@ai-ecoverse/slicc-agent 6.18.3 → 6.18.4

package/README.md

@@ -154,7 +154,9 @@ The first provider is AWS Bedrock with a Bedrock API key as the bearer token; th
 
 **Blocked providers.** `needs: 'cors-free-transport'` is the static fact; `blocked: 'cors-free-transport'`, on both `ProviderOption` and the account, says the current transport can't reach that provider right now: the worker's kernel transport is unavailable, or it is the page's own fetch without a linked exit (`transportReach(client)` in `src/net.ts`, from the transport's traits). The worker follows `client.onTraits`, so a provider unblocks as soon as an extension or a linked slicc gives a CORS-free route, and blocks again when it goes, with no reload. A blocked provider is still offered and can be added; a connected one keeps its key and its row, but its models are left out of `models` and `labels`, so the picker offers none until the route is back.
 
-**Subscription sign-ins.** xAI, Kimi For Coding and ChatGPT (`openai-codex`, shown as ChatGPT) sign in with pi-ai's own device-code flows (`DEVICE_SIGN_INS` in `src/sign-ins.ts`); xAI and Kimi keep API-key entry too, so their accounts are `auth: 'oauth'` with `secret: 'api-key'` (spectrum's “Use an API key instead”) and a `keyUrl`. Spectrum's Sign in calls `connect(id, undefined, undefined, { method: 'sign-in' })` in the click, and a pasted key `put`s first and calls `connect(id, undefined, fields, { method: 'key' })` (spectrum's `ConnectOptions`); without the fourth argument an `oauth` account signs in. The adapter opens an `about:blank` popup (`slicc-sign-in`) before anything else in the click's task, then asks the worker's `signIn(id)`, which adds the account, runs the provider's `auth.oauth.login` and answers `{ url, code }` once the provider gives its device code (an `https:` page only). While it waits the account is `signing-in` with `signIn: { url, code? }`, kept in the page and never in the replicated settings state; the popup goes to `url`, and spectrum shows `code` with Copy and a link to `url` when the browser blocked the popup. The adapter's `connect` call then waits in the worker for the token (a sign-in no `connect` claims within a minute is dropped) and hands the vault `grant { provider, name, response, settings? }`, `name` being the account's `vaultName` and `response` the token response built from pi-ai's credential, as bytes zeroed after the call; the token is never stored, logged, licked or put in the state, and pi-ai's own error texts, which can quote a token response, never leave the worker. A refusal reads “The sign-in was refused.”, a timeout, network failure or malformed answer “The sign-in didn't finish. Try again.”, the vault's `EEXIST` “This name holds another provider's key.”, and Cancel aborts at once with an `AbortError`. Signing in again is a rotation that keeps the placeholder, and over a pasted key the vault keeps that key restorable. The vault refreshes the token through `egress`; after `invalid_grant` its record is `expired` and the account offers Sign in again. ChatGPT's API reads the account id from the access token's JWT, which a placeholder isn't: the grant carries `settings: { CHATGPT_ACCOUNT_ID }` (every sign-in), the credential's env gets it from the record, and the worker hands pi-ai a carrier key `slicc.<claims>.<placeholder>` that the worker's fetch turns back into `Bearer <placeholder>` before the vault fills it, so pi-ai sends `chatgpt-account-id` itself; its turns use SSE, not WebSockets. Kimi's auth host answers browsers but its API needs the CORS-free transport; xAI's API answers browsers but its device endpoints don't, so an xAI sign-in needs the CORS-free transport while its key doesn't; ChatGPT's auth host answers browsers and its API doesn't. The flows load lazily from pi-ai: xAI's and Kimi's modules import nothing from Node, and openai-codex's imports `node:http` for its browser callback, which the device flow never runs, so slicc-bios's `node:*` stubs let it load.
+**Held sign-in windows** (`src/spectrum/held.ts`, slicc-bios#772). A sign-in popup opens in the click on `about:blank#slicc-sign-in-<nonce>` (a random UUID), and the page asks seven's owner to hold it with `{ type: 'hold', marker: <nonce> }` on the `slicc-held` BroadcastChannel. The owner holds the target with that exact URL, so no CDP client can list or drive it, and answers `{ type, marker }`: `held` once it's held on every connected browser host, `none` when no host is connected (nothing can reach the popup), and `unheld` when a host is connected but the target wasn't found. The popup goes to the IdP or device page only on `held` or `none`. On `unheld` or after 6 s without an answer, the popup closes without navigating and the sign-in fails with “SLICC couldn't protect the sign-in window. Try again.”; on Cancel it never navigates either.
+
+**Subscription sign-ins.** xAI, Kimi For Coding and ChatGPT (`openai-codex`, shown as ChatGPT) sign in with pi-ai's own device-code flows (`DEVICE_SIGN_INS` in `src/sign-ins.ts`); xAI and Kimi keep API-key entry too, so their accounts are `auth: 'oauth'` with `secret: 'api-key'` (spectrum's “Use an API key instead”) and a `keyUrl`. Spectrum's Sign in calls `connect(id, undefined, undefined, { method: 'sign-in' })` in the click, and a pasted key `put`s first and calls `connect(id, undefined, fields, { method: 'key' })` (spectrum's `ConnectOptions`); without the fourth argument an `oauth` account signs in. The adapter opens a held popup (`slicc-sign-in`, see **Held sign-in windows**) before anything else in the click's task, then asks the worker's `signIn(id)`, which adds the account, runs the provider's `auth.oauth.login` and answers `{ url, code }` once the provider gives its device code (an `https:` page only). While it waits the account is `signing-in` with `signIn: { url, code? }`, kept in the page and never in the replicated settings state; the prompt appears and the popup goes to `url` only once the popup is held, and spectrum shows `code` with Copy and a link to `url` when the browser blocked the popup. The adapter's `connect` call then waits in the worker for the token (a sign-in no `connect` claims within a minute is dropped) and hands the vault `grant { provider, name, response, settings? }`, `name` being the account's `vaultName` and `response` the token response built from pi-ai's credential, as bytes zeroed after the call; the token is never stored, logged, licked or put in the state, and pi-ai's own error texts, which can quote a token response, never leave the worker. A refusal reads “The sign-in was refused.”, a timeout, network failure or malformed answer “The sign-in didn't finish. Try again.”, the vault's `EEXIST` “This name holds another provider's key.”, and Cancel aborts at once with an `AbortError`. Signing in again is a rotation that keeps the placeholder, and over a pasted key the vault keeps that key restorable. The vault refreshes the token through `egress`; after `invalid_grant` its record is `expired` and the account offers Sign in again. ChatGPT's API reads the account id from the access token's JWT, which a placeholder isn't: the grant carries `settings: { CHATGPT_ACCOUNT_ID }` (every sign-in), the credential's env gets it from the record, and the worker hands pi-ai a carrier key `slicc.<claims>.<placeholder>` that the worker's fetch turns back into `Bearer <placeholder>` before the vault fills it, so pi-ai sends `chatgpt-account-id` itself; its turns use SSE, not WebSockets. Kimi's auth host answers browsers but its API needs the CORS-free transport; xAI's API answers browsers but its device endpoints don't, so an xAI sign-in needs the CORS-free transport while its key doesn't; ChatGPT's auth host answers browsers and its API doesn't. The flows load lazily from pi-ai: xAI's and Kimi's modules import nothing from Node, and openai-codex's imports `node:http` for its browser callback, which the device flow never runs, so slicc-bios's `node:*` stubs let it load.
 
 **Adding providers.** The settings state's `providers` lists every provider seven can add (`ProviderOption`: `id`, `name`, `description`, `auth`, `keyUrl`, `needs`, `fields` and `vaultName`, sorted by name), and the spectrum adapter serves it as `providers()` with a `providers` event when it changes. `accounts` then lists only the added ones: Bedrock and Adobe start as added, `connect` adds a provider, and one with a vault record or stored fields counts as added too. The added list is `providers` in `/.slicc/accounts.json`. `vaultName` is the record name spectrum `put`s the key under: pi-ai's env name, or `<ID>_API_KEY` for providers that share one (Moonshot AI, OpenCode and the Qwen token plans), since a `put` under another provider's name would rebind that record; Bedrock's is `AWS_BEARER_TOKEN_BEDROCK` and Adobe's `ADOBE_IMS_TOKEN`. The agent finds a provider's record by its `provider`, never by name. Each provider has at most one secret, its key; `fields` are the non-secret inputs (`name`, `label`, `required`, `placeholder`, `help`, `customBase`, `vaultSetting`, `options` and `value`). `vaultSetting` names the vault record setting a field fills (slicc-vault's tenant-bound wildcards, V3), so the vault can bind a provider's wildcard endpoints to the user's own tenant: Cloudflare's `account` is `CLOUDFLARE_ACCOUNT_ID` and `gateway` `CLOUDFLARE_GATEWAY_ID`, and Azure's `endpoint` is `AZURE_OPENAI_RESOURCE_NAME` (spectrum applies it only to a bare resource name; an `https:` value stays a `customBase`). On an added account each field's `value` is its stored value, trimmed, so Settings can show it and knows a custom base URL to unregister after a reload; a field with a default carries that instead (Bedrock's `us-west-2`). Bedrock's `region` has `options`, the 21 regions where AWS supports Bedrock API keys (the bearer token seven uses; AWS's “Supported Regions … for Amazon Bedrock API keys”), labelled with AWS's names (`Europe (Frankfurt), eu-central-1`); a stored region outside the list comes first, under its own name, so a select never shows a region the account doesn't use. `disconnect(id)` keeps the row and its fields, so connecting again needs only the key, and `remove(id)` drops the row and its fields; for both, spectrum removes the vault record first. On an MCP row, `remove` disconnects it. `connect` with a secret is refused for every model account ("API keys are kept in seven's vault: update seven"); the only secret it still takes is an MCP sign-in's callback answer.
 
@@ -365,7 +367,7 @@ MCP servers reachable over Streamable HTTP become native agent tools. The client
 
 **Per agent.** Today every cone reads the one file in `/home` and gets every enabled server. A scoop doesn't read a file of its own: it inherits its cone's servers, and a role's `tools:` or `agent --tools` list narrows them. A list with no `mcp__` entry gets no MCP servers. A list with `mcp__docs__search` or `mcp__docs__*` keeps only those, and `codemode` is added so codemode tools stay reachable. The resource tools must be listed by name, and they reach only the servers the list names. A nested scoop without a list inherits its calling scoop's list. A `beforeTool` hook blocks the model's calls outside the list, and codemode scripts only get the tools on it. When kernel users give each cone its own home, each cone reads `~/.pi/agent/mcp.json` in that home, and scoops keep inheriting from their cone.
 
