@ai-ecoverse/slicc-agent 5.4.2 → 5.5.0

package/dist/guests/client.js

@@ -50,19 +50,22 @@ async function connectGuest(endpoint) {
   const proposalsMember = handle.proposals;
   const keeping = [transcriptMember, seatMember, proposalsMember].map(kept);
   await Promise.race([Promise.all(keeping.map((keep) => keep.ready)), link.ended]);
-  const call = handle.propose;
-  const propose = async (request) => {
+  const through = (name) => async (...args) => {
+    const call = handle[name];
     try {
-      return await host.root((ctx) => call([request], ctx), {});
+      return await host.root((ctx) => call(args, ctx), {});
     } catch (error) {
       throw plain(error);
     }
   };
+  const propose = (request) => through("propose")(request);
   const guest = seatMember.value;
   const refuse = () => Promise.reject(refusal(GUEST_ONLY));
   const control = Object.fromEntries(
     CONTROL_METHODS.map((name) => [name, refuse])
   );
+  control.guestOpen = (draft) => through("guestOpen")(draft);
+  control.guestRevoke = (id) => through("guestRevoke")(id);
   control.send = async (request) => {
     if (request.attachments?.length)
       return {

package/dist/guests/client.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/guests/client.ts"],
-  "sourcesContent": ["import { createHost, isChordError, type Readable, replicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport { type AgentConnection, lasting } from '../client.ts';\nimport {\n  type AgentControl,\n  AgentGuestService,\n  type AgentSettings,\n  CONTROL_METHODS,\n  type GuestProposal,\n  type GuestShown,\n  type SendResponse,\n} from '../services.ts';\nimport { AGENT_HOST, kept, plain, type Remote, replicated } from '../serving.ts';\nimport { type PortEndpoint, PortLink } from '../wire.ts';\nimport type { Proposed, ProposeRequest } from './index.ts';\n\nexport const GUEST_ONLY = 'a guest can only watch and send messages';\nexport const SEAT_REFUSED = \"This guest link isn't valid any more.\";\n\nconst SAID: Record<string, string> = {\n  revoked: 'This guest seat was revoked.',\n  empty: 'There is nothing to send.',\n  'too-long': 'That message is too long for a guest seat.',\n  gone: 'The cone this seat shares is gone.',\n  unavailable: \"Messages from guests need a review, and this agent can't review them yet.\",\n};\n\nexport const proposedSentence = (reason: string): string =>\n  SAID[reason] ?? 'The message was not delivered.';\n\nconst refusal = (message: string, code = 'EACCES') => Object.assign(new Error(message), { code });\n\nexport interface GuestConnection extends AgentConnection {\n  readonly guest: GuestShown;\n  propose(request: ProposeRequest): Promise<Proposed>;\n}\n\nexport async function connectGuest(endpoint: PortEndpoint): Promise<GuestConnection> {\n  const link = new PortLink(endpoint);\n  let serverId: string;\n  try {\n    serverId = await link.hello;\n  } catch {\n    throw refusal(SEAT_REFUSED);\n  }\n  const host = createHost({ name: `guest:${crypto.randomUUID()}`, kind: 'client' });\n  host.connect(link);\n  const handle = host.get(AgentGuestService, {}, { at: AGENT_HOST }) as unknown as Remote;\n  const fail = async (error: unknown): Promise<never> => {\n    handle.release();\n    link.close('handshake failed');\n    await host.close();\n    throw error;\n  };\n  try {\n    await Promise.race([\n      handle.ready,\n      link.ended.then(() => {\n        throw refusal(SEAT_REFUSED);\n      }),\n    ]);\n  } catch (error) {\n    return fail(isChordError(error) && error.code === 'forbidden' ? refusal(SEAT_REFUSED) : error);\n  }\n  if (handle.kind !== 'guest') return fail(refusal(SEAT_REFUSED));\n  const transcriptMember = handle.transcript as Readable<ConversationView | undefined>;\n  const seatMember = handle.seat as Readable<GuestShown | undefined>;\n  const proposalsMember = handle.proposals as Readable<GuestProposal[] | undefined>;\n  const keeping = [transcriptMember, seatMember, proposalsMember].map(kept);\n  await Promise.race([Promise.all(keeping.map((keep) => keep.ready)), link.ended]);\n  const call = handle.propose as (args: unknown[], ctx: unknown) => Promise<Proposed>;\n  const propose = async (request: ProposeRequest) => {\n    try {\n      return await host.root((ctx) => call([request], ctx), {});\n    } catch (error) {\n      throw plain(error);\n    }\n  };\n  const guest = seatMember.value as GuestShown;\n  const refuse = () => Promise.reject(refusal(GUEST_ONLY));\n  const control = Object.fromEntries(\n    CONTROL_METHODS.map((name) => [name, refuse])\n  ) as unknown as AgentControl;\n  control.send = async (request): Promise<SendResponse> => {\n    if (request.attachments?.length)\n      return {\n        accepted: false,\n        submissionId: null,\n        error: { code: 'EACCES', message: \"A guest can't attach files.\" },\n      };\n    const proposed = await propose({ text: request.text, requestId: request.requestId });\n    if (proposed.state === 'submitted')\n      return { accepted: true, submissionId: proposed.submissionId, error: null };\n    if (proposed.state === 'pending')\n      return { accepted: true, submissionId: proposed.approval, error: null };\n    return {\n      accepted: false,\n      submissionId: null,\n      error: { code: 'EACCES', message: proposedSentence(proposed.reason) },\n    };\n  };\n  const transcript = lasting(replicated(transcriptMember));\n  const proposals = lasting(replicated(proposalsMember));\n  let open = true;\n  const finish = () => {\n    if (!open) return;\n    open = false;\n    transcript.freeze();\n    proposals.freeze();\n    for (const keep of keeping) keep.stop();\n    handle.release();\n  };\n  const closed = link.ended.then((reason) => {\n    finish();\n    return reason;\n  });\n  const settings: AgentSettings = {\n    state: replicatedState({ models: [], accounts: [] }),\n    connect: refuse,\n    disconnect: refuse,\n    signIn: refuse,\n    dismissMoved: refuse,\n  };\n  return {\n    serverId,\n    guest,\n    control,\n    transcript: transcript.state,\n    proposals: proposals.state,\n    deliveries: replicatedState({}),\n    agents: replicatedState({\n      active: guest.agentId,\n      agents: [\n        { id: guest.agentId, name: guest.name, kind: 'cone' as const, parentId: null, role: null },\n      ],\n    }),\n    settings,\n    closed,\n    propose,\n    prompt: refuse,\n    webhook: refuse,\n    async close() {\n      finish();\n      link.close('closed');\n      await closed;\n      await host.close();\n    },\n  };\n}\n"],
-  "mappings": "AAAA,SAAS,YAAY,cAA6B,uBAAuB;AAEzE,SAA+B,eAAe;AAC9C;AAAA,EAEE;AAAA,EAEA;AAAA,OAIK;AACP,SAAS,YAAY,MAAM,OAAoB,kBAAkB;AACjE,SAA4B,gBAAgB;AAGrC,MAAM,aAAa;AACnB,MAAM,eAAe;AAE5B,MAAM,OAA+B;AAAA,EACnC,SAAS;AAAA,EACT,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,aAAa;AACf;AAEO,MAAM,mBAAmB,CAAC,WAC/B,KAAK,MAAM,KAAK;AAElB,MAAM,UAAU,CAAC,SAAiB,OAAO,aAAa,OAAO,OAAO,IAAI,MAAM,OAAO,GAAG,EAAE,KAAK,CAAC;AAOhG,eAAsB,aAAa,UAAkD;AACnF,QAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,KAAK;AAAA,EACxB,QAAQ;AACN,UAAM,QAAQ,YAAY;AAAA,EAC5B;AACA,QAAM,OAAO,WAAW,EAAE,MAAM,SAAS,OAAO,WAAW,CAAC,IAAI,MAAM,SAAS,CAAC;AAChF,OAAK,QAAQ,IAAI;AACjB,QAAM,SAAS,KAAK,IAAI,mBAAmB,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC;AACjE,QAAM,OAAO,OAAO,UAAmC;AACrD,WAAO,QAAQ;AACf,SAAK,MAAM,kBAAkB;AAC7B,UAAM,KAAK,MAAM;AACjB,UAAM;AAAA,EACR;AACA,MAAI;AACF,UAAM,QAAQ,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,KAAK,MAAM,KAAK,MAAM;AACpB,cAAM,QAAQ,YAAY;AAAA,MAC5B,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,KAAK,aAAa,KAAK,KAAK,MAAM,SAAS,cAAc,QAAQ,YAAY,IAAI,KAAK;AAAA,EAC/F;AACA,MAAI,OAAO,SAAS,QAAS,QAAO,KAAK,QAAQ,YAAY,CAAC;AAC9D,QAAM,mBAAmB,OAAO;AAChC,QAAM,aAAa,OAAO;AAC1B,QAAM,kBAAkB,OAAO;AAC/B,QAAM,UAAU,CAAC,kBAAkB,YAAY,eAAe,EAAE,IAAI,IAAI;AACxE,QAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC;AAC/E,QAAM,OAAO,OAAO;AACpB,QAAM,UAAU,OAAO,YAA4B;AACjD,QAAI;AACF,aAAO,MAAM,KAAK,KAAK,CAAC,QAAQ,KAAK,CAAC,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC;AAAA,IAC1D,SAAS,OAAO;AACd,YAAM,MAAM,KAAK;AAAA,IACnB;AAAA,EACF;AACA,QAAM,QAAQ,WAAW;AACzB,QAAM,SAAS,MAAM,QAAQ,OAAO,QAAQ,UAAU,CAAC;AACvD,QAAM,UAAU,OAAO;AAAA,IACrB,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,MAAM,CAAC;AAAA,EAC9C;AACA,UAAQ,OAAO,OAAO,YAAmC;AACvD,QAAI,QAAQ,aAAa;AACvB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,cAAc;AAAA,QACd,OAAO,EAAE,MAAM,UAAU,SAAS,8BAA8B;AAAA,MAClE;AACF,UAAM,WAAW,MAAM,QAAQ,EAAE,MAAM,QAAQ,MAAM,WAAW,QAAQ,UAAU,CAAC;AACnF,QAAI,SAAS,UAAU;AACrB,aAAO,EAAE,UAAU,MAAM,cAAc,SAAS,cAAc,OAAO,KAAK;AAC5E,QAAI,SAAS,UAAU;AACrB,aAAO,EAAE,UAAU,MAAM,cAAc,SAAS,UAAU,OAAO,KAAK;AACxE,WAAO;AAAA,MACL,UAAU;AAAA,MACV,cAAc;AAAA,MACd,OAAO,EAAE,MAAM,UAAU,SAAS,iBAAiB,SAAS,MAAM,EAAE;AAAA,IACtE;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,WAAW,gBAAgB,CAAC;AACvD,QAAM,YAAY,QAAQ,WAAW,eAAe,CAAC;AACrD,MAAI,OAAO;AACX,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,KAAM;AACX,WAAO;AACP,eAAW,OAAO;AAClB,cAAU,OAAO;AACjB,eAAW,QAAQ,QAAS,MAAK,KAAK;AACtC,WAAO,QAAQ;AAAA,EACjB;AACA,QAAM,SAAS,KAAK,MAAM,KAAK,CAAC,WAAW;AACzC,WAAO;AACP,WAAO;AAAA,EACT,CAAC;AACD,QAAM,WAA0B;AAAA,IAC9B,OAAO,gBAAgB,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,IACnD,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,cAAc;AAAA,EAChB;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,WAAW;AAAA,IACvB,WAAW,UAAU;AAAA,IACrB,YAAY,gBAAgB,CAAC,CAAC;AAAA,IAC9B,QAAQ,gBAAgB;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,QAAQ;AAAA,QACN,EAAE,IAAI,MAAM,SAAS,MAAM,MAAM,MAAM,MAAM,QAAiB,UAAU,MAAM,MAAM,KAAK;AAAA,MAC3F;AAAA,IACF,CAAC;AAAA,IACD;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,MAAM,QAAQ;AACZ,aAAO;AACP,WAAK,MAAM,QAAQ;AACnB,YAAM;AACN,YAAM,KAAK,MAAM;AAAA,IACnB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { createHost, isChordError, type Readable, replicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport { type AgentConnection, lasting } from '../client.ts';\nimport {\n  type AgentControl,\n  AgentGuestService,\n  type AgentSettings,\n  CONTROL_METHODS,\n  type GUEST_METHODS,\n  type GuestProposal,\n  type GuestShown,\n  type SendResponse,\n} from '../services.ts';\nimport { AGENT_HOST, kept, plain, type Remote, replicated } from '../serving.ts';\nimport { type PortEndpoint, PortLink } from '../wire.ts';\nimport type { GuestOpened, Proposed, ProposeRequest } from './index.ts';\n\nexport const GUEST_ONLY = 'a guest can only watch and send messages';\nexport const SEAT_REFUSED = \"This guest link isn't valid any more.\";\n\nconst SAID: Record<string, string> = {\n  revoked: 'This guest seat was revoked.',\n  empty: 'There is nothing to send.',\n  'too-long': 'That message is too long for a guest seat.',\n  gone: 'The cone this seat shares is gone.',\n  unavailable: \"Messages from guests need a review, and this agent can't review them yet.\",\n};\n\nexport const proposedSentence = (reason: string): string =>\n  SAID[reason] ?? 'The message was not delivered.';\n\nconst refusal = (message: string, code = 'EACCES') => Object.assign(new Error(message), { code });\n\nexport interface GuestConnection extends AgentConnection {\n  readonly guest: GuestShown;\n  propose(request: ProposeRequest): Promise<Proposed>;\n}\n\nexport async function connectGuest(endpoint: PortEndpoint): Promise<GuestConnection> {\n  const link = new PortLink(endpoint);\n  let serverId: string;\n  try {\n    serverId = await link.hello;\n  } catch {\n    throw refusal(SEAT_REFUSED);\n  }\n  const host = createHost({ name: `guest:${crypto.randomUUID()}`, kind: 'client' });\n  host.connect(link);\n  const handle = host.get(AgentGuestService, {}, { at: AGENT_HOST }) as unknown as Remote;\n  const fail = async (error: unknown): Promise<never> => {\n    handle.release();\n    link.close('handshake failed');\n    await host.close();\n    throw error;\n  };\n  try {\n    await Promise.race([\n      handle.ready,\n      link.ended.then(() => {\n        throw refusal(SEAT_REFUSED);\n      }),\n    ]);\n  } catch (error) {\n    return fail(isChordError(error) && error.code === 'forbidden' ? refusal(SEAT_REFUSED) : error);\n  }\n  if (handle.kind !