@ai-ecoverse/slicc-agent 5.4.1 → 5.5.0

package/dist/host.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/host.ts"],
-  "sourcesContent": ["import {\n  type Context,\n  createHost,\n  forbidden,\n  type Host,\n  type Readable,\n  type ReplicatedState,\n  replicatedState,\n  resource,\n  type Self,\n} from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Agent } from './agent.ts';\nimport {\n  type ApprovalJudge,\n  type Approvals,\n  attachApprovals,\n  type DecidedBy,\n} from './approvals/index.ts';\nimport type { ChangesView } from './changes/git.ts';\nimport type { ChangesRuntime } from './changes/index.ts';\nimport { createAgentControl, type HostLicks, type HostScoops } from './control.ts';\nimport { trackDeliveries } from './deliveries.ts';\nimport type { FreezerRuntime, FrozenCone } from './freezer/index.ts';\nimport { createGuests, type Guests } from './guests/index.ts';\nimport { admitGuest, guestOpener } from './guests/serve.ts';\nimport type { UserClients } from './kernel/users.ts';\nimport type { McpRuntime } from './mcp/index.ts';\nimport type { MemoryEntry, MemoryScope } from './memory/format.ts';\nimport type { MemoryRuntime } from './memory/index.ts';\nimport { createMonitor, type MonitorOptions } from './monitor/index.ts';\nimport { viewRemote } from './readonly.ts';\nimport { type AgentRemote, createRemote } from './remote/host.ts';\nimport { createPages, ownedPages, type Pages } from './remote/pages.ts';\nimport type { SecretName } from './secrets/names.ts';\nimport type { VaultState } from './secrets/vault.ts';\nimport {\n  AgentControl,\n  type AgentGuest,\n  AgentGuestService,\n  AgentPagesService,\n  AgentRemoteService,\n  AgentSettings,\n  AgentTranscript,\n  CONTROL_METHODS,\n  CONTROL_READS,\n  type Command,\n  GUEST_METHODS,\n  PAGE_METHODS,\n  type PrivateRevision,\n  REMOTE_METHODS,\n  REMOTE_READS,\n  SETTINGS_METHODS,\n} from './services.ts';\nimport {\n  AGENT_HOST,\n  type AgentPrincipal,\n  type GuestPrincipal,\n  guestOf,\n  principalKey,\n  readable,\n  readablesOf,\n  type Seat,\n  seatOf,\n  served,\n} from './serving.ts';\nimport type { SkillsRuntime } from './skills/index.ts';\nimport type { SprinklesRuntime } from './sprinkles/index.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\nimport { slimmer, type Thumbnail, thumbnail } from './thumbs.ts';\nimport { type LabelsRuntime, visibleLabels, watchLabel } from './titles/labels.ts';\nimport type { Uploads } from './uploads.ts';\nimport { agentViews } from './views.ts';\nimport { type PortEndpoint, PortLink } from './wire.ts';\n\nexport interface ConnectOptions {\n  readOnly?: boolean;\n  pages?: boolean;\n  guest?: { id: string; label: string };\n}\n\nexport interface AgentHost {\n  readonly serverId: string;\n  readonly agent: Agent;\n  readonly users?: UserClients;\n  readonly pages: Pages;\n  readonly guests: Guests;\n  readonly approvals: Approvals;\n  connect(endpoint: PortEndpoint, options?: ConnectOptions): void;\n  close(): Promise<void>;\n}\n\nconst noSettings: AgentSettings = {\n  state: replicatedState({ models: [], accounts: [] }),\n  connect: async () => {\n    throw new Error('this agent has no accounts');\n  },\n  disconnect: async () => {},\n  signIn: async () => null,\n  dismissMoved: async () => {},\n};\n\nasync function follow(\n  agent: Agent,\n  context: Context,\n  slim: (view: ConversationView) => ConversationView\n) {\n  let attached = await agent.cone().viewState(context);\n  const state = replicatedState<ConversationView>(slim(attached.value));\n  const mirror = (value: ConversationView, from: Context) => state.replace(from, slim(value));\n  let off = attached.subscribe(mirror);\n  const stop = agent.onCone(async (conversation) => {\n    const next = await conversation.viewState(context);\n    off();\n    attached.dispose();\n    attached = next;\n    state.replace(context, slim(next.value));\n    off = next.subscribe(mirror);\n  });\n  return {\n    state,\n    refresh: () => state.replace(context, slim(attached.value)),\n    dispose() {\n      stop();\n      off();\n      attached.dispose();\n    },\n  };\n}\n\nexport interface HostSecrets {\n  vault: ReplicatedState<VaultState>;\n  list(): readonly SecretName[];\n  close?(): void;\n}\n\nconst idleVault = replicatedState<VaultState>({\n  port: 'none',\n  needed: false,\n  version: 0,\n  locked: 'no',\n  held: 0,\n});\n\nfunction gatedControls(\n  control: AgentControl,\n  shown: (entry: number) => boolean,\n  views: () => readonly ConversationView[],\n  labels: ReplicatedState<Record<string, string>>\n) {\n  const visible = (entry: number) =>\n    views().some((view) => view.entries.some((item) => item.id === entry));\n  const gated =\n    (allowed: (entry: number) => boolean): AgentControl['image'] =>\n    async (ref, using) =>\n      allowed(ref.entry) ? control.image(ref, using) : { data: null, mimeType: null };\n  const trusted: AgentControl = { ...control, image: gated(shown) };\n  const viewed: AgentControl = { ...control, image: gated(visible), toolLabel: watchLabel(labels) };\n  return { trusted, viewed };\n}\n\nconst noRevision = () => replicatedState<PrivateRevision>({ revision: 0 });\n\nexport async function hostAgent(\n  agent: Agent,\n  options: {\n    serverId?: string;\n    context?: Context;\n    settings?: AgentSettings;\n    licks?: HostLicks;\n    scoops?: HostScoops;\n    skills?: SkillsRuntime;\n    sprinkles?: SprinklesRuntime;\n    memory?: MemoryRuntime;\n    freezer?: FreezerRuntime;\n    changes?: ChangesRuntime;\n    mcp?: Pick<McpRuntime, 'close'>;\n    users?: UserClients;\n    monitor?: Pick<MonitorOptions, 'kernel' | 'groups' | 'users'>;\n    pages?: Pages;\n    secrets?: HostSecrets;\n    uploads?: Uploads;\n    thumbnail?: Thumbnail;\n    labels?: LabelsRuntime;\n    approvals?: Approvals;\n    judge?: ApprovalJudge;\n  } = {}\n): Promise<AgentHost> {\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const serverId = options.serverId ?? crypto.randomUUID();\n  let refresh = () => {};\n  const slims = slimmer(options.thumbnail ?? thumbnail, () => refresh());\n  const transcript = await follow(agent, context, slims.slim);\n  const { state } = transcript;\n  const mounted = await agentViews(agent, context, slims.slim);\n  refresh = () => {\n    transcript.refresh();\n    mounted.refresh();\n  };\n  const touch = () => options.freezer?.touch();\n  const untouch = [state.subscribe(touch), mounted.views.subscribe(touch)];\n  const pages = options.pages ?? createPages();\n  const deliveries = trackDeliveries(agent.harness, state, context);\n  const approvals =\n    options.approvals ??\n    (await attachApprovals(\n      { harness: agent.harness, ...(options.judge ? { judge: options.judge } : {}) },\n      context\n    ));\n  const monitor = createMonitor({\n    ...options.monitor,\n    harness: agent.harness,\n    agents: agent.agents,\n    views: mounted.views,\n    context,\n  });\n  const guests = await createGuests({\n    harness: agent.harness,\n    agents: agent.agents,\n    approvals,\n    context,\n  });\n  const control = createAgentControl(\n    agent.harness,\n    agent,\n    deliveries,\n    options.licks,\n    options.scoops,\n    options.skills,\n    options.sprinkles,\n    options.memory,\n    options.freezer,\n    options.changes,\n    monitor,\n    options.secrets?.list,\n    options.uploads,\n    options.labels,\n    guests\n  );\n  const remote = createRemote({\n    harness: agent.harness,\n    send: (request, using) => control.send(request, using),\n    vault: options.secrets?.vault ?? idleVault,\n    async conversation(agentId, using) {\n      if (!agentId) return agent.cone();\n      const found = await agent.agents.conversation(agentId, using);\n      if (!found) throw new Error(`There is no agent ${agentId}.`);\n      return found;\n    },\n  });\n  const shownViews = () => [state.value, ...Object.values(mounted.views.value)];\n  const kept = options.labels?.labels ?? replicatedState<Record<string, string>>({});\n  const labels = visibleLabels(kept, [state, mounted.views], shownViews);\n  const transcriptService = {\n    state,\n    deliveries: deliveries.state,\n    agents: mounted.agents,\n    views: mounted.views,\n    commands: options.skills?.commands ?? replicatedState<Command[]>([]),\n    privateRevision: options.skills?.privateRevision ?? noRevision(),\n    sprinkles: options.sprinkles?.sprinkles ?? replicatedState<Sprinkle[]>([]),\n    memories: options.memory?.memories ?? replicatedState<MemoryEntry[]>([]),\n    memoryScopes: options.memory?.scopes ?? replicatedState<MemoryScope[]>([]),\n    frozen: options.freezer?.frozen ?? replicatedState<FrozenCone[]>([]),\n    changes:\n      options.changes?.view ?? replicatedState<ChangesView>({ unavailable: null, changes: [] }),\n    monitor: monitor.state,\n    vault: options.secrets?.vault ?? idleVault,\n    labels: labels.state,\n    guests: guests.seats,\n    approvals: approvals.state,\n  };\n  const settings = options.settings ?? noSettings;\n  const gates = gatedControls(control, slims.shown, shownViews, transcriptService.labels);\n  const { trusted, viewed } = gates;\n  const host = serveAgent({\n    trusted,\n    viewed,\n    transcript: transcriptService,\n    viewMonitor: monitor.viewState,\n    settings,\n    remote,\n    pages,\n    guest: guestOpener(guests, agent.agents, mounted.views, context, approvals.state),\n    decide: (by) => (id, decision, reason, using) =>\n      approvals.decide(id, decision, reason, by, using),\n  });\n  const offGuests = guests.onEnd((id) => {\n    void host.invalidatePrincipal((principal) => guestOf(principal)?.id === id);\n  });\n  let links = 0;\n  return {\n    serverId,\n    agent,\n    pages,\n    guests,\n    approvals,\n    ...(options.users ? { users: options.users } : {}),\n    connect(endpoint, connectOptions) {\n      if (connectOptions?.guest) {\n        links += 1;\n        admitGuest(guests, endpoint, connectOptions.guest, serverId, links, host);\n        return;\n      }\n      const seat: Seat = connectOptions?.readOnly\n        ? 'view'\n        : connectOptions?.pages === false\n          ? 'control'\n          : 'owner';\n      links += 1;\n      const link = new PortLink(endpoint);\n      link.greet(serverId);\n      host.accept(link, { principal: { seat, link: links } satisfies AgentPrincipal });\n    },\n    async close() {\n      offGuests();\n      await host.close();\n      guests.dispose();\n      await pages.dispose();\n      await monitor.dispose();\n      await remote.dispose();\n      deliveries.dispose();\n      approvals.close();\n      transcript.dispose();\n      mounted.dispose();\n      labels.dispose();\n      slims.dispose();\n      for (const off of untouch) off();\n      options.freezer?.close();\n      options.secrets?.close?.();\n      await options.changes?.close(context);\n      await options.memory?.close(context);\n      await options.sprinkles?.close(context);\n      await options.skills?.close(context);\n      await options.mcp?.close(context);\n      await options.scoops?.runtime.close(context);\n      await options.licks?.sources.close(context);\n      await agent.close();\n      await options.users?.close();\n    },\n  };\n}\n\ninterface Served {\n  trusted: AgentControl;\n  viewed: AgentControl;\n  transcript: Record<keyof AgentTranscript, ReplicatedState<unknown>>;\n  viewMonitor: ReplicatedState<unknown>;\n  settings: AgentSettings;\n  remote: AgentRemote;\n  pages: Pages;\n  guest?: (principal: GuestPrincipal) => { value: AgentGuest; dispose(): void } | undefined;\n  decide: (by: DecidedBy) => AgentControl['decide'];\n}\n\nexport const CLOSED_TO_GUESTS = 'a guest seat has only its transcript and propose';\n\nconst opened = new WeakSet<object>();\n\nexport const openToGuests = <F extends object>(factory: F): F => {\n  opened.add(factory);\n  return factory;\n};\n\nexport function closedToGuests(host: Host): Host {\n  const serve = ((type: never, factory: (...args: unknown[]) => unknown, options?: never) =>\n    host.serve(\n      type,\n      (opened.has(factory)\n        ? factory\n        : (input: unknown, principal: unknown, self: unknown) => {\n            if (seatOf(principal as never) === 'guest') throw forbidden(CLOSED_TO_GUESTS);\n            return factory(input, principal, self);\n          }) as never,\n      options\n    )) as Host['serve'];\n  return new Proxy(host, {\n    get(target, key) {\n      if (key === 'serve') return serve;\n      const value = Reflect.get(target, key, target) as unknown;\n      return typeof value === 'function' ? value.bind(target) : value;\n    },\n  });\n}\n\nexport function lazily<T>(state: () => ReplicatedState<T>): Readable<T> {\n  return {\n    get value() {\n      return readable(state()).value;\n    },\n    subscribe: (listener) => readable(state()).subscribe(listener),\n    events: (listener) => readable(state()).events(listener),\n  };\n}\n\nexport const GUEST_MANAGERS: ReadonlySet<Seat> = new Set<Seat>(['owner']);\n\nexport const OWNER_GUESTS = 'only the owner can invite or revoke guests';\n\nconst notOwner = () => Promise.reject(forbidden(OWNER_GUESTS));\n\nconst seated = (serving: Served, seat: Seat): AgentControl => ({\n  ...serving.trusted,\n  decide: serving.decide(seat === 'owner' ? 'owner' : 'follower'),\n  ...(GUEST_MANAGERS.has(seat) ? {} : { guestOpen: notOwner, guestRevoke: notOwner }),\n});\n\nexport function serveAgent(serving: Served): Host {\n  const host = closedToGuests(createHost({ name: AGENT_HOST, principalKey }));\n  const viewing = { ...serving.transcript, monitor: serving.viewMonitor };\n  host.serve(AgentControl, ((_input: unknown, principal: unknown) => {\n    const seat = seatOf(principal);\n    if (seat === 'view') return { kind: 'view', ...served(() => serving.viewed, CONTROL_READS) };\n    const control = seated(serving, seat);\n    return { kind: 'control', ...served(() => control, CONTROL_METHODS) };\n  }) as never);\n  host.serve(AgentTranscript, ((_input: unknown, principal: unknown) => ({\n    kind: 'transcript',\n    ...readablesOf(seatOf(principal) === 'view' ? viewing : serving.transcript),\n  })) as never);\n  host.serve(AgentSettings, ((_input: unknown, principal: unknown) => ({\n    kind: seatOf(principal) === 'view' ? 'view' : 'settings',\n    state: readable(serving.settings.state),\n    ...(seatOf(principal) === 'view' ? {} : served(() => serving.settings, SETTINGS_METHODS)),\n  })) as never);\n  host.serve(AgentRemoteService, ((_input: unknown, principal: unknown) => {\n    if (seatOf(principal) !== 'view')\n      return { kind: 'remote', ...served(() => serving.remote, REMOTE_METHODS) };\n    const scoped = viewRemote(serving.remote);\n    return { kind: 'watch', ...served(() => scoped, REMOTE_READS) };\n  }) as never);\n  host.serve(AgentPagesService, ((_input: unknown, principal: unknown, self: Self) => {\n    if (seatOf(principal) !== 'owner') return { kind: 'none' };\n    const held = self.resources({\n      mine: resource({\n        rev: 1,\n        open: () => ownedPages(serving.pages),\n        close: (mine) => mine.release(),\n      }),\n    });\n    return { kind: 'pages', ...served(() => held.mine.value, PAGE_METHODS) };\n  }) as never);\n  host.serve(\n    AgentGuestService,\n    openToGuests((_input: unknown, principal: unknown, self: Self) => {\n      const guest = guestOf(principal as never);\n      if (!guest) return { kind: 'none' };\n      const opening = serving.guest?.(guest);\n      if (!opening) throw forbidden(CLOSED_TO_GUESTS);\n      const held = self.resources({\n        seat: resource({ rev: 1, open: () => opening, close: (made) => made.dispose() }),\n      });\n      const later = (name: 'transcript' | 'seat' | 'proposals') =>\n        lazily(() => held.seat.value.value[name] as ReplicatedState<unknown>);\n      return {\n        kind: 'guest',\n        transcript: later('transcript'),\n        seat: later('seat'),\n        proposals: later('proposals'),\n        ...served(() => held.seat.value.value, GUEST_METHODS),\n      };\n    }) as never\n  );\n  return host;\n}\n"],
