@ai-ecoverse/slicc-agent 6.7.1 → 6.8.0

package/README.md

@@ -138,9 +138,9 @@ const owner = await startAgent({
 
 `runAgentWorker(self, options)` is the same with its parts replaceable (model, providers, kernel attach, the account store, storage).
 
-**Providers.** `sliccProviders()` registers Bedrock, Adobe and every pi-ai provider that takes a plain API key: Anthropic, OpenAI, Mistral, Groq, DeepSeek, Together, Hugging Face, Xiaomi and its three token plans, Cerebras, OpenRouter, Fireworks, Baseten, Moonshot AI and its China platform, xAI, Meta, Vercel AI Gateway, MiniMax and MiniMax CN, Z.AI and Z.AI Coding CN, NVIDIA, Kimi For Coding, Ant Ling, OpenCode Zen and Go, and the three Qwen token plans (`KEY_PROVIDERS` in `src/providers.ts`, each with its id, pi-ai factory, pi-ai env name, a description, a key URL and whether it answers browsers). Google and Google Vertex wait for slicc-bios to stop removing `@google/genai`; Azure, Cloudflare and the sign-ins come later. A provider's preferred model is pi-coding-agent 1.3.0's `defaultModelPerProvider` (Bedrock keeps `us.anthropic.claude-sonnet-5-5`), and the first model when that one is missing. Providers that don't answer a browser's preflight with the headers pi-ai sends (`x-api-key`, `anthropic-version`, the SDK's `x-stainless-*`, or `Authorization` under a bare `*`) say `needs: 'cors-free-transport'`; the direct ones are Anthropic, OpenAI, Mistral, Groq, DeepSeek, Together, Hugging Face and the four Xiaomi providers.
+**Providers.** `sliccProviders()` registers Bedrock, Adobe and every pi-ai provider that takes a plain API key: Anthropic, OpenAI, Mistral, Groq, DeepSeek, Together, Hugging Face, Xiaomi and its three token plans, Cerebras, OpenRouter, Fireworks, Baseten, Moonshot AI and its China platform, xAI, Meta, Vercel AI Gateway, MiniMax and MiniMax CN, Z.AI and Z.AI Coding CN, NVIDIA, Kimi For Coding, Ant Ling, OpenCode Zen and Go, and the three Qwen token plans (`KEY_PROVIDERS` in `src/providers.ts`, each with its id, pi-ai factory, pi-ai env name, a description, a key URL and whether it answers browsers). Three more take a key and non-secret fields (`auth: 'fields'`), each checked in `connect` and mapped to pi-ai's env: Azure (`endpoint`, required: a resource name becomes `AZURE_OPENAI_RESOURCE_NAME`, an `https:` URL without a port or user name `AZURE_OPENAI_BASE_URL`; `deployments`, optional `model=deployment` pairs, `AZURE_OPENAI_DEPLOYMENT_NAME_MAP`), Cloudflare Workers AI (`account`, 32 hex characters, `CLOUDFLARE_ACCOUNT_ID`) and Cloudflare AI Gateway (`account` and `gateway`, `CLOUDFLARE_GATEWAY_ID`). Bedrock's `region` is on the same mechanism. A bad value rejects `connect` with a sentence, a required field left out keeps its stored value or rejects with “{label} can’t be empty.”, and a stored value that no longer passes is left out of the env. A fields provider whose required fields are missing or no longer pass shows as not connected, gives pi-ai no credential and offers no models, even with its key already in the vault (spectrum puts the key before `connect` checks the fields). Bedrock's region is any AWS region name (`eusc-de-east-1` and `us-gov-west-1` included), and stored values are trimmed. OpenCode Zen and OpenCode Go need seven's vault 1.12.2 or later, whose built-in table has their `/inference` endpoints; their descriptions say so. Azure's `endpoint` field says `customBase: true`: when its value is a full URL, spectrum registers it with the vault (the page's `endpoints`) before `connect`, since the agent never registers model endpoints for pi-ai providers; a resource name needs nothing, as `*.openai.azure.com` is built into the vault. The worker routes requests to an Azure account's base URL as Azure's. Google and Google Vertex wait for slicc-bios to stop removing `@google/genai`; the sign-ins come later. A provider's preferred model is pi-coding-agent 1.3.0's `defaultModelPerProvider` (Bedrock keeps `us.anthropic.claude-sonnet-5-5`), and the first model when that one is missing. Providers that don't answer a browser's preflight with the headers pi-ai sends (`x-api-key`, `anthropic-version`, the SDK's `x-stainless-*`, or `Authorization` under a bare `*`) say `needs: 'cors-free-transport'`; the direct ones are Anthropic, OpenAI, Mistral, Groq, DeepSeek, Together, Hugging Face and the four Xiaomi providers.
 
-The first provider is AWS Bedrock with a Bedrock API key as the bearer token; the default model is `us.anthropic.claude-sonnet-5-5`. Requests go to `us-west-2` unless the account's `region` field names another one (`AWS_REGION`). The account publishes that field as `fields: [{ name: 'region', label: 'Region' }]`, and `connect` takes it. Bedrock sends no CORS headers, so it needs a CORS-free transport, and its account says so (`needs: 'cors-free-transport'`).
+The first provider is AWS Bedrock with a Bedrock API key as the bearer token; the default model is `us.anthropic.claude-sonnet-5-5`. Requests go to `us-west-2` unless the account's `region` field names another one (`AWS_REGION`). The account publishes that field as `fields: [{ name: 'region', label: 'Region', placeholder, help }]`, and `connect` takes it. Bedrock sends no CORS headers, so it needs a CORS-free transport, and its account says so (`needs: 'cors-free-transport'`).
 
 **Adobe.** `adobeProvider()` reaches Adobe's LLM proxy (`ADOBE_PROXY`) with the user's IMS token as a bearer. Its models come from the proxy's `/v1/config` once a token is stored: Anthropic-style models go through pi-ai's `anthropic-messages` API at the proxy root, `api: 'openai'` models through `openai-completions` under `/v1`, and hidden ones are skipped. Every request to the proxy (turns on either API, Clef, `/v1/config` and `/v1/usage`) carries an `X-Session-Id` that is fixed for the worker and an `X-Slicc-Version` (slicc-agent's version, `adobeProvider({ session, version })`); the proxy refuses turns without them. They're added where the request is built, over the caller's and the model's headers, because pi-ai 1.0.4 keeps a provider's `headers` but never sends them. The account is a sign-in (`auth: 'oauth'`): `AgentSettings.signIn('adobe')` returns the IMS `clientId`, `scopes` and `imsEnvironment` from `/v1/config`, fetched in the worker through the transport. The page runs the IMS popup and seals the token in the vault itself (bios: `seal { kind: 'model', provider: 'adobe', name: 'ADOBE_IMS_TOKEN', source: 'oauth:adobe', expiresAt }`), so `createAgentModel(connection, { login })` takes a `login(providerId, signIn, { signal })` that resolves `{ sealed: true }`; the adapter then calls `connect('adobe')` with no secret. A `login` that still returns a token is refused with "Adobe sign-in needs seven's vault: update seven", and the token never reaches the worker. IMS gives no refresh token, so an expired record shows the account as `expired`, and Sign in (or Reconnect) runs `login` again. The worker derives that from each vault record (`records()`, any account kind, MCP rows included): a record that isn't `ready` or `refreshing` (such as `inert`), or whose `expiresAt` (epoch milliseconds, the vault's `EpochMs`) has passed, reads `expired`, and a timer flips it when the clock reaches `expiresAt`, so an open page needn't wait for the vault to change. A model request that still gets a 401 after the vault's one refresh marks the record it was sent with `expired` too, until that record changes (a new sign-in gives it a new `expiresAt`) or the account is connected again (`connect`), not when an unrelated record changes, so the error card's **Log in** lands on an account that offers Sign in. While it runs, the account shows as `signing-in` (spectrum ≥ 1.34.0), and `SettingsPort.cancel(id)` aborts the signal; a cancelled sign-in never connects, even if the login resolves late. The adapter calls `login` before anything else in the click's task, so the page can open its popup while it still has the user's gesture, and `signIn()` then fetches the IMS options lazily. The weekly budget from `/v1/usage` is in the settings state as `budget` (refreshed on connect and every five minutes), and the `tray` adapter shows it in spectrum's TrayStatus. Until the proxy allows `*.sliccy.ai` (vibemigration#228), Adobe needs a CORS-free transport like Bedrock. An expired session's error card (a 401, or a refusal whose type or message says the token is invalid or expired) offers **Log in**, reads “Log in again to continue.” (the raw error goes to the console once, already scrubbed, never onto the card) and names its account (`account: 'adobe'`, spectrum ≥ 1.88.0), so Log in calls `settings.connect('adobe')` inside the click and spectrum's card follows the sign-in (its own copy while signing in, then “Signed in to Adobe again.”, from the account's `provider`), or shows the failure as a sentence (a `login` that rejects with “the sign-in timed out” reads “The sign-in timed out.”; a cancel stays an `AbortError`, which shows nothing). A rejected or missing key's card, and the “isn't connected” error, name their account too, so spectrum opens Settings at that row; any other refusal, such as a 403 `missing_required_header`, shows the proxy's message, with the HTTP status and error type below it (`403 missing_required_header`) and **Retry**.
 
@@ -150,7 +150,7 @@ The first provider is AWS Bedrock with a Bedrock API key as the bearer token; th
 
 **Settings.** The `slicc.agent.settings` service shows the models and accounts and takes `connect(providerId, secret, fields)`, `disconnect(providerId)` and `remove(providerId)`. An account's `id` is its lookup key: the pi-ai provider id for model accounts (the vault record's `provider`), and `mcp:<server>` for MCP servers (the record's `server` is the `mcp.json` key); `provider` is only the display name. Accounts whose key the agent reads from the vault carry `store: 'vault'`: spectrum (SPEC-S4) `put`s the key into the vault itself, then calls `connect(id)` with no secret, and the agent rereads `records()`. `fields` holds an account's non-secret settings (`Account.fields`, unknown names ignored), kept in `/.slicc/accounts.json`. Removing the key is spectrum's `vault.remove(name, kind)`, since the agent port can't remove records.
 
-**Adding providers.** The settings state's `providers` lists every provider seven can add (`ProviderOption`: `id`, `name`, `description`, `auth`, `keyUrl`, `needs`, `fields` and `vaultName`, sorted by name), and the spectrum adapter serves it as `providers()` with a `providers` event when it changes. `accounts` then lists only the added ones: Bedrock and Adobe start as added, `connect` adds a provider, and one with a vault record or stored fields counts as added too. The added list is `providers` in `/.slicc/accounts.json`. `vaultName` is the record name spectrum `put`s the key under: pi-ai's env name, or `<ID>_API_KEY` for providers that share one (Moonshot AI, OpenCode and the Qwen token plans), since a `put` under another provider's name would rebind that record; Bedrock's is `AWS_BEARER_TOKEN_BEDROCK` and Adobe's `ADOBE_IMS_TOKEN`. The agent finds a provider's record by its `provider`, never by name. Each provider has at most one secret, its key; `fields` are the non-secret inputs. `disconnect(id)` keeps the row and its fields, so connecting again needs only the key, and `remove(id)` drops the row and its fields; for both, spectrum removes the vault record first. On an MCP row, `remove` disconnects it. `connect` with a secret is refused for every model account ("API keys are kept in seven's vault: update seven"); the only secret it still takes is an MCP sign-in's callback answer.
+**Adding providers.** The settings state's `providers` lists every provider seven can add (`ProviderOption`: `id`, `name`, `description`, `auth`, `keyUrl`, `needs`, `fields` and `vaultName`, sorted by name), and the spectrum adapter serves it as `providers()` with a `providers` event when it changes. `accounts` then lists only the added ones: Bedrock and Adobe start as added, `connect` adds a provider, and one with a vault record or stored fields counts as added too. The added list is `providers` in `/.slicc/accounts.json`. `vaultName` is the record name spectrum `put`s the key under: pi-ai's env name, or `<ID>_API_KEY` for providers that share one (Moonshot AI, OpenCode and the Qwen token plans), since a `put` under another provider's name would rebind that record; Bedrock's is `AWS_BEARER_TOKEN_BEDROCK` and Adobe's `ADOBE_IMS_TOKEN`. The agent finds a provider's record by its `provider`, never by name. Each provider has at most one secret, its key; `fields` are the non-secret inputs (`name`, `label`, `required`, `placeholder`, `help` and `customBase`). `disconnect(id)` keeps the row and its fields, so connecting again needs only the key, and `remove(id)` drops the row and its fields; for both, spectrum removes the vault record first. On an MCP row, `remove` disconnects it. `connect` with a secret is refused for every model account ("API keys are kept in seven's vault: update seven"); the only secret it still takes is an MCP sign-in's callback answer.
 
 ### In slicc-spectrum
 

package/dist/main.js

@@ -39,7 +39,7 @@ import { setupMemory } from "./memory/index.js";
 import { modelsCommand } from "./models/index.js";
 import { pageOnly, transportFetch } from "./net.js";
 import { sliccPrompt } from "./prompt.js";
-import { VAULT_KNOWN } from "./providers.js";
+import { AZURE, azureBase, VAULT_KNOWN } from "./providers.js";
 import { createPages } from "./remote/pages.js";
 import { identity } from "./scoops/identity.js";
 import { packageAssets, setupScoops } from "./scoops/index.js";
@@ -142,7 +142,7 @@ async function secretsFor(home, vault) {
   await names.refresh(BACKGROUND_CONTEXT);
   return names;
 }
-function modelBases(providers, models) {
+function modelBases(providers, models, env = () => void 0) {
   return providers.map((provider) => ({
     provider: provider.id,
     urls: [
@@ -150,7 +150,8 @@ function modelBases(providers, models) {
         [
           provider.baseUrl,
           ...models.getModels(provider.id).map((model) => model.baseUrl),
-          ...provider.id === BEDROCK ? BEDROCK_ENDPOINTS : []
+          ...provider.id === BEDROCK ? BEDROCK_ENDPOINTS : [],
+          ...provider.id === AZURE ? [azureBase(env(provider.id) ?? {})] : []
         ].filter((url) => typeof url === "string" && url !== "")
       )
     ]
@@ -185,9 +186,9 @@ async function modelsOf(scope, options, given) {
   const loaded = records.refresh(BACKGROUND_CONTEXT).catch(() => void 0);
   const providers = options.providers ?? sliccProviders(version);
   const fields = await providerFields(store, providers);
-  const credentials = vaultCredentials(records, fields.env);
+  const credentials = vaultCredentials(records, fields.env, fields.ready);
   const models = createSliccModels(credentials, providers);
-  const bases = () => modelBases(providers, models);
+  const bases = () => modelBases(providers, models, fields.env);
   const own = () => bases().filter(({ provider }) => !VAULT_KNOWN.has(provider));
   scope.fetch = vaultFetch(
     vault,

