@ai-ecoverse/slicc-agent 6.15.2 → 6.17.0

package/dist/spectrum/settings-port.js

@@ -1,8 +1,13 @@
-import { BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
+import { BACKGROUND_CONTEXT, withAbortSignal } from "@earendil-works/chord/context";
 import { preferredModel } from "../preferred.js";
+import {
+  DEVICE_SIGN_INS,
+  httpsUrl,
+  SIGN_IN_UNFINISHED
+} from "../sign-ins.js";
 import { attempt } from "./attempt.js";
 import { Emitter } from "./emitter.js";
-import { mcpLogin } from "./mcp-login.js";
+import { mcpLogin, untilAborted } from "./mcp-login.js";
 const SETTINGS_KEY = "slicc-agent.settings";
 const defaults = {
   color: "system",
@@ -13,7 +18,8 @@ const defaults = {
   diffStyle: "unified"
 };
 const SIGN_IN_NEEDS_VAULT = "Adobe sign-in needs seven's vault: update seven";
-const UNFINISHED = "The sign-in didn't finish. Try again.";
+const UNFINISHED = SIGN_IN_UNFINISHED;
+const openPopup = () => globalThis.open?.("about:blank", "slicc-sign-in", "popup,width=520,height=720") ?? null;
 function readable(error) {
   if (error instanceof DOMException && error.name === "AbortError") return error;
   const text = (error instanceof Error ? error.message : String(error ?? "")).trim();
@@ -28,12 +34,15 @@ class SettingsAdapter extends Emitter {
   #login;
   #mcpLogin;
   #signing = /* @__PURE__ */ new Map();
+  #prompts = /* @__PURE__ */ new Map();
+  #open;
   #local;
   #offered = "";
   #urls = /* @__PURE__ */ new Map();
-  constructor(settings, agent, storage, login = null, mcp = mcpLogin()) {
+  constructor(settings, agent, storage, login = null, mcp = mcpLogin(), open = openPopup) {
     super();
     this.#mcpLogin = mcp;
+    this.#open = open;
     this.#settings = settings;
     this.#agent = agent;
     this.#storage = storage;
@@ -126,20 +135,29 @@ class SettingsAdapter extends Emitter {
     return this.#state().accounts.map(({ needs, ...account }) => {
       const url = this.#urls.get(account.id);
       const located = url ? { ...account, url } : account;
-      const shown = this.#signing.has(account.id) ? { ...located, status: "signing-in" } : located;
+      const prompt = this.#prompts.get(account.id);
+      const shown = this.#signing.has(account.id) ? {
+        ...located,
+        status: "signing-in",
+        ...prompt ? { signIn: { ...prompt } } : {}
+      } : located;
       return needs ? { ...shown, needs } : shown;
     });
   }
-  async connect(id, secret, fields) {
+  async connect(id, secret, fields, options) {
     const account = this.#state().accounts.find((candidate) => candidate.id === id) ?? this.#offer(id);
     const mcp = account?.group === "mcp";
-    const login = account?.auth !== "oauth" ? null : mcp ? this.#mcpLogin : this.#login;
     const given = fields ? { ...fields } : null;
+    const keyed = options?.method === "key";
+    if (account?.auth === "oauth" && DEVICE_SIGN_INS.has(id) && secret === void 0 && !keyed)
+      return this.#device(id, given);
+    const login = account?.auth !== "oauth" || keyed ? null : mcp ? this.#mcpLogin : this.#login;
+    if (keyed) this.cancel(id);
     if (secret !== void 0) {
       await this.#settings.connect(id, secret, given, BACKGROUND_CONTEXT);
       return;
     }
-    if (account?.auth === "oauth" && !login) throw new Error(`${id} needs a sign-in`);
+    if (account?.auth === "oauth" && !login && !keyed) throw new Error(`${id} needs a sign-in`);
     if (!login) {
       if (account?.store !== "vault") throw new Error(`${id} needs an API key`);
       await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);
@@ -154,11 +172,47 @@ class SettingsAdapter extends Emitter {
     if (answer?.sealed !== true) throw new Error(UNFINISHED);
     await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);
   }
-  async #signIn(id, login) {
+  #begin(id) {
     const controller = new AbortController();
     this.#signing.get(id)?.abort(new DOMException("A newer sign-in replaced this one.", "AbortError"));
     this.#signing.set(id, controller);
+    this.#prompts.delete(id);
+    this.emit("accounts", this.accounts());
+    return controller;
+  }
+  #end(id, controller) {
+    if (this.#signing.get(id) === controller) {
+      this.#signing.delete(id);
+      this.#prompts.delete(id);
+    }
     this.emit("accounts", this.accounts());
+  }
+  async #device(id, given) {
+    const popup = this.#open();
+    const controller = this.#begin(id);
+    const { signal } = controller;
+    const context = withAbortSignal(signal, BACKGROUND_CONTEXT);
+    try {
+      const started = await untilAborted(
+        this.#settings.signIn(id, context),
+        signal
+      );
+      if (!started || !httpsUrl(started.url)) throw new Error(UNFINISHED);
+      const code = typeof started.code === "string" && started.code ? started.code : void 0;
+      this.#prompts.set(id, { url: started.url, ...code ? { code } : {} });
+      this.emit("accounts", this.accounts());
+      if (popup) popup.location.href = started.url;
+      await untilAborted(this.#settings.connect(id, null, given, context), signal);
+    } catch (error) {
+      signal.throwIfAborted();
+      throw readable(error);
+    } finally {
+      popup?.close();
+      this.#end(id, controller);
+    }
+  }
+  async #signIn(id, login) {
+    const controller = this.#begin(id);
     try {
       const key = await login(
         id,
@@ -173,14 +227,14 @@ class SettingsAdapter extends Emitter {
       controller.signal.throwIfAborted();
       return key;
     } finally {
-      if (this.#signing.get(id) === controller) this.#signing.delete(id);
-      this.emit("accounts", this.accounts());
+      this.#end(id, controller);
     }
   }
   cancel(id) {
     const controller = this.#signing.get(id);
     if (!controller) return;
     this.#signing.delete(id);
+    this.#prompts.delete(id);
     controller.abort(new DOMException("The sign-in was cancelled.", "AbortError"));
     this.emit("accounts", this.accounts());
   }

