@ai-ecoverse/slicc-agent 6.18.18 → 6.19.1

package/README.md

@@ -317,7 +317,7 @@ Root's global pnpm (`/usr/local/share/pnpm`) isn't scanned. The first name wins.
 - **Memory:** `memory` is rewritten here (below); its `status`, `log`, `curate` and `dream` and the curation ledger are not ported. `gelatiere` is rewritten here (below), reading v6's www.sliccy.com catalog; `wiki` needs its `wiki` CLI.
 - **The tray hub, upskill or the Install/Update panel:** `upgrade` (`upgrade apply`, bios#70), `handoff`, `slicc`, `ssh`, `cherry`.
 - **A browser and CDP:** `playwright-cli` is rewritten as the `browser` skill (below); `computer` and `v86` don't apply.
-- **v6's JS realm, `.jsh` and `ipk` (slicc-kernel#68):** `jshd`, `mcp`, `workflows`, `package-execution`, `biome`, `ffmpeg`.
+- **v6's JS realm, `.jsh` and `ipk` (slicc-kernel#68):** `jshd`, `mcp`, `package-execution`, `biome`, `ffmpeg`. `workflows` is replaced by `agent workflow` (below).
 - **Commands the kernel doesn't have:** `mount`, `theme`, `dips`, `image-processing` (ImageMagick), `dns` (`dig`), `meminfo`, `x-search` (xAI credentials).
 
 ### Codemode
@@ -341,6 +341,28 @@ The model can write a short JavaScript program that calls its tools, with the `c
 - **Isolation.** Seven is cross-origin isolated, so pi-codemode's `SharedArrayBuffer` interrupt works.
 - **Overrides.** `runAgentWorker` takes `codemodeWasm` and `codemodeWorker` to override both, for bundled hosts.
 
+### Workflows
+
+A **workflow** is a Claude Code dynamic workflow script, a `.workflow.js`, run as a durable task. Its observable behaviour follows [`awsl-workflow@1`](https://github.com/XhinLiang/awsl/blob/main/docs/specifications/awsl-workflow-1.md), the portable contract awsl wrote down from Claude Code, with the differences listed below. No pi package runs this format in a browser, so the runtime is built here, on pi-codemode's deterministic runs; no pi patch is needed.
+
+- **The script.** It starts with `export const meta = { name, description }`, whose `name` and `description` must be non-empty strings; 512 KiB at most. The body may use top-level `await` and `return`, and returns the run's JSON result.
+- **Globals.**
+  - `agent(prompt, { label, phase, schema, model, effort, agentType })` runs one synchronous scoop and resolves to its final answer. With `schema` (a JSON Schema of at most 64 KiB), the scoop is asked for JSON only and the answer is parsed and validated. A failure (no answer, an answer that isn't JSON or doesn't match, an unknown role, a `model` that isn't `provider/model`) rejects. `agentType` names a role and `effort` is `low`, `medium`, `high`, `xhigh` or `max`. `isolation` and any unknown option reject.
+  - `parallel(thunks)` and `pipeline(items, ...stages)` keep input order, and turn a failed branch or item into `null` with a log line. A stage that returns `null` skips the item's later stages. At most 4,096 items per call.
+  - `phase(title)`, `log(message)` and `console.*` write the run's log; `args` is the `--args` JSON.
+  - `budget` is `{ total, spent(), remaining() }` in **output tokens** of the scoops. Once `spent()` reaches `total`, a new `agent()` call rejects; agents already running may finish above it, as in Claude Code and awsl, so a run can overshoot its budget by what its running agents spend.
+  - `Date.now()`, `new Date()` without arguments, `Math.random()`, `crypto`, `performance.now()` and timers throw, and there is no `require`, file system, network or `tools`. Nested `workflow()` throws: it isn't supported in SLICC. The sandbox's own clock and randomness, which `globalThis` still reaches, are virtual and seeded, so a run replays the same way.
+- **Scope.** The script's body sees only the globals above. The prelude's state (its counters, the config and the host functions) lives in a closure the body can't name. The host functions stay on `globalThis`, so the host checks every call on its own: the options, the 1,000-agent cap, the concurrency cap (a call over it waits) and the budget.
+- **Limits.** At most 1,000 agents per run. Agents running at once are capped by `--concurrency` (8 by default, at most `min(16, max(8, cores × 4))`); each one is a scoop, so the cone's `subagents.maxLiveScoops` applies too, and a run an agent started counts its steps against `subagents.maxPerTurn`.
+- **Durability.** Each run is a background task (`slicc.workflow-run`) owned by its cone, so Stop in the cone doesn't end it. The script runs in pi-codemode's QuickJS sandbox with a virtual clock and seeded randomness. Every result the script gets is journaled in the task's documents before the script sees it, with the number of calls the script had made by the time it processed that result. After a reload the task starts the script again and hands it the journaled results in order, each only once the script has made the same calls as before; calls it makes meanwhile wait until the journal is used up. A different path, a changed sandbox fingerprint, or a script that ends early fails the run. Each step's scoop and reporter task are journaled in the same transaction that creates them, so a step running at the reload reattaches to its scoop and is never spawned or sent again.
+- **Stop.** `agent workflow stop` aborts the task, which stops every scoop the run has running (each is listed with its creation) and removes their folders.
+- **State.** The session document `slicc.workflows` holds every run: its name, source, status (`running`, `completed`, `failed`, `stopped`), phase, agent counts, output tokens, the last 200 log lines and the result or error. The newest 50 finished runs are kept.
+- **Steps are scoops.** Each agent is a synchronous scoop with the scoop guard, removed when it answers. Scoops don't get the `workflow` tool, and a scoop can't start, stop or save workflows.
+- **Guests.** A run started from a run a guest started (through the `workflow` tool or `agent workflow run` in its bash) records the guest's seats and tiers. Each step's scoop gets them in its `slicc.guest-taint` document, and the guest tool gate reviews every tool call in that scoop as it would the guest's own; a seat that is gone denies them.
+- **The `workflow` tool.** A cone's model calls it with `action: run` (`file`, a path or a saved name, or `script`, the source, with `args`, `budget`, `concurrency` and `wait`), `list`, `status`, `stop` or `save` (`run`, `name`, `force`). Guest runs go through the guest tool gate as any tool call does.
+- **The CLI.** `agent workflow run <file.js | name> [--args <json>] [--budget <tokens>] [--concurrency <n>] [--wait]`, or `--script '<js>'`, prints the run id, or with `--wait` the result as JSON (exit 1 if it failed or was stopped). `list`, `status <run>`, `wait <run>`, `stop <run>` and `save <run> <name> [--force]` manage runs. `save` writes the run's source to `~/.slicc/workflows/<name>.workflow.js`, and `agent workflow run <name>` runs it; v6's bare `<name>` command is gone.
+- **Differences from awsl-workflow@1.** No nested `workflow()`, `isolation`, timers or model tiers; a direct `agent()` failure always rejects, with no Claude-compatible `null`; a resumed run continues the same attempt instead of starting a new one with a fresh budget.
+
 ### MCP servers
 
 MCP servers reachable over Streamable HTTP become native agent tools. The client is pi's [`@earendil-works/pi-mcp`](https://www.npmjs.com/package/@earendil-works/pi-mcp), and the rest is a port of coding-agent's built-in `mcp` extension (`docs/mcp.md`), which needs Node and can't load in the worker. stdio servers wait for slicc-kernel#68, and the `slicc-mcp` CLI is a separate project.

package/dist/codemode/index.js

@@ -257,9 +257,13 @@ async function locateWasm(fetcher, from) {
   }
   return void 0;
 }
+let shared;
+function sharedSandbox() {
+  return shared;
+}
 function sandboxFactory(wasm, workerUrl) {
   let found;
-  return (options) => {
+  const factory = (options) => {
     found ??= wasm().catch(() => void 0);
     return new CodemodeSandbox({
       ...options,
@@ -267,6 +271,8 @@ function sandboxFactory(wasm, workerUrl) {
       wasm: found.then((module) => module ?? loadQuickJSWasm())
     });
   };
+  shared = factory;
+  return factory;
 }
 export {
   CODEMODE,
@@ -283,6 +289,7 @@ export {
   joinText,
   locateWasm,
   sandboxFactory,
+  sharedSandbox,
   truncate,
   wasmCandidates
 };

package/dist/codemode/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/codemode/index.ts"],
-  "sourcesContent": ["import type { Context, JsonValue } from '@earendil-works/chord';\nimport { withAbortSignal } from '@earendil-works/chord/context';\nimport { Type } from '@earendil-works/pi-ai';\nimport {\n  type CodemodeError,\n  type CodemodeJsonSchema,\n  type CodemodeOutputItem,\n  type CodemodeResult,\n  CodemodeSandbox,\n  type CodemodeSandboxOptions,\n  type CodemodeTool,\n  loadQuickJSWasm,\n  parseCodemodeSource,\n  renderDeclarations,\n} from '@earendil-works/pi-codemode';\nimport {\n  type Agent,\n  defineDoc,\n  defineExtension,\n  defineTool,\n  type Extension,\n  type JsonObject,\n  type NestedToolExecutionResult,\n  type ToolExecutionApi,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { scrubItems } from '../secrets/scrub.ts';\n\nexport const CODEMODE = 'codemode';\nexport const DEFAULT_MAX_OUTPUT_TOKENS = 10_000;\nexport const MEMORY_LIMIT_BYTES = 256 * 1024 * 1024;\nconst CHARS_PER_TOKEN = 4;\n\nexport const CodemodeDoc = defineDoc<{ store: Record<string, JsonValue> }>({\n  kind: 'slicc.codemode',\n  version: 1,\n  scope: 'conversation',\n  history: 'rewindable',\n  fork: 'asOf',\n  initial: () => ({ store: {} }),\n});\n\nexport interface Sandbox {\n  execute(\n    code: string,\n    options: { signal?: AbortSignal; store?: Record<string, unknown> }\n  ): Promise<CodemodeResult>;\n  close(): Promise<void>;\n}\n\nexport type SandboxFactory = (options: CodemodeSandboxOptions) => Sandbox;\n\nexport interface CodemodeExtra {\n  tools: CodemodeTool[];\n  globals: CodemodeTool[];\n}\n\nexport interface CodemodeOptions {\n  sandbox: SandboxFactory;\n  declared: readonly ToolRegistration[];\n  extra?: (api: ToolExecutionApi, agent: Agent, context: Context) => Promise<CodemodeExtra>;\n}\n\nconst INTRO = `Run JavaScript that calls other tools. The input is raw JavaScript (not JSON, no code fence), run as an async function body in a QuickJS sandbox: top-level \\`await\\` and \\`return\\` work. No Node, file system, network, or timers.\n- \\`await tools.<name>({ ...args })\\` resolves to a string, or an object if the tool's declaration says so, and rejects with an Error on failure. Calls still running when the script ends are cancelled.\n- Optional first line: \\`// @options: {\"max_output_tokens\": 10000, \"timeout_ms\": 60000}\\``;\n\nconst GLOBALS = [\n  'Globals:',\n  '- `text(value)`, `image(dataUrlOrImageBlock)`, `console.log(...)`, and top-level `return` add output; `exit()` ends the script. With several text items, each starts with a `==> text N/M <==` line, and `console` lines follow the other output in one `<console_output>` block.',\n  '- `store(key, value)` and `load(key)` keep JSON values across codemode calls in this conversation.',\n  '- `ALL_TOOLS` lists every tool scripts can call.',\n].join('\\n');\n\nconst DISCOVERY =\n  '- `await searchTools(query, { limit?, namespace? })`, `await describeTool(name)`, `await describeNamespace(name)`: find unlisted tools, such as MCP tools.';\n\nconst BASH_OUTPUT: CodemodeJsonSchema = {\n  type: 'object',\n  properties: {\n    output: { type: 'string' },\n    exit_code: { type: 'number' },\n    truncated: { type: 'boolean' },\n    full_output_path: { type: 'string' },\n  },\n  required: ['output', 'exit_code'],\n};\n\nfunction scriptTool(tool: ToolRegistration): Omit<CodemodeTool, 'execute'> {\n  return {\n    name: tool.name,\n    description: tool.description,\n    inputSchema: tool.parameters as CodemodeJsonSchema,\n    ...