@ai-ecoverse/slicc-agent 7.4.0 → 7.4.2

package/README.md

@@ -27,7 +27,7 @@ await agent.prompt('What is in /home?');
 ```
 
 - `openAgent({ models, model, storage?, registry?, settings? })` opens a durable Harness (in memory unless `storage` is given) and its root conversation, and resumes work a previous worker left unfinished.
-- `openOpfsSqliteStorage({ directory?, file? })` keeps the session in wasm SQLite ([`@sqlite.org/sqlite-wasm`](https://www.npmjs.com/package/@sqlite.org/sqlite-wasm)) in an `opfs-sahpool` pool, by default `/.slicc/agent/` in OPFS. It needs a dedicated worker. Only one worker holds a pool at a time: the opener takes a Web Lock per directory and waits until every file of the pool can be opened before sqlite-wasm installs it, because a failed install deletes the pool's directory. `openMemorySqliteStorage()` keeps the same database in memory. **Profile marker:** every open, under the pool's lock and before pi durable opens (and migrates) the database, writes `<directory>-profile.json` next to the pool, `/.slicc/agent-profile.json` by default: `{ "durableSchema": 2, "agent": "<version>" }`, with pi durable's `CURRENT_SQLITE_SCHEMA_VERSION` and the agent's version (the `agent` option, or the version in the agent's `package.json`). A `durableSchema` already in the file is never lowered. bios reads it from OPFS before it starts an agent, and refuses one whose pi durable schema is lower (slicc-agent 6.x is 1): the schema version lives in a `durable_schema` table, not in the SQLite header, so the database itself can't be checked without opening it. On pi durable 1.4, opening a database written by an earlier agent migrates it to durable's SQLite schema 2, once and in place; an agent on pi durable 1.3 or earlier (slicc-agent 6.19.13 and earlier) can't open it afterwards, so the agent can't be rolled back past this version. Requests through the Harness are attributed to SLICC (`identity: { attribution: { name: 'SLICC', url: 'https://www.sliccy.com' } }`), which pi-ai sends as OpenRouter's `HTTP-Referer` and `X-OpenRouter-Title`, NVIDIA's `X-BILLING-INVOKE-ORIGIN` and OpenCode's `x-opencode-client`; OpenRouter's preflight allows them from `https://seven.sliccy.ai`, and NVIDIA and OpenCode answer no browser preflight at all, so they go through a CORS-free transport either way. pi durable's crash-loop guard is on with its default: a task cut off 5 times in a row without committing a new state (a crash, a reload or `restart()`, which end the worker without closing the session) is parked instead of started again. The monitor shows it as `blocked: restart limit` with an error alert, "generating of sliccy is parked", whose command is `agent retry <task id>`; run from a terminal, that runs the task again (`Harness.retryTask`). Only the user can retry: an agent's `agent retry` is refused, and so is a task that isn't parked.
+- `openOpfsSqliteStorage({ directory?, file? })` keeps the session in wasm SQLite ([`@sqlite.org/sqlite-wasm`](https://www.npmjs.com/package/@sqlite.org/sqlite-wasm)) in an `opfs-sahpool` pool, by default `/.slicc/agent/` in OPFS. It needs a dedicated worker. Only one worker holds a pool at a time: the opener takes a Web Lock per directory and waits until every file of the pool can be opened before sqlite-wasm installs it, because a failed install deletes the pool's directory. `openMemorySqliteStorage()` keeps the same database in memory. **Document bases.** Every session and conversation document the agent defines stores a complete base after 64 deltas (`boundedDeltas` in `src/checkpoints.ts`, the policy pi durable's codemode journal uses), so reading one replays at most 64 changes: with deltas only, a document changed 5,000 times took about 26 ms to read after a reopen, against under 1 ms. Task documents, which end with their task, keep deltas only. **Profile marker:** every open, under the pool's lock and before pi durable opens (and migrates) the database, writes `<directory>-profile.json` next to the pool, `/.slicc/agent-profile.json` by default: `{ "durableSchema": 2, "agent": "<version>" }`, with pi durable's `CURRENT_SQLITE_SCHEMA_VERSION` and the agent's version (the `agent` option, or the version in the agent's `package.json`). A `durableSchema` already in the file is never lowered. bios reads it from OPFS before it starts an agent, and refuses one whose pi durable schema is lower (slicc-agent 6.x is 1): the schema version lives in a `durable_schema` table, not in the SQLite header, so the database itself can't be checked without opening it. On pi durable 1.4, opening a database written by an earlier agent migrates it to durable's SQLite schema 2, once and in place; an agent on pi durable 1.3 or earlier (slicc-agent 6.19.13 and earlier) can't open it afterwards, so the agent can't be rolled back past this version. Requests through the Harness are attributed to SLICC (`identity: { attribution: { name: 'SLICC', url: 'https://www.sliccy.com' } }`), which pi-ai sends as OpenRouter's `HTTP-Referer` and `X-OpenRouter-Title`, NVIDIA's `X-BILLING-INVOKE-ORIGIN` and OpenCode's `x-opencode-client`; OpenRouter's preflight allows them from `https://seven.sliccy.ai`, and NVIDIA and OpenCode answer no browser preflight at all, so they go through a CORS-free transport either way. pi durable's crash-loop guard is on with its default: a task cut off 5 times in a row without committing a new state (a crash, a reload or `restart()`, which end the worker without closing the session) is parked instead of started again. The monitor shows it as `blocked: restart limit` with an error alert, "generating of sliccy is parked", whose command is `agent retry <task id>`; run from a terminal, that runs the task again (`Harness.retryTask`). Only the user can retry: an agent's `agent retry` is refused, and so is a task that isn't parked.
