@ai-ecoverse/slicc-agent 5.7.0 → 5.8.0

package/README.md

@@ -32,7 +32,7 @@ await agent.prompt('What is in /home?');
 - `@ai-ecoverse/slicc-agent/page` has what the page needs (`startAgent`, `connectAgent`) without the agent's runtime: no pi-durable, pi-ai, providers or SQLite, which load only in the worker. `@ai-ecoverse/slicc-agent/spectrum` is just as light, and a test keeps both that way.
 - `startAgent({ worker })` takes the Web Lock `slicc-agent`, so one tab at a time owns the agent worker, and waits while another tab holds it. `connect()` returns an `AgentConnection` (`control`, `transcript`, `prompt()`, and `webhook(name, { id?, headers?, body })`, which hands a webhook delivery, such as one from the tray hub, to the licks without a chord `Context`), `restart()` replaces the worker (durable resumes from SQLite), and `release()` stops it and lets the next tab take over. `port()` returns a raw `MessagePort` into the worker instead, for another tab: hand it over (through a SharedWorker, say), and that tab calls `connectAgent(port)`. A caller that already holds the lock passes `held: true`. A connection's `closed` resolves when its port ends (with the error, if any), and from then on its states keep their last values.
 - **Followers over a link** (PR 18): `port({ readOnly: true })` and `connect({ readOnly: true })` give a view-only connection, and `port({ pages: false })` a full one that never takes `panel` requests (see Panels).
-  - **What a view-only connection can do:** it sees the transcript, the agents, settings state and remote-control `watch`, and may call `wait` and `changesOpen`. It's still an owner device, so it has the owner-device methods (`OWNER_DEVICE_METHODS` in [`src/services.ts`](src/services.ts)) with the owner's powers: `decide`, `guestOpen`, `guestRevoke` and `approvalPolicySet`. Control gates driving, not approvals.
+  - **What a view-only connection can do:** it sees the transcript, the agents, settings state and remote-control `watch`, and may call `wait` and `changesOpen`. It's still an owner device, so it has the owner-device methods (`OWNER_DEVICE_METHODS` in [`src/services.ts`](src/services.ts)) with the owner's powers: `decide`, `guestOpen`, `guestRevoke`, `guestAlwaysForget` and `approvalPolicySet`. Control gates driving, not approvals.
   - **What it can't:** every other `AgentControl` method, settings action and remote-control `prompt` or `abort` is refused with `EACCES` ("this follower can watch, but not send, steer or abort"). Send and compact answer `accepted: false` with that code. The `view` seat's variants don't have those methods at all (`view` for control and settings, `watch` for remote control, `none` for Panels); the follower's client answers the missing ones with the refusals ([`src/readonly.ts`](src/readonly.ts)), so the worker never runs them. A `watch` stream is readable only over the link that opened it.
   - **Carrying the connection over a byte stream:** `linkEndpoint({ write, close })` is a `PortEndpoint` that `connectAgent` accepts. Feed it the stream's bytes with `receive(bytes)` and its end with `end(error?)`. On the owner's side, `bridgePort(port, { write, close })` does the same for the `MessagePort` from `port()`.
   - **The bytes:** the owner first posts a hello, its server id, then each Chord frame travels as its JSON text in UTF-8 (`PortLink` in [`src/wire.ts`](src/wire.ts)), and `{ close: true }` ends the port. On a byte stream each message becomes a frame: a `u32` big-endian length, then a tag (0 data, 1 hello, 2 close), then the payload. A frame is at most 16 MiB, and a malformed one ends the link.
@@ -604,10 +604,10 @@ It prints the tab's stdout and stderr on their own streams and exits with its co
 
 Every approval, of a guest's prompt, of a tool call in a run a guest started, or of a sudo request, is an item in one session document, `slicc.approvals` ([`src/approvals/`](src/approvals/)). That document is the authority: not a lick, which the agent can confirm itself, and not a UI projection, so a settled item stays settled after a reload.
 
-- **An item** is `{ id, kind, seat?, agentId, requester, detail, tier, state, decidedBy, device?, answer?, reason?, verdict?, always, createdAt, expiresAt, decidedAt? }`. `kind` is `guest-message` (`detail: { text, attachments }`), `guest-tool` (`{ tool, summary }`) or `sudo` (`{ command, target?, cwd?, alwaysScope? }`). `requester` is `{ kind: 'guest' | 'agent' | 'user', name, seat?, agentId?, where?, device? }`.
+- **An item** is `{ id, kind, seat?, agentId, requester, detail, tier, state, decidedBy, device?, answer?, reason?, verdict?, always, createdAt, expiresAt, decidedAt? }`. `kind` is `guest-message` (`detail: { text, attachments }`), `guest-tool` (`{ tool, summary, arguments?, task? }`) or `sudo` (`{ command, target?, cwd?, alwaysScope? }`). `requester` is `{ kind: 'guest' | 'agent' | 'user', name, seat?, agentId?, where?, device? }`.
 - **`state`** is `pending`, `approved` (with `answer` `once` or `always`), `rejected` (someone said no), `unanswered` (nobody decided: it timed out or couldn't be routed) or `withdrawn` (the requester went away). `reason` is a field, never a state: a person's own words, or `timeout`, `unknown-tier`, `unroutable`, `unknown-answer`, `restart`, `revoked`, `aborted` or `disconnected`. `decidedBy` is `owner`, `follower`, `judge` or `host`.
 - **`tier`** says who answers: `user` (a person, through `decide`), `agent` (the automatic judge), `cone` or `scoop:<name>`. A tier the agent doesn't know settles at once as `unanswered` with `unknown-tier`, and so does `cone` for a guest's tool call (`unroutable`), because a run can't approve its own gate. A person answers only `user` items, the judge only `agent` ones.
-- **The rules:** the first decision wins, and a later one, or one past `expiresAt`, is refused ("Someone else already answered this.", "This request timed out.", "This request was withdrawn."). An answer other than `once`, `always` or `deny` is a deny (`unknown-answer`). `always` is `false` for anything a guest triggered unless the approval policy's `guests.always` offers it for that kind (by default it doesn't), and `decide(id, 'always')` on an item without it is refused and leaves it pending. What Always then does for a guest is for #253 and #254; for now it approves once.
+- **The rules:** the first decision wins, and a later one, or one past `expiresAt`, is refused ("Someone else already answered this.", "This request timed out.", "This request was withdrawn."). An answer other than `once`, `always` or `deny` is a deny (`unknown-answer`). `always` is `false` for anything a guest triggered unless the approval policy's `guests.always` offers it for that kind (by default it doesn't), and `decide(id, 'always')` on an item without it is refused and leaves it pending. For a guest's tool call, Always records an exact rule on the seat (see Guest seats).
 - **Lifetime:** an item waits 5 minutes unless its requester sets `expiresAt`, then settles `unanswered`. Pending guest items survive a reload of the worker; pending `sudo` items are withdrawn (`restart`), because a reload ends the kernel's processes. The document keeps every pending item and the last 100 settled ones.
 - **In the worker,** `AgentHost.approvals` has `request(draft, ctx)`, `decide(id, answer, reason, by, ctx)` (`by` is a `DecidedBy`, or `{ by, device }` to record the deciding device), `settled(id, ctx)` (resolves when the item leaves `pending`), `withdraw(id, reason, ctx)` and `withdrawSeat(seat, ctx)`, which withdraws a revoked seat's pending items.
 - **Over the link,** `AgentTranscript.approvals` replicates the items, and `AgentControl.decide(id, decision, reason, ctx)` answers one, for every owner device: the owner's pages and followers with or without Control, all with the same powers. `decidedBy` comes from the link's seat (`owner` for the owner's pages, `follower` for the others), and is only a record of who answered. A guest never gets `decide`.
@@ -648,7 +648,7 @@ All the limits on approvals and guests live in one owner-changeable policy, the
 - **Changing it:** `AgentControl.approvalPolicySet({ guests?, sudo? })` changes the given entries. It's for owner devices only (the owner's pages, and followers with or without Control), never guests. It validates the change and answers `{ policy, error }`. Only the entries an owner device set are stored, as overrides read over the defaults, so a later default still reaches every entry nobody set.
 - **Where it applies:** gates and expiry are checked when a seat opens, so a seat keeps its gates when the policy changes later.
 - **What it doesn't open:** the guest contract stays closed to everything but its own seat (`closedToGuests`). That's the default-deny base a later policy entry may open.
-- **Not policy:** the guest guard (`slicc-guest-guard`, until #254) and the technical bounds (label 64, proposal 32,000 characters).
+- **Not policy:** the technical bounds (label 64, proposal 32,000 characters).
 
 ### Remote control
 
@@ -666,13 +666,17 @@ All the limits on approvals and guests live in one owner-changeable policy, the
 
 A guest seat (plan D13, PR 19) is a revocable seat on one cone: the guest sees that cone's live transcript and has a composer, and nothing else.
 
-- **Minting.** The tray hub mints the seat and its one-time URL (v6's routes, D10); the page hands the agent adapter its routes: `createAgentModel(connection, { guests: { mint({ label, expiresAt, gates, agentId }) → { id, url }, revoke(id) } })`. Its `guests` port (spectrum's `GuestPort`) mints through the hub, then opens the seat in the worker with `AgentControl.guestOpen({ id, label, agentId, expiresAt, gates })`; if the worker refuses, the hub's seat is revoked again. `list()` is the transcript's `guests` state (`{ id, label, agentId, createdAt, expiresAt, gates, connected, pending }`), and the URL is returned once and never kept. `unavailable()` says "Inviting guests needs the tray hub." without a hub, and "Only the owner's devices can invite guests." on a guest. Every owner device can invite, with or without Control. `gates()` lists the gates the approval policy allows for messages and tools, in display order, with `scoop:*` for "any scoop", for the invite dialog.
+- **Minting.** The tray hub mints the seat and its one-time URL (v6's routes, D10); the page hands the agent adapter its routes: `createAgentModel(connection, { guests: { mint({ label, expiresAt, gates, agentId }) → { id, url }, revoke(id) } })`. Its `guests` port (spectrum's `GuestPort`) mints through the hub, then opens the seat in the worker with `AgentControl.guestOpen({ id, label, agentId, expiresAt, gates })`; if the worker refuses, the hub's seat is revoked again. `list()` is the transcript's `guests` state (`{ id, label, agentId, createdAt, expiresAt, gates, connected, pending, alwaysTools }`), and the URL is returned once and never kept. `unavailable()` says "Inviting guests needs the tray hub." without a hub, and "Only the owner's devices can invite guests." on a guest. Every owner device can invite, with or without Control. `gates()` lists the gates the approval policy allows for messages and tools, in display order, with `scoop:*` for "any scoop", for the invite dialog.
 - **The record.** Seats live in the session document `slicc.guests`, so they survive reloads and restarts: id, label (control characters stripped, at most 64 characters), cone, expiry (at most the policy's `guests.maxSeatDays`, 30 by default), the two gates (`user`, `agent`, `cone`, `scoop:<name>` or `off`, fixed when the seat is opened and checked then against the policy's `allowedMessageGates` and `allowedToolGates`; by default the tools gate can't be `off` or `cone`, from any caller: "A guest's tool calls need a review: by a person, the judge or a scoop.") and an epoch. Revoking (`guestRevoke(id)`) keeps a tombstone, bumps the epoch, withdraws the guest's messages still queued in the cone, and ends every guest link of the seat (`invalidatePrincipal`). An expired seat ends the same way at its expiry. Tombstones go 365 days after they end, the longest a seat can be opened for.
 - **Joining.** The hub resolves the guest's token to the seat's id and label, and the owner page opens `owner.port({ guest: { id, label } })` and bridges it like a follower's. Before Chord sees the link, the worker checks that the seat exists, isn't revoked or expired, and has that label; otherwise it closes the port. The link's principal is `{ seat: 'guest', link, guest: { id, name, epoch } }`, and anything else the port asks for (`readOnly: false`, `pages`) is ignored.
 - **What a guest gets.** Every contract served from the agent's host refuses a guest principal (`forbidden`) unless its factory is opened with `openToGuests`, so a contract added later is closed to guests until someone opens it. The only open one is `slicc.agent.guest`: its `guest` variant has the shared cone's transcript (its user, assistant, tool and compaction entries; `pi.live`; `pi.agent`'s model and thinking level; and only the guest's own queued messages) and the seat, plus `propose({ text, requestId })`. Everyone else gets its empty `none` variant.
 - **The guest's page** calls `connectGuest(endpoint)` from `@ai-ecoverse/slicc-agent/page`, which resolves an `AgentConnection` for that one cone with `guest` (the seat as the guest sees it); `connectAgent` on a guest port is forbidden. `createAgentModel(guest).agent` shows the transcript and sends through `propose`; every other control method, settings action, `prompt` and `webhook` rejects with `EACCES` ("a guest can only watch and send messages"). A port that isn't a valid seat rejects with `EACCES` "This guest link isn't valid any more."
 - **Messages.** With the messages gate `off`, a guest's message is submitted to the cone as a follow-up placed as a `slicc.guest-input` entry (`{ seat, name, approval: null }`), and the model reads it after the line "[A guest message from "<label>", shared through a guest seat, NOT from the cone's owner. …]". The spectrum adapter shows it as a user message with `origin: 'guest'` and `from` the label, without that line, queued or placed. Under any other gate it waits as a pending `guest-message` approval (tier = the gate, requester from the seat), which times out like other approvals. The guest contract's `proposals` state lists the seat's own, and the guest's adapter shows a pending one as its queued message and an ended one as a notice: "Nobody approved this in time.", "It was declined." or "It was withdrawn." Once approved it is delivered exactly once (request id `guest:<seat>:<approval>`, and the seat record keeps the ids it delivered) as the same entry with `approval` set; a seat revoked or expired by then gets nothing. #253 makes the delivery durable across a crash between approval and submit, and adds the review UX.
-- **Tool calls in guest runs are refused.** Until #254 gates them by the seat's tools tier, `slicc-guest-guard`, an extension `openAgent` installs in every registry (and that conversations with a pinned extension list get back, like `slicc-secrets`), blocks every tool call in a run whose inputs include one a guest placed (its request id starts `guest:`), nested and codemode calls included: "Tool calls in a run a guest started need a review, which this agent can't do yet." The owner's own runs in the same cone use tools as before.
+- **Tool calls in guest runs wait for a review.** `slicc-guest-guard` ([`src/guests/guard.ts`](src/guests/guard.ts)) is a `beforeTool` hook that `openAgent` installs in every registry, so every conversation has it: old ones stored with an extension list, forks and thawed cones included. It gates each tool call in a run whose `pi.live` inputs include a guest's delivered message, found in the seat's `submissions` with the tools tier fixed when it was submitted. A run an owner steered into still counts. Nested calls from codemode and MCP bridges go through the same hook, so a `codemode` call is reviewed itself and so is each tool call its script makes. Owner-only runs pass untouched.
+  - **The tier decides.** `off` passes, if the policy's `allowedToolGates` still allows it (it doesn't by default). A tier the policy no longer allows is refused with the policy's sentence. A tier the agent doesn't know, a guest input with no recorded submission, and a seat that has ended all deny. So does `scoop:<name>`, at once, because no scoop can answer an approval yet. Otherwise the hook files a `guest-tool` approval on that tier (`user`, or `agent` for the judge), with `detail: { tool, summary, arguments, task }`, and waits for it on the approvals document, honouring the abort signal. If the seat ends while the call is filed or reviewed, the item is withdrawn and the call blocked, even after an approval. Anything else but approve blocks too, and the model sees `Tool call blocked: <reason>`, such as "The owner declined this tool call in a run a guest started." with the owner's reason.
+  - **Once per call.** The approval's id is a memo of the tool task (`slicc.guest-tool:<seat>:<tier>`), so after a crash or reload the hook reruns before the tool runs and rejoins the same review, without asking again.
+  - **Abort.** Once a waiting call's task ends without an answer, its approval is withdrawn (`aborted`), so aborting the conversation withdraws its pending guest tool calls. That also covers the calls of a script abandoned by a restart.
+  - **Always** is offered only while `guests.always.tools` is true. An Always answer adds a rule to the seat's `alwaysTools`: `{ approval, tool, arguments, by, at }`, where `arguments` is the call's canonical JSON (keys sorted). Later calls from that seat with the same tool and exactly the same arguments pass without asking, while the policy still offers Always. The transcript's `guests` list shows each seat's rules. `AgentControl.guestAlwaysForget(seat, approval)`, for owner devices, removes one, and revoking the seat drops them all.
 - **Revocation and expiry clean up alike.** Revoking or expiring a seat withdraws its queued input and its pending approvals; a proposal still being placed is serialised with them per seat and rechecks the seat right before it's placed, so nothing lands after a revoke.
 - **Every owner device manages guests.** The owner's pages and followers, with or without Control, open, list and revoke seats alike.
 - **A guest managing guests** is refused by the approval policy (`guests.manageGuests`, `deny`). The guest contract has `guestOpen` and `guestRevoke`, and both are refused with `forbidden` ("The owner's guest policy doesn't let guests manage guests."). The approval policy itself is never a guest's to change: its write is on `AgentControl`, which a guest can't reach.