(tool.name === 'bash' ? { outputSchema: BASH_OUTPUT } : {}),\n  };\n}\n\nexport function codemodeDescription(\n  declared: readonly ToolRegistration[],\n  discovery = false\n): string {\n  const tools = declared\n    .filter((tool) => tool.name !== CODEMODE)\n    .map((tool) => ({ ...scriptTool(tool), execute: () => undefined }));\n  const sections = [INTRO, discovery ? `${GLOBALS}\\n${DISCOVERY}` : GLOBALS];\n  if (tools.length) sections.push(`Nested tools:\\n${renderDeclarations({ tools })}`);\n  return sections.join('\\n\\n');\n}\n\nfunction textOf(value: unknown): string {\n  if (typeof value === 'string') return value;\n  if (!Array.isArray(value)) return '';\n  return value\n    .filter((part) => part?.type === 'text')\n    .map((part) => part.text)\n    .join('\\n');\n}\n\nfunction errorOf(result: NestedToolExecutionResult): string {\n  const errors = result.diagnostics\n    .filter((diagnostic) => diagnostic.severity === 'error')\n    .map((diagnostic) => diagnostic.message);\n  return [textOf(result.structuredOutput), ...errors].filter(Boolean).join('\\n');\n}\n\ninterface ShellOutput {\n  output: string;\n  exitCode: number;\n  truncated?: boolean;\n  fullOutputPath?: string;\n}\n\nfunction shellOutput(value: unknown): ShellOutput | undefined {\n  const shell = value as Partial<ShellOutput> | undefined;\n  return typeof shell?.output === 'string' && typeof shell.exitCode === 'number'\n    ? (shell as ShellOutput)\n    : undefined;\n}\n\nexport async function callNested(\n  name: string,\n  args: unknown,\n  api: ToolExecutionApi,\n  context: Context\n): Promise<unknown> {\n  const result = await api.executeTool(name, (args ?? {}) as JsonObject, context);\n  const shell = name === 'bash' ? shellOutput(result.structuredOutput) : undefined;\n  if (shell)\n    return {\n      output: shell.output,\n      exit_code: shell.exitCode,\n      ...(shell.truncated ? { truncated: true } : {}),\n      ...(shell.fullOutputPath ? { full_output_path: shell.fullOutputPath } : {}),\n    };\n  if (result.isError) throw new Error(errorOf(result) || `Tool \"${name}\" failed`);\n  return textOf(result.structuredOutput);\n}\n\nfunction valueText(value: unknown): string {\n  return typeof value === 'string' ? value : (JSON.stringify(value) ?? String(value));\n}\n\nexport function formatOutput(output: readonly CodemodeOutputItem[]): CodemodeOutputItem[] {\n  const total = output.filter((item) => item.type === 'text' && !item.console).length;\n  const items: CodemodeOutputItem[] = [];\n  const lines: string[] = [];\n  let index = 0;\n  for (const item of output) {\n    if (item.type === 'image') items.push(item);\n    else if (item.console) lines.push(item.text);\n    else {\n      index++;\n      items.push({\n        type: 'text',\n        text: total > 1 ? `==> text ${index}/${total} <==\\n${item.text}` : item.text,\n      });\n    }\n  }\n  if (lines.length)\n    items.push({ type: 'text', text: `<console_output>\\n${lines.join('\\n')}\\n</console_output>` });\n  return items;\n}\n\nexport function joinText(items: readonly CodemodeOutputItem[]): CodemodeOutputItem[] {\n  const joined: CodemodeOutputItem[] = [];\n  for (const item of items) {\n    const last = joined.at(-1);\n    if (item.type === 'text' && last?.type === 'text') {\n      const separator = last.text === '' || last.text.endsWith('\\n') ? '' : '\\n';\n      joined[joined.length - 1] = { type: 'text', text: `${last.text}${separator}${item.text}` };\n    } else joined.push(item);\n  }\n  return joined;\n}\n\nexport function formatError(error: CodemodeError, calls: CodemodeResult['calls']): string {\n  const heads: Record<string, string> = {\n    timeout: `Script timed out: ${error.message}`,\n    aborted: `Script aborted: ${error.message}`,\n    sandbox: `Script sandbox failed: ${error.message}`,\n  };\n  const head =\n    error.kind === 'script'\n      ? (error.stack ?? `${error.name ?? 'Error'}: ${error.message}`)\n      : heads[error.kind];\n  const summary = calls.length\n    ? `Tool calls made before the failure (they are not undone): ${calls.map((call) => `${call.name} (${call.status})`).join(', ')}`\n    : 'No tool calls were made.';\n  return `${head}\\n\\n${summary}`;\n}\n\nexport function truncate(\n  items: readonly CodemodeOutputItem[],\n  maxTokens: number\n): { items: CodemodeOutputItem[]; full: string | null } {\n  const text = items\n    .filter((item) => item.type === 'text')\n    .map((item) => item.text)\n    .join('\\n');\n  const limit = maxTokens * CHARS_PER_TOKEN;\n  if (text.length <= limit) return { items: [...items], full: null };\n  const half = Math.floor(limit / 2);\n  const kept = `${text.slice(0, half)}\\n\\n[\u2026 ${text.length - 2 * half} characters omitted \u2026]\\n\\n${text.slice(-half)}`;\n  return {\n    items: [{ type: 'text', text: kept }, ...items.filter((item) => item.type === 'image')],\n    full: text,\n  };\n}\n\nasync function spill(api: ToolExecutionApi, text: string, context: Context): Promise<string> {\n  const path = `/tmp/slicc-codemode-${api.callId.replace(/[^\\w-]/g, '_')}.txt`;\n  const written = await api.env?.writeFile(path, text, context);\n  return written?.ok ? path : '';\n}\n\nasync function saveStore(\n  api: ToolExecutionApi,\n  result: CodemodeResult,\n  context: Context\n): Promise<void> {\n  if (!result.ok) return;\n  const { set, delete: removed } = result.storeWrites;\n  if (!Object.keys(set).length && !removed.length) return;\n  await api.commit(async (tx) => {\n    const doc = await tx.doc(CodemodeDoc, api.conversationId);\n    for (const key of removed) delete doc.store[key];\n    Object.assign(doc.store, set);\n  }, context);\n}\n\nexport function codemodeTool(options: CodemodeOptions): ToolRegistration {\n  return defineTool({\n    name: CODEMODE,\n    description: codemodeDescription(options.declared, options.extra !== undefined),\n    parameters: Type.Object({ code: Type.String({ description: 'Raw JavaScript source.' }) }),\n    replay: 'unsafe',\n    callers: ['model'],\n    async execute({ code }, api, context) {\n      const started = performance.now();\n      const parsed = parseCodemodeSource(code);\n      const agent = await api.agent(context);\n      const callable = agent.tools.filter((tool) => tool.name !== CODEMODE);\n      const tools: CodemodeTool[] = callable.map((tool) => ({\n        ...scriptTool(tool),\n        execute: (args, { signal }) =>\n          callNested(tool.name, args, api, withAbortSignal(signal, context)),\n      }));\n      const extra = options.extra\n        ? await options.extra(api, agent, context)\n        : { tools: [], globals: [] };\n      const replaced = new Set(extra.tools.map((tool) => tool.name));\n      const scripted = [...tools.filter((tool) => !replaced.has(tool.name)), ...extra.tools];\n      const saved = await api.snapshot(CodemodeDoc, api.conversationId, context);\n      const sandbox = options.sandbox({\n        tools: scripted,\n        ...(extra.globals.length ? { globals: extra.globals } : {}),\n        timeoutMs: parsed.options.timeoutMs ?? Number.POSITIVE_INFINITY,\n        memoryLimitBytes: MEMORY_LIMIT_BYTES,\n      });\n      let result: CodemodeResult;\n      try {\n        result = await sandbox.execute(parsed.code, {\n          signal: context.abortSignal as AbortSignal,\n          store: { ...saved?.store },\n        });\n      } finally {\n        await sandbox.close();\n      }\n      await saveStore(api, result, context);\n      const output = [...result.output];\n      if (result.ok && result.value !== undefined)\n        output.push({ type: 'text', text: valueText(result.value) });\n      const items = formatOutput(output);\n      if (!result.ok)\n        items.push({\n          type: 'text',\n          text: `Script error:\\n${formatError(result.error, result.calls)}`,\n        });\n      const cut = truncate(\n        await scrubItems(joinText(items)),\n        parsed.options.maxOutputTokens ?? DEFAULT_MAX_OUTPUT_TOKENS\n      );\n      const path = cut.full === null ? '' : await spill(api, cut.full, context);\n      const note = path ? [{ type: 'text' as const, text: `Full output: ${path}` }] : [];\n      const seconds = ((performance.now() - started) / 1000).toFixed(1);\n      const header = `${result.ok ? 'Script completed' : 'Script failed'}\\nWall time ${seconds} seconds\\nOutput:\\n`;\n      return {\n        output: [{ type: 'text', text: header }, ...joinText([...cut.items, ...note])],\n        ...(result.ok ? {} : { isError: true }),\n      };\n    },\n  }) as ToolRegistration;\n}\n\nexport function codemodeExtension(tools: readonly ToolRegistration[]): Extension {\n  return defineExtension({ name: 'slicc-codemode', tools });\n}\n\nexport function disabledBySettings(text: string | undefined): boolean {\n  if (!text) return false;\n  try {\n    const settings = JSON.parse(text) as { defaultTools?: unknown };\n    return Array.isArray(settings.defaultTools) && settings.defaultTools.includes(`-${CODEMODE}`);\n  } catch {\n    return false;\n  }\n}\n\nexport type Fetcher = (url: string) => Promise<Response>;\n\nexport function wasmCandidates(from: URL): string[] {\n  const out: string[] = [];\n  let dir = new URL('.', from);\n  for (;;) {\n    out.push(new URL('node_modules/quickjs-wasi/quickjs.wasm', dir).href);\n    if (dir.pathname === '/') return out;\n    dir = new URL('..', dir);\n  }\n}\n\nexport async function locateWasm(\n  fetcher: Fetcher,\n  from: URL\n): Promise<WebAssembly.Module | undefined> {\n  for (const url of wasmCandidates(from)) {\n    const response = await fetcher(url).catch(() => undefined);\n    if (response?.ok) return WebAssembly.compile(await response.arrayBuffer());\n  }\n  return undefined;\n}\n\nexport function sandboxFactory(\n  wasm: () => Promise<WebAssembly.Module | undefined>,\n  workerUrl?: string | URL\n): SandboxFactory {\n  let found: Promise<WebAssembly.Module | undefined> | undefined;\n  return (options) => {\n    found ??= wasm().catch(() => undefined);\n    return new CodemodeSandbox({\n      ...options,\n      ...(workerUrl ? { workerUrl } : {}),\n      wasm: found.then((module) => module ?? loadQuickJSWasm()),\n    });\n  };\n}\n"],
-  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,YAAY;AACrB;AAAA,EAKE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,kBAAkB;AAEpB,MAAM,WAAW;AACjB,MAAM,4BAA4B;AAClC,MAAM,qBAAqB,MAAM,OAAO;AAC/C,MAAM,kBAAkB;AAEjB,MAAM,cAAc,UAAgD;AAAA,EACzE,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAuBD,MAAM,QAAQ;AAAA;AAAA;AAId,MAAM,UAAU;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAEX,MAAM,YACJ;AAEF,MAAM,cAAkC;AAAA,EACtC,MAAM;AAAA,EACN,YAAY;AAAA,IACV,QAAQ,EAAE,MAAM,SAAS;AAAA,IACzB,WAAW,EAAE,MAAM,SAAS;AAAA,IAC5B,WAAW,EAAE,MAAM,UAAU;AAAA,IAC7B,kBAAkB,EAAE,MAAM,SAAS;AAAA,EACrC;AAAA,EACA,UAAU,CAAC,UAAU,WAAW;AAClC;AAEA,SAAS,WAAW,MAAuD;AACzE,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,GAAI,KAAK,SAAS,SAAS,EAAE,cAAc,YAAY,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,SAAS,oBACd,UACA,YAAY,OACJ;AACR,QAAM,QAAQ,SACX,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ,EACvC,IAAI,CAAC,UAAU,EAAE,GAAG,WAAW,IAAI,GAAG,SAAS,MAAM,OAAU,EAAE;AACpE,QAAM,WAAW,CAAC,OAAO,YAAY,GAAG,OAAO;AAAA,EAAK,SAAS,KAAK,OAAO;AACzE,MAAI,MAAM,OAAQ,UAAS,KAAK;AAAA,EAAkB,mBAAmB,EAAE,MAAM,CAAC,CAAC,EAAE;AACjF,SAAO,SAAS,KAAK,MAAM;AAC7B;AAEA,SAAS,OAAO,OAAwB;AACtC,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,SAAO,MACJ,OAAO,CAAC,SAAS,MAAM,SAAS,MAAM,EACtC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACd;AAEA,SAAS,QAAQ,QAA2C;AAC1D,QAAM,SAAS,OAAO,YACnB,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO,EACtD,IAAI,CAAC,eAAe,WAAW,OAAO;AACzC,SAAO,CAAC,OAAO,OAAO,gBAAgB,GAAG,GAAG,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC/E;AASA,SAAS,YAAY,OAAyC;AAC5D,QAAM,QAAQ;AACd,SAAO,OAAO,OAAO,WAAW,YAAY,OAAO,MAAM,aAAa,WACjE,QACD;AACN;AAEA,eAAsB,WACpB,MACA,MACA,KACA,SACkB;AAClB,QAAM,SAAS,MAAM,IAAI,YAAY,MAAO,QAAQ,CAAC,GAAkB,OAAO;AAC9E,QAAM,QAAQ,SAAS,SAAS,YAAY,OAAO,gBAAgB,IAAI;AACvE,MAAI;AACF,WAAO;AAAA,MACL,QAAQ,MAAM;AAAA,MACd,WAAW,MAAM;AAAA,MACjB,GAAI,MAAM,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,MAC7C,