== 'guest') return fail(refusal(SEAT_REFUSED));\n  const transcriptMember = handle.transcript as Readable<ConversationView | undefined>;\n  const seatMember = handle.seat as Readable<GuestShown | undefined>;\n  const proposalsMember = handle.proposals as Readable<GuestProposal[] | undefined>;\n  const keeping = [transcriptMember, seatMember, proposalsMember].map(kept);\n  await Promise.race([Promise.all(keeping.map((keep) => keep.ready)), link.ended]);\n  const through =\n    <T>(name: (typeof GUEST_METHODS)[number]) =>\n    async (...args: unknown[]): Promise<T> => {\n      const call = handle[name] as (args: unknown[], ctx: unknown) => Promise<T>;\n      try {\n        return await host.root((ctx) => call(args, ctx), {});\n      } catch (error) {\n        throw plain(error);\n      }\n    };\n  const propose = (request: ProposeRequest) => through<Proposed>('propose')(request);\n  const guest = seatMember.value as GuestShown;\n  const refuse = () => Promise.reject(refusal(GUEST_ONLY));\n  const control = Object.fromEntries(\n    CONTROL_METHODS.map((name) => [name, refuse])\n  ) as unknown as AgentControl;\n  control.guestOpen = (draft) => through<GuestOpened>('guestOpen')(draft);\n  control.guestRevoke = (id) => through<{ revoked: boolean }>('guestRevoke')(id);\n  control.send = async (request): Promise<SendResponse> => {\n    if (request.attachments?.length)\n      return {\n        accepted: false,\n        submissionId: null,\n        error: { code: 'EACCES', message: \"A guest can't attach files.\" },\n      };\n    const proposed = await propose({ text: request.text, requestId: request.requestId });\n    if (proposed.state === 'submitted')\n      return { accepted: true, submissionId: proposed.submissionId, error: null };\n    if (proposed.state === 'pending')\n      return { accepted: true, submissionId: proposed.approval, error: null };\n    return {\n      accepted: false,\n      submissionId: null,\n      error: { code: 'EACCES', message: proposedSentence(proposed.reason) },\n    };\n  };\n  const transcript = lasting(replicated(transcriptMember));\n  const proposals = lasting(replicated(proposalsMember));\n  let open = true;\n  const finish = () => {\n    if (!open) return;\n    open = false;\n    transcript.freeze();\n    proposals.freeze();\n    for (const keep of keeping) keep.stop();\n    handle.release();\n  };\n  const closed = link.ended.then((reason) => {\n    finish();\n    return reason;\n  });\n  const settings: AgentSettings = {\n    state: replicatedState({ models: [], accounts: [] }),\n    connect: refuse,\n    disconnect: refuse,\n    signIn: refuse,\n    dismissMoved: refuse,\n  };\n  return {\n    serverId,\n    guest,\n    control,\n    transcript: transcript.state,\n    proposals: proposals.state,\n    deliveries: replicatedState({}),\n    agents: replicatedState({\n      active: guest.agentId,\n      agents: [\n        { id: guest.agentId, name: guest.name, kind: 'cone' as const, parentId: null, role: null },\n      ],\n    }),\n    settings,\n    closed,\n    propose,\n    prompt: refuse,\n    webhook: refuse,\n    async close() {\n      finish();\n      link.close('closed');\n      await closed;\n      await host.close();\n    },\n  };\n}\n"],
+  "mappings": "AAAA,SAAS,YAAY,cAA6B,uBAAuB;AAEzE,SAA+B,eAAe;AAC9C;AAAA,EAEE;AAAA,EAEA;AAAA,OAKK;AACP,SAAS,YAAY,MAAM,OAAoB,kBAAkB;AACjE,SAA4B,gBAAgB;AAGrC,MAAM,aAAa;AACnB,MAAM,eAAe;AAE5B,MAAM,OAA+B;AAAA,EACnC,SAAS;AAAA,EACT,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,aAAa;AACf;AAEO,MAAM,mBAAmB,CAAC,WAC/B,KAAK,MAAM,KAAK;AAElB,MAAM,UAAU,CAAC,SAAiB,OAAO,aAAa,OAAO,OAAO,IAAI,MAAM,OAAO,GAAG,EAAE,KAAK,CAAC;AAOhG,eAAsB,aAAa,UAAkD;AACnF,QAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,KAAK;AAAA,EACxB,QAAQ;AACN,UAAM,QAAQ,YAAY;AAAA,EAC5B;AACA,QAAM,OAAO,WAAW,EAAE,MAAM,SAAS,OAAO,WAAW,CAAC,IAAI,MAAM,SAAS,CAAC;AAChF,OAAK,QAAQ,IAAI;AACjB,QAAM,SAAS,KAAK,IAAI,mBAAmB,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC;AACjE,QAAM,OAAO,OAAO,UAAmC;AACrD,WAAO,QAAQ;AACf,SAAK,MAAM,kBAAkB;AAC7B,UAAM,KAAK,MAAM;AACjB,UAAM;AAAA,EACR;AACA,MAAI;AACF,UAAM,QAAQ,KAAK;AAAA,MACjB,OAAO;AAAA,MACP,KAAK,MAAM,KAAK,MAAM;AACpB,cAAM,QAAQ,YAAY;AAAA,MAC5B,CAAC;AAAA,IACH,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,KAAK,aAAa,KAAK,KAAK,MAAM,SAAS,cAAc,QAAQ,YAAY,IAAI,KAAK;AAAA,EAC/F;AACA,MAAI,OAAO,SAAS,QAAS,QAAO,KAAK,QAAQ,YAAY,CAAC;AAC9D,QAAM,mBAAmB,OAAO;AAChC,QAAM,aAAa,OAAO;AAC1B,QAAM,kBAAkB,OAAO;AAC/B,QAAM,UAAU,CAAC,kBAAkB,YAAY,eAAe,EAAE,IAAI,IAAI;AACxE,QAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC;AAC/E,QAAM,UACJ,CAAI,SACJ,UAAU,SAAgC;AACxC,UAAM,OAAO,OAAO,IAAI;AACxB,QAAI;AACF,aAAO,MAAM,KAAK,KAAK,CAAC,QAAQ,KAAK,MAAM,GAAG,GAAG,CAAC,CAAC;AAAA,IACrD,SAAS,OAAO;AACd,YAAM,MAAM,KAAK;AAAA,IACnB;AAAA,EACF;AACF,QAAM,UAAU,CAAC,YAA4B,QAAkB,SAAS,EAAE,OAAO;AACjF,QAAM,QAAQ,WAAW;AACzB,QAAM,SAAS,MAAM,QAAQ,OAAO,QAAQ,UAAU,CAAC;AACvD,QAAM,UAAU,OAAO;AAAA,IACrB,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,MAAM,CAAC;AAAA,EAC9C;AACA,UAAQ,YAAY,CAAC,UAAU,QAAqB,WAAW,EAAE,KAAK;AACtE,UAAQ,cAAc,CAAC,OAAO,QAA8B,aAAa,EAAE,EAAE;AAC7E,UAAQ,OAAO,OAAO,YAAmC;AACvD,QAAI,QAAQ,aAAa;AACvB,aAAO;AAAA,QACL,UAAU;AAAA,QACV,cAAc;AAAA,QACd,OAAO,EAAE,MAAM,UAAU,SAAS,8BAA8B;AAAA,MAClE;AACF,UAAM,WAAW,MAAM,QAAQ,EAAE,MAAM,QAAQ,MAAM,WAAW,QAAQ,UAAU,CAAC;AACnF,QAAI,SAAS,UAAU;AACrB,aAAO,EAAE,UAAU,MAAM,cAAc,SAAS,cAAc,OAAO,KAAK;AAC5E,QAAI,SAAS,UAAU;AACrB,aAAO,EAAE,UAAU,MAAM,cAAc,SAAS,UAAU,OAAO,KAAK;AACxE,WAAO;AAAA,MACL,UAAU;AAAA,MACV,cAAc;AAAA,MACd,OAAO,EAAE,MAAM,UAAU,SAAS,iBAAiB,SAAS,MAAM,EAAE;AAAA,IACtE;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,WAAW,gBAAgB,CAAC;AACvD,QAAM,YAAY,QAAQ,WAAW,eAAe,CAAC;AACrD,MAAI,OAAO;AACX,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,KAAM;AACX,WAAO;AACP,eAAW,OAAO;AAClB,cAAU,OAAO;AACjB,eAAW,QAAQ,QAAS,MAAK,KAAK;AACtC,WAAO,QAAQ;AAAA,EACjB;AACA,QAAM,SAAS,KAAK,MAAM,KAAK,CAAC,WAAW;AACzC,WAAO;AACP,WAAO;AAAA,EACT,CAAC;AACD,QAAM,WAA0B;AAAA,IAC9B,OAAO,gBAAgB,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC;AAAA,IACnD,SAAS;AAAA,IACT,YAAY;AAAA,IACZ,QAAQ;AAAA,IACR,cAAc;AAAA,EAChB;AACA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY,WAAW;AAAA,IACvB,WAAW,UAAU;AAAA,IACrB,YAAY,gBAAgB,CAAC,CAAC;AAAA,IAC9B,QAAQ,gBAAgB;AAAA,MACtB,QAAQ,MAAM;AAAA,MACd,QAAQ;AAAA,QACN,EAAE,IAAI,MAAM,SAAS,MAAM,MAAM,MAAM,MAAM,QAAiB,UAAU,MAAM,MAAM,KAAK;AAAA,MAC3F;AAAA,IACF,CAAC;AAAA,IACD;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,SAAS;AAAA,IACT,MAAM,QAAQ;AACZ,aAAO;AACP,WAAK,MAAM,QAAQ;AACnB,YAAM;AACN,YAAM,KAAK,MAAM;AAAA,IACnB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/guests/index.js

@@ -4,6 +4,7 @@ import { InboxDoc } from "@earendil-works/pi-durable";
 import { scrubText } from "../secrets/scrub.js";
 import { GUEST_INPUT_KIND, guestContent } from "./attribution.js";
 import { GUEST_REQUEST } from "./guard.js";
+import { DEFAULT_GUEST_POLICY } from "./policy.js";
 import {
   checkDraft,
   cleanLabel,
@@ -110,6 +111,7 @@ async function createGuests(options) {
   const { harness, agents } = options;
   const now = options.now ?? Date.now;
   const context = options.context ?? BACKGROUND_CONTEXT;
+  const guestPolicy = () => options.policy?.current().guests ?? DEFAULT_GUEST_POLICY;
   const records = await harness.commit(
     async (tx) => copy((await tx.doc(GuestsDoc)).seats),
     context
@@ -193,7 +195,7 @@ async function createGuests(options) {
     seats,
     async open(draft, using) {
       const at = now();
-      const problem = checkDraft(draft, at);
+      const problem = checkDraft(draft, at, guestPolicy());
       if (problem) return { seat: null, error: problem };
       if (!agents.state().cones[draft.agentId])
         return { seat: null, error: `There is no cone ${draft.agentId}.` };
@@ -268,6 +270,7 @@ async function createGuests(options) {
         return still ? place(still, prepared, options, using) : unanswered("revoked");
       });
     },
+    policy: guestPolicy,
     dispose() {
       if (timer) clearTimeout(timer);
       offPending?.();

package/dist/guests/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/guests/index.ts"],
-  "sourcesContent": ["import { type Context, type ReplicatedState, replicatedState } from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport { type Harness, InboxDoc } from '@earendil-works/pi-durable';\nimport type { Agents } from '../agents.ts';\nimport type { Approval, Approvals } from '../approvals/index.ts';\nimport { scrubText } from '../secrets/scrub.ts';\nimport type { GuestPrincipal } from '../serving.ts';\nimport { GUEST_INPUT_KIND, type GuestInput, guestContent } from './attribution.ts';\nimport { GUEST_REQUEST } from './guard.ts';\nimport {\n  checkDraft,\n  cleanLabel,\n  type GuestDraft,\n  type GuestSeat,\n  GuestsDoc,\n  liveSeat,\n  MAX_SEAT_MS,\n  type SeatRecord,\n} from './seats.ts';\n\nexport type GuestOpened = { seat: GuestSeat; error: null } | { seat: null; error: string };\n\nexport type Proposed =\n  | { state: 'submitted'; submissionId: string; reason: null }\n  | { state: 'pending'; submissionId: null; approval: string; reason: null }\n  | { state: 'unanswered'; submissionId: null; reason: string };\n\nexport interface ProposeRequest {\n  text: string;\n  requestId: string | null;\n}\n\nexport interface Guests {\n  readonly seats: ReplicatedState<GuestSeat[]>;\n  open(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  revoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n  admit(id: string, label: string): GuestPrincipal | null;\n  record(id: string): SeatRecord | undefined;\n  current(guest: GuestPrincipal): SeatRecord | undefined;\n  joined(id: string): () => void;\n  onEnd(listener: (id: string) => void): () => void;\n  propose(guest: GuestPrincipal, request: ProposeRequest, context: Context): Promise<Proposed>;\n  dispose(): void;\n}\n\nexport interface GuestsOptions {\n  harness: Pick<Harness, 'commit' | 'abortSubmission'>;\n  agents: Pick<Agents, 'state' | 'conversation'>;\n  approvals?: Pick<Approvals, 'state' | 'request' | 'withdrawSeat'>;\n  now?: () => number;\n  context?: Context;\n}\n\nexport const MAX_PROPOSAL = 32_000;\nconst MAX_REQUEST = 128;\nconst KEPT_DELIVERED = 100;\nconst LONGEST_TIMER = 2 ** 31 - 1;\n\nconst copy = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst unanswered = (reason: string): Proposed => ({\n  state: 'unanswered',\n  submissionId: null,\n  reason,\n});\n\nfunction prune(all: Record<string, SeatRecord>, at: number) {\n  for (const [id, record] of Object.entries(all)) {\n    const over = record.revoked ?? record.expiresAt;\n    if (over !== null && at - over > MAX_SEAT_MS) delete all[id];\n  }\n}\n\nasync function withdrawQueued(\n  harness: GuestsOptions['harness'],\n  agents: GuestsOptions['agents'],\n  record: SeatRecord,\n  using: Context\n) {\n  const conversation = await agents.conversation(record.agentId, using);\n  if (!conversation) return;\n  const queued = await harness.commit(\n    async (tx) =>\n      (await tx.doc(InboxDoc, conversation.id)).items\n        .filter((item) => {\n          const entry = item.entry as { kind?: string; data?: { seat?: unknown } } | undefined;\n          return entry?.kind === GUEST_INPUT_KIND && entry.data?.seat === record.id;\n        })\n        .map((item) => item.id),\n    using\n  );\n  for (const id of queued) await harness.abortSubmission(id, using, conversation.id);\n}\n\nasync function deliver(\n  record: SeatRecord,\n  text: string,\n  approval: string | null,\n  requestId: string,\n  agents: GuestsOptions['agents'],\n  using: Context\n): Promise<Proposed> {\n  const conversation = await agents.conversation(record.agentId, using);\n  if (!conversation) return unanswered('gone');\n  const data: GuestInput = { seat: record.id, name: record.label, approval };\n  const submitted = await conversation.submit(\n    {\n      type: 'input',\n      content: guestContent(record.label, text),\n      whenBusy: 'followUp',\n      entry: { kind: GUEST_INPUT_KIND, data: { ...data } },\n      requestId,\n    },\n    using\n  );\n  return { state: 'submitted', submissionId: String(submitted.id), reason: null };\n}\n\ntype Prepared = { text: string; requestId: string };\n\nasync function prepare(record: SeatRecord, request: ProposeRequest): Promise<Prepared | Proposed> {\n  const text = typeof request?.text === 'string' ? request.text.trim() : '';\n  if (!text) return unanswered('empty');\n  if (text.length > MAX_PROPOSAL) return unanswered('too-long');\n  const asked =\n    typeof request.requestId === 'string' &&\n    request.requestId &&\n    request.requestId.length <= MAX_REQUEST\n      ? request.requestId\n      : crypto.randomUUID();\n  return { text: await scrubText(text), requestId: `${GUEST_REQUEST}${record.id}:${asked}` };\n}\n\nasync function place(\n  record: SeatRecord,\n  prepared: Prepared,\n  options: GuestsOptions,\n  using: Context\n): Promise<Proposed> {\n  const gate = record.gates.messages;\n  if (gate === 'off')\n    return deliver(record, prepared.text, null, prepared.requestId, options.agents, using);\n  if (!options.approvals) return unanswered('unavailable');\n  const item = await options.approvals.request(\n    {\n      kind: 'guest-message',\n      seat: record.id,\n      agentId: record.agentId,\n      requester: { kind: 'guest', name: record.label, seat: record.id },\n      tier: gate,\n      detail: { text: prepared.text, attachments: [] },\n    },\n    using\n  );\n  if (item.state !