package/dist/agent.js

@@ -6,7 +6,7 @@ import {
   MemoryStorage
 } from "@earendil-works/pi-durable";
 import { openAgents } from "./agents.js";
-import { guestGuard } from "./guests/guard.js";
+import { guestToolGate } from "./guests/guard.js";
 import { guestReviews } from "./guests/review.js";
 function answerText(content) {
   if (typeof content === "string") return content;
@@ -25,7 +25,8 @@ async function openAgent(options) {
   const context = options.context ?? BACKGROUND_CONTEXT;
   const registry = options.registry ?? createRegistry();
   let opened;
-  registry.install(guestGuard(() => opened));
+  const gate = guestToolGate(() => opened);
+  registry.install(gate.extension);
   const reviews = guestReviews();
   registry.install(reviews.extension);
   const harness = await Harness.open(
@@ -49,6 +50,7 @@ async function openAgent(options) {
     root,
     agents,
     reviews,
+    gate,
     cone: () => agents.cone(),
     switchCone: (conversation, switching) => agents.switchCone(conversation, switching),
     onCone: (listener) => agents.onCone(listener),

package/dist/agent.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/agent.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Models } from '@earendil-works/pi-ai/models';\nimport {\n  AssistantEntry,\n  type Conversation,\n  createRegistry,\n  type EntryId,\n  Harness,\n  type HarnessOptions,\n  MemoryStorage,\n  type ModelRef,\n  type Registry,\n  type Storage,\n} from '@earendil-works/pi-durable';\nimport { type Agents, openAgents } from './agents.ts';\nimport type { Cones } from './cone.ts';\nimport { guestGuard } from './guests/guard.ts';\nimport { type GuestReviews, guestReviews } from './guests/review.ts';\n\nexport interface AgentOptions {\n  models: Models;\n  model: ModelRef;\n  storage?: Storage;\n  registry?: Registry;\n  settings?: HarnessOptions['settings'];\n  env?: HarnessOptions['env'];\n  conversationCreated?: HarnessOptions['conversationCreated'];\n  context?: Context;\n  beforeResume?: (harness: Harness, context: Context) => Promise<unknown>;\n}\n\nexport interface Agent extends Cones {\n  readonly harness: Harness;\n  readonly root: Conversation;\n  readonly agents: Agents;\n  readonly reviews: GuestReviews;\n  onCone(listener: (conversation: Conversation) => void | Promise<void>): () => void;\n  prompt(text: string): Promise<string>;\n  close(): Promise<void>;\n}\n\ninterface Block {\n  type: string;\n  text?: string;\n}\n\nexport function answerText(content: unknown): string {\n  if (typeof content === 'string') return content;\n  if (!Array.isArray(content)) return '';\n  return (content as Block[])\n    .filter((block) => block.type === 'text')\n    .map((block) => block.text ?? '')\n    .join('');\n}\n\nasync function prompt(root: Conversation, text: string, context: Context): Promise<string> {\n  const submission = await root.submit({ type: 'input', content: text }, context);\n  const settled = await submission.wait(context);\n  const { answer, reason } = settled as { answer?: EntryId; reason?: string };\n  if (answer === undefined) throw new Error(`unanswered: ${reason}`);\n  const entry = await root.commit((tx) => tx.entry(AssistantEntry, answer), context);\n  return answerText(entry?.model?.[0]?.content);\n}\n\nexport async function openAgent(options: AgentOptions): Promise<Agent> {\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const registry = options.registry ?? createRegistry();\n  let opened: Harness | undefined;\n  registry.install(guestGuard(() => opened));\n  const reviews = guestReviews();\n  registry.install(reviews.extension);\n  const harness = await Harness.open(\n    options.storage ?? new MemoryStorage(),\n    {\n      models: options.models,\n      registry,\n      ...(options.settings ? { settings: options.settings } : {}),\n      ...(options.env ? { env: options.env } : {}),\n      ...(options.conversationCreated ? { conversationCreated: options.conversationCreated } : {}),\n    },\n    context\n  );\n  opened = harness;\n  const root = await harness.root(context, { agent: { model: options.model } });\n  const agents = await openAgents(harness, root, context);\n  await options.beforeResume?.(harness, context);\n  harness.resume();\n  return {\n    harness,\n    root,\n    agents,\n    reviews,\n    cone: () => agents.cone(),\n    switchCone: (conversation, switching) => agents.switchCone(conversation, switching),\n    onCone: (listener) => agents.onCone(listener),\n    prompt: (text) => prompt(agents.cone(), text, context),\n    close: () => harness.close(context),\n  };\n}\n"],
-  "mappings": "AACA,SAAS,0BAA0B;AAEnC;AAAA,EACE;AAAA,EAEA;AAAA,EAEA;AAAA,EAEA;AAAA,OAIK;AACP,SAAsB,kBAAkB;AAExC,SAAS,kBAAkB;AAC3B,SAA4B,oBAAoB;AA6BzC,SAAS,WAAW,SAA0B;AACnD,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,MAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,QAAO;AACpC,SAAQ,QACL,OAAO,CAAC,UAAU,MAAM,SAAS,MAAM,EACvC,IAAI,CAAC,UAAU,MAAM,QAAQ,EAAE,EAC/B,KAAK,EAAE;AACZ;AAEA,eAAe,OAAO,MAAoB,MAAc,SAAmC;AACzF,QAAM,aAAa,MAAM,KAAK,OAAO,EAAE,MAAM,SAAS,SAAS,KAAK,GAAG,OAAO;AAC9E,QAAM,UAAU,MAAM,WAAW,KAAK,OAAO;AAC7C,QAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,MAAI,WAAW,OAAW,OAAM,IAAI,MAAM,eAAe,MAAM,EAAE;AACjE,QAAM,QAAQ,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,OAAO;AACjF,SAAO,WAAW,OAAO,QAAQ,CAAC,GAAG,OAAO;AAC9C;AAEA,eAAsB,UAAU,SAAuC;AACrE,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,QAAQ,YAAY,eAAe;AACpD,MAAI;AACJ,WAAS,QAAQ,WAAW,MAAM,MAAM,CAAC;AACzC,QAAM,UAAU,aAAa;AAC7B,WAAS,QAAQ,QAAQ,SAAS;AAClC,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,QAAQ,WAAW,IAAI,cAAc;AAAA,IACrC;AAAA,MACE,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,MACzD,GAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;AAAA,MAC1C,GAAI,QAAQ,sBAAsB,EAAE,qBAAqB,QAAQ,oBAAoB,IAAI,CAAC;AAAA,IAC5F;AAAA,IACA;AAAA,EACF;AACA,WAAS;AACT,QAAM,OAAO,MAAM,QAAQ,KAAK,SAAS,EAAE,OAAO,EAAE,OAAO,QAAQ,MAAM,EAAE,CAAC;AAC5E,QAAM,SAAS,MAAM,WAAW,SAAS,MAAM,OAAO;AACtD,QAAM,QAAQ,eAAe,SAAS,OAAO;AAC7C,UAAQ,OAAO;AACf,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,MAAM,OAAO,KAAK;AAAA,IACxB,YAAY,CAAC,cAAc,cAAc,OAAO,WAAW,cAAc,SAAS;AAAA,IAClF,QAAQ,CAAC,aAAa,OAAO,OAAO,QAAQ;AAAA,IAC5C,QAAQ,CAAC,SAAS,OAAO,OAAO,KAAK,GAAG,MAAM,OAAO;AAAA,IACrD,OAAO,MAAM,QAAQ,MAAM,OAAO;AAAA,EACpC;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Models } from '@earendil-works/pi-ai/models';\nimport {\n  AssistantEntry,\n  type Conversation,\n  createRegistry,\n  type EntryId,\n  Harness,\n  type HarnessOptions,\n  MemoryStorage,\n  type ModelRef,\n  type Registry,\n  type Storage,\n} from '@earendil-works/pi-durable';\nimport { type Agents, openAgents } from './agents.ts';\nimport type { Cones } from './cone.ts';\nimport { type GuestToolGate, guestToolGate } from './guests/guard.ts';\nimport { type GuestReviews, guestReviews } from './guests/review.ts';\n\nexport interface AgentOptions {\n  models: Models;\n  model: ModelRef;\n  storage?: Storage;\n  registry?: Registry;\n  settings?: HarnessOptions['settings'];\n  env?: HarnessOptions['env'];\n  conversationCreated?: HarnessOptions['conversationCreated'];\n  context?: Context;\n  beforeResume?: (harness: Harness, context: Context) => Promise<unknown>;\n}\n\nexport interface Agent extends Cones {\n  readonly harness: Harness;\n  readonly root: Conversation;\n  readonly agents: Agents;\n  readonly reviews: GuestReviews;\n  readonly gate: GuestToolGate;\n  onCone(listener: (conversation: Conversation) => void | Promise<void>): () => void;\n  prompt(text: string): Promise<string>;\n  close(): Promise<void>;\n}\n\ninterface Block {\n  type: string;\n  text?: string;\n}\n\nexport function answerText(content: unknown): string {\n  if (typeof content === 'string') return content;\n  if (!Array.isArray(content)) return '';\n  return (content as Block[])\n    .filter((block) => block.type === 'text')\n    .map((block) => block.text ?? '')\n    .join('');\n}\n\nasync function prompt(root: Conversation, text: string, context: Context): Promise<string> {\n  const submission = await root.submit({ type: 'input', content: text }, context);\n  const settled = await submission.wait(context);\n  const { answer, reason } = settled as { answer?: EntryId; reason?: string };\n  if (answer === undefined) throw new Error(`unanswered: ${reason}`);\n  const entry = await root.commit((tx) => tx.entry(AssistantEntry, answer), context);\n  return answerText(entry?.model?.[0]?.content);\n}\n\nexport async function openAgent(options: AgentOptions): Promise<Agent> {\n  const context = options.context ?? BACKGROUND_CONTEXT;\n  const registry = options.registry ?? createRegistry();\n  let opened: Harness | undefined;\n  const gate = guestToolGate(() => opened);\n  registry.install(gate.extension);\n  const reviews = guestReviews();\n  registry.install(reviews.extension);\n  const harness = await Harness.open(\n    options.storage ?? new MemoryStorage(),\n    {\n      models: options.models,\n      registry,\n      ...(options.settings ? { settings: options.settings } : {}),\n      ...(options.env ? { env: options.env } : {}),\n      ...(options.conversationCreated ? { conversationCreated: options.conversationCreated } : {}),\n    },\n    context\n  );\n  opened = harness;\n  const root = await harness.root(context, { agent: { model: options.model } });\n  const agents = await openAgents(harness, root, context);\n  await options.beforeResume?.(harness, context);\n  harness.resume();\n  return {\n    harness,\n    root,\n    agents,\n    reviews,\n    gate,\n    cone: () => agents.cone(),\n    switchCone: (conversation, switching) => agents.switchCone(conversation, switching),\n    onCone: (listener) => agents.onCone(listener),\n    prompt: (text) => prompt(agents.cone(), text, context),\n    close: () => harness.close(context),\n  };\n}\n"],
+  "mappings": "AACA,SAAS,0BAA0B;AAEnC;AAAA,EACE;AAAA,EAEA;AAAA,EAEA;AAAA,EAEA;AAAA,OAIK;AACP,SAAsB,kBAAkB;AAExC,SAA6B,qBAAqB;AAClD,SAA4B,oBAAoB;AA8BzC,SAAS,WAAW,SAA0B;AACnD,MAAI,OAAO,YAAY,SAAU,QAAO;AACxC,MAAI,CAAC,MAAM,QAAQ,OAAO,EAAG,QAAO;AACpC,SAAQ,QACL,OAAO,CAAC,UAAU,MAAM,SAAS,MAAM,EACvC,IAAI,CAAC,UAAU,MAAM,QAAQ,EAAE,EAC/B,KAAK,EAAE;AACZ;AAEA,eAAe,OAAO,MAAoB,MAAc,SAAmC;AACzF,QAAM,aAAa,MAAM,KAAK,OAAO,EAAE,MAAM,SAAS,SAAS,KAAK,GAAG,OAAO;AAC9E,QAAM,UAAU,MAAM,WAAW,KAAK,OAAO;AAC7C,QAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,MAAI,WAAW,OAAW,OAAM,IAAI,MAAM,eAAe,MAAM,EAAE;AACjE,QAAM,QAAQ,MAAM,KAAK,OAAO,CAAC,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,OAAO;AACjF,SAAO,WAAW,OAAO,QAAQ,CAAC,GAAG,OAAO;AAC9C;AAEA,eAAsB,UAAU,SAAuC;AACrE,QAAM,UAAU,QAAQ,WAAW;AACnC,QAAM,WAAW,QAAQ,YAAY,eAAe;AACpD,MAAI;AACJ,QAAM,OAAO,cAAc,MAAM,MAAM;AACvC,WAAS,QAAQ,KAAK,SAAS;AAC/B,QAAM,UAAU,aAAa;AAC7B,WAAS,QAAQ,QAAQ,SAAS;AAClC,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,QAAQ,WAAW,IAAI,cAAc;AAAA,IACrC;AAAA,MACE,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,MACzD,GAAI,QAAQ,MAAM,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC;AAAA,MAC1C,GAAI,QAAQ,sBAAsB,EAAE,qBAAqB,QAAQ,oBAAoB,IAAI,CAAC;AAAA,IAC5F;AAAA,IACA;AAAA,EACF;AACA,WAAS;AACT,QAAM,OAAO,MAAM,QAAQ,KAAK,SAAS,EAAE,OAAO,EAAE,OAAO,QAAQ,MAAM,EAAE,CAAC;AAC5E,QAAM,SAAS,MAAM,WAAW,SAAS,MAAM,OAAO;AACtD,QAAM,QAAQ,eAAe,SAAS,OAAO;AAC7C,UAAQ,OAAO;AACf,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,MAAM,MAAM,OAAO,KAAK;AAAA,IACxB,YAAY,CAAC,cAAc,cAAc,OAAO,WAAW,cAAc,SAAS;AAAA,IAClF,QAAQ,CAAC,aAAa,OAAO,OAAO,QAAQ;AAAA,IAC5C,QAAQ,CAAC,SAAS,OAAO,OAAO,KAAK,GAAG,MAAM,OAAO;AAAA,IACrD,OAAO,MAAM,QAAQ,MAAM,OAAO;AAAA,EACpC;AACF;",
   "names": []
 }