-**Secrets.** `${NAME}` placeholders resolve to the vault's placeholders for that server (`records()`: an `mcp` record with `server` equal to the `mcp.json` key and that name, else the server's only record when the headers use one name, else an unbound record of that name, which covers mcpcat's `${MCP_<NAME>_TOKEN}` bridge tokens). The headers go out holding placeholders, and the vault fills them in its `mcp` op, only for that server's registered URL. A server whose record is missing comes up as needing one, with a lick, and reconnects when the record appears. The worker never holds a value; server log lines are scrubbed through the vault before they reach `~/.pi/agent/mcp.log`. **OAuth.** A server without an `Authorization` header that answers 401 needs a sign-in, as in pi. Its row in Settings › MCP servers offers Connect, which opens a pop-up on the authorization server, found through the server's protected-resource metadata (RFC 9728) or `oauth.authServerMetadataUrl`. SLICC registers itself dynamically as a public client named `SLICC` (`oauth.clientName` changes it), or uses `oauth.clientId`, with PKCE S256 and the redirect URI `https://<origin>/oauth/mcp-callback`. slicc-bios serves that path from `dist/oauth/mcp-callback.html` in this package. The callback page hands the code back over the `slicc-mcp-oauth` BroadcastChannel and clears it from its address. Before the pop-up opens, the worker registers the server's `tokenUrl` (the discovered `token_endpoint`, else `<authServer>/token`) with the vault. It exchanges the code, checking `state` and `iss`, as a prepared `mcp` request to that `tokenUrl`, and hands the token response straight to the vault's `grant`; the raw response is dropped, and pi-mcp keeps only the reply, which holds placeholders, with the client and discovery state in `/.slicc/accounts.json` under the server's name and URL. When the server answers 401, the worker asks the vault to `refresh` once and sends again; pi-mcp's own refresh is off, because the refresh token is a placeholder. When that fails, the row shows the sign-in as expired. Disconnect deletes the local state; spectrum removes the vault records. Without a vault, the exchange is refused ("MCP sign-in needs seven's vault: update seven") before any token is issued. `oauth.scope` sets the scopes, else the server's advertised ones are used. `clientSecret`, `callbackPort`, `callbackUrl` and `clientRegistration` are refused, because SLICC signs in as a public client through its own page.
+**Secrets.** `${NAME}` placeholders resolve to the vault's placeholders for that server (`records()`: an `mcp` record with `server` equal to the `mcp.json` key and that name, else the server's only record when the headers use one name, else an unbound record of that name, which covers mcpcat's `${MCP_<NAME>_TOKEN}` bridge tokens). The headers go out holding placeholders, and the vault fills them in its `mcp` op, only for that server's registered URL. A server whose record is missing comes up as needing one, with a lick, and reconnects when the record appears. The worker never holds a value; server log lines are scrubbed through the vault before they reach `~/.pi/agent/mcp.log`. **OAuth.** A server without an `Authorization` header that answers 401 needs a sign-in, as in pi. Its row in Settings › MCP servers offers Connect, which opens a held pop-up (`slicc-mcp-oauth`, see **Held sign-in windows**) on the authorization server, found through the server's protected-resource metadata (RFC 9728) or `oauth.authServerMetadataUrl`. SLICC registers itself dynamically as a public client named `SLICC` (`oauth.clientName` changes it), or uses `oauth.clientId`, with PKCE S256 and the redirect URI `https://<origin>/oauth/mcp-callback`. slicc-bios serves that path from `dist/oauth/mcp-callback.html` in this package. The callback page hands the code back over the `slicc-mcp-oauth` BroadcastChannel and clears it from its address. Before the pop-up opens, the worker registers the server's `tokenUrl` (the discovered `token_endpoint`, else `<authServer>/token`) with the vault. It exchanges the code, checking `state` and `iss`, as a prepared `mcp` request to that `tokenUrl`, and hands the token response straight to the vault's `grant`; the raw response is dropped, and pi-mcp keeps only the reply, which holds placeholders, with the client and discovery state in `/.slicc/accounts.json` under the server's name and URL. When the server answers 401, the worker asks the vault to `refresh` once and sends again; pi-mcp's own refresh is off, because the refresh token is a placeholder. When that fails, the row shows the sign-in as expired. Disconnect deletes the local state; spectrum removes the vault records. Without a vault, the exchange is refused ("MCP sign-in needs seven's vault: update seven") before any token is issued. `oauth.scope` sets the scopes, else the server's advertised ones are used. `clientSecret`, `callbackPort`, `callbackUrl` and `clientRegistration` are refused, because SLICC signs in as a public client through its own page.
 
 **Settings › MCP servers** lists each server whose headers use a placeholder, under its own heading below Accounts, with the URL host. The page can ask for a server's URL, the `mcp.json` URL without user name, password, query or fragment, with `serverUrl('mcp:<server>')`, so it can register it with the vault (its `endpoints` op) before it connects a token it put there; from slicc-vault 1.13.0 a page-sealed token is filled only on a URL the page registered. The URL is never in the replicated settings state, since a path can carry a token and view-only principals read that state; `serverUrl` is a settings method, which view-only principals don't get, and it answers `null` for model accounts. The spectrum adapter fills each MCP account's `url` from it. Connect takes the token, which fills every placeholder of a server that uses one name; a server whose headers use several different names can't be filled from Settings yet. The server then reconnects. A server that answers 401 shows as **Rejected**, with Reconnect, and Disconnect deletes the token. Tool cards and remote summaries label MCP calls `server · tool`, unless the name is ambiguous (a server name that starts or ends with `_`, or a name with more than two `__` separators); then they show the raw name.
 

package/dist/spectrum/held.js

@@ -0,0 +1,54 @@
+const HELD_CHANNEL = "slicc-held";
+const HELD_MARK = "slicc-sign-in-";
+const HOLD_WAIT_MS = 6e3;
+const UNHELD = "SLICC couldn't protect the sign-in window. Try again.";
+const listen = (name) => new BroadcastChannel(name);
+function markerUrl(marker) {
+  return `about:blank#${HELD_MARK}${marker}`;
+}
+function askHold(marker, signal, options = {}) {
+  return new Promise((resolve) => {
+    const channel = (options.listen ?? listen)(HELD_CHANNEL);
+    const finish = (held) => {
+      clearTimeout(timer);
+      signal.removeEventListener("abort", stop);
+      channel.close();
+      resolve(held);
+    };
+    const stop = () => finish(false);
+    const timer = setTimeout(stop, options.wait ?? HOLD_WAIT_MS);
+    signal.addEventListener("abort", stop, { once: true });
+    channel.onmessage = ({ data }) => {
+      const answer = data;
+      if (answer?.marker !== marker) return;
+      if (answer.type === "held" || answer.type === "none") finish(true);
+      else if (answer.type === "unheld") finish(false);
+    };
+    if (signal.aborted) stop();
+    else channel.postMessage({ type: "hold", marker });
+  });
+}
+function refusal(held, refuse = () => {
+}) {
+  const refused = held.then((ok) => {
+    if (ok) return;
+    refuse();
+    throw new Error(UNHELD);
+  });
+  refused.catch(() => void 0);
+  return refused;
+}
+function unlessRefused(work, refused) {
+  return Promise.race([work, refused.then(() => work)]);
+}
+export {
+  HELD_CHANNEL,
+  HELD_MARK,
+  HOLD_WAIT_MS,
+  UNHELD,
+  askHold,
+  markerUrl,
+  refusal,
+  unlessRefused
+};
+//# sourceMappingURL=held.js.map

package/dist/spectrum/held.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/spectrum/held.ts"],
+  "sourcesContent": ["export const HELD_CHANNEL = 'slicc-held';\nexport const HELD_MARK = 'slicc-sign-in-';\nexport const HOLD_WAIT_MS = 6000;\nexport const UNHELD = \"SLICC couldn't protect the sign-in window. Try again.\";\n\nexport interface HeldChannel {\n  onmessage: ((event: { data: unknown }) => void) | null;\n  postMessage(data: unknown): void;\n  close(): void;\n}\n\nexport type Listen = (name: string) => HeldChannel;\n\nconst listen: Listen = (name) => new BroadcastChannel(name) as unknown as HeldChannel;\n\nexport function markerUrl(marker: string): string {\n  return `about:blank#${HELD_MARK}${marker}`;\n}\n\nexport function askHold(\n  marker: string,\n  signal: AbortSignal,\n  options: { listen?: Listen; wait?: number } = {}\n): Promise<boolean> {\n  return new Promise((resolve) => {\n    const channel = (options.listen ?? listen)(HELD_CHANNEL);\n    const finish = (held: boolean) => {\n      clearTimeout(timer);\n      signal.removeEventListener('abort', stop);\n      channel.close();\n      resolve(held);\n    };\n    const stop = () => finish(false);\n    const timer = setTimeout(stop, options.wait ?? HOLD_WAIT_MS);\n    signal.addEventListener('abort', stop, { once: true });\n    channel.onmessage = ({ data }) => {\n      const answer = data as { type?: unknown; marker?: unknown } | null;\n      if (answer?.marker !== marker) return;\n      if (answer.type === 'held' || answer.type === 'none') finish(true);\n      else if (answer.type === 'unheld') finish(false);\n    };\n    if (signal.aborted) stop();\n    else channel.postMessage({ type: 'hold', marker });\n  });\n}\n\nexport function refusal(held: Promise<boolean>, refuse: () => void = () => {}): Promise<void> {\n  const refused = held.then((ok) => {\n    if (ok) return;\n    refuse();\n    throw new Error(UNHELD);\n  });\n  refused.catch(() => undefined);\n  return refused;\n}\n\nexport function unlessRefused<T>(work: Promise<T>, refused: Promise<void>): Promise<T> {\n  return Promise.race([work, refused.then(() => work)]);\n}\n"],
+  "mappings": "AAAO,MAAM,eAAe;AACrB,MAAM,YAAY;AAClB,MAAM,eAAe;AACrB,MAAM,SAAS;AAUtB,MAAM,SAAiB,CAAC,SAAS,IAAI,iBAAiB,IAAI;AAEnD,SAAS,UAAU,QAAwB;AAChD,SAAO,eAAe,SAAS,GAAG,MAAM;AAC1C;AAEO,SAAS,QACd,QACA,QACA,UAA8C,CAAC,GAC7B;AAClB,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,WAAW,QAAQ,UAAU,QAAQ,YAAY;AACvD,UAAM,SAAS,CAAC,SAAkB;AAChC,mBAAa,KAAK;AAClB,aAAO,oBAAoB,SAAS,IAAI;AACxC,cAAQ,MAAM;AACd,cAAQ,IAAI;AAAA,IACd;AACA,UAAM,OAAO,MAAM,OAAO,KAAK;AAC/B,UAAM,QAAQ,WAAW,MAAM,QAAQ,QAAQ,YAAY;AAC3D,WAAO,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;AACrD,YAAQ,YAAY,CAAC,EAAE,KAAK,MAAM;AAChC,YAAM,SAAS;AACf,UAAI,QAAQ,WAAW,OAAQ;AAC/B,UAAI,OAAO,SAAS,UAAU,OAAO,SAAS,OAAQ,QAAO,IAAI;AAAA,eACxD,OAAO,SAAS,SAAU,QAAO,KAAK;AAAA,IACjD;AACA,QAAI,OAAO,QAAS,MAAK;AAAA,QACpB,SAAQ,YAAY,EAAE,MAAM,QAAQ,OAAO,CAAC;AAAA,EACnD,CAAC;AACH;AAEO,SAAS,QAAQ,MAAwB,SAAqB,MAAM;AAAC,GAAkB;AAC5F,QAAM,UAAU,KAAK,KAAK,CAAC,OAAO;AAChC,QAAI,GAAI;AACR,WAAO;AACP,UAAM,IAAI,MAAM,MAAM;AAAA,EACxB,CAAC;AACD,UAAQ,MAAM,MAAM,MAAS;AAC7B,SAAO;AACT;AAEO,SAAS,cAAiB,MAAkB,SAAoC;AACrF,SAAO,QAAQ,KAAK,CAAC,MAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,CAAC;AACtD;",
+  "names": []
+}

package/dist/spectrum/mcp-login.js

@@ -1,8 +1,10 @@
+import { askHold, markerUrl, refusal, unlessRefused } from "./held.js";
 const MCP_CHANNEL = "slicc-mcp-oauth";
 const MCP_NAME_KEY = "slicc-mcp-oauth:";
 const SIGN_IN_TIMEOUT_MS = 5 * 60 * 1e3;
 const browser = {
-  open: () => globalThis.open?.("about:blank", "slicc-mcp-oauth", "popup,width=520,height=720") ?? null,
+  open: (url) => globalThis.open?.(url, "slicc-mcp-oauth", "popup,width=520,height=720") ?? null,
+  hold: (marker, signal) => askHold(marker, signal),
   channel: () => new BroadcastChannel(MCP_CHANNEL),
   remember: (state, name) => {
     const key = `${MCP_NAME_KEY}${state}`;
@@ -49,16 +51,22 @@ function untilAborted(promise, signal) {
 }
 function mcpLogin(host = browser) {
   return async (providerId, signIn, options) => {
-    const popup = host.open();
+    const marker = crypto.randomUUID();
+    const popup = host.open(markerUrl(marker));
+    const refused = refusal(popup ? host.hold(marker, options.signal) : Promise.resolve(true));
     const channel = host.channel();
     let state;
     try {
-      const started = await untilAborted(signIn(), options.signal);
+      const started = await untilAborted(
+        unlessRefused(signIn(), refused),
+        options.signal
+      );
       if (!started?.url) throw new Error("This MCP server has no sign-in.");
       if (!safeAuthorizationUrl(started.url))
         throw new Error("The authorization server gave a sign-in address that isn't https.");
       if (!popup)
         throw new Error("The browser blocked the sign-in window. Allow pop-ups for SLICC.");
+      await untilAborted(refused, options.signal);
       state = started.state;
       host.remember?.(state, providerId.replace(/^mcp:/, ""));
       popup.location.href = started.url;