GAAI,MAAM,iBAAiB,EAAE,kBAAkB,MAAM,eAAe,IAAI,CAAC;AAAA,IAC3E;AACF,MAAI,OAAO,QAAS,OAAM,IAAI,MAAM,QAAQ,MAAM,KAAK,SAAS,IAAI,UAAU;AAC9E,SAAO,OAAO,OAAO,gBAAgB;AACvC;AAEA,SAAS,UAAU,OAAwB;AACzC,SAAO,OAAO,UAAU,WAAW,QAAS,KAAK,UAAU,KAAK,KAAK,OAAO,KAAK;AACnF;AAEO,SAAS,aAAa,QAA6D;AACxF,QAAM,QAAQ,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,UAAU,CAAC,KAAK,OAAO,EAAE;AAC7E,QAAM,QAA8B,CAAC;AACrC,QAAM,QAAkB,CAAC;AACzB,MAAI,QAAQ;AACZ,aAAW,QAAQ,QAAQ;AACzB,QAAI,KAAK,SAAS,QAAS,OAAM,KAAK,IAAI;AAAA,aACjC,KAAK,QAAS,OAAM,KAAK,KAAK,IAAI;AAAA,SACtC;AACH;AACA,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,MAAM,QAAQ,IAAI,YAAY,KAAK,IAAI,KAAK;AAAA,EAAS,KAAK,IAAI,KAAK,KAAK;AAAA,MAC1E,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,MAAM;AACR,UAAM,KAAK,EAAE,MAAM,QAAQ,MAAM;AAAA,EAAqB,MAAM,KAAK,IAAI,CAAC;AAAA,mBAAsB,CAAC;AAC/F,SAAO;AACT;AAEO,SAAS,SAAS,OAA4D;AACnF,QAAM,SAA+B,CAAC;AACtC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,OAAO,GAAG,EAAE;AACzB,QAAI,KAAK,SAAS,UAAU,MAAM,SAAS,QAAQ;AACjD,YAAM,YAAY,KAAK,SAAS,MAAM,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK;AACtE,aAAO,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,QAAQ,MAAM,GAAG,KAAK,IAAI,GAAG,SAAS,GAAG,KAAK,IAAI,GAAG;AAAA,IAC3F,MAAO,QAAO,KAAK,IAAI;AAAA,EACzB;AACA,SAAO;AACT;AAEO,SAAS,YAAY,OAAsB,OAAwC;AACxF,QAAM,QAAgC;AAAA,IACpC,SAAS,qBAAqB,MAAM,OAAO;AAAA,IAC3C,SAAS,mBAAmB,MAAM,OAAO;AAAA,IACzC,SAAS,0BAA0B,MAAM,OAAO;AAAA,EAClD;AACA,QAAM,OACJ,MAAM,SAAS,WACV,MAAM,SAAS,GAAG,MAAM,QAAQ,OAAO,KAAK,MAAM,OAAO,KAC1D,MAAM,MAAM,IAAI;AACtB,QAAM,UAAU,MAAM,SAClB,6DAA6D,MAAM,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC,KAC5H;AACJ,SAAO,GAAG,IAAI;AAAA;AAAA,EAAO,OAAO;AAC9B;AAEO,SAAS,SACd,OACA,WACsD;AACtD,QAAM,OAAO,MACV,OAAO,CAAC,SAAS,KAAK,SAAS,MAAM,EACrC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACZ,QAAM,QAAQ,YAAY;AAC1B,MAAI,KAAK,UAAU,MAAO,QAAO,EAAE,OAAO,CAAC,GAAG,KAAK,GAAG,MAAM,KAAK;AACjE,QAAM,OAAO,KAAK,MAAM,QAAQ,CAAC;AACjC,QAAM,OAAO,GAAG,KAAK,MAAM,GAAG,IAAI,CAAC;AAAA;AAAA,UAAU,KAAK,SAAS,IAAI,IAAI;AAAA;AAAA,EAA6B,KAAK,MAAM,CAAC,IAAI,CAAC;AACjH,SAAO;AAAA,IACL,OAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,OAAO,CAAC;AAAA,IACtF,MAAM;AAAA,EACR;AACF;AAEA,eAAe,MAAM,KAAuB,MAAc,SAAmC;AAC3F,QAAM,OAAO,uBAAuB,IAAI,OAAO,QAAQ,WAAW,GAAG,CAAC;AACtE,QAAM,UAAU,MAAM,IAAI,KAAK,UAAU,MAAM,MAAM,OAAO;AAC5D,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEA,eAAe,UACb,KACA,QACA,SACe;AACf,MAAI,CAAC,OAAO,GAAI;AAChB,QAAM,EAAE,KAAK,QAAQ,QAAQ,IAAI,OAAO;AACxC,MAAI,CAAC,OAAO,KAAK,GAAG,EAAE,UAAU,CAAC,QAAQ,OAAQ;AACjD,QAAM,IAAI,OAAO,OAAO,OAAO;AAC7B,UAAM,MAAM,MAAM,GAAG,IAAI,aAAa,IAAI,cAAc;AACxD,eAAW,OAAO,QAAS,QAAO,IAAI,MAAM,GAAG;AAC/C,WAAO,OAAO,IAAI,OAAO,GAAG;AAAA,EAC9B,GAAG,OAAO;AACZ;AAEO,SAAS,aAAa,SAA4C;AACvE,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa,oBAAoB,QAAQ,UAAU,QAAQ,UAAU,MAAS;AAAA,IAC9E,YAAY,KAAK,OAAO,EAAE,MAAM,KAAK,OAAO,EAAE,aAAa,yBAAyB,CAAC,EAAE,CAAC;AAAA,IACxF,QAAQ;AAAA,IACR,SAAS,CAAC,OAAO;AAAA,IACjB,MAAM,QAAQ,EAAE,KAAK,GAAG,KAAK,SAAS;AACpC,YAAM,UAAU,YAAY,IAAI;AAChC,YAAM,SAAS,oBAAoB,IAAI;AACvC,YAAM,QAAQ,MAAM,IAAI,MAAM,OAAO;AACrC,YAAM,WAAW,MAAM,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ;AACpE,YAAM,QAAwB,SAAS,IAAI,CAAC,UAAU;AAAA,QACpD,GAAG,WAAW,IAAI;AAAA,QAClB,SAAS,CAAC,MAAM,EAAE,OAAO,MACvB,WAAW,KAAK,MAAM,MAAM,KAAK,gBAAgB,QAAQ,OAAO,CAAC;AAAA,MACrE,EAAE;AACF,YAAM,QAAQ,QAAQ,QAClB,MAAM,QAAQ,MAAM,KAAK,OAAO,OAAO,IACvC,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,EAAE;AAC7B,YAAM,WAAW,IAAI,IAAI,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;AAC7D,YAAM,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,IAAI,CAAC,GAAG,GAAG,MAAM,KAAK;AACrF,YAAM,QAAQ,MAAM,IAAI,SAAS,aAAa,IAAI,gBAAgB,OAAO;AACzE,YAAM,UAAU,QAAQ,QAAQ;AAAA,QAC9B,OAAO;AAAA,QACP,GAAI,MAAM,QAAQ,SAAS,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,QACzD,WAAW,OAAO,QAAQ,aAAa,OAAO;AAAA,QAC9C,kBAAkB;AAAA,MACpB,CAAC;AACD,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,QAAQ,QAAQ,OAAO,MAAM;AAAA,UAC1C,QAAQ,QAAQ;AAAA,UAChB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,QAC3B,CAAC;AAAA,MACH,UAAE;AACA,cAAM,QAAQ,MAAM;AAAA,MACtB;AACA,YAAM,UAAU,KAAK,QAAQ,OAAO;AACpC,YAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAChC,UAAI,OAAO,MAAM,OAAO,UAAU;AAChC,eAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAC7D,YAAM,QAAQ,aAAa,MAAM;AACjC,UAAI,CAAC,OAAO;AACV,cAAM,KAAK;AAAA,UACT,MAAM;AAAA,UACN,MAAM;AAAA,EAAkB,YAAY,OAAO,OAAO,OAAO,KAAK,CAAC;AAAA,QACjE,CAAC;AACH,YAAM,MAAM;AAAA,QACV,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,QAChC,OAAO,QAAQ,mBAAmB;AAAA,MACpC;AACA,YAAM,OAAO,IAAI,SAAS,OAAO,KAAK,MAAM,MAAM,KAAK,IAAI,MAAM,OAAO;AACxE,YAAM,OAAO,OAAO,CAAC,EAAE,MAAM,QAAiB,MAAM,gBAAgB,IAAI,GAAG,CAAC,IAAI,CAAC;AACjF,YAAM,YAAY,YAAY,IAAI,IAAI,WAAW,KAAM,QAAQ,CAAC;AAChE,YAAM,SAAS,GAAG,OAAO,KAAK,qBAAqB,eAAe;AAAA,YAAe,OAAO;AAAA;AAAA;AACxF,aAAO;AAAA,QACL,QAAQ,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC;AAAA,QAC7E,GAAI,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK;AAAA,MACvC;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,SAAS,kBAAkB,OAA+C;AAC/E,SAAO,gBAAgB,EAAE,MAAM,kBAAkB,MAAM,CAAC;AAC1D;AAEO,SAAS,mBAAmB,MAAmC;AACpE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACF,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,MAAM,QAAQ,SAAS,YAAY,KAAK,SAAS,aAAa,SAAS,IAAI,QAAQ,EAAE;AAAA,EAC9F,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIO,SAAS,eAAe,MAAqB;AAClD,QAAM,MAAgB,CAAC;AACvB,MAAI,MAAM,IAAI,IAAI,KAAK,IAAI;AAC3B,aAAS;AACP,QAAI,KAAK,IAAI,IAAI,0CAA0C,GAAG,EAAE,IAAI;AACpE,QAAI,IAAI,aAAa,IAAK,QAAO;AACjC,UAAM,IAAI,IAAI,MAAM,GAAG;AAAA,EACzB;AACF;AAEA,eAAsB,WACpB,SACA,MACyC;AACzC,aAAW,OAAO,eAAe,IAAI,GAAG;AACtC,UAAM,WAAW,MAAM,QAAQ,GAAG,EAAE,MAAM,MAAM,MAAS;AACzD,QAAI,UAAU,GAAI,QAAO,YAAY,QAAQ,MAAM,SAAS,YAAY,CAAC;AAAA,EAC3E;AACA,SAAO;AACT;AAEO,SAAS,eACd,MACA,WACgB;AAChB,MAAI;AACJ,SAAO,CAAC,YAAY;AAClB,cAAU,KAAK,EAAE,MAAM,MAAM,MAAS;AACtC,WAAO,IAAI,gBAAgB;AAAA,MACzB,GAAG;AAAA,MACH,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,MACjC,MAAM,MAAM,KAAK,CAAC,WAAW,UAAU,gBAAgB,CAAC;AAAA,IAC1D,CAAC;AAAA,EACH;AACF;",
+  "sourcesContent": ["import type { Context, JsonValue } from '@earendil-works/chord';\nimport { withAbortSignal } from '@earendil-works/chord/context';\nimport { Type } from '@earendil-works/pi-ai';\nimport {\n  type CodemodeError,\n  type CodemodeJsonSchema,\n  type CodemodeOutputItem,\n  type CodemodeResult,\n  type CodemodeRun,\n  type CodemodeRunOptions,\n  CodemodeSandbox,\n  type CodemodeSandboxOptions,\n  type CodemodeTool,\n  loadQuickJSWasm,\n  parseCodemodeSource,\n  renderDeclarations,\n} from '@earendil-works/pi-codemode';\nimport {\n  type Agent,\n  defineDoc,\n  defineExtension,\n  defineTool,\n  type Extension,\n  type JsonObject,\n  type NestedToolExecutionResult,\n  type ToolExecutionApi,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { scrubItems } from '../secrets/scrub.ts';\n\nexport const CODEMODE = 'codemode';\nexport const DEFAULT_MAX_OUTPUT_TOKENS = 10_000;\nexport const MEMORY_LIMIT_BYTES = 256 * 1024 * 1024;\nconst CHARS_PER_TOKEN = 4;\n\nexport const CodemodeDoc = defineDoc<{ store: Record<string, JsonValue> }>({\n  kind: 'slicc.codemode',\n  version: 1,\n  scope: 'conversation',\n  history: 'rewindable',\n  fork: 'asOf',\n  initial: () => ({ store: {} }),\n});\n\nexport interface Sandbox {\n  execute(\n    code: string,\n    options: { signal?: AbortSignal; store?: Record<string, unknown> }\n  ): Promise<CodemodeResult>;\n  start(code: string, options: CodemodeRunOptions): CodemodeRun;\n  close(): Promise<void>;\n}\n\nexport type SandboxFactory = (options: CodemodeSandboxOptions) => Sandbox;\n\nexport interface CodemodeExtra {\n  tools: CodemodeTool[];\n  globals: CodemodeTool[];\n}\n\nexport interface CodemodeOptions {\n  sandbox: SandboxFactory;\n  declared: readonly ToolRegistration[];\n  extra?: (api: ToolExecutionApi, agent: Agent, context: Context) => Promise<CodemodeExtra>;\n}\n\nconst INTRO = `Run JavaScript that calls other tools. The input is raw JavaScript (not JSON, no code fence), run as an async function body in a QuickJS sandbox: top-level \\`await\\` and \\`return\\` work. No Node, file system, network, or timers.\n- \\`await tools.<name>({ ...args })\\` resolves to a string, or an object if the tool's declaration says so, and rejects with an Error on failure. Calls still running when the script ends are cancelled.\n- Optional first line: \\`// @options: {\"max_output_tokens\": 10000, \"timeout_ms\": 60000}\\``;\n\nconst GLOBALS = [\n  'Globals:',\n  '- `text(value)`, `image(dataUrlOrImageBlock)`, `console.log(...)`, and top-level `return` add output; `exit()` ends the script. With several text items, each starts with a `==> text N/M <==` line, and `console` lines follow the other output in one `<console_output>` block.',\n  '- `store(key, value)` and `load(key)` keep JSON values across codemode calls in this conversation.',\n  '- `ALL_TOOLS` lists every tool scripts can call.',\n].join('\\n');\n\nconst DISCOVERY =\n  '- `await searchTools(query, { limit?, namespace? })`, `await describeTool(name)`, `await describeNamespace(name)`: find unlisted tools, such as MCP tools.';\n\nconst BASH_OUTPUT: CodemodeJsonSchema = {\n  type: 'object',\n  properties: {\n    output: { type: 'string' },\n    exit_code: { type: 'number' },\n    truncated: { type: 'boolean' },\n    full_output_path: { type: 'string' },\n  },\n  required: ['output', 'exit_code'],\n};\n\nfunction scriptTool(tool: ToolRegistration): Omit<CodemodeTool, 'execute'> {\n  return {\n    name: tool.name,\n    description: tool.description,\n    inputSchema: tool.parameters as CodemodeJsonSchema,\n    ...(tool.name === 'bash' ? { outputSchema: BASH_OUTPUT } : {}),\n  };\n}\n\nexport function codemodeDescription(\n  declared: readonly ToolRegistration[],\n  discovery = false\n): string {\n  const tools = declared\n    .filter((tool) => tool.name !== CODEMODE)\n    .map((tool) => ({ ...scriptTool(tool), execute: () => undefined }));\n  const sections = [INTRO, discovery ? `${GLOBALS}\\n${DISCOVERY}` : GLOBALS];\n  if (tools.length) sections.push(`Nested tools:\\n${renderDeclarations({ tools })}`);\n  return sections.join('\\n\\n');\n}\n\nfunction textOf(value: unknown): string {\n  if (typeof value === 'string') return value;\n  if (!Array.isArray(value)) return '';\n  return value\n    .filter((part) => part?.type === 'text')\n    .map((part) => part.text)\n    .join('\\n');\n}\n\nfunction errorOf(result: NestedToolExecutionResult): string {\n  const errors = result.diagnostics\n    .filter((diagnostic) => diagnostic.severity === 'error')\n    .map((diagnostic) => diagnostic.message);\n  return [textOf(result.structuredOutput), ...errors].filter(Boolean).join('\\n');\n}\n\ninterface ShellOutput {\n  output: string;\n  exitCode: number;\n  truncated?: boolean;\n  fullOutputPath?: string;\n}\n\nfunction shellOutput(value: unknown): ShellOutput | undefined {\n  const shell = value as Partial<ShellOutput> | undefined;\n  return typeof shell?.output === 'string' && typeof shell.exitCode === 'number'\n    ? (shell as ShellOutput)\n    : undefined;\n}\n\nexport async function callNested(\n  name: string,\n  args: unknown,\n  api: ToolExecutionApi,\n  context: Context\n): Promise<unknown> {\n  const result = await api.executeTool(name, (args ?? {}) as JsonObject, context);\n  const shell = name === 'bash' ? shellOutput(result.structuredOutput) : undefined;\n  if (shell)\n    return {\n      output: shell.output,\n      exit_code: shell.exitCode,\n      ...(shell.truncated ? { truncated: true } : {}),\n      ...