package/dist/main.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/main.ts"],
-  "sourcesContent": ["import { attachKernel } from '@ai-ecoverse/slicc-kernel';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Provider } from '@earendil-works/pi-ai';\nimport type { Models } from '@earendil-works/pi-ai/models';\nimport {\n  createRegistry,\n  type ModelRef,\n  type Storage,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { CodingTools } from '@earendil-works/pi-durable/tools';\nimport { type Agent, type AgentOptions, openAgent } from './agent.ts';\nimport {\n  type ApprovalJudge,\n  approvalJudge,\n  judgeModelOf,\n  judgeSpender,\n  ownerIntent,\n  seedPolicy,\n  verdictRecorder,\n} from './approvals/index.ts';\nimport { browserGuard } from './browser/guard.ts';\nimport { attachChanges, CHANGES_MS } from './changes/index.ts';\nimport {\n  codemodeExtension,\n  codemodeTool,\n  disabledBySettings,\n  locateWasm,\n  sandboxFactory,\n} from './codemode/index.ts';\nimport { attachFreezer } from './freezer/index.ts';\nimport { lateGelatiere } from './gelatiere/index.ts';\nimport { type AgentHost, hostAgent } from './host.ts';\nimport { imageReads } from './images/index.ts';\nimport { createActivity } from './kernel/activity.ts';\nimport { type AgentUsers, agentUsers, warnSupport } from './kernel/agent-users.ts';\nimport type { KernelClient } from './kernel/client.ts';\nimport { HOME, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nimport { processGroups } from './kernel/groups.ts';\nimport { adminOver, type UserClient, type UserClients, userClients } from './kernel/users.ts';\nimport { AGENT_DIR, ROOT_HOME } from './layout.ts';\nimport { setupLicks } from './licks/index.ts';\nimport { lickTriage } from './licks/triage.ts';\nimport { type McpAccounts, setupMcp } from './mcp/index.ts';\nimport type { MemoryEntry } from './memory/format.ts';\nimport { setupMemory } from './memory/index.ts';\nimport { modelsCommand } from './models/index.ts';\nimport { pageOnly, type Transport, transportFetch } from './net.ts';\nimport { sliccPrompt } from './prompt.ts';\nimport { VAULT_KNOWN } from './providers.ts';\nimport { createPages } from './remote/pages.ts';\nimport { identity } from './scoops/identity.ts';\nimport { type Assets, packageAssets, type ScoopsRuntime, setupScoops } from './scoops/index.ts';\nimport { vaultCredentials } from './secrets/credentials.ts';\nimport {\n  BEDROCK_ENDPOINTS,\n  type ModelBases,\n  modelRoute,\n  vaultEndpoints,\n} from './secrets/endpoints.ts';\nimport { secretsExtension, shellGrants } from './secrets/extension.ts';\nimport { grantFetch, mcpFetch, vaultFetch } from './secrets/fetch.ts';\nimport { keysMoved, type Wiped, wipeLegacy } from './secrets/legacy.ts';\nimport { secretNames } from './secrets/names.ts';\nimport { type VaultRecords, vaultRecords } from './secrets/records.ts';\nimport { scrubWith } from './secrets/scrub.ts';\nimport { fileStore, type PlainStore } from './secrets/store.ts';\nimport { listenVault, Vault, WAITING_MS } from './secrets/vault.ts';\nimport { type Choosable, unfreeze, unfreezeCreated } from './selection.ts';\nimport {\n  BEDROCK,\n  createAgentSettings,\n  createSliccModels,\n  providerFields,\n  resolveDefaultModel,\n  sliccProviders,\n} from './settings.ts';\nimport { RELOAD_MS, setupSkills } from './skills/index.ts';\nimport { setupSprinkles } from './sprinkles/index.ts';\nimport { openOpfsSqliteStorage } from './sqlite.ts';\nimport {\n  agentVersion,\n  browserConnected,\n  commandsOnPath,\n  kernelBoot,\n  transportName,\n} from './system.ts';\nimport { titlesExtension } from './titles/extension.ts';\nimport { labeler, settingsText, titler } from './titles/generate.ts';\nimport { attachLabels } from './titles/labels.ts';\nimport { type KernelPorts, kernelPorts, serveConnections, type WorkerScope } from './worker.ts';\n\nexport interface AgentWorkerScope extends WorkerScope {\n  fetch: typeof fetch;\n  location: { origin: string };\n}\n\nexport type KernelAttach = (port: MessagePort) => Promise<KernelClient & { transport: Transport }>;\n\nexport interface AgentWorkerOptions {\n  model?: ModelRef;\n  providers?: Provider[];\n  attach?: KernelAttach;\n  store?: () => Promise<PlainStore>;\n  storage?: () => Promise<Storage>;\n  assets?: Assets;\n  codemodeWasm?: () => Promise<WebAssembly.Module | undefined>;\n  codemodeWorker?: string | URL;\n  catalog?: string;\n  users?: boolean;\n  mcpRedirect?: string;\n  approvalMs?: number;\n}\n\nexport function usersOf(\n  admin: MessagePort | undefined,\n  wanted: boolean | undefined,\n  attach: KernelAttach\n): UserClients | undefined {\n  if (!admin) return undefined;\n  if (wanted === false) {\n    admin.close();\n    return undefined;\n  }\n  return userClients(adminOver(admin), attach as (port: MessagePort) => Promise<UserClient>);\n}\n\nexport const STORE_DIR = '/.slicc';\nexport const ACCOUNTS_FILE = `${STORE_DIR}/accounts.json`;\n\nasync function attached(ports: Promise<KernelPorts>, options: AgentWorkerOptions) {\n  const wiped = await wipeLegacy();\n  const attach: KernelAttach = options.attach ?? attachKernel;\n  const { kernel, admin } = await ports;\n  const client = await attach(kernel);\n  const users = usersOf(admin, options.users, attach);\n  await warnSupport(users, client, options.users);\n  const home = new SliccKernelEnv(client, { cwd: HOME });\n  await privateStore(home);\n  return {\n    client,\n    users,\n    home,\n    wiped,\n    at: { home: HOME, ...(users ? { agentDir: AGENT_DIR } : {}) },\n  };\n}\n\nfunction privateStore(env: SliccKernelEnv): Promise<unknown> {\n  return env.exec(`mkdir -p ${STORE_DIR} && chmod 700 ${STORE_DIR}`, undefined, BACKGROUND_CONTEXT);\n}\n\nasync function codemodeTools(\n  client: KernelClient,\n  options: AgentWorkerOptions,\n  native: typeof fetch,\n  extra: Parameters<typeof codemodeTool>[0]['extra'],\n  dir = `${HOME}/.pi/agent`\n) {\n  const settings = await client.fs.readFile(`${dir}/settings.json`).catch(() => undefined);\n  if (disabledBySettings(settings === undefined ? undefined : new TextDecoder().decode(settings)))\n    return [];\n  const sandbox = sandboxFactory(\n    options.codemodeWasm ?? (() => locateWasm(native, new URL(import.meta.url))),\n    options.codemodeWorker\n  );\n  return [\n    codemodeTool({ declared: CodingTools.tools as readonly ToolRegistration[], sandbox, extra }),\n  ];\n}\n\nexport function seesImages(models: Pick<Models, 'getModel'>, ref: ModelRef | undefined): boolean {\n  const found = ref && models.getModel(ref.provider, ref.modelId);\n  return found ? found.input.includes('image') : true;\n}\n\nexport const MCP_CALLBACK = '/oauth/mcp-callback';\n\nasync function openUnfrozen(\n  options: AgentWorkerOptions,\n  { choosable: chosen }: { choosable: Choosable },\n  base: Omit<AgentOptions, 'storage' | 'beforeResume' | 'conversationCreated'>\n): Promise<Agent> {\n  const storage = await (options.storage ?? (() => openOpfsSqliteStorage()))();\n  return openAgent({\n    ...base,\n    storage,\n    conversationCreated: unfreezeCreated(chosen),\n    beforeResume: (harness, using) => unfreeze(harness, storage, chosen, using),\n  });\n}\n\nasync function secretsFor(home: SliccKernelEnv, vault: Vault) {\n  scrubWith(vault);\n  const names = secretNames(home, vault);\n  await names.refresh(BACKGROUND_CONTEXT);\n  return names;\n}\n\nexport function modelBases(\n  providers: readonly Provider[],\n  models: Pick<ReturnType<typeof createSliccModels>, 'getModels'>\n): ModelBases[] {\n  return providers.map((provider) => ({\n    provider: provider.id,\n    urls: [\n      ...new Set(\n        [\n          provider.baseUrl,\n          ...models.getModels(provider.id).map((model) => model.baseUrl),\n          ...(provider.id === BEDROCK ? BEDROCK_ENDPOINTS : []),\n        ].filter((url): url is string => typeof url === 'string' && url !== '')\n      ),\n    ],\n  }));\n}\n\nfunction mcpVault(\n  vault: Vault,\n  made: { store: PlainStore; records: VaultRecords; endpoints: ReturnType<typeof vaultEndpoints> }\n) {\n  const { store, records, endpoints } = made;\n  return {\n    store,\n    vault: {\n      records,\n      fetch: (server: string, base: typeof fetch) => mcpFetch(vault, base, server),\n      grant: (server: string, base: typeof fetch) => grantFetch(vault, server, base),\n      servers: endpoints.servers,\n      token: endpoints.token,\n    },\n  };\n}\n\nfunction hostSecrets(\n  vault: Vault,\n  names: Awaited<ReturnType<typeof secretsFor>>,\n  parts: readonly { close(): void }[]\n) {\n  return {\n    vault: vault.state,\n    list: () => names.state.value,\n    close: () => {\n      for (const part of parts) part.close();\n    },\n  };\n}\n\nasync function modelsOf(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions,\n  given: { vault: Vault; home: SliccKernelEnv; transport: typeof fetch; version: string }\n) {\n  const { vault, home, transport, version } = given;\n  const store = await (options.store ?? (async () => fileStore(home, ACCOUNTS_FILE)))();\n  const records = vaultRecords(vault);\n  const loaded = records.refresh(BACKGROUND_CONTEXT).catch(() => undefined);\n  const providers = options.providers ?? sliccProviders(version);\n  const fields = await providerFields(store, providers);\n  const credentials = vaultCredentials(records, fields.env);\n  const models = createSliccModels(credentials, providers);\n  const bases = () => modelBases(providers, models);\n  const own = () => bases().filter(({ provider }) => !VAULT_KNOWN.has(provider));\n  scope.fetch = vaultFetch(\n    vault,\n    transport,\n    modelRoute(bases, () => records.state.value),\n    records.rejecting\n  );\n  const endpoints = vaultEndpoints(vault);\n  void endpoints.models(own()).catch(() => undefined);\n  const defaultModel = async () => {\n    await Promise.race([loaded, new Promise((resolve) => setTimeout(resolve, WAITING_MS))]);\n    return resolveDefaultModel(credentials, providers, models);\n  };\n  return { store, records, providers, fields, models, bases, own, endpoints, defaultModel };\n}\n\nfunction baseRegistry(facts: Awaited<ReturnType<typeof factsOf>>, origin: string) {\n  const registry = createRegistry();\n  registry.install(CodingTools);\n  registry.install(browserGuard([origin]));\n  registry.install(sliccPrompt(facts));\n  const read = (CodingTools.tools as readonly ToolRegistration[]).find(\n    (tool) => tool.name === 'read'\n  ) as ToolRegistration;\n  registry.install(imageReads(read));\n  return registry;\n}\n\nasync function factsOf(client: KernelClient & { transport: Transport }, native: typeof fetch) {\n  return {\n    version: await agentVersion((url) => native(url)),\n    commands: await commandsOnPath(client),\n    transport: transportName(client.transport),\n    browser: await browserConnected(client),\n  };\n}\n\nfunction routeFetch(scope: AgentWorkerScope, client: KernelClient & { transport: Transport }) {\n  const native = scope.fetch.bind(scope);\n  const loopback = client.loopbackFetch?.bind(client);\n  const transport = transportFetch(client.transport, scope.location.origin, native, loopback);\n  scope.fetch = transport;\n  return { native, transport };\n}\n\nasync function prepare(\n  scope: AgentWorkerScope,\n  kernel: { client: KernelClient & { transport: Transport }; home: SliccKernelEnv; vault: Vault },\n  options: AgentWorkerOptions\n) {\n  const names = await secretsFor(kernel.home, kernel.vault);\n  const { native, transport } = routeFetch(scope, kernel.client);\n  const facts = await factsOf(kernel.client, native);\n  const made = await modelsOf(scope, options, {\n    vault: kernel.vault,\n    home: kernel.home,\n    transport,\n    version: facts.version,\n  });\n  return {\n    names,\n    native,\n    transport,\n    facts,\n    ...made,\n    registry: baseRegistry(facts, scope.location.origin),\n  };\n}\n\nfunction modelsOfAgent(\n  agent: Agent,\n  settings: Awaited<ReturnType<typeof createAgentSettings>>,\n  catalog: Models,\n  vault: Vault\n) {\n  const locked = () => vault.state.value.locked !== 'no';\n  return modelsCommand({ agents: agent.agents, settings, catalog, locked });\n}\n\nasync function settingsOf(\n  made: Awaited<ReturnType<typeof modelsOf>>,\n  mcp: McpAccounts,\n  moved: { agent: Agent; vault: Vault; wiped: Wiped }\n) {\n  const { models, records, fields, providers, own, endpoints } = made;\n  const keys = await keysMoved(moved.agent.harness, { records, vault: moved.vault }, moved.wiped);\n  const settings = await createAgentSettings(models, { records, fields }, providers, {\n    mcp,\n    moved: keys,\n  });\n  settings.state.subscribe(() => void endpoints.models(own()).catch(() => undefined));\n  return settings;\n}\n\nasync function setupApprovals(\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  agent: Agent,\n  stored: { readonly value: readonly MemoryEntry[] | undefined },\n  options: Pick<AgentWorkerOptions, 'approvalMs'>\n) {\n  const memories = () => stored.value;\n  const { approvalMs } = options;\n  await seedPolicy(home, BACKGROUND_CONTEXT).catch(() => false);\n  const settings = settingsText(home, HOME, at.agentDir);\n  const intent = ownerIntent({ env: home, agents: agent.agents, memories });\n  const judge: ApprovalJudge = {\n    judge: approvalJudge({\n      models,\n      model: async (context) => judgeModelOf(await settings(context)),\n      intent,\n      spend: judgeSpender((agentId, context) => agent.agents.conversation(agentId, context)),\n    }),\n    record: verdictRecorder((agentId, context) => agent.agents.conversation(agentId, context)),\n  };\n  return { judge, intent, ...(approvalMs ? { approvalMs } : {}) };\n}\n\nfunction setupTitles(\n  registry: ReturnType<typeof createRegistry>,\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  opened: () => Agent | undefined\n) {\n  const settings = settingsText(home, HOME, at.agentDir);\n  const titleFn = titler(models, settings);\n  const titles = titlesExtension({\n    agents: () => opened()?.agents,\n    harness: () => opened()?.harness,\n    title: () => titleFn,\n  });\n  registry.install(titles.extension);\n  return { titleFn, cancel: titles.cancel, label: labeler(models, settings) };\n}\n\nfunction freezerOf(\n  agent: Agent,\n  parts: {\n    home: SliccKernelEnv;\n    memory: ReturnType<typeof setupMemory>;\n    titles: ReturnType<typeof setupTitles>;\n    people: AgentUsers | undefined;\n    users: UserClients | undefined;\n    ready: { providers: readonly Provider[]; models: ReturnType<typeof createSliccModels> };\n  }\n) {\n  const { home, memory, titles, people, users, ready } = parts;\n  return attachFreezer({\n    harness: agent.harness,\n    agents: agent.agents,\n    env: home,\n    extract: memory.extract,\n    title: titles.titleFn,\n    cancelTitle: titles.cancel,\n    ...(people ? { layout: people.layout } : {}),\n    imports: {\n      env: home,\n      memoryHome: people ? ROOT_HOME : HOME,\n      catalog: ready.models,\n      providers: ready.providers,\n      ...(users ? { users: users.users } : {}),\n      ...(people ? { envOf: (cone: string) => people.envOfAgent(`cone:${cone}`) } : {}),\n    },\n  });\n}\n\nasync function start(\n  scope: AgentWorkerScope,\n  ports: Promise<KernelPorts>,\n  options: AgentWorkerOptions,\n  vault: Vault\n): Promise<AgentHost> {\n  const { client, users, home, at, wiped } = await attached(ports, options);\n  const ready = await prepare(scope, { client, home, vault }, options);\n  const { names, native, transport, facts, models, registry, records, endpoints } = ready;\n  const memory = setupMemory(registry);\n  const coding = CodingTools.tools as readonly ToolRegistration[];\n  const mcp = setupMcp(registry);\n  const codemode = await codemodeTools(client, options, native, mcp.codemode, at.agentDir);\n  registry.install(codemodeExtension(codemode));\n  const licks = setupLicks(registry, transport);\n  licks.licks.triage(lickTriage(models));\n  const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);\n  const skills = setupSkills(registry, licks.licks);\n  registry.install(secretsExtension({ names, vault }));\n  const titles = setupTitles(registry, models, home, at, () => opened);\n  const [activity, groups] = [createActivity(), processGroups(client)];\n  const model = options.model ?? (await ready.defaultModel());\n  let opened: Agent | undefined;\n  const people = users ? agentUsers(users, client, home, () => opened?.agents) : undefined;\n  const environment = kernelEnvironment(client, {\n    activity,\n    groups,\n    identify: identity(() => opened?.agents, model),\n    scrub: vault,\n    spawn: shellGrants(names),\n    ...(people ? { route: people.route } : {}),\n  });\n  const agent = await openUnfrozen(options, scoops, { models, model, registry, env: environment });\n  opened = agent;\n  await people?.start(agent.agents);\n  const sources = licks.attach(agent, {\n    env: home,\n    home: HOME,\n    activity,\n    ...(people ? { dirs: () => people.lickDirs(), cronUser: people.cronUser.bind(people) } : {}),\n  });\n  await sources.start(BACKGROUND_CONTEXT);\n  const booted = { version: facts.version, boot: await kernelBoot(client) };\n  await sources.boot(booted, BACKGROUND_CONTEXT);\n  const skillsRuntime = await skills.attach(\n    {\n      env: home,\n      ...at,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people ? { people: people.people } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const mcpRuntime = await mcp.attach(\n    {\n      env: home,\n      ...at,\n      ...mcpVault(vault, ready),\n      licks: licks.licks,\n      fetch: transport,\n      version: facts.version,\n      reloadMs: RELOAD_MS,\n      codemode: codemode.length > 0,\n      cors: pageOnly(client.transport),\n      redirect: options.mcpRedirect ?? new URL(MCP_CALLBACK, scope.location.origin).href,\n    },\n    BACKGROUND_CONTEXT\n  );\n  const gelatiere = lateGelatiere();\n  const sprinkles = await setupSprinkles().attach(\n    {\n      intercept: gelatiere.intercept,\n      harness: agent.harness,\n      agents: agent.agents,\n      licks: licks.licks,\n      env: home,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people?.sprinkles() ?? {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  people?.follow([sources, skillsRuntime, sprinkles]);\n  let roles: ScoopsRuntime | undefined;\n  const memoryRuntime = await memory.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      env: home,\n      ...at,\n      ...(people ? { home: ROOT_HOME } : {}),\n      reloadMs: RELOAD_MS,\n      roles: async (using) => roles?.roles(using),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const freezer = freezerOf(agent, { home, memory, titles, people, users, ready });\n  licks.licks.guard(freezer.frozenTarget);\n  const settings = await settingsOf(ready, mcpRuntime, { agent, vault, wiped });\n  const pages = createPages({ claim: sprinkles.claim });\n  const runtime = await scoops.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      groups,\n      env: home,\n      envOf: async (conversationId, context) => environment({ conversationId }, context),\n      ...at,\n      ...(people\n        ? { layout: people.layout, spools: people.spools, enforced: people.enforced }\n        : {}),\n      alive: alive(client),\n      reads: skillsRuntime.dirs,\n      memory: memoryRuntime.command,\n      gelatiere: gelatiere.command,\n      freezer: freezer.command,\n      models: modelsOfAgent(agent, settings, models, vault),\n      panel: pages.command,\n      webhook: sources.webhook,\n      mcp: mcp.direct,\n      ...(options.assets ? { assets: options.assets } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  roles = runtime;\n  gelatiere.attach({\n    agents: agent.agents,\n    licks: licks.licks,\n    env: home,\n    home: HOME,\n    ...(await people?.gelatiere(home)),\n    scoops: scoops.scoops,\n    roles: runtime.roles,\n    assets: options.assets ?? packageAssets(),\n    fetch: scope.fetch,\n    skills: skillsRuntime.skills,\n    ...(options.catalog ? { catalog: options.catalog } : {}),\n  });\n  await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => undefined);\n  return hostAgent(agent, {\n    ...(await setupApprovals(models, home, at, agent, memoryRuntime.memories, options)),\n    settings,\n    licks: { licks: licks.licks, sources },\n    scoops: { scoops: scoops.scoops, runtime },\n    skills: skillsRuntime,\n    sprinkles,\n    memory: memoryRuntime,\n    freezer,\n    changes: attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS }),\n    pages,\n    labels: await attachLabels({ ...agent, label: titles.label, vault: vault.state }),\n    mcp: mcpRuntime,\n    ...(users ? { users } : {}),\n    secrets: hostSecrets(vault, names, [names, records, endpoints]),\n    uploads: {\n      env: environment,\n      sees: (ref) => seesImages(models, ref),\n    },\n    monitor: {\n      kernel: client,\n      groups,\n      ...(users ? { users: () => users.users.list() } : {}),\n    },\n  });\n}\n\nexport function alive(client: KernelClient) {\n  return async (pid: number): Promise<boolean> => {\n    if (!client.ps) return true;\n    return (await client.ps()).some((process) => process.pid === pid);\n  };\n}\n\nexport function runAgentWorker(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions = {}\n): Promise<AgentHost> {\n  const vault = new Vault();\n  listenVault(scope, vault);\n  const host = start(scope, kernelPorts(scope), options, vault);\n  host.catch(() => undefined);\n  serveConnections(scope, host);\n  return host;\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AAGnC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,mBAAmB;AAC5B,SAAwC,iBAAiB;AACzD;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAyB,iBAAiB;AAC1C,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAA0B,YAAY,mBAAmB;AAEzD,SAAS,MAAM,mBAAmB,sBAAsB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,WAA8C,mBAAmB;AAC1E,SAAS,WAAW,iBAAiB;AACrC,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAA2B,gBAAgB;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,UAA0B,sBAAsB;AACzD,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAsB,eAAmC,mBAAmB;AAC5E,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,YAAY,UAAU,kBAAkB;AACjD,SAAS,WAAuB,kBAAkB;AAClD,SAAS,mBAAmB;AAC5B,SAA4B,oBAAoB;AAChD,SAAS,iBAAiB;AAC1B,SAAS,iBAAkC;AAC3C,SAAS,aAAa,OAAO,kBAAkB;AAC/C,SAAyB,UAAU,uBAAuB;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,mBAAmB;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,SAAS,cAAc,cAAc;AAC9C,SAAS,oBAAoB;AAC7B,SAA2B,aAAa,wBAA0C;AAwB3E,SAAS,QACd,OACA,QACA,QACyB;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,WAAW,OAAO;AACpB,UAAM,MAAM;AACZ,WAAO;AAAA,EACT;AACA,SAAO,YAAY,UAAU,KAAK,GAAG,MAAoD;AAC3F;AAEO,MAAM,YAAY;AAClB,MAAM,gBAAgB,GAAG,SAAS;AAEzC,eAAe,SAAS,OAA6B,SAA6B;AAChF,QAAM,QAAQ,MAAM,WAAW;AAC/B,QAAM,SAAuB,QAAQ,UAAU;AAC/C,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM;AAChC,QAAM,SAAS,MAAM,OAAO,MAAM;AAClC,QAAM,QAAQ,QAAQ,OAAO,QAAQ,OAAO,MAAM;AAClD,QAAM,YAAY,OAAO,QAAQ,QAAQ,KAAK;AAC9C,QAAM,OAAO,IAAI,eAAe,QAAQ,EAAE,KAAK,KAAK,CAAC;AACrD,QAAM,aAAa,IAAI;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI,EAAE,MAAM,MAAM,GAAI,QAAQ,EAAE,UAAU,UAAU,IAAI,CAAC,EAAG;AAAA,EAC9D;AACF;AAEA,SAAS,aAAa,KAAuC;AAC3D,SAAO,IAAI,KAAK,YAAY,SAAS,iBAAiB,SAAS,IAAI,QAAW,kBAAkB;AAClG;AAEA,eAAe,cACb,QACA,SACA,QACA,OACA,MAAM,GAAG,IAAI,cACb;AACA,QAAM,WAAW,MAAM,OAAO,GAAG,SAAS,GAAG,GAAG,gBAAgB,EAAE,MAAM,MAAM,MAAS;AACvF,MAAI,mBAAmB,aAAa,SAAY,SAAY,IAAI,YAAY,EAAE,OAAO,QAAQ,CAAC;AAC5F,WAAO,CAAC;AACV,QAAM,UAAU;AAAA,IACd,QAAQ,iBAAiB,MAAM,WAAW,QAAQ,IAAI,IAAI,YAAY,GAAG,CAAC;AAAA,IAC1E,QAAQ;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa,EAAE,UAAU,YAAY,OAAsC,SAAS,MAAM,CAAC;AAAA,EAC7F;AACF;AAEO,SAAS,WAAW,QAAkC,KAAoC;AAC/F,QAAM,QAAQ,OAAO,OAAO,SAAS,IAAI,UAAU,IAAI,OAAO;AAC9D,SAAO,QAAQ,MAAM,MAAM,SAAS,OAAO,IAAI;AACjD;AAEO,MAAM,eAAe;AAE5B,eAAe,aACb,SACA,EAAE,WAAW,OAAO,GACpB,MACgB;AAChB,QAAM,UAAU,OAAO,QAAQ,YAAY,MAAM,sBAAsB,IAAI;AAC3E,SAAO,UAAU;AAAA,IACf,GAAG;AAAA,IACH;AAAA,IACA,qBAAqB,gBAAgB,MAAM;AAAA,IAC3C,cAAc,CAAC,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,KAAK;AAAA,EAC5E,CAAC;AACH;AAEA,eAAe,WAAW,MAAsB,OAAc;AAC5D,YAAU,KAAK;AACf,QAAM,QAAQ,YAAY,MAAM,KAAK;AACrC,QAAM,MAAM,QAAQ,kBAAkB;AACtC,SAAO;AACT;AAEO,SAAS,WACd,WACA,QACc;AACd,SAAO,UAAU,IAAI,CAAC,cAAc;AAAA,IAClC,UAAU,SAAS;AAAA,IACnB,MAAM;AAAA,MACJ,GAAG,IAAI;AAAA,QACL;AAAA,UACE,SAAS;AAAA,UACT,GAAG,OAAO,UAAU,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO;AAAA,UAC7D,GAAI,SAAS,OAAO,UAAU,oBAAoB,CAAC;AAAA,QACrD,EAAE,OAAO,CAAC,QAAuB,OAAO,QAAQ,YAAY,QAAQ,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF,EAAE;AACJ;AAEA,SAAS,SACP,OACA,MACA;AACA,QAAM,EAAE,OAAO,SAAS,UAAU,IAAI;AACtC,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA,OAAO,CAAC,QAAgB,SAAuB,SAAS,OAAO,MAAM,MAAM;AAAA,MAC3E,OAAO,CAAC,QAAgB,SAAuB,WAAW,OAAO,QAAQ,IAAI;AAAA,MAC7E,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,YACP,OACA,OACA,OACA;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,MAAM,MAAM,MAAM,MAAM;AAAA,IACxB,OAAO,MAAM;AACX,iBAAW,QAAQ,MAAO,MAAK,MAAM;AAAA,IACvC;AAAA,EACF;AACF;AAEA,eAAe,SACb,OACA,SACA,OACA;AACA,QAAM,EAAE,OAAO,MAAM,WAAW,QAAQ,IAAI;AAC5C,QAAM,QAAQ,OAAO,QAAQ,UAAU,YAAY,UAAU,MAAM,aAAa,IAAI;AACpF,QAAM,UAAU,aAAa,KAAK;AAClC,QAAM,SAAS,QAAQ,QAAQ,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACxE,QAAM,YAAY,QAAQ,aAAa,eAAe,OAAO;AAC7D,QAAM,SAAS,MAAM,eAAe,OAAO,SAAS;AACpD,QAAM,cAAc,iBAAiB,SAAS,OAAO,GAAG;AACxD,QAAM,SAAS,kBAAkB,aAAa,SAAS;AACvD,QAAM,QAAQ,MAAM,WAAW,WAAW,MAAM;AAChD,QAAM,MAAM,MAAM,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,CAAC,YAAY,IAAI,QAAQ,CAAC;AAC7E,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,OAAO,MAAM,QAAQ,MAAM,KAAK;AAAA,IAC3C,QAAQ;AAAA,EACV;AACA,QAAM,YAAY,eAAe,KAAK;AACtC,OAAK,UAAU,OAAO,IAAI,CAAC,EAAE,MAAM,MAAM,MAAS;AAClD,QAAM,eAAe,YAAY;AAC/B,UAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC,CAAC,CAAC;AACtF,WAAO,oBAAoB,aAAa,WAAW,MAAM;AAAA,EAC3D;AACA,SAAO,EAAE,OAAO,SAAS,WAAW,QAAQ,QAAQ,OAAO,KAAK,WAAW,aAAa;AAC1F;AAEA,SAAS,aAAa,OAA4C,QAAgB;AAChF,QAAM,WAAW,eAAe;AAChC,WAAS,QAAQ,WAAW;AAC5B,WAAS,QAAQ,aAAa,CAAC,MAAM,CAAC,CAAC;AACvC,WAAS,QAAQ,YAAY,KAAK,CAAC;AACnC,QAAM,OAAQ,YAAY,MAAsC;AAAA,IAC9D,CAAC,SAAS,KAAK,SAAS;AAAA,EAC1B;AACA,WAAS,QAAQ,WAAW,IAAI,CAAC;AACjC,SAAO;AACT;AAEA,eAAe,QAAQ,QAAiD,QAAsB;AAC5F,SAAO;AAAA,IACL,SAAS,MAAM,aAAa,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAChD,UAAU,MAAM,eAAe,MAAM;AAAA,IACrC,WAAW,cAAc,OAAO,SAAS;AAAA,IACzC,SAAS,MAAM,iBAAiB,MAAM;AAAA,EACxC;AACF;AAEA,SAAS,WAAW,OAAyB,QAAiD;AAC5F,QAAM,SAAS,MAAM,MAAM,KAAK,KAAK;AACrC,QAAM,WAAW,OAAO,eAAe,KAAK,MAAM;AAClD,QAAM,YAAY,eAAe,OAAO,WAAW,MAAM,SAAS,QAAQ,QAAQ,QAAQ;AAC1F,QAAM,QAAQ;AACd,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAe,QACb,OACA,QACA,SACA;AACA,QAAM,QAAQ,MAAM,WAAW,OAAO,MAAM,OAAO,KAAK;AACxD,QAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,OAAO,OAAO,MAAM;AAC7D,QAAM,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM;AACjD,QAAM,OAAO,MAAM,SAAS,OAAO,SAAS;AAAA,IAC1C,OAAO,OAAO;AAAA,IACd,MAAM,OAAO;AAAA,IACb;AAAA,IACA,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH,UAAU,aAAa,OAAO,MAAM,SAAS,MAAM;AAAA,EACrD;AACF;AAEA,SAAS,cACP,OACA,UACA,SACA,OACA;AACA,QAAM,SAAS,MAAM,MAAM,MAAM,MAAM,WAAW;AAClD,SAAO,cAAc,EAAE,QAAQ,MAAM,QAAQ,UAAU,SAAS,OAAO,CAAC;AAC1E;AAEA,eAAe,WACb,MACA,KACA,OACA;AACA,QAAM,EAAE,QAAQ,SAAS,QAAQ,WAAW,KAAK,UAAU,IAAI;AAC/D,QAAM,OAAO,MAAM,UAAU,MAAM,MAAM,SAAS,EAAE,SAAS,OAAO,MAAM,MAAM,GAAG,MAAM,KAAK;AAC9F,QAAM,WAAW,MAAM,oBAAoB,QAAQ,EAAE,SAAS,OAAO,GAAG,WAAW;AAAA,IACjF;AAAA,IACA,OAAO;AAAA,EACT,CAAC;AACD,WAAS,MAAM,UAAU,MAAM,KAAK,UAAU,OAAO,IAAI,CAAC,EAAE,MAAM,MAAM,MAAS,CAAC;AAClF,SAAO;AACT;AAEA,eAAe,eACb,QACA,MACA,IACA,OACA,QACA,SACA;AACA,QAAM,WAAW,MAAM,OAAO;AAC9B,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,WAAW,MAAM,kBAAkB,EAAE,MAAM,MAAM,KAAK;AAC5D,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,SAAS,YAAY,EAAE,KAAK,MAAM,QAAQ,MAAM,QAAQ,SAAS,CAAC;AACxE,QAAM,QAAuB;AAAA,IAC3B,OAAO,cAAc;AAAA,MACnB;AAAA,MACA,OAAO,OAAO,YAAY,aAAa,MAAM,SAAS,OAAO,CAAC;AAAA,MAC9D;AAAA,MACA,OAAO,aAAa,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,IACvF,CAAC;AAAA,IACD,QAAQ,gBAAgB,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,EAC3F;AACA,SAAO,EAAE,OAAO,QAAQ,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAChE;AAEA,SAAS,YACP,UACA,QACA,MACA,IACA,QACA;AACA,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,UAAU,OAAO,QAAQ,QAAQ;AACvC,QAAM,SAAS,gBAAgB;AAAA,IAC7B,QAAQ,MAAM,OAAO,GAAG;AAAA,IACxB,SAAS,MAAM,OAAO,GAAG;AAAA,IACzB,OAAO,MAAM;AAAA,EACf,CAAC;AACD,WAAS,QAAQ,OAAO,SAAS;AACjC,SAAO,EAAE,SAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AAC5E;AAEA,SAAS,UACP,OACA,OAQA;AACA,QAAM,EAAE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,IAAI;AACvD,SAAO,cAAc;AAAA,IACnB,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,KAAK;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,IACd,aAAa,OAAO;AAAA,IACpB,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC1C,SAAS;AAAA,MACP,KAAK;AAAA,MACL,YAAY,SAAS,YAAY;AAAA,MACjC,SAAS,MAAM;AAAA,MACf,WAAW,MAAM;AAAA,MACjB,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MACtC,GAAI,SAAS,EAAE,OAAO,CAAC,SAAiB,OAAO,WAAW,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC;AAAA,IACjF;AAAA,EACF,CAAC;AACH;AAEA,eAAe,MACb,OACA,OACA,SACA,OACoB;AACpB,QAAM,EAAE,QAAQ,OAAO,MAAM,IAAI,MAAM,IAAI,MAAM,SAAS,OAAO,OAAO;AACxE,QAAM,QAAQ,MAAM,QAAQ,OAAO,EAAE,QAAQ,MAAM,MAAM,GAAG,OAAO;AACnE,QAAM,EAAE,OAAO,QAAQ,WAAW,OAAO,QAAQ,UAAU,SAAS,UAAU,IAAI;AAClF,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,SAAS,YAAY;AAC3B,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WAAW,MAAM,cAAc,QAAQ,SAAS,QAAQ,IAAI,UAAU,GAAG,QAAQ;AACvF,WAAS,QAAQ,kBAAkB,QAAQ,CAAC;AAC5C,QAAM,QAAQ,WAAW,UAAU,SAAS;AAC5C,QAAM,MAAM,OAAO,WAAW,MAAM,CAAC;AACrC,QAAM,SAAS,YAAY,UAAU,MAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,KAAK,CAAC;AAC3F,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK;AAChD,WAAS,QAAQ,iBAAiB,EAAE,OAAO,MAAM,CAAC,CAAC;AACnD,QAAM,SAAS,YAAY,UAAU,QAAQ,MAAM,IAAI,MAAM,MAAM;AACnE,QAAM,CAAC,UAAU,MAAM,IAAI,CAAC,eAAe,GAAG,cAAc,MAAM,CAAC;AACnE,QAAM,QAAQ,QAAQ,SAAU,MAAM,MAAM,aAAa;AACzD,MAAI;AACJ,QAAM,SAAS,QAAQ,WAAW,OAAO,QAAQ,MAAM,MAAM,QAAQ,MAAM,IAAI;AAC/E,QAAM,cAAc,kBAAkB,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,UAAU,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,IAC9C,OAAO;AAAA,IACP,OAAO,YAAY,KAAK;AAAA,IACxB,GAAI,SAAS,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,EAC1C,CAAC;AACD,QAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,EAAE,QAAQ,OAAO,UAAU,KAAK,YAAY,CAAC;AAC/F,WAAS;AACT,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,UAAU,MAAM,OAAO,OAAO;AAAA,IAClC,KAAK;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,GAAI,SAAS,EAAE,MAAM,MAAM,OAAO,SAAS,GAAG,UAAU,OAAO,SAAS,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,EAC5F,CAAC;AACD,QAAM,QAAQ,MAAM,kBAAkB;AACtC,QAAM,SAAS,EAAE,SAAS,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM,EAAE;AACxE,QAAM,QAAQ,KAAK,QAAQ,kBAAkB;AAC7C,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAAA,IAC3B;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAG,SAAS,OAAO,KAAK;AAAA,MACxB,OAAO,MAAM;AAAA,MACb,OAAO;AAAA,MACP,SAAS,MAAM;AAAA,MACf,UAAU;AAAA,MACV,UAAU,SAAS,SAAS;AAAA,MAC5B,MAAM,SAAS,OAAO,SAAS;AAAA,MAC/B,UAAU,QAAQ,eAAe,IAAI,IAAI,cAAc,MAAM,SAAS,MAAM,EAAE;AAAA,IAChF;AAAA,IACA;AAAA,EACF;AACA,QAAM,YAAY,cAAc;AAChC,QAAM,YAAY,MAAM,eAAe,EAAE;AAAA,IACvC;AAAA,MACE,WAAW,UAAU;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,KAAK;AAAA,MACL,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,QAAQ,UAAU,KAAK,CAAC;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,UAAQ,OAAO,CAAC,SAAS,eAAe,SAAS,CAAC;AAClD,MAAI;AACJ,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAI,SAAS,EAAE,MAAM,UAAU,IAAI,CAAC;AAAA,MACpC,UAAU;AAAA,MACV,OAAO,OAAO,UAAU,OAAO,MAAM,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,UAAU,OAAO,EAAE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,CAAC;AAC/E,QAAM,MAAM,MAAM,QAAQ,YAAY;AACtC,QAAM,WAAW,MAAM,WAAW,OAAO,YAAY,EAAE,OAAO,OAAO,MAAM,CAAC;AAC5E,QAAM,QAAQ,YAAY,EAAE,OAAO,UAAU,MAAM,CAAC;AACpD,QAAM,UAAU,MAAM,OAAO;AAAA,IAC3B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,KAAK;AAAA,MACL,OAAO,OAAO,gBAAgB,YAAY,YAAY,EAAE,eAAe,GAAG,OAAO;AAAA,MACjF,GAAG;AAAA,MACH,GAAI,SACA,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS,IAC1E,CAAC;AAAA,MACL,OAAO,MAAM,MAAM;AAAA,MACnB,OAAO,cAAc;AAAA,MACrB,QAAQ,cAAc;AAAA,MACtB,WAAW,UAAU;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,QAAQ,cAAc,OAAO,UAAU,QAAQ,KAAK;AAAA,MACpD,OAAO,MAAM;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,KAAK,IAAI;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AACA,UAAQ;AACR,YAAU,OAAO;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,KAAK;AAAA,IACL,MAAM;AAAA,IACN,GAAI,MAAM,QAAQ,UAAU,IAAI;AAAA,IAChC,QAAQ,OAAO;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ,UAAU,cAAc;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,QAAQ,cAAc;AAAA,IACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD,CAAC;AACD,QAAM,cAAc,OAAO,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACpE,SAAO,UAAU,OAAO;AAAA,IACtB,GAAI,MAAM,eAAe,QAAQ,MAAM,IAAI,OAAO,cAAc,UAAU,OAAO;AAAA,IACjF;AAAA,IACA,OAAO,EAAE,OAAO,MAAM,OAAO,QAAQ;AAAA,IACrC,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,SAAS,cAAc,EAAE,QAAQ,MAAM,QAAQ,KAAK,MAAM,UAAU,WAAW,CAAC;AAAA,IAChF;AAAA,IACA,QAAQ,MAAM,aAAa,EAAE,GAAG,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,MAAM,CAAC;AAAA,IAChF,KAAK;AAAA,IACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,SAAS,YAAY,OAAO,OAAO,CAAC,OAAO,SAAS,SAAS,CAAC;AAAA,IAC9D,SAAS;AAAA,MACP,KAAK;AAAA,MACL,MAAM,CAAC,QAAQ,WAAW,QAAQ,GAAG;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR;AAAA,MACA,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,MAAM,KAAK,EAAE,IAAI,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,MAAM,QAAsB;AAC1C,SAAO,OAAO,QAAkC;AAC9C,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAQ,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG;AAAA,EAClE;AACF;AAEO,SAAS,eACd,OACA,UAA8B,CAAC,GACX;AACpB,QAAM,QAAQ,IAAI,MAAM;AACxB,cAAY,OAAO,KAAK;AACxB,QAAM,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS,KAAK;AAC5D,OAAK,MAAM,MAAM,MAAS;AAC1B,mBAAiB,OAAO,IAAI;AAC5B,SAAO;AACT;",
