@ai-ecoverse/slicc-agent 6.1.3 → 6.2.1

package/README.md

@@ -227,7 +227,7 @@ gone /home/notes/old.md
 **Sources.**
 - `fswatch`: the kernel environment's `watch()` reports changed paths; those matching the glob are collected for `debounce` ms and delivered as one lick with `changed` or `gone` per path. A watch that overflows or stops says so in a lick (a stopped one with `severity="error"`, an overflow with `severity="warn"`), and saving its file restarts it. Changes made while no worker runs aren't reported. **The agent's own changes are dropped**, so it never licks itself: the kernel environment records every path its file tools write, edit, move or remove, and the time its `bash` commands run; a change to such a path within 2 s, or any change while an agent command runs or within 2 s after it, counts as the agent's. A change the user makes while an agent command runs is therefore dropped too. Background processes the agent started (`&`) aren't tracked, so their changes do lick.
 - `cron`: `agent send` from a kernel cron job (see Schedules).
-- `webhook`: each request is its own lick, with the headers and the body; a delivery `id` makes retries idempotent. A kernel process delivers one with `agent send cone --lick=webhook --source <name> (<message> | --file <path> | -)`, for the ntfy gateway (sliccy-ai#42) and `mcpcat --subscribe`: `command: agent send cone --lick=webhook --source github "$NTFY_RAW"` in ntfy's `client.yml`, or `mcpcat tray --experimental events --subscribe hook.received --name github -- agent send cone --lick=webhook --source github -`. Nothing is read from the environment. `<name>` must be a configured `~/.slicc/webhooks/<name>.json` (scoped to the cone for a cone user, as the files are; a scoop user is refused), and the target must be `cone`. The message is one event as JSON, told apart by its fields: an ntfy message (`id` and `topic`) has the id `ntfy:<topic>/<id>`, the gateway's `headers` and its `message` as the body; an MCP `EventOccurrence` (`eventId`, `name`, `data`) has the id `mcp:<eventId>` and its `data` as the body; any other text is delivered as it is, with no headers and no id. So a replay (`ntfy sub --since`, an MCP cursor resume) is delivered once. `verified: false` puts `verified: false (the gateway couldn't check this request's signature)` first in the body. An ntfy `attachment` (bodies over about 48 KiB, or 4096 bytes on ntfy.sh) is named in the body with its name, size and URL, but not fetched yet: that waits for the tray token to have a home (#389). Triage applies as for any webhook. `--lick=<channel>` for any of the agent's own channels (`fswatch`, `upgrade`, `session-reload`, …) is refused with the channels a process may send, `cron` and `webhook`.
+- `webhook`: each request is its own lick, with the headers and the body; a delivery `id` makes retries idempotent. A kernel process delivers one with `agent send cone --lick=webhook --source <name> (<message> | --file <path> | -)`, for the ntfy gateway (sliccy-ai#42) and `mcpcat --subscribe`: `command: agent send cone --lick=webhook --source github "$NTFY_RAW"` in ntfy's `client.yml`, or `mcpcat tray --experimental events --subscribe hook.received --name github -- agent send cone --lick=webhook --source github -`. Nothing is read from the environment. `<name>` must be a configured `~/.slicc/webhooks/<name>.json` (scoped to the cone for a cone user, as the files are; a scoop user is refused), and the target must be `cone`. The message is one event as JSON, told apart by its fields: an ntfy message (`id` and `topic`) has the id `ntfy:<topic>/<id>`, the gateway's `headers` and its `message` as the body; an MCP `EventOccurrence` (`eventId`, `name`, `data`) has the id `mcp:<eventId>` and its `data` as the body; any other text is delivered as it is, with no headers and no id. So a replay (`ntfy sub --since`, an MCP cursor resume) is delivered once. `verified: false` puts `verified: false (the gateway couldn't check this request's signature)` first in the body. An ntfy `attachment` (bodies over about 48 KiB, or 4096 bytes on ntfy.sh) is fetched through the agent's transport only when its URL is a capability URL on the gateway, `https://ntfy.sliccy.ai/file/…` (no token; the gateway answers with CORS `*`). A text type (`text/*`, JSON, XML, YAML, NDJSON, JavaScript) that is valid UTF-8 joins the body after `attachment <name>, <size> bytes:`, so triage reads it. The read is capped at its declared `size` and at 256 KiB, counted on the stream, and limited to 10 s. Binary content is named by its type and URL, not inlined or saved, so untrusted bytes never land in a cone's home. A URL on any other origin is named and never fetched, so a forged message can't make the agent fetch arbitrary URLs. An expired (404), too big, binary, failed or slow attachment still delivers the lick, with a line saying why it wasn't fetched. Triage applies as for any webhook. `--lick=<channel>` for any of the agent's own channels (`fswatch`, `upgrade`, `session-reload`, …) is refused with the channels a process may send, `cron` and `webhook`.
 - `upgrade`: when the worker starts with a different slicc-agent version than the session recorded, with the release notes link. Every change of version is its own lick, also back and forth.
 - `session-reload`: when the kernel's boot time (`btime` in `/proc/stat`) differs from the last worker start and the cone ran `bash` since then. The page reloaded, so the kernel's processes are gone; the lick lists background commands (`&`, `nohup`, `setsid`, `disown`) that are no longer running. Durable itself resumes an interrupted run.
 

package/dist/licks/attachment.js

@@ -0,0 +1,114 @@
+const GATEWAY = "https://ntfy.sliccy.ai";
+const ATTACHMENT_LIMIT = 256 * 1024;
+const ATTACHMENT_TIMEOUT_MS = 1e4;
+const TEXT = /^(text\/[\w.+-]+|application\/(json|x-ndjson|xml|yaml|x-yaml|javascript|ecmascript)|application\/[\w.+-]+\+(json|xml))$/;
+function attachmentLabel(attachment) {
+  const bytes = attachment.size === void 0 ? "" : `, ${attachment.size} bytes`;
+  return `attachment ${attachment.name ?? "file"}${bytes}`;
+}
+function attachmentLine(attachment) {
+  return `${attachmentLabel(attachment)}, not fetched: ${attachment.url}`;
+}
+function fromGateway(url) {
+  try {
+    const parsed = new URL(url);
+    return parsed.origin === GATEWAY && parsed.pathname.startsWith("/file/");
+  } catch {
+    return false;
+  }
+}
+class Refused extends Error {
+}
+function bounded(work, signal) {
+  return new Promise((resolve, reject) => {
+    const stop = () => reject(signal.reason);
+    if (signal.aborted) stop();
+    signal.addEventListener("abort", stop, { once: true });
+    work.then(resolve, reject).finally(() => signal.removeEventListener("abort", stop));
+  });
+}
+async function capped(response, cap, signal) {
+  if (!response.body) return new Uint8Array();
+  const reader = response.body.getReader();
+  const chunks = [];
+  let total = 0;
+  try {
+    for (; ; ) {
+      const { done, value } = await bounded(reader.read(), signal);
+      if (done) break;
+      total += value.byteLength;
+      if (total > cap) throw new Refused();
+      chunks.push(value);
+    }
+  } finally {
+    void reader.cancel().catch(() => void 0);
+  }
+  const bytes = new Uint8Array(total);
+  let at = 0;
+  for (const chunk of chunks) {
+    bytes.set(chunk, at);
+    at += chunk.byteLength;
+  }
+  return bytes;
+}
+function textOf(bytes) {
+  try {
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+  } catch {
+    return void 0;
+  }
+}
+function why(error) {
+  const name = error?.name;
+  if (name === "TimeoutError" || name === "AbortError")
+    return `the gateway took longer than ${ATTACHMENT_TIMEOUT_MS / 1e3} s`;
+  return `the request failed: ${error?.message || String(error)}`;
+}
+async function attachmentPart(attachment, fetcher) {
+  const label = attachmentLabel(attachment);
+  const { url } = attachment;
+  if (!fetcher || !fromGateway(url)) return attachmentLine(attachment);
+  const cap = Math.min(attachment.size ?? ATTACHMENT_LIMIT, ATTACHMENT_LIMIT);
+  const refused = (reason) => `${label}, not fetched: ${reason}: ${url}`;
+  const tooBig = refused(
+    cap < ATTACHMENT_LIMIT ? `it is larger than its declared ${cap} bytes` : `it is larger than the ${ATTACHMENT_LIMIT / 1024} KiB limit`
+  );
+  if ((attachment.size ?? 0) > ATTACHMENT_LIMIT) return tooBig;
+  const signal = AbortSignal.timeout(ATTACHMENT_TIMEOUT_MS);
+  try {
+    const response = await fetcher(url, { signal, credentials: "omit", redirect: "error" });
+    const drop = () => void response.body?.cancel().catch(() => void 0);
+    if (response.status === 404) {
+      drop();
+      return refused("it expired or was removed (404)");
+    }
+    if (!response.ok) {
+      drop();
+      return refused(`the gateway answered ${response.status}`);
+    }
+    const type = (response.headers.get("content-type") ?? "").split(";")[0]?.trim().toLowerCase();
+    const binary = `${label}, ${type || "no type"}, binary, not inlined: ${url}`;
+    if (!type || !TEXT.test(type)) {
+      drop();
+      return binary;
+    }
+    if (Number(response.headers.get("content-length")) > cap) {
+      drop();
+      return tooBig;
+    }
+    const text = textOf(await capped(response, cap, signal));
+    return text === void 0 ? binary : `${label}:
+${text}`;
+  } catch (error) {
+    return error instanceof Refused ? tooBig : refused(why(error));
+  }
+}
+export {
+  ATTACHMENT_LIMIT,
+  ATTACHMENT_TIMEOUT_MS,
+  GATEWAY,
+  attachmentLabel,
+  attachmentLine,
+  attachmentPart
+};
+//# sourceMappingURL=attachment.js.map

package/dist/licks/attachment.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/licks/attachment.ts"],
+  "sourcesContent": ["export const GATEWAY = 'https://ntfy.sliccy.ai';\nexport const ATTACHMENT_LIMIT = 256 * 1024;\nexport const ATTACHMENT_TIMEOUT_MS = 10_000;\n\nexport interface Attachment {\n  url: string;\n  name?: string;\n  size?: number;\n}\n\nconst TEXT =\n  /^(text\\/[\\w.+-]+|application\\/(json|x-ndjson|xml|yaml|x-yaml|javascript|ecmascript)|application\\/[\\w.+-]+\\+(json|xml))$/;\n\nexport function attachmentLabel(attachment: Attachment): string {\n  const bytes = attachment.size === undefined ? '' : `, ${attachment.size} bytes`;\n  return `attachment ${attachment.name ?? 'file'}${bytes}`;\n}\n\nexport function attachmentLine(attachment: Attachment): string {\n  return `${attachmentLabel(attachment)}, not fetched: ${attachment.url}`;\n}\n\nfunction fromGateway(url: string): boolean {\n  try {\n    const parsed = new URL(url);\n    return parsed.origin === GATEWAY && parsed.pathname.startsWith('/file/');\n  } catch {\n    return false;\n  }\n}\n\nclass Refused extends Error {}\n\nfunction bounded<T>(work: Promise<T>, signal: AbortSignal): Promise<T> {\n  return new Promise<T>((resolve, reject) => {\n    const stop = () => reject(signal.reason);\n    if (signal.aborted) stop();\n    signal.addEventListener('abort', stop, { once: true });\n    work.then(resolve, reject).finally(() => signal.removeEventListener('abort', stop));\n  });\n}\n\nasync function capped(response: Response, cap: number, signal: AbortSignal): Promise<Uint8Array> {\n  if (!response.body) return new Uint8Array();\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  try {\n    for (;;) {\n      const { done, value } = await bounded(reader.read(), signal);\n      if (done) break;\n      total += value.byteLength;\n      if (total > cap) throw new Refused();\n      chunks.push(value);\n    }\n  } finally {\n    void reader.cancel().catch(() => undefined);\n  }\n  const bytes = new Uint8Array(total);\n  let at = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, at);\n    at += chunk.byteLength;\n  }\n  return bytes;\n}\n\nfunction textOf(bytes: Uint8Array): string | undefined {\n  try {\n    return new TextDecoder('utf-8', { fatal: true }).decode(bytes);\n  } catch {\n    return undefined;\n  }\n}\n\nfunction why(error: unknown): string {\n  const name = (error as Error | undefined)?.name;\n  if (name === 'TimeoutError' || name === 'AbortError')\n    return `the gateway took longer than ${ATTACHMENT_TIMEOUT_MS / 1000} s`;\n  return `the request failed: ${(error as Error | undefined)?.message || String(error)}`;\n}\n\nexport async function attachmentPart(\n  attachment: Attachment,\n  fetcher: typeof fetch | undefined\n): Promise<string> {\n  const label = attachmentLabel(attachment);\n  const { url } = attachment;\n  if (!fetcher || !fromGateway(url)) return attachmentLine(attachment);\n  const cap = Math.min(attachment.size ?? ATTACHMENT_LIMIT, ATTACHMENT_LIMIT);\n  const refused = (reason: string) => `${label}, not fetched: ${reason}: ${url}`;\n  const tooBig = refused(\n    cap < ATTACHMENT_LIMIT\n      ? `it is larger than its declared ${cap} bytes`\n      : `it is larger than the ${ATTACHMENT_LIMIT / 1024} KiB limit`\n  );\n  if ((attachment.size ?? 0) > ATTACHMENT_LIMIT) return tooBig;\n  const signal = AbortSignal.timeout(ATTACHMENT_TIMEOUT_MS);\n  try {\n    const response = await fetcher(url, { signal, credentials: 'omit', redirect: 'error' });\n    const drop = () => void response.body?.cancel().catch(() => undefined);\n    if (response.status === 404) {\n      drop();\n      return refused('it expired or was removed (404)');\n    }\n    if (!response.ok) {\n      drop();\n      return refused(`the gateway answered ${response.status}`);\n    }\n    const type = (response.headers.get('content-type') ?? '').split(';')[0]?.trim().toLowerCase();\n    const binary = `${label}, ${type || 'no type'}, binary, not inlined: ${url}`;\n    if (!type || !TEXT.test(type)) {\n      drop();\n      return binary;\n    }\n    if (Number(response.headers.get('content-length')) > cap) {\n      drop();\n      return tooBig;\n    }\n    const text = textOf(await capped(response, cap, signal));\n    return text === undefined ? binary : `${label}:\\n${text}`;\n  } catch (error) {\n    return error instanceof Refused ? tooBig : refused(why(error));\n  }\n}\n"],
+  "mappings": "AAAO,MAAM,UAAU;AAChB,MAAM,mBAAmB,MAAM;AAC/B,MAAM,wBAAwB;AAQrC,MAAM,OACJ;AAEK,SAAS,gBAAgB,YAAgC;AAC9D,QAAM,QAAQ,WAAW,SAAS,SAAY,KAAK,KAAK,WAAW,IAAI;AACvE,SAAO,cAAc,WAAW,QAAQ,MAAM,GAAG,KAAK;AACxD;AAEO,SAAS,eAAe,YAAgC;AAC7D,SAAO,GAAG,gBAAgB,UAAU,CAAC,kBAAkB,WAAW,GAAG;AACvE;AAEA,SAAS,YAAY,KAAsB;AACzC,MAAI;AACF,UAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,WAAO,OAAO,WAAW,WAAW,OAAO,SAAS,WAAW,QAAQ;AAAA,EACzE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,gBAAgB,MAAM;AAAC;AAE7B,SAAS,QAAW,MAAkB,QAAiC;AACrE,SAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,UAAM,OAAO,MAAM,OAAO,OAAO,MAAM;AACvC,QAAI,OAAO,QAAS,MAAK;AACzB,WAAO,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;AACrD,SAAK,KAAK,SAAS,MAAM,EAAE,QAAQ,MAAM,OAAO,oBAAoB,SAAS,IAAI,CAAC;AAAA,EACpF,CAAC;AACH;AAEA,eAAe,OAAO,UAAoB,KAAa,QAA0C;AAC/F,MAAI,CAAC,SAAS,KAAM,QAAO,IAAI,WAAW;AAC1C,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,SAAuB,CAAC;AAC9B,MAAI,QAAQ;AACZ,MAAI;AACF,eAAS;AACP,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,QAAQ,OAAO,KAAK,GAAG,MAAM;AAC3D,UAAI,KAAM;AACV,eAAS,MAAM;AACf,UAAI,QAAQ,IAAK,OAAM,IAAI,QAAQ;AACnC,aAAO,KAAK,KAAK;AAAA,IACnB;AAAA,EACF,UAAE;AACA,SAAK,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EAC5C;AACA,QAAM,QAAQ,IAAI,WAAW,KAAK;AAClC,MAAI,KAAK;AACT,aAAW,SAAS,QAAQ;AAC1B,UAAM,IAAI,OAAO,EAAE;AACnB,UAAM,MAAM;AAAA,EACd;AACA,SAAO;AACT;AAEA,SAAS,OAAO,OAAuC;AACrD,MAAI;AACF,WAAO,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,KAAK;AAAA,EAC/D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,IAAI,OAAwB;AACnC,QAAM,OAAQ,OAA6B;AAC3C,MAAI,SAAS,kBAAkB,SAAS;AACtC,WAAO,gCAAgC,wBAAwB,GAAI;AACrE,SAAO,uBAAwB,OAA6B,WAAW,OAAO,KAAK,CAAC;AACtF;AAEA,eAAsB,eACpB,YACA,SACiB;AACjB,QAAM,QAAQ,gBAAgB,UAAU;AACxC,QAAM,EAAE,IAAI,IAAI;AAChB,MAAI,CAAC,WAAW,CAAC,YAAY,GAAG,EAAG,QAAO,eAAe,UAAU;AACnE,QAAM,MAAM,KAAK,IAAI,WAAW,QAAQ,kBAAkB,gBAAgB;AAC1E,QAAM,UAAU,CAAC,WAAmB,GAAG,KAAK,kBAAkB,MAAM,KAAK,GAAG;AAC5E,QAAM,SAAS;AAAA,IACb,MAAM,mBACF,kCAAkC,GAAG,WACrC,yBAAyB,mBAAmB,IAAI;AAAA,EACtD;AACA,OAAK,WAAW,QAAQ,KAAK,iBAAkB,QAAO;AACtD,QAAM,SAAS,YAAY,QAAQ,qBAAqB;AACxD,MAAI;AACF,UAAM,WAAW,MAAM,QAAQ,KAAK,EAAE,QAAQ,aAAa,QAAQ,UAAU,QAAQ,CAAC;AACtF,UAAM,OAAO,MAAM,KAAK,SAAS,MAAM,OAAO,EAAE,MAAM,MAAM,MAAS;AACrE,QAAI,SAAS,WAAW,KAAK;AAC3B,WAAK;AACL,aAAO,QAAQ,iCAAiC;AAAA,IAClD;AACA,QAAI,CAAC,SAAS,IAAI;AAChB,WAAK;AACL,aAAO,QAAQ,wBAAwB,SAAS,MAAM,EAAE;AAAA,IAC1D;AACA,UAAM,QAAQ,SAAS,QAAQ,IAAI,cAAc,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,GAAG,KAAK,EAAE,YAAY;AAC5F,UAAM,SAAS,GAAG,KAAK,KAAK,QAAQ,SAAS,0BAA0B,GAAG;AAC1E,QAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,GAAG;AAC7B,WAAK;AACL,aAAO;AAAA,IACT;AACA,QAAI,OAAO,SAAS,QAAQ,IAAI,gBAAgB,CAAC,IAAI,KAAK;AACxD,WAAK;AACL,aAAO;AAAA,IACT;AACA,UAAM,OAAO,OAAO,MAAM,OAAO,UAAU,KAAK,MAAM,CAAC;AACvD,WAAO,SAAS,SAAY,SAAS,GAAG,KAAK;AAAA,EAAM,IAAI;AAAA,EACzD,SAAS,OAAO;AACd,WAAO,iBAAiB,UAAU,SAAS,QAAQ,IAAI,KAAK,CAAC;AAAA,EAC/D;AACF;",
+  "names": []
+}

package/dist/licks/events.js

@@ -14,19 +14,25 @@ function headersOf(value) {
   );
   return kept.length ? { headers: Object.fromEntries(kept) } : {};
 }
-function attachmentLine(value) {
-  if (typeof value !== "object" || value === null) return "";
+function attachmentOf(value) {
+  if (typeof value !== "object" || value === null) return {};
   const { name, size, url } = value;
-  if (!isText(url)) return "";
-  const bytes = typeof size === "number" && Number.isFinite(size) ? `, ${size} bytes` : "";
-  return `attachment ${isText(name) ? name : "file"}${bytes}, not fetched: ${url}`;
+  if (!isText(url)) return {};
+  return {
+    attachment: {
+      url,
+      ...isText(name) ? { name } : {},
+      ...typeof size === "number" && Number.isFinite(size) ? { size } : {}
+    }
+  };
 }
 function ntfy(json) {
   const message = typeof json.message === "string" ? json.message : "";
   return {
     id: `ntfy:${json.topic}/${json.id}`,
     ...headersOf(json.headers),
-    body: [message, attachmentLine(json.attachment)].filter(Boolean).join("\n\n"),
+    body: message,
+    ...attachmentOf(json.attachment),
     ...json.verified === false ? { verified: false } : {}
   };
 }
@@ -38,7 +44,6 @@ function webhookDelivery(text) {
   return { body: text };
 }
 export {
-  attachmentLine,
   webhookDelivery
 };
 //# sourceMappingURL=events.js.map

