@ai-ecoverse/slicc-agent 6.11.1 → 6.11.3

package/dist/kernel/jobs.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/kernel/jobs.ts"],
+  "sourcesContent": ["import { redacted } from '../monitor/redact.ts';\nimport type { KernelClient, KernelProcess } from './client.ts';\n\nexport type Job = { pid: number; pgid: number; command: string };\n\nexport interface Jobs {\n  started(client: KernelClient, command: string, process: KernelProcess): Promise<void>;\n  list(): Job[];\n  adopt(jobs: readonly Job[]): void;\n  watch(listener: () => Promise<void>): () => void;\n}\n\nexport const JOBS_MS = 2000;\n\ntype Ps = Pick<KernelClient, 'ps'>;\n\ntype Row = Awaited<ReturnType<NonNullable<KernelClient['ps']>>>[number];\n\nexport function shortCommand(command: string): string {\n  const lines = command.trim().split('\\n');\n  const first = redacted(lines[0] as string);\n  return lines.length > 1 && !first.endsWith('\u2026') ? `${first} \u2026` : first;\n}\n\nexport function backgroundJobs(client: Ps, ms = JOBS_MS): Jobs {\n  const jobs = new Map<number, Job & { client: Ps }>();\n  const running = new Set<number>();\n  const listeners = new Set<() => Promise<void>>();\n  let timer: ReturnType<typeof setInterval> | undefined;\n  const list = () => [...jobs.values()].map(({ pid, pgid, command }) => ({ pid, pgid, command }));\n  const orphans = (table: readonly Row[], pgid: number, after: number) =>\n    table.filter(\n      (row) =>\n        row.ppid === 1 &&\n        row.pgid === pgid &&\n        row.pid > after &&\n        row.state !== 'Z' &&\n        !running.has(row.pid) &&\n        !jobs.has(row.pid)\n    );\n  const keep = (rows: readonly Row[], pgid: number, command: string, owner: Ps) => {\n    for (const row of rows) jobs.set(row.pid, { pid: row.pid, pgid, command, client: owner });\n  };\n  const schedule = () => {\n    const wanted = jobs.size > 0 && listeners.size > 0;\n    if (wanted && !timer) timer = setInterval(() => void prune(), ms);\n    if (!wanted && timer) {\n      clearInterval(timer);\n      timer = undefined;\n    }\n  };\n  const changed = async () => {\n    schedule();\n    await Promise.all([...listeners].map((listener) => listener()));\n  };\n  const sweep = (owner: Ps, table: readonly Row[]) => {\n    const alive = new Set(table.filter((row) => row.state !== 'Z').map((row) => row.pid));\n    let gone = false;\n    for (const [pid, job] of [...jobs])\n      if (job.client === owner && !alive.has(pid)) {\n        gone = jobs.delete(pid);\n        keep(orphans(table, job.pgid, pid), job.pgid, job.command, owner);\n      }\n    return gone;\n  };\n  async function prune(): Promise<void> {\n    let gone = false;\n    for (const each of new Set([...jobs.values()].map((job) => job.client))) {\n      const table = await each.ps?.().catch(() => undefined);\n      if (table && sweep(each, table)) gone = true;\n    }\n    if (gone) await changed();\n  }\n  async function survivors(owner: Ps, command: string, process: KernelProcess): Promise<void> {\n    const table = await owner.ps?.().catch(() => undefined);\n    if (!table) return;\n    const found = orphans(table, process.pgid, process.pid);\n    keep(found, process.pgid, shortCommand(command), owner);\n    if (sweep(owner, table) || found.length) await changed();\n  }\n  return {\n    async started(owner, command, process) {\n      if (!owner.ps) return;\n      running.add(process.pid);\n      const ended = () => {\n        running.delete(process.pid);\n        return survivors(owner, command, process);\n      };\n      await process.exited.then(ended, ended).catch(() => undefined);\n    },\n    list,\n    adopt(adopted) {\n      for (const job of adopted) if (!jobs.has(job.pid)) jobs.set(job.pid, { ...job, client });\n      schedule();\n    },\n    watch(listener) {\n      listeners.add(listener);\n      schedule();\n      return () => {\n        listeners.delete(listener);\n        schedule();\n      };\n    },\n  };\n}\n"],
+  "mappings": "AAAA,SAAS,gBAAgB;AAYlB,MAAM,UAAU;AAMhB,SAAS,aAAa,SAAyB;AACpD,QAAM,QAAQ,QAAQ,KAAK,EAAE,MAAM,IAAI;AACvC,QAAM,QAAQ,SAAS,MAAM,CAAC,CAAW;AACzC,SAAO,MAAM,SAAS,KAAK,CAAC,MAAM,SAAS,QAAG,IAAI,GAAG,KAAK,YAAO;AACnE;AAEO,SAAS,eAAe,QAAY,KAAK,SAAe;AAC7D,QAAM,OAAO,oBAAI,IAAkC;AACnD,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,YAAY,oBAAI,IAAyB;AAC/C,MAAI;AACJ,QAAM,OAAO,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,MAAM,QAAQ,OAAO,EAAE,KAAK,MAAM,QAAQ,EAAE;AAC9F,QAAM,UAAU,CAAC,OAAuB,MAAc,UACpD,MAAM;AAAA,IACJ,CAAC,QACC,IAAI,SAAS,KACb,IAAI,SAAS,QACb,IAAI,MAAM,SACV,IAAI,UAAU,OACd,CAAC,QAAQ,IAAI,IAAI,GAAG,KACpB,CAAC,KAAK,IAAI,IAAI,GAAG;AAAA,EACrB;AACF,QAAM,OAAO,CAAC,MAAsB,MAAc,SAAiB,UAAc;AAC/E,eAAW,OAAO,KAAM,MAAK,IAAI,IAAI,KAAK,EAAE,KAAK,IAAI,KAAK,MAAM,SAAS,QAAQ,MAAM,CAAC;AAAA,EAC1F;AACA,QAAM,WAAW,MAAM;AACrB,UAAM,SAAS,KAAK,OAAO,KAAK,UAAU,OAAO;AACjD,QAAI,UAAU,CAAC,MAAO,SAAQ,YAAY,MAAM,KAAK,MAAM,GAAG,EAAE;AAChE,QAAI,CAAC,UAAU,OAAO;AACpB,oBAAc,KAAK;AACnB,cAAQ;AAAA,IACV;AAAA,EACF;AACA,QAAM,UAAU,YAAY;AAC1B,aAAS;AACT,UAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,EAAE,IAAI,CAAC,aAAa,SAAS,CAAC,CAAC;AAAA,EAChE;AACA,QAAM,QAAQ,CAAC,OAAW,UAA0B;AAClD,UAAM,QAAQ,IAAI,IAAI,MAAM,OAAO,CAAC,QAAQ,IAAI,UAAU,GAAG,EAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC;AACpF,QAAI,OAAO;AACX,eAAW,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,IAAI;AAC/B,UAAI,IAAI,WAAW,SAAS,CAAC,MAAM,IAAI,GAAG,GAAG;AAC3C,eAAO,KAAK,OAAO,GAAG;AACtB,aAAK,QAAQ,OAAO,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,IAAI,SAAS,KAAK;AAAA,MAClE;AACF,WAAO;AAAA,EACT;AACA,iBAAe,QAAuB;AACpC,QAAI,OAAO;AACX,eAAW,QAAQ,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG;AACvE,YAAM,QAAQ,MAAM,KAAK,KAAK,EAAE,MAAM,MAAM,MAAS;AACrD,UAAI,SAAS,MAAM,MAAM,KAAK,EAAG,QAAO;AAAA,IAC1C;AACA,QAAI,KAAM,OAAM,QAAQ;AAAA,EAC1B;AACA,iBAAe,UAAU,OAAW,SAAiB,SAAuC;AAC1F,UAAM,QAAQ,MAAM,MAAM,KAAK,EAAE,MAAM,MAAM,MAAS;AACtD,QAAI,CAAC,MAAO;AACZ,UAAM,QAAQ,QAAQ,OAAO,QAAQ,MAAM,QAAQ,GAAG;AACtD,SAAK,OAAO,QAAQ,MAAM,aAAa,OAAO,GAAG,KAAK;AACtD,QAAI,MAAM,OAAO,KAAK,KAAK,MAAM,OAAQ,OAAM,QAAQ;AAAA,EACzD;AACA,SAAO;AAAA,IACL,MAAM,QAAQ,OAAO,SAAS,SAAS;AACrC,UAAI,CAAC,MAAM,GAAI;AACf,cAAQ,IAAI,QAAQ,GAAG;AACvB,YAAM,QAAQ,MAAM;AAClB,gBAAQ,OAAO,QAAQ,GAAG;AAC1B,eAAO,UAAU,OAAO,SAAS,OAAO;AAAA,MAC1C;AACA,YAAM,QAAQ,OAAO,KAAK,OAAO,KAAK,EAAE,MAAM,MAAM,MAAS;AAAA,IAC/D;AAAA,IACA;AAAA,IACA,MAAM,SAAS;AACb,iBAAW,OAAO,QAAS,KAAI,CAAC,KAAK,IAAI,IAAI,GAAG,EAAG,MAAK,IAAI,IAAI,KAAK,EAAE,GAAG,KAAK,OAAO,CAAC;AACvF,eAAS;AAAA,IACX;AAAA,IACA,MAAM,UAAU;AACd,gBAAU,IAAI,QAAQ;AACtB,eAAS;AACT,aAAO,MAAM;AACX,kBAAU,OAAO,QAAQ;AACzB,iBAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/licks/boot.js

@@ -7,7 +7,7 @@ const LicksHostDoc = defineDoc({
   scope: "session",
   initial: () => ({ cron: {}, agent: null, boot: null, mark: 0, upgrades: 0 })
 });
-const BACKGROUND = /(?:&\s*$|&\s*disown\b|\bnohup\b|\bsetsid\b)/m;
+const LISTED = 5;
 function bashCommands(entries, after) {
   const commands = [];
   for (const entry of entries) {
@@ -32,8 +32,13 @@ function upgraded(from, to, upgrades) {
     eventId: `${from}->${to}#${upgrades}`
   };
 }
-function restarted(boot, commands) {
-  const background = commands.filter((command) => BACKGROUND.test(command)).slice(-5);
+function backgroundList(jobs) {
+  const commands = [...new Set(jobs.map((job) => job.command))];
+  const more = commands.length - LISTED;
+  return more > 0 ? [...commands.slice(-LISTED), `\u2026and ${more} more`] : commands;
+}
+function restarted(boot, jobs) {
+  const background = backgroundList(jobs);
   return {
     channel: "session-reload",
     source: "kernel",
@@ -45,16 +50,18 @@ ${background.join("\n")}` : "Files are unchanged. Start again whatever you still
     eventId: `boot:${boot}`
   };
 }
-async function bootLicks(harness, cone, deliver, facts, context) {
+async function bootLicks(harness, cone, deliver, facts, context, jobs, listen) {
   const state = await harness.snapshot(LicksHostDoc, context);
+  listen?.();
   const previous = state?.agent ?? null;
   if (previous !== null && previous !== facts.version)
     await deliver(upgraded(previous, facts.version, state?.upgrades ?? 0), context);
   const { entries } = await cone.context(context);
+  const before = state?.jobs ?? [];
   if (facts.boot !== null && state?.boot && facts.boot !== state.boot) {
     const commands = bashCommands(entries, state.mark);
-    if (commands.length) await deliver(restarted(facts.boot, commands), context);
-  }
+    if (commands.length || before.length) await deliver(restarted(facts.boot, before), context);
+  } else if (facts.boot !== null && facts.boot === state?.boot) jobs?.adopt(before);
   const { entries: after } = await cone.context(context);
   const mark = Number(after.at(-1)?.id ?? 0);
   await harness.commit(async (tx) => {
@@ -65,11 +72,42 @@ async function bootLicks(harness, cone, deliver, facts, context) {
       doc.boot = facts.boot;
       doc.mark = mark;
     }
+    doc.jobs = jobs?.list() ?? [];
   }, context);
 }
+function recordJobs(harness, jobs, context) {
+  let chain = Promise.resolve();
+  return jobs.watch(() => {
+    chain = chain.then(
+      () => harness.commit(async (tx) => {
+        (await tx.doc(LicksHostDoc)).jobs = jobs.list();
+      }, context)
+    ).catch(() => void 0);
+    return chain;
+  });
+}
+function booting(harness, cone, deliver, jobs) {
+  let stopped = false;
+  let off = () => void 0;
+  return {
+    async boot(facts, context) {
+      await bootLicks(harness, cone(), deliver, facts, context, jobs, () => {
+        off();
+        if (jobs && !stopped) off = recordJobs(harness, jobs, context);
+      });
+    },
+    stop() {
+      stopped = true;
+      off();
+    }
+  };
+}
 export {
+  LISTED,
   LicksHostDoc,
+  backgroundList,
   bashCommands,
-  bootLicks
+  bootLicks,
+  booting
 };
 //# sourceMappingURL=boot.js.map

package/dist/licks/boot.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/licks/boot.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type Conversation,\n  defineDoc,\n  type EntryRecord,\n  type Harness,\n} from '@earendil-works/pi-durable';\nimport type { Deliver } from './fswatch.ts';\n\ntype HostState = {\n  cron: Record<string, { task: number }>;\n  agent: string | null;\n  boot: string | null;\n  mark: number;\n  upgrades: number;\n};\n\nexport const LicksHostDoc = defineDoc<HostState>({\n  kind: 'slicc.licks.host',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ cron: {}, agent: null, boot: null, mark: 0, upgrades: 0 }),\n});\n\nexport interface BootFacts {\n  version: string;\n  boot: string | null;\n}\n\nconst BACKGROUND = /(?:&\\s*$|&\\s*disown\\b|\\bnohup\\b|\\bsetsid\\b)/m;\n\ninterface Block {\n  type?: string;\n  name?: string;\n  arguments?: { command?: unknown };\n}\n\nexport function bashCommands(entries: readonly EntryRecord[], after: number): string[] {\n  const commands: string[] = [];\n  for (const entry of entries) {\n    if (entry.kind !== 'pi.assistant' || Number(entry.id) <= after) continue;\n    const content = (entry.model?.[0] as { content?: unknown } | undefined)?.content;\n    for (const block of Array.isArray(content) ? (content as Block[]) : []) {\n      const command = block.arguments?.command;\n      if (block.type === 'toolCall' && block.name === 'bash' && typeof command === 'string')\n        commands.push(command);\n    }\n  }\n  return commands;\n}\n\nfunction upgraded(from: string, to: string, upgrades: number) {\n  return {\n    channel: 'upgrade',\n    source: 'slicc-agent',\n    title: `slicc-agent ${from} \u2192 ${to}`,\n    text: `The agent was updated from ${from} to ${to}.`,\n    body: `Release notes: https://github.com/ai-ecoverse/slicc-agent/releases/tag/v${to}`,\n    target: 'cone',\n    eventId: `${from}->${to}#${upgrades}`,\n  } as const;\n}\n\nfunction restarted(boot: string, commands: readonly string[]) {\n  const background = commands.filter((command) => BACKGROUND.test(command)).slice(-5);\n  return {\n    channel: 'session-reload',\n    source: 'kernel',\n    title: 'The kernel restarted',\n    text: 'The page reloaded, so the kernel started fresh: processes from before the reload are gone.',\n    body: background.length\n      ? `Background commands that are no longer running:\\n${background.join('\\n')}`\n      : 'Files are unchanged. Start again whatever you still need running.',\n    target: 'cone',\n    eventId: `boot:${boot}`,\n  } as const;\n}\n\nexport async function bootLicks(\n  harness: Harness,\n  cone: Conversation,\n  deliver: Deliver,\n  facts: BootFacts,\n  context: Context\n): Promise<void> {\n  const state = await harness.snapshot(LicksHostDoc, context);\n  const previous = state?.agent ?? null;\n  if (previous !== null && previous !== facts.version)\n    await deliver(upgraded(previous, facts.version, state?.upgrades ?? 0), context);\n  const { entries } = await cone.context(context);\n  if (facts.boot !== null && state?.boot && facts.boot !== state.boot) {\n    const commands = bashCommands(entries, state.mark);\n    if (commands.length) await deliver(restarted(facts.boot, commands), context);\n  }\n  const { entries: after } = await cone.context(context);\n  const mark = Number(after.at(-1)?.id ?? 0);\n  await harness.commit(async (tx) => {\n    const doc = await tx.doc(LicksHostDoc);\n    if (doc.agent !== null && doc.agent !== facts.version) doc.upgrades += 1;\n    doc.agent = facts.version;\n    if (facts.boot !== null && doc.boot !== facts.boot) {\n      doc.boot = facts.boot;\n      doc.mark = mark;\n    }\n  }, context);\n}\n"],
-  "mappings": "AACA;AAAA,EAEE;AAAA,OAGK;AAWA,MAAM,eAAe,UAAqB;AAAA,EAC/C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,MAAM,MAAM,MAAM,MAAM,GAAG,UAAU,EAAE;AAC5E,CAAC;AAOD,MAAM,aAAa;AAQZ,SAAS,aAAa,SAAiC,OAAyB;AACrF,QAAM,WAAqB,CAAC;AAC5B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,SAAS,kBAAkB,OAAO,MAAM,EAAE,KAAK,MAAO;AAChE,UAAM,UAAW,MAAM,QAAQ,CAAC,GAAyC;AACzE,eAAW,SAAS,MAAM,QAAQ,OAAO,IAAK,UAAsB,CAAC,GAAG;AACtE,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,MAAM,SAAS,cAAc,MAAM,SAAS,UAAU,OAAO,YAAY;AAC3E,iBAAS,KAAK,OAAO;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,SAAS,MAAc,IAAY,UAAkB;AAC5D,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO,eAAe,IAAI,WAAM,EAAE;AAAA,IAClC,MAAM,8BAA8B,IAAI,OAAO,EAAE;AAAA,IACjD,MAAM,2EAA2E,EAAE;AAAA,IACnF,QAAQ;AAAA,IACR,SAAS,GAAG,IAAI,KAAK,EAAE,IAAI,QAAQ;AAAA,EACrC;AACF;AAEA,SAAS,UAAU,MAAc,UAA6B;AAC5D,QAAM,aAAa,SAAS,OAAO,CAAC,YAAY,WAAW,KAAK,OAAO,CAAC,EAAE,MAAM,EAAE;AAClF,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM,WAAW,SACb;AAAA,EAAoD,WAAW,KAAK,IAAI,CAAC,KACzE;AAAA,IACJ,QAAQ;AAAA,IACR,SAAS,QAAQ,IAAI;AAAA,EACvB;AACF;AAEA,eAAsB,UACpB,SACA,MACA,SACA,OACA,SACe;AACf,QAAM,QAAQ,MAAM,QAAQ,SAAS,cAAc,OAAO;AAC1D,QAAM,WAAW,OAAO,SAAS;AACjC,MAAI,aAAa,QAAQ,aAAa,MAAM;AAC1C,UAAM,QAAQ,SAAS,UAAU,MAAM,SAAS,OAAO,YAAY,CAAC,GAAG,OAAO;AAChF,QAAM,EAAE,QAAQ,IAAI,MAAM,KAAK,QAAQ,OAAO;AAC9C,MAAI,MAAM,SAAS,QAAQ,OAAO,QAAQ,MAAM,SAAS,MAAM,MAAM;AACnE,UAAM,WAAW,aAAa,SAAS,MAAM,IAAI;AACjD,QAAI,SAAS,OAAQ,OAAM,QAAQ,UAAU,MAAM,MAAM,QAAQ,GAAG,OAAO;AAAA,EAC7E;AACA,QAAM,EAAE,SAAS,MAAM,IAAI,MAAM,KAAK,QAAQ,OAAO;AACrD,QAAM,OAAO,OAAO,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC;AACzC,QAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,UAAM,MAAM,MAAM,GAAG,IAAI,YAAY;AACrC,QAAI,IAAI,UAAU,QAAQ,IAAI,UAAU,MAAM,QAAS,KAAI,YAAY;AACvE,QAAI,QAAQ,MAAM;AAClB,QAAI,MAAM,SAAS,QAAQ,IAAI,SAAS,MAAM,MAAM;AAClD,UAAI,OAAO,MAAM;AACjB,UAAI,OAAO;AAAA,IACb;AAAA,EACF,GAAG,OAAO;AACZ;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type Conversation,\n  defineDoc,\n  type EntryRecord,\n  type Harness,\n} from '@earendil-works/pi-durable';\nimport type { Job, Jobs } from '../kernel/jobs.ts';\nimport type { Deliver } from './fswatch.ts';\n\ntype HostState = {\n  cron: Record<string, { task: number }>;\n  agent: string | null;\n  boot: string | null;\n  mark: number;\n  upgrades: number;\n  jobs?: Job[];\n};\n\nexport const LicksHostDoc = defineDoc<HostState>({\n  kind: 'slicc.licks.host',\n  version: 1,\n  scope: 'session',\n  initial: () => ({ cron: {}, agent: null, boot: null, mark: 0, upgrades: 0 }),\n});\n\nexport interface BootFacts {\n  version: string;\n  boot: string | null;\n}\n\nexport const LISTED = 5;\n\ninterface Block {\n  type?: string;\n  name?: string;\n  arguments?: { command?: unknown };\n}\n\nexport function bashCommands(entries: readonly EntryRecord[], after: number): string[] {\n  const commands: string[] = [];\n  for (const entry of entries) {\n    if (entry.kind !== 'pi.assistant' || Number(entry.id) <= after) continue;\n    const content = (entry.model?.[0] as { content?: unknown } | undefined)?.content;\n    for (const block of Array.isArray(content) ? (content as Block[]) : []) {\n      const command = block.arguments?.command;\n      if (block.type === 'toolCall' && block.name === 'bash' && typeof command === 'string')\n        commands.push(command);\n    }\n  }\n  return commands;\n}\n\nfunction upgraded(from: string, to: string, upgrades: number) {\n  return {\n    channel: 'upgrade',\n    source: 'slicc-agent',\n    title: `slicc-agent ${from} \u2192 ${to}`,\n    text: `The agent was updated from ${from} to ${to}.`,\n    body: `Release notes: https://github.com/ai-ecoverse/slicc-agent/releases/tag/v${to}`,\n    target: 'cone',\n    eventId: `${from}->${to}#${upgrades}`,\n  } as const;\n}\n\nexport function backgroundList(jobs: readonly Job[]): string[] {\n  const commands = [...new Set(jobs.map((job) => job.command))];\n  const more = commands.length - LISTED;\n  return more > 0 ? [...commands.slice(-LISTED), `\u2026and ${more} more`] : commands;\n}\n\nfunction restarted(boot: string, jobs: readonly Job[]) {\n  const background = backgroundList(jobs);\n  return {\n    channel: 'session-reload',\n    source: 'kernel',\n    title: 'The kernel restarted',\n    text: 'The page reloaded, so the kernel started fresh: processes from before the reload are gone.',\n    body: background.length\n      ? `Background commands that are no longer running:\\n${background.join('\\n')}`\n      : 'Files are unchanged. Start again whatever you still need running.',\n    target: 'cone',\n    eventId: `boot:${boot}`,\n  } as const;\n}\n\nexport async function bootLicks(\n  harness: Harness,\n  cone: Conversation,\n  deliver: Deliver,\n  facts: BootFacts,\n  context: Context,\n  jobs?: Jobs,\n  listen?: () => void\n): Promise<void> {\n  const state = await harness.snapshot(LicksHostDoc, context);\n  listen?.();\n  const previous = state?.agent ?? null;\n  if (previous !== null && previous !== facts.version)\n    await deliver(upgraded(previous, facts.version, state?.upgrades ?? 0), context);\n  const { entries } = await cone.context(context);\n  const before = state?.jobs ?? [];\n  if (facts.boot !== null && state?.boot && facts.boot !== state.boot) {\n    const commands = bashCommands(entries, state.mark);\n    if (commands.length || before.length) await deliver(restarted(facts.boot, before), context);\n  } else if (facts.boot !== null && facts.boot === state?.boot) jobs?.adopt(before);\n  const { entries: after } = await cone.context(context);\n  const mark = Number(after.at(-1)?.id ?? 0);\n  await harness.commit(async (tx) => {\n    const doc = await tx.doc(LicksHostDoc);\n    if (doc.agent !== null && doc.agent !== facts.version) doc.upgrades += 1;\n    doc.agent = facts.version;\n    if (facts.boot !== null && doc.boot !== facts.boot) {\n      doc.boot = facts.boot;\n      doc.mark = mark;\n    }\n    doc.jobs = jobs?.list() ?? [];\n  }, context);\n}\n\nfunction recordJobs(harness: Harness, jobs: Jobs, context: Context): () => void {\n  let chain: Promise<void> = Promise.resolve();\n  return jobs.watch(() => {\n    chain = chain\n      .then(() =>\n        harness.commit(async (tx) => {\n          (await tx.doc(LicksHostDoc)).jobs = jobs.list();\n        }, context)\n      )\n      .catch(() => undefined);\n    return chain;\n  });\n}\n\nexport function booting(\n  harness: Harness,\n  cone: () => Conversation,\n  deliver: Deliver,\n  jobs: Jobs | undefined\n) {\n  let stopped = false;\n  let off = () => undefined as void;\n  return {\n    async boot(facts: BootFacts, context: Context): Promise<void> {\n      await bootLicks(harness, cone(), deliver, facts, context, jobs, () => {\n        off();\n        if (jobs && !stopped) off = recordJobs(harness, jobs, context);\n      });\n    },\n    stop() {\n      stopped = true;\n      off();\n    },\n  };\n}\n"],
