@ai-ecoverse/slicc-agent 5.5.4 → 5.7.0

package/dist/guests/review.js

@@ -0,0 +1,262 @@
+import { BACKGROUND_CONTEXT, withCancel } from "@earendil-works/chord/context";
+import {
+  defineDoc,
+  defineExtension,
+  defineTask
+} from "@earendil-works/pi-durable";
+import { ApprovalsDoc } from "../approvals/record.js";
+import {
+  GUEST_INPUT_KIND,
+  guestContent,
+  REVIEWED_KIND
+} from "./attribution.js";
+import { GUEST_REQUEST } from "./guard.js";
+import { GuestsDoc, liveSeat } from "./seats.js";
+const GuestReviewsDoc = defineDoc({
+  kind: "slicc.guest-reviews",
+  version: 1,
+  scope: "session",
+  initial: () => ({ next: 1, reviews: {} })
+});
+const GUEST_REVIEWS = "slicc-guest-reviews";
+const REVIEW_TASK = "slicc.guest-review";
+const MAX_QUEUED = 8;
+const KEPT_REVIEWS = 100;
+const KEPT_SUBMISSIONS = 100;
+const DONE = { status: "terminal", outcome: { status: "completed", result: null } };
+const liveReviews = (state, seat) => Object.values(state?.reviews ?? {}).filter((review) => review.seat === seat && !review.ended).sort((a, b) => a.n - b.n);
+function endReview(review, state, reason, at) {
+  review.state = state;
+  review.reason = reason;
+  review.decidedAt = review.decidedAt ?? at;
+  review.ended = true;
+}
+async function told(tx, review) {
+  if (review.told) return;
+  review.told = true;
+  const data = { review: review.id, outcome: review.state };
+  await tx.appendEntry(review.conversation, {
+    kind: REVIEWED_KIND,
+    data: { ...data }
+  });
+}
+function pruneReviews(state, kept = KEPT_REVIEWS) {
+  const ended2 = Object.values(state.reviews).filter((review) => review.ended).sort((a, b) => a.n - b.n);
+  for (const review of ended2.slice(0, Math.max(0, ended2.length - kept)))
+    delete state.reviews[review.id];
+}
+const deliveryId = (seat, review) => `${GUEST_REQUEST}${seat}:${review}`;
+const reviewOf = async (tx, id) => (await tx.doc(GuestReviewsDoc)).reviews[id];
+const ended = (task) => task.status === "terminal" || task.status === "completing";
+async function turn(id, runtime, context) {
+  await runtime.commit(async (tx) => {
+    const doc = await tx.doc(GuestReviewsDoc);
+    const review = doc.reviews[id];
+    if (!review || review.ended) return DONE;
+    const seat = (await tx.doc(GuestsDoc)).seats[review.seat];
+    if (!liveSeat(seat, runtime.now())) {
+      endReview(review, "withdrawn", "revoked", runtime.now());
+      await told(tx, review);
+      return DONE;
+    }
+    const before = liveReviews(doc, review.seat).filter((other) => other.n < review.n).reverse();
+    for (const prior of before) {
+      const record = await tx.task(prior.task);
+      if (record && !ended(record.state))
+        return {
+          status: "waiting",
+          checkpoint: { phase: "turn", after: prior.task },
+          on: [prior.task],
+          policy: "allSettled"
+        };
+      endReview(prior, "unanswered", "failed", runtime.now());
+      await told(tx, prior);
+    }
+    return { status: "running", checkpoint: { phase: "ask" } };
+  }, context);
+}
+async function ask(id, runtime, host, context) {
+  const first = (await runtime.snapshot(GuestReviewsDoc, context))?.reviews[id];
+  if (!first) return runtime.commit(async () => DONE, context);
+  return host.line(first.seat, () => asking(id, runtime, host, context));
+}
+async function asking(id, runtime, host, context) {
+  const review = (await runtime.snapshot(GuestReviewsDoc, context))?.reviews[id];
+  const seat = review && (await runtime.snapshot(GuestsDoc, context))?.seats[review.seat];
+  if (seat?.gates.messages === "off")
+    return runtime.commit(async (tx) => {
+      const kept = await reviewOf(tx, id);
+      if (!kept || kept.ended) return DONE;
+      kept.state = "approved";
+      kept.reason = "always";
+      kept.auto = true;
+      kept.decidedAt = runtime.now();
+      await told(tx, kept);
+      return { status: "running", checkpoint: { phase: "deliver" } };
+    }, context);
+  if (review && !review.ended)
+    await host.approvals.request(
+      {
+        id: review.id,
+        kind: "guest-message",
+        seat: review.seat,
+        agentId: review.agentId,
+        requester: { kind: "guest", name: review.label, seat: review.seat },
+        tier: review.tier,
+        detail: { text: review.text, attachments: [] }
+      },
+      BACKGROUND_CONTEXT
+    );
+  await runtime.commit(async (tx) => {
+    const kept = await reviewOf(tx, id);
+    if (!kept || kept.ended) return DONE;
+    kept.state = "pending";
+    return { status: "running", checkpoint: { phase: "decide" } };
+  }, context);
+}
+const itemIn = (doc, id) => doc?.items.find((item) => item.id === id);
+async function settledOrDue(runtime, id, context) {
+  const { context: using, cancel } = withCancel(context);
+  const watch = await runtime.watchDoc(ApprovalsDoc, using);
+  try {
+    const now = itemIn(watch?.value, id);
+    if (now?.state !== "pending" || now.expiresAt <= runtime.now()) return { item: now };
+    const slept = runtime.sleep(now.expiresAt, using);
+    slept.catch(() => void 0);
+    const changed = new Promise((resolve) => {
+      watch?.start(async (value) => {
+        if (itemIn(value, id)?.state !== "pending") resolve();
+      });
+    });
+    await Promise.race([slept, changed]);
+    return null;
+  } finally {
+    cancel();
+    await watch?.stop();
+  }
+}
+async function decide(id, runtime, host, context) {
+  let item;
+  for (; ; ) {
+    const seen = await settledOrDue(runtime, id, context);
+    if (!seen) continue;
+    item = seen.item;
+    if (item?.state !== "pending") break;
+    item = await host.approvals.expire(id, BACKGROUND_CONTEXT);
+    if (item?.state !== "pending") break;
+  }
+  const settled = item;
+  await runtime.commit(async (tx) => {
+    const review = await reviewOf(tx, id);
+    if (!review || review.ended) return DONE;
+    const at = settled?.decidedAt ?? runtime.now();
+    if (settled?.state === "approved") {
+      review.state = "approved";
+      review.decidedAt = at;
+      await told(tx, review);
+      if (settled.answer === "always" && host.alwaysAllowed()) {
+        const record = (await tx.doc(GuestsDoc)).seats[review.seat];
+        if (record && liveSeat(record, runtime.now())) {
+          record.gates.messages = "off";
+          record.always = { by: settled.decidedBy, approval: settled.id, at };
+        }
+      }
+      return { status: "running", checkpoint: { phase: "deliver" } };
+    }
+    endReview(review, settled?.state ?? "unanswered", settled?.reason ?? null, at);
+    await told(tx, review);
+    return DONE;
+  }, context);
+}
+async function deliver(id, runtime, host, context) {
+  const review = (await runtime.snapshot(GuestReviewsDoc, context))?.reviews[id];
+  if (!review || review.ended) return runtime.commit(async () => DONE, context);
+  await host.line(review.seat, async () => {
+    const seat = (await runtime.snapshot(GuestsDoc, context))?.seats[review.seat];
+    const live = liveSeat(seat, runtime.now());
+    const conversation = live ? await host.agents.conversation(review.agentId, BACKGROUND_CONTEXT) : void 0;
+    const approval = review.auto ? null : review.id;
+    const data = { seat: review.seat, name: review.label, approval };
+    const submitted = conversation ? await conversation.submit(