 - `hostAgent(agent)` serves the agent from one Chord host named `agent` (`serveAgent` in [`src/host.ts`](src/host.ts)). Its remote contracts, in [`src/services.ts`](src/services.ts), are `slicc.agent.control` (send with `whenBusy` `steer`, `followUp` or `reject`, wait, withdraw, abort, compact) and `slicc.agent.transcript` (the conversation's durable view as replicated state, plus `deliveries`: how each user entry was delivered, `run`, `steer` or `follow-up`, derived by the host from where each send it accepted was placed: after a tool result it steered, queued first it's a follow-up or a late steer per its `whenBusy`, placed at once it started a run), `slicc.agent.settings`, `slicc.agent.remote` (remote control), `slicc.agent.pages` (Panels) and `slicc.agent.guest` (Guest seats). `serveConnections(self, host)` hands it every `MessagePort` the page sends, and each port becomes one Chord link whose principal is a seat: `owner` (a page of the owner, with its own Panels), `control` (a follower with Control), `view` (a follower without) or `guest` (a guest seat, with its id, label and epoch), plus the link's number, so every link gets its own objects. The principal is typed (`AgentPrincipal` in [`src/serving.ts`](src/serving.ts)); the host's own code acts as `{ seat: 'host' }`, which no link gets. Each factory picks a variant per seat. Every contract places its objects on the host `agent` (`hostNamed`), so no caller names a host. The contracts take their methods' arguments as one JSON array, and the client in [`src/serving.ts`](src/serving.ts) turns them back into the `AgentControl`, `AgentSettings`, `AgentRemote` and `AgentPages` interfaces and their replicated states, so callers don't see Chord.
 - `@ai-ecoverse/slicc-agent/page` has what the page needs (`startAgent`, `connectAgent`) without the agent's runtime: no pi-durable, pi-ai, providers or SQLite, which load only in the worker. `@ai-ecoverse/slicc-agent/spectrum` is just as light, and a test keeps both that way.
 - `startAgent({ worker })` takes the Web Lock `slicc-agent`, so one tab at a time owns the agent worker, and waits while another tab holds it. `connect()` returns an `AgentConnection` (`control`, `transcript`, `prompt()`, and `webhook(name, { id?, headers?, body })`, which hands a webhook delivery, such as one from the tray hub, to the licks without a chord `Context`), `restart()` replaces the worker (durable resumes from SQLite), and `release()` stops it and lets the next tab take over. `port()` returns a raw `MessagePort` into the worker instead, for another tab: hand it over (through a SharedWorker, say), and that tab calls `connectAgent(port)`. A caller that already holds the lock passes `held: true`. A connection's `closed` resolves when its port ends (with the error, if any), and from then on its states keep their last values.

package/dist/agents.js

@@ -1,7 +1,7 @@
 import {
   defineDoc
 } from "@earendil-works/pi-durable";
-import { deltasOnly } from "./checkpoints.js";
+import { boundedDeltas } from "./checkpoints.js";
 import { ConeDoc } from "./cone.js";
 const FIRST_CONE = "cone";
 function live(record) {
@@ -9,7 +9,7 @@ function live(record) {
 }
 const AgentsDoc = defineDoc({
   kind: "slicc.agents",
-  checkpointWhen: deltasOnly,
+  checkpointWhen: boundedDeltas,
   version: 1,
   scope: "session",
   initial: () => ({ cones: {}, active: FIRST_CONE, next: 2, scoops: {} })