+  "mappings": "AACA;AAAA,EAEE;AAAA,OAGK;AAaA,MAAM,eAAe,UAAqB;AAAA,EAC/C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,MAAM,CAAC,GAAG,OAAO,MAAM,MAAM,MAAM,MAAM,GAAG,UAAU,EAAE;AAC5E,CAAC;AAOM,MAAM,SAAS;AAQf,SAAS,aAAa,SAAiC,OAAyB;AACrF,QAAM,WAAqB,CAAC;AAC5B,aAAW,SAAS,SAAS;AAC3B,QAAI,MAAM,SAAS,kBAAkB,OAAO,MAAM,EAAE,KAAK,MAAO;AAChE,UAAM,UAAW,MAAM,QAAQ,CAAC,GAAyC;AACzE,eAAW,SAAS,MAAM,QAAQ,OAAO,IAAK,UAAsB,CAAC,GAAG;AACtE,YAAM,UAAU,MAAM,WAAW;AACjC,UAAI,MAAM,SAAS,cAAc,MAAM,SAAS,UAAU,OAAO,YAAY;AAC3E,iBAAS,KAAK,OAAO;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,SAAS,MAAc,IAAY,UAAkB;AAC5D,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO,eAAe,IAAI,WAAM,EAAE;AAAA,IAClC,MAAM,8BAA8B,IAAI,OAAO,EAAE;AAAA,IACjD,MAAM,2EAA2E,EAAE;AAAA,IACnF,QAAQ;AAAA,IACR,SAAS,GAAG,IAAI,KAAK,EAAE,IAAI,QAAQ;AAAA,EACrC;AACF;AAEO,SAAS,eAAe,MAAgC;AAC7D,QAAM,WAAW,CAAC,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC;AAC5D,QAAM,OAAO,SAAS,SAAS;AAC/B,SAAO,OAAO,IAAI,CAAC,GAAG,SAAS,MAAM,CAAC,MAAM,GAAG,aAAQ,IAAI,OAAO,IAAI;AACxE;AAEA,SAAS,UAAU,MAAc,MAAsB;AACrD,QAAM,aAAa,eAAe,IAAI;AACtC,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,MAAM;AAAA,IACN,MAAM,WAAW,SACb;AAAA,EAAoD,WAAW,KAAK,IAAI,CAAC,KACzE;AAAA,IACJ,QAAQ;AAAA,IACR,SAAS,QAAQ,IAAI;AAAA,EACvB;AACF;AAEA,eAAsB,UACpB,SACA,MACA,SACA,OACA,SACA,MACA,QACe;AACf,QAAM,QAAQ,MAAM,QAAQ,SAAS,cAAc,OAAO;AAC1D,WAAS;AACT,QAAM,WAAW,OAAO,SAAS;AACjC,MAAI,aAAa,QAAQ,aAAa,MAAM;AAC1C,UAAM,QAAQ,SAAS,UAAU,MAAM,SAAS,OAAO,YAAY,CAAC,GAAG,OAAO;AAChF,QAAM,EAAE,QAAQ,IAAI,MAAM,KAAK,QAAQ,OAAO;AAC9C,QAAM,SAAS,OAAO,QAAQ,CAAC;AAC/B,MAAI,MAAM,SAAS,QAAQ,OAAO,QAAQ,MAAM,SAAS,MAAM,MAAM;AACnE,UAAM,WAAW,aAAa,SAAS,MAAM,IAAI;AACjD,QAAI,SAAS,UAAU,OAAO,OAAQ,OAAM,QAAQ,UAAU,MAAM,MAAM,MAAM,GAAG,OAAO;AAAA,EAC5F,WAAW,MAAM,SAAS,QAAQ,MAAM,SAAS,OAAO,KAAM,OAAM,MAAM,MAAM;AAChF,QAAM,EAAE,SAAS,MAAM,IAAI,MAAM,KAAK,QAAQ,OAAO;AACrD,QAAM,OAAO,OAAO,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC;AACzC,QAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,UAAM,MAAM,MAAM,GAAG,IAAI,YAAY;AACrC,QAAI,IAAI,UAAU,QAAQ,IAAI,UAAU,MAAM,QAAS,KAAI,YAAY;AACvE,QAAI,QAAQ,MAAM;AAClB,QAAI,MAAM,SAAS,QAAQ,IAAI,SAAS,MAAM,MAAM;AAClD,UAAI,OAAO,MAAM;AACjB,UAAI,OAAO;AAAA,IACb;AACA,QAAI,OAAO,MAAM,KAAK,KAAK,CAAC;AAAA,EAC9B,GAAG,OAAO;AACZ;AAEA,SAAS,WAAW,SAAkB,MAAY,SAA8B;AAC9E,MAAI,QAAuB,QAAQ,QAAQ;AAC3C,SAAO,KAAK,MAAM,MAAM;AACtB,YAAQ,MACL;AAAA,MAAK,MACJ,QAAQ,OAAO,OAAO,OAAO;AAC3B,SAAC,MAAM,GAAG,IAAI,YAAY,GAAG,OAAO,KAAK,KAAK;AAAA,MAChD,GAAG,OAAO;AAAA,IACZ,EACC,MAAM,MAAM,MAAS;AACxB,WAAO;AAAA,EACT,CAAC;AACH;AAEO,SAAS,QACd,SACA,MACA,SACA,MACA;AACA,MAAI,UAAU;AACd,MAAI,MAAM,MAAM;AAChB,SAAO;AAAA,IACL,MAAM,KAAK,OAAkB,SAAiC;AAC5D,YAAM,UAAU,SAAS,KAAK,GAAG,SAAS,OAAO,SAAS,MAAM,MAAM;AACpE,YAAI;AACJ,YAAI,QAAQ,CAAC,QAAS,OAAM,WAAW,SAAS,MAAM,OAAO;AAAA,MAC/D,CAAC;AAAA,IACH;AAAA,IACA,OAAO;AACL,gBAAU;AACV,UAAI;AAAA,IACN;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/licks/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/licks/index.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { Conversation, ConversationId, Harness, Registry } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv } from '@earendil-works/pi-durable/env';\nimport { type Agents, live } from '../agents.ts';\nimport type { Activity } from '../kernel/activity.ts';\nimport { licksExtension } from './extension.ts';\nimport type { LickChannel, LickTarget } from './lick.ts';\nimport { createLicks, type Licks, type LicksHost } from './licks.ts';\nimport { createLickSources, type LickDir, type LickSources } from './sources.ts';\n\nexport interface LicksAgent {\n  harness: Harness;\n  root: Conversation;\n  agents: Agents;\n  cone(): Conversation;\n}\n\nconst UNTRUSTED = new Set<LickChannel>(['webhook']);\n\nexport function lickResolver(agent: LicksAgent) {\n  return async (target: LickTarget, channel: LickChannel, context: Context) => {\n    const cone = agent.cone();\n    if (target === 'cone') return cone;\n    if (target.startsWith('cone:'))\n      return (await agent.agents.conversation(target.slice('cone:'.length), context)) ?? cone;\n    if (UNTRUSTED.has(channel)) return cone;\n    const scoop = agent.agents.state().scoops[target];\n    if (!scoop || !live(scoop)) return cone;\n    return (await agent.agents.conversation(target, context)) ?? cone;\n  };\n}\n\nexport interface LicksSetup {\n  licks: Licks;\n  attach(\n    agent: LicksAgent,\n    options: {\n      env: ExecutionEnv;\n      home: string;\n      flushEvery?: number;\n      activity?: Activity;\n      dirs?: () => Promise<readonly LickDir[]>;\n      cronUser?: (target: LickTarget, place: LickDir) => string | undefined;\n    }\n  ): LickSources;\n}\n\nexport function setupLicks(registry: Registry, fetcher?: typeof fetch): LicksSetup {\n  let bind: (host: LicksHost) => void = () => undefined;\n  const host = new Promise<LicksHost>((resolve) => {\n    bind = resolve;\n  });\n  const licks = createLicks(host);\n  const lookup = async (id: ConversationId, context: Context) => {\n    const found = await (await host).harness.conversation(id, context);\n    if (!found) throw new Error(`conversation ${id} is gone`);\n    return found;\n  };\n  registry.install(licksExtension(licks, lookup));\n  return {\n    licks,\n    attach(agent, options) {\n      const { harness, root } = agent;\n      bind({ harness, resolve: lickResolver(agent) });\n      return createLickSources({\n        ...options,\n        harness,\n        root,\n        cone: () => agent.cone(),\n        licks,\n        ...(fetcher ? { fetch: fetcher } : {}),\n      });\n    },\n  };\n}\n\nexport type { Lick, LickChannel } from './lick.ts';\nexport type { LickEvent, Licks } from './licks.ts';\nexport type { LickSources, WebhookDelivery } from './sources.ts';\n"],
-  "mappings": "AAGA,SAAsB,YAAY;AAElC,SAAS,sBAAsB;AAE/B,SAAS,mBAA+C;AACxD,SAAS,yBAAyD;AASlE,MAAM,YAAY,oBAAI,IAAiB,CAAC,SAAS,CAAC;AAE3C,SAAS,aAAa,OAAmB;AAC9C,SAAO,OAAO,QAAoB,SAAsB,YAAqB;AAC3E,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,WAAW,OAAQ,QAAO;AAC9B,QAAI,OAAO,WAAW,OAAO;AAC3B,aAAQ,MAAM,MAAM,OAAO,aAAa,OAAO,MAAM,QAAQ,MAAM,GAAG,OAAO,KAAM;AACrF,QAAI,UAAU,IAAI,OAAO,EAAG,QAAO;AACnC,UAAM,QAAQ,MAAM,OAAO,MAAM,EAAE,OAAO,MAAM;AAChD,QAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAG,QAAO;AACnC,WAAQ,MAAM,MAAM,OAAO,aAAa,QAAQ,OAAO,KAAM;AAAA,EAC/D;AACF;AAiBO,SAAS,WAAW,UAAoB,SAAoC;AACjF,MAAI,OAAkC,MAAM;AAC5C,QAAM,OAAO,IAAI,QAAmB,CAAC,YAAY;AAC/C,WAAO;AAAA,EACT,CAAC;AACD,QAAM,QAAQ,YAAY,IAAI;AAC9B,QAAM,SAAS,OAAO,IAAoB,YAAqB;AAC7D,UAAM,QAAQ,OAAO,MAAM,MAAM,QAAQ,aAAa,IAAI,OAAO;AACjE,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,gBAAgB,EAAE,UAAU;AACxD,WAAO;AAAA,EACT;AACA,WAAS,QAAQ,eAAe,OAAO,MAAM,CAAC;AAC9C,SAAO;AAAA,IACL;AAAA,IACA,OAAO,OAAO,SAAS;AACrB,YAAM,EAAE,SAAS,KAAK,IAAI;AAC1B,WAAK,EAAE,SAAS,SAAS,aAAa,KAAK,EAAE,CAAC;AAC9C,aAAO,kBAAkB;AAAA,QACvB,GAAG;AAAA,QACH;AAAA,QACA;AAAA,QACA,MAAM,MAAM,MAAM,KAAK;AAAA,QACvB;AAAA,QACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;AAAA,MACtC,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { Conversation, ConversationId, Harness, Registry } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv } from '@earendil-works/pi-durable/env';\nimport { type Agents, live } from '../agents.ts';\nimport type { Activity } from '../kernel/activity.ts';\nimport type { Jobs } from '../kernel/jobs.ts';\nimport { licksExtension } from './extension.ts';\nimport type { LickChannel, LickTarget } from './lick.ts';\nimport { createLicks, type Licks, type LicksHost } from './licks.ts';\nimport { createLickSources, type LickDir, type LickSources } from './sources.ts';\n\nexport interface LicksAgent {\n  harness: Harness;\n  root: Conversation;\n  agents: Agents;\n  cone(): Conversation;\n}\n\nconst UNTRUSTED = new Set<LickChannel>(['webhook']);\n\nexport function lickResolver(agent: LicksAgent) {\n  return async (target: LickTarget, channel: LickChannel, context: Context) => {\n    const cone = agent.cone();\n    if (target === 'cone') return cone;\n    if (target.startsWith('cone:'))\n      return (await agent.agents.conversation(target.slice('cone:'.length), context)) ?? cone;\n    if (UNTRUSTED.has(channel)) return cone;\n    const scoop = agent.agents.state().scoops[target];\n    if (!scoop || !live(scoop)) return cone;\n    return (await agent.agents.conversation(target, context)) ?? cone;\n  };\n}\n\nexport interface LicksSetup {\n  licks: Licks;\n  attach(\n    agent: LicksAgent,\n    options: {\n      env: ExecutionEnv;\n      home: string;\n      flushEvery?: number;\n      activity?: Activity;\n      jobs?: Jobs;\n      dirs?: () => Promise<readonly LickDir[]>;\n      cronUser?: (target: LickTarget, place: LickDir) => string | undefined;\n    }\n  ): LickSources;\n}\n\nexport function setupLicks(registry: Registry, fetcher?: typeof fetch): LicksSetup {\n  let bind: (host: LicksHost) => void = () => undefined;\n  const host = new Promise<LicksHost>((resolve) => {\n    bind = resolve;\n  });\n  const licks = createLicks(host);\n  const lookup = async (id: ConversationId, context: Context) => {\n    const found = await (await host).harness.conversation(id, context);\n    if (!found) throw new Error(`conversation ${id} is gone`);\n    return found;\n  };\n  registry.install(licksExtension(licks, lookup));\n  return {\n    licks,\n    attach(agent, options) {\n      const { harness, root } = agent;\n      bind({ harness, resolve: lickResolver(agent) });\n      return createLickSources({\n        ...options,\n        harness,\n        root,\n        cone: () => agent.cone(),\n        licks,\n        ...(fetcher ? { fetch: fetcher } : {}),\n      });\n    },\n  };\n}\n\nexport type { Lick, LickChannel } from './lick.ts';\nexport type { LickEvent, Licks } from './licks.ts';\nexport type { LickSources, WebhookDelivery } from './sources.ts';\n"],
+  "mappings": "AAGA,SAAsB,YAAY;AAGlC,SAAS,sBAAsB;AAE/B,SAAS,mBAA+C;AACxD,SAAS,yBAAyD;AASlE,MAAM,YAAY,oBAAI,IAAiB,CAAC,SAAS,CAAC;AAE3C,SAAS,aAAa,OAAmB;AAC9C,SAAO,OAAO,QAAoB,SAAsB,YAAqB;AAC3E,UAAM,OAAO,MAAM,KAAK;AACxB,QAAI,WAAW,OAAQ,QAAO;AAC9B,QAAI,OAAO,WAAW,OAAO;AAC3B,aAAQ,MAAM,MAAM,OAAO,aAAa,OAAO,MAAM,QAAQ,MAAM,GAAG,OAAO,KAAM;AACrF,QAAI,UAAU,IAAI,OAAO,EAAG,QAAO;AACnC,UAAM,QAAQ,MAAM,OAAO,MAAM,EAAE,OAAO,MAAM;AAChD,QAAI,CAAC,SAAS,CAAC,KAAK,KAAK,EAAG,QAAO;AACnC,WAAQ,MAAM,MAAM,OAAO,aAAa,QAAQ,OAAO,KAAM;AAAA,EAC/D;AACF;AAkBO,SAAS,WAAW,UAAoB,SAAoC;AACjF,MAAI,OAAkC,MAAM;AAC5C,QAAM,OAAO,IAAI,QAAmB,CAAC,YAAY;AAC/C,WAAO;AAAA,EACT,CAAC;AACD,QAAM,QAAQ,YAAY,IAAI;AAC9B,QAAM,SAAS,OAAO,IAAoB,YAAqB;AAC7D,UAAM,QAAQ,OAAO,MAAM,MAAM,QAAQ,aAAa,IAAI,OAAO;AACjE,QAAI,CAAC,MAAO,OAAM,IAAI,MAAM,gBAAgB,EAAE,UAAU;AACxD,WAAO;AAAA,EACT;AACA,WAAS,QAAQ,eAAe,OAAO,MAAM,CAAC;AAC9C,SAAO;AAAA,IACL;AAAA,IACA,OAAO,OAAO,SAAS;AACrB,YAAM,EAAE,SAAS,KAAK,IAAI;AAC1B,WAAK,EAAE,SAAS,SAAS,aAAa,KAAK,EAAE,CAAC;AAC9C,aAAO,kBAAkB;AAAA,QACvB,GAAG;AAAA,QACH;AAAA,QACA;AAAA,QACA,MAAM,MAAM,MAAM,KAAK;AAAA,QACvB;AAAA,QACA,GAAI,UAAU,EAAE,OAAO,QAAQ,IAAI,CAAC;AAAA,MACtC,CAAC;AAAA,IACH;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/licks/sources.js

@@ -1,6 +1,6 @@
 import { ROOT_USER } from "../layout.js";
 import { attachmentPart } from "./attachment.js";
-import { bootLicks, LicksHostDoc } from "./boot.js";
+import { booting, LicksHostDoc } from "./boot.js";
 import { parseWebhook } from "./config.js";
 import {
   installJobs,
@@ -86,6 +86,7 @@ function createLickSources(options) {
   const { harness, env, licks, home } = options;
   const files = configFiles(env);
   const deliver = (event, context) => licks.deliver(event, context);
+  const boots = booting(harness, options.cone, deliver, options.jobs);
   const dirsOf = options.dirs ?? (() => [{ dir: `${home}/${SLICC_DIR}`, home, cone: null }]);
   const watching = /* @__PURE__ */ new Map();
   const watchesOf = (place) => {
@@ -224,7 +225,7 @@ function createLickSources(options) {
       }, options.flushEvery ?? 2e3);
     },
     reconcile,
-    boot: (facts, context) => bootLicks(harness, options.cone(), deliver, facts, context),
+    boot: boots.boot,
     async webhook(name, delivery, context) {
       const entry = webhooks.get(name);
       if (!entry) return false;
@@ -236,6 +237,7 @@ function createLickSources(options) {
     },
     async close(context) {
       closed = true;
+      boots.stop();
       clearTimeout(reconcileTimer);
       clearInterval(flushTimer);
       await control?.close(context);

package/dist/licks/sources.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/licks/sources.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { Conversation, Harness, TaskId } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv, FileWatcher } from '@earendil-works/pi-durable/env';\nimport type { Activity } from '../kernel/activity.ts';\nimport { ROOT_USER } from '../layout.ts';\nimport { type Attachment, attachmentPart } from './attachment.ts';\nimport { type BootFacts, bootLicks, LicksHostDoc } from './boot.ts';\nimport { type ConfigError, parseWebhook, type WebhookEntry } from './config.ts';\nimport {\n  type CronJob,\n  installJobs,\n  type LegacyJob,\n  legacyJobs,\n  relickJobs,\n  sendCommand,\n} from './crontab.ts';\nimport { type ConfigFiles, configFiles, Watches } from './fswatch.ts';\nimport type { LickChannel, LickTarget } from './lick.ts';\nimport type { LickEvent, Licks } from './licks.ts';\n\nexport const SLICC_DIR = '.slicc';\n\nexport interface LickSourcesOptions {\n  harness: Harness;\n  root: Conversation;\n  cone: () => Conversation;\n  env: ExecutionEnv;\n  home: string;\n  licks: Licks;\n  flushEvery?: number;\n  activity?: Activity;\n  dirs?: () => readonly LickDir[] | Promise<readonly LickDir[]>;\n  cronUser?: (target: LickTarget, place: LickDir) => string | undefined;\n  fetch?: typeof fetch;\n}\n\nexport interface LickDir {\n  dir: string;\n  home: string;\n  cone: string | null;\n  env?: ExecutionEnv;\n}\n\nexport function scopedTarget(target: LickTarget, cone: string | null): LickTarget {\n  return cone && target === 'cone' ? (`cone:${cone}` as LickTarget) : target;\n}\n\nexport function scopedName(name: string, cone: string | null): string {\n  return cone ? `${cone}:${name}` : name;\n}\n\nfunction scoped<T extends { name: string; target: LickTarget }>(entry: T, cone: string | null): T {\n  return { ...entry, name: scopedName(entry.name, cone), target: scopedTarget(entry.target, cone) };\n}\n\nexport interface WebhookDelivery {\n  id?: string;\n  headers?: Record<string, string>;\n  body: unknown;\n  verified?: boolean;\n  attachment?: Attachment;\n}\n\nexport async function withAttachment(\n  delivery: WebhookDelivery,\n  fetcher: typeof fetch | undefined\n): Promise<WebhookDelivery> {\n  const { attachment, ...rest } = delivery;\n  if (!attachment) return delivery;\n  const part = await attachmentPart(attachment, fetcher);\n  return { ...rest, body: [rest.body, part].filter(Boolean).join('\\n\\n') };\n}\n\nexport interface LickSources {\n  start(context: Context): Promise<void>;\n  reconcile(context: Context): Promise<void>;\n  boot(facts: BootFacts, context: Context): Promise<void>;\n  webhook(name: string, delivery: WebhookDelivery, context: Context): Promise<boolean>;\n  close(context: Context): Promise<void>;\n}\n\nexport function hash(text: string): string {\n  let value = 2166136261;\n  for (let at = 0; at < text.length; at++) value = Math.imul(value ^ text.charCodeAt(at), 16777619);\n  return (value >>> 0).toString(36);\n}\n\nexport function shortPath(path: string, home: string): string {\n  return path === home || path.startsWith(`${home}/`) ? `~${path.slice(home.length)}` : path;\n}\n\nexport function configLick(\n  error: ConfigError,\n  home: string,\n  cone: string | null = null\n): LickEvent {\n  const file = shortPath(error.file, home);\n  const channel: LickChannel = error.file.includes('/watches/')\n    ? 