package/dist/approvals/record.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/approvals/record.ts"],
-  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\n\nexport type ApprovalKind = 'guest-message' | 'guest-tool' | 'sudo';\n\nexport type ApprovalState = 'pending' | 'approved' | 'rejected' | 'unanswered' | 'withdrawn';\n\nexport type ApprovalTier = 'user' | 'agent' | 'cone' | `scoop:${string}`;\n\nexport type ApprovalAnswer = 'once' | 'always' | 'deny';\n\nexport type DecidedBy = 'owner' | 'follower' | 'judge' | 'host';\n\nexport type ApprovalRequester = {\n  kind: 'guest' | 'agent' | 'user';\n  name: string;\n  seat?: string;\n  agentId?: string;\n  where?: string;\n  device?: string;\n};\n\nexport type ApprovalVerdict = {\n  decision: 'allow' | 'deny' | 'unsure';\n  reason: string;\n  risk?: number;\n  aligned?: number;\n  model?: string;\n};\n\nexport type ApprovalAttachment = { name: string; mimeType: string; size: number };\n\nexport type GuestMessageDetail = { text: string; attachments: ApprovalAttachment[] };\n\nexport type GuestToolDetail = { tool: string; summary: string };\n\nexport type SudoDetail = {\n  command: string;\n  target?: string;\n  cwd?: string;\n  alwaysScope?: 'cwd';\n};\n\ntype Base = {\n  id: string;\n  seat?: string;\n  agentId: string;\n  requester: ApprovalRequester;\n  tier: string;\n  state: ApprovalState;\n  decidedBy: DecidedBy | null;\n  device?: string;\n  answer?: 'once' | 'always';\n  reason?: string;\n  verdict?: ApprovalVerdict;\n  always: boolean;\n  createdAt: number;\n  expiresAt: number;\n  decidedAt?: number;\n};\n\nexport type GuestMessageApproval = Base & { kind: 'guest-message'; detail: GuestMessageDetail };\nexport type GuestToolApproval = Base & { kind: 'guest-tool'; detail: GuestToolDetail };\nexport type SudoApproval = Base & { kind: 'sudo'; detail: SudoDetail };\n\nexport type Approval = GuestMessageApproval | GuestToolApproval | SudoApproval;\n\ntype DraftOf<T extends Approval> = Pick<T, 'kind' | 'detail' | 'agentId' | 'requester'> & {\n  seat?: string;\n  tier: string;\n  always?: boolean;\n  expiresAt?: number;\n};\n\nexport type ApprovalDraft =\n  | DraftOf<GuestMessageApproval>\n  | DraftOf<GuestToolApproval>\n  | DraftOf<SudoApproval>;\n\nexport type ApprovalsState = { items: Approval[] };\n\nexport const ApprovalsDoc = defineDoc<ApprovalsState>({\n  kind: 'slicc.approvals',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ items: [] }),\n});\n\nexport const APPROVAL_MS = 300_000;\nexport const APPROVALS_KEPT = 100;\nexport const MAX_DELAY = 2_147_483_647;\nexport const REASON_LENGTH = 500;\n\nexport const REASONS = {\n  timeout: 'timeout',\n  unknownTier: 'unknown-tier',\n  unroutable: 'unroutable',\n  unknownAnswer: 'unknown-answer',\n  restart: 'restart',\n  revoked: 'revoked',\n  aborted: 'aborted',\n  disconnected: 'disconnected',\n} as const;\n\nexport const guestKind = (kind: ApprovalKind): boolean => kind !== 'sudo';\n\nexport function knownTier(tier: unknown): tier is ApprovalTier {\n  if (tier === 'user' || tier === 'agent' || tier === 'cone') return true;\n  return typeof tier === 'string' && /^scoop:\\S+$/.test(tier);\n}\n\nexport function routable(kind: ApprovalKind, tier: ApprovalTier): boolean {\n  return !(kind === 'guest-tool' && tier === 'cone');\n}\n\nexport function answerOf(value: unknown): ApprovalAnswer | null {\n  return value === 'once' || value === 'always' || value === 'deny' ? value : null;\n}\n\nexport const personal = (by: DecidedBy): boolean => by === 'owner' || by === 'follower';\n\nexport function answerer(by: DecidedBy, tier: string): boolean {\n  if (personal(by)) return tier === 'user';\n  if (by === 'judge') return tier === 'agent';\n  return true;\n}\n\nexport type SudoApprover = 'user' | 'agent';\n\nexport const sudoApprover = (value: unknown): SudoApprover =>\n  value === 'agent' ? 'agent' : 'user';\n\nexport const tierOf = (kind: ApprovalKind, tier: string, sudo: SudoApprover): string =>\n  kind === 'sudo' ? sudo : tier;\n\nexport function gone(state: ApprovalState): string {\n  if (state === 'unanswered') return 'This request timed out.';\n  if (state === 'withdrawn') return 'This request was withdrawn.';\n  return 'Someone else already answered this.';\n}\n\nexport function cleanReason(reason: unknown): string | undefined {\n  if (typeof reason !== 'string') return undefined;\n  const text = reason.trim().slice(0, REASON_LENGTH);\n  return text || undefined;\n}\n\nconst decided = (item: Approval) => item.decidedAt ?? item.createdAt;\n\nexport function prune(items: Approval[], kept = APPROVALS_KEPT): Approval[] {\n  const settled = items.filter((item) => item.state !== 'pending');\n  settled.sort((a, b) => decided(a) - decided(b));\n  const drop = new Set(settled.slice(0, Math.max(0, settled.length - kept)));\n  return items.filter((item) => !drop.has(item));\n}\n\nexport type Settle = { state: Exclude<ApprovalState, 'pending'>; by: DecidedBy; reason?: string };\n\nexport type Ruling = { error?: string; settle?: Settle; answer?: 'once' | 'always' };\n\nconst why = (reason: string | undefined) => (reason ? { reason } : {});\n\nexport function ruled(\n  item: Approval,\n  answer: unknown,\n  reason: unknown,\n  by: DecidedBy,\n  at: number\n): Ruling {\n  if (item.state !== 'pending') return { error: gone(item.state) };\n  if (item.expiresAt <= at)\n    return {\n      error: gone('unanswered'),\n      settle: { state: 'unanswered', by: 'host', reason: REASONS.timeout },\n    };\n  if (!answerer(by, item.tier)) return { error: \"This request isn't yours to answer.\" };\n  const known = answerOf(answer);\n  if (known === 'always' && !item.always)\n    return { error: \"Always isn't offered for this request.\" };\n  if (!known) return { settle: { state: 'rejected', by, reason: REASONS.unknownAnswer } };\n  const given = why(cleanReason(reason));\n  if (known === 'deny') return { settle: { state: 'rejected', by, ...given } };\n  return { settle: { state: 'approved', by, ...given }, answer: known };\n}\n"],
+  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\n\nexport type ApprovalKind = 'guest-message' | 'guest-tool' | 'sudo';\n\nexport type ApprovalState = 'pending' | 'approved' | 'rejected' | 'unanswered' | 'withdrawn';\n\nexport type ApprovalTier = 'user' | 'agent' | 'cone' | `scoop:${string}`;\n\nexport type ApprovalAnswer = 'once' | 'always' | 'deny';\n\nexport type DecidedBy = 'owner' | 'follower' | 'judge' | 'host';\n\nexport type ApprovalRequester = {\n  kind: 'guest' | 'agent' | 'user';\n  name: string;\n  seat?: string;\n  agentId?: string;\n  where?: string;\n  device?: string;\n};\n\nexport type ApprovalVerdict = {\n  decision: 'allow' | 'deny' | 'unsure';\n  reason: string;\n  risk?: number;\n  aligned?: number;\n  model?: string;\n};\n\nexport type ApprovalAttachment = { name: string; mimeType: string; size: number };\n\nexport type GuestMessageDetail = { text: string; attachments: ApprovalAttachment[] };\n\nexport type GuestToolDetail = { tool: string; summary: string; arguments?: string; task?: number };\n\nexport type SudoDetail = {\n  command: string;\n  target?: string;\n  cwd?: string;\n  alwaysScope?: 'cwd';\n};\n\ntype Base = {\n  id: string;\n  seat?: string;\n  agentId: string;\n  requester: ApprovalRequester;\n  tier: string;\n  state: ApprovalState;\n  decidedBy: DecidedBy | null;\n  device?: string;\n  answer?: 'once' | 'always';\n  reason?: string;\n  verdict?: ApprovalVerdict;\n  always: boolean;\n  createdAt: number;\n  expiresAt: number;\n  decidedAt?: number;\n};\n\nexport type GuestMessageApproval = Base & { kind: 'guest-message'; detail: GuestMessageDetail };\nexport type GuestToolApproval = Base & { kind: 'guest-tool'; detail: GuestToolDetail };\nexport type SudoApproval = Base & { kind: 'sudo'; detail: SudoDetail };\n\nexport type Approval = GuestMessageApproval | GuestToolApproval | SudoApproval;\n\ntype DraftOf<T extends Approval> = Pick<T, 'kind' | 'detail' | 'agentId' | 'requester'> & {\n  seat?: string;\n  tier: string;\n  always?: boolean;\n  expiresAt?: number;\n};\n\nexport type ApprovalDraft =\n  | DraftOf<GuestMessageApproval>\n  | DraftOf<GuestToolApproval>\n  | DraftOf<SudoApproval>;\n\nexport type ApprovalsState = { items: Approval[] };\n\nexport const ApprovalsDoc = defineDoc<ApprovalsState>({\n  kind: 'slicc.approvals',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ items: [] }),\n});\n\nexport const APPROVAL_MS = 300_000;\nexport const APPROVALS_KEPT = 100;\nexport const MAX_DELAY = 2_147_483_647;\nexport const REASON_LENGTH = 500;\n\nexport const REASONS = {\n  timeout: 'timeout',\n  unknownTier: 'unknown-tier',\n  unroutable: 'unroutable',\n  unknownAnswer: 'unknown-answer',\n  restart: 'restart',\n  revoked: 'revoked',\n  aborted: 'aborted',\n  disconnected: 'disconnected',\n} as const;\n\nexport const guestKind = (kind: ApprovalKind): boolean => kind !== 'sudo';\n\nexport function knownTier(tier: unknown): tier is ApprovalTier {\n  if (tier === 'user' || tier === 'agent' || tier === 'cone') return true;\n  return typeof tier === 'string' && /^scoop:\\S+$/.test(tier);\n}\n\nexport function routable(kind: ApprovalKind, tier: ApprovalTier): boolean {\n  return !(kind === 'guest-tool' && tier === 'cone');\n}\n\nexport function answerOf(value: unknown): ApprovalAnswer | null {\n  return value === 'once' || value === 'always' || value === 'deny' ? value : null;\n}\n\nexport const personal = (by: DecidedBy): boolean => by === 'owner' || by === 'follower';\n\nexport function answerer(by: DecidedBy, tier: string): boolean {\n  if (personal(by)) return tier === 'user';\n  if (by === 'judge') return tier === 'agent';\n  return true;\n}\n\nexport type SudoApprover = 'user' | 'agent';\n\nexport const sudoApprover = (value: unknown): SudoApprover =>\n  value === 'agent' ? 'agent' : 'user';\n\nexport const tierOf = (kind: ApprovalKind, tier: string, sudo: SudoApprover): string =>\n  kind === 'sudo' ? sudo : tier;\n\nexport function gone(state: ApprovalState): string {\n  if (state === 'unanswered') return 'This request timed out.';\n  if (state === 'withdrawn') return 'This request was withdrawn.';\n  return 'Someone else already answered this.';\n}\n\nexport function cleanReason(reason: unknown): string | undefined {\n  if (typeof reason !== 'string') return undefined;\n  const text = reason.trim().slice(0, REASON_LENGTH);\n  return text || undefined;\n}\n\nconst decided = (item: Approval) => item.decidedAt ?? item.createdAt;\n\nexport function prune(items: Approval[], kept = APPROVALS_KEPT): Approval[] {\n  const settled = items.filter((item) => item.state !== 'pending');\n  settled.sort((a, b) => decided(a) - decided(b));\n  const drop = new Set(settled.slice(0, Math.max(0, settled.length - kept)));\n  return items.filter((item) => !drop.has(item));\n}\n\nexport type Settle = { state: Exclude<ApprovalState, 'pending'>; by: DecidedBy; reason?: string };\n\nexport type Ruling = { error?: string; settle?: Settle; answer?: 'once' | 'always' };\n\nconst why = (reason: string | undefined) => (reason ? { reason } : {});\n\nexport function ruled(\n  item: Approval,\n  answer: unknown,\n  reason: unknown,\n  by: DecidedBy,\n  at: number\n): Ruling {\n  if (item.state !== 'pending') return { error: gone(item.state) };\n  if (item.expiresAt <= at)\n    return {\n      error: gone('unanswered'),\n      settle: { state: 'unanswered', by: 'host', reason: REASONS.timeout },\n    };\n  if (!answerer(by, item.tier)) return { error: \"This request isn't yours to answer.\" };\n  const known = answerOf(answer);\n  if (known === 'always' && !item.always)\n    return { error: \"Always isn't offered for this request.\" };\n  if (!known) return { settle: { state: 'rejected', by, reason: REASONS.unknownAnswer } };\n  const given = why(cleanReason(reason));\n  if (known === 'deny') return { settle: { state: 'rejected', by, ...given } };\n  return { settle: { state: 'approved', by, ...given }, answer: known };\n}\n"],
   "mappings": "AAAA,SAAS,iBAAiB;AAgFnB,MAAM,eAAe,UAA0B;AAAA,EACpD,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAEM,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,YAAY;AAClB,MAAM,gBAAgB;AAEtB,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,EACT,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,cAAc;AAChB;AAEO,MAAM,YAAY,CAAC,SAAgC,SAAS;AAE5D,SAAS,UAAU,MAAqC;AAC7D,MAAI,SAAS,UAAU,SAAS,WAAW,SAAS,OAAQ,QAAO;AACnE,SAAO,OAAO,SAAS,YAAY,cAAc,KAAK,IAAI;AAC5D;AAEO,SAAS,SAAS,MAAoB,MAA6B;AACxE,SAAO,EAAE,SAAS,gBAAgB,SAAS;AAC7C;AAEO,SAAS,SAAS,OAAuC;AAC9D,SAAO,UAAU,UAAU,UAAU,YAAY,UAAU,SAAS,QAAQ;AAC9E;AAEO,MAAM,WAAW,CAAC,OAA2B,OAAO,WAAW,OAAO;AAEtE,SAAS,SAAS,IAAe,MAAuB;AAC7D,MAAI,SAAS,EAAE,EAAG,QAAO,SAAS;AAClC,MAAI,OAAO,QAAS,QAAO,SAAS;AACpC,SAAO;AACT;AAIO,MAAM,eAAe,CAAC,UAC3B,UAAU,UAAU,UAAU;AAEzB,MAAM,SAAS,CAAC,MAAoB,MAAc,SACvD,SAAS,SAAS,OAAO;AAEpB,SAAS,KAAK,OAA8B;AACjD,MAAI,UAAU,aAAc,QAAO;AACnC,MAAI,UAAU,YAAa,QAAO;AAClC,SAAO;AACT;AAEO,SAAS,YAAY,QAAqC;AAC/D,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,OAAO,OAAO,KAAK,EAAE,MAAM,GAAG,aAAa;AACjD,SAAO,QAAQ;AACjB;AAEA,MAAM,UAAU,CAAC,SAAmB,KAAK,aAAa,KAAK;AAEpD,SAAS,MAAM,OAAmB,OAAO,gBAA4B;AAC1E,QAAM,UAAU,MAAM,OAAO,CAAC,SAAS,KAAK,UAAU,SAAS;AAC/D,UAAQ,KAAK,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;AAC9C,QAAM,OAAO,IAAI,IAAI,QAAQ,MAAM,GAAG,KAAK,IAAI,GAAG,QAAQ,SAAS,IAAI,CAAC,CAAC;AACzE,SAAO,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC;AAC/C;AAMA,MAAM,MAAM,CAAC,WAAgC,SAAS,EAAE,OAAO,IAAI,CAAC;AAE7D,SAAS,MACd,MACA,QACA,QACA,IACA,IACQ;AACR,MAAI,KAAK,UAAU,UAAW,QAAO,EAAE,OAAO,KAAK,KAAK,KAAK,EAAE;AAC/D,MAAI,KAAK,aAAa;AACpB,WAAO;AAAA,MACL,OAAO,KAAK,YAAY;AAAA,MACxB,QAAQ,EAAE,OAAO,cAAc,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAAA,IACrE;AACF,MAAI,CAAC,SAAS,IAAI,KAAK,IAAI,EAAG,QAAO,EAAE,OAAO,sCAAsC;AACpF,QAAM,QAAQ,SAAS,MAAM;AAC7B,MAAI,UAAU,YAAY,CAAC,KAAK;AAC9B,WAAO,EAAE,OAAO,yCAAyC;AAC3D,MAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,QAAQ,QAAQ,cAAc,EAAE;AACtF,QAAM,QAAQ,IAAI,YAAY,MAAM,CAAC;AACrC,MAAI,UAAU,OAAQ,QAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,GAAG,MAAM,EAAE;AAC3E,SAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,GAAG,MAAM,GAAG,QAAQ,MAAM;AACtE;",
   "names": []
 }

package/dist/control.js

@@ -49,7 +49,8 @@ function freezerControl(freezer) {
 function guestControl(guests) {
   return {
     guestOpen: async (draft, context) => guests ? guests.open(draft, context) : { seat: null, error: NO_GUESTS },
-    guestRevoke: async (id, context) => guests ? guests.revoke(id, context) : { revoked: false }
+    guestRevoke: async (id, context) => guests ? guests.revoke(id, context) : { revoked: false },
+    guestAlwaysForget: async (seat, approval, context) => guests ? guests.forgetAlways(seat, approval, context) : { removed: false }
   };
 }
 const NO_GUESTS = "This agent has no guest seats.";