+  "sourcesContent": ["import { attachKernel } from '@ai-ecoverse/slicc-kernel';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { Provider } from '@earendil-works/pi-ai';\nimport type { Models } from '@earendil-works/pi-ai/models';\nimport {\n  createRegistry,\n  type ModelRef,\n  type Storage,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { CodingTools } from '@earendil-works/pi-durable/tools';\nimport { type Agent, type AgentOptions, openAgent } from './agent.ts';\nimport {\n  type ApprovalJudge,\n  approvalJudge,\n  judgeModelOf,\n  judgeSpender,\n  ownerIntent,\n  seedPolicy,\n  verdictRecorder,\n} from './approvals/index.ts';\nimport { browserGuard } from './browser/guard.ts';\nimport { attachChanges, CHANGES_MS } from './changes/index.ts';\nimport {\n  codemodeExtension,\n  codemodeTool,\n  disabledBySettings,\n  locateWasm,\n  sandboxFactory,\n} from './codemode/index.ts';\nimport { attachFreezer } from './freezer/index.ts';\nimport { lateGelatiere } from './gelatiere/index.ts';\nimport { type AgentHost, hostAgent } from './host.ts';\nimport { imageReads } from './images/index.ts';\nimport { createActivity } from './kernel/activity.ts';\nimport { type AgentUsers, agentUsers, warnSupport } from './kernel/agent-users.ts';\nimport type { KernelClient } from './kernel/client.ts';\nimport { HOME, kernelEnvironment, SliccKernelEnv } from './kernel/env.ts';\nimport { processGroups } from './kernel/groups.ts';\nimport { adminOver, type UserClient, type UserClients, userClients } from './kernel/users.ts';\nimport { AGENT_DIR, ROOT_HOME } from './layout.ts';\nimport { setupLicks } from './licks/index.ts';\nimport { lickTriage } from './licks/triage.ts';\nimport { type McpAccounts, setupMcp } from './mcp/index.ts';\nimport type { MemoryEntry } from './memory/format.ts';\nimport { setupMemory } from './memory/index.ts';\nimport { modelsCommand } from './models/index.ts';\nimport { pageOnly, type Transport, transportFetch } from './net.ts';\nimport { sliccPrompt } from './prompt.ts';\nimport { AZURE, azureBase, VAULT_KNOWN } from './providers.ts';\nimport { createPages } from './remote/pages.ts';\nimport { identity } from './scoops/identity.ts';\nimport { type Assets, packageAssets, type ScoopsRuntime, setupScoops } from './scoops/index.ts';\nimport { vaultCredentials } from './secrets/credentials.ts';\nimport {\n  BEDROCK_ENDPOINTS,\n  type ModelBases,\n  modelRoute,\n  vaultEndpoints,\n} from './secrets/endpoints.ts';\nimport { secretsExtension, shellGrants } from './secrets/extension.ts';\nimport { grantFetch, mcpFetch, vaultFetch } from './secrets/fetch.ts';\nimport { keysMoved, type Wiped, wipeLegacy } from './secrets/legacy.ts';\nimport { secretNames } from './secrets/names.ts';\nimport { type VaultRecords, vaultRecords } from './secrets/records.ts';\nimport { scrubWith } from './secrets/scrub.ts';\nimport { fileStore, type PlainStore } from './secrets/store.ts';\nimport { listenVault, Vault, WAITING_MS } from './secrets/vault.ts';\nimport { type Choosable, unfreeze, unfreezeCreated } from './selection.ts';\nimport {\n  BEDROCK,\n  createAgentSettings,\n  createSliccModels,\n  providerFields,\n  resolveDefaultModel,\n  sliccProviders,\n} from './settings.ts';\nimport { RELOAD_MS, setupSkills } from './skills/index.ts';\nimport { setupSprinkles } from './sprinkles/index.ts';\nimport { openOpfsSqliteStorage } from './sqlite.ts';\nimport {\n  agentVersion,\n  browserConnected,\n  commandsOnPath,\n  kernelBoot,\n  transportName,\n} from './system.ts';\nimport { titlesExtension } from './titles/extension.ts';\nimport { labeler, settingsText, titler } from './titles/generate.ts';\nimport { attachLabels } from './titles/labels.ts';\nimport { type KernelPorts, kernelPorts, serveConnections, type WorkerScope } from './worker.ts';\n\nexport interface AgentWorkerScope extends WorkerScope {\n  fetch: typeof fetch;\n  location: { origin: string };\n}\n\nexport type KernelAttach = (port: MessagePort) => Promise<KernelClient & { transport: Transport }>;\n\nexport interface AgentWorkerOptions {\n  model?: ModelRef;\n  providers?: Provider[];\n  attach?: KernelAttach;\n  store?: () => Promise<PlainStore>;\n  storage?: () => Promise<Storage>;\n  assets?: Assets;\n  codemodeWasm?: () => Promise<WebAssembly.Module | undefined>;\n  codemodeWorker?: string | URL;\n  catalog?: string;\n  users?: boolean;\n  mcpRedirect?: string;\n  approvalMs?: number;\n}\n\nexport function usersOf(\n  admin: MessagePort | undefined,\n  wanted: boolean | undefined,\n  attach: KernelAttach\n): UserClients | undefined {\n  if (!admin) return undefined;\n  if (wanted === false) {\n    admin.close();\n    return undefined;\n  }\n  return userClients(adminOver(admin), attach as (port: MessagePort) => Promise<UserClient>);\n}\n\nexport const STORE_DIR = '/.slicc';\nexport const ACCOUNTS_FILE = `${STORE_DIR}/accounts.json`;\n\nasync function attached(ports: Promise<KernelPorts>, options: AgentWorkerOptions) {\n  const wiped = await wipeLegacy();\n  const attach: KernelAttach = options.attach ?? attachKernel;\n  const { kernel, admin } = await ports;\n  const client = await attach(kernel);\n  const users = usersOf(admin, options.users, attach);\n  await warnSupport(users, client, options.users);\n  const home = new SliccKernelEnv(client, { cwd: HOME });\n  await privateStore(home);\n  return {\n    client,\n    users,\n    home,\n    wiped,\n    at: { home: HOME, ...(users ? { agentDir: AGENT_DIR } : {}) },\n  };\n}\n\nfunction privateStore(env: SliccKernelEnv): Promise<unknown> {\n  return env.exec(`mkdir -p ${STORE_DIR} && chmod 700 ${STORE_DIR}`, undefined, BACKGROUND_CONTEXT);\n}\n\nasync function codemodeTools(\n  client: KernelClient,\n  options: AgentWorkerOptions,\n  native: typeof fetch,\n  extra: Parameters<typeof codemodeTool>[0]['extra'],\n  dir = `${HOME}/.pi/agent`\n) {\n  const settings = await client.fs.readFile(`${dir}/settings.json`).catch(() => undefined);\n  if (disabledBySettings(settings === undefined ? undefined : new TextDecoder().decode(settings)))\n    return [];\n  const sandbox = sandboxFactory(\n    options.codemodeWasm ?? (() => locateWasm(native, new URL(import.meta.url))),\n    options.codemodeWorker\n  );\n  return [\n    codemodeTool({ declared: CodingTools.tools as readonly ToolRegistration[], sandbox, extra }),\n  ];\n}\n\nexport function seesImages(models: Pick<Models, 'getModel'>, ref: ModelRef | undefined): boolean {\n  const found = ref && models.getModel(ref.provider, ref.modelId);\n  return found ? found.input.includes('image') : true;\n}\n\nexport const MCP_CALLBACK = '/oauth/mcp-callback';\n\nasync function openUnfrozen(\n  options: AgentWorkerOptions,\n  { choosable: chosen }: { choosable: Choosable },\n  base: Omit<AgentOptions, 'storage' | 'beforeResume' | 'conversationCreated'>\n): Promise<Agent> {\n  const storage = await (options.storage ?? (() => openOpfsSqliteStorage()))();\n  return openAgent({\n    ...base,\n    storage,\n    conversationCreated: unfreezeCreated(chosen),\n    beforeResume: (harness, using) => unfreeze(harness, storage, chosen, using),\n  });\n}\n\nasync function secretsFor(home: SliccKernelEnv, vault: Vault) {\n  scrubWith(vault);\n  const names = secretNames(home, vault);\n  await names.refresh(BACKGROUND_CONTEXT);\n  return names;\n}\n\nexport function modelBases(\n  providers: readonly Provider[],\n  models: Pick<ReturnType<typeof createSliccModels>, 'getModels'>,\n  env: (providerId: string) => Readonly<Record<string, string>> | undefined = () => undefined\n): ModelBases[] {\n  return providers.map((provider) => ({\n    provider: provider.id,\n    urls: [\n      ...new Set(\n        [\n          provider.baseUrl,\n          ...models.getModels(provider.id).map((model) => model.baseUrl),\n          ...(provider.id === BEDROCK ? BEDROCK_ENDPOINTS : []),\n          ...(provider.id === AZURE ? [azureBase(env(provider.id) ?? {})] : []),\n        ].filter((url): url is string => typeof url === 'string' && url !== '')\n      ),\n    ],\n  }));\n}\n\nfunction mcpVault(\n  vault: Vault,\n  made: { store: PlainStore; records: VaultRecords; endpoints: ReturnType<typeof vaultEndpoints> }\n) {\n  const { store, records, endpoints } = made;\n  return {\n    store,\n    vault: {\n      records,\n      fetch: (server: string, base: typeof fetch) => mcpFetch(vault, base, server),\n      grant: (server: string, base: typeof fetch) => grantFetch(vault, server, base),\n      servers: endpoints.servers,\n      token: endpoints.token,\n    },\n  };\n}\n\nfunction hostSecrets(\n  vault: Vault,\n  names: Awaited<ReturnType<typeof secretsFor>>,\n  parts: readonly { close(): void }[]\n) {\n  return {\n    vault: vault.state,\n    list: () => names.state.value,\n    close: () => {\n      for (const part of parts) part.close();\n    },\n  };\n}\n\nasync function modelsOf(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions,\n  given: { vault: Vault; home: SliccKernelEnv; transport: typeof fetch; version: string }\n) {\n  const { vault, home, transport, version } = given;\n  const store = await (options.store ?? (async () => fileStore(home, ACCOUNTS_FILE)))();\n  const records = vaultRecords(vault);\n  const loaded = records.refresh(BACKGROUND_CONTEXT).catch(() => undefined);\n  const providers = options.providers ?? sliccProviders(version);\n  const fields = await providerFields(store, providers);\n  const credentials = vaultCredentials(records, fields.env, fields.ready);\n  const models = createSliccModels(credentials, providers);\n  const bases = () => modelBases(providers, models, fields.env);\n  const own = () => bases().filter(({ provider }) => !VAULT_KNOWN.has(provider));\n  scope.fetch = vaultFetch(\n    vault,\n    transport,\n    modelRoute(bases, () => records.state.value),\n    records.rejecting\n  );\n  const endpoints = vaultEndpoints(vault);\n  void endpoints.models(own()).catch(() => undefined);\n  const defaultModel = async () => {\n    await Promise.race([loaded, new Promise((resolve) => setTimeout(resolve, WAITING_MS))]);\n    return resolveDefaultModel(credentials, providers, models);\n  };\n  return { store, records, providers, fields, models, bases, own, endpoints, defaultModel };\n}\n\nfunction baseRegistry(facts: Awaited<ReturnType<typeof factsOf>>, origin: string) {\n  const registry = createRegistry();\n  registry.install(CodingTools);\n  registry.install(browserGuard([origin]));\n  registry.install(sliccPrompt(facts));\n  const read = (CodingTools.tools as readonly ToolRegistration[]).find(\n    (tool) => tool.name === 'read'\n  ) as ToolRegistration;\n  registry.install(imageReads(read));\n  return registry;\n}\n\nasync function factsOf(client: KernelClient & { transport: Transport }, native: typeof fetch) {\n  return {\n    version: await agentVersion((url) => native(url)),\n    commands: await commandsOnPath(client),\n    transport: transportName(client.transport),\n    browser: await browserConnected(client),\n  };\n}\n\nfunction routeFetch(scope: AgentWorkerScope, client: KernelClient & { transport: Transport }) {\n  const native = scope.fetch.bind(scope);\n  const loopback = client.loopbackFetch?.bind(client);\n  const transport = transportFetch(client.transport, scope.location.origin, native, loopback);\n  scope.fetch = transport;\n  return { native, transport };\n}\n\nasync function prepare(\n  scope: AgentWorkerScope,\n  kernel: { client: KernelClient & { transport: Transport }; home: SliccKernelEnv; vault: Vault },\n  options: AgentWorkerOptions\n) {\n  const names = await secretsFor(kernel.home, kernel.vault);\n  const { native, transport } = routeFetch(scope, kernel.client);\n  const facts = await factsOf(kernel.client, native);\n  const made = await modelsOf(scope, options, {\n    vault: kernel.vault,\n    home: kernel.home,\n    transport,\n    version: facts.version,\n  });\n  return {\n    names,\n    native,\n    transport,\n    facts,\n    ...made,\n    registry: baseRegistry(facts, scope.location.origin),\n  };\n}\n\nfunction modelsOfAgent(\n  agent: Agent,\n  settings: Awaited<ReturnType<typeof createAgentSettings>>,\n  catalog: Models,\n  vault: Vault\n) {\n  const locked = () => vault.state.value.locked !== 'no';\n  return modelsCommand({ agents: agent.agents, settings, catalog, locked });\n}\n\nasync function settingsOf(\n  made: Awaited<ReturnType<typeof modelsOf>>,\n  mcp: McpAccounts,\n  moved: { agent: Agent; vault: Vault; wiped: Wiped }\n) {\n  const { models, records, fields, providers, own, endpoints } = made;\n  const keys = await keysMoved(moved.agent.harness, { records, vault: moved.vault }, moved.wiped);\n  const settings = await createAgentSettings(models, { records, fields }, providers, {\n    mcp,\n    moved: keys,\n  });\n  settings.state.subscribe(() => void endpoints.models(own()).catch(() => undefined));\n  return settings;\n}\n\nasync function setupApprovals(\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  agent: Agent,\n  stored: { readonly value: readonly MemoryEntry[] | undefined },\n  options: Pick<AgentWorkerOptions, 'approvalMs'>\n) {\n  const memories = () => stored.value;\n  const { approvalMs } = options;\n  await seedPolicy(home, BACKGROUND_CONTEXT).catch(() => false);\n  const settings = settingsText(home, HOME, at.agentDir);\n  const intent = ownerIntent({ env: home, agents: agent.agents, memories });\n  const judge: ApprovalJudge = {\n    judge: approvalJudge({\n      models,\n      model: async (context) => judgeModelOf(await settings(context)),\n      intent,\n      spend: judgeSpender((agentId, context) => agent.agents.conversation(agentId, context)),\n    }),\n    record: verdictRecorder((agentId, context) => agent.agents.conversation(agentId, context)),\n  };\n  return { judge, intent, ...(approvalMs ? { approvalMs } : {}) };\n}\n\nfunction setupTitles(\n  registry: ReturnType<typeof createRegistry>,\n  models: Models,\n  home: SliccKernelEnv,\n  at: { home: string; agentDir?: string },\n  opened: () => Agent | undefined\n) {\n  const settings = settingsText(home, HOME, at.agentDir);\n  const titleFn = titler(models, settings);\n  const titles = titlesExtension({\n    agents: () => opened()?.agents,\n    harness: () => opened()?.harness,\n    title: () => titleFn,\n  });\n  registry.install(titles.extension);\n  return { titleFn, cancel: titles.cancel, label: labeler(models, settings) };\n}\n\nfunction freezerOf(\n  agent: Agent,\n  parts: {\n    home: SliccKernelEnv;\n    memory: ReturnType<typeof setupMemory>;\n    titles: ReturnType<typeof setupTitles>;\n    people: AgentUsers | undefined;\n    users: UserClients | undefined;\n    ready: { providers: readonly Provider[]; models: ReturnType<typeof createSliccModels> };\n  }\n) {\n  const { home, memory, titles, people, users, ready } = parts;\n  return attachFreezer({\n    harness: agent.harness,\n    agents: agent.agents,\n    env: home,\n    extract: memory.extract,\n    title: titles.titleFn,\n    cancelTitle: titles.cancel,\n    ...(people ? { layout: people.layout } : {}),\n    imports: {\n      env: home,\n      memoryHome: people ? ROOT_HOME : HOME,\n      catalog: ready.models,\n      providers: ready.providers,\n      ...(users ? { users: users.users } : {}),\n      ...(people ? { envOf: (cone: string) => people.envOfAgent(`cone:${cone}`) } : {}),\n    },\n  });\n}\n\nasync function start(\n  scope: AgentWorkerScope,\n  ports: Promise<KernelPorts>,\n  options: AgentWorkerOptions,\n  vault: Vault\n): Promise<AgentHost> {\n  const { client, users, home, at, wiped } = await attached(ports, options);\n  const ready = await prepare(scope, { client, home, vault }, options);\n  const { names, native, transport, facts, models, registry, records, endpoints } = ready;\n  const memory = setupMemory(registry);\n  const coding = CodingTools.tools as readonly ToolRegistration[];\n  const mcp = setupMcp(registry);\n  const codemode = await codemodeTools(client, options, native, mcp.codemode, at.agentDir);\n  registry.install(codemodeExtension(codemode));\n  const licks = setupLicks(registry, transport);\n  licks.licks.triage(lickTriage(models));\n  const scoops = setupScoops(registry, licks.licks, [...coding, ...codemode, ...memory.tools]);\n  const skills = setupSkills(registry, licks.licks);\n  registry.install(secretsExtension({ names, vault }));\n  const titles = setupTitles(registry, models, home, at, () => opened);\n  const [activity, groups] = [createActivity(), processGroups(client)];\n  const model = options.model ?? (await ready.defaultModel());\n  let opened: Agent | undefined;\n  const people = users ? agentUsers(users, client, home, () => opened?.agents) : undefined;\n  const environment = kernelEnvironment(client, {\n    activity,\n    groups,\n    identify: identity(() => opened?.agents, model),\n    scrub: vault,\n    spawn: shellGrants(names),\n    ...(people ? { route: people.route } : {}),\n  });\n  const agent = await openUnfrozen(options, scoops, { models, model, registry, env: environment });\n  opened = agent;\n  await people?.start(agent.agents);\n  const sources = licks.attach(agent, {\n    env: home,\n    home: HOME,\n    activity,\n    ...(people ? { dirs: () => people.lickDirs(), cronUser: people.cronUser.bind(people) } : {}),\n  });\n  await sources.start(BACKGROUND_CONTEXT);\n  const booted = { version: facts.version, boot: await kernelBoot(client) };\n  await sources.boot(booted, BACKGROUND_CONTEXT);\n  const skillsRuntime = await skills.attach(\n    {\n      env: home,\n      ...at,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people ? { people: people.people } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const mcpRuntime = await mcp.attach(\n    {\n      env: home,\n      ...at,\n      ...mcpVault(vault, ready),\n      licks: licks.licks,\n      fetch: transport,\n      version: facts.version,\n      reloadMs: RELOAD_MS,\n      codemode: codemode.length > 0,\n      cors: pageOnly(client.transport),\n      redirect: options.mcpRedirect ?? new URL(MCP_CALLBACK, scope.location.origin).href,\n    },\n    BACKGROUND_CONTEXT\n  );\n  const gelatiere = lateGelatiere();\n  const sprinkles = await setupSprinkles().attach(\n    {\n      intercept: gelatiere.intercept,\n      harness: agent.harness,\n      agents: agent.agents,\n      licks: licks.licks,\n      env: home,\n      assets: options.assets ?? packageAssets(),\n      reloadMs: RELOAD_MS,\n      ...(people?.sprinkles() ?? {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  people?.follow([sources, skillsRuntime, sprinkles]);\n  let roles: ScoopsRuntime | undefined;\n  const memoryRuntime = await memory.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      env: home,\n      ...at,\n      ...(people ? { home: ROOT_HOME } : {}),\n      reloadMs: RELOAD_MS,\n      roles: async (using) => roles?.roles(using),\n    },\n    BACKGROUND_CONTEXT\n  );\n  const freezer = freezerOf(agent, { home, memory, titles, people, users, ready });\n  licks.licks.guard(freezer.frozenTarget);\n  const settings = await settingsOf(ready, mcpRuntime, { agent, vault, wiped });\n  const pages = createPages({ claim: sprinkles.claim });\n  const runtime = await scoops.attach(\n    {\n      harness: agent.harness,\n      agents: agent.agents,\n      groups,\n      env: home,\n      envOf: async (conversationId, context) => environment({ conversationId }, context),\n      ...at,\n      ...(people\n        ? { layout: people.layout, spools: people.spools, enforced: people.enforced }\n        : {}),\n      alive: alive(client),\n      reads: skillsRuntime.dirs,\n      memory: memoryRuntime.command,\n      gelatiere: gelatiere.command,\n      freezer: freezer.command,\n      models: modelsOfAgent(agent, settings, models, vault),\n      panel: pages.command,\n      webhook: sources.webhook,\n      mcp: mcp.direct,\n      ...(options.assets ? { assets: options.assets } : {}),\n    },\n    BACKGROUND_CONTEXT\n  );\n  roles = runtime;\n  gelatiere.attach({\n    agents: agent.agents,\n    licks: licks.licks,\n    env: home,\n    home: HOME,\n    ...(await people?.gelatiere(home)),\n    scoops: scoops.scoops,\n    roles: runtime.roles,\n    assets: options.assets ?? packageAssets(),\n    fetch: scope.fetch,\n    skills: skillsRuntime.skills,\n    ...(options.catalog ? { catalog: options.catalog } : {}),\n  });\n  await memoryRuntime.reload(BACKGROUND_CONTEXT).catch(() => undefined);\n  return hostAgent(agent, {\n    ...(await setupApprovals(models, home, at, agent, memoryRuntime.memories, options)),\n    settings,\n    licks: { licks: licks.licks, sources },\n    scoops: { scoops: scoops.scoops, runtime },\n    skills: skillsRuntime,\n    sprinkles,\n    memory: memoryRuntime,\n    freezer,\n    changes: attachChanges({ agents: agent.agents, env: home, reloadMs: CHANGES_MS }),\n    pages,\n    labels: await attachLabels({ ...agent, label: titles.label, vault: vault.state }),\n    mcp: mcpRuntime,\n    ...(users ? { users } : {}),\n    secrets: hostSecrets(vault, names, [names, records, endpoints]),\n    uploads: {\n      env: environment,\n      sees: (ref) => seesImages(models, ref),\n    },\n    monitor: {\n      kernel: client,\n      groups,\n      ...(users ? { users: () => users.users.list() } : {}),\n    },\n  });\n}\n\nexport function alive(client: KernelClient) {\n  return async (pid: number): Promise<boolean> => {\n    if (!client.ps) return true;\n    return (await client.ps()).some((process) => process.pid === pid);\n  };\n}\n\nexport function runAgentWorker(\n  scope: AgentWorkerScope,\n  options: AgentWorkerOptions = {}\n): Promise<AgentHost> {\n  const vault = new Vault();\n  listenVault(scope, vault);\n  const host = start(scope, kernelPorts(scope), options, vault);\n  host.catch(() => undefined);\n  serveConnections(scope, host);\n  return host;\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,0BAA0B;AAGnC;AAAA,EACE;AAAA,OAIK;AACP,SAAS,mBAAmB;AAC5B,SAAwC,iBAAiB;AACzD;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe,kBAAkB;AAC1C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAC9B,SAAS,qBAAqB;AAC9B,SAAyB,iBAAiB;AAC1C,SAAS,kBAAkB;AAC3B,SAAS,sBAAsB;AAC/B,SAA0B,YAAY,mBAAmB;AAEzD,SAAS,MAAM,mBAAmB,sBAAsB;AACxD,SAAS,qBAAqB;AAC9B,SAAS,WAA8C,mBAAmB;AAC1E,SAAS,WAAW,iBAAiB;AACrC,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAC3B,SAA2B,gBAAgB;AAE3C,SAAS,mBAAmB;AAC5B,SAAS,qBAAqB;AAC9B,SAAS,UAA0B,sBAAsB;AACzD,SAAS,mBAAmB;AAC5B,SAAS,OAAO,WAAW,mBAAmB;AAC9C,SAAS,mBAAmB;AAC5B,SAAS,gBAAgB;AACzB,SAAsB,eAAmC,mBAAmB;AAC5E,SAAS,wBAAwB;AACjC;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB,mBAAmB;AAC9C,SAAS,YAAY,UAAU,kBAAkB;AACjD,SAAS,WAAuB,kBAAkB;AAClD,SAAS,mBAAmB;AAC5B,SAA4B,oBAAoB;AAChD,SAAS,iBAAiB;AAC1B,SAAS,iBAAkC;AAC3C,SAAS,aAAa,OAAO,kBAAkB;AAC/C,SAAyB,UAAU,uBAAuB;AAC1D;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW,mBAAmB;AACvC,SAAS,sBAAsB;AAC/B,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,uBAAuB;AAChC,SAAS,SAAS,cAAc,cAAc;AAC9C,SAAS,oBAAoB;AAC7B,SAA2B,aAAa,wBAA0C;AAwB3E,SAAS,QACd,OACA,QACA,QACyB;AACzB,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,WAAW,OAAO;AACpB,UAAM,MAAM;AACZ,WAAO;AAAA,EACT;AACA,SAAO,YAAY,UAAU,KAAK,GAAG,MAAoD;AAC3F;AAEO,MAAM,YAAY;AAClB,MAAM,gBAAgB,GAAG,SAAS;AAEzC,eAAe,SAAS,OAA6B,SAA6B;AAChF,QAAM,QAAQ,MAAM,WAAW;AAC/B,QAAM,SAAuB,QAAQ,UAAU;AAC/C,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM;AAChC,QAAM,SAAS,MAAM,OAAO,MAAM;AAClC,QAAM,QAAQ,QAAQ,OAAO,QAAQ,OAAO,MAAM;AAClD,QAAM,YAAY,OAAO,QAAQ,QAAQ,KAAK;AAC9C,QAAM,OAAO,IAAI,eAAe,QAAQ,EAAE,KAAK,KAAK,CAAC;AACrD,QAAM,aAAa,IAAI;AACvB,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,IAAI,EAAE,MAAM,MAAM,GAAI,QAAQ,EAAE,UAAU,UAAU,IAAI,CAAC,EAAG;AAAA,EAC9D;AACF;AAEA,SAAS,aAAa,KAAuC;AAC3D,SAAO,IAAI,KAAK,YAAY,SAAS,iBAAiB,SAAS,IAAI,QAAW,kBAAkB;AAClG;AAEA,eAAe,cACb,QACA,SACA,QACA,OACA,MAAM,GAAG,IAAI,cACb;AACA,QAAM,WAAW,MAAM,OAAO,GAAG,SAAS,GAAG,GAAG,gBAAgB,EAAE,MAAM,MAAM,MAAS;AACvF,MAAI,mBAAmB,aAAa,SAAY,SAAY,IAAI,YAAY,EAAE,OAAO,QAAQ,CAAC;AAC5F,WAAO,CAAC;AACV,QAAM,UAAU;AAAA,IACd,QAAQ,iBAAiB,MAAM,WAAW,QAAQ,IAAI,IAAI,YAAY,GAAG,CAAC;AAAA,IAC1E,QAAQ;AAAA,EACV;AACA,SAAO;AAAA,IACL,aAAa,EAAE,UAAU,YAAY,OAAsC,SAAS,MAAM,CAAC;AAAA,EAC7F;AACF;AAEO,SAAS,WAAW,QAAkC,KAAoC;AAC/F,QAAM,QAAQ,OAAO,OAAO,SAAS,IAAI,UAAU,IAAI,OAAO;AAC9D,SAAO,QAAQ,MAAM,MAAM,SAAS,OAAO,IAAI;AACjD;AAEO,MAAM,eAAe;AAE5B,eAAe,aACb,SACA,EAAE,WAAW,OAAO,GACpB,MACgB;AAChB,QAAM,UAAU,OAAO,QAAQ,YAAY,MAAM,sBAAsB,IAAI;AAC3E,SAAO,UAAU;AAAA,IACf,GAAG;AAAA,IACH;AAAA,IACA,qBAAqB,gBAAgB,MAAM;AAAA,IAC3C,cAAc,CAAC,SAAS,UAAU,SAAS,SAAS,SAAS,QAAQ,KAAK;AAAA,EAC5E,CAAC;AACH;AAEA,eAAe,WAAW,MAAsB,OAAc;AAC5D,YAAU,KAAK;AACf,QAAM,QAAQ,YAAY,MAAM,KAAK;AACrC,QAAM,MAAM,QAAQ,kBAAkB;AACtC,SAAO;AACT;AAEO,SAAS,WACd,WACA,QACA,MAA4E,MAAM,QACpE;AACd,SAAO,UAAU,IAAI,CAAC,cAAc;AAAA,IAClC,UAAU,SAAS;AAAA,IACnB,MAAM;AAAA,MACJ,GAAG,IAAI;AAAA,QACL;AAAA,UACE,SAAS;AAAA,UACT,GAAG,OAAO,UAAU,SAAS,EAAE,EAAE,IAAI,CAAC,UAAU,MAAM,OAAO;AAAA,UAC7D,GAAI,SAAS,OAAO,UAAU,oBAAoB,CAAC;AAAA,UACnD,GAAI,SAAS,OAAO,QAAQ,CAAC,UAAU,IAAI,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,QACrE,EAAE,OAAO,CAAC,QAAuB,OAAO,QAAQ,YAAY,QAAQ,EAAE;AAAA,MACxE;AAAA,IACF;AAAA,EACF,EAAE;AACJ;AAEA,SAAS,SACP,OACA,MACA;AACA,QAAM,EAAE,OAAO,SAAS,UAAU,IAAI;AACtC,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,MACL;AAAA,MACA,OAAO,CAAC,QAAgB,SAAuB,SAAS,OAAO,MAAM,MAAM;AAAA,MAC3E,OAAO,CAAC,QAAgB,SAAuB,WAAW,OAAO,QAAQ,IAAI;AAAA,MAC7E,SAAS,UAAU;AAAA,MACnB,OAAO,UAAU;AAAA,IACnB;AAAA,EACF;AACF;AAEA,SAAS,YACP,OACA,OACA,OACA;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,MAAM,MAAM,MAAM,MAAM;AAAA,IACxB,OAAO,MAAM;AACX,iBAAW,QAAQ,MAAO,MAAK,MAAM;AAAA,IACvC;AAAA,EACF;AACF;AAEA,eAAe,SACb,OACA,SACA,OACA;AACA,QAAM,EAAE,OAAO,MAAM,WAAW,QAAQ,IAAI;AAC5C,QAAM,QAAQ,OAAO,QAAQ,UAAU,YAAY,UAAU,MAAM,aAAa,IAAI;AACpF,QAAM,UAAU,aAAa,KAAK;AAClC,QAAM,SAAS,QAAQ,QAAQ,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACxE,QAAM,YAAY,QAAQ,aAAa,eAAe,OAAO;AAC7D,QAAM,SAAS,MAAM,eAAe,OAAO,SAAS;AACpD,QAAM,cAAc,iBAAiB,SAAS,OAAO,KAAK,OAAO,KAAK;AACtE,QAAM,SAAS,kBAAkB,aAAa,SAAS;AACvD,QAAM,QAAQ,MAAM,WAAW,WAAW,QAAQ,OAAO,GAAG;AAC5D,QAAM,MAAM,MAAM,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,MAAM,CAAC,YAAY,IAAI,QAAQ,CAAC;AAC7E,QAAM,QAAQ;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,OAAO,MAAM,QAAQ,MAAM,KAAK;AAAA,IAC3C,QAAQ;AAAA,EACV;AACA,QAAM,YAAY,eAAe,KAAK;AACtC,OAAK,UAAU,OAAO,IAAI,CAAC,EAAE,MAAM,MAAM,MAAS;AAClD,QAAM,eAAe,YAAY;AAC/B,UAAM,QAAQ,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,UAAU,CAAC,CAAC,CAAC;AACtF,WAAO,oBAAoB,aAAa,WAAW,MAAM;AAAA,EAC3D;AACA,SAAO,EAAE,OAAO,SAAS,WAAW,QAAQ,QAAQ,OAAO,KAAK,WAAW,aAAa;AAC1F;AAEA,SAAS,aAAa,OAA4C,QAAgB;AAChF,QAAM,WAAW,eAAe;AAChC,WAAS,QAAQ,WAAW;AAC5B,WAAS,QAAQ,aAAa,CAAC,MAAM,CAAC,CAAC;AACvC,WAAS,QAAQ,YAAY,KAAK,CAAC;AACnC,QAAM,OAAQ,YAAY,MAAsC;AAAA,IAC9D,CAAC,SAAS,KAAK,SAAS;AAAA,EAC1B;AACA,WAAS,QAAQ,WAAW,IAAI,CAAC;AACjC,SAAO;AACT;AAEA,eAAe,QAAQ,QAAiD,QAAsB;AAC5F,SAAO;AAAA,IACL,SAAS,MAAM,aAAa,CAAC,QAAQ,OAAO,GAAG,CAAC;AAAA,IAChD,UAAU,MAAM,eAAe,MAAM;AAAA,IACrC,WAAW,cAAc,OAAO,SAAS;AAAA,IACzC,SAAS,MAAM,iBAAiB,MAAM;AAAA,EACxC;AACF;AAEA,SAAS,WAAW,OAAyB,QAAiD;AAC5F,QAAM,SAAS,MAAM,MAAM,KAAK,KAAK;AACrC,QAAM,WAAW,OAAO,eAAe,KAAK,MAAM;AAClD,QAAM,YAAY,eAAe,OAAO,WAAW,MAAM,SAAS,QAAQ,QAAQ,QAAQ;AAC1F,QAAM,QAAQ;AACd,SAAO,EAAE,QAAQ,UAAU;AAC7B;AAEA,eAAe,QACb,OACA,QACA,SACA;AACA,QAAM,QAAQ,MAAM,WAAW,OAAO,MAAM,OAAO,KAAK;AACxD,QAAM,EAAE,QAAQ,UAAU,IAAI,WAAW,OAAO,OAAO,MAAM;AAC7D,QAAM,QAAQ,MAAM,QAAQ,OAAO,QAAQ,MAAM;AACjD,QAAM,OAAO,MAAM,SAAS,OAAO,SAAS;AAAA,IAC1C,OAAO,OAAO;AAAA,IACd,MAAM,OAAO;AAAA,IACb;AAAA,IACA,SAAS,MAAM;AAAA,EACjB,CAAC;AACD,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH,UAAU,aAAa,OAAO,MAAM,SAAS,MAAM;AAAA,EACrD;AACF;AAEA,SAAS,cACP,OACA,UACA,SACA,OACA;AACA,QAAM,SAAS,MAAM,MAAM,MAAM,MAAM,WAAW;AAClD,SAAO,cAAc,EAAE,QAAQ,MAAM,QAAQ,UAAU,SAAS,OAAO,CAAC;AAC1E;AAEA,eAAe,WACb,MACA,KACA,OACA;AACA,QAAM,EAAE,QAAQ,SAAS,QAAQ,WAAW,KAAK,UAAU,IAAI;AAC/D,QAAM,OAAO,MAAM,UAAU,MAAM,MAAM,SAAS,EAAE,SAAS,OAAO,MAAM,MAAM,GAAG,MAAM,KAAK;AAC9F,QAAM,WAAW,MAAM,oBAAoB,QAAQ,EAAE,SAAS,OAAO,GAAG,WAAW;AAAA,IACjF;AAAA,IACA,OAAO;AAAA,EACT,CAAC;AACD,WAAS,MAAM,UAAU,MAAM,KAAK,UAAU,OAAO,IAAI,CAAC,EAAE,MAAM,MAAM,MAAS,CAAC;AAClF,SAAO;AACT;AAEA,eAAe,eACb,QACA,MACA,IACA,OACA,QACA,SACA;AACA,QAAM,WAAW,MAAM,OAAO;AAC9B,QAAM,EAAE,WAAW,IAAI;AACvB,QAAM,WAAW,MAAM,kBAAkB,EAAE,MAAM,MAAM,KAAK;AAC5D,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,SAAS,YAAY,EAAE,KAAK,MAAM,QAAQ,MAAM,QAAQ,SAAS,CAAC;AACxE,QAAM,QAAuB;AAAA,IAC3B,OAAO,cAAc;AAAA,MACnB;AAAA,MACA,OAAO,OAAO,YAAY,aAAa,MAAM,SAAS,OAAO,CAAC;AAAA,MAC9D;AAAA,MACA,OAAO,aAAa,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,IACvF,CAAC;AAAA,IACD,QAAQ,gBAAgB,CAAC,SAAS,YAAY,MAAM,OAAO,aAAa,SAAS,OAAO,CAAC;AAAA,EAC3F;AACA,SAAO,EAAE,OAAO,QAAQ,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC,EAAG;AAChE;AAEA,SAAS,YACP,UACA,QACA,MACA,IACA,QACA;AACA,QAAM,WAAW,aAAa,MAAM,MAAM,GAAG,QAAQ;AACrD,QAAM,UAAU,OAAO,QAAQ,QAAQ;AACvC,QAAM,SAAS,gBAAgB;AAAA,IAC7B,QAAQ,MAAM,OAAO,GAAG;AAAA,IACxB,SAAS,MAAM,OAAO,GAAG;AAAA,IACzB,OAAO,MAAM;AAAA,EACf,CAAC;AACD,WAAS,QAAQ,OAAO,SAAS;AACjC,SAAO,EAAE,SAAS,QAAQ,OAAO,QAAQ,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AAC5E;AAEA,SAAS,UACP,OACA,OAQA;AACA,QAAM,EAAE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,IAAI;AACvD,SAAO,cAAc;AAAA,IACnB,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,KAAK;AAAA,IACL,SAAS,OAAO;AAAA,IAChB,OAAO,OAAO;AAAA,IACd,aAAa,OAAO;AAAA,IACpB,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC1C,SAAS;AAAA,MACP,KAAK;AAAA,MACL,YAAY,SAAS,YAAY;AAAA,MACjC,SAAS,MAAM;AAAA,MACf,WAAW,MAAM;AAAA,MACjB,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,MACtC,GAAI,SAAS,EAAE,OAAO,CAAC,SAAiB,OAAO,WAAW,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC;AAAA,IACjF;AAAA,EACF,CAAC;AACH;AAEA,eAAe,MACb,OACA,OACA,SACA,OACoB;AACpB,QAAM,EAAE,QAAQ,OAAO,MAAM,IAAI,MAAM,IAAI,MAAM,SAAS,OAAO,OAAO;AACxE,QAAM,QAAQ,MAAM,QAAQ,OAAO,EAAE,QAAQ,MAAM,MAAM,GAAG,OAAO;AACnE,QAAM,EAAE,OAAO,QAAQ,WAAW,OAAO,QAAQ,UAAU,SAAS,UAAU,IAAI;AAClF,QAAM,SAAS,YAAY,QAAQ;AACnC,QAAM,SAAS,YAAY;AAC3B,QAAM,MAAM,SAAS,QAAQ;AAC7B,QAAM,WAAW,MAAM,cAAc,QAAQ,SAAS,QAAQ,IAAI,UAAU,GAAG,QAAQ;AACvF,WAAS,QAAQ,kBAAkB,QAAQ,CAAC;AAC5C,QAAM,QAAQ,WAAW,UAAU,SAAS;AAC5C,QAAM,MAAM,OAAO,WAAW,MAAM,CAAC;AACrC,QAAM,SAAS,YAAY,UAAU,MAAM,OAAO,CAAC,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,KAAK,CAAC;AAC3F,QAAM,SAAS,YAAY,UAAU,MAAM,KAAK;AAChD,WAAS,QAAQ,iBAAiB,EAAE,OAAO,MAAM,CAAC,CAAC;AACnD,QAAM,SAAS,YAAY,UAAU,QAAQ,MAAM,IAAI,MAAM,MAAM;AACnE,QAAM,CAAC,UAAU,MAAM,IAAI,CAAC,eAAe,GAAG,cAAc,MAAM,CAAC;AACnE,QAAM,QAAQ,QAAQ,SAAU,MAAM,MAAM,aAAa;AACzD,MAAI;AACJ,QAAM,SAAS,QAAQ,WAAW,OAAO,QAAQ,MAAM,MAAM,QAAQ,MAAM,IAAI;AAC/E,QAAM,cAAc,kBAAkB,QAAQ;AAAA,IAC5C;AAAA,IACA;AAAA,IACA,UAAU,SAAS,MAAM,QAAQ,QAAQ,KAAK;AAAA,IAC9C,OAAO;AAAA,IACP,OAAO,YAAY,KAAK;AAAA,IACxB,GAAI,SAAS,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,EAC1C,CAAC;AACD,QAAM,QAAQ,MAAM,aAAa,SAAS,QAAQ,EAAE,QAAQ,OAAO,UAAU,KAAK,YAAY,CAAC;AAC/F,WAAS;AACT,QAAM,QAAQ,MAAM,MAAM,MAAM;AAChC,QAAM,UAAU,MAAM,OAAO,OAAO;AAAA,IAClC,KAAK;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,GAAI,SAAS,EAAE,MAAM,MAAM,OAAO,SAAS,GAAG,UAAU,OAAO,SAAS,KAAK,MAAM,EAAE,IAAI,CAAC;AAAA,EAC5F,CAAC;AACD,QAAM,QAAQ,MAAM,kBAAkB;AACtC,QAAM,SAAS,EAAE,SAAS,MAAM,SAAS,MAAM,MAAM,WAAW,MAAM,EAAE;AACxE,QAAM,QAAQ,KAAK,QAAQ,kBAAkB;AAC7C,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,SAAS,EAAE,QAAQ,OAAO,OAAO,IAAI,CAAC;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,aAAa,MAAM,IAAI;AAAA,IAC3B;AAAA,MACE,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAG,SAAS,OAAO,KAAK;AAAA,MACxB,OAAO,MAAM;AAAA,MACb,OAAO;AAAA,MACP,SAAS,MAAM;AAAA,MACf,UAAU;AAAA,MACV,UAAU,SAAS,SAAS;AAAA,MAC5B,MAAM,SAAS,OAAO,SAAS;AAAA,MAC/B,UAAU,QAAQ,eAAe,IAAI,IAAI,cAAc,MAAM,SAAS,MAAM,EAAE;AAAA,IAChF;AAAA,IACA;AAAA,EACF;AACA,QAAM,YAAY,cAAc;AAChC,QAAM,YAAY,MAAM,eAAe,EAAE;AAAA,IACvC;AAAA,MACE,WAAW,UAAU;AAAA,MACrB,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,OAAO,MAAM;AAAA,MACb,KAAK;AAAA,MACL,QAAQ,QAAQ,UAAU,cAAc;AAAA,MACxC,UAAU;AAAA,MACV,GAAI,QAAQ,UAAU,KAAK,CAAC;AAAA,IAC9B;AAAA,IACA;AAAA,EACF;AACA,UAAQ,OAAO,CAAC,SAAS,eAAe,SAAS,CAAC;AAClD,MAAI;AACJ,QAAM,gBAAgB,MAAM,OAAO;AAAA,IACjC;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd,KAAK;AAAA,MACL,GAAG;AAAA,MACH,GAAI,SAAS,EAAE,MAAM,UAAU,IAAI,CAAC;AAAA,MACpC,UAAU;AAAA,MACV,OAAO,OAAO,UAAU,OAAO,MAAM,KAAK;AAAA,IAC5C;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,UAAU,OAAO,EAAE,MAAM,QAAQ,QAAQ,QAAQ,OAAO,MAAM,CAAC;AAC/E,QAAM,MAAM,MAAM,QAAQ,YAAY;AACtC,QAAM,WAAW,MAAM,WAAW,OAAO,YAAY,EAAE,OAAO,OAAO,MAAM,CAAC;AAC5E,QAAM,QAAQ,YAAY,EAAE,OAAO,UAAU,MAAM,CAAC;AACpD,QAAM,UAAU,MAAM,OAAO;AAAA,IAC3B;AAAA,MACE,SAAS,MAAM;AAAA,MACf,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,KAAK;AAAA,MACL,OAAO,OAAO,gBAAgB,YAAY,YAAY,EAAE,eAAe,GAAG,OAAO;AAAA,MACjF,GAAG;AAAA,MACH,GAAI,SACA,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,QAAQ,UAAU,OAAO,SAAS,IAC1E,CAAC;AAAA,MACL,OAAO,MAAM,MAAM;AAAA,MACnB,OAAO,cAAc;AAAA,MACrB,QAAQ,cAAc;AAAA,MACtB,WAAW,UAAU;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,QAAQ,cAAc,OAAO,UAAU,QAAQ,KAAK;AAAA,MACpD,OAAO,MAAM;AAAA,MACb,SAAS,QAAQ;AAAA,MACjB,KAAK,IAAI;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACrD;AAAA,IACA;AAAA,EACF;AACA,UAAQ;AACR,YAAU,OAAO;AAAA,IACf,QAAQ,MAAM;AAAA,IACd,OAAO,MAAM;AAAA,IACb,KAAK;AAAA,IACL,MAAM;AAAA,IACN,GAAI,MAAM,QAAQ,UAAU,IAAI;AAAA,IAChC,QAAQ,OAAO;AAAA,IACf,OAAO,QAAQ;AAAA,IACf,QAAQ,QAAQ,UAAU,cAAc;AAAA,IACxC,OAAO,MAAM;AAAA,IACb,QAAQ,cAAc;AAAA,IACtB,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACxD,CAAC;AACD,QAAM,cAAc,OAAO,kBAAkB,EAAE,MAAM,MAAM,MAAS;AACpE,SAAO,UAAU,OAAO;AAAA,IACtB,GAAI,MAAM,eAAe,QAAQ,MAAM,IAAI,OAAO,cAAc,UAAU,OAAO;AAAA,IACjF;AAAA,IACA,OAAO,EAAE,OAAO,MAAM,OAAO,QAAQ;AAAA,IACrC,QAAQ,EAAE,QAAQ,OAAO,QAAQ,QAAQ;AAAA,IACzC,QAAQ;AAAA,IACR;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA,SAAS,cAAc,EAAE,QAAQ,MAAM,QAAQ,KAAK,MAAM,UAAU,WAAW,CAAC;AAAA,IAChF;AAAA,IACA,QAAQ,MAAM,aAAa,EAAE,GAAG,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,MAAM,CAAC;AAAA,IAChF,KAAK;AAAA,IACL,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,IACzB,SAAS,YAAY,OAAO,OAAO,CAAC,OAAO,SAAS,SAAS,CAAC;AAAA,IAC9D,SAAS;AAAA,MACP,KAAK;AAAA,MACL,MAAM,CAAC,QAAQ,WAAW,QAAQ,GAAG;AAAA,IACvC;AAAA,IACA,SAAS;AAAA,MACP,QAAQ;AAAA,MACR;AAAA,MACA,GAAI,QAAQ,EAAE,OAAO,MAAM,MAAM,MAAM,KAAK,EAAE,IAAI,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AACH;AAEO,SAAS,MAAM,QAAsB;AAC1C,SAAO,OAAO,QAAkC;AAC9C,QAAI,CAAC,OAAO,GAAI,QAAO;AACvB,YAAQ,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,YAAY,QAAQ,QAAQ,GAAG;AAAA,EAClE;AACF;AAEO,SAAS,eACd,OACA,UAA8B,CAAC,GACX;AACpB,QAAM,QAAQ,IAAI,MAAM;AACxB,cAAY,OAAO,KAAK;AACxB,QAAM,OAAO,MAAM,OAAO,YAAY,KAAK,GAAG,SAAS,KAAK;AAC5D,OAAK,MAAM,MAAM,MAAS;AAC1B,mBAAiB,OAAO,IAAI;AAC5B,SAAO;AACT;",
   "names": []
 }

