KAAK;AAAA,IACzC,SAAS,UAAU,OAAO,EAAE;AAAA,EAC9B,EAAE;AACN;AAEA,eAAsB,aAAa,SAAyC;AAC1E,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,UAAsC,MAAM,QAAQ;AAAA,IACxD,OAAO,OAAO,MAAM,MAAM,GAAG,IAAI,SAAS,GAAG,KAAK;AAAA,IAClD;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,QAAQ,oBAAI,IAA0B;AAC5C,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,QAAQ,MAAM,WAAW,SAAS,OAAO,IAAI,GAAG,UAAU,QAAQ,SAAS,CAAC;AAClF,QAAM,QAAQ,gBAA6B,MAAM,CAAC;AAClD,MAAI;AACJ,QAAM,SAAS,UAAU;AACzB,QAAM,UAAU,CAAC,QAAoB,UACnC,OAAO,OAAO,IAAI,YAAY;AAC5B,UAAM,eAAe,SAAS,QAAQ,QAAQ,KAAK;AACnD,UAAM,QAAQ,WAAW,aAAa,OAAO,IAAI,KAAK;AAAA,EACxD,CAAC;AACH,QAAM,MAAM,CAAC,IAAY,QAAiB,YAA2B;AACnE,UAAM,SAAS,QAAQ,EAAE;AACzB,QAAI,KAAK,IAAI,EAAE,KAAK,CAAC,OAAQ,QAAO,QAAQ,QAAQ;AACpD,SAAK,IAAI,EAAE;AACX,eAAW,YAAY,CAAC,GAAG,KAAK,EAAG,UAAS,EAAE;AAC9C,WAAO,QAAQ,QAAQ,KAAK;AAAA,EAC9B;AACA,QAAM,UAAU,MAAM;AACpB,UAAM,KAAK,IAAI;AACf,eAAW,UAAU,OAAO,OAAO,OAAO;AACxC,UAAI,CAAC,SAAS,QAAQ,EAAE,EAAG,MAAK,IAAI,OAAO,EAAE,EAAE,MAAM,MAAM,MAAS;AACtE,UAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,QAAI,MAAO,cAAa,KAAK;AAC7B,YAAQ;AACR,UAAM,OAAO,KAAK;AAAA,MAChB,GAAG,OAAO,OAAO,OAAO,EACrB,OAAO,CAAC,WAAW,SAAS,QAAQ,EAAE,KAAK,OAAO,cAAc,IAAI,EACpE,IAAI,CAAC,WAAW,OAAO,SAAmB;AAAA,IAC/C;AACA,QAAI,OAAO,SAAS,IAAI;AACtB,cAAQ,WAAW,SAAS,KAAK,IAAI,KAAK,IAAI,GAAG,OAAO,EAAE,GAAG,aAAa,CAAC;AAAA,EAC/E;AACA,UAAQ;AACR,QAAM,QAAQ,CAAC,WACb,QAAQ,OAAO,OAAO,OAAO;AAC3B,UAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,UAAM,UAAU,OAAO,IAAI,KAAK;AAChC,WAAO,UAAU,KAAK,OAAO,IAAI;AAAA,EACnC,GAAG,OAAO;AACZ,QAAM,aAAa,oBAAI,IAAY;AACnC,QAAM,aAAa,CAAC,MAAc,SAChC,OAAO,MAAM,YAAY;AACvB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,EAAG;AACzC,UAAM,cAAc,QAAQ,IAAI;AAAA,EAClC,CAAC;AACH,QAAM,gBAAgB,OAAO,QAAoB,SAAmB;AAClE,UAAM,OAAQ,KAAK,OAA6B,QAAQ;AACxD,UAAM,YAAY,GAAG,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK,EAAE;AACzD,UAAM,OAAO,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI,WAAW,QAAQ,OAAO;AAC5E,QAAI,KAAK,UAAU,YAAa;AAChC,UAAM,UAAU,MAAM,MAAM,CAAC,QAAQ;AACnC,YAAM,OAAO,IAAI,OAAO,EAAE;AAC1B,UAAI,CAAC,KAAM,QAAO;AAClB,WAAK,YAAY,CAAC,GAAI,KAAK,aAAa,CAAC,GAAI,KAAK,EAAE,EAAE,MAAM,CAAC,cAAc;AAC3E,aAAO;AAAA,IACT,CAAC;AACD,QAAI,QAAS,SAAQ,OAAO,EAAE,IAAI;AAAA,EACpC;AACA,QAAM,WAAW,CAAC,UAA+B;AAC/C,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,SAAS,mBAAmB,KAAK,UAAU,cAAc,CAAC,KAAK,KAAM;AAC9E,YAAM,SAAS,QAAQ,KAAK,IAAI;AAChC,UAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,KAAK,WAAW,IAAI,KAAK,EAAE,EAAG;AACpE,UAAI,OAAO,WAAW,SAAS,KAAK,EAAE,EAAG;AACzC,iBAAW,IAAI,KAAK,EAAE;AACtB,WAAK,WAAW,OAAO,IAAI,IAAI,EAAE,MAAM,MAAM,MAAS;AAAA,IACxD;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,WAAW,MAAM,UAAU,CAAC,UAAU;AAC/D,UAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,aAAS,KAAK;AAAA,EAChB,CAAC;AACD,WAAS,QAAQ,WAAW,MAAM,SAAS,CAAC,CAAC;