+      {
+        type: "input",
+        content: guestContent(review.label, review.text),
+        whenBusy: "followUp",
+        entry: { kind: GUEST_INPUT_KIND, data: { ...data } },
+        requestId: deliveryId(review.seat, review.id)
+      },
+      BACKGROUND_CONTEXT
+    ) : void 0;
+    await runtime.commit(async (tx) => {
+      const kept = await reviewOf(tx, id);
+      if (!kept) return DONE;
+      kept.ended = true;
+      if (!submitted) {
+        kept.reason = live ? "gone" : "revoked";
+        return DONE;
+      }
+      kept.submissionId = String(submitted.id);
+      const record = (await tx.doc(GuestsDoc)).seats[kept.seat];
+      if (record) {
+        record.delivered = [...record.delivered ?? [], kept.id].slice(-KEPT_SUBMISSIONS);
+        record.submissions = [
+          ...record.submissions ?? [],
+          { id: kept.submissionId, approval, tools: kept.tools }
+        ].slice(-KEPT_SUBMISSIONS);
+      }
+      return DONE;
+    }, context);
+  });
+}
+function reviewTask(lookup) {
+  return defineTask({
+    name: REVIEW_TASK,
+    version: 1,
+    initial: () => ({ phase: "turn" }),
+    phases: {
+      turn: (task, runtime, context) => turn(task.input.review, runtime, context),
+      ask: async (task, runtime, context) => ask(task.input.review, runtime, await lookup(), context),
+      decide: async (task, runtime, context) => decide(task.input.review, runtime, await lookup(), context),
+      deliver: async (task, runtime, context) => deliver(task.input.review, runtime, await lookup(), context)
+    },
+    async abort(task, runtime, context) {
+      const host = await lookup();
+      await host.approvals.withdraw(task.input.review, "aborted", BACKGROUND_CONTEXT);
+      await runtime.commit(async (tx) => {
+        const review = await reviewOf(tx, task.input.review);
+        if (review && !review.ended) {
+          endReview(review, "withdrawn", "aborted", runtime.now());
+          await told(tx, review);
+        }
+        return { status: "terminal", outcome: { status: "aborted" } };
+      }, context);
+    }
+  });
+}
+function guestReviews() {
+  let bind;
+  const bound = new Promise((resolve) => {
+    bind = resolve;
+  });
+  const task = reviewTask(() => bound);
+  return {
+    extension: defineExtension({ name: GUEST_REVIEWS, tasks: [task] }),
+    task,
+    bind: (host) => bind(host)
+  };
+}
+export {
+  GUEST_REVIEWS,
+  GuestReviewsDoc,
+  KEPT_REVIEWS,
+  KEPT_SUBMISSIONS,
+  MAX_QUEUED,
+  REVIEW_TASK,
+  deliveryId,
+  endReview,
+  guestReviews,
+  liveReviews,
+  pruneReviews,
+  told
+};
+//# sourceMappingURL=review.js.map

package/dist/guests/review.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/guests/review.ts"],
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT, withCancel } from '@earendil-works/chord/context';\nimport {\n  type ConversationId,\n  defineDoc,\n  defineExtension,\n  defineTask,\n  type Extension,\n  type NextTaskState,\n  type TaskId,\n  type TaskRuntime,\n  type Tx,\n} from '@earendil-works/pi-durable';\nimport type { Agents } from '../agents.ts';\nimport type { Approval, Approvals, ApprovalsState } from '../approvals/index.ts';\nimport { ApprovalsDoc } from '../approvals/record.ts';\nimport {\n  GUEST_INPUT_KIND,\n  type GuestInput,\n  type GuestOutcome,\n  type GuestReviewed,\n  guestContent,\n  REVIEWED_KIND,\n} from './attribution.ts';\nimport { GUEST_REQUEST } from './guard.ts';\nimport { type GuestGate, GuestsDoc, liveSeat } from './seats.ts';\n\nexport type ReviewState =\n  | 'queued'\n  | 'pending'\n  | 'approved'\n  | 'rejected'\n  | 'unanswered'\n  | 'withdrawn';\n\nexport type Review = {\n  id: string;\n  seat: string;\n  agentId: string;\n  label: string;\n  text: string;\n  request: string;\n  tier: GuestGate;\n  tools: GuestGate;\n  n: number;\n  task: number;\n  state: ReviewState;\n  reason: string | null;\n  createdAt: number;\n  decidedAt: number | null;\n  submissionId: string | null;\n  ended: boolean;\n  conversation: number;\n  auto?: boolean;\n  told?: boolean;\n};\n\nexport type ReviewsState = { next: number; reviews: Record<string, Review> };\n\nexport const GuestReviewsDoc = defineDoc<ReviewsState>({\n  kind: 'slicc.guest-reviews',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ next: 1, reviews: {} }),\n});\n\nexport const GUEST_REVIEWS = 'slicc-guest-reviews';\nexport const REVIEW_TASK = 'slicc.guest-review';\nexport const MAX_QUEUED = 8;\nexport const KEPT_REVIEWS = 100;\nexport const KEPT_SUBMISSIONS = 100;\n\nexport interface ReviewHost {\n  approvals: Pick<Approvals, 'request' | 'expire' | 'withdraw'>;\n  agents: Pick<Agents, 'conversation'>;\n  line<T>(seat: string, run: () => Promise<T>): Promise<T>;\n  alwaysAllowed(): boolean;\n}\n\ntype Input = { review: string };\ntype Phase =\n  | { phase: 'turn'; after?: number }\n  | { phase: 'ask' }\n  | { phase: 'decide' }\n  | { phase: 'deliver' };\ntype Runtime = TaskRuntime<Input, Phase, null, object>;\ntype Next = NextTaskState<Phase, null>;\n\nconst DONE: Next = { status: 'terminal', outcome: { status: 'completed', result: null } };\n\nexport const liveReviews = (state: ReviewsState | null | undefined, seat: string): Review[] =>\n  Object.values(state?.reviews ?? {})\n    .filter((review) => review.seat === seat && !review.ended)\n    .sort((a, b) => a.n - b.n);\n\nexport function endReview(review: Review, state: ReviewState, reason: string | null, at: number) {\n  review.state = state;\n  review.reason = reason;\n  review.decidedAt = review.decidedAt ?? at;\n  review.ended = true;\n}\n\nexport async function told(tx: Pick<Tx, 'appendEntry'>, review: Review): Promise<void> {\n  if (review.told) return;\n  review.told = true;\n  const data: GuestReviewed = { review: review.id, outcome: review.state as GuestOutcome };\n  await tx.appendEntry(review.conversation as unknown as ConversationId, {\n    kind: REVIEWED_KIND,\n    data: { ...data },\n  });\n}\n\nexport function pruneReviews(state: ReviewsState, kept = KEPT_REVIEWS) {\n  const ended = Object.values(state.reviews)\n    .filter((review) => review.ended)\n    .sort((a, b) => a.n - b.n);\n  for (const review of ended.slice(0, Math.max(0, ended.length - kept)))\n    delete state.reviews[review.id];\n}\n\nexport const deliveryId = (seat: string, review: string): string =>\n  `${GUEST_REQUEST}${seat}:${review}`;\n\nconst reviewOf = async (tx: Tx, id: string) => (await tx.doc(GuestReviewsDoc)).reviews[id];\n\nconst ended = (task: { status: string }) =>\n  task.status === 'terminal' || task.status === 'completing';\n\nasync function turn(id: string, runtime: Runtime, context: Context) {\n  await runtime.commit(async (tx): Promise<Next> => {\n    const doc = await tx.doc(GuestReviewsDoc);\n    const review = doc.reviews[id];\n    if (!review || review.ended) return DONE;\n    const seat = (await tx.doc(GuestsDoc)).seats[review.seat];\n    if (!liveSeat(seat, runtime.now())) {\n      endReview(review, 'withdrawn', 'revoked', runtime.now());\n      await told(tx, review);\n      return DONE;\n    }\n    const before = liveReviews(doc, review.seat)\n      .filter((other) => other.n < review.n)\n      .reverse();\n    for (const prior of before) {\n      const record = await tx.task(prior.task as unknown as TaskId);\n      if (record && !ended(record.state))\n        