package/dist/licks/events.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/licks/events.ts"],
-  "sourcesContent": ["import type { WebhookDelivery } from './sources.ts';\n\ntype Json = Record<string, unknown>;\n\nfunction objectOf(text: string): Json | undefined {\n  try {\n    const value: unknown = JSON.parse(text);\n    return typeof value === 'object' && value !== null && !Array.isArray(value)\n      ? (value as Json)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nconst isText = (value: unknown): value is string => typeof value === 'string' && value !== '';\n\nfunction headersOf(value: unknown): { headers?: Record<string, string> } {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return {};\n  const kept = Object.entries(value).filter(\n    (entry): entry is [string, string] => typeof entry[1] === 'string'\n  );\n  return kept.length ? { headers: Object.fromEntries(kept) } : {};\n}\n\nexport function attachmentLine(value: unknown): string {\n  if (typeof value !== 'object' || value === null) return '';\n  const { name, size, url } = value as Json;\n  if (!isText(url)) return '';\n  const bytes = typeof size === 'number' && Number.isFinite(size) ? `, ${size} bytes` : '';\n  return `attachment ${isText(name) ? name : 'file'}${bytes}, not fetched: ${url}`;\n}\n\nfunction ntfy(json: Json): WebhookDelivery {\n  const message = typeof json.message === 'string' ? json.message : '';\n  return {\n    id: `ntfy:${json.topic}/${json.id}`,\n    ...headersOf(json.headers),\n    body: [message, attachmentLine(json.attachment)].filter(Boolean).join('\\n\\n'),\n    ...(json.verified === false ? { verified: false } : {}),\n  };\n}\n\nexport function webhookDelivery(text: string): WebhookDelivery {\n  const json = objectOf(text);\n  if (json && isText(json.id) && isText(json.topic)) return ntfy(json);\n  if (json && isText(json.eventId) && isText(json.name) && 'data' in json)\n    return { id: `mcp:${json.eventId}`, body: json.data };\n  return { body: text };\n}\n"],
-  "mappings": "AAIA,SAAS,SAAS,MAAgC;AAChD,MAAI;AACF,UAAM,QAAiB,KAAK,MAAM,IAAI;AACtC,WAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,SAAS,CAAC,UAAoC,OAAO,UAAU,YAAY,UAAU;AAE3F,SAAS,UAAU,OAAsD;AACvE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACjF,QAAM,OAAO,OAAO,QAAQ,KAAK,EAAE;AAAA,IACjC,CAAC,UAAqC,OAAO,MAAM,CAAC,MAAM;AAAA,EAC5D;AACA,SAAO,KAAK,SAAS,EAAE,SAAS,OAAO,YAAY,IAAI,EAAE,IAAI,CAAC;AAChE;AAEO,SAAS,eAAe,OAAwB;AACrD,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAC5B,MAAI,CAAC,OAAO,GAAG,EAAG,QAAO;AACzB,QAAM,QAAQ,OAAO,SAAS,YAAY,OAAO,SAAS,IAAI,IAAI,KAAK,IAAI,WAAW;AACtF,SAAO,cAAc,OAAO,IAAI,IAAI,OAAO,MAAM,GAAG,KAAK,kBAAkB,GAAG;AAChF;AAEA,SAAS,KAAK,MAA6B;AACzC,QAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAClE,SAAO;AAAA,IACL,IAAI,QAAQ,KAAK,KAAK,IAAI,KAAK,EAAE;AAAA,IACjC,GAAG,UAAU,KAAK,OAAO;AAAA,IACzB,MAAM,CAAC,SAAS,eAAe,KAAK,UAAU,CAAC,EAAE,OAAO,OAAO,EAAE,KAAK,MAAM;AAAA,IAC5E,GAAI,KAAK,aAAa,QAAQ,EAAE,UAAU,MAAM,IAAI,CAAC;AAAA,EACvD;AACF;AAEO,SAAS,gBAAgB,MAA+B;AAC7D,QAAM,OAAO,SAAS,IAAI;AAC1B,MAAI,QAAQ,OAAO,KAAK,EAAE,KAAK,OAAO,KAAK,KAAK,EAAG,QAAO,KAAK,IAAI;AACnE,MAAI,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO,KAAK,IAAI,KAAK,UAAU;AACjE,WAAO,EAAE,IAAI,OAAO,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;AACtD,SAAO,EAAE,MAAM,KAAK;AACtB;",
+  "sourcesContent": ["import type { Attachment } from './attachment.ts';\nimport type { WebhookDelivery } from './sources.ts';\n\ntype Json = Record<string, unknown>;\n\nfunction objectOf(text: string): Json | undefined {\n  try {\n    const value: unknown = JSON.parse(text);\n    return typeof value === 'object' && value !== null && !Array.isArray(value)\n      ? (value as Json)\n      : undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nconst isText = (value: unknown): value is string => typeof value === 'string' && value !== '';\n\nfunction headersOf(value: unknown): { headers?: Record<string, string> } {\n  if (typeof value !== 'object' || value === null || Array.isArray(value)) return {};\n  const kept = Object.entries(value).filter(\n    (entry): entry is [string, string] => typeof entry[1] === 'string'\n  );\n  return kept.length ? { headers: Object.fromEntries(kept) } : {};\n}\n\nfunction attachmentOf(value: unknown): { attachment?: Attachment } {\n  if (typeof value !== 'object' || value === null) return {};\n  const { name, size, url } = value as Json;\n  if (!isText(url)) return {};\n  return {\n    attachment: {\n      url,\n      ...(isText(name) ? { name } : {}),\n      ...(typeof size === 'number' && Number.isFinite(size) ? { size } : {}),\n    },\n  };\n}\n\nfunction ntfy(json: Json): WebhookDelivery {\n  const message = typeof json.message === 'string' ? json.message : '';\n  return {\n    id: `ntfy:${json.topic}/${json.id}`,\n    ...headersOf(json.headers),\n    body: message,\n    ...attachmentOf(json.attachment),\n    ...(json.verified === false ? { verified: false } : {}),\n  };\n}\n\nexport function webhookDelivery(text: string): WebhookDelivery {\n  const json = objectOf(text);\n  if (json && isText(json.id) && isText(json.topic)) return ntfy(json);\n  if (json && isText(json.eventId) && isText(json.name) && 'data' in json)\n    return { id: `mcp:${json.eventId}`, body: json.data };\n  return { body: text };\n}\n"],
+  "mappings": "AAKA,SAAS,SAAS,MAAgC;AAChD,MAAI;AACF,UAAM,QAAiB,KAAK,MAAM,IAAI;AACtC,WAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AAAA,EACN,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,MAAM,SAAS,CAAC,UAAoC,OAAO,UAAU,YAAY,UAAU;AAE3F,SAAS,UAAU,OAAsD;AACvE,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,KAAK,EAAG,QAAO,CAAC;AACjF,QAAM,OAAO,OAAO,QAAQ,KAAK,EAAE;AAAA,IACjC,CAAC,UAAqC,OAAO,MAAM,CAAC,MAAM;AAAA,EAC5D;AACA,SAAO,KAAK,SAAS,EAAE,SAAS,OAAO,YAAY,IAAI,EAAE,IAAI,CAAC;AAChE;AAEA,SAAS,aAAa,OAA6C;AACjE,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO,CAAC;AACzD,QAAM,EAAE,MAAM,MAAM,IAAI,IAAI;AAC5B,MAAI,CAAC,OAAO,GAAG,EAAG,QAAO,CAAC;AAC1B,SAAO;AAAA,IACL,YAAY;AAAA,MACV;AAAA,MACA,GAAI,OAAO,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,MAC/B,GAAI,OAAO,SAAS,YAAY,OAAO,SAAS,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC;AAAA,IACtE;AAAA,EACF;AACF;AAEA,SAAS,KAAK,MAA6B;AACzC,QAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAClE,SAAO;AAAA,IACL,IAAI,QAAQ,KAAK,KAAK,IAAI,KAAK,EAAE;AAAA,IACjC,GAAG,UAAU,KAAK,OAAO;AAAA,IACzB,MAAM;AAAA,IACN,GAAG,aAAa,KAAK,UAAU;AAAA,IAC/B,GAAI,KAAK,aAAa,QAAQ,EAAE,UAAU,MAAM,IAAI,CAAC;AAAA,EACvD;AACF;AAEO,SAAS,gBAAgB,MAA+B;AAC7D,QAAM,OAAO,SAAS,IAAI;AAC1B,MAAI,QAAQ,OAAO,KAAK,EAAE,KAAK,OAAO,KAAK,KAAK,EAAG,QAAO,KAAK,IAAI;AACnE,MAAI,QAAQ,OAAO,KAAK,OAAO,KAAK,OAAO,KAAK,IAAI,KAAK,UAAU;AACjE,WAAO,EAAE,IAAI,OAAO,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;AACtD,SAAO,EAAE,MAAM,KAAK;AACtB;",
   "names": []
 }

package/dist/licks/index.js

@@ -15,7 +15,7 @@ function lickResolver(agent) {
     return await agent.agents.conversation(target, context) ?? cone;
   };
 }
-function setupLicks(registry) {
+function setupLicks(registry, fetcher) {
   let bind = () => void 0;
   const host = new Promise((resolve) => {
     bind = resolve;
@@ -37,7 +37,8 @@ function setupLicks(registry) {
         harness,
         root,
         cone: () => agent.cone(),
-        licks
+        licks,
+        ...fetcher ? { fetch: fetcher } : {}
       });
     }
   };

package/dist/licks/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/licks/index.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { Conversation, ConversationId, Harness, Registry } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv } from '@earendil-works/pi-durable/env';\nimport { type Agents, live } from '../agents.ts';\nimport type { Activity } from '../kernel/activity.ts';\nimport { licksExtension } from './extension.ts';\nimport type { LickChannel, LickTarget } from './lick.ts';\nimport { createLicks, type Licks, type LicksHost } from './licks.ts';\nimport { createLickSources, type LickDir, type LickSources } from './sources.ts';\n\nexport interface LicksAgent {\n  harness: Harness;\n  root: Conversation;\n  agents: Agents;\n  cone(): Conversation;\n}\n\nconst UNTRUSTED = new Set<LickChannel>(['webhook']);\n\nexport function lickResolver(agent: LicksAgent) {\n  return async (target: LickTarget, channel: LickChannel, context: Context) => {\n    const cone = agent.cone();\n    if (target === 'cone') return cone;\n    if (target.startsWith('cone:'))\n      return (await agent.agents.conversation(target.slice('cone:'.length), context)) ?? cone;\n    if (UNTRUSTED.has(channel)) return cone;\n    const scoop = agent.agents.state().scoops[target];\n    if (!scoop || !live(scoop)) return cone;\n    return (await agent.agents.conversation(target, context)) ?? cone;\n  };\n}\n\nexport interface LicksSetup {\n  licks: Licks;\n  attach(\n    agent: LicksAgent,\n    options: {\n      env: ExecutionEnv;\n      home: string;\n      flushEvery?: number;\n      activity?: Activity;\n      dirs?: () => Promise<readonly LickDir[]>;\n      cronUser?: (target: LickTarget, place: LickDir) => string | undefined;\n    }\n  ): LickSources;\n}\n\nexport function setupLicks(registry: Registry): LicksSetup {\n  let bind: (host: LicksHost) => void = () => undefined;\n  const host = new Promise<LicksHost>((resolve) => {\n    bind = resolve;\n  });\n  const licks = createLicks(host);\n  const lookup = async (id: ConversationId, context: Context) => {\n    const found = await (await host).harness.conversation(id, context);\n    if (!found) throw new Error(`conversation ${id} is gone`);\n    return found;\n  };\n  registry.install(licksExtension(licks, lookup));\n  return {\n    licks,\n    attach(agent, options) {\n      const { harness, root } = agent;\n      bind({ harness, resolve: lickResolver(agent) });\n      return createLickSources({\n        ...options,\n        harness,\n        root,\n        cone: () => agent.cone(),\n        licks,\n      });\n    },\n  };\n}\n\nexport type { Lick, LickChannel } from './lick.ts';\nexport type { LickEvent, Licks } from './licks.ts';\nexport type { LickSources, WebhookDelivery } from './sources.ts';\n"],
-  "mappings": "AAGA,SAAsB,YAAY;AAElC,SAAS,sBAAsB;AAE/B,SAAS,mBAA+C;AACxD,SAAS,yBAAyD;AASlE,MAAM,YAAY,oBAAI,IAAiB,CAAC,SAAS,CAAC;AAE3C,SAAS,aAAa,OAAmB;AAC9C,SAAO,OAAO,QAAoB,SAAsB,YAAqB;AAC3E,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,WAAW,OAAQ,QAAO;AAC9B,QAAI,OAAO,WAAW,OAAO;AAC3B,aAAQ,MAAM,MAAM,OAAO,aAAa,OAAO,MAAM,QAAQ,MAAM,GAAG,OAAO,KAAM;AACrF,QAAI,UAAU,IAAI,OAAO,EAAG,QAAO;AACnC,UAAM,QAAQ,MAAM,OAAO,MAAM,EAAE,OAAO,MAAM;AAChD,QAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAG,QAAO;AACnC,WAAQ,MAAM,MAAM,OAAO,aAAa,QAAQ,OAAO,KAAM;AAAA,EAC/D;AACF;AAiBO,SAAS,WAAW,UAAgC;AACzD,MAAI,OAAkC,MAAM;AAC5C,QAAM,OAAO,IAAI,QAAmB,CAAC,YAAY;AAC/C,WAAO;AAAA,EACT,CAAC;AACD,QAAM,QAAQ,YAAY,IAAI;AAC9B,QAAM,SAAS,OAAO,IAAoB,YAAqB;AAC7D,UAAM,QAAQ,OAAO,MAAM,MAAM,QAAQ,aAAa,IAAI,OAAO;AACjE,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,gBAAgB,EAAE,UAAU;AACxD,WAAO;AAAA,EACT;AACA,WAAS,QAAQ,eAAe,OAAO,MAAM,CAAC;AAC9C,SAAO;AAAA,IACL;AAAA,IACA,OAAO,OAAO,SAAS;AACrB,YAAM,EAAE,SAAS,KAAK,IAAI;AAC1B,WAAK,EAAE,SAAS,SAAS,aAAa,KAAK,EAAE,CAAC;AAC9C,aAAO,kBAAkB;AAAA,QACvB,GAAG;AAAA,QACH;AAAA,QACA;AAAA,QACA,MAAM,MAAM,MAAM,KAAK;AAAA,QACvB;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { Conversation, ConversationId, Harness, Registry } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv } from '@earendil-works/pi-durable/env';\nimport { type Agents, live } from '../agents.ts';\nimport type { Activity } from '../kernel/activity.ts';\nimport { licksExtension } from './extension.ts';\nimport type { LickChannel, LickTarget } from './lick.ts';\nimport { createLicks, type Licks, type LicksHost } from './licks.ts';\nimport { createLickSources, type LickDir, type LickSources } from './sources.ts';\n\nexport interface LicksAgent {\n  harness: Harness;\n  root: Conversation;\n  agents: Agents;\n  cone(): Conversation;\n}\n\nconst UNTRUSTED = new Set<LickChannel>(['webhook']);\n\nexport function lickResolver(agent: LicksAgent) {\n  return async (target: LickTarget, channel: LickChannel, context: Context) => {\n    const cone = agent.cone();\n    if (target === 'cone') return cone;\n    if (target.startsWith('cone:'))\n      return (await agent.agents.conversation(target.slice('cone:'.length), context)) ?? cone;\n    if (UNTRUSTED.has(channel)) return cone;\n    const scoop = agent.agents.state().scoops[target];\n    if (!scoop || !live(scoop)) return cone;\n    return (await agent.agents.conversation(target, context)) ?? cone;\n  };\n}\n\nexport interface LicksSetup {\n  licks: Licks;\n  attach(\n    agent: LicksAgent,\n    options: {\n      env: ExecutionEnv;\n      home: string;\n      flushEvery?: number;\n      activity?: Activity;\n      dirs?: () => Promise<readonly LickDir[]>;\n      cronUser?: (target: LickTarget, place: LickDir) => string | undefined;\n    }\n  ): LickSources;\n}\n\nexport function setupLicks(registry: Registry, fetcher?: typeof fetch): LicksSetup {\n  let bind: (host: LicksHost) => void = () => undefined;\n  const host = new Promise<LicksHost>((resolve) => {\n    bind = resolve;\n  });\n  const licks = createLicks(host);\n  const lookup = async (id: ConversationId, context: Context) => {\n    const found = await (await host).harness.conversation(id, context);\n    if (!found) throw new Error(`conversation ${id} is gone`);\n    return found;\n  };\n  registry.install(licksExtension(licks, lookup));\n  return {\n    licks,\n    attach(agent, options) {\n      const { harness, root } = agent;\n      bind({ harness, resolve: lickResolver(agent) });\n      return createLickSources({\n        ...options,\n        harness,\n        root,\n        cone: () => agent.cone(),\n        licks,\n        ...(fetcher ? { fetch: fetcher } : {}),\n      });\n    },\n  };\n}\n\nexport type { Lick, LickChannel } from './lick.ts';\nexport type { LickEvent, Licks } from './licks.ts';\nexport type { LickSources, WebhookDelivery } from './sources.ts';\n"],
+  "mappings": "AAGA,SAAsB,YAAY;AAElC,SAAS,sBAAsB;AAE/B,SAAS,mBAA+C;AACxD,SAAS,yBAAyD;AASlE,MAAM,YAAY,oBAAI,IAAiB,CAAC,SAAS,CAAC;AAE3C,SAAS,aAAa,OAAmB;AAC9C,SAAO,OAAO,QAAoB,SAAsB,YAAqB;AAC3E,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,WAAW,OAAQ,QAAO;AAC9B,QAAI,OAAO,WAAW,OAAO;AAC3B,aAAQ,MAAM,MAAM,OAAO,aAAa,OAAO,MAAM,QAAQ,MAAM,GAAG,OAAO,KAAM;AACrF,QAAI,UAAU,IAAI,OAAO,EAAG,QAAO;AACnC,UAAM,QAAQ,MAAM,OAAO,MAAM,EAAE,OAAO,MAAM;AAChD,QAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAG,QAAO;AACnC,WAAQ,MAAM,MAAM,OAAO,aAAa,QAAQ,OAAO,KAAM;AAAA,EAC/D;AACF;AAiBO,SAAS,WAAW,UAAoB,SAAoC;AACjF,MAAI,OAAkC,MAAM;AAC5C,QAAM,OAAO,IAAI,QAAmB,CAAC,YAAY;AAC/C,WAAO;AAAA,EACT,CAAC;AACD,QAAM,QAAQ,YAAY,IAAI;AAC9B,QAAM,SAAS,OAAO,IAAoB,YAAqB;AAC7D,UAAM,QAAQ,OAAO,MAAM,MAAM,QAAQ,aAAa,IAAI,OAAO;AACjE,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,gBAAgB,EAAE,UAAU;AACxD,WAAO;AAAA,EACT;AACA,WAAS,QAAQ,eAAe,OAAO,MAAM,CAAC;AAC9C,SAAO;AAAA,IACL;AAAA,IACA,OAAO,OAAO,SAAS;AACrB,YAAM,EAAE,SAAS,KAAK,IAAI;AAC1B,WAAK,EAAE,SAAS,SAAS,aAAa,KAAK,EAAE,CAAC;AAC9C,aAAO,kBAAkB;AAAA,QACvB,GAAG;AAAA,QACH;AAAA,QACA;AAAA,QACA,MAAM,MAAM,MAAM,KAAK;AAAA,QACvB;AAAA,QACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;AAAA,MACtC,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/licks/sources.js

@@ -1,4 +1,5 @@
 import { ROOT_USER } from "../layout.js";
+import { attachmentPart } from "./attachment.js";
 import { bootLicks, LicksHostDoc } from "./boot.js";
 import { parseWebhook } from "./config.js";
 import {
@@ -18,6 +19,12 @@ function scopedName(name, cone) {
 function scoped(entry, cone) {
   return { ...entry, name: scopedName(entry.name, cone), target: scopedTarget(entry.target, cone) };
 }
+async function withAttachment(delivery, fetcher) {
+  const { attachment, ...rest } = delivery;
+  if (!attachment) return delivery;
+  const part = await attachmentPart(attachment, fetcher);
+  return { ...rest, body: [rest.body, part].filter(Boolean).join("\n\n") };
+}
 function hash(text) {
   let value = 2166136261;
   for (let at = 0; at < text.length; at++) value = Math.imul(value ^ text.charCodeAt(at), 16777619);
@@ -220,7 +227,10 @@ function createLickSources(options) {
     async webhook(name, delivery, context) {
       const entry = webhooks.get(name);
       if (!entry) return false;
-      await deliver(webhookLick(name, entry, delivery), context);
+      await deliver(
+        webhookLick(name, entry, await withAttachment(delivery, options.fetch)),
+        context
+      );
       return true;
     },
     async close(context) {
@@ -241,6 +251,7 @@ export {
   scopedName,
   scopedTarget,
   shortPath,
-  webhookLick
+  webhookLick,
+  withAttachment
 };
 //# sourceMappingURL=sources.js.map