-  "mappings": "AAAA;AAAA,EAEE;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,0BAA0B;AAGnC;AAAA,EAGE;AAAA,OAEK;AAGP,SAAS,0BAA2D;AACpE,SAAS,uBAAuB;AAEhC,SAAS,oBAAiC;AAC1C,SAAS,YAAY,mBAAmB;AAKxC,SAAS,qBAA0C;AACnD,SAAS,kBAAkB;AAC3B,SAA2B,oBAAoB;AAC/C,SAAS,aAAa,kBAA8B;AAGpD;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,SAAyB,iBAAiB;AACnD,SAA6B,eAAe,kBAAkB;AAE9D,SAAS,kBAAkB;AAC3B,SAA4B,gBAAgB;AAmB5C,MAAM,aAA4B;AAAA,EAChC,OAAO,gBAAgB,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,EACnD,SAAS,YAAY;AACnB,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAAA,EACA,YAAY,YAAY;AAAA,EAAC;AAAA,EACzB,QAAQ,YAAY;AAAA,EACpB,cAAc,YAAY;AAAA,EAAC;AAC7B;AAEA,eAAe,OACb,OACA,SACA,MACA;AACA,MAAI,WAAW,MAAM,MAAM,KAAK,EAAE,UAAU,OAAO;AACnD,QAAM,QAAQ,gBAAkC,KAAK,SAAS,KAAK,CAAC;AACpE,QAAM,SAAS,CAAC,OAAyB,SAAkB,MAAM,QAAQ,MAAM,KAAK,KAAK,CAAC;AAC1F,MAAI,MAAM,SAAS,UAAU,MAAM;AACnC,QAAM,OAAO,MAAM,OAAO,OAAO,iBAAiB;AAChD,UAAM,OAAO,MAAM,aAAa,UAAU,OAAO;AACjD,QAAI;AACJ,aAAS,QAAQ;AACjB,eAAW;AACX,UAAM,QAAQ,SAAS,KAAK,KAAK,KAAK,CAAC;AACvC,UAAM,KAAK,UAAU,MAAM;AAAA,EAC7B,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM,MAAM,QAAQ,SAAS,KAAK,SAAS,KAAK,CAAC;AAAA,IAC1D,UAAU;AACR,WAAK;AACL,UAAI;AACJ,eAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AACF;AAQA,MAAM,YAAY,gBAA4B;AAAA,EAC5C,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,MAAM;AACR,CAAC;AAED,SAAS,cACP,SACA,OACA,OACA,QACA;AACA,QAAM,UAAU,CAAC,UACf,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,QAAQ,KAAK,CAAC,SAAS,KAAK,OAAO,KAAK,CAAC;AACvE,QAAM,QACJ,CAAC,YACD,OAAO,KAAK,UACV,QAAQ,IAAI,KAAK,IAAI,QAAQ,MAAM,KAAK,KAAK,IAAI,EAAE,MAAM,MAAM,UAAU,KAAK;AAClF,QAAM,UAAwB,EAAE,GAAG,SAAS,OAAO,MAAM,KAAK,EAAE;AAChE,QAAM,SAAuB,EAAE,GAAG,SAAS,OAAO,MAAM,OAAO,GAAG,WAAW,WAAW,MAAM,EAAE;AAChG,SAAO,EAAE,SAAS,OAAO;AAC3B;AAEA,MAAM,aAAa,MAAM,gBAAiC,EAAE,UAAU,EAAE,CAAC;AAEzE,eAAsB,UACpB,OACA,UAqBI,CAAC,GACe;AACpB,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,QAAQ,YAAY,OAAO,WAAW;AACvD,MAAI,UAAU,MAAM;AAAA,EAAC;AACrB,QAAM,QAAQ,QAAQ,QAAQ,aAAa,WAAW,MAAM,QAAQ,CAAC;AACrE,QAAM,aAAa,MAAM,OAAO,OAAO,SAAS,MAAM,IAAI;AAC1D,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,UAAU,MAAM,WAAW,OAAO,SAAS,MAAM,IAAI;AAC3D,YAAU,MAAM;AACd,eAAW,QAAQ;AACnB,YAAQ,QAAQ;AAAA,EAClB;AACA,QAAM,QAAQ,MAAM,QAAQ,SAAS,MAAM;AAC3C,QAAM,UAAU,CAAC,MAAM,UAAU,KAAK,GAAG,QAAQ,MAAM,UAAU,KAAK,CAAC;AACvE,QAAM,QAAQ,QAAQ,SAAS,YAAY;AAC3C,QAAM,aAAa,gBAAgB,MAAM,SAAS,OAAO,OAAO;AAChE,QAAM,YACJ,QAAQ,aACP,MAAM;AAAA,IACL,EAAE,SAAS,MAAM,SAAS,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC,EAAG;AAAA,IAC7E;AAAA,EACF;AACF,QAAM,UAAU,cAAc;AAAA,IAC5B,GAAG,QAAQ;AAAA,IACX,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,QAAQ;AAAA,IACf;AAAA,EACF,CAAC;AACD,QAAM,SAAS,MAAM,aAAa;AAAA,IAChC,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,UAAU;AAAA,IACd,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ,SAAS;AAAA,IACjB,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR;AAAA,EACF;AACA,QAAM,SAAS,aAAa;AAAA,IAC1B,SAAS,MAAM;AAAA,IACf,MAAM,CAAC,SAAS,UAAU,QAAQ,KAAK,SAAS,KAAK;AAAA,IACrD,OAAO,QAAQ,SAAS,SAAS;AAAA,IACjC,MAAM,aAAa,SAAS,OAAO;AACjC,UAAI,CAAC,QAAS,QAAO,MAAM,KAAK;AAChC,YAAM,QAAQ,MAAM,MAAM,OAAO,aAAa,SAAS,KAAK;AAC5D,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,OAAO,GAAG;AAC3D,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACD,QAAM,aAAa,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,OAAO,QAAQ,MAAM,KAAK,CAAC;AAC5E,QAAM,OAAO,QAAQ,QAAQ,UAAU,gBAAwC,CAAC,CAAC;AACjF,QAAM,SAAS,cAAc,MAAM,CAAC,OAAO,QAAQ,KAAK,GAAG,UAAU;AACrE,QAAM,oBAAoB;AAAA,IACxB;AAAA,IACA,YAAY,WAAW;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,OAAO,QAAQ;AAAA,IACf,UAAU,QAAQ,QAAQ,YAAY,gBAA2B,CAAC,CAAC;AAAA,IACnE,iBAAiB,QAAQ,QAAQ,mBAAmB,WAAW;AAAA,IAC/D,WAAW,QAAQ,WAAW,aAAa,gBAA4B,CAAC,CAAC;AAAA,IACzE,UAAU,QAAQ,QAAQ,YAAY,gBAA+B,CAAC,CAAC;AAAA,IACvE,cAAc,QAAQ,QAAQ,UAAU,gBAA+B,CAAC,CAAC;AAAA,IACzE,QAAQ,QAAQ,SAAS,UAAU,gBAA8B,CAAC,CAAC;AAAA,IACnE,SACE,QAAQ,SAAS,QAAQ,gBAA6B,EAAE,aAAa,MAAM,SAAS,CAAC,EAAE,CAAC;AAAA,IAC1F,SAAS,QAAQ;AAAA,IACjB,OAAO,QAAQ,SAAS,SAAS;AAAA,IACjC,QAAQ,OAAO;AAAA,IACf,QAAQ,OAAO;AAAA,IACf,WAAW,UAAU;AAAA,EACvB;AACA,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,QAAQ,cAAc,SAAS,MAAM,OAAO,YAAY,kBAAkB,MAAM;AACtF,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,QAAM,OAAO,WAAW;AAAA,IACtB;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,YAAY,QAAQ,MAAM,QAAQ,QAAQ,OAAO,SAAS,UAAU,KAAK;AAAA,IAChF,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,QAAQ,UACrC,UAAU,OAAO,IAAI,UAAU,QAAQ,IAAI,KAAK;AAAA,EACpD,CAAC;AACD,QAAM,YAAY,OAAO,MAAM,CAAC,OAAO;AACrC,SAAK,KAAK,oBAAoB,CAAC,cAAc,QAAQ,SAAS,GAAG,OAAO,EAAE;AAAA,EAC5E,CAAC;AACD,MAAI,QAAQ;AACZ,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,QAAQ,UAAU,gBAAgB;AAChC,UAAI,gBAAgB,OAAO;AACzB,iBAAS;AACT,mBAAW,QAAQ,UAAU,eAAe,OAAO,UAAU,OAAO,IAAI;AACxE;AAAA,MACF;AACA,YAAM,OAAa,gBAAgB,WAC/B,SACA,gBAAgB,UAAU,QACxB,YACA;AACN,eAAS;AACT,YAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,WAAK,MAAM,QAAQ;AACnB,WAAK,OAAO,MAAM,EAAE,WAAW,EAAE,MAAM,MAAM,MAAM,EAA2B,CAAC;AAAA,IACjF;AAAA,IACA,MAAM,QAAQ;AACZ,gBAAU;AACV,YAAM,KAAK,MAAM;AACjB,aAAO,QAAQ;AACf,YAAM,MAAM,QAAQ;AACpB,YAAM,QAAQ,QAAQ;AACtB,YAAM,OAAO,QAAQ;AACrB,iBAAW,QAAQ;AACnB,gBAAU,MAAM;AAChB,iBAAW,QAAQ;AACnB,cAAQ,QAAQ;AAChB,aAAO,QAAQ;AACf,YAAM,QAAQ;AACd,iBAAW,OAAO,QAAS,KAAI;AAC/B,cAAQ,SAAS,MAAM;AACvB,cAAQ,SAAS,QAAQ;AACzB,YAAM,QAAQ,SAAS,MAAM,OAAO;AACpC,YAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,YAAM,QAAQ,WAAW,MAAM,OAAO;AACtC,YAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,YAAM,QAAQ,KAAK,MAAM,OAAO;AAChC,YAAM,QAAQ,QAAQ,QAAQ,MAAM,OAAO;AAC3C,YAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO;AAC1C,YAAM,MAAM,MAAM;AAClB,YAAM,QAAQ,OAAO,MAAM;AAAA,IAC7B;AAAA,EACF;AACF;AAcO,MAAM,mBAAmB;AAEhC,MAAM,SAAS,oBAAI,QAAgB;AAE5B,MAAM,eAAe,CAAmB,YAAkB;AAC/D,SAAO,IAAI,OAAO;AAClB,SAAO;AACT;AAEO,SAAS,eAAe,MAAkB;AAC/C,QAAM,SAAS,CAAC,MAAa,SAA0C,YACrE,KAAK;AAAA,IACH;AAAA,IACC,OAAO,IAAI,OAAO,IACf,UACA,CAAC,OAAgB,WAAoB,SAAkB;AACrD,UAAI,OAAO,SAAkB,MAAM,QAAS,OAAM,UAAU,gBAAgB;AAC5E,aAAO,QAAQ,OAAO,WAAW,IAAI;AAAA,IACvC;AAAA,IACJ;AAAA,EACF;AACF,SAAO,IAAI,MAAM,MAAM;AAAA,IACrB,IAAI,QAAQ,KAAK;AACf,UAAI,QAAQ,QAAS,QAAO;AAC5B,YAAM,QAAQ,QAAQ,IAAI,QAAQ,KAAK,MAAM;AAC7C,aAAO,OAAO,UAAU,aAAa,MAAM,KAAK,MAAM,IAAI;AAAA,IAC5D;AAAA,EACF,CAAC;AACH;AAEO,SAAS,OAAU,OAA8C;AACtE,SAAO;AAAA,IACL,IAAI,QAAQ;AACV,aAAO,SAAS,MAAM,CAAC,EAAE;AAAA,IAC3B;AAAA,IACA,WAAW,CAAC,aAAa,SAAS,MAAM,CAAC,EAAE,UAAU,QAAQ;AAAA,IAC7D,QAAQ,CAAC,aAAa,SAAS,MAAM,CAAC,EAAE,OAAO,QAAQ;AAAA,EACzD;AACF;AAEO,MAAM,iBAAoC,oBAAI,IAAU,CAAC,OAAO,CAAC;AAEjE,MAAM,eAAe;AAE5B,MAAM,WAAW,MAAM,QAAQ,OAAO,UAAU,YAAY,CAAC;AAE7D,MAAM,SAAS,CAAC,SAAiB,UAA8B;AAAA,EAC7D,GAAG,QAAQ;AAAA,EACX,QAAQ,QAAQ,OAAO,SAAS,UAAU,UAAU,UAAU;AAAA,EAC9D,GAAI,eAAe,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,WAAW,UAAU,aAAa,SAAS;AACnF;AAEO,SAAS,WAAW,SAAuB;AAChD,QAAM,OAAO,eAAe,WAAW,EAAE,MAAM,YAAY,aAAa,CAAC,CAAC;AAC1E,QAAM,UAAU,EAAE,GAAG,QAAQ,YAAY,SAAS,QAAQ,YAAY;AACtE,OAAK,MAAM,eAAe,CAAC,QAAiB,cAAuB;AACjE,UAAM,OAAO,OAAO,SAAS;AAC7B,QAAI,SAAS,OAAQ,QAAO,EAAE,MAAM,QAAQ,GAAG,OAAO,MAAM,QAAQ,QAAQ,aAAa,EAAE;AAC3F,UAAM,UAAU,OAAO,SAAS,IAAI;AACpC,WAAO,EAAE,MAAM,WAAW,GAAG,OAAO,MAAM,SAAS,eAAe,EAAE;AAAA,EACtE,EAAW;AACX,OAAK,MAAM,kBAAkB,CAAC,QAAiB,eAAwB;AAAA,IACrE,MAAM;AAAA,IACN,GAAG,YAAY,OAAO,SAAS,MAAM,SAAS,UAAU,QAAQ,UAAU;AAAA,EAC5E,GAAY;AACZ,OAAK,MAAM,gBAAgB,CAAC,QAAiB,eAAwB;AAAA,IACnE,MAAM,OAAO,SAAS,MAAM,SAAS,SAAS;AAAA,IAC9C,OAAO,SAAS,QAAQ,SAAS,KAAK;AAAA,IACtC,GAAI,OAAO,SAAS,MAAM,SAAS,CAAC,IAAI,OAAO,MAAM,QAAQ,UAAU,gBAAgB;AAAA,EACzF,GAAY;AACZ,OAAK,MAAM,qBAAqB,CAAC,QAAiB,cAAuB;AACvE,QAAI,OAAO,SAAS,MAAM;AACxB,aAAO,EAAE,MAAM,UAAU,GAAG,OAAO,MAAM,QAAQ,QAAQ,cAAc,EAAE;AAC3E,UAAM,SAAS,WAAW,QAAQ,MAAM;AACxC,WAAO,EAAE,MAAM,SAAS,GAAG,OAAO,MAAM,QAAQ,YAAY,EAAE;AAAA,EAChE,EAAW;AACX,OAAK,MAAM,oBAAoB,CAAC,QAAiB,WAAoB,SAAe;AAClF,QAAI,OAAO,SAAS,MAAM,QAAS,QAAO,EAAE,MAAM,OAAO;AACzD,UAAM,OAAO,KAAK,UAAU;AAAA,MAC1B,MAAM,SAAS;AAAA,QACb,KAAK;AAAA,QACL,MAAM,MAAM,WAAW,QAAQ,KAAK;AAAA,QACpC,OAAO,CAAC,SAAS,KAAK,QAAQ;AAAA,MAChC,CAAC;AAAA,IACH,CAAC;AACD,WAAO,EAAE,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,KAAK,OAAO,YAAY,EAAE;AAAA,EACzE,EAAW;AACX,OAAK;AAAA,IACH;AAAA,IACA,aAAa,CAAC,QAAiB,WAAoB,SAAe;AAChE,YAAM,QAAQ,QAAQ,SAAkB;AACxC,UAAI,CAAC,MAAO,QAAO,EAAE,MAAM,OAAO;AAClC,YAAM,UAAU,QAAQ,QAAQ,KAAK;AACrC,UAAI,CAAC,QAAS,OAAM,UAAU,gBAAgB;AAC9C,YAAM,OAAO,KAAK,UAAU;AAAA,QAC1B,MAAM,SAAS,EAAE,KAAK,GAAG,MAAM,MAAM,SAAS,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;AAAA,MACjF,CAAC;AACD,YAAM,QAAQ,CAAC,SACb,OAAO,MAAM,KAAK,KAAK,MAAM,MAAM,IAAI,CAA6B;AACtE,aAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY,MAAM,YAAY;AAAA,QAC9B,MAAM,MAAM,MAAM;AAAA,QAClB,WAAW,MAAM,WAAW;AAAA,QAC5B,GAAG,OAAO,MAAM,KAAK,KAAK,MAAM,OAAO,aAAa;AAAA,MACtD;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;",
+  "sourcesContent": ["import {\n  type Context,\n  createHost,\n  forbidden,\n  type Host,\n  type Readable,\n  type ReplicatedState,\n  replicatedState,\n  resource,\n  type Self,\n} from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Agent } from './agent.ts';\nimport {\n  type ApprovalJudge,\n  type Approvals,\n  attachApprovals,\n  type DecidedBy,\n} from './approvals/index.ts';\nimport { alwaysFor, attachApprovalPolicy } from './approvals/policy.ts';\nimport type { ChangesView } from './changes/git.ts';\nimport type { ChangesRuntime } from './changes/index.ts';\nimport { createAgentControl, type HostLicks, type HostScoops } from './control.ts';\nimport { trackDeliveries } from './deliveries.ts';\nimport type { FreezerRuntime, FrozenCone } from './freezer/index.ts';\nimport { createGuests, type Guests } from './guests/index.ts';\nimport { admitGuest, guestOpener } from './guests/serve.ts';\nimport type { UserClients } from './kernel/users.ts';\nimport type { McpRuntime } from './mcp/index.ts';\nimport type { MemoryEntry, MemoryScope } from './memory/format.ts';\nimport type { MemoryRuntime } from './memory/index.ts';\nimport { createMonitor, type MonitorOptions } from './monitor/index.ts';\nimport { viewRemote } from './readonly.ts';\nimport { type AgentRemote, createRemote } from './remote/host.ts';\nimport { createPages, ownedPages, type Pages } from './remote/pages.ts';\nimport type { SecretName } from './secrets/names.ts';\nimport type { VaultState } from './secrets/vault.ts';\nimport {\n  AgentControl,\n  type AgentGuest,\n  AgentGuestService,\n  AgentPagesService,\n  AgentRemoteService,\n  AgentSettings,\n  AgentTranscript,\n  CONTROL_METHODS,\n  CONTROL_READS,\n  type Command,\n  GUEST_METHODS,\n  OWNER_DEVICE_METHODS,\n  PAGE_METHODS,\n  type PrivateRevision,\n  REMOTE_METHODS,\n  REMOTE_READS,\n  SETTINGS_METHODS,\n} from './services.ts';\nimport {\n  AGENT_HOST,\n  type AgentPrincipal,\n  type GuestPrincipal,\n  guestOf,\n  principalKey,\n  readable,\n  readablesOf,\n  type Seat,\n  seatOf,\n  served,\n} from './serving.ts';\nimport type { SkillsRuntime } from './skills/index.ts';\nimport type { SprinklesRuntime } from './sprinkles/index.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\nimport { slimmer, type Thumbnail, thumbnail } from './thumbs.ts';\nimport { type LabelsRuntime, visibleLabels, watchLabel } from './titles/labels.ts';\nimport type { Uploads } from './uploads.ts';\nimport { agentViews } from './views.ts';\nimport { type PortEndpoint, PortLink } from './wire.ts';\n\nexport interface ConnectOptions {\n  readOnly?: boolean;\n  pages?: boolean;\n  guest?: { id: string; label: string };\n}\n\nexport interface AgentHost {\n  readonly serverId: string;\n  readonly agent: Agent;\n  readonly users?: UserClients;\n  readonly pages: Pages;\n  readonly guests: Guests;\n  readonly approvals: Approvals;\n  connect(endpoint: PortEndpoint, options?: ConnectOptions): void;\n  close(): Promise<void>;\n}\n\nconst noSettings: AgentSettings = {\n  state: replicatedState({ models: [], accounts: [] }),\n  connect: async () => {\n    throw new Error('this agent has no accounts');\n  },\n  disconnect: async () => {},\n  signIn: async () => null,\n  dismissMoved: async () => {},\n};\n\nasync function follow(\n  agent: Agent,\n  context: Context,\n  slim: (view: ConversationView) => ConversationView\n) {\n  let attached = await agent.cone().viewState(context);\n  const state = replicatedState<ConversationView>(slim(attached.value));\n  const mirror = (value: ConversationView, from: Context) => state.replace(from, slim(value));\n  let off = attached.subscribe(mirror);\n  const stop = agent.onCone(async (conversation) => {\n    const next = await conversation.viewState(context);\n    off();\n    attached.dispose();\n    attached = next;\n    state.replace(context, slim(next.value));\n    off = next.subscribe(mirror);\n  });\n  return {\n    state,\n    refresh: () => state.replace(context, slim(attached.value)),\n    dispose() {\n      stop();\n      off();\n      attached.dispose();\n    },\n  };\n}\n\nexport interface HostSecrets {\n  vault: ReplicatedState<VaultState>;\n  list(): readonly SecretName[];\n  close?(): void;\n}\n\nconst idleVault = replicatedState<VaultState>({\n  port: 'none',\n  needed: false,\n  version: 0,\n  locked: 'no',\n  held: 0,\n});\n\nfunction gatedControls(\n  control: AgentControl,\n  shown: (entry: number) => boolean,\n  views: () => readonly ConversationView[],\n  labels: ReplicatedState<Record<string, string>>\n) {\n  const visible = (entry: number) =>\n    views().some((view) => view.entries.some((item) => item.id === entry));\n  const gated =\n    (allowed: (entry: number) => boolean): AgentControl['image'] =>\n    async (ref, using) =>\n      allowed(ref.entry) ? control.image(ref, using) : { data: null, mimeType: null };\n  const trusted: AgentControl = { ...control, image: gated(shown) };\n  const viewed: AgentControl = { ...control, image: gated(visible), toolLabel: watchLabel(labels) };\n  return { trusted, viewed };\n}\n\nconst noRevision = () => replicatedState<PrivateRevision>({ revision: 0 });\n\nexport async function hostAgent(\n  agent: Agent,\n  options: {\n    serverId?: string;\n    context?: Context;\n    settings?: AgentSettings;\n    licks?: HostLicks;\n    scoops?: HostScoops;\n    skills?: SkillsRuntime;\n    sprinkles?: SprinklesRuntime;\n    memory?: MemoryRuntime;\n    freezer?: FreezerRuntime;\n    changes?: ChangesRuntime;\n    mcp?: Pick<McpRuntime, 'close'>;\n    users?: UserClients;\n    monitor?: Pick<MonitorOptions, 'kernel' | 'groups' | 'users'>;\n    pages?: Pages;\n    secrets?: HostSecrets;\n    uploads?: Uploads;\n    thumbnail?: Thumbnail;\n    labels?: LabelsRuntime;\n    approvals?: Approvals;\n    judge?: ApprovalJudge;\n  } = {}\n): Promise<AgentHost> {\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const serverId = options.serverId ?? crypto.randomUUID();\n  let refresh = () => {};\n  const slims = slimmer(options.thumbnail ?? thumbnail, () => refresh());\n  const transcript = await follow(agent, context, slims.slim);\n  const { state } = transcript;\n  const mounted = await agentViews(agent, context, slims.slim);\n  refresh = () => {\n    transcript.refresh();\n    mounted.refresh();\n  };\n  const touch = () => options.freezer?.touch();\n  const untouch = [state.subscribe(touch), mounted.views.subscribe(touch)];\n  const pages = options.pages ?? createPages();\n  const deliveries = trackDeliveries(agent.harness, state, context);\n  const policy = await attachApprovalPolicy(agent.harness, context);\n  const approvals =\n    options.approvals ??\n    (await attachApprovals(\n      {\n        harness: agent.harness,\n        guestAlways: alwaysFor(policy),\n        ...(options.judge ? { judge: options.judge } : {}),\n      },\n      context\n    ));\n  const monitor = createMonitor({\n    ...options.monitor,\n    harness: agent.harness,\n    agents: agent.agents,\n    views: mounted.views,\n    context,\n  });\n  const guests = await createGuests({\n    harness: agent.harness,\n    agents: agent.agents,\n    approvals,\n    policy,\n    context,\n  });\n  const control: AgentControl = {\n    ...createAgentControl(\n      agent.harness,\n      agent,\n      deliveries,\n      options.licks,\n      options.scoops,\n      options.skills,\n      options.sprinkles,\n      options.memory,\n      options.freezer,\n      options.changes,\n      monitor,\n      options.secrets?.list,\n      options.uploads,\n      options.labels,\n      guests\n    ),\n    approvalPolicySet: (change, using) => policy.set(change, using),\n  };\n  const remote = createRemote({\n    harness: agent.harness,\n    send: (request, using) => control.send(request, using),\n    vault: options.secrets?.vault ?? idleVault,\n    async conversation(agentId, using) {\n      if (!agentId) return agent.cone();\n      const found = await agent.agents.conversation(agentId, using);\n      if (!found) throw new Error(`There is no agent ${agentId}.