package/dist/agents.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/agents.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type Conversation,\n  type ConversationId,\n  defineDoc,\n  type Harness,\n  type Tx,\n} from '@earendil-works/pi-durable';\nimport { deltasOnly } from './checkpoints.ts';\nimport { ConeDoc } from './cone.ts';\nimport type { RoleMemory } from './memory/store.ts';\n\nexport const FIRST_CONE = 'cone';\n\nexport type ConeRecord = { name: string; conversation: number; title?: string; titled?: number };\n\nexport type Mark = { in: number; at: number };\n\nexport type ScoopRecord = {\n  name: string;\n  folder: string;\n  cone: string;\n  conversation: number;\n  anchor: number;\n  role: string | null;\n  memory?: RoleMemory;\n  origin?: string;\n  context?: { project: boolean; global: boolean };\n  kind: 'async' | 'sync';\n  parent: string;\n  depth: number;\n  roots: { write: string[]; read: string[] } | null;\n  created: Mark | null;\n  dropped: Mark | null;\n  gone: boolean;\n  frozen?: string;\n  removed?: boolean;\n  thawedAs?: string;\n  title?: string;\n  titled?: number;\n};\n\nexport type FrozenRecord = {\n  cone: string;\n  name: string;\n  conversation: number;\n  title: string;\n  model: string;\n  messages: number;\n  frozenAt: number;\n  scoops: string[];\n  v6?: { origin: string; key: string; suffix?: string };\n};\n\nexport type V6Import = {\n  at: number;\n  origin: string;\n  cones: Record<string, string>;\n  tails: Record<string, string>;\n};\n\nexport function live(record: ScoopRecord): boolean {\n  return record.dropped === null && !record.gone && !record.frozen;\n}\n\nexport type AgentsState = {\n  cones: Record<string, ConeRecord>;\n  active: string;\n  next: number;\n  scoops: Record<string, ScoopRecord>;\n  frozen?: Record<string, FrozenRecord>;\n  frozenNext?: number;\n  imports?: Record<string, V6Import>;\n};\n\nexport const AgentsDoc = defineDoc<AgentsState>({\n  kind: 'slicc.agents',\n  checkpointWhen: deltasOnly,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ cones: {}, active: FIRST_CONE, next: 2, scoops: {} }),\n});\n\nexport const SCOOP_PREFIX = 'scoop:';\n\nexport function scoopId(folder: string): string {\n  return `${SCOOP_PREFIX}${folder}`;\n}\n\nexport function slug(name: string): string {\n  const cleaned = name\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, '-')\n    .replace(/^[-._]+|[-._]+$/g, '')\n    .slice(0, 48);\n  return cleaned || 'scoop';\n}\n\nexport function freeFolder(state: Pick<AgentsState, 'scoops'>, name: string): string {\n  const base = slug(name);\n  if (!state.scoops[scoopId(base)]) return base;\n  for (let n = 2; ; n++) if (!state.scoops[scoopId(`${base}-${n}`)]) return `${base}-${n}`;\n}\n\nexport interface Agents {\n  state(): Readonly<AgentsState>;\n  cone(): Conversation;\n  activeCone(): string;\n  conversation(agentId: string, context: Context): Promise<Conversation | undefined>;\n  selectCone(id: string, context: Context): Promise<void>;\n  createCone(name: string, context: Context): Promise<string>;\n  switchCone(conversation: Conversation, context: Context): Promise<void>;\n  setConversation(coneId: string, conversation: Conversation, context: Context): Promise<void>;\n  update<T>(change: (tx: Tx, state: AgentsState) => T | Promise<T>, context: Context): Promise<T>;\n  onChange(listener: (state: Readonly<AgentsState>) => void): () => void;\n  onCone(listener: (conversation: Conversation) => void | Promise<void>): () => void;\n}\n\nasync function initial(harness: Harness, root: Conversation, context: Context) {\n  return harness.commit(async (tx) => {\n    const doc = await tx.doc(AgentsDoc);\n    if (!doc.cones[FIRST_CONE]) {\n      const legacy = (await tx.doc(ConeDoc)).conversation;\n      doc.cones[FIRST_CONE] = { name: 'sliccy', conversation: legacy ?? root.id };\n    }\n    if (!doc.cones[doc.active]) doc.active = FIRST_CONE;\n    return JSON.parse(JSON.stringify(doc)) as AgentsState;\n  }, context);\n}\n\nexport async function openAgents(\n  harness: Harness,\n  root: Conversation,\n  context: Context\n): Promise<Agents> {\n  let state = await initial(harness, root, context);\n  const handles = new