package/dist/licks/sources.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/licks/sources.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { Conversation, Harness, TaskId } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv, FileWatcher } from '@earendil-works/pi-durable/env';\nimport type { Activity } from '../kernel/activity.ts';\nimport { ROOT_USER } from '../layout.ts';\nimport { type BootFacts, bootLicks, LicksHostDoc } from './boot.ts';\nimport { type ConfigError, parseWebhook, type WebhookEntry } from './config.ts';\nimport {\n  type CronJob,\n  installJobs,\n  type LegacyJob,\n  legacyJobs,\n  relickJobs,\n  sendCommand,\n} from './crontab.ts';\nimport { type ConfigFiles, configFiles, Watches } from './fswatch.ts';\nimport type { LickChannel, LickTarget } from './lick.ts';\nimport type { LickEvent, Licks } from './licks.ts';\n\nexport const SLICC_DIR = '.slicc';\n\nexport interface LickSourcesOptions {\n  harness: Harness;\n  root: Conversation;\n  cone: () => Conversation;\n  env: ExecutionEnv;\n  home: string;\n  licks: Licks;\n  flushEvery?: number;\n  activity?: Activity;\n  dirs?: () => readonly LickDir[] | Promise<readonly LickDir[]>;\n  cronUser?: (target: LickTarget, place: LickDir) => string | undefined;\n}\n\nexport interface LickDir {\n  dir: string;\n  home: string;\n  cone: string | null;\n  env?: ExecutionEnv;\n}\n\nexport function scopedTarget(target: LickTarget, cone: string | null): LickTarget {\n  return cone && target === 'cone' ? (`cone:${cone}` as LickTarget) : target;\n}\n\nexport function scopedName(name: string, cone: string | null): string {\n  return cone ? `${cone}:${name}` : name;\n}\n\nfunction scoped<T extends { name: string; target: LickTarget }>(entry: T, cone: string | null): T {\n  return { ...entry, name: scopedName(entry.name, cone), target: scopedTarget(entry.target, cone) };\n}\n\nexport interface WebhookDelivery {\n  id?: string;\n  headers?: Record<string, string>;\n  body: unknown;\n  verified?: boolean;\n}\n\nexport interface LickSources {\n  start(context: Context): Promise<void>;\n  reconcile(context: Context): Promise<void>;\n  boot(facts: BootFacts, context: Context): Promise<void>;\n  webhook(name: string, delivery: WebhookDelivery, context: Context): Promise<boolean>;\n  close(context: Context): Promise<void>;\n}\n\nexport function hash(text: string): string {\n  let value = 2166136261;\n  for (let at = 0; at < text.length; at++) value = Math.imul(value ^ text.charCodeAt(at), 16777619);\n  return (value >>> 0).toString(36);\n}\n\nexport function shortPath(path: string, home: string): string {\n  return path === home || path.startsWith(`${home}/`) ? `~${path.slice(home.length)}` : path;\n}\n\nexport function configLick(\n  error: ConfigError,\n  home: string,\n  cone: string | null = null\n): LickEvent {\n  const file = shortPath(error.file, home);\n  const channel: LickChannel = error.file.includes('/watches/')\n    ? 'fswatch'\n    : error.file.includes('/webhooks/')\n      ? 'webhook'\n      : 'cron';\n  const text = `${error.line ? `line ${error.line}: ` : ''}${error.error}`;\n  return {\n    channel,\n    source: `config:${file}`,\n    title: `Invalid ${file}`,\n    text,\n    body: error.file.endsWith('/crontab.migrated')\n      ? \"Its jobs in the kernel crontab still lack --lick=cron, so they don't fire as cron licks; add it with crontab -.\"\n      : channel === 'cron'\n        ? 'Not moved into the kernel crontab until the file is fixed; the installed crontab is unchanged.\\nThe format is in the slicc-agent README.'\n        : 'Ignored until the file is fixed.\\nThe formats are in the slicc-agent README.',\n    target: scopedTarget('cone', cone),\n    severity: 'error',\n    eventId: hash(`${file}\\n${text}`),\n  };\n}\n\nexport const UNVERIFIED = \"verified: false (the gateway couldn't check this request's signature)\";\n\nexport function webhookLick(\n  name: string,\n  entry: WebhookEntry,\n  delivery: WebhookDelivery\n): LickEvent {\n  const payload =\n    typeof delivery.body === 'string' ? delivery.body : JSON.stringify(delivery.body, null, 2);\n  const headers = Object.entries(delivery.headers ?? {})\n    .map(([key, value]) => `${key}: ${value}`)\n    .join('\\n');\n  return {\n    channel: 'webhook',\n    source: name,\n    title: name,\n    text: entry.message || `Webhook ${name} received a request`,\n    body: [delivery.verified === false ? UNVERIFIED : '', headers, payload]\n      .filter(Boolean)\n      .join('\\n\\n'),\n    target: entry.target,\n    coalesce: false,\n    ...(delivery.id ? { eventId: delivery.id } : {}),\n    ...(entry.triage ? { triage: entry.triage } : {}),\n  };\n}\n\nasync function webhooksIn(\n  files: ConfigFiles,\n  dir: string,\n  context: Context\n): Promise<{ entries: Map<string, WebhookEntry>; errors: ConfigError[] }> {\n  const errors: ConfigError[] = [];\n  const into = new Map<string, WebhookEntry>();\n  for (const name of await files.list(dir, context)) {\n    const file = `${dir}/${name}`;\n    const json = await files.read(file, context);\n    if (json === undefined) continue;\n    try {\n      const entry = parseWebhook(file, json);\n      into.set(entry.name, entry);\n    } catch (error) {\n      errors.push({ file, error: (error as Error).message });\n    }\n  }\n  return { entries: into, errors };\n}\n\nexport function createLickSources(options: LickSourcesOptions): LickSources {\n  const { harness, env, licks, home } = options;\n  const files = configFiles(env);\n  const deliver = (event: LickEvent, context: Context) => licks.deliver(event, context);\n  const dirsOf = options.dirs ?? (() => [{ dir: `${home}/${SLICC_DIR}`, home, cone: null }]);\n  const watching = new Map<string, Watches>();\n  const watchesOf = (place: LickDir) => {\n    let found = watching.get(place.dir);\n    if (!found) {\n      const retarget = (event: LickEvent, context: Context) =>\n        deliver({ ...event, target: scopedTarget(event.target, place.cone) }, context);\n      found = new Watches(place.env ?? env, retarget, place.home, options.activity);\n      watching.set(place.dir, found);\n    }\n    return found;\n  };\n  let webhooks = new Map<string, WebhookEntry>();\n  const relicked = new Set<string>();\n  let control: FileWatcher | undefined;\n  let controlled = '';\n  let reconcileTimer: ReturnType<typeof setTimeout> | undefined;\n  let flushTimer: ReturnType<typeof setInterval> | undefined;\n  let closed = false;\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n\n  async function reconcileNow(context: Context): Promise<void> {\n    if (closed) return;\n    const places = await dirsOf();\n    const errors: { error: ConfigError; place: LickDir }[] = [];\n    const hooks = new Map<string, WebhookEntry>();\n    for (const place of places) {\n      const crontab = [...(await relick(place, context)), ...(await migrate(place, context))];\n      const watchErrors = await watchesOf(place).reconcile(`${place.dir}/watches`, context);\n      const found = await webhooksIn(files, `${place.dir}/webhooks`, context);\n      for (const entry of found.entries.values()) {\n        const named = scoped(entry, place.cone);\n        hooks.set(named.name, named);\n      }\n      for (const error of [...crontab, ...watchErrors, ...found.errors])\n        errors.push({ error, place });\n    }\n    for (const [dir, watches] of [...watching])\n      if (!places.some((place) => place.dir === dir)) {\n        watching.delete(dir);\n        await watches.close(context);\n      }\n    webhooks = hooks;\n    for (const { error, place } of errors)\n      await deliver(configLick(error, place.home, place.cone), context);\n    await watchControl(places, context);\n  }\n\n  function byUser(place: LickDir, jobs: readonly LegacyJob[]): Map<string, LegacyJob[]> {\n    const users = new Map<string, LegacyJob[]>();\n    for (const job of jobs) {\n      const user = options.cronUser?.(job.target, place) ?? place.cone ?? ROOT_USER;\n      users.set(user, [...(users.get(user) ?? []), job]);\n    }\n    return users;\n  }\n\n  async function relick(place: LickDir, context: Context): Promise<ConfigError[]> {\n    if (relicked.has(place.dir)) return [];\n    relicked.add(place.dir);\n    const file = `${place.dir}/crontab.migrated`;\n    const text = await files.read(file, context);\n    if (text === undefined) return [];\n    const errors: ConfigError[] = [];\n    for (const [user, list] of byUser(place, legacyJobs(text).jobs))\n      for (const problem of await relickJobs(env, user, list, context))\n        errors.push({ file, ...problem });\n    return errors;\n  }\n\n  async function migrate(place: LickDir, context: Context): Promise<ConfigError[]> {\n    const file = `${place.dir}/crontab`;\n    const text = await files.read(file, context);\n    if (!text?.trim()) return [];\n    const { jobs, problems } = legacyJobs(text);\n    if (problems.length) return problems.map((problem) => ({ file, ...problem }));\n    const users = new Map<string, CronJob[]>();\n    for (const [user, list] of byUser(place, jobs))\n      users.set(\n        user,\n        list.map((job) => ({\n          name: job.name,\n          schedule: job.schedule,\n          command: sendCommand(job.target, job.message),\n          line: job.line,\n        }))\n      );\n    const errors: ConfigError[] = [];\n    for (const [user, list] of users)\n      for (const problem of await installJobs(env, user, list, context))\n        errors.push({ file, ...problem });\n    if (errors.length) return errors;\n    await env.writeFile(`${file}.migrated`, text, context);\n    await env.remove(file, { force: true }, context);\n    return [];\n  }\n\n  async function retire(context: Context): Promise<void> {\n    const stored = (await harness.snapshot(LicksHostDoc, context))?.cron ?? {};\n    const records = Object.values(stored);\n    if (!records.length) return;\n    for (const record of records)\n      await harness.abortTask(record.task as TaskId, context).catch(() => undefined);\n    await harness.commit(async (tx) => {\n      (await tx.doc(LicksHostDoc)).cron = {};\n    }, context);\n  }\n\n  async function watchControl(places: readonly LickDir[], context: Context): Promise<void> {\n    const key = places.map((place) => place.dir).join('\\n');\n    if (key === controlled || closed) return;\n    controlled = key;\n    await control?.close(context);\n    const result = await env.watch(\n      places.map((place) => ({ path: place.dir, recursive: true })),\n      () => scheduleReconcile(context),\n      context\n    );\n    control = result.ok ? result.value : undefined;\n  }\n\n  const reconcile = (context: Context) => serial(() => reconcileNow(context));\n\n  function scheduleReconcile(context: Context): void {\n    clearTimeout(reconcileTimer);\n    reconcileTimer = setTimeout(() => {\n      void reconcile(context).catch(() => undefined);\n    }, 300);\n  }\n\n  async function flushIfWaiting(context: Context): Promise<void> {\n    if (await licks.pending(context)) await licks.flush(context);\n  }\n\n  return {\n    async start(context) {\n      await licks.flush(context);\n      await retire(context);\n      await reconcile(context);\n      flushTimer = setInterval(() => {\n        void flushIfWaiting(context).catch(() => undefined);\n      }, options.flushEvery ?? 2000);\n    },\n    reconcile,\n    boot: (facts, context) => bootLicks(harness, options.cone(), deliver, facts, context),\n    async webhook(name, delivery, context) {\n      const entry = webhooks.get(name);\n      if (!entry) return false;\n      await deliver(webhookLick(name, entry, delivery), context);\n      return true;\n    },\n    async close(context) {\n      closed = true;\n      clearTimeout(reconcileTimer);\n      clearInterval(flushTimer);\n      await control?.close(context);\n      for (const watches of watching.values()) await watches.close(context);\n    },\n  };\n}\n"],
-  "mappings": "AAIA,SAAS,iBAAiB;AAC1B,SAAyB,WAAW,oBAAoB;AACxD,SAA2B,oBAAuC;AAClE;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAA2B,aAAa,eAAe;AAIhD,MAAM,YAAY;AAsBlB,SAAS,aAAa,QAAoB,MAAiC;AAChF,SAAO,QAAQ,WAAW,SAAU,QAAQ,IAAI,KAAoB;AACtE;AAEO,SAAS,WAAW,MAAc,MAA6B;AACpE,SAAO,OAAO,GAAG,IAAI,IAAI,IAAI,KAAK;AACpC;AAEA,SAAS,OAAuD,OAAU,MAAwB;AAChG,SAAO,EAAE,GAAG,OAAO,MAAM,WAAW,MAAM,MAAM,IAAI,GAAG,QAAQ,aAAa,MAAM,QAAQ,IAAI,EAAE;AAClG;AAiBO,SAAS,KAAK,MAAsB;AACzC,MAAI,QAAQ;AACZ,WAAS,KAAK,GAAG,KAAK,KAAK,QAAQ,KAAM,SAAQ,KAAK,KAAK,QAAQ,KAAK,WAAW,EAAE,GAAG,QAAQ;AAChG,UAAQ,UAAU,GAAG,SAAS,EAAE;AAClC;AAEO,SAAS,UAAU,MAAc,MAAsB;AAC5D,SAAO,SAAS,QAAQ,KAAK,WAAW,GAAG,IAAI,GAAG,IAAI,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,KAAK;AACxF;AAEO,SAAS,WACd,OACA,MACA,OAAsB,MACX;AACX,QAAM,OAAO,UAAU,MAAM,MAAM,IAAI;AACvC,QAAM,UAAuB,MAAM,KAAK,SAAS,WAAW,IACxD,YACA,MAAM,KAAK,SAAS,YAAY,IAC9B,YACA;AACN,QAAM,OAAO,GAAG,MAAM,OAAO,QAAQ,MAAM,IAAI,OAAO,EAAE,GAAG,MAAM,KAAK;AACtE,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,UAAU,IAAI;AAAA,IACtB,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,MAAM,MAAM,KAAK,SAAS,mBAAmB,IACzC,oHACA,YAAY,SACV,6IACA;AAAA,IACN,QAAQ,aAAa,QAAQ,IAAI;AAAA,IACjC,UAAU;AAAA,IACV,SAAS,KAAK,GAAG,IAAI;AAAA,EAAK,IAAI,EAAE;AAAA,EAClC;AACF;AAEO,MAAM,aAAa;AAEnB,SAAS,YACd,MACA,OACA,UACW;AACX,QAAM,UACJ,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO,KAAK,UAAU,SAAS,MAAM,MAAM,CAAC;AAC3F,QAAM,UAAU,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,EAClD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK,KAAK,EAAE,EACxC,KAAK,IAAI;AACZ,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,MAAM,MAAM,WAAW,WAAW,IAAI;AAAA,IACtC,MAAM,CAAC,SAAS,aAAa,QAAQ,aAAa,IAAI,SAAS,OAAO,EACnE,OAAO,OAAO,EACd,KAAK,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,UAAU;AAAA,IACV,GAAI,SAAS,KAAK,EAAE,SAAS,SAAS,GAAG,IAAI,CAAC;AAAA,IAC9C,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,EACjD;AACF;AAEA,eAAe,WACb,OACA,KACA,SACwE;AACxE,QAAM,SAAwB,CAAC;AAC/B,QAAM,OAAO,oBAAI,IAA0B;AAC3C,aAAW,QAAQ,MAAM,MAAM,KAAK,KAAK,OAAO,GAAG;AACjD,UAAM,OAAO,GAAG,GAAG,IAAI,IAAI;AAC3B,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,SAAS,OAAW;AACxB,QAAI;AACF,YAAM,QAAQ,aAAa,MAAM,IAAI;AACrC,WAAK,IAAI,MAAM,MAAM,KAAK;AAAA,IAC5B,SAAS,OAAO;AACd,aAAO,KAAK,EAAE,MAAM,OAAQ,MAAgB,QAAQ,CAAC;AAAA,IACvD;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,OAAO;AACjC;AAEO,SAAS,kBAAkB,SAA0C;AAC1E,QAAM,EAAE,SAAS,KAAK,OAAO,KAAK,IAAI;AACtC,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM,UAAU,CAAC,OAAkB,YAAqB,MAAM,QAAQ,OAAO,OAAO;AACpF,QAAM,SAAS,QAAQ,SAAS,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,IAAI,SAAS,IAAI,MAAM,MAAM,KAAK,CAAC;AACxF,QAAM,WAAW,oBAAI,IAAqB;AAC1C,QAAM,YAAY,CAAC,UAAmB;AACpC,QAAI,QAAQ,SAAS,IAAI,MAAM,GAAG;AAClC,QAAI,CAAC,OAAO;AACV,YAAM,WAAW,CAAC,OAAkB,YAClC,QAAQ,EAAE,GAAG,OAAO,QAAQ,aAAa,MAAM,QAAQ,MAAM,IAAI,EAAE,GAAG,OAAO;AAC/E,cAAQ,IAAI,QAAQ,MAAM,OAAO,KAAK,UAAU,MAAM,MAAM,QAAQ,QAAQ;AAC5E,eAAS,IAAI,MAAM,KAAK,KAAK;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AACA,MAAI,WAAW,oBAAI,IAA0B;AAC7C,QAAM,WAAW,oBAAI,IAAY;AACjC,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS;AACb,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AAEA,iBAAe,aAAa,SAAiC;AAC3D,QAAI,OAAQ;AACZ,UAAM,SAAS,MAAM,OAAO;AAC5B,UAAM,SAAmD,CAAC;AAC1D,UAAM,QAAQ,oBAAI,IAA0B;AAC5C,eAAW,SAAS,QAAQ;AAC1B,YAAM,UAAU,CAAC,GAAI,MAAM,OAAO,OAAO,OAAO,GAAI,GAAI,MAAM,QAAQ,OAAO,OAAO,CAAE;AACtF,YAAM,cAAc,MAAM,UAAU,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,YAAY,OAAO;AACpF,YAAM,QAAQ,MAAM,WAAW,OAAO,GAAG,MAAM,GAAG,aAAa,OAAO;AACtE,iBAAW,SAAS,MAAM,QAAQ,OAAO,GAAG;AAC1C,cAAM,QAAQ,OAAO,OAAO,MAAM,IAAI;AACtC,cAAM,IAAI,MAAM,MAAM,KAAK;AAAA,MAC7B;AACA,iBAAW,SAAS,CAAC,GAAG,SAAS,GAAG,aAAa,GAAG,MAAM,MAAM;AAC9D,eAAO,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,IAChC;AACA,eAAW,CAAC,KAAK,OAAO,KAAK,CAAC,GAAG,QAAQ;AACvC,UAAI,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,QAAQ,GAAG,GAAG;AAC9C,iBAAS,OAAO,GAAG;AACnB,cAAM,QAAQ,MAAM,OAAO;AAAA,MAC7B;AACF,eAAW;AACX,eAAW,EAAE,OAAO,MAAM,KAAK;AAC7B,YAAM,QAAQ,WAAW,OAAO,MAAM,MAAM,MAAM,IAAI,GAAG,OAAO;AAClE,UAAM,aAAa,QAAQ,OAAO;AAAA,EACpC;AAEA,WAAS,OAAO,OAAgB,MAAsD;AACpF,UAAM,QAAQ,oBAAI,IAAyB;AAC3C,eAAW,OAAO,MAAM;AACtB,YAAM,OAAO,QAAQ,WAAW,IAAI,QAAQ,KAAK,KAAK,MAAM,QAAQ;AACpE,YAAM,IAAI,MAAM,CAAC,GAAI,MAAM,IAAI,IAAI,KAAK,CAAC,GAAI,GAAG,CAAC;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,OAAO,OAAgB,SAA0C;AAC9E,QAAI,SAAS,IAAI,MAAM,GAAG,EAAG,QAAO,CAAC;AACrC,aAAS,IAAI,MAAM,GAAG;AACtB,UAAM,OAAO,GAAG,MAAM,GAAG;AACzB,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,SAAS,OAAW,QAAO,CAAC;AAChC,UAAM,SAAwB,CAAC;AAC/B,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,OAAO,WAAW,IAAI,EAAE,IAAI;AAC5D,iBAAW,WAAW,MAAM,WAAW,KAAK,MAAM,MAAM,OAAO;AAC7D,eAAO,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;AACpC,WAAO;AAAA,EACT;AAEA,iBAAe,QAAQ,OAAgB,SAA0C;AAC/E,UAAM,OAAO,GAAG,MAAM,GAAG;AACzB,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,CAAC,MAAM,KAAK,EAAG,QAAO,CAAC;AAC3B,UAAM,EAAE,MAAM,SAAS,IAAI,WAAW,IAAI;AAC1C,QAAI,SAAS,OAAQ,QAAO,SAAS,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,EAAE;AAC5E,UAAM,QAAQ,oBAAI,IAAuB;AACzC,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,OAAO,IAAI;AAC3C,YAAM;AAAA,QACJ;AAAA,QACA,KAAK,IAAI,CAAC,SAAS;AAAA,UACjB,MAAM,IAAI;AAAA,UACV,UAAU,IAAI;AAAA,UACd,SAAS,YAAY,IAAI,QAAQ,IAAI,OAAO;AAAA,UAC5C,MAAM,IAAI;AAAA,QACZ,EAAE;AAAA,MACJ;AACF,UAAM,SAAwB,CAAC;AAC/B,eAAW,CAAC,MAAM,IAAI,KAAK;AACzB,iBAAW,WAAW,MAAM,YAAY,KAAK,MAAM,MAAM,OAAO;AAC9D,eAAO,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;AACpC,QAAI,OAAO,OAAQ,QAAO;AAC1B,UAAM,IAAI,UAAU,GAAG,IAAI,aAAa,MAAM,OAAO;AACrD,UAAM,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,GAAG,OAAO;AAC/C,WAAO,CAAC;AAAA,EACV;AAEA,iBAAe,OAAO,SAAiC;AACrD,UAAM,UAAU,MAAM,QAAQ,SAAS,cAAc,OAAO,IAAI,QAAQ,CAAC;AACzE,UAAM,UAAU,OAAO,OAAO,MAAM;AACpC,QAAI,CAAC,QAAQ,OAAQ;AACrB,eAAW,UAAU;AACnB,YAAM,QAAQ,UAAU,OAAO,MAAgB,OAAO,EAAE,MAAM,MAAM,MAAS;AAC/E,UAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,OAAC,MAAM,GAAG,IAAI,YAAY,GAAG,OAAO,CAAC;AAAA,IACvC,GAAG,OAAO;AAAA,EACZ;AAEA,iBAAe,aAAa,QAA4B,SAAiC;AACvF,UAAM,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,GAAG,EAAE,KAAK,IAAI;AACtD,QAAI,QAAQ,cAAc,OAAQ;AAClC,iBAAa;AACb,UAAM,SAAS,MAAM,OAAO;AAC5B,UAAM,SAAS,MAAM,IAAI;AAAA,MACvB,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,KAAK,WAAW,KAAK,EAAE;AAAA,MAC5D,MAAM,kBAAkB,OAAO;AAAA,MAC/B;AAAA,IACF;AACA,cAAU,OAAO,KAAK,OAAO,QAAQ;AAAA,EACvC;AAEA,QAAM,YAAY,CAAC,YAAqB,OAAO,MAAM,aAAa,OAAO,CAAC;AAE1E,WAAS,kBAAkB,SAAwB;AACjD,iBAAa,cAAc;AAC3B,qBAAiB,WAAW,MAAM;AAChC,WAAK,UAAU,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,IAC/C,GAAG,GAAG;AAAA,EACR;AAEA,iBAAe,eAAe,SAAiC;AAC7D,QAAI,MAAM,MAAM,QAAQ,OAAO,EAAG,OAAM,MAAM,MAAM,OAAO;AAAA,EAC7D;AAEA,SAAO;AAAA,IACL,MAAM,MAAM,SAAS;AACnB,YAAM,MAAM,MAAM,OAAO;AACzB,YAAM,OAAO,OAAO;AACpB,YAAM,UAAU,OAAO;AACvB,mBAAa,YAAY,MAAM;AAC7B,aAAK,eAAe,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,MACpD,GAAG,QAAQ,cAAc,GAAI;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,MAAM,CAAC,OAAO,YAAY,UAAU,SAAS,QAAQ,KAAK,GAAG,SAAS,OAAO,OAAO;AAAA,IACpF,MAAM,QAAQ,MAAM,UAAU,SAAS;AACrC,YAAM,QAAQ,SAAS,IAAI,IAAI;AAC/B,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM,QAAQ,YAAY,MAAM,OAAO,QAAQ,GAAG,OAAO;AACzD,aAAO;AAAA,IACT;AAAA,IACA,MAAM,MAAM,SAAS;AACnB,eAAS;AACT,mBAAa,cAAc;AAC3B,oBAAc,UAAU;AACxB,YAAM,SAAS,MAAM,OAAO;AAC5B,iBAAW,WAAW,SAAS,OAAO,EAAG,OAAM,QAAQ,MAAM,OAAO;AAAA,IACtE;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { Conversation, Harness, TaskId } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv, FileWatcher } from '@earendil-works/pi-durable/env';\nimport type { Activity } from '../kernel/activity.ts';\nimport { ROOT_USER } from '../layout.ts';\nimport { type Attachment, attachmentPart } from './attachment.ts';\nimport { type BootFacts, bootLicks, LicksHostDoc } from './boot.ts';\nimport { type ConfigError, parseWebhook, type WebhookEntry } from './config.ts';\nimport {\n  type CronJob,\n  installJobs,\n  type LegacyJob,\n  legacyJobs,\n  relickJobs,\n  sendCommand,\n} from './crontab.ts';\nimport { type ConfigFiles, configFiles, Watches } from './fswatch.ts';\nimport type { LickChannel, LickTarget } from './lick.ts';\nimport type { LickEvent, Licks } from './licks.ts';\n\nexport const SLICC_DIR = '.slicc';\n\nexport interface LickSourcesOptions {\n  harness: Harness;\n  root: Conversation;\n  cone: () => Conversation;\n  env: ExecutionEnv;\n  home: string;\n  licks: Licks;\n  flushEvery?: number;\n  activity?: Activity;\n  dirs?: () => readonly LickDir[] | Promise<readonly LickDir[]>;\n  cronUser?: (target: LickTarget, place: LickDir) => string | undefined;\n  fetch?: typeof fetch;\n}\n\nexport interface LickDir {\n  dir: string;\n  home: string;\n  cone: string | null;\n  env?: ExecutionEnv;\n}\n\nexport function scopedTarget(target: LickTarget, cone: string | null): LickTarget {\n  return cone && target === 'cone' ? (`cone:${cone}` as LickTarget) : target;\n}\n\nexport function scopedName(name: string, cone: string | null): string {\n  return cone ? `${cone}:${name}` : name;\n}\n\nfunction scoped<T extends { name: string; target: LickTarget }>(entry: T, cone: string | null): T {\n  return { ...entry, name: scopedName(entry.name, cone), target: scopedTarget(entry.target, cone) };\n}\n\nexport interface WebhookDelivery {\n  id?: string;\n  headers?: Record<string, string>;\n  body: unknown;\n  verified?: boolean;\n  attachment?: Attachment;\n}\n\nexport async function withAttachment(\n  delivery: WebhookDelivery,\n  fetcher: typeof fetch | undefined\n): Promise<WebhookDelivery> {\n  const { attachment, ...rest } = delivery;\n  if (!attachment) return delivery;\n  const part = await attachmentPart(attachment, fetcher);\n  return { ...rest, body: [rest.body, part].filter(Boolean).join('\\n\\n') };\n}\n\nexport interface LickSources {\n  start(context: Context): Promise<void>;\n  reconcile(context: Context): Promise<void>;\n  boot(facts: BootFacts, context: Context): Promise<void>;\n  webhook(name: string, delivery: WebhookDelivery, context: Context): Promise<boolean>;\n  close(context: Context): Promise<void>;\n}\n\nexport function hash(text: string): string {\n  let value = 2166136261;\n  for (let at = 0; at < text.length; at++) value = Math.imul(value ^ text.charCodeAt(at), 16777619);\n  return (value >>> 0).toString(36);\n}\n\nexport function shortPath(path: string, home: string): string {\n  return path === home || path.startsWith(`${home}/`) ? `~${path.slice(home.length)}` : path;\n}\n\nexport function configLick(\n  error: ConfigError,\n  home: string,\n  cone: string | null = null\n): LickEvent {\n  const file = shortPath(error.file, home);\n  const channel: LickChannel = error.file.includes('/watches/')\n    ? 