package/dist/spectrum/settings-port.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/spectrum/settings-port.ts"],
-  "sourcesContent": ["import type {\n  Account,\n  ModelOption,\n  Settings,\n  SettingsEvents,\n  SettingsPort,\n} from '@ai-ecoverse/slicc-spectrum/ui';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport { preferredModel } from '../preferred.ts';\nimport type { AgentSettings, ProviderOption, SettingsState, SignIn } from '../services.ts';\nimport type { AgentAdapter } from './agent-port.ts';\nimport { attempt } from './attempt.ts';\nimport { Emitter } from './emitter.ts';\nimport { mcpLogin } from './mcp-login.ts';\n\nexport const SETTINGS_KEY = 'slicc-agent.settings';\n\nconst defaults: Settings = {\n  color: 'system',\n  model: '',\n  thinking: 'off',\n  sendOnEnter: true,\n  showThinking: false,\n  diffStyle: 'unified',\n};\n\ntype Local = Omit<Settings, 'model' | 'thinking'>;\n\nexport type Sealed = { sealed: true };\n\nexport type Login = (\n  providerId: string,\n  signIn: () => Promise<SignIn | null>,\n  options: { signal: AbortSignal }\n) => Promise<string | Sealed>;\n\nexport const SIGN_IN_NEEDS_VAULT = \"Adobe sign-in needs seven's vault: update seven\";\nexport const UNFINISHED = \"The sign-in didn't finish. Try again.\";\n\nexport function readable(error: unknown): Error {\n  if (error instanceof DOMException && error.name === 'AbortError') return error;\n  const text = (error instanceof Error ? error.message : String(error ?? '')).trim();\n  if (!text) return new Error(UNFINISHED);\n  const lead = /^[a-z]+\\b(?![-.@/])/.test(text) ? text[0].toUpperCase() + text.slice(1) : text;\n  return new Error(/[.!?]$/.test(lead) ? lead : `${lead}.`);\n}\n\ntype Events = SettingsEvents & { providers: readonly ProviderOption[] };\n\nexport class SettingsAdapter extends Emitter<Events> implements SettingsPort {\n  readonly #settings: AgentSettings;\n  readonly #agent: AgentAdapter;\n  readonly #storage: Pick<Storage, 'getItem' | 'setItem'> | null;\n  readonly #login: Login | null;\n  readonly #mcpLogin: Login;\n  readonly #signing = new Map<string, AbortController>();\n  #local: Local;\n  #offered = '';\n  readonly #urls = new Map<string, string>();\n\n  constructor(\n    settings: AgentSettings,\n    agent: AgentAdapter,\n    storage: Pick<Storage, 'getItem' | 'setItem'> | null,\n    login: Login | null = null,\n    mcp: Login = mcpLogin() as Login\n  ) {\n    super();\n    this.#mcpLogin = mcp;\n    this.#settings = settings;\n    this.#agent = agent;\n    this.#storage = storage;\n    this.#login = login;\n    const saved = JSON.parse(storage?.getItem(SETTINGS_KEY) ?? '{}') as Partial<Local>;\n    const { model: _model, thinking: _thinking, ...local } = { ...defaults, ...saved };\n    this.#local = local;\n    this.#offered = JSON.stringify(this.providers());\n    this.#locate();\n    settings.state.subscribe(() => {\n      this.#locate();\n      this.emit('accounts', this.accounts());\n      this.emit('settings', this.get());\n      const offered = JSON.stringify(this.providers());\n      if (offered === this.#offered) return;\n      this.#offered = offered;\n      this.emit('providers', this.providers());\n    });\n    agent.on('agents', () => this.emit('settings', this.get()));\n  }\n\n  #locate(): void {\n    const servers = this.#state()\n      .accounts.filter(({ group }) => group === 'mcp')\n      .map(({ id }) => id);\n    for (const id of this.#urls.keys()) if (!servers.includes(id)) this.#urls.delete(id);\n    for (const id of servers) {\n      void this.#settings\n        .serverUrl?.(id, BACKGROUND_CONTEXT)\n        .then((url) => {\n          if ((url ?? undefined) === this.#urls.get(id)) return;\n          if (url) this.#urls.set(id, url);\n          else this.#urls.delete(id);\n          this.emit('accounts', this.accounts());\n        })\n        .catch(() => undefined);\n    }\n  }\n\n  #state(): SettingsState {\n    return this.#settings.state.value ?? { models: [], accounts: [] };\n  }\n\n  get(): Settings {\n    const cone = this.#agent.list()[0];\n    return { ...this.#local, model: cone?.model ?? '', thinking: cone?.thinking ?? 'off' };\n  }\n\n  update(patch: Partial<Settings>): void {\n    const { model, thinking, ...local } = patch;\n    const id = this.#agent.active();\n    if (model !== undefined) this.#agent.setModel(id, model);\n    if (thinking !== undefined) this.#agent.setThinking(id, thinking);\n    this.#local = { ...this.#local, ...local };\n    this.#storage?.setItem(SETTINGS_KEY, JSON.stringify(this.#local));\n    this.emit('settings', this.get());\n  }\n\n  models(): readonly ModelOption[] {\n    const choices = this.#state().models;\n    const groups = Map.groupBy(choices, ({ id }) => id.slice(0, id.indexOf('/')));\n    const chosen = new Set(\n      [...groups].map(\n        ([providerId, group]) =>\n          preferredModel(\n            providerId,\n            group.map((choice) => ({ id: choice.id.slice(providerId.length + 1), choice }))\n          )?.choice\n      )\n    );\n    return choices.map((choice) => {\n      const { id, label, provider, kind, reasoning, images } = choice;\n      return {\n        id,\n        label,\n        provider,\n        kind,\n        reasoning,\n        ...(images === undefined ? {} : { images }),\n        ...(chosen.has(choice) ? { default: true } : {}),\n      };\n    });\n  }\n\n  #offer(id: string) {\n    const option = this.providers().find((candidate) => candidate.id === id);\n    if (!option) return undefined;\n    return {\n      auth: option.auth === 'oauth' ? ('oauth' as const) : ('api-key' as const),\n      store: 'vault' as const,\n      group: 'providers' as const,\n    };\n  }\n\n  providers(): readonly ProviderOption[] {\n    return this.#state().providers ?? [];\n  }\n\n  async remove(id: string): Promise<void> {\n    this.cancel(id);\n    await this.#settings.remove(id, BACKGROUND_CONTEXT);\n  }\n\n  accounts(): readonly Account[] {\n    return this.#state().accounts.map(({ needs, ...account }) => {\n      const url = this.#urls.get(account.id);\n      const located = url ? { ...account, url } : account;\n      const shown = this.#signing.has(account.id)\n        ? { ...located, status: 'signing-in' as const }\n        : located;\n      return needs ? { ...shown, needs } : shown;\n    });\n  }\n\n  async connect(id: string, secret?: string, fields?: Record<string, string>): Promise<void> {\n    const account =\n      this.#state().accounts.find((candidate) => candidate.id === id) ?? this.#offer(id);\n    const mcp = account?.group === 'mcp';\n    const login = account?.auth !== 'oauth' ? null : mcp ? this.#mcpLogin : this.#login;\n    const given = fields ? { ...fields } : null;\n    if (secret !