`);\n      return found;\n    },\n  });\n  const shownViews = () => [state.value, ...Object.values(mounted.views.value)];\n  const kept = options.labels?.labels ?? replicatedState<Record<string, string>>({});\n  const labels = visibleLabels(kept, [state, mounted.views], shownViews);\n  const transcriptService = {\n    state,\n    deliveries: deliveries.state,\n    agents: mounted.agents,\n    views: mounted.views,\n    commands: options.skills?.commands ?? replicatedState<Command[]>([]),\n    privateRevision: options.skills?.privateRevision ?? noRevision(),\n    sprinkles: options.sprinkles?.sprinkles ?? replicatedState<Sprinkle[]>([]),\n    memories: options.memory?.memories ?? replicatedState<MemoryEntry[]>([]),\n    memoryScopes: options.memory?.scopes ?? replicatedState<MemoryScope[]>([]),\n    frozen: options.freezer?.frozen ?? replicatedState<FrozenCone[]>([]),\n    changes:\n      options.changes?.view ?? replicatedState<ChangesView>({ unavailable: null, changes: [] }),\n    monitor: monitor.state,\n    vault: options.secrets?.vault ?? idleVault,\n    labels: labels.state,\n    guests: guests.seats,\n    approvals: approvals.state,\n    approvalPolicy: policy.state,\n  };\n  const settings = options.settings ?? noSettings;\n  const gates = gatedControls(control, slims.shown, shownViews, transcriptService.labels);\n  const { trusted, viewed } = gates;\n  const host = serveAgent({\n    trusted,\n    viewed,\n    transcript: transcriptService,\n    viewMonitor: monitor.viewState,\n    settings,\n    remote,\n    pages,\n    guest: guestOpener(guests, agent.agents, mounted.views, context, approvals.state),\n    decide: (by) => (id, decision, reason, using) =>\n      approvals.decide(id, decision, reason, by, using),\n  });\n  const offGuests = guests.onEnd((id) => {\n    void host.invalidatePrincipal((principal) => guestOf(principal)?.id === id);\n  });\n  let links = 0;\n  return {\n    serverId,\n    agent,\n    pages,\n    guests,\n    approvals,\n    ...(options.users ? { users: options.users } : {}),\n    connect(endpoint, connectOptions) {\n      if (connectOptions?.guest) {\n        links += 1;\n        admitGuest(guests, endpoint, connectOptions.guest, serverId, links, host);\n        return;\n      }\n      const seat: Seat = connectOptions?.readOnly\n        ? 'view'\n        : connectOptions?.pages === false\n          ? 'control'\n          : 'owner';\n      links += 1;\n      const link = new PortLink(endpoint);\n      link.greet(serverId);\n      host.accept(link, { principal: { seat, link: links } satisfies AgentPrincipal });\n    },\n    async close() {\n      offGuests();\n      await host.close();\n      guests.dispose();\n      await pages.dispose();\n      await monitor.dispose();\n      await remote.dispose();\n      deliveries.dispose();\n      approvals.close();\n      transcript.dispose();\n      mounted.dispose();\n      labels.dispose();\n      slims.dispose();\n      for (const off of untouch) off();\n      options.freezer?.close();\n      options.secrets?.close?.();\n      await options.changes?.close(context);\n      await options.memory?.close(context);\n      await options.sprinkles?.close(context);\n      await options.skills?.close(context);\n      await options.mcp?.close(context);\n      await options.scoops?.runtime.close(context);\n      await options.licks?.sources.close(context);\n      await agent.close();\n      await options.users?.close();\n    },\n  };\n}\n\ninterface Served {\n  trusted: AgentControl;\n  viewed: AgentControl;\n  transcript: Record<keyof AgentTranscript, ReplicatedState<unknown>>;\n  viewMonitor: ReplicatedState<unknown>;\n  settings: AgentSettings;\n  remote: AgentRemote;\n  pages: Pages;\n  guest?: (principal: GuestPrincipal) => { value: AgentGuest; dispose(): void } | undefined;\n  decide: (by: DecidedBy) => AgentControl['decide'];\n}\n\nexport const CLOSED_TO_GUESTS = 'a guest seat has only its transcript and propose';\n\nconst opened = new WeakSet<object>();\n\nexport const openToGuests = <F extends object>(factory: F): F => {\n  opened.add(factory);\n  return factory;\n};\n\nexport function closedToGuests(host: Host): Host {\n  const serve = ((type: never, factory: (...args: unknown[]) => unknown, options?: never) =>\n    host.serve(\n      type,\n      (opened.has(factory)\n        ? factory\n        : (input: unknown, principal: unknown, self: unknown) => {\n            if (seatOf(principal as never) === 'guest') throw forbidden(CLOSED_TO_GUESTS);\n            return factory(input, principal, self);\n          }) as never,\n      options\n    )) as Host['serve'];\n  return new Proxy(host, {\n    get(target, key) {\n      if (key === 'serve') return serve;\n      const value = Reflect.get(target, key, target) as unknown;\n      return typeof value === 'function' ? value.bind(target) : value;\n    },\n  });\n}\n\nexport function lazily<T>(state: () => ReplicatedState<T>): Readable<T> {\n  return {\n    get value() {\n      return readable(state()).value;\n    },\n    subscribe: (listener) => readable(state()).subscribe(listener),\n    events: (listener) => readable(state()).events(listener),\n  };\n}\n\nconst seated = (serving: Served, seat: Seat): AgentControl => ({\n  ...(seat === 'view' ? serving.viewed : serving.trusted),\n  decide: serving.decide(seat === 'owner' ? 'owner' : 'follower'),\n});\n\nconst VIEW_METHODS = [...CONTROL_READS, ...OWNER_DEVICE_METHODS];\n\nexport function serveAgent(serving: Served): Host {\n  const host = closedToGuests(createHost({ name: AGENT_HOST, principalKey }));\n  const viewing = { ...serving.transcript, monitor: serving.viewMonitor };\n  host.serve(AgentControl, ((_input: unknown, principal: unknown) => {\n    const seat = seatOf(principal);\n    const control = seated(serving, seat);\n    if (seat === 'view') return { kind: 'view', ...served(() => control, VIEW_METHODS) };\n    return { kind: 'control', ...served(() => control, CONTROL_METHODS) };\n  }) as never);\n  host.serve(AgentTranscript, ((_input: unknown, principal: unknown) => ({\n    kind: 'transcript',\n    ...readablesOf(seatOf(principal) === 'view' ? viewing : serving.transcript),\n  })) as never);\n  host.serve(AgentSettings, ((_input: unknown, principal: unknown) => ({\n    kind: seatOf(principal) === 'view' ? 'view' : 'settings',\n    state: readable(serving.settings.state),\n    ...(seatOf(principal) === 'view' ? {} : served(() => serving.settings, SETTINGS_METHODS)),\n  })) as never);\n  host.serve(AgentRemoteService, ((_input: unknown, principal: unknown) => {\n    if (seatOf(principal) !== 'view')\n      return { kind: 'remote', ...served(() => serving.remote, REMOTE_METHODS) };\n    const scoped = viewRemote(serving.remote);\n    return { kind: 'watch', ...served(() => scoped, REMOTE_READS) };\n  }) as never);\n  host.serve(AgentPagesService, ((_input: unknown, principal: unknown, self: Self) => {\n    if (seatOf(principal) !== 'owner') return { kind: 'none' };\n    const held = self.resources({\n      mine: resource({\n        rev: 1,\n        open: () => ownedPages(serving.pages),\n        close: (mine) => mine.release(),\n      }),\n    });\n    return { kind: 'pages', ...served(() => held.mine.value, PAGE_METHODS) };\n  }) as never);\n  host.serve(\n    AgentGuestService,\n    openToGuests((_input: unknown, principal: unknown, self: Self) => {\n      const guest = guestOf(principal as never);\n      if (!guest) return { kind: 'none' };\n      const opening = serving.guest?.(guest);\n      if (!opening) throw forbidden(CLOSED_TO_GUESTS);\n      const held = self.resources({\n        seat: resource({ rev: 1, open: () => opening, close: (made) => made.dispose() }),\n      });\n      const later = (name: 'transcript' | 'seat' | 'proposals') =>\n        lazily(() => held.seat.value.value[name] as ReplicatedState<unknown>);\n      return {\n        kind: 'guest',\n        transcript: later('transcript'),\n        seat: later('seat'),\n        proposals: later('proposals'),\n        ...served(() => held.seat.value.value, GUEST_METHODS),\n      };\n    }) as never\n  );\n  return host;\n}\n"],
+  "mappings": "AAAA;AAAA,EAEE;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,0BAA0B;AAGnC;AAAA,EAGE;AAAA,OAEK;AACP,SAAS,WAAW,4BAA4B;AAGhD,SAAS,0BAA2D;AACpE,SAAS,uBAAuB;AAEhC,SAAS,oBAAiC;AAC1C,SAAS,YAAY,mBAAmB;AAKxC,SAAS,qBAA0C;AACnD,SAAS,kBAAkB;AAC3B,SAA2B,oBAAoB;AAC/C,SAAS,aAAa,kBAA8B;AAGpD;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AAIP,SAAS,SAAyB,iBAAiB;AACnD,SAA6B,eAAe,kBAAkB;AAE9D,SAAS,kBAAkB;AAC3B,SAA4B,gBAAgB;AAmB5C,MAAM,aAA4B;AAAA,EAChC,OAAO,gBAAgB,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,EACnD,SAAS,YAAY;AACnB,UAAM,IAAI,MAAM,4BAA4B;AAAA,EAC9C;AAAA,EACA,YAAY,YAAY;AAAA,EAAC;AAAA,EACzB,QAAQ,YAAY;AAAA,EACpB,cAAc,YAAY;AAAA,EAAC;AAC7B;AAEA,eAAe,OACb,OACA,SACA,MACA;AACA,MAAI,WAAW,MAAM,MAAM,KAAK,EAAE,UAAU,OAAO;AACnD,QAAM,QAAQ,gBAAkC,KAAK,SAAS,KAAK,CAAC;AACpE,QAAM,SAAS,CAAC,OAAyB,SAAkB,MAAM,QAAQ,MAAM,KAAK,KAAK,CAAC;AAC1F,MAAI,MAAM,SAAS,UAAU,MAAM;AACnC,QAAM,OAAO,MAAM,OAAO,OAAO,iBAAiB;AAChD,UAAM,OAAO,MAAM,aAAa,UAAU,OAAO;AACjD,QAAI;AACJ,aAAS,QAAQ;AACjB,eAAW;AACX,UAAM,QAAQ,SAAS,KAAK,KAAK,KAAK,CAAC;AACvC,UAAM,KAAK,UAAU,MAAM;AAAA,EAC7B,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM,MAAM,QAAQ,SAAS,KAAK,SAAS,KAAK,CAAC;AAAA,IAC1D,UAAU;AACR,WAAK;AACL,UAAI;AACJ,eAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AACF;AAQA,MAAM,YAAY,gBAA4B;AAAA,EAC5C,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,MAAM;AACR,CAAC;AAED,SAAS,cACP,SACA,OACA,OACA,QACA;AACA,QAAM,UAAU,CAAC,UACf,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,QAAQ,KAAK,CAAC,SAAS,KAAK,OAAO,KAAK,CAAC;AACvE,QAAM,QACJ,CAAC,YACD,OAAO,KAAK,UACV,QAAQ,IAAI,KAAK,IAAI,QAAQ,MAAM,KAAK,KAAK,IAAI,EAAE,MAAM,MAAM,UAAU,KAAK;AAClF,QAAM,UAAwB,EAAE,GAAG,SAAS,OAAO,MAAM,KAAK,EAAE;AAChE,QAAM,SAAuB,EAAE,GAAG,SAAS,OAAO,MAAM,OAAO,GAAG,WAAW,WAAW,MAAM,EAAE;AAChG,SAAO,EAAE,SAAS,OAAO;AAC3B;AAEA,MAAM,aAAa,MAAM,gBAAiC,EAAE,UAAU,EAAE,CAAC;AAEzE,eAAsB,UACpB,OACA,UAqBI,CAAC,GACe;AACpB,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,QAAQ,YAAY,OAAO,WAAW;AACvD,MAAI,UAAU,MAAM;AAAA,EAAC;AACrB,QAAM,QAAQ,QAAQ,QAAQ,aAAa,WAAW,MAAM,QAAQ,CAAC;AACrE,QAAM,aAAa,MAAM,OAAO,OAAO,SAAS,MAAM,IAAI;AAC1D,QAAM,EAAE,MAAM,IAAI;AAClB,QAAM,UAAU,MAAM,WAAW,OAAO,SAAS,MAAM,IAAI;AAC3D,YAAU,MAAM;AACd,eAAW,QAAQ;AACnB,YAAQ,QAAQ;AAAA,EAClB;AACA,QAAM,QAAQ,MAAM,QAAQ,SAAS,MAAM;AAC3C,QAAM,UAAU,CAAC,MAAM,UAAU,KAAK,GAAG,QAAQ,MAAM,UAAU,KAAK,CAAC;AACvE,QAAM,QAAQ,QAAQ,SAAS,YAAY;AAC3C,QAAM,aAAa,gBAAgB,MAAM,SAAS,OAAO,OAAO;AAChE,QAAM,SAAS,MAAM,qBAAqB,MAAM,SAAS,OAAO;AAChE,QAAM,YACJ,QAAQ,aACP,MAAM;AAAA,IACL;AAAA,MACE,SAAS,MAAM;AAAA,MACf,aAAa,UAAU,MAAM;AAAA,MAC7B,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAClD;AAAA,IACA;AAAA,EACF;AACF,QAAM,UAAU,cAAc;AAAA,IAC5B,GAAG,QAAQ;AAAA,IACX,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,QAAQ;AAAA,IACf;AAAA,EACF,CAAC;AACD,QAAM,SAAS,MAAM,aAAa;AAAA,IAChC,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,UAAwB;AAAA,IAC5B,GAAG;AAAA,MACD,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA,QAAQ,SAAS;AAAA,MACjB,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,IACF;AAAA,IACA,mBAAmB,CAAC,QAAQ,UAAU,OAAO,IAAI,QAAQ,KAAK;AAAA,EAChE;AACA,QAAM,SAAS,aAAa;AAAA,IAC1B,SAAS,MAAM;AAAA,IACf,MAAM,CAAC,SAAS,UAAU,QAAQ,KAAK,SAAS,KAAK;AAAA,IACrD,OAAO,QAAQ,SAAS,SAAS;AAAA,IACjC,MAAM,aAAa,SAAS,OAAO;AACjC,UAAI,CAAC,QAAS,QAAO,MAAM,KAAK;AAChC,YAAM,QAAQ,MAAM,MAAM,OAAO,aAAa,SAAS,KAAK;AAC5D,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,OAAO,GAAG;AAC3D,aAAO;AAAA,IACT;AAAA,EACF,CAAC;AACD,QAAM,aAAa,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,OAAO,QAAQ,MAAM,KAAK,CAAC;AAC5E,QAAM,OAAO,QAAQ,QAAQ,UAAU,gBAAwC,CAAC,CAAC;AACjF,QAAM,SAAS,cAAc,MAAM,CAAC,OAAO,QAAQ,KAAK,GAAG,UAAU;AACrE,QAAM,oBAAoB;AAAA,IACxB;AAAA,IACA,YAAY,WAAW;AAAA,IACvB,QAAQ,QAAQ;AAAA,IAChB,OAAO,QAAQ;AAAA,IACf,UAAU,QAAQ,QAAQ,YAAY,gBAA2B,CAAC,CAAC;AAAA,IACnE,iBAAiB,QAAQ,QAAQ,mBAAmB,WAAW;AAAA,IAC/D,WAAW,QAAQ,WAAW,aAAa,gBAA4B,CAAC,CAAC;AAAA,IACzE,UAAU,QAAQ,QAAQ,YAAY,gBAA+B,CAAC,CAAC;AAAA,IACvE,cAAc,QAAQ,QAAQ,UAAU,gBAA+B,CAAC,CAAC;AAAA,IACzE,QAAQ,QAAQ,SAAS,UAAU,gBAA8B,CAAC,CAAC;AAAA,IACnE,SACE,QAAQ,SAAS,QAAQ,gBAA6B,EAAE,aAAa,MAAM,SAAS,CAAC,EAAE,CAAC;AAAA,IAC1F,SAAS,QAAQ;AAAA,IACjB,OAAO,QAAQ,SAAS,SAAS;AAAA,IACjC,QAAQ,OAAO;AAAA,IACf,QAAQ,OAAO;AAAA,IACf,WAAW,UAAU;AAAA,IACrB,gBAAgB,OAAO;AAAA,EACzB;AACA,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,QAAQ,cAAc,SAAS,MAAM,OAAO,YAAY,kBAAkB,MAAM;AACtF,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,QAAM,OAAO,WAAW;AAAA,IACtB;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,aAAa,QAAQ;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO,YAAY,QAAQ,MAAM,QAAQ,QAAQ,OAAO,SAAS,UAAU,KAAK;AAAA,IAChF,QAAQ,CAAC,OAAO,CAAC,IAAI,UAAU,QAAQ,UACrC,UAAU,OAAO,IAAI,UAAU,QAAQ,IAAI,KAAK;AAAA,EACpD,CAAC;AACD,QAAM,YAAY,OAAO,MAAM,CAAC,OAAO;AACrC,SAAK,KAAK,oBAAoB,CAAC,cAAc,QAAQ,SAAS,GAAG,OAAO,EAAE;AAAA,EAC5E,CAAC;AACD,MAAI,QAAQ;AACZ,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,QAAQ,UAAU,gBAAgB;AAChC,UAAI,gBAAgB,OAAO;AACzB,iBAAS;AACT,mBAAW,QAAQ,UAAU,eAAe,OAAO,UAAU,OAAO,IAAI;AACxE;AAAA,MACF;AACA,YAAM,OAAa,gBAAgB,WAC/B,SACA,gBAAgB,UAAU,QACxB,YACA;AACN,eAAS;AACT,YAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,WAAK,MAAM,QAAQ;AACnB,WAAK,OAAO,MAAM,EAAE,WAAW,EAAE,MAAM,MAAM,MAAM,EAA2B,CAAC;AAAA,IACjF;AAAA,IACA,MAAM,QAAQ;AACZ,gBAAU;AACV,YAAM,KAAK,MAAM;AACjB,aAAO,QAAQ;AACf,YAAM,MAAM,QAAQ;AACpB,YAAM,QAAQ,QAAQ;AACtB,YAAM,OAAO,QAAQ;AACrB,iBAAW,QAAQ;AACnB,gBAAU,MAAM;AAChB,iBAAW,QAAQ;AACnB,cAAQ,QAAQ;AAChB,aAAO,QAAQ;AACf,YAAM,QAAQ;AACd,iBAAW,OAAO,QAAS,KAAI;AAC/B,cAAQ,SAAS,MAAM;AACvB,cAAQ,SAAS,QAAQ;AACzB,YAAM,QAAQ,SAAS,MAAM,OAAO;AACpC,YAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,YAAM,QAAQ,WAAW,MAAM,OAAO;AACtC,YAAM,QAAQ,QAAQ,MAAM,OAAO;AACnC,YAAM,QAAQ,KAAK,MAAM,OAAO;AAChC,YAAM,QAAQ,QAAQ,QAAQ,MAAM,OAAO;AAC3C,YAAM,QAAQ,OAAO,QAAQ,MAAM,OAAO;AAC1C,YAAM,MAAM,MAAM;AAClB,YAAM,QAAQ,OAAO,MAAM;AAAA,IAC7B;AAAA,EACF;AACF;AAcO,MAAM,mBAAmB;AAEhC,MAAM,SAAS,oBAAI,QAAgB;AAE5B,MAAM,eAAe,CAAmB,YAAkB;AAC/D,SAAO,IAAI,OAAO;AAClB,SAAO;AACT;AAEO,SAAS,eAAe,MAAkB;AAC/C,QAAM,SAAS,CAAC,MAAa,SAA0C,YACrE,KAAK;AAAA,IACH;AAAA,IACC,OAAO,IAAI,OAAO,IACf,UACA,CAAC,OAAgB,WAAoB,SAAkB;AACrD,UAAI,OAAO,SAAkB,MAAM,QAAS,OAAM,UAAU,gBAAgB;AAC5E,aAAO,QAAQ,OAAO,WAAW,IAAI;AAAA,IACvC;AAAA,IACJ;AAAA,EACF;AACF,SAAO,IAAI,MAAM,MAAM;AAAA,IACrB,IAAI,QAAQ,KAAK;AACf,UAAI,QAAQ,QAAS,QAAO;AAC5B,YAAM,QAAQ,QAAQ,IAAI,QAAQ,KAAK,MAAM;AAC7C,aAAO,OAAO,UAAU,aAAa,MAAM,KAAK,MAAM,IAAI;AAAA,IAC5D;AAAA,EACF,CAAC;AACH;AAEO,SAAS,OAAU,OAA8C;AACtE,SAAO;AAAA,IACL,IAAI,QAAQ;AACV,aAAO,SAAS,MAAM,CAAC,EAAE;AAAA,IAC3B;AAAA,IACA,WAAW,CAAC,aAAa,SAAS,MAAM,CAAC,EAAE,UAAU,QAAQ;AAAA,IAC7D,QAAQ,CAAC,aAAa,SAAS,MAAM,CAAC,EAAE,OAAO,QAAQ;AAAA,EACzD;AACF;AAEA,MAAM,SAAS,CAAC,SAAiB,UAA8B;AAAA,EAC7D,GAAI,SAAS,SAAS,QAAQ,SAAS,QAAQ;AAAA,EAC/C,QAAQ,QAAQ,OAAO,SAAS,UAAU,UAAU,UAAU;AAChE;AAEA,MAAM,eAAe,CAAC,GAAG,eAAe,GAAG,oBAAoB;AAExD,SAAS,WAAW,SAAuB;AAChD,QAAM,OAAO,eAAe,WAAW,EAAE,MAAM,YAAY,aAAa,CAAC,CAAC;AAC1E,QAAM,UAAU,EAAE,GAAG,QAAQ,YAAY,SAAS,QAAQ,YAAY;AACtE,OAAK,MAAM,eAAe,CAAC,QAAiB,cAAuB;AACjE,UAAM,OAAO,OAAO,SAAS;AAC7B,UAAM,UAAU,OAAO,SAAS,IAAI;AACpC,QAAI,SAAS,OAAQ,QAAO,EAAE,MAAM,QAAQ,GAAG,OAAO,MAAM,SAAS,YAAY,EAAE;AACnF,WAAO,EAAE,MAAM,WAAW,GAAG,OAAO,MAAM,SAAS,eAAe,EAAE;AAAA,EACtE,EAAW;AACX,OAAK,MAAM,kBAAkB,CAAC,QAAiB,eAAwB;AAAA,IACrE,MAAM;AAAA,IACN,GAAG,YAAY,OAAO,SAAS,MAAM,SAAS,UAAU,QAAQ,UAAU;AAAA,EAC5E,GAAY;AACZ,OAAK,MAAM,gBAAgB,CAAC,QAAiB,eAAwB;AAAA,IACnE,MAAM,OAAO,SAAS,MAAM,SAAS,SAAS;AAAA,IAC9C,OAAO,SAAS,QAAQ,SAAS,KAAK;AAAA,IACtC,GAAI,OAAO,SAAS,MAAM,SAAS,CAAC,IAAI,OAAO,MAAM,QAAQ,UAAU,gBAAgB;AAAA,EACzF,GAAY;AACZ,OAAK,MAAM,qBAAqB,CAAC,QAAiB,cAAuB;AACvE,QAAI,OAAO,SAAS,MAAM;AACxB,aAAO,EAAE,MAAM,UAAU,GAAG,OAAO,MAAM,QAAQ,QAAQ,cAAc,EAAE;AAC3E,UAAM,SAAS,WAAW,QAAQ,MAAM;AACxC,WAAO,EAAE,MAAM,SAAS,GAAG,OAAO,MAAM,QAAQ,YAAY,EAAE;AAAA,EAChE,EAAW;AACX,OAAK,MAAM,oBAAoB,CAAC,QAAiB,WAAoB,SAAe;AAClF,QAAI,OAAO,SAAS,MAAM,QAAS,QAAO,EAAE,MAAM,OAAO;AACzD,UAAM,OAAO,KAAK,UAAU;AAAA,MAC1B,MAAM,SAAS;AAAA,QACb,KAAK;AAAA,QACL,MAAM,MAAM,WAAW,QAAQ,KAAK;AAAA,QACpC,OAAO,CAAC,SAAS,KAAK,QAAQ;AAAA,MAChC,CAAC;AAAA,IACH,CAAC;AACD,WAAO,EAAE,MAAM,SAAS,GAAG,OAAO,MAAM,KAAK,KAAK,OAAO,YAAY,EAAE;AAAA,EACzE,EAAW;AACX,OAAK;AAAA,IACH;AAAA,IACA,aAAa,CAAC,QAAiB,WAAoB,SAAe;AAChE,YAAM,QAAQ,QAAQ,SAAkB;AACxC,UAAI,CAAC,MAAO,QAAO,EAAE,MAAM,OAAO;AAClC,YAAM,UAAU,QAAQ,QAAQ,KAAK;AACrC,UAAI,CAAC,QAAS,OAAM,UAAU,gBAAgB;AAC9C,YAAM,OAAO,KAAK,UAAU;AAAA,QAC1B,MAAM,SAAS,EAAE,KAAK,GAAG,MAAM,MAAM,SAAS,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;AAAA,MACjF,CAAC;AACD,YAAM,QAAQ,CAAC,SACb,OAAO,MAAM,KAAK,KAAK,MAAM,MAAM,IAAI,CAA6B;AACtE,aAAO;AAAA,QACL,MAAM;AAAA,QACN,YAAY,MAAM,YAAY;AAAA,QAC9B,MAAM,MAAM,MAAM;AAAA,QAClB,WAAW,MAAM,WAAW;AAAA,QAC5B,GAAG,OAAO,MAAM,KAAK,KAAK,MAAM,OAAO,aAAa;AAAA,MACtD;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO;AACT;",
   "names": []
 }