Map<number, Conversation>([[root.id, root]]);\n  const handle = async (id: number, using: Context) => {\n    const known = handles.get(id);\n    if (known) return known;\n    const found = await harness.conversation(id as ConversationId, using);\n    if (found) handles.set(id, found);\n    return found;\n  };\n  let cone =\n    (await handle((state.cones[state.active] as ConeRecord).conversation, context)) ?? root;\n  const changes = new Set<(state: Readonly<AgentsState>) => void>();\n  const cones = new Set<(conversation: Conversation) => void | Promise<void>>();\n  const notifyCone = async (next: Conversation) => {\n    cone = next;\n    await Promise.all([...cones].map((listener) => listener(next)));\n  };\n  const update: Agents['update'] = async (change, using) => {\n    const [result, next] = await harness.commit(async (tx) => {\n      const doc = await tx.doc(AgentsDoc);\n      const value = await change(tx, doc as AgentsState);\n      return [value, JSON.parse(JSON.stringify(doc)) as AgentsState] as const;\n    }, using);\n    state = next;\n    for (const listener of changes) listener(state);\n    return result;\n  };\n  const agents: Agents = {\n    state: () => state,\n    cone: () => cone,\n    activeCone: () => state.active,\n    async conversation(agentId, using) {\n      const id = state.cones[agentId]?.conversation ?? state.scoops[agentId]?.conversation;\n      return id === undefined ? undefined : handle(id, using);\n    },\n    async selectCone(id, using) {\n      const record = state.cones[id];\n      if (!record) throw new Error(`no cone ${id}`);\n      if (state.active === id) return;\n      await update((_tx, doc) => {\n        doc.active = id;\n      }, using);\n      await notifyCone((await handle(record.conversation, using)) as Conversation);\n    },\n    async createCone(name, using) {\n      const wanted = name.trim();\n      if (!wanted) throw new Error('A cone needs a name.');\n      if (Object.values(state.cones).some((record) => record.name === wanted))\n        throw new Error(`A cone named ${wanted} already exists.`);\n      const conversation = await harness.createConversation(\n        {\n          ownership: { kind: 'ownerless' },\n          agent: { model: (await cone.agent(using)).model ?? null },\n        },\n        using\n      );\n      handles.set(conversation.id, conversation);\n      return update((_tx, doc) => {\n        const id = `cone-${doc.next}`;\n        doc.next += 1;\n        doc.cones[id] = { name: wanted, conversation: conversation.id };\n        return id;\n      }, using);\n    },\n    switchCone(conversation, using) {\n      return agents.setConversation(state.active, conversation, using);\n    },\n    async setConversation(coneId, conversation, using) {\n      handles.set(conversation.id, conversation);\n      await update(async (tx, doc) => {\n        const cone = doc.cones[coneId] as ConeRecord;\n        cone.conversation = conversation.id;\n        delete cone.title;\n        delete cone.titled;\n        if (coneId === doc.active) (await tx.doc(ConeDoc)).conversation = conversation.id;\n      }, using);\n      if (coneId === state.active) await notifyCone(conversation);\n    },\n    update,\n    onChange(listener) {\n      changes.add(listener);\n      return () => changes.delete(listener);\n    },\n    onCone(listener) {\n      cones.add(listener);\n      return () => cones.delete(listener);\n    },\n  };\n  return agents;\n}\n"],