package/dist/spectrum/mcp-login.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/spectrum/mcp-login.ts"],
-  "sourcesContent": ["import type { McpSignIn, SignIn } from '../services.ts';\n\nexport const MCP_CHANNEL = 'slicc-mcp-oauth';\nexport const MCP_NAME_KEY = 'slicc-mcp-oauth:';\nexport const SIGN_IN_TIMEOUT_MS = 5 * 60 * 1000;\n\nexport interface Popup {\n  location: { href: string };\n  close(): void;\n}\n\nexport interface Channel {\n  onmessage: ((event: { data: unknown }) => void) | null;\n  close(): void;\n}\n\nexport interface McpLoginHost {\n  open(): Popup | null;\n  channel(): Channel;\n  remember?(state: string, name: string | null): void;\n  timeoutMs?: number;\n}\n\nconst browser: McpLoginHost = {\n  open: () =>\n    globalThis.open?.('about:blank', 'slicc-mcp-oauth', 'popup,width=520,height=720') ?? null,\n  channel: () => new BroadcastChannel(MCP_CHANNEL) as unknown as Channel,\n  remember: (state, name) => {\n    const key = `${MCP_NAME_KEY}${state}`;\n    if (name === null) globalThis.localStorage?.removeItem(key);\n    else globalThis.localStorage?.setItem(key, name);\n  },\n};\n\nconst LOOPBACK = new Set(['localhost', '127.0.0.1', '[::1]']);\n\nexport function safeAuthorizationUrl(value: string): boolean {\n  if (!URL.canParse(value)) return false;\n  const url = new URL(value);\n  return url.protocol === 'https:' || (url.protocol === 'http:' && LOOPBACK.has(url.hostname));\n}\n\nfunction answered(channel: Channel, state: string, signal: AbortSignal, timeoutMs: number) {\n  return new Promise<string>((resolve, reject) => {\n    const done = () => {\n      clearTimeout(timer);\n      signal.removeEventListener('abort', stop);\n    };\n    const stop = () => {\n      done();\n      reject(signal.reason);\n    };\n    const timer = setTimeout(() => {\n      done();\n      reject(new Error('The sign-in window gave no answer. Try again.'));\n    }, timeoutMs);\n    signal.addEventListener('abort', stop, { once: true });\n    channel.onmessage = ({ data }) => {\n      const answer = data as { state?: unknown } | null;\n      if (answer?.state !== state) return;\n      done();\n      resolve(JSON.stringify(answer));\n    };\n  });\n}\n\nexport function untilAborted<T>(promise: Promise<T>, signal: AbortSignal): Promise<T> {\n  signal.throwIfAborted();\n  return new Promise<T>((resolve, reject) => {\n    const stop = () => reject(signal.reason);\n    signal.addEventListener('abort', stop, { once: true });\n    promise.then(resolve, reject).finally(() => signal.removeEventListener('abort', stop));\n  });\n}\n\nexport function mcpLogin(host: McpLoginHost = browser) {\n  return async (\n    providerId: string,\n    signIn: () => Promise<SignIn | McpSignIn | null>,\n    options: { signal: AbortSignal }\n  ): Promise<string> => {\n    const popup = host.open();\n    const channel = host.channel();\n    let state: string | undefined;\n    try {\n      const started = (await untilAborted(signIn(), options.signal)) as McpSignIn | null;\n      if (!started?.url) throw new Error('This MCP server has no sign-in.');\n      if (!safeAuthorizationUrl(started.url))\n        throw new Error(\"The authorization server gave a sign-in address that isn't https.\");\n      if (!popup)\n        throw new Error('The browser blocked the sign-in window. Allow pop-ups for SLICC.');\n      state = started.state;\n      host.remember?.(state, providerId.replace(/^mcp:/, ''));\n      popup.location.href = started.url;\n      return await answered(channel, state, options.signal, host.timeoutMs ?? SIGN_IN_TIMEOUT_MS);\n    } finally {\n      if (state) host.remember?.(state, null);\n      channel.close();\n      popup?.close();\n    }\n  };\n}\n"],
-  "mappings": "AAEO,MAAM,cAAc;AACpB,MAAM,eAAe;AACrB,MAAM,qBAAqB,IAAI,KAAK;AAmB3C,MAAM,UAAwB;AAAA,EAC5B,MAAM,MACJ,WAAW,OAAO,eAAe,mBAAmB,4BAA4B,KAAK;AAAA,EACvF,SAAS,MAAM,IAAI,iBAAiB,WAAW;AAAA,EAC/C,UAAU,CAAC,OAAO,SAAS;AACzB,UAAM,MAAM,GAAG,YAAY,GAAG,KAAK;AACnC,QAAI,SAAS,KAAM,YAAW,cAAc,WAAW,GAAG;AAAA,QACrD,YAAW,cAAc,QAAQ,KAAK,IAAI;AAAA,EACjD;AACF;AAEA,MAAM,WAAW,oBAAI,IAAI,CAAC,aAAa,aAAa,OAAO,CAAC;AAErD,SAAS,qBAAqB,OAAwB;AAC3D,MAAI,CAAC,IAAI,SAAS,KAAK,EAAG,QAAO;AACjC,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,SAAO,IAAI,aAAa,YAAa,IAAI,aAAa,WAAW,SAAS,IAAI,IAAI,QAAQ;AAC5F;AAEA,SAAS,SAAS,SAAkB,OAAe,QAAqB,WAAmB;AACzF,SAAO,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC9C,UAAM,OAAO,MAAM;AACjB,mBAAa,KAAK;AAClB,aAAO,oBAAoB,SAAS,IAAI;AAAA,IAC1C;AACA,UAAM,OAAO,MAAM;AACjB,WAAK;AACL,aAAO,OAAO,MAAM;AAAA,IACtB;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,WAAK;AACL,aAAO,IAAI,MAAM,+CAA+C,CAAC;AAAA,IACnE,GAAG,SAAS;AACZ,WAAO,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;AACrD,YAAQ,YAAY,CAAC,EAAE,KAAK,MAAM;AAChC,YAAM,SAAS;AACf,UAAI,QAAQ,UAAU,MAAO;AAC7B,WAAK;AACL,cAAQ,KAAK,UAAU,MAAM,CAAC;AAAA,IAChC;AAAA,EACF,CAAC;AACH;AAEO,SAAS,aAAgB,SAAqB,QAAiC;AACpF,SAAO,eAAe;AACtB,SAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,UAAM,OAAO,MAAM,OAAO,OAAO,MAAM;AACvC,WAAO,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;AACrD,YAAQ,KAAK,SAAS,MAAM,EAAE,QAAQ,MAAM,OAAO,oBAAoB,SAAS,IAAI,CAAC;AAAA,EACvF,CAAC;AACH;AAEO,SAAS,SAAS,OAAqB,SAAS;AACrD,SAAO,OACL,YACA,QACA,YACoB;AACpB,UAAM,QAAQ,KAAK,KAAK;AACxB,UAAM,UAAU,KAAK,QAAQ;AAC7B,QAAI;AACJ,QAAI;AACF,YAAM,UAAW,MAAM,aAAa,OAAO,GAAG,QAAQ,MAAM;AAC5D,UAAI,CAAC,SAAS,IAAK,OAAM,IAAI,MAAM,iCAAiC;AACpE,UAAI,CAAC,qBAAqB,QAAQ,GAAG;AACnC,cAAM,IAAI,MAAM,mEAAmE;AACrF,UAAI,CAAC;AACH,cAAM,IAAI,MAAM,kEAAkE;AACpF,cAAQ,QAAQ;AAChB,WAAK,WAAW,OAAO,WAAW,QAAQ,SAAS,EAAE,CAAC;AACtD,YAAM,SAAS,OAAO,QAAQ;AAC9B,aAAO,MAAM,SAAS,SAAS,OAAO,QAAQ,QAAQ,KAAK,aAAa,kBAAkB;AAAA,IAC5F,UAAE;AACA,UAAI,MAAO,MAAK,WAAW,OAAO,IAAI;AACtC,cAAQ,MAAM;AACd,aAAO,MAAM;AAAA,IACf;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { McpSignIn, SignIn } from '../services.ts';\nimport { askHold, markerUrl, refusal, unlessRefused } from './held.ts';\n\nexport const MCP_CHANNEL = 'slicc-mcp-oauth';\nexport const MCP_NAME_KEY = 'slicc-mcp-oauth:';\nexport const SIGN_IN_TIMEOUT_MS = 5 * 60 * 1000;\n\nexport interface Popup {\n  location: { href: string };\n  close(): void;\n}\n\nexport interface Channel {\n  onmessage: ((event: { data: unknown }) => void) | null;\n  close(): void;\n}\n\nexport interface SignInWindow {\n  open(url: string): Popup | null;\n  hold(marker: string, signal: AbortSignal): Promise<boolean>;\n}\n\nexport interface McpLoginHost extends SignInWindow {\n  channel(): Channel;\n  remember?(state: string, name: string | null): void;\n  timeoutMs?: number;\n}\n\nconst browser: McpLoginHost = {\n  open: (url) => globalThis.open?.(url, 'slicc-mcp-oauth', 'popup,width=520,height=720') ?? null,\n  hold: (marker, signal) => askHold(marker, signal),\n  channel: () => new BroadcastChannel(MCP_CHANNEL) as unknown as Channel,\n  remember: (state, name) => {\n    const key = `${MCP_NAME_KEY}${state}`;\n    if (name === null) globalThis.localStorage?.removeItem(key);\n    else globalThis.localStorage?.setItem(key, name);\n  },\n};\n\nconst LOOPBACK = new Set(['localhost', '127.0.0.1', '[::1]']);\n\nexport function safeAuthorizationUrl(value: string): boolean {\n  if (!URL.canParse(value)) return false;\n  const url = new URL(value);\n  return url.protocol === 'https:' || (url.protocol === 'http:' && LOOPBACK.has(url.hostname));\n}\n\nfunction answered(channel: Channel, state: string, signal: AbortSignal, timeoutMs: number) {\n  return new Promise<string>((resolve, reject) => {\n    const done = () => {\n      clearTimeout(timer);\n      signal.removeEventListener('abort', stop);\n    };\n    const stop = () => {\n      done();\n      reject(signal.reason);\n    };\n    const timer = setTimeout(() => {\n      done();\n      reject(new Error('The sign-in window gave no answer. Try again.'));\n    }, timeoutMs);\n    signal.addEventListener('abort', stop, { once: true });\n    channel.onmessage = ({ data }) => {\n      const answer = data as { state?: unknown } | null;\n      if (answer?.state !== state) return;\n      done();\n      resolve(JSON.stringify(answer));\n    };\n  });\n}\n\nexport function untilAborted<T>(promise: Promise<T>, signal: AbortSignal): Promise<T> {\n  signal.throwIfAborted();\n  return new Promise<T>((resolve, reject) => {\n    const stop = () => reject(signal.reason);\n    signal.addEventListener('abort', stop, { once: true });\n    promise.then(resolve, reject).finally(() => signal.removeEventListener('abort', stop));\n  });\n}\n\nexport function mcpLogin(host: McpLoginHost = browser) {\n  return async (\n    providerId: string,\n    signIn: () => Promise<SignIn | McpSignIn | null>,\n    options: { signal: AbortSignal }\n  ): Promise<string> => {\n    const marker = crypto.randomUUID();\n    const popup = host.open(markerUrl(marker));\n    const refused = refusal(popup ? host.hold(marker, options.signal) : Promise.resolve(true));\n    const channel = host.channel();\n    let state: string | undefined;\n    try {\n      const started = (await untilAborted(\n        unlessRefused(signIn(), refused),\n        options.signal\n      )) as McpSignIn | null;\n      if (!started?.url) throw new Error('This MCP server has no sign-in.');\n      if (!safeAuthorizationUrl(started.url))\n        throw new Error(\"The authorization server gave a sign-in address that isn't https.\");\n      if (!popup)\n        throw new Error('The browser blocked the sign-in window. Allow pop-ups for SLICC.');\n      await untilAborted(refused, options.signal);\n      state = started.state;\n      host.remember?.(state, providerId.replace(/^mcp:/, ''));\n      popup.location.href = started.url;\n      return await answered(channel, state, options.signal, host.timeoutMs ?? SIGN_IN_TIMEOUT_MS);\n    } finally {\n      if (state) host.remember?.(state, null);\n      channel.close();\n      popup?.close();\n    }\n  };\n}\n"],
+  "mappings": "AACA,SAAS,SAAS,WAAW,SAAS,qBAAqB;AAEpD,MAAM,cAAc;AACpB,MAAM,eAAe;AACrB,MAAM,qBAAqB,IAAI,KAAK;AAuB3C,MAAM,UAAwB;AAAA,EAC5B,MAAM,CAAC,QAAQ,WAAW,OAAO,KAAK,mBAAmB,4BAA4B,KAAK;AAAA,EAC1F,MAAM,CAAC,QAAQ,WAAW,QAAQ,QAAQ,MAAM;AAAA,EAChD,SAAS,MAAM,IAAI,iBAAiB,WAAW;AAAA,EAC/C,UAAU,CAAC,OAAO,SAAS;AACzB,UAAM,MAAM,GAAG,YAAY,GAAG,KAAK;AACnC,QAAI,SAAS,KAAM,YAAW,cAAc,WAAW,GAAG;AAAA,QACrD,YAAW,cAAc,QAAQ,KAAK,IAAI;AAAA,EACjD;AACF;AAEA,MAAM,WAAW,oBAAI,IAAI,CAAC,aAAa,aAAa,OAAO,CAAC;AAErD,SAAS,qBAAqB,OAAwB;AAC3D,MAAI,CAAC,IAAI,SAAS,KAAK,EAAG,QAAO;AACjC,QAAM,MAAM,IAAI,IAAI,KAAK;AACzB,SAAO,IAAI,aAAa,YAAa,IAAI,aAAa,WAAW,SAAS,IAAI,IAAI,QAAQ;AAC5F;AAEA,SAAS,SAAS,SAAkB,OAAe,QAAqB,WAAmB;AACzF,SAAO,IAAI,QAAgB,CAAC,SAAS,WAAW;AAC9C,UAAM,OAAO,MAAM;AACjB,mBAAa,KAAK;AAClB,aAAO,oBAAoB,SAAS,IAAI;AAAA,IAC1C;AACA,UAAM,OAAO,MAAM;AACjB,WAAK;AACL,aAAO,OAAO,MAAM;AAAA,IACtB;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,WAAK;AACL,aAAO,IAAI,MAAM,+CAA+C,CAAC;AAAA,IACnE,GAAG,SAAS;AACZ,WAAO,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;AACrD,YAAQ,YAAY,CAAC,EAAE,KAAK,MAAM;AAChC,YAAM,SAAS;AACf,UAAI,QAAQ,UAAU,MAAO;AAC7B,WAAK;AACL,cAAQ,KAAK,UAAU,MAAM,CAAC;AAAA,IAChC;AAAA,EACF,CAAC;AACH;AAEO,SAAS,aAAgB,SAAqB,QAAiC;AACpF,SAAO,eAAe;AACtB,SAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,UAAM,OAAO,MAAM,OAAO,OAAO,MAAM;AACvC,WAAO,iBAAiB,SAAS,MAAM,EAAE,MAAM,KAAK,CAAC;AACrD,YAAQ,KAAK,SAAS,MAAM,EAAE,QAAQ,MAAM,OAAO,oBAAoB,SAAS,IAAI,CAAC;AAAA,EACvF,CAAC;AACH;AAEO,SAAS,SAAS,OAAqB,SAAS;AACrD,SAAO,OACL,YACA,QACA,YACoB;AACpB,UAAM,SAAS,OAAO,WAAW;AACjC,UAAM,QAAQ,KAAK,KAAK,UAAU,MAAM,CAAC;AACzC,UAAM,UAAU,QAAQ,QAAQ,KAAK,KAAK,QAAQ,QAAQ,MAAM,IAAI,QAAQ,QAAQ,IAAI,CAAC;AACzF,UAAM,UAAU,KAAK,QAAQ;AAC7B,QAAI;AACJ,QAAI;AACF,YAAM,UAAW,MAAM;AAAA,QACrB,cAAc,OAAO,GAAG,OAAO;AAAA,QAC/B,QAAQ;AAAA,MACV;AACA,UAAI,CAAC,SAAS,IAAK,OAAM,IAAI,MAAM,iCAAiC;AACpE,UAAI,CAAC,qBAAqB,QAAQ,GAAG;AACnC,cAAM,IAAI,MAAM,mEAAmE;AACrF,UAAI,CAAC;AACH,cAAM,IAAI,MAAM,kEAAkE;AACpF,YAAM,aAAa,SAAS,QAAQ,MAAM;AAC1C,cAAQ,QAAQ;AAChB,WAAK,WAAW,OAAO,WAAW,QAAQ,SAAS,EAAE,CAAC;AACtD,YAAM,SAAS,OAAO,QAAQ;AAC9B,aAAO,MAAM,SAAS,SAAS,OAAO,QAAQ,QAAQ,KAAK,aAAa,kBAAkB;AAAA,IAC5F,UAAE;AACA,UAAI,MAAO,MAAK,WAAW,OAAO,IAAI;AACtC,cAAQ,MAAM;AACd,aAAO,MAAM;AAAA,IACf;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/spectrum/settings-port.js