return {\n          status: 'waiting',\n          checkpoint: { phase: 'turn', after: prior.task },\n          on: [prior.task as unknown as TaskId],\n          policy: 'allSettled',\n        };\n      endReview(prior, 'unanswered', 'failed', runtime.now());\n      await told(tx, prior);\n    }\n    return { status: 'running', checkpoint: { phase: 'ask' } };\n  }, context);\n}\n\nasync function ask(id: string, runtime: Runtime, host: ReviewHost, context: Context) {\n  const first = (await runtime.snapshot(GuestReviewsDoc, context))?.reviews[id];\n  if (!first) return runtime.commit(async () => DONE, context);\n  return host.line(first.seat, () => asking(id, runtime, host, context));\n}\n\nasync function asking(id: string, runtime: Runtime, host: ReviewHost, context: Context) {\n  const review = (await runtime.snapshot(GuestReviewsDoc, context))?.reviews[id];\n  const seat = review && (await runtime.snapshot(GuestsDoc, context))?.seats[review.seat];\n  if (seat?.gates.messages === 'off')\n    return runtime.commit(async (tx): Promise<Next> => {\n      const kept = await reviewOf(tx, id);\n      if (!kept || kept.ended) return DONE;\n      kept.state = 'approved';\n      kept.reason = 'always';\n      kept.auto = true;\n      kept.decidedAt = runtime.now();\n      await told(tx, kept);\n      return { status: 'running', checkpoint: { phase: 'deliver' } };\n    }, context);\n  if (review && !review.ended)\n    await host.approvals.request(\n      {\n        id: review.id,\n        kind: 'guest-message',\n        seat: review.seat,\n        agentId: review.agentId,\n        requester: { kind: 'guest', name: review.label, seat: review.seat },\n        tier: review.tier,\n        detail: { text: review.text, attachments: [] },\n      },\n      BACKGROUND_CONTEXT\n    );\n  await runtime.commit(async (tx): Promise<Next> => {\n    const kept = await reviewOf(tx, id);\n    if (!kept || kept.ended) return DONE;\n    kept.state = 'pending';\n    return { status: 'running', checkpoint: { phase: 'decide' } };\n  }, context);\n}\n\nconst itemIn = (doc: Readonly<ApprovalsState> | null | undefined, id: string) =>\n  doc?.items.find((item) => item.id === id);\n\nasync function settledOrDue(\n  runtime: Runtime,\n  id: string,\n  context: Context\n): Promise<{ item: Approval | undefined } | null> {\n  const { context: using, cancel } = withCancel(context);\n  const watch = await runtime.watchDoc(ApprovalsDoc, using);\n  try {\n    const now = itemIn(watch?.value, id);\n    if (now?.state !== 'pending' || now.expiresAt <= runtime.now()) return { item: now };\n    const slept = runtime.sleep(now.expiresAt, using);\n    slept.catch(() => undefined);\n    const changed = new Promise<void>((resolve) => {\n      watch?.start(async (value) => {\n        if (itemIn(value, id)?.state !== 'pending') resolve();\n      });\n    });\n    await Promise.race([slept, changed]);\n    return null;\n  } finally {\n    cancel();\n    await watch?.stop();\n  }\n}\n\nasync function decide(id: string, runtime: Runtime, host: ReviewHost, context: Context) {\n  let item: Approval | undefined;\n  for (;;) {\n    const seen = await settledOrDue(runtime, id, context);\n    if (!seen) continue;\n    item = seen.item;\n    if (item?.state !== 'pending') break;\n    item = await host.approvals.expire(id, BACKGROUND_CONTEXT);\n    if (item?.state !== 'pending') break;\n  }\n  const settled = item;\n  await runtime.commit(async (tx): Promise<Next> => {\n    const review = await reviewOf(tx, id);\n    if (!review || review.ended) return DONE;\n    const at = settled?.decidedAt ?? runtime.now();\n    if (settled?.state === 'approved') {\n      review.state = 'approved';\n      review.decidedAt = at;\n      await told(tx, review);\n      if (settled.answer === 'always' && host.alwaysAllowed()) {\n        const record = (await tx.doc(GuestsDoc)).seats[review.seat];\n        if (record && liveSeat(record, runtime.now())) {\n          record.gates.messages = 'off';\n          record.always = { by: settled.decidedBy, approval: settled.id, at };\n        }\n      }\n      return { status: 'running', checkpoint: { phase: 'deliver' } };\n    }\n    endReview(review, settled?.state ?? 'unanswered', settled?.reason ?? null, at);\n    await told(tx, review);\n    return DONE;\n  }, context);\n}\n\nasync function deliver(id: string, runtime: Runtime, host: ReviewHost, context: Context) {\n  const review = (await runtime.snapshot(GuestReviewsDoc, context))?.reviews[id];\n  if (!review || review.ended) return runtime.commit(async () => DONE, context);\n  await host.line(review.seat, async () => {\n    const seat = (await runtime.snapshot(GuestsDoc, context))?.seats[review.seat];\n    const live = liveSeat(seat, runtime.now());\n    const conversation = live\n      ? await host.agents.conversation(review.agentId, BACKGROUND_CONTEXT)\n      : undefined;\n    const approval = review.auto ? null : review.id;\n    const data: GuestInput = { seat: review.seat, name: review.label, approval };\n    const submitted = conversation\n      ? await conversation.submit(\n          {\n            type: 'input',\n            content: guestContent(review.label, review.text),\n            whenBusy: 'followUp',\n            entry: { kind: GUEST_INPUT_KIND, data: { ...data } },\n            requestId: deliveryId(review.seat, review.id),\n          },\n          BACKGROUND_CONTEXT\n        )\n      : undefined;\n    await runtime.commit(async (tx): Promise<Next> => {\n      const kept = await reviewOf(tx, id);\n      if (!kept) return DONE;\n      kept.ended = true;\n      if (!submitted) {\n        kept.reason = live ? 'gone' : 'revoked';\n        return DONE;\n      }\n      kept.submissionId = String(submitted.id);\n      const record = (await tx.doc(GuestsDoc)).seats[kept.seat];\n      if (record) {\n        record.delivered = [...(record.delivered ?? []), kept.id].slice(-KEPT_SUBMISSIONS);\n        record.submissions = [\n          ...(record.submissions ?? []),\n          { id: kept.submissionId, approval, tools: kept.tools },\n        ].slice(-KEPT_SUBMISSIONS);\n      }\n      return DONE;\n    }, context);\n  });\n}\n\nexport interface GuestReviews {\n  readonly extension: Extension;\n  readonly task: ReturnType<typeof reviewTask>;\n  bind(host: ReviewHost): void;\n}\n\nfunction reviewTask(lookup: () => Promise<ReviewHost>) {\n  return defineTask<Input, Phase, null>({\n    name: REVIEW_TASK,\n    version: 1,\n    initial: () => ({ phase: 'turn' }),\n    phases: {\n      turn: (task, runtime, context) => turn(task.input.review, runtime, context),\n      ask: async (task, runtime, context) =>\n        ask(task.input.review, runtime, await lookup(), context),\n      decide: async (task, runtime, context) =>\n        decide(task.input.review, runtime, await lookup(), context),\n      deliver: async (task, runtime, context) =>\n        deliver(task.input.review, runtime, await lookup(), context),\n    },\n    async abort(task, runtime, context) {\n      const host = await lookup();\n      await host.approvals.withdraw(task.input.review, 'aborted', BACKGROUND_CONTEXT);\n      await runtime.commit(async (tx) => {\n        const review = await reviewOf(tx, task.input.review);\n        if (review && !review.ended) {\n          endReview(review, 'withdrawn', 'aborted', runtime.now());\n          await told(tx, review);\n        }\n        return { status: 'terminal', outcome: { status: 'aborted' } };\n      }, context);\n    },\n  });\n}\n\nexport function guestReviews(): GuestReviews {\n  let bind: (host: ReviewHost) => void;\n  const bound = new Promise<ReviewHost>((resolve) => {\n    bind = resolve;\n  });\n  const task = reviewTask(() => bound);\n  return {\n    extension: defineExtension({ name: GUEST_REVIEWS, tasks: [task] }),\n    task,\n    bind: (host) => bind(host),\n  };\n}\n"],