== 'pending') return unanswered(item.reason ?? item.state);\n  return { state: 'pending', submissionId: null, approval: item.id, reason: null };\n}\n\nfunction keyedLine() {\n  const locks = new Map<string, Promise<unknown>>();\n  return <T>(id: string, run: () => Promise<T>): Promise<T> => {\n    const next = (locks.get(id) ?? Promise.resolve()).then(run, run);\n    const settled = next.catch(() => undefined);\n    locks.set(id, settled);\n    void settled.then(() => {\n      if (locks.get(id) === settled) locks.delete(id);\n    });\n    return next;\n  };\n}\n\nconst pendingIn =\n  (approvals: GuestsOptions['approvals']) =>\n  (id: string): number =>\n    (approvals?.state.value ?? []).filter((item) => item.seat === id && item.state === 'pending')\n      .length;\n\nfunction shownSeats(\n  records: Record<string, SeatRecord>,\n  links: ReadonlyMap<string, number>,\n  at: number,\n  pendingOf: (id: string) => number\n): GuestSeat[] {\n  return Object.values(records)\n    .filter((record) => liveSeat(record, at))\n    .sort((a, b) => a.createdAt - b.createdAt || a.id.localeCompare(b.id))\n    .map((record) => ({\n      id: record.id,\n      label: record.label,\n      agentId: record.agentId,\n      createdAt: record.createdAt,\n      expiresAt: record.expiresAt,\n      gates: { ...record.gates },\n      connected: (links.get(record.id) ?? 0) > 0,\n      pending: pendingOf(record.id),\n    }));\n}\n\nexport async function createGuests(options: GuestsOptions): Promise<Guests> {\n  const { harness, agents } = options;\n  const now = options.now ?? Date.now;\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const records: Record<string, SeatRecord> = await harness.commit(\n    async (tx) => copy((await tx.doc(GuestsDoc)).seats),\n    context\n  );\n  const links = new Map<string, number>();\n  const ended = new Set<(id: string) => void>();\n  const gone = new Set<string>();\n  const shown = () => shownSeats(records, links, now(), pendingIn(options.approvals));\n  const seats = replicatedState<GuestSeat[]>(shown());\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const locked = keyedLine();\n  const cleanup = (record: SeatRecord, using: Context) =>\n    locked(record.id, async () => {\n      await withdrawQueued(harness, agents, record, using);\n      await options.approvals?.withdrawSeat(record.id, using);\n    });\n  const end = (id: string, using: Context = context): Promise<void> => {\n    const record = records[id];\n    if (gone.has(id) || !record) return Promise.resolve();\n    gone.add(id);\n    for (const listener of [...ended]) listener(id);\n    return cleanup(record, using);\n  };\n  const publish = () => {\n    const at = now();\n    for (const record of Object.values(records))\n      if (!liveSeat(record, at)) void end(record.id).catch(() => undefined);\n    seats.replace(context, shown());\n    if (timer) clearTimeout(timer);\n    timer = undefined;\n    const next = Math.min(\n      ...Object.values(records)\n        .filter((record) => liveSeat(record, at) && record.expiresAt !== null)\n        .map((record) => record.expiresAt as number)\n    );\n    if (Number.isFinite(next))\n      timer = setTimeout(publish, Math.min(Math.max(0, next - at), LONGEST_TIMER));\n  };\n  publish();\n  const write = (change: (seats: Record<string, SeatRecord>) => SeatRecord | undefined) =>\n    harness.commit(async (tx) => {\n      const doc = await tx.doc(GuestsDoc);\n      const changed = change(doc.seats);\n      return changed ? copy(changed) : undefined;\n    }, context);\n  const delivering = new Set<string>();\n  const deliverOne = (seat: string, item: Approval) =>\n    locked(seat, async () => {\n      const record = records[seat];\n      if (!record || !liveSeat(record, now())) return;\n      await deliverLocked(record, item);\n    });\n  const deliverLocked = async (record: SeatRecord, item: Approval) => {\n    const text = (item.detail as { text?: string }).text ?? '';\n    const requestId = `${GUEST_REQUEST}${record.id}:${item.id}`;\n    const sent = await deliver(record, text, item.id, requestId, agents, context);\n    if (sent.state !== 'submitted') return;\n    const changed = await write((all) => {\n      const kept = all[record.id];\n      if (!kept) return undefined;\n      kept.delivered = [...(kept.delivered ?? []), item.id].slice(-KEPT_DELIVERED);\n      return kept;\n    });\n    if (changed) records[record.id] = changed;\n  };\n  const approved = (items: readonly Approval[]) => {\n    for (const item of items) {\n      if (item.kind !== 'guest-message' || item.state !== 'approved' || !item.seat) continue;\n      const record = records[item.seat];\n      if (!record || !liveSeat(record, now()) || delivering.has(item.id)) continue;\n      if (record.delivered?.includes(item.id)) continue;\n      delivering.add(item.id);\n      void deliverOne(record.id, item).catch(() => undefined);\n    }\n  };\n  const offPending = options.approvals?.state.subscribe((items) => {\n    seats.replace(context, shown());\n    approved(items);\n  });\n  approved(options.approvals?.state.value ?? []);\n  const current = (guest: GuestPrincipal) => {\n    const record = records[guest.id];\n    return record && liveSeat(record, now()) && record.epoch === guest.epoch ? record : undefined;\n  };\n  return {\n    seats,\n    async open(draft, using) {\n      const at = now();\n      const problem = checkDraft(draft, at);\n      if (problem) return { seat: null, error: problem };\n      if (!agents.state().cones[draft.agentId])\n        return { seat: null, error: `There is no cone ${draft.agentId}.` };\n      const record: SeatRecord = {\n        id: draft.id,\n        label: cleanLabel(draft.label),\n        agentId: draft.agentId,\n        expiresAt: draft.expiresAt,\n        gates: { messages: draft.gates.messages, tools: draft.gates.tools },\n        createdAt: at,\n        epoch: 1,\n        revoked: null,\n      };\n      const kept = await harness.commit(async (tx) => {\n        const doc = await tx.doc(GuestsDoc);\n        if (doc.seats[record.id]) return null;\n        prune(doc.seats, at);\n        doc.seats[record.id] = copy(record);\n        return copy(doc.seats);\n      }, using);\n      if (!kept) return { seat: null, error: 'That guest seat already exists.' };\n      for (const id of Object.keys(records)) delete records[id];\n      Object.assign(records, kept);\n      publish();\n      return { seat: shown().find((seat) => seat.id === record.id) as GuestSeat, error: null };\n    },\n    async revoke(id, using) {\n      const at = now();\n      const changed = await write((all) => {\n        const record = all[id];\n        if (!record || record.revoked !== null) return undefined;\n        record.revoked = at;\n        record.epoch += 1;\n        return record;\n      });\n      if (!changed) return { revoked: false };\n      records[id] = changed;\n      const ending = end(id, using);\n      publish();\n      await ending;\n      return { revoked: true };\n    },\n    admit(id, label) {\n      const record = records[id];\n      if (!record || !liveSeat(record, now()) || record.label !== cleanLabel(label)) return null;\n      return { id: record.id, name: record.label, epoch: record.epoch };\n    },\n    record: (id) => records[id],\n    current,\n    joined(id) {\n      links.set(id, (links.get(id) ?? 0) + 1);\n      seats.replace(context, shown());\n      let left = false;\n      return () => {\n        if (left) return;\n        left = true;\n        links.set(id, (links.get(id) ?? 1) - 1);\n        seats.replace(context, shown());\n      };\n    },\n    onEnd(listener) {\n      ended.add(listener);\n      return () => ended.delete(listener);\n    },\n    async propose(guest, request, using) {\n      const record = current(guest);\n      if (!record) return unanswered('revoked');\n      const prepared = await prepare(record, request);\n      if ('state' in prepared) return prepared;\n      return locked(record.id, async () => {\n        const still = current(guest);\n        return still ? place(still, prepared, options, using) : unanswered('revoked');\n      });\n    },\n    dispose() {\n      if (timer) clearTimeout(timer);\n      offPending?.();\n      ended.clear();\n    },\n  };\n}\n"],
-  "mappings": "AAAA,SAA6C,uBAAuB;AACpE,SAAS,0BAA0B;AACnC,SAAuB,gBAAgB;AAGvC,SAAS,iBAAiB;AAE1B,SAAS,kBAAmC,oBAAoB;AAChE,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAmCA,MAAM,eAAe;AAC5B,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB,KAAK,KAAK;AAEhC,MAAM,OAAO,CAAI,UAAgB,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAEjE,MAAM,aAAa,CAAC,YAA8B;AAAA,EAChD,OAAO;AAAA,EACP,cAAc;AAAA,EACd;AACF;AAEA,SAAS,MAAM,KAAiC,IAAY;AAC1D,aAAW,CAAC,IAAI,MAAM,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,UAAM,OAAO,OAAO,WAAW,OAAO;AACtC,QAAI,SAAS,QAAQ,KAAK,OAAO,YAAa,QAAO,IAAI,EAAE;AAAA,EAC7D;AACF;AAEA,eAAe,eACb,SACA,QACA,QACA,OACA;AACA,QAAM,eAAe,MAAM,OAAO,aAAa,OAAO,SAAS,KAAK;AACpE,MAAI,CAAC,aAAc;AACnB,QAAM,SAAS,MAAM,QAAQ;AAAA,IAC3B,OAAO,QACJ,MAAM,GAAG,IAAI,UAAU,aAAa,EAAE,GAAG,MACvC,OAAO,CAAC,SAAS;AAChB,YAAM,QAAQ,KAAK;AACnB,aAAO,OAAO,SAAS,oBAAoB,MAAM,MAAM,SAAS,OAAO;AAAA,IACzE,CAAC,EACA,IAAI,CAAC,SAAS,KAAK,EAAE;AAAA,IAC1B;AAAA,EACF;AACA,aAAW,MAAM,OAAQ,OAAM,QAAQ,gBAAgB,IAAI,OAAO,aAAa,EAAE;AACnF;AAEA,eAAe,QACb,QACA,MACA,UACA,WACA,QACA,OACmB;AACnB,QAAM,eAAe,MAAM,OAAO,aAAa,OAAO,SAAS,KAAK;AACpE,MAAI,CAAC,aAAc,QAAO,WAAW,MAAM;AAC3C,QAAM,OAAmB,EAAE,MAAM,OAAO,IAAI,MAAM,OAAO,OAAO,SAAS;AACzE,QAAM,YAAY,MAAM,aAAa;AAAA,IACnC;AAAA,MACE,MAAM;AAAA,MACN,SAAS,aAAa,OAAO,OAAO,IAAI;AAAA,MACxC,UAAU;AAAA,MACV,OAAO,EAAE,MAAM,kBAAkB,MAAM,EAAE,GAAG,KAAK,EAAE;AAAA,MACnD;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACA,SAAO,EAAE,OAAO,aAAa,cAAc,OAAO,UAAU,EAAE,GAAG,QAAQ,KAAK;AAChF;AAIA,eAAe,QAAQ,QAAoB,SAAuD;AAChG,QAAM,OAAO,OAAO,SAAS,SAAS,WAAW,QAAQ,KAAK,KAAK,IAAI;AACvE,MAAI,CAAC,KAAM,QAAO,WAAW,OAAO;AACpC,MAAI,KAAK,SAAS,aAAc,QAAO,WAAW,UAAU;AAC5D,QAAM,QACJ,OAAO,QAAQ,cAAc,YAC7B,QAAQ,aACR,QAAQ,UAAU,UAAU,cACxB,QAAQ,YACR,OAAO,WAAW;AACxB,SAAO,EAAE,MAAM,MAAM,UAAU,IAAI,GAAG,WAAW,GAAG,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK,GAAG;AAC3F;AAEA,eAAe,MACb,QACA,UACA,SACA,OACmB;AACnB,QAAM,OAAO,OAAO,MAAM;AAC1B,MAAI,SAAS;AACX,WAAO,QAAQ,QAAQ,SAAS,MAAM,MAAM,SAAS,WAAW,QAAQ,QAAQ,KAAK;AACvF,MAAI,CAAC,QAAQ,UAAW,QAAO,WAAW,aAAa;AACvD,QAAM,OAAO,MAAM,QAAQ,UAAU;AAAA,IACnC;AAAA,MACE,MAAM;AAAA,MACN,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,WAAW,EAAE,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,OAAO,GAAG;AAAA,MAChE,MAAM;AAAA,MACN,QAAQ,EAAE,MAAM,SAAS,MAAM,aAAa,CAAC,EAAE;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,MAAI,KAAK,UAAU,UAAW,QAAO,WAAW,KAAK,UAAU,KAAK,KAAK;AACzE,SAAO,EAAE,OAAO,WAAW,cAAc,MAAM,UAAU,KAAK,IAAI,QAAQ,KAAK;AACjF;AAEA,SAAS,YAAY;AACnB,QAAM,QAAQ,oBAAI,IAA8B;AAChD,SAAO,CAAI,IAAY,QAAsC;AAC3D,UAAM,QAAQ,MAAM,IAAI,EAAE,KAAK,QAAQ,QAAQ,GAAG,KAAK,KAAK,GAAG;AAC/D,UAAM,UAAU,KAAK,MAAM,MAAM,MAAS;AAC1C,UAAM,IAAI,IAAI,OAAO;AACrB,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,MAAM,IAAI,EAAE,MAAM,QAAS,OAAM,OAAO,EAAE;AAAA,IAChD,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,MAAM,YACJ,CAAC,cACD,CAAC,QACE,WAAW,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,MAAM,KAAK,UAAU,SAAS,EACzF;AAEP,SAAS,WACP,SACA,OACA,IACA,WACa;AACb,SAAO,OAAO,OAAO,OAAO,EACzB,OAAO,CAAC,WAAW,SAAS,QAAQ,EAAE,CAAC,EACvC,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC,EACpE,IAAI,CAAC,YAAY;AAAA,IAChB,IAAI,OAAO;AAAA,IACX,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,IACzB,YAAY,MAAM,IAAI,OAAO,EAAE,KAAK,KAAK;AAAA,IACzC,SAAS,UAAU,OAAO,EAAE;AAAA,EAC9B,EAAE;AACN;AAEA,eAAsB,aAAa,SAAyC;AAC1E,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,UAAsC,MAAM,QAAQ;AAAA,IACxD,OAAO,OAAO,MAAM,MAAM,GAAG,IAAI,SAAS,GAAG,KAAK;AAAA,IAClD;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,QAAQ,oBAAI,IAA0B;AAC5C,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,QAAQ,MAAM,WAAW,SAAS,OAAO,IAAI,GAAG,UAAU,QAAQ,SAAS,CAAC;AAClF,QAAM,QAAQ,gBAA6B,MAAM,CAAC;AAClD,MAAI;AACJ,QAAM,SAAS,UAAU;AACzB,QAAM,UAAU,CAAC,QAAoB,UACnC,OAAO,OAAO,IAAI,YAAY;AAC5B,UAAM,eAAe,SAAS,QAAQ,QAAQ,KAAK;AACnD,UAAM,QAAQ,WAAW,aAAa,OAAO,IAAI,KAAK;AAAA,EACxD,CAAC;AACH,QAAM,MAAM,CAAC,IAAY,QAAiB,YAA2B;AACnE,UAAM,SAAS,QAAQ,EAAE;AACzB,QAAI,KAAK,IAAI,EAAE,KAAK,CAAC,OAAQ,QAAO,QAAQ,QAAQ;AACpD,SAAK,IAAI,EAAE;AACX,eAAW,YAAY,CAAC,GAAG,KAAK,EAAG,UAAS,EAAE;AAC9C,WAAO,QAAQ,QAAQ,KAAK;AAAA,EAC9B;AACA,QAAM,UAAU,MAAM;AACpB,UAAM,KAAK,IAAI;AACf,eAAW,UAAU,OAAO,OAAO,OAAO;AACxC,UAAI,CAAC,SAAS,QAAQ,EAAE,EAAG,MAAK,IAAI,OAAO,EAAE,EAAE,MAAM,MAAM,MAAS;AACtE,UAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,QAAI,MAAO,cAAa,KAAK;AAC7B,YAAQ;AACR,UAAM,OAAO,KAAK;AAAA,MAChB,GAAG,OAAO,OAAO,OAAO,EACrB,OAAO,CAAC,WAAW,SAAS,QAAQ,EAAE,KAAK,OAAO,cAAc,IAAI,EACpE,IAAI,CAAC,WAAW,OAAO,SAAmB;AAAA,IAC/C;AACA,QAAI,OAAO,SAAS,IAAI;AACtB,cAAQ,WAAW,SAAS,KAAK,IAAI,KAAK,IAAI,GAAG,OAAO,EAAE,GAAG,aAAa,CAAC;AAAA,EAC/E;AACA,UAAQ;AACR,QAAM,QAAQ,CAAC,WACb,QAAQ,OAAO,OAAO,OAAO;AAC3B,UAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,UAAM,UAAU,OAAO,IAAI,KAAK;AAChC,WAAO,UAAU,KAAK,OAAO,IAAI;AAAA,EACnC,GAAG,OAAO;AACZ,QAAM,aAAa,oBAAI,IAAY;AACnC,QAAM,aAAa,CAAC,MAAc,SAChC,OAAO,MAAM,YAAY;AACvB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,EAAG;AACzC,UAAM,cAAc,QAAQ,IAAI;AAAA,EAClC,CAAC;AACH,QAAM,gBAAgB,OAAO,QAAoB,SAAmB;AAClE,UAAM,OAAQ,KAAK,OAA6B,QAAQ;AACxD,UAAM,YAAY,GAAG,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK,EAAE;AACzD,UAAM,OAAO,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI,WAAW,QAAQ,OAAO;AAC5E,QAAI,KAAK,UAAU,YAAa;AAChC,UAAM,UAAU,MAAM,MAAM,CAAC,QAAQ;AACnC,YAAM,OAAO,IAAI,OAAO,EAAE;AAC1B,UAAI,CAAC,KAAM,QAAO;AAClB,WAAK,YAAY,CAAC,GAAI,KAAK,aAAa,CAAC,GAAI,KAAK,EAAE,EAAE,MAAM,CAAC,cAAc;AAC3E,aAAO;AAAA,IACT,CAAC;AACD,QAAI,QAAS,SAAQ,OAAO,EAAE,IAAI;AAAA,EACpC;AACA,QAAM,WAAW,CAAC,UAA+B;AAC/C,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,SAAS,mBAAmB,KAAK,UAAU,cAAc,CAAC,KAAK,KAAM;AAC9E,YAAM,SAAS,QAAQ,KAAK,IAAI;AAChC,UAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,KAAK,WAAW,IAAI,KAAK,EAAE,EAAG;AACpE,UAAI,OAAO,WAAW,SAAS,KAAK,EAAE,EAAG;AACzC,iBAAW,IAAI,KAAK,EAAE;AACtB,WAAK,WAAW,OAAO,IAAI,IAAI,EAAE,MAAM,MAAM,MAAS;AAAA,IACxD;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,WAAW,MAAM,UAAU,CAAC,UAAU;AAC/D,UAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,aAAS,KAAK;AAAA,EAChB,CAAC;AACD,WAAS,QAAQ,WAAW,MAAM,SAAS,CAAC,CAAC;AAC7C,QAAM,UAAU,CAAC,UAA0B;AACzC,UAAM,SAAS,QAAQ,MAAM,EAAE;AAC/B,WAAO,UAAU,SAAS,QAAQ,IAAI,CAAC,KAAK,OAAO,UAAU,MAAM,QAAQ,SAAS;AAAA,EACtF;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,OAAO,OAAO;AACvB,YAAM,KAAK,IAAI;AACf,YAAM,UAAU,WAAW,OAAO,EAAE;AACpC,UAAI,QAAS,QAAO,EAAE,MAAM,MAAM,OAAO,QAAQ;AACjD,UAAI,CAAC,OAAO,MAAM,EAAE,MAAM,MAAM,OAAO;AACrC,eAAO,EAAE,MAAM,MAAM,OAAO,oBAAoB,MAAM,OAAO,IAAI;AACnE,YAAM,SAAqB;AAAA,QACzB,IAAI,MAAM;AAAA,QACV,OAAO,WAAW,MAAM,KAAK;AAAA,QAC7B,SAAS,MAAM;AAAA,QACf,WAAW,MAAM;AAAA,QACjB,OAAO,EAAE,UAAU,MAAM,MAAM,UAAU,OAAO,MAAM,MAAM,MAAM;AAAA,QAClE,WAAW;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,MACX;AACA,YAAM,OAAO,MAAM,QAAQ,OAAO,OAAO,OAAO;AAC9C,cAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,YAAI,IAAI,MAAM,OAAO,EAAE,EAAG,QAAO;AACjC,cAAM,IAAI,OAAO,EAAE;AACnB,YAAI,MAAM,OAAO,EAAE,IAAI,KAAK,MAAM;AAClC,eAAO,KAAK,IAAI,KAAK;AAAA,MACvB,GAAG,KAAK;AACR,UAAI,CAAC,KAAM,QAAO,EAAE,MAAM,MAAM,OAAO,kCAAkC;AACzE,iBAAW,MAAM,OAAO,KAAK,OAAO,EAAG,QAAO,QAAQ,EAAE;AACxD,aAAO,OAAO,SAAS,IAAI;AAC3B,cAAQ;AACR,aAAO,EAAE,MAAM,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,OAAO,OAAO,EAAE,GAAgB,OAAO,KAAK;AAAA,IACzF;AAAA,IACA,MAAM,OAAO,IAAI,OAAO;AACtB,YAAM,KAAK,IAAI;AACf,YAAM,UAAU,MAAM,MAAM,CAAC,QAAQ;AACnC,cAAM,SAAS,IAAI,EAAE;AACrB,YAAI,CAAC,UAAU,OAAO,YAAY,KAAM,QAAO;AAC/C,eAAO,UAAU;AACjB,eAAO,SAAS;AAChB,eAAO;AAAA,MACT,CAAC;AACD,UAAI,CAAC,QAAS,QAAO,EAAE,SAAS,MAAM;AACtC,cAAQ,EAAE,IAAI;AACd,YAAM,SAAS,IAAI,IAAI,KAAK;AAC5B,cAAQ;AACR,YAAM;AACN,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAAA,IACA,MAAM,IAAI,OAAO;AACf,YAAM,SAAS,QAAQ,EAAE;AACzB,UAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,KAAK,OAAO,UAAU,WAAW,KAAK,EAAG,QAAO;AACtF,aAAO,EAAE,IAAI,OAAO,IAAI,MAAM,OAAO,OAAO,OAAO,OAAO,MAAM;AAAA,IAClE;AAAA,IACA,QAAQ,CAAC,OAAO,QAAQ,EAAE;AAAA,IAC1B;AAAA,IACA,OAAO,IAAI;AACT,YAAM,IAAI,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;AACtC,YAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,UAAI,OAAO;AACX,aAAO,MAAM;AACX,YAAI,KAAM;AACV,eAAO;AACP,cAAM,IAAI,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;AACtC,cAAM,QAAQ,SAAS,MAAM,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,IACA,MAAM,UAAU;AACd,YAAM,IAAI,QAAQ;AAClB,aAAO,MAAM,MAAM,OAAO,QAAQ;AAAA,IACpC;AAAA,IACA,MAAM,QAAQ,OAAO,SAAS,OAAO;AACnC,YAAM,SAAS,QAAQ,KAAK;AAC5B,UAAI,CAAC,OAAQ,QAAO,WAAW,SAAS;AACxC,YAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO;AAC9C,UAAI,WAAW,SAAU,QAAO;AAChC,aAAO,OAAO,OAAO,IAAI,YAAY;AACnC,cAAM,QAAQ,QAAQ,KAAK;AAC3B,eAAO,QAAQ,MAAM,OAAO,UAAU,SAAS,KAAK,IAAI,WAAW,SAAS;AAAA,MAC9E,CAAC;AAAA,IACH;AAAA,IACA,UAAU;AACR,UAAI,MAAO,cAAa,KAAK;AAC7B,mBAAa;AACb,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { type Context, type ReplicatedState, replicatedState } from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport { type Harness, InboxDoc } from '@earendil-works/pi-durable';\nimport type { Agents } from '../agents.ts';\nimport type { Approval, Approvals } from '../approvals/index.ts';\nimport type { ApprovalPolicies } from '../approvals/policy.ts';\nimport { scrubText } from '../secrets/scrub.ts';\nimport type { GuestPrincipal } from '../serving.ts';\nimport { GUEST_INPUT_KIND, type GuestInput, guestContent } from './attribution.ts';\nimport { GUEST_REQUEST } from './guard.ts';\nimport { DEFAULT_GUEST_POLICY, type GuestPolicy } from './policy.ts';\nimport {\n  checkDraft,\n  cleanLabel,\n  type GuestDraft,\n  type GuestSeat,\n  GuestsDoc,\n  liveSeat,\n  MAX_SEAT_MS,\n  type SeatRecord,\n} from './seats.ts';\n\nexport type GuestOpened = { seat: GuestSeat; error: null } | { seat: null; error: string };\n\nexport type Proposed =\n  | { state: 'submitted'; submissionId: string; reason: null }\n  | { state: 'pending'; submissionId: null; approval: string; reason: null }\n  | { state: 'unanswered'; submissionId: null; reason: string };\n\nexport interface ProposeRequest {\n  text: string;\n  requestId: string | null;\n}\n\nexport interface Guests {\n  readonly seats: ReplicatedState<GuestSeat[]>;\n  open(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  revoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n  admit(id: string, label: string): GuestPrincipal | null;\n  record(id: string): SeatRecord | undefined;\n  current(guest: GuestPrincipal): SeatRecord | undefined;\n  joined(id: string): () => void;\n  onEnd(listener: (id: string) => void): () => void;\n  propose(guest: GuestPrincipal, request: ProposeRequest, context: Context): Promise<Proposed>;\n  policy(): GuestPolicy;\n  dispose(): void;\n}\n\nexport interface GuestsOptions {\n  harness: Pick<Harness, 'commit' | 'abortSubmission'>;\n  agents: Pick<Agents, 'state' | 'conversation'>;\n  approvals?: Pick<Approvals, 'state' | 'request' | 'withdrawSeat'>;\n  policy?: Pick<ApprovalPolicies, 'current'>;\n  now?: () => number;\n  context?: Context;\n}\n\nexport const MAX_PROPOSAL = 32_000;\nconst MAX_REQUEST = 128;\nconst KEPT_DELIVERED = 100;\nconst LONGEST_TIMER = 2 ** 31 - 1;\n\nconst copy = <T>(value: T): T => JSON.parse(JSON.stringify(value)) as T;\n\nconst unanswered = (reason: string): Proposed => ({\n  state: 'unanswered',\n  submissionId: null,\n  reason,\n});\n\nfunction prune(all: Record<string, SeatRecord>, at: number) {\n  for (const [id, record] of Object.entries(all)) {\n    const over = record.revoked ?? record.expiresAt;\n    if (over !== null && at - over > MAX_SEAT_MS) delete all[id];\n  }\n}\n\nasync function withdrawQueued(\n  harness: GuestsOptions['harness'],\n  agents: GuestsOptions['agents'],\n  record: SeatRecord,\n  using: Context\n) {\n  const conversation = await agents.conversation(record.agentId, using);\n  if (!conversation) return;\n  const queued = await harness.commit(\n    async (tx) =>\n      (await tx.doc(InboxDoc, conversation.id)).items\n        .filter((item) => {\n          const entry = item.entry as { kind?: string; data?: { seat?: unknown } } | undefined;\n          return entry?.kind === GUEST_INPUT_KIND && entry.data?.seat === record.id;\n        })\n        .map((item) => item.id),\n    using\n  );\n  for (const id of queued) await harness.abortSubmission(id, using, conversation.id);\n}\n\nasync function deliver(\n  record: SeatRecord,\n  text: string,\n  approval: string | null,\n  requestId: string,\n  agents: GuestsOptions['agents'],\n  using: Context\n): Promise<Proposed> {\n  const conversation = await agents.conversation(record.agentId, using);\n  if (!conversation) return unanswered('gone');\n  const data: GuestInput = { seat: record.id, name: record.label, approval };\n  const submitted = await conversation.submit(\n    {\n      type: 'input',\n      content: guestContent(record.label, text),\n      whenBusy: 'followUp',\n      entry: { kind: GUEST_INPUT_KIND, data: { ...data } },\n      requestId,\n    },\n    using\n  );\n  return { state: 'submitted', submissionId: String(submitted.id), reason: null };\n}\n\ntype Prepared = { text: string; requestId: string };\n\nasync function prepare(record: SeatRecord, request: ProposeRequest): Promise<Prepared | Proposed> {\n  const text = typeof request?.text === 'string' ? request.text.trim() : '';\n  if (!text) return unanswered('empty');\n  if (text.length > MAX_PROPOSAL) return unanswered('too-long');\n  const asked =\n    typeof request.requestId === 'string' &&\n    request.requestId &&\n    request.requestId.length <= MAX_REQUEST\n      ? request.requestId\n      : crypto.randomUUID();\n  return { text: await scrubText(text), requestId: `${GUEST_REQUEST}${record.id}:${asked}` };\n}\n\nasync function place(\n  record: SeatRecord,\n  prepared: Prepared,\n  options: GuestsOptions,\n  using: Context\n): Promise<Proposed> {\n  const gate = record.gates.messages;\n  if (gate === 'off')\n    return deliver(record, prepared.text, null, prepared.requestId, options.agents, using);\n  if (!options.approvals) return unanswered('unavailable');\n  const item = await options.approvals.request(\n    {\n      kind: 'guest-message',\n      seat: record.id,\n      agentId: record.agentId,\n      requester: { kind: 'guest', name: record.label, seat: record.id },\n      tier: gate,\n      detail: { text: prepared.text, attachments: [] },\n    },\n    using\n  );\n  if (item.state !== 'pending') return unanswered(item.reason ?? item.state);\n  return { state: 'pending', submissionId: null, approval: item.id, reason: null };\n}\n\nfunction keyedLine() {\n  const locks = new Map<string, Promise<unknown>>();\n  return <T>(id: string, run: () => Promise<T>): Promise<T> => {\n    const next = (locks.get(id) ?? Promise.resolve()).then(run, run);\n    const settled = next.catch(() => undefined);\n    locks.set(id, settled);\n    void settled.then(() => {\n      if (locks.get(id) === settled) locks.delete(id);\n    });\n    return next;\n  };\n}\n\nconst pendingIn =\n  (approvals: GuestsOptions['approvals']) =>\n  (id: string): number =>\n    (approvals?.state.value ?? []).filter((item) => item.seat === id && item.state === 'pending')\n      .length;\n\nfunction shownSeats(\n  records: Record<string, SeatRecord>,\n  links: ReadonlyMap<string, number>,\n  at: number,\n  pendingOf: (id: string) => number\n): GuestSeat[] {\n  return Object.values(records)\n    .filter((record) => liveSeat(record, at))\n    .sort((a, b) => a.createdAt - b.createdAt || a.id.localeCompare(b.id))\n    .map((record) => ({\n      id: record.id,\n      label: record.label,\n      agentId: record.agentId,\n      createdAt: record.createdAt,\n      expiresAt: record.expiresAt,\n      gates: { ...record.gates },\n      connected: (links.get(record.id) ?? 0) > 0,\n      pending: pendingOf(record.id),\n    }));\n}\n\nexport async function createGuests(options: GuestsOptions): Promise<Guests> {\n  const { harness, agents } = options;\n  const now = options.now ?? Date.now;\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const guestPolicy = () => options.policy?.current().guests ?? DEFAULT_GUEST_POLICY;\n  const records: Record<string, SeatRecord> = await harness.commit(\n    async (tx) => copy((await tx.doc(GuestsDoc)).seats),\n    context\n  );\n  const links = new Map<string, number>();\n  const ended = new Set<(id: string) => void>();\n  const gone = new Set<string>();\n  const shown = () => shownSeats(records, links, now(), pendingIn(options.approvals));\n  const seats = replicatedState<GuestSeat[]>(shown());\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  const locked = keyedLine();\n  const cleanup = (record: SeatRecord, using: Context) =>\n    locked(record.id, async () => {\n      await withdrawQueued(harness, agents, record, using);\n      await options.approvals?.withdrawSeat(record.id, using);\n    });\n  const end = (id: string, using: Context = context): Promise<void> => {\n    const record = records[id];\n    if (gone.has(id) || !record) return Promise.resolve();\n    gone.add(id);\n    for (const listener of [...ended]) listener(id);\n    return cleanup(record, using);\n  };\n  const publish = () => {\n    const at = now();\n    for (const record of Object.values(records))\n      if (!liveSeat(record, at)) void end(record.id).catch(() => undefined);\n    seats.replace(context, shown());\n    if (timer) clearTimeout(timer);\n    timer = undefined;\n    const next = Math.min(\n      ...Object.values(records)\n        .filter((record) => liveSeat(record, at) && record.expiresAt !