package/dist/index.js

@@ -34,6 +34,9 @@ import {
   verdictOf,
   verdictRecorder
 } from "./approvals/index.js";
+import {
+  DEFAULT_APPROVAL_POLICY
+} from "./approvals/policy.js";
 import {
   FILE_LIMIT,
   IMAGE_LIMIT,
@@ -113,6 +116,7 @@ export {
   AgentTranscript,
   ApprovalsDoc,
   BEDROCK,
+  DEFAULT_APPROVAL_POLICY,
   DEFAULT_MODEL,
   DEFAULT_POLICY,
   DEFAULT_REGIONS,

package/dist/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/index.ts"],
-  "sourcesContent": ["export {\n  ADOBE,\n  ADOBE_PROXY,\n  type AdobeConfig,\n  type AdobeModelInfo,\n  adobeClassifiers,\n  adobeConfig,\n  adobeIdentity,\n  adobeModel,\n  adobeProvider,\n  adobeUsage,\n  type Budget,\n  SESSION_HEADER,\n  VERSION_HEADER,\n  withAdobeIdentity,\n} from './adobe.ts';\nexport { type Agent, type AgentOptions, answerText, openAgent } from './agent.ts';\nexport {\n  APPROVAL_MS,\n  type Approval,\n  type ApprovalAnswer,\n  type ApprovalDecided,\n  type ApprovalDraft,\n  type ApprovalJudge,\n  type ApprovalKind,\n  type ApprovalRequester,\n  type ApprovalState,\n  type Approvals,\n  ApprovalsDoc,\n  type ApprovalTier,\n  type ApprovalVerdict,\n  approvalJudge,\n  attachApprovals,\n  DEFAULT_POLICY,\n  type DecidedBy,\n  JUDGE_ALLOW,\n  JUDGE_DENY,\n  JUDGE_KIND,\n  JUDGE_MODEL,\n  JUDGE_QUESTIONS,\n  type Judgement,\n  judgeModelOf,\n  judgeSpender,\n  judgeState,\n  type OwnerIntent,\n  ownerIntent,\n  POLICY_FILE,\n  REASONS,\n  seedPolicy,\n  VERDICT_REASONS,\n  verdictOf,\n  verdictRecorder,\n} from './approvals/index.ts';\nexport {\n  FILE_LIMIT,\n  IMAGE_LIMIT,\n  type SendAttachment,\n  type ShownAttachment,\n  splitUser,\n  TOTAL_LIMIT,\n  userParts,\n} from './attachments.ts';\nexport { type AgentConnection, connectAgent } from './client.ts';\nexport { createAgentControl } from './control.ts';\nexport {\n  connectGuest,\n  GUEST_ONLY,\n  type GuestConnection,\n  SEAT_REFUSED,\n} from './guests/client.ts';\nexport type { GuestOpened, Proposed, ProposeRequest } from './guests/index.ts';\nexport type { GuestDraft, GuestGate, GuestGates, GuestSeat } from './guests/seats.ts';\nexport { type AgentHost, type ConnectOptions, hostAgent } from './host.ts';\nexport type {\n  KernelClient,\n  KernelFs,\n  KernelProcess,\n  KernelStat,\n  SpawnOptions,\n} from './kernel/client.ts';\nexport { HOME, type KernelEnvOptions, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nexport {\n  adminOver,\n  type KernelAdmin,\n  type KernelGroup,\n  type KernelGroups,\n  type KernelUser,\n  type KernelUsers,\n  serveAdmin,\n  type UserClient,\n  type UserClients,\n  type UserConnect,\n  type UserSpec,\n  userClients,\n} from './kernel/users.ts';\nexport {\n  type AgentWorkerOptions,\n  type AgentWorkerScope,\n  type KernelAttach,\n  runAgentWorker,\n} from './main.ts';\nexport {\n  type Loopback,\n  type Transport,\n  type TransportResponse,\n  transportFetch,\n} from './net.ts';\nexport {\n  AGENT_LOCK,\n  type AgentOwner,\n  type AgentWorker,\n  type KernelSource,\n  type OwnerOptions,\n  startAgent,\n} from './owner.ts';\nexport { SliccPrompt, sliccPrompt } from './prompt.ts';\nexport {\n  type AgentPages,\n  createPages,\n  type PageBatch,\n  type PageCaller,\n  type PageRequest,\n  type PageResult,\n  type Pages,\n  type PagesOpened,\n  type PageTab,\n} from './remote/pages.ts';\nexport {\n  type AccountState,\n  AgentControl,\n  AgentPagesService,\n  AgentSettings,\n  type AgentSettingsChange,\n  AgentTranscript,\n  type BudgetState,\n  type ModelChoice,\n  type OperationError,\n  type PromptResult,\n  type SendMode,\n  type SendRequest,\n  type SendResponse,\n  type SettingsState,\n  type SignIn,\n} from './services.ts';\nexport {\n  BEDROCK,\n  createAgentSettings,\n  createSliccModels,\n  DEFAULT_MODEL,\n  DEFAULT_REGIONS,\n  PREFERRED_MODELS,\n  preferredModel,\n  resolveDefaultModel,\n  sliccProviders,\n  withDefaultRegions,\n} from './settings.ts';\nexport {\n  AGENT_DIRECTORY,\n  type OpfsSqliteOptions,\n  openMemorySqliteStorage,\n  openOpfsSqliteStorage,\n  WasmSqliteDatabase,\n} from './sqlite.ts';\nexport { type SystemFacts, systemSection } from './system.ts';\nexport { UPLOADS, type Uploads, upload } from './uploads.ts';\nexport { type PortEndpoint, PortLink } from './wire.ts';\nexport {\n  type KernelPorts,\n  kernelPort,\n  kernelPorts,\n  serveConnections,\n  type WorkerScope,\n} from './worker.ts';\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAwC,YAAY,iBAAiB;AACrE;AAAA,EACE;AAAA,EAUA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAA+B,oBAAoB;AACnD,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAGP,SAA8C,iBAAiB;AAQ/D,SAAS,MAA6B,mBAAmB,sBAAsB;AAC/E;AAAA,EACE;AAAA,EAMA;AAAA,EAKA;AAAA,OACK;AACP;AAAA,EAIE;AAAA,OACK;AACP;AAAA,EAIE;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAKA;AAAA,OACK;AACP,SAAS,aAAa,mBAAmB;AACzC;AAAA,EAEE;AAAA,OAQK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OAUK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAA2B,qBAAqB;AAChD,SAAS,SAAuB,cAAc;AAC9C,SAA4B,gBAAgB;AAC5C;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;",
+  "sourcesContent": ["export {\n  ADOBE,\n  ADOBE_PROXY,\n  type AdobeConfig,\n  type AdobeModelInfo,\n  adobeClassifiers,\n  adobeConfig,\n  adobeIdentity,\n  adobeModel,\n  adobeProvider,\n  adobeUsage,\n  type Budget,\n  SESSION_HEADER,\n  VERSION_HEADER,\n  withAdobeIdentity,\n} from './adobe.ts';\nexport { type Agent, type AgentOptions, answerText, openAgent } from './agent.ts';\nexport {\n  APPROVAL_MS,\n  type Approval,\n  type ApprovalAnswer,\n  type ApprovalDecided,\n  type ApprovalDraft,\n  type ApprovalJudge,\n  type ApprovalKind,\n  type ApprovalRequester,\n  type ApprovalState,\n  type Approvals,\n  ApprovalsDoc,\n  type ApprovalTier,\n  type ApprovalVerdict,\n  approvalJudge,\n  attachApprovals,\n  DEFAULT_POLICY,\n  type DecidedBy,\n  JUDGE_ALLOW,\n  JUDGE_DENY,\n  JUDGE_KIND,\n  JUDGE_MODEL,\n  JUDGE_QUESTIONS,\n  type Judgement,\n  judgeModelOf,\n  judgeSpender,\n  judgeState,\n  type OwnerIntent,\n  ownerIntent,\n  POLICY_FILE,\n  REASONS,\n  seedPolicy,\n  VERDICT_REASONS,\n  verdictOf,\n  verdictRecorder,\n} from './approvals/index.ts';\nexport {\n  type ApprovalPolicy,\n  type ApprovalPolicyChange,\n  type ApprovalPolicySet,\n  DEFAULT_APPROVAL_POLICY,\n  type SudoPolicy,\n} from './approvals/policy.ts';\nexport {\n  FILE_LIMIT,\n  IMAGE_LIMIT,\n  type SendAttachment,\n  type ShownAttachment,\n  splitUser,\n  TOTAL_LIMIT,\n  userParts,\n} from './attachments.ts';\nexport { type AgentConnection, connectAgent } from './client.ts';\nexport { createAgentControl } from './control.ts';\nexport {\n  connectGuest,\n  GUEST_ONLY,\n  type GuestConnection,\n  SEAT_REFUSED,\n} from './guests/client.ts';\nexport type { GuestOpened, Proposed, ProposeRequest } from './guests/index.ts';\nexport type { GateKind, GuestPolicy } from './guests/policy.ts';\nexport type { GuestDraft, GuestGate, GuestGates, GuestSeat } from './guests/seats.ts';\nexport { type AgentHost, type ConnectOptions, hostAgent } from './host.ts';\nexport type {\n  KernelClient,\n  KernelFs,\n  KernelProcess,\n  KernelStat,\n  SpawnOptions,\n} from './kernel/client.ts';\nexport { HOME, type KernelEnvOptions, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nexport {\n  adminOver,\n  type KernelAdmin,\n  type KernelGroup,\n  type KernelGroups,\n  type KernelUser,\n  type KernelUsers,\n  serveAdmin,\n  type UserClient,\n  type UserClients,\n  type UserConnect,\n  type UserSpec,\n  userClients,\n} from './kernel/users.ts';\nexport {\n  type AgentWorkerOptions,\n  type AgentWorkerScope,\n  type KernelAttach,\n  runAgentWorker,\n} from './main.ts';\nexport {\n  type Loopback,\n  type Transport,\n  type TransportResponse,\n  transportFetch,\n} from './net.ts';\nexport {\n  AGENT_LOCK,\n  type AgentOwner,\n  type AgentWorker,\n  type KernelSource,\n  type OwnerOptions,\n  startAgent,\n} from './owner.ts';\nexport { SliccPrompt, sliccPrompt } from './prompt.ts';\nexport {\n  type AgentPages,\n  createPages,\n  type PageBatch,\n  type PageCaller,\n  type PageRequest,\n  type PageResult,\n  type Pages,\n  type PagesOpened,\n  type PageTab,\n} from './remote/pages.ts';\nexport {\n  type AccountState,\n  AgentControl,\n  AgentPagesService,\n  AgentSettings,\n  type AgentSettingsChange,\n  AgentTranscript,\n  type BudgetState,\n  type ModelChoice,\n  type OperationError,\n  type PromptResult,\n  type SendMode,\n  type SendRequest,\n  type SendResponse,\n  type SettingsState,\n  type SignIn,\n} from './services.ts';\nexport {\n  BEDROCK,\n  createAgentSettings,\n  createSliccModels,\n  DEFAULT_MODEL,\n  DEFAULT_REGIONS,\n  PREFERRED_MODELS,\n  preferredModel,\n  resolveDefaultModel,\n  sliccProviders,\n  withDefaultRegions,\n} from './settings.ts';\nexport {\n  AGENT_DIRECTORY,\n  type OpfsSqliteOptions,\n  openMemorySqliteStorage,\n  openOpfsSqliteStorage,\n  WasmSqliteDatabase,\n} from './sqlite.ts';\nexport { type SystemFacts, systemSection } from './system.ts';\nexport { UPLOADS, type Uploads, upload } from './uploads.ts';\nexport { type PortEndpoint, PortLink } from './wire.ts';\nexport {\n  type KernelPorts,\n  kernelPort,\n  kernelPorts,\n  serveConnections,\n  type WorkerScope,\n} from './worker.ts';\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAwC,YAAY,iBAAiB;AACrE;AAAA,EACE;AAAA,EAUA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAIE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAA+B,oBAAoB;AACnD,SAAS,0BAA0B;AACnC;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,OACK;AAIP,SAA8C,iBAAiB;AAQ/D,SAAS,MAA6B,mBAAmB,sBAAsB;AAC/E;AAAA,EACE;AAAA,EAMA;AAAA,EAKA;AAAA,OACK;AACP;AAAA,EAIE;AAAA,OACK;AACP;AAAA,EAIE;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAKA;AAAA,OACK;AACP,SAAS,aAAa,mBAAmB;AACzC;AAAA,EAEE;AAAA,OAQK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OAUK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAA2B,qBAAqB;AAChD,SAAS,SAAuB,cAAc;AAC9C,SAA4B,gBAAgB;AAC5C;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;",
   "names": []
 }

package/dist/services.js

@@ -38,8 +38,15 @@ const CONTROL_METHODS = keys({
   toolLabel: true,
   guestOpen: true,
   guestRevoke: true,
+  approvalPolicySet: true,
   decide: true
 });
+const OWNER_DEVICE_METHODS = [
+  "decide",
+  "guestOpen",
+  "guestRevoke",
+  "approvalPolicySet"
+];
 const CONTROL_READS = [
   "wait",
   "changesOpen",
@@ -50,7 +57,7 @@ const CONTROL_READS = [
 ];
 const AgentControl = contract("slicc.agent.control", {
   control: { methods: CONTROL_METHODS },
-  view: { methods: CONTROL_READS }
+  view: { methods: [...CONTROL_READS, ...OWNER_DEVICE_METHODS] }
 });
 const TRANSCRIPT_STATES = keys({
   state: true,
@@ -68,7 +75,8 @@ const TRANSCRIPT_STATES = keys({
   vault: true,
   labels: true,
   guests: true,
-  approvals: true
+  approvals: true,
+  approvalPolicy: true
 });
 const AgentTranscript = contract("slicc.agent.transcript", {
   transcript: { state: TRANSCRIPT_STATES }
@@ -82,7 +90,7 @@ const REMOTE_METHODS = keys({
 });
 const REMOTE_READS = ["watch", "next", "close"];
 const GUEST_STATES = ["transcript", "seat", "proposals"];
-const GUEST_METHODS = ["propose"];
+const GUEST_METHODS = ["propose", "guestOpen", "guestRevoke"];
 const AgentGuestService = contract("slicc.agent.guest", {
   guest: { state: GUEST_STATES, methods: GUEST_METHODS },
   none: {}
@@ -123,6 +131,7 @@ export {
   CONTROL_READS,
   GUEST_METHODS,
   GUEST_STATES,
+  OWNER_DEVICE_METHODS,
   PAGE_METHODS,
   REMOTE_METHODS,
   REMOTE_READS,