package/dist/control.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/control.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  AssistantEntry,\n  type Conversation,\n  ConversationBusy,\n  type ConversationView,\n  type EntryId,\n  type EntryRecord,\n  type Harness,\n  type SubmissionId,\n  type UserInput,\n} from '@earendil-works/pi-durable';\nimport { answerText } from './agent.ts';\nimport type { Agents, ScoopRecord } from './agents.ts';\nimport { type ShownAttachment, splitUser, userParts } from './attachments.ts';\nimport type { ChangesRuntime } from './changes/index.ts';\nimport type { Cones } from './cone.ts';\nimport type { Deliveries } from './deliveries.ts';\nimport type { FreezerRuntime } from './freezer/index.ts';\nimport type { Guests } from './guests/index.ts';\nimport type { LickSources, Licks } from './licks/index.ts';\nimport { LICK_STATE_KIND } from './licks/state.ts';\nimport type { MemoryRuntime } from './memory/index.ts';\nimport type { Monitor } from './monitor/index.ts';\nimport type { Scoops, ScoopsRuntime } from './scoops/index.ts';\nimport { SECRETS_COMMAND, secretsEntry } from './secrets/extension.ts';\nimport type { SecretName } from './secrets/names.ts';\nimport { scrubItems, scrubText } from './secrets/scrub.ts';\nimport { copyAgent, storedAgent } from './selection.ts';\nimport type {\n  AgentControl,\n  Created,\n  ImageRef,\n  LickResolved,\n  OperationError,\n  Rewound,\n  SendRequest,\n  SendResponse,\n  StoredImage,\n} from './services.ts';\nimport type { SkillsRuntime } from './skills/index.ts';\nimport type { SprinklesRuntime } from './sprinkles/index.ts';\nimport type { LabelsRuntime } from './titles/labels.ts';\nimport { saverFor, type Uploads } from './uploads.ts';\n\nexport interface HostLicks {\n  licks: Licks;\n  sources: LickSources;\n}\n\nexport interface HostScoops {\n  scoops: Scoops;\n  runtime: ScoopsRuntime;\n}\n\ntype WithAgents = { agents?: Agents };\n\nexport function readable(out: string): string {\n  const text = out.replace(/^(?:sub)?agent: /, '').trim();\n  const sentence = text.charAt(0).toUpperCase() + text.slice(1);\n  return /[.!?]$/.test(sentence) ? sentence : `${sentence}.`;\n}\n\nfunction created(run: () => Promise<string>): Promise<Created> {\n  return run().then(\n    (id) => ({ id, error: null }),\n    (error: Error) => ({ id: null, error: error.message })\n  );\n}\n\nfunction monitorControl(\n  monitor: Pick<Monitor, 'open' | 'close'> | undefined\n): Pick<AgentControl, 'monitorOpen' | 'monitorClose'> {\n  return {\n    monitorOpen: async (lease, resync, context) =>\n      monitor ? monitor.open(lease, resync, context) : { lease: '', ttlMs: 0 },\n    monitorClose: async (lease, context) => monitor?.close(lease, context),\n  };\n}\n\nconst noApprovals: AgentControl['decide'] = async () => ({\n  done: false,\n  state: null,\n  error: 'This agent has no approvals.',\n});\n\nfunction freezerControl(\n  freezer: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'> | undefined\n): Pick<AgentControl, 'freeze' | 'newChat' | 'thaw' | 'discard'> {\n  const needed = () => {\n    if (!freezer) throw new Error('This agent has no freezer.');\n    return freezer;\n  };\n  return {\n    freeze: (agentId, context) => created(async () => needed().freeze(agentId, context)),\n    newChat: (agentId, context) =>\n      created(async () => (await needed().newChat(agentId, context)) ?? ''),\n    thaw: (id, context) => created(async () => needed().thaw(id, context)),\n    discard: (id, context) =>\n      created(async () => {\n        await needed().discard(id, context);\n        return id;\n      }),\n  };\n}\n\nfunction guestControl(\n  guests: Pick<Guests, 'open' | 'revoke'> | undefined\n): Pick<AgentControl, 'guestOpen' | 'guestRevoke'> {\n  return {\n    guestOpen: async (draft, context) =>\n      guests ? guests.open(draft, context) : { seat: null, error: NO_GUESTS },\n    guestRevoke: async (id, context) => (guests ? guests.revoke(id, context) : { revoked: false }),\n  };\n}\n\nconst NO_GUESTS = 'This agent has no guest seats.';\n\nfunction changesControl(\n  changes: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'> | undefined\n): Pick<AgentControl, 'changesOpen' | 'changeAccept' | 'changeRevert'> {\n  const needed = () => {\n    if (!changes) throw new Error('This agent tracks no changes.');\n    return changes;\n  };\n  const done = (path: string, run: (runtime: NonNullable<typeof changes>) => Promise<void>) =>\n    created(async () => {\n      await run(needed());\n      return path;\n    });\n  return {\n    changesOpen: async (context) => changes?.open(context),\n    changeAccept: (path, context) => done(path, (runtime) => runtime.accept(path, context)),\n    changeRevert: (path, context) => done(path, (runtime) => runtime.revert(path, context)),\n  };\n}\n\nfunction memoryControl(\n  memory: Pick<MemoryRuntime, 'save' | 'remove'> | undefined\n): Pick<AgentControl, 'memorySave' | 'memoryRemove'> {\n  return {\n    async memorySave(draft, context) {\n      if (!memory) throw new Error('This agent has no memory.');\n      const { id, ...rest } = draft;\n      return memory.save({ ...rest, ...(id ? { id } : {}) }, context);\n    },\n    async memoryRemove(id, context) {\n      return { removed: memory ? await memory.remove(id, context) : false };\n    },\n  };\n}\n\nfunction sprinkleControl(\n  sprinkles: Pick<SprinklesRuntime, 'send' | 'call'> | undefined\n): Pick<AgentControl, 'sprinkleSend' | 'sprinkleCall'> {\n  return {\n    sprinkleSend: async (id, payload, context) =>\n      sprinkles ? sprinkles.send(id, payload, context) : { delivered: false },\n    async sprinkleCall(id, method, args, context) {\n      if (!sprinkles) throw new Error('This agent has no sprinkles.');\n      return sprinkles.call(id, method, args, context);\n    },\n  };\n}\n\nexport function submissionId(value: string): SubmissionId | undefined {\n  const id = Number(value);\n  return /^[1-9][0-9]*$/.test(value) && Number.isSafeInteger(id) ? (id as SubmissionId) : undefined;\n}\n\nfunction operationError(error: unknown): OperationError {\n  if (error instanceof ConversationBusy) return { code: 'busy', message: error.message };\n  return { code: 'failed', message: error instanceof Error ? error.message : String(error) };\n}\n\nasync function accepted(operation: () => Promise<{ id: number } | number>): Promise<SendResponse> {\n  try {\n    const result = await operation();\n    const id = typeof result === 'number' ? result : result.id;\n    return { accepted: true, submissionId: String(id), error: null };\n  } catch (error) {\n    return { accepted: false, submissionId: null, error: operationError(error) };\n  }\n}\n\nfunction cones(target: Conversation | Cones): Cones {\n  if ('cone' in target) return target;\n  return {\n    cone: () => target,\n    switchCone: async () => {\n      throw new Error('this conversation has no cone to rewind');\n    },\n  };\n}\n\ninterface Turn {\n  text: string;\n  attachments: ShownAttachment[];\n  at: EntryId | null;\n  files: boolean;\n}\n\ntype Block = { type?: string; name?: string };\n\nconst WRITERS = ['write', 'edit', 'bash', 'codemode'];\n\nfunction writesIn(entries: readonly EntryRecord[]): boolean {\n  return entries.some((entry) =>\n    (entry.model ?? []).some(\n      (message) =>\n        Array.isArray(message.content) &&\n        (message.content as Block[]).some(\n          (block) => block.type === 'toolCall' && WRITERS.includes(String(block.name))\n        )\n    )\n  );\n}\n\nfunction lastTurn(view: ConversationView, messageId: string | null): Turn | null {\n  const { entries } = view;\n  const target = entries.findIndex((entry) => `e${entry.id}` === messageId);\n  if (target < 0) return null;\n  const turn = entries.slice(0, target).findLastIndex((entry) => entry.kind === 'pi.user');\n  if (turn < 0) return null;\n  const user = entries[turn] as EntryRecord;\n  return {\n    ...splitUser(user.model?.[0]?.content),\n    at: entries[turn - 1]?.id ?? null,\n    files: writesIn(entries.slice(turn)),\n  };\n}\n\nfunction busy(view: ConversationView): boolean {\n  const live = view.docs['pi.live'] as { run?: unknown } | undefined;\n  const inbox = view.docs['pi.inbox'] as { items?: unknown[] } | undefined;\n  return Boolean(live?.run) || Boolean(inbox?.items?.length);\n}\n\ntype RewindDeps = {\n  harness: Harness;\n  agents?: Agents;\n  cone: Cones;\n  scoops?: HostScoops;\n};\n\nasync function turnIn(\n  harness: Harness,\n  conversation: Conversation,\n  messageId: string | null,\n  context: Context\n): Promise<{ turn: Turn; view: ConversationView } | Rewound> {\n  const attached = await conversation.viewState(context);\n  const view = attached.value;\n  attached.dispose();\n  const pending = (await harness.inspect(context)).submissions.some(\n    (submission) => submission.conversationId === conversation.id\n  );\n  if (pending || busy(view)) return { done: false, text: null, reason: 'busy' };\n  const turn = lastTurn(view, messageId);\n  return turn ? { turn, view } : { done: false, text: null, reason: 'no-turn' };\n}\n\nasync function forkAt(\n  harness: Harness,\n  conversation: Conversation,\n  found: { turn: Turn },\n  context: Context\n): Promise<Conversation> {\n  const ownership = { kind: 'ownerless' } as const;\n  if (found.turn.at !== null) return conversation.fork(found.turn.at, { ownership }, context);\n  const init = copyAgent(await storedAgent(harness, conversation.id, context));\n  return harness.createConversation({ ownership, init }, context);\n}\n\nasync function rewindAgent(\n  deps: RewindDeps,\n  agentId: string | null,\n  messageId: string | null,\n  context: Context\n): Promise<Rewound> {\n  const { harness, agents, cone, scoops } = deps;\n  const scoop = agentId && agents ? agents.state().scoops[agentId] : undefined;\n  if (agentId && agents && !scoop && agentId !== agents.activeCone())\n    await agents.selectCone(agentId, context);\n  const conversation =\n    scoop && agents\n      ? ((await agents.conversation(agentId as string, context)) as Conversation)\n      : cone.cone();\n  const found = await turnIn(harness, conversation, messageId, context);\n  if ('reason' in found) return found;\n  const fork = await forkAt(harness, conversation, found, context);\n  const changed =\n    scoops && agents && !scoop\n      ? await scoops.scoops.rewound(agents.activeCone(), fork, context)\n      : { stopped: [], restored: [] };\n  const files = found.turn.files;\n  await fork.submit(\n    { type: 'write', entry: { kind: 'slicc.rewound', data: { turns: 1, ...changed, files } } },\n    context\n  );\n  if (scoop && agents)\n    await agents.update((_tx, state) => {\n      const record = state.scoops[agentId as string] as ScoopRecord;\n      record.conversation = fork.id;\n      delete record.title;\n      delete record.titled;\n    }, context);\n  else await cone.switchCone(fork, context);\n  const { attachments } = found.turn;\n  return {\n    done: true,\n    text: found.turn.text,\n    reason: null,\n    ...(attachments.length ? { attachments } : {}),\n  };\n}\n\ntype Picture = { type?: string; data?: string; mimeType?: string };\n\nasync function storedImage(\n  harness: Harness,\n  ref: ImageRef,\n  context: Context\n): Promise<StoredImage> {\n  const entry = await harness.commit((tx) => tx.entry(ref.entry as EntryId), context);\n  const content = entry?.model?.[ref.message]?.content;\n  const part = Array.isArray(content) ? (content[ref.part] as Picture | undefined) : undefined;\n  return part?.type === 'image' && part.data && part.mimeType\n    ? { data: part.data, mimeType: part.mimeType }\n    : { data: null, mimeType: null };\n}\n\nasync function contentOf(\n  text: string,\n  request: SendRequest,\n  conversation: Conversation,\n  uploads: Uploads | undefined,\n  context: Context\n): Promise<UserInput> {\n  if (!request.attachments?.length) return scrubText(text);\n  const saver = await saverFor(conversation, uploads, context);\n  return scrubItems(await userParts(text, request.attachments, saver));\n}\n\nexport function createAgentControl(\n  harness: Harness,\n  target: Conversation | Cones,\n  deliveries?: Deliveries,\n  licks?: HostLicks,\n  scoops?: HostScoops,\n  skills?: Pick<SkillsRuntime, 'expand' | 'commandsFor'>,\n  sprinkles?: Pick<SprinklesRuntime, 'send' | 'call'>,\n  memory?: Pick<MemoryRuntime, 'save' | 'remove'>,\n  freezer?: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'>,\n  changes?: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'>,\n  monitor?: Pick<Monitor, 'open' | 'close'>,\n  secrets?: () => readonly SecretName[],\n  uploads?: Uploads,\n  labels?: Pick<LabelsRuntime, 'label'>,\n  guests?: Pick<Guests, 'open' | 'revoke'>\n): Omit<AgentControl, 'approvalPolicySet'> {\n  const cone = cones(target);\n  const current = () => cone.cone();\n  const agents = (target as WithAgents).agents;\n  const conversationFor = async (agentId: string | null | undefined, context: Context) => {\n    if (!agentId || !agents) return current();\n    const found = await agents.conversation(agentId, context);\n    if (!found) throw new Error(`There is no agent ${agentId}.`);\n    return found;\n  };\n  const withdraw = async (conversation: Conversation, id: string, context: Context) => {\n    const parsed = submissionId(id);\n    if (parsed === undefined) return { outcome: 'not_found' as const };\n    const result = await harness.abortSubmission(parsed, context, conversation.id);\n    if (result === 'aborted') return { outcome: 'withdrawn' as const };\n    return {\n      outcome: result === 'not_found' ? ('not_found' as const) : ('already_placed' as const),\n    };\n  };\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n  const rewindIn = (agentId: string | null, messageId: string | null, context: Context) =>\n    serial(() => rewindAgent({ harness, agents, cone, scoops }, agentId, messageId, context));\n  const decide = (\n    agentId: string | null,\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved> =>\n    serial(async () => {\n      if (!licks) return { done: false, text: null, error: 'this agent has no licks' };\n      const action = state === 'confirmed' ? 'confirm' : 'dismiss';\n      try {\n        const conversation = await conversationFor(agentId, context);\n        const text = await licks.licks.decide(conversation, lickId, action, undefined, context);\n        await conversation.submit(\n          {\n            type: 'write',\n            entry: {\n              kind: LICK_STATE_KIND,\n              data: { lick: lickId, state, by: 'user' },\n              model: [\n                {\n                  role: 'user',\n                  content: `The user ${state} lick ${lickId}: ${text}`,\n                  timestamp: Date.now(),\n                },\n              ],\n            },\n          },\n          context\n        );\n        return { done: true, text, error: null };\n      } catch (error) {\n        return { done: false, text: null, error: (error as Error).message };\n      }\n    });\n  return {\n    send(request, context) {\n      return serial(async () => {\n        if (secrets && request.text.trim() === SECRETS_COMMAND)\n          return accepted(async () =>\n            (await conversationFor(request.agentId, context)).submit(\n              { type: 'write', entry: secretsEntry(secrets()) },\n              context\n            )\n          );\n        const response = await accepted(async () => {\n          const conversation = await conversationFor(request.agentId, context);\n          const expanded = skills\n            ? await skills.expand(request.text, context, conversation.id)\n            : request.text;\n          return conversation.submit(\n            {\n              type: 'input',\n              content: await contentOf(expanded, request, conversation, uploads, context),\n              whenBusy: request.whenBusy,\n              ...(request.requestId ? { requestId: request.requestId } : {}),\n            },\n            context\n          );\n        });\n        const id = response.submissionId === null ? undefined : submissionId(response.submissionId);\n        if (id !