== null)\n        .map((record) => record.expiresAt as number)\n    );\n    if (Number.isFinite(next))\n      timer = setTimeout(publish, Math.min(Math.max(0, next - at), LONGEST_TIMER));\n  };\n  publish();\n  const write = (change: (seats: Record<string, SeatRecord>) => SeatRecord | undefined) =>\n    harness.commit(async (tx) => {\n      const doc = await tx.doc(GuestsDoc);\n      const changed = change(doc.seats);\n      return changed ? copy(changed) : undefined;\n    }, context);\n  const delivering = new Set<string>();\n  const deliverOne = (seat: string, item: Approval) =>\n    locked(seat, async () => {\n      const record = records[seat];\n      if (!record || !liveSeat(record, now())) return;\n      await deliverLocked(record, item);\n    });\n  const deliverLocked = async (record: SeatRecord, item: Approval) => {\n    const text = (item.detail as { text?: string }).text ?? '';\n    const requestId = `${GUEST_REQUEST}${record.id}:${item.id}`;\n    const sent = await deliver(record, text, item.id, requestId, agents, context);\n    if (sent.state !== 'submitted') return;\n    const changed = await write((all) => {\n      const kept = all[record.id];\n      if (!kept) return undefined;\n      kept.delivered = [...(kept.delivered ?? []), item.id].slice(-KEPT_DELIVERED);\n      return kept;\n    });\n    if (changed) records[record.id] = changed;\n  };\n  const approved = (items: readonly Approval[]) => {\n    for (const item of items) {\n      if (item.kind !== 'guest-message' || item.state !== 'approved' || !item.seat) continue;\n      const record = records[item.seat];\n      if (!record || !liveSeat(record, now()) || delivering.has(item.id)) continue;\n      if (record.delivered?.includes(item.id)) continue;\n      delivering.add(item.id);\n      void deliverOne(record.id, item).catch(() => undefined);\n    }\n  };\n  const offPending = options.approvals?.state.subscribe((items) => {\n    seats.replace(context, shown());\n    approved(items);\n  });\n  approved(options.approvals?.state.value ?? []);\n  const current = (guest: GuestPrincipal) => {\n    const record = records[guest.id];\n    return record && liveSeat(record, now()) && record.epoch === guest.epoch ? record : undefined;\n  };\n  return {\n    seats,\n    async open(draft, using) {\n      const at = now();\n      const problem = checkDraft(draft, at, guestPolicy());\n      if (problem) return { seat: null, error: problem };\n      if (!agents.state().cones[draft.agentId])\n        return { seat: null, error: `There is no cone ${draft.agentId}.` };\n      const record: SeatRecord = {\n        id: draft.id,\n        label: cleanLabel(draft.label),\n        agentId: draft.agentId,\n        expiresAt: draft.expiresAt,\n        gates: { messages: draft.gates.messages, tools: draft.gates.tools },\n        createdAt: at,\n        epoch: 1,\n        revoked: null,\n      };\n      const kept = await harness.commit(async (tx) => {\n        const doc = await tx.doc(GuestsDoc);\n        if (doc.seats[record.id]) return null;\n        prune(doc.seats, at);\n        doc.seats[record.id] = copy(record);\n        return copy(doc.seats);\n      }, using);\n      if (!kept) return { seat: null, error: 'That guest seat already exists.' };\n      for (const id of Object.keys(records)) delete records[id];\n      Object.assign(records, kept);\n      publish();\n      return { seat: shown().find((seat) => seat.id === record.id) as GuestSeat, error: null };\n    },\n    async revoke(id, using) {\n      const at = now();\n      const changed = await write((all) => {\n        const record = all[id];\n        if (!record || record.revoked !== null) return undefined;\n        record.revoked = at;\n        record.epoch += 1;\n        return record;\n      });\n      if (!changed) return { revoked: false };\n      records[id] = changed;\n      const ending = end(id, using);\n      publish();\n      await ending;\n      return { revoked: true };\n    },\n    admit(id, label) {\n      const record = records[id];\n      if (!record || !liveSeat(record, now()) || record.label !== cleanLabel(label)) return null;\n      return { id: record.id, name: record.label, epoch: record.epoch };\n    },\n    record: (id) => records[id],\n    current,\n    joined(id) {\n      links.set(id, (links.get(id) ?? 0) + 1);\n      seats.replace(context, shown());\n      let left = false;\n      return () => {\n        if (left) return;\n        left = true;\n        links.set(id, (links.get(id) ?? 1) - 1);\n        seats.replace(context, shown());\n      };\n    },\n    onEnd(listener) {\n      ended.add(listener);\n      return () => ended.delete(listener);\n    },\n    async propose(guest, request, using) {\n      const record = current(guest);\n      if (!record) return unanswered('revoked');\n      const prepared = await prepare(record, request);\n      if ('state' in prepared) return prepared;\n      return locked(record.id, async () => {\n        const still = current(guest);\n        return still ? place(still, prepared, options, using) : unanswered('revoked');\n      });\n    },\n    policy: guestPolicy,\n    dispose() {\n      if (timer) clearTimeout(timer);\n      offPending?.();\n      ended.clear();\n    },\n  };\n}\n"],
+  "mappings": "AAAA,SAA6C,uBAAuB;AACpE,SAAS,0BAA0B;AACnC,SAAuB,gBAAgB;AAIvC,SAAS,iBAAiB;AAE1B,SAAS,kBAAmC,oBAAoB;AAChE,SAAS,qBAAqB;AAC9B,SAAS,4BAA8C;AACvD;AAAA,EACE;AAAA,EACA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AAqCA,MAAM,eAAe;AAC5B,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,gBAAgB,KAAK,KAAK;AAEhC,MAAM,OAAO,CAAI,UAAgB,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAEjE,MAAM,aAAa,CAAC,YAA8B;AAAA,EAChD,OAAO;AAAA,EACP,cAAc;AAAA,EACd;AACF;AAEA,SAAS,MAAM,KAAiC,IAAY;AAC1D,aAAW,CAAC,IAAI,MAAM,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,UAAM,OAAO,OAAO,WAAW,OAAO;AACtC,QAAI,SAAS,QAAQ,KAAK,OAAO,YAAa,QAAO,IAAI,EAAE;AAAA,EAC7D;AACF;AAEA,eAAe,eACb,SACA,QACA,QACA,OACA;AACA,QAAM,eAAe,MAAM,OAAO,aAAa,OAAO,SAAS,KAAK;AACpE,MAAI,CAAC,aAAc;AACnB,QAAM,SAAS,MAAM,QAAQ;AAAA,IAC3B,OAAO,QACJ,MAAM,GAAG,IAAI,UAAU,aAAa,EAAE,GAAG,MACvC,OAAO,CAAC,SAAS;AAChB,YAAM,QAAQ,KAAK;AACnB,aAAO,OAAO,SAAS,oBAAoB,MAAM,MAAM,SAAS,OAAO;AAAA,IACzE,CAAC,EACA,IAAI,CAAC,SAAS,KAAK,EAAE;AAAA,IAC1B;AAAA,EACF;AACA,aAAW,MAAM,OAAQ,OAAM,QAAQ,gBAAgB,IAAI,OAAO,aAAa,EAAE;AACnF;AAEA,eAAe,QACb,QACA,MACA,UACA,WACA,QACA,OACmB;AACnB,QAAM,eAAe,MAAM,OAAO,aAAa,OAAO,SAAS,KAAK;AACpE,MAAI,CAAC,aAAc,QAAO,WAAW,MAAM;AAC3C,QAAM,OAAmB,EAAE,MAAM,OAAO,IAAI,MAAM,OAAO,OAAO,SAAS;AACzE,QAAM,YAAY,MAAM,aAAa;AAAA,IACnC;AAAA,MACE,MAAM;AAAA,MACN,SAAS,aAAa,OAAO,OAAO,IAAI;AAAA,MACxC,UAAU;AAAA,MACV,OAAO,EAAE,MAAM,kBAAkB,MAAM,EAAE,GAAG,KAAK,EAAE;AAAA,MACnD;AAAA,IACF;AAAA,IACA;AAAA,EACF;AACA,SAAO,EAAE,OAAO,aAAa,cAAc,OAAO,UAAU,EAAE,GAAG,QAAQ,KAAK;AAChF;AAIA,eAAe,QAAQ,QAAoB,SAAuD;AAChG,QAAM,OAAO,OAAO,SAAS,SAAS,WAAW,QAAQ,KAAK,KAAK,IAAI;AACvE,MAAI,CAAC,KAAM,QAAO,WAAW,OAAO;AACpC,MAAI,KAAK,SAAS,aAAc,QAAO,WAAW,UAAU;AAC5D,QAAM,QACJ,OAAO,QAAQ,cAAc,YAC7B,QAAQ,aACR,QAAQ,UAAU,UAAU,cACxB,QAAQ,YACR,OAAO,WAAW;AACxB,SAAO,EAAE,MAAM,MAAM,UAAU,IAAI,GAAG,WAAW,GAAG,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK,GAAG;AAC3F;AAEA,eAAe,MACb,QACA,UACA,SACA,OACmB;AACnB,QAAM,OAAO,OAAO,MAAM;AAC1B,MAAI,SAAS;AACX,WAAO,QAAQ,QAAQ,SAAS,MAAM,MAAM,SAAS,WAAW,QAAQ,QAAQ,KAAK;AACvF,MAAI,CAAC,QAAQ,UAAW,QAAO,WAAW,aAAa;AACvD,QAAM,OAAO,MAAM,QAAQ,UAAU;AAAA,IACnC;AAAA,MACE,MAAM;AAAA,MACN,MAAM,OAAO;AAAA,MACb,SAAS,OAAO;AAAA,MAChB,WAAW,EAAE,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,OAAO,GAAG;AAAA,MAChE,MAAM;AAAA,MACN,QAAQ,EAAE,MAAM,SAAS,MAAM,aAAa,CAAC,EAAE;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACA,MAAI,KAAK,UAAU,UAAW,QAAO,WAAW,KAAK,UAAU,KAAK,KAAK;AACzE,SAAO,EAAE,OAAO,WAAW,cAAc,MAAM,UAAU,KAAK,IAAI,QAAQ,KAAK;AACjF;AAEA,SAAS,YAAY;AACnB,QAAM,QAAQ,oBAAI,IAA8B;AAChD,SAAO,CAAI,IAAY,QAAsC;AAC3D,UAAM,QAAQ,MAAM,IAAI,EAAE,KAAK,QAAQ,QAAQ,GAAG,KAAK,KAAK,GAAG;AAC/D,UAAM,UAAU,KAAK,MAAM,MAAM,MAAS;AAC1C,UAAM,IAAI,IAAI,OAAO;AACrB,SAAK,QAAQ,KAAK,MAAM;AACtB,UAAI,MAAM,IAAI,EAAE,MAAM,QAAS,OAAM,OAAO,EAAE;AAAA,IAChD,CAAC;AACD,WAAO;AAAA,EACT;AACF;AAEA,MAAM,YACJ,CAAC,cACD,CAAC,QACE,WAAW,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,MAAM,KAAK,UAAU,SAAS,EACzF;AAEP,SAAS,WACP,SACA,OACA,IACA,WACa;AACb,SAAO,OAAO,OAAO,OAAO,EACzB,OAAO,CAAC,WAAW,SAAS,QAAQ,EAAE,CAAC,EACvC,KAAK,CAAC,GAAG,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC,EACpE,IAAI,CAAC,YAAY;AAAA,IAChB,IAAI,OAAO;AAAA,IACX,OAAO,OAAO;AAAA,IACd,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,IAClB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,IACzB,YAAY,MAAM,IAAI,OAAO,EAAE,KAAK,KAAK;AAAA,IACzC,SAAS,UAAU,OAAO,EAAE;AAAA,EAC9B,EAAE;AACN;AAEA,eAAsB,aAAa,SAAyC;AAC1E,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,cAAc,MAAM,QAAQ,QAAQ,QAAQ,EAAE,UAAU;AAC9D,QAAM,UAAsC,MAAM,QAAQ;AAAA,IACxD,OAAO,OAAO,MAAM,MAAM,GAAG,IAAI,SAAS,GAAG,KAAK;AAAA,IAClD;AAAA,EACF;AACA,QAAM,QAAQ,oBAAI,IAAoB;AACtC,QAAM,QAAQ,oBAAI,IAA0B;AAC5C,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,QAAQ,MAAM,WAAW,SAAS,OAAO,IAAI,GAAG,UAAU,QAAQ,SAAS,CAAC;AAClF,QAAM,QAAQ,gBAA6B,MAAM,CAAC;AAClD,MAAI;AACJ,QAAM,SAAS,UAAU;AACzB,QAAM,UAAU,CAAC,QAAoB,UACnC,OAAO,OAAO,IAAI,YAAY;AAC5B,UAAM,eAAe,SAAS,QAAQ,QAAQ,KAAK;AACnD,UAAM,QAAQ,WAAW,aAAa,OAAO,IAAI,KAAK;AAAA,EACxD,CAAC;AACH,QAAM,MAAM,CAAC,IAAY,QAAiB,YAA2B;AACnE,UAAM,SAAS,QAAQ,EAAE;AACzB,QAAI,KAAK,IAAI,EAAE,KAAK,CAAC,OAAQ,QAAO,QAAQ,QAAQ;AACpD,SAAK,IAAI,EAAE;AACX,eAAW,YAAY,CAAC,GAAG,KAAK,EAAG,UAAS,EAAE;AAC9C,WAAO,QAAQ,QAAQ,KAAK;AAAA,EAC9B;AACA,QAAM,UAAU,MAAM;AACpB,UAAM,KAAK,IAAI;AACf,eAAW,UAAU,OAAO,OAAO,OAAO;AACxC,UAAI,CAAC,SAAS,QAAQ,EAAE,EAAG,MAAK,IAAI,OAAO,EAAE,EAAE,MAAM,MAAM,MAAS;AACtE,UAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,QAAI,MAAO,cAAa,KAAK;AAC7B,YAAQ;AACR,UAAM,OAAO,KAAK;AAAA,MAChB,GAAG,OAAO,OAAO,OAAO,EACrB,OAAO,CAAC,WAAW,SAAS,QAAQ,EAAE,KAAK,OAAO,cAAc,IAAI,EACpE,IAAI,CAAC,WAAW,OAAO,SAAmB;AAAA,IAC/C;AACA,QAAI,OAAO,SAAS,IAAI;AACtB,cAAQ,WAAW,SAAS,KAAK,IAAI,KAAK,IAAI,GAAG,OAAO,EAAE,GAAG,aAAa,CAAC;AAAA,EAC/E;AACA,UAAQ;AACR,QAAM,QAAQ,CAAC,WACb,QAAQ,OAAO,OAAO,OAAO;AAC3B,UAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,UAAM,UAAU,OAAO,IAAI,KAAK;AAChC,WAAO,UAAU,KAAK,OAAO,IAAI;AAAA,EACnC,GAAG,OAAO;AACZ,QAAM,aAAa,oBAAI,IAAY;AACnC,QAAM,aAAa,CAAC,MAAc,SAChC,OAAO,MAAM,YAAY;AACvB,UAAM,SAAS,QAAQ,IAAI;AAC3B,QAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,EAAG;AACzC,UAAM,cAAc,QAAQ,IAAI;AAAA,EAClC,CAAC;AACH,QAAM,gBAAgB,OAAO,QAAoB,SAAmB;AAClE,UAAM,OAAQ,KAAK,OAA6B,QAAQ;AACxD,UAAM,YAAY,GAAG,aAAa,GAAG,OAAO,EAAE,IAAI,KAAK,EAAE;AACzD,UAAM,OAAO,MAAM,QAAQ,QAAQ,MAAM,KAAK,IAAI,WAAW,QAAQ,OAAO;AAC5E,QAAI,KAAK,UAAU,YAAa;AAChC,UAAM,UAAU,MAAM,MAAM,CAAC,QAAQ;AACnC,YAAM,OAAO,IAAI,OAAO,EAAE;AAC1B,UAAI,CAAC,KAAM,QAAO;AAClB,WAAK,YAAY,CAAC,GAAI,KAAK,aAAa,CAAC,GAAI,KAAK,EAAE,EAAE,MAAM,CAAC,cAAc;AAC3E,aAAO;AAAA,IACT,CAAC;AACD,QAAI,QAAS,SAAQ,OAAO,EAAE,IAAI;AAAA,EACpC;AACA,QAAM,WAAW,CAAC,UAA+B;AAC/C,eAAW,QAAQ,OAAO;AACxB,UAAI,KAAK,SAAS,mBAAmB,KAAK,UAAU,cAAc,CAAC,KAAK,KAAM;AAC9E,YAAM,SAAS,QAAQ,KAAK,IAAI;AAChC,UAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,KAAK,WAAW,IAAI,KAAK,EAAE,EAAG;AACpE,UAAI,OAAO,WAAW,SAAS,KAAK,EAAE,EAAG;AACzC,iBAAW,IAAI,KAAK,EAAE;AACtB,WAAK,WAAW,OAAO,IAAI,IAAI,EAAE,MAAM,MAAM,MAAS;AAAA,IACxD;AAAA,EACF;AACA,QAAM,aAAa,QAAQ,WAAW,MAAM,UAAU,CAAC,UAAU;AAC/D,UAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,aAAS,KAAK;AAAA,EAChB,CAAC;AACD,WAAS,QAAQ,WAAW,MAAM,SAAS,CAAC,CAAC;AAC7C,QAAM,UAAU,CAAC,UAA0B;AACzC,UAAM,SAAS,QAAQ,MAAM,EAAE;AAC/B,WAAO,UAAU,SAAS,QAAQ,IAAI,CAAC,KAAK,OAAO,UAAU,MAAM,QAAQ,SAAS;AAAA,EACtF;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM,KAAK,OAAO,OAAO;AACvB,YAAM,KAAK,IAAI;AACf,YAAM,UAAU,WAAW,OAAO,IAAI,YAAY,CAAC;AACnD,UAAI,QAAS,QAAO,EAAE,MAAM,MAAM,OAAO,QAAQ;AACjD,UAAI,CAAC,OAAO,MAAM,EAAE,MAAM,MAAM,OAAO;AACrC,eAAO,EAAE,MAAM,MAAM,OAAO,oBAAoB,MAAM,OAAO,IAAI;AACnE,YAAM,SAAqB;AAAA,QACzB,IAAI,MAAM;AAAA,QACV,OAAO,WAAW,MAAM,KAAK;AAAA,QAC7B,SAAS,MAAM;AAAA,QACf,WAAW,MAAM;AAAA,QACjB,OAAO,EAAE,UAAU,MAAM,MAAM,UAAU,OAAO,MAAM,MAAM,MAAM;AAAA,QAClE,WAAW;AAAA,QACX,OAAO;AAAA,QACP,SAAS;AAAA,MACX;AACA,YAAM,OAAO,MAAM,QAAQ,OAAO,OAAO,OAAO;AAC9C,cAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,YAAI,IAAI,MAAM,OAAO,EAAE,EAAG,QAAO;AACjC,cAAM,IAAI,OAAO,EAAE;AACnB,YAAI,MAAM,OAAO,EAAE,IAAI,KAAK,MAAM;AAClC,eAAO,KAAK,IAAI,KAAK;AAAA,MACvB,GAAG,KAAK;AACR,UAAI,CAAC,KAAM,QAAO,EAAE,MAAM,MAAM,OAAO,kCAAkC;AACzE,iBAAW,MAAM,OAAO,KAAK,OAAO,EAAG,QAAO,QAAQ,EAAE;AACxD,aAAO,OAAO,SAAS,IAAI;AAC3B,cAAQ;AACR,aAAO,EAAE,MAAM,MAAM,EAAE,KAAK,CAAC,SAAS,KAAK,OAAO,OAAO,EAAE,GAAgB,OAAO,KAAK;AAAA,IACzF;AAAA,IACA,MAAM,OAAO,IAAI,OAAO;AACtB,YAAM,KAAK,IAAI;AACf,YAAM,UAAU,MAAM,MAAM,CAAC,QAAQ;AACnC,cAAM,SAAS,IAAI,EAAE;AACrB,YAAI,CAAC,UAAU,OAAO,YAAY,KAAM,QAAO;AAC/C,eAAO,UAAU;AACjB,eAAO,SAAS;AAChB,eAAO;AAAA,MACT,CAAC;AACD,UAAI,CAAC,QAAS,QAAO,EAAE,SAAS,MAAM;AACtC,cAAQ,EAAE,IAAI;AACd,YAAM,SAAS,IAAI,IAAI,KAAK;AAC5B,cAAQ;AACR,YAAM;AACN,aAAO,EAAE,SAAS,KAAK;AAAA,IACzB;AAAA,IACA,MAAM,IAAI,OAAO;AACf,YAAM,SAAS,QAAQ,EAAE;AACzB,UAAI,CAAC,UAAU,CAAC,SAAS,QAAQ,IAAI,CAAC,KAAK,OAAO,UAAU,WAAW,KAAK,EAAG,QAAO;AACtF,aAAO,EAAE,IAAI,OAAO,IAAI,MAAM,OAAO,OAAO,OAAO,OAAO,MAAM;AAAA,IAClE;AAAA,IACA,QAAQ,CAAC,OAAO,QAAQ,EAAE;AAAA,IAC1B;AAAA,IACA,OAAO,IAAI;AACT,YAAM,IAAI,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;AACtC,YAAM,QAAQ,SAAS,MAAM,CAAC;AAC9B,UAAI,OAAO;AACX,aAAO,MAAM;AACX,YAAI,KAAM;AACV,eAAO;AACP,cAAM,IAAI,KAAK,MAAM,IAAI,EAAE,KAAK,KAAK,CAAC;AACtC,cAAM,QAAQ,SAAS,MAAM,CAAC;AAAA,MAChC;AAAA,IACF;AAAA,IACA,MAAM,UAAU;AACd,YAAM,IAAI,QAAQ;AAClB,aAAO,MAAM,MAAM,OAAO,QAAQ;AAAA,IACpC;AAAA,IACA,MAAM,QAAQ,OAAO,SAAS,OAAO;AACnC,YAAM,SAAS,QAAQ,KAAK;AAC5B,UAAI,CAAC,OAAQ,QAAO,WAAW,SAAS;AACxC,YAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO;AAC9C,UAAI,WAAW,SAAU,QAAO;AAChC,aAAO,OAAO,OAAO,IAAI,YAAY;AACnC,cAAM,QAAQ,QAAQ,KAAK;AAC3B,eAAO,QAAQ,MAAM,OAAO,UAAU,SAAS,KAAK,IAAI,WAAW,SAAS;AAAA,MAC9E,CAAC;AAAA,IACH;AAAA,IACA,QAAQ;AAAA,IACR,UAAU;AACR,UAAI,MAAO,cAAa,KAAK;AAC7B,mBAAa;AACb,YAAM,MAAM;AAAA,IACd;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/guests/policy.js