(shell.fullOutputPath ? { full_output_path: shell.fullOutputPath } : {}),\n    };\n  if (result.isError) throw new Error(errorOf(result) || `Tool \"${name}\" failed`);\n  return textOf(result.structuredOutput);\n}\n\nfunction valueText(value: unknown): string {\n  return typeof value === 'string' ? value : (JSON.stringify(value) ?? String(value));\n}\n\nexport function formatOutput(output: readonly CodemodeOutputItem[]): CodemodeOutputItem[] {\n  const total = output.filter((item) => item.type === 'text' && !item.console).length;\n  const items: CodemodeOutputItem[] = [];\n  const lines: string[] = [];\n  let index = 0;\n  for (const item of output) {\n    if (item.type === 'image') items.push(item);\n    else if (item.console) lines.push(item.text);\n    else {\n      index++;\n      items.push({\n        type: 'text',\n        text: total > 1 ? `==> text ${index}/${total} <==\\n${item.text}` : item.text,\n      });\n    }\n  }\n  if (lines.length)\n    items.push({ type: 'text', text: `<console_output>\\n${lines.join('\\n')}\\n</console_output>` });\n  return items;\n}\n\nexport function joinText(items: readonly CodemodeOutputItem[]): CodemodeOutputItem[] {\n  const joined: CodemodeOutputItem[] = [];\n  for (const item of items) {\n    const last = joined.at(-1);\n    if (item.type === 'text' && last?.type === 'text') {\n      const separator = last.text === '' || last.text.endsWith('\\n') ? '' : '\\n';\n      joined[joined.length - 1] = { type: 'text', text: `${last.text}${separator}${item.text}` };\n    } else joined.push(item);\n  }\n  return joined;\n}\n\nexport function formatError(error: CodemodeError, calls: CodemodeResult['calls']): string {\n  const heads: Record<string, string> = {\n    timeout: `Script timed out: ${error.message}`,\n    aborted: `Script aborted: ${error.message}`,\n    sandbox: `Script sandbox failed: ${error.message}`,\n  };\n  const head =\n    error.kind === 'script'\n      ? (error.stack ?? `${error.name ?? 'Error'}: ${error.message}`)\n      : heads[error.kind];\n  const summary = calls.length\n    ? `Tool calls made before the failure (they are not undone): ${calls.map((call) => `${call.name} (${call.status})`).join(', ')}`\n    : 'No tool calls were made.';\n  return `${head}\\n\\n${summary}`;\n}\n\nexport function truncate(\n  items: readonly CodemodeOutputItem[],\n  maxTokens: number\n): { items: CodemodeOutputItem[]; full: string | null } {\n  const text = items\n    .filter((item) => item.type === 'text')\n    .map((item) => item.text)\n    .join('\\n');\n  const limit = maxTokens * CHARS_PER_TOKEN;\n  if (text.length <= limit) return { items: [...items], full: null };\n  const half = Math.floor(limit / 2);\n  const kept = `${text.slice(0, half)}\\n\\n[\u2026 ${text.length - 2 * half} characters omitted \u2026]\\n\\n${text.slice(-half)}`;\n  return {\n    items: [{ type: 'text', text: kept }, ...items.filter((item) => item.type === 'image')],\n    full: text,\n  };\n}\n\nasync function spill(api: ToolExecutionApi, text: string, context: Context): Promise<string> {\n  const path = `/tmp/slicc-codemode-${api.callId.replace(/[^\\w-]/g, '_')}.txt`;\n  const written = await api.env?.writeFile(path, text, context);\n  return written?.ok ? path : '';\n}\n\nasync function saveStore(\n  api: ToolExecutionApi,\n  result: CodemodeResult,\n  context: Context\n): Promise<void> {\n  if (!result.ok) return;\n  const { set, delete: removed } = result.storeWrites;\n  if (!Object.keys(set).length && !removed.length) return;\n  await api.commit(async (tx) => {\n    const doc = await tx.doc(CodemodeDoc, api.conversationId);\n    for (const key of removed) delete doc.store[key];\n    Object.assign(doc.store, set);\n  }, context);\n}\n\nexport function codemodeTool(options: CodemodeOptions): ToolRegistration {\n  return defineTool({\n    name: CODEMODE,\n    description: codemodeDescription(options.declared, options.extra !== undefined),\n    parameters: Type.Object({ code: Type.String({ description: 'Raw JavaScript source.' }) }),\n    replay: 'unsafe',\n    callers: ['model'],\n    async execute({ code }, api, context) {\n      const started = performance.now();\n      const parsed = parseCodemodeSource(code);\n      const agent = await api.agent(context);\n      const callable = agent.tools.filter((tool) => tool.name !== CODEMODE);\n      const tools: CodemodeTool[] = callable.map((tool) => ({\n        ...scriptTool(tool),\n        execute: (args, { signal }) =>\n          callNested(tool.name, args, api, withAbortSignal(signal, context)),\n      }));\n      const extra = options.extra\n        ? await options.extra(api, agent, context)\n        : { tools: [], globals: [] };\n      const replaced = new Set(extra.tools.map((tool) => tool.name));\n      const scripted = [...tools.filter((tool) => !replaced.has(tool.name)), ...extra.tools];\n      const saved = await api.snapshot(CodemodeDoc, api.conversationId, context);\n      const sandbox = options.sandbox({\n        tools: scripted,\n        ...(extra.globals.length ? { globals: extra.globals } : {}),\n        timeoutMs: parsed.options.timeoutMs ?? Number.POSITIVE_INFINITY,\n        memoryLimitBytes: MEMORY_LIMIT_BYTES,\n      });\n      let result: CodemodeResult;\n      try {\n        result = await sandbox.execute(parsed.code, {\n          signal: context.abortSignal as AbortSignal,\n          store: { ...saved?.store },\n        });\n      } finally {\n        await sandbox.close();\n      }\n      await saveStore(api, result, context);\n      const output = [...result.output];\n      if (result.ok && result.value !== undefined)\n        output.push({ type: 'text', text: valueText(result.value) });\n      const items = formatOutput(output);\n      if (!result.ok)\n        items.push({\n          type: 'text',\n          text: `Script error:\\n${formatError(result.error, result.calls)}`,\n        });\n      const cut = truncate(\n        await scrubItems(joinText(items)),\n        parsed.options.maxOutputTokens ?? DEFAULT_MAX_OUTPUT_TOKENS\n      );\n      const path = cut.full === null ? '' : await spill(api, cut.full, context);\n      const note = path ? [{ type: 'text' as const, text: `Full output: ${path}` }] : [];\n      const seconds = ((performance.now() - started) / 1000).toFixed(1);\n      const header = `${result.ok ? 'Script completed' : 'Script failed'}\\nWall time ${seconds} seconds\\nOutput:\\n`;\n      return {\n        output: [{ type: 'text', text: header }, ...joinText([...cut.items, ...note])],\n        ...(result.ok ? {} : { isError: true }),\n      };\n    },\n  }) as ToolRegistration;\n}\n\nexport function codemodeExtension(tools: readonly ToolRegistration[]): Extension {\n  return defineExtension({ name: 'slicc-codemode', tools });\n}\n\nexport function disabledBySettings(text: string | undefined): boolean {\n  if (!text) return false;\n  try {\n    const settings = JSON.parse(text) as { defaultTools?: unknown };\n    return Array.isArray(settings.defaultTools) && settings.defaultTools.includes(`-${CODEMODE}`);\n  } catch {\n    return false;\n  }\n}\n\nexport type Fetcher = (url: string) => Promise<Response>;\n\nexport function wasmCandidates(from: URL): string[] {\n  const out: string[] = [];\n  let dir = new URL('.', from);\n  for (;;) {\n    out.push(new URL('node_modules/quickjs-wasi/quickjs.wasm', dir).href);\n    if (dir.pathname === '/') return out;\n    dir = new URL('..', dir);\n  }\n}\n\nexport async function locateWasm(\n  fetcher: Fetcher,\n  from: URL\n): Promise<WebAssembly.Module | undefined> {\n  for (const url of wasmCandidates(from)) {\n    const response = await fetcher(url).catch(() => undefined);\n    if (response?.ok) return WebAssembly.compile(await response.arrayBuffer());\n  }\n  return undefined;\n}\n\nlet shared: SandboxFactory | undefined;\n\nexport function sharedSandbox(): SandboxFactory | undefined {\n  return shared;\n}\n\nexport function sandboxFactory(\n  wasm: () => Promise<WebAssembly.Module | undefined>,\n  workerUrl?: string | URL\n): SandboxFactory {\n  let found: Promise<WebAssembly.Module | undefined> | undefined;\n  const factory: SandboxFactory = (options) => {\n    found ??= wasm().catch(() => undefined);\n    return new CodemodeSandbox({\n      ...options,\n      ...(workerUrl ? { workerUrl } : {}),\n      wasm: found.then((module) => module ?? loadQuickJSWasm()),\n    });\n  };\n  shared = factory;\n  return factory;\n}\n"],
+  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,YAAY;AACrB;AAAA,EAOE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,kBAAkB;AAEpB,MAAM,WAAW;AACjB,MAAM,4BAA4B;AAClC,MAAM,qBAAqB,MAAM,OAAO;AAC/C,MAAM,kBAAkB;AAEjB,MAAM,cAAc,UAAgD;AAAA,EACzE,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAwBD,MAAM,QAAQ;AAAA;AAAA;AAId,MAAM,UAAU;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAEX,MAAM,YACJ;AAEF,MAAM,cAAkC;AAAA,EACtC,MAAM;AAAA,EACN,YAAY;AAAA,IACV,QAAQ,EAAE,MAAM,SAAS;AAAA,IACzB,WAAW,EAAE,MAAM,SAAS;AAAA,IAC5B,WAAW,EAAE,MAAM,UAAU;AAAA,IAC7B,kBAAkB,EAAE,MAAM,SAAS;AAAA,EACrC;AAAA,EACA,UAAU,CAAC,UAAU,WAAW;AAClC;AAEA,SAAS,WAAW,MAAuD;AACzE,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,GAAI,KAAK,SAAS,SAAS,EAAE,cAAc,YAAY,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,SAAS,oBACd,UACA,YAAY,OACJ;AACR,QAAM,QAAQ,SACX,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ,EACvC,IAAI,CAAC,UAAU,EAAE,GAAG,WAAW,IAAI,GAAG,SAAS,MAAM,OAAU,EAAE;AACpE,QAAM,WAAW,CAAC,OAAO,YAAY,GAAG,OAAO;AAAA,EAAK,SAAS,KAAK,OAAO;AACzE,MAAI,MAAM,OAAQ,UAAS,KAAK;AAAA,EAAkB,mBAAmB,EAAE,MAAM,CAAC,CAAC,EAAE;AACjF,SAAO,SAAS,KAAK,MAAM;AAC7B;AAEA,SAAS,OAAO,OAAwB;AACtC,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,SAAO,MACJ,OAAO,CAAC,SAAS,MAAM,SAAS,MAAM,EACtC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACd;AAEA,SAAS,QAAQ,QAA2C;AAC1D,QAAM,SAAS,OAAO,YACnB,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO,EACtD,IAAI,CAAC,eAAe,WAAW,OAAO;AACzC,SAAO,CAAC,OAAO,OAAO,gBAAgB,GAAG,GAAG,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC/E;AASA,SAAS,YAAY,OAAyC;AAC5D,QAAM,QAAQ;AACd,SAAO,OAAO,OAAO,WAAW,YAAY,OAAO,MAAM,aAAa,WACjE,QACD;AACN;AAEA,eAAsB,WACpB,MACA,MACA,KACA,SACkB;AAClB,QAAM,SAAS,MAAM,IAAI,YAAY,MAAO,QAAQ,CAAC,GAAkB,OAAO;AAC9E,QAAM,QAAQ,SAAS,SAAS,YAAY,OAAO,gBAAgB,IAAI;AACvE,MAAI;AACF,WAAO;AAAA,MACL,QAAQ,MAAM;AAAA,MACd,WAAW,MAAM;AAAA,MACjB,GAAI,MAAM,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,MAC7C,GAAI,MAAM,iBAAiB,EAAE,kBAAkB,MAAM,eAAe,IAAI,CAAC;AAAA,IAC3E;AACF,MAAI,OAAO,QAAS,OAAM,IAAI,MAAM,QAAQ,MAAM,KAAK,SAAS,IAAI,UAAU;AAC9E,SAAO,OAAO,OAAO,gBAAgB;AACvC;AAEA,SAAS,UAAU,OAAwB;AACzC,SAAO,OAAO,UAAU,WAAW,QAAS,KAAK,UAAU,KAAK,KAAK,OAAO,KAAK;AACnF;AAEO,SAAS,aAAa,QAA6D;AACxF,QAAM,QAAQ,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,UAAU,CAAC,KAAK,OAAO,EAAE;AAC7E,QAAM,QAA8B,CAAC;AACrC,QAAM,QAAkB,CAAC;AACzB,MAAI,QAAQ;AACZ,aAAW,QAAQ,QAAQ;AACzB,QAAI,KAAK,SAAS,QAAS,OAAM,KAAK,IAAI;AAAA,aACjC,KAAK,QAAS,OAAM,KAAK,KAAK,IAAI;AAAA,SACtC;AACH;AACA,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,MAAM,QAAQ,IAAI,YAAY,KAAK,IAAI,KAAK;AAAA,EAAS,KAAK,IAAI,KAAK,KAAK;AAAA,MAC1E,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,MAAM;AACR,UAAM,KAAK,EAAE,MAAM,QAAQ,MAAM;AAAA,EAAqB,MAAM,KAAK,IAAI,CAAC;AAAA,mBAAsB,CAAC;AAC/F,SAAO;AACT;AAEO,SAAS,SAAS,OAA4D;AACnF,QAAM,SAA+B,CAAC;AACtC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,OAAO,GAAG,EAAE;AACzB,QAAI,KAAK,SAAS,UAAU,MAAM,SAAS,QAAQ;AACjD,YAAM,YAAY,KAAK,SAAS,MAAM,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK;AACtE,aAAO,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,QAAQ,MAAM,GAAG,KAAK,IAAI,GAAG,SAAS,GAAG,KAAK,IAAI,GAAG;AAAA,IAC3F,MAAO,QAAO,KAAK,IAAI;AAAA,EACzB;AACA,SAAO;AACT;AAEO,SAAS,YAAY,OAAsB,OAAwC;AACxF,QAAM,QAAgC;AAAA,IACpC,SAAS,qBAAqB,MAAM,OAAO;AAAA,IAC3C,SAAS,mBAAmB,MAAM,OAAO;AAAA,IACzC,SAAS,0BAA0B,MAAM,OAAO;AAAA,EAClD;AACA,QAAM,OACJ,MAAM,SAAS,WACV,MAAM,SAAS,GAAG,MAAM,QAAQ,OAAO,KAAK,MAAM,OAAO,KAC1D,MAAM,MAAM,IAAI;AACtB,QAAM,UAAU,MAAM,SAClB,6DAA6D,MAAM,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC,KAC5H;AACJ,SAAO,GAAG,IAAI;AAAA;AAAA,EAAO,OAAO;AAC9B;AAEO,SAAS,SACd,OACA,WACsD;AACtD,QAAM,OAAO,MACV,OAAO,CAAC,SAAS,KAAK,SAAS,MAAM,EACrC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACZ,QAAM,QAAQ,YAAY;AAC1B,MAAI,KAAK,UAAU,MAAO,QAAO,EAAE,OAAO,CAAC,GAAG,KAAK,GAAG,MAAM,KAAK;AACjE,QAAM,OAAO,KAAK,MAAM,QAAQ,CAAC;AACjC,QAAM,OAAO,GAAG,KAAK,MAAM,GAAG,IAAI,CAAC;AAAA;AAAA,UAAU,KAAK,SAAS,IAAI,IAAI;AAAA;AAAA,EAA6B,KAAK,MAAM,CAAC,IAAI,CAAC;AACjH,SAAO;AAAA,IACL,OAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,OAAO,CAAC;AAAA,IACtF,MAAM;AAAA,EACR;AACF;AAEA,eAAe,MAAM,KAAuB,MAAc,SAAmC;AAC3