'fswatch'\n    : error.file.includes('/webhooks/')\n      ? 'webhook'\n      : 'cron';\n  const text = `${error.line ? `line ${error.line}: ` : ''}${error.error}`;\n  return {\n    channel,\n    source: `config:${file}`,\n    title: `Invalid ${file}`,\n    text,\n    body: error.file.endsWith('/crontab.migrated')\n      ? \"Its jobs in the kernel crontab still lack --lick=cron, so they don't fire as cron licks; add it with crontab -.\"\n      : channel === 'cron'\n        ? 'Not moved into the kernel crontab until the file is fixed; the installed crontab is unchanged.\\nThe format is in the slicc-agent README.'\n        : 'Ignored until the file is fixed.\\nThe formats are in the slicc-agent README.',\n    target: scopedTarget('cone', cone),\n    severity: 'error',\n    eventId: hash(`${file}\\n${text}`),\n  };\n}\n\nexport const UNVERIFIED = \"verified: false (the gateway couldn't check this request's signature)\";\n\nexport function webhookLick(\n  name: string,\n  entry: WebhookEntry,\n  delivery: WebhookDelivery\n): LickEvent {\n  const payload =\n    typeof delivery.body === 'string' ? delivery.body : JSON.stringify(delivery.body, null, 2);\n  const headers = Object.entries(delivery.headers ?? {})\n    .map(([key, value]) => `${key}: ${value}`)\n    .join('\\n');\n  return {\n    channel: 'webhook',\n    source: name,\n    title: name,\n    text: entry.message || `Webhook ${name} received a request`,\n    body: [delivery.verified === false ? UNVERIFIED : '', headers, payload]\n      .filter(Boolean)\n      .join('\\n\\n'),\n    target: entry.target,\n    coalesce: false,\n    ...(delivery.id ? { eventId: delivery.id } : {}),\n    ...(entry.triage ? { triage: entry.triage } : {}),\n  };\n}\n\nasync function webhooksIn(\n  files: ConfigFiles,\n  dir: string,\n  context: Context\n): Promise<{ entries: Map<string, WebhookEntry>; errors: ConfigError[] }> {\n  const errors: ConfigError[] = [];\n  const into = new Map<string, WebhookEntry>();\n  for (const name of await files.list(dir, context)) {\n    const file = `${dir}/${name}`;\n    const json = await files.read(file, context);\n    if (json === undefined) continue;\n    try {\n      const entry = parseWebhook(file, json);\n      into.set(entry.name, entry);\n    } catch (error) {\n      errors.push({ file, error: (error as Error).message });\n    }\n  }\n  return { entries: into, errors };\n}\n\nexport function createLickSources(options: LickSourcesOptions): LickSources {\n  const { harness, env, licks, home } = options;\n  const files = configFiles(env);\n  const deliver = (event: LickEvent, context: Context) => licks.deliver(event, context);\n  const dirsOf = options.dirs ?? (() => [{ dir: `${home}/${SLICC_DIR}`, home, cone: null }]);\n  const watching = new Map<string, Watches>();\n  const watchesOf = (place: LickDir) => {\n    let found = watching.get(place.dir);\n    if (!found) {\n      const retarget = (event: LickEvent, context: Context) =>\n        deliver({ ...event, target: scopedTarget(event.target, place.cone) }, context);\n      found = new Watches(place.env ?? env, retarget, place.home, options.activity);\n      watching.set(place.dir, found);\n    }\n    return found;\n  };\n  let webhooks = new Map<string, WebhookEntry>();\n  const relicked = new Set<string>();\n  let control: FileWatcher | undefined;\n  let controlled = '';\n  let reconcileTimer: ReturnType<typeof setTimeout> | undefined;\n  let flushTimer: ReturnType<typeof setInterval> | undefined;\n  let closed = false;\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n\n  async function reconcileNow(context: Context): Promise<void> {\n    if (closed) return;\n    const places = await dirsOf();\n    const errors: { error: ConfigError; place: LickDir }[] = [];\n    const hooks = new Map<string, WebhookEntry>();\n    for (const place of places) {\n      const crontab = [...(await relick(place, context)), ...(await migrate(place, context))];\n      const watchErrors = await watchesOf(place).reconcile(`${place.dir}/watches`, context);\n      const found = await webhooksIn(files, `${place.dir}/webhooks`, context);\n      for (const entry of found.entries.values()) {\n        const named = scoped(entry, place.cone);\n        hooks.set(named.name, named);\n      }\n      for (const error of [...crontab, ...watchErrors, ...found.errors])\n        errors.push({ error, place });\n    }\n    for (const [dir, watches] of [...watching])\n      if (!places.some((place) => place.dir === dir)) {\n        watching.delete(dir);\n        await watches.close(context);\n      }\n    webhooks = hooks;\n    for (const { error, place } of errors)\n      await deliver(configLick(error, place.home, place.cone), context);\n    await watchControl(places, context);\n  }\n\n  function byUser(place: LickDir, jobs: readonly LegacyJob[]): Map<string, LegacyJob[]> {\n    const users = new Map<string, LegacyJob[]>();\n    for (const job of jobs) {\n      const user = options.cronUser?.(job.target, place) ?? place.cone ?? ROOT_USER;\n      users.set(user, [...(users.get(user) ?? []), job]);\n    }\n    return users;\n  }\n\n  async function relick(place: LickDir, context: Context): Promise<ConfigError[]> {\n    if (relicked.has(place.dir)) return [];\n    relicked.add(place.dir);\n    const file = `${place.dir}/crontab.migrated`;\n    const text = await files.read(file, context);\n    if (text === undefined) return [];\n    const errors: ConfigError[] = [];\n    for (const [user, list] of byUser(place, legacyJobs(text).jobs))\n      for (const problem of await relickJobs(env, user, list, context))\n        errors.push({ file, ...problem });\n    return errors;\n  }\n\n  async function migrate(place: LickDir, context: Context): Promise<ConfigError[]> {\n    const file = `${place.dir}/crontab`;\n    const text = await files.read(file, context);\n    if (!text?.trim()) return [];\n    const { jobs, problems } = legacyJobs(text);\n    if (problems.length) return problems.map((problem) => ({ file, ...problem }));\n    const users = new Map<string, CronJob[]>();\n    for (const [user, list] of byUser(place, jobs))\n      users.set(\n        user,\n        list.map((job) => ({\n          name: job.name,\n          schedule: job.schedule,\n          command: sendCommand(job.target, job.message),\n          line: job.line,\n        }))\n      );\n    const errors: ConfigError[] = [];\n    for (const [user, list] of users)\n      for (const problem of await installJobs(env, user, list, context))\n        errors.push({ file, ...problem });\n    if (errors.length) return errors;\n    await env.writeFile(`${file}.migrated`, text, context);\n    await env.remove(file, { force: true }, context);\n    return [];\n  }\n\n  async function retire(context: Context): Promise<void> {\n    const stored = (await harness.snapshot(LicksHostDoc, context))?.cron ?? {};\n    const records = Object.values(stored);\n    if (!records.length) return;\n    for (const record of records)\n      await harness.abortTask(record.task as TaskId, context).catch(() => undefined);\n    await harness.commit(async (tx) => {\n      (await tx.doc(LicksHostDoc)).cron = {};\n    }, context);\n  }\n\n  async function watchControl(places: readonly LickDir[], context: Context): Promise<void> {\n    const key = places.map((place) => place.dir).join('\\n');\n    if (key === controlled || closed) return;\n    controlled = key;\n    await control?.close(context);\n    const result = await env.watch(\n      places.map((place) => ({ path: place.dir, recursive: true })),\n      () => scheduleReconcile(context),\n      context\n    );\n    control = result.ok ? result.value : undefined;\n  }\n\n  const reconcile = (context: Context) => serial(() => reconcileNow(context));\n\n  function scheduleReconcile(context: Context): void {\n    clearTimeout(reconcileTimer);\n    reconcileTimer = setTimeout(() => {\n      void reconcile(context).catch(() => undefined);\n    }, 300);\n  }\n\n  async function flushIfWaiting(context: Context): Promise<void> {\n    if (await licks.pending(context)) await licks.flush(context);\n  }\n\n  return {\n    async start(context) {\n      await licks.flush(context);\n      await retire(context);\n      await reconcile(context);\n      flushTimer = setInterval(() => {\n        void flushIfWaiting(context).catch(() => undefined);\n      }, options.flushEvery ?? 2000);\n    },\n    reconcile,\n    boot: (facts, context) => bootLicks(harness, options.cone(), deliver, facts, context),\n    async webhook(name, delivery, context) {\n      const entry = webhooks.get(name);\n      if (!entry) return false;\n      await deliver(\n        webhookLick(name, entry, await withAttachment(delivery, options.fetch)),\n        context\n      );\n      return true;\n    },\n    async close(context) {\n      closed = true;\n      clearTimeout(reconcileTimer);\n      clearInterval(flushTimer);\n      await control?.close(context);\n      for (const watches of watching.values()) await watches.close(context);\n    },\n  };\n}\n"],
+  "mappings": "AAIA,SAAS,iBAAiB;AAC1B,SAA0B,sBAAsB;AAChD,SAAyB,WAAW,oBAAoB;AACxD,SAA2B,oBAAuC;AAClE;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAA2B,aAAa,eAAe;AAIhD,MAAM,YAAY;AAuBlB,SAAS,aAAa,QAAoB,MAAiC;AAChF,SAAO,QAAQ,WAAW,SAAU,QAAQ,IAAI,KAAoB;AACtE;AAEO,SAAS,WAAW,MAAc,MAA6B;AACpE,SAAO,OAAO,GAAG,IAAI,IAAI,IAAI,KAAK;AACpC;AAEA,SAAS,OAAuD,OAAU,MAAwB;AAChG,SAAO,EAAE,GAAG,OAAO,MAAM,WAAW,MAAM,MAAM,IAAI,GAAG,QAAQ,aAAa,MAAM,QAAQ,IAAI,EAAE;AAClG;AAUA,eAAsB,eACpB,UACA,SAC0B;AAC1B,QAAM,EAAE,YAAY,GAAG,KAAK,IAAI;AAChC,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,OAAO,MAAM,eAAe,YAAY,OAAO;AACrD,SAAO,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,KAAK,MAAM,EAAE;AACzE;AAUO,SAAS,KAAK,MAAsB;AACzC,MAAI,QAAQ;AACZ,WAAS,KAAK,GAAG,KAAK,KAAK,QAAQ,KAAM,SAAQ,KAAK,KAAK,QAAQ,KAAK,WAAW,EAAE,GAAG,QAAQ;AAChG,UAAQ,UAAU,GAAG,SAAS,EAAE;AAClC;AAEO,SAAS,UAAU,MAAc,MAAsB;AAC5D,SAAO,SAAS,QAAQ,KAAK,WAAW,GAAG,IAAI,GAAG,IAAI,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,KAAK;AACxF;AAEO,SAAS,WACd,OACA,MACA,OAAsB,MACX;AACX,QAAM,OAAO,UAAU,MAAM,MAAM,IAAI;AACvC,QAAM,UAAuB,MAAM,KAAK,SAAS,WAAW,IACxD,YACA,MAAM,KAAK,SAAS,YAAY,IAC9B,YACA;AACN,QAAM,OAAO,GAAG,MAAM,OAAO,QAAQ,MAAM,IAAI,OAAO,EAAE,GAAG,MAAM,KAAK;AACtE,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,UAAU,IAAI;AAAA,IACtB,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,MAAM,MAAM,KAAK,SAAS,mBAAmB,IACzC,oHACA,YAAY,SACV,6IACA;AAAA,IACN,QAAQ,aAAa,QAAQ,IAAI;AAAA,IACjC,UAAU;AAAA,IACV,SAAS,KAAK,GAAG,IAAI;AAAA,EAAK,IAAI,EAAE;AAAA,EAClC;AACF;AAEO,MAAM,aAAa;AAEnB,SAAS,YACd,MACA,OACA,UACW;AACX,QAAM,UACJ,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO,KAAK,UAAU,SAAS,MAAM,MAAM,CAAC;AAC3F,QAAM,UAAU,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,EAClD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK,KAAK,EAAE,EACxC,KAAK,IAAI;AACZ,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,MAAM,MAAM,WAAW,WAAW,IAAI;AAAA,IACtC,MAAM,CAAC,SAAS,aAAa,QAAQ,aAAa,IAAI,SAAS,OAAO,EACnE,OAAO,OAAO,EACd,KAAK,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,UAAU;AAAA,IACV,GAAI,SAAS,KAAK,EAAE,SAAS,SAAS,GAAG,IAAI,CAAC;AAAA,IAC9C,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,EACjD;AACF;AAEA,eAAe,WACb,OACA,KACA,SACwE;AACxE,QAAM,SAAwB,CAAC;AAC/B,QAAM,OAAO,oBAAI,IAA0B;AAC3C,aAAW,QAAQ,MAAM,MAAM,KAAK,KAAK,OAAO,GAAG;AACjD,UAAM,OAAO,GAAG,GAAG,IAAI,IAAI;AAC3B,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,SAAS,OAAW;AACxB,QAAI;AACF,YAAM,QAAQ,aAAa,MAAM,IAAI;AACrC,WAAK,IAAI,MAAM,MAAM,KAAK;AAAA,IAC5B,SAAS,OAAO;AACd,aAAO,KAAK,EAAE,MAAM,OAAQ,MAAgB,QAAQ,CAAC;AAAA,IACvD;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,OAAO;AACjC;AAEO,SAAS,kBAAkB,SAA0C;AAC1E,QAAM,EAAE,SAAS,KAAK,OAAO,KAAK,IAAI;AACtC,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM,UAAU,CAAC,OAAkB,YAAqB,MAAM,QAAQ,OAAO,OAAO;AACpF,QAAM,SAAS,QAAQ,SAAS,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,IAAI,SAAS,IAAI,MAAM,MAAM,KAAK,CAAC;AACxF,QAAM,WAAW,oBAAI,IAAqB;AAC1C,QAAM,YAAY,CAAC,UAAmB;AACpC,QAAI,QAAQ,SAAS,IAAI,MAAM,GAAG;AAClC,QAAI,CAAC,OAAO;AACV,YAAM,WAAW,CAAC,OAAkB,YAClC,QAAQ,EAAE,GAAG,OAAO,QAAQ,aAAa,MAAM,QAAQ,MAAM,IAAI,EAAE,GAAG,OAAO;AAC/E,cAAQ,IAAI,QAAQ,MAAM,OAAO,KAAK,UAAU,MAAM,MAAM,QAAQ,QAAQ;AAC5E,eAAS,IAAI,MAAM,KAAK,KAAK;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AACA,MAAI,WAAW,oBAAI,IAA0B;AAC7C,QAAM,WAAW,oBAAI,IAAY;AACjC,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS;AACb,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AAEA,iBAAe,aAAa,SAAiC;AAC3D,QAAI,OAAQ;AACZ,UAAM,SAAS,MAAM,OAAO;AAC5B,UAAM,SAAmD,CAAC;AAC1D,UAAM,QAAQ,oBAAI,IAA0B;AAC5C,eAAW,SAAS,QAAQ;AAC1B,YAAM,UAAU,CAAC,GAAI,MAAM,OAAO,OAAO,OAAO,GAAI,GAAI,MAAM,QAAQ,OAAO,OAAO,CAAE;AACtF,YAAM,cAAc,MAAM,UAAU,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,YAAY,OAAO;AACpF,YAAM,QAAQ,MAAM,WAAW,OAAO,GAAG,MAAM,GAAG,aAAa,OAAO;AACtE,iBAAW,SAAS,MAAM,QAAQ,OAAO,GAAG;AAC1C,cAAM,QAAQ,OAAO,OAAO,MAAM,IAAI;AACtC,cAAM,IAAI,MAAM,MAAM,KAAK;AAAA,MAC7B;AACA,iBAAW,SAAS,CAAC,GAAG,SAAS,GAAG,aAAa,GAAG,MAAM,MAAM;AAC9D,eAAO,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,IAChC;AACA,eAAW,CAAC,KAAK,OAAO,KAAK,CAAC,GAAG,QAAQ;AACvC,UAAI,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,QAAQ,GAAG,GAAG;AAC9C,iBAAS,OAAO,GAAG;AACnB,cAAM,QAAQ,MAAM,OAAO;AAAA,MAC7B;AACF,eAAW;AACX,eAAW,EAAE,OAAO,MAAM,KAAK;AAC7B,YAAM,QAAQ,WAAW,OAAO,MAAM,MAAM,MAAM,IAAI,GAAG,OAAO;AAClE,UAAM,aAAa,QAAQ,OAAO;AAAA,EACpC;AAEA,WAAS,OAAO,OAAgB,MAAsD;AACpF,UAAM,QAAQ,oBAAI,IAAyB;AAC3C,eAAW,OAAO,MAAM;AACtB,YAAM,OAAO,QAAQ,WAAW,IAAI,QAAQ,KAAK,KAAK,MAAM,QAAQ;AACpE,YAAM,IAAI,MAAM,CAAC,GAAI,MAAM,IAAI,IAAI,KAAK,CAAC,GAAI,GAAG,CAAC;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,OAAO,OAAgB,SAA0C;AAC9E,QAAI,SAAS,IAAI,MAAM,GAAG,EAAG,QAAO,CAAC;AACrC,aAAS,IAAI,MAAM,GAAG;AACtB,UAAM,OAAO,GAAG,MAAM,GAAG;AACzB,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,SAAS,OAAW,QAAO,CAAC;AAChC,UAAM,SAAwB,CAAC;AAC/B,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,OAAO,WAAW,IAAI,EAAE,IAAI;AAC5D,iBAAW,WAAW,MAAM,WAAW,KAAK,MAAM,MAAM,OAAO;AAC7D,eAAO,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;AACpC,WAAO;AAAA,EACT;AAEA,iBAAe,QAAQ,OAAgB,SAA0C;AAC/E,UAAM,OAAO,GAAG,MAAM,GAAG;AACzB,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,CAAC,MAAM,KAAK,EAAG,QAAO,CAAC;AAC3B,UAAM,EAAE,MAAM,SAAS,IAAI,WAAW,IAAI;AAC1C,QAAI,SAAS,OAAQ,QAAO,SAAS,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,EAAE;AAC5E,UAAM,QAAQ,oBAAI,IAAuB;AACzC,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,OAAO,IAAI;AAC3C,YAAM;AAAA,QACJ;AAAA,QACA,KAAK,IAAI,CAAC,SAAS;AAAA,UACjB,MAAM,IAAI;AAAA,UACV,UAAU,IAAI;AAAA,UACd,SAAS,YAAY,IAAI,QAAQ,IAAI,OAAO;AAAA,UAC5C,MAAM,IAAI;AAAA,QACZ,EAAE;AAAA,MACJ;AACF,UAAM,SAAwB,CAAC;AAC/B,eAAW,CAAC,MAAM,IAAI,KAAK;AACzB,iBAAW,WAAW,MAAM,YAAY,KAAK,MAAM,MAAM,OAAO;AAC9D,eAAO,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;AACpC,QAAI,OAAO,OAAQ,QAAO;AAC1B,UAAM,IAAI,UAAU,GAAG,IAAI,aAAa,MAAM,OAAO;AACrD,UAAM,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,GAAG,OAAO;AAC/C,WAAO,CAAC;AAAA,EACV;AAEA,iBAAe,OAAO,SAAiC;AACrD,UAAM,UAAU,MAAM,QAAQ,SAAS,cAAc,OAAO,IAAI,QAAQ,CAAC;AACzE,UAAM,UAAU,OAAO,OAAO,MAAM;AACpC,QAAI,CAAC,QAAQ,OAAQ;AACrB,eAAW,UAAU;AACnB,YAAM,QAAQ,UAAU,OAAO,MAAgB,OAAO,EAAE,MAAM,MAAM,MAAS;AAC/E,UAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,OAAC,MAAM,GAAG,IAAI,YAAY,GAAG,OAAO,CAAC;AAAA,IACvC,GAAG,OAAO;AAAA,EACZ;AAEA,iBAAe,aAAa,QAA4B,SAAiC;AACvF,UAAM,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,GAAG,EAAE,KAAK,IAAI;AACtD,QAAI,QAAQ,cAAc,OAAQ;AAClC,iBAAa;AACb,UAAM,SAAS,MAAM,OAAO;AAC5B,UAAM,SAAS,MAAM,IAAI;AAAA,MACvB,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,KAAK,WAAW,KAAK,EAAE;AAAA,MAC5D,MAAM,kBAAkB,OAAO;AAAA,MAC/B;AAAA,IACF;AACA,cAAU,OAAO,KAAK,OAAO,QAAQ;AAAA,EACvC;AAEA,QAAM,YAAY,CAAC,YAAqB,OAAO,MAAM,aAAa,OAAO,CAAC;AAE1E,WAAS,kBAAkB,SAAwB;AACjD,iBAAa,cAAc;AAC3B,qBAAiB,WAAW,MAAM;AAChC,WAAK,UAAU,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,IAC/C,GAAG,GAAG;AAAA,EACR;AAEA,iBAAe,eAAe,SAAiC;AAC7D,QAAI,MAAM,MAAM,QAAQ,OAAO,EAAG,OAAM,MAAM,MAAM,OAAO;AAAA,EAC7D;AAEA,SAAO;AAAA,IACL,MAAM,MAAM,SAAS;AACnB,YAAM,MAAM,MAAM,OAAO;AACzB,YAAM,OAAO,OAAO;AACpB,YAAM,UAAU,OAAO;AACvB,mBAAa,YAAY,MAAM;AAC7B,aAAK,eAAe,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,MACpD,GAAG,QAAQ,cAAc,GAAI;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,MAAM,CAAC,OAAO,YAAY,UAAU,SAAS,QAAQ,KAAK,GAAG,SAAS,OAAO,OAAO;AAAA,IACpF,MAAM,QAAQ,MAAM,UAAU,SAAS;AACrC,YAAM,QAAQ,SAAS,IAAI,IAAI;AAC/B,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM;AAAA,QACJ,YAAY,MAAM,OAAO,MAAM,eAAe,UAAU,QAAQ,KAAK,CAAC;AAAA,QACtE;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,MAAM,SAAS;AACnB,eAAS;AACT,mBAAa,cAAc;AAC3B,oBAAc,UAAU;AACxB,YAAM,SAAS,MAAM,OAAO;AAC5B,iBAAW,WAAW,SAAS,OAAO,EAAG,OAAM,QAAQ,MAAM,OAAO;AAAA,IACtE;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/main.js