'fswatch'\n    : error.file.includes('/webhooks/')\n      ? 'webhook'\n      : 'cron';\n  const text = `${error.line ? `line ${error.line}: ` : ''}${error.error}`;\n  return {\n    channel,\n    source: `config:${file}`,\n    title: `Invalid ${file}`,\n    text,\n    body: error.file.endsWith('/crontab.migrated')\n      ? \"Its jobs in the kernel crontab still lack --lick=cron, so they don't fire as cron licks; add it with crontab -.\"\n      : channel === 'cron'\n        ? 'Not moved into the kernel crontab until the file is fixed; the installed crontab is unchanged.\\nThe format is in the slicc-agent README.'\n        : 'Ignored until the file is fixed.\\nThe formats are in the slicc-agent README.',\n    target: scopedTarget('cone', cone),\n    severity: 'error',\n    eventId: hash(`${file}\\n${text}`),\n  };\n}\n\nexport const UNVERIFIED = \"verified: false (the gateway couldn't check this request's signature)\";\n\nexport function webhookLick(\n  name: string,\n  entry: WebhookEntry,\n  delivery: WebhookDelivery\n): LickEvent {\n  const payload =\n    typeof delivery.body === 'string' ? delivery.body : JSON.stringify(delivery.body, null, 2);\n  const headers = Object.entries(delivery.headers ?? {})\n    .map(([key, value]) => `${key}: ${value}`)\n    .join('\\n');\n  return {\n    channel: 'webhook',\n    source: name,\n    title: name,\n    text: entry.message || `Webhook ${name} received a request`,\n    body: [delivery.verified === false ? UNVERIFIED : '', headers, payload]\n      .filter(Boolean)\n      .join('\\n\\n'),\n    target: entry.target,\n    coalesce: false,\n    ...(delivery.id ? { eventId: delivery.id } : {}),\n    ...(entry.triage ? { triage: entry.triage } : {}),\n  };\n}\n\nasync function webhooksIn(\n  files: ConfigFiles,\n  dir: string,\n  context: Context\n): Promise<{ entries: Map<string, WebhookEntry>; errors: ConfigError[] }> {\n  const errors: ConfigError[] = [];\n  const into = new Map<string, WebhookEntry>();\n  for (const name of await files.list(dir, context)) {\n    if (name.endsWith('.v6')) continue;\n    const file = `${dir}/${name}`;\n    const json = await files.read(file, context);\n    if (json === undefined) continue;\n    try {\n      const entry = parseWebhook(file, json);\n      into.set(entry.name, entry);\n    } catch (error) {\n      errors.push({ file, error: (error as Error).message });\n    }\n  }\n  return { entries: into, errors };\n}\n\nexport function createLickSources(options: LickSourcesOptions): LickSources {\n  const { harness, env, licks, home } = options;\n  const files = configFiles(env);\n  const deliver = (event: LickEvent, context: Context) => licks.deliver(event, context);\n  const dirsOf = options.dirs ?? (() => [{ dir: `${home}/${SLICC_DIR}`, home, cone: null }]);\n  const watching = new Map<string, Watches>();\n  const watchesOf = (place: LickDir) => {\n    let found = watching.get(place.dir);\n    if (!found) {\n      const retarget = (event: LickEvent, context: Context) =>\n        deliver({ ...event, target: scopedTarget(event.target, place.cone) }, context);\n      found = new Watches(place.env ?? env, retarget, place.home, options.activity);\n      watching.set(place.dir, found);\n    }\n    return found;\n  };\n  let webhooks = new Map<string, WebhookEntry>();\n  const relicked = new Set<string>();\n  let control: FileWatcher | undefined;\n  let controlled = '';\n  let reconcileTimer: ReturnType<typeof setTimeout> | undefined;\n  let flushTimer: ReturnType<typeof setInterval> | undefined;\n  let closed = false;\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n\n  async function reconcileNow(context: Context): Promise<void> {\n    if (closed) return;\n    const places = await dirsOf();\n    const errors: { error: ConfigError; place: LickDir }[] = [];\n    const hooks = new Map<string, WebhookEntry>();\n    for (const place of places) {\n      const crontab = [...(await relick(place, context)), ...(await migrate(place, context))];\n      const watchErrors = await watchesOf(place).reconcile(`${place.dir}/watches`, context);\n      const found = await webhooksIn(files, `${place.dir}/webhooks`, context);\n      for (const entry of found.entries.values()) {\n        const named = scoped(entry, place.cone);\n        hooks.set(named.name, named);\n      }\n      for (const error of [...crontab, ...watchErrors, ...found.errors])\n        errors.push({ error, place });\n    }\n    for (const [dir, watches] of [...watching])\n      if (!places.some((place) => place.dir === dir)) {\n        watching.delete(dir);\n        await watches.close(context);\n      }\n    webhooks = hooks;\n    for (const { error, place } of errors)\n      await deliver(configLick(error, place.home, place.cone), context);\n    await watchControl(places, context);\n  }\n\n  function byUser(place: LickDir, jobs: readonly LegacyJob[]): Map<string, LegacyJob[]> {\n    const users = new Map<string, LegacyJob[]>();\n    for (const job of jobs) {\n      const user = options.cronUser?.(job.target, place) ?? place.cone ?? ROOT_USER;\n      users.set(user, [...(users.get(user) ?? []), job]);\n    }\n    return users;\n  }\n\n  async function relick(place: LickDir, context: Context): Promise<ConfigError[]> {\n    if (relicked.has(place.dir)) return [];\n    relicked.add(place.dir);\n    const file = `${place.dir}/crontab.migrated`;\n    const text = await files.read(file, context);\n    if (text === undefined) return [];\n    const errors: ConfigError[] = [];\n    for (const [user, list] of byUser(place, legacyJobs(text).jobs))\n      for (const problem of await relickJobs(env, user, list, context))\n        errors.push({ file, ...problem });\n    return errors;\n  }\n\n  async function migrate(place: LickDir, context: Context): Promise<ConfigError[]> {\n    const file = `${place.dir}/crontab`;\n    const text = await files.read(file, context);\n    if (!text?.trim()) return [];\n    const { jobs, problems } = legacyJobs(text);\n    if (problems.length) return problems.map((problem) => ({ file, ...problem }));\n    const users = new Map<string, CronJob[]>();\n    for (const [user, list] of byUser(place, jobs))\n      users.set(\n        user,\n        list.map((job) => ({\n          name: job.name,\n          schedule: job.schedule,\n          command: sendCommand(job.target, job.message),\n          line: job.line,\n        }))\n      );\n    const errors: ConfigError[] = [];\n    for (const [user, list] of users)\n      for (const problem of await installJobs(env, user, list, context))\n        errors.push({ file, ...problem });\n    if (errors.length) return errors;\n    await env.writeFile(`${file}.migrated`, text, context);\n    await env.remove(file, { force: true }, context);\n    return [];\n  }\n\n  async function retire(context: Context): Promise<void> {\n    const stored = (await harness.snapshot(LicksHostDoc, context))?.cron ?? {};\n    const records = Object.values(stored);\n    if (!records.length) return;\n    for (const record of records)\n      await harness.abortTask(record.task as TaskId, context).catch(() => undefined);\n    await harness.commit(async (tx) => {\n      (await tx.doc(LicksHostDoc)).cron = {};\n    }, context);\n  }\n\n  async function watchControl(places: readonly LickDir[], context: Context): Promise<void> {\n    const key = places.map((place) => place.dir).join('\\n');\n    if (key === controlled || closed) return;\n    controlled = key;\n    await control?.close(context);\n    const result = await env.watch(\n      places.map((place) => ({ path: place.dir, recursive: true })),\n      () => scheduleReconcile(context),\n      context\n    );\n    control = result.ok ? result.value : undefined;\n  }\n\n  const reconcile = (context: Context) => serial(() => reconcileNow(context));\n\n  function scheduleReconcile(context: Context): void {\n    clearTimeout(reconcileTimer);\n    reconcileTimer = setTimeout(() => {\n      void reconcile(context).catch(() => undefined);\n    }, 300);\n  }\n\n  async function flushIfWaiting(context: Context): Promise<void> {\n    if (await licks.pending(context)) await licks.flush(context);\n  }\n\n  return {\n    async start(context) {\n      await licks.flush(context);\n      await retire(context);\n      await reconcile(context);\n      flushTimer = setInterval(() => {\n        void flushIfWaiting(context).catch(() => undefined);\n      }, options.flushEvery ?? 2000);\n    },\n    reconcile,\n    boot: (facts, context) => bootLicks(harness, options.cone(), deliver, facts, context),\n    async webhook(name, delivery, context) {\n      const entry = webhooks.get(name);\n      if (!entry) return false;\n      await deliver(\n        webhookLick(name, entry, await withAttachment(delivery, options.fetch)),\n        context\n      );\n      return true;\n    },\n    async close(context) {\n      closed = true;\n      clearTimeout(reconcileTimer);\n      clearInterval(flushTimer);\n      await control?.close(context);\n      for (const watches of watching.values()) await watches.close(context);\n    },\n  };\n}\n"],
-  "mappings": "AAIA,SAAS,iBAAiB;AAC1B,SAA0B,sBAAsB;AAChD,SAAyB,WAAW,oBAAoB;AACxD,SAA2B,oBAAuC;AAClE;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAA2B,aAAa,eAAe;AAIhD,MAAM,YAAY;AAuBlB,SAAS,aAAa,QAAoB,MAAiC;AAChF,SAAO,QAAQ,WAAW,SAAU,QAAQ,IAAI,KAAoB;AACtE;AAEO,SAAS,WAAW,MAAc,MAA6B;AACpE,SAAO,OAAO,GAAG,IAAI,IAAI,IAAI,KAAK;AACpC;AAEA,SAAS,OAAuD,OAAU,MAAwB;AAChG,SAAO,EAAE,GAAG,OAAO,MAAM,WAAW,MAAM,MAAM,IAAI,GAAG,QAAQ,aAAa,MAAM,QAAQ,IAAI,EAAE;AAClG;AAUA,eAAsB,eACpB,UACA,SAC0B;AAC1B,QAAM,EAAE,YAAY,GAAG,KAAK,IAAI;AAChC,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,OAAO,MAAM,eAAe,YAAY,OAAO;AACrD,SAAO,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,KAAK,MAAM,EAAE;AACzE;AAUO,SAAS,KAAK,MAAsB;AACzC,MAAI,QAAQ;AACZ,WAAS,KAAK,GAAG,KAAK,KAAK,QAAQ,KAAM,SAAQ,KAAK,KAAK,QAAQ,KAAK,WAAW,EAAE,GAAG,QAAQ;AAChG,UAAQ,UAAU,GAAG,SAAS,EAAE;AAClC;AAEO,SAAS,UAAU,MAAc,MAAsB;AAC5D,SAAO,SAAS,QAAQ,KAAK,WAAW,GAAG,IAAI,GAAG,IAAI,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,KAAK;AACxF;AAEO,SAAS,WACd,OACA,MACA,OAAsB,MACX;AACX,QAAM,OAAO,UAAU,MAAM,MAAM,IAAI;AACvC,QAAM,UAAuB,MAAM,KAAK,SAAS,WAAW,IACxD,YACA,MAAM,KAAK,SAAS,YAAY,IAC9B,YACA;AACN,QAAM,OAAO,GAAG,MAAM,OAAO,QAAQ,MAAM,IAAI,OAAO,EAAE,GAAG,MAAM,KAAK;AACtE,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,UAAU,IAAI;AAAA,IACtB,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,MAAM,MAAM,KAAK,SAAS,mBAAmB,IACzC,oHACA,YAAY,SACV,6IACA;AAAA,IACN,QAAQ,aAAa,QAAQ,IAAI;AAAA,IACjC,UAAU;AAAA,IACV,SAAS,KAAK,GAAG,IAAI;AAAA,EAAK,IAAI,EAAE;AAAA,EAClC;AACF;AAEO,MAAM,aAAa;AAEnB,SAAS,YACd,MACA,OACA,UACW;AACX,QAAM,UACJ,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO,KAAK,UAAU,SAAS,MAAM,MAAM,CAAC;AAC3F,QAAM,UAAU,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,EAClD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK,KAAK,EAAE,EACxC,KAAK,IAAI;AACZ,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,MAAM,MAAM,WAAW,WAAW,IAAI;AAAA,IACtC,MAAM,CAAC,SAAS,aAAa,QAAQ,aAAa,IAAI,SAAS,OAAO,EACnE,OAAO,OAAO,EACd,KAAK,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,UAAU;AAAA,IACV,GAAI,SAAS,KAAK,EAAE,SAAS,SAAS,GAAG,IAAI,CAAC;AAAA,IAC9C,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,EACjD;AACF;AAEA,eAAe,WACb,OACA,KACA,SACwE;AACxE,QAAM,SAAwB,CAAC;AAC/B,QAAM,OAAO,oBAAI,IAA0B;AAC3C,aAAW,QAAQ,MAAM,MAAM,KAAK,KAAK,OAAO,GAAG;AACjD,QAAI,KAAK,SAAS,KAAK,EAAG;AAC1B,UAAM,OAAO,GAAG,GAAG,IAAI,IAAI;AAC3B,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,SAAS,OAAW;AACxB,QAAI;AACF,YAAM,QAAQ,aAAa,MAAM,IAAI;AACrC,WAAK,IAAI,MAAM,MAAM,KAAK;AAAA,IAC5B,SAAS,OAAO;AACd,aAAO,KAAK,EAAE,MAAM,OAAQ,MAAgB,QAAQ,CAAC;AAAA,IACvD;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,OAAO;AACjC;AAEO,SAAS,kBAAkB,SAA0C;AAC1E,QAAM,EAAE,SAAS,KAAK,OAAO,KAAK,IAAI;AACtC,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM,UAAU,CAAC,OAAkB,YAAqB,MAAM,QAAQ,OAAO,OAAO;AACpF,QAAM,SAAS,QAAQ,SAAS,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,IAAI,SAAS,IAAI,MAAM,MAAM,KAAK,CAAC;AACxF,QAAM,WAAW,oBAAI,IAAqB;AAC1C,QAAM,YAAY,CAAC,UAAmB;AACpC,QAAI,QAAQ,SAAS,IAAI,MAAM,GAAG;AAClC,QAAI,CAAC,OAAO;AACV,YAAM,WAAW,CAAC,OAAkB,YAClC,QAAQ,EAAE,GAAG,OAAO,QAAQ,aAAa,MAAM,QAAQ,MAAM,IAAI,EAAE,GAAG,OAAO;AAC/E,cAAQ,IAAI,QAAQ,MAAM,OAAO,KAAK,UAAU,MAAM,MAAM,QAAQ,QAAQ;AAC5E,eAAS,IAAI,MAAM,KAAK,KAAK;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AACA,MAAI,WAAW,oBAAI,IAA0B;AAC7C,QAAM,WAAW,oBAAI,IAAY;AACjC,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS;AACb,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AAEA,iBAAe,aAAa,SAAiC;AAC3D,QAAI,OAAQ;AACZ,UAAM,SAAS,MAAM,OAAO;AAC5B,UAAM,SAAmD,CAAC;AAC1D,UAAM,QAAQ,oBAAI,IAA0B;AAC5C,eAAW,SAAS,QAAQ;AAC1B,YAAM,UAAU,CAAC,GAAI,MAAM,OAAO,OAAO,OAAO,GAAI,GAAI,MAAM,QAAQ,OAAO,OAAO,CAAE;AACtF,YAAM,cAAc,MAAM,UAAU,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,YAAY,OAAO;AACpF,YAAM,QAAQ,MAAM,WAAW,OAAO,GAAG,MAAM,GAAG,aAAa,OAAO;AACtE,iBAAW,SAAS,MAAM,QAAQ,OAAO,GAAG;AAC1C,cAAM,QAAQ,OAAO,OAAO,MAAM,IAAI;AACtC,cAAM,IAAI,MAAM,MAAM,KAAK;AAAA,MAC7B;AACA,iBAAW,SAAS,CAAC,GAAG,SAAS,GAAG,aAAa,GAAG,MAAM,MAAM;AAC9D,eAAO,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,IAChC;AACA,eAAW,CAAC,KAAK,OAAO,KAAK,CAAC,GAAG,QAAQ;AACvC,UAAI,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,QAAQ,GAAG,GAAG;AAC9C,iBAAS,OAAO,GAAG;AACnB,cAAM,QAAQ,MAAM,OAAO;AAAA,MAC7B;AACF,eAAW;AACX,eAAW,EAAE,OAAO,MAAM,KAAK;AAC7B,YAAM,QAAQ,WAAW,OAAO,MAAM,MAAM,MAAM,IAAI,GAAG,OAAO;AAClE,UAAM,aAAa,QAAQ,OAAO;AAAA,EACpC;AAEA,WAAS,OAAO,OAAgB,MAAsD;AACpF,UAAM,QAAQ,oBAAI,IAAyB;AAC3C,eAAW,OAAO,MAAM;AACtB,YAAM,OAAO,QAAQ,WAAW,IAAI,QAAQ,KAAK,KAAK,MAAM,QAAQ;AACpE,YAAM,IAAI,MAAM,CAAC,GAAI,MAAM,IAAI,IAAI,KAAK,CAAC,GAAI,GAAG,CAAC;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,OAAO,OAAgB,SAA0C;AAC9E,QAAI,SAAS,IAAI,MAAM,GAAG,EAAG,QAAO,CAAC;AACrC,aAAS,IAAI,MAAM,GAAG;AACtB,UAAM,OAAO,GAAG,MAAM,GAAG;AACzB,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,SAAS,OAAW,QAAO,CAAC;AAChC,UAAM,SAAwB,CAAC;AAC/B,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,OAAO,WAAW,IAAI,EAAE,IAAI;AAC5D,iBAAW,WAAW,MAAM,WAAW,KAAK,MAAM,MAAM,OAAO;AAC7D,eAAO,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;AACpC,WAAO;AAAA,EACT;AAEA,iBAAe,QAAQ,OAAgB,SAA0C;AAC/E,UAAM,OAAO,GAAG,MAAM,GAAG;AACzB,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,CAAC,MAAM,KAAK,EAAG,QAAO,CAAC;AAC3B,UAAM,EAAE,MAAM,SAAS,IAAI,WAAW,IAAI;AAC1C,QAAI,SAAS,OAAQ,QAAO,SAAS,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,EAAE;AAC5E,UAAM,QAAQ,oBAAI,IAAuB;AACzC,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,OAAO,IAAI;AAC3C,YAAM;AAAA,QACJ;AAAA,QACA,KAAK,IAAI,CAAC,SAAS;AAAA,UACjB,MAAM,IAAI;AAAA,UACV,UAAU,IAAI;AAAA,UACd,SAAS,YAAY,IAAI,QAAQ,IAAI,OAAO;AAAA,UAC5C,MAAM,IAAI;AAAA,QACZ,EAAE;AAAA,MACJ;AACF,UAAM,SAAwB,CAAC;AAC/B,eAAW,CAAC,MAAM,IAAI,KAAK;AACzB,iBAAW,WAAW,MAAM,YAAY,KAAK,MAAM,MAAM,OAAO;AAC9D,eAAO,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;AACpC,QAAI,OAAO,OAAQ,QAAO;AAC1B,UAAM,IAAI,UAAU,GAAG,IAAI,aAAa,MAAM,OAAO;AACrD,UAAM,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,GAAG,OAAO;AAC/C,WAAO,CAAC;AAAA,EACV;AAEA,iBAAe,OAAO,SAAiC;AACrD,UAAM,UAAU,MAAM,QAAQ,SAAS,cAAc,OAAO,IAAI,QAAQ,CAAC;AACzE,UAAM,UAAU,OAAO,OAAO,MAAM;AACpC,QAAI,CAAC,QAAQ,OAAQ;AACrB,eAAW,UAAU;AACnB,YAAM,QAAQ,UAAU,OAAO,MAAgB,OAAO,EAAE,MAAM,MAAM,MAAS;AAC/E,UAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,OAAC,MAAM,GAAG,IAAI,YAAY,GAAG,OAAO,CAAC;AAAA,IACvC,GAAG,OAAO;AAAA,EACZ;AAEA,iBAAe,aAAa,QAA4B,SAAiC;AACvF,UAAM,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,GAAG,EAAE,KAAK,IAAI;AACtD,QAAI,QAAQ,cAAc,OAAQ;AAClC,iBAAa;AACb,UAAM,SAAS,MAAM,OAAO;AAC5B,UAAM,SAAS,MAAM,IAAI;AAAA,MACvB,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,KAAK,WAAW,KAAK,EAAE;AAAA,MAC5D,MAAM,kBAAkB,OAAO;AAAA,MAC/B;AAAA,IACF;AACA,cAAU,OAAO,KAAK,OAAO,QAAQ;AAAA,EACvC;AAEA,QAAM,YAAY,CAAC,YAAqB,OAAO,MAAM,aAAa,OAAO,CAAC;AAE1E,WAAS,kBAAkB,SAAwB;AACjD,iBAAa,cAAc;AAC3B,qBAAiB,WAAW,MAAM;AAChC,WAAK,UAAU,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,IAC/C,GAAG,GAAG;AAAA,EACR;AAEA,iBAAe,eAAe,SAAiC;AAC7D,QAAI,MAAM,MAAM,QAAQ,OAAO,EAAG,OAAM,MAAM,MAAM,OAAO;AAAA,EAC7D;AAEA,SAAO;AAAA,IACL,MAAM,MAAM,SAAS;AACnB,YAAM,MAAM,MAAM,OAAO;AACzB,YAAM,OAAO,OAAO;AACpB,YAAM,UAAU,OAAO;AACvB,mBAAa,YAAY,MAAM;AAC7B,aAAK,eAAe,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,MACpD,GAAG,QAAQ,cAAc,GAAI;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,MAAM,CAAC,OAAO,YAAY,UAAU,SAAS,QAAQ,KAAK,GAAG,SAAS,OAAO,OAAO;AAAA,IACpF,MAAM,QAAQ,MAAM,UAAU,SAAS;AACrC,YAAM,QAAQ,SAAS,IAAI,IAAI;AAC/B,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM;AAAA,QACJ,YAAY,MAAM,OAAO,MAAM,eAAe,UAAU,QAAQ,KAAK,CAAC;AAAA,QACtE;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,MAAM,SAAS;AACnB,eAAS;AACT,mBAAa,cAAc;AAC3B,oBAAc,UAAU;AACxB,YAAM,SAAS,MAAM,OAAO;AAC5B,iBAAW,WAAW,SAAS,OAAO,EAAG,OAAM,QAAQ,MAAM,OAAO;AAAA,IACtE;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport type { Conversation, Harness, TaskId } from '@earendil-works/pi-durable';\nimport type { ExecutionEnv, FileWatcher } from '@earendil-works/pi-durable/env';\nimport type { Activity } from '../kernel/activity.ts';\nimport type { Jobs } from '../kernel/jobs.ts';\nimport { ROOT_USER } from '../layout.ts';\nimport { type Attachment, attachmentPart } from './attachment.ts';\nimport { type BootFacts, booting, LicksHostDoc } from './boot.ts';\nimport { type ConfigError, parseWebhook, type WebhookEntry } from './config.ts';\nimport {\n  type CronJob,\n  installJobs,\n  type LegacyJob,\n  legacyJobs,\n  relickJobs,\n  sendCommand,\n} from './crontab.ts';\nimport { type ConfigFiles, configFiles, Watches } from './fswatch.ts';\nimport type { LickChannel, LickTarget } from './lick.ts';\nimport type { LickEvent, Licks } from './licks.ts';\n\nexport const SLICC_DIR = '.slicc';\n\nexport interface LickSourcesOptions {\n  harness: Harness;\n  root: Conversation;\n  cone: () => Conversation;\n  env: ExecutionEnv;\n  home: string;\n  licks: Licks;\n  flushEvery?: number;\n  activity?: Activity;\n  jobs?: Jobs;\n  dirs?: () => readonly LickDir[] | Promise<readonly LickDir[]>;\n  cronUser?: (target: LickTarget, place: LickDir) => string | undefined;\n  fetch?: typeof fetch;\n}\n\nexport interface LickDir {\n  dir: string;\n  home: string;\n  cone: string | null;\n  env?: ExecutionEnv;\n}\n\nexport function scopedTarget(target: LickTarget, cone: string | null): LickTarget {\n  return cone && target === 'cone' ? (`cone:${cone}` as LickTarget) : target;\n}\n\nexport function scopedName(name: string, cone: string | null): string {\n  return cone ? `${cone}:${name}` : name;\n}\n\nfunction scoped<T extends { name: string; target: LickTarget }>(entry: T, cone: string | null): T {\n  return { ...entry, name: scopedName(entry.name, cone), target: scopedTarget(entry.target, cone) };\n}\n\nexport interface WebhookDelivery {\n  id?: string;\n  headers?: Record<string, string>;\n  body: unknown;\n  verified?: boolean;\n  attachment?: Attachment;\n}\n\nexport async function withAttachment(\n  delivery: WebhookDelivery,\n  fetcher: typeof fetch | undefined\n): Promise<WebhookDelivery> {\n  const { attachment, ...rest } = delivery;\n  if (!attachment) return delivery;\n  const part = await attachmentPart(attachment, fetcher);\n  return { ...rest, body: [rest.body, part].filter(Boolean).join('\\n\\n') };\n}\n\nexport interface LickSources {\n  start(context: Context): Promise<void>;\n  reconcile(context: Context): Promise<void>;\n  boot(facts: BootFacts, context: Context): Promise<void>;\n  webhook(name: string, delivery: WebhookDelivery, context: Context): Promise<boolean>;\n  close(context: Context): Promise<void>;\n}\n\nexport function hash(text: string): string {\n  let value = 2166136261;\n  for (let at = 0; at < text.length; at++) value = Math.imul(value ^ text.charCodeAt(at), 16777619);\n  return (value >>> 0).toString(36);\n}\n\nexport function shortPath(path: string, home: string): string {\n  return path === home || path.startsWith(`${home}/`) ? `~${path.slice(home.length)}` : path;\n}\n\nexport function configLick(\n  error: ConfigError,\n  home: string,\n  cone: string | null = null\n): LickEvent {\n  const file = shortPath(error.file, home);\n  const channel: LickChannel = error.file.includes('/watches/')\n    ? 