@@ -0,0 +1,75 @@
+const GATE_KINDS = ["user", "agent", "cone", "scoop", "off"];
+const DEFAULT_GUEST_POLICY = {
+  manageGuests: "deny",
+  allowedToolGates: ["user", "agent", "scoop"],
+  allowedMessageGates: ["user", "agent", "cone", "scoop", "off"],
+  maxSeatDays: 30,
+  always: { messages: false, tools: false }
+};
+const MAX_SEAT_DAYS = 365;
+const DAY_MS = 24 * 60 * 60 * 1e3;
+const GUESTS_MANAGE_DENIED = "The owner's guest policy doesn't let guests manage guests.";
+const GUESTS_MANAGE_LATER = "Guests can't manage guests yet, whatever the policy says.";
+const POLICY_MANAGE_DENY_ONLY = "manageGuests can only be deny: guests can't manage guests yet.";
+const gateKind = (gate) => gate.startsWith("scoop:") ? "scoop" : gate;
+const BY = {
+  user: "a person",
+  agent: "the judge",
+  scoop: "a scoop",
+  cone: "the cone",
+  off: ""
+};
+function gateRefusal(what, allowed) {
+  const by = allowed.filter((kind) => kind !== "off").map((kind) => BY[kind]);
+  if (!by.length) return `The owner's guest policy allows no review for ${what}.`;
+  const listed = by.length > 1 ? `${by.slice(0, -1).join(", ")} or ${by.at(-1)}` : by[0];
+  return `${what[0]?.toUpperCase()}${what.slice(1)} need a review: by ${listed}.`;
+}
+const gatesOf = (name) => (value, next) => {
+  if (!Array.isArray(value) || !value.every((kind) => GATE_KINDS.includes(kind)))
+    return `${name} lists gates from ${GATE_KINDS.join(", ")}.`;
+  next[name] = GATE_KINDS.filter((kind) => value.includes(kind));
+  return null;
+};
+const ALWAYS_KEYS = /* @__PURE__ */ new Set(["messages", "tools"]);
+const ENTRIES = {
+  manageGuests: (value) => value === "deny" ? null : POLICY_MANAGE_DENY_ONLY,
+  allowedToolGates: gatesOf("allowedToolGates"),
+  allowedMessageGates: gatesOf("allowedMessageGates"),
+  maxSeatDays(value, next) {
+    if (!Number.isInteger(value) || value < 1 || value > MAX_SEAT_DAYS)
+      return `maxSeatDays is a whole number from 1 to ${MAX_SEAT_DAYS}.`;
+    next.maxSeatDays = value;
+    return null;
+  },
+  always(value, next) {
+    const given = value && typeof value === "object" && !Array.isArray(value) ? value : null;
+    if (!given || Object.entries(given).some(([key, on]) => !ALWAYS_KEYS.has(key) || typeof on !== "boolean"))
+      return "always says, for messages and tools, true or false.";
+    next.always = { ...next.always, ...given };
+    return null;
+  }
+};
+function changedGuests(next, change) {
+  if (!change || typeof change !== "object" || Array.isArray(change))
+    return "The guests policy is an object of policy entries.";
+  for (const [name, value] of Object.entries(change)) {
+    const entry = Object.hasOwn(ENTRIES, name) ? ENTRIES[name] : void 0;
+    const error = entry ? entry(value, next) : `There is no guest policy entry ${name}.`;
+    if (error) return error;
+  }
+  return null;
+}
+export {
+  DAY_MS,
+  DEFAULT_GUEST_POLICY,
+  GATE_KINDS,
+  GUESTS_MANAGE_DENIED,
+  GUESTS_MANAGE_LATER,
+  MAX_SEAT_DAYS,
+  POLICY_MANAGE_DENY_ONLY,
+  changedGuests,
+  gateKind,
+  gateRefusal
+};
+//# sourceMappingURL=policy.js.map

package/dist/guests/policy.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/guests/policy.ts"],
+  "sourcesContent": ["import type { ApprovalTier } from '../approvals/record.ts';\n\nexport type GateKind = 'user' | 'agent' | 'scoop' | 'cone' | 'off';\n\nexport type GuestPolicy = {\n  manageGuests: 'deny' | ApprovalTier;\n  allowedToolGates: GateKind[];\n  allowedMessageGates: GateKind[];\n  maxSeatDays: number;\n  always: { messages: boolean; tools: boolean };\n};\n\nexport type GuestPolicyChange = Partial<GuestPolicy>;\n\nexport const GATE_KINDS: readonly GateKind[] = ['user', 'agent', 'cone', 'scoop', 'off'];\n\nexport const DEFAULT_GUEST_POLICY: GuestPolicy = {\n  manageGuests: 'deny',\n  allowedToolGates: ['user', 'agent', 'scoop'],\n  allowedMessageGates: ['user', 'agent', 'cone', 'scoop', 'off'],\n  maxSeatDays: 30,\n  always: { messages: false, tools: false },\n};\n\nexport const MAX_SEAT_DAYS = 365;\nexport const DAY_MS = 24 * 60 * 60 * 1000;\n\nexport const GUESTS_MANAGE_DENIED = \"The owner's guest policy doesn't let guests manage guests.\";\nexport const GUESTS_MANAGE_LATER = \"Guests can't manage guests yet, whatever the policy says.\";\nexport const POLICY_MANAGE_DENY_ONLY =\n  \"manageGuests can only be deny: guests can't manage guests yet.\";\n\nexport const gateKind = (gate: string): GateKind =>\n  gate.startsWith('scoop:') ? 'scoop' : (gate as GateKind);\n\nconst BY: Record<GateKind, string> = {\n  user: 'a person',\n  agent: 'the judge',\n  scoop: 'a scoop',\n  cone: 'the cone',\n  off: '',\n};\n\nexport function gateRefusal(what: string, allowed: readonly GateKind[]): string {\n  const by = allowed.filter((kind) => kind !== 'off').map((kind) => BY[kind]);\n  if (!by.length) return `The owner's guest policy allows no review for ${what}.`;\n  const listed = by.length > 1 ? `${by.slice(0, -1).join(', ')} or ${by.at(-1)}` : by[0];\n  return `${what[0]?.toUpperCase()}${what.slice(1)} need a review: by ${listed}.`;\n}\n\ntype Entry = (value: unknown, next: GuestPolicy) => string | null;\n\nconst gatesOf =\n  (name: 'allowedToolGates' | 'allowedMessageGates'): Entry =>\n  (value, next) => {\n    if (!Array.isArray(value) || !value.every((kind) => GATE_KINDS.includes(kind as GateKind)))\n      return `${name} lists gates from ${GATE_KINDS.join(', ')}.`;\n    next[name] = GATE_KINDS.filter((kind) => value.includes(kind));\n    return null;\n  };\n\nconst ALWAYS_KEYS = new Set(['messages', 'tools']);\n\nconst ENTRIES: Record<keyof GuestPolicy, Entry> = {\n  manageGuests: (value) => (value === 'deny' ? null : POLICY_MANAGE_DENY_ONLY),\n  allowedToolGates: gatesOf('allowedToolGates'),\n  allowedMessageGates: gatesOf('allowedMessageGates'),\n  maxSeatDays(value, next) {\n    if (!Number.isInteger(value) || (value as number) < 1 || (value as number) > MAX_SEAT_DAYS)\n      return `maxSeatDays is a whole number from 1 to ${MAX_SEAT_DAYS}.`;\n    next.maxSeatDays = value as number;\n    return null;\n  },\n  always(value, next) {\n    const given = value && typeof value === 'object' && !Array.isArray(value) ? value : null;\n    if (\n      !given ||\n      Object.entries(given).some(([key, on]) => !ALWAYS_KEYS.has(key) || typeof on !== 'boolean')\n    )\n      return 'always says, for messages and tools, true or false.';\n    next.always = { ...next.always, ...(given as Partial<GuestPolicy['always']>) };\n    return null;\n  },\n};\n\nexport function changedGuests(next: GuestPolicy, change: unknown): string | null {\n  if (!change || typeof change !== 'object' || Array.isArray(change))\n    return 'The guests policy is an object of policy entries.';\n  for (const [name, value] of Object.entries(change)) {\n    const entry = Object.hasOwn(ENTRIES, name) ? ENTRIES[name as keyof GuestPolicy] : undefined;\n    const error = entry ? entry(value, next) : `There is no guest policy entry ${name}.`;\n    if (error) return error;\n  }\n  return null;\n}\n"],
+  "mappings": "AAcO,MAAM,aAAkC,CAAC,QAAQ,SAAS,QAAQ,SAAS,KAAK;AAEhF,MAAM,uBAAoC;AAAA,EAC/C,cAAc;AAAA,EACd,kBAAkB,CAAC,QAAQ,SAAS,OAAO;AAAA,EAC3C,qBAAqB,CAAC,QAAQ,SAAS,QAAQ,SAAS,KAAK;AAAA,EAC7D,aAAa;AAAA,EACb,QAAQ,EAAE,UAAU,OAAO,OAAO,MAAM;AAC1C;AAEO,MAAM,gBAAgB;AACtB,MAAM,SAAS,KAAK,KAAK,KAAK;AAE9B,MAAM,uBAAuB;AAC7B,MAAM,sBAAsB;AAC5B,MAAM,0BACX;AAEK,MAAM,WAAW,CAAC,SACvB,KAAK,WAAW,QAAQ,IAAI,UAAW;AAEzC,MAAM,KAA+B;AAAA,EACnC,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AAAA,EACP,MAAM;AAAA,EACN,KAAK;AACP;AAEO,SAAS,YAAY,MAAc,SAAsC;AAC9E,QAAM,KAAK,QAAQ,OAAO,CAAC,SAAS,SAAS,KAAK,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;AAC1E,MAAI,CAAC,GAAG,OAAQ,QAAO,iDAAiD,IAAI;AAC5E,QAAM,SAAS,GAAG,SAAS,IAAI,GAAG,GAAG,MAAM,GAAG,EAAE,EAAE,KAAK,IAAI,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,GAAG,CAAC;AACrF,SAAO,GAAG,KAAK,CAAC,GAAG,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,sBAAsB,MAAM;AAC9E;AAIA,MAAM,UACJ,CAAC,SACD,CAAC,OAAO,SAAS;AACf,MAAI,CAAC,MAAM,QAAQ,KAAK,KAAK,CAAC,MAAM,MAAM,CAAC,SAAS,WAAW,SAAS,IAAgB,CAAC;AACvF,WAAO,GAAG,IAAI,qBAAqB,WAAW,KAAK,IAAI,CAAC;AAC1D,OAAK,IAAI,IAAI,WAAW,OAAO,CAAC,SAAS,MAAM,SAAS,IAAI,CAAC;AAC7D,SAAO;AACT;AAEF,MAAM,cAAc,oBAAI,IAAI,CAAC,YAAY,OAAO,CAAC;AAEjD,MAAM,UAA4C;AAAA,EAChD,cAAc,CAAC,UAAW,UAAU,SAAS,OAAO;AAAA,EACpD,kBAAkB,QAAQ,kBAAkB;AAAA,EAC5C,qBAAqB,QAAQ,qBAAqB;AAAA,EAClD,YAAY,OAAO,MAAM;AACvB,QAAI,CAAC,OAAO,UAAU,KAAK,KAAM,QAAmB,KAAM,QAAmB;AAC3E,aAAO,2CAA2C,aAAa;AACjE,SAAK,cAAc;AACnB,WAAO;AAAA,EACT;AAAA,EACA,OAAO,OAAO,MAAM;AAClB,UAAM,QAAQ,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,QAAQ;AACpF,QACE,CAAC,SACD,OAAO,QAAQ,KAAK,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,IAAI,GAAG,KAAK,OAAO,OAAO,SAAS;AAE1F,aAAO;AACT,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAI,MAAyC;AAC7E,WAAO;AAAA,EACT;AACF;AAEO,SAAS,cAAc,MAAmB,QAAgC;AAC/E,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM;AAC/D,WAAO;AACT,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,UAAM,QAAQ,OAAO,OAAO,SAAS,IAAI,IAAI,QAAQ,IAAyB,IAAI;AAClF,UAAM,QAAQ,QAAQ,MAAM,OAAO,IAAI,IAAI,kCAAkC,IAAI;AACjF,QAAI,MAAO,QAAO;AAAA,EACpB;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/guests/seats.js

@@ -1,11 +1,18 @@
 import { defineDoc } from "@earendil-works/pi-durable";
+import {
+  DAY_MS,
+  DEFAULT_GUEST_POLICY,
+  gateKind,
+  gateRefusal,
+  MAX_SEAT_DAYS
+} from "./policy.js";
 const GuestsDoc = defineDoc({
   kind: "slicc.guests",
   version: 1,
   scope: "session",
   initial: () => ({ seats: {} })
 });
-const MAX_SEAT_MS = 30 * 24 * 60 * 60 * 1e3;
+const MAX_SEAT_MS = MAX_SEAT_DAYS * DAY_MS;
 const MAX_LABEL = 64;
 const MAX_ID = 256;
 function cleanLabel(raw) {
@@ -16,20 +23,23 @@ function isGate(value) {
   if (value === "user" || value === "agent" || value === "cone" || value === "off") return true;
   return /^scoop:\S+$/.test(value);
 }
-function checkDraft(draft, now) {
+function checkDraft(draft, now, policy = DEFAULT_GUEST_POLICY) {
   if (typeof draft?.id !== "string" || !draft.id || draft.id.length > MAX_ID)
     return "A guest seat needs an id from the tray hub.";
   if (!cleanLabel(draft.label)) return "A guest seat needs a label.";
   if (!isGate(draft.gates?.messages) || !isGate(draft.gates?.tools))
     return "A guest seat needs a known gate for messages and for tools.";
-  if (draft.gates.tools === "off" || draft.gates.tools === "cone")
-    return "A guest's tool calls need a review: by a person, the judge or a scoop.";
+  if (!policy.allowedMessageGates.includes(gateKind(draft.gates.messages)))
+    return gateRefusal("a guest's messages", policy.allowedMessageGates);
+  if (!policy.allowedToolGates.includes(gateKind(draft.gates.tools)))
+    return gateRefusal("a guest's tool calls", policy.allowedToolGates);
   const { expiresAt } = draft;
   if (expiresAt !== null && (typeof expiresAt !== "number" || !Number.isFinite(expiresAt)))
     return "A guest seat expires at a time, or never.";
   if (expiresAt !== null && expiresAt <= now) return "That expiry has already passed.";
-  if (expiresAt !== null && expiresAt - now > MAX_SEAT_MS)