F,QAAM,OAAO,uBAAuB,IAAI,OAAO,QAAQ,WAAW,GAAG,CAAC;AACtE,QAAM,UAAU,MAAM,IAAI,KAAK,UAAU,MAAM,MAAM,OAAO;AAC5D,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEA,eAAe,UACb,KACA,QACA,SACe;AACf,MAAI,CAAC,OAAO,GAAI;AAChB,QAAM,EAAE,KAAK,QAAQ,QAAQ,IAAI,OAAO;AACxC,MAAI,CAAC,OAAO,KAAK,GAAG,EAAE,UAAU,CAAC,QAAQ,OAAQ;AACjD,QAAM,IAAI,OAAO,OAAO,OAAO;AAC7B,UAAM,MAAM,MAAM,GAAG,IAAI,aAAa,IAAI,cAAc;AACxD,eAAW,OAAO,QAAS,QAAO,IAAI,MAAM,GAAG;AAC/C,WAAO,OAAO,IAAI,OAAO,GAAG;AAAA,EAC9B,GAAG,OAAO;AACZ;AAEO,SAAS,aAAa,SAA4C;AACvE,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa,oBAAoB,QAAQ,UAAU,QAAQ,UAAU,MAAS;AAAA,IAC9E,YAAY,KAAK,OAAO,EAAE,MAAM,KAAK,OAAO,EAAE,aAAa,yBAAyB,CAAC,EAAE,CAAC;AAAA,IACxF,QAAQ;AAAA,IACR,SAAS,CAAC,OAAO;AAAA,IACjB,MAAM,QAAQ,EAAE,KAAK,GAAG,KAAK,SAAS;AACpC,YAAM,UAAU,YAAY,IAAI;AAChC,YAAM,SAAS,oBAAoB,IAAI;AACvC,YAAM,QAAQ,MAAM,IAAI,MAAM,OAAO;AACrC,YAAM,WAAW,MAAM,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ;AACpE,YAAM,QAAwB,SAAS,IAAI,CAAC,UAAU;AAAA,QACpD,GAAG,WAAW,IAAI;AAAA,QAClB,SAAS,CAAC,MAAM,EAAE,OAAO,MACvB,WAAW,KAAK,MAAM,MAAM,KAAK,gBAAgB,QAAQ,OAAO,CAAC;AAAA,MACrE,EAAE;AACF,YAAM,QAAQ,QAAQ,QAClB,MAAM,QAAQ,MAAM,KAAK,OAAO,OAAO,IACvC,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,EAAE;AAC7B,YAAM,WAAW,IAAI,IAAI,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;AAC7D,YAAM,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,IAAI,CAAC,GAAG,GAAG,MAAM,KAAK;AACrF,YAAM,QAAQ,MAAM,IAAI,SAAS,aAAa,IAAI,gBAAgB,OAAO;AACzE,YAAM,UAAU,QAAQ,QAAQ;AAAA,QAC9B,OAAO;AAAA,QACP,GAAI,MAAM,QAAQ,SAAS,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,QACzD,WAAW,OAAO,QAAQ,aAAa,OAAO;AAAA,QAC9C,kBAAkB;AAAA,MACpB,CAAC;AACD,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,QAAQ,QAAQ,OAAO,MAAM;AAAA,UAC1C,QAAQ,QAAQ;AAAA,UAChB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,QAC3B,CAAC;AAAA,MACH,UAAE;AACA,cAAM,QAAQ,MAAM;AAAA,MACtB;AACA,YAAM,UAAU,KAAK,QAAQ,OAAO;AACpC,YAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAChC,UAAI,OAAO,MAAM,OAAO,UAAU;AAChC,eAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAC7D,YAAM,QAAQ,aAAa,MAAM;AACjC,UAAI,CAAC,OAAO;AACV,cAAM,KAAK;AAAA,UACT,MAAM;AAAA,UACN,MAAM;AAAA,EAAkB,YAAY,OAAO,OAAO,OAAO,KAAK,CAAC;AAAA,QACjE,CAAC;AACH,YAAM,MAAM;AAAA,QACV,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,QAChC,OAAO,QAAQ,mBAAmB;AAAA,MACpC;AACA,YAAM,OAAO,IAAI,SAAS,OAAO,KAAK,MAAM,MAAM,KAAK,IAAI,MAAM,OAAO;AACxE,YAAM,OAAO,OAAO,CAAC,EAAE,MAAM,QAAiB,MAAM,gBAAgB,IAAI,GAAG,CAAC,IAAI,CAAC;AACjF,YAAM,YAAY,YAAY,IAAI,IAAI,WAAW,KAAM,QAAQ,CAAC;AAChE,YAAM,SAAS,GAAG,OAAO,KAAK,qBAAqB,eAAe;AAAA,YAAe,OAAO;AAAA;AAAA;AACxF,aAAO;AAAA,QACL,QAAQ,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC;AAAA,QAC7E,GAAI,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK;AAAA,MACvC;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,SAAS,kBAAkB,OAA+C;AAC/E,SAAO,gBAAgB,EAAE,MAAM,kBAAkB,MAAM,CAAC;AAC1D;AAEO,SAAS,mBAAmB,MAAmC;AACpE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACF,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,MAAM,QAAQ,SAAS,YAAY,KAAK,SAAS,aAAa,SAAS,IAAI,QAAQ,EAAE;AAAA,EAC9F,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIO,SAAS,eAAe,MAAqB;AAClD,QAAM,MAAgB,CAAC;AACvB,MAAI,MAAM,IAAI,IAAI,KAAK,IAAI;AAC3B,aAAS;AACP,QAAI,KAAK,IAAI,IAAI,0CAA0C,GAAG,EAAE,IAAI;AACpE,QAAI,IAAI,aAAa,IAAK,QAAO;AACjC,UAAM,IAAI,IAAI,MAAM,GAAG;AAAA,EACzB;AACF;AAEA,eAAsB,WACpB,SACA,MACyC;AACzC,aAAW,OAAO,eAAe,IAAI,GAAG;AACtC,UAAM,WAAW,MAAM,QAAQ,GAAG,EAAE,MAAM,MAAM,MAAS;AACzD,QAAI,UAAU,GAAI,QAAO,YAAY,QAAQ,MAAM,SAAS,YAAY,CAAC;AAAA,EAC3E;AACA,SAAO;AACT;AAEA,IAAI;AAEG,SAAS,gBAA4C;AAC1D,SAAO;AACT;AAEO,SAAS,eACd,MACA,WACgB;AAChB,MAAI;AACJ,QAAM,UAA0B,CAAC,YAAY;AAC3C,cAAU,KAAK,EAAE,MAAM,MAAM,MAAS;AACtC,WAAO,IAAI,gBAAgB;AAAA,MACzB,GAAG;AAAA,MACH,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,MACjC,MAAM,MAAM,KAAK,CAAC,WAAW,UAAU,gBAAgB,CAAC;AAAA,IAC1D,CAAC;AAAA,EACH;AACA,WAAS;AACT,SAAO;AACT;",
   "names": []
 }

package/dist/guests/guard.js

@@ -1,5 +1,6 @@
 import { awaitWithContext, BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
 import {
+  defineDoc,
   defineExtension,
   hook,
   LiveDoc,
@@ -100,6 +101,31 @@ function reasonOf(item) {
   if (item.reason === REASONS.unroutable) return GATE_REASONS.unroutable;
   return GATE_REASONS.unanswered;
 }
+const GuestTaintDoc = defineDoc({
+  kind: "slicc.guest-taint",
+  version: 1,
+  scope: "conversation",
+  history: "rewindable",
+  fork: "asOf",
+  initial: () => ({ taints: [] })
+});
+async function runTaints(harness, conversationId, context) {
+  const live = await harness.snapshot(LiveDoc, conversationId, context);
+  const inputs = live?.run?.inputs ?? [];
+  const inherited = (await harness.snapshot(GuestTaintDoc, conversationId, context))?.taints ?? [];
+  const seats = (await harness.snapshot(GuestsDoc, context))?.seats ?? {};
+  const found = inputs.length ? await taintsOf(inputs, seats, harness, context) : [];
+  return [
+    ...found.map((taint) => ({ seat: taint.seat?.id ?? null, tier: taint.tier })),
+    ...inherited
+  ];
+}
+function inheritedTaints(inherited, seats) {
+  return inherited.map((taint) => ({
+    seat: taint.seat === null ? null : seats[taint.seat] ?? null,
+    tier: taint.tier
+  }));
+}
 async function taintsOf(inputs, seats, harness, context) {
   const found = /* @__PURE__ */ new Map();
   for (const id of inputs) {
@@ -212,10 +238,12 @@ function guestToolGate(harness) {
           async beforeTool(call, api, context) {
             const live = await api.snapshot(LiveDoc, api.conversationId, context);
             const inputs = live?.run?.inputs ?? [];
-            if (!inputs.length) return void 0;
+            const inherited = (await api.snapshot(GuestTaintDoc, api.conversationId, context))?.taints ?? [];
+            if (!inputs.length && !inherited.length) return void 0;
             const seats = (await api.snapshot(GuestsDoc, context))?.seats ?? {};
             const held = harness();
-            for (const taint of await taintsOf(inputs, seats, held, context)) {
+            const found = inputs.length ? await taintsOf(inputs, seats, held, context) : [];
+            for (const taint of [...found, ...inheritedTaints(inherited, seats)]) {
               const block = await review(taint, call, api, context);
               if (block) return { block };
             }
@@ -237,11 +265,13 @@ export {
   GUEST_GUARD,
   GUEST_REQUEST,
   GUEST_TOOL_MEMO,
+  GuestTaintDoc,
   SUMMARY_LENGTH,
   argumentsHash,
   canonical,
   guestToolGate,
   reasonOf,
+  runTaints,
   scrubbedArguments,
   sealedRules,
   summaryOf,

package/dist/guests/guard.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/guests/guard.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { awaitWithContext, BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport {\n  defineExtension,\n  type Extension,\n  type Harness,\n  type HookApi,\n  hook,\n  LiveDoc,\n  type SubmissionId,\n  type TaskId,\n  type ToolHookCall,\n  ToolTask,\n} from '@earendil-works/pi-durable';\nimport type { Approval, Approvals } from '../approvals/index.ts';\nimport { REASONS, scoopTier } from '../approvals/record.ts';\nimport { scrubText, scrubTexts } from '../secrets/scrub.ts';\nimport { type GuestPolicy, gateKind, gateRefusal } from './policy.ts';\nimport { type AlwaysTool, GuestsDoc, isGate, liveSeat, type SeatRecord } from './seats.ts';\n\nexport const GUEST_GUARD = 'slicc-guest-guard';\nexport const GUEST_REQUEST = 'guest:';\nexport const GUEST_TOOL_MEMO = 'slicc.guest-tool';\nexport const SUMMARY_LENGTH = 2000;\n\nexport const GATE_REASONS = {\n  unknown:\n    'A guest started this run, and its seat names no review for tool calls that this agent knows.',\n  ended: \"A guest started this run, and that guest's seat has ended.\",\n  rejected: 'The owner declined this tool call in a run a guest started.',\n  judged: 'The automatic check declined this tool call in a run a guest started',\n  unanswered: 'Nobody approved this tool call in a run a guest started in time.',\n  unroutable: \"The cone can't review a tool call it is itself waiting on.\",\n  withdrawn: 'The review of this tool call was withdrawn.',\n} as const;\n\nexport interface GateHost {\n  approvals: Pick<Approvals, 'state' | 'request' | 'settled' | 'withdraw'>;\n  policy(): GuestPolicy;\n  now?: () => number;\n}\n\nexport interface GuestToolGate {\n  readonly extension: Extension;\n  bind(host: GateHost): void;\n}\n\ntype Held = Pick<Harness, 'submission' | 'commit' | 'waitForTask'>;\n\ntype Taint = { seat: SeatRecord | null; tier: string };\n\nexport function canonical(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(canonical).join(',')}]`;\n  if (value && typeof value === 'object')\n    return `{${Object.keys(value)\n      .sort()\n      .map((key) => `${JSON.stringify(key)}:${canonical((value as Record<string, unknown>)[key])}`)\n      .join(',')}}`;\n  return JSON.stringify(value ?? null);\n}\n\nfunction leaves(value: unknown, found: string[]): void {\n  if (typeof value === 'string') found.push(value);\n  else if (value && typeof value === 'object')\n    for (const item of Object.values(value)) leaves(item, found);\n}\n\nfunction replaced(value: unknown, texts: string[]): unknown {\n  if (typeof value === 'string') return texts.shift();\n  if (Array.isArray(value)) return value.map((item) => replaced(item, texts));\n  if (value && typeof value === 'object')\n    return Object.fromEntries(\n      Object.entries(value).map(([key, item]) => [key, replaced(item, texts)])\n    );\n  return value;\n}\n\nexport async function scrubbedArguments(\n  args: Record<string, unknown>\n): Promise<Record<string, unknown>> {\n  const found: string[] = [];\n  leaves(args, found);\n  return replaced(args, await scrubTexts(found)) as Record<string, unknown>;\n}\n\nexport async function argumentsHash(args: string): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(args));\n  return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, '0')).join('');\n}\n\nasync function shownArguments(text: string): Promise<string> {\n  try {\n    return canonical(await scrubbedArguments(JSON.parse(text)));\n  } catch {\n    return scrubText(text);\n  }\n}\n\nexport async function sealedRules(rules: readonly AlwaysTool[]): Promise<AlwaysTool[] | null> {\n  if (rules.every((rule) => rule.argumentsHash)) return null;\n  return Promise.all(\n    rules.map(async (rule) =>\n      rule.argumentsHash\n        ? rule\n        : {\n            ...rule,\n            argumentsHash: await argumentsHash(rule.arguments),\n            arguments: await shownArguments(rule.arguments),\n          }\n    )\n  );\n}\n\nexport function summaryOf(args: Record<string, unknown>): string {\n  const values = Object.values(args);\n  const text = values.length === 1 && typeof values[0] === 'string' ? values[0] : canonical(args);\n  return text.length > SUMMARY_LENGTH ? `${text.slice(0, SUMMARY_LENGTH - 1)}\u2026` : text;\n}\n\nconst SCOOP_SAID: Record<string, (name: string) => string> = {\n  [REASONS.noScoop]: (name) => `there is no scoop ${name} in this cone to review it.`,\n  [REASONS.scoopStopped]: (name) => `the scoop ${name} is stopped, so it can't review it.`,\n  [REASONS.scoopAsked]: (name) =>\n    `the scoop ${name} can't review a call that asks something of it.`,\n  [REASONS.scoopUndecided]: (name) => `the scoop ${name} ended its review without deciding.`,\n};\n\nfunction scoopReason(item: Approval): string | null {\n  const name = item.tier.slice('scoop:'.length);\n  if (item.decidedBy?.startsWith('scoop:'))\n    return `The scoop ${name} declined this tool call in a run a guest started${item.reason ? `: ${item.reason}` : '.'}`;\n  const said = SCOOP_SAID[item.reason ?? ''];\n  return said ? `A guest started this run, and ${said(name)}` : null;\n}\n\nexport function reasonOf(item: Approval): string {\n  const scooped = item.state === 'rejected' && scoopTier(item.tier) ? scoopReason(item) : null;\n  if (scooped) return scooped;\n  if (item.state === 'rejected' && item.decidedBy === 'judge')\n    return item.verdict\n      ? `${GATE_REASONS.judged}: ${item.verdict.reason}`\n      : `${GATE_REASONS.judged}.