'fswatch'\n    : error.file.includes('/webhooks/')\n      ? 'webhook'\n      : 'cron';\n  const text = `${error.line ? `line ${error.line}: ` : ''}${error.error}`;\n  return {\n    channel,\n    source: `config:${file}`,\n    title: `Invalid ${file}`,\n    text,\n    body: error.file.endsWith('/crontab.migrated')\n      ? \"Its jobs in the kernel crontab still lack --lick=cron, so they don't fire as cron licks; add it with crontab -.\"\n      : channel === 'cron'\n        ? 'Not moved into the kernel crontab until the file is fixed; the installed crontab is unchanged.\\nThe format is in the slicc-agent README.'\n        : 'Ignored until the file is fixed.\\nThe formats are in the slicc-agent README.',\n    target: scopedTarget('cone', cone),\n    severity: 'error',\n    eventId: hash(`${file}\\n${text}`),\n  };\n}\n\nexport const UNVERIFIED = \"verified: false (the gateway couldn't check this request's signature)\";\n\nexport function webhookLick(\n  name: string,\n  entry: WebhookEntry,\n  delivery: WebhookDelivery\n): LickEvent {\n  const payload =\n    typeof delivery.body === 'string' ? delivery.body : JSON.stringify(delivery.body, null, 2);\n  const headers = Object.entries(delivery.headers ?? {})\n    .map(([key, value]) => `${key}: ${value}`)\n    .join('\\n');\n  return {\n    channel: 'webhook',\n    source: name,\n    title: name,\n    text: entry.message || `Webhook ${name} received a request`,\n    body: [delivery.verified === false ? UNVERIFIED : '', headers, payload]\n      .filter(Boolean)\n      .join('\\n\\n'),\n    target: entry.target,\n    coalesce: false,\n    ...(delivery.id ? { eventId: delivery.id } : {}),\n    ...(entry.triage ? { triage: entry.triage } : {}),\n  };\n}\n\nasync function webhooksIn(\n  files: ConfigFiles,\n  dir: string,\n  context: Context\n): Promise<{ entries: Map<string, WebhookEntry>; errors: ConfigError[] }> {\n  const errors: ConfigError[] = [];\n  const into = new Map<string, WebhookEntry>();\n  for (const name of await files.list(dir, context)) {\n    if (name.endsWith('.v6')) continue;\n    const file = `${dir}/${name}`;\n    const json = await files.read(file, context);\n    if (json === undefined) continue;\n    try {\n      const entry = parseWebhook(file, json);\n      into.set(entry.name, entry);\n    } catch (error) {\n      errors.push({ file, error: (error as Error).message });\n    }\n  }\n  return { entries: into, errors };\n}\n\nexport function createLickSources(options: LickSourcesOptions): LickSources {\n  const { harness, env, licks, home } = options;\n  const files = configFiles(env);\n  const deliver = (event: LickEvent, context: Context) => licks.deliver(event, context);\n  const boots = booting(harness, options.cone, deliver, options.jobs);\n  const dirsOf = options.dirs ?? (() => [{ dir: `${home}/${SLICC_DIR}`, home, cone: null }]);\n  const watching = new Map<string, Watches>();\n  const watchesOf = (place: LickDir) => {\n    let found = watching.get(place.dir);\n    if (!found) {\n      const retarget = (event: LickEvent, context: Context) =>\n        deliver({ ...event, target: scopedTarget(event.target, place.cone) }, context);\n      found = new Watches(place.env ?? env, retarget, place.home, options.activity);\n      watching.set(place.dir, found);\n    }\n    return found;\n  };\n  let webhooks = new Map<string, WebhookEntry>();\n  const relicked = new Set<string>();\n  let control: FileWatcher | undefined;\n  let controlled = '';\n  let reconcileTimer: ReturnType<typeof setTimeout> | undefined;\n  let flushTimer: ReturnType<typeof setInterval> | undefined;\n  let closed = false;\n  let lock: Promise<unknown> = Promise.resolve();\n  const serial = <T>(operation: () => Promise<T>): Promise<T> => {\n    const run = lock.then(operation, operation);\n    lock = run.catch(() => undefined);\n    return run;\n  };\n\n  async function reconcileNow(context: Context): Promise<void> {\n    if (closed) return;\n    const places = await dirsOf();\n    const errors: { error: ConfigError; place: LickDir }[] = [];\n    const hooks = new Map<string, WebhookEntry>();\n    for (const place of places) {\n      const crontab = [...(await relick(place, context)), ...(await migrate(place, context))];\n      const watchErrors = await watchesOf(place).reconcile(`${place.dir}/watches`, context);\n      const found = await webhooksIn(files, `${place.dir}/webhooks`, context);\n      for (const entry of found.entries.values()) {\n        const named = scoped(entry, place.cone);\n        hooks.set(named.name, named);\n      }\n      for (const error of [...crontab, ...watchErrors, ...found.errors])\n        errors.push({ error, place });\n    }\n    for (const [dir, watches] of [...watching])\n      if (!places.some((place) => place.dir === dir)) {\n        watching.delete(dir);\n        await watches.close(context);\n      }\n    webhooks = hooks;\n    for (const { error, place } of errors)\n      await deliver(configLick(error, place.home, place.cone), context);\n    await watchControl(places, context);\n  }\n\n  function byUser(place: LickDir, jobs: readonly LegacyJob[]): Map<string, LegacyJob[]> {\n    const users = new Map<string, LegacyJob[]>();\n    for (const job of jobs) {\n      const user = options.cronUser?.(job.target, place) ?? place.cone ?? ROOT_USER;\n      users.set(user, [...(users.get(user) ?? []), job]);\n    }\n    return users;\n  }\n\n  async function relick(place: LickDir, context: Context): Promise<ConfigError[]> {\n    if (relicked.has(place.dir)) return [];\n    relicked.add(place.dir);\n    const file = `${place.dir}/crontab.migrated`;\n    const text = await files.read(file, context);\n    if (text === undefined) return [];\n    const errors: ConfigError[] = [];\n    for (const [user, list] of byUser(place, legacyJobs(text).jobs))\n      for (const problem of await relickJobs(env, user, list, context))\n        errors.push({ file, ...problem });\n    return errors;\n  }\n\n  async function migrate(place: LickDir, context: Context): Promise<ConfigError[]> {\n    const file = `${place.dir}/crontab`;\n    const text = await files.read(file, context);\n    if (!text?.trim()) return [];\n    const { jobs, problems } = legacyJobs(text);\n    if (problems.length) return problems.map((problem) => ({ file, ...problem }));\n    const users = new Map<string, CronJob[]>();\n    for (const [user, list] of byUser(place, jobs))\n      users.set(\n        user,\n        list.map((job) => ({\n          name: job.name,\n          schedule: job.schedule,\n          command: sendCommand(job.target, job.message),\n          line: job.line,\n        }))\n      );\n    const errors: ConfigError[] = [];\n    for (const [user, list] of users)\n      for (const problem of await installJobs(env, user, list, context))\n        errors.push({ file, ...problem });\n    if (errors.length) return errors;\n    await env.writeFile(`${file}.migrated`, text, context);\n    await env.remove(file, { force: true }, context);\n    return [];\n  }\n\n  async function retire(context: Context): Promise<void> {\n    const stored = (await harness.snapshot(LicksHostDoc, context))?.cron ?? {};\n    const records = Object.values(stored);\n    if (!records.length) return;\n    for (const record of records)\n      await harness.abortTask(record.task as TaskId, context).catch(() => undefined);\n    await harness.commit(async (tx) => {\n      (await tx.doc(LicksHostDoc)).cron = {};\n    }, context);\n  }\n\n  async function watchControl(places: readonly LickDir[], context: Context): Promise<void> {\n    const key = places.map((place) => place.dir).join('\\n');\n    if (key === controlled || closed) return;\n    controlled = key;\n    await control?.close(context);\n    const result = await env.watch(\n      places.map((place) => ({ path: place.dir, recursive: true })),\n      () => scheduleReconcile(context),\n      context\n    );\n    control = result.ok ? result.value : undefined;\n  }\n\n  const reconcile = (context: Context) => serial(() => reconcileNow(context));\n\n  function scheduleReconcile(context: Context): void {\n    clearTimeout(reconcileTimer);\n    reconcileTimer = setTimeout(() => {\n      void reconcile(context).catch(() => undefined);\n    }, 300);\n  }\n\n  async function flushIfWaiting(context: Context): Promise<void> {\n    if (await licks.pending(context)) await licks.flush(context);\n  }\n\n  return {\n    async start(context) {\n      await licks.flush(context);\n      await retire(context);\n      await reconcile(context);\n      flushTimer = setInterval(() => {\n        void flushIfWaiting(context).catch(() => undefined);\n      }, options.flushEvery ?? 2000);\n    },\n    reconcile,\n    boot: boots.boot,\n    async webhook(name, delivery, context) {\n      const entry = webhooks.get(name);\n      if (!entry) return false;\n      await deliver(\n        webhookLick(name, entry, await withAttachment(delivery, options.fetch)),\n        context\n      );\n      return true;\n    },\n    async close(context) {\n      closed = true;\n      boots.stop();\n      clearTimeout(reconcileTimer);\n      clearInterval(flushTimer);\n      await control?.close(context);\n      for (const watches of watching.values()) await watches.close(context);\n    },\n  };\n}\n"],
+  "mappings": "AAKA,SAAS,iBAAiB;AAC1B,SAA0B,sBAAsB;AAChD,SAAyB,SAAS,oBAAoB;AACtD,SAA2B,oBAAuC;AAClE;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAA2B,aAAa,eAAe;AAIhD,MAAM,YAAY;AAwBlB,SAAS,aAAa,QAAoB,MAAiC;AAChF,SAAO,QAAQ,WAAW,SAAU,QAAQ,IAAI,KAAoB;AACtE;AAEO,SAAS,WAAW,MAAc,MAA6B;AACpE,SAAO,OAAO,GAAG,IAAI,IAAI,IAAI,KAAK;AACpC;AAEA,SAAS,OAAuD,OAAU,MAAwB;AAChG,SAAO,EAAE,GAAG,OAAO,MAAM,WAAW,MAAM,MAAM,IAAI,GAAG,QAAQ,aAAa,MAAM,QAAQ,IAAI,EAAE;AAClG;AAUA,eAAsB,eACpB,UACA,SAC0B;AAC1B,QAAM,EAAE,YAAY,GAAG,KAAK,IAAI;AAChC,MAAI,CAAC,WAAY,QAAO;AACxB,QAAM,OAAO,MAAM,eAAe,YAAY,OAAO;AACrD,SAAO,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,MAAM,IAAI,EAAE,OAAO,OAAO,EAAE,KAAK,MAAM,EAAE;AACzE;AAUO,SAAS,KAAK,MAAsB;AACzC,MAAI,QAAQ;AACZ,WAAS,KAAK,GAAG,KAAK,KAAK,QAAQ,KAAM,SAAQ,KAAK,KAAK,QAAQ,KAAK,WAAW,EAAE,GAAG,QAAQ;AAChG,UAAQ,UAAU,GAAG,SAAS,EAAE;AAClC;AAEO,SAAS,UAAU,MAAc,MAAsB;AAC5D,SAAO,SAAS,QAAQ,KAAK,WAAW,GAAG,IAAI,GAAG,IAAI,IAAI,KAAK,MAAM,KAAK,MAAM,CAAC,KAAK;AACxF;AAEO,SAAS,WACd,OACA,MACA,OAAsB,MACX;AACX,QAAM,OAAO,UAAU,MAAM,MAAM,IAAI;AACvC,QAAM,UAAuB,MAAM,KAAK,SAAS,WAAW,IACxD,YACA,MAAM,KAAK,SAAS,YAAY,IAC9B,YACA;AACN,QAAM,OAAO,GAAG,MAAM,OAAO,QAAQ,MAAM,IAAI,OAAO,EAAE,GAAG,MAAM,KAAK;AACtE,SAAO;AAAA,IACL;AAAA,IACA,QAAQ,UAAU,IAAI;AAAA,IACtB,OAAO,WAAW,IAAI;AAAA,IACtB;AAAA,IACA,MAAM,MAAM,KAAK,SAAS,mBAAmB,IACzC,oHACA,YAAY,SACV,6IACA;AAAA,IACN,QAAQ,aAAa,QAAQ,IAAI;AAAA,IACjC,UAAU;AAAA,IACV,SAAS,KAAK,GAAG,IAAI;AAAA,EAAK,IAAI,EAAE;AAAA,EAClC;AACF;AAEO,MAAM,aAAa;AAEnB,SAAS,YACd,MACA,OACA,UACW;AACX,QAAM,UACJ,OAAO,SAAS,SAAS,WAAW,SAAS,OAAO,KAAK,UAAU,SAAS,MAAM,MAAM,CAAC;AAC3F,QAAM,UAAU,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,EAClD,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,GAAG,GAAG,KAAK,KAAK,EAAE,EACxC,KAAK,IAAI;AACZ,SAAO;AAAA,IACL,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,MAAM,MAAM,WAAW,WAAW,IAAI;AAAA,IACtC,MAAM,CAAC,SAAS,aAAa,QAAQ,aAAa,IAAI,SAAS,OAAO,EACnE,OAAO,OAAO,EACd,KAAK,MAAM;AAAA,IACd,QAAQ,MAAM;AAAA,IACd,UAAU;AAAA,IACV,GAAI,SAAS,KAAK,EAAE,SAAS,SAAS,GAAG,IAAI,CAAC;AAAA,IAC9C,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,EACjD;AACF;AAEA,eAAe,WACb,OACA,KACA,SACwE;AACxE,QAAM,SAAwB,CAAC;AAC/B,QAAM,OAAO,oBAAI,IAA0B;AAC3C,aAAW,QAAQ,MAAM,MAAM,KAAK,KAAK,OAAO,GAAG;AACjD,QAAI,KAAK,SAAS,KAAK,EAAG;AAC1B,UAAM,OAAO,GAAG,GAAG,IAAI,IAAI;AAC3B,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,SAAS,OAAW;AACxB,QAAI;AACF,YAAM,QAAQ,aAAa,MAAM,IAAI;AACrC,WAAK,IAAI,MAAM,MAAM,KAAK;AAAA,IAC5B,SAAS,OAAO;AACd,aAAO,KAAK,EAAE,MAAM,OAAQ,MAAgB,QAAQ,CAAC;AAAA,IACvD;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM,OAAO;AACjC;AAEO,SAAS,kBAAkB,SAA0C;AAC1E,QAAM,EAAE,SAAS,KAAK,OAAO,KAAK,IAAI;AACtC,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM,UAAU,CAAC,OAAkB,YAAqB,MAAM,QAAQ,OAAO,OAAO;AACpF,QAAM,QAAQ,QAAQ,SAAS,QAAQ,MAAM,SAAS,QAAQ,IAAI;AAClE,QAAM,SAAS,QAAQ,SAAS,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,IAAI,SAAS,IAAI,MAAM,MAAM,KAAK,CAAC;AACxF,QAAM,WAAW,oBAAI,IAAqB;AAC1C,QAAM,YAAY,CAAC,UAAmB;AACpC,QAAI,QAAQ,SAAS,IAAI,MAAM,GAAG;AAClC,QAAI,CAAC,OAAO;AACV,YAAM,WAAW,CAAC,OAAkB,YAClC,QAAQ,EAAE,GAAG,OAAO,QAAQ,aAAa,MAAM,QAAQ,MAAM,IAAI,EAAE,GAAG,OAAO;AAC/E,cAAQ,IAAI,QAAQ,MAAM,OAAO,KAAK,UAAU,MAAM,MAAM,QAAQ,QAAQ;AAC5E,eAAS,IAAI,MAAM,KAAK,KAAK;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AACA,MAAI,WAAW,oBAAI,IAA0B;AAC7C,QAAM,WAAW,oBAAI,IAAY;AACjC,MAAI;AACJ,MAAI,aAAa;AACjB,MAAI;AACJ,MAAI;AACJ,MAAI,SAAS;AACb,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,QAAM,SAAS,CAAI,cAA4C;AAC7D,UAAM,MAAM,KAAK,KAAK,WAAW,SAAS;AAC1C,WAAO,IAAI,MAAM,MAAM,MAAS;AAChC,WAAO;AAAA,EACT;AAEA,iBAAe,aAAa,SAAiC;AAC3D,QAAI,OAAQ;AACZ,UAAM,SAAS,MAAM,OAAO;AAC5B,UAAM,SAAmD,CAAC;AAC1D,UAAM,QAAQ,oBAAI,IAA0B;AAC5C,eAAW,SAAS,QAAQ;AAC1B,YAAM,UAAU,CAAC,GAAI,MAAM,OAAO,OAAO,OAAO,GAAI,GAAI,MAAM,QAAQ,OAAO,OAAO,CAAE;AACtF,YAAM,cAAc,MAAM,UAAU,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,YAAY,OAAO;AACpF,YAAM,QAAQ,MAAM,WAAW,OAAO,GAAG,MAAM,GAAG,aAAa,OAAO;AACtE,iBAAW,SAAS,MAAM,QAAQ,OAAO,GAAG;AAC1C,cAAM,QAAQ,OAAO,OAAO,MAAM,IAAI;AACtC,cAAM,IAAI,MAAM,MAAM,KAAK;AAAA,MAC7B;AACA,iBAAW,SAAS,CAAC,GAAG,SAAS,GAAG,aAAa,GAAG,MAAM,MAAM;AAC9D,eAAO,KAAK,EAAE,OAAO,MAAM,CAAC;AAAA,IAChC;AACA,eAAW,CAAC,KAAK,OAAO,KAAK,CAAC,GAAG,QAAQ;AACvC,UAAI,CAAC,OAAO,KAAK,CAAC,UAAU,MAAM,QAAQ,GAAG,GAAG;AAC9C,iBAAS,OAAO,GAAG;AACnB,cAAM,QAAQ,MAAM,OAAO;AAAA,MAC7B;AACF,eAAW;AACX,eAAW,EAAE,OAAO,MAAM,KAAK;AAC7B,YAAM,QAAQ,WAAW,OAAO,MAAM,MAAM,MAAM,IAAI,GAAG,OAAO;AAClE,UAAM,aAAa,QAAQ,OAAO;AAAA,EACpC;AAEA,WAAS,OAAO,OAAgB,MAAsD;AACpF,UAAM,QAAQ,oBAAI,IAAyB;AAC3C,eAAW,OAAO,MAAM;AACtB,YAAM,OAAO,QAAQ,WAAW,IAAI,QAAQ,KAAK,KAAK,MAAM,QAAQ;AACpE,YAAM,IAAI,MAAM,CAAC,GAAI,MAAM,IAAI,IAAI,KAAK,CAAC,GAAI,GAAG,CAAC;AAAA,IACnD;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,OAAO,OAAgB,SAA0C;AAC9E,QAAI,SAAS,IAAI,MAAM,GAAG,EAAG,QAAO,CAAC;AACrC,aAAS,IAAI,MAAM,GAAG;AACtB,UAAM,OAAO,GAAG,MAAM,GAAG;AACzB,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,SAAS,OAAW,QAAO,CAAC;AAChC,UAAM,SAAwB,CAAC;AAC/B,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,OAAO,WAAW,IAAI,EAAE,IAAI;AAC5D,iBAAW,WAAW,MAAM,WAAW,KAAK,MAAM,MAAM,OAAO;AAC7D,eAAO,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;AACpC,WAAO;AAAA,EACT;AAEA,iBAAe,QAAQ,OAAgB,SAA0C;AAC/E,UAAM,OAAO,GAAG,MAAM,GAAG;AACzB,UAAM,OAAO,MAAM,MAAM,KAAK,MAAM,OAAO;AAC3C,QAAI,CAAC,MAAM,KAAK,EAAG,QAAO,CAAC;AAC3B,UAAM,EAAE,MAAM,SAAS,IAAI,WAAW,IAAI;AAC1C,QAAI,SAAS,OAAQ,QAAO,SAAS,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,QAAQ,EAAE;AAC5E,UAAM,QAAQ,oBAAI,IAAuB;AACzC,eAAW,CAAC,MAAM,IAAI,KAAK,OAAO,OAAO,IAAI;AAC3C,YAAM;AAAA,QACJ;AAAA,QACA,KAAK,IAAI,CAAC,SAAS;AAAA,UACjB,MAAM,IAAI;AAAA,UACV,UAAU,IAAI;AAAA,UACd,SAAS,YAAY,IAAI,QAAQ,IAAI,OAAO;AAAA,UAC5C,MAAM,IAAI;AAAA,QACZ,EAAE;AAAA,MACJ;AACF,UAAM,SAAwB,CAAC;AAC/B,eAAW,CAAC,MAAM,IAAI,KAAK;AACzB,iBAAW,WAAW,MAAM,YAAY,KAAK,MAAM,MAAM,OAAO;AAC9D,eAAO,KAAK,EAAE,MAAM,GAAG,QAAQ,CAAC;AACpC,QAAI,OAAO,OAAQ,QAAO;AAC1B,UAAM,IAAI,UAAU,GAAG,IAAI,aAAa,MAAM,OAAO;AACrD,UAAM,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,GAAG,OAAO;AAC/C,WAAO,CAAC;AAAA,EACV;AAEA,iBAAe,OAAO,SAAiC;AACrD,UAAM,UAAU,MAAM,QAAQ,SAAS,cAAc,OAAO,IAAI,QAAQ,CAAC;AACzE,UAAM,UAAU,OAAO,OAAO,MAAM;AACpC,QAAI,CAAC,QAAQ,OAAQ;AACrB,eAAW,UAAU;AACnB,YAAM,QAAQ,UAAU,OAAO,MAAgB,OAAO,EAAE,MAAM,MAAM,MAAS;AAC/E,UAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,OAAC,MAAM,GAAG,IAAI,YAAY,GAAG,OAAO,CAAC;AAAA,IACvC,GAAG,OAAO;AAAA,EACZ;AAEA,iBAAe,aAAa,QAA4B,SAAiC;AACvF,UAAM,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,GAAG,EAAE,KAAK,IAAI;AACtD,QAAI,QAAQ,cAAc,OAAQ;AAClC,iBAAa;AACb,UAAM,SAAS,MAAM,OAAO;AAC5B,UAAM,SAAS,MAAM,IAAI;AAAA,MACvB,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,KAAK,WAAW,KAAK,EAAE;AAAA,MAC5D,MAAM,kBAAkB,OAAO;AAAA,MAC/B;AAAA,IACF;AACA,cAAU,OAAO,KAAK,OAAO,QAAQ;AAAA,EACvC;AAEA,QAAM,YAAY,CAAC,YAAqB,OAAO,MAAM,aAAa,OAAO,CAAC;AAE1E,WAAS,kBAAkB,SAAwB;AACjD,iBAAa,cAAc;AAC3B,qBAAiB,WAAW,MAAM;AAChC,WAAK,UAAU,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,IAC/C,GAAG,GAAG;AAAA,EACR;AAEA,iBAAe,eAAe,SAAiC;AAC7D,QAAI,MAAM,MAAM,QAAQ,OAAO,EAAG,OAAM,MAAM,MAAM,OAAO;AAAA,EAC7D;AAEA,SAAO;AAAA,IACL,MAAM,MAAM,SAAS;AACnB,YAAM,MAAM,MAAM,OAAO;AACzB,YAAM,OAAO,OAAO;AACpB,YAAM,UAAU,OAAO;AACvB,mBAAa,YAAY,MAAM;AAC7B,aAAK,eAAe,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,MACpD,GAAG,QAAQ,cAAc,GAAI;AAAA,IAC/B;AAAA,IACA;AAAA,IACA,MAAM,MAAM;AAAA,IACZ,MAAM,QAAQ,MAAM,UAAU,SAAS;AACrC,YAAM,QAAQ,SAAS,IAAI,IAAI;AAC/B,UAAI,CAAC,MAAO,QAAO;AACnB,YAAM;AAAA,QACJ,YAAY,MAAM,OAAO,MAAM,eAAe,UAAU,QAAQ,KAAK,CAAC;AAAA,QACtE;AAAA,MACF;AACA,aAAO;AAAA,IACT;AAAA,IACA,MAAM,MAAM,SAAS;AACnB,eAAS;AACT,YAAM,KAAK;AACX,mBAAa,cAAc;AAC3B,oBAAc,UAAU;AACxB,YAAM,SAAS,MAAM,OAAO;AAC5B,iBAAW,WAAW,SAAS,OAAO,EAAG,OAAM,QAAQ,MAAM,OAAO;AAAA,IACtE;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/main.js