== undefined) {\n      await this.#settings.connect(id, secret, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    if (account?.auth === 'oauth' && !login) throw new Error(`${id} needs a sign-in`);\n    if (!login) {\n      if (account?.store !== 'vault') throw new Error(`${id} needs an API key`);\n      await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    const answer = await this.#signIn(id, login);\n    if (typeof answer === 'string') {\n      if (!mcp) throw new Error(SIGN_IN_NEEDS_VAULT);\n      await this.#settings.connect(id, answer, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    if (answer?.sealed !== true) throw new Error(UNFINISHED);\n    await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);\n  }\n\n  async #signIn(id: string, login: Login): Promise<string | Sealed> {\n    const controller = new AbortController();\n    this.#signing\n      .get(id)\n      ?.abort(new DOMException('A newer sign-in replaced this one.', 'AbortError'));\n    this.#signing.set(id, controller);\n    this.emit('accounts', this.accounts());\n    try {\n      const key = await login(\n        id,\n        () => this.#settings.signIn(id, BACKGROUND_CONTEXT) as Promise<SignIn | null>,\n        {\n          signal: controller.signal,\n        }\n      ).catch((error: unknown) => {\n        controller.signal.throwIfAborted();\n        throw readable(error);\n      });\n      controller.signal.throwIfAborted();\n      return key;\n    } finally {\n      if (this.#signing.get(id) === controller) this.#signing.delete(id);\n      this.emit('accounts', this.accounts());\n    }\n  }\n\n  cancel(id: string): void {\n    const controller = this.#signing.get(id);\n    if (!controller) return;\n    this.#signing.delete(id);\n    controller.abort(new DOMException('The sign-in was cancelled.', 'AbortError'));\n    this.emit('accounts', this.accounts());\n  }\n\n  disconnect(id: string): void {\n    attempt(this.#settings.disconnect(id, BACKGROUND_CONTEXT), 'disconnect accounts', (text) =>\n      this.#agent.notify(text)\n    );\n  }\n}\n"],
-  "mappings": "AAOA,SAAS,0BAA0B;AACnC,SAAS,sBAAsB;AAG/B,SAAS,eAAe;AACxB,SAAS,eAAe;AACxB,SAAS,gBAAgB;AAElB,MAAM,eAAe;AAE5B,MAAM,WAAqB;AAAA,EACzB,OAAO;AAAA,EACP,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AACb;AAYO,MAAM,sBAAsB;AAC5B,MAAM,aAAa;AAEnB,SAAS,SAAS,OAAuB;AAC9C,MAAI,iBAAiB,gBAAgB,MAAM,SAAS,aAAc,QAAO;AACzE,QAAM,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,GAAG,KAAK;AACjF,MAAI,CAAC,KAAM,QAAO,IAAI,MAAM,UAAU;AACtC,QAAM,OAAO,sBAAsB,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC,IAAI;AACxF,SAAO,IAAI,MAAM,SAAS,KAAK,IAAI,IAAI,OAAO,GAAG,IAAI,GAAG;AAC1D;AAIO,MAAM,wBAAwB,QAAwC;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,oBAAI,IAA6B;AAAA,EACrD;AAAA,EACA,WAAW;AAAA,EACF,QAAQ,oBAAI,IAAoB;AAAA,EAEzC,YACE,UACA,OACA,SACA,QAAsB,MACtB,MAAa,SAAS,GACtB;AACA,UAAM;AACN,SAAK,YAAY;AACjB,SAAK,YAAY;AACjB,SAAK,SAAS;AACd,SAAK,WAAW;AAChB,SAAK,SAAS;AACd,UAAM,QAAQ,KAAK,MAAM,SAAS,QAAQ,YAAY,KAAK,IAAI;AAC/D,UAAM,EAAE,OAAO,QAAQ,UAAU,WAAW,GAAG,MAAM,IAAI,EAAE,GAAG,UAAU,GAAG,MAAM;AACjF,SAAK,SAAS;AACd,SAAK,WAAW,KAAK,UAAU,KAAK,UAAU,CAAC;AAC/C,SAAK,QAAQ;AACb,aAAS,MAAM,UAAU,MAAM;AAC7B,WAAK,QAAQ;AACb,WAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,WAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAChC,YAAM,UAAU,KAAK,UAAU,KAAK,UAAU,CAAC;AAC/C,UAAI,YAAY,KAAK,SAAU;AAC/B,WAAK,WAAW;AAChB,WAAK,KAAK,aAAa,KAAK,UAAU,CAAC;AAAA,IACzC,CAAC;AACD,UAAM,GAAG,UAAU,MAAM,KAAK,KAAK,YAAY,KAAK,IAAI,CAAC,CAAC;AAAA,EAC5D;AAAA,EAEA,UAAgB;AACd,UAAM,UAAU,KAAK,OAAO,EACzB,SAAS,OAAO,CAAC,EAAE,MAAM,MAAM,UAAU,KAAK,EAC9C,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE;AACrB,eAAW,MAAM,KAAK,MAAM,KAAK,EAAG,KAAI,CAAC,QAAQ,SAAS,EAAE,EAAG,MAAK,MAAM,OAAO,EAAE;AACnF,eAAW,MAAM,SAAS;AACxB,WAAK,KAAK,UACP,YAAY,IAAI,kBAAkB,EAClC,KAAK,CAAC,QAAQ;AACb,aAAK,OAAO,YAAe,KAAK,MAAM,IAAI,EAAE,EAAG;AAC/C,YAAI,IAAK,MAAK,MAAM,IAAI,IAAI,GAAG;AAAA,YAC1B,MAAK,MAAM,OAAO,EAAE;AACzB,aAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,MACvC,CAAC,EACA,MAAM,MAAM,MAAS;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,SAAwB;AACtB,WAAO,KAAK,UAAU,MAAM,SAAS,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,EAClE;AAAA,EAEA,MAAgB;AACd,UAAM,OAAO,KAAK,OAAO,KAAK,EAAE,CAAC;AACjC,WAAO,EAAE,GAAG,KAAK,QAAQ,OAAO,MAAM,SAAS,IAAI,UAAU,MAAM,YAAY,MAAM;AAAA,EACvF;AAAA,EAEA,OAAO,OAAgC;AACrC,UAAM,EAAE,OAAO,UAAU,GAAG,MAAM,IAAI;AACtC,UAAM,KAAK,KAAK,OAAO,OAAO;AAC9B,QAAI,UAAU,OAAW,MAAK,OAAO,SAAS,IAAI,KAAK;AACvD,QAAI,aAAa,OAAW,MAAK,OAAO,YAAY,IAAI,QAAQ;AAChE,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,MAAM;AACzC,SAAK,UAAU,QAAQ,cAAc,KAAK,UAAU,KAAK,MAAM,CAAC;AAChE,SAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAAA,EAClC;AAAA,EAEA,SAAiC;AAC/B,UAAM,UAAU,KAAK,OAAO,EAAE;AAC9B,UAAM,SAAS,IAAI,QAAQ,SAAS,CAAC,EAAE,GAAG,MAAM,GAAG,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC;AAC5E,UAAM,SAAS,IAAI;AAAA,MACjB,CAAC,GAAG,MAAM,EAAE;AAAA,QACV,CAAC,CAAC,YAAY,KAAK,MACjB;AAAA,UACE;AAAA,UACA,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,OAAO,GAAG,MAAM,WAAW,SAAS,CAAC,GAAG,OAAO,EAAE;AAAA,QAChF,GAAG;AAAA,MACP;AAAA,IACF;AACA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,YAAM,EAAE,IAAI,OAAO,UAAU,MAAM,WAAW,OAAO,IAAI;AACzD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO;AAAA,QACzC,GAAI,OAAO,IAAI,MAAM,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MAChD;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,IAAY;AACjB,UAAM,SAAS,KAAK,UAAU,EAAE,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE;AACvE,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO;AAAA,MACL,MAAM,OAAO,SAAS,UAAW,UAAqB;AAAA,MACtD,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,YAAuC;AACrC,WAAO,KAAK,OAAO,EAAE,aAAa,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,OAAO,IAA2B;AACtC,SAAK,OAAO,EAAE;AACd,UAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AAAA,EACpD;AAAA,EAEA,WAA+B;AAC7B,WAAO,KAAK,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,MAAM;AAC3D,YAAM,MAAM,KAAK,MAAM,IAAI,QAAQ,EAAE;AACrC,YAAM,UAAU,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI;AAC5C,YAAM,QAAQ,KAAK,SAAS,IAAI,QAAQ,EAAE,IACtC,EAAE,GAAG,SAAS,QAAQ,aAAsB,IAC5C;AACJ,aAAO,QAAQ,EAAE,GAAG,OAAO,MAAM,IAAI;AAAA,IACvC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QAAQ,IAAY,QAAiB,QAAgD;AACzF,UAAM,UACJ,KAAK,OAAO,EAAE,SAAS,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE,KAAK,KAAK,OAAO,EAAE;AACnF,UAAM,MAAM,SAAS,UAAU;AAC/B,UAAM,QAAQ,SAAS,SAAS,UAAU,OAAO,MAAM,KAAK,YAAY,KAAK;AAC7E,UAAM,QAAQ,SAAS,EAAE,GAAG,OAAO,IAAI;AACvC,QAAI,WAAW,QAAW;AACxB,YAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,OAAO,kBAAkB;AAClE;AAAA,IACF;AACA,QAAI,SAAS,SAAS,WAAW,CAAC,MAAO,OAAM,IAAI,MAAM,GAAG,EAAE,kBAAkB;AAChF,QAAI,CAAC,OAAO;AACV,UAAI,SAAS,UAAU,QAAS,OAAM,IAAI,MAAM,GAAG,EAAE,mBAAmB;AACxE,YAAM,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,kBAAkB;AAChE;AAAA,IACF;AACA,UAAM,SAAS,MAAM,KAAK,QAAQ,IAAI,KAAK;AAC3C,QAAI,OAAO,WAAW,UAAU;AAC9B,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,mBAAmB;AAC7C,YAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,OAAO,kBAAkB;AAClE;AAAA,IACF;AACA,QAAI,QAAQ,WAAW,KAAM,OAAM,IAAI,MAAM,UAAU;AACvD,UAAM,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,kBAAkB;AAAA,EAClE;AAAA,EAEA,MAAM,QAAQ,IAAY,OAAwC;AAChE,UAAM,aAAa,IAAI,gBAAgB;AACvC,SAAK,SACF,IAAI,EAAE,GACL,MAAM,IAAI,aAAa,sCAAsC,YAAY,CAAC;AAC9E,SAAK,SAAS,IAAI,IAAI,UAAU;AAChC,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,QAAI;AACF,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA,MAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AAAA,QAClD;AAAA,UACE,QAAQ,WAAW;AAAA,QACrB;AAAA,MACF,EAAE,MAAM,CAAC,UAAmB;AAC1B,mBAAW,OAAO,eAAe;AACjC,cAAM,SAAS,KAAK;AAAA,MACtB,CAAC;AACD,iBAAW,OAAO,eAAe;AACjC,aAAO;AAAA,IACT,UAAE;AACA,UAAI,KAAK,SAAS,IAAI,EAAE,MAAM,WAAY,MAAK,SAAS,OAAO,EAAE;AACjE,WAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,IACvC;AAAA,EACF;AAAA,EAEA,OAAO,IAAkB;AACvB,UAAM,aAAa,KAAK,SAAS,IAAI,EAAE;AACvC,QAAI,CAAC,WAAY;AACjB,SAAK,SAAS,OAAO,EAAE;AACvB,eAAW,MAAM,IAAI,aAAa,8BAA8B,YAAY,CAAC;AAC7E,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,EACvC;AAAA,EAEA,WAAW,IAAkB;AAC3B;AAAA,MAAQ,KAAK,UAAU,WAAW,IAAI,kBAAkB;AAAA,MAAG;AAAA,MAAuB,CAAC,SACjF,KAAK,OAAO,OAAO,IAAI;AAAA,IACzB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type {\n  Account,\n  ModelOption,\n  Settings,\n  SettingsEvents,\n  SettingsPort,\n} from '@ai-ecoverse/slicc-spectrum/ui';\nimport { BACKGROUND_CONTEXT, withAbortSignal } from '@earendil-works/chord/context';\nimport { preferredModel } from '../preferred.ts';\nimport type { AgentSettings, ProviderOption, SettingsState, SignIn } from '../services.ts';\nimport {\n  type ConnectOptions,\n  DEVICE_SIGN_INS,\n  type DeviceSignIn,\n  httpsUrl,\n  SIGN_IN_UNFINISHED,\n} from '../sign-ins.ts';\nimport type { AgentAdapter } from './agent-port.ts';\nimport { attempt } from './attempt.ts';\nimport { Emitter } from './emitter.ts';\nimport { mcpLogin, type Popup, untilAborted } from './mcp-login.ts';\n\nexport const SETTINGS_KEY = 'slicc-agent.settings';\n\nconst defaults: Settings = {\n  color: 'system',\n  model: '',\n  thinking: 'off',\n  sendOnEnter: true,\n  showThinking: false,\n  diffStyle: 'unified',\n};\n\ntype Local = Omit<Settings, 'model' | 'thinking'>;\n\nexport type Sealed = { sealed: true };\n\nexport type Login = (\n  providerId: string,\n  signIn: () => Promise<SignIn | null>,\n  options: { signal: AbortSignal }\n) => Promise<string | Sealed>;\n\nexport const SIGN_IN_NEEDS_VAULT = \"Adobe sign-in needs seven's vault: update seven\";\nexport const UNFINISHED = SIGN_IN_UNFINISHED;\n\nexport type OpenPopup = () => Popup | null;\n\nconst openPopup: OpenPopup = () =>\n  globalThis.open?.('about:blank', 'slicc-sign-in', 'popup,width=520,height=720') ?? null;\n\nexport function readable(error: unknown): Error {\n  if (error instanceof DOMException && error.name === 'AbortError') return error;\n  const text = (error instanceof Error ? error.message : String(error ?? '')).trim();\n  if (!text) return new Error(UNFINISHED);\n  const lead = /^[a-z]+\\b(?![-.@/])/.test(text) ? text[0].toUpperCase() + text.slice(1) : text;\n  return new Error(/[.!?]$/.test(lead) ? lead : `${lead}.`);\n}\n\ntype Events = SettingsEvents & { providers: readonly ProviderOption[] };\n\nexport class SettingsAdapter extends Emitter<Events> implements SettingsPort {\n  readonly #settings: AgentSettings;\n  readonly #agent: AgentAdapter;\n  readonly #storage: Pick<Storage, 'getItem' | 'setItem'> | null;\n  readonly #login: Login | null;\n  readonly #mcpLogin: Login;\n  readonly #signing = new Map<string, AbortController>();\n  readonly #prompts = new Map<string, DeviceSignIn>();\n  readonly #open: OpenPopup;\n  #local: Local;\n  #offered = '';\n  readonly #urls = new Map<string, string>();\n\n  constructor(\n    settings: AgentSettings,\n    agent: AgentAdapter,\n    storage: Pick<Storage, 'getItem' | 'setItem'> | null,\n    login: Login | null = null,\n    mcp: Login = mcpLogin() as Login,\n    open: OpenPopup = openPopup\n  ) {\n    super();\n    this.#mcpLogin = mcp;\n    this.#open = open;\n    this.#settings = settings;\n    this.#agent = agent;\n    this.#storage = storage;\n    this.#login = login;\n    const saved = JSON.parse(storage?.getItem(SETTINGS_KEY) ?? '{}') as Partial<Local>;\n    const { model: _model, thinking: _thinking, ...local } = { ...defaults, ...saved };\n    this.#local = local;\n    this.#offered = JSON.stringify(this.providers());\n    this.#locate();\n    settings.state.subscribe(() => {\n      this.#locate();\n      this.emit('accounts', this.accounts());\n      this.emit('settings', this.get());\n      const offered = JSON.stringify(this.providers());\n      if (offered === this.#offered) return;\n      this.#offered = offered;\n      this.emit('providers', this.providers());\n    });\n    agent.on('agents', () => this.emit('settings', this.get()));\n  }\n\n  #locate(): void {\n    const servers = this.#state()\n      .accounts.filter(({ group }) => group === 'mcp')\n      .map(({ id }) => id);\n    for (const id of this.#urls.keys()) if (!servers.includes(id)) this.#urls.delete(id);\n    for (const id of servers) {\n      void this.#settings\n        .serverUrl?.(id, BACKGROUND_CONTEXT)\n        .then((url) => {\n          if ((url ?? undefined) === this.#urls.get(id)) return;\n          if (url) this.#urls.set(id, url);\n          else this.#urls.delete(id);\n          this.emit('accounts', this.accounts());\n        })\n        .catch(() => undefined);\n    }\n  }\n\n  #state(): SettingsState {\n    return this.#settings.state.value ?? { models: [], accounts: [] };\n  }\n\n  get(): Settings {\n    const cone = this.#agent.list()[0];\n    return { ...this.#local, model: cone?.model ?? '', thinking: cone?.thinking ?? 'off' };\n  }\n\n  update(patch: Partial<Settings>): void {\n    const { model, thinking, ...local } = patch;\n    const id = this.#agent.active();\n    if (model !== undefined) this.#agent.setModel(id, model);\n    if (thinking !== undefined) this.#agent.setThinking(id, thinking);\n    this.#local = { ...this.#local, ...local };\n    this.#storage?.setItem(SETTINGS_KEY, JSON.stringify(this.#local));\n    this.emit('settings', this.get());\n  }\n\n  models(): readonly ModelOption[] {\n    const choices = this.