package/dist/providers.js

@@ -1,7 +1,10 @@
 import { antLingProvider } from "@earendil-works/pi-ai/providers/ant-ling";
 import { anthropicProvider } from "@earendil-works/pi-ai/providers/anthropic";
+import { azureProvider } from "@earendil-works/pi-ai/providers/azure";
 import { basetenProvider } from "@earendil-works/pi-ai/providers/baseten";
 import { cerebrasProvider } from "@earendil-works/pi-ai/providers/cerebras";
+import { cloudflareAIGatewayProvider } from "@earendil-works/pi-ai/providers/cloudflare-ai-gateway";
+import { cloudflareWorkersAIProvider } from "@earendil-works/pi-ai/providers/cloudflare-workers-ai";
 import { deepseekProvider } from "@earendil-works/pi-ai/providers/deepseek";
 import { fireworksProvider } from "@earendil-works/pi-ai/providers/fireworks";
 import { groqProvider } from "@earendil-works/pi-ai/providers/groq";
@@ -30,7 +33,108 @@ import { xiaomiTokenPlanCnProvider } from "@earendil-works/pi-ai/providers/xiaom
 import { xiaomiTokenPlanSgpProvider } from "@earendil-works/pi-ai/providers/xiaomi-token-plan-sgp";
 import { zaiProvider } from "@earendil-works/pi-ai/providers/zai";
 import { zaiCodingCnProvider } from "@earendil-works/pi-ai/providers/zai-coding-cn";
+const RESOURCE = /^[a-z0-9][a-z0-9-]{0,62}$/i;
+const DEPLOYMENTS = /^[^=,\s]+\s*=\s*[^=,\s]+(\s*,\s*[^=,\s]+\s*=\s*[^=,\s]+)*$/;
+function httpsBase(value) {
+  const url = URL.parse(value);
+  if (url?.protocol !== "https:" || url.username || url.password) return void 0;
+  return url.port === "" || url.port === "443" ? url : void 0;
+}
+function azureEndpoint(value) {
+  if (RESOURCE.test(value)) return { AZURE_OPENAI_RESOURCE_NAME: value };
+  const url = httpsBase(value);
+  if (!url)
+    return "Enter your Azure resource name, or its endpoint as an https:// address without a port or a user name.";
+  return { AZURE_OPENAI_BASE_URL: url.href.replace(/\/+$/, "") };
+}
+const AZURE = "azure";
+function azureBase(env) {
+  if (env.AZURE_OPENAI_BASE_URL) return env.AZURE_OPENAI_BASE_URL;
+  const name = env.AZURE_OPENAI_RESOURCE_NAME;
+  return name ? `https://${name}.openai.azure.com/openai/v1` : void 0;
+}
+const REGION = /^[a-z]{2,}(-[a-z]+)+-\d{1,2}$/;
+const ACCOUNT = /^[0-9a-f]{32}$/i;
+const GATEWAY = /^[A-Za-z0-9_-]{1,64}$/;
+const checked = (pattern, env, problem) => (value) => pattern.test(value) ? { [env]: value } : problem;
+const REGION_FIELD = {
+  name: "region",
+  label: "Region",
+  placeholder: "us-west-2",
+  help: "The AWS region your Bedrock models run in. Leave it empty for us-west-2.",
+  env: checked(REGION, "AWS_REGION", "Enter an AWS region such as us-west-2.")
+};
+const ACCOUNT_FIELD = {
+  name: "account",
+  label: "Account ID",
+  required: true,
+  placeholder: "0123456789abcdef0123456789abcdef",
+  help: "The 32-character ID on your Cloudflare dashboard\u2019s account overview.",
+  env: checked(
+    ACCOUNT,
+    "CLOUDFLARE_ACCOUNT_ID",
+    "A Cloudflare account ID is 32 characters of 0\u20139 and a\u2013f."
+  )
+};
 const KEY_PROVIDERS = [
+  {
+    id: "azure",
+    make: azureProvider,
+    env: "AZURE_OPENAI_API_KEY",
+    description: "OpenAI models deployed in your own Azure OpenAI or AI Foundry resource.",
+    keyUrl: "https://portal.azure.com",
+    cors: true,
+    fields: [
+      {
+        name: "endpoint",
+        label: "Endpoint",
+        required: true,
+        placeholder: "my-resource or https://my-resource.openai.azure.com",
+        help: "Your resource\u2019s name, or its endpoint address from Keys and Endpoint.",
+        customBase: true,
+        env: azureEndpoint
+      },
+      {
+        name: "deployments",
+        label: "Deployments",
+        placeholder: "gpt-5.4=my-gpt",
+        help: "Only for deployments named differently from their model, as model=deployment, separated by commas.",
+        env: (value) => DEPLOYMENTS.test(value) ? { AZURE_OPENAI_DEPLOYMENT_NAME_MAP: value } : "Write each deployment as model=deployment, separated by commas."
+      }
+    ]
+  },
+  {
+    id: "cloudflare-workers-ai",
+    make: cloudflareWorkersAIProvider,
+    env: "CLOUDFLARE_API_KEY",
+    description: "Open models on Cloudflare Workers AI, in your Cloudflare account.",
+    keyUrl: "https://dash.cloudflare.com/profile/api-tokens",
+    cors: false,
+    fields: [ACCOUNT_FIELD]
+  },
+  {
+    id: "cloudflare-ai-gateway",
+    make: cloudflareAIGatewayProvider,
+    env: "CLOUDFLARE_API_KEY",
+    description: "Models from many labs through your Cloudflare AI Gateway.",
+    keyUrl: "https://dash.cloudflare.com/profile/api-tokens",
+    cors: false,
+    fields: [
+      ACCOUNT_FIELD,
+      {
+        name: "gateway",
+        label: "Gateway ID",
+        required: true,
+        placeholder: "my-gateway",
+        help: "The name of your gateway under AI \u203A AI Gateway.",
+        env: checked(
+          GATEWAY,
+          "CLOUDFLARE_GATEWAY_ID",
+          "A gateway ID is letters, digits, - and _, up to 64 characters."
+        )
+      }
+    ]
+  },
   {
     id: "anthropic",
     make: anthropicProvider,
@@ -251,7 +355,7 @@ const KEY_PROVIDERS = [
     id: "opencode",
     make: opencodeProvider,
     env: "OPENCODE_API_KEY",
-    description: "Models curated for coding agents by OpenCode Zen.",
+    description: "Models curated for coding agents by OpenCode Zen. Needs seven\u2019s vault 1.12.2 or later.",
     keyUrl: "https://opencode.ai/auth",
     cors: false
   },
@@ -259,7 +363,7 @@ const KEY_PROVIDERS = [
     id: "opencode-go",
     make: opencodeGoProvider,
     env: "OPENCODE_API_KEY",
-    description: "Open models on the OpenCode Go subscription.",
+    description: "Open models on the OpenCode Go subscription. Needs seven\u2019s vault 1.12.2 or later.",
     keyUrl: "https://opencode.ai/auth",
     cors: false
   },
@@ -307,7 +411,8 @@ const LISTINGS = new Map([
       keyUrl: "https://console.aws.amazon.com/bedrock/home#/api-keys",
       auth: "fields",
       corsFree: true,
-      vaultName: "AWS_BEARER_TOKEN_BEDROCK"
+      vaultName: "AWS_BEARER_TOKEN_BEDROCK",
+      fields: [REGION_FIELD]
     }
   ],
   [
@@ -324,9 +429,10 @@ const LISTINGS = new Map([
     {
       description: entry.description,
       keyUrl: entry.keyUrl,
-      auth: "api-key",
+      auth: entry.fields ? "fields" : "api-key",
       corsFree: !entry.cors,
-      vaultName: named.get(entry.id)
+      vaultName: named.get(entry.id),
+      ...entry.fields ? { fields: entry.fields } : {}
     }
   ])
 ]);
@@ -336,8 +442,12 @@ const VAULT_KNOWN = new Set(
 );
 export {
   ADDED_FIRST,
+  AZURE,
   KEY_PROVIDERS,
   LISTINGS,
-  VAULT_KNOWN
+  REGION_FIELD,
+  VAULT_KNOWN,
+  azureBase,
+  httpsBase
 };
 //# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/providers.ts"],
-  "sourcesContent": ["import type { Provider } from '@earendil-works/pi-ai';\nimport { antLingProvider } from '@earendil-works/pi-ai/providers/ant-ling';\nimport { anthropicProvider } from '@earendil-works/pi-ai/providers/anthropic';\nimport { basetenProvider } from '@earendil-works/pi-ai/providers/baseten';\nimport { cerebrasProvider } from '@earendil-works/pi-ai/providers/cerebras';\nimport { deepseekProvider } from '@earendil-works/pi-ai/providers/deepseek';\nimport { fireworksProvider } from '@earendil-works/pi-ai/providers/fireworks';\nimport { groqProvider } from '@earendil-works/pi-ai/providers/groq';\nimport { huggingfaceProvider } from '@earendil-works/pi-ai/providers/huggingface';\nimport { kimiCodingProvider } from '@earendil-works/pi-ai/providers/kimi-coding';\nimport { metaProvider } from '@earendil-works/pi-ai/providers/meta';\nimport { minimaxProvider } from '@earendil-works/pi-ai/providers/minimax';\nimport { minimaxCnProvider } from '@earendil-works/pi-ai/providers/minimax-cn';\nimport { mistralProvider } from '@earendil-works/pi-ai/providers/mistral';\nimport { moonshotaiProvider } from '@earendil-works/pi-ai/providers/moonshotai';\nimport { moonshotaiCnProvider } from '@earendil-works/pi-ai/providers/moonshotai-cn';\nimport { nvidiaProvider } from '@earendil-works/pi-ai/providers/nvidia';\nimport { openaiProvider } from '@earendil-works/pi-ai/providers/openai';\nimport { opencodeProvider } from '@earendil-works/pi-ai/providers/opencode';\nimport { opencodeGoProvider } from '@earendil-works/pi-ai/providers/opencode-go';\nimport { openrouterProvider } from '@earendil-works/pi-ai/providers/openrouter';\nimport { qwenTokenPlanProvider } from '@earendil-works/pi-ai/providers/qwen-token-plan';\nimport { qwenTokenPlanCnProvider } from '@earendil-works/pi-ai/providers/qwen-token-plan-cn';\nimport { qwenTokenPlanIndividualProvider } from '@earendil-works/pi-ai/providers/qwen-token-plan-individual';\nimport { togetherProvider } from '@earendil-works/pi-ai/providers/together';\nimport { vercelAIGatewayProvider } from '@earendil-works/pi-ai/providers/vercel-ai-gateway';\nimport { xaiProvider } from '@earendil-works/pi-ai/providers/xai';\nimport { xiaomiProvider } from '@earendil-works/pi-ai/providers/xiaomi';\nimport { xiaomiTokenPlanAmsProvider } from '@earendil-works/pi-ai/providers/xiaomi-token-plan-ams';\nimport { xiaomiTokenPlanCnProvider } from '@earendil-works/pi-ai/providers/xiaomi-token-plan-cn';\nimport { xiaomiTokenPlanSgpProvider } from '@earendil-works/pi-ai/providers/xiaomi-token-plan-sgp';\nimport { zaiProvider } from '@earendil-works/pi-ai/providers/zai';\nimport { zaiCodingCnProvider } from '@earendil-works/pi-ai/providers/zai-coding-cn';\n\nexport interface KeyProvider {\n  id: string;\n  make: () => Provider;\n  env: string;\n  description: string;\n  keyUrl: string;\n  cors: boolean;\n}\n\nexport const KEY_PROVIDERS: readonly KeyProvider[] = [\n  {\n    id: 'anthropic',\n    make: anthropicProvider,\n    env: 'ANTHROPIC_API_KEY',\n    description: 'Claude models, with an API key from the Claude Console.',\n    keyUrl: 'https://console.anthropic.com/settings/keys',\n    cors: true,\n  },\n  {\n    id: 'openai',\n    make: openaiProvider,\n    env: 'OPENAI_API_KEY',\n    description: 'GPT models, with an API key from the OpenAI platform.',\n    keyUrl: 'https://platform.openai.com/api-keys',\n    cors: true,\n  },\n  {\n    id: 'mistral',\n    make: mistralProvider,\n    env: 'MISTRAL_API_KEY',\n    description: 'Mistral and Devstral models from La Plateforme.',\n    keyUrl: 'https://console.mistral.ai/api-keys',\n    cors: true,\n  },\n  {\n    id: 'groq',\n    make: groqProvider,\n    env: 'GROQ_API_KEY',\n    description: 'Open models on Groq\u2019s fast inference.',\n    keyUrl: 'https://console.groq.com/keys',\n    cors: true,\n  },\n  {\n    id: 'deepseek',\n    make: deepseekProvider,\n    env: 'DEEPSEEK_API_KEY',\n    description: 'DeepSeek\u2019s own models.',\n    keyUrl: 'https://platform.deepseek.com/api_keys',\n    cors: true,\n  },\n  {\n    id: 'together',\n    make: togetherProvider,\n    env: 'TOGETHER_API_KEY',\n    description: 'Open models hosted by Together AI.',\n    keyUrl: 'https://api.together.ai/settings/api-keys',\n    cors: true,\n  },\n  {\n    id: 'huggingface',\n    make: huggingfaceProvider,\n    env: 'HF_TOKEN',\n    description: 'Open models through Hugging Face\u2019s inference router.',\n    keyUrl: 'https://huggingface.co/settings/tokens',\n    cors: true,\n  },\n  {\n    id: 'xiaomi',\n    make: xiaomiProvider,\n    env: 'XIAOMI_API_KEY',\n    description: 'Xiaomi\u2019s MiMo models.',\n    keyUrl: 'https://platform.xiaomimimo.com/#/console/api-keys',\n    cors: true,\n  },\n  {\n    id: 'xiaomi-token-plan-ams',\n    make: xiaomiTokenPlanAmsProvider,\n    env: 'XIAOMI_TOKEN_PLAN_AMS_API_KEY',\n    description: 'MiMo models on a Xiaomi token plan, served from Amsterdam.',\n    keyUrl: 'https://platform.xiaomimimo.com/#/console/api-keys',\n    cors: true,\n  },\n  {\n    id: 'xiaomi-token-plan-cn',\n    make: xiaomiTokenPlanCnProvider,\n    env: 'XIAOMI_TOKEN_PLAN_CN_API_KEY',\n    description: 'MiMo models on a Xiaomi token plan, served from China.',\n    keyUrl: 'https://platform.xiaomimimo.com/#/console/api-keys',\n    cors: true,\n  },\n  {\n    id: 'xiaomi-token-plan-sgp',\n    make: xiaomiTokenPlanSgpProvider,\n    env: 'XIAOMI_TOKEN_PLAN_SGP_API_KEY',\n    description: 'MiMo models on a Xiaomi token plan, served from Singapore.',\n    keyUrl: 'https://platform.xiaomimimo.com/#/console/api-keys',\n    cors: true,\n  },\n  {\n    id: 'cerebras',\n    make: cerebrasProvider,\n    env: 'CEREBRAS_API_KEY',\n    description: 'Open models on Cerebras inference.',\n    keyUrl: 'https://cloud.cerebras.ai',\n    cors: false,\n  },\n  {\n    id: 'openrouter',\n    make: openrouterProvider,\n    env: 'OPENROUTER_API_KEY',\n    description: 'Hundreds of models from many labs through one key.',\n    keyUrl: 'https://openrouter.ai/settings/keys',\n    cors: false,\n  },\n  {\n    id: 'fireworks',\n    make: fireworksProvider,\n    env: 'FIREWORKS_API_KEY',\n    description: 'Open models hosted by Fireworks AI.',\n    keyUrl: 'https://app.fireworks.ai/settings/users/api-keys',\n    cors: false,\n  },\n  {\n    id: 'baseten',\n    make: basetenProvider,\n    env: 'BASETEN_API_KEY',\n    description: 'Open models hosted by Baseten.',\n    keyUrl: 'https://app.baseten.co/settings/api_keys',\n    cors: false,\n  },\n  {\n    id: 'moonshotai',\n    make: moonshotaiProvider,\n    env: 'MOONSHOT_API_KEY',\n    description: 'Kimi models from Moonshot AI.',\n    keyUrl: 'https://platform.moonshot.ai/console/api-keys',\n    cors: false,\n  },\n  {\n    id: 'moonshotai-cn',\n    make: moonshotaiCnProvider,\n    env: 'MOONSHOT_API_KEY',\n    description: 'Kimi models from Moonshot AI\u2019s China platform.',\n    keyUrl: 'https://platform.moonshot.cn/console/api-keys',\n    cors: false,\n  },\n  {\n    id: 'xai',\n    make: xaiProvider,\n    env: 'XAI_API_KEY',\n    description: 'Grok models from xAI.',\n    keyUrl: 'https://console.x.ai',\n    cors: false,\n  },\n  {\n    id: 'meta',\n    make: metaProvider,\n    env: 'META_API_KEY',\n    description: 'Meta\u2019s Muse models.',\n    keyUrl: 'https://developer.meta.ai',\n    cors: false,\n  },\n  {\n    id: 'vercel-ai-gateway',\n    make: vercelAIGatewayProvider,\n    env: 'AI_GATEWAY_API_KEY',\n    description: 'Models from many labs through Vercel\u2019s AI Gateway.',\n    keyUrl: 'https://vercel.com/docs/ai-gateway/authentication',\n    cors: false,\n  },\n  {\n    id: 'minimax',\n    make: minimaxProvider,\n    env: 'MINIMAX_API_KEY',\n    description: 'MiniMax\u2019s models.',\n    keyUrl: 'https://platform.minimax.io/user-center/basic-information/interface-key',\n    cors: false,\n  },\n  {\n    id: 'minimax-cn',\n    make: minimaxCnProvider,\n    env: 'MINIMAX_CN_API_KEY',\n    description: 'MiniMax\u2019s models from its China platform.',\n    keyUrl: 'https://platform.minimaxi.com/user-center/basic-information/interface-key',\n    cors: false,\n  },\n  {\n    id: 'zai',\n    make: zaiProvider,\n    env: 'ZAI_API_KEY',\n    description: 'GLM models on Z.AI\u2019s coding plan.',\n    keyUrl: 'https://z.ai/manage-apikey/apikey-list',\n    cors: false,\n  },\n  {\n    id: 'zai-coding-cn',\n    make: zaiCodingCnProvider,\n    env: 'ZAI_CODING_CN_API_KEY',\n    description: 'GLM models on Zhipu\u2019s coding plan in China.',\n    keyUrl: 'https://open.bigmodel.cn/usercenter/apikeys',\n    cors: false,\n  },\n  {\n    id: 'nvidia',\n    make: nvidiaProvider,\n    env: 'NVIDIA_API_KEY',\n    description: 'Open models on NVIDIA\u2019s API catalog.',\n    keyUrl: 'https://build.nvidia.com/settings/api-keys',\n    cors: false,\n  },\n  {\n    id: 'kimi-coding',\n    make: kimiCodingProvider,\n    env: 'KIMI_API_KEY',\n    description: 'Kimi models on the Kimi Code subscription.',\n    keyUrl: 'https://www.kimi.com/code/console',\n    cors: false,\n  },\n  {\n    id: 'ant-ling',\n    make: antLingProvider,\n    env: 'ANT_LING_API_KEY',\n    description: 'Ling and Ring models from Ant Group.',\n    keyUrl: 'https://www.ant-ling.com',\n    cors: false,\n  },\n  {\n    id: 'opencode',\n    make: opencodeProvider,\n    env: 'OPENCODE_API_KEY',\n    description: 'Models curated for coding agents by OpenCode Zen.',\n    keyUrl: 'https://opencode.ai/auth',\n    cors: false,\n  },\n  {\n    id: 'opencode-go',\n    make: opencodeGoProvider,\n    env: 'OPENCODE_API_KEY',\n    description: 'Open models on the OpenCode Go subscription.',\n    keyUrl: 'https://opencode.ai/auth',\n    cors: false,\n  },\n  {\n    id: 'qwen-token-plan',\n    make: qwenTokenPlanProvider,\n    env: 'QWEN_TOKEN_PLAN_API_KEY',\n    description: 'Qwen models on an Alibaba Cloud token plan.',\n    keyUrl: 'https://modelstudio.console.alibabacloud.com',\n    cors: false,\n  },\n  {\n    id: 'qwen-token-plan-cn',\n    make: qwenTokenPlanCnProvider,\n    env: 'QWEN_TOKEN_PLAN_CN_API_KEY',\n    description: 'Qwen models on an Alibaba Cloud token plan in China.',\n    keyUrl: 'https://bailian.console.aliyun.com',\n    cors: false,\n  },\n  {\n    id: 'qwen-token-plan-individual',\n    make: qwenTokenPlanIndividualProvider,\n    env: 'QWEN_TOKEN_PLAN_API_KEY',\n    description: 'Qwen models on an individual Alibaba Cloud token plan.',\n    keyUrl: 'https://modelstudio.console.alibabacloud.com',\n    cors: false,\n  },\n];\n\nexport type ProviderAuth = 'api-key' | 'oauth' | 'fields' | 'local';\n\nexport interface Listing {\n  description: string;\n  keyUrl?: string;\n  auth: ProviderAuth;\n  corsFree: boolean;\n  vaultName: string;\n}\n\nconst upper = (text: string) => text.toUpperCase().replace(/[^A-Z0-9]/g, '_');\n\nfunction vaultNames(entries: readonly KeyProvider[]): Map<string, string> {\n  const uses = Map.groupBy(entries, (entry) => entry.env);\n  return new Map(\n    entries.map((entry) => [\n      entry.id,\n      (uses.get(entry.env) as KeyProvider[]).length > 1 ? `${upper(entry.id)}_API_KEY` : entry.env,\n    ])\n  );\n}\n\nconst named = vaultNames(KEY_PROVIDERS);\n\nexport const LISTINGS: ReadonlyMap<string, Listing> = new Map<string, Listing>([\n  [\n    'amazon-bedrock',\n    {\n      description: 'Claude and other models on AWS, with a Bedrock API key.',\n      keyUrl: 'https://console.aws.amazon.com/bedrock/home#/api-keys',\n      auth: 'fields',\n      corsFree: true,\n      vaultName: 'AWS_BEARER_TOKEN_BEDROCK',\n    },\n  ],\n  [\n    'adobe',\n    {\n      description: 'Models through Adobe\u2019s LLM proxy, with your Adobe ID.',\n      auth: 'oauth',\n      corsFree: true,\n      vaultName: 'ADOBE_IMS_TOKEN',\n    },\n  ],\n  ...KEY_PROVIDERS.map((entry): [string, Listing] => [\n    entry.id,\n    {\n      description: entry.description,\n      keyUrl: entry.keyUrl,\n      auth: 'api-key',\n      corsFree: !entry.cors,\n      vaultName: named.get(entry.id) as string,\n    },\n  ]),\n]);\n\nexport const ADDED_FIRST: readonly string[] = ['amazon-bedrock', 'adobe'];\n\nexport const VAULT_KNOWN: ReadonlySet<string> = new Set(\n  [...LISTINGS.keys()].filter((id) => id !== 'adobe')\n);\n"],
-  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AACjC,SAAS,wBAAwB;AACjC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,sBAAsB;AAC/B,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AACnC,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AACxC,SAAS,uCAAuC;AAChD,SAAS,wBAAwB;AACjC,SAAS,+BAA+B;AACxC,SAAS,mBAAmB;AAC5B,SAAS,sBAAsB;AAC/B,SAAS,kCAAkC;AAC3C,SAAS,iCAAiC;AAC1C,SAAS,kCAAkC;AAC3C,SAAS,mBAAmB;AAC5B,SAAS,2BAA2B;AAW7B,MAAM,gBAAwC;AAAA,EACnD;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AACF;AAYA,MAAM,QAAQ,CAAC,SAAiB,KAAK,YAAY,EAAE,QAAQ,cAAc,GAAG;AAE5E,SAAS,WAAW,SAAsD;AACxE,QAAM,OAAO,IAAI,QAAQ,SAAS,CAAC,UAAU,MAAM,GAAG;AACtD,SAAO,IAAI;AAAA,IACT,QAAQ,IAAI,CAAC,UAAU;AAAA,MACrB,MAAM;AAAA,MACL,KAAK,IAAI,MAAM,GAAG,EAAoB,SAAS,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,aAAa,MAAM;AAAA,IAC3F,CAAC;AAAA,EACH;AACF;AAEA,MAAM,QAAQ,WAAW,aAAa;AAE/B,MAAM,WAAyC,IAAI,IAAqB;AAAA,EAC7E;AAAA,IACE;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,GAAG,cAAc,IAAI,CAAC,UAA6B;AAAA,IACjD,MAAM;AAAA,IACN;AAAA,MACE,aAAa,MAAM;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM;AAAA,MACN,UAAU,CAAC,MAAM;AAAA,MACjB,WAAW,MAAM,IAAI,MAAM,EAAE;AAAA,IAC/B;AAAA,EACF,CAAC;AACH,CAAC;AAEM,MAAM,cAAiC,CAAC,kBAAkB,OAAO;AAEjE,MAAM,cAAmC,IAAI;AAAA,EAClD,CAAC,GAAG,SAAS,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,OAAO,OAAO;AACpD;",
+  "sourcesContent": ["import type { Provider } from '@earendil-works/pi-ai';\nimport { antLingProvider } from '@earendil-works/pi-ai/providers/ant-ling';\nimport { anthropicProvider } from '@earendil-works/pi-ai/providers/anthropic';\nimport { azureProvider } from '@earendil-works/pi-ai/providers/azure';\nimport { basetenProvider } from '@earendil-works/pi-ai/providers/baseten';\nimport { cerebrasProvider } from '@earendil-works/pi-ai/providers/cerebras';\nimport { cloudflareAIGatewayProvider } from '@earendil-works/pi-ai/providers/cloudflare-ai-gateway';\nimport { cloudflareWorkersAIProvider } from '@earendil-works/pi-ai/providers/cloudflare-workers-ai';\nimport { deepseekProvider } from '@earendil-works/pi-ai/providers/deepseek';\nimport { fireworksProvider } from '@earendil-works/pi-ai/providers/fireworks';\nimport { groqProvider } from '@earendil-works/pi-ai/providers/groq';\nimport { huggingfaceProvider } from '@earendil-works/pi-ai/providers/huggingface';\nimport { kimiCodingProvider } from '@earendil-works/pi-ai/providers/kimi-coding';\nimport { metaProvider } from '@earendil-works/pi-ai/providers/meta';\nimport { minimaxProvider } from '@earendil-works/pi-ai/providers/minimax';\nimport { minimaxCnProvider } from '@earendil-works/pi-ai/providers/minimax-cn';\nimport { mistralProvider } from '@earendil-works/pi-ai/providers/mistral';\nimport { moonshotaiProvider } from '@earendil-works/pi-ai/providers/moonshotai';\nimport { moonshotaiCnProvider } from '@earendil-works/pi-ai/providers/moonshotai-cn';\nimport { nvidiaProvider } from '@earendil-works/pi-ai/providers/nvidia';\nimport { openaiProvider } from '@earendil-works/pi-ai/providers/openai';\nimport { opencodeProvider } from '@earendil-works/pi-ai/providers/opencode';\nimport { opencodeGoProvider } from '@earendil-works/pi-ai/providers/opencode-go';\nimport { openrouterProvider } from '@earendil-works/pi-ai/providers/openrouter';\nimport { qwenTokenPlanProvider } from '@earendil-works/pi-ai/providers/qwen-token-plan';\nimport { qwenTokenPlanCnProvider } from '@earendil-works/pi-ai/providers/qwen-token-plan-cn';\nimport { qwenTokenPlanIndividualProvider } from '@earendil-works/pi-ai/providers/qwen-token-plan-individual';\nimport { togetherProvider } from '@earendil-works/pi-ai/providers/together';\nimport { vercelAIGatewayProvider } from '@earendil-works/pi-ai/providers/vercel-ai-gateway';\nimport { xaiProvider } from '@earendil-works/pi-ai/providers/xai';\nimport { xiaomiProvider } from '@earendil-works/pi-ai/providers/xiaomi';\nimport { xiaomiTokenPlanAmsProvider } from '@earendil-works/pi-ai/providers/xiaomi-token-plan-ams';\nimport { xiaomiTokenPlanCnProvider } from '@earendil-works/pi-ai/providers/xiaomi-token-plan-cn';\nimport { xiaomiTokenPlanSgpProvider } from '@earendil-works/pi-ai/providers/xiaomi-token-plan-sgp';\nimport { zaiProvider } from '@earendil-works/pi-ai/providers/zai';\nimport { zaiCodingCnProvider } from '@earendil-works/pi-ai/providers/zai-coding-cn';\n\nexport interface FieldInput {\n  name: string;\n  label: string;\n  required?: boolean;\n  placeholder?: string;\n  help?: string;\n  customBase?: true;\n}\n\nexport interface FieldSpec extends FieldInput {\n  env(value: string): Record<string, string> | string;\n}\n\nexport interface KeyProvider {\n  id: string;\n  make: () => Provider;\n  env: string;\n  description: string;\n  keyUrl: string;\n  cors: boolean;\n  fields?: readonly FieldSpec[];\n}\n\nconst RESOURCE = /^[a-z0-9][a-z0-9-]{0,62}$/i;\nconst DEPLOYMENTS = /^[^=,\\s]+\\s*=\\s*[^=,\\s]+(\\s*,\\s*[^=,\\s]+\\s*=\\s*[^=,\\s]+)*$/;\n\nexport function httpsBase(value: string): URL | undefined {\n  const url = URL.parse(value);\n  if (url?.protocol !== 'https:' || url.username || url.password) return undefined;\n  return url.port === '' || url.port === '443' ? url : undefined;\n}\n\nfunction azureEndpoint(value: string): Record<string, string> | string {\n  if (RESOURCE.test(value)) return { AZURE_OPENAI_RESOURCE_NAME: value };\n  const url = httpsBase(value);\n  if (!url)\n    return 'Enter your Azure resource name, or its endpoint as an https:// address without a port or a user name.';\n  return { AZURE_OPENAI_BASE_URL: url.href.replace(/\\/+$/, '') };\n}\n\nexport const AZURE = 'azure';\n\nexport function azureBase(env: Readonly<Record<string, string>>): string | undefined {\n  if (env.AZURE_OPENAI_BASE_URL) return env.AZURE_OPENAI_BASE_URL;\n  const name = env.AZURE_OPENAI_RESOURCE_NAME;\n  return name ? `https://${name}.openai.azure.com/openai/v1` : undefined;\n}\n\nconst REGION = /^[a-z]{2,}(-[a-z]+)+-\\d{1,2}$/;\nconst ACCOUNT = /^[0-9a-f]{32}$/i;\nconst GATEWAY = /^[A-Za-z0-9_-]{1,64}$/;\n\nconst checked =\n  (pattern: RegExp, env: string, problem: string) =>\n  (value: string): Record<string, string> | string =>\n    pattern.test(value) ? { [env]: value } : problem;\n\nexport const REGION_FIELD: FieldSpec = {\n  name: 'region',\n  label: 'Region',\n  placeholder: 'us-west-2',\n  help: 'The AWS region your Bedrock models run in. Leave it empty for us-west-2.',\n  env: checked(REGION, 'AWS_REGION', 'Enter an AWS region such as us-west-2.'),\n};\n\nconst ACCOUNT_FIELD: FieldSpec = {\n  name: 'account',\n  label: 'Account ID',\n  required: true,\n  placeholder: '0123456789abcdef0123456789abcdef',\n  help: 'The 32-character ID on your Cloudflare dashboard\u2019s account overview.',\n  env: checked(\n    ACCOUNT,\n    'CLOUDFLARE_ACCOUNT_ID',\n    'A Cloudflare account ID is 32 characters of 0\u20139 and a\u2013f.'\n  ),\n};\n\nexport const KEY_PROVIDERS: readonly KeyProvider[] = [\n  {\n    id: 'azure',\n    make: azureProvider,\n    env: 'AZURE_OPENAI_API_KEY',\n    description: 'OpenAI models deployed in your own Azure OpenAI or AI Foundry resource.',\n    keyUrl: 'https://portal.azure.com',\n    cors: true,\n    fields: [\n      {\n        name: 'endpoint',\n        label: 'Endpoint',\n        required: true,\n        placeholder: 'my-resource or https://my-resource.openai.azure.com',\n        help: 'Your resource\u2019s name, or its endpoint address from Keys and Endpoint.',\n        customBase: true,\n        env: azureEndpoint,\n      },\n      {\n        name: 'deployments',\n        label: 'Deployments',\n        placeholder: 'gpt-5.4=my-gpt',\n        help: 'Only for deployments named differently from their model, as model=deployment, separated by commas.',\n        env: (value) =>\n          DEPLOYMENTS.test(value)\n            ? { AZURE_OPENAI_DEPLOYMENT_NAME_MAP: value }\n            : 'Write each deployment as model=deployment, separated by commas.',\n      },\n    ],\n  },\n  {\n    id: 'cloudflare-workers-ai',\n    make: cloudflareWorkersAIProvider,\n    env: 'CLOUDFLARE_API_KEY',\n    description: 'Open models on Cloudflare Workers AI, in your Cloudflare account.',\n    keyUrl: 'https://dash.cloudflare.com/profile/api-tokens',\n    cors: false,\n    fields: [ACCOUNT_FIELD],\n  },\n  {\n    id: 'cloudflare-ai-gateway',\n    make: cloudflareAIGatewayProvider,\n    env: 'CLOUDFLARE_API_KEY',\n    description: 'Models from many labs through your Cloudflare AI Gateway.',\n    keyUrl: 'https://dash.cloudflare.com/profile/api-tokens',\n    cors: false,\n    fields: [\n      ACCOUNT_FIELD,\n      {\n        name: 'gateway',\n        label: 'Gateway ID',\n        required: true,\n        placeholder: 'my-gateway',\n        help: 'The name of your gateway under AI \u203A AI Gateway.',\n        env: checked(\n          GATEWAY,\n          'CLOUDFLARE_GATEWAY_ID',\n          'A gateway ID is letters, digits, - and _, up to 64 characters.'\n        ),\n      },\n    ],\n  },\n  {\n    id: 'anthropic',\n    make: anthropicProvider,\n    env: 'ANTHROPIC_API_KEY',\n    description: 'Claude models, with an API key from the Claude Console.',\n    keyUrl: 'https://console.anthropic.com/settings/keys',\n    cors: true,\n  },\n  {\n    id: 'openai',\n    make: openaiProvider,\n    env: 'OPENAI_API_KEY',\n    description: 'GPT models, with an API key from the OpenAI platform.',\n    keyUrl: 'https://platform.openai.com/api-keys',\n    cors: true,\n  },\n  {\n    id: 'mistral',\n    make: mistralProvider,\n    env: 'MISTRAL_API_KEY',\n    description: 'Mistral and Devstral models from La Plateforme.',\n    keyUrl: 'https://console.mistral.ai/api-keys',\n    cors: true,\n  },\n  {\n    id: 'groq',\n    make: groqProvider,\n    env: 'GROQ_API_KEY',\n    description: 'Open models on Groq\u2019s fast inference.',\n    keyUrl: 'https://console.groq.com/keys',\n    cors: true,\n  },\n  {\n    id: 'deepseek',\n    make: deepseekProvider,\n    env: 'DEEPSEEK_API_KEY',\n    description: 'DeepSeek\u2019s own models.',\n    keyUrl: 'https://platform.deepseek.com/api_keys',\n    cors: true,\n  },\n  {\n    id: 'together',\n    make: togetherProvider,\n    env: 'TOGETHER_API_KEY',\n    description: 'Open models hosted by Together AI.',\n    keyUrl: 'https://api.together.ai/settings/api-keys',\n    cors: true,\n  },\n  {\n    id: 'huggingface',\n    make: huggingfaceProvider,\n    env: 'HF_TOKEN',\n    description: 'Open models through Hugging Face\u2019s inference router.',\n    keyUrl: 'https://huggingface.co/settings/tokens',\n    cors: true,\n  },\n  {\n    id: 'xiaomi',\n    make: xiaomiProvider,\n    env: 'XIAOMI_API_KEY',\n    description: 'Xiaomi\u2019s MiMo models.',\n    keyUrl: 'https://platform.xiaomimimo.com/#/console/api-keys',\n    cors: true,\n  },\n  {\n    id: 'xiaomi-token-plan-ams',\n    make: xiaomiTokenPlanAmsProvider,\n    env: 'XIAOMI_TOKEN_PLAN_AMS_API_KEY',\n    description: 'MiMo models on a Xiaomi token plan, served from Amsterdam.',\n    keyUrl: 'https://platform.xiaomimimo.com/#/console/api-keys',\n    cors: true,\n  },\n  {\n    id: 'xiaomi-token-plan-cn',\n    make: xiaomiTokenPlanCnProvider,\n    env: 'XIAOMI_TOKEN_PLAN_CN_API_KEY',\n    description: 'MiMo models on a Xiaomi token plan, served from China.',\n    keyUrl: 'https://platform.xiaomimimo.com/#/console/api-keys',\n    cors: true,\n  },\n  {\n    id: 'xiaomi-token-plan-sgp',\n    make: xiaomiTokenPlanSgpProvider,\n    env: 'XIAOMI_TOKEN_PLAN_SGP_API_KEY',\n    description: 'MiMo models on a Xiaomi token plan, served from Singapore.',\n    keyUrl: 'https://platform.xiaomimimo.com/#/console/api-keys',\n    cors: true,\n  },\n  {\n    id: 'cerebras',\n    make: cerebrasProvider,\n    env: 'CEREBRAS_API_KEY',\n    description: 'Open models on Cerebras inference.',\n    keyUrl: 'https://cloud.cerebras.ai',\n    cors: false,\n  },\n  {\n    id: 'openrouter',\n    make: openrouterProvider,\n    env: 'OPENROUTER_API_KEY',\n    description: 'Hundreds of models from many labs through one key.',\n    keyUrl: 'https://openrouter.ai/settings/keys',\n    cors: false,\n  },\n  {\n    id: 'fireworks',\n    make: fireworksProvider,\n    env: 'FIREWORKS_API_KEY',\n    description: 'Open models hosted by Fireworks AI.',\n    keyUrl: 'https://app.fireworks.ai/settings/users/api-keys',\n    cors: false,\n  },\n  {\n    id: 'baseten',\n    make: basetenProvider,\n    env: 'BASETEN_API_KEY',\n    description: 'Open models hosted by Baseten.',\n    keyUrl: 'https://app.baseten.co/settings/api_keys',\n    cors: false,\n  },\n  {\n    id: 'moonshotai',\n    make: moonshotaiProvider,\n    env: 'MOONSHOT_API_KEY',\n    description: 'Kimi models from Moonshot AI.',\n    keyUrl: 'https://platform.moonshot.ai/console/api-keys',\n    cors: false,\n  },\n  {\n    id: 'moonshotai-cn',\n    make: moonshotaiCnProvider,\n    env: 'MOONSHOT_API_KEY',\n    description: 'Kimi models from Moonshot AI\u2019s China platform.',\n    keyUrl: 'https://platform.moonshot.cn/console/api-keys',\n    cors: false,\n  },\n  {\n    id: 'xai',\n    make: xaiProvider,\n    env: 'XAI_API_KEY',\n    description: 'Grok models from xAI.',\n    keyUrl: 'https://console.x.ai',\n    cors: false,\n  },\n  {\n    id: 'meta',\n    make: metaProvider,\n    env: 'META_API_KEY',\n    description: 'Meta\u2019s Muse models.',\n    keyUrl: 'https://developer.meta.ai',\n    cors: false,\n  },\n  {\n    id: 'vercel-ai-gateway',\n    make: vercelAIGatewayProvider,\n    env: 'AI_GATEWAY_API_KEY',\n    description: 'Models from many labs through Vercel\u2019s AI Gateway.',\n    keyUrl: 'https://vercel.com/docs/ai-gateway/authentication',\n    cors: false,\n  },\n  {\n    id: 'minimax',\n    make: minimaxProvider,\n    env: 'MINIMAX_API_KEY',\n    description: 'MiniMax\u2019s models.',\n    keyUrl: 'https://platform.minimax.io/user-center/basic-information/interface-key',\n    cors: false,\n  },\n  {\n    id: 'minimax-cn',\n    make: minimaxCnProvider,\n    env: 'MINIMAX_CN_API_KEY',\n    description: 'MiniMax\u2019s models from its China platform.',\n    keyUrl: 'https://platform.minimaxi.com/user-center/basic-information/interface-key',\n    cors: false,\n  },\n  {\n    id: 'zai',\n    make: zaiProvider,\n    env: 'ZAI_API_KEY',\n    description: 'GLM models on Z.AI\u2019s coding plan.',\n    keyUrl: 'https://z.ai/manage-apikey/apikey-list',\n    cors: false,\n  },\n  {\n    id: 'zai-coding-cn',\n    make: zaiCodingCnProvider,\n    env: 'ZAI_CODING_CN_API_KEY',\n    description: 'GLM models on Zhipu\u2019s coding plan in China.',\n    keyUrl: 'https://open.bigmodel.cn/usercenter/apikeys',\n    cors: false,\n  },\n  {\n    id: 'nvidia',\n    make: nvidiaProvider,\n    env: 'NVIDIA_API_KEY',\n    description: 'Open models on NVIDIA\u2019s API catalog.',\n    keyUrl: 'https://build.nvidia.com/settings/api-keys',\n    cors: false,\n  },\n  {\n    id: 'kimi-coding',\n    make: kimiCodingProvider,\n    env: 'KIMI_API_KEY',\n    description: 'Kimi models on the Kimi Code subscription.',\n    keyUrl: 'https://www.kimi.com/code/console',\n    cors: false,\n  },\n  {\n    id: 'ant-ling',\n    make: antLingProvider,\n    env: 'ANT_LING_API_KEY',\n    description: 'Ling and Ring models from Ant Group.',\n    keyUrl: 'https://www.ant-ling.com',\n    cors: false,\n  },\n  {\n    id: 'opencode',\n    make: opencodeProvider,\n    env: 'OPENCODE_API_KEY',\n    description:\n      'Models curated for coding agents by OpenCode Zen. Needs seven\u2019s vault 1.12.2 or later.',\n    keyUrl: 'https://opencode.ai/auth',\n    cors: false,\n  },\n  {\n    id: 'opencode-go',\n    make: opencodeGoProvider,\n    env: 'OPENCODE_API_KEY',\n    description:\n      'Open models on the OpenCode Go subscription. Needs seven\u2019s vault 1.12.2 or later.',\n    keyUrl: 'https://opencode.ai/auth',\n    cors: false,\n  },\n  {\n    id: 'qwen-token-plan',\n    make: qwenTokenPlanProvider,\n    env: 'QWEN_TOKEN_PLAN_API_KEY',\n    description: 'Qwen models on an Alibaba Cloud token plan.',\n    keyUrl: 'https://modelstudio.console.alibabacloud.com',\n    cors: false,\n  },\n  {\n    id: 'qwen-token-plan-cn',\n    make: qwenTokenPlanCnProvider,\n    env: 'QWEN_TOKEN_PLAN_CN_API_KEY',\n    description: 'Qwen models on an Alibaba Cloud token plan in China.',\n    keyUrl: 'https://bailian.console.aliyun.com',\n    cors: false,\n  },\n  {\n    id: 'qwen-token-plan-individual',\n    make: qwenTokenPlanIndividualProvider,\n    env: 'QWEN_TOKEN_PLAN_API_KEY',\n    description: 'Qwen models on an individual Alibaba Cloud token plan.',\n    keyUrl: 'https://modelstudio.console.alibabacloud.com',\n    cors: false,\n  },\n];\n\nexport type ProviderAuth = 'api-key' | 'oauth' | 'fields' | 'local';\n\nexport interface Listing {\n  description: string;\n  keyUrl?: string;\n  auth: ProviderAuth;\n  corsFree: boolean;\n  vaultName: string;\n  fields?: readonly FieldSpec[];\n}\n\nconst upper = (text: string) => text.toUpperCase().replace(/[^A-Z0-9]/g, '_');\n\nfunction vaultNames(entries: readonly KeyProvider[]): Map<string, string> {\n  const uses = Map.groupBy(entries, (entry) => entry.env);\n  return new Map(\n    entries.map((entry) => [\n      entry.id,\n      (uses.get(entry.env) as KeyProvider[]).length > 1 ? `${upper(entry.id)}_API_KEY` : entry.env,\n    ])\n  );\n}\n\nconst named = vaultNames(KEY_PROVIDERS);\n\nexport const LISTINGS: ReadonlyMap<string, Listing> = new Map<string, Listing>([\n  [\n    'amazon-bedrock',\n    {\n      description: 'Claude and other models on AWS, with a Bedrock API key.',\n      keyUrl: 'https://console.aws.amazon.com/bedrock/home#/api-keys',\n      auth: 'fields',\n      corsFree: true,\n      vaultName: 'AWS_BEARER_TOKEN_BEDROCK',\n      fields: [REGION_FIELD],\n    },\n  ],\n  [\n    'adobe',\n    {\n      description: 'Models through Adobe\u2019s LLM proxy, with your Adobe ID.',\n      auth: 'oauth',\n      corsFree: true,\n      vaultName: 'ADOBE_IMS_TOKEN',\n    },\n  ],\n  ...KEY_PROVIDERS.map((entry): [string, Listing] => [\n    entry.id,\n    {\n      description: entry.description,\n      keyUrl: entry.keyUrl,\n      auth: entry.fields ? 'fields' : 'api-key',\n      corsFree: !entry.cors,\n      vaultName: named.get(entry.id) as string,\n      ...(entry.fields ? { fields: entry.fields } : {}),\n    },\n  ]),\n]);\n\nexport const ADDED_FIRST: readonly string[] = ['amazon-bedrock', 'adobe'];\n\nexport const VAULT_KNOWN: ReadonlySet<string> = new Set(\n  [...LISTINGS.keys()].filter((id) => id !== 'adobe')\n);\n"],
+  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,qBAAqB;AAC9B,SAAS,uBAAuB;AAChC,SAAS,wBAAwB;AACjC,SAAS,mCAAmC;AAC5C,SAAS,mCAAmC;AAC5C,SAAS,wBAAwB;AACjC,SAAS,yBAAyB;AAClC,SAAS,oBAAoB;AAC7B,SAAS,2BAA2B;AACpC,SAAS,0BAA0B;AACnC,SAAS,oBAAoB;AAC7B,SAAS,uBAAuB;AAChC,SAAS,yBAAyB;AAClC,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,4BAA4B;AACrC,SAAS,sBAAsB;AAC/B,SAAS,sBAAsB;AAC/B,SAAS,wBAAwB;AACjC,SAAS,0BAA0B;AACnC,SAAS,0BAA0B;AACnC,SAAS,6BAA6B;AACtC,SAAS,+BAA+B;AACxC,SAAS,uCAAuC;AAChD,SAAS,wBAAwB;AACjC,SAAS,+BAA+B;AACxC,SAAS,mBAAmB;AAC5B,SAAS,sBAAsB;AAC/B,SAAS,kCAAkC;AAC3C,SAAS,iCAAiC;AAC1C,SAAS,kCAAkC;AAC3C,SAAS,mBAAmB;AAC5B,SAAS,2BAA2B;AAyBpC,MAAM,WAAW;AACjB,MAAM,cAAc;AAEb,SAAS,UAAU,OAAgC;AACxD,QAAM,MAAM,IAAI,MAAM,KAAK;AAC3B,MAAI,KAAK,aAAa,YAAY,IAAI,YAAY,IAAI,SAAU,QAAO;AACvE,SAAO,IAAI,SAAS,MAAM,IAAI,SAAS,QAAQ,MAAM;AACvD;AAEA,SAAS,cAAc,OAAgD;AACrE,MAAI,SAAS,KAAK,KAAK,EAAG,QAAO,EAAE,4BAA4B,MAAM;AACrE,QAAM,MAAM,UAAU,KAAK;AAC3B,MAAI,CAAC;AACH,WAAO;AACT,SAAO,EAAE,uBAAuB,IAAI,KAAK,QAAQ,QAAQ,EAAE,EAAE;AAC/D;AAEO,MAAM,QAAQ;AAEd,SAAS,UAAU,KAA2D;AACnF,MAAI,IAAI,sBAAuB,QAAO,IAAI;AAC1C,QAAM,OAAO,IAAI;AACjB,SAAO,OAAO,WAAW,IAAI,gCAAgC;AAC/D;AAEA,MAAM,SAAS;AACf,MAAM,UAAU;AAChB,MAAM,UAAU;AAEhB,MAAM,UACJ,CAAC,SAAiB,KAAa,YAC/B,CAAC,UACC,QAAQ,KAAK,KAAK,IAAI,EAAE,CAAC,GAAG,GAAG,MAAM,IAAI;AAEtC,MAAM,eAA0B;AAAA,EACrC,MAAM;AAAA,EACN,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,KAAK,QAAQ,QAAQ,cAAc,wCAAwC;AAC7E;AAEA,MAAM,gBAA2B;AAAA,EAC/B,MAAM;AAAA,EACN,OAAO;AAAA,EACP,UAAU;AAAA,EACV,aAAa;AAAA,EACb,MAAM;AAAA,EACN,KAAK;AAAA,IACH;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,MAAM,gBAAwC;AAAA,EACnD;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,QAAQ;AAAA,MACN;AAAA,QACE,MAAM;AAAA,QACN,OAAO;AAAA,QACP,UAAU;AAAA,QACV,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,KAAK;AAAA,MACP;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,KAAK,CAAC,UACJ,YAAY,KAAK,KAAK,IAClB,EAAE,kCAAkC,MAAM,IAC1C;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,QAAQ,CAAC,aAAa;AAAA,EACxB;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,QAAQ;AAAA,MACN;AAAA,MACA;AAAA,QACE,MAAM;AAAA,QACN,OAAO;AAAA,QACP,UAAU;AAAA,QACV,aAAa;AAAA,QACb,MAAM;AAAA,QACN,KAAK;AAAA,UACH;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aACE;AAAA,IACF,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aACE;AAAA,IACF,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AAAA,EACA;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,KAAK;AAAA,IACL,aAAa;AAAA,IACb,QAAQ;AAAA,IACR,MAAM;AAAA,EACR;AACF;AAaA,MAAM,QAAQ,CAAC,SAAiB,KAAK,YAAY,EAAE,QAAQ,cAAc,GAAG;AAE5E,SAAS,WAAW,SAAsD;AACxE,QAAM,OAAO,IAAI,QAAQ,SAAS,CAAC,UAAU,MAAM,GAAG;AACtD,SAAO,IAAI;AAAA,IACT,QAAQ,IAAI,CAAC,UAAU;AAAA,MACrB,MAAM;AAAA,MACL,KAAK,IAAI,MAAM,GAAG,EAAoB,SAAS,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,aAAa,MAAM;AAAA,IAC3F,CAAC;AAAA,EACH;AACF;AAEA,MAAM,QAAQ,WAAW,aAAa;AAE/B,MAAM,WAAyC,IAAI,IAAqB;AAAA,EAC7E;AAAA,IACE;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ;AAAA,MACR,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,MACX,QAAQ,CAAC,YAAY;AAAA,IACvB;AAAA,EACF;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,MAAM;AAAA,MACN,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,EACF;AAAA,EACA,GAAG,cAAc,IAAI,CAAC,UAA6B;AAAA,IACjD,MAAM;AAAA,IACN;AAAA,MACE,aAAa,MAAM;AAAA,MACnB,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM,SAAS,WAAW;AAAA,MAChC,UAAU,CAAC,MAAM;AAAA,MACjB,WAAW,MAAM,IAAI,MAAM,EAAE;AAAA,MAC7B,GAAI,MAAM,SAAS,EAAE,QAAQ,MAAM,OAAO,IAAI,CAAC;AAAA,IACjD;AAAA,EACF,CAAC;AACH,CAAC;AAEM,MAAM,cAAiC,CAAC,kBAAkB,OAAO;AAEjE,MAAM,cAAmC,IAAI;AAAA,EAClD,CAAC,GAAG,SAAS,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,OAAO,OAAO;AACpD;",
   "names": []
 }