AAC7C,QAAM,UAAU,CAAC,UAA0B;AACzC,UAAM,SAAS,QAAQ,MAAM,EAAE;AAC/B,WAAO,UAAU,SAAS,QAAQ,IAAI,CAAC,KAAK,OAAO,UAAU,MAAM,QAAQ,SAAS;AAAA,EACtF;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,OAAO,OAAO;AACvB,YAAM,KAAK,IAAI;AACf,YAAM,UAAU,WAAW,OAAO,EAAE;AACpC,UAAI,QAAS,QAAO,EAAE,MAAM,MAAM,OAAO,QAAQ;AACjD,UAAI,CAAC,OAAO,MAAM,EAAE,MAAM,MAAM,OAAO;AACrC,eAAO,EAAE,MAAM,MAAM,OAAO,oBAAoB,MAAM,OAAO,IAAI;AACnE,YAAM,SAAqB;AAAA,QACzB,IAAI,MAAM;AAAA,QACV,OAAO,WAAW,MAAM,KAAK;AAAA,QAC7B,SAAS,MAAM;AAAA,QACf,WAAW,MAAM;AAAA,QACjB,OAAO,EAAE,UAAU,MAAM,MAAM,UAAU,OAAO,MAAM,MAAM,MAAM;AAAA,QAClE,WAAW;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,MACX;AACA,YAAM,OAAO,MAAM,QAAQ,OAAO,OAAO,OAAO;AAC9C,cAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,YAAI,IAAI,MAAM,OAAO,EAAE,EAAG,QAAO;AACjC,cAAM,IAAI,OAAO,EAAE;AACnB,YAAI,MAAM,OAAO,EAAE,IAAI,KAAK,MAAM;AAClC,eAAO,KAAK,IAAI,KAAK;AAAA,MACvB,GAAG,KAAK;AACR,UAAI,CAAC,KAAM,QAAO,EAAE,MAAM,MAAM,OAAO,kCAAkC;AACzE,iBAAW,MAAM,OAAO,KAAK,OAAO,EAAG,QAAO,QAAQ,EAAE;AACxD,aAAO,OAAO,SAAS,IAAI;AAC3B,cAAQ;AACR,aAAO,EAAE,MAAM,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,OAAO,OAAO,EAAE,GAAgB,OAAO,KAAK;AAAA,IACzF;AAAA,IACA,MAAM,OAAO,IAAI,OAAO;AACtB,YAAM,KAAK,IAAI;AACf,YAAM,UAAU,MAAM,MAAM,CAAC,QAAQ;AACnC,cAAM,SAAS,IAAI,EAAE;AACrB,YAAI,CAAC,UAAU,OAAO,YAAY,KAAM,QAAO;AAC/C,eAAO,UAAU;AACjB,eAAO,SAAS;AAChB,eAAO;AAAA,MACT,CAAC;AACD,UAAI,CAAC,QAAS,QAAO,EAAE,SAAS,MAAM;AACtC,cAAQ,EAAE,IAAI;AACd,YAAM,SAAS,IAAI,IAAI,KAAK;AAC5B,cAAQ;AACR,YAAM;AACN,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAAA,IACA,MAAM,IAAI,OAAO;AACf,YAAM,SAAS,QAAQ,EAAE;AACzB,UAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,KAAK,OAAO,UAAU,WAAW,KAAK,EAAG,QAAO;AACtF,aAAO,EAAE,IAAI,OAAO,IAAI,MAAM,OAAO,OAAO,OAAO,OAAO,MAAM;AAAA,IAClE;AAAA,IACA,QAAQ,CAAC,OAAO,QAAQ,EAAE;AAAA,IAC1B;AAAA,IACA,OAAO,IAAI;AACT,YAAM,IAAI,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;AACtC,YAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,UAAI,OAAO;AACX,aAAO,MAAM;AACX,YAAI,KAAM;AACV,eAAO;AACP,cAAM,IAAI,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;AACtC,cAAM,QAAQ,SAAS,MAAM,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,IACA,MAAM,UAAU;AACd,YAAM,IAAI,QAAQ;AAClB,aAAO,MAAM,MAAM,OAAO,QAAQ;AAAA,IACpC;AAAA,IACA,MAAM,QAAQ,OAAO,SAAS,OAAO;AACnC,YAAM,SAAS,QAAQ,KAAK;AAC5B,UAAI,CAAC,OAAQ,QAAO,WAAW,SAAS;AACxC,YAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO;AAC9C,UAAI,WAAW,SAAU,QAAO;AAChC,aAAO,OAAO,OAAO,IAAI,YAAY;AACnC,cAAM,QAAQ,QAAQ,KAAK;AAC3B,eAAO,QAAQ,MAAM,OAAO,UAAU,SAAS,KAAK,IAAI,WAAW,SAAS;AAAA,MAC9E,CAAC;AAAA,IACH;AAAA,IACA,UAAU;AACR,UAAI,MAAO,cAAa,KAAK;AAC7B,mBAAa;AACb,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/guests/seats.js

@@ -0,0 +1,49 @@
+import { defineDoc } from "@earendil-works/pi-durable";
+const GuestsDoc = defineDoc({
+  kind: "slicc.guests",