@@ -30,6 +30,7 @@ import { createActivity } from "./kernel/activity.js";
 import { agentUsers, warnSupport } from "./kernel/agent-users.js";
 import { HOME, kernelEnvironment, SliccKernelEnv } from "./kernel/env.js";
 import { processGroups } from "./kernel/groups.js";
+import { backgroundJobs } from "./kernel/jobs.js";
 import { adminOver, userClients } from "./kernel/users.js";
 import { AGENT_DIR, ROOT_HOME } from "./layout.js";
 import { setupLicks } from "./licks/index.js";
@@ -326,13 +327,18 @@ async function start(scope, ports, options, vault) {
   const skills = setupSkills(registry, licks.licks);
   registry.install(secretsExtension({ names, vault }));
   const titles = setupTitles(registry, models, home, at, () => opened);
-  const [activity, groups] = [createActivity(), processGroups(client)];
+  const [activity, groups, jobs] = [
+    createActivity(),
+    processGroups(client),
+    backgroundJobs(client)
+  ];
   const model = options.model ?? await ready.defaultModel();
   let opened;
   const people = users ? agentUsers(users, client, home, () => opened?.agents) : void 0;
   const environment = kernelEnvironment(client, {
     activity,
     groups,
+    jobs,
     identify: identity(() => opened?.agents, model),
     scrub: vault,
     spawn: shellGrants(names),
@@ -345,6 +351,7 @@ async function start(scope, ports, options, vault) {
     env: home,
     home: HOME,
     activity,
+    jobs,
     ...people ? { dirs: () => people.lickDirs(), cronUser: people.cronUser.bind(people) } : {}
   });
   await sources.start(BACKGROUND_CONTEXT);

package/dist/main.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/main.ts"],
-  "sourcesContent": ["import { attachKernel } from '@ai-ecoverse/slicc-kernel';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Provider } from '@earendil-works/pi-ai';\nimport type { Models } from '@earendil-works/pi-ai/models';\nimport {\n  createRegistry,\n  type ModelRef,\n  type Storage,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { CodingTools } from '@earendil-works/pi-durable/tools';\nimport { type Agent, type AgentOptions, openAgent } from './agent.ts';\nimport {\n  type ApprovalJudge,\n  approvalJudge,\n  judgeModelOf,\n  judgeSpender,\n  ownerIntent,\n  seedPolicy,\n  verdictRecorder,\n} from './approvals/index.ts';\nimport { browserGuard } from './browser/guard.ts';\nimport { attachChanges, CHANGES_MS } from './changes/index.ts';\nimport {\n  codemodeExtension,\n  codemodeTool,\n  disabledBySettings,\n  locateWasm,\n  sandboxFactory,\n} from './codemode/index.ts';\nimport { attachFreezer } from './freezer/index.ts';\nimport { lateGelatiere } from './gelatiere/index.ts';\nimport { type AgentHost, hostAgent } from './host.ts';\nimport { imageReads } from './images/index.ts';\nimport { createActivity } from './kernel/activity.ts';\nimport { type AgentUsers, agentUsers, warnSupport } from './kernel/agent-users.ts';\nimport type { KernelClient } from './kernel/client.ts';\nimport { HOME, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nimport { processGroups } from './kernel/groups.ts';\nimport { adminOver, type UserClient, type UserClients, userClients } from './kernel/users.ts';\nimport { AGENT_DIR, ROOT_HOME } from './layout.ts';\nimport { setupLicks } from './licks/index.ts';\nimport { lickTriage } from './licks/triage.ts';\nimport { type McpAccounts, setupMcp } from './mcp/index.ts';\nimport type { MemoryEntry } from './memory/format.ts';\nimport { setupMemory } from './memory/index.ts';\nimport { modelsCommand } from './models/index.ts';\nimport { pageOnly, type Transport, transportFetch } from './net.ts';\nimport { sliccPrompt } from './prompt.ts';\nimport { AZURE, azureBase, VAULT_KNOWN } from './providers.ts';\nimport { createPages } from './remote/pages.ts';\nimport { identity } from './scoops/identity.ts';\nimport { type Assets, packageAssets, type ScoopsRuntime, setupScoops } from './scoops/index.ts';\nimport { vaultCredentials } from './secrets/credentials.ts';\nimport {\n  BEDROCK_ENDPOINTS,\n  type ModelBases,\n  modelRoute,\n  vaultEndpoints,\n} from './secrets/endpoints.ts';\nimport { secretsExtension, shellGrants } from './secrets/extension.ts';\nimport { grantFetch, mcpFetch, vaultFetch } from './secrets/fetch.ts';\nimport { keysMoved, type Wiped, wipeLegacy } from './secrets/legacy.ts';\nimport { secretNames } from './secrets/names.ts';\nimport { type VaultRecords, vaultRecords } from './secrets/records.ts';\nimport { scrubWith } from './secrets/scrub.ts';\nimport { fileStore, type PlainStore } from './secrets/store.ts';\nimport { listenVault, Vault, WAITING_MS } from './secrets/vault.ts';\nimport { type Choosable, unfreeze, unfreezeCreated } from './selection.ts';\nimport {\n  BEDROCK,\n  createAgentSettings,\n  createSliccModels,\n  providerFields,\n  resolveDefaultModel,\n  sliccProviders,\n} from './settings.ts';\nimport { RELOAD_MS, setupSkills } from './skills/index.ts';\nimport { setupSprinkles } from './sprinkles/index.ts';\nimport { openOpfsSqliteStorage } from './sqlite.ts';\nimport {\n  agentVersion,\n  browserConnected,\n  commandsOnPath,\n  kernelBoot,\n  transportName,\n} from './system.ts';\nimport { titlesExtension } from './titles/extension.ts';\nimport { labeler, settingsText, titler } from './titles/generate.ts';\nimport { attachLabels } from './titles/labels.ts';\nimport { type KernelPorts, kernelPorts, serveConnections, type WorkerScope } from './worker.ts';\n\nexport interface AgentWorkerScope extends WorkerScope {\n  fetch: typeof fetch;\n  location: { origin: string };\n}\n\nexport type KernelAttach = (port: MessagePort) => Promise<KernelClient & { transport: Transport }>;\n\nexport interface AgentWorkerOptions {\n  model?: ModelRef;\n  providers?: Provider[];\n  attach?: KernelAttach;\n  store?: () => Promise<PlainStore>;\n  storage?: () => Promise<Storage>;\n  assets?: Assets;\n  codemodeWasm?: () => Promise<WebAssembly.Module | undefined>;\n  codemodeWorker?: string | URL;\n  catalog?: string;\n  users?: boolean;\n  mcpRedirect?: string;\n  approvalMs?: number;\n}\n\nexport function usersOf(\n  admin: MessagePort | undefined,\n  wanted: boolean | undefined,\n  attach: KernelAttach\n): UserClients | undefined {\n  if (!admin) return undefined;\n  if (wanted === false) {\n    admin.close();\n    return undefined;\n  }\n  return userClients(adminOver(admin), attach as (port: MessagePort) => Promise<UserClient>);\n}\n\nexport const STORE_DIR = '/.slicc';\nexport const ACCOUNTS_FILE = `${STORE_DIR}/accounts.json`;\n\nasync function attached(ports: Promise<KernelPorts>, options: AgentWorkerOptions) {\n  const wiped = await wipeLegacy();\n  const attach: KernelAttach = options.attach ?? attachKernel;\n  const { kernel, admin } = await ports;\n  const client = await attach(kernel);\n  const users = usersOf(admin, options.users, attach);\n  await warnSupport(users, client, options.users);\n  const home = new SliccKernelEnv(client, { cwd: HOME });\n  await privateStore(home);\n  return {\n    client,\n    users,\n    home,\n    wiped,\n    at: { home: HOME, ...(users ? { agentDir: AGENT_DIR } : {}) },\n  };\n}\n\nfunction privateStore(env: SliccKernelEnv): Promise<unknown> {\n  return env.exec(`mkdir -p ${STORE_DIR} && chmod 700 ${STORE_DIR}`, undefined, BACKGROUND_CONTEXT);\n}\n\nasync function codemodeTools(\n  client: KernelClient,\n  options: AgentWorkerOptions,\n  native: typeof fetch,\n  extra: Parameters<typeof codemodeTool>[0]['extra'],\n  dir = `${HOME}/.pi/agent`\n) {\n  const settings = await client.fs.readFile(`${dir}/settings.json`).catch(() => undefined);\n  if (disabledBySettings(settings === undefined ? undefined : new TextDecoder().decode(settings)))\n    return [];\n  const sandbox = sandboxFactory(\n    options.codemodeWasm ?? (() => locateWasm(native, new URL(import.meta.url))),\n    options.codemodeWorker\n  );\n  return [\n    codemodeTool({ declared: CodingTools.tools as readonly ToolRegistration[], sandbox, extra }),\n  ];\n}\n\nexport function seesImages(models: Pick<Models, 'getModel'>, ref: ModelRef | undefined): boolean {\n  const found = ref && models.getModel(ref.provider, ref.modelId);\n  return found ? found.input.includes('image') : true;\n}\n\nexport const MCP_CALLBACK = '/oauth/mcp-callback';\n\nasync function openUnfrozen(\n  options: AgentWorkerOptions,\n  { choosable: chosen }: { choosable: Choosable },\n  base: Omit<AgentOptions, 'storage' | 'beforeResume' | 'conversationCreated'>\n): Promise<Agent> {\n  const storage = await (options.storage ?? (() => openOpfsSqliteStorage()))();\n  return openAgent({\n    ...base,\n    storage,\n    conversationCreated: unfreezeCreated(chosen),\n    beforeResume: (harness, using) => unfreeze(harness, storage, chosen, using),\n  });\n}\n\nasync function secretsFor(home: SliccKernelEnv, vault: Vault) {\n  scrubWith(vault);\n  const names = secretNames(home, vault);\n  await names.refresh(BACKGROUND_CONTEXT);\n  return names;\n}\n\nexport function modelBases(\n  providers: readonly Provider[],\n  models: Pick<ReturnType<typeof createSliccModels>, 'getModels'>,\n  env: (providerId: string) => Readonly<Record<string, string>> | undefined = () => undefined\n): ModelBases[] {\n  return providers.map((provider) => ({\n    provider: provider.id,\n    urls: [\n      ...new Set(\n        [\n          provider.baseUrl,\n          ...models.getModels(provider.id).map((model) => model.baseUrl),\n          ...(provider.id === BEDROCK ? BEDROCK_ENDPOINTS : []),\n          ...(provider.id === AZURE ? [azureBase(env(provider.id) ?? {})] : []),\n        ].filter((url): url is string => typeof url === 'string' && url !== '')\n      ),\n    ],\n  }));\n}\n\nfunction mcpVault(\n  vault: Vault,\n  made: { store: PlainStore; records: VaultRecords; endpoints: ReturnType<typeof vaultEndpoints> }\n) {\n  const { store, records, endpoints } = made;\n  return {\n    store,\n    vault: {\n      records,\n      fetch: (server: string, base: typeof fetch) => mcpFetch(vault, base, server),\n      grant: (server: string, base: typeof fetch) => grantFetch(vault, server, base),\n      servers: endpoints.servers,\n      token: endpoints.token,\n    },\n  };\n}\n\nfunction hostSecrets(\n  vault: Vault,\n  names: Awaited<ReturnType<typeof secretsFor>>,\n  parts: readonly { close(): void }[]\n) {\n  return {\n    vault: vault.state,\n    list: () => names.state.value,\n    close: () => {\n      for (const part of parts) part.close();\n    },\n  };\n}\n\nasync function modelsOf(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions,\n  given: { vault: Vault; home: SliccKernelEnv; transport: typeof fetch; version: string }\n) {\n  const { vault, home, transport, version } = given;\n  const store = await (options.store ?? (async () => fileStore(home, ACCOUNTS_FILE)))();\n  const records = vaultRecords(vault);\n  const loaded = records.refresh(BACKGROUND_CONTEXT).catch(() => undefined);\n  const providers = options.providers ?? sliccProviders(version);\n  const fields = await providerFields(store, providers);\n  const credentials = vaultCredentials(records, fields.env, fields.ready);\n  const models = createSliccModels(credentials, providers);\n  const bases = () => modelBases(providers, models, fields.env);\n  const own = () => bases().filter(({ provider }) => !VAULT_KNOWN.has(provider));\n  scope.fetch = vaultFetch(\n    vault,\n    transport,\n    modelRoute(bases, () => records.state.value),\n    records.rejecting\n  );\n  const endpoints = vaultEndpoints(vault);\n  void endpoints.models(own()).catch(() => undefined);\n  const defaultModel = async () => {\n    await Promise.race([loaded, new Promise((resolve) => setTimeout(resolve, WAITING_MS))]);\n    return resolveDefaultModel(credentials, providers, models);\n  };\n  return { store, records, providers, fields, models, bases, own, endpoints, defaultModel };\n}\n\nfunction baseRegistry(facts: Awaited<ReturnType<typeof factsOf>>, origin: string) {\n  const registry = createRegistry();\n  registry.install(CodingTools);\n  registry.install(browserGuard([origin]));\n  registry.install(sliccPrompt(facts));\n  const read = (CodingTools.tools as readonly ToolRegistration[]).find(\n    (tool) => tool.name === 'read'\n  ) as ToolRegistration;\n  registry.install(imageReads(read));\n  return registry;\n}\n\nasync function factsOf(client: KernelClient & { transport: Transport }, native: typeof fetch) {\n  return {\n    version: await agentVersion((url) => native(url)),\n    commands: await commandsOnPath(client),\n    transport: transportName(client.transport),\n    browser: await browserConnected(client),\n  };\n}\n\nfunction routeFetch(scope: AgentWorkerScope, client: KernelClient & { transport: Transport }) {\n  const native = scope.fetch.bind(scope);\n  const loopback = client.loopbackFetch?.bind(client);\n  const transport = transportFetch(client.transport, scope.location.origin, native, loopback);\n  scope.fetch = transport;\n  return { native, transport };\n}\n\nasync function prepare(\n  scope: AgentWorkerScope,\n  kernel: { client: KernelClient & { transport: Transport }; home: SliccKernelEnv; vault: Vault },\n  options: AgentWorkerOptions\n) {\n  const names = await secretsFor(kernel.home, kernel.vault);\n  const { native, transport } = routeFetch(scope, kernel.client);\n  const facts = await factsOf(kernel.client, native);\n  const made = await modelsOf(scope, options, {\n    vault: kernel.vault,\n    home: kernel.home,\n    transport,\n    version: facts.version,\n  });\n  return {\n    names,\n    native,\n    transport,\n    facts,\n    ...made,\n    registry: baseRegistry(facts, scope.location.origin),\n  };\n}\n\nfunction modelsOfAgent(\n  agent: Agent,\n  settings: Awaited<ReturnType<typeof createAgentSettings>>,\n  catalog: Models,\n  vault: Vault\n) {\n  const locked = () => vault.state.value.locked !== 'no';\n  return modelsCommand({ agents: agent.agents, settings, catalog, locked });\n}\n\nasync function settingsOf(\n  made: Awaited<ReturnType<typeof modelsOf>>,\n  mcp: McpAccounts,\n  moved: { agent: Agent; vault: Vault; wiped: Wiped }\n) {\n  const { models, records, fields, providers, own, endpoints } = made;\n  const keys = await keysMoved(moved.agent.harness, { records, vault: moved.vault }, moved.wiped);\n  const settings = await createAgentSettings(models, { records, fields }, providers, {\n    mcp,\n    moved: keys,\n  });\n  settings.state.subscribe(() => void endpoints.models(own()).catch(() => undefined));\n  return settings;\n}\n\nasync function setupApprovals(\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  agent: Agent,\n  stored: { readonly value: readonly MemoryEntry[] | undefined },\n  options: Pick<AgentWorkerOptions, 'approvalMs'>\n) {\n  const memories = () => stored.value;\n  const { approvalMs } = options;\n  await seedPolicy(home, BACKGROUND_CONTEXT).catch(() => false);\n  const settings = settingsText(home, HOME, at.agentDir);\n  const intent = ownerIntent({ env: home, agents: agent.agents, memories });\n  const judge: ApprovalJudge = {\n    judge: approvalJudge({\n      models,\n      model: async (context) => judgeModelOf(await settings(context)),\n      intent,\n      spend: judgeSpender((agentId, context) => agent.agents.conversation(agentId, context)),\n    }),\n    record: verdictRecorder((agentId, context) => agent.agents.conversation(agentId, context)),\n  };\n  return { judge, intent, ...(approvalMs ? { approvalMs } : {}) };\n}\n\nfunction setupTitles(\n  registry: ReturnType<typeof createRegistry>,\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  opened: () => Agent | undefined\n) {\n  const settings = settingsText(home, HOME, at.agentDir);\n  const titleFn = titler(models, settings);\n  const titles = titlesExtension({\n    agents: () => opened()?.agents,\n    harness: () => opened()?.harness,\n    title: () => titleFn,\n  });\n  registry.install(titles.extension);\n  return { titleFn, cancel: titles.cancel, label: labeler(models, settings) };\n}\n\nfunction freezerOf(\n  agent: Agent,\n  parts: {\n    home: SliccKernelEnv;\n    memory: ReturnType<typeof setupMemory>;\n    titles: ReturnType<typeof setupTitles>;\n    people: AgentUsers | undefined;\n    users: UserClients | undefined;\n    ready: { providers: readonly Provider[]; models: ReturnType<typeof createSliccModels> };\n  }\n) {\n  const { home, memory, titles, people, users, ready } = parts;\n  return attachFreezer({\n    harness: agent.harness,\n    agents: agent.agents,\n    env: home,\n    extract: memory.extract,\n    title: titles.titleFn,\n    cancelTitle: titles.cancel,\n    ...