== undefined) deliveries?.expect(id, request.whenBusy);\n        return response;\n      });\n    },\n    rewind: (messageId, context) => rewindIn(null, messageId, context),\n    rewindAgent: (agentId, messageId, context) => rewindIn(agentId, messageId, context),\n\n    async wait(id, context) {\n      const parsed = submissionId(id);\n      const submission =\n        parsed === undefined ? undefined : await harness.submission(parsed, context);\n      if (!submission) throw new Error(`unknown submission ${id}`);\n      const settled = await submission.wait(context);\n      const { answer, reason } = settled as { answer?: EntryId; reason?: string };\n      if (answer === undefined) return { status: 'unanswered', text: null, reason: String(reason) };\n      const entry = await harness.commit((tx) => tx.entry(AssistantEntry, answer), context);\n      return { status: 'done', text: answerText(entry?.model?.[0]?.content), reason: null };\n    },\n    withdraw: (id, context) => withdraw(current(), id, context),\n    ...sprinkleControl(sprinkles),\n    ...memoryControl(memory),\n    ...freezerControl(freezer),\n    ...changesControl(changes),\n    ...guestControl(guests),\n    ...monitorControl(monitor),\n    image: (ref, context) => storedImage(harness, ref, context),\n    async unqueue(agentId, id, context) {\n      return withdraw(await conversationFor(agentId, context), id, context);\n    },\n    abort: (context) => current().abort(context),\n    compact: (instructions, context) =>\n      accepted(() => current().compact(instructions ?? undefined, context)),\n    compactAgent: (agentId, instructions, context) =>\n      accepted(async () =>\n        (await conversationFor(agentId, context)).compact(instructions ?? undefined, context)\n      ),\n    reset: (handoff, context) => current().reset(handoff ?? undefined, context),\n    resolveLick: (lickId, state, context) => decide(null, lickId, state, context),\n    resolveAgentLick: (agentId, lickId, state, context) => decide(agentId, lickId, state, context),\n    async webhook(name, delivery, context) {\n      const delivered = licks\n        ? await licks.sources.webhook(\n            name,\n            {\n              ...(delivery.id ? { id: delivery.id } : {}),\n              headers: delivery.headers,\n              body: delivery.body,\n            },\n            context\n          )\n        : false;\n      return { delivered };\n    },\n    async stopAgent(agentId, context) {\n      await (await conversationFor(agentId, context)).abort(context);\n    },\n    async selectCone(agentId, context) {\n      await agents?.selectCone(agentId, context);\n    },\n    createCone(name, context) {\n      return created(async () => {\n        if (!agents) throw new Error('This agent has a single cone.');\n        return agents.createCone(name, context);\n      });\n    },\n    createScoop(parentId, name, context) {\n      return created(async () => {\n        if (!scoops) throw new Error('This agent has no scoops.');\n        const roles = await scoops.runtime.roles(context);\n        const answer = await scoops.scoops.spawn(\n          { cone: parentId, name, prompts: [], fromAgent: false, limits: roles.limits },\n          context\n        );\n        if (answer.code !== 0) throw new Error(readable(answer.out));\n        return `scoop:${answer.out.trim()}`;\n      });\n    },\n    drop(agentId, context) {\n      return created(async () => {\n        if (!scoops) throw new Error('This agent has no scoops.');\n        const answer = await scoops.scoops.stop(agentId, false, context);\n        if (answer.code !== 0) throw new Error(readable(answer.out));\n        return agentId;\n      });\n    },\n    configure: async (change, context) =>\n      (await conversationFor(change.agentId, context)).configure(\n        {\n          ...(change.model ? { model: change.model } : {}),\n          ...(change.thinkingLevel ? { thinkingLevel: change.thinkingLevel } : {}),\n        },\n        context\n      ),\n    agentCommands: async (agentId) => skills?.commandsFor(agentId) ?? [],\n    toolLabel: async (agentId, callIds, context) =>\n      labels ? labels.label(agentId, callIds, context) : null,\n    decide: noApprovals,\n  };\n}\n"],
-  "mappings": "AACA;AAAA,EACE;AAAA,EAEA;AAAA,OAOK;AACP,SAAS,kBAAkB;AAE3B,SAA+B,WAAW,iBAAiB;AAO3D,SAAS,uBAAuB;AAIhC,SAAS,iBAAiB,oBAAoB;AAE9C,SAAS,YAAY,iBAAiB;AACtC,SAAS,WAAW,mBAAmB;AAevC,SAAS,gBAA8B;AAchC,SAAS,SAAS,KAAqB;AAC5C,QAAM,OAAO,IAAI,QAAQ,oBAAoB,EAAE,EAAE,KAAK;AACtD,QAAM,WAAW,KAAK,OAAO,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC;AAC5D,SAAO,SAAS,KAAK,QAAQ,IAAI,WAAW,GAAG,QAAQ;AACzD;AAEA,SAAS,QAAQ,KAA8C;AAC7D,SAAO,IAAI,EAAE;AAAA,IACX,CAAC,QAAQ,EAAE,IAAI,OAAO,KAAK;AAAA,IAC3B,CAAC,WAAkB,EAAE,IAAI,MAAM,OAAO,MAAM,QAAQ;AAAA,EACtD;AACF;AAEA,SAAS,eACP,SACoD;AACpD,SAAO;AAAA,IACL,aAAa,OAAO,OAAO,QAAQ,YACjC,UAAU,QAAQ,KAAK,OAAO,QAAQ,OAAO,IAAI,EAAE,OAAO,IAAI,OAAO,EAAE;AAAA,IACzE,cAAc,OAAO,OAAO,YAAY,SAAS,MAAM,OAAO,OAAO;AAAA,EACvE;AACF;AAEA,MAAM,cAAsC,aAAa;AAAA,EACvD,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AACT;AAEA,SAAS,eACP,SAC+D;AAC/D,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,4BAA4B;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ,CAAC,SAAS,YAAY,QAAQ,YAAY,OAAO,EAAE,OAAO,SAAS,OAAO,CAAC;AAAA,IACnF,SAAS,CAAC,SAAS,YACjB,QAAQ,YAAa,MAAM,OAAO,EAAE,QAAQ,SAAS,OAAO,KAAM,EAAE;AAAA,IACtE,MAAM,CAAC,IAAI,YAAY,QAAQ,YAAY,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC;AAAA,IACrE,SAAS,CAAC,IAAI,YACZ,QAAQ,YAAY;AAClB,YAAM,OAAO,EAAE,QAAQ,IAAI,OAAO;AAClC,aAAO;AAAA,IACT,CAAC;AAAA,EACL;AACF;AAEA,SAAS,aACP,QACiD;AACjD,SAAO;AAAA,IACL,WAAW,OAAO,OAAO,YACvB,SAAS,OAAO,KAAK,OAAO,OAAO,IAAI,EAAE,MAAM,MAAM,OAAO,UAAU;AAAA,IACxE,aAAa,OAAO,IAAI,YAAa,SAAS,OAAO,OAAO,IAAI,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,EAC9F;AACF;AAEA,MAAM,YAAY;AAElB,SAAS,eACP,SACqE;AACrE,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAC7D,WAAO;AAAA,EACT;AACA,QAAM,OAAO,CAAC,MAAc,QAC1B,QAAQ,YAAY;AAClB,UAAM,IAAI,OAAO,CAAC;AAClB,WAAO;AAAA,EACT,CAAC;AACH,SAAO;AAAA,IACL,aAAa,OAAO,YAAY,SAAS,KAAK,OAAO;AAAA,IACrD,cAAc,CAAC,MAAM,YAAY,KAAK,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,OAAO,CAAC;AAAA,IACtF,cAAc,CAAC,MAAM,YAAY,KAAK,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,OAAO,CAAC;AAAA,EACxF;AACF;AAEA,SAAS,cACP,QACmD;AACnD,SAAO;AAAA,IACL,MAAM,WAAW,OAAO,SAAS;AAC/B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,YAAM,EAAE,IAAI,GAAG,KAAK,IAAI;AACxB,aAAO,OAAO,KAAK,EAAE,GAAG,MAAM,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC,EAAG,GAAG,OAAO;AAAA,IAChE;AAAA,IACA,MAAM,aAAa,IAAI,SAAS;AAC9B,aAAO,EAAE,SAAS,SAAS,MAAM,OAAO,OAAO,IAAI,OAAO,IAAI,MAAM;AAAA,IACtE;AAAA,EACF;AACF;AAEA,SAAS,gBACP,WACqD;AACrD,SAAO;AAAA,IACL,cAAc,OAAO,IAAI,SAAS,YAChC,YAAY,UAAU,KAAK,IAAI,SAAS,OAAO,IAAI,EAAE,WAAW,MAAM;AAAA,IACxE,MAAM,aAAa,IAAI,QAAQ,MAAM,SAAS;AAC5C,UAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8BAA8B;AAC9D,aAAO,UAAU,KAAK,IAAI,QAAQ,MAAM,OAAO;AAAA,IACjD;AAAA,EACF;AACF;AAEO,SAAS,aAAa,OAAyC;AACpE,QAAM,KAAK,OAAO,KAAK;AACvB,SAAO,gBAAgB,KAAK,KAAK,KAAK,OAAO,cAAc,EAAE,IAAK,KAAsB;AAC1F;AAEA,SAAS,eAAe,OAAgC;AACtD,MAAI,iBAAiB,iBAAkB,QAAO,EAAE,MAAM,QAAQ,SAAS,MAAM,QAAQ;AACrF,SAAO,EAAE,MAAM,UAAU,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AAC3F;AAEA,eAAe,SAAS,WAA0E;AAChG,MAAI;AACF,UAAM,SAAS,MAAM,UAAU;AAC/B,UAAM,KAAK,OAAO,WAAW,WAAW,SAAS,OAAO;AACxD,WAAO,EAAE,UAAU,MAAM,cAAc,OAAO,EAAE,GAAG,OAAO,KAAK;AAAA,EACjE,SAAS,OAAO;AACd,WAAO,EAAE,UAAU,OAAO,cAAc,MAAM,OAAO,eAAe,KAAK,EAAE;AAAA,EAC7E;AACF;AAEA,SAAS,MAAM,QAAqC;AAClD,MAAI,UAAU,OAAQ,QAAO;AAC7B,SAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,YAAY,YAAY;AACtB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAAA,EACF;AACF;AAWA,MAAM,UAAU,CAAC,SAAS,QAAQ,QAAQ,UAAU;AAEpD,SAAS,SAAS,SAA0C;AAC1D,SAAO,QAAQ;AAAA,IAAK,CAAC,WAClB,MAAM,SAAS,CAAC,GAAG;AAAA,MAClB,CAAC,YACC,MAAM,QAAQ,QAAQ,OAAO,KAC5B,QAAQ,QAAoB;AAAA,QAC3B,CAAC,UAAU,MAAM,SAAS,cAAc,QAAQ,SAAS,OAAO,MAAM,IAAI,CAAC;AAAA,MAC7E;AAAA,IACJ;AAAA,EACF;AACF;AAEA,SAAS,SAAS,MAAwB,WAAuC;AAC/E,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,SAAS,QAAQ,UAAU,CAAC,UAAU,IAAI,MAAM,EAAE,OAAO,SAAS;AACxE,MAAI,SAAS,EAAG,QAAO;AACvB,QAAM,OAAO,QAAQ,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,UAAU,MAAM,SAAS,SAAS;AACvF,MAAI,OAAO,EAAG,QAAO;AACrB,QAAM,OAAO,QAAQ,IAAI;AACzB,SAAO;AAAA,IACL,GAAG,UAAU,KAAK,QAAQ,CAAC,GAAG,OAAO;AAAA,IACrC,IAAI,QAAQ,OAAO,CAAC,GAAG,MAAM;AAAA,IAC7B,OAAO,SAAS,QAAQ,MAAM,IAAI,CAAC;AAAA,EACrC;AACF;AAEA,SAAS,KAAK,MAAiC;AAC7C,QAAM,OAAO,KAAK,KAAK,SAAS;AAChC,QAAM,QAAQ,KAAK,KAAK,UAAU;AAClC,SAAO,QAAQ,MAAM,GAAG,KAAK,QAAQ,OAAO,OAAO,MAAM;AAC3D;AASA,eAAe,OACb,SACA,cACA,WACA,SAC2D;AAC3D,QAAM,WAAW,MAAM,aAAa,UAAU,OAAO;AACrD,QAAM,OAAO,SAAS;AACtB,WAAS,QAAQ;AACjB,QAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO,GAAG,YAAY;AAAA,IAC3D,CAAC,eAAe,WAAW,mBAAmB,aAAa;AAAA,EAC7D;AACA,MAAI,WAAW,KAAK,IAAI,EAAG,QAAO,EAAE,MAAM,OAAO,MAAM,MAAM,QAAQ,OAAO;AAC5E,QAAM,OAAO,SAAS,MAAM,SAAS;AACrC,SAAO,OAAO,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,OAAO,MAAM,MAAM,QAAQ,UAAU;AAC9E;AAEA,eAAe,OACb,SACA,cACA,OACA,SACuB;AACvB,QAAM,YAAY,EAAE,MAAM,YAAY;AACtC,MAAI,MAAM,KAAK,OAAO,KAAM,QAAO,aAAa,KAAK,MAAM,KAAK,IAAI,EAAE,UAAU,GAAG,OAAO;AAC1F,QAAM,OAAO,UAAU,MAAM,YAAY,SAAS,aAAa,IAAI,OAAO,CAAC;AAC3E,SAAO,QAAQ,mBAAmB,EAAE,WAAW,KAAK,GAAG,OAAO;AAChE;AAEA,eAAe,YACb,MACA,SACA,WACA,SACkB;AAClB,QAAM,EAAE,SAAS,QAAQ,MAAM,OAAO,IAAI;AAC1C,QAAM,QAAQ,WAAW,SAAS,OAAO,MAAM,EAAE,OAAO,OAAO,IAAI;AACnE,MAAI,WAAW,UAAU,CAAC,SAAS,YAAY,OAAO,WAAW;AAC/D,UAAM,OAAO,WAAW,SAAS,OAAO;AAC1C,QAAM,eACJ,SAAS,SACH,MAAM,OAAO,aAAa,SAAmB,OAAO,IACtD,KAAK,KAAK;AAChB,QAAM,QAAQ,MAAM,OAAO,SAAS,cAAc,WAAW,OAAO;AACpE,MAAI,YAAY,MAAO,QAAO;AAC9B,QAAM,OAAO,MAAM,OAAO,SAAS,cAAc,OAAO,OAAO;AAC/D,QAAM,UACJ,UAAU,UAAU,CAAC,QACjB,MAAM,OAAO,OAAO,QAAQ,OAAO,WAAW,GAAG,MAAM,OAAO,IAC9D,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,EAAE;AAClC,QAAM,QAAQ,MAAM,KAAK;AACzB,QAAM,KAAK;AAAA,IACT,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,iBAAiB,MAAM,EAAE,OAAO,GAAG,GAAG,SAAS,MAAM,EAAE,EAAE;AAAA,IACzF;AAAA,EACF;AACA,MAAI,SAAS;AACX,UAAM,OAAO,OAAO,CAAC,KAAK,UAAU;AAClC,YAAM,SAAS,MAAM,OAAO,OAAiB;AAC7C,aAAO,eAAe,KAAK;AAC3B,aAAO,OAAO;AACd,aAAO,OAAO;AAAA,IAChB,GAAG,OAAO;AAAA,MACP,OAAM,KAAK,WAAW,MAAM,OAAO;AACxC,QAAM,EAAE,YAAY,IAAI,MAAM;AAC9B,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,MAAM,KAAK;AAAA,IACjB,QAAQ;AAAA,IACR,GAAI,YAAY,SAAS,EAAE,YAAY,IAAI,CAAC;AAAA,EAC9C;AACF;AAIA,eAAe,YACb,SACA,KACA,SACsB;AACtB,QAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC,OAAO,GAAG,MAAM,IAAI,KAAgB,GAAG,OAAO;AAClF,QAAM,UAAU,OAAO,QAAQ,IAAI,OAAO,GAAG;AAC7C,QAAM,OAAO,MAAM,QAAQ,OAAO,IAAK,QAAQ,IAAI,IAAI,IAA4B;AACnF,SAAO,MAAM,SAAS,WAAW,KAAK,QAAQ,KAAK,WAC/C,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK,SAAS,IAC3C,EAAE,MAAM,MAAM,UAAU,KAAK;AACnC;AAEA,eAAe,UACb,MACA,SACA,cACA,SACA,SACoB;AACpB,MAAI,CAAC,QAAQ,aAAa,OAAQ,QAAO,UAAU,IAAI;AACvD,QAAM,QAAQ,MAAM,SAAS,cAAc,SAAS,OAAO;AAC3D,SAAO,WAAW,MAAM,UAAU,MAAM,QAAQ,aAAa,KAAK,CAAC;AACrE;AAEO,SAAS,mBACd,SACA,QACA,YACA,OACA,QACA,QACA,WACA,QACA,SACA,SACA,SACA,SACA,SACA,QACA,QACyC;AACzC,QAAM,OAAO,MAAM,MAAM;AACzB,QAAM,UAAU,MAAM,KAAK,KAAK;AAChC,QAAM,SAAU,OAAsB;AACtC,QAAM,kBAAkB,OAAO,SAAoC,YAAqB;AACtF,QAAI,CAAC,WAAW,CAAC,OAAQ,QAAO,QAAQ;AACxC,UAAM,QAAQ,MAAM,OAAO,aAAa,SAAS,OAAO;AACxD,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,OAAO,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,WAAW,OAAO,cAA4B,IAAY,YAAqB;AACnF,UAAM,SAAS,aAAa,EAAE;AAC9B,QAAI,WAAW,OAAW,QAAO,EAAE,SAAS,YAAqB;AACjE,UAAM,SAAS,MAAM,QAAQ,gBAAgB,QAAQ,SAAS,aAAa,EAAE;AAC7E,QAAI,WAAW,UAAW,QAAO,EAAE,SAAS,YAAqB;AACjE,WAAO;AAAA,MACL,SAAS,WAAW,cAAe,cAAyB;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AACA,QAAM,WAAW,CAAC,SAAwB,WAA0B,YAClE,OAAO,MAAM,YAAY,EAAE,SAAS,QAAQ,MAAM,OAAO,GAAG,SAAS,WAAW,OAAO,CAAC;AAC1F,QAAM,SAAS,CACb,SACA,QACA,OACA,YAEA,OAAO,YAAY;AACjB,QAAI,CAAC,MAAO,QAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,0BAA0B;AAC/E,UAAM,SAAS,UAAU,cAAc,YAAY;AACnD,QAAI;AACF,YAAM,eAAe,MAAM,gBAAgB,SAAS,OAAO;AAC3D,YAAM,OAAO,MAAM,MAAM,MAAM,OAAO,cAAc,QAAQ,QAAQ,QAAW,OAAO;AACtF,YAAM,aAAa;AAAA,QACjB;AAAA,UACE,MAAM;AAAA,UACN,OAAO;AAAA,YACL,MAAM;AAAA,YACN,MAAM,EAAE,MAAM,QAAQ,OAAO,IAAI,OAAO;AAAA,YACxC,OAAO;AAAA,cACL;AAAA,gBACE,MAAM;AAAA,gBACN,SAAS,YAAY,KAAK,SAAS,MAAM,KAAK,IAAI;AAAA,gBAClD,WAAW,KAAK,IAAI;AAAA,cACtB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,aAAO,EAAE,MAAM,MAAM,MAAM,OAAO,KAAK;AAAA,IACzC,SAAS,OAAO;AACd,aAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAQ,MAAgB,QAAQ;AAAA,IACpE;AAAA,EACF,CAAC;AACH,SAAO;AAAA,IACL,KAAK,SAAS,SAAS;AACrB,aAAO,OAAO,YAAY;AACxB,YAAI,WAAW,QAAQ,KAAK,KAAK,MAAM;AACrC,iBAAO;AAAA,YAAS,aACb,MAAM,gBAAgB,QAAQ,SAAS,OAAO,GAAG;AAAA,cAChD,EAAE,MAAM,SAAS,OAAO,aAAa,QAAQ,CAAC,EAAE;AAAA,cAChD;AAAA,YACF;AAAA,UACF;AACF,cAAM,WAAW,MAAM,SAAS,YAAY;AAC1C,gBAAM,eAAe,MAAM,gBAAgB,QAAQ,SAAS,OAAO;AACnE,gBAAM,WAAW,SACb,MAAM,OAAO,OAAO,QAAQ,MAAM,SAAS,aAAa,EAAE,IAC1D,QAAQ;AACZ,iBAAO,aAAa;AAAA,YAClB;AAAA,cACE,MAAM;AAAA,cACN,SAAS,MAAM,UAAU,UAAU,SAAS,cAAc,SAAS,OAAO;AAAA,cAC1E,UAAU,QAAQ;AAAA,cAClB,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,YAC9D;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AACD,cAAM,KAAK,SAAS,iBAAiB,OAAO,SAAY,aAAa,SAAS,YAAY;AAC1F,YAAI,OAAO,OAAW,aAAY,OAAO,IAAI,QAAQ,QAAQ;AAC7D,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,CAAC,WAAW,YAAY,SAAS,MAAM,WAAW,OAAO;AAAA,IACjE,aAAa,CAAC,SAAS,WAAW,YAAY,SAAS,SAAS,WAAW,OAAO;AAAA,IAElF,MAAM,KAAK,IAAI,SAAS;AACtB,YAAM,SAAS,aAAa,EAAE;AAC9B,YAAM,aACJ,WAAW,SAAY,SAAY,MAAM,QAAQ,WAAW,QAAQ,OAAO;AAC7E,UAAI,CAAC,WAAY,OAAM,IAAI,MAAM,sBAAsB,EAAE,EAAE;AAC3D,YAAM,UAAU,MAAM,WAAW,KAAK,OAAO;AAC7C,YAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,UAAI,WAAW,OAAW,QAAO,EAAE,QAAQ,cAAc,MAAM,MAAM,QAAQ,OAAO,MAAM,EAAE;AAC5F,YAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,OAAO;AACpF,aAAO,EAAE,QAAQ,QAAQ,MAAM,WAAW,OAAO,QAAQ,CAAC,GAAG,OAAO,GAAG,QAAQ,KAAK;AAAA,IACtF;AAAA,IACA,UAAU,CAAC,IAAI,YAAY,SAAS,QAAQ,GAAG,IAAI,OAAO;AAAA,IAC1D,GAAG,gBAAgB,SAAS;AAAA,IAC5B,GAAG,cAAc,MAAM;AAAA,IACvB,GAAG,eAAe,OAAO;AAAA,IACzB,GAAG,eAAe,OAAO;AAAA,IACzB,GAAG,aAAa,MAAM;AAAA,IACtB,GAAG,eAAe,OAAO;AAAA,IACzB,OAAO,CAAC,KAAK,YAAY,YAAY,SAAS,KAAK,OAAO;AAAA,IAC1D,MAAM,QAAQ,SAAS,IAAI,SAAS;AAClC,aAAO,SAAS,MAAM,gBAAgB,SAAS,OAAO,GAAG,IAAI,OAAO;AAAA,IACtE;AAAA,IACA,OAAO,CAAC,YAAY,QAAQ,EAAE,MAAM,OAAO;AAAA,IAC3C,SAAS,CAAC,cAAc,YACtB,SAAS,MAAM,QAAQ,EAAE,QAAQ,gBAAgB,QAAW,OAAO,CAAC;AAAA,IACtE,cAAc,CAAC,SAAS,cAAc,YACpC;AAAA,MAAS,aACN,MAAM,gBAAgB,SAAS,OAAO,GAAG,QAAQ,gBAAgB,QAAW,OAAO;AAAA,IACtF;AAAA,IACF,OAAO,CAAC,SAAS,YAAY,QAAQ,EAAE,MAAM,WAAW,QAAW,OAAO;AAAA,IAC1E,aAAa,CAAC,QAAQ,OAAO,YAAY,OAAO,MAAM,QAAQ,OAAO,OAAO;AAAA,IAC5E,kBAAkB,CAAC,SAAS,QAAQ,OAAO,YAAY,OAAO,SAAS,QAAQ,OAAO,OAAO;AAAA,IAC7F,MAAM,QAAQ,MAAM,UAAU,SAAS;AACrC,YAAM,YAAY,QACd,MAAM,MAAM,QAAQ;AAAA,QAClB;AAAA,QACA;AAAA,UACE,GAAI,SAAS,KAAK,EAAE,IAAI,SAAS,GAAG,IAAI,CAAC;AAAA,UACzC,SAAS,SAAS;AAAA,UAClB,MAAM,SAAS;AAAA,QACjB;AAAA,QACA;AAAA,MACF,IACA;AACJ,aAAO,EAAE,UAAU;AAAA,IACrB;AAAA,IACA,MAAM,UAAU,SAAS,SAAS;AAChC,aAAO,MAAM,gBAAgB,SAAS,OAAO,GAAG,MAAM,OAAO;AAAA,IAC/D;AAAA,IACA,MAAM,WAAW,SAAS,SAAS;AACjC,YAAM,QAAQ,WAAW,SAAS,OAAO;AAAA,IAC3C;AAAA,IACA,WAAW,MAAM,SAAS;AACxB,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAC5D,eAAO,OAAO,WAAW,MAAM,OAAO;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,IACA,YAAY,UAAU,MAAM,SAAS;AACnC,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,cAAM,QAAQ,MAAM,OAAO,QAAQ,MAAM,OAAO;AAChD,cAAM,SAAS,MAAM,OAAO,OAAO;AAAA,UACjC,EAAE,MAAM,UAAU,MAAM,SAAS,CAAC,GAAG,WAAW,OAAO,QAAQ,MAAM,OAAO;AAAA,UAC5E;AAAA,QACF;AACA,YAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,SAAS,OAAO,GAAG,CAAC;AAC3D,eAAO,SAAS,OAAO,IAAI,KAAK,CAAC;AAAA,MACnC,CAAC;AAAA,IACH;AAAA,IACA,KAAK,SAAS,SAAS;AACrB,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,cAAM,SAAS,MAAM,OAAO,OAAO,KAAK,SAAS,OAAO,OAAO;AAC/D,YAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,SAAS,OAAO,GAAG,CAAC;AAC3D,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,WAAW,OAAO,QAAQ,aACvB,MAAM,gBAAgB,OAAO,SAAS,OAAO,GAAG;AAAA,MAC/C;AAAA,QACE,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,QAC9C,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;AAAA,MACxE;AAAA,MACA;AAAA,IACF;AAAA,IACF,eAAe,OAAO,YAAY,QAAQ,YAAY,OAAO,KAAK,CAAC;AAAA,IACnE,WAAW,OAAO,SAAS,SAAS,YAClC,SAAS,OAAO,MAAM,SAAS,SAAS,OAAO,IAAI;AAAA,IACrD,QAAQ;AAAA,EACV;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  AssistantEntry,\n  type Conversation,\n  ConversationBusy,\n  type ConversationView,\n  type EntryId,\n  type EntryRecord,\n  type Harness,\n  type SubmissionId,\n  type UserInput,\n} from '@earendil-works/pi-durable';\nimport { answerText } from './agent.ts';\nimport type { Agents, ScoopRecord } from './agents.ts';\nimport { type ShownAttachment, splitUser, userParts } from './attachments.ts';\nimport type { ChangesRuntime } from './changes/index.ts';\nimport type { Cones } from './cone.ts';\nimport type { Deliveries } from './deliveries.ts';\nimport type { FreezerRuntime } from './freezer/index.ts';\nimport type { Guests } from './guests/index.ts';\nimport type { LickSources, Licks } from './licks/index.ts';\nimport { LICK_STATE_KIND } from './licks/state.ts';\nimport type { MemoryRuntime } from './memory/index.ts';\nimport type { Monitor } from './monitor/index.ts';\nimport type { Scoops, ScoopsRuntime } from './scoops/index.ts';\nimport { SECRETS_COMMAND, secretsEntry } from './secrets/extension.ts';\nimport type { SecretName } from './secrets/names.ts';\nimport { scrubItems, scrubText } from './secrets/scrub.ts';\nimport { copyAgent, storedAgent } from './selection.ts';\nimport type {\n  AgentControl,\n  Created,\n  ImageRef,\n  LickResolved,\n  OperationError,\n  Rewound,\n  SendRequest,\n  SendResponse,\n  StoredImage,\n} from './services.ts';\nimport type { SkillsRuntime } from './skills/index.ts';\nimport type { SprinklesRuntime } from './sprinkles/index.ts';\nimport type { LabelsRuntime } from './titles/labels.ts';\nimport { saverFor, type Uploads } from './uploads.ts';\n\nexport interface HostLicks {\n  licks: Licks;\n  sources: LickSources;\n}\n\nexport interface HostScoops {\n  scoops: Scoops;\n  runtime: ScoopsRuntime;\n}\n\ntype WithAgents = { agents?: Agents };\n\nexport function readable(out: string): string {\n  const text = out.replace(/^(?:sub)?agent: /, '').trim();\n  const sentence = text.charAt(0).toUpperCase() + text.slice(1);\n  return /[.!?]