#state().models;\n    const groups = Map.groupBy(choices, ({ id }) => id.slice(0, id.indexOf('/')));\n    const chosen = new Set(\n      [...groups].map(\n        ([providerId, group]) =>\n          preferredModel(\n            providerId,\n            group.map((choice) => ({ id: choice.id.slice(providerId.length + 1), choice }))\n          )?.choice\n      )\n    );\n    return choices.map((choice) => {\n      const { id, label, provider, kind, reasoning, images } = choice;\n      return {\n        id,\n        label,\n        provider,\n        kind,\n        reasoning,\n        ...(images === undefined ? {} : { images }),\n        ...(chosen.has(choice) ? { default: true } : {}),\n      };\n    });\n  }\n\n  #offer(id: string) {\n    const option = this.providers().find((candidate) => candidate.id === id);\n    if (!option) return undefined;\n    return {\n      auth: option.auth === 'oauth' ? ('oauth' as const) : ('api-key' as const),\n      store: 'vault' as const,\n      group: 'providers' as const,\n    };\n  }\n\n  providers(): readonly ProviderOption[] {\n    return this.#state().providers ?? [];\n  }\n\n  async remove(id: string): Promise<void> {\n    this.cancel(id);\n    await this.#settings.remove(id, BACKGROUND_CONTEXT);\n  }\n\n  accounts(): readonly Account[] {\n    return this.#state().accounts.map(({ needs, ...account }) => {\n      const url = this.#urls.get(account.id);\n      const located = url ? { ...account, url } : account;\n      const prompt = this.#prompts.get(account.id);\n      const shown = this.#signing.has(account.id)\n        ? {\n            ...located,\n            status: 'signing-in' as const,\n            ...(prompt ? { signIn: { ...prompt } } : {}),\n          }\n        : located;\n      return needs ? { ...shown, needs } : shown;\n    });\n  }\n\n  async connect(\n    id: string,\n    secret?: string,\n    fields?: Record<string, string>,\n    options?: ConnectOptions\n  ): Promise<void> {\n    const account =\n      this.#state().accounts.find((candidate) => candidate.id === id) ?? this.#offer(id);\n    const mcp = account?.group === 'mcp';\n    const given = fields ? { ...fields } : null;\n    const keyed = options?.method === 'key';\n    if (account?.auth === 'oauth' && DEVICE_SIGN_INS.has(id) && secret === undefined && !keyed)\n      return this.#device(id, given);\n    const login = account?.auth !== 'oauth' || keyed ? null : mcp ? this.#mcpLogin : this.#login;\n    if (keyed) this.cancel(id);\n    if (secret !== undefined) {\n      await this.#settings.connect(id, secret, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    if (account?.auth === 'oauth' && !login && !keyed) throw new Error(`${id} needs a sign-in`);\n    if (!login) {\n      if (account?.store !== 'vault') throw new Error(`${id} needs an API key`);\n      await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    const answer = await this.#signIn(id, login);\n    if (typeof answer === 'string') {\n      if (!mcp) throw new Error(SIGN_IN_NEEDS_VAULT);\n      await this.#settings.connect(id, answer, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    if (answer?.sealed !== true) throw new Error(UNFINISHED);\n    await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);\n  }\n\n  #begin(id: string): AbortController {\n    const controller = new AbortController();\n    this.#signing\n      .get(id)\n      ?.abort(new DOMException('A newer sign-in replaced this one.', 'AbortError'));\n    this.#signing.set(id, controller);\n    this.#prompts.delete(id);\n    this.emit('accounts', this.accounts());\n    return controller;\n  }\n\n  #end(id: string, controller: AbortController): void {\n    if (this.#signing.get(id) === controller) {\n      this.#signing.delete(id);\n      this.#prompts.delete(id);\n    }\n    this.emit('accounts', this.accounts());\n  }\n\n  async #device(id: string, given: Record<string, string> | null): Promise<void> {\n    const popup = this.#open();\n    const controller = this.#begin(id);\n    const { signal } = controller;\n    const context = withAbortSignal(signal, BACKGROUND_CONTEXT);\n    try {\n      const started = (await untilAborted(\n        this.#settings.signIn(id, context),\n        signal\n      )) as DeviceSignIn | null;\n      if (!started || !httpsUrl(started.url)) throw new Error(UNFINISHED);\n      const code = typeof started.code === 'string' && started.code ? started.code : undefined;\n      this.#prompts.set(id, { url: started.url, ...(code ? { code } : {}) });\n      this.emit('accounts', this.accounts());\n      if (popup) popup.location.href = started.url;\n      await untilAborted(this.#settings.connect(id, null, given, context), signal);\n    } catch (error) {\n      signal.throwIfAborted();\n      throw readable(error);\n    } finally {\n      popup?.close();\n      this.#end(id, controller);\n    }\n  }\n\n  async #signIn(id: string, login: Login): Promise<string | Sealed> {\n    const controller = this.#begin(id);\n    try {\n      const key = await login(\n        id,\n        () => this.#settings.signIn(id, BACKGROUND_CONTEXT) as Promise<SignIn | null>,\n        {\n          signal: controller.signal,\n        }\n      ).catch((error: unknown) => {\n        controller.signal.throwIfAborted();\n        throw readable(error);\n      });\n      controller.signal.throwIfAborted();\n      return key;\n    } finally {\n      this.#end(id, controller);\n    }\n  }\n\n  cancel(id: string): void {\n    const controller = this.#signing.get(id);\n    if (!controller) return;\n    this.#signing.delete(id);\n    this.#prompts.delete(id);\n    controller.abort(new DOMException('The sign-in was cancelled.', 'AbortError'));\n    this.emit('accounts', this.accounts());\n  }\n\n  disconnect(id: string): void {\n    attempt(this.#settings.disconnect(id, BACKGROUND_CONTEXT), 'disconnect accounts', (text) =>\n      this.#agent.notify(text)\n    );\n  }\n}\n"],