@@ -296,7 +296,7 @@ async function start(scope, ports, options, vault) {
   const mcp = setupMcp(registry);
   const codemode = await codemodeTools(client, options, native, mcp.codemode, at.agentDir);
   registry.install(codemodeExtension(codemode));
-  const licks = setupLicks(registry);
+  const licks = setupLicks(registry, transport);
   licks.licks.triage(lickTriage(models));
   const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);
   const skills = setupSkills(registry, licks.licks);

package/dist/main.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/main.ts"],
-  "sourcesContent": ["import { attachKernel } from '@ai-ecoverse/slicc-kernel';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Provider } from '@earendil-works/pi-ai';\nimport type { Models } from '@earendil-works/pi-ai/models';\nimport {\n  createRegistry,\n  type ModelRef,\n  type Storage,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { CodingTools } from '@earendil-works/pi-durable/tools';\nimport { type Agent, type AgentOptions, openAgent } from './agent.ts';\nimport {\n  type ApprovalJudge,\n  approvalJudge,\n  judgeModelOf,\n  judgeSpender,\n  ownerIntent,\n  seedPolicy,\n  verdictRecorder,\n} from './approvals/index.ts';\nimport { browserGuard } from './browser/guard.ts';\nimport { attachChanges, CHANGES_MS } from './changes/index.ts';\nimport {\n  codemodeExtension,\n  codemodeTool,\n  disabledBySettings,\n  locateWasm,\n  sandboxFactory,\n} from './codemode/index.ts';\nimport { attachFreezer } from './freezer/index.ts';\nimport { lateGelatiere } from './gelatiere/index.ts';\nimport { type AgentHost, hostAgent } from './host.ts';\nimport { imageReads } from './images/index.ts';\nimport { createActivity } from './kernel/activity.ts';\nimport { agentUsers, warnSupport } from './kernel/agent-users.ts';\nimport type { KernelClient } from './kernel/client.ts';\nimport { HOME, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nimport { processGroups } from './kernel/groups.ts';\nimport { adminOver, type UserClient, type UserClients, userClients } from './kernel/users.ts';\nimport { AGENT_DIR, ROOT_HOME } from './layout.ts';\nimport { setupLicks } from './licks/index.ts';\nimport { lickTriage } from './licks/triage.ts';\nimport { type McpAccounts, setupMcp } from './mcp/index.ts';\nimport type { MemoryEntry } from './memory/format.ts';\nimport { setupMemory } from './memory/index.ts';\nimport { modelsCommand } from './models/index.ts';\nimport { pageOnly, type Transport, transportFetch } from './net.ts';\nimport { sliccPrompt } from './prompt.ts';\nimport { createPages } from './remote/pages.ts';\nimport { identity } from './scoops/identity.ts';\nimport { type Assets, packageAssets, type ScoopsRuntime, setupScoops } from './scoops/index.ts';\nimport { vaultCredentials } from './secrets/credentials.ts';\nimport {\n  BEDROCK_ENDPOINTS,\n  type ModelBases,\n  modelRoute,\n  vaultEndpoints,\n} from './secrets/endpoints.ts';\nimport { secretsExtension, shellGrants } from './secrets/extension.ts';\nimport { grantFetch, mcpFetch, vaultFetch } from './secrets/fetch.ts';\nimport { keysMoved, type Wiped, wipeLegacy } from './secrets/legacy.ts';\nimport { secretNames } from './secrets/names.ts';\nimport { type VaultRecords, vaultRecords } from './secrets/records.ts';\nimport { scrubWith } from './secrets/scrub.ts';\nimport { fileStore, type PlainStore } from './secrets/store.ts';\nimport { listenVault, Vault, WAITING_MS } from './secrets/vault.ts';\nimport { type Choosable, unfreeze, unfreezeCreated } from './selection.ts';\nimport {\n  BEDROCK,\n  createAgentSettings,\n  createSliccModels,\n  providerFields,\n  resolveDefaultModel,\n  sliccProviders,\n} from './settings.ts';\nimport { RELOAD_MS, setupSkills } from './skills/index.ts';\nimport { setupSprinkles } from './sprinkles/index.ts';\nimport { openOpfsSqliteStorage } from './sqlite.ts';\nimport {\n  agentVersion,\n  browserConnected,\n  commandsOnPath,\n  kernelBoot,\n  transportName,\n} from './system.ts';\nimport { titlesExtension } from './titles/extension.ts';\nimport { labeler, settingsText, titler } from './titles/generate.ts';\nimport { attachLabels } from './titles/labels.ts';\nimport { type KernelPorts, kernelPorts, serveConnections, type WorkerScope } from './worker.ts';\n\nexport interface AgentWorkerScope extends WorkerScope {\n  fetch: typeof fetch;\n  location: { origin: string };\n}\n\nexport type KernelAttach = (port: MessagePort) => Promise<KernelClient & { transport: Transport }>;\n\nexport interface AgentWorkerOptions {\n  model?: ModelRef;\n  providers?: Provider[];\n  attach?: KernelAttach;\n  store?: () => Promise<PlainStore>;\n  storage?: () => Promise<Storage>;\n  assets?: Assets;\n  codemodeWasm?: () => Promise<WebAssembly.Module | undefined>;\n  codemodeWorker?: string | URL;\n  catalog?: string;\n  users?: boolean;\n  mcpRedirect?: string;\n  approvalMs?: number;\n}\n\nexport function usersOf(\n  admin: MessagePort | undefined,\n  wanted: boolean | undefined,\n  attach: KernelAttach\n): UserClients | undefined {\n  if (!admin) return undefined;\n  if (wanted === false) {\n    admin.close();\n    return undefined;\n  }\n  return userClients(adminOver(admin), attach as (port: MessagePort) => Promise<UserClient>);\n}\n\nexport const STORE_DIR = '/.slicc';\nexport const ACCOUNTS_FILE = `${STORE_DIR}/accounts.json`;\n\nasync function attached(ports: Promise<KernelPorts>, options: AgentWorkerOptions) {\n  const wiped = await wipeLegacy();\n  const attach: KernelAttach = options.attach ?? attachKernel;\n  const { kernel, admin } = await ports;\n  const client = await attach(kernel);\n  const users = usersOf(admin, options.users, attach);\n  await warnSupport(users, client, options.users);\n  const home = new SliccKernelEnv(client, { cwd: HOME });\n  await privateStore(home);\n  return {\n    client,\n    users,\n    home,\n    wiped,\n    at: { home: HOME, ...(users ? { agentDir: AGENT_DIR } : {}) },\n  };\n}\n\nfunction privateStore(env: SliccKernelEnv): Promise<unknown> {\n  return env.exec(`mkdir -p ${STORE_DIR} && chmod 700 ${STORE_DIR}`, undefined, BACKGROUND_CONTEXT);\n}\n\nasync function codemodeTools(\n  client: KernelClient,\n  options: AgentWorkerOptions,\n  native: typeof fetch,\n  extra: Parameters<typeof codemodeTool>[0]['extra'],\n  dir = `${HOME}/.pi/agent`\n) {\n  const settings = await client.fs.readFile(`${dir}/settings.json`).catch(() => undefined);\n  if (disabledBySettings(settings === undefined ? undefined : new TextDecoder().decode(settings)))\n    return [];\n  const sandbox = sandboxFactory(\n    options.codemodeWasm ?? (() => locateWasm(native, new URL(import.meta.url))),\n    options.codemodeWorker\n  );\n  return [\n    codemodeTool({ declared: CodingTools.tools as readonly ToolRegistration[], sandbox, extra }),\n  ];\n}\n\nexport function seesImages(models: Pick<Models, 'getModel'>, ref: ModelRef | undefined): boolean {\n  const found = ref && models.getModel(ref.provider, ref.modelId);\n  return found ? found.input.includes('image') : true;\n}\n\nexport const MCP_CALLBACK = '/oauth/mcp-callback';\n\nasync function openUnfrozen(\n  options: AgentWorkerOptions,\n  { choosable: chosen }: { choosable: Choosable },\n  base: Omit<AgentOptions, 'storage' | 'beforeResume' | 'conversationCreated'>\n): Promise<Agent> {\n  const storage = await (options.storage ?? (() => openOpfsSqliteStorage()))();\n  return openAgent({\n    ...base,\n    storage,\n    conversationCreated: unfreezeCreated(chosen),\n    beforeResume: (harness, using) => unfreeze(harness, storage, chosen, using),\n  });\n}\n\nasync function secretsFor(home: SliccKernelEnv, vault: Vault) {\n  scrubWith(vault);\n  const names = secretNames(home, vault);\n  await names.refresh(BACKGROUND_CONTEXT);\n  return names;\n}\n\nexport function modelBases(\n  providers: readonly Provider[],\n  models: Pick<ReturnType<typeof createSliccModels>, 'getModels'>\n): ModelBases[] {\n  return providers.map((provider) => ({\n    provider: provider.id,\n    urls: [\n      ...new Set(\n        [\n          provider.baseUrl,\n          ...models.getModels(provider.id).map((model) => model.baseUrl),\n          ...(provider.id === BEDROCK ? BEDROCK_ENDPOINTS : []),\n        ].filter((url): url is string => typeof url === 'string' && url !== '')\n      ),\n    ],\n  }));\n}\n\nfunction mcpVault(\n  vault: Vault,\n  made: { store: PlainStore; records: VaultRecords; endpoints: ReturnType<typeof vaultEndpoints> }\n) {\n  const { store, records, endpoints } = made;\n  return {\n    store,\n    vault: {\n      records,\n      fetch: (server: string, base: typeof fetch) => mcpFetch(vault, base, server),\n      grant: (server: string, base: typeof fetch) => grantFetch(vault, server, base),\n      servers: endpoints.servers,\n      token: endpoints.token,\n    },\n  };\n}\n\nfunction hostSecrets(\n  vault: Vault,\n  names: Awaited<ReturnType<typeof secretsFor>>,\n  parts: readonly { close(): void }[]\n) {\n  return {\n    vault: vault.state,\n    list: () => names.state.value,\n    close: () => {\n      for (const part of parts) part.close();\n    },\n  };\n}\n\nasync function modelsOf(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions,\n  given: { vault: Vault; home: SliccKernelEnv; transport: typeof fetch; version: string }\n) {\n  const { vault, home, transport, version } = given;\n  const store = await (options.store ?? (async () => fileStore(home, ACCOUNTS_FILE)))();\n  const records = vaultRecords(vault);\n  const loaded = records.refresh(BACKGROUND_CONTEXT).catch(() => undefined);\n  const providers = options.providers ?? sliccProviders(version);\n  const fields = await providerFields(store, providers);\n  const credentials = vaultCredentials(records, fields.env);\n  const models = createSliccModels(credentials, providers);\n  const bases = () => modelBases(providers, models);\n  scope.fetch = vaultFetch(\n    vault,\n    transport,\n    modelRoute(bases, () => records.state.value)\n  );\n  const endpoints = vaultEndpoints(vault);\n  void endpoints.models(bases()).catch(() => undefined);\n  const defaultModel = async () => {\n    await Promise.race([loaded, new Promise((resolve) => setTimeout(resolve, WAITING_MS))]);\n    return resolveDefaultModel(credentials, providers, models);\n  };\n  return { store, records, providers, fields, models, bases, endpoints, defaultModel };\n}\n\nfunction baseRegistry(facts: Awaited<ReturnType<typeof factsOf>>, origin: string) {\n  const registry = createRegistry();\n  registry.install(CodingTools);\n  registry.install(browserGuard([origin]));\n  registry.install(sliccPrompt(facts));\n  const read = (CodingTools.tools as readonly ToolRegistration[]).find(\n    (tool) => tool.name === 'read'\n  ) as ToolRegistration;\n  registry.install(imageReads(read));\n  return registry;\n}\n\nasync function factsOf(client: KernelClient & { transport: Transport }, native: typeof fetch) {\n  return {\n    version: await agentVersion((url) => native(url)),\n    commands: await commandsOnPath(client),\n    transport: transportName(client.transport),\n    browser: await browserConnected(client),\n  };\n}\n\nfunction routeFetch(scope: AgentWorkerScope, client: KernelClient & { transport: Transport }) {\n  const native = scope.fetch.bind(scope);\n  const loopback = client.loopbackFetch?.bind(client);\n  const transport = transportFetch(client.transport, scope.location.origin, native, loopback);\n  scope.fetch = transport;\n  return { native, transport };\n}\n\nasync function prepare(\n  scope: AgentWorkerScope,\n  kernel: { client: KernelClient & { transport: Transport }; home: SliccKernelEnv; vault: Vault },\n  options: AgentWorkerOptions\n) {\n  const names = await secretsFor(kernel.home, kernel.vault);\n  const { native, transport } = routeFetch(scope, kernel.client);\n  const facts = await factsOf(kernel.client, native);\n  const made = await modelsOf(scope, options, {\n    vault: kernel.vault,\n    home: kernel.home,\n    transport,\n    version: facts.version,\n  });\n  return {\n    names,\n    native,\n    transport,\n    facts,\n    ...made,\n    registry: baseRegistry(facts, scope.location.origin),\n  };\n}\n\nfunction modelsOfAgent(\n  agent: Agent,\n  settings: Awaited<ReturnType<typeof createAgentSettings>>,\n  catalog: Models,\n  vault: Vault\n) {\n  const locked = () => vault.state.value.locked !== 'no';\n  return modelsCommand({ agents: agent.agents, settings, catalog, locked });\n}\n\nasync function settingsOf(\n  made: Awaited<ReturnType<typeof modelsOf>>,\n  mcp: McpAccounts,\n  moved: { agent: Agent; vault: Vault; wiped: Wiped }\n) {\n  const { models, records, fields, providers, bases, endpoints } = made;\n  const keys = await keysMoved(moved.agent.harness, { records, vault: moved.vault }, moved.wiped);\n  const settings = await createAgentSettings(models, { records, fields }, providers, {\n    mcp,\n    moved: keys,\n  });\n  settings.state.subscribe(() => void endpoints.models(bases()).catch(() => undefined));\n  return settings;\n}\n\nasync function setupApprovals(\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  agent: Agent,\n  stored: { readonly value: readonly MemoryEntry[] | undefined },\n  options: Pick<AgentWorkerOptions, 'approvalMs'>\n) {\n  const memories = () => stored.value;\n  const { approvalMs } = options;\n  await seedPolicy(home, BACKGROUND_CONTEXT).catch(() => false);\n  const settings = settingsText(home, HOME, at.agentDir);\n  const intent = ownerIntent({ env: home, agents: agent.agents, memories });\n  const judge: ApprovalJudge = {\n    judge: approvalJudge({\n      models,\n      model: async (context) => judgeModelOf(await settings(context)),\n      intent,\n      spend: judgeSpender((agentId, context) => agent.agents.conversation(agentId, context)),\n    }),\n    record: verdictRecorder((agentId, context) => agent.agents.conversation(agentId, context)),\n  };\n  return { judge, intent, ...(approvalMs ? { approvalMs } : {}) };\n}\n\nfunction setupTitles(\n  registry: ReturnType<typeof createRegistry>,\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  opened: () => Agent | undefined\n) {\n  const settings = settingsText(home, HOME, at.agentDir);\n  const titleFn = titler(models, settings);\n  const titles = titlesExtension({\n    agents: () => opened()?.agents,\n    harness: () => opened()?.harness,\n    title: () => titleFn,\n  });\n  registry.install(titles.extension);\n  return { titleFn, cancel: titles.cancel, label: labeler(models, settings) };\n}\n\nasync function start(\n  scope: AgentWorkerScope,\n  ports: Promise<KernelPorts>,\n  options: AgentWorkerOptions,\n  vault: Vault\n): Promise<AgentHost> {\n  const { client, users, home, at, wiped } = await attached(ports, options);\n  const ready = await prepare(scope, { client, home, vault }, options);\n  const { names, native, transport, facts, models, registry, records, endpoints } = ready;\n  const memory = setupMemory(registry);\n  const coding = CodingTools.tools as readonly ToolRegistration[];\n  const mcp = setupMcp(registry);\n  const codemode = await codemodeTools(client, options, native, mcp.codemode, at.agentDir);\n  registry.install(codemodeExtension(codemode));\n  const licks = setupLicks(registry);\n  licks.licks.triage(lickTriage(models));\n  const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);\n  const skills = setupSkills(registry, licks.licks);\n  registry.install(secretsExtension({ names, vault }));\n  const titles = setupTitles(registry, models, home, at, () => opened);\n  const [activity, groups] = [createActivity(), processGroups(client)];\n  const model = options.model ?? (await ready.defaultModel());\n  let opened: Agent | undefined;\n  const people = users ? agentUsers(users, client, home, () => opened?.agents) : undefined;\n  const environment = kernelEnvironment(client, {\n    activity,\n    groups,\n    identify: identity(() => opened?.agents, model),\n    scrub: vault,\n    spawn: shellGrants(names),\n    ...(people ? { route: people.route } : {}),\n  });\n  const agent = await openUnfrozen(options, scoops, { models, model, registry, env: environment });\n  opened = agent;\n  await people?.start(agent.agents);\n  const sources = licks.attach(agent, {\n    env: home,\n    home: HOME,\n    activity,\n    ...(people ? { dirs: () => people.lickDirs(), cronUser: people.cronUser.bind(people) } : {}),\n  });\n  await sources.start(BACKGROUND_CONTEXT);\n  const booted = { version: facts.version, boot: await kernelBoot(client) };\n  await sources.boot(booted, BACKGROUND_CONTEXT);\n  const skillsRuntime = await skills.attach(\n    {\n      env: home,\n      ...at,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people ? { people: people.people } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const mcpRuntime = await mcp.attach(\n    {\n      env: home,\n      ...at,\n      ...mcpVault(vault, ready),\n      licks: licks.licks,\n      fetch: transport,\n      version: facts.version,\n      reloadMs: RELOAD_MS,\n      codemode: codemode.length > 0,\n      cors: pageOnly(client.transport),\n      redirect: options.mcpRedirect ?? new URL(MCP_CALLBACK, scope.location.origin).href,\n    },\n    BACKGROUND_CONTEXT\n  );\n  const gelatiere = lateGelatiere();\n  const sprinkles = await setupSprinkles().attach(\n    {\n      intercept: gelatiere.intercept,\n      harness: agent.harness,\n      agents: agent.agents,\n      licks: licks.licks,\n      env: home,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people?.sprinkles() ?? {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  people?.follow([sources, skillsRuntime, sprinkles]);\n  let roles: ScoopsRuntime | undefined;\n  const memoryRuntime = await memory.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      env: home,\n      ...at,\n      ...(people ? { home: ROOT_HOME } : {}),\n      reloadMs: RELOAD_MS,\n      roles: async (using) => roles?.roles(using),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const freezer = attachFreezer({\n    harness: agent.harness,\n    agents: agent.agents,\n    env: home,\n    extract: memory.extract,\n    title: titles.titleFn,\n    cancelTitle: titles.cancel,\n    ...(people ? { layout: people.layout } : {}),\n  });\n  licks.licks.guard(freezer.frozenTarget);\n  const settings = await settingsOf(ready, mcpRuntime, { agent, vault, wiped });\n  const pages = createPages({ claim: sprinkles.claim });\n  const runtime = await scoops.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      groups,\n      env: home,\n      envOf: async (conversationId, context) => environment({ conversationId }, context),\n      ...at,\n      ...(people\n        ? { layout: people.layout, spools: people.spools, enforced: people.enforced }\n        : {}),\n      alive: alive(client),\n      reads: skillsRuntime.dirs,\n      memory: memoryRuntime.command,\n      gelatiere: gelatiere.command,\n      freezer: freezer.command,\n      models: modelsOfAgent(agent, settings, models, vault),\n      panel: pages.command,\n      webhook: sources.webhook,\n      mcp: mcp.direct,\n      ...(options.assets ? { assets: options.assets } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  roles = runtime;\n  gelatiere.attach({\n    agents: agent.agents,\n    licks: licks.licks,\n    env: home,\n    home: HOME,\n    ...(await people?.gelatiere(home)),\n    scoops: scoops.scoops,\n    roles: runtime.roles,\n    assets: options.assets ?? packageAssets(),\n    fetch: scope.fetch,\n    skills: skillsRuntime.skills,\n    ...(options.catalog ? { catalog: options.catalog } : {}),\n  });\n  await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => undefined);\n  return hostAgent(agent, {\n    ...(await setupApprovals(models, home, at, agent, memoryRuntime.memories, options)),\n    settings,\n    licks: { licks: licks.licks, sources },\n    scoops: { scoops: scoops.scoops, runtime },\n    skills: skillsRuntime,\n    sprinkles,\n    memory: memoryRuntime,\n    freezer,\n    changes: attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS }),\n    pages,\n    labels: await attachLabels({ ...agent, label: titles.label, vault: vault.state }),\n    mcp: mcpRuntime,\n    ...(users ? { users } : {}),\n    secrets: hostSecrets(vault, names, [names, records, endpoints]),\n    uploads: {\n      env: environment,\n      sees: (ref) => seesImages(models, ref),\n    },\n    monitor: {\n      kernel: client,\n      groups,\n      ...