+  "mappings": "AACA,SAAS,oBAAoB,kBAAkB;AAC/C;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AAGP,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EAIA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAyB,WAAW,gBAAgB;AAkC7C,MAAM,kBAAkB,UAAwB;AAAA,EACrD,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE;AACzC,CAAC;AAEM,MAAM,gBAAgB;AACtB,MAAM,cAAc;AACpB,MAAM,aAAa;AACnB,MAAM,eAAe;AACrB,MAAM,mBAAmB;AAkBhC,MAAM,OAAa,EAAE,QAAQ,YAAY,SAAS,EAAE,QAAQ,aAAa,QAAQ,KAAK,EAAE;AAEjF,MAAM,cAAc,CAAC,OAAwC,SAClE,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC,EAC/B,OAAO,CAAC,WAAW,OAAO,SAAS,QAAQ,CAAC,OAAO,KAAK,EACxD,KAAK,CAAC,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;AAEtB,SAAS,UAAU,QAAgB,OAAoB,QAAuB,IAAY;AAC/F,SAAO,QAAQ;AACf,SAAO,SAAS;AAChB,SAAO,YAAY,OAAO,aAAa;AACvC,SAAO,QAAQ;AACjB;AAEA,eAAsB,KAAK,IAA6B,QAA+B;AACrF,MAAI,OAAO,KAAM;AACjB,SAAO,OAAO;AACd,QAAM,OAAsB,EAAE,QAAQ,OAAO,IAAI,SAAS,OAAO,MAAsB;AACvF,QAAM,GAAG,YAAY,OAAO,cAA2C;AAAA,IACrE,MAAM;AAAA,IACN,MAAM,EAAE,GAAG,KAAK;AAAA,EAClB,CAAC;AACH;AAEO,SAAS,aAAa,OAAqB,OAAO,cAAc;AACrE,QAAMA,SAAQ,OAAO,OAAO,MAAM,OAAO,EACtC,OAAO,CAAC,WAAW,OAAO,KAAK,EAC/B,KAAK,CAAC,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3B,aAAW,UAAUA,OAAM,MAAM,GAAG,KAAK,IAAI,GAAGA,OAAM,SAAS,IAAI,CAAC;AAClE,WAAO,MAAM,QAAQ,OAAO,EAAE;AAClC;AAEO,MAAM,aAAa,CAAC,MAAc,WACvC,GAAG,aAAa,GAAG,IAAI,IAAI,MAAM;AAEnC,MAAM,WAAW,OAAO,IAAQ,QAAgB,MAAM,GAAG,IAAI,eAAe,GAAG,QAAQ,EAAE;AAEzF,MAAM,QAAQ,CAAC,SACb,KAAK,WAAW,cAAc,KAAK,WAAW;AAEhD,eAAe,KAAK,IAAY,SAAkB,SAAkB;AAClE,QAAM,QAAQ,OAAO,OAAO,OAAsB;AAChD,UAAM,MAAM,MAAM,GAAG,IAAI,eAAe;AACxC,UAAM,SAAS,IAAI,QAAQ,EAAE;AAC7B,QAAI,CAAC,UAAU,OAAO,MAAO,QAAO;AACpC,UAAM,QAAQ,MAAM,GAAG,IAAI,SAAS,GAAG,MAAM,OAAO,IAAI;AACxD,QAAI,CAAC,SAAS,MAAM,QAAQ,IAAI,CAAC,GAAG;AAClC,gBAAU,QAAQ,aAAa,WAAW,QAAQ,IAAI,CAAC;AACvD,YAAM,KAAK,IAAI,MAAM;AACrB,aAAO;AAAA,IACT;AACA,UAAM,SAAS,YAAY,KAAK,OAAO,IAAI,EACxC,OAAO,CAAC,UAAU,MAAM,IAAI,OAAO,CAAC,EACpC,QAAQ;AACX,eAAW,SAAS,QAAQ;AAC1B,YAAM,SAAS,MAAM,GAAG,KAAK,MAAM,IAAyB;AAC5D,UAAI,UAAU,CAAC,MAAM,OAAO,KAAK;AAC/B,eAAO;AAAA,UACL,QAAQ;AAAA,UACR,YAAY,EAAE,OAAO,QAAQ,OAAO,MAAM,KAAK;AAAA,UAC/C,IAAI,CAAC,MAAM,IAAyB;AAAA,UACpC,QAAQ;AAAA,QACV;AACF,gBAAU,OAAO,cAAc,UAAU,QAAQ,IAAI,CAAC;AACtD,YAAM,KAAK,IAAI,KAAK;AAAA,IACtB;AACA,WAAO,EAAE,QAAQ,WAAW,YAAY,EAAE,OAAO,MAAM,EAAE;AAAA,EAC3D,GAAG,OAAO;AACZ;AAEA,eAAe,IAAI,IAAY,SAAkB,MAAkB,SAAkB;AACnF,QAAM,SAAS,MAAM,QAAQ,SAAS,iBAAiB,OAAO,IAAI,QAAQ,EAAE;AAC5E,MAAI,CAAC,MAAO,QAAO,QAAQ,OAAO,YAAY,MAAM,OAAO;AAC3D,SAAO,KAAK,KAAK,MAAM,MAAM,MAAM,OAAO,IAAI,SAAS,MAAM,OAAO,CAAC;AACvE;AAEA,eAAe,OAAO,IAAY,SAAkB,MAAkB,SAAkB;AACtF,QAAM,UAAU,MAAM,QAAQ,SAAS,iBAAiB,OAAO,IAAI,QAAQ,EAAE;AAC7E,QAAM,OAAO,WAAW,MAAM,QAAQ,SAAS,WAAW,OAAO,IAAI,MAAM,OAAO,IAAI;AACtF,MAAI,MAAM,MAAM,aAAa;AAC3B,WAAO,QAAQ,OAAO,OAAO,OAAsB;AACjD,YAAM,OAAO,MAAM,SAAS,IAAI,EAAE;AAClC,UAAI,CAAC,QAAQ,KAAK,MAAO,QAAO;AAChC,WAAK,QAAQ;AACb,WAAK,SAAS;AACd,WAAK,OAAO;AACZ,WAAK,YAAY,QAAQ,IAAI;AAC7B,YAAM,KAAK,IAAI,IAAI;AACnB,aAAO,EAAE,QAAQ,WAAW,YAAY,EAAE,OAAO,UAAU,EAAE;AAAA,IAC/D,GAAG,OAAO;AACZ,MAAI,UAAU,CAAC,OAAO;AACpB,UAAM,KAAK,UAAU;AAAA,MACnB;AAAA,QACE,IAAI,OAAO;AAAA,QACX,MAAM;AAAA,QACN,MAAM,OAAO;AAAA,QACb,SAAS,OAAO;AAAA,QAChB,WAAW,EAAE,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,OAAO,KAAK;AAAA,QAClE,MAAM,OAAO;AAAA,QACb,QAAQ,EAAE,MAAM,OAAO,MAAM,aAAa,CAAC,EAAE;AAAA,MAC/C;AAAA,MACA;AAAA,IACF;AACF,QAAM,QAAQ,OAAO,OAAO,OAAsB;AAChD,UAAM,OAAO,MAAM,SAAS,IAAI,EAAE;AAClC,QAAI,CAAC,QAAQ,KAAK,MAAO,QAAO;AAChC,SAAK,QAAQ;AACb,WAAO,EAAE,QAAQ,WAAW,YAAY,EAAE,OAAO,SAAS,EAAE;AAAA,EAC9D,GAAG,OAAO;AACZ;AAEA,MAAM,SAAS,CAAC,KAAkD,OAChE,KAAK,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,EAAE;AAE1C,eAAe,aACb,SACA,IACA,SACgD;AAChD,QAAM,EAAE,SAAS,OAAO,OAAO,IAAI,WAAW,OAAO;AACrD,QAAM,QAAQ,MAAM,QAAQ,SAAS,cAAc,KAAK;AACxD,MAAI;AACF,UAAM,MAAM,OAAO,OAAO,OAAO,EAAE;AACnC,QAAI,KAAK,UAAU,aAAa,IAAI,aAAa,QAAQ,IAAI,EAAG,QAAO,EAAE,MAAM,IAAI;AACnF,UAAM,QAAQ,QAAQ,MAAM,IAAI,WAAW,KAAK;AAChD,UAAM,MAAM,MAAM,MAAS;AAC3B,UAAM,UAAU,IAAI,QAAc,CAAC,YAAY;AAC7C,aAAO,MAAM,OAAO,UAAU;AAC5B,YAAI,OAAO,OAAO,EAAE,GAAG,UAAU,UAAW,SAAQ;AAAA,MACtD,CAAC;AAAA,IACH,CAAC;AACD,UAAM,QAAQ,KAAK,CAAC,OAAO,OAAO,CAAC;AACnC,WAAO;AAAA,EACT,UAAE;AACA,WAAO;AACP,UAAM,OAAO,KAAK;AAAA,EACpB;AACF;AAEA,eAAe,OAAO,IAAY,SAAkB,MAAkB,SAAkB;AACtF,MAAI;AACJ,aAAS;AACP,UAAM,OAAO,MAAM,aAAa,SAAS,IAAI,OAAO;AACpD,QAAI,CAAC,KAAM;AACX,WAAO,KAAK;AACZ,QAAI,MAAM,UAAU,UAAW;AAC/B,WAAO,MAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AACzD,QAAI,MAAM,UAAU,UAAW;AAAA,EACjC;AACA,QAAM,UAAU;AAChB,QAAM,QAAQ,OAAO,OAAO,OAAsB;AAChD,UAAM,SAAS,MAAM,SAAS,IAAI,EAAE;AACpC,QAAI,CAAC,UAAU,OAAO,MAAO,QAAO;AACpC,UAAM,KAAK,SAAS,aAAa,QAAQ,IAAI;AAC7C,QAAI,SAAS,UAAU,YAAY;AACjC,aAAO,QAAQ;AACf,aAAO,YAAY;AACnB,YAAM,KAAK,IAAI,MAAM;AACrB,UAAI,QAAQ,WAAW,YAAY,KAAK,cAAc,GAAG;AACvD,cAAM,UAAU,MAAM,GAAG,IAAI,SAAS,GAAG,MAAM,OAAO,IAAI;AAC1D,YAAI,UAAU,SAAS,QAAQ,QAAQ,IAAI,CAAC,GAAG;AAC7C,iBAAO,MAAM,WAAW;AACxB,iBAAO,SAAS,EAAE,IAAI,QAAQ,WAAW,UAAU,QAAQ,IAAI,GAAG;AAAA,QACpE;AAAA,MACF;AACA,aAAO,EAAE,QAAQ,WAAW,YAAY,EAAE,OAAO,UAAU,EAAE;AAAA,IAC/D;AACA,cAAU,QAAQ,SAAS,SAAS,cAAc,SAAS,UAAU,MAAM,EAAE;AAC7E,UAAM,KAAK,IAAI,MAAM;AACrB,WAAO;AAAA,EACT,GAAG,OAAO;AACZ;AAEA,eAAe,QAAQ,IAAY,SAAkB,MAAkB,SAAkB;AACvF,QAAM,UAAU,MAAM,QAAQ,SAAS,iBAAiB,OAAO,IAAI,QAAQ,EAAE;AAC7E,MAAI,CAAC,UAAU,OAAO,MAAO,QAAO,QAAQ,OAAO,YAAY,MAAM,OAAO;AAC5E,QAAM,KAAK,KAAK,OAAO,MAAM,YAAY;AACvC,UAAM,QAAQ,MAAM,QAAQ,SAAS,WAAW,OAAO,IAAI,MAAM,OAAO,IAAI;AAC5E,UAAM,OAAO,SAAS,MAAM,QAAQ,IAAI,CAAC;AACzC,UAAM,eAAe,OACjB,MAAM,KAAK,OAAO,aAAa,OAAO,SAAS,kBAAkB,IACjE;AACJ,UAAM,WAAW,OAAO,OAAO,OAAO,OAAO;AAC7C,UAAM,OAAmB,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,OAAO,SAAS;AAC3E,UAAM,YAAY,eACd,MAAM,aAAa;AAAA,MACjB;AAAA,QACE,MAAM;AAAA,QACN,SAAS,aAAa,OAAO,OAAO,OAAO,IAAI;AAAA,QAC/C,UAAU;AAAA,QACV,OAAO,EAAE,MAAM,kBAAkB,MAAM,EAAE,GAAG,KAAK,EAAE;AAAA,QACnD,WAAW,WAAW,OAAO,MAAM,OAAO,EAAE;AAAA,MAC9C;AAAA,MACA;AAAA,IACF,IACA;AACJ,UAAM,QAAQ,OAAO,OAAO,OAAsB;AAChD,YAAM,OAAO,MAAM,SAAS,IAAI,EAAE;AAClC,UAAI,CAAC,KAAM,QAAO;AAClB,WAAK,QAAQ;AACb,UAAI,CAAC,WAAW;AACd,aAAK,SAAS,OAAO,SAAS;AAC9B,eAAO;AAAA,MACT;AACA,WAAK,eAAe,OAAO,UAAU,EAAE;AACvC,YAAM,UAAU,MAAM,GAAG,IAAI,SAAS,GAAG,MAAM,KAAK,IAAI;AACxD,UAAI,QAAQ;AACV,eAAO,YAAY,CAAC,GAAI,OAAO,aAAa,CAAC,GAAI,KAAK,EAAE,EAAE,MAAM,CAAC,gBAAgB;AACjF,eAAO,cAAc;AAAA,UACnB,GAAI,OAAO,eAAe,CAAC;AAAA,UAC3B,EAAE,IAAI,KAAK,cAAc,UAAU,OAAO,KAAK,MAAM;AAAA,QACvD,EAAE,MAAM,CAAC,gBAAgB;AAAA,MAC3B;AACA,aAAO;AAAA,IACT,GAAG,OAAO;AAAA,EACZ,CAAC;AACH;AAQA,SAAS,WAAW,QAAmC;AACrD,SAAO,WAA+B;AAAA,IACpC,MAAM;AAAA,IACN,SAAS;AAAA,IACT,SAAS,OAAO,EAAE,OAAO,OAAO;AAAA,IAChC,QAAQ;AAAA,MACN,MAAM,CAAC,MAAM,SAAS,YAAY,KAAK,KAAK,MAAM,QAAQ,SAAS,OAAO;AAAA,MAC1E,KAAK,OAAO,MAAM,SAAS,YACzB,IAAI,KAAK,MAAM,QAAQ,SAAS,MAAM,OAAO,GAAG,OAAO;AAAA,MACzD,QAAQ,OAAO,MAAM,SAAS,YAC5B,OAAO,KAAK,MAAM,QAAQ,SAAS,MAAM,OAAO,GAAG,OAAO;AAAA,MAC5D,SAAS,OAAO,MAAM,SAAS,YAC7B,QAAQ,KAAK,MAAM,QAAQ,SAAS,MAAM,OAAO,GAAG,OAAO;AAAA,IAC/D;AAAA,IACA,MAAM,MAAM,MAAM,SAAS,SAAS;AAClC,YAAM,OAAO,MAAM,OAAO;AAC1B,YAAM,KAAK,UAAU,SAAS,KAAK,MAAM,QAAQ,WAAW,kBAAkB;AAC9E,YAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,cAAM,SAAS,MAAM,SAAS,IAAI,KAAK,MAAM,MAAM;AACnD,YAAI,UAAU,CAAC,OAAO,OAAO;AAC3B,oBAAU,QAAQ,aAAa,WAAW,QAAQ,IAAI,CAAC;AACvD,gBAAM,KAAK,IAAI,MAAM;AAAA,QACvB;AACA,eAAO,EAAE,QAAQ,YAAY,SAAS,EAAE,QAAQ,UAAU,EAAE;AAAA,MAC9D,GAAG,OAAO;AAAA,IACZ;AAAA,EACF,CAAC;AACH;AAEO,SAAS,eAA6B;AAC3C,MAAI;AACJ,QAAM,QAAQ,IAAI,QAAoB,CAAC,YAAY;AACjD,WAAO;AAAA,EACT,CAAC;AACD,QAAM,OAAO,WAAW,MAAM,KAAK;AACnC,SAAO;AAAA,IACL,WAAW,gBAAgB,EAAE,MAAM,eAAe,OAAO,CAAC,IAAI,EAAE,CAAC;AAAA,IACjE;AAAA,IACA,MAAM,CAAC,SAAS,KAAK,IAAI;AAAA,EAC3B;AACF;",