$/.test(sentence) ? sentence : `${sentence}.`;\n}\n\nfunction created(run: () => Promise<string>): Promise<Created> {\n  return run().then(\n    (id) => ({ id, error: null }),\n    (error: Error) => ({ id: null, error: error.message })\n  );\n}\n\nfunction monitorControl(\n  monitor: Pick<Monitor, 'open' | 'close'> | undefined\n): Pick<AgentControl, 'monitorOpen' | 'monitorClose'> {\n  return {\n    monitorOpen: async (lease, resync, context) =>\n      monitor ? monitor.open(lease, resync, context) : { lease: '', ttlMs: 0 },\n    monitorClose: async (lease, context) => monitor?.close(lease, context),\n  };\n}\n\nconst noApprovals: AgentControl['decide'] = async () => ({\n  done: false,\n  state: null,\n  error: 'This agent has no approvals.',\n});\n\nfunction freezerControl(\n  freezer: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'> | undefined\n): Pick<AgentControl, 'freeze' | 'newChat' | 'thaw' | 'discard'> {\n  const needed = () => {\n    if (!freezer) throw new Error('This agent has no freezer.');\n    return freezer;\n  };\n  return {\n    freeze: (agentId, context) => created(async () => needed().freeze(agentId, context)),\n    newChat: (agentId, context) =>\n      created(async () => (await needed().newChat(agentId, context)) ?? ''),\n    thaw: (id, context) => created(async () => needed().thaw(id, context)),\n    discard: (id, context) =>\n      created(async () => {\n        await needed().discard(id, context);\n        return id;\n      }),\n  };\n}\n\nfunction guestControl(\n  guests: Pick<Guests, 'open' | 'revoke' | 'forgetAlways'> | undefined\n): Pick<AgentControl, 'guestOpen' | 'guestRevoke' | 'guestAlwaysForget'> {\n  return {\n    guestOpen: async (draft, context) =>\n      guests ? guests.open(draft, context) : { seat: null, error: NO_GUESTS },\n    guestRevoke: async (id, context) => (guests ? guests.revoke(id, context) : { revoked: false }),\n    guestAlwaysForget: async (seat, approval, context) =>\n      guests ? guests.forgetAlways(seat, approval, context) : { removed: false },\n  };\n}\n\nconst NO_GUESTS = 'This agent has no guest seats.';\n\nfunction changesControl(\n  changes: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'> | undefined\n): Pick<AgentControl, 'changesOpen' | 'changeAccept' | 'changeRevert'> {\n  const needed = () => {\n    if (!changes) throw new Error('This agent tracks no changes.');\n    return changes;\n  };\n  const done = (path: string, run: (runtime: NonNullable<typeof changes>) => Promise<void>) =>\n    created(async () => {\n      await run(needed());\n      return path;\n    });\n  return {\n    changesOpen: async (context) => changes?.open(context),\n    changeAccept: (path, context) => done(path, (runtime) => runtime.accept(path, context)),\n    changeRevert: (path, context) => done(path, (runtime) => runtime.revert(path, context)),\n  };\n}\n\nfunction memoryControl(\n  memory: Pick<MemoryRuntime, 'save' | 'remove'> | undefined\n): Pick<AgentControl, 'memorySave' | 'memoryRemove'> {\n  return {\n    async memorySave(draft, context) {\n      if (!memory) throw new Error('This agent has no memory.');\n      const { id, ...rest } = draft;\n      return memory.save({ ...rest, ...(id ? { id } : {}) }, context);\n    },\n    async memoryRemove(id, context) {\n      return { removed: memory ? await memory.remove(id, context) : false };\n    },\n  };\n}\n\nfunction sprinkleControl(\n  sprinkles: Pick<SprinklesRuntime, 'send' | 'call'> | undefined\n): Pick<AgentControl, 'sprinkleSend' | 'sprinkleCall'> {\n  return {\n    sprinkleSend: async (id, payload, context) =>\n      sprinkles ? sprinkles.send(id, payload, context) : { delivered: false },\n    async sprinkleCall(id, method, args, context) {\n      if (!sprinkles) throw new Error('This agent has no sprinkles.');\n      return sprinkles.call(id, method, args, context);\n    },\n  };\n}\n\nexport function submissionId(value: string): SubmissionId | undefined {\n  const id = Number(value);\n  return /^[1-9][0-9]*$/.test(value) && Number.isSafeInteger(id) ? (id as SubmissionId) : undefined;\n}\n\nfunction operationError(error: unknown): OperationError {\n  if (error instanceof ConversationBusy) return { code: 'busy', message: error.message };\n  return { code: 'failed', message: error instanceof Error ? error.message : String(error) };\n}\n\nasync function accepted(operation: () => Promise<{ id: number } | number>): Promise<SendResponse> {\n  try {\n    const result = await operation();\n    const id = typeof result === 'number' ? result : result.id;\n    return { accepted: true, submissionId: String(id), error: null };\n  } catch (error) {\n    return { accepted: false, submissionId: null, error: operationError(error) };\n  }\n}\n\nfunction cones(target: Conversation | Cones): Cones {\n  if ('cone' in target) return target;\n  return {\n    cone: () => target,\n    switchCone: async () => {\n      throw new Error('this conversation has no cone to rewind');\n    },\n  };\n}\n\ninterface Turn {\n  text: string;\n  attachments: ShownAttachment[];\n  at: EntryId | null;\n  files: boolean;\n}\n\ntype Block = { type?: string; name?: string };\n\nconst WRITERS = ['write', 'edit', 'bash', 'codemode'];\n\nfunction writesIn(entries: readonly EntryRecord[]): boolean {\n  return entries.some((entry) =>\n    (entry.model ?? []).some(\n      (message) =>\n        Array.isArray(message.content) &&\n        (message.content as Block[]).some(\n          (block) => block.type === 'toolCall' && WRITERS.includes(String(block.name))\n        )\n    )\n  );\n}\n\nfunction lastTurn(view: ConversationView, messageId: string | null): Turn | null {\n  const { entries } = view;\n  const target = entries.findIndex((entry) => `e${entry.id}` === messageId);\n  if (target < 0) return null;\n  const turn = entries.slice(0, target).findLastIndex((entry) => entry.kind === 'pi.user');\n  if (turn < 0) return null;\n  const user = entries[turn] as EntryRecord;\n  return {\n    ...splitUser(user.model?.[0]?.content),\n    at: entries[turn - 1]?.id ?? null,\n    files: writesIn(entries.slice(turn)),\n  };\n}\n\nfunction busy(view: ConversationView): boolean {\n  const live = view.docs['pi.live'] as { run?: unknown } | undefined;\n  const inbox = view.docs['pi.inbox'] as { items?: unknown[] } | undefined;\n  return Boolean(live?.run) || Boolean(inbox?.items?.length);\n}\n\ntype RewindDeps = {\n  harness: Harness;\n  agents?: Agents;\n  cone: Cones;\n  scoops?: HostScoops;\n};\n\nasync function turnIn(\n  harness: Harness,\n  conversation: Conversation,\n  messageId: string | null,\n  context: Context\n): Promise<{ turn: Turn; view: ConversationView } | Rewound> {\n  const attached = await conversation.viewState(context);\n  const view = attached.value;\n  attached.dispose();\n  const pending = (await harness.inspect(context)).submissions.some(\n    (submission) => submission.conversationId === conversation.id\n  );\n  if (pending || busy(view)) return { done: false, text: null, reason: 'busy' };\n  const turn = lastTurn(view, messageId);\n  return turn ? { turn, view } : { done: false, text: null, reason: 'no-turn' };\n}\n\nasync function forkAt(\n  harness: Harness,\n  conversation: Conversation,\n  found: { turn: Turn },\n  context: Context\n): Promise<Conversation> {\n  const ownership = { kind: 'ownerless' } as const;\n  if (found.turn.at !== null) return conversation.fork(found.turn.at, { ownership }, context);\n  const init = copyAgent(await storedAgent(harness, conversation.id, context));\n  return harness.createConversation({ ownership, init }, context);\n}\n\nasync function rewindAgent(\n  deps: RewindDeps,\n  agentId: string | null,\n  messageId: string | null,\n  context: Context\n): Promise<Rewound> {\n  const { harness, agents, cone, scoops } = deps;\n  const scoop = agentId && agents ? agents.state().scoops[agentId] : undefined;\n  if (agentId && agents && !scoop && agentId !== agents.activeCone())\n    await agents.selectCone(agentId, context);\n  const conversation =\n    scoop && agents\n      ? ((await agents.conversation(agentId as string, context)) as Conversation)\n      : cone.cone();\n  const found = await turnIn(harness, conversation, messageId, context);\n  if ('reason' in found) return found;\n  const fork = await forkAt(harness, conversation, found, context);\n  const changed =\n    scoops && agents && !scoop\n      ? await scoops.scoops.rewound(agents.activeCone(), fork, context)\n      : { stopped: [], restored: [] };\n  const files = found.turn.files;\n  await fork.submit(\n    { type: 'write', entry: { kind: 'slicc.rewound', data: { turns: 1, ...changed, files } } },\n    context\n  );\n  if (scoop && agents)\n    await agents.update((_tx, state) => {\n      const record = state.scoops[agentId as string] as ScoopRecord;\n      record.conversation = fork.id;\n      delete record.title;\n      delete record.titled;\n    }, context);\n  else await cone.switchCone(fork, context);\n  const { attachments } = found.turn;\n  return {\n    done: true,\n    text: found.turn.text,\n    reason: null,\n    ...(attachments.length ? { attachments } : {}),\n  };\n}\n\ntype Picture = { type?: string; data?: string; mimeType?: string };\n\nasync function storedImage(\n  harness: Harness,\n  ref: ImageRef,\n  context: Context\n): Promise<StoredImage> {\n  const entry = await harness.commit((tx) => tx.entry(ref.entry as EntryId), context);\n  const content = entry?.model?.[ref.message]?.content;\n  const part = Array.isArray(content) ? (content[ref.part] as Picture | undefined) : undefined;\n  return part?.type === 'image' && part.data && part.mimeType\n    ? { data: part.data, mimeType: part.mimeType }\n    : { data: null, mimeType: null };\n}\n\nasync function contentOf(\n  text: string,\n  request: SendRequest,\n  conversation: Conversation,\n  uploads: Uploads | undefined,\n  context: Context\n): Promise<UserInput> {\n  if (!request.attachments?.length) return scrubText(text);\n  const saver = await saverFor(conversation, uploads, context);\n  return scrubItems(await userParts(text, request.attachments, saver));\n}\n\nexport function createAgentControl(\n  harness: Harness,\n  target: Conversation | Cones,\n  deliveries?: Deliveries,\n  licks?: HostLicks,\n  scoops?: HostScoops,\n  skills?: Pick<SkillsRuntime, 'expand' | 'commandsFor'>,\n  sprinkles?: Pick<SprinklesRuntime, 'send' | 'call'>,\n  memory?: Pick<MemoryRuntime, 'save' | 'remove'>,\n  freezer?: Pick<FreezerRuntime, 'freeze' | 'newChat' | 'thaw' | 'discard'>,\n  changes?: Pick<ChangesRuntime, 'open' | 'accept' | 'revert'>,\n  monitor?: Pick<Monitor, 'open' | 'close'>,\n  secrets?: () => readonly SecretName[],\n  uploads?: Uploads,\n  labels?: Pick<LabelsRuntime, 'label'>,\n  guests?: Pick<Guests, 'open' | 'revoke' | 'forgetAlways'>\n): Omit<AgentControl, 'approvalPolicySet'> {\n  const cone = cones(target);\n  const current = () => cone.cone();\n  const agents = (target as WithAgents).agents;\n  const conversationFor = async (agentId: string | null | undefined, context: Context) => {\n    if (!agentId || !agents) return current();\n    const found = await agents.conversation(agentId, context);\n    if (!found) throw new Error(`There is no agent ${agentId}.`);\n    return found;\n  };\n  const withdraw = async (conversation: Conversation, id: string, context: Context) => {\n    const parsed = submissionId(id);\n    if (parsed === undefined) return { outcome: 'not_found' as const };\n    const result = await harness.abortSubmission(parsed, context, conversation.id);\n    if (result === 'aborted') return { outcome: 'withdrawn' as const };\n    return {\n      outcome: result === 'not_found' ? ('not_found' as const) : ('already_placed' as const),\n    };\n  };\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n  const rewindIn = (agentId: string | null, messageId: string | null, context: Context) =>\n    serial(() => rewindAgent({ harness, agents, cone, scoops }, agentId, messageId, context));\n  const decide = (\n    agentId: string | null,\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved> =>\n    serial(async () => {\n      if (!licks) return { done: false, text: null, error: 'this agent has no licks' };\n      const action = state === 'confirmed' ? 'confirm' : 'dismiss';\n      try {\n        const conversation = await conversationFor(agentId, context);\n        const text = await licks.licks.decide(conversation, lickId, action, undefined, context);\n        await conversation.submit(\n          {\n            type: 'write',\n            entry: {\n              kind: LICK_STATE_KIND,\n              data: { lick: lickId, state, by: 'user' },\n              model: [\n                {\n                  role: 'user',\n                  content: `The user ${state} lick ${lickId}: ${text}`,\n                  timestamp: Date.now(),\n                },\n              ],\n            },\n          },\n          context\n        );\n        return { done: true, text, error: null };\n      } catch (error) {\n        return { done: false, text: null, error: (error as Error).message };\n      }\n    });\n  return {\n    send(request, context) {\n      return serial(async () => {\n        if (secrets && request.text.trim() === SECRETS_COMMAND)\n          return accepted(async () =>\n            (await conversationFor(request.agentId, context)).submit(\n              { type: 'write', entry: secretsEntry(secrets()) },\n              context\n            )\n          );\n        const response = await accepted(async () => {\n          const conversation = await conversationFor(request.agentId, context);\n          const expanded = skills\n            ? await skills.expand(request.text, context, conversation.id)\n            : request.text;\n          return conversation.submit(\n            {\n              type: 'input',\n              content: await contentOf(expanded, request, conversation, uploads, context),\n              whenBusy: request.whenBusy,\n              ...(request.requestId ? { requestId: request.requestId } : {}),\n            },\n            context\n          );\n        });\n        const id = response.submissionId === null ? undefined : submissionId(response.submissionId);\n        if (id !