package/dist/services.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/services.ts"],
-  "sourcesContent": ["import type { Context, JsonValue, RemoteContract, ReplicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Approval, ApprovalAnswer, ApprovalDecided } from './approvals/index.ts';\nimport type { SendAttachment, ShownAttachment } from './attachments.ts';\nimport type { ChangesView } from './changes/git.ts';\nimport type { FrozenCone } from './freezer/index.ts';\nimport type { GuestOpened, Proposed, ProposeRequest } from './guests/index.ts';\nimport type { GuestDraft, GuestGates, GuestSeat } from './guests/seats.ts';\nimport type { MemoryEntry, MemoryScope, MemoryTag } from './memory/format.ts';\nimport type { AgentRemote } from './remote/host.ts';\nimport type { AgentPages } from './remote/pages.ts';\nimport type { VaultState } from './secrets/vault.ts';\nimport { contract } from './serving.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\n\nexport type SendMode = 'steer' | 'followUp' | 'reject';\n\nexport interface SendRequest {\n  text: string;\n  whenBusy: SendMode;\n  requestId: string | null;\n  agentId?: string | null;\n  attachments?: SendAttachment[];\n}\n\nexport interface OperationError {\n  code: string;\n  message: string;\n}\n\nexport type SendResponse =\n  | { accepted: true; submissionId: string; error: null }\n  | { accepted: false; submissionId: null; error: OperationError };\n\nexport type PromptResult =\n  | { status: 'done'; text: string; reason: null }\n  | { status: 'unanswered'; text: null; reason: string };\n\nexport interface AgentControl {\n  send(request: SendRequest, context: Context): Promise<SendResponse>;\n  wait(submissionId: string, context: Context): Promise<PromptResult>;\n  withdraw(\n    submissionId: string,\n    context: Context\n  ): Promise<{ outcome: 'withdrawn' | 'already_placed' | 'not_found' }>;\n  abort(context: Context): Promise<void>;\n  compact(instructions: string | null, context: Context): Promise<SendResponse>;\n  compactAgent(\n    agentId: string,\n    instructions: string | null,\n    context: Context\n  ): Promise<SendResponse>;\n  reset(handoff: string | null, context: Context): Promise<void>;\n  configure(change: AgentSettingsChange, context: Context): Promise<void>;\n  rewind(messageId: string | null, context: Context): Promise<Rewound>;\n  rewindAgent(agentId: string, messageId: string | null, context: Context): Promise<Rewound>;\n  resolveLick(\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved>;\n  resolveAgentLick(\n    agentId: string,\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved>;\n  webhook(\n    name: string,\n    delivery: WebhookRequest,\n    context: Context\n  ): Promise<{ delivered: boolean }>;\n  stopAgent(agentId: string, context: Context): Promise<void>;\n  selectCone(agentId: string, context: Context): Promise<void>;\n  createCone(name: string, context: Context): Promise<Created>;\n  createScoop(parentId: string, name: string, context: Context): Promise<Created>;\n  drop(agentId: string, context: Context): Promise<Created>;\n  unqueue(\n    agentId: string | null,\n    submissionId: string,\n    context: Context\n  ): Promise<{ outcome: 'withdrawn' | 'already_placed' | 'not_found' }>;\n  sprinkleSend(\n    sprinkleId: string,\n    payload: { action: string; data: JsonValue | null; target: string | null },\n    context: Context\n  ): Promise<{ delivered: boolean }>;\n  sprinkleCall(\n    sprinkleId: string,\n    method: string,\n    args: JsonValue[],\n    context: Context\n  ): Promise<JsonValue>;\n  memorySave(draft: MemoryDraft, context: Context): Promise<MemoryEntry>;\n  memoryRemove(id: string, context: Context): Promise<{ removed: boolean }>;\n  freeze(agentId: string, context: Context): Promise<Created>;\n  newChat(agentId: string, context: Context): Promise<Created>;\n  thaw(frozenId: string, context: Context): Promise<Created>;\n  discard(frozenId: string, context: Context): Promise<Created>;\n  changesOpen(context: Context): Promise<void>;\n  changeAccept(path: string, context: Context): Promise<Created>;\n  changeRevert(path: string, context: Context): Promise<Created>;\n  monitorOpen(lease: string | null, resync: boolean, context: Context): Promise<MonitorLease>;\n  monitorClose(lease: string, context: Context): Promise<void>;\n  image(ref: ImageRef, context: Context): Promise<StoredImage>;\n  agentCommands(agentId: string, context: Context): Promise<Command[]>;\n  toolLabel(agentId: string, callIds: string[], context: Context): Promise<string | null>;\n  guestOpen(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  guestRevoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n  decide(\n    id: string,\n    decision: ApprovalAnswer,\n    reason: string | null,\n    context: Context\n  ): Promise<ApprovalDecided>;\n}\n\nexport interface ImageRef {\n  entry: number;\n  message: number;\n  part: number;\n}\n\nexport type StoredImage = { data: string; mimeType: string } | { data: null; mimeType: null };\n\nexport interface MonitorLease {\n  lease: string;\n  ttlMs: number;\n}\n\nexport interface MonitorAgent {\n  id: string;\n  name: string;\n  kind: 'cone' | 'scoop';\n  parentId: string | null;\n  model: string | null;\n  running: boolean;\n  queued: number;\n  tool: string | null;\n  retry: { attempt: number; since: number; error: string } | null;\n  failed: string | null;\n  context: number | null;\n  cpu?: number | null;\n}\n\nexport interface MonitorTask {\n  id: string;\n  kind: string;\n  detail: string | null;\n  agentId: string | null;\n  owner: string | null;\n  status: 'pending' | 'running' | 'waiting' | 'completing';\n  phase: string;\n  background: boolean;\n  aborting: number | null;\n  since: number;\n  waits: number;\n}\n\nexport interface MonitorProcess {\n  pid: number;\n  ppid: number;\n  pgid: number;\n  user: string | null;\n  agentId: string | null;\n  command: string;\n  state: 'S' | 'Z';\n  started: number;\n  zombie: number | null;\n  tty: boolean;\n  rss: number | null;\n  utime?: number;\n  stime?: number;\n  cpu?: number | null;\n}\n\nexport interface MonitorProblem {\n  id: string;\n  at: number;\n  agentId: string | null;\n  kind: 'task' | 'retry' | 'turn';\n  message: string;\n}\n\nexport interface MonitorFeed {\n  open: boolean;\n  at: number;\n  usage: { tokens: number; cost: number; free: boolean } | null;\n  agents: MonitorAgent[];\n  tasks: MonitorTask[];\n  processes: MonitorProcess[] | null;\n  kernel: 'checking' | 'ok' | 'unreachable';\n  problems: MonitorProblem[];\n  paused: boolean;\n}\n\nexport interface MemoryDraft {\n  id: string | null;\n  scope: string;\n  section: string;\n  title: string;\n  body: string;\n  tag: MemoryTag | null;\n}\n\nexport type Created = { id: string; error: null } | { id: null; error: string };\n\nexport interface AgentSummary {\n  id: string;\n  name: string;\n  kind: 'cone' | 'scoop';\n  parentId: string | null;\n  role: string | null;\n}\n\nexport interface AgentsSummary {\n  active: string;\n  agents: AgentSummary[];\n}\n\nexport type LickResolved =\n  | { done: true; text: string; error: null }\n  | { done: false; text: null; error: string };\n\nexport interface WebhookRequest {\n  id: string | null;\n  headers: Record<string, string>;\n  body: string;\n}\n\nexport type Rewound =\n  | { done: true; text: string; reason: null; attachments?: ShownAttachment[] }\n  | { done: false; text: null; reason: 'busy' | 'no-turn' };\n\nexport interface AgentSettingsChange {\n  model: { provider: string; modelId: string } | null;\n  thinkingLevel: 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max' | null;\n  agentId?: string | null;\n}\n\nconst keys = <T>(record: Record<keyof T, true>) => Object.keys(record) as (keyof T & string)[];\n\nexport const CONTROL_METHODS = keys<AgentControl>({\n  send: true,\n  wait: true,\n  withdraw: true,\n  abort: true,\n  compact: true,\n  compactAgent: true,\n  reset: true,\n  configure: true,\n  rewind: true,\n  rewindAgent: true,\n  resolveLick: true,\n  resolveAgentLick: true,\n  webhook: true,\n  stopAgent: true,\n  selectCone: true,\n  createCone: true,\n  createScoop: true,\n  drop: true,\n  unqueue: true,\n  sprinkleSend: true,\n  sprinkleCall: true,\n  memorySave: true,\n  memoryRemove: true,\n  freeze: true,\n  newChat: true,\n  thaw: true,\n  discard: true,\n  changesOpen: true,\n  changeAccept: true,\n  changeRevert: true,\n  monitorOpen: true,\n  monitorClose: true,\n  image: true,\n  agentCommands: true,\n  toolLabel: true,\n  guestOpen: true,\n  guestRevoke: true,\n  decide: true,\n});\n\nexport const CONTROL_READS: readonly (keyof AgentControl & string)[] = [\n  'wait',\n  'changesOpen',\n  'monitorOpen',\n  'monitorClose',\n  'image',\n  'toolLabel',\n];\n\nexport const AgentControl: RemoteContract = contract('slicc.agent.control', {\n  control: { methods: CONTROL_METHODS },\n  view: { methods: CONTROL_READS },\n});\n\nexport type Delivered = 'run' | 'steer' | 'follow-up';\n\nexport interface AgentTranscript {\n  readonly state: ReplicatedState<ConversationView>;\n  readonly deliveries: ReplicatedState<Record<string, Delivered>>;\n  readonly agents: ReplicatedState<AgentsSummary>;\n  readonly views: ReplicatedState<Record<string, ConversationView>>;\n  readonly commands: ReplicatedState<Command[]>;\n  readonly privateRevision: ReplicatedState<PrivateRevision>;\n  readonly sprinkles: ReplicatedState<Sprinkle[]>;\n  readonly memories: ReplicatedState<MemoryEntry[]>;\n  readonly memoryScopes: ReplicatedState<MemoryScope[]>;\n  readonly frozen: ReplicatedState<FrozenCone[]>;\n  readonly changes: ReplicatedState<ChangesView>;\n  readonly monitor: ReplicatedState<MonitorFeed>;\n  readonly vault: ReplicatedState<VaultState>;\n  readonly labels: ReplicatedState<Record<string, string>>;\n  readonly guests: ReplicatedState<GuestSeat[]>;\n  readonly approvals: ReplicatedState<Approval[]>;\n}\n\nexport interface PrivateRevision {\n  revision: number;\n}\n\nexport interface Command {\n  name: string;\n  description: string;\n  kind: 'prompt' | 'skill' | 'action';\n}\n\nexport const TRANSCRIPT_STATES = keys<AgentTranscript>({\n  state: true,\n  deliveries: true,\n  agents: true,\n  views: true,\n  commands: true,\n  privateRevision: true,\n  sprinkles: true,\n  memories: true,\n  memoryScopes: true,\n  frozen: true,\n  changes: true,\n  monitor: true,\n  vault: true,\n  labels: true,\n  guests: true,\n  approvals: true,\n});\n\nexport const AgentTranscript: RemoteContract = contract('slicc.agent.transcript', {\n  transcript: { state: TRANSCRIPT_STATES },\n});\n\nexport const REMOTE_METHODS = keys<AgentRemote>({\n  prompt: true,\n  watch: true,\n  next: true,\n  close: true,\n  abort: true,\n});\n\nexport const REMOTE_READS: readonly (keyof AgentRemote & string)[] = ['watch', 'next', 'close'];\n\nexport interface GuestShown {\n  id: string;\n  label: string;\n  agentId: string;\n  name: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n}\n\nexport interface GuestProposal {\n  id: string;\n  text: string;\n  state: 'pending' | 'approved' | 'rejected' | 'unanswered' | 'withdrawn';\n  reason: string | null;\n  createdAt: number;\n  decidedAt: number | null;\n}\n\nexport interface AgentGuest {\n  readonly transcript: ReplicatedState<ConversationView>;\n  readonly seat: ReplicatedState<GuestShown>;\n  readonly proposals: ReplicatedState<GuestProposal[]>;\n  propose(request: ProposeRequest, context: Context): Promise<Proposed>;\n}\n\nexport const GUEST_STATES = ['transcript', 'seat', 'proposals'] as const;\n\nexport const GUEST_METHODS = ['propose'] as const;\n\nexport const AgentGuestService: RemoteContract = contract('slicc.agent.guest', {\n  guest: { state: GUEST_STATES, methods: GUEST_METHODS },\n  none: {},\n});\n\nexport const AgentRemoteService: RemoteContract = contract('slicc.agent.remote', {\n  remote: { methods: REMOTE_METHODS },\n  watch: { methods: REMOTE_READS },\n});\n\nexport const PAGE_METHODS = keys<AgentPages>({\n  open: true,\n  report: true,\n  next: true,\n  answer: true,\n  close: true,\n});\n\nexport const AgentPagesService: RemoteContract = contract('slicc.agent.pages', {\n  pages: { methods: PAGE_METHODS },\n  none: {},\n});\n\nexport interface ModelChoice {\n  id: string;\n  label: string;\n  provider: string;\n  kind: 'chat' | 'classifier';\n  reasoning: boolean;\n  images?: boolean;\n  contextWindow: number;\n}\n\nexport interface AccountState {\n  id: string;\n  provider: string;\n  identity: string;\n  status: 'connected' | 'disconnected' | 'expired';\n  auth: 'api-key' | 'oauth';\n  needs: 'cors-free-transport' | null;\n  group?: 'providers' | 'mcp';\n  secret?: 'api-key' | 'token';\n  store?: 'vault';\n  fields?: AccountField[];\n}\n\nexport interface AccountField {\n  name: string;\n  label: string;\n  required?: boolean;\n}\n\nexport interface BudgetState {\n  provider: string;\n  percent: number;\n  window: 'weekly';\n  resets: string;\n}\n\nexport interface SignIn {\n  clientId: string;\n  scopes: string;\n  imsEnvironment: string;\n}\n\nexport interface McpSignIn {\n  url: string;\n  state: string;\n}\n\nexport interface SettingsState {\n  models: ModelChoice[];\n  accounts: AccountState[];\n  budget?: BudgetState | null;\n  moved?: { kind: 'model' | 'mcp'; label: string }[];\n  labels?: Record<string, string>;\n}\n\nexport interface AgentSettings {\n  readonly state: ReplicatedState<SettingsState>;\n  connect(\n    providerId: string,\n    secret: string | null,\n    fields: Record<string, string> | null,\n    context: Context\n  ): Promise<void>;\n  disconnect(providerId: string, context: Context): Promise<void>;\n  signIn(providerId: string, context: Context): Promise<SignIn | McpSignIn | null>;\n  dismissMoved(context: Context): Promise<void>;\n}\n\nexport const SETTINGS_METHODS = keys<Omit<AgentSettings, 'state'>>({\n  connect: true,\n  disconnect: true,\n  signIn: true,\n  dismissMoved: true,\n});\n\nexport const AgentSettings: RemoteContract = contract('slicc.agent.settings', {\n  settings: { state: ['state'], methods: SETTINGS_METHODS },\n  view: { state: ['state'] },\n});\n"],
-  "mappings": "AAYA,SAAS,gBAAgB;AAoOzB,MAAM,OAAO,CAAI,WAAkC,OAAO,KAAK,MAAM;AAE9D,MAAM,kBAAkB,KAAmB;AAAA,EAChD,MAAM;AAAA,EACN,MAAM;AAAA,EACN,UAAU;AAAA,EACV,OAAO;AAAA,EACP,SAAS;AAAA,EACT,cAAc;AAAA,EACd,OAAO;AAAA,EACP,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,SAAS;AAAA,EACT,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,MAAM;AAAA,EACN,SAAS;AAAA,EACT,cAAc;AAAA,EACd,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA,EACT,aAAa;AAAA,EACb,cAAc;AAAA,EACd,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,OAAO;AAAA,EACP,eAAe;AAAA,EACf,WAAW;AAAA,EACX,WAAW;AAAA,EACX,aAAa;AAAA,EACb,QAAQ;AACV,CAAC;AAEM,MAAM,gBAA0D;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,eAA+B,SAAS,uBAAuB;AAAA,EAC1E,SAAS,EAAE,SAAS,gBAAgB;AAAA,EACpC,MAAM,EAAE,SAAS,cAAc;AACjC,CAAC;AAiCM,MAAM,oBAAoB,KAAsB;AAAA,EACrD,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,UAAU;AAAA,EACV,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW;AACb,CAAC;AAEM,MAAM,kBAAkC,SAAS,0BAA0B;AAAA,EAChF,YAAY,EAAE,OAAO,kBAAkB;AACzC,CAAC;AAEM,MAAM,iBAAiB,KAAkB;AAAA,EAC9C,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AACT,CAAC;AAEM,MAAM,eAAwD,CAAC,SAAS,QAAQ,OAAO;AA2BvF,MAAM,eAAe,CAAC,cAAc,QAAQ,WAAW;AAEvD,MAAM,gBAAgB,CAAC,SAAS;AAEhC,MAAM,oBAAoC,SAAS,qBAAqB;AAAA,EAC7E,OAAO,EAAE,OAAO,cAAc,SAAS,cAAc;AAAA,EACrD,MAAM,CAAC;AACT,CAAC;AAEM,MAAM,qBAAqC,SAAS,sBAAsB;AAAA,EAC/E,QAAQ,EAAE,SAAS,eAAe;AAAA,EAClC,OAAO,EAAE,SAAS,aAAa;AACjC,CAAC;AAEM,MAAM,eAAe,KAAiB;AAAA,EAC3C,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AACT,CAAC;AAEM,MAAM,oBAAoC,SAAS,qBAAqB;AAAA,EAC7E,OAAO,EAAE,SAAS,aAAa;AAAA,EAC/B,MAAM,CAAC;AACT,CAAC;AAsEM,MAAM,mBAAmB,KAAmC;AAAA,EACjE,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,cAAc;AAChB,CAAC;AAEM,MAAM,gBAAgC,SAAS,wBAAwB;AAAA,EAC5E,UAAU,EAAE,OAAO,CAAC,OAAO,GAAG,SAAS,iBAAiB;AAAA,EACxD,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE;AAC3B,CAAC;",
+  "sourcesContent": ["import type { Context, JsonValue, RemoteContract, ReplicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Approval, ApprovalAnswer, ApprovalDecided } from './approvals/index.ts';\nimport type {\n  ApprovalPolicy,\n  ApprovalPolicyChange,\n  ApprovalPolicySet,\n} from './approvals/policy.ts';\nimport type { SendAttachment, ShownAttachment } from './attachments.ts';\nimport type { ChangesView } from './changes/git.ts';\nimport type { FrozenCone } from './freezer/index.ts';\nimport type { GuestOpened, Proposed, ProposeRequest } from './guests/index.ts';\nimport type { GuestDraft, GuestGates, GuestSeat } from './guests/seats.ts';\nimport type { MemoryEntry, MemoryScope, MemoryTag } from './memory/format.ts';\nimport type { AgentRemote } from './remote/host.ts';\nimport type { AgentPages } from './remote/pages.ts';\nimport type { VaultState } from './secrets/vault.ts';\nimport { contract } from './serving.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\n\nexport type SendMode = 'steer' | 'followUp' | 'reject';\n\nexport interface SendRequest {\n  text: string;\n  whenBusy: SendMode;\n  requestId: string | null;\n  agentId?: string | null;\n  attachments?: SendAttachment[];\n}\n\nexport interface OperationError {\n  code: string;\n  message: string;\n}\n\nexport type SendResponse =\n  | { accepted: true; submissionId: string; error: null }\n  | { accepted: false; submissionId: null; error: OperationError };\n\nexport type PromptResult =\n  | { status: 'done'; text: string; reason: null }\n  | { status: 'unanswered'; text: null; reason: string };\n\nexport interface AgentControl {\n  send(request: SendRequest, context: Context): Promise<SendResponse>;\n  wait(submissionId: string, context: Context): Promise<PromptResult>;\n  withdraw(\n    submissionId: string,\n    context: Context\n  ): Promise<{ outcome: 'withdrawn' | 'already_placed' | 'not_found' }>;\n  abort(context: Context): Promise<void>;\n  compact(instructions: string | null, context: Context): Promise<SendResponse>;\n  compactAgent(\n    agentId: string,\n    instructions: string | null,\n    context: Context\n  ): Promise<SendResponse>;\n  reset(handoff: string | null, context: Context): Promise<void>;\n  configure(change: AgentSettingsChange, context: Context): Promise<void>;\n  rewind(messageId: string | null, context: Context): Promise<Rewound>;\n  rewindAgent(agentId: string, messageId: string | null, context: Context): Promise<Rewound>;\n  resolveLick(\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved>;\n  resolveAgentLick(\n    agentId: string,\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved>;\n  webhook(\n    name: string,\n    delivery: WebhookRequest,\n    context: Context\n  ): Promise<{ delivered: boolean }>;\n  stopAgent(agentId: string, context: Context): Promise<void>;\n  selectCone(agentId: string, context: Context): Promise<void>;\n  createCone(name: string, context: Context): Promise<Created>;\n  createScoop(parentId: string, name: string, context: Context): Promise<Created>;\n  drop(agentId: string, context: Context): Promise<Created>;\n  unqueue(\n    agentId: string | null,\n    submissionId: string,\n    context: Context\n  ): Promise<{ outcome: 'withdrawn' | 'already_placed' | 'not_found' }>;\n  sprinkleSend(\n    sprinkleId: string,\n    payload: { action: string; data: JsonValue | null; target: string | null },\n    context: Context\n  ): Promise<{ delivered: boolean }>;\n  sprinkleCall(\n    sprinkleId: string,\n    method: string,\n    args: JsonValue[],\n    context: Context\n  ): Promise<JsonValue>;\n  memorySave(draft: MemoryDraft, context: Context): Promise<MemoryEntry>;\n  memoryRemove(id: string, context: Context): Promise<{ removed: boolean }>;\n  freeze(agentId: string, context: Context): Promise<Created>;\n  newChat(agentId: string, context: Context): Promise<Created>;\n  thaw(frozenId: string, context: Context): Promise<Created>;\n  discard(frozenId: string, context: Context): Promise<Created>;\n  changesOpen(context: Context): Promise<void>;\n  changeAccept(path: string, context: Context): Promise<Created>;\n  changeRevert(path: string, context: Context): Promise<Created>;\n  monitorOpen(lease: string | null, resync: boolean, context: Context): Promise<MonitorLease>;\n  monitorClose(lease: string, context: Context): Promise<void>;\n  image(ref: ImageRef, context: Context): Promise<StoredImage>;\n  agentCommands(agentId: string, context: Context): Promise<Command[]>;\n  toolLabel(agentId: string, callIds: string[], context: Context): Promise<string | null>;\n  guestOpen(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  guestRevoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n  approvalPolicySet(change: ApprovalPolicyChange, context: Context): Promise<ApprovalPolicySet>;\n  decide(\n    id: string,\n    decision: ApprovalAnswer,\n    reason: string | null,\n    context: Context\n  ): Promise<ApprovalDecided>;\n}\n\nexport interface ImageRef {\n  entry: number;\n  message: number;\n  part: number;\n}\n\nexport type StoredImage = { data: string; mimeType: string } | { data: null; mimeType: null };\n\nexport interface MonitorLease {\n  lease: string;\n  ttlMs: number;\n}\n\nexport interface MonitorAgent {\n  id: string;\n  name: string;\n  kind: 'cone' | 'scoop';\n  parentId: string | null;\n  model: string | null;\n  running: boolean;\n  queued: number;\n  tool: string | null;\n  retry: { attempt: number; since: number; error: string } | null;\n  failed: string | null;\n  context: number | null;\n  cpu?: number | null;\n}\n\nexport interface MonitorTask {\n  id: string;\n  kind: string;\n  detail: string | null;\n  agentId: string | null;\n  owner: string | null;\n  status: 'pending' | 'running' | 'waiting' | 'completing';\n  phase: string;\n  background: boolean;\n  aborting: number | null;\n  since: number;\n  waits: number;\n}\n\nexport interface MonitorProcess {\n  pid: number;\n  ppid: number;\n  pgid: number;\n  user: string | null;\n  agentId: string | null;\n  command: string;\n  state: 'S' | 'Z';\n  started: number;\n  zombie: number | null;\n  tty: boolean;\n  rss: number | null;\n  utime?: number;\n  stime?: number;\n  cpu?: number | null;\n}\n\nexport interface MonitorProblem {\n  id: string;\n  at: number;\n  agentId: string | null;\n  kind: 'task' | 'retry' | 'turn';\n  message: string;\n}\n\nexport interface MonitorFeed {\n  open: boolean;\n  at: number;\n  usage: { tokens: number; cost: number; free: boolean } | null;\n  agents: MonitorAgent[];\n  tasks: MonitorTask[];\n  processes: MonitorProcess[] | null;\n  kernel: 'checking' | 'ok' | 'unreachable';\n  problems: MonitorProblem[];\n  paused: boolean;\n}\n\nexport interface MemoryDraft {\n  id: string | null;\n  scope: string;\n  section: string;\n  title: string;\n  body: string;\n  tag: MemoryTag | null;\n}\n\nexport type Created = { id: string; error: null } | { id: null; error: string };\n\nexport interface AgentSummary {\n  id: string;\n  name: string;\n  kind: 'cone' | 'scoop';\n  parentId: string | null;\n  role: string | null;\n}\n\nexport interface AgentsSummary {\n  active: string;\n  agents: AgentSummary[];\n}\n\nexport type LickResolved =\n  | { done: true; text: string; error: null }\n  | { done: false; text: null; error: string };\n\nexport interface WebhookRequest {\n  id: string | null;\n  headers: Record<string, string>;\n  body: string;\n}\n\nexport type Rewound =\n  | { done: true; text: string; reason: null; attachments?: ShownAttachment[] }\n  | { done: false; text: null; reason: 'busy' | 'no-turn' };\n\nexport interface AgentSettingsChange {\n  model: { provider: string; modelId: string } | null;\n  thinkingLevel: 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max' | null;\n  agentId?: string | null;\n}\n\nconst keys = <T>(record: Record<keyof T, true>) => Object.keys(record) as (keyof T & string)[];\n\nexport const CONTROL_METHODS = keys<AgentControl>({\n  send: true,\n  wait: true,\n  withdraw: true,\n  abort: true,\n  compact: true,\n  compactAgent: true,\n  reset: true,\n  configure: true,\n  rewind: true,\n  rewindAgent: true,\n  resolveLick: true,\n  resolveAgentLick: true,\n  webhook: true,\n  stopAgent: true,\n  selectCone: true,\n  createCone: true,\n  createScoop: true,\n  drop: true,\n  unqueue: true,\n  sprinkleSend: true,\n  sprinkleCall: true,\n  memorySave: true,\n  memoryRemove: true,\n  freeze: true,\n  newChat: true,\n  thaw: true,\n  discard: true,\n  changesOpen: true,\n  changeAccept: true,\n  changeRevert: true,\n  monitorOpen: true,\n  monitorClose: true,\n  image: true,\n  agentCommands: true,\n  toolLabel: true,\n  guestOpen: true,\n  guestRevoke: true,\n  approvalPolicySet: true,\n  decide: true,\n});\n\nexport const OWNER_DEVICE_METHODS: readonly (keyof AgentControl & string)[] = [\n  'decide',\n  'guestOpen',\n  'guestRevoke',\n  'approvalPolicySet',\n];\n\nexport const CONTROL_READS: readonly (keyof AgentControl & string)[] = [\n  'wait',\n  'changesOpen',\n  'monitorOpen',\n  'monitorClose',\n  'image',\n  'toolLabel',\n];\n\nexport const AgentControl: RemoteContract = contract('slicc.agent.control', {\n  control: { methods: CONTROL_METHODS },\n  view: { methods: [...CONTROL_READS, ...OWNER_DEVICE_METHODS] },\n});\n\nexport type Delivered = 'run' | 'steer' | 'follow-up';\n\nexport interface AgentTranscript {\n  readonly state: ReplicatedState<ConversationView>;\n  readonly deliveries: ReplicatedState<Record<string, Delivered>>;\n  readonly agents: ReplicatedState<AgentsSummary>;\n  readonly views: ReplicatedState<Record<string, ConversationView>>;\n  readonly commands: ReplicatedState<Command[]>;\n  readonly privateRevision: ReplicatedState<PrivateRevision>;\n  readonly sprinkles: ReplicatedState<Sprinkle[]>;\n  readonly memories: ReplicatedState<MemoryEntry[]>;\n  readonly memoryScopes: ReplicatedState<MemoryScope[]>;\n  readonly frozen: ReplicatedState<FrozenCone[]>;\n  readonly changes: ReplicatedState<ChangesView>;\n  readonly monitor: ReplicatedState<MonitorFeed>;\n  readonly vault: ReplicatedState<VaultState>;\n  readonly labels: ReplicatedState<Record<string, string>>;\n  readonly guests: ReplicatedState<GuestSeat[]>;\n  readonly approvals: ReplicatedState<Approval[]>;\n  readonly approvalPolicy: ReplicatedState<ApprovalPolicy>;\n}\n\nexport interface PrivateRevision {\n  revision: number;\n}\n\nexport interface Command {\n  name: string;\n  description: string;\n  kind: 'prompt' | 'skill' | 'action';\n}\n\nexport const TRANSCRIPT_STATES = keys<AgentTranscript>({\n  state: true,\n  deliveries: true,\n  agents: true,\n  views: true,\n  commands: true,\n  privateRevision: true,\n  sprinkles: true,\n  memories: true,\n  memoryScopes: true,\n  frozen: true,\n  changes: true,\n  monitor: true,\n  vault: true,\n  labels: true,\n  guests: true,\n  approvals: true,\n  approvalPolicy: true,\n});\n\nexport const AgentTranscript: RemoteContract = contract('slicc.agent.transcript', {\n  transcript: { state: TRANSCRIPT_STATES },\n});\n\nexport const REMOTE_METHODS = keys<AgentRemote>({\n  prompt: true,\n  watch: true,\n  next: true,\n  close: true,\n  abort: true,\n});\n\nexport const REMOTE_READS: readonly (keyof AgentRemote & string)[] = ['watch', 'next', 'close'];\n\nexport interface GuestShown {\n  id: string;\n  label: string;\n  agentId: string;\n  name: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n}\n\nexport interface GuestProposal {\n  id: string;\n  text: string;\n  state: 'pending' | 'approved' | 'rejected' | 'unanswered' | 'withdrawn';\n  reason: string | null;\n  createdAt: number;\n  decidedAt: number | null;\n}\n\nexport interface AgentGuest {\n  readonly transcript: ReplicatedState<ConversationView>;\n  readonly seat: ReplicatedState<GuestShown>;\n  readonly proposals: ReplicatedState<GuestProposal[]>;\n  propose(request: ProposeRequest, context: Context): Promise<Proposed>;\n  guestOpen(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  guestRevoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n}\n\nexport const GUEST_STATES = ['transcript', 'seat', 'proposals'] as const;\n\nexport const GUEST_METHODS = ['propose', 'guestOpen', 'guestRevoke'] as const;\n\nexport const AgentGuestService: RemoteContract = contract('slicc.agent.guest', {\n  guest: { state: GUEST_STATES, methods: GUEST_METHODS },\n  none: {},\n});\n\nexport const AgentRemoteService: RemoteContract = contract('slicc.agent.remote', {\n  remote: { methods: REMOTE_METHODS },\n  watch: { methods: REMOTE_READS },\n});\n\nexport const PAGE_METHODS = keys<AgentPages>({\n  open: true,\n  report: true,\n  next: true,\n  answer: true,\n  close: true,\n});\n\nexport const AgentPagesService: RemoteContract = contract('slicc.agent.pages', {\n  pages: { methods: PAGE_METHODS },\n  none: {},\n});\n\nexport interface ModelChoice {\n  id: string;\n  label: string;\n  provider: string;\n  kind: 'chat' | 'classifier';\n  reasoning: boolean;\n  images?: boolean;\n  contextWindow: number;\n}\n\nexport interface AccountState {\n  id: string;\n  provider: string;\n  identity: string;\n  status: 'connected' | 'disconnected' | 'expired';\n  auth: 'api-key' | 'oauth';\n  needs: 'cors-free-transport' | null;\n  group?: 'providers' | 'mcp';\n  secret?: 'api-key' | 'token';\n  store?: 'vault';\n  fields?: AccountField[];\n}\n\nexport interface AccountField {\n  name: string;\n  label: string;\n  required?: boolean;\n}\n\nexport interface BudgetState {\n  provider: string;\n  percent: number;\n  window: 'weekly';\n  resets: string;\n}\n\nexport interface SignIn {\n  clientId: string;\n  scopes: string;\n  imsEnvironment: string;\n}\n\nexport interface McpSignIn {\n  url: string;\n  state: string;\n}\n\nexport interface SettingsState {\n  models: ModelChoice[];\n  accounts: AccountState[];\n  budget?: BudgetState | null;\n  moved?: { kind: 'model' | 'mcp'; label: string }[];\n  labels?: Record<string, string>;\n}\n\nexport interface AgentSettings {\n  readonly state: ReplicatedState<SettingsState>;\n  connect(\n    providerId: string,\n    secret: string | null,\n    fields: Record<string, string> | null,\n    context: Context\n  ): Promise<void>;\n  disconnect(providerId: string, context: Context): Promise<void>;\n  signIn(providerId: string, context: Context): Promise<SignIn | McpSignIn | null>;\n  dismissMoved(context: Context): Promise<void>;\n}\n\nexport const SETTINGS_METHODS = keys<Omit<AgentSettings, 'state'>>({\n  connect: true,\n  disconnect: true,\n  signIn: true,\n  dismissMoved: true,\n});\n\nexport const AgentSettings: RemoteContract = contract('slicc.agent.settings', {\n  settings: { state: ['state'], methods: SETTINGS_METHODS },\n  view: { state: ['state'] },\n});\n"],
+  "mappings": "AAiBA,SAAS,gBAAgB;AAqOzB,MAAM,OAAO,CAAI,WAAkC,OAAO,KAAK,MAAM;AAE9D,MAAM,kBAAkB,KAAmB;AAAA,EAChD,MAAM;AAAA,EACN,MAAM;AAAA,EACN,UAAU;AAAA,EACV,OAAO;AAAA,EACP,SAAS;AAAA,EACT,cAAc;AAAA,EACd,OAAO;AAAA,EACP,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,SAAS;AAAA,EACT,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,MAAM;AAAA,EACN,SAAS;AAAA,EACT,cAAc;AAAA,EACd,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA,EACT,aAAa;AAAA,EACb,cAAc;AAAA,EACd,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,OAAO;AAAA,EACP,eAAe;AAAA,EACf,WAAW;AAAA,EACX,WAAW;AAAA,EACX,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,QAAQ;AACV,CAAC;AAEM,MAAM,uBAAiE;AAAA,EAC5E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,gBAA0D;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,eAA+B,SAAS,uBAAuB;AAAA,EAC1E,SAAS,EAAE,SAAS,gBAAgB;AAAA,EACpC,MAAM,EAAE,SAAS,CAAC,GAAG,eAAe,GAAG,oBAAoB,EAAE;AAC/D,CAAC;AAkCM,MAAM,oBAAoB,KAAsB;AAAA,EACrD,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,UAAU;AAAA,EACV,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,gBAAgB;AAClB,CAAC;AAEM,MAAM,kBAAkC,SAAS,0BAA0B;AAAA,EAChF,YAAY,EAAE,OAAO,kBAAkB;AACzC,CAAC;AAEM,MAAM,iBAAiB,KAAkB;AAAA,EAC9C,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AACT,CAAC;AAEM,MAAM,eAAwD,CAAC,SAAS,QAAQ,OAAO;AA6BvF,MAAM,eAAe,CAAC,cAAc,QAAQ,WAAW;AAEvD,MAAM,gBAAgB,CAAC,WAAW,aAAa,aAAa;AAE5D,MAAM,oBAAoC,SAAS,qBAAqB;AAAA,EAC7E,OAAO,EAAE,OAAO,cAAc,SAAS,cAAc;AAAA,EACrD,MAAM,CAAC;AACT,CAAC;AAEM,MAAM,qBAAqC,SAAS,sBAAsB;AAAA,EAC/E,QAAQ,EAAE,SAAS,eAAe;AAAA,EAClC,OAAO,EAAE,SAAS,aAAa;AACjC,CAAC;AAEM,MAAM,eAAe,KAAiB;AAAA,EAC3C,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AACT,CAAC;AAEM,MAAM,oBAAoC,SAAS,qBAAqB;AAAA,EAC7E,OAAO,EAAE,SAAS,aAAa;AAAA,EAC/B,MAAM,CAAC;AACT,CAAC;AAsEM,MAAM,mBAAmB,KAAmC;AAAA,EACjE,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,cAAc;AAChB,CAAC;AAEM,MAAM,gBAAgC,SAAS,wBAAwB;AAAA,EAC5E,UAAU,EAAE,OAAO,CAAC,OAAO,GAAG,SAAS,iBAAiB;AAAA,EACxD,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE;AAC3B,CAAC;",
   "names": []
 }