-    return "A guest seat lasts at most 30 days.";
+  const days = policy.maxSeatDays;
+  if (expiresAt !== null && expiresAt - now > days * DAY_MS)
+    return `A guest seat lasts at most ${days} ${days === 1 ? "day" : "days"}.`;
   return null;
 }
 function liveSeat(seat, now) {

package/dist/guests/seats.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/guests/seats.ts"],
-  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\nimport type { ApprovalTier } from '../approvals/record.ts';\n\nexport type GuestGate = ApprovalTier | 'off';\n\nexport type GuestGates = {\n  messages: GuestGate;\n  tools: GuestGate;\n};\n\nexport type GuestDraft = {\n  id: string;\n  label: string;\n  agentId: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n};\n\nexport type SeatRecord = GuestDraft & {\n  createdAt: number;\n  epoch: number;\n  revoked: number | null;\n  delivered?: string[];\n};\n\nexport interface GuestSeat {\n  id: string;\n  label: string;\n  agentId: string;\n  createdAt: number;\n  expiresAt: number | null;\n  gates: GuestGates;\n  connected: boolean;\n  pending: number;\n}\n\nexport type GuestsState = { seats: Record<string, SeatRecord> };\n\nexport const GuestsDoc = defineDoc<GuestsState>({\n  kind: 'slicc.guests',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ seats: {} }),\n});\n\nexport const MAX_SEAT_MS = 30 * 24 * 60 * 60 * 1000;\nexport const MAX_LABEL = 64;\nconst MAX_ID = 256;\n\nexport function cleanLabel(raw: unknown): string {\n  return String(raw ?? '')\n    .replace(/[\\p{Cc}\\p{Cf}]/gu, ' ')\n    .replace(/\\s+/g, ' ')\n    .trim()\n    .slice(0, MAX_LABEL);\n}\n\nexport function isGate(value: unknown): value is GuestGate {\n  if (typeof value !== 'string') return false;\n  if (value === 'user' || value === 'agent' || value === 'cone' || value === 'off') return true;\n  return /^scoop:\\S+$/.test(value);\n}\n\nexport function checkDraft(draft: GuestDraft, now: number): string | null {\n  if (typeof draft?.id !== 'string' || !draft.id || draft.id.length > MAX_ID)\n    return 'A guest seat needs an id from the tray hub.';\n  if (!cleanLabel(draft.label)) return 'A guest seat needs a label.';\n  if (!isGate(draft.gates?.messages) || !isGate(draft.gates?.tools))\n    return 'A guest seat needs a known gate for messages and for tools.';\n  if (draft.gates.tools === 'off' || draft.gates.tools === 'cone')\n    return \"A guest's tool calls need a review: by a person, the judge or a scoop.\";\n  const { expiresAt } = draft;\n  if (expiresAt !== null && (typeof expiresAt !== 'number' || !Number.isFinite(expiresAt)))\n    return 'A guest seat expires at a time, or never.';\n  if (expiresAt !== null && expiresAt <= now) return 'That expiry has already passed.';\n  if (expiresAt !== null && expiresAt - now > MAX_SEAT_MS)\n    return 'A guest seat lasts at most 30 days.';\n  return null;\n}\n\nexport function liveSeat(seat: SeatRecord | undefined, now: number): boolean {\n  return Boolean(\n    seat && seat.revoked === null && (seat.expiresAt === null || seat.expiresAt > now)\n  );\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB;AAsCnB,MAAM,YAAY,UAAuB;AAAA,EAC9C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAEM,MAAM,cAAc,KAAK,KAAK,KAAK,KAAK;AACxC,MAAM,YAAY;AACzB,MAAM,SAAS;AAER,SAAS,WAAW,KAAsB;AAC/C,SAAO,OAAO,OAAO,EAAE,EACpB,QAAQ,oBAAoB,GAAG,EAC/B,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,SAAS;AACvB;AAEO,SAAS,OAAO,OAAoC;AACzD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,UAAU,UAAU,MAAO,QAAO;AACzF,SAAO,cAAc,KAAK,KAAK;AACjC;AAEO,SAAS,WAAW,OAAmB,KAA4B;AACxE,MAAI,OAAO,OAAO,OAAO,YAAY,CAAC,MAAM,MAAM,MAAM,GAAG,SAAS;AAClE,WAAO;AACT,MAAI,CAAC,WAAW,MAAM,KAAK,EAAG,QAAO;AACrC,MAAI,CAAC,OAAO,MAAM,OAAO,QAAQ,KAAK,CAAC,OAAO,MAAM,OAAO,KAAK;AAC9D,WAAO;AACT,MAAI,MAAM,MAAM,UAAU,SAAS,MAAM,MAAM,UAAU;AACvD,WAAO;AACT,QAAM,EAAE,UAAU,IAAI;AACtB,MAAI,cAAc,SAAS,OAAO,cAAc,YAAY,CAAC,OAAO,SAAS,SAAS;AACpF,WAAO;AACT,MAAI,cAAc,QAAQ,aAAa,IAAK,QAAO;AACnD,MAAI,cAAc,QAAQ,YAAY,MAAM;AAC1C,WAAO;AACT,SAAO;AACT;AAEO,SAAS,SAAS,MAA8B,KAAsB;AAC3E,SAAO;AAAA,IACL,QAAQ,KAAK,YAAY,SAAS,KAAK,cAAc,QAAQ,KAAK,YAAY;AAAA,EAChF;AACF;",
+  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\nimport type { ApprovalTier } from '../approvals/record.ts';\nimport {\n  DAY_MS,\n  DEFAULT_GUEST_POLICY,\n  type GuestPolicy,\n  gateKind,\n  gateRefusal,\n  MAX_SEAT_DAYS,\n} from './policy.ts';\n\nexport type GuestGate = ApprovalTier | 'off';\n\nexport type GuestGates = {\n  messages: GuestGate;\n  tools: GuestGate;\n};\n\nexport type GuestDraft = {\n  id: string;\n  label: string;\n  agentId: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n};\n\nexport type SeatRecord = GuestDraft & {\n  createdAt: number;\n  epoch: number;\n  revoked: number | null;\n  delivered?: string[];\n};\n\nexport interface GuestSeat {\n  id: string;\n  label: string;\n  agentId: string;\n  createdAt: number;\n  expiresAt: number | null;\n  gates: GuestGates;\n  connected: boolean;\n  pending: number;\n}\n\nexport type GuestsState = { seats: Record<string, SeatRecord> };\n\nexport const GuestsDoc = defineDoc<GuestsState>({\n  kind: 'slicc.guests',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ seats: {} }),\n});\n\nexport const MAX_SEAT_MS = MAX_SEAT_DAYS * DAY_MS;\nexport const MAX_LABEL = 64;\nconst MAX_ID = 256;\n\nexport function cleanLabel(raw: unknown): string {\n  return String(raw ?? '')\n    .replace(/[\\p{Cc}\\p{Cf}]/gu, ' ')\n    .replace(/\\s+/g, ' ')\n    .trim()\n    .slice(0, MAX_LABEL);\n}\n\nexport function isGate(value: unknown): value is GuestGate {\n  if (typeof value !== 'string') return false;\n  if (value === 'user' || value === 'agent' || value === 'cone' || value === 'off') return true;\n  return /^scoop:\\S+$/.test(value);\n}\n\nexport function checkDraft(\n  draft: GuestDraft,\n  now: number,\n  policy: GuestPolicy = DEFAULT_GUEST_POLICY\n): string | null {\n  if (typeof draft?.id !== 'string' || !draft.id || draft.id.length > MAX_ID)\n    return 'A guest seat needs an id from the tray hub.';\n  if (!cleanLabel(draft.label)) return 'A guest seat needs a label.';\n  if (!isGate(draft.gates?.messages) || !isGate(draft.gates?.tools))\n    return 'A guest seat needs a known gate for messages and for tools.';\n  if (!policy.allowedMessageGates.includes(gateKind(draft.gates.messages)))\n    return gateRefusal(\"a guest's messages\", policy.allowedMessageGates);\n  if (!policy.allowedToolGates.includes(gateKind(draft.gates.tools)))\n    return gateRefusal(\"a guest's tool calls\", policy.allowedToolGates);\n  const { expiresAt } = draft;\n  if (expiresAt !== null && (typeof expiresAt !== 'number' || !Number.isFinite(expiresAt)))\n    return 'A guest seat expires at a time, or never.';\n  if (expiresAt !== null && expiresAt <= now) return 'That expiry has already passed.';\n  const days = policy.maxSeatDays;\n  if (expiresAt !== null && expiresAt - now > days * DAY_MS)\n    return `A guest seat lasts at most ${days} ${days === 1 ? 'day' : 'days'}.`;\n  return null;\n}\n\nexport function liveSeat(seat: SeatRecord | undefined, now: number): boolean {\n  return Boolean(\n    seat && seat.revoked === null && (seat.expiresAt === null || seat.expiresAt > now)\n  );\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAE1B;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAqCA,MAAM,YAAY,UAAuB;AAAA,EAC9C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAEM,MAAM,cAAc,gBAAgB;AACpC,MAAM,YAAY;AACzB,MAAM,SAAS;AAER,SAAS,WAAW,KAAsB;AAC/C,SAAO,OAAO,OAAO,EAAE,EACpB,QAAQ,oBAAoB,GAAG,EAC/B,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,SAAS;AACvB;AAEO,SAAS,OAAO,OAAoC;AACzD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,UAAU,UAAU,MAAO,QAAO;AACzF,SAAO,cAAc,KAAK,KAAK;AACjC;AAEO,SAAS,WACd,OACA,KACA,SAAsB,sBACP;AACf,MAAI,OAAO,OAAO,OAAO,YAAY,CAAC,MAAM,MAAM,MAAM,GAAG,SAAS;AAClE,WAAO;AACT,MAAI,CAAC,WAAW,MAAM,KAAK,EAAG,QAAO;AACrC,MAAI,CAAC,OAAO,MAAM,OAAO,QAAQ,KAAK,CAAC,OAAO,MAAM,OAAO,KAAK;AAC9D,WAAO;AACT,MAAI,CAAC,OAAO,oBAAoB,SAAS,SAAS,MAAM,MAAM,QAAQ,CAAC;AACrE,WAAO,YAAY,sBAAsB,OAAO,mBAAmB;AACrE,MAAI,CAAC,OAAO,iBAAiB,SAAS,SAAS,MAAM,MAAM,KAAK,CAAC;AAC/D,WAAO,YAAY,wBAAwB,OAAO,gBAAgB;AACpE,QAAM,EAAE,UAAU,IAAI;AACtB,MAAI,cAAc,SAAS,OAAO,cAAc,YAAY,CAAC,OAAO,SAAS,SAAS;AACpF,WAAO;AACT,MAAI,cAAc,QAAQ,aAAa,IAAK,QAAO;AACnD,QAAM,OAAO,OAAO;AACpB,MAAI,cAAc,QAAQ,YAAY,MAAM,OAAO;AACjD,WAAO,8BAA8B,IAAI,IAAI,SAAS,IAAI,QAAQ,MAAM;AAC1E,SAAO;AACT;AAEO,SAAS,SAAS,MAA8B,KAAsB;AAC3E,SAAO;AAAA,IACL,QAAQ,KAAK,YAAY,SAAS,KAAK,cAAc,QAAQ,KAAK,YAAY;AAAA,EAChF;AACF;",
   "names": []
 }

package/dist/guests/serve.js

@@ -1,5 +1,6 @@
-import { replicatedState } from "@earendil-works/chord";
+import { forbidden, replicatedState } from "@earendil-works/chord";
 import { PortLink } from "../wire.js";
+import { GUESTS_MANAGE_DENIED, GUESTS_MANAGE_LATER } from "./policy.js";
 import { guestView } from "./view.js";
 function proposalsOf(items, seat) {
   return (items ?? []).filter((item) => item.kind === "guest-message" && item.seat === seat).map((item) => ({
@@ -11,6 +12,9 @@ function proposalsOf(items, seat) {
     decidedAt: item.decidedAt ?? null
   }));
 }
+const managing = (guests) => Promise.reject(
+  forbidden(guests.policy().manageGuests === "deny" ? GUESTS_MANAGE_DENIED : GUESTS_MANAGE_LATER)
+);
 function guestOpener(guests, agents, views, context, approvals) {
   return (principal) => {
     const record = guests.current(principal);
@@ -44,7 +48,9 @@ function guestOpener(guests, agents, views, context, approvals) {
         transcript,
         seat,
         proposals,
-        propose: (request, using) => guests.propose(principal, request, using)
+        propose: (request, using) => guests.propose(principal, request, using),
+        guestOpen: () => managing(guests),
+        guestRevoke: () => managing(guests)
       },
       dispose() {
         off();

package/dist/guests/serve.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/guests/serve.ts"],
-  "sourcesContent": ["import type { Context, Host, ReplicatedState } from '@earendil-works/chord';\nimport { replicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Agents } from '../agents.ts';\nimport type { Approval } from '../approvals/index.ts';\nimport type { AgentGuest, GuestProposal, GuestShown } from '../services.ts';\nimport type { AgentPrincipal, GuestPrincipal } from '../serving.ts';\nimport { type PortEndpoint, PortLink } from '../wire.ts';\nimport type { Guests } from './index.ts';\nimport { guestView } from './view.ts';\n\nexport function proposalsOf(items: readonly Approval[] | undefined, seat: string): GuestProposal[] {\n  return (items ?? [])\n    .filter((item) => item.kind === 'guest-message' && item.seat === seat)\n    .map((item) => ({\n      id: item.id,\n      text: (item.detail as { text?: string }).text ?? '',\n      state: item.state,\n      reason: item.reason ?? null,\n      createdAt: item.createdAt,\n      decidedAt: item.decidedAt ?? null,\n    }));\n}\n\nexport function guestOpener(\n  guests: Guests,\n  agents: Pick<Agents, 'state'>,\n  views: ReplicatedState<Record<string, ConversationView>>,\n  context: Context,\n  approvals?: ReplicatedState<Approval[]>\n) {\n  return (principal: GuestPrincipal): { value: AgentGuest; dispose(): void } | undefined => {\n    const record = guests.current(principal);\n    if (!record) return undefined;\n    const pick = (all: Record<string, ConversationView> | undefined) => all?.[record.agentId];\n    let shown = pick(views.value);\n    const transcript = replicatedState<ConversationView>(guestView(shown, record.id));\n    const off = views.subscribe((all) => {\n      if (pick(all) === shown) return;\n      shown = pick(all);\n      transcript.replace(context, guestView(shown, record.id));\n    });\n    const seat = replicatedState<GuestShown>({\n      id: record.id,\n      label: record.label,\n      agentId: record.agentId,\n      name: agents.state().cones[record.agentId]?.name ?? record.agentId,\n      expiresAt: record.expiresAt,\n      gates: { ...record.gates },\n    });\n    let listed = JSON.stringify(proposalsOf(approvals?.value, record.id));\n    const proposals = replicatedState<GuestProposal[]>(JSON.parse(listed) as GuestProposal[]);\n    const offProposals = approvals?.subscribe((items) => {\n      const next = JSON.stringify(proposalsOf(items, record.id));\n      if (next === listed) return;\n      listed = next;\n      proposals.replace(context, JSON.parse(next) as GuestProposal[]);\n    });\n    return {\n      value: {\n        transcript,\n        seat,\n        proposals,\n        propose: (request, using) => guests.propose(principal, request, using),\n      },\n      dispose() {\n        off();\n        offProposals?.();\n      },\n    };\n  };\n}\n\nexport function admitGuest(\n  guests: Guests,\n  endpoint: PortEndpoint,\n  asked: { id: string; label: string },\n  serverId: string,\n  link: number,\n  host: Pick<Host, 'accept'>\n): void {\n  const port = new PortLink(endpoint);\n  const guest = guests.admit(String(asked.id), String(asked.label));\n  if (!guest) {\n    port.close('this guest seat is not valid');\n    return;\n  }\n  void port.ended.then(guests.joined(guest.id));\n  port.greet(serverId);\n  host.accept(port, { principal: { seat: 'guest', link, guest } satisfies AgentPrincipal });\n}\n"],