@@ -7,6 +7,7 @@ import {
 } from "../sign-ins.js";
 import { attempt } from "./attempt.js";
 import { Emitter } from "./emitter.js";
+import { askHold, markerUrl, refusal, unlessRefused } from "./held.js";
 import { mcpLogin, untilAborted } from "./mcp-login.js";
 const SETTINGS_KEY = "slicc-agent.settings";
 const defaults = {
@@ -19,7 +20,10 @@ const defaults = {
 };
 const SIGN_IN_NEEDS_VAULT = "Adobe sign-in needs seven's vault: update seven";
 const UNFINISHED = SIGN_IN_UNFINISHED;
-const openPopup = () => globalThis.open?.("about:blank", "slicc-sign-in", "popup,width=520,height=720") ?? null;
+const signInWindow = {
+  open: (url) => globalThis.open?.(url, "slicc-sign-in", "popup,width=520,height=720") ?? null,
+  hold: (marker, signal) => askHold(marker, signal)
+};
 function readable(error) {
   if (error instanceof DOMException && error.name === "AbortError") return error;
   const text = (error instanceof Error ? error.message : String(error ?? "")).trim();
@@ -35,14 +39,14 @@ class SettingsAdapter extends Emitter {
   #mcpLogin;
   #signing = /* @__PURE__ */ new Map();
   #prompts = /* @__PURE__ */ new Map();
-  #open;
+  #window;
   #local;
   #offered = "";
   #urls = /* @__PURE__ */ new Map();
-  constructor(settings, agent, storage, login = null, mcp = mcpLogin(), open = openPopup) {
+  constructor(settings, agent, storage, login = null, mcp = mcpLogin(), popups = signInWindow) {
     super();
     this.#mcpLogin = mcp;
-    this.#open = open;
+    this.#window = popups;
     this.#settings = settings;
     this.#agent = agent;
     this.#storage = storage;
@@ -188,16 +192,24 @@ class SettingsAdapter extends Emitter {
     this.emit("accounts", this.accounts());
   }
   async #device(id, given) {
-    const popup = this.#open();
+    const marker = crypto.randomUUID();
+    const popup = this.#window.open(markerUrl(marker));
     const controller = this.#begin(id);
     const { signal } = controller;
+    const unheld = new AbortController();
+    const refused = refusal(
+      popup ? this.#window.hold(marker, signal) : Promise.resolve(true),
+      () => unheld.abort(new DOMException("The sign-in window was not held.", "AbortError"))
+    );
     const context = withAbortSignal(signal, BACKGROUND_CONTEXT);
+    const discovery = withAbortSignal(AbortSignal.any([signal, unheld.signal]), BACKGROUND_CONTEXT);
     try {
       const started = await untilAborted(
-        this.#settings.signIn(id, context),
+        unlessRefused(this.#settings.signIn(id, discovery), refused),
         signal
       );
       if (!started || !httpsUrl(started.url)) throw new Error(UNFINISHED);
+      await untilAborted(refused, signal);
       const code = typeof started.code === "string" && started.code ? started.code : void 0;
       this.#prompts.set(id, { url: started.url, ...code ? { code } : {} });
       this.emit("accounts", this.accounts());