package/dist/spectrum/approvals-port.js

@@ -39,7 +39,7 @@ function shown(item, agentName) {
     agentId: item.agentId,
     ...agentName ? { agentName } : {},
     always: false,
-    ...item.verdict && item.verdict.decision !== "unsure" ? { verdict: { decision: item.verdict.decision, reason: item.verdict.reason } } : {}
+    ...item.verdict ? { verdict: { decision: item.verdict.decision, reason: item.verdict.reason } } : {}
   };
   if (item.kind === "guest-tool")
     return { ...guest, kind: "guest-tool", tool: item.detail.tool, summary: item.detail.summary };
@@ -64,7 +64,7 @@ class ApprovalsAdapter extends Emitter {
     super();
     this.#connection = connection;
     this.#host = host;
-    this.#ours = !connection.readOnly;
+    this.#ours = !connection.guest;
     if (this.#ours || host?.decide) this.decide = (...args) => this.#route(...args);
     this.#listed = new Set(this.#agent().map((approval) => approval.id));
     connection.approvals?.subscribe(() => this.#changed());

package/dist/spectrum/approvals-port.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/spectrum/approvals-port.ts"],
-  "sourcesContent": ["import type {\n  Approval,\n  ApprovalDecision,\n  ApprovalEnd,\n  ApprovalRequester,\n  ApprovalsEvents,\n  ApprovalsPort,\n} from '@ai-ecoverse/slicc-spectrum/ui';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Approval as Item } from '../approvals/record.ts';\nimport type { AgentConnection } from '../client.ts';\nimport { Emitter } from './emitter.ts';\n\nconst ENDS: Record<string, ApprovalEnd> = {\n  approved: 'answered',\n  rejected: 'answered',\n  unanswered: 'expired',\n  withdrawn: 'withdrawn',\n};\n\nfunction requesterOf(item: Item): ApprovalRequester {\n  const { kind, name, agentId, where } = item.requester;\n  return {\n    kind,\n    name,\n    ...(agentId ? { agentId } : {}),\n    ...(where ? { where } : {}),\n  };\n}\n\nexport function shown(item: Item, agentName: string | undefined): Approval {\n  const base = {\n    id: item.id,\n    requester: requesterOf(item),\n    createdAt: item.createdAt,\n    expiresAt: item.expiresAt,\n  };\n  if (item.kind === 'sudo') {\n    const { command, target, cwd, alwaysScope } = item.detail;\n    return {\n      ...base,\n      kind: 'sudo',\n      command,\n      ...(target ? { target } : {}),\n      ...(cwd ? { cwd } : {}),\n      always: item.always,\n      ...(alwaysScope ? { alwaysScope } : {}),\n    };\n  }\n  const guest = {\n    ...base,\n    agentId: item.agentId,\n    ...(agentName ? { agentName } : {}),\n    always: false as const,\n    ...(item.verdict && item.verdict.decision !== 'unsure'\n      ? { verdict: { decision: item.verdict.decision, reason: item.verdict.reason } }\n      : {}),\n  };\n  if (item.kind === 'guest-tool')\n    return { ...guest, kind: 'guest-tool', tool: item.detail.tool, summary: item.detail.summary };\n  return {\n    ...guest,\n    kind: 'guest-message',\n    text: item.detail.text,\n    ...(item.detail.attachments.length\n      ? { attachments: item.detail.attachments.map((file) => ({ ...file })) }\n      : {}),\n  };\n}\n\nexport type HostApprovals = ApprovalsPort;\n\nexport const NOT_HERE = \"This request can't be answered in this tab.\";\n\nconst asked = (item: Item) => item.state === 'pending' && item.tier === 'user';\n\nexport class ApprovalsAdapter extends Emitter<ApprovalsEvents> implements ApprovalsPort {\n  readonly #connection: AgentConnection;\n  readonly #host: HostApprovals | undefined;\n  readonly #ours: boolean;\n  readonly #mine = new Set<string>();\n  readonly #deciding = new Set<string>();\n  #listed = new Set<string>();\n  readonly decide?: (id: string, decision: ApprovalDecision, reason?: string) => Promise<void>;\n\n  constructor(connection: AgentConnection, host?: HostApprovals) {\n    super();\n    this.#connection = connection;\n    this.#host = host;\n    this.#ours = !connection.readOnly;\n    if (this.#ours || host?.decide) this.decide = (...args) => this.#route(...args);\n    this.#listed = new Set(this.#agent().map((approval) => approval.id));\n    connection.approvals?.subscribe(() => this.#changed());\n    host?.on('approvals', () => this.emit('approvals', this.list()));\n    host?.on('ended', (detail) => this.emit('ended', detail));\n  }\n\n  #items(): readonly Item[] {\n    return this.#connection.approvals?.value ?? [];\n  }\n\n  list(): readonly Approval[] {\n    return [...(this.#host?.list() ?? []), ...this.#agent()].sort(\n      (a, b) => a.createdAt - b.createdAt\n    );\n  }\n\n  #agent(): readonly Approval[] {\n    const names = new Map(\n      (this.#connection.agents?.value?.agents ?? []).map((agent) => [agent.id, agent.name])\n    );\n    return this.#items()\n      .filter((item) => asked(item) && !this.#mine.has(item.id))\n      .sort((a, b) => a.createdAt - b.createdAt)\n      .map((item) => shown(item, names.get(item.agentId)));\n  }\n\n  #changed(): void {\n    const items = new Map(this.#items().map((item) => [item.id, item]));\n    const listed = this.#agent();\n    const now = new Set(listed.map((approval) => approval.id));\n    for (const id of this.#listed) {\n      if (now.has(id) || this.#mine.has(id) || this.#deciding.has(id)) continue;\n      const state = items.get(id)?.state;\n      this.emit('ended', { id, reason: (state && ENDS[state]) || 'answered' });\n    }\n    for (const id of this.#mine) {\n      const item = items.get(id);\n      if (!item || !asked(item)) this.#mine.delete(id);\n    }\n    this.#listed = now;\n    this.emit('approvals', this.list());\n  }\n\n  #route(id: string, decision: ApprovalDecision, reason?: string): Promise<void> {\n    const host = this.#host;\n    if (host?.list().some((approval) => approval.id === id)) {\n      if (!host.decide) return Promise.reject(new Error(NOT_HERE));\n      return host.decide(id, decision, reason);\n    }\n    if (!this.#ours) return Promise.reject(new Error(NOT_HERE));\n    return this.#decide(id, decision, reason);\n  }\n\n  async #decide(id: string, decision: ApprovalDecision, reason?: string): Promise<void> {\n    this.#deciding.add(id);\n    try {\n      const answer = await this.#connection.control.decide(\n        id,\n        decision,\n        reason ?? null,\n        BACKGROUND_CONTEXT\n      );\n      if (!answer.done) throw new Error(answer.error);\n      this.#mine.add(id);\n    } finally {\n      this.#deciding.delete(id);\n    }\n    this.#changed();\n  }\n}\n"],
-  "mappings": "AAQA,SAAS,0BAA0B;AAGnC,SAAS,eAAe;AAExB,MAAM,OAAoC;AAAA,EACxC,UAAU;AAAA,EACV,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,WAAW;AACb;AAEA,SAAS,YAAY,MAA+B;AAClD,QAAM,EAAE,MAAM,MAAM,SAAS,MAAM,IAAI,KAAK;AAC5C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7B,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3B;AACF;AAEO,SAAS,MAAM,MAAY,WAAyC;AACzE,QAAM,OAAO;AAAA,IACX,IAAI,KAAK;AAAA,IACT,WAAW,YAAY,IAAI;AAAA,IAC3B,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK;AAAA,EAClB;AACA,MAAI,KAAK,SAAS,QAAQ;AACxB,UAAM,EAAE,SAAS,QAAQ,KAAK,YAAY,IAAI,KAAK;AACnD,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM;AAAA,MACN;AAAA,MACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,MAC3B,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,IACvC;AAAA,EACF;AACA,QAAM,QAAQ;AAAA,IACZ,GAAG;AAAA,IACH,SAAS,KAAK;AAAA,IACd,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACjC,QAAQ;AAAA,IACR,GAAI,KAAK,WAAW,KAAK,QAAQ,aAAa,WAC1C,EAAE,SAAS,EAAE,UAAU,KAAK,QAAQ,UAAU,QAAQ,KAAK,QAAQ,OAAO,EAAE,IAC5E,CAAC;AAAA,EACP;AACA,MAAI,KAAK,SAAS;AAChB,WAAO,EAAE,GAAG,OAAO,MAAM,cAAc,MAAM,KAAK,OAAO,MAAM,SAAS,KAAK,OAAO,QAAQ;AAC9F,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,MAAM,KAAK,OAAO;AAAA,IAClB,GAAI,KAAK,OAAO,YAAY,SACxB,EAAE,aAAa,KAAK,OAAO,YAAY,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,EAAE,EAAE,IACpE,CAAC;AAAA,EACP;AACF;AAIO,MAAM,WAAW;AAExB,MAAM,QAAQ,CAAC,SAAe,KAAK,UAAU,aAAa,KAAK,SAAS;AAEjE,MAAM,yBAAyB,QAAkD;AAAA,EAC7E;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ,oBAAI,IAAY;AAAA,EACxB,YAAY,oBAAI,IAAY;AAAA,EACrC,UAAU,oBAAI,IAAY;AAAA,EACjB;AAAA,EAET,YAAY,YAA6B,MAAsB;AAC7D,UAAM;AACN,SAAK,cAAc;AACnB,SAAK,QAAQ;AACb,SAAK,QAAQ,CAAC,WAAW;AACzB,QAAI,KAAK,SAAS,MAAM,OAAQ,MAAK,SAAS,IAAI,SAAS,KAAK,OAAO,GAAG,IAAI;AAC9E,SAAK,UAAU,IAAI,IAAI,KAAK,OAAO,EAAE,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AACnE,eAAW,WAAW,UAAU,MAAM,KAAK,SAAS,CAAC;AACrD,UAAM,GAAG,aAAa,MAAM,KAAK,KAAK,aAAa,KAAK,KAAK,CAAC,CAAC;AAC/D,UAAM,GAAG,SAAS,CAAC,WAAW,KAAK,KAAK,SAAS,MAAM,CAAC;AAAA,EAC1D;AAAA,EAEA,SAA0B;AACxB,WAAO,KAAK,YAAY,WAAW,SAAS,CAAC;AAAA,EAC/C;AAAA,EAEA,OAA4B;AAC1B,WAAO,CAAC,GAAI,KAAK,OAAO,KAAK,KAAK,CAAC,GAAI,GAAG,KAAK,OAAO,CAAC,EAAE;AAAA,MACvD,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,IAC5B;AAAA,EACF;AAAA,EAEA,SAA8B;AAC5B,UAAM,QAAQ,IAAI;AAAA,OACf,KAAK,YAAY,QAAQ,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC;AAAA,IACtF;AACA,WAAO,KAAK,OAAO,EAChB,OAAO,CAAC,SAAS,MAAM,IAAI,KAAK,CAAC,KAAK,MAAM,IAAI,KAAK,EAAE,CAAC,EACxD,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EACxC,IAAI,CAAC,SAAS,MAAM,MAAM,MAAM,IAAI,KAAK,OAAO,CAAC,CAAC;AAAA,EACvD;AAAA,EAEA,WAAiB;AACf,UAAM,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAClE,UAAM,SAAS,KAAK,OAAO;AAC3B,UAAM,MAAM,IAAI,IAAI,OAAO,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AACzD,eAAW,MAAM,KAAK,SAAS;AAC7B,UAAI,IAAI,IAAI,EAAE,KAAK,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,UAAU,IAAI,EAAE,EAAG;AACjE,YAAM,QAAQ,MAAM,IAAI,EAAE,GAAG;AAC7B,WAAK,KAAK,SAAS,EAAE,IAAI,QAAS,SAAS,KAAK,KAAK,KAAM,WAAW,CAAC;AAAA,IACzE;AACA,eAAW,MAAM,KAAK,OAAO;AAC3B,YAAM,OAAO,MAAM,IAAI,EAAE;AACzB,UAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAG,MAAK,MAAM,OAAO,EAAE;AAAA,IACjD;AACA,SAAK,UAAU;AACf,SAAK,KAAK,aAAa,KAAK,KAAK,CAAC;AAAA,EACpC;AAAA,EAEA,OAAO,IAAY,UAA4B,QAAgC;AAC7E,UAAM,OAAO,KAAK;AAClB,QAAI,MAAM,KAAK,EAAE,KAAK,CAAC,aAAa,SAAS,OAAO,EAAE,GAAG;AACvD,UAAI,CAAC,KAAK,OAAQ,QAAO,QAAQ,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC3D,aAAO,KAAK,OAAO,IAAI,UAAU,MAAM;AAAA,IACzC;AACA,QAAI,CAAC,KAAK,MAAO,QAAO,QAAQ,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC1D,WAAO,KAAK,QAAQ,IAAI,UAAU,MAAM;AAAA,EAC1C;AAAA,EAEA,MAAM,QAAQ,IAAY,UAA4B,QAAgC;AACpF,SAAK,UAAU,IAAI,EAAE;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,YAAY,QAAQ;AAAA,QAC5C;AAAA,QACA;AAAA,QACA,UAAU;AAAA,QACV;AAAA,MACF;AACA,UAAI,CAAC,OAAO,KAAM,OAAM,IAAI,MAAM,OAAO,KAAK;AAC9C,WAAK,MAAM,IAAI,EAAE;AAAA,IACnB,UAAE;AACA,WAAK,UAAU,OAAO,EAAE;AAAA,IAC1B;AACA,SAAK,SAAS;AAAA,EAChB;AACF;",
+  "sourcesContent": ["import type {\n  Approval,\n  ApprovalDecision,\n  ApprovalEnd,\n  ApprovalRequester,\n  ApprovalsEvents,\n  ApprovalsPort,\n} from '@ai-ecoverse/slicc-spectrum/ui';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Approval as Item } from '../approvals/record.ts';\nimport type { AgentConnection } from '../client.ts';\nimport { Emitter } from './emitter.ts';\n\nconst ENDS: Record<string, ApprovalEnd> = {\n  approved: 'answered',\n  rejected: 'answered',\n  unanswered: 'expired',\n  withdrawn: 'withdrawn',\n};\n\nfunction requesterOf(item: Item): ApprovalRequester {\n  const { kind, name, agentId, where } = item.requester;\n  return {\n    kind,\n    name,\n    ...(agentId ? { agentId } : {}),\n    ...(where ? { where } : {}),\n  };\n}\n\nexport function shown(item: Item, agentName: string | undefined): Approval {\n  const base = {\n    id: item.id,\n    requester: requesterOf(item),\n    createdAt: item.createdAt,\n    expiresAt: item.expiresAt,\n  };\n  if (item.kind === 'sudo') {\n    const { command, target, cwd, alwaysScope } = item.detail;\n    return {\n      ...base,\n      kind: 'sudo',\n      command,\n      ...(target ? { target } : {}),\n      ...(cwd ? { cwd } : {}),\n      always: item.always,\n      ...(alwaysScope ? { alwaysScope } : {}),\n    };\n  }\n  const guest = {\n    ...base,\n    agentId: item.agentId,\n    ...(agentName ? { agentName } : {}),\n    always: false as const,\n    ...(item.verdict\n      ? { verdict: { decision: item.verdict.decision, reason: item.verdict.reason } }\n      : {}),\n  };\n  if (item.kind === 'guest-tool')\n    return { ...guest, kind: 'guest-tool', tool: item.detail.tool, summary: item.detail.summary };\n  return {\n    ...guest,\n    kind: 'guest-message',\n    text: item.detail.text,\n    ...(item.detail.attachments.length\n      ? { attachments: item.detail.attachments.map((file) => ({ ...file })) }\n      : {}),\n  };\n}\n\nexport type HostApprovals = ApprovalsPort;\n\nexport const NOT_HERE = \"This request can't be answered in this tab.\";\n\nconst asked = (item: Item) => item.state === 'pending' && item.tier === 'user';\n\nexport class ApprovalsAdapter extends Emitter<ApprovalsEvents> implements ApprovalsPort {\n  readonly #connection: AgentConnection;\n  readonly #host: HostApprovals | undefined;\n  readonly #ours: boolean;\n  readonly #mine = new Set<string>();\n  readonly #deciding = new Set<string>();\n  #listed = new Set<string>();\n  readonly decide?: (id: string, decision: ApprovalDecision, reason?: string) => Promise<void>;\n\n  constructor(connection: AgentConnection, host?: HostApprovals) {\n    super();\n    this.#connection = connection;\n    this.#host = host;\n    this.#ours = !connection.guest;\n    if (this.#ours || host?.decide) this.decide = (...args) => this.#route(...args);\n    this.#listed = new Set(this.#agent().map((approval) => approval.id));\n    connection.approvals?.subscribe(() => this.#changed());\n    host?.on('approvals', () => this.emit('approvals', this.list()));\n    host?.on('ended', (detail) => this.emit('ended', detail));\n  }\n\n  #items(): readonly Item[] {\n    return this.#connection.approvals?.value ?? [];\n  }\n\n  list(): readonly Approval[] {\n    return [...(this.#host?.list() ?? []), ...this.#agent()].sort(\n      (a, b) => a.createdAt - b.createdAt\n    );\n  }\n\n  #agent(): readonly Approval[] {\n    const names = new Map(\n      (this.#connection.agents?.value?.agents ?? []).map((agent) => [agent.id, agent.name])\n    );\n    return this.#items()\n      .filter((item) => asked(item) && !this.#mine.has(item.id))\n      .sort((a, b) => a.createdAt - b.createdAt)\n      .map((item) => shown(item, names.get(item.agentId)));\n  }\n\n  #changed(): void {\n    const items = new Map(this.#items().map((item) => [item.id, item]));\n    const listed = this.#agent();\n    const now = new Set(listed.map((approval) => approval.id));\n    for (const id of this.#listed) {\n      if (now.has(id) || this.#mine.has(id) || this.#deciding.has(id)) continue;\n      const state = items.get(id)?.state;\n      this.emit('ended', { id, reason: (state && ENDS[state]) || 'answered' });\n    }\n    for (const id of this.#mine) {\n      const item = items.get(id);\n      if (!item || !asked(item)) this.#mine.delete(id);\n    }\n    this.#listed = now;\n    this.emit('approvals', this.list());\n  }\n\n  #route(id: string, decision: ApprovalDecision, reason?: string): Promise<void> {\n    const host = this.#host;\n    if (host?.list().some((approval) => approval.id === id)) {\n      if (!host.decide) return Promise.reject(new Error(NOT_HERE));\n      return host.decide(id, decision, reason);\n    }\n    if (!this.#ours) return Promise.reject(new Error(NOT_HERE));\n    return this.#decide(id, decision, reason);\n  }\n\n  async #decide(id: string, decision: ApprovalDecision, reason?: string): Promise<void> {\n    this.#deciding.add(id);\n    try {\n      const answer = await this.#connection.control.decide(\n        id,\n        decision,\n        reason ?? null,\n        BACKGROUND_CONTEXT\n      );\n      if (!answer.done) throw new Error(answer.error);\n      this.#mine.add(id);\n    } finally {\n      this.#deciding.delete(id);\n    }\n    this.#changed();\n  }\n}\n"],
+  "mappings": "AAQA,SAAS,0BAA0B;AAGnC,SAAS,eAAe;AAExB,MAAM,OAAoC;AAAA,EACxC,UAAU;AAAA,EACV,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,WAAW;AACb;AAEA,SAAS,YAAY,MAA+B;AAClD,QAAM,EAAE,MAAM,MAAM,SAAS,MAAM,IAAI,KAAK;AAC5C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC7B,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,EAC3B;AACF;AAEO,SAAS,MAAM,MAAY,WAAyC;AACzE,QAAM,OAAO;AAAA,IACX,IAAI,KAAK;AAAA,IACT,WAAW,YAAY,IAAI;AAAA,IAC3B,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK;AAAA,EAClB;AACA,MAAI,KAAK,SAAS,QAAQ;AACxB,UAAM,EAAE,SAAS,QAAQ,KAAK,YAAY,IAAI,KAAK;AACnD,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM;AAAA,MACN;AAAA,MACA,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,MAC3B,GAAI,MAAM,EAAE,IAAI,IAAI,CAAC;AAAA,MACrB,QAAQ,KAAK;AAAA,MACb,GAAI,cAAc,EAAE,YAAY,IAAI,CAAC;AAAA,IACvC;AAAA,EACF;AACA,QAAM,QAAQ;AAAA,IACZ,GAAG;AAAA,IACH,SAAS,KAAK;AAAA,IACd,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,IACjC,QAAQ;AAAA,IACR,GAAI,KAAK,UACL,EAAE,SAAS,EAAE,UAAU,KAAK,QAAQ,UAAU,QAAQ,KAAK,QAAQ,OAAO,EAAE,IAC5E,CAAC;AAAA,EACP;AACA,MAAI,KAAK,SAAS;AAChB,WAAO,EAAE,GAAG,OAAO,MAAM,cAAc,MAAM,KAAK,OAAO,MAAM,SAAS,KAAK,OAAO,QAAQ;AAC9F,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,IACN,MAAM,KAAK,OAAO;AAAA,IAClB,GAAI,KAAK,OAAO,YAAY,SACxB,EAAE,aAAa,KAAK,OAAO,YAAY,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,EAAE,EAAE,IACpE,CAAC;AAAA,EACP;AACF;AAIO,MAAM,WAAW;AAExB,MAAM,QAAQ,CAAC,SAAe,KAAK,UAAU,aAAa,KAAK,SAAS;AAEjE,MAAM,yBAAyB,QAAkD;AAAA,EAC7E;AAAA,EACA;AAAA,EACA;AAAA,EACA,QAAQ,oBAAI,IAAY;AAAA,EACxB,YAAY,oBAAI,IAAY;AAAA,EACrC,UAAU,oBAAI,IAAY;AAAA,EACjB;AAAA,EAET,YAAY,YAA6B,MAAsB;AAC7D,UAAM;AACN,SAAK,cAAc;AACnB,SAAK,QAAQ;AACb,SAAK,QAAQ,CAAC,WAAW;AACzB,QAAI,KAAK,SAAS,MAAM,OAAQ,MAAK,SAAS,IAAI,SAAS,KAAK,OAAO,GAAG,IAAI;AAC9E,SAAK,UAAU,IAAI,IAAI,KAAK,OAAO,EAAE,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AACnE,eAAW,WAAW,UAAU,MAAM,KAAK,SAAS,CAAC;AACrD,UAAM,GAAG,aAAa,MAAM,KAAK,KAAK,aAAa,KAAK,KAAK,CAAC,CAAC;AAC/D,UAAM,GAAG,SAAS,CAAC,WAAW,KAAK,KAAK,SAAS,MAAM,CAAC;AAAA,EAC1D;AAAA,EAEA,SAA0B;AACxB,WAAO,KAAK,YAAY,WAAW,SAAS,CAAC;AAAA,EAC/C;AAAA,EAEA,OAA4B;AAC1B,WAAO,CAAC,GAAI,KAAK,OAAO,KAAK,KAAK,CAAC,GAAI,GAAG,KAAK,OAAO,CAAC,EAAE;AAAA,MACvD,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE;AAAA,IAC5B;AAAA,EACF;AAAA,EAEA,SAA8B;AAC5B,UAAM,QAAQ,IAAI;AAAA,OACf,KAAK,YAAY,QAAQ,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,IAAI,CAAC;AAAA,IACtF;AACA,WAAO,KAAK,OAAO,EAChB,OAAO,CAAC,SAAS,MAAM,IAAI,KAAK,CAAC,KAAK,MAAM,IAAI,KAAK,EAAE,CAAC,EACxD,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,SAAS,EACxC,IAAI,CAAC,SAAS,MAAM,MAAM,MAAM,IAAI,KAAK,OAAO,CAAC,CAAC;AAAA,EACvD;AAAA,EAEA,WAAiB;AACf,UAAM,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAClE,UAAM,SAAS,KAAK,OAAO;AAC3B,UAAM,MAAM,IAAI,IAAI,OAAO,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC;AACzD,eAAW,MAAM,KAAK,SAAS;AAC7B,UAAI,IAAI,IAAI,EAAE,KAAK,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,UAAU,IAAI,EAAE,EAAG;AACjE,YAAM,QAAQ,MAAM,IAAI,EAAE,GAAG;AAC7B,WAAK,KAAK,SAAS,EAAE,IAAI,QAAS,SAAS,KAAK,KAAK,KAAM,WAAW,CAAC;AAAA,IACzE;AACA,eAAW,MAAM,KAAK,OAAO;AAC3B,YAAM,OAAO,MAAM,IAAI,EAAE;AACzB,UAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAG,MAAK,MAAM,OAAO,EAAE;AAAA,IACjD;AACA,SAAK,UAAU;AACf,SAAK,KAAK,aAAa,KAAK,KAAK,CAAC;AAAA,EACpC;AAAA,EAEA,OAAO,IAAY,UAA4B,QAAgC;AAC7E,UAAM,OAAO,KAAK;AAClB,QAAI,MAAM,KAAK,EAAE,KAAK,CAAC,aAAa,SAAS,OAAO,EAAE,GAAG;AACvD,UAAI,CAAC,KAAK,OAAQ,QAAO,QAAQ,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC3D,aAAO,KAAK,OAAO,IAAI,UAAU,MAAM;AAAA,IACzC;AACA,QAAI,CAAC,KAAK,MAAO,QAAO,QAAQ,OAAO,IAAI,MAAM,QAAQ,CAAC;AAC1D,WAAO,KAAK,QAAQ,IAAI,UAAU,MAAM;AAAA,EAC1C;AAAA,EAEA,MAAM,QAAQ,IAAY,UAA4B,QAAgC;AACpF,SAAK,UAAU,IAAI,EAAE;AACrB,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,YAAY,QAAQ;AAAA,QAC5C;AAAA,QACA;AAAA,QACA,UAAU;AAAA,QACV;AAAA,MACF;AACA,UAAI,CAAC,OAAO,KAAM,OAAM,IAAI,MAAM,OAAO,KAAK;AAC9C,WAAK,MAAM,IAAI,EAAE;AAAA,IACnB,UAAE;AACA,WAAK,UAAU,OAAO,EAAE;AAAA,IAC1B;AACA,SAAK,SAAS;AAAA,EAChB;AACF;",
   "names": []
 }