+  "names": ["ended"]
+}

package/dist/guests/seats.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/guests/seats.ts"],
-  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\nimport type { ApprovalTier } from '../approvals/record.ts';\nimport {\n  DAY_MS,\n  DEFAULT_GUEST_POLICY,\n  type GuestPolicy,\n  gateKind,\n  gateRefusal,\n  MAX_SEAT_DAYS,\n} from './policy.ts';\n\nexport type GuestGate = ApprovalTier | 'off';\n\nexport type GuestGates = {\n  messages: GuestGate;\n  tools: GuestGate;\n};\n\nexport type GuestDraft = {\n  id: string;\n  label: string;\n  agentId: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n};\n\nexport type SeatRecord = GuestDraft & {\n  createdAt: number;\n  epoch: number;\n  revoked: number | null;\n  delivered?: string[];\n};\n\nexport interface GuestSeat {\n  id: string;\n  label: string;\n  agentId: string;\n  createdAt: number;\n  expiresAt: number | null;\n  gates: GuestGates;\n  connected: boolean;\n  pending: number;\n}\n\nexport type GuestsState = { seats: Record<string, SeatRecord> };\n\nexport const GuestsDoc = defineDoc<GuestsState>({\n  kind: 'slicc.guests',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ seats: {} }),\n});\n\nexport const MAX_SEAT_MS = MAX_SEAT_DAYS * DAY_MS;\nexport const MAX_LABEL = 64;\nconst MAX_ID = 256;\n\nexport function cleanLabel(raw: unknown): string {\n  return String(raw ?? '')\n    .replace(/[\\p{Cc}\\p{Cf}]/gu, ' ')\n    .replace(/\\s+/g, ' ')\n    .trim()\n    .slice(0, MAX_LABEL);\n}\n\nexport function isGate(value: unknown): value is GuestGate {\n  if (typeof value !== 'string') return false;\n  if (value === 'user' || value === 'agent' || value === 'cone' || value === 'off') return true;\n  return /^scoop:\\S+$/.test(value);\n}\n\nexport function checkDraft(\n  draft: GuestDraft,\n  now: number,\n  policy: GuestPolicy = DEFAULT_GUEST_POLICY\n): string | null {\n  if (typeof draft?.id !== 'string' || !draft.id || draft.id.length > MAX_ID)\n    return 'A guest seat needs an id from the tray hub.';\n  if (!cleanLabel(draft.label)) return 'A guest seat needs a label.';\n  if (!isGate(draft.gates?.messages) || !isGate(draft.gates?.tools))\n    return 'A guest seat needs a known gate for messages and for tools.';\n  if (!policy.allowedMessageGates.includes(gateKind(draft.gates.messages)))\n    return gateRefusal(\"a guest's messages\", policy.allowedMessageGates);\n  if (!policy.allowedToolGates.includes(gateKind(draft.gates.tools)))\n    return gateRefusal(\"a guest's tool calls\", policy.allowedToolGates);\n  const { expiresAt } = draft;\n  if (expiresAt !== null && (typeof expiresAt !== 'number' || !Number.isFinite(expiresAt)))\n    return 'A guest seat expires at a time, or never.';\n  if (expiresAt !== null && expiresAt <= now) return 'That expiry has already passed.';\n  const days = policy.maxSeatDays;\n  if (expiresAt !== null && expiresAt - now > days * DAY_MS)\n    return `A guest seat lasts at most ${days} ${days === 1 ? 'day' : 'days'}.`;\n  return null;\n}\n\nexport function liveSeat(seat: SeatRecord | undefined, now: number): boolean {\n  return Boolean(\n    seat && seat.revoked === null && (seat.expiresAt === null || seat.expiresAt > now)\n  );\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB;AAE1B;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAqCA,MAAM,YAAY,UAAuB;AAAA,EAC9C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAEM,MAAM,cAAc,gBAAgB;AACpC,MAAM,YAAY;AACzB,MAAM,SAAS;AAER,SAAS,WAAW,KAAsB;AAC/C,SAAO,OAAO,OAAO,EAAE,EACpB,QAAQ,oBAAoB,GAAG,EAC/B,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,SAAS;AACvB;AAEO,SAAS,OAAO,OAAoC;AACzD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,UAAU,UAAU,MAAO,QAAO;AACzF,SAAO,cAAc,KAAK,KAAK;AACjC;AAEO,SAAS,WACd,OACA,KACA,SAAsB,sBACP;AACf,MAAI,OAAO,OAAO,OAAO,YAAY,CAAC,MAAM,MAAM,MAAM,GAAG,SAAS;AAClE,WAAO;AACT,MAAI,CAAC,WAAW,MAAM,KAAK,EAAG,QAAO;AACrC,MAAI,CAAC,OAAO,MAAM,OAAO,QAAQ,KAAK,CAAC,OAAO,MAAM,OAAO,KAAK;AAC9D,WAAO;AACT,MAAI,CAAC,OAAO,oBAAoB,SAAS,SAAS,MAAM,MAAM,QAAQ,CAAC;AACrE,WAAO,YAAY,sBAAsB,OAAO,mBAAmB;AACrE,MAAI,CAAC,OAAO,iBAAiB,SAAS,SAAS,MAAM,MAAM,KAAK,CAAC;AAC/D,WAAO,YAAY,wBAAwB,OAAO,gBAAgB;AACpE,QAAM,EAAE,UAAU,IAAI;AACtB,MAAI,cAAc,SAAS,OAAO,cAAc,YAAY,CAAC,OAAO,SAAS,SAAS;AACpF,WAAO;AACT,MAAI,cAAc,QAAQ,aAAa,IAAK,QAAO;AACnD,QAAM,OAAO,OAAO;AACpB,MAAI,cAAc,QAAQ,YAAY,MAAM,OAAO;AACjD,WAAO,8BAA8B,IAAI,IAAI,SAAS,IAAI,QAAQ,MAAM;AAC1E,SAAO;AACT;AAEO,SAAS,SAAS,MAA8B,KAAsB;AAC3E,SAAO;AAAA,IACL,QAAQ,KAAK,YAAY,SAAS,KAAK,cAAc,QAAQ,KAAK,YAAY;AAAA,EAChF;AACF;",
+  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\nimport type { ApprovalTier, DecidedBy } from '../approvals/record.ts';\nimport {\n  DAY_MS,\n  DEFAULT_GUEST_POLICY,\n  type GuestPolicy,\n  gateKind,\n  gateRefusal,\n  MAX_SEAT_DAYS,\n} from './policy.ts';\n\nexport type GuestGate = ApprovalTier | 'off';\n\nexport type GuestGates = {\n  messages: GuestGate;\n  tools: GuestGate;\n};\n\nexport type GuestDraft = {\n  id: string;\n  label: string;\n  agentId: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n};\n\nexport type SeatSubmission = { id: string; approval: string | null; tools: GuestGate };\n\nexport type SeatRecord = GuestDraft & {\n  createdAt: number;\n  epoch: number;\n  revoked: number | null;\n  delivered?: string[];\n  submissions?: SeatSubmission[];\n  always?: { by: DecidedBy | null; approval: string; at: number };\n};\n\nexport interface GuestSeat {\n  id: string;\n  label: string;\n  agentId: string;\n  createdAt: number;\n  expiresAt: number | null;\n  gates: GuestGates;\n  connected: boolean;\n  pending: number;\n}\n\nexport type GuestsState = { seats: Record<string, SeatRecord> };\n\nexport const GuestsDoc = defineDoc<GuestsState>({\n  kind: 'slicc.guests',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ seats: {} }),\n});\n\nexport const MAX_SEAT_MS = MAX_SEAT_DAYS * DAY_MS;\nexport const MAX_LABEL = 64;\nconst MAX_ID = 256;\n\nexport function cleanLabel(raw: unknown): string {\n  return String(raw ?? '')\n    .replace(/[\\p{Cc}\\p{Cf}]/gu, ' ')\n    .replace(/\\s+/g, ' ')\n    .trim()\n    .slice(0, MAX_LABEL);\n}\n\nexport function isGate(value: unknown): value is GuestGate {\n  if (typeof value !== 'string') return false;\n  if (value === 'user' || value === 'agent' || value === 'cone' || value === 'off') return true;\n  return /^scoop:\\S+$/.test(value);\n}\n\nexport function checkDraft(\n  draft: GuestDraft,\n  now: number,\n  policy: GuestPolicy = DEFAULT_GUEST_POLICY\n): string | null {\n  if (typeof draft?.id !