package/dist/spectrum/settings-port.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/spectrum/settings-port.ts"],
-  "sourcesContent": ["import type {\n  Account,\n  ModelOption,\n  Settings,\n  SettingsEvents,\n  SettingsPort,\n} from '@ai-ecoverse/slicc-spectrum/ui';\nimport { BACKGROUND_CONTEXT, withAbortSignal } from '@earendil-works/chord/context';\nimport { preferredModel } from '../preferred.ts';\nimport type { AgentSettings, ProviderOption, SettingsState, SignIn } from '../services.ts';\nimport {\n  type ConnectOptions,\n  DEVICE_SIGN_INS,\n  type DeviceSignIn,\n  httpsUrl,\n  SIGN_IN_UNFINISHED,\n} from '../sign-ins.ts';\nimport type { AgentAdapter } from './agent-port.ts';\nimport { attempt } from './attempt.ts';\nimport { Emitter } from './emitter.ts';\nimport { mcpLogin, type Popup, untilAborted } from './mcp-login.ts';\n\nexport const SETTINGS_KEY = 'slicc-agent.settings';\n\nconst defaults: Settings = {\n  color: 'system',\n  model: '',\n  thinking: 'off',\n  sendOnEnter: true,\n  showThinking: false,\n  diffStyle: 'unified',\n};\n\ntype Local = Omit<Settings, 'model' | 'thinking'>;\n\nexport type Sealed = { sealed: true };\n\nexport type Login = (\n  providerId: string,\n  signIn: () => Promise<SignIn | null>,\n  options: { signal: AbortSignal }\n) => Promise<string | Sealed>;\n\nexport const SIGN_IN_NEEDS_VAULT = \"Adobe sign-in needs seven's vault: update seven\";\nexport const UNFINISHED = SIGN_IN_UNFINISHED;\n\nexport type OpenPopup = () => Popup | null;\n\nconst openPopup: OpenPopup = () =>\n  globalThis.open?.('about:blank', 'slicc-sign-in', 'popup,width=520,height=720') ?? null;\n\nexport function readable(error: unknown): Error {\n  if (error instanceof DOMException && error.name === 'AbortError') return error;\n  const text = (error instanceof Error ? error.message : String(error ?? '')).trim();\n  if (!text) return new Error(UNFINISHED);\n  const lead = /^[a-z]+\\b(?![-.@/])/.test(text) ? text[0].toUpperCase() + text.slice(1) : text;\n  return new Error(/[.!?]$/.test(lead) ? lead : `${lead}.`);\n}\n\ntype Events = SettingsEvents & { providers: readonly ProviderOption[] };\n\nexport class SettingsAdapter extends Emitter<Events> implements SettingsPort {\n  readonly #settings: AgentSettings;\n  readonly #agent: AgentAdapter;\n  readonly #storage: Pick<Storage, 'getItem' | 'setItem'> | null;\n  readonly #login: Login | null;\n  readonly #mcpLogin: Login;\n  readonly #signing = new Map<string, AbortController>();\n  readonly #prompts = new Map<string, DeviceSignIn>();\n  readonly #open: OpenPopup;\n  #local: Local;\n  #offered = '';\n  readonly #urls = new Map<string, string>();\n\n  constructor(\n    settings: AgentSettings,\n    agent: AgentAdapter,\n    storage: Pick<Storage, 'getItem' | 'setItem'> | null,\n    login: Login | null = null,\n    mcp: Login = mcpLogin() as Login,\n    open: OpenPopup = openPopup\n  ) {\n    super();\n    this.#mcpLogin = mcp;\n    this.#open = open;\n    this.#settings = settings;\n    this.#agent = agent;\n    this.#storage = storage;\n    this.#login = login;\n    const saved = JSON.parse(storage?.getItem(SETTINGS_KEY) ?? '{}') as Partial<Local>;\n    const { model: _model, thinking: _thinking, ...local } = { ...defaults, ...saved };\n    this.#local = local;\n    this.#offered = JSON.stringify(this.providers());\n    this.#locate();\n    settings.state.subscribe(() => {\n      this.#locate();\n      this.emit('accounts', this.accounts());\n      this.emit('settings', this.get());\n      const offered = JSON.stringify(this.providers());\n      if (offered === this.#offered) return;\n      this.#offered = offered;\n      this.emit('providers', this.providers());\n    });\n    agent.on('agents', () => this.emit('settings', this.get()));\n  }\n\n  #locate(): void {\n    const servers = this.#state()\n      .accounts.filter(({ group }) => group === 'mcp')\n      .map(({ id }) => id);\n    for (const id of this.#urls.keys()) if (!servers.includes(id)) this.#urls.delete(id);\n    for (const id of servers) {\n      void this.#settings\n        .serverUrl?.(id, BACKGROUND_CONTEXT)\n        .then((url) => {\n          if ((url ?? undefined) === this.#urls.get(id)) return;\n          if (url) this.#urls.set(id, url);\n          else this.#urls.delete(id);\n          this.emit('accounts', this.accounts());\n        })\n        .catch(() => undefined);\n    }\n  }\n\n  #state(): SettingsState {\n    return this.#settings.state.value ?? { models: [], accounts: [] };\n  }\n\n  get(): Settings {\n    const cone = this.#agent.list()[0];\n    return { ...this.#local, model: cone?.model ?? '', thinking: cone?.thinking ?? 'off' };\n  }\n\n  update(patch: Partial<Settings>): void {\n    const { model, thinking, ...local } = patch;\n    const id = this.#agent.active();\n    if (model !== undefined) this.#agent.setModel(id, model);\n    if (thinking !== undefined) this.#agent.setThinking(id, thinking);\n    this.#local = { ...this.#local, ...local };\n    this.#storage?.setItem(SETTINGS_KEY, JSON.stringify(this.#local));\n    this.emit('settings', this.get());\n  }\n\n  models(): readonly ModelOption[] {\n    const choices = this.#state().models;\n    const groups = Map.groupBy(choices, ({ id }) => id.slice(0, id.indexOf('/')));\n    const chosen = new Set(\n      [...groups].map(\n        ([providerId, group]) =>\n          preferredModel(\n            providerId,\n            group.map((choice) => ({ id: choice.id.slice(providerId.length + 1), choice }))\n          )?.choice\n      )\n    );\n    return choices.map((choice) => {\n      const { id, label, provider, kind, reasoning, images } = choice;\n      return {\n        id,\n        label,\n        provider,\n        kind,\n        reasoning,\n        ...(images === undefined ? {} : { images }),\n        ...(chosen.has(choice) ? { default: true } : {}),\n      };\n    });\n  }\n\n  #offer(id: string) {\n    const option = this.providers().find((candidate) => candidate.id === id);\n    if (!option) return undefined;\n    return {\n      auth: option.auth === 'oauth' ? ('oauth' as const) : ('api-key' as const),\n      store: 'vault' as const,\n      group: 'providers' as const,\n    };\n  }\n\n  providers(): readonly ProviderOption[] {\n    return this.#state().providers ?? [];\n  }\n\n  async remove(id: string): Promise<void> {\n    this.cancel(id);\n    await this.#settings.remove(id, BACKGROUND_CONTEXT);\n  }\n\n  accounts(): readonly Account[] {\n    return this.#state().accounts.map(({ needs, ...account }) => {\n      const url = this.#urls.get(account.id);\n      const located = url ? { ...account, url } : account;\n      const prompt = this.#prompts.get(account.id);\n      const shown = this.#signing.has(account.id)\n        ? {\n            ...located,\n            status: 'signing-in' as const,\n            ...(prompt ? { signIn: { ...prompt } } : {}),\n          }\n        : located;\n      return needs ? { ...shown, needs } : shown;\n    });\n  }\n\n  async connect(\n    id: string,\n    secret?: string,\n    fields?: Record<string, string>,\n    options?: ConnectOptions\n  ): Promise<void> {\n    const account =\n      this.#state().accounts.find((candidate) => candidate.id === id) ?? this.#offer(id);\n    const mcp = account?.group === 'mcp';\n    const given = fields ? { ...fields } : null;\n    const keyed = options?.method === 'key';\n    if (account?.auth === 'oauth' && DEVICE_SIGN_INS.has(id) && secret === undefined && !keyed)\n      return this.#device(id, given);\n    const login = account?.auth !== 'oauth' || keyed ? null : mcp ? this.#mcpLogin : this.#login;\n    if (keyed) this.cancel(id);\n    if (secret !== undefined) {\n      await this.#settings.connect(id, secret, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    if (account?.auth === 'oauth' && !login && !keyed) throw new Error(`${id} needs a sign-in`);\n    if (!login) {\n      if (account?.store !== 'vault') throw new Error(`${id} needs an API key`);\n      await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    const answer = await this.#signIn(id, login);\n    if (typeof answer === 'string') {\n      if (!mcp) throw new Error(SIGN_IN_NEEDS_VAULT);\n      await this.#settings.connect(id, answer, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    if (answer?.sealed !== true) throw new Error(UNFINISHED);\n    await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);\n  }\n\n  #begin(id: string): AbortController {\n    const controller = new AbortController();\n    this.#signing\n      .get(id)\n      ?.abort(new DOMException('A newer sign-in replaced this one.', 'AbortError'));\n    this.#signing.set(id, controller);\n    this.#prompts.delete(id);\n    this.emit('accounts', this.accounts());\n    return controller;\n  }\n\n  #end(id: string, controller: AbortController): void {\n    if (this.#signing.get(id) === controller) {\n      this.#signing.delete(id);\n      this.#prompts.delete(id);\n    }\n    this.emit('accounts', this.accounts());\n  }\n\n  async #device(id: string, given: Record<string, string> | null): Promise<void> {\n    const popup = this.#open();\n    const controller = this.#begin(id);\n    const { signal } = controller;\n    const context = withAbortSignal(signal, BACKGROUND_CONTEXT);\n    try {\n      const started = (await untilAborted(\n        this.#settings.signIn(id, context),\n        signal\n      )) as DeviceSignIn | null;\n      if (!started || !httpsUrl(started.url)) throw new Error(UNFINISHED);\n      const code = typeof started.code === 'string' && started.code ? started.code : undefined;\n      this.#prompts.set(id, { url: started.url, ...(code ? { code } : {}) });\n      this.emit('accounts', this.accounts());\n      if (popup) popup.location.href = started.url;\n      await untilAborted(this.#settings.connect(id, null, given, context), signal);\n    } catch (error) {\n      signal.throwIfAborted();\n      throw readable(error);\n    } finally {\n      popup?.close();\n      this.#end(id, controller);\n    }\n  }\n\n  async #signIn(id: string, login: Login): Promise<string | Sealed> {\n    const controller = this.#begin(id);\n    try {\n      const key = await login(\n        id,\n        () => this.#settings.signIn(id, BACKGROUND_CONTEXT) as Promise<SignIn | null>,\n        {\n          signal: controller.signal,\n        }\n      ).catch((error: unknown) => {\n        controller.signal.throwIfAborted();\n        throw readable(error);\n      });\n      controller.signal.throwIfAborted();\n      return key;\n    } finally {\n      this.#end(id, controller);\n    }\n  }\n\n  cancel(id: string): void {\n    const controller = this.#signing.get(id);\n    if (!controller) return;\n    this.#signing.delete(id);\n    this.#prompts.delete(id);\n    controller.abort(new DOMException('The sign-in was cancelled.', 'AbortError'));\n    this.emit('accounts', this.accounts());\n  }\n\n  disconnect(id: string): void {\n    attempt(this.#settings.disconnect(id, BACKGROUND_CONTEXT), 'disconnect accounts', (text) =>\n      this.#agent.notify(text)\n    );\n  }\n}\n"],