-  "mappings": "AACA,SAAS,uBAAuB;AAMhC,SAA4B,gBAAgB;AAE5C,SAAS,iBAAiB;AAEnB,SAAS,YAAY,OAAwC,MAA+B;AACjG,UAAQ,SAAS,CAAC,GACf,OAAO,CAAC,SAAS,KAAK,SAAS,mBAAmB,KAAK,SAAS,IAAI,EACpE,IAAI,CAAC,UAAU;AAAA,IACd,IAAI,KAAK;AAAA,IACT,MAAO,KAAK,OAA6B,QAAQ;AAAA,IACjD,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK,UAAU;AAAA,IACvB,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK,aAAa;AAAA,EAC/B,EAAE;AACN;AAEO,SAAS,YACd,QACA,QACA,OACA,SACA,WACA;AACA,SAAO,CAAC,cAAkF;AACxF,UAAM,SAAS,OAAO,QAAQ,SAAS;AACvC,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,OAAO,CAAC,QAAsD,MAAM,OAAO,OAAO;AACxF,QAAI,QAAQ,KAAK,MAAM,KAAK;AAC5B,UAAM,aAAa,gBAAkC,UAAU,OAAO,OAAO,EAAE,CAAC;AAChF,UAAM,MAAM,MAAM,UAAU,CAAC,QAAQ;AACnC,UAAI,KAAK,GAAG,MAAM,MAAO;AACzB,cAAQ,KAAK,GAAG;AAChB,iBAAW,QAAQ,SAAS,UAAU,OAAO,OAAO,EAAE,CAAC;AAAA,IACzD,CAAC;AACD,UAAM,OAAO,gBAA4B;AAAA,MACvC,IAAI,OAAO;AAAA,MACX,OAAO,OAAO;AAAA,MACd,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO,MAAM,EAAE,MAAM,OAAO,OAAO,GAAG,QAAQ,OAAO;AAAA,MAC3D,WAAW,OAAO;AAAA,MAClB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,IAC3B,CAAC;AACD,QAAI,SAAS,KAAK,UAAU,YAAY,WAAW,OAAO,OAAO,EAAE,CAAC;AACpE,UAAM,YAAY,gBAAiC,KAAK,MAAM,MAAM,CAAoB;AACxF,UAAM,eAAe,WAAW,UAAU,CAAC,UAAU;AACnD,YAAM,OAAO,KAAK,UAAU,YAAY,OAAO,OAAO,EAAE,CAAC;AACzD,UAAI,SAAS,OAAQ;AACrB,eAAS;AACT,gBAAU,QAAQ,SAAS,KAAK,MAAM,IAAI,CAAoB;AAAA,IAChE,CAAC;AACD,WAAO;AAAA,MACL,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,CAAC,SAAS,UAAU,OAAO,QAAQ,WAAW,SAAS,KAAK;AAAA,MACvE;AAAA,MACA,UAAU;AACR,YAAI;AACJ,uBAAe;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,WACd,QACA,UACA,OACA,UACA,MACA,MACM;AACN,QAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,QAAM,QAAQ,OAAO,MAAM,OAAO,MAAM,EAAE,GAAG,OAAO,MAAM,KAAK,CAAC;AAChE,MAAI,CAAC,OAAO;AACV,SAAK,MAAM,8BAA8B;AACzC;AAAA,EACF;AACA,OAAK,KAAK,MAAM,KAAK,OAAO,OAAO,MAAM,EAAE,CAAC;AAC5C,OAAK,MAAM,QAAQ;AACnB,OAAK,OAAO,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,MAAM,MAAM,EAA2B,CAAC;AAC1F;",
+  "sourcesContent": ["import type { Context, Host, ReplicatedState } from '@earendil-works/chord';\nimport { forbidden, replicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Agents } from '../agents.ts';\nimport type { Approval } from '../approvals/index.ts';\nimport type { AgentGuest, GuestProposal, GuestShown } from '../services.ts';\nimport type { AgentPrincipal, GuestPrincipal } from '../serving.ts';\nimport { type PortEndpoint, PortLink } from '../wire.ts';\nimport type { Guests } from './index.ts';\nimport { GUESTS_MANAGE_DENIED, GUESTS_MANAGE_LATER } from './policy.ts';\nimport { guestView } from './view.ts';\n\nexport function proposalsOf(items: readonly Approval[] | undefined, seat: string): GuestProposal[] {\n  return (items ?? [])\n    .filter((item) => item.kind === 'guest-message' && item.seat === seat)\n    .map((item) => ({\n      id: item.id,\n      text: (item.detail as { text?: string }).text ?? '',\n      state: item.state,\n      reason: item.reason ?? null,\n      createdAt: item.createdAt,\n      decidedAt: item.decidedAt ?? null,\n    }));\n}\n\nconst managing = (guests: Pick<Guests, 'policy'>): Promise<never> =>\n  Promise.reject(\n    forbidden(guests.policy().manageGuests === 'deny' ? GUESTS_MANAGE_DENIED : GUESTS_MANAGE_LATER)\n  );\n\nexport function guestOpener(\n  guests: Guests,\n  agents: Pick<Agents, 'state'>,\n  views: ReplicatedState<Record<string, ConversationView>>,\n  context: Context,\n  approvals?: ReplicatedState<Approval[]>\n) {\n  return (principal: GuestPrincipal): { value: AgentGuest; dispose(): void } | undefined => {\n    const record = guests.current(principal);\n    if (!record) return undefined;\n    const pick = (all: Record<string, ConversationView> | undefined) => all?.[record.agentId];\n    let shown = pick(views.value);\n    const transcript = replicatedState<ConversationView>(guestView(shown, record.id));\n    const off = views.subscribe((all) => {\n      if (pick(all) === shown) return;\n      shown = pick(all);\n      transcript.replace(context, guestView(shown, record.id));\n    });\n    const seat = replicatedState<GuestShown>({\n      id: record.id,\n      label: record.label,\n      agentId: record.agentId,\n      name: agents.state().cones[record.agentId]?.name ?? record.agentId,\n      expiresAt: record.expiresAt,\n      gates: { ...record.gates },\n    });\n    let listed = JSON.stringify(proposalsOf(approvals?.value, record.id));\n    const proposals = replicatedState<GuestProposal[]>(JSON.parse(listed) as GuestProposal[]);\n    const offProposals = approvals?.subscribe((items) => {\n      const next = JSON.stringify(proposalsOf(items, record.id));\n      if (next === listed) return;\n      listed = next;\n      proposals.replace(context, JSON.parse(next) as GuestProposal[]);\n    });\n    return {\n      value: {\n        transcript,\n        seat,\n        proposals,\n        propose: (request, using) => guests.propose(principal, request, using),\n        guestOpen: () => managing(guests),\n        guestRevoke: () => managing(guests),\n      },\n      dispose() {\n        off();\n        offProposals?.();\n      },\n    };\n  };\n}\n\nexport function admitGuest(\n  guests: Guests,\n  endpoint: PortEndpoint,\n  asked: { id: string; label: string },\n  serverId: string,\n  link: number,\n  host: Pick<Host, 'accept'>\n): void {\n  const port = new PortLink(endpoint);\n  const guest = guests.admit(String(asked.id), String(asked.label));\n  if (!guest) {\n    port.close('this guest seat is not valid');\n    return;\n  }\n  void port.ended.then(guests.joined(guest.id));\n  port.greet(serverId);\n  host.accept(port, { principal: { seat: 'guest', link, guest } satisfies AgentPrincipal });\n}\n"],
+  "mappings": "AACA,SAAS,WAAW,uBAAuB;AAM3C,SAA4B,gBAAgB;AAE5C,SAAS,sBAAsB,2BAA2B;AAC1D,SAAS,iBAAiB;AAEnB,SAAS,YAAY,OAAwC,MAA+B;AACjG,UAAQ,SAAS,CAAC,GACf,OAAO,CAAC,SAAS,KAAK,SAAS,mBAAmB,KAAK,SAAS,IAAI,EACpE,IAAI,CAAC,UAAU;AAAA,IACd,IAAI,KAAK;AAAA,IACT,MAAO,KAAK,OAA6B,QAAQ;AAAA,IACjD,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK,UAAU;AAAA,IACvB,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK,aAAa;AAAA,EAC/B,EAAE;AACN;AAEA,MAAM,WAAW,CAAC,WAChB,QAAQ;AAAA,EACN,UAAU,OAAO,OAAO,EAAE,iBAAiB,SAAS,uBAAuB,mBAAmB;AAChG;AAEK,SAAS,YACd,QACA,QACA,OACA,SACA,WACA;AACA,SAAO,CAAC,cAAkF;AACxF,UAAM,SAAS,OAAO,QAAQ,SAAS;AACvC,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,OAAO,CAAC,QAAsD,MAAM,OAAO,OAAO;AACxF,QAAI,QAAQ,KAAK,MAAM,KAAK;AAC5B,UAAM,aAAa,gBAAkC,UAAU,OAAO,OAAO,EAAE,CAAC;AAChF,UAAM,MAAM,MAAM,UAAU,CAAC,QAAQ;AACnC,UAAI,KAAK,GAAG,MAAM,MAAO;AACzB,cAAQ,KAAK,GAAG;AAChB,iBAAW,QAAQ,SAAS,UAAU,OAAO,OAAO,EAAE,CAAC;AAAA,IACzD,CAAC;AACD,UAAM,OAAO,gBAA4B;AAAA,MACvC,IAAI,OAAO;AAAA,MACX,OAAO,OAAO;AAAA,MACd,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO,MAAM,EAAE,MAAM,OAAO,OAAO,GAAG,QAAQ,OAAO;AAAA,MAC3D,WAAW,OAAO;AAAA,MAClB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,IAC3B,CAAC;AACD,QAAI,SAAS,KAAK,UAAU,YAAY,WAAW,OAAO,OAAO,EAAE,CAAC;AACpE,UAAM,YAAY,gBAAiC,KAAK,MAAM,MAAM,CAAoB;AACxF,UAAM,eAAe,WAAW,UAAU,CAAC,UAAU;AACnD,YAAM,OAAO,KAAK,UAAU,YAAY,OAAO,OAAO,EAAE,CAAC;AACzD,UAAI,SAAS,OAAQ;AACrB,eAAS;AACT,gBAAU,QAAQ,SAAS,KAAK,MAAM,IAAI,CAAoB;AAAA,IAChE,CAAC;AACD,WAAO;AAAA,MACL,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,CAAC,SAAS,UAAU,OAAO,QAAQ,WAAW,SAAS,KAAK;AAAA,QACrE,WAAW,MAAM,SAAS,MAAM;AAAA,QAChC,aAAa,MAAM,SAAS,MAAM;AAAA,MACpC;AAAA,MACA,UAAU;AACR,YAAI;AACJ,uBAAe;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,WACd,QACA,UACA,OACA,UACA,MACA,MACM;AACN,QAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,QAAM,QAAQ,OAAO,MAAM,OAAO,MAAM,EAAE,GAAG,OAAO,MAAM,KAAK,CAAC;AAChE,MAAI,CAAC,OAAO;AACV,SAAK,MAAM,8BAA8B;AACzC;AAAA,EACF;AACA,OAAK,KAAK,MAAM,KAAK,OAAO,OAAO,MAAM,EAAE,CAAC;AAC5C,OAAK,MAAM,QAAQ;AACnB,OAAK,OAAO,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,MAAM,MAAM,EAA2B,CAAC;AAC1F;",
   "names": []
 }

package/dist/host.js

@@ -8,6 +8,7 @@ import { BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
 import {
   attachApprovals
 } from "./approvals/index.js";
+import { alwaysFor, attachApprovalPolicy } from "./approvals/policy.js";
 import { createAgentControl } from "./control.js";
 import { trackDeliveries } from "./deliveries.js";
 import { createGuests } from "./guests/index.js";
@@ -26,6 +27,7 @@ import {
   CONTROL_METHODS,
   CONTROL_READS,
   GUEST_METHODS,
+  OWNER_DEVICE_METHODS,
   PAGE_METHODS,
   REMOTE_METHODS,
   REMOTE_READS,
@@ -110,8 +112,13 @@ async function hostAgent(agent, options = {}) {
   const untouch = [state.subscribe(touch), mounted.views.subscribe(touch)];
   const pages = options.pages ?? createPages();
   const deliveries = trackDeliveries(agent.harness, state, context);
+  const policy = await attachApprovalPolicy(agent.harness, context);
   const approvals = options.approvals ?? await attachApprovals(
-    { harness: agent.harness, ...options.judge ? { judge: options.judge } : {} },
+    {
+      harness: agent.harness,
+      guestAlways: alwaysFor(policy),
+      ...options.judge ? { judge: options.judge } : {}
+    },
     context
   );
   const monitor = createMonitor({
@@ -125,25 +132,29 @@ async function hostAgent(agent, options = {}) {
     harness: agent.harness,
     agents: agent.agents,
     approvals,
+    policy,
     context
   });
-  const control = createAgentControl(
-    agent.harness,
-    agent,
-    deliveries,
-    options.licks,
-    options.scoops,
-    options.skills,
-    options.sprinkles,
-    options.memory,
-    options.freezer,
-    options.changes,
-    monitor,
-    options.secrets?.list,
-    options.uploads,
-    options.labels,
-    guests
-  );
+  const control = {
+    ...createAgentControl(
+      agent.harness,
+      agent,
+      deliveries,
+      options.licks,
+      options.scoops,
+      options.skills,
+      options.sprinkles,
+      options.memory,
+      options.freezer,
+      options.changes,
+      monitor,
+      options.secrets?.list,
+      options.uploads,
+      options.labels,
+      guests
+    ),
+    approvalPolicySet: (change, using) => policy.set(change, using)
+  };
   const remote = createRemote({
     harness: agent.harness,
     send: (request, using) => control.send(request, using),
@@ -174,7 +185,8 @@ async function hostAgent(agent, options = {}) {
     vault: options.secrets?.vault ?? idleVault,
     labels: labels.state,
     guests: guests.seats,
-    approvals: approvals.state
+    approvals: approvals.state,
+    approvalPolicy: policy.state
   };
   const settings = options.settings ?? noSettings;
   const gates = gatedControls(control, slims.shown, shownViews, transcriptService.labels);
@@ -273,21 +285,18 @@ function lazily(state) {
     events: (listener) => readable(state()).events(listener)
   };
 }
-const GUEST_MANAGERS = /* @__PURE__ */ new Set(["owner"]);
-const OWNER_GUESTS = "only the owner can invite or revoke guests";
-const notOwner = () => Promise.reject(forbidden(OWNER_GUESTS));
 const seated = (serving, seat) => ({
-  ...serving.trusted,
-  decide: serving.decide(seat === "owner" ? "owner" : "follower"),
-  ...GUEST_MANAGERS.has(seat) ? {} : { guestOpen: notOwner, guestRevoke: notOwner }
+  ...seat === "view" ? serving.viewed : serving.trusted,
+  decide: serving.decide(seat === "owner" ? "owner" : "follower")
 });
+const VIEW_METHODS = [...CONTROL_READS, ...OWNER_DEVICE_METHODS];
 function serveAgent(serving) {
   const host = closedToGuests(createHost({ name: AGENT_HOST, principalKey }));
   const viewing = { ...serving.transcript, monitor: serving.viewMonitor };
   host.serve(AgentControl, ((_input, principal) => {
     const seat = seatOf(principal);
-    if (seat === "view") return { kind: "view", ...served(() => serving.viewed, CONTROL_READS) };
     const control = seated(serving, seat);
+    if (seat === "view") return { kind: "view", ...served(() => control, VIEW_METHODS) };
     return { kind: "control", ...served(() => control, CONTROL_METHODS) };
   }));
   host.serve(AgentTranscript, ((_input, principal) => ({
@@ -340,8 +349,6 @@ function serveAgent(serving) {
 }
 export {
   CLOSED_TO_GUESTS,
-  GUEST_MANAGERS,
-  OWNER_GUESTS,
   closedToGuests,
   hostAgent,
   lazily,