== 'string' || !draft.id || draft.id.length > MAX_ID)\n    return 'A guest seat needs an id from the tray hub.';\n  if (!cleanLabel(draft.label)) return 'A guest seat needs a label.';\n  if (!isGate(draft.gates?.messages) || !isGate(draft.gates?.tools))\n    return 'A guest seat needs a known gate for messages and for tools.';\n  if (!policy.allowedMessageGates.includes(gateKind(draft.gates.messages)))\n    return gateRefusal(\"a guest's messages\", policy.allowedMessageGates);\n  if (!policy.allowedToolGates.includes(gateKind(draft.gates.tools)))\n    return gateRefusal(\"a guest's tool calls\", policy.allowedToolGates);\n  const { expiresAt } = draft;\n  if (expiresAt !== null && (typeof expiresAt !== 'number' || !Number.isFinite(expiresAt)))\n    return 'A guest seat expires at a time, or never.';\n  if (expiresAt !== null && expiresAt <= now) return 'That expiry has already passed.';\n  const days = policy.maxSeatDays;\n  if (expiresAt !== null && expiresAt - now > days * DAY_MS)\n    return `A guest seat lasts at most ${days} ${days === 1 ? 'day' : 'days'}.`;\n  return null;\n}\n\nexport function liveSeat(seat: SeatRecord | undefined, now: number): boolean {\n  return Boolean(\n    seat && seat.revoked === null && (seat.expiresAt === null || seat.expiresAt > now)\n  );\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAE1B;AAAA,EACE;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAyCA,MAAM,YAAY,UAAuB;AAAA,EAC9C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAEM,MAAM,cAAc,gBAAgB;AACpC,MAAM,YAAY;AACzB,MAAM,SAAS;AAER,SAAS,WAAW,KAAsB;AAC/C,SAAO,OAAO,OAAO,EAAE,EACpB,QAAQ,oBAAoB,GAAG,EAC/B,QAAQ,QAAQ,GAAG,EACnB,KAAK,EACL,MAAM,GAAG,SAAS;AACvB;AAEO,SAAS,OAAO,OAAoC;AACzD,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,UAAU,UAAU,MAAO,QAAO;AACzF,SAAO,cAAc,KAAK,KAAK;AACjC;AAEO,SAAS,WACd,OACA,KACA,SAAsB,sBACP;AACf,MAAI,OAAO,OAAO,OAAO,YAAY,CAAC,MAAM,MAAM,MAAM,GAAG,SAAS;AAClE,WAAO;AACT,MAAI,CAAC,WAAW,MAAM,KAAK,EAAG,QAAO;AACrC,MAAI,CAAC,OAAO,MAAM,OAAO,QAAQ,KAAK,CAAC,OAAO,MAAM,OAAO,KAAK;AAC9D,WAAO;AACT,MAAI,CAAC,OAAO,oBAAoB,SAAS,SAAS,MAAM,MAAM,QAAQ,CAAC;AACrE,WAAO,YAAY,sBAAsB,OAAO,mBAAmB;AACrE,MAAI,CAAC,OAAO,iBAAiB,SAAS,SAAS,MAAM,MAAM,KAAK,CAAC;AAC/D,WAAO,YAAY,wBAAwB,OAAO,gBAAgB;AACpE,QAAM,EAAE,UAAU,IAAI;AACtB,MAAI,cAAc,SAAS,OAAO,cAAc,YAAY,CAAC,OAAO,SAAS,SAAS;AACpF,WAAO;AACT,MAAI,cAAc,QAAQ,aAAa,IAAK,QAAO;AACnD,QAAM,OAAO,OAAO;AACpB,MAAI,cAAc,QAAQ,YAAY,MAAM,OAAO;AACjD,WAAO,8BAA8B,IAAI,IAAI,SAAS,IAAI,QAAQ,MAAM;AAC1E,SAAO;AACT;AAEO,SAAS,SAAS,MAA8B,KAAsB;AAC3E,SAAO;AAAA,IACL,QAAQ,KAAK,YAAY,SAAS,KAAK,cAAc,QAAQ,KAAK,YAAY;AAAA,EAChF;AACF;",
   "names": []
 }

package/dist/guests/serve.js

@@ -2,20 +2,20 @@ import { forbidden, replicatedState } from "@earendil-works/chord";
 import { PortLink } from "../wire.js";
 import { GUESTS_MANAGE_DENIED, GUESTS_MANAGE_LATER } from "./policy.js";
 import { guestView } from "./view.js";
-function proposalsOf(items, seat) {
-  return (items ?? []).filter((item) => item.kind === "guest-message" && item.seat === seat).map((item) => ({
-    id: item.id,
-    text: item.detail.text ?? "",
-    state: item.state,
-    reason: item.reason ?? null,
-    createdAt: item.createdAt,
-    decidedAt: item.decidedAt ?? null
+function proposalsOf(state, seat) {
+  return Object.values(state?.reviews ?? {}).filter((review) => review.seat === seat).sort((a, b) => a.n - b.n).map((review) => ({
+    id: review.id,
+    text: review.text,
+    state: review.state,
+    reason: review.reason,
+    createdAt: review.createdAt,
+    decidedAt: review.decidedAt
   }));
 }
 const managing = (guests) => Promise.reject(
   forbidden(guests.policy().manageGuests === "deny" ? GUESTS_MANAGE_DENIED : GUESTS_MANAGE_LATER)
 );
-function guestOpener(guests, agents, views, context, approvals) {
+function guestOpener(guests, agents, views, context) {
   return (principal) => {
     const record = guests.current(principal);
     if (!record) return void 0;
@@ -35,10 +35,10 @@ function guestOpener(guests, agents, views, context, approvals) {
       expiresAt: record.expiresAt,
       gates: { ...record.gates }
     });
-    let listed = JSON.stringify(proposalsOf(approvals?.value, record.id));
+    let listed = JSON.stringify(proposalsOf(guests.reviews.value, record.id));
     const proposals = replicatedState(JSON.parse(listed));
-    const offProposals = approvals?.subscribe((items) => {
-      const next = JSON.stringify(proposalsOf(items, record.id));
+    const offProposals = guests.reviews.subscribe((state) => {
+      const next = JSON.stringify(proposalsOf(state, record.id));
       if (next === listed) return;
       listed = next;
       proposals.replace(context, JSON.parse(next));
@@ -54,7 +54,7 @@ function guestOpener(guests, agents, views, context, approvals) {
       },
       dispose() {
         off();
-        offProposals?.();
+        offProposals();
       }
     };
   };

package/dist/guests/serve.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/guests/serve.ts"],
-  "sourcesContent": ["import type { Context, Host, ReplicatedState } from '@earendil-works/chord';\nimport { forbidden, replicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Agents } from '../agents.ts';\nimport type { Approval } from '../approvals/index.ts';\nimport type { AgentGuest, GuestProposal, GuestShown } from '../services.ts';\nimport type { AgentPrincipal, GuestPrincipal } from '../serving.ts';\nimport { type PortEndpoint, PortLink } from '../wire.ts';\nimport type { Guests } from './index.ts';\nimport { GUESTS_MANAGE_DENIED, GUESTS_MANAGE_LATER } from './policy.ts';\nimport { guestView } from './view.ts';\n\nexport function proposalsOf(items: readonly Approval[] | undefined, seat: string): GuestProposal[] {\n  return (items ?? [])\n    .filter((item) => item.kind === 'guest-message' && item.seat === seat)\n    .map((item) => ({\n      id: item.id,\n      text: (item.detail as { text?: string }).text ?? '',\n      state: item.state,\n      reason: item.reason ?? null,\n      createdAt: item.createdAt,\n      decidedAt: item.decidedAt ?? null,\n    }));\n}\n\nconst managing = (guests: Pick<Guests, 'policy'>): Promise<never> =>\n  Promise.reject(\n    forbidden(guests.policy().manageGuests === 'deny' ? GUESTS_MANAGE_DENIED : GUESTS_MANAGE_LATER)\n  );\n\nexport function guestOpener(\n  guests: Guests,\n  agents: Pick<Agents, 'state'>,\n  views: ReplicatedState<Record<string, ConversationView>>,\n  context: Context,\n  approvals?: ReplicatedState<Approval[]>\n) {\n  return (principal: GuestPrincipal): { value: AgentGuest; dispose(): void } | undefined => {\n    const record = guests.current(principal);\n    if (!record) return undefined;\n    const pick = (all: Record<string, ConversationView> | undefined) => all?.[record.agentId];\n    let shown = pick(views.value);\n    const transcript = replicatedState<ConversationView>(guestView(shown, record.id));\n    const off = views.subscribe((all) => {\n      if (pick(all) === shown) return;\n      shown = pick(all);\n      transcript.replace(context, guestView(shown, record.id));\n    });\n    const seat = replicatedState<GuestShown>({\n      id: record.id,\n      label: record.label,\n      agentId: record.agentId,\n      name: agents.state().cones[record.agentId]?.name ?? record.agentId,\n      expiresAt: record.expiresAt,\n      gates: { ...record.gates },\n    });\n    let listed = JSON.stringify(proposalsOf(approvals?.value, record.id));\n    const proposals = replicatedState<GuestProposal[]>(JSON.parse(listed) as GuestProposal[]);\n    const offProposals = approvals?.subscribe((items) => {\n      const next = JSON.stringify(proposalsOf(items, record.id));\n      if (next === listed) return;\n      listed = next;\n      proposals.replace(context, JSON.parse(next) as GuestProposal[]);\n    });\n    return {\n      value: {\n        transcript,\n        seat,\n        proposals,\n        propose: (request, using) => guests.propose(principal, request, using),\n        guestOpen: () => managing(guests),\n        guestRevoke: () => managing(guests),\n      },\n      dispose() {\n        off();\n        offProposals?.