-  "mappings": "AACA;AAAA,EAGE;AAAA,OAGK;AACP,SAAS,kBAAkB;AAC3B,SAAS,eAAe;AAGjB,MAAM,aAAa;AAiDnB,SAAS,KAAK,QAA8B;AACjD,SAAO,OAAO,YAAY,QAAQ,CAAC,OAAO,QAAQ,CAAC,OAAO;AAC5D;AAYO,MAAM,YAAY,UAAuB;AAAA,EAC9C,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,GAAG,QAAQ,YAAY,MAAM,GAAG,QAAQ,CAAC,EAAE;AACvE,CAAC;AAEM,MAAM,eAAe;AAErB,SAAS,QAAQ,QAAwB;AAC9C,SAAO,GAAG,YAAY,GAAG,MAAM;AACjC;AAEO,SAAS,KAAK,MAAsB;AACzC,QAAM,UAAU,KACb,YAAY,EACZ,QAAQ,kBAAkB,GAAG,EAC7B,QAAQ,oBAAoB,EAAE,EAC9B,MAAM,GAAG,EAAE;AACd,SAAO,WAAW;AACpB;AAEO,SAAS,WAAW,OAAoC,MAAsB;AACnF,QAAM,OAAO,KAAK,IAAI;AACtB,MAAI,CAAC,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAG,QAAO;AACzC,WAAS,IAAI,KAAK,IAAK,KAAI,CAAC,MAAM,OAAO,QAAQ,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,EAAG,QAAO,GAAG,IAAI,IAAI,CAAC;AACxF;AAgBA,eAAe,QAAQ,SAAkB,MAAoB,SAAkB;AAC7E,SAAO,QAAQ,OAAO,OAAO,OAAO;AAClC,UAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,QAAI,CAAC,IAAI,MAAM,UAAU,GAAG;AAC1B,YAAM,UAAU,MAAM,GAAG,IAAI,OAAO,GAAG;AACvC,UAAI,MAAM,UAAU,IAAI,EAAE,MAAM,UAAU,cAAc,UAAU,KAAK,GAAG;AAAA,IAC5E;AACA,QAAI,CAAC,IAAI,MAAM,IAAI,MAAM,EAAG,KAAI,SAAS;AACzC,WAAO,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,EACvC,GAAG,OAAO;AACZ;AAEA,eAAsB,WACpB,SACA,MACA,SACiB;AACjB,MAAI,QAAQ,MAAM,QAAQ,SAAS,MAAM,OAAO;AAChD,QAAM,UAAU,oBAAI,IAA0B,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC/D,QAAM,SAAS,OAAO,IAAY,UAAmB;AACnD,UAAM,QAAQ,QAAQ,IAAI,EAAE;AAC5B,QAAI,MAAO,QAAO;AAClB,UAAM,QAAQ,MAAM,QAAQ,aAAa,IAAsB,KAAK;AACpE,QAAI,MAAO,SAAQ,IAAI,IAAI,KAAK;AAChC,WAAO;AAAA,EACT;AACA,MAAI,OACD,MAAM,OAAQ,MAAM,MAAM,MAAM,MAAM,EAAiB,cAAc,OAAO,KAAM;AACrF,QAAM,UAAU,oBAAI,IAA4C;AAChE,QAAM,QAAQ,oBAAI,IAA0D;AAC5E,QAAM,aAAa,OAAO,SAAuB;AAC/C,WAAO;AACP,UAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,aAAa,SAAS,IAAI,CAAC,CAAC;AAAA,EAChE;AACA,QAAM,SAA2B,OAAO,QAAQ,UAAU;AACxD,UAAM,CAAC,QAAQ,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,OAAO;AACxD,YAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,YAAM,QAAQ,MAAM,OAAO,IAAI,GAAkB;AACjD,aAAO,CAAC,OAAO,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC,CAAgB;AAAA,IAC/D,GAAG,KAAK;AACR,YAAQ;AACR,eAAW,YAAY,QAAS,UAAS,KAAK;AAC9C,WAAO;AAAA,EACT;AACA,QAAM,SAAiB;AAAA,IACrB,OAAO,MAAM;AAAA,IACb,MAAM,MAAM;AAAA,IACZ,YAAY,MAAM,MAAM;AAAA,IACxB,MAAM,aAAa,SAAS,OAAO;AACjC,YAAM,KAAK,MAAM,MAAM,OAAO,GAAG,gBAAgB,MAAM,OAAO,OAAO,GAAG;AACxE,aAAO,OAAO,SAAY,SAAY,OAAO,IAAI,KAAK;AAAA,IACxD;AAAA,IACA,MAAM,WAAW,IAAI,OAAO;AAC1B,YAAM,SAAS,MAAM,MAAM,EAAE;AAC7B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,WAAW,EAAE,EAAE;AAC5C,UAAI,MAAM,WAAW,GAAI;AACzB,YAAM,OAAO,CAAC,KAAK,QAAQ;AACzB,YAAI,SAAS;AAAA,MACf,GAAG,KAAK;AACR,YAAM,WAAY,MAAM,OAAO,OAAO,cAAc,KAAK,CAAkB;AAAA,IAC7E;AAAA,IACA,MAAM,WAAW,MAAM,OAAO;AAC5B,YAAM,SAAS,KAAK,KAAK;AACzB,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACnD,UAAI,OAAO,OAAO,MAAM,KAAK,EAAE,KAAK,CAAC,WAAW,OAAO,SAAS,MAAM;AACpE,cAAM,IAAI,MAAM,gBAAgB,MAAM,kBAAkB;AAC1D,YAAM,eAAe,MAAM,QAAQ;AAAA,QACjC;AAAA,UACE,WAAW,EAAE,MAAM,YAAY;AAAA,UAC/B,OAAO,EAAE,QAAQ,MAAM,KAAK,MAAM,KAAK,GAAG,SAAS,KAAK;AAAA,QAC1D;AAAA,QACA;AAAA,MACF;AACA,cAAQ,IAAI,aAAa,IAAI,YAAY;AACzC,aAAO,OAAO,CAAC,KAAK,QAAQ;AAC1B,cAAM,KAAK,QAAQ,IAAI,IAAI;AAC3B,YAAI,QAAQ;AACZ,YAAI,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,cAAc,aAAa,GAAG;AAC9D,eAAO;AAAA,MACT,GAAG,KAAK;AAAA,IACV;AAAA,IACA,WAAW,cAAc,OAAO;AAC9B,aAAO,OAAO,gBAAgB,MAAM,QAAQ,cAAc,KAAK;AAAA,IACjE;AAAA,IACA,MAAM,gBAAgB,QAAQ,cAAc,OAAO;AACjD,cAAQ,IAAI,aAAa,IAAI,YAAY;AACzC,YAAM,OAAO,OAAO,IAAI,QAAQ;AAC9B,cAAMA,QAAO,IAAI,MAAM,MAAM;AAC7B,QAAAA,MAAK,eAAe,aAAa;AACjC,eAAOA,MAAK;AACZ,eAAOA,MAAK;AACZ,YAAI,WAAW,IAAI,OAAQ,EAAC,MAAM,GAAG,IAAI,OAAO,GAAG,eAAe,aAAa;AAAA,MACjF,GAAG,KAAK;AACR,UAAI,WAAW,MAAM,OAAQ,OAAM,WAAW,YAAY;AAAA,IAC5D;AAAA,IACA;AAAA,IACA,SAAS,UAAU;AACjB,cAAQ,IAAI,QAAQ;AACpB,aAAO,MAAM,QAAQ,OAAO,QAAQ;AAAA,IACtC;AAAA,IACA,OAAO,UAAU;AACf,YAAM,IAAI,QAAQ;AAClB,aAAO,MAAM,MAAM,OAAO,QAAQ;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport {\n  type Conversation,\n  type ConversationId,\n  defineDoc,\n  type Harness,\n  type Tx,\n} from '@earendil-works/pi-durable';\nimport { boundedDeltas } from './checkpoints.ts';\nimport { ConeDoc } from './cone.ts';\nimport type { RoleMemory } from './memory/store.ts';\n\nexport const FIRST_CONE = 'cone';\n\nexport type ConeRecord = { name: string; conversation: number; title?: string; titled?: number };\n\nexport type Mark = { in: number; at: number };\n\nexport type ScoopRecord = {\n  name: string;\n  folder: string;\n  cone: string;\n  conversation: number;\n  anchor: number;\n  role: string | null;\n  memory?: RoleMemory;\n  origin?: string;\n  context?: { project: boolean; global: boolean };\n  kind: 'async' | 'sync';\n  parent: string;\n  depth: number;\n  roots: { write: string[]; read: string[] } | null;\n  created: Mark | null;\n  dropped: Mark | null;\n  gone: boolean;\n  frozen?: string;\n  removed?: boolean;\n  thawedAs?: string;\n  title?: string;\n  titled?: number;\n};\n\nexport type FrozenRecord = {\n  cone: string;\n  name: string;\n  conversation: number;\n  title: string;\n  model: string;\n  messages: number;\n  frozenAt: number;\n  scoops: string[];\n  v6?: { origin: string; key: string; suffix?: string };\n};\n\nexport type V6Import = {\n  at: number;\n  origin: string;\n  cones: Record<string, string>;\n  tails: Record<string, string>;\n};\n\nexport function live(record: ScoopRecord): boolean {\n  return record.dropped === null && !record.gone && !record.frozen;\n}\n\nexport type AgentsState = {\n  cones: Record<string, ConeRecord>;\n  active: string;\n  next: number;\n  scoops: Record<string, ScoopRecord>;\n  frozen?: Record<string, FrozenRecord>;\n  frozenNext?: number;\n  imports?: Record<string, V6Import>;\n};\n\nexport const AgentsDoc = defineDoc<AgentsState>({\n  kind: 'slicc.agents',\n  checkpointWhen: boundedDeltas,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ cones: {}, active: FIRST_CONE, next: 2, scoops: {} }),\n});\n\nexport const SCOOP_PREFIX = 'scoop:';\n\nexport function scoopId(folder: string): string {\n  return `${SCOOP_PREFIX}${folder}`;\n}\n\nexport function slug(name: string): string {\n  const cleaned = name\n    .toLowerCase()\n    .replace(/[^a-z0-9._-]+/g, '-')\n    .replace(/^[-._]+|[-._]+$/g, '')\n    .slice(0, 48);\n  return cleaned || 'scoop';\n}\n\nexport function freeFolder(state: Pick<AgentsState, 'scoops'>, name: string): string {\n  const base = slug(name);\n  if (!state.scoops[scoopId(base)]) return base;\n  for (let n = 2; ; n++) if (!state.scoops[scoopId(`${base}-${n}`)]) return `${base}-${n}`;\n}\n\nexport interface Agents {\n  state(): Readonly<AgentsState>;\n  cone(): Conversation;\n  activeCone(): string;\n  conversation(agentId: string, context: Context): Promise<Conversation | undefined>;\n  selectCone(id: string, context: Context): Promise<void>;\n  createCone(name: string, context: Context): Promise<string>;\n  switchCone(conversation: Conversation, context: Context): Promise<void>;\n  setConversation(coneId: string, conversation: Conversation, context: Context): Promise<void>;\n  update<T>(change: (tx: Tx, state: AgentsState) => T | Promise<T>, context: Context): Promise<T>;\n  onChange(listener: (state: Readonly<AgentsState>) => void): () => void;\n  onCone(listener: (conversation: Conversation) => void | Promise<void>): () => void;\n}\n\nasync function initial(harness: Harness, root: Conversation, context: Context) {\n  return harness.commit(async (tx) => {\n    const doc = await tx.doc(AgentsDoc);\n    if (!doc.cones[FIRST_CONE]) {\n      const legacy = (await tx.doc(ConeDoc)).conversation;\n      doc.cones[FIRST_CONE] = { name: 'sliccy', conversation: legacy ?? root.id };\n    }\n    if (!doc.cones[doc.active]) doc.active = FIRST_CONE;\n    return JSON.parse(JSON.stringify(doc)) as AgentsState;\n  }, context);\n}\n\nexport async function openAgents(\n  harness: Harness,\n  root: Conversation,\n  context: Context\n): Promise<Agents> {\n  let state = await initial(harness, root, context);\n  const handles = new