+  version: 1,
+  scope: "session",
+  initial: () => ({ seats: {} })
+});
+const MAX_SEAT_MS = 30 * 24 * 60 * 60 * 1e3;
+const MAX_LABEL = 64;
+const MAX_ID = 256;
+function cleanLabel(raw) {
+  return String(raw ?? "").replace(/[\p{Cc}\p{Cf}]/gu, " ").replace(/\s+/g, " ").trim().slice(0, MAX_LABEL);
+}
+function isGate(value) {
+  if (typeof value !== "string") return false;
+  if (value === "user" || value === "agent" || value === "cone" || value === "off") return true;
+  return /^scoop:\S+$/.test(value);
+}
+function checkDraft(draft, now) {
+  if (typeof draft?.id !== "string" || !draft.id || draft.id.length > MAX_ID)
+    return "A guest seat needs an id from the tray hub.";
+  if (!cleanLabel(draft.label)) return "A guest seat needs a label.";
+  if (!isGate(draft.gates?.messages) || !isGate(draft.gates?.tools))
+    return "A guest seat needs a known gate for messages and for tools.";
+  if (draft.gates.tools === "off" || draft.gates.tools === "cone")
+    return "A guest's tool calls need a review: by a person, the judge or a scoop.";
+  const { expiresAt } = draft;
+  if (expiresAt !== null && (typeof expiresAt !== "number" || !Number.isFinite(expiresAt)))
+    return "A guest seat expires at a time, or never.";
+  if (expiresAt !== null && expiresAt <= now) return "That expiry has already passed.";
+  if (expiresAt !== null && expiresAt - now > MAX_SEAT_MS)
+    return "A guest seat lasts at most 30 days.";
+  return null;
+}
+function liveSeat(seat, now) {
+  return Boolean(
+    seat && seat.revoked === null && (seat.expiresAt === null || seat.expiresAt > now)
+  );
+}
+export {
+  GuestsDoc,
+  MAX_LABEL,
+  MAX_SEAT_MS,
+  checkDraft,
+  cleanLabel,
+  isGate,
+  liveSeat
+};
+//# sourceMappingURL=seats.js.map

package/dist/guests/seats.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/guests/seats.ts"],
+  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\nimport type { ApprovalTier } from '../approvals/record.ts';\n\nexport type GuestGate = ApprovalTier | 'off';\n\nexport type GuestGates = {\n  messages: GuestGate;\n  tools: GuestGate;\n};\n\nexport type GuestDraft = {\n  id: string;\n  label: string;\n  agentId: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n};\n\nexport type SeatRecord = GuestDraft & {\n  createdAt: number;\n  epoch: number;\n  revoked: number | null;\n  delivered?: string[];\n};\n\nexport interface GuestSeat {\n  id: string;\n  label: string;\n  agentId: string;\n  createdAt: number;\n  expiresAt: number | null;\n  gates: GuestGates;\n  connected: boolean;\n  pending: number;\n}\n\nexport type GuestsState = { seats: Record<string, SeatRecord> };\n\nexport const GuestsDoc = defineDoc<GuestsState>({\n  kind: 'slicc.guests',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ seats: {} }),\n});\n\nexport const MAX_SEAT_MS = 30 * 24 * 60 * 60 * 1000;\nexport const MAX_LABEL = 64;\nconst MAX_ID = 256;\n\nexport function cleanLabel(raw: unknown): string {\n  return String(raw ?? '')\n    .replace(/[\\p{Cc}\\p{Cf}]/gu, ' ')\n    .replace(/\\s+/g, ' ')\n    .trim()\n    .slice(0, MAX_LABEL);\n}\n\nexport function isGate(value: unknown): value is GuestGate {\n  if (typeof value !