package/dist/secrets/credentials.js

@@ -1,9 +1,9 @@
 const KEYS_IN_VAULT = "model keys are kept in seven's vault: enter them in Settings \u203A Accounts";
-function vaultCredentials(records, env = () => void 0) {
+function vaultCredentials(records, env = () => void 0, ready = () => true) {
   return {
     async read(providerId) {
       const record = records.model(providerId);
-      if (!record) return void 0;
+      if (!record || !ready(providerId)) return void 0;
       const extra = env(providerId);
       return {
         type: "api_key",
@@ -12,7 +12,7 @@ function vaultCredentials(records, env = () => void 0) {
       };
     },
     async list() {
-      const providers = records.state.value.filter((record) => record.kind === "model" && record.provider !== void 0).map((record) => record.provider);
+      const providers = records.state.value.filter((record) => record.kind === "model" && record.provider !== void 0).map((record) => record.provider).filter(ready);
       return [...new Set(providers)].map(
         (providerId) => ({ providerId, type: "api_key" })
       );

package/dist/secrets/credentials.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/secrets/credentials.ts"],
-  "sourcesContent": ["import type { Credential, CredentialInfo, CredentialStore } from '@earendil-works/pi-ai';\nimport type { VaultRecords } from './records.ts';\n\nexport const KEYS_IN_VAULT =\n  \"model keys are kept in seven's vault: enter them in Settings \u203A Accounts\";\n\nexport type FieldsOf = (providerId: string) => Readonly<Record<string, string>> | undefined;\n\nexport function vaultCredentials(\n  records: Pick<VaultRecords, 'model' | 'state'>,\n  env: FieldsOf = () => undefined\n): CredentialStore {\n  return {\n    async read(providerId) {\n      const record = records.model(providerId);\n      if (!record) return undefined;\n      const extra = env(providerId);\n      return {\n        type: 'api_key',\n        key: record.placeholder,\n        ...(extra && Object.keys(extra).length ? { env: { ...extra } } : {}),\n      } satisfies Credential;\n    },\n    async list() {\n      const providers = records.state.value\n        .filter((record) => record.kind === 'model' && record.provider !== undefined)\n        .map((record) => record.provider as string);\n      return [...new Set(providers)].map(\n        (providerId): CredentialInfo => ({ providerId, type: 'api_key' })\n      );\n    },\n    async modify() {\n      throw new Error(KEYS_IN_VAULT);\n    },\n    async delete() {\n      throw new Error(KEYS_IN_VAULT);\n    },\n  };\n}\n"],
-  "mappings": "AAGO,MAAM,gBACX;AAIK,SAAS,iBACd,SACA,MAAgB,MAAM,QACL;AACjB,SAAO;AAAA,IACL,MAAM,KAAK,YAAY;AACrB,YAAM,SAAS,QAAQ,MAAM,UAAU;AACvC,UAAI,CAAC,OAAQ,QAAO;AACpB,YAAM,QAAQ,IAAI,UAAU;AAC5B,aAAO;AAAA,QACL,MAAM;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,GAAI,SAAS,OAAO,KAAK,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,IAAI,CAAC;AAAA,MACpE;AAAA,IACF;AAAA,IACA,MAAM,OAAO;AACX,YAAM,YAAY,QAAQ,MAAM,MAC7B,OAAO,CAAC,WAAW,OAAO,SAAS,WAAW,OAAO,aAAa,MAAS,EAC3E,IAAI,CAAC,WAAW,OAAO,QAAkB;AAC5C,aAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC,EAAE;AAAA,QAC7B,CAAC,gBAAgC,EAAE,YAAY,MAAM,UAAU;AAAA,MACjE;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb,YAAM,IAAI,MAAM,aAAa;AAAA,IAC/B;AAAA,IACA,MAAM,SAAS;AACb,YAAM,IAAI,MAAM,aAAa;AAAA,IAC/B;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Credential, CredentialInfo, CredentialStore } from '@earendil-works/pi-ai';\nimport type { VaultRecords } from './records.ts';\n\nexport const KEYS_IN_VAULT =\n  \"model keys are kept in seven's vault: enter them in Settings \u203A Accounts\";\n\nexport type FieldsOf = (providerId: string) => Readonly<Record<string, string>> | undefined;\n\nexport function vaultCredentials(\n  records: Pick<VaultRecords, 'model' | 'state'>,\n  env: FieldsOf = () => undefined,\n  ready: (providerId: string) => boolean = () => true\n): CredentialStore {\n  return {\n    async read(providerId) {\n      const record = records.model(providerId);\n      if (!record || !ready(providerId)) return undefined;\n      const extra = env(providerId);\n      return {\n        type: 'api_key',\n        key: record.placeholder,\n        ...(extra && Object.keys(extra).length ? { env: { ...extra } } : {}),\n      } satisfies Credential;\n    },\n    async list() {\n      const providers = records.state.value\n        .filter((record) => record.kind === 'model' && record.provider !== undefined)\n        .map((record) => record.provider as string)\n        .filter(ready);\n      return [...new Set(providers)].map(\n        (providerId): CredentialInfo => ({ providerId, type: 'api_key' })\n      );\n    },\n    async modify() {\n      throw new Error(KEYS_IN_VAULT);\n    },\n    async delete() {\n      throw new Error(KEYS_IN_VAULT);\n    },\n  };\n}\n"],
+  "mappings": "AAGO,MAAM,gBACX;AAIK,SAAS,iBACd,SACA,MAAgB,MAAM,QACtB,QAAyC,MAAM,MAC9B;AACjB,SAAO;AAAA,IACL,MAAM,KAAK,YAAY;AACrB,YAAM,SAAS,QAAQ,MAAM,UAAU;AACvC,UAAI,CAAC,UAAU,CAAC,MAAM,UAAU,EAAG,QAAO;AAC1C,YAAM,QAAQ,IAAI,UAAU;AAC5B,aAAO;AAAA,QACL,MAAM;AAAA,QACN,KAAK,OAAO;AAAA,QACZ,GAAI,SAAS,OAAO,KAAK,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,IAAI,CAAC;AAAA,MACpE;AAAA,IACF;AAAA,IACA,MAAM,OAAO;AACX,YAAM,YAAY,QAAQ,MAAM,MAC7B,OAAO,CAAC,WAAW,OAAO,SAAS,WAAW,OAAO,aAAa,MAAS,EAC3E,IAAI,CAAC,WAAW,OAAO,QAAkB,EACzC,OAAO,KAAK;AACf,aAAO,CAAC,GAAG,IAAI,IAAI,SAAS,CAAC,EAAE;AAAA,QAC7B,CAAC,gBAAgC,EAAE,YAAY,MAAM,UAAU;AAAA,MACjE;AAAA,IACF;AAAA,IACA,MAAM,SAAS;AACb,YAAM,IAAI,MAAM,aAAa;AAAA,IAC/B;AAAA,IACA,MAAM,SAAS;AACb,YAAM,IAAI,MAAM,aAAa;AAAA,IAC/B;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/services.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/services.ts"],
-  "sourcesContent": ["import type { Context, JsonValue, RemoteContract, ReplicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Approval, ApprovalAnswer, ApprovalDecided } from './approvals/index.ts';\nimport type {\n  ApprovalPolicy,\n  ApprovalPolicyChange,\n  ApprovalPolicySet,\n} from './approvals/policy.ts';\nimport type { AgentSudo } from './approvals/sudo.ts';\nimport type { SendAttachment, ShownAttachment } from './attachments.ts';\nimport type { ChangesView } from './changes/git.ts';\nimport type { FrozenCone } from './freezer/index.ts';\nimport type { ImportProgress, ImportResult } from './freezer/v6.ts';\nimport type { GuestOpened, Proposed, ProposeRequest } from './guests/index.ts';\nimport type { GuestDraft, GuestGates, GuestSeat } from './guests/seats.ts';\nimport type { MemoryEntry, MemoryScope, MemoryTag } from './memory/format.ts';\nimport type { AgentRemote } from './remote/host.ts';\nimport type { AgentPages } from './remote/pages.ts';\nimport type { VaultState } from './secrets/vault.ts';\nimport { contract } from './serving.ts';\nimport type { SkillPackage, SkillSource } from './skills/skills.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\n\nexport type SendMode = 'steer' | 'followUp' | 'reject';\n\nexport interface SendRequest {\n  text: string;\n  whenBusy: SendMode;\n  requestId: string | null;\n  agentId?: string | null;\n  attachments?: SendAttachment[];\n}\n\nexport interface OperationError {\n  code: string;\n  message: string;\n}\n\nexport type SendResponse =\n  | { accepted: true; submissionId: string; error: null }\n  | { accepted: false; submissionId: null; error: OperationError };\n\nexport type PromptResult =\n  | { status: 'done'; text: string; reason: null }\n  | { status: 'unanswered'; text: null; reason: string };\n\nexport interface AgentControl {\n  send(request: SendRequest, context: Context): Promise<SendResponse>;\n  wait(submissionId: string, context: Context): Promise<PromptResult>;\n  withdraw(\n    submissionId: string,\n    context: Context\n  ): Promise<{ outcome: 'withdrawn' | 'already_placed' | 'not_found' }>;\n  abort(context: Context): Promise<void>;\n  compact(instructions: string | null, context: Context): Promise<SendResponse>;\n  compactAgent(\n    agentId: string,\n    instructions: string | null,\n    context: Context\n  ): Promise<SendResponse>;\n  reset(handoff: string | null, context: Context): Promise<void>;\n  configure(change: AgentSettingsChange, context: Context): Promise<void>;\n  rewind(messageId: string | null, context: Context): Promise<Rewound>;\n  rewindAgent(agentId: string, messageId: string | null, context: Context): Promise<Rewound>;\n  resolveLick(\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved>;\n  resolveAgentLick(\n    agentId: string,\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved>;\n  webhook(\n    name: string,\n    delivery: WebhookRequest,\n    context: Context\n  ): Promise<{ delivered: boolean }>;\n  stopAgent(agentId: string, context: Context): Promise<void>;\n  selectCone(agentId: string, context: Context): Promise<void>;\n  createCone(name: string, context: Context): Promise<Created>;\n  createScoop(parentId: string, name: string, context: Context): Promise<Created>;\n  drop(agentId: string, context: Context): Promise<Created>;\n  unqueue(\n    agentId: string | null,\n    submissionId: string,\n    context: Context\n  ): Promise<{ outcome: 'withdrawn' | 'already_placed' | 'not_found' }>;\n  sprinkleSend(\n    sprinkleId: string,\n    payload: { action: string; data: JsonValue | null; target: string | null },\n    context: Context\n  ): Promise<{ delivered: boolean }>;\n  sprinkleCall(\n    sprinkleId: string,\n    method: string,\n    args: JsonValue[],\n    context: Context\n  ): Promise<JsonValue>;\n  memorySave(draft: MemoryDraft, context: Context): Promise<MemoryEntry>;\n  memoryRemove(id: string, context: Context): Promise<{ removed: boolean }>;\n  freeze(agentId: string, context: Context): Promise<Created>;\n  newChat(agentId: string, context: Context): Promise<Created>;\n  thaw(frozenId: string, context: Context): Promise<Created>;\n  discard(frozenId: string, context: Context): Promise<Created>;\n  importProfile(request: ImportRequest, context: Context): Promise<ImportResult>;\n  importCancel(context: Context): Promise<void>;\n  changesOpen(context: Context): Promise<void>;\n  changeAccept(path: string, context: Context): Promise<Created>;\n  changeRevert(path: string, context: Context): Promise<Created>;\n  monitorOpen(lease: string | null, resync: boolean, context: Context): Promise<MonitorLease>;\n  monitorClose(lease: string, context: Context): Promise<void>;\n  image(ref: ImageRef, context: Context): Promise<StoredImage>;\n  agentCommands(agentId: string, context: Context): Promise<Command[]>;\n  toolLabel(agentId: string, callIds: string[], context: Context): Promise<string | null>;\n  guestOpen(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  guestRevoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n  guestAlwaysForget(\n    seat: string,\n    approval: string,\n    context: Context\n  ): Promise<{ removed: boolean }>;\n  approvalPolicySet(change: ApprovalPolicyChange, context: Context): Promise<ApprovalPolicySet>;\n  decide(\n    id: string,\n    decision: ApprovalAnswer,\n    reason: string | null,\n    context: Context\n  ): Promise<ApprovalDecided>;\n}\n\nexport interface ImportRequest {\n  upload: string | null;\n  data: string | null;\n  again: boolean;\n  preview: boolean;\n}\n\nexport interface ImageRef {\n  entry: number;\n  message: number;\n  part: number;\n}\n\nexport type StoredImage = { data: string; mimeType: string } | { data: null; mimeType: null };\n\nexport interface MonitorLease {\n  lease: string;\n  ttlMs: number;\n}\n\nexport interface MonitorAgent {\n  id: string;\n  name: string;\n  kind: 'cone' | 'scoop';\n  parentId: string | null;\n  model: string | null;\n  running: boolean;\n  queued: number;\n  tool: string | null;\n  retry: { attempt: number; since: number; error: string } | null;\n  failed: string | null;\n  context: number | null;\n  cpu?: number | null;\n}\n\nexport interface MonitorTask {\n  id: string;\n  kind: string;\n  detail: string | null;\n  agentId: string | null;\n  owner: string | null;\n  status: 'pending' | 'running' | 'waiting' | 'completing';\n  phase: string;\n  background: boolean;\n  aborting: number | null;\n  since: number;\n  waits: number;\n}\n\nexport interface MonitorProcess {\n  pid: number;\n  ppid: number;\n  pgid: number;\n  user: string | null;\n  agentId: string | null;\n  command: string;\n  state: 'S' | 'Z';\n  started: number;\n  zombie: number | null;\n  tty: boolean;\n  rss: number | null;\n  utime?: number;\n  stime?: number;\n  cpu?: number | null;\n}\n\nexport interface MonitorProblem {\n  id: string;\n  at: number;\n  agentId: string | null;\n  kind: 'task' | 'retry' | 'turn';\n  message: string;\n}\n\nexport interface MonitorFeed {\n  open: boolean;\n  at: number;\n  usage: { tokens: number; cost: number; free: boolean } | null;\n  agents: MonitorAgent[];\n  tasks: MonitorTask[];\n  processes: MonitorProcess[] | null;\n  kernel: 'checking' | 'ok' | 'unreachable';\n  problems: MonitorProblem[];\n  paused: boolean;\n}\n\nexport interface MemoryDraft {\n  id: string | null;\n  scope: string;\n  section: string;\n  title: string;\n  body: string;\n  tag: MemoryTag | null;\n}\n\nexport type Created = { id: string; error: null } | { id: null; error: string };\n\nexport interface AgentSummary {\n  id: string;\n  name: string;\n  kind: 'cone' | 'scoop';\n  parentId: string | null;\n  role: string | null;\n}\n\nexport interface AgentsSummary {\n  active: string;\n  agents: AgentSummary[];\n}\n\nexport type LickResolved =\n  | { done: true; text: string; error: null }\n  | { done: false; text: null; error: string };\n\nexport interface WebhookRequest {\n  id: string | null;\n  headers: Record<string, string>;\n  body: string;\n}\n\nexport type Rewound =\n  | { done: true; text: string; reason: null; attachments?: ShownAttachment[] }\n  | { done: false; text: null; reason: 'busy' | 'no-turn' };\n\nexport interface AgentSettingsChange {\n  model: { provider: string; modelId: string } | null;\n  thinkingLevel: 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max' | null;\n  agentId?: string | null;\n}\n\nconst keys = <T>(record: Record<keyof T, true>) => Object.keys(record) as (keyof T & string)[];\n\nexport const CONTROL_METHODS = keys<AgentControl>({\n  send: true,\n  wait: true,\n  withdraw: true,\n  abort: true,\n  compact: true,\n  compactAgent: true,\n  reset: true,\n  configure: true,\n  rewind: true,\n  rewindAgent: true,\n  resolveLick: true,\n  resolveAgentLick: true,\n  webhook: true,\n  stopAgent: true,\n  selectCone: true,\n  createCone: true,\n  createScoop: true,\n  drop: true,\n  unqueue: true,\n  sprinkleSend: true,\n  sprinkleCall: true,\n  memorySave: true,\n  memoryRemove: true,\n  freeze: true,\n  newChat: true,\n  thaw: true,\n  discard: true,\n  importProfile: true,\n  importCancel: true,\n  changesOpen: true,\n  changeAccept: true,\n  changeRevert: true,\n  monitorOpen: true,\n  monitorClose: true,\n  image: true,\n  agentCommands: true,\n  toolLabel: true,\n  guestOpen: true,\n  guestRevoke: true,\n  guestAlwaysForget: true,\n  approvalPolicySet: true,\n  decide: true,\n});\n\nexport const OWNER_DEVICE_METHODS: readonly (keyof AgentControl & string)[] = [\n  'decide',\n  'guestOpen',\n  'guestRevoke',\n  'guestAlwaysForget',\n  'approvalPolicySet',\n];\n\nexport const CONTROL_READS: readonly (keyof AgentControl & string)[] = [\n  'wait',\n  'changesOpen',\n  'monitorOpen',\n  'monitorClose',\n  'image',\n  'toolLabel',\n];\n\nexport const AgentControl: RemoteContract = contract('slicc.agent.control', {\n  control: { methods: CONTROL_METHODS },\n  view: { methods: [...CONTROL_READS, ...OWNER_DEVICE_METHODS] },\n});\n\nexport type Delivered = 'run' | 'steer' | 'follow-up';\n\nexport interface AgentTranscript {\n  readonly state: ReplicatedState<ConversationView>;\n  readonly deliveries: ReplicatedState<Record<string, Delivered>>;\n  readonly agents: ReplicatedState<AgentsSummary>;\n  readonly views: ReplicatedState<Record<string, ConversationView>>;\n  readonly commands: ReplicatedState<Command[]>;\n  readonly privateRevision: ReplicatedState<PrivateRevision>;\n  readonly sprinkles: ReplicatedState<Sprinkle[]>;\n  readonly memories: ReplicatedState<MemoryEntry[]>;\n  readonly memoryScopes: ReplicatedState<MemoryScope[]>;\n  readonly frozen: ReplicatedState<FrozenCone[]>;\n  readonly importing: ReplicatedState<ImportProgress>;\n  readonly changes: ReplicatedState<ChangesView>;\n  readonly monitor: ReplicatedState<MonitorFeed>;\n  readonly vault: ReplicatedState<VaultState>;\n  readonly labels: ReplicatedState<Record<string, string>>;\n  readonly guests: ReplicatedState<GuestSeat[]>;\n  readonly approvals: ReplicatedState<Approval[]>;\n  readonly approvalPolicy: ReplicatedState<ApprovalPolicy>;\n}\n\nexport interface PrivateRevision {\n  revision: number;\n}\n\nexport interface Command {\n  name: string;\n  description: string;\n  kind: 'prompt' | 'skill' | 'action';\n  source?: SkillSource;\n  package?: SkillPackage;\n}\n\nexport const TRANSCRIPT_STATES = keys<AgentTranscript>({\n  state: true,\n  deliveries: true,\n  agents: true,\n  views: true,\n  commands: true,\n  privateRevision: true,\n  sprinkles: true,\n  memories: true,\n  memoryScopes: true,\n  frozen: true,\n  importing: true,\n  changes: true,\n  monitor: true,\n  vault: true,\n  labels: true,\n  guests: true,\n  approvals: true,\n  approvalPolicy: true,\n});\n\nexport const AgentTranscript: RemoteContract = contract('slicc.agent.transcript', {\n  transcript: { state: TRANSCRIPT_STATES },\n});\n\nexport const REMOTE_METHODS = keys<AgentRemote>({\n  prompt: true,\n  watch: true,\n  next: true,\n  close: true,\n  abort: true,\n});\n\nexport const REMOTE_READS: readonly (keyof AgentRemote & string)[] = ['watch', 'next', 'close'];\n\nexport interface GuestShown {\n  id: string;\n  label: string;\n  agentId: string;\n  name: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n}\n\nexport interface GuestProposal {\n  id: string;\n  text: string;\n  state: 'queued' | 'pending' | 'approved' | 'rejected' | 'unanswered' | 'withdrawn';\n  reason: string | null;\n  createdAt: number;\n  decidedAt: number | null;\n}\n\nexport interface AgentGuest {\n  readonly transcript: ReplicatedState<ConversationView>;\n  readonly seat: ReplicatedState<GuestShown>;\n  readonly proposals: ReplicatedState<GuestProposal[]>;\n  propose(request: ProposeRequest, context: Context): Promise<Proposed>;\n  guestOpen(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  guestRevoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n}\n\nexport const GUEST_STATES = ['transcript', 'seat', 'proposals'] as const;\n\nexport const GUEST_METHODS = ['propose', 'guestOpen', 'guestRevoke'] as const;\n\nexport const AgentGuestService: RemoteContract = contract('slicc.agent.guest', {\n  guest: { state: GUEST_STATES, methods: GUEST_METHODS },\n  none: {},\n});\n\nexport const AgentRemoteService: RemoteContract = contract('slicc.agent.remote', {\n  remote: { methods: REMOTE_METHODS },\n  watch: { methods: REMOTE_READS },\n});\n\nexport const PAGE_METHODS = keys<AgentPages>({\n  open: true,\n  report: true,\n  next: true,\n  answer: true,\n  close: true,\n});\n\nexport const AgentPagesService: RemoteContract = contract('slicc.agent.pages', {\n  pages: { methods: PAGE_METHODS },\n  none: {},\n});\n\nexport const SUDO_METHODS = keys<Omit<AgentSudo, 'approvals'>>({\n  request: true,\n  withdraw: true,\n});\n\nexport const AgentSudoService: RemoteContract = contract('slicc.agent.sudo', {\n  sudo: { state: ['approvals'], methods: SUDO_METHODS },\n  none: {},\n});\n\nexport interface ModelChoice {\n  id: string;\n  label: string;\n  provider: string;\n  kind: 'chat' | 'classifier';\n  reasoning: boolean;\n  images?: boolean;\n  contextWindow: number;\n}\n\nexport interface AccountState {\n  id: string;\n  provider: string;\n  identity: string;\n  status: 'connected' | 'disconnected' | 'expired';\n  auth: 'api-key' | 'oauth';\n  needs: 'cors-free-transport' | null;\n  group?: 'providers' | 'mcp';\n  secret?: 'api-key' | 'token';\n  store?: 'vault';\n  fields?: AccountField[];\n  description?: string;\n  keyUrl?: string;\n  vaultName?: string;\n}\n\nexport interface AccountField {\n  name: string;\n  label: string;\n  required?: boolean;\n  placeholder?: string;\n  help?: string;\n}\n\nexport interface ProviderOption {\n  id: string;\n  name: string;\n  description?: string;\n  auth: 'api-key' | 'oauth' | 'fields' | 'local';\n  fields?: AccountField[];\n  keyUrl?: string;\n  needs?: 'cors-free-transport';\n  vaultName?: string;\n}\n\nexport interface BudgetState {\n  provider: string;\n  percent: number;\n  window: 'weekly';\n  resets: string;\n}\n\nexport interface SignIn {\n  clientId: string;\n  scopes: string;\n  imsEnvironment: string;\n}\n\nexport interface McpSignIn {\n  url: string;\n  state: string;\n}\n\nexport interface SettingsState {\n  models: ModelChoice[];\n  accounts: AccountState[];\n  providers?: ProviderOption[];\n  budget?: BudgetState | null;\n  moved?: { kind: 'model' | 'mcp'; label: string }[];\n  labels?: Record<string, string>;\n}\n\nexport interface AgentSettings {\n  readonly state: ReplicatedState<SettingsState>;\n  connect(\n    providerId: string,\n    secret: string | null,\n    fields: Record<string, string> | null,\n    context: Context\n  ): Promise<void>;\n  disconnect(providerId: string, context: Context): Promise<void>;\n  remove(providerId: string, context: Context): Promise<void>;\n  signIn(providerId: string, context: Context): Promise<SignIn | McpSignIn | null>;\n  dismissMoved(context: Context): Promise<void>;\n}\n\nexport const SETTINGS_METHODS = keys<Omit<AgentSettings, 'state'>>({\n  connect: true,\n  disconnect: true,\n  remove: true,\n  signIn: true,\n  dismissMoved: true,\n});\n\nexport const AgentSettings: RemoteContract = contract('slicc.agent.settings', {\n  settings: { state: ['state'], methods: SETTINGS_METHODS },\n  view: { state: ['state'] },\n});\n"],
-  "mappings": "AAmBA,SAAS,gBAAgB;AAoPzB,MAAM,OAAO,CAAI,WAAkC,OAAO,KAAK,MAAM;AAE9D,MAAM,kBAAkB,KAAmB;AAAA,EAChD,MAAM;AAAA,EACN,MAAM;AAAA,EACN,UAAU;AAAA,EACV,OAAO;AAAA,EACP,SAAS;AAAA,EACT,cAAc;AAAA,EACd,OAAO;AAAA,EACP,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,SAAS;AAAA,EACT,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,MAAM;AAAA,EACN,SAAS;AAAA,EACT,cAAc;AAAA,EACd,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA,EACT,eAAe;AAAA,EACf,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,OAAO;AAAA,EACP,eAAe;AAAA,EACf,WAAW;AAAA,EACX,WAAW;AAAA,EACX,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,QAAQ;AACV,CAAC;AAEM,MAAM,uBAAiE;AAAA,EAC5E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,gBAA0D;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,eAA+B,SAAS,uBAAuB;AAAA,EAC1E,SAAS,EAAE,SAAS,gBAAgB;AAAA,EACpC,MAAM,EAAE,SAAS,CAAC,GAAG,eAAe,GAAG,oBAAoB,EAAE;AAC/D,CAAC;AAqCM,MAAM,oBAAoB,KAAsB;AAAA,EACrD,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,UAAU;AAAA,EACV,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,gBAAgB;AAClB,CAAC;AAEM,MAAM,kBAAkC,SAAS,0BAA0B;AAAA,EAChF,YAAY,EAAE,OAAO,kBAAkB;AACzC,CAAC;AAEM,MAAM,iBAAiB,KAAkB;AAAA,EAC9C,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AACT,CAAC;AAEM,MAAM,eAAwD,CAAC,SAAS,QAAQ,OAAO;AA6BvF,MAAM,eAAe,CAAC,cAAc,QAAQ,WAAW;AAEvD,MAAM,gBAAgB,CAAC,WAAW,aAAa,aAAa;AAE5D,MAAM,oBAAoC,SAAS,qBAAqB;AAAA,EAC7E,OAAO,EAAE,OAAO,cAAc,SAAS,cAAc;AAAA,EACrD,MAAM,CAAC;AACT,CAAC;AAEM,MAAM,qBAAqC,SAAS,sBAAsB;AAAA,EAC/E,QAAQ,EAAE,SAAS,eAAe;AAAA,EAClC,OAAO,EAAE,SAAS,aAAa;AACjC,CAAC;AAEM,MAAM,eAAe,KAAiB;AAAA,EAC3C,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AACT,CAAC;AAEM,MAAM,oBAAoC,SAAS,qBAAqB;AAAA,EAC7E,OAAO,EAAE,SAAS,aAAa;AAAA,EAC/B,MAAM,CAAC;AACT,CAAC;AAEM,MAAM,eAAe,KAAmC;AAAA,EAC7D,SAAS;AAAA,EACT,UAAU;AACZ,CAAC;AAEM,MAAM,mBAAmC,SAAS,oBAAoB;AAAA,EAC3E,MAAM,EAAE,OAAO,CAAC,WAAW,GAAG,SAAS,aAAa;AAAA,EACpD,MAAM,CAAC;AACT,CAAC;AAwFM,MAAM,mBAAmB,KAAmC;AAAA,EACjE,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,cAAc;AAChB,CAAC;AAEM,MAAM,gBAAgC,SAAS,wBAAwB;AAAA,EAC5E,UAAU,EAAE,OAAO,CAAC,OAAO,GAAG,SAAS,iBAAiB;AAAA,EACxD,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE;AAC3B,CAAC;",
+  "sourcesContent": ["import type { Context, JsonValue, RemoteContract, ReplicatedState } from '@earendil-works/chord';\nimport type { ConversationView } from '@earendil-works/pi-durable';\nimport type { Approval, ApprovalAnswer, ApprovalDecided } from './approvals/index.ts';\nimport type {\n  ApprovalPolicy,\n  ApprovalPolicyChange,\n  ApprovalPolicySet,\n} from './approvals/policy.ts';\nimport type { AgentSudo } from './approvals/sudo.ts';\nimport type { SendAttachment, ShownAttachment } from './attachments.ts';\nimport type { ChangesView } from './changes/git.ts';\nimport type { FrozenCone } from './freezer/index.ts';\nimport type { ImportProgress, ImportResult } from './freezer/v6.ts';\nimport type { GuestOpened, Proposed, ProposeRequest } from './guests/index.ts';\nimport type { GuestDraft, GuestGates, GuestSeat } from './guests/seats.ts';\nimport type { MemoryEntry, MemoryScope, MemoryTag } from './memory/format.ts';\nimport type { AgentRemote } from './remote/host.ts';\nimport type { AgentPages } from './remote/pages.ts';\nimport type { VaultState } from './secrets/vault.ts';\nimport { contract } from './serving.ts';\nimport type { SkillPackage, SkillSource } from './skills/skills.ts';\nimport type { Sprinkle } from './sprinkles/kind.ts';\n\nexport type SendMode = 'steer' | 'followUp' | 'reject';\n\nexport interface SendRequest {\n  text: string;\n  whenBusy: SendMode;\n  requestId: string | null;\n  agentId?: string | null;\n  attachments?: SendAttachment[];\n}\n\nexport interface OperationError {\n  code: string;\n  message: string;\n}\n\nexport type SendResponse =\n  | { accepted: true; submissionId: string; error: null }\n  | { accepted: false; submissionId: null; error: OperationError };\n\nexport type PromptResult =\n  | { status: 'done'; text: string; reason: null }\n  | { status: 'unanswered'; text: null; reason: string };\n\nexport interface AgentControl {\n  send(request: SendRequest, context: Context): Promise<SendResponse>;\n  wait(submissionId: string, context: Context): Promise<PromptResult>;\n  withdraw(\n    submissionId: string,\n    context: Context\n  ): Promise<{ outcome: 'withdrawn' | 'already_placed' | 'not_found' }>;\n  abort(context: Context): Promise<void>;\n  compact(instructions: string | null, context: Context): Promise<SendResponse>;\n  compactAgent(\n    agentId: string,\n    instructions: string | null,\n    context: Context\n  ): Promise<SendResponse>;\n  reset(handoff: string | null, context: Context): Promise<void>;\n  configure(change: AgentSettingsChange, context: Context): Promise<void>;\n  rewind(messageId: string | null, context: Context): Promise<Rewound>;\n  rewindAgent(agentId: string, messageId: string | null, context: Context): Promise<Rewound>;\n  resolveLick(\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved>;\n  resolveAgentLick(\n    agentId: string,\n    lickId: string,\n    state: 'confirmed' | 'dismissed',\n    context: Context\n  ): Promise<LickResolved>;\n  webhook(\n    name: string,\n    delivery: WebhookRequest,\n    context: Context\n  ): Promise<{ delivered: boolean }>;\n  stopAgent(agentId: string, context: Context): Promise<void>;\n  selectCone(agentId: string, context: Context): Promise<void>;\n  createCone(name: string, context: Context): Promise<Created>;\n  createScoop(parentId: string, name: string, context: Context): Promise<Created>;\n  drop(agentId: string, context: Context): Promise<Created>;\n  unqueue(\n    agentId: string | null,\n    submissionId: string,\n    context: Context\n  ): Promise<{ outcome: 'withdrawn' | 'already_placed' | 'not_found' }>;\n  sprinkleSend(\n    sprinkleId: string,\n    payload: { action: string; data: JsonValue | null; target: string | null },\n    context: Context\n  ): Promise<{ delivered: boolean }>;\n  sprinkleCall(\n    sprinkleId: string,\n    method: string,\n    args: JsonValue[],\n    context: Context\n  ): Promise<JsonValue>;\n  memorySave(draft: MemoryDraft, context: Context): Promise<MemoryEntry>;\n  memoryRemove(id: string, context: Context): Promise<{ removed: boolean }>;\n  freeze(agentId: string, context: Context): Promise<Created>;\n  newChat(agentId: string, context: Context): Promise<Created>;\n  thaw(frozenId: string, context: Context): Promise<Created>;\n  discard(frozenId: string, context: Context): Promise<Created>;\n  importProfile(request: ImportRequest, context: Context): Promise<ImportResult>;\n  importCancel(context: Context): Promise<void>;\n  changesOpen(context: Context): Promise<void>;\n  changeAccept(path: string, context: Context): Promise<Created>;\n  changeRevert(path: string, context: Context): Promise<Created>;\n  monitorOpen(lease: string | null, resync: boolean, context: Context): Promise<MonitorLease>;\n  monitorClose(lease: string, context: Context): Promise<void>;\n  image(ref: ImageRef, context: Context): Promise<StoredImage>;\n  agentCommands(agentId: string, context: Context): Promise<Command[]>;\n  toolLabel(agentId: string, callIds: string[], context: Context): Promise<string | null>;\n  guestOpen(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  guestRevoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n  guestAlwaysForget(\n    seat: string,\n    approval: string,\n    context: Context\n  ): Promise<{ removed: boolean }>;\n  approvalPolicySet(change: ApprovalPolicyChange, context: Context): Promise<ApprovalPolicySet>;\n  decide(\n    id: string,\n    decision: ApprovalAnswer,\n    reason: string | null,\n    context: Context\n  ): Promise<ApprovalDecided>;\n}\n\nexport interface ImportRequest {\n  upload: string | null;\n  data: string | null;\n  again: boolean;\n  preview: boolean;\n}\n\nexport interface ImageRef {\n  entry: number;\n  message: number;\n  part: number;\n}\n\nexport type StoredImage = { data: string; mimeType: string } | { data: null; mimeType: null };\n\nexport interface MonitorLease {\n  lease: string;\n  ttlMs: number;\n}\n\nexport interface MonitorAgent {\n  id: string;\n  name: string;\n  kind: 'cone' | 'scoop';\n  parentId: string | null;\n  model: string | null;\n  running: boolean;\n  queued: number;\n  tool: string | null;\n  retry: { attempt: number; since: number; error: string } | null;\n  failed: string | null;\n  context: number | null;\n  cpu?: number | null;\n}\n\nexport interface MonitorTask {\n  id: string;\n  kind: string;\n  detail: string | null;\n  agentId: string | null;\n  owner: string | null;\n  status: 'pending' | 'running' | 'waiting' | 'completing';\n  phase: string;\n  background: boolean;\n  aborting: number | null;\n  since: number;\n  waits: number;\n}\n\nexport interface MonitorProcess {\n  pid: number;\n  ppid: number;\n  pgid: number;\n  user: string | null;\n  agentId: string | null;\n  command: string;\n  state: 'S' | 'Z';\n  started: number;\n  zombie: number | null;\n  tty: boolean;\n  rss: number | null;\n  utime?: number;\n  stime?: number;\n  cpu?: number | null;\n}\n\nexport interface MonitorProblem {\n  id: string;\n  at: number;\n  agentId: string | null;\n  kind: 'task' | 'retry' | 'turn';\n  message: string;\n}\n\nexport interface MonitorFeed {\n  open: boolean;\n  at: number;\n  usage: { tokens: number; cost: number; free: boolean } | null;\n  agents: MonitorAgent[];\n  tasks: MonitorTask[];\n  processes: MonitorProcess[] | null;\n  kernel: 'checking' | 'ok' | 'unreachable';\n  problems: MonitorProblem[];\n  paused: boolean;\n}\n\nexport interface MemoryDraft {\n  id: string | null;\n  scope: string;\n  section: string;\n  title: string;\n  body: string;\n  tag: MemoryTag | null;\n}\n\nexport type Created = { id: string; error: null } | { id: null; error: string };\n\nexport interface AgentSummary {\n  id: string;\n  name: string;\n  kind: 'cone' | 'scoop';\n  parentId: string | null;\n  role: string | null;\n}\n\nexport interface AgentsSummary {\n  active: string;\n  agents: AgentSummary[];\n}\n\nexport type LickResolved =\n  | { done: true; text: string; error: null }\n  | { done: false; text: null; error: string };\n\nexport interface WebhookRequest {\n  id: string | null;\n  headers: Record<string, string>;\n  body: string;\n}\n\nexport type Rewound =\n  | { done: true; text: string; reason: null; attachments?: ShownAttachment[] }\n  | { done: false; text: null; reason: 'busy' | 'no-turn' };\n\nexport interface AgentSettingsChange {\n  model: { provider: string; modelId: string } | null;\n  thinkingLevel: 'off' | 'minimal' | 'low' | 'medium' | 'high' | 'xhigh' | 'max' | null;\n  agentId?: string | null;\n}\n\nconst keys = <T>(record: Record<keyof T, true>) => Object.keys(record) as (keyof T & string)[];\n\nexport const CONTROL_METHODS = keys<AgentControl>({\n  send: true,\n  wait: true,\n  withdraw: true,\n  abort: true,\n  compact: true,\n  compactAgent: true,\n  reset: true,\n  configure: true,\n  rewind: true,\n  rewindAgent: true,\n  resolveLick: true,\n  resolveAgentLick: true,\n  webhook: true,\n  stopAgent: true,\n  selectCone: true,\n  createCone: true,\n  createScoop: true,\n  drop: true,\n  unqueue: true,\n  sprinkleSend: true,\n  sprinkleCall: true,\n  memorySave: true,\n  memoryRemove: true,\n  freeze: true,\n  newChat: true,\n  thaw: true,\n  discard: true,\n  importProfile: true,\n  importCancel: true,\n  changesOpen: true,\n  changeAccept: true,\n  changeRevert: true,\n  monitorOpen: true,\n  monitorClose: true,\n  image: true,\n  agentCommands: true,\n  toolLabel: true,\n  guestOpen: true,\n  guestRevoke: true,\n  guestAlwaysForget: true,\n  approvalPolicySet: true,\n  decide: true,\n});\n\nexport const OWNER_DEVICE_METHODS: readonly (keyof AgentControl & string)[] = [\n  'decide',\n  'guestOpen',\n  'guestRevoke',\n  'guestAlwaysForget',\n  'approvalPolicySet',\n];\n\nexport const CONTROL_READS: readonly (keyof AgentControl & string)[] = [\n  'wait',\n  'changesOpen',\n  'monitorOpen',\n  'monitorClose',\n  'image',\n  'toolLabel',\n];\n\nexport const AgentControl: RemoteContract = contract('slicc.agent.control', {\n  control: { methods: CONTROL_METHODS },\n  view: { methods: [...CONTROL_READS, ...OWNER_DEVICE_METHODS] },\n});\n\nexport type Delivered = 'run' | 'steer' | 'follow-up';\n\nexport interface AgentTranscript {\n  readonly state: ReplicatedState<ConversationView>;\n  readonly deliveries: ReplicatedState<Record<string, Delivered>>;\n  readonly agents: ReplicatedState<AgentsSummary>;\n  readonly views: ReplicatedState<Record<string, ConversationView>>;\n  readonly commands: ReplicatedState<Command[]>;\n  readonly privateRevision: ReplicatedState<PrivateRevision>;\n  readonly sprinkles: ReplicatedState<Sprinkle[]>;\n  readonly memories: ReplicatedState<MemoryEntry[]>;\n  readonly memoryScopes: ReplicatedState<MemoryScope[]>;\n  readonly frozen: ReplicatedState<FrozenCone[]>;\n  readonly importing: ReplicatedState<ImportProgress>;\n  readonly changes: ReplicatedState<ChangesView>;\n  readonly monitor: ReplicatedState<MonitorFeed>;\n  readonly vault: ReplicatedState<VaultState>;\n  readonly labels: ReplicatedState<Record<string, string>>;\n  readonly guests: ReplicatedState<GuestSeat[]>;\n  readonly approvals: ReplicatedState<Approval[]>;\n  readonly approvalPolicy: ReplicatedState<ApprovalPolicy>;\n}\n\nexport interface PrivateRevision {\n  revision: number;\n}\n\nexport interface Command {\n  name: string;\n  description: string;\n  kind: 'prompt' | 'skill' | 'action';\n  source?: SkillSource;\n  package?: SkillPackage;\n}\n\nexport const TRANSCRIPT_STATES = keys<AgentTranscript>({\n  state: true,\n  deliveries: true,\n  agents: true,\n  views: true,\n  commands: true,\n  privateRevision: true,\n  sprinkles: true,\n  memories: true,\n  memoryScopes: true,\n  frozen: true,\n  importing: true,\n  changes: true,\n  monitor: true,\n  vault: true,\n  labels: true,\n  guests: true,\n  approvals: true,\n  approvalPolicy: true,\n});\n\nexport const AgentTranscript: RemoteContract = contract('slicc.agent.transcript', {\n  transcript: { state: TRANSCRIPT_STATES },\n});\n\nexport const REMOTE_METHODS = keys<AgentRemote>({\n  prompt: true,\n  watch: true,\n  next: true,\n  close: true,\n  abort: true,\n});\n\nexport const REMOTE_READS: readonly (keyof AgentRemote & string)[] = ['watch', 'next', 'close'];\n\nexport interface GuestShown {\n  id: string;\n  label: string;\n  agentId: string;\n  name: string;\n  expiresAt: number | null;\n  gates: GuestGates;\n}\n\nexport interface GuestProposal {\n  id: string;\n  text: string;\n  state: 'queued' | 'pending' | 'approved' | 'rejected' | 'unanswered' | 'withdrawn';\n  reason: string | null;\n  createdAt: number;\n  decidedAt: number | null;\n}\n\nexport interface AgentGuest {\n  readonly transcript: ReplicatedState<ConversationView>;\n  readonly seat: ReplicatedState<GuestShown>;\n  readonly proposals: ReplicatedState<GuestProposal[]>;\n  propose(request: ProposeRequest, context: Context): Promise<Proposed>;\n  guestOpen(draft: GuestDraft, context: Context): Promise<GuestOpened>;\n  guestRevoke(id: string, context: Context): Promise<{ revoked: boolean }>;\n}\n\nexport const GUEST_STATES = ['transcript', 'seat', 'proposals'] as const;\n\nexport const GUEST_METHODS = ['propose', 'guestOpen', 'guestRevoke'] as const;\n\nexport const AgentGuestService: RemoteContract = contract('slicc.agent.guest', {\n  guest: { state: GUEST_STATES, methods: GUEST_METHODS },\n  none: {},\n});\n\nexport const AgentRemoteService: RemoteContract = contract('slicc.agent.remote', {\n  remote: { methods: REMOTE_METHODS },\n  watch: { methods: REMOTE_READS },\n});\n\nexport const PAGE_METHODS = keys<AgentPages>({\n  open: true,\n  report: true,\n  next: true,\n  answer: true,\n  close: true,\n});\n\nexport const AgentPagesService: RemoteContract = contract('slicc.agent.pages', {\n  pages: { methods: PAGE_METHODS },\n  none: {},\n});\n\nexport const SUDO_METHODS = keys<Omit<AgentSudo, 'approvals'>>({\n  request: true,\n  withdraw: true,\n});\n\nexport const AgentSudoService: RemoteContract = contract('slicc.agent.sudo', {\n  sudo: { state: ['approvals'], methods: SUDO_METHODS },\n  none: {},\n});\n\nexport interface ModelChoice {\n  id: string;\n  label: string;\n  provider: string;\n  kind: 'chat' | 'classifier';\n  reasoning: boolean;\n  images?: boolean;\n  contextWindow: number;\n}\n\nexport interface AccountState {\n  id: string;\n  provider: string;\n  identity: string;\n  status: 'connected' | 'disconnected' | 'expired';\n  auth: 'api-key' | 'oauth';\n  needs: 'cors-free-transport' | null;\n  group?: 'providers' | 'mcp';\n  secret?: 'api-key' | 'token';\n  store?: 'vault';\n  fields?: AccountField[];\n  description?: string;\n  keyUrl?: string;\n  vaultName?: string;\n}\n\nexport interface AccountField {\n  name: string;\n  label: string;\n  required?: boolean;\n  placeholder?: string;\n  help?: string;\n  customBase?: true;\n}\n\nexport interface ProviderOption {\n  id: string;\n  name: string;\n  description?: string;\n  auth: 'api-key' | 'oauth' | 'fields' | 'local';\n  fields?: AccountField[];\n  keyUrl?: string;\n  needs?: 'cors-free-transport';\n  vaultName?: string;\n}\n\nexport interface BudgetState {\n  provider: string;\n  percent: number;\n  window: 'weekly';\n  resets: string;\n}\n\nexport interface SignIn {\n  clientId: string;\n  scopes: string;\n  imsEnvironment: string;\n}\n\nexport interface McpSignIn {\n  url: string;\n  state: string;\n}\n\nexport interface SettingsState {\n  models: ModelChoice[];\n  accounts: AccountState[];\n  providers?: ProviderOption[];\n  budget?: BudgetState | null;\n  moved?: { kind: 'model' | 'mcp'; label: string }[];\n  labels?: Record<string, string>;\n}\n\nexport interface AgentSettings {\n  readonly state: ReplicatedState<SettingsState>;\n  connect(\n    providerId: string,\n    secret: string | null,\n    fields: Record<string, string> | null,\n    context: Context\n  ): Promise<void>;\n  disconnect(providerId: string, context: Context): Promise<void>;\n  remove(providerId: string, context: Context): Promise<void>;\n  signIn(providerId: string, context: Context): Promise<SignIn | McpSignIn | null>;\n  dismissMoved(context: Context): Promise<void>;\n}\n\nexport const SETTINGS_METHODS = keys<Omit<AgentSettings, 'state'>>({\n  connect: true,\n  disconnect: true,\n  remove: true,\n  signIn: true,\n  dismissMoved: true,\n});\n\nexport const AgentSettings: RemoteContract = contract('slicc.agent.settings', {\n  settings: { state: ['state'], methods: SETTINGS_METHODS },\n  view: { state: ['state'] },\n});\n"],
+  "mappings": "AAmBA,SAAS,gBAAgB;AAoPzB,MAAM,OAAO,CAAI,WAAkC,OAAO,KAAK,MAAM;AAE9D,MAAM,kBAAkB,KAAmB;AAAA,EAChD,MAAM;AAAA,EACN,MAAM;AAAA,EACN,UAAU;AAAA,EACV,OAAO;AAAA,EACP,SAAS;AAAA,EACT,cAAc;AAAA,EACd,OAAO;AAAA,EACP,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,aAAa;AAAA,EACb,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,SAAS;AAAA,EACT,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,aAAa;AAAA,EACb,MAAM;AAAA,EACN,SAAS;AAAA,EACT,cAAc;AAAA,EACd,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS;AAAA,EACT,eAAe;AAAA,EACf,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,cAAc;AAAA,EACd,aAAa;AAAA,EACb,cAAc;AAAA,EACd,OAAO;AAAA,EACP,eAAe;AAAA,EACf,WAAW;AAAA,EACX,WAAW;AAAA,EACX,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,QAAQ;AACV,CAAC;AAEM,MAAM,uBAAiE;AAAA,EAC5E;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,gBAA0D;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,eAA+B,SAAS,uBAAuB;AAAA,EAC1E,SAAS,EAAE,SAAS,gBAAgB;AAAA,EACpC,MAAM,EAAE,SAAS,CAAC,GAAG,eAAe,GAAG,oBAAoB,EAAE;AAC/D,CAAC;AAqCM,MAAM,oBAAoB,KAAsB;AAAA,EACrD,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,UAAU;AAAA,EACV,iBAAiB;AAAA,EACjB,WAAW;AAAA,EACX,UAAU;AAAA,EACV,cAAc;AAAA,EACd,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,WAAW;AAAA,EACX,gBAAgB;AAClB,CAAC;AAEM,MAAM,kBAAkC,SAAS,0BAA0B;AAAA,EAChF,YAAY,EAAE,OAAO,kBAAkB;AACzC,CAAC;AAEM,MAAM,iBAAiB,KAAkB;AAAA,EAC9C,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AACT,CAAC;AAEM,MAAM,eAAwD,CAAC,SAAS,QAAQ,OAAO;AA6BvF,MAAM,eAAe,CAAC,cAAc,QAAQ,WAAW;AAEvD,MAAM,gBAAgB,CAAC,WAAW,aAAa,aAAa;AAE5D,MAAM,oBAAoC,SAAS,qBAAqB;AAAA,EAC7E,OAAO,EAAE,OAAO,cAAc,SAAS,cAAc;AAAA,EACrD,MAAM,CAAC;AACT,CAAC;AAEM,MAAM,qBAAqC,SAAS,sBAAsB;AAAA,EAC/E,QAAQ,EAAE,SAAS,eAAe;AAAA,EAClC,OAAO,EAAE,SAAS,aAAa;AACjC,CAAC;AAEM,MAAM,eAAe,KAAiB;AAAA,EAC3C,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO;AACT,CAAC;AAEM,MAAM,oBAAoC,SAAS,qBAAqB;AAAA,EAC7E,OAAO,EAAE,SAAS,aAAa;AAAA,EAC/B,MAAM,CAAC;AACT,CAAC;AAEM,MAAM,eAAe,KAAmC;AAAA,EAC7D,SAAS;AAAA,EACT,UAAU;AACZ,CAAC;AAEM,MAAM,mBAAmC,SAAS,oBAAoB;AAAA,EAC3E,MAAM,EAAE,OAAO,CAAC,WAAW,GAAG,SAAS,aAAa;AAAA,EACpD,MAAM,CAAC;AACT,CAAC;AAyFM,MAAM,mBAAmB,KAAmC;AAAA,EACjE,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,cAAc;AAChB,CAAC;AAEM,MAAM,gBAAgC,SAAS,wBAAwB;AAAA,EAC5E,UAAU,EAAE,OAAO,CAAC,OAAO,GAAG,SAAS,iBAAiB;AAAA,EACxD,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE;AAC3B,CAAC;",
   "names": []
 }

package/dist/settings.js

@@ -17,10 +17,10 @@ import { ADDED_FIRST, KEY_PROVIDERS, LISTINGS } from "./providers.js";
 import { BEDROCK as BEDROCK2, PREFERRED_MODELS, preferredModel as preferredModel2 } from "./preferred.js";
 const DEFAULT_MODEL = { provider: BEDROCK, modelId: "us.anthropic.claude-sonnet-5-5" };
 const DEFAULT_REGIONS = { [BEDROCK]: "us-west-2" };
-const ACCOUNT_FIELDS = {
-  [BEDROCK]: [{ name: "region", label: "Region" }]
-};
-const FIELD_ENV = { region: "AWS_REGION" };
+const specs = (providerId) => LISTINGS.get(providerId)?.fields ?? [];
+const ACCOUNT_FIELDS = Object.fromEntries(
+  [...LISTINGS.keys()].filter((id) => specs(id).length).map((id) => [id, specs(id).map(({ env: _env, ...field }) => field)])
+);
 const SIGN_IN_NEEDS_VAULT = "Adobe sign-in needs seven's vault: update seven";
 const KEY_NEEDS_VAULT = "API keys are kept in seven's vault: update seven";
 async function resolveDefaultModel(credentials, providers, models) {
@@ -92,9 +92,9 @@ function listed(records, fields) {
   const added = new Set(fields.added() ?? ADDED_FIRST);
   return (providerId) => !LISTINGS.has(providerId) || added.has(providerId) || records.model(providerId) !== void 0 || fields.get(providerId) !== void 0;
 }
-function accounts(records, providers) {
+function accounts(records, providers, ready) {
   return providers.map((provider) => {
-    const record = records.model(provider.id);
+    const record = ready(provider.id) ? records.model(provider.id) : void 0;
     const fields = ACCOUNT_FIELDS[provider.id];
     const listing = LISTINGS.get(provider.id);
     return {
@@ -148,6 +148,11 @@ async function providerFields(store, providers) {
     await store.set(ADDED, next);
   };
   return {
+    ready: (providerId) => specs(providerId).every((spec) => {
+      const value = known.get(providerId)?.[spec.name];
+      if (value === void 0) return !spec.required;
+      return typeof spec.env(value.trim()) !== "string";
+    }),
     added: () => added,
     async add(providerId) {
       const now = added ?? ADDED_FIRST;
@@ -163,19 +168,30 @@ async function providerFields(store, providers) {
     env(providerId) {
       const fields = known.get(providerId);
       if (!fields) return void 0;
-      return Object.fromEntries(
-        Object.entries(fields).flatMap(
-          ([name, value]) => FIELD_ENV[name] ? [[FIELD_ENV[name], value]] : []
-        )
+      return Object.assign(
+        {},
+        ...specs(providerId).flatMap((spec) => {
+          const value = fields[spec.name];
+          const env = value === void 0 ? "" : spec.env(value.trim());
+          return typeof env === "string" ? [] : [env];
+        })
       );
     },
     async set(providerId, fields) {
-      const allowed = new Set((ACCOUNT_FIELDS[providerId] ?? []).map((field) => field.name));
-      const kept = Object.fromEntries(
-        Object.entries(fields ?? {}).filter(
-          ([name, value]) => allowed.has(name) && typeof value === "string" && value.trim() !== ""
-        )
-      );
+      const kept = {};
+      for (const spec of specs(providerId)) {
+        const given = fields?.[spec.name];
+        const value = typeof given === "string" ? given.trim() : "";
+        const stored = known.get(providerId)?.[spec.name];
+        if (!value && spec.required && fields && stored) kept[spec.name] = stored;
+        else if (!value && spec.required && fields)
+          throw new Error(`${spec.label} can\u2019t be empty.`);
+        else if (value) {
+          const problem = spec.env(value);
+          if (typeof problem === "string") throw new Error(problem);
+          kept[spec.name] = value;
+        }
+      }
       const next = Object.keys(kept).length ? kept : void 0;
       if (next) known.set(providerId, next);
       else known.delete(providerId);
@@ -198,14 +214,14 @@ async function createAgentSettings(models, sources, providers = sliccProviders()
   const usage = options.usage ?? ((token) => adobeUsage(token, { endpoint, identity }));
   const snapshot = async () => {
     const stored = new Set(
-      providers.filter((provider) => records.model(provider.id)).map((provider) => provider.id)
+      providers.filter((provider) => records.model(provider.id) && fields.ready(provider.id)).map((provider) => provider.id)
     );
     const show = listed(records, fields);
     const shown = providers.filter((provider) => show(provider.id));
     return {
       models: choices(models, providers, stored),
       labels: labels(models, shown, stored),
-      accounts: [...accounts(records, shown), ...await mcp?.accounts() ?? []],
+      accounts: [...accounts(records, shown, fields.ready), ...await mcp?.accounts() ?? []],
       providers: offered(providers),
       budget: await budget(records, usage),
       ...moved?.state.value?.length ? { moved: moved.state.value.map((name) => ({ ...name })) } : {}
@@ -252,8 +268,8 @@ async function createAgentSettings(models, sources, providers = sliccProviders()
       }
       if (secret !== null)
         throw new Error(signIn.has(providerId) ? SIGN_IN_NEEDS_VAULT : KEY_NEEDS_VAULT);
-      if (LISTINGS.has(providerId)) await fields.add(providerId);
       if (given !== null) await fields.set(providerId, given);
+      if (LISTINGS.has(providerId)) await fields.add(providerId);
       records.reconnected(providerId);
       await reread(context);
       if (signIn.has(providerId)) await discover([providerId]);