== undefined) deliveries?.expect(id, request.whenBusy);\n        return response;\n      });\n    },\n    rewind: (messageId, context) => rewindIn(null, messageId, context),\n    rewindAgent: (agentId, messageId, context) => rewindIn(agentId, messageId, context),\n\n    async wait(id, context) {\n      const parsed = submissionId(id);\n      const submission =\n        parsed === undefined ? undefined : await harness.submission(parsed, context);\n      if (!submission) throw new Error(`unknown submission ${id}`);\n      const settled = await submission.wait(context);\n      const { answer, reason } = settled as { answer?: EntryId; reason?: string };\n      if (answer === undefined) return { status: 'unanswered', text: null, reason: String(reason) };\n      const entry = await harness.commit((tx) => tx.entry(AssistantEntry, answer), context);\n      return { status: 'done', text: answerText(entry?.model?.[0]?.content), reason: null };\n    },\n    withdraw: (id, context) => withdraw(current(), id, context),\n    ...sprinkleControl(sprinkles),\n    ...memoryControl(memory),\n    ...freezerControl(freezer),\n    ...changesControl(changes),\n    ...guestControl(guests),\n    ...monitorControl(monitor),\n    image: (ref, context) => storedImage(harness, ref, context),\n    async unqueue(agentId, id, context) {\n      return withdraw(await conversationFor(agentId, context), id, context);\n    },\n    abort: (context) => current().abort(context),\n    compact: (instructions, context) =>\n      accepted(() => current().compact(instructions ?? undefined, context)),\n    compactAgent: (agentId, instructions, context) =>\n      accepted(async () =>\n        (await conversationFor(agentId, context)).compact(instructions ?? undefined, context)\n      ),\n    reset: (handoff, context) => current().reset(handoff ?? undefined, context),\n    resolveLick: (lickId, state, context) => decide(null, lickId, state, context),\n    resolveAgentLick: (agentId, lickId, state, context) => decide(agentId, lickId, state, context),\n    async webhook(name, delivery, context) {\n      const delivered = licks\n        ? await licks.sources.webhook(\n            name,\n            {\n              ...(delivery.id ? { id: delivery.id } : {}),\n              headers: delivery.headers,\n              body: delivery.body,\n            },\n            context\n          )\n        : false;\n      return { delivered };\n    },\n    async stopAgent(agentId, context) {\n      await (await conversationFor(agentId, context)).abort(context);\n    },\n    async selectCone(agentId, context) {\n      await agents?.selectCone(agentId, context);\n    },\n    createCone(name, context) {\n      return created(async () => {\n        if (!agents) throw new Error('This agent has a single cone.');\n        return agents.createCone(name, context);\n      });\n    },\n    createScoop(parentId, name, context) {\n      return created(async () => {\n        if (!scoops) throw new Error('This agent has no scoops.');\n        const roles = await scoops.runtime.roles(context);\n        const answer = await scoops.scoops.spawn(\n          { cone: parentId, name, prompts: [], fromAgent: false, limits: roles.limits },\n          context\n        );\n        if (answer.code !== 0) throw new Error(readable(answer.out));\n        return `scoop:${answer.out.trim()}`;\n      });\n    },\n    drop(agentId, context) {\n      return created(async () => {\n        if (!scoops) throw new Error('This agent has no scoops.');\n        const answer = await scoops.scoops.stop(agentId, false, context);\n        if (answer.code !== 0) throw new Error(readable(answer.out));\n        return agentId;\n      });\n    },\n    configure: async (change, context) =>\n      (await conversationFor(change.agentId, context)).configure(\n        {\n          ...(change.model ? { model: change.model } : {}),\n          ...(change.thinkingLevel ? { thinkingLevel: change.thinkingLevel } : {}),\n        },\n        context\n      ),\n    agentCommands: async (agentId) => skills?.commandsFor(agentId) ?? [],\n    toolLabel: async (agentId, callIds, context) =>\n      labels ? labels.label(agentId, callIds, context) : null,\n    decide: noApprovals,\n  };\n}\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,EAEA;AAAA,OAOK;AACP,SAAS,kBAAkB;AAE3B,SAA+B,WAAW,iBAAiB;AAO3D,SAAS,uBAAuB;AAIhC,SAAS,iBAAiB,oBAAoB;AAE9C,SAAS,YAAY,iBAAiB;AACtC,SAAS,WAAW,mBAAmB;AAevC,SAAS,gBAA8B;AAchC,SAAS,SAAS,KAAqB;AAC5C,QAAM,OAAO,IAAI,QAAQ,oBAAoB,EAAE,EAAE,KAAK;AACtD,QAAM,WAAW,KAAK,OAAO,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC;AAC5D,SAAO,SAAS,KAAK,QAAQ,IAAI,WAAW,GAAG,QAAQ;AACzD;AAEA,SAAS,QAAQ,KAA8C;AAC7D,SAAO,IAAI,EAAE;AAAA,IACX,CAAC,QAAQ,EAAE,IAAI,OAAO,KAAK;AAAA,IAC3B,CAAC,WAAkB,EAAE,IAAI,MAAM,OAAO,MAAM,QAAQ;AAAA,EACtD;AACF;AAEA,SAAS,eACP,SACoD;AACpD,SAAO;AAAA,IACL,aAAa,OAAO,OAAO,QAAQ,YACjC,UAAU,QAAQ,KAAK,OAAO,QAAQ,OAAO,IAAI,EAAE,OAAO,IAAI,OAAO,EAAE;AAAA,IACzE,cAAc,OAAO,OAAO,YAAY,SAAS,MAAM,OAAO,OAAO;AAAA,EACvE;AACF;AAEA,MAAM,cAAsC,aAAa;AAAA,EACvD,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AACT;AAEA,SAAS,eACP,SAC+D;AAC/D,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,4BAA4B;AAC1D,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,QAAQ,CAAC,SAAS,YAAY,QAAQ,YAAY,OAAO,EAAE,OAAO,SAAS,OAAO,CAAC;AAAA,IACnF,SAAS,CAAC,SAAS,YACjB,QAAQ,YAAa,MAAM,OAAO,EAAE,QAAQ,SAAS,OAAO,KAAM,EAAE;AAAA,IACtE,MAAM,CAAC,IAAI,YAAY,QAAQ,YAAY,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC;AAAA,IACrE,SAAS,CAAC,IAAI,YACZ,QAAQ,YAAY;AAClB,YAAM,OAAO,EAAE,QAAQ,IAAI,OAAO;AAClC,aAAO;AAAA,IACT,CAAC;AAAA,EACL;AACF;AAEA,SAAS,aACP,QACuE;AACvE,SAAO;AAAA,IACL,WAAW,OAAO,OAAO,YACvB,SAAS,OAAO,KAAK,OAAO,OAAO,IAAI,EAAE,MAAM,MAAM,OAAO,UAAU;AAAA,IACxE,aAAa,OAAO,IAAI,YAAa,SAAS,OAAO,OAAO,IAAI,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,IAC5F,mBAAmB,OAAO,MAAM,UAAU,YACxC,SAAS,OAAO,aAAa,MAAM,UAAU,OAAO,IAAI,EAAE,SAAS,MAAM;AAAA,EAC7E;AACF;AAEA,MAAM,YAAY;AAElB,SAAS,eACP,SACqE;AACrE,QAAM,SAAS,MAAM;AACnB,QAAI,CAAC,QAAS,OAAM,IAAI,MAAM,+BAA+B;AAC7D,WAAO;AAAA,EACT;AACA,QAAM,OAAO,CAAC,MAAc,QAC1B,QAAQ,YAAY;AAClB,UAAM,IAAI,OAAO,CAAC;AAClB,WAAO;AAAA,EACT,CAAC;AACH,SAAO;AAAA,IACL,aAAa,OAAO,YAAY,SAAS,KAAK,OAAO;AAAA,IACrD,cAAc,CAAC,MAAM,YAAY,KAAK,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,OAAO,CAAC;AAAA,IACtF,cAAc,CAAC,MAAM,YAAY,KAAK,MAAM,CAAC,YAAY,QAAQ,OAAO,MAAM,OAAO,CAAC;AAAA,EACxF;AACF;AAEA,SAAS,cACP,QACmD;AACnD,SAAO;AAAA,IACL,MAAM,WAAW,OAAO,SAAS;AAC/B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,YAAM,EAAE,IAAI,GAAG,KAAK,IAAI;AACxB,aAAO,OAAO,KAAK,EAAE,GAAG,MAAM,GAAI,KAAK,EAAE,GAAG,IAAI,CAAC,EAAG,GAAG,OAAO;AAAA,IAChE;AAAA,IACA,MAAM,aAAa,IAAI,SAAS;AAC9B,aAAO,EAAE,SAAS,SAAS,MAAM,OAAO,OAAO,IAAI,OAAO,IAAI,MAAM;AAAA,IACtE;AAAA,EACF;AACF;AAEA,SAAS,gBACP,WACqD;AACrD,SAAO;AAAA,IACL,cAAc,OAAO,IAAI,SAAS,YAChC,YAAY,UAAU,KAAK,IAAI,SAAS,OAAO,IAAI,EAAE,WAAW,MAAM;AAAA,IACxE,MAAM,aAAa,IAAI,QAAQ,MAAM,SAAS;AAC5C,UAAI,CAAC,UAAW,OAAM,IAAI,MAAM,8BAA8B;AAC9D,aAAO,UAAU,KAAK,IAAI,QAAQ,MAAM,OAAO;AAAA,IACjD;AAAA,EACF;AACF;AAEO,SAAS,aAAa,OAAyC;AACpE,QAAM,KAAK,OAAO,KAAK;AACvB,SAAO,gBAAgB,KAAK,KAAK,KAAK,OAAO,cAAc,EAAE,IAAK,KAAsB;AAC1F;AAEA,SAAS,eAAe,OAAgC;AACtD,MAAI,iBAAiB,iBAAkB,QAAO,EAAE,MAAM,QAAQ,SAAS,MAAM,QAAQ;AACrF,SAAO,EAAE,MAAM,UAAU,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AAC3F;AAEA,eAAe,SAAS,WAA0E;AAChG,MAAI;AACF,UAAM,SAAS,MAAM,UAAU;AAC/B,UAAM,KAAK,OAAO,WAAW,WAAW,SAAS,OAAO;AACxD,WAAO,EAAE,UAAU,MAAM,cAAc,OAAO,EAAE,GAAG,OAAO,KAAK;AAAA,EACjE,SAAS,OAAO;AACd,WAAO,EAAE,UAAU,OAAO,cAAc,MAAM,OAAO,eAAe,KAAK,EAAE;AAAA,EAC7E;AACF;AAEA,SAAS,MAAM,QAAqC;AAClD,MAAI,UAAU,OAAQ,QAAO;AAC7B,SAAO;AAAA,IACL,MAAM,MAAM;AAAA,IACZ,YAAY,YAAY;AACtB,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AAAA,EACF;AACF;AAWA,MAAM,UAAU,CAAC,SAAS,QAAQ,QAAQ,UAAU;AAEpD,SAAS,SAAS,SAA0C;AAC1D,SAAO,QAAQ;AAAA,IAAK,CAAC,WAClB,MAAM,SAAS,CAAC,GAAG;AAAA,MAClB,CAAC,YACC,MAAM,QAAQ,QAAQ,OAAO,KAC5B,QAAQ,QAAoB;AAAA,QAC3B,CAAC,UAAU,MAAM,SAAS,cAAc,QAAQ,SAAS,OAAO,MAAM,IAAI,CAAC;AAAA,MAC7E;AAAA,IACJ;AAAA,EACF;AACF;AAEA,SAAS,SAAS,MAAwB,WAAuC;AAC/E,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,SAAS,QAAQ,UAAU,CAAC,UAAU,IAAI,MAAM,EAAE,OAAO,SAAS;AACxE,MAAI,SAAS,EAAG,QAAO;AACvB,QAAM,OAAO,QAAQ,MAAM,GAAG,MAAM,EAAE,cAAc,CAAC,UAAU,MAAM,SAAS,SAAS;AACvF,MAAI,OAAO,EAAG,QAAO;AACrB,QAAM,OAAO,QAAQ,IAAI;AACzB,SAAO;AAAA,IACL,GAAG,UAAU,KAAK,QAAQ,CAAC,GAAG,OAAO;AAAA,IACrC,IAAI,QAAQ,OAAO,CAAC,GAAG,MAAM;AAAA,IAC7B,OAAO,SAAS,QAAQ,MAAM,IAAI,CAAC;AAAA,EACrC;AACF;AAEA,SAAS,KAAK,MAAiC;AAC7C,QAAM,OAAO,KAAK,KAAK,SAAS;AAChC,QAAM,QAAQ,KAAK,KAAK,UAAU;AAClC,SAAO,QAAQ,MAAM,GAAG,KAAK,QAAQ,OAAO,OAAO,MAAM;AAC3D;AASA,eAAe,OACb,SACA,cACA,WACA,SAC2D;AAC3D,QAAM,WAAW,MAAM,aAAa,UAAU,OAAO;AACrD,QAAM,OAAO,SAAS;AACtB,WAAS,QAAQ;AACjB,QAAM,WAAW,MAAM,QAAQ,QAAQ,OAAO,GAAG,YAAY;AAAA,IAC3D,CAAC,eAAe,WAAW,mBAAmB,aAAa;AAAA,EAC7D;AACA,MAAI,WAAW,KAAK,IAAI,EAAG,QAAO,EAAE,MAAM,OAAO,MAAM,MAAM,QAAQ,OAAO;AAC5E,QAAM,OAAO,SAAS,MAAM,SAAS;AACrC,SAAO,OAAO,EAAE,MAAM,KAAK,IAAI,EAAE,MAAM,OAAO,MAAM,MAAM,QAAQ,UAAU;AAC9E;AAEA,eAAe,OACb,SACA,cACA,OACA,SACuB;AACvB,QAAM,YAAY,EAAE,MAAM,YAAY;AACtC,MAAI,MAAM,KAAK,OAAO,KAAM,QAAO,aAAa,KAAK,MAAM,KAAK,IAAI,EAAE,UAAU,GAAG,OAAO;AAC1F,QAAM,OAAO,UAAU,MAAM,YAAY,SAAS,aAAa,IAAI,OAAO,CAAC;AAC3E,SAAO,QAAQ,mBAAmB,EAAE,WAAW,KAAK,GAAG,OAAO;AAChE;AAEA,eAAe,YACb,MACA,SACA,WACA,SACkB;AAClB,QAAM,EAAE,SAAS,QAAQ,MAAM,OAAO,IAAI;AAC1C,QAAM,QAAQ,WAAW,SAAS,OAAO,MAAM,EAAE,OAAO,OAAO,IAAI;AACnE,MAAI,WAAW,UAAU,CAAC,SAAS,YAAY,OAAO,WAAW;AAC/D,UAAM,OAAO,WAAW,SAAS,OAAO;AAC1C,QAAM,eACJ,SAAS,SACH,MAAM,OAAO,aAAa,SAAmB,OAAO,IACtD,KAAK,KAAK;AAChB,QAAM,QAAQ,MAAM,OAAO,SAAS,cAAc,WAAW,OAAO;AACpE,MAAI,YAAY,MAAO,QAAO;AAC9B,QAAM,OAAO,MAAM,OAAO,SAAS,cAAc,OAAO,OAAO;AAC/D,QAAM,UACJ,UAAU,UAAU,CAAC,QACjB,MAAM,OAAO,OAAO,QAAQ,OAAO,WAAW,GAAG,MAAM,OAAO,IAC9D,EAAE,SAAS,CAAC,GAAG,UAAU,CAAC,EAAE;AAClC,QAAM,QAAQ,MAAM,KAAK;AACzB,QAAM,KAAK;AAAA,IACT,EAAE,MAAM,SAAS,OAAO,EAAE,MAAM,iBAAiB,MAAM,EAAE,OAAO,GAAG,GAAG,SAAS,MAAM,EAAE,EAAE;AAAA,IACzF;AAAA,EACF;AACA,MAAI,SAAS;AACX,UAAM,OAAO,OAAO,CAAC,KAAK,UAAU;AAClC,YAAM,SAAS,MAAM,OAAO,OAAiB;AAC7C,aAAO,eAAe,KAAK;AAC3B,aAAO,OAAO;AACd,aAAO,OAAO;AAAA,IAChB,GAAG,OAAO;AAAA,MACP,OAAM,KAAK,WAAW,MAAM,OAAO;AACxC,QAAM,EAAE,YAAY,IAAI,MAAM;AAC9B,SAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM,MAAM,KAAK;AAAA,IACjB,QAAQ;AAAA,IACR,GAAI,YAAY,SAAS,EAAE,YAAY,IAAI,CAAC;AAAA,EAC9C;AACF;AAIA,eAAe,YACb,SACA,KACA,SACsB;AACtB,QAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC,OAAO,GAAG,MAAM,IAAI,KAAgB,GAAG,OAAO;AAClF,QAAM,UAAU,OAAO,QAAQ,IAAI,OAAO,GAAG;AAC7C,QAAM,OAAO,MAAM,QAAQ,OAAO,IAAK,QAAQ,IAAI,IAAI,IAA4B;AACnF,SAAO,MAAM,SAAS,WAAW,KAAK,QAAQ,KAAK,WAC/C,EAAE,MAAM,KAAK,MAAM,UAAU,KAAK,SAAS,IAC3C,EAAE,MAAM,MAAM,UAAU,KAAK;AACnC;AAEA,eAAe,UACb,MACA,SACA,cACA,SACA,SACoB;AACpB,MAAI,CAAC,QAAQ,aAAa,OAAQ,QAAO,UAAU,IAAI;AACvD,QAAM,QAAQ,MAAM,SAAS,cAAc,SAAS,OAAO;AAC3D,SAAO,WAAW,MAAM,UAAU,MAAM,QAAQ,aAAa,KAAK,CAAC;AACrE;AAEO,SAAS,mBACd,SACA,QACA,YACA,OACA,QACA,QACA,WACA,QACA,SACA,SACA,SACA,SACA,SACA,QACA,QACyC;AACzC,QAAM,OAAO,MAAM,MAAM;AACzB,QAAM,UAAU,MAAM,KAAK,KAAK;AAChC,QAAM,SAAU,OAAsB;AACtC,QAAM,kBAAkB,OAAO,SAAoC,YAAqB;AACtF,QAAI,CAAC,WAAW,CAAC,OAAQ,QAAO,QAAQ;AACxC,UAAM,QAAQ,MAAM,OAAO,aAAa,SAAS,OAAO;AACxD,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,qBAAqB,OAAO,GAAG;AAC3D,WAAO;AAAA,EACT;AACA,QAAM,WAAW,OAAO,cAA4B,IAAY,YAAqB;AACnF,UAAM,SAAS,aAAa,EAAE;AAC9B,QAAI,WAAW,OAAW,QAAO,EAAE,SAAS,YAAqB;AACjE,UAAM,SAAS,MAAM,QAAQ,gBAAgB,QAAQ,SAAS,aAAa,EAAE;AAC7E,QAAI,WAAW,UAAW,QAAO,EAAE,SAAS,YAAqB;AACjE,WAAO;AAAA,MACL,SAAS,WAAW,cAAe,cAAyB;AAAA,IAC9D;AAAA,EACF;AACA,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AACA,QAAM,WAAW,CAAC,SAAwB,WAA0B,YAClE,OAAO,MAAM,YAAY,EAAE,SAAS,QAAQ,MAAM,OAAO,GAAG,SAAS,WAAW,OAAO,CAAC;AAC1F,QAAM,SAAS,CACb,SACA,QACA,OACA,YAEA,OAAO,YAAY;AACjB,QAAI,CAAC,MAAO,QAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAO,0BAA0B;AAC/E,UAAM,SAAS,UAAU,cAAc,YAAY;AACnD,QAAI;AACF,YAAM,eAAe,MAAM,gBAAgB,SAAS,OAAO;AAC3D,YAAM,OAAO,MAAM,MAAM,MAAM,OAAO,cAAc,QAAQ,QAAQ,QAAW,OAAO;AACtF,YAAM,aAAa;AAAA,QACjB;AAAA,UACE,MAAM;AAAA,UACN,OAAO;AAAA,YACL,MAAM;AAAA,YACN,MAAM,EAAE,MAAM,QAAQ,OAAO,IAAI,OAAO;AAAA,YACxC,OAAO;AAAA,cACL;AAAA,gBACE,MAAM;AAAA,gBACN,SAAS,YAAY,KAAK,SAAS,MAAM,KAAK,IAAI;AAAA,gBAClD,WAAW,KAAK,IAAI;AAAA,cACtB;AAAA,YACF;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,aAAO,EAAE,MAAM,MAAM,MAAM,OAAO,KAAK;AAAA,IACzC,SAAS,OAAO;AACd,aAAO,EAAE,MAAM,OAAO,MAAM,MAAM,OAAQ,MAAgB,QAAQ;AAAA,IACpE;AAAA,EACF,CAAC;AACH,SAAO;AAAA,IACL,KAAK,SAAS,SAAS;AACrB,aAAO,OAAO,YAAY;AACxB,YAAI,WAAW,QAAQ,KAAK,KAAK,MAAM;AACrC,iBAAO;AAAA,YAAS,aACb,MAAM,gBAAgB,QAAQ,SAAS,OAAO,GAAG;AAAA,cAChD,EAAE,MAAM,SAAS,OAAO,aAAa,QAAQ,CAAC,EAAE;AAAA,cAChD;AAAA,YACF;AAAA,UACF;AACF,cAAM,WAAW,MAAM,SAAS,YAAY;AAC1C,gBAAM,eAAe,MAAM,gBAAgB,QAAQ,SAAS,OAAO;AACnE,gBAAM,WAAW,SACb,MAAM,OAAO,OAAO,QAAQ,MAAM,SAAS,aAAa,EAAE,IAC1D,QAAQ;AACZ,iBAAO,aAAa;AAAA,YAClB;AAAA,cACE,MAAM;AAAA,cACN,SAAS,MAAM,UAAU,UAAU,SAAS,cAAc,SAAS,OAAO;AAAA,cAC1E,UAAU,QAAQ;AAAA,cAClB,GAAI,QAAQ,YAAY,EAAE,WAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,YAC9D;AAAA,YACA;AAAA,UACF;AAAA,QACF,CAAC;AACD,cAAM,KAAK,SAAS,iBAAiB,OAAO,SAAY,aAAa,SAAS,YAAY;AAC1F,YAAI,OAAO,OAAW,aAAY,OAAO,IAAI,QAAQ,QAAQ;AAC7D,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,CAAC,WAAW,YAAY,SAAS,MAAM,WAAW,OAAO;AAAA,IACjE,aAAa,CAAC,SAAS,WAAW,YAAY,SAAS,SAAS,WAAW,OAAO;AAAA,IAElF,MAAM,KAAK,IAAI,SAAS;AACtB,YAAM,SAAS,aAAa,EAAE;AAC9B,YAAM,aACJ,WAAW,SAAY,SAAY,MAAM,QAAQ,WAAW,QAAQ,OAAO;AAC7E,UAAI,CAAC,WAAY,OAAM,IAAI,MAAM,sBAAsB,EAAE,EAAE;AAC3D,YAAM,UAAU,MAAM,WAAW,KAAK,OAAO;AAC7C,YAAM,EAAE,QAAQ,OAAO,IAAI;AAC3B,UAAI,WAAW,OAAW,QAAO,EAAE,QAAQ,cAAc,MAAM,MAAM,QAAQ,OAAO,MAAM,EAAE;AAC5F,YAAM,QAAQ,MAAM,QAAQ,OAAO,CAAC,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,OAAO;AACpF,aAAO,EAAE,QAAQ,QAAQ,MAAM,WAAW,OAAO,QAAQ,CAAC,GAAG,OAAO,GAAG,QAAQ,KAAK;AAAA,IACtF;AAAA,IACA,UAAU,CAAC,IAAI,YAAY,SAAS,QAAQ,GAAG,IAAI,OAAO;AAAA,IAC1D,GAAG,gBAAgB,SAAS;AAAA,IAC5B,GAAG,cAAc,MAAM;AAAA,IACvB,GAAG,eAAe,OAAO;AAAA,IACzB,GAAG,eAAe,OAAO;AAAA,IACzB,GAAG,aAAa,MAAM;AAAA,IACtB,GAAG,eAAe,OAAO;AAAA,IACzB,OAAO,CAAC,KAAK,YAAY,YAAY,SAAS,KAAK,OAAO;AAAA,IAC1D,MAAM,QAAQ,SAAS,IAAI,SAAS;AAClC,aAAO,SAAS,MAAM,gBAAgB,SAAS,OAAO,GAAG,IAAI,OAAO;AAAA,IACtE;AAAA,IACA,OAAO,CAAC,YAAY,QAAQ,EAAE,MAAM,OAAO;AAAA,IAC3C,SAAS,CAAC,cAAc,YACtB,SAAS,MAAM,QAAQ,EAAE,QAAQ,gBAAgB,QAAW,OAAO,CAAC;AAAA,IACtE,cAAc,CAAC,SAAS,cAAc,YACpC;AAAA,MAAS,aACN,MAAM,gBAAgB,SAAS,OAAO,GAAG,QAAQ,gBAAgB,QAAW,OAAO;AAAA,IACtF;AAAA,IACF,OAAO,CAAC,SAAS,YAAY,QAAQ,EAAE,MAAM,WAAW,QAAW,OAAO;AAAA,IAC1E,aAAa,CAAC,QAAQ,OAAO,YAAY,OAAO,MAAM,QAAQ,OAAO,OAAO;AAAA,IAC5E,kBAAkB,CAAC,SAAS,QAAQ,OAAO,YAAY,OAAO,SAAS,QAAQ,OAAO,OAAO;AAAA,IAC7F,MAAM,QAAQ,MAAM,UAAU,SAAS;AACrC,YAAM,YAAY,QACd,MAAM,MAAM,QAAQ;AAAA,QAClB;AAAA,QACA;AAAA,UACE,GAAI,SAAS,KAAK,EAAE,IAAI,SAAS,GAAG,IAAI,CAAC;AAAA,UACzC,SAAS,SAAS;AAAA,UAClB,MAAM,SAAS;AAAA,QACjB;AAAA,QACA;AAAA,MACF,IACA;AACJ,aAAO,EAAE,UAAU;AAAA,IACrB;AAAA,IACA,MAAM,UAAU,SAAS,SAAS;AAChC,aAAO,MAAM,gBAAgB,SAAS,OAAO,GAAG,MAAM,OAAO;AAAA,IAC/D;AAAA,IACA,MAAM,WAAW,SAAS,SAAS;AACjC,YAAM,QAAQ,WAAW,SAAS,OAAO;AAAA,IAC3C;AAAA,IACA,WAAW,MAAM,SAAS;AACxB,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,+BAA+B;AAC5D,eAAO,OAAO,WAAW,MAAM,OAAO;AAAA,MACxC,CAAC;AAAA,IACH;AAAA,IACA,YAAY,UAAU,MAAM,SAAS;AACnC,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,cAAM,QAAQ,MAAM,OAAO,QAAQ,MAAM,OAAO;AAChD,cAAM,SAAS,MAAM,OAAO,OAAO;AAAA,UACjC,EAAE,MAAM,UAAU,MAAM,SAAS,CAAC,GAAG,WAAW,OAAO,QAAQ,MAAM,OAAO;AAAA,UAC5E;AAAA,QACF;AACA,YAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,SAAS,OAAO,GAAG,CAAC;AAC3D,eAAO,SAAS,OAAO,IAAI,KAAK,CAAC;AAAA,MACnC,CAAC;AAAA,IACH;AAAA,IACA,KAAK,SAAS,SAAS;AACrB,aAAO,QAAQ,YAAY;AACzB,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B;AACxD,cAAM,SAAS,MAAM,OAAO,OAAO,KAAK,SAAS,OAAO,OAAO;AAC/D,YAAI,OAAO,SAAS,EAAG,OAAM,IAAI,MAAM,SAAS,OAAO,GAAG,CAAC;AAC3D,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AAAA,IACA,WAAW,OAAO,QAAQ,aACvB,MAAM,gBAAgB,OAAO,SAAS,OAAO,GAAG;AAAA,MAC/C;AAAA,QACE,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,QAC9C,GAAI,OAAO,gBAAgB,EAAE,eAAe,OAAO,cAAc,IAAI,CAAC;AAAA,MACxE;AAAA,MACA;AAAA,IACF;AAAA,IACF,eAAe,OAAO,YAAY,QAAQ,YAAY,OAAO,KAAK,CAAC;AAAA,IACnE,WAAW,OAAO,SAAS,SAAS,YAClC,SAAS,OAAO,MAAM,SAAS,SAAS,OAAO,IAAI;AAAA,IACrD,QAAQ;AAAA,EACV;AACF;",
   "names": []
 }