-  "mappings": "AAOA,SAAS,oBAAoB,uBAAuB;AACpD,SAAS,sBAAsB;AAE/B;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,eAAe;AACxB,SAAS,eAAe;AACxB,SAAS,UAAsB,oBAAoB;AAE5C,MAAM,eAAe;AAE5B,MAAM,WAAqB;AAAA,EACzB,OAAO;AAAA,EACP,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AACb;AAYO,MAAM,sBAAsB;AAC5B,MAAM,aAAa;AAI1B,MAAM,YAAuB,MAC3B,WAAW,OAAO,eAAe,iBAAiB,4BAA4B,KAAK;AAE9E,SAAS,SAAS,OAAuB;AAC9C,MAAI,iBAAiB,gBAAgB,MAAM,SAAS,aAAc,QAAO;AACzE,QAAM,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,GAAG,KAAK;AACjF,MAAI,CAAC,KAAM,QAAO,IAAI,MAAM,UAAU;AACtC,QAAM,OAAO,sBAAsB,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC,IAAI;AACxF,SAAO,IAAI,MAAM,SAAS,KAAK,IAAI,IAAI,OAAO,GAAG,IAAI,GAAG;AAC1D;AAIO,MAAM,wBAAwB,QAAwC;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,oBAAI,IAA6B;AAAA,EAC5C,WAAW,oBAAI,IAA0B;AAAA,EACzC;AAAA,EACT;AAAA,EACA,WAAW;AAAA,EACF,QAAQ,oBAAI,IAAoB;AAAA,EAEzC,YACE,UACA,OACA,SACA,QAAsB,MACtB,MAAa,SAAS,GACtB,OAAkB,WAClB;AACA,UAAM;AACN,SAAK,YAAY;AACjB,SAAK,QAAQ;AACb,SAAK,YAAY;AACjB,SAAK,SAAS;AACd,SAAK,WAAW;AAChB,SAAK,SAAS;AACd,UAAM,QAAQ,KAAK,MAAM,SAAS,QAAQ,YAAY,KAAK,IAAI;AAC/D,UAAM,EAAE,OAAO,QAAQ,UAAU,WAAW,GAAG,MAAM,IAAI,EAAE,GAAG,UAAU,GAAG,MAAM;AACjF,SAAK,SAAS;AACd,SAAK,WAAW,KAAK,UAAU,KAAK,UAAU,CAAC;AAC/C,SAAK,QAAQ;AACb,aAAS,MAAM,UAAU,MAAM;AAC7B,WAAK,QAAQ;AACb,WAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,WAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAChC,YAAM,UAAU,KAAK,UAAU,KAAK,UAAU,CAAC;AAC/C,UAAI,YAAY,KAAK,SAAU;AAC/B,WAAK,WAAW;AAChB,WAAK,KAAK,aAAa,KAAK,UAAU,CAAC;AAAA,IACzC,CAAC;AACD,UAAM,GAAG,UAAU,MAAM,KAAK,KAAK,YAAY,KAAK,IAAI,CAAC,CAAC;AAAA,EAC5D;AAAA,EAEA,UAAgB;AACd,UAAM,UAAU,KAAK,OAAO,EACzB,SAAS,OAAO,CAAC,EAAE,MAAM,MAAM,UAAU,KAAK,EAC9C,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE;AACrB,eAAW,MAAM,KAAK,MAAM,KAAK,EAAG,KAAI,CAAC,QAAQ,SAAS,EAAE,EAAG,MAAK,MAAM,OAAO,EAAE;AACnF,eAAW,MAAM,SAAS;AACxB,WAAK,KAAK,UACP,YAAY,IAAI,kBAAkB,EAClC,KAAK,CAAC,QAAQ;AACb,aAAK,OAAO,YAAe,KAAK,MAAM,IAAI,EAAE,EAAG;AAC/C,YAAI,IAAK,MAAK,MAAM,IAAI,IAAI,GAAG;AAAA,YAC1B,MAAK,MAAM,OAAO,EAAE;AACzB,aAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,MACvC,CAAC,EACA,MAAM,MAAM,MAAS;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,SAAwB;AACtB,WAAO,KAAK,UAAU,MAAM,SAAS,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,EAClE;AAAA,EAEA,MAAgB;AACd,UAAM,OAAO,KAAK,OAAO,KAAK,EAAE,CAAC;AACjC,WAAO,EAAE,GAAG,KAAK,QAAQ,OAAO,MAAM,SAAS,IAAI,UAAU,MAAM,YAAY,MAAM;AAAA,EACvF;AAAA,EAEA,OAAO,OAAgC;AACrC,UAAM,EAAE,OAAO,UAAU,GAAG,MAAM,IAAI;AACtC,UAAM,KAAK,KAAK,OAAO,OAAO;AAC9B,QAAI,UAAU,OAAW,MAAK,OAAO,SAAS,IAAI,KAAK;AACvD,QAAI,aAAa,OAAW,MAAK,OAAO,YAAY,IAAI,QAAQ;AAChE,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,MAAM;AACzC,SAAK,UAAU,QAAQ,cAAc,KAAK,UAAU,KAAK,MAAM,CAAC;AAChE,SAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAAA,EAClC;AAAA,EAEA,SAAiC;AAC/B,UAAM,UAAU,KAAK,OAAO,EAAE;AAC9B,UAAM,SAAS,IAAI,QAAQ,SAAS,CAAC,EAAE,GAAG,MAAM,GAAG,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC;AAC5E,UAAM,SAAS,IAAI;AAAA,MACjB,CAAC,GAAG,MAAM,EAAE;AAAA,QACV,CAAC,CAAC,YAAY,KAAK,MACjB;AAAA,UACE;AAAA,UACA,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,OAAO,GAAG,MAAM,WAAW,SAAS,CAAC,GAAG,OAAO,EAAE;AAAA,QAChF,GAAG;AAAA,MACP;AAAA,IACF;AACA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,YAAM,EAAE,IAAI,OAAO,UAAU,MAAM,WAAW,OAAO,IAAI;AACzD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO;AAAA,QACzC,GAAI,OAAO,IAAI,MAAM,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MAChD;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,IAAY;AACjB,UAAM,SAAS,KAAK,UAAU,EAAE,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE;AACvE,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO;AAAA,MACL,MAAM,OAAO,SAAS,UAAW,UAAqB;AAAA,MACtD,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,YAAuC;AACrC,WAAO,KAAK,OAAO,EAAE,aAAa,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,OAAO,IAA2B;AACtC,SAAK,OAAO,EAAE;AACd,UAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AAAA,EACpD;AAAA,EAEA,WAA+B;AAC7B,WAAO,KAAK,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,MAAM;AAC3D,YAAM,MAAM,KAAK,MAAM,IAAI,QAAQ,EAAE;AACrC,YAAM,UAAU,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI;AAC5C,YAAM,SAAS,KAAK,SAAS,IAAI,QAAQ,EAAE;AAC3C,YAAM,QAAQ,KAAK,SAAS,IAAI,QAAQ,EAAE,IACtC;AAAA,QACE,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,GAAI,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,IAAI,CAAC;AAAA,MAC5C,IACA;AACJ,aAAO,QAAQ,EAAE,GAAG,OAAO,MAAM,IAAI;AAAA,IACvC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QACJ,IACA,QACA,QACA,SACe;AACf,UAAM,UACJ,KAAK,OAAO,EAAE,SAAS,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE,KAAK,KAAK,OAAO,EAAE;AACnF,UAAM,MAAM,SAAS,UAAU;AAC/B,UAAM,QAAQ,SAAS,EAAE,GAAG,OAAO,IAAI;AACvC,UAAM,QAAQ,SAAS,WAAW;AAClC,QAAI,SAAS,SAAS,WAAW,gBAAgB,IAAI,EAAE,KAAK,WAAW,UAAa,CAAC;AACnF,aAAO,KAAK,QAAQ,IAAI,KAAK;AAC/B,UAAM,QAAQ,SAAS,SAAS,WAAW,QAAQ,OAAO,MAAM,KAAK,YAAY,KAAK;AACtF,QAAI,MAAO,MAAK,OAAO,EAAE;AACzB,QAAI,WAAW,QAAW;AACxB,YAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,OAAO,kBAAkB;AAClE;AAAA,IACF;AACA,QAAI,SAAS,SAAS,WAAW,CAAC,SAAS,CAAC,MAAO,OAAM,IAAI,MAAM,GAAG,EAAE,kBAAkB;AAC1F,QAAI,CAAC,OAAO;AACV,UAAI,SAAS,UAAU,QAAS,OAAM,IAAI,MAAM,GAAG,EAAE,mBAAmB;AACxE,YAAM,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,kBAAkB;AAChE;AAAA,IACF;AACA,UAAM,SAAS,MAAM,KAAK,QAAQ,IAAI,KAAK;AAC3C,QAAI,OAAO,WAAW,UAAU;AAC9B,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,mBAAmB;AAC7C,YAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,OAAO,kBAAkB;AAClE;AAAA,IACF;AACA,QAAI,QAAQ,WAAW,KAAM,OAAM,IAAI,MAAM,UAAU;AACvD,UAAM,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,kBAAkB;AAAA,EAClE;AAAA,EAEA,OAAO,IAA6B;AAClC,UAAM,aAAa,IAAI,gBAAgB;AACvC,SAAK,SACF,IAAI,EAAE,GACL,MAAM,IAAI,aAAa,sCAAsC,YAAY,CAAC;AAC9E,SAAK,SAAS,IAAI,IAAI,UAAU;AAChC,SAAK,SAAS,OAAO,EAAE;AACvB,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,WAAO;AAAA,EACT;AAAA,EAEA,KAAK,IAAY,YAAmC;AAClD,QAAI,KAAK,SAAS,IAAI,EAAE,MAAM,YAAY;AACxC,WAAK,SAAS,OAAO,EAAE;AACvB,WAAK,SAAS,OAAO,EAAE;AAAA,IACzB;AACA,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,EACvC;AAAA,EAEA,MAAM,QAAQ,IAAY,OAAqD;AAC7E,UAAM,QAAQ,KAAK,MAAM;AACzB,UAAM,aAAa,KAAK,OAAO,EAAE;AACjC,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,UAAU,gBAAgB,QAAQ,kBAAkB;AAC1D,QAAI;AACF,YAAM,UAAW,MAAM;AAAA,QACrB,KAAK,UAAU,OAAO,IAAI,OAAO;AAAA,QACjC;AAAA,MACF;AACA,UAAI,CAAC,WAAW,CAAC,SAAS,QAAQ,GAAG,EAAG,OAAM,IAAI,MAAM,UAAU;AAClE,YAAM,OAAO,OAAO,QAAQ,SAAS,YAAY,QAAQ,OAAO,QAAQ,OAAO;AAC/E,WAAK,SAAS,IAAI,IAAI,EAAE,KAAK,QAAQ,KAAK,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,CAAC;AACrE,WAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,UAAI,MAAO,OAAM,SAAS,OAAO,QAAQ;AACzC,YAAM,aAAa,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,OAAO,GAAG,MAAM;AAAA,IAC7E,SAAS,OAAO;AACd,aAAO,eAAe;AACtB,YAAM,SAAS,KAAK;AAAA,IACtB,UAAE;AACA,aAAO,MAAM;AACb,WAAK,KAAK,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,IAAY,OAAwC;AAChE,UAAM,aAAa,KAAK,OAAO,EAAE;AACjC,QAAI;AACF,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA,MAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AAAA,QAClD;AAAA,UACE,QAAQ,WAAW;AAAA,QACrB;AAAA,MACF,EAAE,MAAM,CAAC,UAAmB;AAC1B,mBAAW,OAAO,eAAe;AACjC,cAAM,SAAS,KAAK;AAAA,MACtB,CAAC;AACD,iBAAW,OAAO,eAAe;AACjC,aAAO;AAAA,IACT,UAAE;AACA,WAAK,KAAK,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,OAAO,IAAkB;AACvB,UAAM,aAAa,KAAK,SAAS,IAAI,EAAE;AACvC,QAAI,CAAC,WAAY;AACjB,SAAK,SAAS,OAAO,EAAE;AACvB,SAAK,SAAS,OAAO,EAAE;AACvB,eAAW,MAAM,IAAI,aAAa,8BAA8B,YAAY,CAAC;AAC7E,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,EACvC;AAAA,EAEA,WAAW,IAAkB;AAC3B;AAAA,MAAQ,KAAK,UAAU,WAAW,IAAI,kBAAkB;AAAA,MAAG;AAAA,MAAuB,CAAC,SACjF,KAAK,OAAO,OAAO,IAAI;AAAA,IACzB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type {\n  Account,\n  ModelOption,\n  Settings,\n  SettingsEvents,\n  SettingsPort,\n} from '@ai-ecoverse/slicc-spectrum/ui';\nimport { BACKGROUND_CONTEXT, withAbortSignal } from '@earendil-works/chord/context';\nimport { preferredModel } from '../preferred.ts';\nimport type { AgentSettings, ProviderOption, SettingsState, SignIn } from '../services.ts';\nimport {\n  type ConnectOptions,\n  DEVICE_SIGN_INS,\n  type DeviceSignIn,\n  httpsUrl,\n  SIGN_IN_UNFINISHED,\n} from '../sign-ins.ts';\nimport type { AgentAdapter } from './agent-port.ts';\nimport { attempt } from './attempt.ts';\nimport { Emitter } from './emitter.ts';\nimport { askHold, markerUrl, refusal, unlessRefused } from './held.ts';\nimport { mcpLogin, type SignInWindow, untilAborted } from './mcp-login.ts';\n\nexport const SETTINGS_KEY = 'slicc-agent.settings';\n\nconst defaults: Settings = {\n  color: 'system',\n  model: '',\n  thinking: 'off',\n  sendOnEnter: true,\n  showThinking: false,\n  diffStyle: 'unified',\n};\n\ntype Local = Omit<Settings, 'model' | 'thinking'>;\n\nexport type Sealed = { sealed: true };\n\nexport type Login = (\n  providerId: string,\n  signIn: () => Promise<SignIn | null>,\n  options: { signal: AbortSignal }\n) => Promise<string | Sealed>;\n\nexport const SIGN_IN_NEEDS_VAULT = \"Adobe sign-in needs seven's vault: update seven\";\nexport const UNFINISHED = SIGN_IN_UNFINISHED;\n\nconst signInWindow: SignInWindow = {\n  open: (url) => globalThis.open?.(url, 'slicc-sign-in', 'popup,width=520,height=720') ?? null,\n  hold: (marker, signal) => askHold(marker, signal),\n};\n\nexport function readable(error: unknown): Error {\n  if (error instanceof DOMException && error.name === 'AbortError') return error;\n  const text = (error instanceof Error ? error.message : String(error ?? '')).trim();\n  if (!text) return new Error(UNFINISHED);\n  const lead = /^[a-z]+\\b(?![-.@/])/.test(text) ? text[0].toUpperCase() + text.slice(1) : text;\n  return new Error(/[.!?]$/.test(lead) ? lead : `${lead}.`);\n}\n\ntype Events = SettingsEvents & { providers: readonly ProviderOption[] };\n\nexport class SettingsAdapter extends Emitter<Events> implements SettingsPort {\n  readonly #settings: AgentSettings;\n  readonly #agent: AgentAdapter;\n  readonly #storage: Pick<Storage, 'getItem' | 'setItem'> | null;\n  readonly #login: Login | null;\n  readonly #mcpLogin: Login;\n  readonly #signing = new Map<string, AbortController>();\n  readonly #prompts = new Map<string, DeviceSignIn>();\n  readonly #window: SignInWindow;\n  #local: Local;\n  #offered = '';\n  readonly #urls = new Map<string, string>();\n\n  constructor(\n    settings: AgentSettings,\n    agent: AgentAdapter,\n    storage: Pick<Storage, 'getItem' | 'setItem'> | null,\n    login: Login | null = null,\n    mcp: Login = mcpLogin() as Login,\n    popups: SignInWindow = signInWindow\n  ) {\n    super();\n    this.#mcpLogin = mcp;\n    this.#window = popups;\n    this.#settings = settings;\n    this.#agent = agent;\n    this.#storage = storage;\n    this.#login = login;\n    const saved = JSON.parse(storage?.getItem(SETTINGS_KEY) ?? '{}') as Partial<Local>;\n    const { model: _model, thinking: _thinking, ...local } = { ...defaults, ...saved };\n    this.#local = local;\n    this.#offered = JSON.stringify(this.providers());\n    this.#locate();\n    settings.state.subscribe(() => {\n      this.#locate();\n      this.emit('accounts', this.accounts());\n      this.emit('settings', this.get());\n      const offered = JSON.stringify(this.providers());\n      if (offered === this.#offered) return;\n      this.#offered = offered;\n      this.emit('providers', this.providers());\n    });\n    agent.on('agents', () => this.emit('settings', this.get()));\n  }\n\n  #locate(): void {\n    const servers = this.#state()\n      .accounts.filter(({ group }) => group === 'mcp')\n      .map(({ id }) => id);\n    for (const id of this.#urls.keys()) if (!servers.includes(id)) this.#urls.delete(id);\n    for (const id of servers) {\n      void this.#settings\n        .serverUrl?.(id, BACKGROUND_CONTEXT)\n        .then((url) => {\n          if ((url ?? undefined) === this.#urls.get(id)) return;\n          if (url) this.#urls.set(id, url);\n          else this.#urls.delete(id);\n          this.emit('accounts', this.accounts());\n        })\n        .catch(() => undefined);\n    }\n  }\n\n  #state(): SettingsState {\n    return this.#settings.state.value ?? { models: [], accounts: [] };\n  }\n\n  get(): Settings {\n    const cone = this.#agent.list()[0];\n    return { ...this.#local, model: cone?.model ?? '', thinking: cone?.thinking ?? 'off' };\n  }\n\n  update(patch: Partial<Settings>): void {\n    const { model, thinking, ...local } = patch;\n    const id = this.#agent.active();\n    if (model !== undefined) this.#agent.setModel(id, model);\n    if (thinking !== undefined) this.#agent.setThinking(id, thinking);\n    this.#local = { ...this.#local, ...local };\n    this.#storage?.setItem(SETTINGS_KEY, JSON.stringify(this.#local));\n    this.emit('settings', this.get());\n  }\n\n  models(): readonly ModelOption[] {\n    const choices = this.#state().models;\n    const groups = Map.groupBy(choices, ({ id }) => id.slice(0, id.indexOf('/')));\n    const chosen = new Set(\n      [...groups].map(\n        ([providerId, group]) =>\n          preferredModel(\n            providerId,\n            group.map((choice) => ({ id: choice.id.slice(providerId.length + 1), choice }))\n          )?.choice\n      )\n    );\n    return choices.map((choice) => {\n      const { id, label, provider, kind, reasoning, images } = choice;\n      return {\n        id,\n        label,\n        provider,\n        kind,\n        reasoning,\n        ...(images === undefined ? {} : { images }),\n        ...(chosen.has(choice) ? { default: true } : {}),\n      };\n    });\n  }\n\n  #offer(id: string) {\n    const option = this.providers().find((candidate) => candidate.id === id);\n    if (!option) return undefined;\n    return {\n      auth: option.auth === 'oauth' ? ('oauth' as const) : ('api-key' as const),\n      store: 'vault' as const,\n      group: 'providers' as const,\n    };\n  }\n\n  providers(): readonly ProviderOption[] {\n    return this.#state().providers ?? [];\n  }\n\n  async remove(id: string): Promise<void> {\n    this.cancel(id);\n    await this.#settings.remove(id, BACKGROUND_CONTEXT);\n  }\n\n  accounts(): readonly Account[] {\n    return this.#state().accounts.map(({ needs, ...account }) => {\n      const url = this.#urls.get(account.id);\n      const located = url ? { ...account, url } : account;\n      const prompt = this.#prompts.get(account.id);\n      const shown = this.#signing.has(account.id)\n        ? {\n            ...located,\n            status: 'signing-in' as const,\n            ...