package/dist/settings.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/settings.ts"],
-  "sourcesContent": ["import { type Context, replicatedState } from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { CredentialStore, Provider } from '@earendil-works/pi-ai';\nimport { createModels, type MutableModels } from '@earendil-works/pi-ai/models';\nimport { amazonBedrockProvider } from '@earendil-works/pi-ai/providers/amazon-bedrock';\nimport {\n  ADOBE,\n  ADOBE_PROXY,\n  adobeConfig,\n  adobeIdentity,\n  adobeProvider,\n  adobeUsage,\n  type Budget,\n} from './adobe.ts';\nimport { abortableBedrock } from './bedrock.ts';\nimport type { McpAccounts } from './mcp/index.ts';\nimport { MCP_ACCOUNT } from './mcp/label.ts';\nimport { BEDROCK, preferredModel } from './preferred.ts';\nimport { ADDED_FIRST, KEY_PROVIDERS, LISTINGS } from './providers.ts';\nimport type { KeysMoved } from './secrets/legacy.ts';\nimport type { VaultRecords } from './secrets/records.ts';\nimport type { PlainStore } from './secrets/store.ts';\nimport type {\n  AccountField,\n  AccountState,\n  AgentSettings,\n  ModelChoice,\n  ProviderOption,\n  SettingsState,\n} from './services.ts';\n\nexport { BEDROCK, PREFERRED_MODELS, preferredModel } from './preferred.ts';\n\nexport const DEFAULT_MODEL = { provider: BEDROCK, modelId: 'us.anthropic.claude-sonnet-5-5' };\nexport const DEFAULT_REGIONS: Readonly<Record<string, string>> = { [BEDROCK]: 'us-west-2' };\n\nexport const ACCOUNT_FIELDS: Readonly<Record<string, readonly AccountField[]>> = {\n  [BEDROCK]: [{ name: 'region', label: 'Region' }],\n};\nconst FIELD_ENV: Readonly<Record<string, string>> = { region: 'AWS_REGION' };\nexport const SIGN_IN_NEEDS_VAULT = \"Adobe sign-in needs seven's vault: update seven\";\nexport const KEY_NEEDS_VAULT = \"API keys are kept in seven's vault: update seven\";\n\nexport async function resolveDefaultModel(\n  credentials: CredentialStore,\n  providers: Provider[],\n  models: MutableModels\n): Promise<{ provider: string; modelId: string }> {\n  const stored = new Set((await credentials.list()).map((info) => info.providerId));\n  for (const provider of providers) {\n    if (!stored.has(provider.id)) continue;\n    if (!models.getModels(provider.id).length && provider.refreshModels) {\n      await models.refresh({ providers: [provider.id] }).catch(() => undefined);\n    }\n    const chosen = preferredModel(provider.id, models.getModels(provider.id));\n    if (chosen) return { provider: provider.id, modelId: chosen.id };\n  }\n  return DEFAULT_MODEL;\n}\n\nconst signIn = new Set([ADOBE]);\nconst BUDGET_EVERY = 5 * 60 * 1000;\n\nexport function sliccProviders(version?: string): Provider[] {\n  return [\n    amazonBedrockProvider() as Provider,\n    adobeProvider({ version }),\n    ...KEY_PROVIDERS.map((entry) => entry.make()),\n  ];\n}\n\nexport function withDefaultRegions(credentials: CredentialStore): CredentialStore {\n  return {\n    async read(providerId, options) {\n      const credential = await credentials.read(providerId, options);\n      const region = DEFAULT_REGIONS[providerId];\n      if (credential?.type !== 'api_key' || !region || credential.env?.AWS_REGION) {\n        return credential;\n      }\n      return { ...credential, env: { ...credential.env, AWS_REGION: region } };\n    },\n    list: (options) => credentials.list(options),\n    modify: (providerId, fn, options) => credentials.modify(providerId, fn, options),\n    delete: (providerId, options) => credentials.delete(providerId, options),\n  };\n}\n\nexport function createSliccModels(\n  credentials: CredentialStore,\n  providers = sliccProviders()\n): MutableModels {\n  const models = createModels({ credentials: withDefaultRegions(credentials) });\n  for (const provider of providers) models.setProvider(abortableBedrock(provider));\n  return models;\n}\n\nconst SHORT: Record<string, string> = { [BEDROCK]: 'Bedrock', [ADOBE]: 'Adobe' };\n\nfunction labels(\n  models: MutableModels,\n  providers: Provider[],\n  stored: ReadonlySet<string>\n): Record<string, string> {\n  return Object.fromEntries(\n    providers\n      .filter((provider) => !stored.has(provider.id))\n      .flatMap((provider) =>\n        models\n          .getModels(provider.id)\n          .map((model) => [\n            `${provider.id}/${model.id}`,\n            `${model.name} on ${SHORT[provider.id] ?? provider.name ?? provider.id}`,\n          ])\n      )\n  );\n}\n\nfunction choices(\n  models: MutableModels,\n  providers: Provider[],\n  stored: ReadonlySet<string>\n): ModelChoice[] {\n  return providers\n    .filter((provider) => stored.has(provider.id))\n    .flatMap((provider) =>\n      models.getModels(provider.id).map((model) => ({\n        id: `${provider.id}/${model.id}`,\n        label: model.name,\n        provider: provider.name ?? provider.id,\n        kind: 'chat' as const,\n        reasoning: Boolean(model.reasoning),\n        images: model.input.includes('image'),\n        contextWindow: model.contextWindow,\n      }))\n    );\n}\n\nfunction listed(\n  records: Pick<VaultRecords, 'model'>,\n  fields: Pick<ProviderFields, 'get' | 'added'>\n): (providerId: string) => boolean {\n  const added = new Set(fields.added() ?? ADDED_FIRST);\n  return (providerId) =>\n    !LISTINGS.has(providerId) ||\n    added.has(providerId) ||\n    records.model(providerId) !== undefined ||\n    fields.get(providerId) !== undefined;\n}\n\nfunction accounts(records: Pick<VaultRecords, 'model'>, providers: Provider[]): AccountState[] {\n  return providers.map((provider) => {\n    const record = records.model(provider.id);\n    const fields = ACCOUNT_FIELDS[provider.id];\n    const listing = LISTINGS.get(provider.id);\n    return {\n      id: provider.id,\n      provider: provider.name ?? provider.id,\n      identity: record ? (signIn.has(provider.id) ? 'Adobe ID' : 'API key') : '',\n      status: !record ? 'disconnected' : record.state === 'expired' ? 'expired' : 'connected',\n      auth: signIn.has(provider.id) ? 'oauth' : 'api-key',\n      needs: listing?.corsFree ? 'cors-free-transport' : null,\n      group: 'providers',\n      store: 'vault',\n      ...(fields ? { fields: fields.map((field) => ({ ...field })) } : {}),\n      ...(listing\n        ? {\n            description: listing.description,\n            vaultName: listing.vaultName,\n            ...(listing.keyUrl ? { keyUrl: listing.keyUrl } : {}),\n          }\n        : {}),\n    };\n  });\n}\n\nfunction offered(providers: Provider[]): ProviderOption[] {\n  return providers\n    .flatMap((provider): ProviderOption[] => {\n      const listing = LISTINGS.get(provider.id);\n      if (!listing) return [];\n      const fields = ACCOUNT_FIELDS[provider.id];\n      return [\n        {\n          id: provider.id,\n          name: provider.name,\n          description: listing.description,\n          auth: listing.auth,\n          vaultName: listing.vaultName,\n          ...(fields ? { fields: fields.map((field) => ({ ...field })) } : {}),\n          ...(listing.keyUrl ? { keyUrl: listing.keyUrl } : {}),\n          ...(listing.corsFree ? { needs: 'cors-free-transport' as const } : {}),\n        },\n      ];\n    })\n    .sort((a, b) => a.name.localeCompare(b.name));\n}\n\nexport interface ProviderFields {\n  get(providerId: string): Readonly<Record<string, string>> | undefined;\n  env(providerId: string): Readonly<Record<string, string>> | undefined;\n  set(providerId: string, fields: Record<string, string> | undefined): Promise<void>;\n  added(): readonly string[] | undefined;\n  add(providerId: string): Promise<void>;\n  forget(providerId: string): Promise<void>;\n}\n\nconst ADDED = 'providers';\n\nexport async function providerFields(\n  store: PlainStore,\n  providers: readonly Provider[]\n): Promise<ProviderFields> {\n  const known = new Map<string, Record<string, string>>();\n  for (const provider of providers) {\n    const saved = (await store.get(`model:${provider.id}`)) as Record<string, string> | undefined;\n    if (saved && typeof saved === 'object') known.set(provider.id, saved);\n  }\n  const saved = await store.get(ADDED);\n  let added = Array.isArray(saved)\n    ? saved.filter((id): id is string => typeof id === 'string')\n    : undefined;\n  const keep = async (next: string[]) => {\n    added = next;\n    await store.set(ADDED, next);\n  };\n  return {\n    added: () => added,\n    async add(providerId) {\n      const now = added ?? ADDED_FIRST;\n      if (added && now.includes(providerId)) return;\n      await keep([...new Set([...now, providerId])]);\n    },\n    async forget(providerId) {\n      await keep((added ?? ADDED_FIRST).filter((id) => id !== providerId));\n      known.delete(providerId);\n      await store.set(`model:${providerId}`, undefined);\n    },\n    get: (providerId) => known.get(providerId),\n    env(providerId) {\n      const fields = known.get(providerId);\n      if (!fields) return undefined;\n      return Object.fromEntries(\n        Object.entries(fields).flatMap(([name, value]) =>\n          FIELD_ENV[name] ? [[FIELD_ENV[name], value]] : []\n        )\n      );\n    },\n    async set(providerId, fields) {\n      const allowed = new Set((ACCOUNT_FIELDS[providerId] ?? []).map((field) => field.name));\n      const kept = Object.fromEntries(\n        Object.entries(fields ?? {}).filter(\n          ([name, value]) => allowed.has(name) && typeof value === 'string' && value.trim() !== ''\n        )\n      );\n      const next = Object.keys(kept).length ? kept : undefined;\n      if (next) known.set(providerId, next);\n      else known.delete(providerId);\n      await store.set(`model:${providerId}`, next);\n    },\n  };\n}\n\nexport type UsageReader = (token: string) => Promise<Budget | null>;\n\nasync function budget(records: Pick<VaultRecords, 'model'>, usage: UsageReader) {\n  const key = records.model(ADOBE)?.placeholder;\n  const found = key ? await usage(key).catch(() => null) : null;\n  return found ? { provider: ADOBE, ...found } : null;\n}\n\nexport interface SettingsSources {\n  records: VaultRecords;\n  fields: ProviderFields;\n}\n\nexport async function createAgentSettings(\n  models: MutableModels,\n  sources: SettingsSources,\n  providers = sliccProviders(),\n  options: { usage?: UsageReader; every?: number; mcp?: McpAccounts; moved?: KeysMoved } = {}\n): Promise<AgentSettings> {\n  const { mcp, moved } = options;\n  const { records, fields } = sources;\n  const routed = (providerId: string) => (providerId.startsWith(MCP_ACCOUNT) ? mcp : undefined);\n  const adobe = providers.find((provider) => provider.id === ADOBE);\n  const endpoint = adobe?.baseUrl ?? ADOBE_PROXY;\n  const identity = (adobe?.headers as Record<string, string> | undefined) ?? adobeIdentity();\n  const usage = options.usage ?? ((token: string) => adobeUsage(token, { endpoint, identity }));\n  const snapshot = async (): Promise<SettingsState> => {\n    const stored = new Set(\n      providers.filter((provider) => records.model(provider.id)).map((provider) => provider.id)\n    );\n    const show = listed(records, fields);\n    const shown = providers.filter((provider) => show(provider.id));\n    return {\n      models: choices(models, providers, stored),\n      labels: labels(models, shown, stored),\n      accounts: [...accounts(records, shown), ...((await mcp?.accounts()) ?? [])],\n      providers: offered(providers),\n      budget: await budget(records, usage),\n      ...(moved?.state.value?.length\n        ? { moved: moved.state.value.map((name) => ({ ...name })) }\n        : {}),\n    };\n  };\n  const state = replicatedState<SettingsState>(await snapshot());\n  let latest = Promise.resolve();\n  const refresh = (context: Context) => {\n    const next = latest.then(async () => state.replace(context, await snapshot()));\n    latest = next.catch(() => undefined);\n    return next;\n  };\n  const signedIn = providers\n    .filter((provider) => signIn.has(provider.id))\n    .map((provider) => provider.id);\n  const discover = (ids: string[]) =>\n    models.refresh({ providers: ids }).then(\n      () => undefined,\n      () => undefined\n    );\n  if (signedIn.length) {\n    const cycle = () =>\n      void discover(signedIn)\n        .then(() => refresh(BACKGROUND_CONTEXT))\n        .catch(() => undefined);\n    cycle();\n    const timer: unknown = setInterval(cycle, options.every ?? BUDGET_EVERY);\n    (timer as { unref?: () => void }).unref?.();\n  }\n  mcp?.onChange(() => void refresh(BACKGROUND_CONTEXT).catch(() => undefined));\n  moved?.state.subscribe((_value, context) => void refresh(context).catch(() => undefined));\n  const held = () => signedIn.filter((id) => records.model(id)).join(' ');\n  let seen = held();\n  records.state.subscribe(() => {\n    const now = held();\n    const added = now !== seen;\n    seen = now;\n    const discovered = added ? discover(signedIn) : Promise.resolve();\n    void discovered.then(() => refresh(BACKGROUND_CONTEXT)).catch(() => undefined);\n  });\n  const reread = (context: Context) => records.refresh(context).catch(() => undefined);\n  return {\n    state,\n    async connect(providerId, secret, given, context) {\n      const server = routed(providerId);\n      if (server) {\n        await server.connect(providerId, secret);\n        await refresh(context);\n        return;\n      }\n      if (secret !== null)\n        throw new Error(signIn.has(providerId) ? SIGN_IN_NEEDS_VAULT : KEY_NEEDS_VAULT);\n      if (LISTINGS.has(providerId)) await fields.add(providerId);\n      if (given !== null) await fields.set(providerId, given);\n      records.reconnected(providerId);\n      await reread(context);\n      if (signIn.has(providerId)) await discover([providerId]);\n      await refresh(context);\n    },\n    async signIn(providerId) {\n      const server = routed(providerId);\n      if (server) return server.signIn(providerId);\n      if (providerId !== ADOBE) return null;\n      const { clientId, scopes, imsEnvironment } = await adobeConfig(\n        endpoint,\n        (input, init) => globalThis.fetch(input, init),\n        identity\n      );\n      return { clientId, scopes, imsEnvironment: imsEnvironment || 'prod' };\n    },\n    async dismissMoved(context) {\n      await moved?.dismiss(context);\n      await refresh(context);\n    },\n    async disconnect(providerId, context) {\n      const server = routed(providerId);\n      if (server) await server.disconnect(providerId);\n      else if (LISTINGS.has(providerId)) await fields.add(providerId);\n      else await fields.set(providerId, undefined);\n      await reread(context);\n      await refresh(context);\n    },\n    async remove(providerId, context) {\n      const server = routed(providerId);\n      if (server) await server.disconnect(providerId);\n      else await fields.forget(providerId);\n      await reread(context);\n      await refresh(context);\n    },\n  };\n}\n"],
-  "mappings": "AAAA,SAAuB,uBAAuB;AAC9C,SAAS,0BAA0B;AAEnC,SAAS,oBAAwC;AACjD,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,wBAAwB;AAEjC,SAAS,mBAAmB;AAC5B,SAAS,SAAS,sBAAsB;AACxC,SAAS,aAAa,eAAe,gBAAgB;AAarD,SAAS,WAAAA,UAAS,kBAAkB,kBAAAC,uBAAsB;AAEnD,MAAM,gBAAgB,EAAE,UAAU,SAAS,SAAS,iCAAiC;AACrF,MAAM,kBAAoD,EAAE,CAAC,OAAO,GAAG,YAAY;AAEnF,MAAM,iBAAoE;AAAA,EAC/E,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,UAAU,OAAO,SAAS,CAAC;AACjD;AACA,MAAM,YAA8C,EAAE,QAAQ,aAAa;AACpE,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AAE/B,eAAsB,oBACpB,aACA,WACA,QACgD;AAChD,QAAM,SAAS,IAAI,KAAK,MAAM,YAAY,KAAK,GAAG,IAAI,CAAC,SAAS,KAAK,UAAU,CAAC;AAChF,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,OAAO,IAAI,SAAS,EAAE,EAAG;AAC9B,QAAI,CAAC,OAAO,UAAU,SAAS,EAAE,EAAE,UAAU,SAAS,eAAe;AACnE,YAAM,OAAO,QAAQ,EAAE,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC1E;AACA,UAAM,SAAS,eAAe,SAAS,IAAI,OAAO,UAAU,SAAS,EAAE,CAAC;AACxE,QAAI,OAAQ,QAAO,EAAE,UAAU,SAAS,IAAI,SAAS,OAAO,GAAG;AAAA,EACjE;AACA,SAAO;AACT;AAEA,MAAM,SAAS,oBAAI,IAAI,CAAC,KAAK,CAAC;AAC9B,MAAM,eAAe,IAAI,KAAK;AAEvB,SAAS,eAAe,SAA8B;AAC3D,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,cAAc,EAAE,QAAQ,CAAC;AAAA,IACzB,GAAG,cAAc,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC;AAAA,EAC9C;AACF;AAEO,SAAS,mBAAmB,aAA+C;AAChF,SAAO;AAAA,IACL,MAAM,KAAK,YAAY,SAAS;AAC9B,YAAM,aAAa,MAAM,YAAY,KAAK,YAAY,OAAO;AAC7D,YAAM,SAAS,gBAAgB,UAAU;AACzC,UAAI,YAAY,SAAS,aAAa,CAAC,UAAU,WAAW,KAAK,YAAY;AAC3E,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,YAAY,KAAK,EAAE,GAAG,WAAW,KAAK,YAAY,OAAO,EAAE;AAAA,IACzE;AAAA,IACA,MAAM,CAAC,YAAY,YAAY,KAAK,OAAO;AAAA,IAC3C,QAAQ,CAAC,YAAY,IAAI,YAAY,YAAY,OAAO,YAAY,IAAI,OAAO;AAAA,IAC/E,QAAQ,CAAC,YAAY,YAAY,YAAY,OAAO,YAAY,OAAO;AAAA,EACzE;AACF;AAEO,SAAS,kBACd,aACA,YAAY,eAAe,GACZ;AACf,QAAM,SAAS,aAAa,EAAE,aAAa,mBAAmB,WAAW,EAAE,CAAC;AAC5E,aAAW,YAAY,UAAW,QAAO,YAAY,iBAAiB,QAAQ,CAAC;AAC/E,SAAO;AACT;AAEA,MAAM,QAAgC,EAAE,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,GAAG,QAAQ;AAE/E,SAAS,OACP,QACA,WACA,QACwB;AACxB,SAAO,OAAO;AAAA,IACZ,UACG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,EAC7C;AAAA,MAAQ,CAAC,aACR,OACG,UAAU,SAAS,EAAE,EACrB,IAAI,CAAC,UAAU;AAAA,QACd,GAAG,SAAS,EAAE,IAAI,MAAM,EAAE;AAAA,QAC1B,GAAG,MAAM,IAAI,OAAO,MAAM,SAAS,EAAE,KAAK,SAAS,QAAQ,SAAS,EAAE;AAAA,MACxE,CAAC;AAAA,IACL;AAAA,EACJ;AACF;AAEA,SAAS,QACP,QACA,WACA,QACe;AACf,SAAO,UACJ,OAAO,CAAC,aAAa,OAAO,IAAI,SAAS,EAAE,CAAC,EAC5C;AAAA,IAAQ,CAAC,aACR,OAAO,UAAU,SAAS,EAAE,EAAE,IAAI,CAAC,WAAW;AAAA,MAC5C,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,EAAE;AAAA,MAC9B,OAAO,MAAM;AAAA,MACb,UAAU,SAAS,QAAQ,SAAS;AAAA,MACpC,MAAM;AAAA,MACN,WAAW,QAAQ,MAAM,SAAS;AAAA,MAClC,QAAQ,MAAM,MAAM,SAAS,OAAO;AAAA,MACpC,eAAe,MAAM;AAAA,IACvB,EAAE;AAAA,EACJ;AACJ;AAEA,SAAS,OACP,SACA,QACiC;AACjC,QAAM,QAAQ,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACnD,SAAO,CAAC,eACN,CAAC,SAAS,IAAI,UAAU,KACxB,MAAM,IAAI,UAAU,KACpB,QAAQ,MAAM,UAAU,MAAM,UAC9B,OAAO,IAAI,UAAU,MAAM;AAC/B;AAEA,SAAS,SAAS,SAAsC,WAAuC;AAC7F,SAAO,UAAU,IAAI,CAAC,aAAa;AACjC,UAAM,SAAS,QAAQ,MAAM,SAAS,EAAE;AACxC,UAAM,SAAS,eAAe,SAAS,EAAE;AACzC,UAAM,UAAU,SAAS,IAAI,SAAS,EAAE;AACxC,WAAO;AAAA,MACL,IAAI,SAAS;AAAA,MACb,UAAU,SAAS,QAAQ,SAAS;AAAA,MACpC,UAAU,SAAU,OAAO,IAAI,SAAS,EAAE,IAAI,aAAa,YAAa;AAAA,MACxE,QAAQ,CAAC,SAAS,iBAAiB,OAAO,UAAU,YAAY,YAAY;AAAA,MAC5E,MAAM,OAAO,IAAI,SAAS,EAAE,IAAI,UAAU;AAAA,MAC1C,OAAO,SAAS,WAAW,wBAAwB;AAAA,MACnD,OAAO;AAAA,MACP,OAAO;AAAA,MACP,GAAI,SAAS,EAAE,QAAQ,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC;AAAA,MAClE,GAAI,UACA;AAAA,QACE,aAAa,QAAQ;AAAA,QACrB,WAAW,QAAQ;AAAA,QACnB,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACrD,IACA,CAAC;AAAA,IACP;AAAA,EACF,CAAC;AACH;AAEA,SAAS,QAAQ,WAAyC;AACxD,SAAO,UACJ,QAAQ,CAAC,aAA+B;AACvC,UAAM,UAAU,SAAS,IAAI,SAAS,EAAE;AACxC,QAAI,CAAC,QAAS,QAAO,CAAC;AACtB,UAAM,SAAS,eAAe,SAAS,EAAE;AACzC,WAAO;AAAA,MACL;AAAA,QACE,IAAI,SAAS;AAAA,QACb,MAAM,SAAS;AAAA,QACf,aAAa,QAAQ;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,WAAW,QAAQ;AAAA,QACnB,GAAI,SAAS,EAAE,QAAQ,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC;AAAA,QAClE,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,QACnD,GAAI,QAAQ,WAAW,EAAE,OAAO,sBAA+B,IAAI,CAAC;AAAA,MACtE;AAAA,IACF;AAAA,EACF,CAAC,EACA,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAChD;AAWA,MAAM,QAAQ;AAEd,eAAsB,eACpB,OACA,WACyB;AACzB,QAAM,QAAQ,oBAAI,IAAoC;AACtD,aAAW,YAAY,WAAW;AAChC,UAAMC,SAAS,MAAM,MAAM,IAAI,SAAS,SAAS,EAAE,EAAE;AACrD,QAAIA,UAAS,OAAOA,WAAU,SAAU,OAAM,IAAI,SAAS,IAAIA,MAAK;AAAA,EACtE;AACA,QAAM,QAAQ,MAAM,MAAM,IAAI,KAAK;AACnC,MAAI,QAAQ,MAAM,QAAQ,KAAK,IAC3B,MAAM,OAAO,CAAC,OAAqB,OAAO,OAAO,QAAQ,IACzD;AACJ,QAAM,OAAO,OAAO,SAAmB;AACrC,YAAQ;AACR,UAAM,MAAM,IAAI,OAAO,IAAI;AAAA,EAC7B;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,MAAM,IAAI,YAAY;AACpB,YAAM,MAAM,SAAS;AACrB,UAAI,SAAS,IAAI,SAAS,UAAU,EAAG;AACvC,YAAM,KAAK,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC;AAAA,IAC/C;AAAA,IACA,MAAM,OAAO,YAAY;AACvB,YAAM,MAAM,SAAS,aAAa,OAAO,CAAC,OAAO,OAAO,UAAU,CAAC;AACnE,YAAM,OAAO,UAAU;AACvB,YAAM,MAAM,IAAI,SAAS,UAAU,IAAI,MAAS;AAAA,IAClD;AAAA,IACA,KAAK,CAAC,eAAe,MAAM,IAAI,UAAU;AAAA,IACzC,IAAI,YAAY;AACd,YAAM,SAAS,MAAM,IAAI,UAAU;AACnC,UAAI,CAAC,OAAQ,QAAO;AACpB,aAAO,OAAO;AAAA,QACZ,OAAO,QAAQ,MAAM,EAAE;AAAA,UAAQ,CAAC,CAAC,MAAM,KAAK,MAC1C,UAAU,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;AAAA,QAClD;AAAA,MACF;AAAA,IACF;AAAA,IACA,MAAM,IAAI,YAAY,QAAQ;AAC5B,YAAM,UAAU,IAAI,KAAK,eAAe,UAAU,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC;AACrF,YAAM,OAAO,OAAO;AAAA,QAClB,OAAO,QAAQ,UAAU,CAAC,CAAC,EAAE;AAAA,UAC3B,CAAC,CAAC,MAAM,KAAK,MAAM,QAAQ,IAAI,IAAI,KAAK,OAAO,UAAU,YAAY,MAAM,KAAK,MAAM;AAAA,QACxF;AAAA,MACF;AACA,YAAM,OAAO,OAAO,KAAK,IAAI,EAAE,SAAS,OAAO;AAC/C,UAAI,KAAM,OAAM,IAAI,YAAY,IAAI;AAAA,UAC/B,OAAM,OAAO,UAAU;AAC5B,YAAM,MAAM,IAAI,SAAS,UAAU,IAAI,IAAI;AAAA,IAC7C;AAAA,EACF;AACF;AAIA,eAAe,OAAO,SAAsC,OAAoB;AAC9E,QAAM,MAAM,QAAQ,MAAM,KAAK,GAAG;AAClC,QAAM,QAAQ,MAAM,MAAM,MAAM,GAAG,EAAE,MAAM,MAAM,IAAI,IAAI;AACzD,SAAO,QAAQ,EAAE,UAAU,OAAO,GAAG,MAAM,IAAI;AACjD;AAOA,eAAsB,oBACpB,QACA,SACA,YAAY,eAAe,GAC3B,UAAyF,CAAC,GAClE;AACxB,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,QAAM,SAAS,CAAC,eAAwB,WAAW,WAAW,WAAW,IAAI,MAAM;AACnF,QAAM,QAAQ,UAAU,KAAK,CAAC,aAAa,SAAS,OAAO,KAAK;AAChE,QAAM,WAAW,OAAO,WAAW;AACnC,QAAM,WAAY,OAAO,WAAkD,cAAc;AACzF,QAAM,QAAQ,QAAQ,UAAU,CAAC,UAAkB,WAAW,OAAO,EAAE,UAAU,SAAS,CAAC;AAC3F,QAAM,WAAW,YAAoC;AACnD,UAAM,SAAS,IAAI;AAAA,MACjB,UAAU,OAAO,CAAC,aAAa,QAAQ,MAAM,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,aAAa,SAAS,EAAE;AAAA,IAC1F;AACA,UAAM,OAAO,OAAO,SAAS,MAAM;AACnC,UAAM,QAAQ,UAAU,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;AAC9D,WAAO;AAAA,MACL,QAAQ,QAAQ,QAAQ,WAAW,MAAM;AAAA,MACzC,QAAQ,OAAO,QAAQ,OAAO,MAAM;AAAA,MACpC,UAAU,CAAC,GAAG,SAAS,SAAS,KAAK,GAAG,GAAK,MAAM,KAAK,SAAS,KAAM,CAAC,CAAE;AAAA,MAC1E,WAAW,QAAQ,SAAS;AAAA,MAC5B,QAAQ,MAAM,OAAO,SAAS,KAAK;AAAA,MACnC,GAAI,OAAO,MAAM,OAAO,SACpB,EAAE,OAAO,MAAM,MAAM,MAAM,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,EAAE,EAAE,IACxD,CAAC;AAAA,IACP;AAAA,EACF;AACA,QAAM,QAAQ,gBAA+B,MAAM,SAAS,CAAC;AAC7D,MAAI,SAAS,QAAQ,QAAQ;AAC7B,QAAM,UAAU,CAAC,YAAqB;AACpC,UAAM,OAAO,OAAO,KAAK,YAAY,MAAM,QAAQ,SAAS,MAAM,SAAS,CAAC,CAAC;AAC7E,aAAS,KAAK,MAAM,MAAM,MAAS;AACnC,WAAO;AAAA,EACT;AACA,QAAM,WAAW,UACd,OAAO,CAAC,aAAa,OAAO,IAAI,SAAS,EAAE,CAAC,EAC5C,IAAI,CAAC,aAAa,SAAS,EAAE;AAChC,QAAM,WAAW,CAAC,QAChB,OAAO,QAAQ,EAAE,WAAW,IAAI,CAAC,EAAE;AAAA,IACjC,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACF,MAAI,SAAS,QAAQ;AACnB,UAAM,QAAQ,MACZ,KAAK,SAAS,QAAQ,EACnB,KAAK,MAAM,QAAQ,kBAAkB,CAAC,EACtC,MAAM,MAAM,MAAS;AAC1B,UAAM;AACN,UAAM,QAAiB,YAAY,OAAO,QAAQ,SAAS,YAAY;AACvE,IAAC,MAAiC,QAAQ;AAAA,EAC5C;AACA,OAAK,SAAS,MAAM,KAAK,QAAQ,kBAAkB,EAAE,MAAM,MAAM,MAAS,CAAC;AAC3E,SAAO,MAAM,UAAU,CAAC,QAAQ,YAAY,KAAK,QAAQ,OAAO,EAAE,MAAM,MAAM,MAAS,CAAC;AACxF,QAAM,OAAO,MAAM,SAAS,OAAO,CAAC,OAAO,QAAQ,MAAM,EAAE,CAAC,EAAE,KAAK,GAAG;AACtE,MAAI,OAAO,KAAK;AAChB,UAAQ,MAAM,UAAU,MAAM;AAC5B,UAAM,MAAM,KAAK;AACjB,UAAM,QAAQ,QAAQ;AACtB,WAAO;AACP,UAAM,aAAa,QAAQ,SAAS,QAAQ,IAAI,QAAQ,QAAQ;AAChE,SAAK,WAAW,KAAK,MAAM,QAAQ,kBAAkB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,EAC/E,CAAC;AACD,QAAM,SAAS,CAAC,YAAqB,QAAQ,QAAQ,OAAO,EAAE,MAAM,MAAM,MAAS;AACnF,SAAO;AAAA,IACL;AAAA,IACA,MAAM,QAAQ,YAAY,QAAQ,OAAO,SAAS;AAChD,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,QAAQ;AACV,cAAM,OAAO,QAAQ,YAAY,MAAM;AACvC,cAAM,QAAQ,OAAO;AACrB;AAAA,MACF;AACA,UAAI,WAAW;AACb,cAAM,IAAI,MAAM,OAAO,IAAI,UAAU,IAAI,sBAAsB,eAAe;AAChF,UAAI,SAAS,IAAI,UAAU,EAAG,OAAM,OAAO,IAAI,UAAU;AACzD,UAAI,UAAU,KAAM,OAAM,OAAO,IAAI,YAAY,KAAK;AACtD,cAAQ,YAAY,UAAU;AAC9B,YAAM,OAAO,OAAO;AACpB,UAAI,OAAO,IAAI,UAAU,EAAG,OAAM,SAAS,CAAC,UAAU,CAAC;AACvD,YAAM,QAAQ,OAAO;AAAA,IACvB;AAAA,IACA,MAAM,OAAO,YAAY;AACvB,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,OAAQ,QAAO,OAAO,OAAO,UAAU;AAC3C,UAAI,eAAe,MAAO,QAAO;AACjC,YAAM,EAAE,UAAU,QAAQ,eAAe,IAAI,MAAM;AAAA,QACjD;AAAA,QACA,CAAC,OAAO,SAAS,WAAW,MAAM,OAAO,IAAI;AAAA,QAC7C;AAAA,MACF;AACA,aAAO,EAAE,UAAU,QAAQ,gBAAgB,kBAAkB,OAAO;AAAA,IACtE;AAAA,IACA,MAAM,aAAa,SAAS;AAC1B,YAAM,OAAO,QAAQ,OAAO;AAC5B,YAAM,QAAQ,OAAO;AAAA,IACvB;AAAA,IACA,MAAM,WAAW,YAAY,SAAS;AACpC,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,OAAQ,OAAM,OAAO,WAAW,UAAU;AAAA,eACrC,SAAS,IAAI,UAAU,EAAG,OAAM,OAAO,IAAI,UAAU;AAAA,UACzD,OAAM,OAAO,IAAI,YAAY,MAAS;AAC3C,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,OAAO;AAAA,IACvB;AAAA,IACA,MAAM,OAAO,YAAY,SAAS;AAChC,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,OAAQ,OAAM,OAAO,WAAW,UAAU;AAAA,UACzC,OAAM,OAAO,OAAO,UAAU;AACnC,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,OAAO;AAAA,IACvB;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { type Context, replicatedState } from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport type { CredentialStore, Provider } from '@earendil-works/pi-ai';\nimport { createModels, type MutableModels } from '@earendil-works/pi-ai/models';\nimport { amazonBedrockProvider } from '@earendil-works/pi-ai/providers/amazon-bedrock';\nimport {\n  ADOBE,\n  ADOBE_PROXY,\n  adobeConfig,\n  adobeIdentity,\n  adobeProvider,\n  adobeUsage,\n  type Budget,\n} from './adobe.ts';\nimport { abortableBedrock } from './bedrock.ts';\nimport type { McpAccounts } from './mcp/index.ts';\nimport { MCP_ACCOUNT } from './mcp/label.ts';\nimport { BEDROCK, preferredModel } from './preferred.ts';\nimport { ADDED_FIRST, type FieldSpec, KEY_PROVIDERS, LISTINGS } from './providers.ts';\nimport type { KeysMoved } from './secrets/legacy.ts';\nimport type { VaultRecords } from './secrets/records.ts';\nimport type { PlainStore } from './secrets/store.ts';\nimport type {\n  AccountField,\n  AccountState,\n  AgentSettings,\n  ModelChoice,\n  ProviderOption,\n  SettingsState,\n} from './services.ts';\n\nexport { BEDROCK, PREFERRED_MODELS, preferredModel } from './preferred.ts';\n\nexport const DEFAULT_MODEL = { provider: BEDROCK, modelId: 'us.anthropic.claude-sonnet-5-5' };\nexport const DEFAULT_REGIONS: Readonly<Record<string, string>> = { [BEDROCK]: 'us-west-2' };\n\nconst specs = (providerId: string): readonly FieldSpec[] => LISTINGS.get(providerId)?.fields ?? [];\n\nexport const ACCOUNT_FIELDS: Readonly<Record<string, readonly AccountField[]>> = Object.fromEntries(\n  [...LISTINGS.keys()]\n    .filter((id) => specs(id).length)\n    .map((id) => [id, specs(id).map(({ env: _env, ...field }) => field)])\n);\nexport const SIGN_IN_NEEDS_VAULT = \"Adobe sign-in needs seven's vault: update seven\";\nexport const KEY_NEEDS_VAULT = \"API keys are kept in seven's vault: update seven\";\n\nexport async function resolveDefaultModel(\n  credentials: CredentialStore,\n  providers: Provider[],\n  models: MutableModels\n): Promise<{ provider: string; modelId: string }> {\n  const stored = new Set((await credentials.list()).map((info) => info.providerId));\n  for (const provider of providers) {\n    if (!stored.has(provider.id)) continue;\n    if (!models.getModels(provider.id).length && provider.refreshModels) {\n      await models.refresh({ providers: [provider.id] }).catch(() => undefined);\n    }\n    const chosen = preferredModel(provider.id, models.getModels(provider.id));\n    if (chosen) return { provider: provider.id, modelId: chosen.id };\n  }\n  return DEFAULT_MODEL;\n}\n\nconst signIn = new Set([ADOBE]);\nconst BUDGET_EVERY = 5 * 60 * 1000;\n\nexport function sliccProviders(version?: string): Provider[] {\n  return [\n    amazonBedrockProvider() as Provider,\n    adobeProvider({ version }),\n    ...KEY_PROVIDERS.map((entry) => entry.make()),\n  ];\n}\n\nexport function withDefaultRegions(credentials: CredentialStore): CredentialStore {\n  return {\n    async read(providerId, options) {\n      const credential = await credentials.read(providerId, options);\n      const region = DEFAULT_REGIONS[providerId];\n      if (credential?.type !