Map<number, Conversation>([[root.id, root]]);\n  const handle = async (id: number, using: Context) => {\n    const known = handles.get(id);\n    if (known) return known;\n    const found = await harness.conversation(id as ConversationId, using);\n    if (found) handles.set(id, found);\n    return found;\n  };\n  let cone =\n    (await handle((state.cones[state.active] as ConeRecord).conversation, context)) ?? root;\n  const changes = new Set<(state: Readonly<AgentsState>) => void>();\n  const cones = new Set<(conversation: Conversation) => void | Promise<void>>();\n  const notifyCone = async (next: Conversation) => {\n    cone = next;\n    await Promise.all([...cones].map((listener) => listener(next)));\n  };\n  const update: Agents['update'] = async (change, using) => {\n    const [result, next] = await harness.commit(async (tx) => {\n      const doc = await tx.doc(AgentsDoc);\n      const value = await change(tx, doc as AgentsState);\n      return [value, JSON.parse(JSON.stringify(doc)) as AgentsState] as const;\n    }, using);\n    state = next;\n    for (const listener of changes) listener(state);\n    return result;\n  };\n  const agents: Agents = {\n    state: () => state,\n    cone: () => cone,\n    activeCone: () => state.active,\n    async conversation(agentId, using) {\n      const id = state.cones[agentId]?.conversation ?? state.scoops[agentId]?.conversation;\n      return id === undefined ? undefined : handle(id, using);\n    },\n    async selectCone(id, using) {\n      const record = state.cones[id];\n      if (!record) throw new Error(`no cone ${id}`);\n      if (state.active === id) return;\n      await update((_tx, doc) => {\n        doc.active = id;\n      }, using);\n      await notifyCone((await handle(record.conversation, using)) as Conversation);\n    },\n    async createCone(name, using) {\n      const wanted = name.trim();\n      if (!wanted) throw new Error('A cone needs a name.');\n      if (Object.values(state.cones).some((record) => record.name === wanted))\n        throw new Error(`A cone named ${wanted} already exists.`);\n      const conversation = await harness.createConversation(\n        {\n          ownership: { kind: 'ownerless' },\n          agent: { model: (await cone.agent(using)).model ?? null },\n        },\n        using\n      );\n      handles.set(conversation.id, conversation);\n      return update((_tx, doc) => {\n        const id = `cone-${doc.next}`;\n        doc.next += 1;\n        doc.cones[id] = { name: wanted, conversation: conversation.id };\n        return id;\n      }, using);\n    },\n    switchCone(conversation, using) {\n      return agents.setConversation(state.active, conversation, using);\n    },\n    async setConversation(coneId, conversation, using) {\n      handles.set(conversation.id, conversation);\n      await update(async (tx, doc) => {\n        const cone = doc.cones[coneId] as ConeRecord;\n        cone.conversation = conversation.id;\n        delete cone.title;\n        delete cone.titled;\n        if (coneId === doc.active) (await tx.doc(ConeDoc)).conversation = conversation.id;\n      }, using);\n      if (coneId === state.active) await notifyCone(conversation);\n    },\n    update,\n    onChange(listener) {\n      changes.add(listener);\n      return () => changes.delete(listener);\n    },\n    onCone(listener) {\n      cones.add(listener);\n      return () => cones.delete(listener);\n    },\n  };\n  return agents;\n}\n"],