package/dist/guests/guard.js

@@ -1,38 +1,183 @@
+import { awaitWithContext, BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
 import {
   defineExtension,
   hook,
   LiveDoc,
   ToolTask
 } from "@earendil-works/pi-durable";
+import { REASONS } from "../approvals/record.js";
+import { gateKind, gateRefusal } from "./policy.js";
+import { GuestsDoc, isGate, liveSeat } from "./seats.js";
 const GUEST_GUARD = "slicc-guest-guard";
 const GUEST_REQUEST = "guest:";
-const GUEST_TOOLS_BLOCKED = "Tool calls in a run a guest started need a review, which this agent can't do yet.";
-function guestGuard(harness) {
-  return defineExtension({
-    name: GUEST_GUARD,
-    hooks: [
-      hook(ToolTask, {
-        async beforeTool(_call, api, context) {
-          const live = await api.snapshot(LiveDoc, api.conversationId, context);
-          const inputs = live?.run?.inputs ?? [];
-          if (!inputs.length) return void 0;
-          const held = harness();
-          if (!held) return { block: GUEST_TOOLS_BLOCKED };
-          for (const id of inputs) {
-            const submission = await held.submission(id, context);
-            const record = submission ? await submission.status(context) : void 0;
-            if (record?.requestId?.startsWith(GUEST_REQUEST)) return { block: GUEST_TOOLS_BLOCKED };
-          }
-          return void 0;
-        }
-      })
-    ]
+const GUEST_TOOL_MEMO = "slicc.guest-tool";
+const SUMMARY_LENGTH = 2e3;
+const GATE_REASONS = {
+  unknown: "A guest started this run, and its seat names no review for tool calls that this agent knows.",
+  ended: "A guest started this run, and that guest's seat has ended.",
+  rejected: "The owner declined this tool call in a run a guest started.",
+  judged: "The automatic check declined this tool call in a run a guest started",
+  unanswered: "Nobody approved this tool call in a run a guest started in time.",
+  unroutable: "The cone can't review a tool call it is itself waiting on.",
+  scoop: "No scoop can review a guest's tool call yet, so this one is denied.",
+  withdrawn: "The review of this tool call was withdrawn."
+};
+function canonical(value) {
+  if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
+  if (value && typeof value === "object")
+    return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonical(value[key])}`).join(",")}}`;
+  return JSON.stringify(value ?? null);
+}
+function summaryOf(args) {
+  const values = Object.values(args);
+  const text = values.length === 1 && typeof values[0] === "string" ? values[0] : canonical(args);
+  return text.length > SUMMARY_LENGTH ? `${text.slice(0, SUMMARY_LENGTH - 1)}\u2026` : text;
+}
+function reasonOf(item) {
+  if (item.state === "rejected" && item.decidedBy === "judge")
+    return item.verdict ? `${GATE_REASONS.judged}: ${item.verdict.reason}` : `${GATE_REASONS.judged}.`;
+  if (item.state === "rejected")
+    return item.reason && item.reason !== REASONS.unknownAnswer ? `${GATE_REASONS.rejected} ${item.reason}` : GATE_REASONS.rejected;
+  if (item.state === "withdrawn") return GATE_REASONS.withdrawn;
+  if (item.reason === REASONS.unknownTier) return GATE_REASONS.unknown;
+  if (item.reason === REASONS.unroutable) return GATE_REASONS.unroutable;
+  return GATE_REASONS.unanswered;
+}
+async function taintsOf(inputs, seats, harness, context) {
+  const found = /* @__PURE__ */ new Map();
+  for (const id of inputs) {
+    const seat = Object.values(seats).find(
+      (record2) => record2.submissions?.some((entry) => entry.id === String(id))
+    );
+    const tier = seat?.submissions?.find((entry) => entry.id === String(id))?.tools;
+    if (seat) {
+      found.set(`${seat.id}
+${tier}`, { seat, tier: String(tier) });
+      continue;
+    }
+    const submission = await harness.submission(id, context);
+    const record = submission ? await submission.status(context) : void 0;
+    if (record?.requestId?.startsWith(GUEST_REQUEST)) return [{ seat: null, tier: "" }];
+  }
+  return [...found.values()];
+}
+function settledEarly(seat, tier, policy, at, tool, args) {
+  if (!policy.allowedToolGates.includes(gateKind(tier)))
+    return gateRefusal("a guest's tool calls", policy.allowedToolGates);
+  if (!liveSeat(seat, at)) return GATE_REASONS.ended;
+  if (tier === "off") return "";
+  if (gateKind(tier) === "scoop") return GATE_REASONS.scoop;
+  const kept = seat.alwaysTools?.some((rule) => rule.tool === tool && rule.arguments === args);
+  return policy.always.tools && kept ? "" : null;
+}
+const ended = (status) => status === "terminal" || status === "completing";
+function guestToolGate(harness) {
+  let resolveHost = () => {
+  };
+  const bound = new Promise((resolve) => {
+    resolveHost = resolve;
   });
+  const watched = /* @__PURE__ */ new Set();
+  const watch = (host, id, task) => {
+    const held = harness();
+    if (!held || watched.has(id)) return;
+    watched.add(id);
+    void held.waitForTask(task, BACKGROUND_CONTEXT).then(
+      (record) => ended(record.state.status) ? host.approvals.withdraw(id, REASONS.aborted, BACKGROUND_CONTEXT) : void 0
+    ).catch(() => void 0).finally(() => watched.delete(id));
+  };
+  const remember = (seat, rule) => harness().commit(async (tx) => {
+    const record = (await tx.doc(GuestsDoc)).seats[seat];
+    if (!record || record.revoked !== null) return;
+    const kept = (record.alwaysTools ?? []).filter(
+      (entry) => entry.tool !== rule.tool || entry.arguments !== rule.arguments
+    );
+    record.alwaysTools = [...kept, rule];
+  }, BACKGROUND_CONTEXT);
+  const review = async (taint, call, api, context) => {
+    const { seat } = taint;
+    if (seat === null || !isGate(taint.tier)) return GATE_REASONS.unknown;
+    const host = await awaitWithContext(bound, context);
+    const policy = host.policy();
+    const now = host.now ?? Date.now;
+    const args = canonical(call.arguments);
+    const always = policy.always.tools;
+    const early = settledEarly(seat, taint.tier, policy, now(), call.name, args);
+    if (early !== null) return early || void 0;
+    const id = await api.memo(
+      `${GUEST_TOOL_MEMO}:${seat.id}:${taint.tier}`,
+      `apr-${crypto.randomUUID()}`,
+      context
+    );
+    const task = Number(api.taskId);
+    const asked = await host.approvals.request(
+      {
+        id,
+        kind: "guest-tool",
+        seat: seat.id,
+        agentId: seat.agentId,
+        requester: { kind: "guest", name: seat.label, seat: seat.id },
+        tier: taint.tier,
+        detail: { tool: call.name, summary: summaryOf(call.arguments), arguments: args, task }
+      },
+      BACKGROUND_CONTEXT
+    );
+    watch(host, id, task);
+    const live = async () => liveSeat((await api.snapshot(GuestsDoc, context))?.seats[seat.id], now());
+    if (!await live()) {
+      await host.approvals.withdraw(id, REASONS.revoked, BACKGROUND_CONTEXT);
+      return GATE_REASONS.ended;
+    }
+    const item = asked.state === "pending" ? await host.approvals.settled(id, context) : asked;
+    if (item.state !== "approved") return reasonOf(item);
+    if (!await live()) return GATE_REASONS.ended;
+    if (item.answer === "always" && always)
+      await remember(seat.id, {
+        approval: item.id,
+        tool: call.name,
+        arguments: args,
+        by: item.decidedBy,
+        at: item.decidedAt ?? now()
+      });
+    return void 0;
+  };
+  return {
+    extension: defineExtension({
+      name: GUEST_GUARD,
+      hooks: [
+        hook(ToolTask, {
+          async beforeTool(call, api, context) {
+            const live = await api.snapshot(LiveDoc, api.conversationId, context);
+            const inputs = live?.run?.inputs ?? [];
+            if (!inputs.length) return void 0;
+            const seats = (await api.snapshot(GuestsDoc, context))?.seats ?? {};
+            const held = harness();
+            for (const taint of await taintsOf(inputs, seats, held, context)) {
+              const block = await review(taint, call, api, context);
+              if (block) return { block };
+            }
+            return void 0;
+          }
+        })
+      ]
+    }),
+    bind(host) {
+      resolveHost(host);
+      for (const item of host.approvals.state.value ?? [])
+        if (item.kind === "guest-tool" && item.state === "pending" && item.detail.task)
+          watch(host, item.id, item.detail.task);
+    }
+  };
 }
 export {
+  GATE_REASONS,
   GUEST_GUARD,
   GUEST_REQUEST,
-  GUEST_TOOLS_BLOCKED,
-  guestGuard
+  GUEST_TOOL_MEMO,
+  SUMMARY_LENGTH,
+  canonical,
+  guestToolGate,
+  reasonOf,
+  summaryOf
 };
 //# sourceMappingURL=guard.js.map