(people ? { layout: people.layout } : {}),\n    imports: {\n      env: home,\n      memoryHome: people ? ROOT_HOME : HOME,\n      catalog: ready.models,\n      providers: ready.providers,\n      ...(users ? { users: users.users } : {}),\n      ...(people ? { envOf: (cone: string) => people.envOfAgent(`cone:${cone}`) } : {}),\n    },\n  });\n}\n\nasync function start(\n  scope: AgentWorkerScope,\n  ports: Promise<KernelPorts>,\n  options: AgentWorkerOptions,\n  vault: Vault\n): Promise<AgentHost> {\n  const { client, users, home, at, wiped } = await attached(ports, options);\n  const ready = await prepare(scope, { client, home, vault }, options);\n  const { names, native, transport, facts, models, registry, records, endpoints } = ready;\n  const memory = setupMemory(registry);\n  const coding = CodingTools.tools as readonly ToolRegistration[];\n  const mcp = setupMcp(registry);\n  const codemode = await codemodeTools(client, options, native, mcp.codemode, at.agentDir);\n  registry.install(codemodeExtension(codemode));\n  const licks = setupLicks(registry, transport);\n  licks.licks.triage(lickTriage(models));\n  const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);\n  const skills = setupSkills(registry, licks.licks);\n  registry.install(secretsExtension({ names, vault }));\n  const titles = setupTitles(registry, models, home, at, () => opened);\n  const [activity, groups] = [createActivity(), processGroups(client)];\n  const model = options.model ?? (await ready.defaultModel());\n  let opened: Agent | undefined;\n  const people = users ? agentUsers(users, client, home, () => opened?.agents) : undefined;\n  const environment = kernelEnvironment(client, {\n    activity,\n    groups,\n    identify: identity(() => opened?.agents, model),\n    scrub: vault,\n    spawn: shellGrants(names),\n    ...(people ? { route: people.route } : {}),\n  });\n  const agent = await openUnfrozen(options, scoops, { models, model, registry, env: environment });\n  opened = agent;\n  await people?.start(agent.agents);\n  const sources = licks.attach(agent, {\n    env: home,\n    home: HOME,\n    activity,\n    ...(people ? { dirs: () => people.lickDirs(), cronUser: people.cronUser.bind(people) } : {}),\n  });\n  await sources.start(BACKGROUND_CONTEXT);\n  const booted = { version: facts.version, boot: await kernelBoot(client) };\n  await sources.boot(booted, BACKGROUND_CONTEXT);\n  const skillsRuntime = await skills.attach(\n    {\n      env: home,\n      ...at,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people ? { people: people.people } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const mcpRuntime = await mcp.attach(\n    {\n      env: home,\n      ...at,\n      ...mcpVault(vault, ready),\n      licks: licks.licks,\n      fetch: transport,\n      version: facts.version,\n      reloadMs: RELOAD_MS,\n      codemode: codemode.length > 0,\n      cors: pageOnly(client.transport),\n      redirect: options.mcpRedirect ?? new URL(MCP_CALLBACK, scope.location.origin).href,\n    },\n    BACKGROUND_CONTEXT\n  );\n  const gelatiere = lateGelatiere();\n  const sprinkles = await setupSprinkles().attach(\n    {\n      intercept: gelatiere.intercept,\n      harness: agent.harness,\n      agents: agent.agents,\n      licks: licks.licks,\n      env: home,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people?.sprinkles() ?? {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  people?.follow([sources, skillsRuntime, sprinkles]);\n  let roles: ScoopsRuntime | undefined;\n  const memoryRuntime = await memory.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      env: home,\n      ...at,\n      ...(people ? { home: ROOT_HOME } : {}),\n      reloadMs: RELOAD_MS,\n      roles: async (using) => roles?.roles(using),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const freezer = freezerOf(agent, { home, memory, titles, people, users, ready });\n  licks.licks.guard(freezer.frozenTarget);\n  const settings = await settingsOf(ready, mcpRuntime, { agent, vault, wiped });\n  const pages = createPages({ claim: sprinkles.claim });\n  const runtime = await scoops.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      groups,\n      env: home,\n      envOf: async (conversationId, context) => environment({ conversationId }, context),\n      ...at,\n      ...(people\n        ? { layout: people.layout, spools: people.spools, enforced: people.enforced }\n        : {}),\n      alive: alive(client),\n      reads: skillsRuntime.dirs,\n      memory: memoryRuntime.command,\n      gelatiere: gelatiere.command,\n      freezer: freezer.command,\n      models: modelsOfAgent(agent, settings, models, vault),\n      panel: pages.command,\n      webhook: sources.webhook,\n      mcp: mcp.direct,\n      ...(options.assets ? { assets: options.assets } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  roles = runtime;\n  gelatiere.attach({\n    agents: agent.agents,\n    licks: licks.licks,\n    env: home,\n    home: HOME,\n    ...(await people?.gelatiere(home)),\n    scoops: scoops.scoops,\n    roles: runtime.roles,\n    assets: options.assets ?? packageAssets(),\n    fetch: scope.fetch,\n    skills: skillsRuntime.skills,\n    ...(options.catalog ? { catalog: options.catalog } : {}),\n  });\n  await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => undefined);\n  return hostAgent(agent, {\n    ...(await setupApprovals(models, home, at, agent, memoryRuntime.memories, options)),\n    settings,\n    licks: { licks: licks.licks, sources },\n    scoops: { scoops: scoops.scoops, runtime },\n    skills: skillsRuntime,\n    sprinkles,\n    memory: memoryRuntime,\n    freezer,\n    changes: attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS }),\n    pages,\n    labels: await attachLabels({ ...agent, label: titles.label, vault: vault.state }),\n    mcp: mcpRuntime,\n    ...(users ? { users } : {}),\n    secrets: hostSecrets(vault, names, [names, records, endpoints]),\n    uploads: {\n      env: environment,\n      sees: (ref) => seesImages(models, ref),\n    },\n    monitor: {\n      kernel: client,\n      groups,\n      ...(users ? { users: () => users.users.list() } : {}),\n    },\n  });\n}\n\nexport function alive(client: KernelClient) {\n  return async (pid: number): Promise<boolean> => {\n    if (!client.ps) return true;\n    return (await client.ps()).some((process) => process.pid === pid);\n  };\n}\n\nexport function runAgentWorker(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions = {}\n): Promise<AgentHost> {\n  const vault = new Vault();\n  listenVault(scope, vault);\n  const host = start(scope, kernelPorts(scope), options, vault);\n  host.catch(() => undefined);\n  serveConnections(scope, host);\n  return host;\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AAGnC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,mBAAmB;AAC5B,SAAwC,iBAAiB;AACzD;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAyB,iBAAiB;AAC1C,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAA0B,YAAY,mBAAmB;AAEzD,SAAS,MAAM,mBAAmB,sBAAsB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,WAA8C,mBAAmB;AAC1E,SAAS,WAAW,iBAAiB;AACrC,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAA2B,gBAAgB;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,UAA0B,sBAAsB;AACzD,SAAS,mBAAmB;AAC5B,SAAS,OAAO,WAAW,mBAAmB;AAC9C,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAsB,eAAmC,mBAAmB;AAC5E,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,YAAY,UAAU,kBAAkB;AACjD,SAAS,WAAuB,kBAAkB;AAClD,SAAS,mBAAmB;AAC5B,SAA4B,oBAAoB;AAChD,SAAS,iBAAiB;AAC1B,SAAS,iBAAkC;AAC3C,SAAS,aAAa,OAAO,kBAAkB;AAC/C,SAAyB,UAAU,uBAAuB;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,mBAAmB;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,SAAS,cAAc,cAAc;AAC9C,SAAS,oBAAoB;AAC7B,SAA2B,aAAa,wBAA0C;AAwB3E,SAAS,QACd,OACA,QACA,QACyB;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,WAAW,OAAO;AACpB,UAAM,MAAM;AACZ,WAAO;AAAA,EACT;AACA,SAAO,YAAY,UAAU,KAAK,GAAG,MAAoD;AAC3F;AAEO,MAAM,YAAY;AAClB,MAAM,gBAAgB,GAAG,SAAS;AAEzC,eAAe,SAAS,OAA6B,SAA6B;AAChF,QAAM,QAAQ,MAAM,WAAW;AAC/B,QAAM,SAAuB,QAAQ,UAAU;AAC/C,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM;AAChC,QAAM,SAAS,MAAM,OAAO,MAAM;AAClC,QAAM,QAAQ,QAAQ,OAAO,QAAQ,OAAO,MAAM;AAClD,QAAM,YAAY,OAAO,QAAQ,QAAQ,KAAK;AAC9C,QAAM,OAAO,IAAI,eAAe,QAAQ,EAAE,KAAK,KAAK,CAAC;AACrD,QAAM,aAAa,IAAI;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI,EAAE,MAAM,MAAM,GAAI,QAAQ,EAAE,UAAU,UAAU,IAAI,CAAC,EAAG;AAAA,EAC9D;AACF;AAEA,SAAS,aAAa,KAAuC;AAC3D,SAAO,IAAI,KAAK,YAAY,SAAS,iBAAiB,SAAS,IAAI,QAAW,kBAAkB;AAClG;AAEA,eAAe,cACb,QACA,SACA,QACA,OACA,MAAM,GAAG,IAAI,cACb;AACA,QAAM,WAAW,MAAM,OAAO,GAAG,SAAS,GAAG,GAAG,gBAAgB,EAAE,MAAM,MAAM,MAAS;AACvF,MAAI,mBAAmB,aAAa,SAAY,SAAY,IAAI,YAAY,EAAE,OAAO,QAAQ,CAAC;AAC5F,WAAO,CAAC;AACV,QAAM,UAAU;AAAA,IACd,QAAQ,iBAAiB,MAAM,WAAW,QAAQ,IAAI,IAAI,YAAY,GAAG,CAAC;AAAA,IAC1E,QAAQ;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa,EAAE,UAAU,YAAY,OAAsC,SAAS,MAAM,CAAC;AAAA,EAC7F;AACF;AAEO,SAAS,WAAW,QAAkC,KAAoC;AAC/F,QAAM,QAAQ,OAAO,OAAO,SAAS,IAAI,UAAU,IAAI,OAAO;AAC9D,SAAO,QAAQ,MAAM,MAAM,SAAS,OAAO,IAAI;AACjD;AAEO,MAAM,eAAe;AAE5B,eAAe,aACb,SACA,EAAE,WAAW,OAAO,GACpB,MACgB;AAChB,QAAM,UAAU,OAAO,QAAQ,YAAY,MAAM,sBAAsB,IAAI;AAC3E,SAAO,UAAU;AAAA,IACf,GAAG;AAAA,IACH;AAAA,IACA,qBAAqB,gBAAgB,MAAM;AAAA,IAC3C,cAAc,CAAC,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,KAAK;AAAA,EAC5E,CAAC;AACH;AAEA,eAAe,WAAW,MAAsB,OAAc;AAC5D,YAAU,KAAK;AACf,QAAM,QAAQ,YAAY,MAAM,KAAK;AACrC,QAAM,MAAM,QAAQ,kBAAkB;AACtC,SAAO;AACT;AAEO,SAAS,WACd,WACA,QACA,MAA4E,MAAM,QACpE;AACd,SAAO,UAAU,IAAI,CAAC,cAAc;AAAA,IAClC,UAAU,SAAS;AAAA,IACnB,MAAM;AAAA,MACJ,GAAG,IAAI;AAAA,QACL;AAAA,UACE,SAAS;AAAA,UACT,GAAG,OAAO,UAAU,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO;AAAA,UAC7D,GAAI,SAAS,OAAO,UAAU,oBAAoB,CAAC;AAAA,UACnD,GAAI,SAAS,OAAO,QAAQ,CAAC,UAAU,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,QACrE,EAAE,OAAO,CAAC,QAAuB,OAAO,QAAQ,YAAY,QAAQ,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF,EAAE;AACJ;AAEA,SAAS,SACP,OACA,MACA;AACA,QAAM,EAAE,OAAO,SAAS,UAAU,IAAI;AACtC,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA,OAAO,CAAC,QAAgB,SAAuB,SAAS,OAAO,MAAM,MAAM;AAAA,MAC3E,OAAO,CAAC,QAAgB,SAAuB,WAAW,OAAO,QAAQ,IAAI;AAAA,MAC7E,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,YACP,OACA,OACA,OACA;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,MAAM,MAAM,MAAM,MAAM;AAAA,IACxB,OAAO,MAAM;AACX,iBAAW,QAAQ,MAAO,MAAK,MAAM;AAAA,IACvC;AAAA,EACF;AACF;AAEA,eAAe,SACb,OACA,SACA,OACA;AACA,QAAM,EAAE,OAAO,MAAM,WAAW,QAAQ,IAAI;AAC5C,QAAM,QAAQ,OAAO,QAAQ,UAAU,YAAY,UAAU,MAAM,aAAa,IAAI;AACpF,QAAM,UAAU,aAAa,KAAK;AAClC,QAAM,SAAS,QAAQ,QAAQ,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACxE,QAAM,YAAY,QAAQ,aAAa,eAAe,OAAO;AAC7D,QAAM,SAAS,MAAM,eAAe,OAAO,SAAS;AACpD,QAAM,cAAc,iBAAiB,SAAS,OAAO,KAAK,OAAO,KAAK;AACtE,QAAM,SAAS,kBAAkB,aAAa,SAAS;AACvD,QAAM,QAAQ,MAAM,WAAW,WAAW,QAAQ,OAAO,GAAG;AAC5D,QAAM,MAAM,MAAM,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,CAAC,YAAY,IAAI,QAAQ,CAAC;AAC7E,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,OAAO,MAAM,QAAQ,MAAM,KAAK;AAAA,IAC3C,QAAQ;AAAA,EACV;AACA,QAAM,YAAY,eAAe,KAAK;AACtC,OAAK,UAAU,OAAO,IAAI,CAAC,EAAE,MAAM,MAAM,MAAS;AAClD,QAAM,eAAe,YAAY;AAC/B,UAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC,CAAC,CAAC;AACtF,WAAO,oBAAoB,aAAa,WAAW,MAAM;AAAA,EAC3D;AACA,SAAO,EAAE,OAAO,SAAS,WAAW,QAAQ,QAAQ,OAAO,KAAK,WAAW,aAAa;AAC1F;AAEA,SAAS,aAAa,OAA4C,QAAgB;AAChF,QAAM,WAAW,eAAe;AAChC,WAAS,QAAQ,WAAW;AAC5B,WAAS,QAAQ,aAAa,CAAC,MAAM,CAAC,CAAC;AACvC,WAAS,QAAQ,YAAY,KAAK,CAAC;AACnC,QAAM,OAAQ,YAAY,MAAsC;AAAA,IAC9D,CAAC,SAAS,KAAK,SAAS;AAAA,EAC1B;AACA,WAAS,QAAQ,WAAW,IAAI,CAAC;AACjC,SAAO;AACT;AAEA,eAAe,QAAQ,QAAiD,QAAsB;AAC5F,SAAO;AAAA,IACL,SAAS,MAAM,aAAa,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAChD,UAAU,MAAM,eAAe,MAAM;AAAA,IACrC,WAAW,cAAc,OAAO,SAAS;AAAA,IACzC,SAAS,MAAM,iBAAiB,MAAM;AAAA,EACxC;AACF;AAEA,SAAS,WAAW,OAAyB,QAAiD;AAC5F,QAAM,SAAS,MAAM,MAAM,KAAK,KAAK;AACrC,QAAM,WAAW,OAAO,eAAe,KAAK,MAAM;AAClD,QAAM,YAAY,eAAe,OAAO,WAAW,MAAM,SAAS,QAAQ,QAAQ,QAAQ;AAC1F,QAAM,QAAQ;AACd,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAe,QACb,OACA,QACA,SACA;AACA,QAAM,QAAQ,MAAM,WAAW,OAAO,MAAM,OAAO,KAAK;AACxD,QAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,OAAO,OAAO,MAAM;AAC7D,QAAM,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM;AACjD,QAAM,OAAO,MAAM,SAAS,OAAO,SAAS;AAAA,IAC1C,OAAO,OAAO;AAAA,IACd,MAAM,OAAO;AAAA,IACb;AAAA,IACA,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH,UAAU,aAAa,OAAO,MAAM,SAAS,MAAM;AAAA,EACrD;AACF;AAEA,SAAS,cACP,OACA,UACA,SACA,OACA;AACA,QAAM,SAAS,MAAM,MAAM,MAAM,MAAM,WAAW;AAClD,SAAO,cAAc,EAAE,QAAQ,MAAM,QAAQ,UAAU,SAAS,OAAO,CAAC;AAC1E;AAEA,eAAe,WACb,MACA,KACA,OACA;AACA,QAAM,EAAE,QAAQ,SAAS,QAAQ,WAAW,KAAK,UAAU,IAAI;AAC/D,QAAM,OAAO,MAAM,UAAU,MAAM,MAAM,SAAS,EAAE,SAAS,OAAO,MAAM,MAAM,GAAG,MAAM,KAAK;AAC9F,QAAM,WAAW,MAAM,oBAAoB,QAAQ,EAAE,SAAS,OAAO,GAAG,WAAW;AAAA,IACjF;AAAA,IACA,OAAO;AAAA,EACT,CAAC;AACD,WAAS,MAAM,UAAU,MAAM,KAAK,UAAU,OAAO,IAAI,CAAC,EAAE,MAAM,MAAM,MAAS,CAAC;AAClF,SAAO;AACT;AAEA,eAAe,eACb,QACA,MACA,IACA,OACA,QACA,SACA;AACA,QAAM,WAAW,MAAM,OAAO;AAC9B,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,WAAW,MAAM,kBAAkB,EAAE,MAAM,MAAM,KAAK;AAC5D,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,SAAS,YAAY,EAAE,KAAK,MAAM,QAAQ,MAAM,QAAQ,SAAS,CAAC;AACxE,QAAM,QAAuB;AAAA,IAC3B,OAAO,cAAc;AAAA,MACnB;AAAA,MACA,OAAO,OAAO,YAAY,aAAa,MAAM,SAAS,OAAO,CAAC;AAAA,MAC9D;AAAA,MACA,OAAO,aAAa,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,IACvF,CAAC;AAAA,IACD,QAAQ,gBAAgB,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,EAC3F;AACA,SAAO,EAAE,OAAO,QAAQ,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAChE;AAEA,SAAS,YACP,UACA,QACA,MACA,IACA,QACA;AACA,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,UAAU,OAAO,QAAQ,QAAQ;AACvC,QAAM,SAAS,gBAAgB;AAAA,IAC7B,QAAQ,MAAM,OAAO,GAAG;AAAA,IACxB,SAAS,MAAM,OAAO,GAAG;AAAA,IACzB,OAAO,MAAM;AAAA,EACf,CAAC;AACD,WAAS,QAAQ,OAAO,SAAS;AACjC,SAAO,EAAE,SAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AAC5E;AAEA,SAAS,UACP,OACA,OAQA;AACA,QAAM,EAAE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,IAAI;AACvD,SAAO,cAAc;AAAA,IACnB,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,KAAK;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,IACd,aAAa,OAAO;AAAA,IACpB,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC1C,SAAS;AAAA,MACP,KAAK;AAAA,MACL,YAAY,SAAS,YAAY;AAAA,MACjC,SAAS,MAAM;AAAA,MACf,WAAW,MAAM;AAAA,MACjB,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MACtC,GAAI,SAAS,EAAE,OAAO,CAAC,SAAiB,OAAO,WAAW,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC;AAAA,IACjF;AAAA,EACF,CAAC;AACH;AAEA,eAAe,MACb,OACA,OACA,SACA,OACoB;AACpB,QAAM,EAAE,QAAQ,OAAO,MAAM,IAAI,MAAM,IAAI,MAAM,SAAS,OAAO,OAAO;AACxE,QAAM,QAAQ,MAAM,QAAQ,OAAO,EAAE,QAAQ,MAAM,MAAM,GAAG,OAAO;AACnE,QAAM,EAAE,OAAO,QAAQ,WAAW,OAAO,QAAQ,UAAU,SAAS,UAAU,IAAI;AAClF,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,SAAS,YAAY;AAC3B,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WAAW,MAAM,cAAc,QAAQ,SAAS,QAAQ,IAAI,UAAU,GAAG,QAAQ;AACvF,WAAS,QAAQ,kBAAkB,QAAQ,CAAC;AAC5C,QAAM,QAAQ,WAAW,UAAU,SAAS;AAC5C,QAAM,MAAM,OAAO,WAAW,MAAM,CAAC;AACrC,QAAM,SAAS,YAAY,UAAU,MAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,KAAK,CAAC;AAC3F,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK;AAChD,WAAS,QAAQ,iBAAiB,EAAE,OAAO,MAAM,CAAC,CAAC;AACnD,QAAM,SAAS,YAAY,UAAU,QAAQ,MAAM,IAAI,MAAM,MAAM;AACnE,QAAM,CAAC,UAAU,MAAM,IAAI,CAAC,eAAe,GAAG,cAAc,MAAM,CAAC;AACnE,QAAM,QAAQ,QAAQ,SAAU,MAAM,MAAM,aAAa;AACzD,MAAI;AACJ,QAAM,SAAS,QAAQ,WAAW,OAAO,QAAQ,MAAM,MAAM,QAAQ,MAAM,IAAI;AAC/E,QAAM,cAAc,kBAAkB,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,UAAU,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,IAC9C,OAAO;AAAA,IACP,OAAO,YAAY,KAAK;AAAA,IACxB,GAAI,SAAS,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,EAC1C,CAAC;AACD,QAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,EAAE,QAAQ,OAAO,UAAU,KAAK,YAAY,CAAC;AAC/F,WAAS;AACT,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,UAAU,MAAM,OAAO,OAAO;AAAA,IAClC,KAAK;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,GAAI,SAAS,EAAE,MAAM,MAAM,OAAO,SAAS,GAAG,UAAU,OAAO,SAAS,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,EAC5F,CAAC;AACD,QAAM,QAAQ,MAAM,kBAAkB;AACtC,QAAM,SAAS,EAAE,SAAS,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM,EAAE;AACxE,QAAM,QAAQ,KAAK,QAAQ,kBAAkB;AAC7C,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAAA,IAC3B;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAG,SAAS,OAAO,KAAK;AAAA,MACxB,OAAO,MAAM;AAAA,MACb,OAAO;AAAA,MACP,SAAS,MAAM;AAAA,MACf,UAAU;AAAA,MACV,UAAU,SAAS,SAAS;AAAA,MAC5B,MAAM,SAAS,OAAO,SAAS;AAAA,MAC/B,UAAU,QAAQ,eAAe,IAAI,IAAI,cAAc,MAAM,SAAS,MAAM,EAAE;AAAA,IAChF;AAAA,IACA;AAAA,EACF;AACA,QAAM,YAAY,cAAc;AAChC,QAAM,YAAY,MAAM,eAAe,EAAE;AAAA,IACvC;AAAA,MACE,WAAW,UAAU;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,KAAK;AAAA,MACL,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,QAAQ,UAAU,KAAK,CAAC;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,UAAQ,OAAO,CAAC,SAAS,eAAe,SAAS,CAAC;AAClD,MAAI;AACJ,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAI,SAAS,EAAE,MAAM,UAAU,IAAI,CAAC;AAAA,MACpC,UAAU;AAAA,MACV,OAAO,OAAO,UAAU,OAAO,MAAM,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,UAAU,OAAO,EAAE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,CAAC;AAC/E,QAAM,MAAM,MAAM,QAAQ,YAAY;AACtC,QAAM,WAAW,MAAM,WAAW,OAAO,YAAY,EAAE,OAAO,OAAO,MAAM,CAAC;AAC5E,QAAM,QAAQ,YAAY,EAAE,OAAO,UAAU,MAAM,CAAC;AACpD,QAAM,UAAU,MAAM,OAAO;AAAA,IAC3B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,KAAK;AAAA,MACL,OAAO,OAAO,gBAAgB,YAAY,YAAY,EAAE,eAAe,GAAG,OAAO;AAAA,MACjF,GAAG;AAAA,MACH,GAAI,SACA,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS,IAC1E,CAAC;AAAA,MACL,OAAO,MAAM,MAAM;AAAA,MACnB,OAAO,cAAc;AAAA,MACrB,QAAQ,cAAc;AAAA,MACtB,WAAW,UAAU;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,QAAQ,cAAc,OAAO,UAAU,QAAQ,KAAK;AAAA,MACpD,OAAO,MAAM;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,KAAK,IAAI;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AACA,UAAQ;AACR,YAAU,OAAO;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,KAAK;AAAA,IACL,MAAM;AAAA,IACN,GAAI,MAAM,QAAQ,UAAU,IAAI;AAAA,IAChC,QAAQ,OAAO;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ,UAAU,cAAc;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,QAAQ,cAAc;AAAA,IACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD,CAAC;AACD,QAAM,cAAc,OAAO,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACpE,SAAO,UAAU,OAAO;AAAA,IACtB,GAAI,MAAM,eAAe,QAAQ,MAAM,IAAI,OAAO,cAAc,UAAU,OAAO;AAAA,IACjF;AAAA,IACA,OAAO,EAAE,OAAO,MAAM,OAAO,QAAQ;AAAA,IACrC,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,SAAS,cAAc,EAAE,QAAQ,MAAM,QAAQ,KAAK,MAAM,UAAU,WAAW,CAAC;AAAA,IAChF;AAAA,IACA,QAAQ,MAAM,aAAa,EAAE,GAAG,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,MAAM,CAAC;AAAA,IAChF,KAAK;AAAA,IACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,SAAS,YAAY,OAAO,OAAO,CAAC,OAAO,SAAS,SAAS,CAAC;AAAA,IAC9D,SAAS;AAAA,MACP,KAAK;AAAA,MACL,MAAM,CAAC,QAAQ,WAAW,QAAQ,GAAG;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR;AAAA,MACA,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,MAAM,KAAK,EAAE,IAAI,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,MAAM,QAAsB;AAC1C,SAAO,OAAO,QAAkC;AAC9C,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAQ,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG;AAAA,EAClE;AACF;AAEO,SAAS,eACd,OACA,UAA8B,CAAC,GACX;AACpB,QAAM,QAAQ,IAAI,MAAM;AACxB,cAAY,OAAO,KAAK;AACxB,QAAM,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS,KAAK;AAC5D,OAAK,MAAM,MAAM,MAAS;AAC1B,mBAAiB,OAAO,IAAI;AAC5B,SAAO;AACT;",