== 'api_key' || !region || credential.env?.AWS_REGION) {\n        return credential;\n      }\n      return { ...credential, env: { ...credential.env, AWS_REGION: region } };\n    },\n    list: (options) => credentials.list(options),\n    modify: (providerId, fn, options) => credentials.modify(providerId, fn, options),\n    delete: (providerId, options) => credentials.delete(providerId, options),\n  };\n}\n\nexport function createSliccModels(\n  credentials: CredentialStore,\n  providers = sliccProviders()\n): MutableModels {\n  const models = createModels({ credentials: withDefaultRegions(credentials) });\n  for (const provider of providers) models.setProvider(abortableBedrock(provider));\n  return models;\n}\n\nconst SHORT: Record<string, string> = { [BEDROCK]: 'Bedrock', [ADOBE]: 'Adobe' };\n\nfunction labels(\n  models: MutableModels,\n  providers: Provider[],\n  stored: ReadonlySet<string>\n): Record<string, string> {\n  return Object.fromEntries(\n    providers\n      .filter((provider) => !stored.has(provider.id))\n      .flatMap((provider) =>\n        models\n          .getModels(provider.id)\n          .map((model) => [\n            `${provider.id}/${model.id}`,\n            `${model.name} on ${SHORT[provider.id] ?? provider.name ?? provider.id}`,\n          ])\n      )\n  );\n}\n\nfunction choices(\n  models: MutableModels,\n  providers: Provider[],\n  stored: ReadonlySet<string>\n): ModelChoice[] {\n  return providers\n    .filter((provider) => stored.has(provider.id))\n    .flatMap((provider) =>\n      models.getModels(provider.id).map((model) => ({\n        id: `${provider.id}/${model.id}`,\n        label: model.name,\n        provider: provider.name ?? provider.id,\n        kind: 'chat' as const,\n        reasoning: Boolean(model.reasoning),\n        images: model.input.includes('image'),\n        contextWindow: model.contextWindow,\n      }))\n    );\n}\n\nfunction listed(\n  records: Pick<VaultRecords, 'model'>,\n  fields: Pick<ProviderFields, 'get' | 'added'>\n): (providerId: string) => boolean {\n  const added = new Set(fields.added() ?? ADDED_FIRST);\n  return (providerId) =>\n    !LISTINGS.has(providerId) ||\n    added.has(providerId) ||\n    records.model(providerId) !== undefined ||\n    fields.get(providerId) !== undefined;\n}\n\nfunction accounts(\n  records: Pick<VaultRecords, 'model'>,\n  providers: Provider[],\n  ready: (providerId: string) => boolean\n): AccountState[] {\n  return providers.map((provider) => {\n    const record = ready(provider.id) ? records.model(provider.id) : undefined;\n    const fields = ACCOUNT_FIELDS[provider.id];\n    const listing = LISTINGS.get(provider.id);\n    return {\n      id: provider.id,\n      provider: provider.name ?? provider.id,\n      identity: record ? (signIn.has(provider.id) ? 'Adobe ID' : 'API key') : '',\n      status: !record ? 'disconnected' : record.state === 'expired' ? 'expired' : 'connected',\n      auth: signIn.has(provider.id) ? 'oauth' : 'api-key',\n      needs: listing?.corsFree ? 'cors-free-transport' : null,\n      group: 'providers',\n      store: 'vault',\n      ...(fields ? { fields: fields.map((field) => ({ ...field })) } : {}),\n      ...(listing\n        ? {\n            description: listing.description,\n            vaultName: listing.vaultName,\n            ...(listing.keyUrl ? { keyUrl: listing.keyUrl } : {}),\n          }\n        : {}),\n    };\n  });\n}\n\nfunction offered(providers: Provider[]): ProviderOption[] {\n  return providers\n    .flatMap((provider): ProviderOption[] => {\n      const listing = LISTINGS.get(provider.id);\n      if (!listing) return [];\n      const fields = ACCOUNT_FIELDS[provider.id];\n      return [\n        {\n          id: provider.id,\n          name: provider.name,\n          description: listing.description,\n          auth: listing.auth,\n          vaultName: listing.vaultName,\n          ...(fields ? { fields: fields.map((field) => ({ ...field })) } : {}),\n          ...(listing.keyUrl ? { keyUrl: listing.keyUrl } : {}),\n          ...(listing.corsFree ? { needs: 'cors-free-transport' as const } : {}),\n        },\n      ];\n    })\n    .sort((a, b) => a.name.localeCompare(b.name));\n}\n\nexport interface ProviderFields {\n  get(providerId: string): Readonly<Record<string, string>> | undefined;\n  env(providerId: string): Readonly<Record<string, string>> | undefined;\n  set(providerId: string, fields: Record<string, string> | undefined): Promise<void>;\n  ready(providerId: string): boolean;\n  added(): readonly string[] | undefined;\n  add(providerId: string): Promise<void>;\n  forget(providerId: string): Promise<void>;\n}\n\nconst ADDED = 'providers';\n\nexport async function providerFields(\n  store: PlainStore,\n  providers: readonly Provider[]\n): Promise<ProviderFields> {\n  const known = new Map<string, Record<string, string>>();\n  for (const provider of providers) {\n    const saved = (await store.get(`model:${provider.id}`)) as Record<string, string> | undefined;\n    if (saved && typeof saved === 'object') known.set(provider.id, saved);\n  }\n  const saved = await store.get(ADDED);\n  let added = Array.isArray(saved)\n    ? saved.filter((id): id is string => typeof id === 'string')\n    : undefined;\n  const keep = async (next: string[]) => {\n    added = next;\n    await store.set(ADDED, next);\n  };\n  return {\n    ready: (providerId) =>\n      specs(providerId).every((spec) => {\n        const value = known.get(providerId)?.[spec.name];\n        if (value === undefined) return !spec.required;\n        return typeof spec.env(value.trim()) !== 'string';\n      }),\n    added: () => added,\n    async add(providerId) {\n      const now = added ?? ADDED_FIRST;\n      if (added && now.includes(providerId)) return;\n      await keep([...new Set([...now, providerId])]);\n    },\n    async forget(providerId) {\n      await keep((added ?? ADDED_FIRST).filter((id) => id !== providerId));\n      known.delete(providerId);\n      await store.set(`model:${providerId}`, undefined);\n    },\n    get: (providerId) => known.get(providerId),\n    env(providerId) {\n      const fields = known.get(providerId);\n      if (!fields) return undefined;\n      return Object.assign(\n        {},\n        ...specs(providerId).flatMap((spec) => {\n          const value = fields[spec.name];\n          const env = value === undefined ? '' : spec.env(value.trim());\n          return typeof env === 'string' ? [] : [env];\n        })\n      );\n    },\n    async set(providerId, fields) {\n      const kept: Record<string, string> = {};\n      for (const spec of specs(providerId)) {\n        const given = fields?.[spec.name];\n        const value = typeof given === 'string' ? given.trim() : '';\n        const stored = known.get(providerId)?.[spec.name];\n        if (!value && spec.required && fields && stored) kept[spec.name] = stored;\n        else if (!value && spec.required && fields)\n          throw new Error(`${spec.label} can\u2019t be empty.`);\n        else if (value) {\n          const problem = spec.env(value);\n          if (typeof problem === 'string') throw new Error(problem);\n          kept[spec.name] = value;\n        }\n      }\n      const next = Object.keys(kept).length ? kept : undefined;\n      if (next) known.set(providerId, next);\n      else known.delete(providerId);\n      await store.set(`model:${providerId}`, next);\n    },\n  };\n}\n\nexport type UsageReader = (token: string) => Promise<Budget | null>;\n\nasync function budget(records: Pick<VaultRecords, 'model'>, usage: UsageReader) {\n  const key = records.model(ADOBE)?.placeholder;\n  const found = key ? await usage(key).catch(() => null) : null;\n  return found ? { provider: ADOBE, ...found } : null;\n}\n\nexport interface SettingsSources {\n  records: VaultRecords;\n  fields: ProviderFields;\n}\n\nexport async function createAgentSettings(\n  models: MutableModels,\n  sources: SettingsSources,\n  providers = sliccProviders(),\n  options: { usage?: UsageReader; every?: number; mcp?: McpAccounts; moved?: KeysMoved } = {}\n): Promise<AgentSettings> {\n  const { mcp, moved } = options;\n  const { records, fields } = sources;\n  const routed = (providerId: string) => (providerId.startsWith(MCP_ACCOUNT) ? mcp : undefined);\n  const adobe = providers.find((provider) => provider.id === ADOBE);\n  const endpoint = adobe?.baseUrl ?? ADOBE_PROXY;\n  const identity = (adobe?.headers as Record<string, string> | undefined) ?? adobeIdentity();\n  const usage = options.usage ?? ((token: string) => adobeUsage(token, { endpoint, identity }));\n  const snapshot = async (): Promise<SettingsState> => {\n    const stored = new Set(\n      providers\n        .filter((provider) => records.model(provider.id) && fields.ready(provider.id))\n        .map((provider) => provider.id)\n    );\n    const show = listed(records, fields);\n    const shown = providers.filter((provider) => show(provider.id));\n    return {\n      models: choices(models, providers, stored),\n      labels: labels(models, shown, stored),\n      accounts: [...accounts(records, shown, fields.ready), ...((await mcp?.accounts()) ?? [])],\n      providers: offered(providers),\n      budget: await budget(records, usage),\n      ...(moved?.state.value?.length\n        ? { moved: moved.state.value.map((name) => ({ ...name })) }\n        : {}),\n    };\n  };\n  const state = replicatedState<SettingsState>(await snapshot());\n  let latest = Promise.resolve();\n  const refresh = (context: Context) => {\n    const next = latest.then(async () => state.replace(context, await snapshot()));\n    latest = next.catch(() => undefined);\n    return next;\n  };\n  const signedIn = providers\n    .filter((provider) => signIn.has(provider.id))\n    .map((provider) => provider.id);\n  const discover = (ids: string[]) =>\n    models.refresh({ providers: ids }).then(\n      () => undefined,\n      () => undefined\n    );\n  if (signedIn.length) {\n    const cycle = () =>\n      void discover(signedIn)\n        .then(() => refresh(BACKGROUND_CONTEXT))\n        .catch(() => undefined);\n    cycle();\n    const timer: unknown = setInterval(cycle, options.every ?? BUDGET_EVERY);\n    (timer as { unref?: () => void }).unref?.();\n  }\n  mcp?.onChange(() => void refresh(BACKGROUND_CONTEXT).catch(() => undefined));\n  moved?.state.subscribe((_value, context) => void refresh(context).catch(() => undefined));\n  const held = () => signedIn.filter((id) => records.model(id)).join(' ');\n  let seen = held();\n  records.state.subscribe(() => {\n    const now = held();\n    const added = now !== seen;\n    seen = now;\n    const discovered = added ? discover(signedIn) : Promise.resolve();\n    void discovered.then(() => refresh(BACKGROUND_CONTEXT)).catch(() => undefined);\n  });\n  const reread = (context: Context) => records.refresh(context).catch(() => undefined);\n  return {\n    state,\n    async connect(providerId, secret, given, context) {\n      const server = routed(providerId);\n      if (server) {\n        await server.connect(providerId, secret);\n        await refresh(context);\n        return;\n      }\n      if (secret !== null)\n        throw new Error(signIn.has(providerId) ? SIGN_IN_NEEDS_VAULT : KEY_NEEDS_VAULT);\n      if (given !== null) await fields.set(providerId, given);\n      if (LISTINGS.has(providerId)) await fields.add(providerId);\n      records.reconnected(providerId);\n      await reread(context);\n      if (signIn.has(providerId)) await discover([providerId]);\n      await refresh(context);\n    },\n    async signIn(providerId) {\n      const server = routed(providerId);\n      if (server) return server.signIn(providerId);\n      if (providerId !== ADOBE) return null;\n      const { clientId, scopes, imsEnvironment } = await adobeConfig(\n        endpoint,\n        (input, init) => globalThis.fetch(input, init),\n        identity\n      );\n      return { clientId, scopes, imsEnvironment: imsEnvironment || 'prod' };\n    },\n    async dismissMoved(context) {\n      await moved?.dismiss(context);\n      await refresh(context);\n    },\n    async disconnect(providerId, context) {\n      const server = routed(providerId);\n      if (server) await server.disconnect(providerId);\n      else if (LISTINGS.has(providerId)) await fields.add(providerId);\n      else await fields.set(providerId, undefined);\n      await reread(context);\n      await refresh(context);\n    },\n    async remove(providerId, context) {\n      const server = routed(providerId);\n      if (server) await server.disconnect(providerId);\n      else await fields.forget(providerId);\n      await reread(context);\n      await refresh(context);\n    },\n  };\n}\n"],
+  "mappings": "AAAA,SAAuB,uBAAuB;AAC9C,SAAS,0BAA0B;AAEnC,SAAS,oBAAwC;AACjD,SAAS,6BAA6B;AACtC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,wBAAwB;AAEjC,SAAS,mBAAmB;AAC5B,SAAS,SAAS,sBAAsB;AACxC,SAAS,aAA6B,eAAe,gBAAgB;AAarE,SAAS,WAAAA,UAAS,kBAAkB,kBAAAC,uBAAsB;AAEnD,MAAM,gBAAgB,EAAE,UAAU,SAAS,SAAS,iCAAiC;AACrF,MAAM,kBAAoD,EAAE,CAAC,OAAO,GAAG,YAAY;AAE1F,MAAM,QAAQ,CAAC,eAA6C,SAAS,IAAI,UAAU,GAAG,UAAU,CAAC;AAE1F,MAAM,iBAAoE,OAAO;AAAA,EACtF,CAAC,GAAG,SAAS,KAAK,CAAC,EAChB,OAAO,CAAC,OAAO,MAAM,EAAE,EAAE,MAAM,EAC/B,IAAI,CAAC,OAAO,CAAC,IAAI,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,MAAM,GAAG,MAAM,MAAM,KAAK,CAAC,CAAC;AACxE;AACO,MAAM,sBAAsB;AAC5B,MAAM,kBAAkB;AAE/B,eAAsB,oBACpB,aACA,WACA,QACgD;AAChD,QAAM,SAAS,IAAI,KAAK,MAAM,YAAY,KAAK,GAAG,IAAI,CAAC,SAAS,KAAK,UAAU,CAAC;AAChF,aAAW,YAAY,WAAW;AAChC,QAAI,CAAC,OAAO,IAAI,SAAS,EAAE,EAAG;AAC9B,QAAI,CAAC,OAAO,UAAU,SAAS,EAAE,EAAE,UAAU,SAAS,eAAe;AACnE,YAAM,OAAO,QAAQ,EAAE,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,IAC1E;AACA,UAAM,SAAS,eAAe,SAAS,IAAI,OAAO,UAAU,SAAS,EAAE,CAAC;AACxE,QAAI,OAAQ,QAAO,EAAE,UAAU,SAAS,IAAI,SAAS,OAAO,GAAG;AAAA,EACjE;AACA,SAAO;AACT;AAEA,MAAM,SAAS,oBAAI,IAAI,CAAC,KAAK,CAAC;AAC9B,MAAM,eAAe,IAAI,KAAK;AAEvB,SAAS,eAAe,SAA8B;AAC3D,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,cAAc,EAAE,QAAQ,CAAC;AAAA,IACzB,GAAG,cAAc,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC;AAAA,EAC9C;AACF;AAEO,SAAS,mBAAmB,aAA+C;AAChF,SAAO;AAAA,IACL,MAAM,KAAK,YAAY,SAAS;AAC9B,YAAM,aAAa,MAAM,YAAY,KAAK,YAAY,OAAO;AAC7D,YAAM,SAAS,gBAAgB,UAAU;AACzC,UAAI,YAAY,SAAS,aAAa,CAAC,UAAU,WAAW,KAAK,YAAY;AAC3E,eAAO;AAAA,MACT;AACA,aAAO,EAAE,GAAG,YAAY,KAAK,EAAE,GAAG,WAAW,KAAK,YAAY,OAAO,EAAE;AAAA,IACzE;AAAA,IACA,MAAM,CAAC,YAAY,YAAY,KAAK,OAAO;AAAA,IAC3C,QAAQ,CAAC,YAAY,IAAI,YAAY,YAAY,OAAO,YAAY,IAAI,OAAO;AAAA,IAC/E,QAAQ,CAAC,YAAY,YAAY,YAAY,OAAO,YAAY,OAAO;AAAA,EACzE;AACF;AAEO,SAAS,kBACd,aACA,YAAY,eAAe,GACZ;AACf,QAAM,SAAS,aAAa,EAAE,aAAa,mBAAmB,WAAW,EAAE,CAAC;AAC5E,aAAW,YAAY,UAAW,QAAO,YAAY,iBAAiB,QAAQ,CAAC;AAC/E,SAAO;AACT;AAEA,MAAM,QAAgC,EAAE,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,GAAG,QAAQ;AAE/E,SAAS,OACP,QACA,WACA,QACwB;AACxB,SAAO,OAAO;AAAA,IACZ,UACG,OAAO,CAAC,aAAa,CAAC,OAAO,IAAI,SAAS,EAAE,CAAC,EAC7C;AAAA,MAAQ,CAAC,aACR,OACG,UAAU,SAAS,EAAE,EACrB,IAAI,CAAC,UAAU;AAAA,QACd,GAAG,SAAS,EAAE,IAAI,MAAM,EAAE;AAAA,QAC1B,GAAG,MAAM,IAAI,OAAO,MAAM,SAAS,EAAE,KAAK,SAAS,QAAQ,SAAS,EAAE;AAAA,MACxE,CAAC;AAAA,IACL;AAAA,EACJ;AACF;AAEA,SAAS,QACP,QACA,WACA,QACe;AACf,SAAO,UACJ,OAAO,CAAC,aAAa,OAAO,IAAI,SAAS,EAAE,CAAC,EAC5C;AAAA,IAAQ,CAAC,aACR,OAAO,UAAU,SAAS,EAAE,EAAE,IAAI,CAAC,WAAW;AAAA,MAC5C,IAAI,GAAG,SAAS,EAAE,IAAI,MAAM,EAAE;AAAA,MAC9B,OAAO,MAAM;AAAA,MACb,UAAU,SAAS,QAAQ,SAAS;AAAA,MACpC,MAAM;AAAA,MACN,WAAW,QAAQ,MAAM,SAAS;AAAA,MAClC,QAAQ,MAAM,MAAM,SAAS,OAAO;AAAA,MACpC,eAAe,MAAM;AAAA,IACvB,EAAE;AAAA,EACJ;AACJ;AAEA,SAAS,OACP,SACA,QACiC;AACjC,QAAM,QAAQ,IAAI,IAAI,OAAO,MAAM,KAAK,WAAW;AACnD,SAAO,CAAC,eACN,CAAC,SAAS,IAAI,UAAU,KACxB,MAAM,IAAI,UAAU,KACpB,QAAQ,MAAM,UAAU,MAAM,UAC9B,OAAO,IAAI,UAAU,MAAM;AAC/B;AAEA,SAAS,SACP,SACA,WACA,OACgB;AAChB,SAAO,UAAU,IAAI,CAAC,aAAa;AACjC,UAAM,SAAS,MAAM,SAAS,EAAE,IAAI,QAAQ,MAAM,SAAS,EAAE,IAAI;AACjE,UAAM,SAAS,eAAe,SAAS,EAAE;AACzC,UAAM,UAAU,SAAS,IAAI,SAAS,EAAE;AACxC,WAAO;AAAA,MACL,IAAI,SAAS;AAAA,MACb,UAAU,SAAS,QAAQ,SAAS;AAAA,MACpC,UAAU,SAAU,OAAO,IAAI,SAAS,EAAE,IAAI,aAAa,YAAa;AAAA,MACxE,QAAQ,CAAC,SAAS,iBAAiB,OAAO,UAAU,YAAY,YAAY;AAAA,MAC5E,MAAM,OAAO,IAAI,SAAS,EAAE,IAAI,UAAU;AAAA,MAC1C,OAAO,SAAS,WAAW,wBAAwB;AAAA,MACnD,OAAO;AAAA,MACP,OAAO;AAAA,MACP,GAAI,SAAS,EAAE,QAAQ,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC;AAAA,MAClE,GAAI,UACA;AAAA,QACE,aAAa,QAAQ;AAAA,QACrB,WAAW,QAAQ;AAAA,QACnB,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,MACrD,IACA,CAAC;AAAA,IACP;AAAA,EACF,CAAC;AACH;AAEA,SAAS,QAAQ,WAAyC;AACxD,SAAO,UACJ,QAAQ,CAAC,aAA+B;AACvC,UAAM,UAAU,SAAS,IAAI,SAAS,EAAE;AACxC,QAAI,CAAC,QAAS,QAAO,CAAC;AACtB,UAAM,SAAS,eAAe,SAAS,EAAE;AACzC,WAAO;AAAA,MACL;AAAA,QACE,IAAI,SAAS;AAAA,QACb,MAAM,SAAS;AAAA,QACf,aAAa,QAAQ;AAAA,QACrB,MAAM,QAAQ;AAAA,QACd,WAAW,QAAQ;AAAA,QACnB,GAAI,SAAS,EAAE,QAAQ,OAAO,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC;AAAA,QAClE,GAAI,QAAQ,SAAS,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,QACnD,GAAI,QAAQ,WAAW,EAAE,OAAO,sBAA+B,IAAI,CAAC;AAAA,MACtE;AAAA,IACF;AAAA,EACF,CAAC,EACA,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAChD;AAYA,MAAM,QAAQ;AAEd,eAAsB,eACpB,OACA,WACyB;AACzB,QAAM,QAAQ,oBAAI,IAAoC;AACtD,aAAW,YAAY,WAAW;AAChC,UAAMC,SAAS,MAAM,MAAM,IAAI,SAAS,SAAS,EAAE,EAAE;AACrD,QAAIA,UAAS,OAAOA,WAAU,SAAU,OAAM,IAAI,SAAS,IAAIA,MAAK;AAAA,EACtE;AACA,QAAM,QAAQ,MAAM,MAAM,IAAI,KAAK;AACnC,MAAI,QAAQ,MAAM,QAAQ,KAAK,IAC3B,MAAM,OAAO,CAAC,OAAqB,OAAO,OAAO,QAAQ,IACzD;AACJ,QAAM,OAAO,OAAO,SAAmB;AACrC,YAAQ;AACR,UAAM,MAAM,IAAI,OAAO,IAAI;AAAA,EAC7B;AACA,SAAO;AAAA,IACL,OAAO,CAAC,eACN,MAAM,UAAU,EAAE,MAAM,CAAC,SAAS;AAChC,YAAM,QAAQ,MAAM,IAAI,UAAU,IAAI,KAAK,IAAI;AAC/C,UAAI,UAAU,OAAW,QAAO,CAAC,KAAK;AACtC,aAAO,OAAO,KAAK,IAAI,MAAM,KAAK,CAAC,MAAM;AAAA,IAC3C,CAAC;AAAA,IACH,OAAO,MAAM;AAAA,IACb,MAAM,IAAI,YAAY;AACpB,YAAM,MAAM,SAAS;AACrB,UAAI,SAAS,IAAI,SAAS,UAAU,EAAG;AACvC,YAAM,KAAK,CAAC,GAAG,oBAAI,IAAI,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC;AAAA,IAC/C;AAAA,IACA,MAAM,OAAO,YAAY;AACvB,YAAM,MAAM,SAAS,aAAa,OAAO,CAAC,OAAO,OAAO,UAAU,CAAC;AACnE,YAAM,OAAO,UAAU;AACvB,YAAM,MAAM,IAAI,SAAS,UAAU,IAAI,MAAS;AAAA,IAClD;AAAA,IACA,KAAK,CAAC,eAAe,MAAM,IAAI,UAAU;AAAA,IACzC,IAAI,YAAY;AACd,YAAM,SAAS,MAAM,IAAI,UAAU;AACnC,UAAI,CAAC,OAAQ,QAAO;AACpB,aAAO,OAAO;AAAA,QACZ,CAAC;AAAA,QACD,GAAG,MAAM,UAAU,EAAE,QAAQ,CAAC,SAAS;AACrC,gBAAM,QAAQ,OAAO,KAAK,IAAI;AAC9B,gBAAM,MAAM,UAAU,SAAY,KAAK,KAAK,IAAI,MAAM,KAAK,CAAC;AAC5D,iBAAO,OAAO,QAAQ,WAAW,CAAC,IAAI,CAAC,GAAG;AAAA,QAC5C,CAAC;AAAA,MACH;AAAA,IACF;AAAA,IACA,MAAM,IAAI,YAAY,QAAQ;AAC5B,YAAM,OAA+B,CAAC;AACtC,iBAAW,QAAQ,MAAM,UAAU,GAAG;AACpC,cAAM,QAAQ,SAAS,KAAK,IAAI;AAChC,cAAM,QAAQ,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI;AACzD,cAAM,SAAS,MAAM,IAAI,UAAU,IAAI,KAAK,IAAI;AAChD,YAAI,CAAC,SAAS,KAAK,YAAY,UAAU,OAAQ,MAAK,KAAK,IAAI,IAAI;AAAA,iBAC1D,CAAC,SAAS,KAAK,YAAY;AAClC,gBAAM,IAAI,MAAM,GAAG,KAAK,KAAK,uBAAkB;AAAA,iBACxC,OAAO;AACd,gBAAM,UAAU,KAAK,IAAI,KAAK;AAC9B,cAAI,OAAO,YAAY,SAAU,OAAM,IAAI,MAAM,OAAO;AACxD,eAAK,KAAK,IAAI,IAAI;AAAA,QACpB;AAAA,MACF;AACA,YAAM,OAAO,OAAO,KAAK,IAAI,EAAE,SAAS,OAAO;AAC/C,UAAI,KAAM,OAAM,IAAI,YAAY,IAAI;AAAA,UAC/B,OAAM,OAAO,UAAU;AAC5B,YAAM,MAAM,IAAI,SAAS,UAAU,IAAI,IAAI;AAAA,IAC7C;AAAA,EACF;AACF;AAIA,eAAe,OAAO,SAAsC,OAAoB;AAC9E,QAAM,MAAM,QAAQ,MAAM,KAAK,GAAG;AAClC,QAAM,QAAQ,MAAM,MAAM,MAAM,GAAG,EAAE,MAAM,MAAM,IAAI,IAAI;AACzD,SAAO,QAAQ,EAAE,UAAU,OAAO,GAAG,MAAM,IAAI;AACjD;AAOA,eAAsB,oBACpB,QACA,SACA,YAAY,eAAe,GAC3B,UAAyF,CAAC,GAClE;AACxB,QAAM,EAAE,KAAK,MAAM,IAAI;AACvB,QAAM,EAAE,SAAS,OAAO,IAAI;AAC5B,QAAM,SAAS,CAAC,eAAwB,WAAW,WAAW,WAAW,IAAI,MAAM;AACnF,QAAM,QAAQ,UAAU,KAAK,CAAC,aAAa,SAAS,OAAO,KAAK;AAChE,QAAM,WAAW,OAAO,WAAW;AACnC,QAAM,WAAY,OAAO,WAAkD,cAAc;AACzF,QAAM,QAAQ,QAAQ,UAAU,CAAC,UAAkB,WAAW,OAAO,EAAE,UAAU,SAAS,CAAC;AAC3F,QAAM,WAAW,YAAoC;AACnD,UAAM,SAAS,IAAI;AAAA,MACjB,UACG,OAAO,CAAC,aAAa,QAAQ,MAAM,SAAS,EAAE,KAAK,OAAO,MAAM,SAAS,EAAE,CAAC,EAC5E,IAAI,CAAC,aAAa,SAAS,EAAE;AAAA,IAClC;AACA,UAAM,OAAO,OAAO,SAAS,MAAM;AACnC,UAAM,QAAQ,UAAU,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;AAC9D,WAAO;AAAA,MACL,QAAQ,QAAQ,QAAQ,WAAW,MAAM;AAAA,MACzC,QAAQ,OAAO,QAAQ,OAAO,MAAM;AAAA,MACpC,UAAU,CAAC,GAAG,SAAS,SAAS,OAAO,OAAO,KAAK,GAAG,GAAK,MAAM,KAAK,SAAS,KAAM,CAAC,CAAE;AAAA,MACxF,WAAW,QAAQ,SAAS;AAAA,MAC5B,QAAQ,MAAM,OAAO,SAAS,KAAK;AAAA,MACnC,GAAI,OAAO,MAAM,OAAO,SACpB,EAAE,OAAO,MAAM,MAAM,MAAM,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,EAAE,EAAE,IACxD,CAAC;AAAA,IACP;AAAA,EACF;AACA,QAAM,QAAQ,gBAA+B,MAAM,SAAS,CAAC;AAC7D,MAAI,SAAS,QAAQ,QAAQ;AAC7B,QAAM,UAAU,CAAC,YAAqB;AACpC,UAAM,OAAO,OAAO,KAAK,YAAY,MAAM,QAAQ,SAAS,MAAM,SAAS,CAAC,CAAC;AAC7E,aAAS,KAAK,MAAM,MAAM,MAAS;AACnC,WAAO;AAAA,EACT;AACA,QAAM,WAAW,UACd,OAAO,CAAC,aAAa,OAAO,IAAI,SAAS,EAAE,CAAC,EAC5C,IAAI,CAAC,aAAa,SAAS,EAAE;AAChC,QAAM,WAAW,CAAC,QAChB,OAAO,QAAQ,EAAE,WAAW,IAAI,CAAC,EAAE;AAAA,IACjC,MAAM;AAAA,IACN,MAAM;AAAA,EACR;AACF,MAAI,SAAS,QAAQ;AACnB,UAAM,QAAQ,MACZ,KAAK,SAAS,QAAQ,EACnB,KAAK,MAAM,QAAQ,kBAAkB,CAAC,EACtC,MAAM,MAAM,MAAS;AAC1B,UAAM;AACN,UAAM,QAAiB,YAAY,OAAO,QAAQ,SAAS,YAAY;AACvE,IAAC,MAAiC,QAAQ;AAAA,EAC5C;AACA,OAAK,SAAS,MAAM,KAAK,QAAQ,kBAAkB,EAAE,MAAM,MAAM,MAAS,CAAC;AAC3E,SAAO,MAAM,UAAU,CAAC,QAAQ,YAAY,KAAK,QAAQ,OAAO,EAAE,MAAM,MAAM,MAAS,CAAC;AACxF,QAAM,OAAO,MAAM,SAAS,OAAO,CAAC,OAAO,QAAQ,MAAM,EAAE,CAAC,EAAE,KAAK,GAAG;AACtE,MAAI,OAAO,KAAK;AAChB,UAAQ,MAAM,UAAU,MAAM;AAC5B,UAAM,MAAM,KAAK;AACjB,UAAM,QAAQ,QAAQ;AACtB,WAAO;AACP,UAAM,aAAa,QAAQ,SAAS,QAAQ,IAAI,QAAQ,QAAQ;AAChE,SAAK,WAAW,KAAK,MAAM,QAAQ,kBAAkB,CAAC,EAAE,MAAM,MAAM,MAAS;AAAA,EAC/E,CAAC;AACD,QAAM,SAAS,CAAC,YAAqB,QAAQ,QAAQ,OAAO,EAAE,MAAM,MAAM,MAAS;AACnF,SAAO;AAAA,IACL;AAAA,IACA,MAAM,QAAQ,YAAY,QAAQ,OAAO,SAAS;AAChD,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,QAAQ;AACV,cAAM,OAAO,QAAQ,YAAY,MAAM;AACvC,cAAM,QAAQ,OAAO;AACrB;AAAA,MACF;AACA,UAAI,WAAW;AACb,cAAM,IAAI,MAAM,OAAO,IAAI,UAAU,IAAI,sBAAsB,eAAe;AAChF,UAAI,UAAU,KAAM,OAAM,OAAO,IAAI,YAAY,KAAK;AACtD,UAAI,SAAS,IAAI,UAAU,EAAG,OAAM,OAAO,IAAI,UAAU;AACzD,cAAQ,YAAY,UAAU;AAC9B,YAAM,OAAO,OAAO;AACpB,UAAI,OAAO,IAAI,UAAU,EAAG,OAAM,SAAS,CAAC,UAAU,CAAC;AACvD,YAAM,QAAQ,OAAO;AAAA,IACvB;AAAA,IACA,MAAM,OAAO,YAAY;AACvB,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,OAAQ,QAAO,OAAO,OAAO,UAAU;AAC3C,UAAI,eAAe,MAAO,QAAO;AACjC,YAAM,EAAE,UAAU,QAAQ,eAAe,IAAI,MAAM;AAAA,QACjD;AAAA,QACA,CAAC,OAAO,SAAS,WAAW,MAAM,OAAO,IAAI;AAAA,QAC7C;AAAA,MACF;AACA,aAAO,EAAE,UAAU,QAAQ,gBAAgB,kBAAkB,OAAO;AAAA,IACtE;AAAA,IACA,MAAM,aAAa,SAAS;AAC1B,YAAM,OAAO,QAAQ,OAAO;AAC5B,YAAM,QAAQ,OAAO;AAAA,IACvB;AAAA,IACA,MAAM,WAAW,YAAY,SAAS;AACpC,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,OAAQ,OAAM,OAAO,WAAW,UAAU;AAAA,eACrC,SAAS,IAAI,UAAU,EAAG,OAAM,OAAO,IAAI,UAAU;AAAA,UACzD,OAAM,OAAO,IAAI,YAAY,MAAS;AAC3C,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,OAAO;AAAA,IACvB;AAAA,IACA,MAAM,OAAO,YAAY,SAAS;AAChC,YAAM,SAAS,OAAO,UAAU;AAChC,UAAI,OAAQ,OAAM,OAAO,WAAW,UAAU;AAAA,UACzC,OAAM,OAAO,OAAO,UAAU;AACnC,YAAM,OAAO,OAAO;AACpB,YAAM,QAAQ,OAAO;AAAA,IACvB;AAAA,EACF;AACF;",
   "names": ["BEDROCK", "preferredModel", "saved"]
 }