(prompt ? { signIn: { ...prompt } } : {}),\n          }\n        : located;\n      return needs ? { ...shown, needs } : shown;\n    });\n  }\n\n  async connect(\n    id: string,\n    secret?: string,\n    fields?: Record<string, string>,\n    options?: ConnectOptions\n  ): Promise<void> {\n    const account =\n      this.#state().accounts.find((candidate) => candidate.id === id) ?? this.#offer(id);\n    const mcp = account?.group === 'mcp';\n    const given = fields ? { ...fields } : null;\n    const keyed = options?.method === 'key';\n    if (account?.auth === 'oauth' && DEVICE_SIGN_INS.has(id) && secret === undefined && !keyed)\n      return this.#device(id, given);\n    const login = account?.auth !== 'oauth' || keyed ? null : mcp ? this.#mcpLogin : this.#login;\n    if (keyed) this.cancel(id);\n    if (secret !== undefined) {\n      await this.#settings.connect(id, secret, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    if (account?.auth === 'oauth' && !login && !keyed) throw new Error(`${id} needs a sign-in`);\n    if (!login) {\n      if (account?.store !== 'vault') throw new Error(`${id} needs an API key`);\n      await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    const answer = await this.#signIn(id, login);\n    if (typeof answer === 'string') {\n      if (!mcp) throw new Error(SIGN_IN_NEEDS_VAULT);\n      await this.#settings.connect(id, answer, given, BACKGROUND_CONTEXT);\n      return;\n    }\n    if (answer?.sealed !== true) throw new Error(UNFINISHED);\n    await this.#settings.connect(id, null, given, BACKGROUND_CONTEXT);\n  }\n\n  #begin(id: string): AbortController {\n    const controller = new AbortController();\n    this.#signing\n      .get(id)\n      ?.abort(new DOMException('A newer sign-in replaced this one.', 'AbortError'));\n    this.#signing.set(id, controller);\n    this.#prompts.delete(id);\n    this.emit('accounts', this.accounts());\n    return controller;\n  }\n\n  #end(id: string, controller: AbortController): void {\n    if (this.#signing.get(id) === controller) {\n      this.#signing.delete(id);\n      this.#prompts.delete(id);\n    }\n    this.emit('accounts', this.accounts());\n  }\n\n  async #device(id: string, given: Record<string, string> | null): Promise<void> {\n    const marker = crypto.randomUUID();\n    const popup = this.#window.open(markerUrl(marker));\n    const controller = this.#begin(id);\n    const { signal } = controller;\n    const unheld = new AbortController();\n    const refused = refusal(popup ? this.#window.hold(marker, signal) : Promise.resolve(true), () =>\n      unheld.abort(new DOMException('The sign-in window was not held.', 'AbortError'))\n    );\n    const context = withAbortSignal(signal, BACKGROUND_CONTEXT);\n    const discovery = withAbortSignal(AbortSignal.any([signal, unheld.signal]), BACKGROUND_CONTEXT);\n    try {\n      const started = (await untilAborted(\n        unlessRefused(this.#settings.signIn(id, discovery), refused),\n        signal\n      )) as DeviceSignIn | null;\n      if (!started || !httpsUrl(started.url)) throw new Error(UNFINISHED);\n      await untilAborted(refused, signal);\n      const code = typeof started.code === 'string' && started.code ? started.code : undefined;\n      this.#prompts.set(id, { url: started.url, ...(code ? { code } : {}) });\n      this.emit('accounts', this.accounts());\n      if (popup) popup.location.href = started.url;\n      await untilAborted(this.#settings.connect(id, null, given, context), signal);\n    } catch (error) {\n      signal.throwIfAborted();\n      throw readable(error);\n    } finally {\n      popup?.close();\n      this.#end(id, controller);\n    }\n  }\n\n  async #signIn(id: string, login: Login): Promise<string | Sealed> {\n    const controller = this.#begin(id);\n    try {\n      const key = await login(\n        id,\n        () => this.#settings.signIn(id, BACKGROUND_CONTEXT) as Promise<SignIn | null>,\n        {\n          signal: controller.signal,\n        }\n      ).catch((error: unknown) => {\n        controller.signal.throwIfAborted();\n        throw readable(error);\n      });\n      controller.signal.throwIfAborted();\n      return key;\n    } finally {\n      this.#end(id, controller);\n    }\n  }\n\n  cancel(id: string): void {\n    const controller = this.#signing.get(id);\n    if (!controller) return;\n    this.#signing.delete(id);\n    this.#prompts.delete(id);\n    controller.abort(new DOMException('The sign-in was cancelled.', 'AbortError'));\n    this.emit('accounts', this.accounts());\n  }\n\n  disconnect(id: string): void {\n    attempt(this.#settings.disconnect(id, BACKGROUND_CONTEXT), 'disconnect accounts', (text) =>\n      this.#agent.notify(text)\n    );\n  }\n}\n"],
+  "mappings": "AAOA,SAAS,oBAAoB,uBAAuB;AACpD,SAAS,sBAAsB;AAE/B;AAAA,EAEE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,eAAe;AACxB,SAAS,eAAe;AACxB,SAAS,SAAS,WAAW,SAAS,qBAAqB;AAC3D,SAAS,UAA6B,oBAAoB;AAEnD,MAAM,eAAe;AAE5B,MAAM,WAAqB;AAAA,EACzB,OAAO;AAAA,EACP,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AACb;AAYO,MAAM,sBAAsB;AAC5B,MAAM,aAAa;AAE1B,MAAM,eAA6B;AAAA,EACjC,MAAM,CAAC,QAAQ,WAAW,OAAO,KAAK,iBAAiB,4BAA4B,KAAK;AAAA,EACxF,MAAM,CAAC,QAAQ,WAAW,QAAQ,QAAQ,MAAM;AAClD;AAEO,SAAS,SAAS,OAAuB;AAC9C,MAAI,iBAAiB,gBAAgB,MAAM,SAAS,aAAc,QAAO;AACzE,QAAM,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,SAAS,EAAE,GAAG,KAAK;AACjF,MAAI,CAAC,KAAM,QAAO,IAAI,MAAM,UAAU;AACtC,QAAM,OAAO,sBAAsB,KAAK,IAAI,IAAI,KAAK,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC,IAAI;AACxF,SAAO,IAAI,MAAM,SAAS,KAAK,IAAI,IAAI,OAAO,GAAG,IAAI,GAAG;AAC1D;AAIO,MAAM,wBAAwB,QAAwC;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,WAAW,oBAAI,IAA6B;AAAA,EAC5C,WAAW,oBAAI,IAA0B;AAAA,EACzC;AAAA,EACT;AAAA,EACA,WAAW;AAAA,EACF,QAAQ,oBAAI,IAAoB;AAAA,EAEzC,YACE,UACA,OACA,SACA,QAAsB,MACtB,MAAa,SAAS,GACtB,SAAuB,cACvB;AACA,UAAM;AACN,SAAK,YAAY;AACjB,SAAK,UAAU;AACf,SAAK,YAAY;AACjB,SAAK,SAAS;AACd,SAAK,WAAW;AAChB,SAAK,SAAS;AACd,UAAM,QAAQ,KAAK,MAAM,SAAS,QAAQ,YAAY,KAAK,IAAI;AAC/D,UAAM,EAAE,OAAO,QAAQ,UAAU,WAAW,GAAG,MAAM,IAAI,EAAE,GAAG,UAAU,GAAG,MAAM;AACjF,SAAK,SAAS;AACd,SAAK,WAAW,KAAK,UAAU,KAAK,UAAU,CAAC;AAC/C,SAAK,QAAQ;AACb,aAAS,MAAM,UAAU,MAAM;AAC7B,WAAK,QAAQ;AACb,WAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,WAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAChC,YAAM,UAAU,KAAK,UAAU,KAAK,UAAU,CAAC;AAC/C,UAAI,YAAY,KAAK,SAAU;AAC/B,WAAK,WAAW;AAChB,WAAK,KAAK,aAAa,KAAK,UAAU,CAAC;AAAA,IACzC,CAAC;AACD,UAAM,GAAG,UAAU,MAAM,KAAK,KAAK,YAAY,KAAK,IAAI,CAAC,CAAC;AAAA,EAC5D;AAAA,EAEA,UAAgB;AACd,UAAM,UAAU,KAAK,OAAO,EACzB,SAAS,OAAO,CAAC,EAAE,MAAM,MAAM,UAAU,KAAK,EAC9C,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE;AACrB,eAAW,MAAM,KAAK,MAAM,KAAK,EAAG,KAAI,CAAC,QAAQ,SAAS,EAAE,EAAG,MAAK,MAAM,OAAO,EAAE;AACnF,eAAW,MAAM,SAAS;AACxB,WAAK,KAAK,UACP,YAAY,IAAI,kBAAkB,EAClC,KAAK,CAAC,QAAQ;AACb,aAAK,OAAO,YAAe,KAAK,MAAM,IAAI,EAAE,EAAG;AAC/C,YAAI,IAAK,MAAK,MAAM,IAAI,IAAI,GAAG;AAAA,YAC1B,MAAK,MAAM,OAAO,EAAE;AACzB,aAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,MACvC,CAAC,EACA,MAAM,MAAM,MAAS;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,SAAwB;AACtB,WAAO,KAAK,UAAU,MAAM,SAAS,EAAE,QAAQ,CAAC,GAAG,UAAU,CAAC,EAAE;AAAA,EAClE;AAAA,EAEA,MAAgB;AACd,UAAM,OAAO,KAAK,OAAO,KAAK,EAAE,CAAC;AACjC,WAAO,EAAE,GAAG,KAAK,QAAQ,OAAO,MAAM,SAAS,IAAI,UAAU,MAAM,YAAY,MAAM;AAAA,EACvF;AAAA,EAEA,OAAO,OAAgC;AACrC,UAAM,EAAE,OAAO,UAAU,GAAG,MAAM,IAAI;AACtC,UAAM,KAAK,KAAK,OAAO,OAAO;AAC9B,QAAI,UAAU,OAAW,MAAK,OAAO,SAAS,IAAI,KAAK;AACvD,QAAI,aAAa,OAAW,MAAK,OAAO,YAAY,IAAI,QAAQ;AAChE,SAAK,SAAS,EAAE,GAAG,KAAK,QAAQ,GAAG,MAAM;AACzC,SAAK,UAAU,QAAQ,cAAc,KAAK,UAAU,KAAK,MAAM,CAAC;AAChE,SAAK,KAAK,YAAY,KAAK,IAAI,CAAC;AAAA,EAClC;AAAA,EAEA,SAAiC;AAC/B,UAAM,UAAU,KAAK,OAAO,EAAE;AAC9B,UAAM,SAAS,IAAI,QAAQ,SAAS,CAAC,EAAE,GAAG,MAAM,GAAG,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAC;AAC5E,UAAM,SAAS,IAAI;AAAA,MACjB,CAAC,GAAG,MAAM,EAAE;AAAA,QACV,CAAC,CAAC,YAAY,KAAK,MACjB;AAAA,UACE;AAAA,UACA,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,OAAO,GAAG,MAAM,WAAW,SAAS,CAAC,GAAG,OAAO,EAAE;AAAA,QAChF,GAAG;AAAA,MACP;AAAA,IACF;AACA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,YAAM,EAAE,IAAI,OAAO,UAAU,MAAM,WAAW,OAAO,IAAI;AACzD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAI,WAAW,SAAY,CAAC,IAAI,EAAE,OAAO;AAAA,QACzC,GAAI,OAAO,IAAI,MAAM,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MAChD;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,OAAO,IAAY;AACjB,UAAM,SAAS,KAAK,UAAU,EAAE,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE;AACvE,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO;AAAA,MACL,MAAM,OAAO,SAAS,UAAW,UAAqB;AAAA,MACtD,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,YAAuC;AACrC,WAAO,KAAK,OAAO,EAAE,aAAa,CAAC;AAAA,EACrC;AAAA,EAEA,MAAM,OAAO,IAA2B;AACtC,SAAK,OAAO,EAAE;AACd,UAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AAAA,EACpD;AAAA,EAEA,WAA+B;AAC7B,WAAO,KAAK,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,MAAM;AAC3D,YAAM,MAAM,KAAK,MAAM,IAAI,QAAQ,EAAE;AACrC,YAAM,UAAU,MAAM,EAAE,GAAG,SAAS,IAAI,IAAI;AAC5C,YAAM,SAAS,KAAK,SAAS,IAAI,QAAQ,EAAE;AAC3C,YAAM,QAAQ,KAAK,SAAS,IAAI,QAAQ,EAAE,IACtC;AAAA,QACE,GAAG;AAAA,QACH,QAAQ;AAAA,QACR,GAAI,SAAS,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,IAAI,CAAC;AAAA,MAC5C,IACA;AACJ,aAAO,QAAQ,EAAE,GAAG,OAAO,MAAM,IAAI;AAAA,IACvC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QACJ,IACA,QACA,QACA,SACe;AACf,UAAM,UACJ,KAAK,OAAO,EAAE,SAAS,KAAK,CAAC,cAAc,UAAU,OAAO,EAAE,KAAK,KAAK,OAAO,EAAE;AACnF,UAAM,MAAM,SAAS,UAAU;AAC/B,UAAM,QAAQ,SAAS,EAAE,GAAG,OAAO,IAAI;AACvC,UAAM,QAAQ,SAAS,WAAW;AAClC,QAAI,SAAS,SAAS,WAAW,gBAAgB,IAAI,EAAE,KAAK,WAAW,UAAa,CAAC;AACnF,aAAO,KAAK,QAAQ,IAAI,KAAK;AAC/B,UAAM,QAAQ,SAAS,SAAS,WAAW,QAAQ,OAAO,MAAM,KAAK,YAAY,KAAK;AACtF,QAAI,MAAO,MAAK,OAAO,EAAE;AACzB,QAAI,WAAW,QAAW;AACxB,YAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,OAAO,kBAAkB;AAClE;AAAA,IACF;AACA,QAAI,SAAS,SAAS,WAAW,CAAC,SAAS,CAAC,MAAO,OAAM,IAAI,MAAM,GAAG,EAAE,kBAAkB;AAC1F,QAAI,CAAC,OAAO;AACV,UAAI,SAAS,UAAU,QAAS,OAAM,IAAI,MAAM,GAAG,EAAE,mBAAmB;AACxE,YAAM,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,kBAAkB;AAChE;AAAA,IACF;AACA,UAAM,SAAS,MAAM,KAAK,QAAQ,IAAI,KAAK;AAC3C,QAAI,OAAO,WAAW,UAAU;AAC9B,UAAI,CAAC,IAAK,OAAM,IAAI,MAAM,mBAAmB;AAC7C,YAAM,KAAK,UAAU,QAAQ,IAAI,QAAQ,OAAO,kBAAkB;AAClE;AAAA,IACF;AACA,QAAI,QAAQ,WAAW,KAAM,OAAM,IAAI,MAAM,UAAU;AACvD,UAAM,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,kBAAkB;AAAA,EAClE;AAAA,EAEA,OAAO,IAA6B;AAClC,UAAM,aAAa,IAAI,gBAAgB;AACvC,SAAK,SACF,IAAI,EAAE,GACL,MAAM,IAAI,aAAa,sCAAsC,YAAY,CAAC;AAC9E,SAAK,SAAS,IAAI,IAAI,UAAU;AAChC,SAAK,SAAS,OAAO,EAAE;AACvB,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,WAAO;AAAA,EACT;AAAA,EAEA,KAAK,IAAY,YAAmC;AAClD,QAAI,KAAK,SAAS,IAAI,EAAE,MAAM,YAAY;AACxC,WAAK,SAAS,OAAO,EAAE;AACvB,WAAK,SAAS,OAAO,EAAE;AAAA,IACzB;AACA,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,EACvC;AAAA,EAEA,MAAM,QAAQ,IAAY,OAAqD;AAC7E,UAAM,SAAS,OAAO,WAAW;AACjC,UAAM,QAAQ,KAAK,QAAQ,KAAK,UAAU,MAAM,CAAC;AACjD,UAAM,aAAa,KAAK,OAAO,EAAE;AACjC,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,SAAS,IAAI,gBAAgB;AACnC,UAAM,UAAU;AAAA,MAAQ,QAAQ,KAAK,QAAQ,KAAK,QAAQ,MAAM,IAAI,QAAQ,QAAQ,IAAI;AAAA,MAAG,MACzF,OAAO,MAAM,IAAI,aAAa,oCAAoC,YAAY,CAAC;AAAA,IACjF;AACA,UAAM,UAAU,gBAAgB,QAAQ,kBAAkB;AAC1D,UAAM,YAAY,gBAAgB,YAAY,IAAI,CAAC,QAAQ,OAAO,MAAM,CAAC,GAAG,kBAAkB;AAC9F,QAAI;AACF,YAAM,UAAW,MAAM;AAAA,QACrB,cAAc,KAAK,UAAU,OAAO,IAAI,SAAS,GAAG,OAAO;AAAA,QAC3D;AAAA,MACF;AACA,UAAI,CAAC,WAAW,CAAC,SAAS,QAAQ,GAAG,EAAG,OAAM,IAAI,MAAM,UAAU;AAClE,YAAM,aAAa,SAAS,MAAM;AAClC,YAAM,OAAO,OAAO,QAAQ,SAAS,YAAY,QAAQ,OAAO,QAAQ,OAAO;AAC/E,WAAK,SAAS,IAAI,IAAI,EAAE,KAAK,QAAQ,KAAK,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,CAAC;AACrE,WAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AACrC,UAAI,MAAO,OAAM,SAAS,OAAO,QAAQ;AACzC,YAAM,aAAa,KAAK,UAAU,QAAQ,IAAI,MAAM,OAAO,OAAO,GAAG,MAAM;AAAA,IAC7E,SAAS,OAAO;AACd,aAAO,eAAe;AACtB,YAAM,SAAS,KAAK;AAAA,IACtB,UAAE;AACA,aAAO,MAAM;AACb,WAAK,KAAK,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,IAAY,OAAwC;AAChE,UAAM,aAAa,KAAK,OAAO,EAAE;AACjC,QAAI;AACF,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA,MAAM,KAAK,UAAU,OAAO,IAAI,kBAAkB;AAAA,QAClD;AAAA,UACE,QAAQ,WAAW;AAAA,QACrB;AAAA,MACF,EAAE,MAAM,CAAC,UAAmB;AAC1B,mBAAW,OAAO,eAAe;AACjC,cAAM,SAAS,KAAK;AAAA,MACtB,CAAC;AACD,iBAAW,OAAO,eAAe;AACjC,aAAO;AAAA,IACT,UAAE;AACA,WAAK,KAAK,IAAI,UAAU;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,OAAO,IAAkB;AACvB,UAAM,aAAa,KAAK,SAAS,IAAI,EAAE;AACvC,QAAI,CAAC,WAAY;AACjB,SAAK,SAAS,OAAO,EAAE;AACvB,SAAK,SAAS,OAAO,EAAE;AACvB,eAAW,MAAM,IAAI,aAAa,8BAA8B,YAAY,CAAC;AAC7E,SAAK,KAAK,YAAY,KAAK,SAAS,CAAC;AAAA,EACvC;AAAA,EAEA,WAAW,IAAkB;AAC3B;AAAA,MAAQ,KAAK,UAAU,WAAW,IAAI,kBAAkB;AAAA,MAAG;AAAA,MAAuB,CAAC,SACjF,KAAK,OAAO,OAAO,IAAI;AAAA,IACzB;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/types/spectrum/held.d.ts