+  "mappings": "AAOA,SAAS,oBAAoB,uBAAuB;AACpD,SAAS,sBAAsB;AAE/B;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,eAAe;AACxB,SAAS,eAAe;AACxB,SAAS,UAAsB,oBAAoB;AAE5C,MAAM,eAAe;AAE5B,MAAM,WAAqB;AAAA,EACzB,OAAO;AAAA,EACP,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AACb;AAYO,MAAM,sBAAsB;AAC5B,MAAM,aAAa;AAI1B,MAAM,YAAuB,MAC3B,WAAW,OAAO,eAAe,iBAAiB,4BAA4B,KAAK;AAE9E,SAAS,SAAS,OAAuB;AAC9C,MAAI,iBAAiB,gBAAgB,MAAM,SAAS,aAAc,QAAO;AACzE,QAAM,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,GAAG,KAAK;AACjF,MAAI,CAAC,KAAM,QAAO,IAAI,MAAM,UAAU;AACtC,QAAM,OAAO,sBAAsB,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC,IAAI;AACxF,SAAO,IAAI,MAAM,SAAS,KAAK,IAAI,IAAI,OAAO,GAAG,IAAI,GAAG;AAC1D;AAIO,MAAM,wBAAwB,QAAwC;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,oBAAI,IAA6B;AAAA,EAC5C,WAAW,oBAAI,IAA0B;AAAA,EACzC;AAAA,EACT;AAAA,EACA,WAAW;AAAA,EACF,QAAQ,oBAAI,IAAoB;AAAA,EAEzC,YACE,UACA,OACA,SACA,QAAsB,MACtB,MAAa,SAAS,GACtB,OAAkB,WAClB;AACA,UAAM;AACN,SAAK,YAAY;AACjB,SAAK,QAAQ;AACb,SAAK,YAAY;AACjB,SAAK,SAAS;AACd,SAAK,WAAW;AAChB,SAAK,SAAS;AACd,UAAM,QAAQ,KAAK,MAAM,SAAS,QAAQ,YAAY,KAAK,IAAI;AAC/D,UAAM,EAAE,OAAO,QAAQ,UAAU,WAAW,GAAG,MAAM,IAAI,EAAE,GAAG,UAAU,GAAG,MAAM;AACjF,SAAK,SAAS;AACd,SAAK,WAAW,KAAK,UAAU,KAAK,UAAU,CAAC;AAC/C,SAAK,QAAQ;AACb,aAAS,MAAM,UAAU,MAAM;AAC7B,WAAK,QAAQ;AACb,WAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,WAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAChC,YAAM,UAAU,KAAK,UAAU,KAAK,UAAU,CAAC;AAC/C,UAAI,YAAY,KAAK,SAAU;AAC/B,WAAK,WAAW;AAChB,WAAK,KAAK,aAAa,KAAK,UAAU,CAAC;AAAA,IACzC,CAAC;AACD,UAAM,GAAG,UAAU,MAAM,KAAK,KAAK,YAAY,KAAK,IAAI,CAAC,CAAC;AAAA,EAC5D;AAAA,EAEA,UAAgB;AACd,UAAM,UAAU,KAAK,OAAO,EACzB,SAAS,OAAO,CAAC,EAAE,MAAM,MAAM,UAAU,KAAK,EAC9C,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE;AACrB,eAAW,MAAM,KAAK,MAAM,KAAK,EAAG,KAAI,CAAC,QAAQ,SAAS,EAAE,EAAG,MAAK,MAAM,OAAO,EAAE;AACnF,eAAW,MAAM,SAAS;AACxB,WAAK,KAAK,UACP,YAAY,IAAI,kBAAkB,EAClC,KAAK,CAAC,QAAQ;AACb,aAAK,OAAO,YAAe,KAAK,MAAM,IAAI,EAAE,EAAG;AAC/C,YAAI,IAAK,MAAK,MAAM,IAAI,IAAI,GAAG;AAAA,YAC1B,MAAK,MAAM,OAAO,EAAE;AACzB,aAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,MACvC,CAAC,EACA,MAAM,MAAM,MAAS;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,SAAwB;AACtB,WAAO,KAAK,UAAU,MAAM,SAAS,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,EAClE;AAAA,EAEA,MAAgB;AACd,UAAM,OAAO,KAAK,OAAO,KAAK,EAAE,CAAC;AACjC,WAAO,EAAE,GAAG,KAAK,QAAQ,OAAO,MAAM,SAAS,IAAI,UAAU,MAAM,YAAY,MAAM;AAAA,EACvF;AAAA,EAEA,OAAO,OAAgC;AACrC,UAAM,EAAE,OAAO,UAAU,GAAG,MAAM,IAAI;AACtC,UAAM,KAAK,KAAK,OAAO,OAAO;AAC9B,QAAI,UAAU,OAAW,MAAK,OAAO,SAAS,IAAI,KAAK;AACvD,QAAI,aAAa,OAAW,MAAK,OAAO,YAAY,IAAI,QAAQ;AAChE,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,MAAM;AACzC,SAAK,UAAU,QAAQ,cAAc,KAAK,UAAU,KAAK,MAAM,CAAC;AAChE,SAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAAA,EAClC;AAAA,EAEA,SAAiC;AAC/B,UAAM,UAAU,KAAK,OAAO,EAAE;AAC9B,UAAM,SAAS,IAAI,QAAQ,SAAS,CAAC,EAAE,GAAG,MAAM,GAAG,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC;AAC5E,UAAM,SAAS,IAAI;AAAA,MACjB,CAAC,GAAG,MAAM,EAAE;AAAA,QACV,CAAC,CAAC,YAAY,KAAK,MACjB;AAAA,UACE;AAAA,UACA,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,OAAO,GAAG,MAAM,WAAW,SAAS,CAAC,GAAG,OAAO,EAAE;AAAA,QAChF,GAAG;AAAA,MACP;AAAA,IACF;AACA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,YAAM,EAAE,IAAI,OAAO,UAAU,MAAM,WAAW,OAAO,IAAI;AACzD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO;AAAA,QACzC,GAAI,OAAO,IAAI,MAAM,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MAChD;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,IAAY;AACjB,UAAM,SAAS,KAAK,UAAU,EAAE,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE;AACvE,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO;AAAA,MACL,MAAM,OAAO,SAAS,UAAW,UAAqB;AAAA,MACtD,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,YAAuC;AACrC,WAAO,KAAK,OAAO,EAAE,aAAa,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,OAAO,IAA2B;AACtC,SAAK,OAAO,EAAE;AACd,UAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AAAA,EACpD;AAAA,EAEA,WAA+B;AAC7B,WAAO,KAAK,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,MAAM;AAC3D,YAAM,MAAM,KAAK,MAAM,IAAI,QAAQ,EAAE;AACrC,YAAM,UAAU,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI;AAC5C,YAAM,SAAS,KAAK,SAAS,IAAI,QAAQ,EAAE;AAC3C,YAAM,QAAQ,KAAK,SAAS,IAAI,QAAQ,EAAE,IACtC;AAAA,QACE,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,GAAI,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,IAAI,CAAC;AAAA,MAC5C,IACA;AACJ,aAAO,QAAQ,EAAE,GAAG,OAAO,MAAM,IAAI;AAAA,IACvC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QACJ,IACA,QACA,QACA,SACe;AACf,UAAM,UACJ,KAAK,OAAO,EAAE,SAAS,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE,KAAK,KAAK,OAAO,EAAE;AACnF,UAAM,MAAM,SAAS,UAAU;AAC/B,UAAM,QAAQ,SAAS,EAAE,GAAG,OAAO,IAAI;AACvC,UAAM,QAAQ,SAAS,WAAW;AAClC,QAAI,SAAS,SAAS,WAAW,gBAAgB,IAAI,EAAE,KAAK,WAAW,UAAa,CAAC;AACnF,aAAO,KAAK,QAAQ,IAAI,KAAK;AAC/B,UAAM,QAAQ,SAAS,SAAS,WAAW,QAAQ,OAAO,MAAM,KAAK,YAAY,KAAK;AACtF,QAAI,MAAO,MAAK,OAAO,EAAE;AACzB,QAAI,WAAW,QAAW;AACxB,YAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,OAAO,kBAAkB;AAClE;AAAA,IACF;AACA,QAAI,SAAS,SAAS,WAAW,CAAC,SAAS,CAAC,MAAO,OAAM,IAAI,MAAM,GAAG,EAAE,kBAAkB;AAC1F,QAAI,CAAC,OAAO;AACV,UAAI,SAAS,UAAU,QAAS,OAAM,IAAI,MAAM,GAAG,EAAE,mBAAmB;AACxE,YAAM,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,kBAAkB;AAChE;AAAA,IACF;AACA,UAAM,SAAS,MAAM,KAAK,QAAQ,IAAI,KAAK;AAC3C,QAAI,OAAO,WAAW,UAAU;AAC9B,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,mBAAmB;AAC7C,YAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,OAAO,kBAAkB;AAClE;AAAA,IACF;AACA,QAAI,QAAQ,WAAW,KAAM,OAAM,IAAI,MAAM,UAAU;AACvD,UAAM,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,kBAAkB;AAAA,EAClE;AAAA,EAEA,OAAO,IAA6B;AAClC,UAAM,aAAa,IAAI,gBAAgB;AACvC,SAAK,SACF,IAAI,EAAE,GACL,MAAM,IAAI,aAAa,sCAAsC,YAAY,CAAC;AAC9E,SAAK,SAAS,IAAI,IAAI,UAAU;AAChC,SAAK,SAAS,OAAO,EAAE;AACvB,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,WAAO;AAAA,EACT;AAAA,EAEA,KAAK,IAAY,YAAmC;AAClD,QAAI,KAAK,SAAS,IAAI,EAAE,MAAM,YAAY;AACxC,WAAK,SAAS,OAAO,EAAE;AACvB,WAAK,SAAS,OAAO,EAAE;AAAA,IACzB;AACA,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,EACvC;AAAA,EAEA,MAAM,QAAQ,IAAY,OAAqD;AAC7E,UAAM,QAAQ,KAAK,MAAM;AACzB,UAAM,aAAa,KAAK,OAAO,EAAE;AACjC,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,UAAU,gBAAgB,QAAQ,kBAAkB;AAC1D,QAAI;AACF,YAAM,UAAW,MAAM;AAAA,QACrB,KAAK,UAAU,OAAO,IAAI,OAAO;AAAA,QACjC;AAAA,MACF;AACA,UAAI,CAAC,WAAW,CAAC,SAAS,QAAQ,GAAG,EAAG,OAAM,IAAI,MAAM,UAAU;AAClE,YAAM,OAAO,OAAO,QAAQ,SAAS,YAAY,QAAQ,OAAO,QAAQ,OAAO;AAC/E,WAAK,SAAS,IAAI,IAAI,EAAE,KAAK,QAAQ,KAAK,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,CAAC;AACrE,WAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,UAAI,MAAO,OAAM,SAAS,OAAO,QAAQ;AACzC,YAAM,aAAa,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,OAAO,GAAG,MAAM;AAAA,IAC7E,SAAS,OAAO;AACd,aAAO,eAAe;AACtB,YAAM,SAAS,KAAK;AAAA,IACtB,UAAE;AACA,aAAO,MAAM;AACb,WAAK,KAAK,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,IAAY,OAAwC;AAChE,UAAM,aAAa,KAAK,OAAO,EAAE;AACjC,QAAI;AACF,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA,MAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AAAA,QAClD;AAAA,UACE,QAAQ,WAAW;AAAA,QACrB;AAAA,MACF,EAAE,MAAM,CAAC,UAAmB;AAC1B,mBAAW,OAAO,eAAe;AACjC,cAAM,SAAS,KAAK;AAAA,MACtB,CAAC;AACD,iBAAW,OAAO,eAAe;AACjC,aAAO;AAAA,IACT,UAAE;AACA,WAAK,KAAK,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,OAAO,IAAkB;AACvB,UAAM,aAAa,KAAK,SAAS,IAAI,EAAE;AACvC,QAAI,CAAC,WAAY;AACjB,SAAK,SAAS,OAAO,EAAE;AACvB,SAAK,SAAS,OAAO,EAAE;AACvB,eAAW,MAAM,IAAI,aAAa,8BAA8B,YAAY,CAAC;AAC7E,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,EACvC;AAAA,EAEA,WAAW,IAAkB;AAC3B;AAAA,MAAQ,KAAK,UAAU,WAAW,IAAI,kBAAkB;AAAA,MAAG;AAAA,MAAuB,CAAC,SACjF,KAAK,OAAO,OAAO,IAAI;AAAA,IACzB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/types/codex.d.ts