== 'string') return false;\n  if (value === 'user' || value === 'agent' || value === 'cone' || value === 'off') return true;\n  return /^scoop:\\S+$/.test(value);\n}\n\nexport function checkDraft(draft: GuestDraft, now: number): string | null {\n  if (typeof draft?.id !== 'string' || !draft.id || draft.id.length > MAX_ID)\n    return 'A guest seat needs an id from the tray hub.';\n  if (!cleanLabel(draft.label)) return 'A guest seat needs a label.';\n  if (!isGate(draft.gates?.messages) || !isGate(draft.gates?.tools))\n    return 'A guest seat needs a known gate for messages and for tools.';\n  if (draft.gates.tools === 'off' || draft.gates.tools === 'cone')\n    return \"A guest's tool calls need a review: by a person, the judge or a scoop.\";\n  const { expiresAt } = draft;\n  if (expiresAt !== null && (typeof expiresAt !== 'number' || !Number.isFinite(expiresAt)))\n    return 'A guest seat expires at a time, or never.';\n  if (expiresAt !== null && expiresAt <= now) return 'That expiry has already passed.';\n  if (expiresAt !== null && expiresAt - now > MAX_SEAT_MS)\n    return 'A guest seat lasts at most 30 days.';\n  return null;\n}\n\nexport function liveSeat(seat: SeatRecord | undefined, now: number): boolean {\n  return Boolean(\n    seat && seat.revoked === null && (seat.expiresAt === null || seat.expiresAt > now)\n  );\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAsCnB,MAAM,YAAY,UAAuB;AAAA,EAC9C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAEM,MAAM,cAAc,KAAK,KAAK,KAAK,KAAK;AACxC,MAAM,YAAY;AACzB,MAAM,SAAS;AAER,SAAS,WAAW,KAAsB;AAC/C,SAAO,OAAO,OAAO,EAAE,EACpB,QAAQ,oBAAoB,GAAG,EAC/B,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,SAAS;AACvB;AAEO,SAAS,OAAO,OAAoC;AACzD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,UAAU,UAAU,MAAO,QAAO;AACzF,SAAO,cAAc,KAAK,KAAK;AACjC;AAEO,SAAS,WAAW,OAAmB,KAA4B;AACxE,MAAI,OAAO,OAAO,OAAO,YAAY,CAAC,MAAM,MAAM,MAAM,GAAG,SAAS;AAClE,WAAO;AACT,MAAI,CAAC,WAAW,MAAM,KAAK,EAAG,QAAO;AACrC,MAAI,CAAC,OAAO,MAAM,OAAO,QAAQ,KAAK,CAAC,OAAO,MAAM,OAAO,KAAK;AAC9D,WAAO;AACT,MAAI,MAAM,MAAM,UAAU,SAAS,MAAM,MAAM,UAAU;AACvD,WAAO;AACT,QAAM,EAAE,UAAU,IAAI;AACtB,MAAI,cAAc,SAAS,OAAO,cAAc,YAAY,CAAC,OAAO,SAAS,SAAS;AACpF,WAAO;AACT,MAAI,cAAc,QAAQ,aAAa,IAAK,QAAO;AACnD,MAAI,cAAc,QAAQ,YAAY,MAAM;AAC1C,WAAO;AACT,SAAO;AACT;AAEO,SAAS,SAAS,MAA8B,KAAsB;AAC3E,SAAO;AAAA,IACL,QAAQ,KAAK,YAAY,SAAS,KAAK,cAAc,QAAQ,KAAK,YAAY;AAAA,EAChF;AACF;",
+  "names": []
+}