package/dist/types/main.d.ts

@@ -38,6 +38,6 @@ export declare const STORE_DIR = "/.slicc";
 export declare const ACCOUNTS_FILE = "/.slicc/accounts.json";
 export declare function seesImages(models: Pick<Models, 'getModel'>, ref: ModelRef | undefined): boolean;
 export declare const MCP_CALLBACK = "/oauth/mcp-callback";
-export declare function modelBases(providers: readonly Provider[], models: Pick<ReturnType<typeof createSliccModels>, 'getModels'>): ModelBases[];
+export declare function modelBases(providers: readonly Provider[], models: Pick<ReturnType<typeof createSliccModels>, 'getModels'>, env?: (providerId: string) => Readonly<Record<string, string>> | undefined): ModelBases[];
 export declare function alive(client: KernelClient): (pid: number) => Promise<boolean>;
 export declare function runAgentWorker(scope: AgentWorkerScope, options?: AgentWorkerOptions): Promise<AgentHost>;

package/dist/types/providers.d.ts

@@ -1,4 +1,15 @@
 import type { Provider } from '@earendil-works/pi-ai';
+export interface FieldInput {
+    name: string;
+    label: string;
+    required?: boolean;
+    placeholder?: string;
+    help?: string;
+    customBase?: true;
+}
+export interface FieldSpec extends FieldInput {
+    env(value: string): Record<string, string> | string;
+}
 export interface KeyProvider {
     id: string;
     make: () => Provider;
@@ -6,7 +17,12 @@ export interface KeyProvider {
     description: string;
     keyUrl: string;
     cors: boolean;
+    fields?: readonly FieldSpec[];
 }
+export declare function httpsBase(value: string): URL | undefined;
+export declare const AZURE = "azure";
+export declare function azureBase(env: Readonly<Record<string, string>>): string | undefined;
+export declare const REGION_FIELD: FieldSpec;
 export declare const KEY_PROVIDERS: readonly KeyProvider[];
 export type ProviderAuth = 'api-key' | 'oauth' | 'fields' | 'local';
 export interface Listing {
@@ -15,6 +31,7 @@ export interface Listing {
     auth: ProviderAuth;
     corsFree: boolean;
     vaultName: string;
+    fields?: readonly FieldSpec[];
 }
 export declare const LISTINGS: ReadonlyMap<string, Listing>;
 export declare const ADDED_FIRST: readonly string[];

package/dist/types/secrets/credentials.d.ts

@@ -2,4 +2,4 @@ import type { CredentialStore } from '@earendil-works/pi-ai';
 import type { VaultRecords } from './records.ts';
 export declare const KEYS_IN_VAULT = "model keys are kept in seven's vault: enter them in Settings \u203A Accounts";
 export type FieldsOf = (providerId: string) => Readonly<Record<string, string>> | undefined;
-export declare function vaultCredentials(records: Pick<VaultRecords, 'model' | 'state'>, env?: FieldsOf): CredentialStore;
+export declare function vaultCredentials(records: Pick<VaultRecords, 'model' | 'state'>, env?: FieldsOf, ready?: (providerId: string) => boolean): CredentialStore;

package/dist/types/services.d.ts

@@ -357,6 +357,7 @@ export interface AccountField {
     required?: boolean;
     placeholder?: string;
     help?: string;
+    customBase?: true;
 }
 export interface ProviderOption {
     id: string;

package/dist/types/settings.d.ts

@@ -26,6 +26,7 @@ export interface ProviderFields {
     get(providerId: string): Readonly<Record<string, string>> | undefined;
     env(providerId: string): Readonly<Record<string, string>> | undefined;
     set(providerId: string, fields: Record<string, string> | undefined): Promise<void>;
+    ready(providerId: string): boolean;
     added(): readonly string[] | undefined;
     add(providerId: string): Promise<void>;
     forget(providerId: string): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-agent",
-  "version": "6.7.1",
+  "version": "6.8.0",
   "description": "SLICC's agent core on pi durable: an agent worker, session storage, remoting and pi extensions",
   "type": "module",
   "license": "Apache-2.0",