`;\n  if (item.state === 'rejected')\n    return item.reason && item.reason !== REASONS.unknownAnswer\n      ? `${GATE_REASONS.rejected} ${item.reason}`\n      : GATE_REASONS.rejected;\n  if (item.state === 'withdrawn') return GATE_REASONS.withdrawn;\n  if (item.reason === REASONS.unknownTier) return GATE_REASONS.unknown;\n  if (item.reason === REASONS.unroutable) return GATE_REASONS.unroutable;\n  return GATE_REASONS.unanswered;\n}\n\nexport async function taintsOf(\n  inputs: readonly SubmissionId[],\n  seats: Readonly<Record<string, SeatRecord>>,\n  harness: Pick<Harness, 'submission'>,\n  context: Context\n): Promise<Taint[]> {\n  const found = new Map<string, Taint>();\n  for (const id of inputs) {\n    const seat = Object.values(seats).find((record) =>\n      record.submissions?.some((entry) => entry.id === String(id))\n    );\n    const tier = seat?.submissions?.find((entry) => entry.id === String(id))?.tools;\n    if (seat) {\n      found.set(`${seat.id}\\n${tier}`, { seat, tier: String(tier) });\n      continue;\n    }\n    const submission = await harness.submission(id, context);\n    const record = submission ? await submission.status(context) : undefined;\n    if (record?.requestId?.startsWith(GUEST_REQUEST)) return [{ seat: null, tier: '' }];\n  }\n  return [...found.values()];\n}\n\nfunction settledEarly(\n  seat: SeatRecord,\n  tier: string,\n  policy: GuestPolicy,\n  at: number,\n  tool: string,\n  hash: string\n): string | null {\n  if (!policy.allowedToolGates.includes(gateKind(tier)))\n    return gateRefusal(\"a guest's tool calls\", policy.allowedToolGates);\n  if (!liveSeat(seat, at)) return GATE_REASONS.ended;\n  if (tier === 'off') return '';\n  const kept = seat.alwaysTools?.some((rule) => rule.tool === tool && rule.argumentsHash === hash);\n  return policy.always.tools && kept ? '' : null;\n}\n\nconst ended = (status: string) => status === 'terminal' || status === 'completing';\n\nexport function guestToolGate(harness: () => Held | undefined): GuestToolGate {\n  let resolveHost: (host: GateHost) => void = () => {};\n  const bound = new Promise<GateHost>((resolve) => {\n    resolveHost = resolve;\n  });\n  const watched = new Set<string>();\n  const watch = (host: GateHost, id: string, task: number) => {\n    const held = harness();\n    if (!held || watched.has(id)) return;\n    watched.add(id);\n    void held\n      .waitForTask(task as unknown as TaskId, BACKGROUND_CONTEXT)\n      .then((record) =>\n        ended(record.state.status)\n          ? host.approvals.withdraw(id, REASONS.aborted, BACKGROUND_CONTEXT)\n          : undefined\n      )\n      .catch(() => undefined)\n      .finally(() => watched.delete(id));\n  };\n  const remember = (seat: string, rule: AlwaysTool) =>\n    (harness() as Held).commit(async (tx) => {\n      const record = (await tx.doc(GuestsDoc)).seats[seat];\n      if (!record || record.revoked !== null) return;\n      const kept = (record.alwaysTools ?? []).filter(\n        (entry) => entry.tool !== rule.tool || entry.argumentsHash !== rule.argumentsHash\n      );\n      record.alwaysTools = [...kept, rule];\n    }, BACKGROUND_CONTEXT);\n  const review = async (\n    taint: Taint,\n    call: ToolHookCall,\n    api: HookApi,\n    context: Context\n  ): Promise<string | undefined> => {\n    const { seat } = taint;\n    if (seat === null || !isGate(taint.tier)) return GATE_REASONS.unknown;\n    const host = await awaitWithContext(bound, context);\n    const policy = host.policy();\n    const now = host.now ?? Date.now;\n    const hash = await argumentsHash(canonical(call.arguments));\n    const always = policy.always.tools;\n    const early = settledEarly(seat, taint.tier, policy, now(), call.name, hash);\n    if (early !== null) return early || undefined;\n    const id = await api.memo<string>(\n      `${GUEST_TOOL_MEMO}:${seat.id}:${taint.tier}`,\n      `apr-${crypto.randomUUID()}`,\n      context\n    );\n    const task = Number(api.taskId);\n    const shown = await scrubbedArguments(call.arguments);\n    const asked = await host.approvals.request(\n      {\n        id,\n        kind: 'guest-tool',\n        seat: seat.id,\n        agentId: seat.agentId,\n        requester: { kind: 'guest', name: seat.label, seat: seat.id },\n        tier: taint.tier,\n        detail: {\n          tool: call.name,\n          summary: summaryOf(shown),\n          arguments: canonical(shown),\n          task,\n        },\n      },\n      BACKGROUND_CONTEXT\n    );\n    watch(host, id, task);\n    const live = async () =>\n      liveSeat((await api.snapshot(GuestsDoc, context))?.seats[seat.id], now());\n    if (!(await live())) {\n      await host.approvals.withdraw(id, REASONS.revoked, BACKGROUND_CONTEXT);\n      return GATE_REASONS.ended;\n    }\n    const item = asked.state === 'pending' ? await host.approvals.settled(id, context) : asked;\n    if (item.state !== 'approved') return reasonOf(item);\n    if (!(await live())) return GATE_REASONS.ended;\n    if (item.answer === 'always' && always)\n      await remember(seat.id, {\n        approval: item.id,\n        tool: call.name,\n        argumentsHash: hash,\n        arguments: canonical(shown),\n        by: item.decidedBy,\n        at: item.decidedAt ?? now(),\n      });\n    return undefined;\n  };\n  return {\n    extension: defineExtension({\n      name: GUEST_GUARD,\n      hooks: [\n        hook(ToolTask, {\n          async beforeTool(call, api, context) {\n            const live = await api.snapshot(LiveDoc, api.conversationId, context);\n            const inputs = live?.run?.inputs ?? [];\n            if (!inputs.length) return undefined;\n            const seats = (await api.snapshot(GuestsDoc, context))?.seats ?? {};\n            const held = harness() as Held;\n            for (const taint of await taintsOf(inputs, seats, held, context)) {\n              const block = await review(taint, call, api, context);\n              if (block) return { block };\n            }\n            return undefined;\n          },\n        }),\n      ],\n    }),\n    bind(host) {\n      resolveHost(host);\n      for (const item of host.approvals.state.value ?? [])\n        if (item.kind === 'guest-tool' && item.state === 'pending' && item.detail.task)\n          watch(host, item.id, item.detail.task);\n    },\n  };\n}\n"],
-  "mappings": "AACA,SAAS,kBAAkB,0BAA0B;AACrD;AAAA,EACE;AAAA,EAIA;AAAA,EACA;AAAA,EAIA;AAAA,OACK;AAEP,SAAS,SAAS,iBAAiB;AACnC,SAAS,WAAW,kBAAkB;AACtC,SAA2B,UAAU,mBAAmB;AACxD,SAA0B,WAAW,QAAQ,gBAAiC;AAEvE,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,kBAAkB;AACxB,MAAM,iBAAiB;AAEvB,MAAM,eAAe;AAAA,EAC1B,SACE;AAAA,EACF,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,WAAW;AACb;AAiBO,SAAS,UAAU,OAAwB;AAChD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC;AACnE,MAAI,SAAS,OAAO,UAAU;AAC5B,WAAO,IAAI,OAAO,KAAK,KAAK,EACzB,KAAK,EACL,IAAI,CAAC,QAAQ,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,UAAW,MAAkC,GAAG,CAAC,CAAC,EAAE,EAC3F,KAAK,GAAG,CAAC;AACd,SAAO,KAAK,UAAU,SAAS,IAAI;AACrC;AAEA,SAAS,OAAO,OAAgB,OAAuB;AACrD,MAAI,OAAO,UAAU,SAAU,OAAM,KAAK,KAAK;AAAA,WACtC,SAAS,OAAO,UAAU;AACjC,eAAW,QAAQ,OAAO,OAAO,KAAK,EAAG,QAAO,MAAM,KAAK;AAC/D;AAEA,SAAS,SAAS,OAAgB,OAA0B;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,MAAM;AAClD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,SAAS,MAAM,KAAK,CAAC;AAC1E,MAAI,SAAS,OAAO,UAAU;AAC5B,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC;AAAA,IACzE;AACF,SAAO;AACT;AAEA,eAAsB,kBACpB,MACkC;AAClC,QAAM,QAAkB,CAAC;AACzB,SAAO,MAAM,KAAK;AAClB,SAAO,SAAS,MAAM,MAAM,WAAW,KAAK,CAAC;AAC/C;AAEA,eAAsB,cAAc,MAA+B;AACjE,QAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,EAAE,OAAO,IAAI,CAAC;AACnF,SAAO,CAAC,GAAG,IAAI,WAAW,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC9F;AAEA,eAAe,eAAe,MAA+B;AAC3D,MAAI;AACF,WAAO,UAAU,MAAM,kBAAkB,KAAK,MAAM,IAAI,CAAC,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,UAAU,IAAI;AAAA,EACvB;AACF;AAEA,eAAsB,YAAY,OAA4D;AAC5F,MAAI,MAAM,MAAM,CAAC,SAAS,KAAK,aAAa,EAAG,QAAO;AACtD,SAAO,QAAQ;AAAA,IACb,MAAM;AAAA,MAAI,OAAO,SACf,KAAK,gBACD,OACA;AAAA,QACE,GAAG;AAAA,QACH,eAAe,MAAM,cAAc,KAAK,SAAS;AAAA,QACjD,WAAW,MAAM,eAAe,KAAK,SAAS;AAAA,MAChD;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,UAAU,MAAuC;AAC/D,QAAM,SAAS,OAAO,OAAO,IAAI;AACjC,QAAM,OAAO,OAAO,WAAW,KAAK,OAAO,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,IAAI,UAAU,IAAI;AAC9F,SAAO,KAAK,SAAS,iBAAiB,GAAG,KAAK,MAAM,GAAG,iBAAiB,CAAC,CAAC,WAAM;AAClF;AAEA,MAAM,aAAuD;AAAA,EAC3D,CAAC,QAAQ,OAAO,GAAG,CAAC,SAAS,qBAAqB,IAAI;AAAA,EACtD,CAAC,QAAQ,YAAY,GAAG,CAAC,SAAS,aAAa,IAAI;AAAA,EACnD,CAAC,QAAQ,UAAU,GAAG,CAAC,SACrB,aAAa,IAAI;AAAA,EACnB,CAAC,QAAQ,cAAc,GAAG,CAAC,SAAS,aAAa,IAAI;AACvD;AAEA,SAAS,YAAY,MAA+B;AAClD,QAAM,OAAO,KAAK,KAAK,MAAM,SAAS,MAAM;AAC5C,MAAI,KAAK,WAAW,WAAW,QAAQ;AACrC,WAAO,aAAa,IAAI,oDAAoD,KAAK,SAAS,KAAK,KAAK,MAAM,KAAK,GAAG;AACpH,QAAM,OAAO,WAAW,KAAK,UAAU,EAAE;AACzC,SAAO,OAAO,iCAAiC,KAAK,IAAI,CAAC,KAAK;AAChE;AAEO,SAAS,SAAS,MAAwB;AAC/C,QAAM,UAAU,KAAK,UAAU,cAAc,UAAU,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI;AACxF,MAAI,QAAS,QAAO;AACpB,MAAI,KAAK,UAAU,cAAc,KAAK,cAAc;AAClD,WAAO,KAAK,UACR,GAAG,aAAa,MAAM,KAAK,KAAK,QAAQ,MAAM,KAC9C,GAAG,aAAa,MAAM;AAC5B,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK,UAAU,KAAK,WAAW,QAAQ,gBAC1C,GAAG,aAAa,QAAQ,IAAI,KAAK,MAAM,KACvC,aAAa;AACnB,MAAI,KAAK,UAAU,YAAa,QAAO,aAAa;AACpD,MAAI,KAAK,WAAW,QAAQ,YAAa,QAAO,aAAa;AAC7D,MAAI,KAAK,WAAW,QAAQ,WAAY,QAAO,aAAa;AAC5D,SAAO,aAAa;AACtB;AAEA,eAAsB,SACpB,QACA,OACA,SACA,SACkB;AAClB,QAAM,QAAQ,oBAAI,IAAmB;AACrC,aAAW,MAAM,QAAQ;AACvB,UAAM,OAAO,OAAO,OAAO,KAAK,EAAE;AAAA,MAAK,CAACA,YACtCA,QAAO,aAAa,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO,EAAE,CAAC;AAAA,IAC7D;AACA,UAAM,OAAO,MAAM,aAAa,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO,EAAE,CAAC,GAAG;AAC1E,QAAI,MAAM;AACR,YAAM,IAAI,GAAG,KAAK,EAAE;AAAA,EAAK,IAAI,IAAI,EAAE,MAAM,MAAM,OAAO,IAAI,EAAE,CAAC;AAC7D;AAAA,IACF;AACA,UAAM,aAAa,MAAM,QAAQ,WAAW,IAAI,OAAO;AACvD,UAAM,SAAS,aAAa,MAAM,WAAW,OAAO,OAAO,IAAI;AAC/D,QAAI,QAAQ,WAAW,WAAW,aAAa,EAAG,QAAO,CAAC,EAAE,MAAM,MAAM,MAAM,GAAG,CAAC;AAAA,EACpF;AACA,SAAO,CAAC,GAAG,MAAM,OAAO,CAAC;AAC3B;AAEA,SAAS,aACP,MACA,MACA,QACA,IACA,MACA,MACe;AACf,MAAI,CAAC,OAAO,iBAAiB,SAAS,SAAS,IAAI,CAAC;AAClD,WAAO,YAAY,wBAAwB,OAAO,gBAAgB;AACpE,MAAI,CAAC,SAAS,MAAM,EAAE,EAAG,QAAO,aAAa;AAC7C,MAAI,SAAS,MAAO,QAAO;AAC3B,QAAM,OAAO,KAAK,aAAa,KAAK,CAAC,SAAS,KAAK,SAAS,QAAQ,KAAK,kBAAkB,IAAI;AAC/F,SAAO,OAAO,OAAO,SAAS,OAAO,KAAK;AAC5C;AAEA,MAAM,QAAQ,CAAC,WAAmB,WAAW,cAAc,WAAW;AAE/D,SAAS,cAAc,SAAgD;AAC5E,MAAI,cAAwC,MAAM;AAAA,EAAC;AACnD,QAAM,QAAQ,IAAI,QAAkB,CAAC,YAAY;AAC/C,kBAAc;AAAA,EAChB,CAAC;AACD,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,QAAQ,CAAC,MAAgB,IAAY,SAAiB;AAC1D,UAAM,OAAO,QAAQ;AACrB,QAAI,CAAC,QAAQ,QAAQ,IAAI,EAAE,EAAG;AAC9B,YAAQ,IAAI,EAAE;AACd,SAAK,KACF,YAAY,MAA2B,kBAAkB,EACzD;AAAA,MAAK,CAAC,WACL,MAAM,OAAO,MAAM,MAAM,IACrB,KAAK,UAAU,SAAS,IAAI,QAAQ,SAAS,kBAAkB,IAC/D;AAAA,IACN,EACC,MAAM,MAAM,MAAS,EACrB,QAAQ,MAAM,QAAQ,OAAO,EAAE,CAAC;AAAA,EACrC;AACA,QAAM,WAAW,CAAC,MAAc,SAC7B,QAAQ,EAAW,OAAO,OAAO,OAAO;AACvC,UAAM,UAAU,MAAM,GAAG,IAAI,SAAS,GAAG,MAAM,IAAI;AACnD,QAAI,CAAC,UAAU,OAAO,YAAY,KAAM;AACxC,UAAM,QAAQ,OAAO,eAAe,CAAC,GAAG;AAAA,MACtC,CAAC,UAAU,MAAM,SAAS,KAAK,QAAQ,MAAM,kBAAkB,KAAK;AAAA,IACtE;AACA,WAAO,cAAc,CAAC,GAAG,MAAM,IAAI;AAAA,EACrC,GAAG,kBAAkB;AACvB,QAAM,SAAS,OACb,OACA,MACA,KACA,YACgC;AAChC,UAAM,EAAE,KAAK,IAAI;AACjB,QAAI,SAAS,QAAQ,CAAC,OAAO,MAAM,IAAI,EAAG,QAAO,aAAa;AAC9D,UAAM,OAAO,MAAM,iBAAiB,OAAO,OAAO;AAClD,UAAM,SAAS,KAAK,OAAO;AAC3B,UAAM,MAAM,KAAK,OAAO,KAAK;AAC7B,UAAM,OAAO,MAAM,cAAc,UAAU,KAAK,SAAS,CAAC;AAC1D,UAAM,SAAS,OAAO,OAAO;AAC7B,UAAM,QAAQ,aAAa,MAAM,MAAM,MAAM,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI;AAC3E,QAAI,UAAU,KAAM,QAAO,SAAS;AACpC,UAAM,KAAK,MAAM,IAAI;AAAA,MACnB,GAAG,eAAe,IAAI,KAAK,EAAE,IAAI,MAAM,IAAI;AAAA,MAC3C,OAAO,OAAO,WAAW,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,UAAM,QAAQ,MAAM,kBAAkB,KAAK,SAAS;AACpD,UAAM,QAAQ,MAAM,KAAK,UAAU;AAAA,MACjC;AAAA,QACE;AAAA,QACA,MAAM;AAAA,QACN,MAAM,KAAK;AAAA,QACX,SAAS,KAAK;AAAA,QACd,WAAW,EAAE,MAAM,SAAS,MAAM,KAAK,OAAO,MAAM,KAAK,GAAG;AAAA,QAC5D,MAAM,MAAM;AAAA,QACZ,QAAQ;AAAA,UACN,MAAM,KAAK;AAAA,UACX,SAAS,UAAU,KAAK;AAAA,UACxB,WAAW,UAAU,KAAK;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,MACA;AAAA,IACF;AACA,UAAM,MAAM,IAAI,IAAI;AACpB,UAAM,OAAO,YACX,UAAU,MAAM,IAAI,SAAS,WAAW,OAAO,IAAI,MAAM,KAAK,EAAE,GAAG,IAAI,CAAC;AAC1E,QAAI,CAAE,MAAM,KAAK,GAAI;AACnB,YAAM,KAAK,UAAU,SAAS,IAAI,QAAQ,SAAS,kBAAkB;AACrE,aAAO,aAAa;AAAA,IACtB;AACA,UAAM,OAAO,MAAM,UAAU,YAAY,MAAM,KAAK,UAAU,QAAQ,IAAI,OAAO,IAAI;AACrF,QAAI,KAAK,UAAU,WAAY,QAAO,SAAS,IAAI;AACnD,QAAI,CAAE,MAAM,KAAK,EAAI,QAAO,aAAa;AACzC,QAAI,KAAK,WAAW,YAAY;AAC9B,YAAM,SAAS,KAAK,IAAI;AAAA,QACtB,UAAU,KAAK;AAAA,QACf,MAAM,KAAK;AAAA,QACX,eAAe;AAAA,QACf,WAAW,UAAU,KAAK;AAAA,QAC1B,IAAI,KAAK;AAAA,QACT,IAAI,KAAK,aAAa,IAAI;AAAA,MAC5B,CAAC;AACH,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,gBAAgB;AAAA,MACzB,MAAM;AAAA,MACN,OAAO;AAAA,QACL,KAAK,UAAU;AAAA,UACb,MAAM,WAAW,MAAM,KAAK,SAAS;AACnC,kBAAM,OAAO,MAAM,IAAI,SAAS,SAAS,IAAI,gBAAgB,OAAO;AACpE,kBAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,gBAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,kBAAM,SAAS,MAAM,IAAI,SAAS,WAAW,OAAO,IAAI,SAAS,CAAC;AAClE,kBAAM,OAAO,QAAQ;AACrB,uBAAW,SAAS,MAAM,SAAS,QAAQ,OAAO,MAAM,OAAO,GAAG;AAChE,oBAAM,QAAQ,MAAM,OAAO,OAAO,MAAM,KAAK,OAAO;AACpD,kBAAI,MAAO,QAAO,EAAE,MAAM;AAAA,YAC5B;AACA,mBAAO;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,IACD,KAAK,MAAM;AACT,kBAAY,IAAI;AAChB,iBAAW,QAAQ,KAAK,UAAU,MAAM,SAAS,CAAC;AAChD,YAAI,KAAK,SAAS,gBAAgB,KAAK,UAAU,aAAa,KAAK,OAAO;AACxE,gBAAM,MAAM,KAAK,IAAI,KAAK,OAAO,IAAI;AAAA,IAC3C;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { awaitWithContext, BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport {\n  type ConversationId,\n  defineDoc,\n  defineExtension,\n  type Extension,\n  type Harness,\n  type HookApi,\n  hook,\n  LiveDoc,\n  type SubmissionId,\n  type TaskId,\n  type ToolHookCall,\n  ToolTask,\n} from '@earendil-works/pi-durable';\nimport type { Approval, Approvals } from '../approvals/index.ts';\nimport { REASONS, scoopTier } from '../approvals/record.ts';\nimport { scrubText, scrubTexts } from '../secrets/scrub.ts';\nimport { type GuestPolicy, gateKind, gateRefusal } from './policy.ts';\nimport { type AlwaysTool, GuestsDoc, isGate, liveSeat, type SeatRecord } from './seats.ts';\n\nexport const GUEST_GUARD = 'slicc-guest-guard';\nexport const GUEST_REQUEST = 'guest:';\nexport const GUEST_TOOL_MEMO = 'slicc.guest-tool';\nexport const SUMMARY_LENGTH = 2000;\n\nexport const GATE_REASONS = {\n  unknown:\n    'A guest started this run, and its seat names no review for tool calls that this agent knows.',\n  ended: \"A guest started this run, and that guest's seat has ended.\",\n  rejected: 'The owner declined this tool call in a run a guest started.',\n  judged: 'The automatic check declined this tool call in a run a guest started',\n  unanswered: 'Nobody approved this tool call in a run a guest started in time.',\n  unroutable: \"The cone can't review a tool call it is itself waiting on.\",\n  withdrawn: 'The review of this tool call was withdrawn.',\n} as const;\n\nexport interface GateHost {\n  approvals: Pick<Approvals, 'state' | 'request' | 'settled' | 'withdraw'>;\n  policy(): GuestPolicy;\n  now?: () => number;\n}\n\nexport interface GuestToolGate {\n  readonly extension: Extension;\n  bind(host: GateHost): void;\n}\n\ntype Held = Pick<Harness, 'submission' | 'commit' | 'waitForTask'>;\n\ntype Taint = { seat: SeatRecord | null; tier: string };\n\nexport function canonical(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(canonical).join(',')}]`;\n  if (value && typeof value === 'object')\n    return `{${Object.keys(value)\n      .sort()\n      .map((key) => `${JSON.stringify(key)}:${canonical((value as Record<string, unknown>)[key])}`)\n      .join(',')}}`;\n  return JSON.stringify(value ?? null);\n}\n\nfunction leaves(value: unknown, found: string[]): void {\n  if (typeof value === 'string') found.push(value);\n  else if (value && typeof value === 'object')\n    for (const item of Object.values(value)) leaves(item, found);\n}\n\nfunction replaced(value: unknown, texts: string[]): unknown {\n  if (typeof value === 'string') return texts.shift();\n  if (Array.isArray(value)) return value.map((item) => replaced(item, texts));\n  if (value && typeof value === 'object')\n    return Object.fromEntries(\n      Object.entries(value).map(([key, item]) => [key, replaced(item, texts)])\n    );\n  return value;\n}\n\nexport async function scrubbedArguments(\n  args: Record<string, unknown>\n): Promise<Record<string, unknown>> {\n  const found: string[] = [];\n  leaves(args, found);\n  return replaced(args, await scrubTexts(found)) as Record<string, unknown>;\n}\n\nexport async function argumentsHash(args: string): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(args));\n  return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, '0')).join('');\n}\n\nasync function shownArguments(text: string): Promise<string> {\n  try {\n    return canonical(await scrubbedArguments(JSON.parse(text)));\n  } catch {\n    return scrubText(text);\n  }\n}\n\nexport async function sealedRules(rules: readonly AlwaysTool[]): Promise<AlwaysTool[] | null> {\n  if (rules.every((rule) => rule.argumentsHash)) return null;\n  return Promise.all(\n    rules.map(async (rule) =>\n      rule.argumentsHash\n        ? rule\n        : {\n            ...rule,\n            argumentsHash: await argumentsHash(rule.arguments),\n            arguments: await shownArguments(rule.arguments),\n          }\n    )\n  );\n}\n\nexport function summaryOf(args: Record<string, unknown>): string {\n  const values = Object.values(args);\n  const text = values.length === 1 && typeof values[0] === 'string' ? values[0] : canonical(args);\n  return text.length > SUMMARY_LENGTH ? `${text.slice(0, SUMMARY_LENGTH - 1)}\u2026` : text;\n}\n\nconst SCOOP_SAID: Record<string, (name: string) => string> = {\n  [REASONS.noScoop]: (name) => `there is no scoop ${name} in this cone to review it.`,\n  [REASONS.scoopStopped]: (name) => `the scoop ${name} is stopped, so it can't review it.`,\n  [REASONS.scoopAsked]: (name) =>\n    `the scoop ${name} can't review a call that asks something of it.`,\n  [REASONS.scoopUndecided]: (name) => `the scoop ${name} ended its review without deciding.`,\n};\n\nfunction scoopReason(item: Approval): string | null {\n  const name = item.tier.slice('scoop:'.length);\n  if (item.decidedBy?.startsWith('scoop:'))\n    return `The scoop ${name} declined this tool call in a run a guest started${item.reason ? `: ${item.reason}` : '.'}`;\n  const said = SCOOP_SAID[item.reason ?? ''];\n  return said ? `A guest started this run, and ${said(name)}` : null;\n}\n\nexport function reasonOf(item: Approval): string {\n  const scooped = item.state === 'rejected' && scoopTier(item.tier) ? scoopReason(item) : null;\n  if (scooped) return scooped;\n  if (item.state === 'rejected' && item.decidedBy === 'judge')\n    return item.verdict\n      ? `${GATE_REASONS.judged}: ${item.verdict.reason}`\n      : `${GATE_REASONS.judged}.`;\n  if (item.state === 'rejected')\n    return item.reason && item.reason !== REASONS.unknownAnswer\n      ? `${GATE_REASONS.rejected} ${item.reason}`\n      : GATE_REASONS.rejected;\n  if (item.state === 'withdrawn') return GATE_REASONS.withdrawn;\n  if (item.reason === REASONS.unknownTier) return GATE_REASONS.unknown;\n  if (item.reason === REASONS.unroutable) return GATE_REASONS.unroutable;\n  return GATE_REASONS.unanswered;\n}\n\nexport type InheritedTaint = { seat: string | null; tier: string };\n\nexport const GuestTaintDoc = defineDoc<{ taints: InheritedTaint[] }>({\n  kind: 'slicc.guest-taint',\n  version: 1,\n  scope: 'conversation',\n  history: 'rewindable',\n  fork: 'asOf',\n  initial: () => ({ taints: [] }),\n});\n\ntype TaintReader = Pick<Harness, 'submission' | 'snapshot'>;\n\nexport async function runTaints(\n  harness: TaintReader,\n  conversationId: ConversationId,\n  context: Context\n): Promise<InheritedTaint[]> {\n  const live = await harness.snapshot(LiveDoc, conversationId, context);\n  const inputs = live?.run?.inputs ?? [];\n  const inherited = (await harness.snapshot(GuestTaintDoc, conversationId, context))?.taints ?? [];\n  const seats = (await harness.snapshot(GuestsDoc, context))?.seats ?? {};\n  const found = inputs.length ? await taintsOf(inputs, seats, harness, context) : [];\n  return [\n    ...found.map((taint) => ({ seat: taint.seat?.id ?? null, tier: taint.tier })),\n    ...inherited,\n  ];\n}\n\nfunction inheritedTaints(\n  inherited: readonly InheritedTaint[],\n  seats: Readonly<Record<string, SeatRecord>>\n): Taint[] {\n  return inherited.map((taint) => ({\n    seat: taint.seat === null ? null : (seats[taint.seat] ?? null),\n    tier: taint.tier,\n  }));\n}\n\nexport async function taintsOf(\n  inputs: readonly SubmissionId[],\n  seats: Readonly<Record<string, SeatRecord>>,\n  harness: Pick<Harness, 'submission'>,\n  context: Context\n): Promise<Taint[]> {\n  const found = new Map<string, Taint>();\n  for (const id of inputs) {\n    const seat = Object.values(seats).find((record) =>\n      record.submissions?.some((entry) => entry.id === String(id))\n    );\n    const tier = seat?.submissions?.find((entry) => entry.id === String(id))?.tools;\n    if (seat) {\n      found.set(`${seat.id}\\n${tier}`, { seat, tier: String(tier) });\n      continue;\n    }\n    const submission = await harness.submission(id, context);\n    const record = submission ? await submission.status(context) : undefined;\n    if (record?.requestId?.startsWith(GUEST_REQUEST)) return [{ seat: null, tier: '' }];\n  }\n  return [...found.values()];\n}\n\nfunction settledEarly(\n  seat: SeatRecord,\n  tier: string,\n  policy: GuestPolicy,\n  at: number,\n  tool: string,\n  hash: string\n): string | null {\n  if (!policy.allowedToolGates.includes(gateKind(tier)))\n    return gateRefusal(\"a guest's tool calls\", policy.allowedToolGates);\n  if (!liveSeat(seat, at)) return GATE_REASONS.ended;\n  if (tier === 'off') return '';\n  const kept = seat.alwaysTools?.some((rule) => rule.tool === tool && rule.argumentsHash === hash);\n  return policy.always.tools && kept ? '' : null;\n}\n\nconst ended = (status: string) => status === 'terminal' || status === 'completing';\n\nexport function guestToolGate(harness: () => Held | undefined): GuestToolGate {\n  let resolveHost: (host: GateHost) => void = () => {};\n  const bound = new Promise<GateHost>((resolve) => {\n    resolveHost = resolve;\n  });\n  const watched = new Set<string>();\n  const watch = (host: GateHost, id: string, task: number) => {\n    const held = harness();\n    if (!held || watched.has(id)) return;\n    watched.add(id);\n    void held\n      .waitForTask(task as unknown as TaskId, BACKGROUND_CONTEXT)\n      .then((record) =>\n        ended(record.state.status)\n          ? host.approvals.withdraw(id, REASONS.aborted, BACKGROUND_CONTEXT)\n          : undefined\n      )\n      .catch(() => undefined)\n      .finally(() => watched.delete(id));\n  };\n  const remember = (seat: string, rule: AlwaysTool) =>\n    (harness() as Held).commit(async (tx) => {\n      const record = (await tx.doc(GuestsDoc)).seats[seat];\n      if (!record || record.revoked !== null) return;\n      const kept = (record.alwaysTools ?? []).filter(\n        (entry) => entry.tool !== rule.tool || entry.argumentsHash !== rule.argumentsHash\n      );\n      record.alwaysTools = [...kept, rule];\n    }, BACKGROUND_CONTEXT);\n  const review = async (\n    taint: Taint,\n    call: ToolHookCall,\n    api: HookApi,\n    context: Context\n  ): Promise<string | undefined> => {\n    const { seat } = taint;\n    if (seat === null || !isGate(taint.tier)) return GATE_REASONS.unknown;\n    const host = await awaitWithContext(bound, context);\n    const policy = host.policy();\n    const now = host.now ?? Date.now;\n    const hash = await argumentsHash(canonical(call.arguments));\n    const always = policy.always.tools;\n    const early = settledEarly(seat, taint.tier, policy, now(), call.name, hash);\n    if (early !