();\n      },\n    };\n  };\n}\n\nexport function admitGuest(\n  guests: Guests,\n  endpoint: PortEndpoint,\n  asked: { id: string; label: string },\n  serverId: string,\n  link: number,\n  host: Pick<Host, 'accept'>\n): void {\n  const port = new PortLink(endpoint);\n  const guest = guests.admit(String(asked.id), String(asked.label));\n  if (!guest) {\n    port.close('this guest seat is not valid');\n    return;\n  }\n  void port.ended.then(guests.joined(guest.id));\n  port.greet(serverId);\n  host.accept(port, { principal: { seat: 'guest', link, guest } satisfies AgentPrincipal });\n}\n"],
-  "mappings": "AACA,SAAS,WAAW,uBAAuB;AAM3C,SAA4B,gBAAgB;AAE5C,SAAS,sBAAsB,2BAA2B;AAC1D,SAAS,iBAAiB;AAEnB,SAAS,YAAY,OAAwC,MAA+B;AACjG,UAAQ,SAAS,CAAC,GACf,OAAO,CAAC,SAAS,KAAK,SAAS,mBAAmB,KAAK,SAAS,IAAI,EACpE,IAAI,CAAC,UAAU;AAAA,IACd,IAAI,KAAK;AAAA,IACT,MAAO,KAAK,OAA6B,QAAQ;AAAA,IACjD,OAAO,KAAK;AAAA,IACZ,QAAQ,KAAK,UAAU;AAAA,IACvB,WAAW,KAAK;AAAA,IAChB,WAAW,KAAK,aAAa;AAAA,EAC/B,EAAE;AACN;AAEA,MAAM,WAAW,CAAC,WAChB,QAAQ;AAAA,EACN,UAAU,OAAO,OAAO,EAAE,iBAAiB,SAAS,uBAAuB,mBAAmB;AAChG;AAEK,SAAS,YACd,QACA,QACA,OACA,SACA,WACA;AACA,SAAO,CAAC,cAAkF;AACxF,UAAM,SAAS,OAAO,QAAQ,SAAS;AACvC,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,OAAO,CAAC,QAAsD,MAAM,OAAO,OAAO;AACxF,QAAI,QAAQ,KAAK,MAAM,KAAK;AAC5B,UAAM,aAAa,gBAAkC,UAAU,OAAO,OAAO,EAAE,CAAC;AAChF,UAAM,MAAM,MAAM,UAAU,CAAC,QAAQ;AACnC,UAAI,KAAK,GAAG,MAAM,MAAO;AACzB,cAAQ,KAAK,GAAG;AAChB,iBAAW,QAAQ,SAAS,UAAU,OAAO,OAAO,EAAE,CAAC;AAAA,IACzD,CAAC;AACD,UAAM,OAAO,gBAA4B;AAAA,MACvC,IAAI,OAAO;AAAA,MACX,OAAO,OAAO;AAAA,MACd,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO,MAAM,EAAE,MAAM,OAAO,OAAO,GAAG,QAAQ,OAAO;AAAA,MAC3D,WAAW,OAAO;AAAA,MAClB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,IAC3B,CAAC;AACD,QAAI,SAAS,KAAK,UAAU,YAAY,WAAW,OAAO,OAAO,EAAE,CAAC;AACpE,UAAM,YAAY,gBAAiC,KAAK,MAAM,MAAM,CAAoB;AACxF,UAAM,eAAe,WAAW,UAAU,CAAC,UAAU;AACnD,YAAM,OAAO,KAAK,UAAU,YAAY,OAAO,OAAO,EAAE,CAAC;AACzD,UAAI,SAAS,OAAQ;AACrB,eAAS;AACT,gBAAU,QAAQ,SAAS,KAAK,MAAM,IAAI,CAAoB;AAAA,IAChE,CAAC;AACD,WAAO;AAAA,MACL,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,CAAC,SAAS,UAAU,OAAO,QAAQ,WAAW,SAAS,KAAK;AAAA,QACrE,WAAW,MAAM,SAAS,MAAM;AAAA,QAChC,aAAa,MAAM,SAAS,MAAM;AAAA,MACpC;AAAA,MACA,UAAU;AACR,YAAI;AACJ,uBAAe;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,WACd,QACA,UACA,OACA,UACA,MACA,MACM;AACN,QAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,QAAM,QAAQ,OAAO,MAAM,OAAO,MAAM,EAAE,GAAG,OAAO,MAAM,KAAK,CAAC;AAChE,MAAI,CAAC,OAAO;AACV,SAAK,MAAM,8BAA8B;AACzC;AAAA,EACF;AACA,OAAK,KAAK,MAAM,KAAK,OAAO,OAAO,MAAM,EAAE,CAAC;AAC5C,OAAK,MAAM,QAAQ;AACnB,OAAK,OAAO,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,MAAM,MAAM,EAA2B,CAAC;AAC1F;",
+  "sourcesContent": ["import type { Context, Host, ReplicatedState } from '@earendil-works/chord';\nimport { forbidden, replicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Agents } from '../agents.ts';\nimport type { AgentGuest, GuestProposal, GuestShown } from '../services.ts';\nimport type { AgentPrincipal, GuestPrincipal } from '../serving.ts';\nimport { type PortEndpoint, PortLink } from '../wire.ts';\nimport type { Guests } from './index.ts';\nimport { GUESTS_MANAGE_DENIED, GUESTS_MANAGE_LATER } from './policy.ts';\nimport type { ReviewsState } from './review.ts';\nimport { guestView } from './view.ts';\n\nexport function proposalsOf(state: ReviewsState | null | undefined, seat: string): GuestProposal[] {\n  return Object.values(state?.reviews ?? {})\n    .filter((review) => review.seat === seat)\n    .sort((a, b) => a.n - b.n)\n    .map((review) => ({\n      id: review.id,\n      text: review.text,\n      state: review.state,\n      reason: review.reason,\n      createdAt: review.createdAt,\n      decidedAt: review.decidedAt,\n    }));\n}\n\nconst managing = (guests: Pick<Guests, 'policy'>): Promise<never> =>\n  Promise.reject(\n    forbidden(guests.policy().manageGuests === 'deny' ? GUESTS_MANAGE_DENIED : GUESTS_MANAGE_LATER)\n  );\n\nexport function guestOpener(\n  guests: Guests,\n  agents: Pick<Agents, 'state'>,\n  views: ReplicatedState<Record<string, ConversationView>>,\n  context: Context\n) {\n  return (principal: GuestPrincipal): { value: AgentGuest; dispose(): void } | undefined => {\n    const record = guests.current(principal);\n    if (!record) return undefined;\n    const pick = (all: Record<string, ConversationView> | undefined) => all?.[record.agentId];\n    let shown = pick(views.value);\n    const transcript = replicatedState<ConversationView>(guestView(shown, record.id));\n    const off = views.subscribe((all) => {\n      if (pick(all) === shown) return;\n      shown = pick(all);\n      transcript.replace(context, guestView(shown, record.id));\n    });\n    const seat = replicatedState<GuestShown>({\n      id: record.id,\n      label: record.label,\n      agentId: record.agentId,\n      name: agents.state().cones[record.agentId]?.name ?? record.agentId,\n      expiresAt: record.expiresAt,\n      gates: { ...record.gates },\n    });\n    let listed = JSON.stringify(proposalsOf(guests.reviews.value, record.id));\n    const proposals = replicatedState<GuestProposal[]>(JSON.parse(listed) as GuestProposal[]);\n    const offProposals = guests.reviews.subscribe((state) => {\n      const next = JSON.stringify(proposalsOf(state, record.id));\n      if (next === listed) return;\n      listed = next;\n      proposals.replace(context, JSON.parse(next) as GuestProposal[]);\n    });\n    return {\n      value: {\n        transcript,\n        seat,\n        proposals,\n        propose: (request, using) => guests.propose(principal, request, using),\n        guestOpen: () => managing(guests),\n        guestRevoke: () => managing(guests),\n      },\n      dispose() {\n        off();\n        offProposals();\n      },\n    };\n  };\n}\n\nexport function admitGuest(\n  guests: Guests,\n  endpoint: PortEndpoint,\n  asked: { id: string; label: string },\n  serverId: string,\n  link: number,\n  host: Pick<Host, 'accept'>\n): void {\n  const port = new PortLink(endpoint);\n  const guest = guests.admit(String(asked.id), String(asked.label));\n  if (!guest) {\n    port.close('this guest seat is not valid');\n    return;\n  }\n  void port.ended.then(guests.joined(guest.id));\n  port.greet(serverId);\n  host.accept(port, { principal: { seat: 'guest', link, guest } satisfies AgentPrincipal });\n}\n"],