@@ -0,0 +1,4 @@
+import type { Provider } from '@earendil-works/pi-ai';
+export declare function codexKey(placeholder: string, account: string): string;
+export declare function codexProvider(): Provider;
+export declare function codexFetch(inner: typeof fetch): typeof fetch;

package/dist/types/device.d.ts

@@ -0,0 +1,24 @@
+import type { Context } from '@earendil-works/chord';
+import type { OAuthCredential, Provider } from '@earendil-works/pi-ai';
+import { type DeviceSignIn } from './sign-ins.ts';
+export declare const ATTACH_MS = 60000;
+export interface ProviderGrant {
+    provider: string;
+    name: string;
+    response: Uint8Array;
+    settings?: Record<string, string>;
+}
+export type Grant = (grant: ProviderGrant) => Promise<unknown>;
+export interface DeviceFlows {
+    has(providerId: string): boolean;
+    start(provider: Provider, name: string, context: Context): Promise<DeviceSignIn>;
+    finish(providerId: string, context: Context): Promise<void>;
+    stop(providerId: string): void;
+}
+export declare function keptError(error: unknown): Error;
+export declare function flowError(error: unknown): Error;
+export declare function tokenResponse(credential: OAuthCredential, now: number): Uint8Array;
+export declare function deviceFlows(grant: Grant, options?: {
+    attachMs?: number;
+    now?: () => number;
+}): DeviceFlows;

package/dist/types/guests/guard.d.ts

@@ -31,6 +31,7 @@ type Taint = {
     tier: string;
 };
 export declare function canonical(value: unknown): string;
+export declare function scrubbedArguments(args: Record<string, unknown>): Promise<Record<string, unknown>>;
 export declare function summaryOf(args: Record<string, unknown>): string;
 export declare function reasonOf(item: Approval): string;
 export declare function taintsOf(inputs: readonly SubmissionId[], seats: Readonly<Record<string, SeatRecord>>, harness: Pick<Harness, 'submission'>, context: Context): Promise<Taint[]>;

package/dist/types/providers.d.ts

@@ -24,6 +24,7 @@ export interface KeyProvider {
     description: string;
     keyUrl: string;
     cors: boolean;
+    signIn?: true;
     fields?: readonly FieldSpec[];
 }
 export declare function httpsBase(value: string): URL | undefined;

package/dist/types/secrets/vault.d.ts

@@ -49,6 +49,12 @@ export declare class Vault implements Scrub {
     mcp(server: string, request: OutgoingRequest): Promise<OutgoingRequest>;
     records(): Promise<AgentRecord[]>;
     grant(server: string, response: string | Uint8Array, oauth: OAuthConfig, name?: string): Promise<Granted>;
+    grantProvider(grant: {
+        provider: string;
+        name: string;
+        response: Uint8Array;
+        settings?: Record<string, string>;
+    }): Promise<Omit<Granted, 'response'>>;
     refresh(target: RefreshTarget, name?: string): Promise<string>;
     endpoints(set: EndpointSet): Promise<void>;
     stream(): ScrubStream;