(users ? { users: () => users.users.list() } : {}),\n    },\n  });\n}\n\nexport function alive(client: KernelClient) {\n  return async (pid: number): Promise<boolean> => {\n    if (!client.ps) return true;\n    return (await client.ps()).some((process) => process.pid === pid);\n  };\n}\n\nexport function runAgentWorker(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions = {}\n): Promise<AgentHost> {\n  const vault = new Vault();\n  listenVault(scope, vault);\n  const host = start(scope, kernelPorts(scope), options, vault);\n  host.catch(() => undefined);\n  serveConnections(scope, host);\n  return host;\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AAGnC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,mBAAmB;AAC5B,SAAwC,iBAAiB;AACzD;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAyB,iBAAiB;AAC1C,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAAS,YAAY,mBAAmB;AAExC,SAAS,MAAM,mBAAmB,sBAAsB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,WAA8C,mBAAmB;AAC1E,SAAS,WAAW,iBAAiB;AACrC,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAA2B,gBAAgB;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,UAA0B,sBAAsB;AACzD,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAsB,eAAmC,mBAAmB;AAC5E,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,YAAY,UAAU,kBAAkB;AACjD,SAAS,WAAuB,kBAAkB;AAClD,SAAS,mBAAmB;AAC5B,SAA4B,oBAAoB;AAChD,SAAS,iBAAiB;AAC1B,SAAS,iBAAkC;AAC3C,SAAS,aAAa,OAAO,kBAAkB;AAC/C,SAAyB,UAAU,uBAAuB;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,mBAAmB;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,SAAS,cAAc,cAAc;AAC9C,SAAS,oBAAoB;AAC7B,SAA2B,aAAa,wBAA0C;AAwB3E,SAAS,QACd,OACA,QACA,QACyB;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,WAAW,OAAO;AACpB,UAAM,MAAM;AACZ,WAAO;AAAA,EACT;AACA,SAAO,YAAY,UAAU,KAAK,GAAG,MAAoD;AAC3F;AAEO,MAAM,YAAY;AAClB,MAAM,gBAAgB,GAAG,SAAS;AAEzC,eAAe,SAAS,OAA6B,SAA6B;AAChF,QAAM,QAAQ,MAAM,WAAW;AAC/B,QAAM,SAAuB,QAAQ,UAAU;AAC/C,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM;AAChC,QAAM,SAAS,MAAM,OAAO,MAAM;AAClC,QAAM,QAAQ,QAAQ,OAAO,QAAQ,OAAO,MAAM;AAClD,QAAM,YAAY,OAAO,QAAQ,QAAQ,KAAK;AAC9C,QAAM,OAAO,IAAI,eAAe,QAAQ,EAAE,KAAK,KAAK,CAAC;AACrD,QAAM,aAAa,IAAI;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI,EAAE,MAAM,MAAM,GAAI,QAAQ,EAAE,UAAU,UAAU,IAAI,CAAC,EAAG;AAAA,EAC9D;AACF;AAEA,SAAS,aAAa,KAAuC;AAC3D,SAAO,IAAI,KAAK,YAAY,SAAS,iBAAiB,SAAS,IAAI,QAAW,kBAAkB;AAClG;AAEA,eAAe,cACb,QACA,SACA,QACA,OACA,MAAM,GAAG,IAAI,cACb;AACA,QAAM,WAAW,MAAM,OAAO,GAAG,SAAS,GAAG,GAAG,gBAAgB,EAAE,MAAM,MAAM,MAAS;AACvF,MAAI,mBAAmB,aAAa,SAAY,SAAY,IAAI,YAAY,EAAE,OAAO,QAAQ,CAAC;AAC5F,WAAO,CAAC;AACV,QAAM,UAAU;AAAA,IACd,QAAQ,iBAAiB,MAAM,WAAW,QAAQ,IAAI,IAAI,YAAY,GAAG,CAAC;AAAA,IAC1E,QAAQ;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa,EAAE,UAAU,YAAY,OAAsC,SAAS,MAAM,CAAC;AAAA,EAC7F;AACF;AAEO,SAAS,WAAW,QAAkC,KAAoC;AAC/F,QAAM,QAAQ,OAAO,OAAO,SAAS,IAAI,UAAU,IAAI,OAAO;AAC9D,SAAO,QAAQ,MAAM,MAAM,SAAS,OAAO,IAAI;AACjD;AAEO,MAAM,eAAe;AAE5B,eAAe,aACb,SACA,EAAE,WAAW,OAAO,GACpB,MACgB;AAChB,QAAM,UAAU,OAAO,QAAQ,YAAY,MAAM,sBAAsB,IAAI;AAC3E,SAAO,UAAU;AAAA,IACf,GAAG;AAAA,IACH;AAAA,IACA,qBAAqB,gBAAgB,MAAM;AAAA,IAC3C,cAAc,CAAC,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,KAAK;AAAA,EAC5E,CAAC;AACH;AAEA,eAAe,WAAW,MAAsB,OAAc;AAC5D,YAAU,KAAK;AACf,QAAM,QAAQ,YAAY,MAAM,KAAK;AACrC,QAAM,MAAM,QAAQ,kBAAkB;AACtC,SAAO;AACT;AAEO,SAAS,WACd,WACA,QACc;AACd,SAAO,UAAU,IAAI,CAAC,cAAc;AAAA,IAClC,UAAU,SAAS;AAAA,IACnB,MAAM;AAAA,MACJ,GAAG,IAAI;AAAA,QACL;AAAA,UACE,SAAS;AAAA,UACT,GAAG,OAAO,UAAU,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO;AAAA,UAC7D,GAAI,SAAS,OAAO,UAAU,oBAAoB,CAAC;AAAA,QACrD,EAAE,OAAO,CAAC,QAAuB,OAAO,QAAQ,YAAY,QAAQ,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF,EAAE;AACJ;AAEA,SAAS,SACP,OACA,MACA;AACA,QAAM,EAAE,OAAO,SAAS,UAAU,IAAI;AACtC,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA,OAAO,CAAC,QAAgB,SAAuB,SAAS,OAAO,MAAM,MAAM;AAAA,MAC3E,OAAO,CAAC,QAAgB,SAAuB,WAAW,OAAO,QAAQ,IAAI;AAAA,MAC7E,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,YACP,OACA,OACA,OACA;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,MAAM,MAAM,MAAM,MAAM;AAAA,IACxB,OAAO,MAAM;AACX,iBAAW,QAAQ,MAAO,MAAK,MAAM;AAAA,IACvC;AAAA,EACF;AACF;AAEA,eAAe,SACb,OACA,SACA,OACA;AACA,QAAM,EAAE,OAAO,MAAM,WAAW,QAAQ,IAAI;AAC5C,QAAM,QAAQ,OAAO,QAAQ,UAAU,YAAY,UAAU,MAAM,aAAa,IAAI;AACpF,QAAM,UAAU,aAAa,KAAK;AAClC,QAAM,SAAS,QAAQ,QAAQ,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACxE,QAAM,YAAY,QAAQ,aAAa,eAAe,OAAO;AAC7D,QAAM,SAAS,MAAM,eAAe,OAAO,SAAS;AACpD,QAAM,cAAc,iBAAiB,SAAS,OAAO,GAAG;AACxD,QAAM,SAAS,kBAAkB,aAAa,SAAS;AACvD,QAAM,QAAQ,MAAM,WAAW,WAAW,MAAM;AAChD,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,OAAO,MAAM,QAAQ,MAAM,KAAK;AAAA,EAC7C;AACA,QAAM,YAAY,eAAe,KAAK;AACtC,OAAK,UAAU,OAAO,MAAM,CAAC,EAAE,MAAM,MAAM,MAAS;AACpD,QAAM,eAAe,YAAY;AAC/B,UAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC,CAAC,CAAC;AACtF,WAAO,oBAAoB,aAAa,WAAW,MAAM;AAAA,EAC3D;AACA,SAAO,EAAE,OAAO,SAAS,WAAW,QAAQ,QAAQ,OAAO,WAAW,aAAa;AACrF;AAEA,SAAS,aAAa,OAA4C,QAAgB;AAChF,QAAM,WAAW,eAAe;AAChC,WAAS,QAAQ,WAAW;AAC5B,WAAS,QAAQ,aAAa,CAAC,MAAM,CAAC,CAAC;AACvC,WAAS,QAAQ,YAAY,KAAK,CAAC;AACnC,QAAM,OAAQ,YAAY,MAAsC;AAAA,IAC9D,CAAC,SAAS,KAAK,SAAS;AAAA,EAC1B;AACA,WAAS,QAAQ,WAAW,IAAI,CAAC;AACjC,SAAO;AACT;AAEA,eAAe,QAAQ,QAAiD,QAAsB;AAC5F,SAAO;AAAA,IACL,SAAS,MAAM,aAAa,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAChD,UAAU,MAAM,eAAe,MAAM;AAAA,IACrC,WAAW,cAAc,OAAO,SAAS;AAAA,IACzC,SAAS,MAAM,iBAAiB,MAAM;AAAA,EACxC;AACF;AAEA,SAAS,WAAW,OAAyB,QAAiD;AAC5F,QAAM,SAAS,MAAM,MAAM,KAAK,KAAK;AACrC,QAAM,WAAW,OAAO,eAAe,KAAK,MAAM;AAClD,QAAM,YAAY,eAAe,OAAO,WAAW,MAAM,SAAS,QAAQ,QAAQ,QAAQ;AAC1F,QAAM,QAAQ;AACd,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAe,QACb,OACA,QACA,SACA;AACA,QAAM,QAAQ,MAAM,WAAW,OAAO,MAAM,OAAO,KAAK;AACxD,QAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,OAAO,OAAO,MAAM;AAC7D,QAAM,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM;AACjD,QAAM,OAAO,MAAM,SAAS,OAAO,SAAS;AAAA,IAC1C,OAAO,OAAO;AAAA,IACd,MAAM,OAAO;AAAA,IACb;AAAA,IACA,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH,UAAU,aAAa,OAAO,MAAM,SAAS,MAAM;AAAA,EACrD;AACF;AAEA,SAAS,cACP,OACA,UACA,SACA,OACA;AACA,QAAM,SAAS,MAAM,MAAM,MAAM,MAAM,WAAW;AAClD,SAAO,cAAc,EAAE,QAAQ,MAAM,QAAQ,UAAU,SAAS,OAAO,CAAC;AAC1E;AAEA,eAAe,WACb,MACA,KACA,OACA;AACA,QAAM,EAAE,QAAQ,SAAS,QAAQ,WAAW,OAAO,UAAU,IAAI;AACjE,QAAM,OAAO,MAAM,UAAU,MAAM,MAAM,SAAS,EAAE,SAAS,OAAO,MAAM,MAAM,GAAG,MAAM,KAAK;AAC9F,QAAM,WAAW,MAAM,oBAAoB,QAAQ,EAAE,SAAS,OAAO,GAAG,WAAW;AAAA,IACjF;AAAA,IACA,OAAO;AAAA,EACT,CAAC;AACD,WAAS,MAAM,UAAU,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,MAAM,MAAM,MAAS,CAAC;AACpF,SAAO;AACT;AAEA,eAAe,eACb,QACA,MACA,IACA,OACA,QACA,SACA;AACA,QAAM,WAAW,MAAM,OAAO;AAC9B,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,WAAW,MAAM,kBAAkB,EAAE,MAAM,MAAM,KAAK;AAC5D,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,SAAS,YAAY,EAAE,KAAK,MAAM,QAAQ,MAAM,QAAQ,SAAS,CAAC;AACxE,QAAM,QAAuB;AAAA,IAC3B,OAAO,cAAc;AAAA,MACnB;AAAA,MACA,OAAO,OAAO,YAAY,aAAa,MAAM,SAAS,OAAO,CAAC;AAAA,MAC9D;AAAA,MACA,OAAO,aAAa,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,IACvF,CAAC;AAAA,IACD,QAAQ,gBAAgB,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,EAC3F;AACA,SAAO,EAAE,OAAO,QAAQ,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAChE;AAEA,SAAS,YACP,UACA,QACA,MACA,IACA,QACA;AACA,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,UAAU,OAAO,QAAQ,QAAQ;AACvC,QAAM,SAAS,gBAAgB;AAAA,IAC7B,QAAQ,MAAM,OAAO,GAAG;AAAA,IACxB,SAAS,MAAM,OAAO,GAAG;AAAA,IACzB,OAAO,MAAM;AAAA,EACf,CAAC;AACD,WAAS,QAAQ,OAAO,SAAS;AACjC,SAAO,EAAE,SAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AAC5E;AAEA,eAAe,MACb,OACA,OACA,SACA,OACoB;AACpB,QAAM,EAAE,QAAQ,OAAO,MAAM,IAAI,MAAM,IAAI,MAAM,SAAS,OAAO,OAAO;AACxE,QAAM,QAAQ,MAAM,QAAQ,OAAO,EAAE,QAAQ,MAAM,MAAM,GAAG,OAAO;AACnE,QAAM,EAAE,OAAO,QAAQ,WAAW,OAAO,QAAQ,UAAU,SAAS,UAAU,IAAI;AAClF,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,SAAS,YAAY;AAC3B,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WAAW,MAAM,cAAc,QAAQ,SAAS,QAAQ,IAAI,UAAU,GAAG,QAAQ;AACvF,WAAS,QAAQ,kBAAkB,QAAQ,CAAC;AAC5C,QAAM,QAAQ,WAAW,QAAQ;AACjC,QAAM,MAAM,OAAO,WAAW,MAAM,CAAC;AACrC,QAAM,SAAS,YAAY,UAAU,MAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,KAAK,CAAC;AAC3F,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK;AAChD,WAAS,QAAQ,iBAAiB,EAAE,OAAO,MAAM,CAAC,CAAC;AACnD,QAAM,SAAS,YAAY,UAAU,QAAQ,MAAM,IAAI,MAAM,MAAM;AACnE,QAAM,CAAC,UAAU,MAAM,IAAI,CAAC,eAAe,GAAG,cAAc,MAAM,CAAC;AACnE,QAAM,QAAQ,QAAQ,SAAU,MAAM,MAAM,aAAa;AACzD,MAAI;AACJ,QAAM,SAAS,QAAQ,WAAW,OAAO,QAAQ,MAAM,MAAM,QAAQ,MAAM,IAAI;AAC/E,QAAM,cAAc,kBAAkB,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,UAAU,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,IAC9C,OAAO;AAAA,IACP,OAAO,YAAY,KAAK;AAAA,IACxB,GAAI,SAAS,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,EAC1C,CAAC;AACD,QAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,EAAE,QAAQ,OAAO,UAAU,KAAK,YAAY,CAAC;AAC/F,WAAS;AACT,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,UAAU,MAAM,OAAO,OAAO;AAAA,IAClC,KAAK;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,GAAI,SAAS,EAAE,MAAM,MAAM,OAAO,SAAS,GAAG,UAAU,OAAO,SAAS,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,EAC5F,CAAC;AACD,QAAM,QAAQ,MAAM,kBAAkB;AACtC,QAAM,SAAS,EAAE,SAAS,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM,EAAE;AACxE,QAAM,QAAQ,KAAK,QAAQ,kBAAkB;AAC7C,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAAA,IAC3B;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAG,SAAS,OAAO,KAAK;AAAA,MACxB,OAAO,MAAM;AAAA,MACb,OAAO;AAAA,MACP,SAAS,MAAM;AAAA,MACf,UAAU;AAAA,MACV,UAAU,SAAS,SAAS;AAAA,MAC5B,MAAM,SAAS,OAAO,SAAS;AAAA,MAC/B,UAAU,QAAQ,eAAe,IAAI,IAAI,cAAc,MAAM,SAAS,MAAM,EAAE;AAAA,IAChF;AAAA,IACA;AAAA,EACF;AACA,QAAM,YAAY,cAAc;AAChC,QAAM,YAAY,MAAM,eAAe,EAAE;AAAA,IACvC;AAAA,MACE,WAAW,UAAU;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,KAAK;AAAA,MACL,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,QAAQ,UAAU,KAAK,CAAC;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,UAAQ,OAAO,CAAC,SAAS,eAAe,SAAS,CAAC;AAClD,MAAI;AACJ,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAI,SAAS,EAAE,MAAM,UAAU,IAAI,CAAC;AAAA,MACpC,UAAU;AAAA,MACV,OAAO,OAAO,UAAU,OAAO,MAAM,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,cAAc;AAAA,IAC5B,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,KAAK;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,IACd,aAAa,OAAO;AAAA,IACpB,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,EAC5C,CAAC;AACD,QAAM,MAAM,MAAM,QAAQ,YAAY;AACtC,QAAM,WAAW,MAAM,WAAW,OAAO,YAAY,EAAE,OAAO,OAAO,MAAM,CAAC;AAC5E,QAAM,QAAQ,YAAY,EAAE,OAAO,UAAU,MAAM,CAAC;AACpD,QAAM,UAAU,MAAM,OAAO;AAAA,IAC3B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,KAAK;AAAA,MACL,OAAO,OAAO,gBAAgB,YAAY,YAAY,EAAE,eAAe,GAAG,OAAO;AAAA,MACjF,GAAG;AAAA,MACH,GAAI,SACA,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS,IAC1E,CAAC;AAAA,MACL,OAAO,MAAM,MAAM;AAAA,MACnB,OAAO,cAAc;AAAA,MACrB,QAAQ,cAAc;AAAA,MACtB,WAAW,UAAU;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,QAAQ,cAAc,OAAO,UAAU,QAAQ,KAAK;AAAA,MACpD,OAAO,MAAM;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,KAAK,IAAI;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AACA,UAAQ;AACR,YAAU,OAAO;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,KAAK;AAAA,IACL,MAAM;AAAA,IACN,GAAI,MAAM,QAAQ,UAAU,IAAI;AAAA,IAChC,QAAQ,OAAO;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ,UAAU,cAAc;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,QAAQ,cAAc;AAAA,IACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD,CAAC;AACD,QAAM,cAAc,OAAO,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACpE,SAAO,UAAU,OAAO;AAAA,IACtB,GAAI,MAAM,eAAe,QAAQ,MAAM,IAAI,OAAO,cAAc,UAAU,OAAO;AAAA,IACjF;AAAA,IACA,OAAO,EAAE,OAAO,MAAM,OAAO,QAAQ;AAAA,IACrC,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,SAAS,cAAc,EAAE,QAAQ,MAAM,QAAQ,KAAK,MAAM,UAAU,WAAW,CAAC;AAAA,IAChF;AAAA,IACA,QAAQ,MAAM,aAAa,EAAE,GAAG,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,MAAM,CAAC;AAAA,IAChF,KAAK;AAAA,IACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,SAAS,YAAY,OAAO,OAAO,CAAC,OAAO,SAAS,SAAS,CAAC;AAAA,IAC9D,SAAS;AAAA,MACP,KAAK;AAAA,MACL,MAAM,CAAC,QAAQ,WAAW,QAAQ,GAAG;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR;AAAA,MACA,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,MAAM,KAAK,EAAE,IAAI,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,MAAM,QAAsB;AAC1C,SAAO,OAAO,QAAkC;AAC9C,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAQ,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG;AAAA,EAClE;AACF;AAEO,SAAS,eACd,OACA,UAA8B,CAAC,GACX;AACpB,QAAM,QAAQ,IAAI,MAAM;AACxB,cAAY,OAAO,KAAK;AACxB,QAAM,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS,KAAK;AAC5D,OAAK,MAAM,MAAM,MAAS;AAC1B,mBAAiB,OAAO,IAAI;AAC5B,SAAO;AACT;",
+  "sourcesContent": ["import { attachKernel } from '@ai-ecoverse/slicc-kernel';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Provider } from '@earendil-works/pi-ai';\nimport type { Models } from '@earendil-works/pi-ai/models';\nimport {\n  createRegistry,\n  type ModelRef,\n  type Storage,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { CodingTools } from '@earendil-works/pi-durable/tools';\nimport { type Agent, type AgentOptions, openAgent } from './agent.ts';\nimport {\n  type ApprovalJudge,\n  approvalJudge,\n  judgeModelOf,\n  judgeSpender,\n  ownerIntent,\n  seedPolicy,\n  verdictRecorder,\n} from './approvals/index.ts';\nimport { browserGuard } from './browser/guard.ts';\nimport { attachChanges, CHANGES_MS } from './changes/index.ts';\nimport {\n  codemodeExtension,\n  codemodeTool,\n  disabledBySettings,\n  locateWasm,\n  sandboxFactory,\n} from './codemode/index.ts';\nimport { attachFreezer } from './freezer/index.ts';\nimport { lateGelatiere } from './gelatiere/index.ts';\nimport { type AgentHost, hostAgent } from './host.ts';\nimport { imageReads } from './images/index.ts';\nimport { createActivity } from './kernel/activity.ts';\nimport { agentUsers, warnSupport } from './kernel/agent-users.ts';\nimport type { KernelClient } from './kernel/client.ts';\nimport { HOME, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nimport { processGroups } from './kernel/groups.ts';\nimport { adminOver, type UserClient, type UserClients, userClients } from './kernel/users.ts';\nimport { AGENT_DIR, ROOT_HOME } from './layout.ts';\nimport { setupLicks } from './licks/index.ts';\nimport { lickTriage } from './licks/triage.ts';\nimport { type McpAccounts, setupMcp } from './mcp/index.ts';\nimport type { MemoryEntry } from './memory/format.ts';\nimport { setupMemory } from './memory/index.ts';\nimport { modelsCommand } from './models/index.ts';\nimport { pageOnly, type Transport, transportFetch } from './net.ts';\nimport { sliccPrompt } from './prompt.ts';\nimport { createPages } from './remote/pages.ts';\nimport { identity } from './scoops/identity.ts';\nimport { type Assets, packageAssets, type ScoopsRuntime, setupScoops } from './scoops/index.ts';\nimport { vaultCredentials } from './secrets/credentials.ts';\nimport {\n  BEDROCK_ENDPOINTS,\n  type ModelBases,\n  modelRoute,\n  vaultEndpoints,\n} from './secrets/endpoints.ts';\nimport { secretsExtension, shellGrants } from './secrets/extension.ts';\nimport { grantFetch, mcpFetch, vaultFetch } from './secrets/fetch.ts';\nimport { keysMoved, type Wiped, wipeLegacy } from './secrets/legacy.ts';\nimport { secretNames } from './secrets/names.ts';\nimport { type VaultRecords, vaultRecords } from './secrets/records.ts';\nimport { scrubWith } from './secrets/scrub.ts';\nimport { fileStore, type PlainStore } from './secrets/store.ts';\nimport { listenVault, Vault, WAITING_MS } from './secrets/vault.ts';\nimport { type Choosable, unfreeze, unfreezeCreated } from './selection.ts';\nimport {\n  BEDROCK,\n  createAgentSettings,\n  createSliccModels,\n  providerFields,\n  resolveDefaultModel,\n  sliccProviders,\n} from './settings.ts';\nimport { RELOAD_MS, setupSkills } from './skills/index.ts';\nimport { setupSprinkles } from './sprinkles/index.ts';\nimport { openOpfsSqliteStorage } from './sqlite.ts';\nimport {\n  agentVersion,\n  browserConnected,\n  commandsOnPath,\n  kernelBoot,\n  transportName,\n} from './system.ts';\nimport { titlesExtension } from './titles/extension.ts';\nimport { labeler, settingsText, titler } from './titles/generate.ts';\nimport { attachLabels } from './titles/labels.ts';\nimport { type KernelPorts, kernelPorts, serveConnections, type WorkerScope } from './worker.ts';\n\nexport interface AgentWorkerScope extends WorkerScope {\n  fetch: typeof fetch;\n  location: { origin: string };\n}\n\nexport type KernelAttach = (port: MessagePort) => Promise<KernelClient & { transport: Transport }>;\n\nexport interface AgentWorkerOptions {\n  model?: ModelRef;\n  providers?: Provider[];\n  attach?: KernelAttach;\n  store?: () => Promise<PlainStore>;\n  storage?: () => Promise<Storage>;\n  assets?: Assets;\n  codemodeWasm?: () => Promise<WebAssembly.Module | undefined>;\n  codemodeWorker?: string | URL;\n  catalog?: string;\n  users?: boolean;\n  mcpRedirect?: string;\n  approvalMs?: number;\n}\n\nexport function usersOf(\n  admin: MessagePort | undefined,\n  wanted: boolean | undefined,\n  attach: KernelAttach\n): UserClients | undefined {\n  if (!admin) return undefined;\n  if (wanted === false) {\n    admin.close();\n    return undefined;\n  }\n  return userClients(adminOver(admin), attach as (port: MessagePort) => Promise<UserClient>);\n}\n\nexport const STORE_DIR = '/.slicc';\nexport const ACCOUNTS_FILE = `${STORE_DIR}/accounts.json`;\n\nasync function attached(ports: Promise<KernelPorts>, options: AgentWorkerOptions) {\n  const wiped = await wipeLegacy();\n  const attach: KernelAttach = options.attach ?? attachKernel;\n  const { kernel, admin } = await ports;\n  const client = await attach(kernel);\n  const users = usersOf(admin, options.users, attach);\n  await warnSupport(users, client, options.users);\n  const home = new SliccKernelEnv(client, { cwd: HOME });\n  await privateStore(home);\n  return {\n    client,\n    users,\n    home,\n    wiped,\n    at: { home: HOME, ...(users ? { agentDir: AGENT_DIR } : {}) },\n  };\n}\n\nfunction privateStore(env: SliccKernelEnv): Promise<unknown> {\n  return env.exec(`mkdir -p ${STORE_DIR} && chmod 700 ${STORE_DIR}`, undefined, BACKGROUND_CONTEXT);\n}\n\nasync function codemodeTools(\n  client: KernelClient,\n  options: AgentWorkerOptions,\n  native: typeof fetch,\n  extra: Parameters<typeof codemodeTool>[0]['extra'],\n  dir = `${HOME}/.pi/agent`\n) {\n  const settings = await client.fs.readFile(`${dir}/settings.json`).catch(() => undefined);\n  if (disabledBySettings(settings === undefined ? undefined : new TextDecoder().decode(settings)))\n    return [];\n  const sandbox = sandboxFactory(\n    options.codemodeWasm ?? (() => locateWasm(native, new URL(import.meta.url))),\n    options.codemodeWorker\n  );\n  return [\n    codemodeTool({ declared: CodingTools.tools as readonly ToolRegistration[], sandbox, extra }),\n  ];\n}\n\nexport function seesImages(models: Pick<Models, 'getModel'>, ref: ModelRef | undefined): boolean {\n  const found = ref && models.getModel(ref.provider, ref.modelId);\n  return found ? found.input.includes('image') : true;\n}\n\nexport const MCP_CALLBACK = '/oauth/mcp-callback';\n\nasync function openUnfrozen(\n  options: AgentWorkerOptions,\n  { choosable: chosen }: { choosable: Choosable },\n  base: Omit<AgentOptions, 'storage' | 'beforeResume' | 'conversationCreated'>\n): Promise<Agent> {\n  const storage = await (options.storage ?? (() => openOpfsSqliteStorage()))();\n  return openAgent({\n    ...base,\n    storage,\n    conversationCreated: unfreezeCreated(chosen),\n    beforeResume: (harness, using) => unfreeze(harness, storage, chosen, using),\n  });\n}\n\nasync function secretsFor(home: SliccKernelEnv, vault: Vault) {\n  scrubWith(vault);\n  const names = secretNames(home, vault);\n  await names.refresh(BACKGROUND_CONTEXT);\n  return names;\n}\n\nexport function modelBases(\n  providers: readonly Provider[],\n  models: Pick<ReturnType<typeof createSliccModels>, 'getModels'>\n): ModelBases[] {\n  return providers.map((provider) => ({\n    provider: provider.id,\n    urls: [\n      ...new Set(\n        [\n          provider.baseUrl,\n          ...models.getModels(provider.id).map((model) => model.baseUrl),\n          ...(provider.id === BEDROCK ? BEDROCK_ENDPOINTS : []),\n        ].filter((url): url is string => typeof url === 'string' && url !== '')\n      ),\n    ],\n  }));\n}\n\nfunction mcpVault(\n  vault: Vault,\n  made: { store: PlainStore; records: VaultRecords; endpoints: ReturnType<typeof vaultEndpoints> }\n) {\n  const { store, records, endpoints } = made;\n  return {\n    store,\n    vault: {\n      records,\n      fetch: (server: string, base: typeof fetch) => mcpFetch(vault, base, server),\n      grant: (server: string, base: typeof fetch) => grantFetch(vault, server, base),\n      servers: endpoints.servers,\n      token: endpoints.token,\n    },\n  };\n}\n\nfunction hostSecrets(\n  vault: Vault,\n  names: Awaited<ReturnType<typeof secretsFor>>,\n  parts: readonly { close(): void }[]\n) {\n  return {\n    vault: vault.state,\n    list: () => names.state.value,\n    close: () => {\n      for (const part of parts) part.close();\n    },\n  };\n}\n\nasync function modelsOf(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions,\n  given: { vault: Vault; home: SliccKernelEnv; transport: typeof fetch; version: string }\n) {\n  const { vault, home, transport, version } = given;\n  const store = await (options.store ?? (async () => fileStore(home, ACCOUNTS_FILE)))();\n  const records = vaultRecords(vault);\n  const loaded = records.refresh(BACKGROUND_CONTEXT).catch(() => undefined);\n  const providers = options.providers ?? sliccProviders(version);\n  const fields = await providerFields(store, providers);\n  const credentials = vaultCredentials(records, fields.env);\n  const models = createSliccModels(credentials, providers);\n  const bases = () => modelBases(providers, models);\n  scope.fetch = vaultFetch(\n    vault,\n    transport,\n    modelRoute(bases, () => records.state.value)\n  );\n  const endpoints = vaultEndpoints(vault);\n  void endpoints.models(bases()).catch(() => undefined);\n  const defaultModel = async () => {\n    await Promise.race([loaded, new Promise((resolve) => setTimeout(resolve, WAITING_MS))]);\n    return resolveDefaultModel(credentials, providers, models);\n  };\n  return { store, records, providers, fields, models, bases, endpoints, defaultModel };\n}\n\nfunction baseRegistry(facts: Awaited<ReturnType<typeof factsOf>>, origin: string) {\n  const registry = createRegistry();\n  registry.install(CodingTools);\n  registry.install(browserGuard([origin]));\n  registry.install(sliccPrompt(facts));\n  const read = (CodingTools.tools as readonly ToolRegistration[]).find(\n    (tool) => tool.name === 'read'\n  ) as ToolRegistration;\n  registry.install(imageReads(read));\n  return registry;\n}\n\nasync function factsOf(client: KernelClient & { transport: Transport }, native: typeof fetch) {\n  return {\n    version: await agentVersion((url) => native(url)),\n    commands: await commandsOnPath(client),\n    transport: transportName(client.transport),\n    browser: await browserConnected(client),\n  };\n}\n\nfunction routeFetch(scope: AgentWorkerScope, client: KernelClient & { transport: Transport }) {\n  const native = scope.fetch.bind(scope);\n  const loopback = client.loopbackFetch?.bind(client);\n  const transport = transportFetch(client.transport, scope.location.origin, native, loopback);\n  scope.fetch = transport;\n  return { native, transport };\n}\n\nasync function prepare(\n  scope: AgentWorkerScope,\n  kernel: { client: KernelClient & { transport: Transport }; home: SliccKernelEnv; vault: Vault },\n  options: AgentWorkerOptions\n) {\n  const names = await secretsFor(kernel.home, kernel.vault);\n  const { native, transport } = routeFetch(scope, kernel.client);\n  const facts = await factsOf(kernel.client, native);\n  const made = await modelsOf(scope, options, {\n    vault: kernel.vault,\n    home: kernel.home,\n    transport,\n    version: facts.version,\n  });\n  return {\n    names,\n    native,\n    transport,\n    facts,\n    ...made,\n    registry: baseRegistry(facts, scope.location.origin),\n  };\n}\n\nfunction modelsOfAgent(\n  agent: Agent,\n  settings: Awaited<ReturnType<typeof createAgentSettings>>,\n  catalog: Models,\n  vault: Vault\n) {\n  const locked = () => vault.state.value.locked !