@@ -0,0 +1,19 @@
+export declare const HELD_CHANNEL = "slicc-held";
+export declare const HELD_MARK = "slicc-sign-in-";
+export declare const HOLD_WAIT_MS = 6000;
+export declare const UNHELD = "SLICC couldn't protect the sign-in window. Try again.";
+export interface HeldChannel {
+    onmessage: ((event: {
+        data: unknown;
+    }) => void) | null;
+    postMessage(data: unknown): void;
+    close(): void;
+}
+export type Listen = (name: string) => HeldChannel;
+export declare function markerUrl(marker: string): string;
+export declare function askHold(marker: string, signal: AbortSignal, options?: {
+    listen?: Listen;
+    wait?: number;
+}): Promise<boolean>;
+export declare function refusal(held: Promise<boolean>, refuse?: () => void): Promise<void>;
+export declare function unlessRefused<T>(work: Promise<T>, refused: Promise<void>): Promise<T>;

package/dist/types/spectrum/mcp-login.d.ts

@@ -14,8 +14,11 @@ export interface Channel {
     }) => void) | null;
     close(): void;
 }
-export interface McpLoginHost {
-    open(): Popup | null;
+export interface SignInWindow {
+    open(url: string): Popup | null;
+    hold(marker: string, signal: AbortSignal): Promise<boolean>;
+}
+export interface McpLoginHost extends SignInWindow {
     channel(): Channel;
     remember?(state: string, name: string | null): void;
     timeoutMs?: number;

package/dist/types/spectrum/settings-port.d.ts

@@ -3,7 +3,7 @@ import type { AgentSettings, ProviderOption, SignIn } from '../services.ts';
 import { type ConnectOptions } from '../sign-ins.ts';
 import type { AgentAdapter } from './agent-port.ts';
 import { Emitter } from './emitter.ts';
-import { type Popup } from './mcp-login.ts';
+import { type SignInWindow } from './mcp-login.ts';
 export declare const SETTINGS_KEY = "slicc-agent.settings";
 export type Sealed = {
     sealed: true;
@@ -13,14 +13,13 @@ export type Login = (providerId: string, signIn: () => Promise<SignIn | null>, o
 }) => Promise<string | Sealed>;
 export declare const SIGN_IN_NEEDS_VAULT = "Adobe sign-in needs seven's vault: update seven";
 export declare const UNFINISHED = "The sign-in didn't finish. Try again.";
-export type OpenPopup = () => Popup | null;
 export declare function readable(error: unknown): Error;
 type Events = SettingsEvents & {
     providers: readonly ProviderOption[];
 };
 export declare class SettingsAdapter extends Emitter<Events> implements SettingsPort {
     #private;
-    constructor(settings: AgentSettings, agent: AgentAdapter, storage: Pick<Storage, 'getItem' | 'setItem'> | null, login?: Login | null, mcp?: Login, open?: OpenPopup);
+    constructor(settings: AgentSettings, agent: AgentAdapter, storage: Pick<Storage, 'getItem' | 'setItem'> | null, login?: Login | null, mcp?: Login, popups?: SignInWindow);
     get(): Settings;
     update(patch: Partial<Settings>): void;
     models(): readonly ModelOption[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-agent",
-  "version": "6.18.3",
+  "version": "6.18.4",
   "description": "SLICC's agent core on pi durable: an agent worker, session storage, remoting and pi extensions",
   "type": "module",
   "license": "Apache-2.0",
@@ -65,10 +65,10 @@
     "release": "semantic-release"
   },
   "devDependencies": {
-    "@ai-ecoverse/slicc-kernel": "1.138.0",
+    "@ai-ecoverse/slicc-kernel": "1.138.1",
     "@ai-ecoverse/slicc-scrub": "1.0.0",
     "@ai-ecoverse/slicc-shared-web": "1.29.1",
-    "@ai-ecoverse/slicc-spectrum": "1.103.1",
+    "@ai-ecoverse/slicc-spectrum": "1.103.2",
     "@ai-ecoverse/wasi-fnox": "1.39.0-6",
     "@ai-ecoverse/wasm-bash": "5.3.0-22",
     "@ai-ecoverse/wasm-coreutils": "9.12.0-12",