package/dist/spectrum/guest-port.js

@@ -1,8 +1,11 @@
 import { BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
+import { DEFAULT_GUEST_POLICY } from "../guests/policy.js";
 import { Emitter } from "./emitter.js";
 const NO_HUB = "Inviting guests needs the tray hub.";
-const NO_CONTROL = "Only a tab with Control can invite guests.";
-const NO_OWNER = "Only the owner's tab can invite guests.";
+const NOT_OWNER_DEVICE = "Only the owner's devices can invite guests.";
+const NO_CONTROL = NOT_OWNER_DEVICE;
+const NO_OWNER = NOT_OWNER_DEVICE;
+const offered = (kinds) => kinds.map((kind) => kind === "scoop" ? "scoop:*" : kind);
 class GuestAdapter extends Emitter {
   #connection;
   #hub;
@@ -15,10 +18,16 @@ class GuestAdapter extends Emitter {
   list() {
     return this.#connection.guests?.value ?? [];
   }
+  gates() {
+    const policy = this.#connection.approvalPolicy?.value?.guests ?? DEFAULT_GUEST_POLICY;
+    return {
+      messages: offered(policy.allowedMessageGates),
+      tools: offered(policy.allowedToolGates)
+    };
+  }
   unavailable() {
     const connection = this.#connection;
-    if (connection.viewOnly || connection.guest || !connection.guests) return NO_CONTROL;
-    if (connection.owner === false) return NO_OWNER;
+    if (connection.guest || !connection.guests) return NOT_OWNER_DEVICE;
     return this.#hub ? null : NO_HUB;
   }
   async mint(agentId, draft) {
@@ -49,6 +58,7 @@ class GuestAdapter extends Emitter {
 }
 export {
   GuestAdapter,
+  NOT_OWNER_DEVICE,
   NO_CONTROL,
   NO_HUB,
   NO_OWNER

package/dist/spectrum/guest-port.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/spectrum/guest-port.ts"],
-  "sourcesContent": ["import type { GuestDraft, GuestEvents, GuestPort, GuestSeat } from '@ai-ecoverse/slicc-spectrum/ui';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { AgentConnection } from '../client.ts';\nimport { Emitter } from './emitter.ts';\n\nexport interface GuestHub {\n  mint(request: GuestDraft & { agentId: string }): Promise<{ id: string; url: string }>;\n  revoke(id: string): Promise<void>;\n}\n\nexport const NO_HUB = 'Inviting guests needs the tray hub.';\nexport const NO_CONTROL = 'Only a tab with Control can invite guests.';\nexport const NO_OWNER = \"Only the owner's tab can invite guests.\";\n\nexport class GuestAdapter extends Emitter<GuestEvents> implements GuestPort {\n  readonly #connection: AgentConnection;\n  readonly #hub: GuestHub | null;\n\n  constructor(connection: AgentConnection, hub: GuestHub | null) {\n    super();\n    this.#connection = connection;\n    this.#hub = hub;\n    connection.guests?.subscribe(() => this.emit('seats', this.list()));\n  }\n\n  list(): readonly GuestSeat[] {\n    return this.#connection.guests?.value ?? [];\n  }\n\n  unavailable(): string | null {\n    const connection = this.#connection;\n    if (connection.viewOnly || connection.guest || !connection.guests) return NO_CONTROL;\n    if (connection.owner === false) return NO_OWNER;\n    return this.#hub ? null : NO_HUB;\n  }\n\n  async mint(agentId: string, draft: GuestDraft): Promise<{ seat: GuestSeat; url: string }> {\n    const problem = this.unavailable();\n    if (problem) throw new Error(problem);\n    const hub = this.#hub as GuestHub;\n    const gates = { messages: draft.gates.messages, tools: draft.gates.tools };\n    const minted = await hub.mint({\n      label: draft.label,\n      expiresAt: draft.expiresAt,\n      gates,\n      agentId,\n    });\n    const opened = await this.#connection.control\n      .guestOpen(\n        { id: minted.id, label: draft.label, agentId, expiresAt: draft.expiresAt, gates },\n        BACKGROUND_CONTEXT\n      )\n      .catch((error: Error) => ({ seat: null, error: error.message }));\n    if (!opened.seat) {\n      await hub.revoke(minted.id).catch(() => undefined);\n      throw new Error(opened.error);\n    }\n    return { seat: opened.seat, url: minted.url };\n  }\n\n  async revoke(id: string): Promise<void> {\n    await this.#connection.control.guestRevoke(id, BACKGROUND_CONTEXT);\n    await this.#hub?.revoke(id);\n  }\n}\n"],
-  "mappings": "AACA,SAAS,0BAA0B;AAEnC,SAAS,eAAe;AAOjB,MAAM,SAAS;AACf,MAAM,aAAa;AACnB,MAAM,WAAW;AAEjB,MAAM,qBAAqB,QAA0C;AAAA,EACjE;AAAA,EACA;AAAA,EAET,YAAY,YAA6B,KAAsB;AAC7D,UAAM;AACN,SAAK,cAAc;AACnB,SAAK,OAAO;AACZ,eAAW,QAAQ,UAAU,MAAM,KAAK,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC;AAAA,EACpE;AAAA,EAEA,OAA6B;AAC3B,WAAO,KAAK,YAAY,QAAQ,SAAS,CAAC;AAAA,EAC5C;AAAA,EAEA,cAA6B;AAC3B,UAAM,aAAa,KAAK;AACxB,QAAI,WAAW,YAAY,WAAW,SAAS,CAAC,WAAW,OAAQ,QAAO;AAC1E,QAAI,WAAW,UAAU,MAAO,QAAO;AACvC,WAAO,KAAK,OAAO,OAAO;AAAA,EAC5B;AAAA,EAEA,MAAM,KAAK,SAAiB,OAA8D;AACxF,UAAM,UAAU,KAAK,YAAY;AACjC,QAAI,QAAS,OAAM,IAAI,MAAM,OAAO;AACpC,UAAM,MAAM,KAAK;AACjB,UAAM,QAAQ,EAAE,UAAU,MAAM,MAAM,UAAU,OAAO,MAAM,MAAM,MAAM;AACzE,UAAM,SAAS,MAAM,IAAI,KAAK;AAAA,MAC5B,OAAO,MAAM;AAAA,MACb,WAAW,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,SAAS,MAAM,KAAK,YAAY,QACnC;AAAA,MACC,EAAE,IAAI,OAAO,IAAI,OAAO,MAAM,OAAO,SAAS,WAAW,MAAM,WAAW,MAAM;AAAA,MAChF;AAAA,IACF,EACC,MAAM,CAAC,WAAkB,EAAE,MAAM,MAAM,OAAO,MAAM,QAAQ,EAAE;AACjE,QAAI,CAAC,OAAO,MAAM;AAChB,YAAM,IAAI,OAAO,OAAO,EAAE,EAAE,MAAM,MAAM,MAAS;AACjD,YAAM,IAAI,MAAM,OAAO,KAAK;AAAA,IAC9B;AACA,WAAO,EAAE,MAAM,OAAO,MAAM,KAAK,OAAO,IAAI;AAAA,EAC9C;AAAA,EAEA,MAAM,OAAO,IAA2B;AACtC,UAAM,KAAK,YAAY,QAAQ,YAAY,IAAI,kBAAkB;AACjE,UAAM,KAAK,MAAM,OAAO,EAAE;AAAA,EAC5B;AACF;",
+  "sourcesContent": ["import type {\n  GuestDraft,\n  GuestEvents,\n  GuestGate,\n  GuestPort,\n  GuestSeat,\n} from '@ai-ecoverse/slicc-spectrum/ui';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { AgentConnection } from '../client.ts';\nimport { DEFAULT_GUEST_POLICY, type GateKind } from '../guests/policy.ts';\nimport { Emitter } from './emitter.ts';\n\nexport interface GuestHub {\n  mint(request: GuestDraft & { agentId: string }): Promise<{ id: string; url: string }>;\n  revoke(id: string): Promise<void>;\n}\n\nexport const NO_HUB = 'Inviting guests needs the tray hub.';\nexport const NOT_OWNER_DEVICE = \"Only the owner's devices can invite guests.\";\nexport const NO_CONTROL = NOT_OWNER_DEVICE;\nexport const NO_OWNER = NOT_OWNER_DEVICE;\n\nconst offered = (kinds: readonly GateKind[]): GuestGate[] =>\n  kinds.map((kind) => (kind === 'scoop' ? 'scoop:*' : kind));\n\nexport class GuestAdapter extends Emitter<GuestEvents> implements GuestPort {\n  readonly #connection: AgentConnection;\n  readonly #hub: GuestHub | null;\n\n  constructor(connection: AgentConnection, hub: GuestHub | null) {\n    super();\n    this.#connection = connection;\n    this.#hub = hub;\n    connection.guests?.subscribe(() => this.emit('seats', this.list()));\n  }\n\n  list(): readonly GuestSeat[] {\n    return this.#connection.guests?.value ?? [];\n  }\n\n  gates(): { messages: GuestGate[]; tools: GuestGate[] } {\n    const policy = this.#connection.approvalPolicy?.value?.guests ?? DEFAULT_GUEST_POLICY;\n    return {\n      messages: offered(policy.allowedMessageGates),\n      tools: offered(policy.allowedToolGates),\n    };\n  }\n\n  unavailable(): string | null {\n    const connection = this.#connection;\n    if (connection.guest || !connection.guests) return NOT_OWNER_DEVICE;\n    return this.#hub ? null : NO_HUB;\n  }\n\n  async mint(agentId: string, draft: GuestDraft): Promise<{ seat: GuestSeat; url: string }> {\n    const problem = this.unavailable();\n    if (problem) throw new Error(problem);\n    const hub = this.#hub as GuestHub;\n    const gates = { messages: draft.gates.messages, tools: draft.gates.tools };\n    const minted = await hub.mint({\n      label: draft.label,\n      expiresAt: draft.expiresAt,\n      gates,\n      agentId,\n    });\n    const opened = await this.#connection.control\n      .guestOpen(\n        { id: minted.id, label: draft.label, agentId, expiresAt: draft.expiresAt, gates },\n        BACKGROUND_CONTEXT\n      )\n      .catch((error: Error) => ({ seat: null, error: error.message }));\n    if (!opened.seat) {\n      await hub.revoke(minted.id).catch(() => undefined);\n      throw new Error(opened.error);\n    }\n    return { seat: opened.seat, url: minted.url };\n  }\n\n  async revoke(id: string): Promise<void> {\n    await this.#connection.control.guestRevoke(id, BACKGROUND_CONTEXT);\n    await this.#hub?.revoke(id);\n  }\n}\n"],
+  "mappings": "AAOA,SAAS,0BAA0B;AAEnC,SAAS,4BAA2C;AACpD,SAAS,eAAe;AAOjB,MAAM,SAAS;AACf,MAAM,mBAAmB;AACzB,MAAM,aAAa;AACnB,MAAM,WAAW;AAExB,MAAM,UAAU,CAAC,UACf,MAAM,IAAI,CAAC,SAAU,SAAS,UAAU,YAAY,IAAK;AAEpD,MAAM,qBAAqB,QAA0C;AAAA,EACjE;AAAA,EACA;AAAA,EAET,YAAY,YAA6B,KAAsB;AAC7D,UAAM;AACN,SAAK,cAAc;AACnB,SAAK,OAAO;AACZ,eAAW,QAAQ,UAAU,MAAM,KAAK,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC;AAAA,EACpE;AAAA,EAEA,OAA6B;AAC3B,WAAO,KAAK,YAAY,QAAQ,SAAS,CAAC;AAAA,EAC5C;AAAA,EAEA,QAAuD;AACrD,UAAM,SAAS,KAAK,YAAY,gBAAgB,OAAO,UAAU;AACjE,WAAO;AAAA,MACL,UAAU,QAAQ,OAAO,mBAAmB;AAAA,MAC5C,OAAO,QAAQ,OAAO,gBAAgB;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,cAA6B;AAC3B,UAAM,aAAa,KAAK;AACxB,QAAI,WAAW,SAAS,CAAC,WAAW,OAAQ,QAAO;AACnD,WAAO,KAAK,OAAO,OAAO;AAAA,EAC5B;AAAA,EAEA,MAAM,KAAK,SAAiB,OAA8D;AACxF,UAAM,UAAU,KAAK,YAAY;AACjC,QAAI,QAAS,OAAM,IAAI,MAAM,OAAO;AACpC,UAAM,MAAM,KAAK;AACjB,UAAM,QAAQ,EAAE,UAAU,MAAM,MAAM,UAAU,OAAO,MAAM,MAAM,MAAM;AACzE,UAAM,SAAS,MAAM,IAAI,KAAK;AAAA,MAC5B,OAAO,MAAM;AAAA,MACb,WAAW,MAAM;AAAA,MACjB;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,SAAS,MAAM,KAAK,YAAY,QACnC;AAAA,MACC,EAAE,IAAI,OAAO,IAAI,OAAO,MAAM,OAAO,SAAS,WAAW,MAAM,WAAW,MAAM;AAAA,MAChF;AAAA,IACF,EACC,MAAM,CAAC,WAAkB,EAAE,MAAM,MAAM,OAAO,MAAM,QAAQ,EAAE;AACjE,QAAI,CAAC,OAAO,MAAM;AAChB,YAAM,IAAI,OAAO,OAAO,EAAE,EAAE,MAAM,MAAM,MAAS;AACjD,YAAM,IAAI,MAAM,OAAO,KAAK;AAAA,IAC9B;AACA,WAAO,EAAE,MAAM,OAAO,MAAM,KAAK,OAAO,IAAI;AAAA,EAC9C;AAAA,EAEA,MAAM,OAAO,IAA2B;AACtC,UAAM,KAAK,YAAY,QAAQ,YAAY,IAAI,kBAAkB;AACjE,UAAM,KAAK,MAAM,OAAO,EAAE;AAAA,EAC5B;AACF;",
   "names": []
 }