== 'no';\n  return modelsCommand({ agents: agent.agents, settings, catalog, locked });\n}\n\nasync function settingsOf(\n  made: Awaited<ReturnType<typeof modelsOf>>,\n  mcp: McpAccounts,\n  moved: { agent: Agent; vault: Vault; wiped: Wiped }\n) {\n  const { models, records, fields, providers, bases, endpoints } = made;\n  const keys = await keysMoved(moved.agent.harness, { records, vault: moved.vault }, moved.wiped);\n  const settings = await createAgentSettings(models, { records, fields }, providers, {\n    mcp,\n    moved: keys,\n  });\n  settings.state.subscribe(() => void endpoints.models(bases()).catch(() => undefined));\n  return settings;\n}\n\nasync function setupApprovals(\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  agent: Agent,\n  stored: { readonly value: readonly MemoryEntry[] | undefined },\n  options: Pick<AgentWorkerOptions, 'approvalMs'>\n) {\n  const memories = () => stored.value;\n  const { approvalMs } = options;\n  await seedPolicy(home, BACKGROUND_CONTEXT).catch(() => false);\n  const settings = settingsText(home, HOME, at.agentDir);\n  const intent = ownerIntent({ env: home, agents: agent.agents, memories });\n  const judge: ApprovalJudge = {\n    judge: approvalJudge({\n      models,\n      model: async (context) => judgeModelOf(await settings(context)),\n      intent,\n      spend: judgeSpender((agentId, context) => agent.agents.conversation(agentId, context)),\n    }),\n    record: verdictRecorder((agentId, context) => agent.agents.conversation(agentId, context)),\n  };\n  return { judge, intent, ...(approvalMs ? { approvalMs } : {}) };\n}\n\nfunction setupTitles(\n  registry: ReturnType<typeof createRegistry>,\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  opened: () => Agent | undefined\n) {\n  const settings = settingsText(home, HOME, at.agentDir);\n  const titleFn = titler(models, settings);\n  const titles = titlesExtension({\n    agents: () => opened()?.agents,\n    harness: () => opened()?.harness,\n    title: () => titleFn,\n  });\n  registry.install(titles.extension);\n  return { titleFn, cancel: titles.cancel, label: labeler(models, settings) };\n}\n\nasync function start(\n  scope: AgentWorkerScope,\n  ports: Promise<KernelPorts>,\n  options: AgentWorkerOptions,\n  vault: Vault\n): Promise<AgentHost> {\n  const { client, users, home, at, wiped } = await attached(ports, options);\n  const ready = await prepare(scope, { client, home, vault }, options);\n  const { names, native, transport, facts, models, registry, records, endpoints } = ready;\n  const memory = setupMemory(registry);\n  const coding = CodingTools.tools as readonly ToolRegistration[];\n  const mcp = setupMcp(registry);\n  const codemode = await codemodeTools(client, options, native, mcp.codemode, at.agentDir);\n  registry.install(codemodeExtension(codemode));\n  const licks = setupLicks(registry, transport);\n  licks.licks.triage(lickTriage(models));\n  const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);\n  const skills = setupSkills(registry, licks.licks);\n  registry.install(secretsExtension({ names, vault }));\n  const titles = setupTitles(registry, models, home, at, () => opened);\n  const [activity, groups] = [createActivity(), processGroups(client)];\n  const model = options.model ?? (await ready.defaultModel());\n  let opened: Agent | undefined;\n  const people = users ? agentUsers(users, client, home, () => opened?.agents) : undefined;\n  const environment = kernelEnvironment(client, {\n    activity,\n    groups,\n    identify: identity(() => opened?.agents, model),\n    scrub: vault,\n    spawn: shellGrants(names),\n    ...(people ? { route: people.route } : {}),\n  });\n  const agent = await openUnfrozen(options, scoops, { models, model, registry, env: environment });\n  opened = agent;\n  await people?.start(agent.agents);\n  const sources = licks.attach(agent, {\n    env: home,\n    home: HOME,\n    activity,\n    ...(people ? { dirs: () => people.lickDirs(), cronUser: people.cronUser.bind(people) } : {}),\n  });\n  await sources.start(BACKGROUND_CONTEXT);\n  const booted = { version: facts.version, boot: await kernelBoot(client) };\n  await sources.boot(booted, BACKGROUND_CONTEXT);\n  const skillsRuntime = await skills.attach(\n    {\n      env: home,\n      ...at,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people ? { people: people.people } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const mcpRuntime = await mcp.attach(\n    {\n      env: home,\n      ...at,\n      ...mcpVault(vault, ready),\n      licks: licks.licks,\n      fetch: transport,\n      version: facts.version,\n      reloadMs: RELOAD_MS,\n      codemode: codemode.length > 0,\n      cors: pageOnly(client.transport),\n      redirect: options.mcpRedirect ?? new URL(MCP_CALLBACK, scope.location.origin).href,\n    },\n    BACKGROUND_CONTEXT\n  );\n  const gelatiere = lateGelatiere();\n  const sprinkles = await setupSprinkles().attach(\n    {\n      intercept: gelatiere.intercept,\n      harness: agent.harness,\n      agents: agent.agents,\n      licks: licks.licks,\n      env: home,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people?.sprinkles() ?? {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  people?.follow([sources, skillsRuntime, sprinkles]);\n  let roles: ScoopsRuntime | undefined;\n  const memoryRuntime = await memory.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      env: home,\n      ...at,\n      ...(people ? { home: ROOT_HOME } : {}),\n      reloadMs: RELOAD_MS,\n      roles: async (using) => roles?.roles(using),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const freezer = attachFreezer({\n    harness: agent.harness,\n    agents: agent.agents,\n    env: home,\n    extract: memory.extract,\n    title: titles.titleFn,\n    cancelTitle: titles.cancel,\n    ...(people ? { layout: people.layout } : {}),\n  });\n  licks.licks.guard(freezer.frozenTarget);\n  const settings = await settingsOf(ready, mcpRuntime, { agent, vault, wiped });\n  const pages = createPages({ claim: sprinkles.claim });\n  const runtime = await scoops.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      groups,\n      env: home,\n      envOf: async (conversationId, context) => environment({ conversationId }, context),\n      ...at,\n      ...(people\n        ? { layout: people.layout, spools: people.spools, enforced: people.enforced }\n        : {}),\n      alive: alive(client),\n      reads: skillsRuntime.dirs,\n      memory: memoryRuntime.command,\n      gelatiere: gelatiere.command,\n      freezer: freezer.command,\n      models: modelsOfAgent(agent, settings, models, vault),\n      panel: pages.command,\n      webhook: sources.webhook,\n      mcp: mcp.direct,\n      ...(options.assets ? { assets: options.assets } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  roles = runtime;\n  gelatiere.attach({\n    agents: agent.agents,\n    licks: licks.licks,\n    env: home,\n    home: HOME,\n    ...(await people?.gelatiere(home)),\n    scoops: scoops.scoops,\n    roles: runtime.roles,\n    assets: options.assets ?? packageAssets(),\n    fetch: scope.fetch,\n    skills: skillsRuntime.skills,\n    ...(options.catalog ? { catalog: options.catalog } : {}),\n  });\n  await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => undefined);\n  return hostAgent(agent, {\n    ...(await setupApprovals(models, home, at, agent, memoryRuntime.memories, options)),\n    settings,\n    licks: { licks: licks.licks, sources },\n    scoops: { scoops: scoops.scoops, runtime },\n    skills: skillsRuntime,\n    sprinkles,\n    memory: memoryRuntime,\n    freezer,\n    changes: attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS }),\n    pages,\n    labels: await attachLabels({ ...agent, label: titles.label, vault: vault.state }),\n    mcp: mcpRuntime,\n    ...(users ? { users } : {}),\n    secrets: hostSecrets(vault, names, [names, records, endpoints]),\n    uploads: {\n      env: environment,\n      sees: (ref) => seesImages(models, ref),\n    },\n    monitor: {\n      kernel: client,\n      groups,\n      ...(users ? { users: () => users.users.list() } : {}),\n    },\n  });\n}\n\nexport function alive(client: KernelClient) {\n  return async (pid: number): Promise<boolean> => {\n    if (!client.ps) return true;\n    return (await client.ps()).some((process) => process.pid === pid);\n  };\n}\n\nexport function runAgentWorker(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions = {}\n): Promise<AgentHost> {\n  const vault = new Vault();\n  listenVault(scope, vault);\n  const host = start(scope, kernelPorts(scope), options, vault);\n  host.catch(() => undefined);\n  serveConnections(scope, host);\n  return host;\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AAGnC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,mBAAmB;AAC5B,SAAwC,iBAAiB;AACzD;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAyB,iBAAiB;AAC1C,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAAS,YAAY,mBAAmB;AAExC,SAAS,MAAM,mBAAmB,sBAAsB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,WAA8C,mBAAmB;AAC1E,SAAS,WAAW,iBAAiB;AACrC,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAA2B,gBAAgB;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,UAA0B,sBAAsB;AACzD,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAsB,eAAmC,mBAAmB;AAC5E,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,YAAY,UAAU,kBAAkB;AACjD,SAAS,WAAuB,kBAAkB;AAClD,SAAS,mBAAmB;AAC5B,SAA4B,oBAAoB;AAChD,SAAS,iBAAiB;AAC1B,SAAS,iBAAkC;AAC3C,SAAS,aAAa,OAAO,kBAAkB;AAC/C,SAAyB,UAAU,uBAAuB;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,mBAAmB;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,SAAS,cAAc,cAAc;AAC9C,SAAS,oBAAoB;AAC7B,SAA2B,aAAa,wBAA0C;AAwB3E,SAAS,QACd,OACA,QACA,QACyB;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,WAAW,OAAO;AACpB,UAAM,MAAM;AACZ,WAAO;AAAA,EACT;AACA,SAAO,YAAY,UAAU,KAAK,GAAG,MAAoD;AAC3F;AAEO,MAAM,YAAY;AAClB,MAAM,gBAAgB,GAAG,SAAS;AAEzC,eAAe,SAAS,OAA6B,SAA6B;AAChF,QAAM,QAAQ,MAAM,WAAW;AAC/B,QAAM,SAAuB,QAAQ,UAAU;AAC/C,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM;AAChC,QAAM,SAAS,MAAM,OAAO,MAAM;AAClC,QAAM,QAAQ,QAAQ,OAAO,QAAQ,OAAO,MAAM;AAClD,QAAM,YAAY,OAAO,QAAQ,QAAQ,KAAK;AAC9C,QAAM,OAAO,IAAI,eAAe,QAAQ,EAAE,KAAK,KAAK,CAAC;AACrD,QAAM,aAAa,IAAI;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI,EAAE,MAAM,MAAM,GAAI,QAAQ,EAAE,UAAU,UAAU,IAAI,CAAC,EAAG;AAAA,EAC9D;AACF;AAEA,SAAS,aAAa,KAAuC;AAC3D,SAAO,IAAI,KAAK,YAAY,SAAS,iBAAiB,SAAS,IAAI,QAAW,kBAAkB;AAClG;AAEA,eAAe,cACb,QACA,SACA,QACA,OACA,MAAM,GAAG,IAAI,cACb;AACA,QAAM,WAAW,MAAM,OAAO,GAAG,SAAS,GAAG,GAAG,gBAAgB,EAAE,MAAM,MAAM,MAAS;AACvF,MAAI,mBAAmB,aAAa,SAAY,SAAY,IAAI,YAAY,EAAE,OAAO,QAAQ,CAAC;AAC5F,WAAO,CAAC;AACV,QAAM,UAAU;AAAA,IACd,QAAQ,iBAAiB,MAAM,WAAW,QAAQ,IAAI,IAAI,YAAY,GAAG,CAAC;AAAA,IAC1E,QAAQ;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa,EAAE,UAAU,YAAY,OAAsC,SAAS,MAAM,CAAC;AAAA,EAC7F;AACF;AAEO,SAAS,WAAW,QAAkC,KAAoC;AAC/F,QAAM,QAAQ,OAAO,OAAO,SAAS,IAAI,UAAU,IAAI,OAAO;AAC9D,SAAO,QAAQ,MAAM,MAAM,SAAS,OAAO,IAAI;AACjD;AAEO,MAAM,eAAe;AAE5B,eAAe,aACb,SACA,EAAE,WAAW,OAAO,GACpB,MACgB;AAChB,QAAM,UAAU,OAAO,QAAQ,YAAY,MAAM,sBAAsB,IAAI;AAC3E,SAAO,UAAU;AAAA,IACf,GAAG;AAAA,IACH;AAAA,IACA,qBAAqB,gBAAgB,MAAM;AAAA,IAC3C,cAAc,CAAC,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,KAAK;AAAA,EAC5E,CAAC;AACH;AAEA,eAAe,WAAW,MAAsB,OAAc;AAC5D,YAAU,KAAK;AACf,QAAM,QAAQ,YAAY,MAAM,KAAK;AACrC,QAAM,MAAM,QAAQ,kBAAkB;AACtC,SAAO;AACT;AAEO,SAAS,WACd,WACA,QACc;AACd,SAAO,UAAU,IAAI,CAAC,cAAc;AAAA,IAClC,UAAU,SAAS;AAAA,IACnB,MAAM;AAAA,MACJ,GAAG,IAAI;AAAA,QACL;AAAA,UACE,SAAS;AAAA,UACT,GAAG,OAAO,UAAU,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO;AAAA,UAC7D,GAAI,SAAS,OAAO,UAAU,oBAAoB,CAAC;AAAA,QACrD,EAAE,OAAO,CAAC,QAAuB,OAAO,QAAQ,YAAY,QAAQ,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF,EAAE;AACJ;AAEA,SAAS,SACP,OACA,MACA;AACA,QAAM,EAAE,OAAO,SAAS,UAAU,IAAI;AACtC,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA,OAAO,CAAC,QAAgB,SAAuB,SAAS,OAAO,MAAM,MAAM;AAAA,MAC3E,OAAO,CAAC,QAAgB,SAAuB,WAAW,OAAO,QAAQ,IAAI;AAAA,MAC7E,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,YACP,OACA,OACA,OACA;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,MAAM,MAAM,MAAM,MAAM;AAAA,IACxB,OAAO,MAAM;AACX,iBAAW,QAAQ,MAAO,MAAK,MAAM;AAAA,IACvC;AAAA,EACF;AACF;AAEA,eAAe,SACb,OACA,SACA,OACA;AACA,QAAM,EAAE,OAAO,MAAM,WAAW,QAAQ,IAAI;AAC5C,QAAM,QAAQ,OAAO,QAAQ,UAAU,YAAY,UAAU,MAAM,aAAa,IAAI;AACpF,QAAM,UAAU,aAAa,KAAK;AAClC,QAAM,SAAS,QAAQ,QAAQ,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACxE,QAAM,YAAY,QAAQ,aAAa,eAAe,OAAO;AAC7D,QAAM,SAAS,MAAM,eAAe,OAAO,SAAS;AACpD,QAAM,cAAc,iBAAiB,SAAS,OAAO,GAAG;AACxD,QAAM,SAAS,kBAAkB,aAAa,SAAS;AACvD,QAAM,QAAQ,MAAM,WAAW,WAAW,MAAM;AAChD,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,OAAO,MAAM,QAAQ,MAAM,KAAK;AAAA,EAC7C;AACA,QAAM,YAAY,eAAe,KAAK;AACtC,OAAK,UAAU,OAAO,MAAM,CAAC,EAAE,MAAM,MAAM,MAAS;AACpD,QAAM,eAAe,YAAY;AAC/B,UAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC,CAAC,CAAC;AACtF,WAAO,oBAAoB,aAAa,WAAW,MAAM;AAAA,EAC3D;AACA,SAAO,EAAE,OAAO,SAAS,WAAW,QAAQ,QAAQ,OAAO,WAAW,aAAa;AACrF;AAEA,SAAS,aAAa,OAA4C,QAAgB;AAChF,QAAM,WAAW,eAAe;AAChC,WAAS,QAAQ,WAAW;AAC5B,WAAS,QAAQ,aAAa,CAAC,MAAM,CAAC,CAAC;AACvC,WAAS,QAAQ,YAAY,KAAK,CAAC;AACnC,QAAM,OAAQ,YAAY,MAAsC;AAAA,IAC9D,CAAC,SAAS,KAAK,SAAS;AAAA,EAC1B;AACA,WAAS,QAAQ,WAAW,IAAI,CAAC;AACjC,SAAO;AACT;AAEA,eAAe,QAAQ,QAAiD,QAAsB;AAC5F,SAAO;AAAA,IACL,SAAS,MAAM,aAAa,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAChD,UAAU,MAAM,eAAe,MAAM;AAAA,IACrC,WAAW,cAAc,OAAO,SAAS;AAAA,IACzC,SAAS,MAAM,iBAAiB,MAAM;AAAA,EACxC;AACF;AAEA,SAAS,WAAW,OAAyB,QAAiD;AAC5F,QAAM,SAAS,MAAM,MAAM,KAAK,KAAK;AACrC,QAAM,WAAW,OAAO,eAAe,KAAK,MAAM;AAClD,QAAM,YAAY,eAAe,OAAO,WAAW,MAAM,SAAS,QAAQ,QAAQ,QAAQ;AAC1F,QAAM,QAAQ;AACd,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAe,QACb,OACA,QACA,SACA;AACA,QAAM,QAAQ,MAAM,WAAW,OAAO,MAAM,OAAO,KAAK;AACxD,QAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,OAAO,OAAO,MAAM;AAC7D,QAAM,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM;AACjD,QAAM,OAAO,MAAM,SAAS,OAAO,SAAS;AAAA,IAC1C,OAAO,OAAO;AAAA,IACd,MAAM,OAAO;AAAA,IACb;AAAA,IACA,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH,UAAU,aAAa,OAAO,MAAM,SAAS,MAAM;AAAA,EACrD;AACF;AAEA,SAAS,cACP,OACA,UACA,SACA,OACA;AACA,QAAM,SAAS,MAAM,MAAM,MAAM,MAAM,WAAW;AAClD,SAAO,cAAc,EAAE,QAAQ,MAAM,QAAQ,UAAU,SAAS,OAAO,CAAC;AAC1E;AAEA,eAAe,WACb,MACA,KACA,OACA;AACA,QAAM,EAAE,QAAQ,SAAS,QAAQ,WAAW,OAAO,UAAU,IAAI;AACjE,QAAM,OAAO,MAAM,UAAU,MAAM,MAAM,SAAS,EAAE,SAAS,OAAO,MAAM,MAAM,GAAG,MAAM,KAAK;AAC9F,QAAM,WAAW,MAAM,oBAAoB,QAAQ,EAAE,SAAS,OAAO,GAAG,WAAW;AAAA,IACjF;AAAA,IACA,OAAO;AAAA,EACT,CAAC;AACD,WAAS,MAAM,UAAU,MAAM,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,MAAM,MAAM,MAAS,CAAC;AACpF,SAAO;AACT;AAEA,eAAe,eACb,QACA,MACA,IACA,OACA,QACA,SACA;AACA,QAAM,WAAW,MAAM,OAAO;AAC9B,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,WAAW,MAAM,kBAAkB,EAAE,MAAM,MAAM,KAAK;AAC5D,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,SAAS,YAAY,EAAE,KAAK,MAAM,QAAQ,MAAM,QAAQ,SAAS,CAAC;AACxE,QAAM,QAAuB;AAAA,IAC3B,OAAO,cAAc;AAAA,MACnB;AAAA,MACA,OAAO,OAAO,YAAY,aAAa,MAAM,SAAS,OAAO,CAAC;AAAA,MAC9D;AAAA,MACA,OAAO,aAAa,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,IACvF,CAAC;AAAA,IACD,QAAQ,gBAAgB,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,EAC3F;AACA,SAAO,EAAE,OAAO,QAAQ,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAChE;AAEA,SAAS,YACP,UACA,QACA,MACA,IACA,QACA;AACA,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,UAAU,OAAO,QAAQ,QAAQ;AACvC,QAAM,SAAS,gBAAgB;AAAA,IAC7B,QAAQ,MAAM,OAAO,GAAG;AAAA,IACxB,SAAS,MAAM,OAAO,GAAG;AAAA,IACzB,OAAO,MAAM;AAAA,EACf,CAAC;AACD,WAAS,QAAQ,OAAO,SAAS;AACjC,SAAO,EAAE,SAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AAC5E;AAEA,eAAe,MACb,OACA,OACA,SACA,OACoB;AACpB,QAAM,EAAE,QAAQ,OAAO,MAAM,IAAI,MAAM,IAAI,MAAM,SAAS,OAAO,OAAO;AACxE,QAAM,QAAQ,MAAM,QAAQ,OAAO,EAAE,QAAQ,MAAM,MAAM,GAAG,OAAO;AACnE,QAAM,EAAE,OAAO,QAAQ,WAAW,OAAO,QAAQ,UAAU,SAAS,UAAU,IAAI;AAClF,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,SAAS,YAAY;AAC3B,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WAAW,MAAM,cAAc,QAAQ,SAAS,QAAQ,IAAI,UAAU,GAAG,QAAQ;AACvF,WAAS,QAAQ,kBAAkB,QAAQ,CAAC;AAC5C,QAAM,QAAQ,WAAW,UAAU,SAAS;AAC5C,QAAM,MAAM,OAAO,WAAW,MAAM,CAAC;AACrC,QAAM,SAAS,YAAY,UAAU,MAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,KAAK,CAAC;AAC3F,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK;AAChD,WAAS,QAAQ,iBAAiB,EAAE,OAAO,MAAM,CAAC,CAAC;AACnD,QAAM,SAAS,YAAY,UAAU,QAAQ,MAAM,IAAI,MAAM,MAAM;AACnE,QAAM,CAAC,UAAU,MAAM,IAAI,CAAC,eAAe,GAAG,cAAc,MAAM,CAAC;AACnE,QAAM,QAAQ,QAAQ,SAAU,MAAM,MAAM,aAAa;AACzD,MAAI;AACJ,QAAM,SAAS,QAAQ,WAAW,OAAO,QAAQ,MAAM,MAAM,QAAQ,MAAM,IAAI;AAC/E,QAAM,cAAc,kBAAkB,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,UAAU,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,IAC9C,OAAO;AAAA,IACP,OAAO,YAAY,KAAK;AAAA,IACxB,GAAI,SAAS,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,EAC1C,CAAC;AACD,QAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,EAAE,QAAQ,OAAO,UAAU,KAAK,YAAY,CAAC;AAC/F,WAAS;AACT,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,UAAU,MAAM,OAAO,OAAO;AAAA,IAClC,KAAK;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,GAAI,SAAS,EAAE,MAAM,MAAM,OAAO,SAAS,GAAG,UAAU,OAAO,SAAS,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,EAC5F,CAAC;AACD,QAAM,QAAQ,MAAM,kBAAkB;AACtC,QAAM,SAAS,EAAE,SAAS,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM,EAAE;AACxE,QAAM,QAAQ,KAAK,QAAQ,kBAAkB;AAC7C,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAAA,IAC3B;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAG,SAAS,OAAO,KAAK;AAAA,MACxB,OAAO,MAAM;AAAA,MACb,OAAO;AAAA,MACP,SAAS,MAAM;AAAA,MACf,UAAU;AAAA,MACV,UAAU,SAAS,SAAS;AAAA,MAC5B,MAAM,SAAS,OAAO,SAAS;AAAA,MAC/B,UAAU,QAAQ,eAAe,IAAI,IAAI,cAAc,MAAM,SAAS,MAAM,EAAE;AAAA,IAChF;AAAA,IACA;AAAA,EACF;AACA,QAAM,YAAY,cAAc;AAChC,QAAM,YAAY,MAAM,eAAe,EAAE;AAAA,IACvC;AAAA,MACE,WAAW,UAAU;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,KAAK;AAAA,MACL,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,QAAQ,UAAU,KAAK,CAAC;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,UAAQ,OAAO,CAAC,SAAS,eAAe,SAAS,CAAC;AAClD,MAAI;AACJ,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAI,SAAS,EAAE,MAAM,UAAU,IAAI,CAAC;AAAA,MACpC,UAAU;AAAA,MACV,OAAO,OAAO,UAAU,OAAO,MAAM,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,cAAc;AAAA,IAC5B,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,KAAK;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,IACd,aAAa,OAAO;AAAA,IACpB,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,EAC5C,CAAC;AACD,QAAM,MAAM,MAAM,QAAQ,YAAY;AACtC,QAAM,WAAW,MAAM,WAAW,OAAO,YAAY,EAAE,OAAO,OAAO,MAAM,CAAC;AAC5E,QAAM,QAAQ,YAAY,EAAE,OAAO,UAAU,MAAM,CAAC;AACpD,QAAM,UAAU,MAAM,OAAO;AAAA,IAC3B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,KAAK;AAAA,MACL,OAAO,OAAO,gBAAgB,YAAY,YAAY,EAAE,eAAe,GAAG,OAAO;AAAA,MACjF,GAAG;AAAA,MACH,GAAI,SACA,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS,IAC1E,CAAC;AAAA,MACL,OAAO,MAAM,MAAM;AAAA,MACnB,OAAO,cAAc;AAAA,MACrB,QAAQ,cAAc;AAAA,MACtB,WAAW,UAAU;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,QAAQ,cAAc,OAAO,UAAU,QAAQ,KAAK;AAAA,MACpD,OAAO,MAAM;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,KAAK,IAAI;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AACA,UAAQ;AACR,YAAU,OAAO;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,KAAK;AAAA,IACL,MAAM;AAAA,IACN,GAAI,MAAM,QAAQ,UAAU,IAAI;AAAA,IAChC,QAAQ,OAAO;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ,UAAU,cAAc;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,QAAQ,cAAc;AAAA,IACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD,CAAC;AACD,QAAM,cAAc,OAAO,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACpE,SAAO,UAAU,OAAO;AAAA,IACtB,GAAI,MAAM,eAAe,QAAQ,MAAM,IAAI,OAAO,cAAc,UAAU,OAAO;AAAA,IACjF;AAAA,IACA,OAAO,EAAE,OAAO,MAAM,OAAO,QAAQ;AAAA,IACrC,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,SAAS,cAAc,EAAE,QAAQ,MAAM,QAAQ,KAAK,MAAM,UAAU,WAAW,CAAC;AAAA,IAChF;AAAA,IACA,QAAQ,MAAM,aAAa,EAAE,GAAG,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,MAAM,CAAC;AAAA,IAChF,KAAK;AAAA,IACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,SAAS,YAAY,OAAO,OAAO,CAAC,OAAO,SAAS,SAAS,CAAC;AAAA,IAC9D,SAAS;AAAA,MACP,KAAK;AAAA,MACL,MAAM,CAAC,QAAQ,WAAW,QAAQ,GAAG;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR;AAAA,MACA,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,MAAM,KAAK,EAAE,IAAI,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,MAAM,QAAsB;AAC1C,SAAO,OAAO,QAAkC;AAC9C,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAQ,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG;AAAA,EAClE;AACF;AAEO,SAAS,eACd,OACA,UAA8B,CAAC,GACX;AACpB,QAAM,QAAQ,IAAI,MAAM;AACxB,cAAY,OAAO,KAAK;AACxB,QAAM,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS,KAAK;AAC5D,OAAK,MAAM,MAAM,MAAS;AAC1B,mBAAiB,OAAO,IAAI;AAC5B,SAAO;AACT;",
   "names": []
 }