+  "sourcesContent": ["import { attachKernel } from '@ai-ecoverse/slicc-kernel';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Provider } from '@earendil-works/pi-ai';\nimport type { Models } from '@earendil-works/pi-ai/models';\nimport {\n  createRegistry,\n  type ModelRef,\n  type Storage,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { CodingTools } from '@earendil-works/pi-durable/tools';\nimport { type Agent, type AgentOptions, openAgent } from './agent.ts';\nimport {\n  type ApprovalJudge,\n  approvalJudge,\n  judgeModelOf,\n  judgeSpender,\n  ownerIntent,\n  seedPolicy,\n  verdictRecorder,\n} from './approvals/index.ts';\nimport { browserGuard } from './browser/guard.ts';\nimport { attachChanges, CHANGES_MS } from './changes/index.ts';\nimport {\n  codemodeExtension,\n  codemodeTool,\n  disabledBySettings,\n  locateWasm,\n  sandboxFactory,\n} from './codemode/index.ts';\nimport { attachFreezer } from './freezer/index.ts';\nimport { lateGelatiere } from './gelatiere/index.ts';\nimport { type AgentHost, hostAgent } from './host.ts';\nimport { imageReads } from './images/index.ts';\nimport { createActivity } from './kernel/activity.ts';\nimport { type AgentUsers, agentUsers, warnSupport } from './kernel/agent-users.ts';\nimport type { KernelClient } from './kernel/client.ts';\nimport { HOME, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nimport { processGroups } from './kernel/groups.ts';\nimport { backgroundJobs } from './kernel/jobs.ts';\nimport { adminOver, type UserClient, type UserClients, userClients } from './kernel/users.ts';\nimport { AGENT_DIR, ROOT_HOME } from './layout.ts';\nimport { setupLicks } from './licks/index.ts';\nimport { lickTriage } from './licks/triage.ts';\nimport { type McpAccounts, setupMcp } from './mcp/index.ts';\nimport type { MemoryEntry } from './memory/format.ts';\nimport { setupMemory } from './memory/index.ts';\nimport { modelsCommand } from './models/index.ts';\nimport { pageOnly, type Transport, transportFetch } from './net.ts';\nimport { sliccPrompt } from './prompt.ts';\nimport { AZURE, azureBase, VAULT_KNOWN } from './providers.ts';\nimport { createPages } from './remote/pages.ts';\nimport { identity } from './scoops/identity.ts';\nimport { type Assets, packageAssets, type ScoopsRuntime, setupScoops } from './scoops/index.ts';\nimport { vaultCredentials } from './secrets/credentials.ts';\nimport {\n  BEDROCK_ENDPOINTS,\n  type ModelBases,\n  modelRoute,\n  vaultEndpoints,\n} from './secrets/endpoints.ts';\nimport { secretsExtension, shellGrants } from './secrets/extension.ts';\nimport { grantFetch, mcpFetch, vaultFetch } from './secrets/fetch.ts';\nimport { keysMoved, type Wiped, wipeLegacy } from './secrets/legacy.ts';\nimport { secretNames } from './secrets/names.ts';\nimport { type VaultRecords, vaultRecords } from './secrets/records.ts';\nimport { scrubWith } from './secrets/scrub.ts';\nimport { fileStore, type PlainStore } from './secrets/store.ts';\nimport { listenVault, Vault, WAITING_MS } from './secrets/vault.ts';\nimport { type Choosable, unfreeze, unfreezeCreated } from './selection.ts';\nimport {\n  BEDROCK,\n  createAgentSettings,\n  createSliccModels,\n  providerFields,\n  resolveDefaultModel,\n  sliccProviders,\n} from './settings.ts';\nimport { RELOAD_MS, setupSkills } from './skills/index.ts';\nimport { setupSprinkles } from './sprinkles/index.ts';\nimport { openOpfsSqliteStorage } from './sqlite.ts';\nimport {\n  agentVersion,\n  browserConnected,\n  commandsOnPath,\n  kernelBoot,\n  transportName,\n} from './system.ts';\nimport { titlesExtension } from './titles/extension.ts';\nimport { labeler, settingsText, titler } from './titles/generate.ts';\nimport { attachLabels } from './titles/labels.ts';\nimport { type KernelPorts, kernelPorts, serveConnections, type WorkerScope } from './worker.ts';\n\nexport interface AgentWorkerScope extends WorkerScope {\n  fetch: typeof fetch;\n  location: { origin: string };\n}\n\nexport type KernelAttach = (port: MessagePort) => Promise<KernelClient & { transport: Transport }>;\n\nexport interface AgentWorkerOptions {\n  model?: ModelRef;\n  providers?: Provider[];\n  attach?: KernelAttach;\n  store?: () => Promise<PlainStore>;\n  storage?: () => Promise<Storage>;\n  assets?: Assets;\n  codemodeWasm?: () => Promise<WebAssembly.Module | undefined>;\n  codemodeWorker?: string | URL;\n  catalog?: string;\n  users?: boolean;\n  mcpRedirect?: string;\n  approvalMs?: number;\n}\n\nexport function usersOf(\n  admin: MessagePort | undefined,\n  wanted: boolean | undefined,\n  attach: KernelAttach\n): UserClients | undefined {\n  if (!admin) return undefined;\n  if (wanted === false) {\n    admin.close();\n    return undefined;\n  }\n  return userClients(adminOver(admin), attach as (port: MessagePort) => Promise<UserClient>);\n}\n\nexport const STORE_DIR = '/.slicc';\nexport const ACCOUNTS_FILE = `${STORE_DIR}/accounts.json`;\n\nasync function attached(ports: Promise<KernelPorts>, options: AgentWorkerOptions) {\n  const wiped = await wipeLegacy();\n  const attach: KernelAttach = options.attach ?? attachKernel;\n  const { kernel, admin } = await ports;\n  const client = await attach(kernel);\n  const users = usersOf(admin, options.users, attach);\n  await warnSupport(users, client, options.users);\n  const home = new SliccKernelEnv(client, { cwd: HOME });\n  await privateStore(home);\n  return {\n    client,\n    users,\n    home,\n    wiped,\n    at: { home: HOME, ...(users ? { agentDir: AGENT_DIR } : {}) },\n  };\n}\n\nfunction privateStore(env: SliccKernelEnv): Promise<unknown> {\n  return env.exec(`mkdir -p ${STORE_DIR} && chmod 700 ${STORE_DIR}`, undefined, BACKGROUND_CONTEXT);\n}\n\nasync function codemodeTools(\n  client: KernelClient,\n  options: AgentWorkerOptions,\n  native: typeof fetch,\n  extra: Parameters<typeof codemodeTool>[0]['extra'],\n  dir = `${HOME}/.pi/agent`\n) {\n  const settings = await client.fs.readFile(`${dir}/settings.json`).catch(() => undefined);\n  if (disabledBySettings(settings === undefined ? undefined : new TextDecoder().decode(settings)))\n    return [];\n  const sandbox = sandboxFactory(\n    options.codemodeWasm ?? (() => locateWasm(native, new URL(import.meta.url))),\n    options.codemodeWorker\n  );\n  return [\n    codemodeTool({ declared: CodingTools.tools as readonly ToolRegistration[], sandbox, extra }),\n  ];\n}\n\nexport function seesImages(models: Pick<Models, 'getModel'>, ref: ModelRef | undefined): boolean {\n  const found = ref && models.getModel(ref.provider, ref.modelId);\n  return found ? found.input.includes('image') : true;\n}\n\nexport const MCP_CALLBACK = '/oauth/mcp-callback';\n\nasync function openUnfrozen(\n  options: AgentWorkerOptions,\n  { choosable: chosen }: { choosable: Choosable },\n  base: Omit<AgentOptions, 'storage' | 'beforeResume' | 'conversationCreated'>\n): Promise<Agent> {\n  const storage = await (options.storage ?? (() => openOpfsSqliteStorage()))();\n  return openAgent({\n    ...base,\n    storage,\n    conversationCreated: unfreezeCreated(chosen),\n    beforeResume: (harness, using) => unfreeze(harness, storage, chosen, using),\n  });\n}\n\nasync function secretsFor(home: SliccKernelEnv, vault: Vault) {\n  scrubWith(vault);\n  const names = secretNames(home, vault);\n  await names.refresh(BACKGROUND_CONTEXT);\n  return names;\n}\n\nexport function modelBases(\n  providers: readonly Provider[],\n  models: Pick<ReturnType<typeof createSliccModels>, 'getModels'>,\n  env: (providerId: string) => Readonly<Record<string, string>> | undefined = () => undefined\n): ModelBases[] {\n  return providers.map((provider) => ({\n    provider: provider.id,\n    urls: [\n      ...new Set(\n        [\n          provider.baseUrl,\n          ...models.getModels(provider.id).map((model) => model.baseUrl),\n          ...(provider.id === BEDROCK ? BEDROCK_ENDPOINTS : []),\n          ...(provider.id === AZURE ? [azureBase(env(provider.id) ?? {})] : []),\n        ].filter((url): url is string => typeof url === 'string' && url !== '')\n      ),\n    ],\n  }));\n}\n\nfunction mcpVault(\n  vault: Vault,\n  made: { store: PlainStore; records: VaultRecords; endpoints: ReturnType<typeof vaultEndpoints> }\n) {\n  const { store, records, endpoints } = made;\n  return {\n    store,\n    vault: {\n      records,\n      fetch: (server: string, base: typeof fetch) => mcpFetch(vault, base, server),\n      grant: (server: string, base: typeof fetch) => grantFetch(vault, server, base),\n      servers: endpoints.servers,\n      token: endpoints.token,\n    },\n  };\n}\n\nfunction hostSecrets(\n  vault: Vault,\n  names: Awaited<ReturnType<typeof secretsFor>>,\n  parts: readonly { close(): void }[]\n) {\n  return {\n    vault: vault.state,\n    list: () => names.state.value,\n    close: () => {\n      for (const part of parts) part.close();\n    },\n  };\n}\n\nasync function modelsOf(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions,\n  given: { vault: Vault; home: SliccKernelEnv; transport: typeof fetch; version: string }\n) {\n  const { vault, home, transport, version } = given;\n  const store = await (options.store ?? (async () => fileStore(home, ACCOUNTS_FILE)))();\n  const records = vaultRecords(vault);\n  const loaded = records.refresh(BACKGROUND_CONTEXT).catch(() => undefined);\n  const providers = options.providers ?? sliccProviders(version);\n  const fields = await providerFields(store, providers);\n  const credentials = vaultCredentials(records, fields.env, fields.ready);\n  const models = createSliccModels(credentials, providers);\n  const bases = () => modelBases(providers, models, fields.env);\n  const own = () => bases().filter(({ provider }) => !VAULT_KNOWN.has(provider));\n  scope.fetch = vaultFetch(\n    vault,\n    transport,\n    modelRoute(bases, () => records.state.value),\n    records.rejecting\n  );\n  const endpoints = vaultEndpoints(vault);\n  void endpoints.models(own()).catch(() => undefined);\n  const defaultModel = async () => {\n    await Promise.race([loaded, new Promise((resolve) => setTimeout(resolve, WAITING_MS))]);\n    return resolveDefaultModel(credentials, providers, models);\n  };\n  return { store, records, providers, fields, models, bases, own, endpoints, defaultModel };\n}\n\nfunction baseRegistry(facts: Awaited<ReturnType<typeof factsOf>>, origin: string) {\n  const registry = createRegistry();\n  registry.install(CodingTools);\n  registry.install(browserGuard([origin]));\n  registry.install(sliccPrompt(facts));\n  const read = (CodingTools.tools as readonly ToolRegistration[]).find(\n    (tool) => tool.name === 'read'\n  ) as ToolRegistration;\n  registry.install(imageReads(read));\n  return registry;\n}\n\nasync function factsOf(client: KernelClient & { transport: Transport }, native: typeof fetch) {\n  return {\n    version: await agentVersion((url) => native(url)),\n    commands: await commandsOnPath(client),\n    transport: transportName(client.transport),\n    browser: await browserConnected(client),\n  };\n}\n\nfunction routeFetch(scope: AgentWorkerScope, client: KernelClient & { transport: Transport }) {\n  const native = scope.fetch.bind(scope);\n  const loopback = client.loopbackFetch?.bind(client);\n  const transport = transportFetch(client.transport, scope.location.origin, native, loopback);\n  scope.fetch = transport;\n  return { native, transport };\n}\n\nasync function prepare(\n  scope: AgentWorkerScope,\n  kernel: { client: KernelClient & { transport: Transport }; home: SliccKernelEnv; vault: Vault },\n  options: AgentWorkerOptions\n) {\n  const names = await secretsFor(kernel.home, kernel.vault);\n  const { native, transport } = routeFetch(scope, kernel.client);\n  const facts = await factsOf(kernel.client, native);\n  const made = await modelsOf(scope, options, {\n    vault: kernel.vault,\n    home: kernel.home,\n    transport,\n    version: facts.version,\n  });\n  return {\n    names,\n    native,\n    transport,\n    facts,\n    ...made,\n    registry: baseRegistry(facts, scope.location.origin),\n  };\n}\n\nfunction modelsOfAgent(\n  agent: Agent,\n  settings: Awaited<ReturnType<typeof createAgentSettings>>,\n  catalog: Models,\n  vault: Vault\n) {\n  const locked = () => vault.state.value.locked !== 'no';\n  return modelsCommand({ agents: agent.agents, settings, catalog, locked });\n}\n\nasync function settingsOf(\n  made: Awaited<ReturnType<typeof modelsOf>>,\n  mcp: McpAccounts,\n  moved: { agent: Agent; vault: Vault; wiped: Wiped }\n) {\n  const { models, records, fields, providers, own, endpoints } = made;\n  const keys = await keysMoved(moved.agent.harness, { records, vault: moved.vault }, moved.wiped);\n  const settings = await createAgentSettings(models, { records, fields }, providers, {\n    mcp,\n    moved: keys,\n  });\n  settings.state.subscribe(() => void endpoints.models(own()).catch(() => undefined));\n  return settings;\n}\n\nasync function setupApprovals(\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  agent: Agent,\n  stored: { readonly value: readonly MemoryEntry[] | undefined },\n  options: Pick<AgentWorkerOptions, 'approvalMs'>\n) {\n  const memories = () => stored.value;\n  const { approvalMs } = options;\n  await seedPolicy(home, BACKGROUND_CONTEXT).catch(() => false);\n  const settings = settingsText(home, HOME, at.agentDir);\n  const intent = ownerIntent({ env: home, agents: agent.agents, memories });\n  const judge: ApprovalJudge = {\n    judge: approvalJudge({\n      models,\n      model: async (context) => judgeModelOf(await settings(context)),\n      intent,\n      spend: judgeSpender((agentId, context) => agent.agents.conversation(agentId, context)),\n    }),\n    record: verdictRecorder((agentId, context) => agent.agents.conversation(agentId, context)),\n  };\n  return { judge, intent, ...(approvalMs ? { approvalMs } : {}) };\n}\n\nfunction setupTitles(\n  registry: ReturnType<typeof createRegistry>,\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  opened: () => Agent | undefined\n) {\n  const settings = settingsText(home, HOME, at.agentDir);\n  const titleFn = titler(models, settings);\n  const titles = titlesExtension({\n    agents: () => opened()?.agents,\n    harness: () => opened()?.harness,\n    title: () => titleFn,\n  });\n  registry.install(titles.extension);\n  return { titleFn, cancel: titles.cancel, label: labeler(models, settings) };\n}\n\nfunction freezerOf(\n  agent: Agent,\n  parts: {\n    home: SliccKernelEnv;\n    memory: ReturnType<typeof setupMemory>;\n    titles: ReturnType<typeof setupTitles>;\n    people: AgentUsers | undefined;\n    users: UserClients | undefined;\n    ready: { providers: readonly Provider[]; models: ReturnType<typeof createSliccModels> };\n  }\n) {\n  const { home, memory, titles, people, users, ready } = parts;\n  return attachFreezer({\n    harness: agent.harness,\n    agents: agent.agents,\n    env: home,\n    extract: memory.extract,\n    title: titles.titleFn,\n    cancelTitle: titles.cancel,\n    ...(people ? { layout: people.layout } : {}),\n    imports: {\n      env: home,\n      memoryHome: people ? ROOT_HOME : HOME,\n      catalog: ready.models,\n      providers: ready.providers,\n      ...(users ? { users: users.users } : {}),\n      ...(people ? { envOf: (cone: string) => people.envOfAgent(`cone:${cone}`) } : {}),\n    },\n  });\n}\n\nasync function start(\n  scope: AgentWorkerScope,\n  ports: Promise<KernelPorts>,\n  options: AgentWorkerOptions,\n  vault: Vault\n): Promise<AgentHost> {\n  const { client, users, home, at, wiped } = await attached(ports, options);\n  const ready = await prepare(scope, { client, home, vault }, options);\n  const { names, native, transport, facts, models, registry, records, endpoints } = ready;\n  const memory = setupMemory(registry);\n  const coding = CodingTools.tools as readonly ToolRegistration[];\n  const mcp = setupMcp(registry);\n  const codemode = await codemodeTools(client, options, native, mcp.codemode, at.agentDir);\n  registry.install(codemodeExtension(codemode));\n  const licks = setupLicks(registry, transport);\n  licks.licks.triage(lickTriage(models));\n  const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);\n  const skills = setupSkills(registry, licks.licks);\n  registry.install(secretsExtension({ names, vault }));\n  const titles = setupTitles(registry, models, home, at, () => opened);\n  const [activity, groups, jobs] = [\n    createActivity(),\n    processGroups(client),\n    backgroundJobs(client),\n  ];\n  const model = options.model ?? (await ready.defaultModel());\n  let opened: Agent | undefined;\n  const people = users ? agentUsers(users, client, home, () => opened?.agents) : undefined;\n  const environment = kernelEnvironment(client, {\n    activity,\n    groups,\n    jobs,\n    identify: identity(() => opened?.agents, model),\n    scrub: vault,\n    spawn: shellGrants(names),\n    ...