+  "mappings": "AACA,SAAS,WAAW,uBAAuB;AAK3C,SAA4B,gBAAgB;AAE5C,SAAS,sBAAsB,2BAA2B;AAE1D,SAAS,iBAAiB;AAEnB,SAAS,YAAY,OAAwC,MAA+B;AACjG,SAAO,OAAO,OAAO,OAAO,WAAW,CAAC,CAAC,EACtC,OAAO,CAAC,WAAW,OAAO,SAAS,IAAI,EACvC,KAAK,CAAC,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC,EACxB,IAAI,CAAC,YAAY;AAAA,IAChB,IAAI,OAAO;AAAA,IACX,MAAM,OAAO;AAAA,IACb,OAAO,OAAO;AAAA,IACd,QAAQ,OAAO;AAAA,IACf,WAAW,OAAO;AAAA,IAClB,WAAW,OAAO;AAAA,EACpB,EAAE;AACN;AAEA,MAAM,WAAW,CAAC,WAChB,QAAQ;AAAA,EACN,UAAU,OAAO,OAAO,EAAE,iBAAiB,SAAS,uBAAuB,mBAAmB;AAChG;AAEK,SAAS,YACd,QACA,QACA,OACA,SACA;AACA,SAAO,CAAC,cAAkF;AACxF,UAAM,SAAS,OAAO,QAAQ,SAAS;AACvC,QAAI,CAAC,OAAQ,QAAO;AACpB,UAAM,OAAO,CAAC,QAAsD,MAAM,OAAO,OAAO;AACxF,QAAI,QAAQ,KAAK,MAAM,KAAK;AAC5B,UAAM,aAAa,gBAAkC,UAAU,OAAO,OAAO,EAAE,CAAC;AAChF,UAAM,MAAM,MAAM,UAAU,CAAC,QAAQ;AACnC,UAAI,KAAK,GAAG,MAAM,MAAO;AACzB,cAAQ,KAAK,GAAG;AAChB,iBAAW,QAAQ,SAAS,UAAU,OAAO,OAAO,EAAE,CAAC;AAAA,IACzD,CAAC;AACD,UAAM,OAAO,gBAA4B;AAAA,MACvC,IAAI,OAAO;AAAA,MACX,OAAO,OAAO;AAAA,MACd,SAAS,OAAO;AAAA,MAChB,MAAM,OAAO,MAAM,EAAE,MAAM,OAAO,OAAO,GAAG,QAAQ,OAAO;AAAA,MAC3D,WAAW,OAAO;AAAA,MAClB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,IAC3B,CAAC;AACD,QAAI,SAAS,KAAK,UAAU,YAAY,OAAO,QAAQ,OAAO,OAAO,EAAE,CAAC;AACxE,UAAM,YAAY,gBAAiC,KAAK,MAAM,MAAM,CAAoB;AACxF,UAAM,eAAe,OAAO,QAAQ,UAAU,CAAC,UAAU;AACvD,YAAM,OAAO,KAAK,UAAU,YAAY,OAAO,OAAO,EAAE,CAAC;AACzD,UAAI,SAAS,OAAQ;AACrB,eAAS;AACT,gBAAU,QAAQ,SAAS,KAAK,MAAM,IAAI,CAAoB;AAAA,IAChE,CAAC;AACD,WAAO;AAAA,MACL,OAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,CAAC,SAAS,UAAU,OAAO,QAAQ,WAAW,SAAS,KAAK;AAAA,QACrE,WAAW,MAAM,SAAS,MAAM;AAAA,QAChC,aAAa,MAAM,SAAS,MAAM;AAAA,MACpC;AAAA,MACA,UAAU;AACR,YAAI;AACJ,qBAAa;AAAA,MACf;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,WACd,QACA,UACA,OACA,UACA,MACA,MACM;AACN,QAAM,OAAO,IAAI,SAAS,QAAQ;AAClC,QAAM,QAAQ,OAAO,MAAM,OAAO,MAAM,EAAE,GAAG,OAAO,MAAM,KAAK,CAAC;AAChE,MAAI,CAAC,OAAO;AACV,SAAK,MAAM,8BAA8B;AACzC;AAAA,EACF;AACA,OAAK,KAAK,MAAM,KAAK,OAAO,OAAO,MAAM,EAAE,CAAC;AAC5C,OAAK,MAAM,QAAQ;AACnB,OAAK,OAAO,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,MAAM,MAAM,EAA2B,CAAC;AAC1F;",
   "names": []
 }

package/dist/host.js

@@ -9,6 +9,7 @@ import {
   attachApprovals
 } from "./approvals/index.js";
 import { alwaysFor, attachApprovalPolicy } from "./approvals/policy.js";
+import { createSudo, ownedSudo } from "./approvals/sudo.js";
 import { createAgentControl } from "./control.js";
 import { trackDeliveries } from "./deliveries.js";
 import { createGuests } from "./guests/index.js";
@@ -23,6 +24,7 @@ import {
   AgentPagesService,
   AgentRemoteService,
   AgentSettings,
+  AgentSudoService,
   AgentTranscript,
   CONTROL_METHODS,
   CONTROL_READS,
@@ -31,10 +33,12 @@ import {
   PAGE_METHODS,
   REMOTE_METHODS,
   REMOTE_READS,
-  SETTINGS_METHODS
+  SETTINGS_METHODS,
+  SUDO_METHODS
 } from "./services.js";
 import {
   AGENT_HOST,
+  deviceOf,
   guestOf,
   principalKey,
   readable,
@@ -94,6 +98,17 @@ function gatedControls(control, shown, views, labels) {
   const viewed = { ...control, image: gated(visible), toolLabel: watchLabel(labels) };
   return { trusted, viewed };
 }
+function approving(agent, policy, judge, context) {
+  return attachApprovals(
+    {
+      harness: agent.harness,
+      guestAlways: alwaysFor(policy),
+      sudoApprover: () => policy.current().sudo.approver,
+      ...judge ? { judge } : {}
+    },
+    context
+  );
+}
 const noRevision = () => replicatedState({ revision: 0 });
 async function hostAgent(agent, options = {}) {
   const context = options.context ?? BACKGROUND_CONTEXT;
@@ -113,14 +128,7 @@ async function hostAgent(agent, options = {}) {
   const pages = options.pages ?? createPages();
   const deliveries = trackDeliveries(agent.harness, state, context);
   const policy = await attachApprovalPolicy(agent.harness, context);
-  const approvals = options.approvals ?? await attachApprovals(
-    {
-      harness: agent.harness,
-      guestAlways: alwaysFor(policy),
-      ...options.judge ? { judge: options.judge } : {}
-    },
-    context
-  );
+  const approvals = options.approvals ?? await approving(agent, policy, options.judge, context);
   const monitor = createMonitor({
     ...options.monitor,
     harness: agent.harness,
@@ -133,6 +141,7 @@ async function hostAgent(agent, options = {}) {
     agents: agent.agents,
     approvals,
     policy,
+    reviews: agent.reviews,
     context
   });
   const control = {
@@ -188,6 +197,11 @@ async function hostAgent(agent, options = {}) {
     approvals: approvals.state,
     approvalPolicy: policy.state
   };
+  const sudo = createSudo({
+    approvals,
+    agents: () => agent.agents.state(),
+    ...options.licks ? { licks: options.licks.licks } : {}
+  });
   const settings = options.settings ?? noSettings;
   const gates = gatedControls(control, slims.shown, shownViews, transcriptService.labels);
   const { trusted, viewed } = gates;
@@ -196,10 +210,11 @@ async function hostAgent(agent, options = {}) {
     viewed,
     transcript: transcriptService,
     viewMonitor: monitor.viewState,
+    sudo,
     settings,
     remote,
     pages,
-    guest: guestOpener(guests, agent.agents, mounted.views, context, approvals.state),
+    guest: guestOpener(guests, agent.agents, mounted.views, context),
     decide: (by) => (id, decision, reason, using) => approvals.decide(id, decision, reason, by, using)
   });
   const offGuests = guests.onEnd((id) => {
@@ -223,7 +238,10 @@ async function hostAgent(agent, options = {}) {
       links += 1;
       const link = new PortLink(endpoint);
       link.greet(serverId);
-      host.accept(link, { principal: { seat, link: links } });
+      const device = connectOptions?.device ? { device: connectOptions.device } : {};
+      host.accept(link, {
+        principal: { seat, link: links, ...device }
+      });
     },
     async close() {
       offGuests();
@@ -233,6 +251,7 @@ async function hostAgent(agent, options = {}) {
       await monitor.dispose();
       await remote.dispose();
       deliveries.dispose();
+      sudo.close();
       approvals.close();
       transcript.dispose();
       mounted.dispose();
@@ -285,9 +304,12 @@ function lazily(state) {
     events: (listener) => readable(state()).events(listener)
   };
 }
-const seated = (serving, seat) => ({
+const seated = (serving, seat, device) => ({
   ...seat === "view" ? serving.viewed : serving.trusted,
-  decide: serving.decide(seat === "owner" ? "owner" : "follower")
+  decide: serving.decide({
+    by: seat === "owner" ? "owner" : "follower",
+    ...device ? { device } : {}
+  })
 });
 const VIEW_METHODS = [...CONTROL_READS, ...OWNER_DEVICE_METHODS];
 function serveAgent(serving) {
@@ -295,7 +317,7 @@ function serveAgent(serving) {
   const viewing = { ...serving.transcript, monitor: serving.viewMonitor };
   host.serve(AgentControl, ((_input, principal) => {
     const seat = seatOf(principal);
-    const control = seated(serving, seat);
+    const control = seated(serving, seat, deviceOf(principal));
     if (seat === "view") return { kind: "view", ...served(() => control, VIEW_METHODS) };
     return { kind: "control", ...served(() => control, CONTROL_METHODS) };
   }));
@@ -345,6 +367,18 @@ function serveAgent(serving) {
       };
     })
   );
+  host.serve(AgentSudoService, ((_input, principal, self) => {
+    const sudo = serving.sudo;
+    if (seatOf(principal) !== "owner" || !sudo) return { kind: "none" };
+    const held = self.resources({
+      mine: resource({ rev: 1, open: () => ownedSudo(sudo), close: (mine) => mine.release() })
+    });
+    return {
+      kind: "sudo",
+      approvals: readable(sudo.approvals),
+      ...served(() => held.mine.value, SUDO_METHODS)
+    };
+  }));
   return host;
 }
 export {