package/dist/net.js

@@ -7,6 +7,8 @@ function pageOnly(transport) {
   return transport?.traits?.crossOrigin === "cors" && !linkedExit(transport);
 }
 const empty = /* @__PURE__ */ new Set([101, 103, 204, 205, 304]);
+const redirects = /* @__PURE__ */ new Set([301, 302, 303, 307, 308]);
+const bare = (url) => url.split("#")[0];
 function kernelPort(url) {
   const host = new URL(url).hostname.replace(/\.+$/, "");
   if (!kernelHost(host)) return void 0;
@@ -45,6 +47,11 @@ function transportFetch(transport, origin, native = globalThis.fetch.bind(global
       ...body ? { body } : {},
       signal: request.signal
     });
+    const redirected = response.redirected || response.url && bare(response.url) !== bare(request.url) || transport.traits?.manualRedirects && redirects.has(response.status);
+    if (request.redirect === "error" && redirected) {
+      await stream(response.body).cancel().catch(() => void 0);
+      throw new TypeError("unexpected redirect");
+    }
     return new Response(empty.has(response.status) ? null : stream(response.body), {
       status: response.status,
       statusText: response.statusText ?? "",

package/dist/net.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/net.ts"],
-  "sourcesContent": ["import { FACADE_PORT, kernelHost, ownKernelServer } from './kernel/loopback.ts';\n\nexport interface TransportResponse {\n  status: number;\n  statusText?: string;\n  headers: HeadersInit;\n  body: AsyncIterable<Uint8Array>;\n}\n\nexport interface Transport {\n  traits?: {\n    crossOrigin?: 'cors' | 'any';\n    manualRedirects?: boolean;\n    unavailable?: boolean;\n    exit?: TransportExit;\n  };\n  fetch(request: {\n    url: string;\n    method: string;\n    headers: [string, string][];\n    body?: Uint8Array;\n    signal?: AbortSignal;\n  }): Promise<TransportResponse>;\n}\n\nexport interface TransportExit {\n  kind: string;\n  caps: string[];\n}\n\nexport function linkedExit(transport: Transport | undefined): TransportExit | undefined {\n  const exit = transport?.traits?.exit;\n  return typeof exit?.kind === 'string' ? exit : undefined;\n}\n\nexport function pageOnly(transport: Transport | undefined): boolean {\n  return transport?.traits?.crossOrigin === 'cors' && !linkedExit(transport);\n}\n\nexport type Loopback = (\n  request: Request,\n  options: { port: number; signal?: AbortSignal }\n) => Promise<Response>;\n\nconst empty = new Set([101, 103, 204, 205, 304]);\n\nexport function kernelPort(url: string): number | undefined {\n  const host = new URL(url).hostname.replace(/\\.+$/, '');\n  if (!kernelHost(host)) return undefined;\n  if (!ownKernelServer(host))\n    throw new TypeError(\n      `${host} isn't a kernel server SLICC may reach: use <port>.kernel.localhost with a port from 1 to 65535 other than ${FACADE_PORT}, the CDP facade`\n    );\n  return Number(host.split('.')[0]);\n}\n\nfunction stream(body: AsyncIterable<Uint8Array>): ReadableStream<Uint8Array> {\n  const iterator = body[Symbol.asyncIterator]();\n  return new ReadableStream({\n    async pull(controller) {\n      const next = await iterator.next();\n      if (next.done) controller.close();\n      else controller.enqueue(next.value);\n    },\n    async cancel() {\n      await iterator.return?.();\n    },\n  });\n}\n\nexport function transportFetch(\n  transport: Transport,\n  origin: string,\n  native: typeof fetch = globalThis.fetch.bind(globalThis),\n  loopback?: Loopback\n): typeof fetch {\n  return async (input, init) => {\n    const request = new Request(input, init);\n    const port = kernelPort(request.url);\n    if (loopback && port) return loopback(request, { port, signal: request.signal });\n    if (\n      new URL(request.url).origin === origin ||\n      transport.traits?.unavailable ||\n      request.credentials === 'include'\n    ) {\n      return native(request);\n    }\n    const body = ['GET', 'HEAD'].includes(request.method)\n      ? undefined\n      : new Uint8Array(await request.arrayBuffer());\n    const response = await transport.fetch({\n      url: request.url,\n      method: request.method,\n      headers: [...request.headers],\n      ...(body ? { body } : {}),\n      signal: request.signal,\n    });\n    return new Response(empty.has(response.status) ? null : stream(response.body), {\n      status: response.status,\n      statusText: response.statusText ?? '',\n      headers: response.headers,\n    });\n  };\n}\n"],
-  "mappings": "AAAA,SAAS,aAAa,YAAY,uBAAuB;AA8BlD,SAAS,WAAW,WAA6D;AACtF,QAAM,OAAO,WAAW,QAAQ;AAChC,SAAO,OAAO,MAAM,SAAS,WAAW,OAAO;AACjD;AAEO,SAAS,SAAS,WAA2C;AAClE,SAAO,WAAW,QAAQ,gBAAgB,UAAU,CAAC,WAAW,SAAS;AAC3E;AAOA,MAAM,QAAQ,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AAExC,SAAS,WAAW,KAAiC;AAC1D,QAAM,OAAO,IAAI,IAAI,GAAG,EAAE,SAAS,QAAQ,QAAQ,EAAE;AACrD,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,MAAI,CAAC,gBAAgB,IAAI;AACvB,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,8GAA8G,WAAW;AAAA,IAClI;AACF,SAAO,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC;AAClC;AAEA,SAAS,OAAO,MAA6D;AAC3E,QAAM,WAAW,KAAK,OAAO,aAAa,EAAE;AAC5C,SAAO,IAAI,eAAe;AAAA,IACxB,MAAM,KAAK,YAAY;AACrB,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAI,KAAK,KAAM,YAAW,MAAM;AAAA,UAC3B,YAAW,QAAQ,KAAK,KAAK;AAAA,IACpC;AAAA,IACA,MAAM,SAAS;AACb,YAAM,SAAS,SAAS;AAAA,IAC1B;AAAA,EACF,CAAC;AACH;AAEO,SAAS,eACd,WACA,QACA,SAAuB,WAAW,MAAM,KAAK,UAAU,GACvD,UACc;AACd,SAAO,OAAO,OAAO,SAAS;AAC5B,UAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;AACvC,UAAM,OAAO,WAAW,QAAQ,GAAG;AACnC,QAAI,YAAY,KAAM,QAAO,SAAS,SAAS,EAAE,MAAM,QAAQ,QAAQ,OAAO,CAAC;AAC/E,QACE,IAAI,IAAI,QAAQ,GAAG,EAAE,WAAW,UAChC,UAAU,QAAQ,eAClB,QAAQ,gBAAgB,WACxB;AACA,aAAO,OAAO,OAAO;AAAA,IACvB;AACA,UAAM,OAAO,CAAC,OAAO,MAAM,EAAE,SAAS,QAAQ,MAAM,IAChD,SACA,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;AAC9C,UAAM,WAAW,MAAM,UAAU,MAAM;AAAA,MACrC,KAAK,QAAQ;AAAA,MACb,QAAQ,QAAQ;AAAA,MAChB,SAAS,CAAC,GAAG,QAAQ,OAAO;AAAA,MAC5B,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,MACvB,QAAQ,QAAQ;AAAA,IAClB,CAAC;AACD,WAAO,IAAI,SAAS,MAAM,IAAI,SAAS,MAAM,IAAI,OAAO,OAAO,SAAS,IAAI,GAAG;AAAA,MAC7E,QAAQ,SAAS;AAAA,MACjB,YAAY,SAAS,cAAc;AAAA,MACnC,SAAS,SAAS;AAAA,IACpB,CAAC;AAAA,EACH;AACF;",
+  "sourcesContent": ["import { FACADE_PORT, kernelHost, ownKernelServer } from './kernel/loopback.ts';\n\nexport interface TransportResponse {\n  url?: string;\n  redirected?: boolean;\n  status: number;\n  statusText?: string;\n  headers: HeadersInit;\n  body: AsyncIterable<Uint8Array>;\n}\n\nexport interface Transport {\n  traits?: {\n    crossOrigin?: 'cors' | 'any';\n    manualRedirects?: boolean;\n    unavailable?: boolean;\n    exit?: TransportExit;\n  };\n  fetch(request: {\n    url: string;\n    method: string;\n    headers: [string, string][];\n    body?: Uint8Array;\n    signal?: AbortSignal;\n  }): Promise<TransportResponse>;\n}\n\nexport interface TransportExit {\n  kind: string;\n  caps: string[];\n}\n\nexport function linkedExit(transport: Transport | undefined): TransportExit | undefined {\n  const exit = transport?.traits?.exit;\n  return typeof exit?.kind === 'string' ? exit : undefined;\n}\n\nexport function pageOnly(transport: Transport | undefined): boolean {\n  return transport?.traits?.crossOrigin === 'cors' && !linkedExit(transport);\n}\n\nexport type Loopback = (\n  request: Request,\n  options: { port: number; signal?: AbortSignal }\n) => Promise<Response>;\n\nconst empty = new Set([101, 103, 204, 205, 304]);\nconst redirects = new Set([301, 302, 303, 307, 308]);\nconst bare = (url: string) => url.split('#')[0];\n\nexport function kernelPort(url: string): number | undefined {\n  const host = new URL(url).hostname.replace(/\\.+$/, '');\n  if (!kernelHost(host)) return undefined;\n  if (!ownKernelServer(host))\n    throw new TypeError(\n      `${host} isn't a kernel server SLICC may reach: use <port>.kernel.localhost with a port from 1 to 65535 other than ${FACADE_PORT}, the CDP facade`\n    );\n  return Number(host.split('.')[0]);\n}\n\nfunction stream(body: AsyncIterable<Uint8Array>): ReadableStream<Uint8Array> {\n  const iterator = body[Symbol.asyncIterator]();\n  return new ReadableStream({\n    async pull(controller) {\n      const next = await iterator.next();\n      if (next.done) controller.close();\n      else controller.enqueue(next.value);\n    },\n    async cancel() {\n      await iterator.return?.();\n    },\n  });\n}\n\nexport function transportFetch(\n  transport: Transport,\n  origin: string,\n  native: typeof fetch = globalThis.fetch.bind(globalThis),\n  loopback?: Loopback\n): typeof fetch {\n  return async (input, init) => {\n    const request = new Request(input, init);\n    const port = kernelPort(request.url);\n    if (loopback && port) return loopback(request, { port, signal: request.signal });\n    if (\n      new URL(request.url).origin === origin ||\n      transport.traits?.unavailable ||\n      request.credentials === 'include'\n    ) {\n      return native(request);\n    }\n    const body = ['GET', 'HEAD'].includes(request.method)\n      ? undefined\n      : new Uint8Array(await request.arrayBuffer());\n    const response = await transport.fetch({\n      url: request.url,\n      method: request.method,\n      headers: [...request.headers],\n      ...(body ? { body } : {}),\n      signal: request.signal,\n    });\n    const redirected =\n      response.redirected ||\n      (response.url && bare(response.url) !== bare(request.url)) ||\n      (transport.traits?.manualRedirects && redirects.has(response.status));\n    if (request.redirect === 'error' && redirected) {\n      await stream(response.body)\n        .cancel()\n        .catch(() => undefined);\n      throw new TypeError('unexpected redirect');\n    }\n    return new Response(empty.has(response.status) ? null : stream(response.body), {\n      status: response.status,\n      statusText: response.statusText ?? '',\n      headers: response.headers,\n    });\n  };\n}\n"],
+  "mappings": "AAAA,SAAS,aAAa,YAAY,uBAAuB;AAgClD,SAAS,WAAW,WAA6D;AACtF,QAAM,OAAO,WAAW,QAAQ;AAChC,SAAO,OAAO,MAAM,SAAS,WAAW,OAAO;AACjD;AAEO,SAAS,SAAS,WAA2C;AAClE,SAAO,WAAW,QAAQ,gBAAgB,UAAU,CAAC,WAAW,SAAS;AAC3E;AAOA,MAAM,QAAQ,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AAC/C,MAAM,YAAY,oBAAI,IAAI,CAAC,KAAK,KAAK,KAAK,KAAK,GAAG,CAAC;AACnD,MAAM,OAAO,CAAC,QAAgB,IAAI,MAAM,GAAG,EAAE,CAAC;AAEvC,SAAS,WAAW,KAAiC;AAC1D,QAAM,OAAO,IAAI,IAAI,GAAG,EAAE,SAAS,QAAQ,QAAQ,EAAE;AACrD,MAAI,CAAC,WAAW,IAAI,EAAG,QAAO;AAC9B,MAAI,CAAC,gBAAgB,IAAI;AACvB,UAAM,IAAI;AAAA,MACR,GAAG,IAAI,8GAA8G,WAAW;AAAA,IAClI;AACF,SAAO,OAAO,KAAK,MAAM,GAAG,EAAE,CAAC,CAAC;AAClC;AAEA,SAAS,OAAO,MAA6D;AAC3E,QAAM,WAAW,KAAK,OAAO,aAAa,EAAE;AAC5C,SAAO,IAAI,eAAe;AAAA,IACxB,MAAM,KAAK,YAAY;AACrB,YAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAI,KAAK,KAAM,YAAW,MAAM;AAAA,UAC3B,YAAW,QAAQ,KAAK,KAAK;AAAA,IACpC;AAAA,IACA,MAAM,SAAS;AACb,YAAM,SAAS,SAAS;AAAA,IAC1B;AAAA,EACF,CAAC;AACH;AAEO,SAAS,eACd,WACA,QACA,SAAuB,WAAW,MAAM,KAAK,UAAU,GACvD,UACc;AACd,SAAO,OAAO,OAAO,SAAS;AAC5B,UAAM,UAAU,IAAI,QAAQ,OAAO,IAAI;AACvC,UAAM,OAAO,WAAW,QAAQ,GAAG;AACnC,QAAI,YAAY,KAAM,QAAO,SAAS,SAAS,EAAE,MAAM,QAAQ,QAAQ,OAAO,CAAC;AAC/E,QACE,IAAI,IAAI,QAAQ,GAAG,EAAE,WAAW,UAChC,UAAU,QAAQ,eAClB,QAAQ,gBAAgB,WACxB;AACA,aAAO,OAAO,OAAO;AAAA,IACvB;AACA,UAAM,OAAO,CAAC,OAAO,MAAM,EAAE,SAAS,QAAQ,MAAM,IAChD,SACA,IAAI,WAAW,MAAM,QAAQ,YAAY,CAAC;AAC9C,UAAM,WAAW,MAAM,UAAU,MAAM;AAAA,MACrC,KAAK,QAAQ;AAAA,MACb,QAAQ,QAAQ;AAAA,MAChB,SAAS,CAAC,GAAG,QAAQ,OAAO;AAAA,MAC5B,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC;AAAA,MACvB,QAAQ,QAAQ;AAAA,IAClB,CAAC;AACD,UAAM,aACJ,SAAS,cACR,SAAS,OAAO,KAAK,SAAS,GAAG,MAAM,KAAK,QAAQ,GAAG,KACvD,UAAU,QAAQ,mBAAmB,UAAU,IAAI,SAAS,MAAM;AACrE,QAAI,QAAQ,aAAa,WAAW,YAAY;AAC9C,YAAM,OAAO,SAAS,IAAI,EACvB,OAAO,EACP,MAAM,MAAM,MAAS;AACxB,YAAM,IAAI,UAAU,qBAAqB;AAAA,IAC3C;AACA,WAAO,IAAI,SAAS,MAAM,IAAI,SAAS,MAAM,IAAI,OAAO,OAAO,SAAS,IAAI,GAAG;AAAA,MAC7E,QAAQ,SAAS;AAAA,MACjB,YAAY,SAAS,cAAc;AAAA,MACnC,SAAS,SAAS;AAAA,IACpB,CAAC;AAAA,EACH;AACF;",
   "names": []
 }

package/dist/types/licks/attachment.d.ts

@@ -0,0 +1,11 @@
+export declare const GATEWAY = "https://ntfy.sliccy.ai";
+export declare const ATTACHMENT_LIMIT: number;
+export declare const ATTACHMENT_TIMEOUT_MS = 10000;
+export interface Attachment {
+    url: string;
+    name?: string;
+    size?: number;
+}
+export declare function attachmentLabel(attachment: Attachment): string;
+export declare function attachmentLine(attachment: Attachment): string;
+export declare function attachmentPart(attachment: Attachment, fetcher: typeof fetch | undefined): Promise<string>;

package/dist/types/licks/events.d.ts

@@ -1,3 +1,2 @@
 import type { WebhookDelivery } from './sources.ts';
-export declare function attachmentLine(value: unknown): string;
 export declare function webhookDelivery(text: string): WebhookDelivery;

package/dist/types/licks/index.d.ts

@@ -24,7 +24,7 @@ export interface LicksSetup {
         cronUser?: (target: LickTarget, place: LickDir) => string | undefined;
     }): LickSources;
 }
-export declare function setupLicks(registry: Registry): LicksSetup;
+export declare function setupLicks(registry: Registry, fetcher?: typeof fetch): LicksSetup;
 export type { Lick, LickChannel } from './lick.ts';
 export type { LickEvent, Licks } from './licks.ts';
 export type { LickSources, WebhookDelivery } from './sources.ts';

package/dist/types/licks/sources.d.ts

@@ -2,6 +2,7 @@ import type { Context } from '@earendil-works/chord';
 import type { Conversation, Harness } from '@earendil-works/pi-durable';
 import type { ExecutionEnv } from '@earendil-works/pi-durable/env';
 import type { Activity } from '../kernel/activity.ts';
+import { type Attachment } from './attachment.ts';
 import { type BootFacts } from './boot.ts';
 import { type ConfigError, type WebhookEntry } from './config.ts';
 import type { LickTarget } from './lick.ts';
@@ -18,6 +19,7 @@ export interface LickSourcesOptions {
     activity?: Activity;
     dirs?: () => readonly LickDir[] | Promise<readonly LickDir[]>;
     cronUser?: (target: LickTarget, place: LickDir) => string | undefined;
+    fetch?: typeof fetch;
 }
 export interface LickDir {
     dir: string;
@@ -32,7 +34,9 @@ export interface WebhookDelivery {
     headers?: Record<string, string>;
     body: unknown;
     verified?: boolean;
+    attachment?: Attachment;
 }
+export declare function withAttachment(delivery: WebhookDelivery, fetcher: typeof fetch | undefined): Promise<WebhookDelivery>;
 export interface LickSources {
     start(context: Context): Promise<void>;
     reconcile(context: Context): Promise<void>;

package/dist/types/net.d.ts

@@ -1,4 +1,6 @@
 export interface TransportResponse {
+    url?: string;
+    redirected?: boolean;
     status: number;
     statusText?: string;
     headers: HeadersInit;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-agent",
-  "version": "6.1.3",
+  "version": "6.2.1",
   "description": "SLICC's agent core on pi durable: an agent worker, session storage, remoting and pi extensions",
   "type": "module",
   "license": "Apache-2.0",
@@ -67,9 +67,9 @@
     "@ai-ecoverse/slicc-scrub": "1.0.0",
     "@ai-ecoverse/slicc-shared-web": "1.24.2",
     "@ai-ecoverse/slicc-spectrum": "1.86.6",
-    "@ai-ecoverse/wasm-bash": "5.3.0-19",
-    "@ai-ecoverse/wasm-coreutils": "9.12.0-9",
-    "@ai-ecoverse/wasm-git": "2.55.0-16",
+    "@ai-ecoverse/wasm-bash": "5.3.0-20",
+    "@ai-ecoverse/wasm-coreutils": "9.12.0-10",
+    "@ai-ecoverse/wasm-git": "2.55.0-17",
     "@biomejs/biome": "2.5.15",
     "@types/node": "24.19.2",
     "esbuild": "0.28.2",
@@ -82,7 +82,7 @@
     "typescript": "7.0.2"
   },
   "dependencies": {
-    "@ai-ecoverse/slicc-browsers": "1.8.4",
+    "@ai-ecoverse/slicc-browsers": "1.8.5",
     "@ai-ecoverse/slicc-vault": "1.9.2",
     "@aws-sdk/middleware-websocket": "^3.972.54",
     "@earendil-works/chord": "1.3.0",