(people ? { route: people.route } : {}),\n  });\n  const agent = await openUnfrozen(options, scoops, { models, model, registry, env: environment });\n  opened = agent;\n  await people?.start(agent.agents);\n  const sources = licks.attach(agent, {\n    env: home,\n    home: HOME,\n    activity,\n    jobs,\n    ...(people ? { dirs: () => people.lickDirs(), cronUser: people.cronUser.bind(people) } : {}),\n  });\n  await sources.start(BACKGROUND_CONTEXT);\n  const booted = { version: facts.version, boot: await kernelBoot(client) };\n  await sources.boot(booted, BACKGROUND_CONTEXT);\n  const skillsRuntime = await skills.attach(\n    {\n      env: home,\n      ...at,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people ? { people: people.people } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const mcpRuntime = await mcp.attach(\n    {\n      env: home,\n      ...at,\n      ...mcpVault(vault, ready),\n      licks: licks.licks,\n      fetch: transport,\n      version: facts.version,\n      reloadMs: RELOAD_MS,\n      codemode: codemode.length > 0,\n      cors: pageOnly(client.transport),\n      redirect: options.mcpRedirect ?? new URL(MCP_CALLBACK, scope.location.origin).href,\n    },\n    BACKGROUND_CONTEXT\n  );\n  const gelatiere = lateGelatiere();\n  const sprinkles = await setupSprinkles().attach(\n    {\n      intercept: gelatiere.intercept,\n      harness: agent.harness,\n      agents: agent.agents,\n      licks: licks.licks,\n      env: home,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people?.sprinkles() ?? {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  people?.follow([sources, skillsRuntime, sprinkles]);\n  let roles: ScoopsRuntime | undefined;\n  const memoryRuntime = await memory.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      env: home,\n      ...at,\n      ...(people ? { home: ROOT_HOME } : {}),\n      reloadMs: RELOAD_MS,\n      roles: async (using) => roles?.roles(using),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const freezer = freezerOf(agent, { home, memory, titles, people, users, ready });\n  licks.licks.guard(freezer.frozenTarget);\n  const settings = await settingsOf(ready, mcpRuntime, { agent, vault, wiped });\n  const pages = createPages({ claim: sprinkles.claim });\n  const runtime = await scoops.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      groups,\n      env: home,\n      envOf: async (conversationId, context) => environment({ conversationId }, context),\n      ...at,\n      ...(people\n        ? { layout: people.layout, spools: people.spools, enforced: people.enforced }\n        : {}),\n      alive: alive(client),\n      reads: skillsRuntime.dirs,\n      memory: memoryRuntime.command,\n      gelatiere: gelatiere.command,\n      freezer: freezer.command,\n      models: modelsOfAgent(agent, settings, models, vault),\n      panel: pages.command,\n      webhook: sources.webhook,\n      mcp: mcp.direct,\n      ...(options.assets ? { assets: options.assets } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  roles = runtime;\n  gelatiere.attach({\n    agents: agent.agents,\n    licks: licks.licks,\n    env: home,\n    home: HOME,\n    ...(await people?.gelatiere(home)),\n    scoops: scoops.scoops,\n    roles: runtime.roles,\n    assets: options.assets ?? packageAssets(),\n    fetch: scope.fetch,\n    skills: skillsRuntime.skills,\n    ...(options.catalog ? { catalog: options.catalog } : {}),\n  });\n  await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => undefined);\n  return hostAgent(agent, {\n    ...(await setupApprovals(models, home, at, agent, memoryRuntime.memories, options)),\n    settings,\n    licks: { licks: licks.licks, sources },\n    scoops: { scoops: scoops.scoops, runtime },\n    skills: skillsRuntime,\n    sprinkles,\n    memory: memoryRuntime,\n    freezer,\n    changes: attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS }),\n    pages,\n    labels: await attachLabels({ ...agent, label: titles.label, vault: vault.state }),\n    mcp: mcpRuntime,\n    ...(users ? { users } : {}),\n    secrets: hostSecrets(vault, names, [names, records, endpoints]),\n    uploads: {\n      env: environment,\n      sees: (ref) => seesImages(models, ref),\n    },\n    monitor: {\n      kernel: client,\n      groups,\n      ...(users ? { users: () => users.users.list() } : {}),\n    },\n  });\n}\n\nexport function alive(client: KernelClient) {\n  return async (pid: number): Promise<boolean> => {\n    if (!client.ps) return true;\n    return (await client.ps()).some((process) => process.pid === pid);\n  };\n}\n\nexport function runAgentWorker(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions = {}\n): Promise<AgentHost> {\n  const vault = new Vault();\n  listenVault(scope, vault);\n  const host = start(scope, kernelPorts(scope), options, vault);\n  host.catch(() => undefined);\n  serveConnections(scope, host);\n  return host;\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AAGnC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,mBAAmB;AAC5B,SAAwC,iBAAiB;AACzD;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAyB,iBAAiB;AAC1C,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAA0B,YAAY,mBAAmB;AAEzD,SAAS,MAAM,mBAAmB,sBAAsB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,sBAAsB;AAC/B,SAAS,WAA8C,mBAAmB;AAC1E,SAAS,WAAW,iBAAiB;AACrC,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAA2B,gBAAgB;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,UAA0B,sBAAsB;AACzD,SAAS,mBAAmB;AAC5B,SAAS,OAAO,WAAW,mBAAmB;AAC9C,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAsB,eAAmC,mBAAmB;AAC5E,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,YAAY,UAAU,kBAAkB;AACjD,SAAS,WAAuB,kBAAkB;AAClD,SAAS,mBAAmB;AAC5B,SAA4B,oBAAoB;AAChD,SAAS,iBAAiB;AAC1B,SAAS,iBAAkC;AAC3C,SAAS,aAAa,OAAO,kBAAkB;AAC/C,SAAyB,UAAU,uBAAuB;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,mBAAmB;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,SAAS,cAAc,cAAc;AAC9C,SAAS,oBAAoB;AAC7B,SAA2B,aAAa,wBAA0C;AAwB3E,SAAS,QACd,OACA,QACA,QACyB;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,WAAW,OAAO;AACpB,UAAM,MAAM;AACZ,WAAO;AAAA,EACT;AACA,SAAO,YAAY,UAAU,KAAK,GAAG,MAAoD;AAC3F;AAEO,MAAM,YAAY;AAClB,MAAM,gBAAgB,GAAG,SAAS;AAEzC,eAAe,SAAS,OAA6B,SAA6B;AAChF,QAAM,QAAQ,MAAM,WAAW;AAC/B,QAAM,SAAuB,QAAQ,UAAU;AAC/C,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM;AAChC,QAAM,SAAS,MAAM,OAAO,MAAM;AAClC,QAAM,QAAQ,QAAQ,OAAO,QAAQ,OAAO,MAAM;AAClD,QAAM,YAAY,OAAO,QAAQ,QAAQ,KAAK;AAC9C,QAAM,OAAO,IAAI,eAAe,QAAQ,EAAE,KAAK,KAAK,CAAC;AACrD,QAAM,aAAa,IAAI;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI,EAAE,MAAM,MAAM,GAAI,QAAQ,EAAE,UAAU,UAAU,IAAI,CAAC,EAAG;AAAA,EAC9D;AACF;AAEA,SAAS,aAAa,KAAuC;AAC3D,SAAO,IAAI,KAAK,YAAY,SAAS,iBAAiB,SAAS,IAAI,QAAW,kBAAkB;AAClG;AAEA,eAAe,cACb,QACA,SACA,QACA,OACA,MAAM,GAAG,IAAI,cACb;AACA,QAAM,WAAW,MAAM,OAAO,GAAG,SAAS,GAAG,GAAG,gBAAgB,EAAE,MAAM,MAAM,MAAS;AACvF,MAAI,mBAAmB,aAAa,SAAY,SAAY,IAAI,YAAY,EAAE,OAAO,QAAQ,CAAC;AAC5F,WAAO,CAAC;AACV,QAAM,UAAU;AAAA,IACd,QAAQ,iBAAiB,MAAM,WAAW,QAAQ,IAAI,IAAI,YAAY,GAAG,CAAC;AAAA,IAC1E,QAAQ;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa,EAAE,UAAU,YAAY,OAAsC,SAAS,MAAM,CAAC;AAAA,EAC7F;AACF;AAEO,SAAS,WAAW,QAAkC,KAAoC;AAC/F,QAAM,QAAQ,OAAO,OAAO,SAAS,IAAI,UAAU,IAAI,OAAO;AAC9D,SAAO,QAAQ,MAAM,MAAM,SAAS,OAAO,IAAI;AACjD;AAEO,MAAM,eAAe;AAE5B,eAAe,aACb,SACA,EAAE,WAAW,OAAO,GACpB,MACgB;AAChB,QAAM,UAAU,OAAO,QAAQ,YAAY,MAAM,sBAAsB,IAAI;AAC3E,SAAO,UAAU;AAAA,IACf,GAAG;AAAA,IACH;AAAA,IACA,qBAAqB,gBAAgB,MAAM;AAAA,IAC3C,cAAc,CAAC,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,KAAK;AAAA,EAC5E,CAAC;AACH;AAEA,eAAe,WAAW,MAAsB,OAAc;AAC5D,YAAU,KAAK;AACf,QAAM,QAAQ,YAAY,MAAM,KAAK;AACrC,QAAM,MAAM,QAAQ,kBAAkB;AACtC,SAAO;AACT;AAEO,SAAS,WACd,WACA,QACA,MAA4E,MAAM,QACpE;AACd,SAAO,UAAU,IAAI,CAAC,cAAc;AAAA,IAClC,UAAU,SAAS;AAAA,IACnB,MAAM;AAAA,MACJ,GAAG,IAAI;AAAA,QACL;AAAA,UACE,SAAS;AAAA,UACT,GAAG,OAAO,UAAU,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO;AAAA,UAC7D,GAAI,SAAS,OAAO,UAAU,oBAAoB,CAAC;AAAA,UACnD,GAAI,SAAS,OAAO,QAAQ,CAAC,UAAU,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,QACrE,EAAE,OAAO,CAAC,QAAuB,OAAO,QAAQ,YAAY,QAAQ,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF,EAAE;AACJ;AAEA,SAAS,SACP,OACA,MACA;AACA,QAAM,EAAE,OAAO,SAAS,UAAU,IAAI;AACtC,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA,OAAO,CAAC,QAAgB,SAAuB,SAAS,OAAO,MAAM,MAAM;AAAA,MAC3E,OAAO,CAAC,QAAgB,SAAuB,WAAW,OAAO,QAAQ,IAAI;AAAA,MAC7E,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,YACP,OACA,OACA,OACA;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,MAAM,MAAM,MAAM,MAAM;AAAA,IACxB,OAAO,MAAM;AACX,iBAAW,QAAQ,MAAO,MAAK,MAAM;AAAA,IACvC;AAAA,EACF;AACF;AAEA,eAAe,SACb,OACA,SACA,OACA;AACA,QAAM,EAAE,OAAO,MAAM,WAAW,QAAQ,IAAI;AAC5C,QAAM,QAAQ,OAAO,QAAQ,UAAU,YAAY,UAAU,MAAM,aAAa,IAAI;AACpF,QAAM,UAAU,aAAa,KAAK;AAClC,QAAM,SAAS,QAAQ,QAAQ,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACxE,QAAM,YAAY,QAAQ,aAAa,eAAe,OAAO;AAC7D,QAAM,SAAS,MAAM,eAAe,OAAO,SAAS;AACpD,QAAM,cAAc,iBAAiB,SAAS,OAAO,KAAK,OAAO,KAAK;AACtE,QAAM,SAAS,kBAAkB,aAAa,SAAS;AACvD,QAAM,QAAQ,MAAM,WAAW,WAAW,QAAQ,OAAO,GAAG;AAC5D,QAAM,MAAM,MAAM,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,CAAC,YAAY,IAAI,QAAQ,CAAC;AAC7E,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,OAAO,MAAM,QAAQ,MAAM,KAAK;AAAA,IAC3C,QAAQ;AAAA,EACV;AACA,QAAM,YAAY,eAAe,KAAK;AACtC,OAAK,UAAU,OAAO,IAAI,CAAC,EAAE,MAAM,MAAM,MAAS;AAClD,QAAM,eAAe,YAAY;AAC/B,UAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC,CAAC,CAAC;AACtF,WAAO,oBAAoB,aAAa,WAAW,MAAM;AAAA,EAC3D;AACA,SAAO,EAAE,OAAO,SAAS,WAAW,QAAQ,QAAQ,OAAO,KAAK,WAAW,aAAa;AAC1F;AAEA,SAAS,aAAa,OAA4C,QAAgB;AAChF,QAAM,WAAW,eAAe;AAChC,WAAS,QAAQ,WAAW;AAC5B,WAAS,QAAQ,aAAa,CAAC,MAAM,CAAC,CAAC;AACvC,WAAS,QAAQ,YAAY,KAAK,CAAC;AACnC,QAAM,OAAQ,YAAY,MAAsC;AAAA,IAC9D,CAAC,SAAS,KAAK,SAAS;AAAA,EAC1B;AACA,WAAS,QAAQ,WAAW,IAAI,CAAC;AACjC,SAAO;AACT;AAEA,eAAe,QAAQ,QAAiD,QAAsB;AAC5F,SAAO;AAAA,IACL,SAAS,MAAM,aAAa,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAChD,UAAU,MAAM,eAAe,MAAM;AAAA,IACrC,WAAW,cAAc,OAAO,SAAS;AAAA,IACzC,SAAS,MAAM,iBAAiB,MAAM;AAAA,EACxC;AACF;AAEA,SAAS,WAAW,OAAyB,QAAiD;AAC5F,QAAM,SAAS,MAAM,MAAM,KAAK,KAAK;AACrC,QAAM,WAAW,OAAO,eAAe,KAAK,MAAM;AAClD,QAAM,YAAY,eAAe,OAAO,WAAW,MAAM,SAAS,QAAQ,QAAQ,QAAQ;AAC1F,QAAM,QAAQ;AACd,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAe,QACb,OACA,QACA,SACA;AACA,QAAM,QAAQ,MAAM,WAAW,OAAO,MAAM,OAAO,KAAK;AACxD,QAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,OAAO,OAAO,MAAM;AAC7D,QAAM,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM;AACjD,QAAM,OAAO,MAAM,SAAS,OAAO,SAAS;AAAA,IAC1C,OAAO,OAAO;AAAA,IACd,MAAM,OAAO;AAAA,IACb;AAAA,IACA,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH,UAAU,aAAa,OAAO,MAAM,SAAS,MAAM;AAAA,EACrD;AACF;AAEA,SAAS,cACP,OACA,UACA,SACA,OACA;AACA,QAAM,SAAS,MAAM,MAAM,MAAM,MAAM,WAAW;AAClD,SAAO,cAAc,EAAE,QAAQ,MAAM,QAAQ,UAAU,SAAS,OAAO,CAAC;AAC1E;AAEA,eAAe,WACb,MACA,KACA,OACA;AACA,QAAM,EAAE,QAAQ,SAAS,QAAQ,WAAW,KAAK,UAAU,IAAI;AAC/D,QAAM,OAAO,MAAM,UAAU,MAAM,MAAM,SAAS,EAAE,SAAS,OAAO,MAAM,MAAM,GAAG,MAAM,KAAK;AAC9F,QAAM,WAAW,MAAM,oBAAoB,QAAQ,EAAE,SAAS,OAAO,GAAG,WAAW;AAAA,IACjF;AAAA,IACA,OAAO;AAAA,EACT,CAAC;AACD,WAAS,MAAM,UAAU,MAAM,KAAK,UAAU,OAAO,IAAI,CAAC,EAAE,MAAM,MAAM,MAAS,CAAC;AAClF,SAAO;AACT;AAEA,eAAe,eACb,QACA,MACA,IACA,OACA,QACA,SACA;AACA,QAAM,WAAW,MAAM,OAAO;AAC9B,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,WAAW,MAAM,kBAAkB,EAAE,MAAM,MAAM,KAAK;AAC5D,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,SAAS,YAAY,EAAE,KAAK,MAAM,QAAQ,MAAM,QAAQ,SAAS,CAAC;AACxE,QAAM,QAAuB;AAAA,IAC3B,OAAO,cAAc;AAAA,MACnB;AAAA,MACA,OAAO,OAAO,YAAY,aAAa,MAAM,SAAS,OAAO,CAAC;AAAA,MAC9D;AAAA,MACA,OAAO,aAAa,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,IACvF,CAAC;AAAA,IACD,QAAQ,gBAAgB,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,EAC3F;AACA,SAAO,EAAE,OAAO,QAAQ,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAChE;AAEA,SAAS,YACP,UACA,QACA,MACA,IACA,QACA;AACA,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,UAAU,OAAO,QAAQ,QAAQ;AACvC,QAAM,SAAS,gBAAgB;AAAA,IAC7B,QAAQ,MAAM,OAAO,GAAG;AAAA,IACxB,SAAS,MAAM,OAAO,GAAG;AAAA,IACzB,OAAO,MAAM;AAAA,EACf,CAAC;AACD,WAAS,QAAQ,OAAO,SAAS;AACjC,SAAO,EAAE,SAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AAC5E;AAEA,SAAS,UACP,OACA,OAQA;AACA,QAAM,EAAE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,IAAI;AACvD,SAAO,cAAc;AAAA,IACnB,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,KAAK;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,IACd,aAAa,OAAO;AAAA,IACpB,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC1C,SAAS;AAAA,MACP,KAAK;AAAA,MACL,YAAY,SAAS,YAAY;AAAA,MACjC,SAAS,MAAM;AAAA,MACf,WAAW,MAAM;AAAA,MACjB,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MACtC,GAAI,SAAS,EAAE,OAAO,CAAC,SAAiB,OAAO,WAAW,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC;AAAA,IACjF;AAAA,EACF,CAAC;AACH;AAEA,eAAe,MACb,OACA,OACA,SACA,OACoB;AACpB,QAAM,EAAE,QAAQ,OAAO,MAAM,IAAI,MAAM,IAAI,MAAM,SAAS,OAAO,OAAO;AACxE,QAAM,QAAQ,MAAM,QAAQ,OAAO,EAAE,QAAQ,MAAM,MAAM,GAAG,OAAO;AACnE,QAAM,EAAE,OAAO,QAAQ,WAAW,OAAO,QAAQ,UAAU,SAAS,UAAU,IAAI;AAClF,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,SAAS,YAAY;AAC3B,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WAAW,MAAM,cAAc,QAAQ,SAAS,QAAQ,IAAI,UAAU,GAAG,QAAQ;AACvF,WAAS,QAAQ,kBAAkB,QAAQ,CAAC;AAC5C,QAAM,QAAQ,WAAW,UAAU,SAAS;AAC5C,QAAM,MAAM,OAAO,WAAW,MAAM,CAAC;AACrC,QAAM,SAAS,YAAY,UAAU,MAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,KAAK,CAAC;AAC3F,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK;AAChD,WAAS,QAAQ,iBAAiB,EAAE,OAAO,MAAM,CAAC,CAAC;AACnD,QAAM,SAAS,YAAY,UAAU,QAAQ,MAAM,IAAI,MAAM,MAAM;AACnE,QAAM,CAAC,UAAU,QAAQ,IAAI,IAAI;AAAA,IAC/B,eAAe;AAAA,IACf,cAAc,MAAM;AAAA,IACpB,eAAe,MAAM;AAAA,EACvB;AACA,QAAM,QAAQ,QAAQ,SAAU,MAAM,MAAM,aAAa;AACzD,MAAI;AACJ,QAAM,SAAS,QAAQ,WAAW,OAAO,QAAQ,MAAM,MAAM,QAAQ,MAAM,IAAI;AAC/E,QAAM,cAAc,kBAAkB,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,IAC9C,OAAO;AAAA,IACP,OAAO,YAAY,KAAK;AAAA,IACxB,GAAI,SAAS,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,EAC1C,CAAC;AACD,QAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,EAAE,QAAQ,OAAO,UAAU,KAAK,YAAY,CAAC;AAC/F,WAAS;AACT,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,UAAU,MAAM,OAAO,OAAO;AAAA,IAClC,KAAK;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA;AAAA,IACA,GAAI,SAAS,EAAE,MAAM,MAAM,OAAO,SAAS,GAAG,UAAU,OAAO,SAAS,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,EAC5F,CAAC;AACD,QAAM,QAAQ,MAAM,kBAAkB;AACtC,QAAM,SAAS,EAAE,SAAS,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM,EAAE;AACxE,QAAM,QAAQ,KAAK,QAAQ,kBAAkB;AAC7C,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAAA,IAC3B;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAG,SAAS,OAAO,KAAK;AAAA,MACxB,OAAO,MAAM;AAAA,MACb,OAAO;AAAA,MACP,SAAS,MAAM;AAAA,MACf,UAAU;AAAA,MACV,UAAU,SAAS,SAAS;AAAA,MAC5B,MAAM,SAAS,OAAO,SAAS;AAAA,MAC/B,UAAU,QAAQ,eAAe,IAAI,IAAI,cAAc,MAAM,SAAS,MAAM,EAAE;AAAA,IAChF;AAAA,IACA;AAAA,EACF;AACA,QAAM,YAAY,cAAc;AAChC,QAAM,YAAY,MAAM,eAAe,EAAE;AAAA,IACvC;AAAA,MACE,WAAW,UAAU;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,KAAK;AAAA,MACL,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,QAAQ,UAAU,KAAK,CAAC;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,UAAQ,OAAO,CAAC,SAAS,eAAe,SAAS,CAAC;AAClD,MAAI;AACJ,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAI,SAAS,EAAE,MAAM,UAAU,IAAI,CAAC;AAAA,MACpC,UAAU;AAAA,MACV,OAAO,OAAO,UAAU,OAAO,MAAM,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,UAAU,OAAO,EAAE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,CAAC;AAC/E,QAAM,MAAM,MAAM,QAAQ,YAAY;AACtC,QAAM,WAAW,MAAM,WAAW,OAAO,YAAY,EAAE,OAAO,OAAO,MAAM,CAAC;AAC5E,QAAM,QAAQ,YAAY,EAAE,OAAO,UAAU,MAAM,CAAC;AACpD,QAAM,UAAU,MAAM,OAAO;AAAA,IAC3B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,KAAK;AAAA,MACL,OAAO,OAAO,gBAAgB,YAAY,YAAY,EAAE,eAAe,GAAG,OAAO;AAAA,MACjF,GAAG;AAAA,MACH,GAAI,SACA,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS,IAC1E,CAAC;AAAA,MACL,OAAO,MAAM,MAAM;AAAA,MACnB,OAAO,cAAc;AAAA,MACrB,QAAQ,cAAc;AAAA,MACtB,WAAW,UAAU;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,QAAQ,cAAc,OAAO,UAAU,QAAQ,KAAK;AAAA,MACpD,OAAO,MAAM;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,KAAK,IAAI;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AACA,UAAQ;AACR,YAAU,OAAO;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,KAAK;AAAA,IACL,MAAM;AAAA,IACN,GAAI,MAAM,QAAQ,UAAU,IAAI;AAAA,IAChC,QAAQ,OAAO;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ,UAAU,cAAc;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,QAAQ,cAAc;AAAA,IACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD,CAAC;AACD,QAAM,cAAc,OAAO,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACpE,SAAO,UAAU,OAAO;AAAA,IACtB,GAAI,MAAM,eAAe,QAAQ,MAAM,IAAI,OAAO,cAAc,UAAU,OAAO;AAAA,IACjF;AAAA,IACA,OAAO,EAAE,OAAO,MAAM,OAAO,QAAQ;AAAA,IACrC,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,SAAS,cAAc,EAAE,QAAQ,MAAM,QAAQ,KAAK,MAAM,UAAU,WAAW,CAAC;AAAA,IAChF;AAAA,IACA,QAAQ,MAAM,aAAa,EAAE,GAAG,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,MAAM,CAAC;AAAA,IAChF,KAAK;AAAA,IACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,SAAS,YAAY,OAAO,OAAO,CAAC,OAAO,SAAS,SAAS,CAAC;AAAA,IAC9D,SAAS;AAAA,MACP,KAAK;AAAA,MACL,MAAM,CAAC,QAAQ,WAAW,QAAQ,GAAG;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR;AAAA,MACA,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,MAAM,KAAK,EAAE,IAAI,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,MAAM,QAAsB;AAC1C,SAAO,OAAO,QAAkC;AAC9C,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAQ,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG;AAAA,EAClE;AACF;AAEO,SAAS,eACd,OACA,UAA8B,CAAC,GACX;AACpB,QAAM,QAAQ,IAAI,MAAM;AACxB,cAAY,OAAO,KAAK;AACxB,QAAM,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS,KAAK;AAC5D,OAAK,MAAM,MAAM,MAAS;AAC1B,mBAAiB,OAAO,IAAI;AAC5B,SAAO;AACT;",
   "names": []
 }