package/dist/spectrum/index.js

@@ -20,7 +20,8 @@ import {
   GuestAdapter as GuestAdapter2,
   NO_CONTROL,
   NO_HUB,
-  NO_OWNER
+  NO_OWNER,
+  NOT_OWNER_DEVICE
 } from "./guest-port.js";
 import { MemoryAdapter as MemoryAdapter2 } from "./memory-port.js";
 import {
@@ -91,6 +92,7 @@ export {
   MemoryAdapter2 as MemoryAdapter,
   MonitorAdapter2 as MonitorAdapter,
   NOT_HERE,
+  NOT_OWNER_DEVICE,
   NO_CONTROL,
   NO_HUB,
   NO_OWNER,

package/dist/spectrum/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/spectrum/index.ts"],
-  "sourcesContent": ["import type { MonitorSection } from '@ai-ecoverse/slicc-spectrum/ui';\nimport type { AgentConnection } from '../client.ts';\nimport type { GuestGates } from '../guests/seats.ts';\nimport { AgentAdapter } from './agent-port.ts';\nimport { ApprovalsAdapter, type HostApprovals } from './approvals-port.ts';\nimport { ChangesAdapter } from './changes-port.ts';\nimport { GuestAdapter, type GuestHub } from './guest-port.ts';\nimport { MemoryAdapter } from './memory-port.ts';\nimport { MonitorAdapter } from './monitor-port.ts';\nimport { type HostNotices, NoticesAdapter } from './notices-port.ts';\nimport { PageAdapter, type PageOptions } from './page-port.ts';\nimport { type Login, SettingsAdapter } from './settings-port.ts';\nimport { SprinkleAdapter } from './sprinkle-port.ts';\nimport { TrayAdapter } from './tray-port.ts';\n\nexport { AgentAdapter, CONE } from './agent-port.ts';\nexport {\n  ApprovalsAdapter,\n  type HostApprovals,\n  NOT_HERE,\n  shown as shownApproval,\n} from './approvals-port.ts';\nexport { ChangesAdapter, type ChangesEvents } from './changes-port.ts';\nexport {\n  GuestAdapter,\n  type GuestHub,\n  NO_CONTROL,\n  NO_HUB,\n  NO_OWNER,\n} from './guest-port.ts';\nexport { MemoryAdapter } from './memory-port.ts';\nexport {\n  assistant,\n  errorAction,\n  errorPart,\n  isBusy,\n  queued,\n  textOf,\n  toMessages,\n} from './messages.ts';\nexport {\n  MonitorAdapter,\n  type MonitorAdapterOptions,\n  type MonitorInput,\n  monitorSnapshot,\n} from './monitor-port.ts';\nexport {\n  type HostNotices,\n  KEYS_MOVED,\n  movedList,\n  movedNotice,\n  NoticesAdapter,\n} from './notices-port.ts';\nexport {\n  PageAdapter,\n  type PageDocument,\n  type PageOptions,\n  type PageRun,\n  type PageTarget,\n} from './page-port.ts';\nexport { type Login, SETTINGS_KEY, SettingsAdapter } from './settings-port.ts';\nexport { SprinkleAdapter } from './sprinkle-port.ts';\nexport { TrayAdapter } from './tray-port.ts';\n\nexport interface GuestSeatShown {\n  id: string;\n  label: string;\n  agentId: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n}\n\nfunction seatOf(connection: AgentConnection): { seat?: GuestSeatShown } {\n  const guest = connection.guest;\n  if (!guest) return {};\n  const { id, label, agentId, expiresAt, gates } = guest;\n  return { seat: { id, label, agentId, expiresAt, gates: { ...gates } } };\n}\n\nexport function createAgentModel(\n  connection: AgentConnection,\n  options: {\n    storage?: Pick<Storage, 'getItem' | 'setItem'> | null;\n    login?: Login;\n    monitor?: { extra?: () => readonly MonitorSection[] };\n    page?: PageOptions;\n    guests?: GuestHub;\n    approvals?: HostApprovals;\n    notices?: HostNotices;\n  } = {}\n): {\n  agent: AgentAdapter;\n  approvals: ApprovalsAdapter;\n  settings: SettingsAdapter;\n  tray: TrayAdapter;\n  sprinkles: SprinkleAdapter;\n  memory: MemoryAdapter;\n  changes: ChangesAdapter;\n  monitor: MonitorAdapter;\n  notices: NoticesAdapter;\n  page: PageAdapter | null;\n  guests: GuestAdapter;\n  seat?: GuestSeatShown;\n} {\n  const agent = new AgentAdapter(connection);\n  const report = (text: string) => agent.notify(text);\n  const run = options.page?.run;\n  return {\n    agent,\n    guests: new GuestAdapter(connection, options.guests ?? null),\n    ...seatOf(connection),\n    approvals: new ApprovalsAdapter(connection, options.approvals),\n    page: options.page && run ? new PageAdapter(connection, agent, { ...options.page, run }) : null,\n    settings: new SettingsAdapter(\n      connection.settings,\n      agent,\n      options.storage ?? null,\n      options.login ?? null\n    ),\n    tray: new TrayAdapter(connection.settings),\n    sprinkles: new SprinkleAdapter(connection, report),\n    memory: new MemoryAdapter(connection, report),\n    changes: new ChangesAdapter(connection, report),\n    notices: new NoticesAdapter(connection.settings, report, options.notices),\n    monitor: new MonitorAdapter(\n      connection,\n      options.monitor?.extra ? { extra: options.monitor.extra } : {}\n    ),\n  };\n}\n"],
-  "mappings": "AAGA,SAAS,oBAAoB;AAC7B,SAAS,wBAA4C;AACrD,SAAS,sBAAsB;AAC/B,SAAS,oBAAmC;AAC5C,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B,SAA2B,sBAAsB;AACjD,SAAS,mBAAqC;AAC9C,SAAqB,uBAAuB;AAC5C,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAE5B,SAAS,gBAAAA,eAAc,YAAY;AACnC;AAAA,EACE,oBAAAC;AAAA,EAEA;AAAA,EACS;AAAA,OACJ;AACP,SAAS,kBAAAC,uBAA0C;AACnD;AAAA,EACE,gBAAAC;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAAC,sBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE,kBAAAC;AAAA,EAGA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAAC;AAAA,OACK;AACP;AAAA,EACE,eAAAC;AAAA,OAKK;AACP,SAAqB,cAAc,mBAAAC,wBAAuB;AAC1D,SAAS,mBAAAC,wBAAuB;AAChC,SAAS,eAAAC,oBAAmB;AAU5B,SAAS,OAAO,YAAwD;AACtE,QAAM,QAAQ,WAAW;AACzB,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,QAAM,EAAE,IAAI,OAAO,SAAS,WAAW,MAAM,IAAI;AACjD,SAAO,EAAE,MAAM,EAAE,IAAI,OAAO,SAAS,WAAW,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE;AACxE;AAEO,SAAS,iBACd,YACA,UAQI,CAAC,GAcL;AACA,QAAM,QAAQ,IAAI,aAAa,UAAU;AACzC,QAAM,SAAS,CAAC,SAAiB,MAAM,OAAO,IAAI;AAClD,QAAM,MAAM,QAAQ,MAAM;AAC1B,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,IAAI,aAAa,YAAY,QAAQ,UAAU,IAAI;AAAA,IAC3D,GAAG,OAAO,UAAU;AAAA,IACpB,WAAW,IAAI,iBAAiB,YAAY,QAAQ,SAAS;AAAA,IAC7D,MAAM,QAAQ,QAAQ,MAAM,IAAI,YAAY,YAAY,OAAO,EAAE,GAAG,QAAQ,MAAM,IAAI,CAAC,IAAI;AAAA,IAC3F,UAAU,IAAI;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,MACA,QAAQ,WAAW;AAAA,MACnB,QAAQ,SAAS;AAAA,IACnB;AAAA,IACA,MAAM,IAAI,YAAY,WAAW,QAAQ;AAAA,IACzC,WAAW,IAAI,gBAAgB,YAAY,MAAM;AAAA,IACjD,QAAQ,IAAI,cAAc,YAAY,MAAM;AAAA,IAC5C,SAAS,IAAI,eAAe,YAAY,MAAM;AAAA,IAC9C,SAAS,IAAI,eAAe,WAAW,UAAU,QAAQ,QAAQ,OAAO;AAAA,IACxE,SAAS,IAAI;AAAA,MACX;AAAA,MACA,QAAQ,SAAS,QAAQ,EAAE,OAAO,QAAQ,QAAQ,MAAM,IAAI,CAAC;AAAA,IAC/D;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { MonitorSection } from '@ai-ecoverse/slicc-spectrum/ui';\nimport type { AgentConnection } from '../client.ts';\nimport type { GuestGates } from '../guests/seats.ts';\nimport { AgentAdapter } from './agent-port.ts';\nimport { ApprovalsAdapter, type HostApprovals } from './approvals-port.ts';\nimport { ChangesAdapter } from './changes-port.ts';\nimport { GuestAdapter, type GuestHub } from './guest-port.ts';\nimport { MemoryAdapter } from './memory-port.ts';\nimport { MonitorAdapter } from './monitor-port.ts';\nimport { type HostNotices, NoticesAdapter } from './notices-port.ts';\nimport { PageAdapter, type PageOptions } from './page-port.ts';\nimport { type Login, SettingsAdapter } from './settings-port.ts';\nimport { SprinkleAdapter } from './sprinkle-port.ts';\nimport { TrayAdapter } from './tray-port.ts';\n\nexport { AgentAdapter, CONE } from './agent-port.ts';\nexport {\n  ApprovalsAdapter,\n  type HostApprovals,\n  NOT_HERE,\n  shown as shownApproval,\n} from './approvals-port.ts';\nexport { ChangesAdapter, type ChangesEvents } from './changes-port.ts';\nexport {\n  GuestAdapter,\n  type GuestHub,\n  NO_CONTROL,\n  NO_HUB,\n  NO_OWNER,\n  NOT_OWNER_DEVICE,\n} from './guest-port.ts';\nexport { MemoryAdapter } from './memory-port.ts';\nexport {\n  assistant,\n  errorAction,\n  errorPart,\n  isBusy,\n  queued,\n  textOf,\n  toMessages,\n} from './messages.ts';\nexport {\n  MonitorAdapter,\n  type MonitorAdapterOptions,\n  type MonitorInput,\n  monitorSnapshot,\n} from './monitor-port.ts';\nexport {\n  type HostNotices,\n  KEYS_MOVED,\n  movedList,\n  movedNotice,\n  NoticesAdapter,\n} from './notices-port.ts';\nexport {\n  PageAdapter,\n  type PageDocument,\n  type PageOptions,\n  type PageRun,\n  type PageTarget,\n} from './page-port.ts';\nexport { type Login, SETTINGS_KEY, SettingsAdapter } from './settings-port.ts';\nexport { SprinkleAdapter } from './sprinkle-port.ts';\nexport { TrayAdapter } from './tray-port.ts';\n\nexport interface GuestSeatShown {\n  id: string;\n  label: string;\n  agentId: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n}\n\nfunction seatOf(connection: AgentConnection): { seat?: GuestSeatShown } {\n  const guest = connection.guest;\n  if (!guest) return {};\n  const { id, label, agentId, expiresAt, gates } = guest;\n  return { seat: { id, label, agentId, expiresAt, gates: { ...gates } } };\n}\n\nexport function createAgentModel(\n  connection: AgentConnection,\n  options: {\n    storage?: Pick<Storage, 'getItem' | 'setItem'> | null;\n    login?: Login;\n    monitor?: { extra?: () => readonly MonitorSection[] };\n    page?: PageOptions;\n    guests?: GuestHub;\n    approvals?: HostApprovals;\n    notices?: HostNotices;\n  } = {}\n): {\n  agent: AgentAdapter;\n  approvals: ApprovalsAdapter;\n  settings: SettingsAdapter;\n  tray: TrayAdapter;\n  sprinkles: SprinkleAdapter;\n  memory: MemoryAdapter;\n  changes: ChangesAdapter;\n  monitor: MonitorAdapter;\n  notices: NoticesAdapter;\n  page: PageAdapter | null;\n  guests: GuestAdapter;\n  seat?: GuestSeatShown;\n} {\n  const agent = new AgentAdapter(connection);\n  const report = (text: string) => agent.notify(text);\n  const run = options.page?.run;\n  return {\n    agent,\n    guests: new GuestAdapter(connection, options.guests ?? null),\n    ...seatOf(connection),\n    approvals: new ApprovalsAdapter(connection, options.approvals),\n    page: options.page && run ? new PageAdapter(connection, agent, { ...options.page, run }) : null,\n    settings: new SettingsAdapter(\n      connection.settings,\n      agent,\n      options.storage ?? null,\n      options.login ?? null\n    ),\n    tray: new TrayAdapter(connection.settings),\n    sprinkles: new SprinkleAdapter(connection, report),\n    memory: new MemoryAdapter(connection, report),\n    changes: new ChangesAdapter(connection, report),\n    notices: new NoticesAdapter(connection.settings, report, options.notices),\n    monitor: new MonitorAdapter(\n      connection,\n      options.monitor?.extra ? { extra: options.monitor.extra } : {}\n    ),\n  };\n}\n"],
+  "mappings": "AAGA,SAAS,oBAAoB;AAC7B,SAAS,wBAA4C;AACrD,SAAS,sBAAsB;AAC/B,SAAS,oBAAmC;AAC5C,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B,SAA2B,sBAAsB;AACjD,SAAS,mBAAqC;AAC9C,SAAqB,uBAAuB;AAC5C,SAAS,uBAAuB;AAChC,SAAS,mBAAmB;AAE5B,SAAS,gBAAAA,eAAc,YAAY;AACnC;AAAA,EACE,oBAAAC;AAAA,EAEA;AAAA,EACS;AAAA,OACJ;AACP,SAAS,kBAAAC,uBAA0C;AACnD;AAAA,EACE,gBAAAC;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,iBAAAC,sBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE,kBAAAC;AAAA,EAGA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAAC;AAAA,OACK;AACP;AAAA,EACE,eAAAC;AAAA,OAKK;AACP,SAAqB,cAAc,mBAAAC,wBAAuB;AAC1D,SAAS,mBAAAC,wBAAuB;AAChC,SAAS,eAAAC,oBAAmB;AAU5B,SAAS,OAAO,YAAwD;AACtE,QAAM,QAAQ,WAAW;AACzB,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,QAAM,EAAE,IAAI,OAAO,SAAS,WAAW,MAAM,IAAI;AACjD,SAAO,EAAE,MAAM,EAAE,IAAI,OAAO,SAAS,WAAW,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE;AACxE;AAEO,SAAS,iBACd,YACA,UAQI,CAAC,GAcL;AACA,QAAM,QAAQ,IAAI,aAAa,UAAU;AACzC,QAAM,SAAS,CAAC,SAAiB,MAAM,OAAO,IAAI;AAClD,QAAM,MAAM,QAAQ,MAAM;AAC1B,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,IAAI,aAAa,YAAY,QAAQ,UAAU,IAAI;AAAA,IAC3D,GAAG,OAAO,UAAU;AAAA,IACpB,WAAW,IAAI,iBAAiB,YAAY,QAAQ,SAAS;AAAA,IAC7D,MAAM,QAAQ,QAAQ,MAAM,IAAI,YAAY,YAAY,OAAO,EAAE,GAAG,QAAQ,MAAM,IAAI,CAAC,IAAI;AAAA,IAC3F,UAAU,IAAI;AAAA,MACZ,WAAW;AAAA,MACX;AAAA,MACA,QAAQ,WAAW;AAAA,MACnB,QAAQ,SAAS;AAAA,IACnB;AAAA,IACA,MAAM,IAAI,YAAY,WAAW,QAAQ;AAAA,IACzC,WAAW,IAAI,gBAAgB,YAAY,MAAM;AAAA,IACjD,QAAQ,IAAI,cAAc,YAAY,MAAM;AAAA,IAC5C,SAAS,IAAI,eAAe,YAAY,MAAM;AAAA,IAC9C,SAAS,IAAI,eAAe,WAAW,UAAU,QAAQ,QAAQ,OAAO;AAAA,IACxE,SAAS,IAAI;AAAA,MACX;AAAA,MACA,QAAQ,SAAS,QAAQ,EAAE,OAAO,QAAQ,QAAQ,MAAM,IAAI,CAAC;AAAA,IAC/D;AAAA,EACF;AACF;",
   "names": ["AgentAdapter", "ApprovalsAdapter", "ChangesAdapter", "GuestAdapter", "MemoryAdapter", "MonitorAdapter", "NoticesAdapter", "PageAdapter", "SettingsAdapter", "SprinkleAdapter", "TrayAdapter"]
 }

package/dist/types/approvals/index.d.ts

@@ -1,7 +1,7 @@
 import { type Context, type ReplicatedState } from '@earendil-works/chord';
 import type { Harness } from '@earendil-works/pi-durable';
 import type { ApprovalJudge } from './judge.ts';
-import { type Approval, type ApprovalDraft, type ApprovalState, type DecidedBy } from './record.ts';
+import { type Approval, type ApprovalDraft, type ApprovalKind, type ApprovalState, type DecidedBy } from './record.ts';
 export * from './intent.ts';
 export * from './judge.ts';
 export * from './record.ts';
@@ -28,5 +28,6 @@ export interface ApprovalsAttach {
     now?: () => number;
     ttlMs?: number;
     judge?: ApprovalJudge;
+    guestAlways?: (kind: ApprovalKind) => boolean;
 }
 export declare function attachApprovals(options: ApprovalsAttach, context?: Context): Promise<Approvals>;

package/dist/types/approvals/policy.d.ts

@@ -0,0 +1,38 @@
+import { type Context, type ReplicatedState } from '@earendil-works/chord';
+import { type Harness, type JsonObject } from '@earendil-works/pi-durable';
+import { type GuestPolicy, type GuestPolicyChange } from '../guests/policy.ts';
+import type { ApprovalKind } from './record.ts';
+export type SudoPolicy = {
+    approver: 'user' | 'agent';
+};
+export type ApprovalPolicy = {
+    guests: GuestPolicy;
+    sudo: SudoPolicy;
+};
+export type ApprovalPolicyChange = {
+    guests?: GuestPolicyChange;
+    sudo?: Partial<SudoPolicy>;
+};
+export type ApprovalPolicySet = {
+    policy: ApprovalPolicy;
+    error: null;
+} | {
+    policy: null;
+    error: string;
+};
+export declare const DEFAULT_APPROVAL_POLICY: ApprovalPolicy;
+type Overrides = Partial<Record<keyof ApprovalPolicy, JsonObject>>;
+export declare const ApprovalPolicyDoc: import("@earendil-works/pi-durable").SessionDocToken<{
+    overrides: Overrides;
+}>;
+export declare function changedPolicy(base: ApprovalPolicy, change: unknown): ApprovalPolicySet;
+export declare function resolvedPolicy(overrides: Overrides): ApprovalPolicy;
+export declare function overridden(overrides: Overrides, change: Record<string, Record<string, unknown>>, policy: ApprovalPolicy): Overrides;
+export interface ApprovalPolicies {
+    readonly state: ReplicatedState<ApprovalPolicy>;
+    current(): ApprovalPolicy;
+    set(change: unknown, context: Context): Promise<ApprovalPolicySet>;
+}
+export declare const alwaysFor: (policy: Pick<ApprovalPolicies, 'current'>) => (kind: ApprovalKind) => boolean;
+export declare function attachApprovalPolicy(harness: Pick<Harness, 'commit'>, context?: Context): Promise<ApprovalPolicies>;
+export {};

package/dist/types/client.d.ts

@@ -1,5 +1,6 @@
 import { type Context, type ReplicatedState } from '@earendil-works/chord';
 import type { ConversationView } from '@earendil-works/pi-durable';
+import type { ApprovalPolicy } from './approvals/policy.ts';
 import type { Approval } from './approvals/record.ts';
 import type { ChangesView } from './changes/git.ts';
 import type { FrozenCone } from './freezer/index.ts';
@@ -34,6 +35,7 @@ export interface AgentConnection {
     readonly proposals?: ReplicatedState<GuestProposal[]>;
     readonly owner?: boolean;
     readonly approvals?: ReplicatedState<Approval[]>;
+    readonly approvalPolicy?: ReplicatedState<ApprovalPolicy>;
     readonly settings: AgentSettings;
     readonly remote?: AgentRemote;
     readonly pages?: AgentPages;

package/dist/types/control.d.ts

@@ -24,4 +24,4 @@ export interface HostScoops {
 }
 export declare function readable(out: string): string;
 export declare function submissionId(value: string): SubmissionId | undefined;
-export declare function createAgentControl(harness: Harness, target: Conversation | Cones, deliveries?: Deliveries, licks?: HostLicks, scoops?: HostScoops, skills?: Pick<SkillsRuntime, 'expand' | 'commandsFor'>, sprinkles?: Pick<SprinklesRuntime, 'send' | 'call'>, memory?: Pick<MemoryRuntime, 'save' | 'remove'>, freezer?: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'>, changes?: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'>, monitor?: Pick<Monitor, 'open' | 'close'>, secrets?: () => readonly SecretName[], uploads?: Uploads, labels?: Pick<LabelsRuntime, 'label'>, guests?: Pick<Guests, 'open' | 'revoke'>): AgentControl;
+export declare function createAgentControl(harness: Harness, target: Conversation | Cones, deliveries?: Deliveries, licks?: HostLicks, scoops?: HostScoops, skills?: Pick<SkillsRuntime, 'expand' | 'commandsFor'>, sprinkles?: Pick<SprinklesRuntime, 'send' | 'call'>, memory?: Pick<MemoryRuntime, 'save' | 'remove'>, freezer?: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'>, changes?: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'>, monitor?: Pick<Monitor, 'open' | 'close'>, secrets?: () => readonly SecretName[], uploads?: Uploads, labels?: Pick<LabelsRuntime, 'label'>, guests?: Pick<Guests, 'open' | 'revoke'>): Omit<AgentControl, 'approvalPolicySet'>;