== null) return early || undefined;\n    const id = await api.memo<string>(\n      `${GUEST_TOOL_MEMO}:${seat.id}:${taint.tier}`,\n      `apr-${crypto.randomUUID()}`,\n      context\n    );\n    const task = Number(api.taskId);\n    const shown = await scrubbedArguments(call.arguments);\n    const asked = await host.approvals.request(\n      {\n        id,\n        kind: 'guest-tool',\n        seat: seat.id,\n        agentId: seat.agentId,\n        requester: { kind: 'guest', name: seat.label, seat: seat.id },\n        tier: taint.tier,\n        detail: {\n          tool: call.name,\n          summary: summaryOf(shown),\n          arguments: canonical(shown),\n          task,\n        },\n      },\n      BACKGROUND_CONTEXT\n    );\n    watch(host, id, task);\n    const live = async () =>\n      liveSeat((await api.snapshot(GuestsDoc, context))?.seats[seat.id], now());\n    if (!(await live())) {\n      await host.approvals.withdraw(id, REASONS.revoked, BACKGROUND_CONTEXT);\n      return GATE_REASONS.ended;\n    }\n    const item = asked.state === 'pending' ? await host.approvals.settled(id, context) : asked;\n    if (item.state !== 'approved') return reasonOf(item);\n    if (!(await live())) return GATE_REASONS.ended;\n    if (item.answer === 'always' && always)\n      await remember(seat.id, {\n        approval: item.id,\n        tool: call.name,\n        argumentsHash: hash,\n        arguments: canonical(shown),\n        by: item.decidedBy,\n        at: item.decidedAt ?? now(),\n      });\n    return undefined;\n  };\n  return {\n    extension: defineExtension({\n      name: GUEST_GUARD,\n      hooks: [\n        hook(ToolTask, {\n          async beforeTool(call, api, context) {\n            const live = await api.snapshot(LiveDoc, api.conversationId, context);\n            const inputs = live?.run?.inputs ?? [];\n            const inherited =\n              (await api.snapshot(GuestTaintDoc, api.conversationId, context))?.taints ?? [];\n            if (!inputs.length && !inherited.length) return undefined;\n            const seats = (await api.snapshot(GuestsDoc, context))?.seats ?? {};\n            const held = harness() as Held;\n            const found = inputs.length ? await taintsOf(inputs, seats, held, context) : [];\n            for (const taint of [...found, ...inheritedTaints(inherited, seats)]) {\n              const block = await review(taint, call, api, context);\n              if (block) return { block };\n            }\n            return undefined;\n          },\n        }),\n      ],\n    }),\n    bind(host) {\n      resolveHost(host);\n      for (const item of host.approvals.state.value ?? [])\n        if (item.kind === 'guest-tool' && item.state === 'pending' && item.detail.task)\n          watch(host, item.id, item.detail.task);\n    },\n  };\n}\n"],
+  "mappings": "AACA,SAAS,kBAAkB,0BAA0B;AACrD;AAAA,EAEE;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,EAIA;AAAA,OACK;AAEP,SAAS,SAAS,iBAAiB;AACnC,SAAS,WAAW,kBAAkB;AACtC,SAA2B,UAAU,mBAAmB;AACxD,SAA0B,WAAW,QAAQ,gBAAiC;AAEvE,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,kBAAkB;AACxB,MAAM,iBAAiB;AAEvB,MAAM,eAAe;AAAA,EAC1B,SACE;AAAA,EACF,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,WAAW;AACb;AAiBO,SAAS,UAAU,OAAwB;AAChD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC;AACnE,MAAI,SAAS,OAAO,UAAU;AAC5B,WAAO,IAAI,OAAO,KAAK,KAAK,EACzB,KAAK,EACL,IAAI,CAAC,QAAQ,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,UAAW,MAAkC,GAAG,CAAC,CAAC,EAAE,EAC3F,KAAK,GAAG,CAAC;AACd,SAAO,KAAK,UAAU,SAAS,IAAI;AACrC;AAEA,SAAS,OAAO,OAAgB,OAAuB;AACrD,MAAI,OAAO,UAAU,SAAU,OAAM,KAAK,KAAK;AAAA,WACtC,SAAS,OAAO,UAAU;AACjC,eAAW,QAAQ,OAAO,OAAO,KAAK,EAAG,QAAO,MAAM,KAAK;AAC/D;AAEA,SAAS,SAAS,OAAgB,OAA0B;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,MAAM;AAClD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,SAAS,MAAM,KAAK,CAAC;AAC1E,MAAI,SAAS,OAAO,UAAU;AAC5B,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC;AAAA,IACzE;AACF,SAAO;AACT;AAEA,eAAsB,kBACpB,MACkC;AAClC,QAAM,QAAkB,CAAC;AACzB,SAAO,MAAM,KAAK;AAClB,SAAO,SAAS,MAAM,MAAM,WAAW,KAAK,CAAC;AAC/C;AAEA,eAAsB,cAAc,MAA+B;AACjE,QAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,EAAE,OAAO,IAAI,CAAC;AACnF,SAAO,CAAC,GAAG,IAAI,WAAW,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC9F;AAEA,eAAe,eAAe,MAA+B;AAC3D,MAAI;AACF,WAAO,UAAU,MAAM,kBAAkB,KAAK,MAAM,IAAI,CAAC,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,UAAU,IAAI;AAAA,EACvB;AACF;AAEA,eAAsB,YAAY,OAA4D;AAC5F,MAAI,MAAM,MAAM,CAAC,SAAS,KAAK,aAAa,EAAG,QAAO;AACtD,SAAO,QAAQ;AAAA,IACb,MAAM;AAAA,MAAI,OAAO,SACf,KAAK,gBACD,OACA;AAAA,QACE,GAAG;AAAA,QACH,eAAe,MAAM,cAAc,KAAK,SAAS;AAAA,QACjD,WAAW,MAAM,eAAe,KAAK,SAAS;AAAA,MAChD;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,UAAU,MAAuC;AAC/D,QAAM,SAAS,OAAO,OAAO,IAAI;AACjC,QAAM,OAAO,OAAO,WAAW,KAAK,OAAO,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,IAAI,UAAU,IAAI;AAC9F,SAAO,KAAK,SAAS,iBAAiB,GAAG,KAAK,MAAM,GAAG,iBAAiB,CAAC,CAAC,WAAM;AAClF;AAEA,MAAM,aAAuD;AAAA,EAC3D,CAAC,QAAQ,OAAO,GAAG,CAAC,SAAS,qBAAqB,IAAI;AAAA,EACtD,CAAC,QAAQ,YAAY,GAAG,CAAC,SAAS,aAAa,IAAI;AAAA,EACnD,CAAC,QAAQ,UAAU,GAAG,CAAC,SACrB,aAAa,IAAI;AAAA,EACnB,CAAC,QAAQ,cAAc,GAAG,CAAC,SAAS,aAAa,IAAI;AACvD;AAEA,SAAS,YAAY,MAA+B;AAClD,QAAM,OAAO,KAAK,KAAK,MAAM,SAAS,MAAM;AAC5C,MAAI,KAAK,WAAW,WAAW,QAAQ;AACrC,WAAO,aAAa,IAAI,oDAAoD,KAAK,SAAS,KAAK,KAAK,MAAM,KAAK,GAAG;AACpH,QAAM,OAAO,WAAW,KAAK,UAAU,EAAE;AACzC,SAAO,OAAO,iCAAiC,KAAK,IAAI,CAAC,KAAK;AAChE;AAEO,SAAS,SAAS,MAAwB;AAC/C,QAAM,UAAU,KAAK,UAAU,cAAc,UAAU,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI;AACxF,MAAI,QAAS,QAAO;AACpB,MAAI,KAAK,UAAU,cAAc,KAAK,cAAc;AAClD,WAAO,KAAK,UACR,GAAG,aAAa,MAAM,KAAK,KAAK,QAAQ,MAAM,KAC9C,GAAG,aAAa,MAAM;AAC5B,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK,UAAU,KAAK,WAAW,QAAQ,gBAC1C,GAAG,aAAa,QAAQ,IAAI,KAAK,MAAM,KACvC,aAAa;AACnB,MAAI,KAAK,UAAU,YAAa,QAAO,aAAa;AACpD,MAAI,KAAK,WAAW,QAAQ,YAAa,QAAO,aAAa;AAC7D,MAAI,KAAK,WAAW,QAAQ,WAAY,QAAO,aAAa;AAC5D,SAAO,aAAa;AACtB;AAIO,MAAM,gBAAgB,UAAwC;AAAA,EACnE,MAAM;AAAA,EACN,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS,OAAO,EAAE,QAAQ,CAAC,EAAE;AAC/B,CAAC;AAID,eAAsB,UACpB,SACA,gBACA,SAC2B;AAC3B,QAAM,OAAO,MAAM,QAAQ,SAAS,SAAS,gBAAgB,OAAO;AACpE,QAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,QAAM,aAAa,MAAM,QAAQ,SAAS,eAAe,gBAAgB,OAAO,IAAI,UAAU,CAAC;AAC/F,QAAM,SAAS,MAAM,QAAQ,SAAS,WAAW,OAAO,IAAI,SAAS,CAAC;AACtE,QAAM,QAAQ,OAAO,SAAS,MAAM,SAAS,QAAQ,OAAO,SAAS,OAAO,IAAI,CAAC;AACjF,SAAO;AAAA,IACL,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE;AAAA,IAC5E,GAAG;AAAA,EACL;AACF;AAEA,SAAS,gBACP,WACA,OACS;AACT,SAAO,UAAU,IAAI,CAAC,WAAW;AAAA,IAC/B,MAAM,MAAM,SAAS,OAAO,OAAQ,MAAM,MAAM,IAAI,KAAK;AAAA,IACzD,MAAM,MAAM;AAAA,EACd,EAAE;AACJ;AAEA,eAAsB,SACpB,QACA,OACA,SACA,SACkB;AAClB,QAAM,QAAQ,oBAAI,IAAmB;AACrC,aAAW,MAAM,QAAQ;AACvB,UAAM,OAAO,OAAO,OAAO,KAAK,EAAE;AAAA,MAAK,CAACA,YACtCA,QAAO,aAAa,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO,EAAE,CAAC;AAAA,IAC7D;AACA,UAAM,OAAO,MAAM,aAAa,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO,EAAE,CAAC,GAAG;AAC1E,QAAI,MAAM;AACR,YAAM,IAAI,GAAG,KAAK,EAAE;AAAA,EAAK,IAAI,IAAI,EAAE,MAAM,MAAM,OAAO,IAAI,EAAE,CAAC;AAC7D;AAAA,IACF;AACA,UAAM,aAAa,MAAM,QAAQ,WAAW,IAAI,OAAO;AACvD,UAAM,SAAS,aAAa,MAAM,WAAW,OAAO,OAAO,IAAI;AAC/D,QAAI,QAAQ,WAAW,WAAW,aAAa,EAAG,QAAO,CAAC,EAAE,MAAM,MAAM,MAAM,GAAG,CAAC;AAAA,EACpF;AACA,SAAO,CAAC,GAAG,MAAM,OAAO,CAAC;AAC3B;AAEA,SAAS,aACP,MACA,MACA,QACA,IACA,MACA,MACe;AACf,MAAI,CAAC,OAAO,iBAAiB,SAAS,SAAS,IAAI,CAAC;AAClD,WAAO,YAAY,wBAAwB,OAAO,gBAAgB;AACpE,MAAI,CAAC,SAAS,MAAM,EAAE,EAAG,QAAO,aAAa;AAC7C,MAAI,SAAS,MAAO,QAAO;AAC3B,QAAM,OAAO,KAAK,aAAa,KAAK,CAAC,SAAS,KAAK,SAAS,QAAQ,KAAK,kBAAkB,IAAI;AAC/F,SAAO,OAAO,OAAO,SAAS,OAAO,KAAK;AAC5C;AAEA,MAAM,QAAQ,CAAC,WAAmB,WAAW,cAAc,WAAW;AAE/D,SAAS,cAAc,SAAgD;AAC5E,MAAI,cAAwC,MAAM;AAAA,EAAC;AACnD,QAAM,QAAQ,IAAI,QAAkB,CAAC,YAAY;AAC/C,kBAAc;AAAA,EAChB,CAAC;AACD,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,QAAQ,CAAC,MAAgB,IAAY,SAAiB;AAC1D,UAAM,OAAO,QAAQ;AACrB,QAAI,CAAC,QAAQ,QAAQ,IAAI,EAAE,EAAG;AAC9B,YAAQ,IAAI,EAAE;AACd,SAAK,KACF,YAAY,MAA2B,kBAAkB,EACzD;AAAA,MAAK,CAAC,WACL,MAAM,OAAO,MAAM,MAAM,IACrB,KAAK,UAAU,SAAS,IAAI,QAAQ,SAAS,kBAAkB,IAC/D;AAAA,IACN,EACC,MAAM,MAAM,MAAS,EACrB,QAAQ,MAAM,QAAQ,OAAO,EAAE,CAAC;AAAA,EACrC;AACA,QAAM,WAAW,CAAC,MAAc,SAC7B,QAAQ,EAAW,OAAO,OAAO,OAAO;AACvC,UAAM,UAAU,MAAM,GAAG,IAAI,SAAS,GAAG,MAAM,IAAI;AACnD,QAAI,CAAC,UAAU,OAAO,YAAY,KAAM;AACxC,UAAM,QAAQ,OAAO,eAAe,CAAC,GAAG;AAAA,MACtC,CAAC,UAAU,MAAM,SAAS,KAAK,QAAQ,MAAM,kBAAkB,KAAK;AAAA,IACtE;AACA,WAAO,cAAc,CAAC,GAAG,MAAM,IAAI;AAAA,EACrC,GAAG,kBAAkB;AACvB,QAAM,SAAS,OACb,OACA,MACA,KACA,YACgC;AAChC,UAAM,EAAE,KAAK,IAAI;AACjB,QAAI,SAAS,QAAQ,CAAC,OAAO,MAAM,IAAI,EAAG,QAAO,aAAa;AAC9D,UAAM,OAAO,MAAM,iBAAiB,OAAO,OAAO;AAClD,UAAM,SAAS,KAAK,OAAO;AAC3B,UAAM,MAAM,KAAK,OAAO,KAAK;AAC7B,UAAM,OAAO,MAAM,cAAc,UAAU,KAAK,SAAS,CAAC;AAC1D,UAAM,SAAS,OAAO,OAAO;AAC7B,UAAM,QAAQ,aAAa,MAAM,MAAM,MAAM,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI;AAC3E,QAAI,UAAU,KAAM,QAAO,SAAS;AACpC,UAAM,KAAK,MAAM,IAAI;AAAA,MACnB,GAAG,eAAe,IAAI,KAAK,EAAE,IAAI,MAAM,IAAI;AAAA,MAC3C,OAAO,OAAO,WAAW,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,UAAM,QAAQ,MAAM,kBAAkB,KAAK,SAAS;AACpD,UAAM,QAAQ,MAAM,KAAK,UAAU;AAAA,MACjC;AAAA,QACE;AAAA,QACA,MAAM;AAAA,QACN,MAAM,KAAK;AAAA,QACX,SAAS,KAAK;AAAA,QACd,WAAW,EAAE,MAAM,SAAS,MAAM,KAAK,OAAO,MAAM,KAAK,GAAG;AAAA,QAC5D,MAAM,MAAM;AAAA,QACZ,QAAQ;AAAA,UACN,MAAM,KAAK;AAAA,UACX,SAAS,UAAU,KAAK;AAAA,UACxB,WAAW,UAAU,KAAK;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,MACA;AAAA,IACF;AACA,UAAM,MAAM,IAAI,IAAI;AACpB,UAAM,OAAO,YACX,UAAU,MAAM,IAAI,SAAS,WAAW,OAAO,IAAI,MAAM,KAAK,EAAE,GAAG,IAAI,CAAC;AAC1E,QAAI,CAAE,MAAM,KAAK,GAAI;AACnB,YAAM,KAAK,UAAU,SAAS,IAAI,QAAQ,SAAS,kBAAkB;AACrE,aAAO,aAAa;AAAA,IACtB;AACA,UAAM,OAAO,MAAM,UAAU,YAAY,MAAM,KAAK,UAAU,QAAQ,IAAI,OAAO,IAAI;AACrF,QAAI,KAAK,UAAU,WAAY,QAAO,SAAS,IAAI;AACnD,QAAI,CAAE,MAAM,KAAK,EAAI,QAAO,aAAa;AACzC,QAAI,KAAK,WAAW,YAAY;AAC9B,YAAM,SAAS,KAAK,IAAI;AAAA,QACtB,UAAU,KAAK;AAAA,QACf,MAAM,KAAK;AAAA,QACX,eAAe;AAAA,QACf,WAAW,UAAU,KAAK;AAAA,QAC1B,IAAI,KAAK;AAAA,QACT,IAAI,KAAK,aAAa,IAAI;AAAA,MAC5B,CAAC;AACH,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,gBAAgB;AAAA,MACzB,MAAM;AAAA,MACN,OAAO;AAAA,QACL,KAAK,UAAU;AAAA,UACb,MAAM,WAAW,MAAM,KAAK,SAAS;AACnC,kBAAM,OAAO,MAAM,IAAI,SAAS,SAAS,IAAI,gBAAgB,OAAO;AACpE,kBAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,kBAAM,aACH,MAAM,IAAI,SAAS,eAAe,IAAI,gBAAgB,OAAO,IAAI,UAAU,CAAC;AAC/E,gBAAI,CAAC,OAAO,UAAU,CAAC,UAAU,OAAQ,QAAO;AAChD,kBAAM,SAAS,MAAM,IAAI,SAAS,WAAW,OAAO,IAAI,SAAS,CAAC;AAClE,kBAAM,OAAO,QAAQ;AACrB,kBAAM,QAAQ,OAAO,SAAS,MAAM,SAAS,QAAQ,OAAO,MAAM,OAAO,IAAI,CAAC;AAC9E,uBAAW,SAAS,CAAC,GAAG,OAAO,GAAG,gBAAgB,WAAW,KAAK,CAAC,GAAG;AACpE,oBAAM,QAAQ,MAAM,OAAO,OAAO,MAAM,KAAK,OAAO;AACpD,kBAAI,MAAO,QAAO,EAAE,MAAM;AAAA,YAC5B;AACA,mBAAO;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,IACD,KAAK,MAAM;AACT,kBAAY,IAAI;AAChB,iBAAW,QAAQ,KAAK,UAAU,MAAM,SAAS,CAAC;AAChD,YAAI,KAAK,SAAS,gBAAgB,KAAK,UAAU,aAAa,KAAK,OAAO;AACxE,gBAAM,MAAM,KAAK,IAAI,KAAK,OAAO,IAAI;AAAA,IAC3C;AAAA,EACF;AACF;",
   "names": ["record"]
 }

package/dist/scoops/cli.js

@@ -24,6 +24,7 @@ const USAGE = `usage:
   agent send parent <note>                                        from a scoop: a progress note to its cone
   agent wait <handle>... [--timeout <seconds>] [--notify]
   agent stop <handle>
+  agent workflow run|list|status|stop|save ...                    Claude Code workflows; agent workflow help
 
 options:
   --name <name>  --agent <role>  --model <provider/model>  --thinking <level> | --effort <low|medium|high|max>
@@ -442,6 +443,7 @@ const VERBS = {
   wait,
   stop,
   rename,
+  workflow: (deps, request, who, context) => deps.workflow ? deps.workflow(request.argv.slice(1), who, request, context) : Promise.resolve(fail("workflows are not available in this agent")),
   help,
   "--help": help,
   "-h": help,
@@ -489,6 +491,7 @@ async function dispatch(deps, request, who, context) {
 }
 const BLOCKING = /* @__PURE__ */ new Set([
   "wait",
+  "workflow",
   "list",
   "status",
   "help",