package/dist/types/services.d.ts

@@ -11,6 +11,7 @@ import type { GuestDraft, GuestGates, GuestSeat } from './guests/seats.ts';
 import type { MemoryEntry, MemoryScope, MemoryTag } from './memory/format.ts';
 import type { AgentRemote } from './remote/host.ts';
 import type { VaultState } from './secrets/vault.ts';
+import type { DeviceSignIn } from './sign-ins.ts';
 import type { SkillPackage, SkillSource } from './skills/skills.ts';
 import type { Sprinkle } from './sprinkles/kind.ts';
 export type SendMode = 'steer' | 'followUp' | 'reject';
@@ -409,7 +410,7 @@ export interface AgentSettings {
     disconnect(providerId: string, context: Context): Promise<void>;
     remove(providerId: string, context: Context): Promise<void>;
     serverUrl(providerId: string, context: Context): Promise<string | null>;
-    signIn(providerId: string, context: Context): Promise<SignIn | McpSignIn | null>;
+    signIn(providerId: string, context: Context): Promise<SignIn | McpSignIn | DeviceSignIn | null>;
     dismissMoved(context: Context): Promise<void>;
 }
 export declare const SETTINGS_METHODS: ("connect" | "disconnect" | "dismissMoved" | "remove" | "serverUrl" | "signIn")[];

package/dist/types/settings.d.ts

@@ -1,11 +1,13 @@
 import type { CredentialStore, ModelsStore, Provider } from '@earendil-works/pi-ai';
 import { type MutableModels } from '@earendil-works/pi-ai/models';
 import { type Budget } from './adobe.ts';
+import { type DeviceFlows } from './device.ts';
 import type { McpAccounts } from './mcp/index.ts';
 import type { Reach } from './net.ts';
 import type { KeysMoved } from './secrets/legacy.ts';
 import type { VaultRecords } from './secrets/records.ts';
 import type { PlainStore } from './secrets/store.ts';
+import type { Vault } from './secrets/vault.ts';
 import type { AccountField, AgentSettings } from './services.ts';
 export { BEDROCK, PREFERRED_MODELS, preferredModel } from './preferred.ts';
 export declare const DEFAULT_MODEL: {
@@ -45,4 +47,6 @@ export declare function createAgentSettings(models: MutableModels, sources: Sett
     mcp?: McpAccounts;
     moved?: KeysMoved;
     reach?: Reach;
+    vault?: Pick<Vault, 'connected' | 'needed' | 'grantProvider'>;
+    flows?: DeviceFlows;
 }): Promise<AgentSettings>;

package/dist/types/sign-ins.d.ts

@@ -0,0 +1,17 @@
+export declare const CODEX = "openai-codex";
+export declare const CODEX_ACCOUNT = "CHATGPT_ACCOUNT_ID";
+export declare const DEVICE_SIGN_INS: ReadonlySet<string>;
+export declare const SIGN_IN_REFUSED = "The sign-in was refused.";
+export declare const SIGN_IN_UNFINISHED = "The sign-in didn't finish. Try again.";
+export declare const NAME_TAKEN = "This name holds another provider's key.";
+export declare const SIGN_IN_LOCKED = "Unlock the vault to sign in.";
+export declare const SIGN_IN_UNKEPT = "The vault didn't keep the sign-in. Try again.";
+export declare const DEVICE_NEEDS_VAULT = "Signing in needs seven's vault: update seven";
+export interface DeviceSignIn {
+    url: string;
+    code?: string;
+}
+export interface ConnectOptions {
+    method?: 'sign-in' | 'key';
+}
+export declare function httpsUrl(value: unknown): value is string;

package/dist/types/spectrum/approvals-port.d.ts

@@ -2,6 +2,7 @@ import type { Approval, ApprovalDecision, ApprovalsEvents, ApprovalsPort } from
 import type { Approval as Item } from '../approvals/record.ts';
 import type { AgentConnection } from '../client.ts';
 import { Emitter } from './emitter.ts';
+export declare const ARGS_LENGTH = 65536;
 export declare function shown(item: Item, agentName: string | undefined): Approval;
 export type HostApprovals = ApprovalsPort;
 export declare const NOT_HERE = "This request can't be answered in this tab.";

package/dist/types/spectrum/mcp-login.d.ts

@@ -21,6 +21,7 @@ export interface McpLoginHost {
     timeoutMs?: number;
 }
 export declare function safeAuthorizationUrl(value: string): boolean;
+export declare function untilAborted<T>(promise: Promise<T>, signal: AbortSignal): Promise<T>;
 export declare function mcpLogin(host?: McpLoginHost): (providerId: string, signIn: () => Promise<SignIn | McpSignIn | null>, options: {
     signal: AbortSignal;
 }) => Promise<string>;

package/dist/types/spectrum/settings-port.d.ts

@@ -1,7 +1,9 @@
 import type { Account, ModelOption, Settings, SettingsEvents, SettingsPort } from '@ai-ecoverse/slicc-spectrum/ui';
 import type { AgentSettings, ProviderOption, SignIn } from '../services.ts';
+import { type ConnectOptions } from '../sign-ins.ts';
 import type { AgentAdapter } from './agent-port.ts';
 import { Emitter } from './emitter.ts';
+import { type Popup } from './mcp-login.ts';
 export declare const SETTINGS_KEY = "slicc-agent.settings";
 export type Sealed = {
     sealed: true;
@@ -11,20 +13,21 @@ export type Login = (providerId: string, signIn: () => Promise<SignIn | null>, o
 }) => Promise<string | Sealed>;
 export declare const SIGN_IN_NEEDS_VAULT = "Adobe sign-in needs seven's vault: update seven";
 export declare const UNFINISHED = "The sign-in didn't finish. Try again.";
+export type OpenPopup = () => Popup | null;
 export declare function readable(error: unknown): Error;
 type Events = SettingsEvents & {
     providers: readonly ProviderOption[];
 };
 export declare class SettingsAdapter extends Emitter<Events> implements SettingsPort {
     #private;
-    constructor(settings: AgentSettings, agent: AgentAdapter, storage: Pick<Storage, 'getItem' | 'setItem'> | null, login?: Login | null, mcp?: Login);
+    constructor(settings: AgentSettings, agent: AgentAdapter, storage: Pick<Storage, 'getItem' | 'setItem'> | null, login?: Login | null, mcp?: Login, open?: OpenPopup);
     get(): Settings;
     update(patch: Partial<Settings>): void;
     models(): readonly ModelOption[];
     providers(): readonly ProviderOption[];
     remove(id: string): Promise<void>;
     accounts(): readonly Account[];
-    connect(id: string, secret?: string, fields?: Record<string, string>): Promise<void>;
+    connect(id: string, secret?: string, fields?: Record<string, string>, options?: ConnectOptions): Promise<void>;
     cancel(id: string): void;
     disconnect(id: string): void;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-agent",
-  "version": "6.15.2",
+  "version": "6.17.0",
   "description": "SLICC's agent core on pi durable: an agent worker, session storage, remoting and pi extensions",
   "type": "module",
   "license": "Apache-2.0",
@@ -65,10 +65,10 @@
     "release": "semantic-release"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-kernel": "1.134.1",
+    "@ai-ecoverse/slicc-kernel": "1.134.3",
     "@ai-ecoverse/slicc-scrub": "1.0.0",
-    "@ai-ecoverse/slicc-shared-web": "1.25.1",
-    "@ai-ecoverse/slicc-spectrum": "1.101.1",
+    "@ai-ecoverse/slicc-shared-web": "1.27.0",
+    "@ai-ecoverse/slicc-spectrum": "1.101.2",
     "@ai-ecoverse/wasi-fnox": "1.39.0-5",
     "@ai-ecoverse/wasm-bash": "5.3.0-21",
     "@ai-ecoverse/wasm-coreutils": "9.12.0-10",