+  "mappings": "AACA;AAAA,EAGE;AAAA,OAGK;AACP,SAAS,qBAAqB;AAC9B,SAAS,eAAe;AAGjB,MAAM,aAAa;AAiDnB,SAAS,KAAK,QAA8B;AACjD,SAAO,OAAO,YAAY,QAAQ,CAAC,OAAO,QAAQ,CAAC,OAAO;AAC5D;AAYO,MAAM,YAAY,UAAuB;AAAA,EAC9C,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,GAAG,QAAQ,YAAY,MAAM,GAAG,QAAQ,CAAC,EAAE;AACvE,CAAC;AAEM,MAAM,eAAe;AAErB,SAAS,QAAQ,QAAwB;AAC9C,SAAO,GAAG,YAAY,GAAG,MAAM;AACjC;AAEO,SAAS,KAAK,MAAsB;AACzC,QAAM,UAAU,KACb,YAAY,EACZ,QAAQ,kBAAkB,GAAG,EAC7B,QAAQ,oBAAoB,EAAE,EAC9B,MAAM,GAAG,EAAE;AACd,SAAO,WAAW;AACpB;AAEO,SAAS,WAAW,OAAoC,MAAsB;AACnF,QAAM,OAAO,KAAK,IAAI;AACtB,MAAI,CAAC,MAAM,OAAO,QAAQ,IAAI,CAAC,EAAG,QAAO;AACzC,WAAS,IAAI,KAAK,IAAK,KAAI,CAAC,MAAM,OAAO,QAAQ,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,EAAG,QAAO,GAAG,IAAI,IAAI,CAAC;AACxF;AAgBA,eAAe,QAAQ,SAAkB,MAAoB,SAAkB;AAC7E,SAAO,QAAQ,OAAO,OAAO,OAAO;AAClC,UAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,QAAI,CAAC,IAAI,MAAM,UAAU,GAAG;AAC1B,YAAM,UAAU,MAAM,GAAG,IAAI,OAAO,GAAG;AACvC,UAAI,MAAM,UAAU,IAAI,EAAE,MAAM,UAAU,cAAc,UAAU,KAAK,GAAG;AAAA,IAC5E;AACA,QAAI,CAAC,IAAI,MAAM,IAAI,MAAM,EAAG,KAAI,SAAS;AACzC,WAAO,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC;AAAA,EACvC,GAAG,OAAO;AACZ;AAEA,eAAsB,WACpB,SACA,MACA,SACiB;AACjB,MAAI,QAAQ,MAAM,QAAQ,SAAS,MAAM,OAAO;AAChD,QAAM,UAAU,oBAAI,IAA0B,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC/D,QAAM,SAAS,OAAO,IAAY,UAAmB;AACnD,UAAM,QAAQ,QAAQ,IAAI,EAAE;AAC5B,QAAI,MAAO,QAAO;AAClB,UAAM,QAAQ,MAAM,QAAQ,aAAa,IAAsB,KAAK;AACpE,QAAI,MAAO,SAAQ,IAAI,IAAI,KAAK;AAChC,WAAO;AAAA,EACT;AACA,MAAI,OACD,MAAM,OAAQ,MAAM,MAAM,MAAM,MAAM,EAAiB,cAAc,OAAO,KAAM;AACrF,QAAM,UAAU,oBAAI,IAA4C;AAChE,QAAM,QAAQ,oBAAI,IAA0D;AAC5E,QAAM,aAAa,OAAO,SAAuB;AAC/C,WAAO;AACP,UAAM,QAAQ,IAAI,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,aAAa,SAAS,IAAI,CAAC,CAAC;AAAA,EAChE;AACA,QAAM,SAA2B,OAAO,QAAQ,UAAU;AACxD,UAAM,CAAC,QAAQ,IAAI,IAAI,MAAM,QAAQ,OAAO,OAAO,OAAO;AACxD,YAAM,MAAM,MAAM,GAAG,IAAI,SAAS;AAClC,YAAM,QAAQ,MAAM,OAAO,IAAI,GAAkB;AACjD,aAAO,CAAC,OAAO,KAAK,MAAM,KAAK,UAAU,GAAG,CAAC,CAAgB;AAAA,IAC/D,GAAG,KAAK;AACR,YAAQ;AACR,eAAW,YAAY,QAAS,UAAS,KAAK;AAC9C,WAAO;AAAA,EACT;AACA,QAAM,SAAiB;AAAA,IACrB,OAAO,MAAM;AAAA,IACb,MAAM,MAAM;AAAA,IACZ,YAAY,MAAM,MAAM;AAAA,IACxB,MAAM,aAAa,SAAS,OAAO;AACjC,YAAM,KAAK,MAAM,MAAM,OAAO,GAAG,gBAAgB,MAAM,OAAO,OAAO,GAAG;AACxE,aAAO,OAAO,SAAY,SAAY,OAAO,IAAI,KAAK;AAAA,IACxD;AAAA,IACA,MAAM,WAAW,IAAI,OAAO;AAC1B,YAAM,SAAS,MAAM,MAAM,EAAE;AAC7B,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,WAAW,EAAE,EAAE;AAC5C,UAAI,MAAM,WAAW,GAAI;AACzB,YAAM,OAAO,CAAC,KAAK,QAAQ;AACzB,YAAI,SAAS;AAAA,MACf,GAAG,KAAK;AACR,YAAM,WAAY,MAAM,OAAO,OAAO,cAAc,KAAK,CAAkB;AAAA,IAC7E;AAAA,IACA,MAAM,WAAW,MAAM,OAAO;AAC5B,YAAM,SAAS,KAAK,KAAK;AACzB,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sBAAsB;AACnD,UAAI,OAAO,OAAO,MAAM,KAAK,EAAE,KAAK,CAAC,WAAW,OAAO,SAAS,MAAM;AACpE,cAAM,IAAI,MAAM,gBAAgB,MAAM,kBAAkB;AAC1D,YAAM,eAAe,MAAM,QAAQ;AAAA,QACjC;AAAA,UACE,WAAW,EAAE,MAAM,YAAY;AAAA,UAC/B,OAAO,EAAE,QAAQ,MAAM,KAAK,MAAM,KAAK,GAAG,SAAS,KAAK;AAAA,QAC1D;AAAA,QACA;AAAA,MACF;AACA,cAAQ,IAAI,aAAa,IAAI,YAAY;AACzC,aAAO,OAAO,CAAC,KAAK,QAAQ;AAC1B,cAAM,KAAK,QAAQ,IAAI,IAAI;AAC3B,YAAI,QAAQ;AACZ,YAAI,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,cAAc,aAAa,GAAG;AAC9D,eAAO;AAAA,MACT,GAAG,KAAK;AAAA,IACV;AAAA,IACA,WAAW,cAAc,OAAO;AAC9B,aAAO,OAAO,gBAAgB,MAAM,QAAQ,cAAc,KAAK;AAAA,IACjE;AAAA,IACA,MAAM,gBAAgB,QAAQ,cAAc,OAAO;AACjD,cAAQ,IAAI,aAAa,IAAI,YAAY;AACzC,YAAM,OAAO,OAAO,IAAI,QAAQ;AAC9B,cAAMA,QAAO,IAAI,MAAM,MAAM;AAC7B,QAAAA,MAAK,eAAe,aAAa;AACjC,eAAOA,MAAK;AACZ,eAAOA,MAAK;AACZ,YAAI,WAAW,IAAI,OAAQ,EAAC,MAAM,GAAG,IAAI,OAAO,GAAG,eAAe,aAAa;AAAA,MACjF,GAAG,KAAK;AACR,UAAI,WAAW,MAAM,OAAQ,OAAM,WAAW,YAAY;AAAA,IAC5D;AAAA,IACA;AAAA,IACA,SAAS,UAAU;AACjB,cAAQ,IAAI,QAAQ;AACpB,aAAO,MAAM,QAAQ,OAAO,QAAQ;AAAA,IACtC;AAAA,IACA,OAAO,UAAU;AACf,YAAM,IAAI,QAAQ;AAClB,aAAO,MAAM,MAAM,OAAO,QAAQ;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;",
   "names": ["cone"]
 }

package/dist/approvals/policy.js

@@ -3,7 +3,7 @@ import {
 } from "@earendil-works/chord";
 import { BACKGROUND_CONTEXT } from "@earendil-works/chord/context";
 import { defineDoc } from "@earendil-works/pi-durable";
-import { deltasOnly } from "../checkpoints.js";
+import { boundedDeltas } from "../checkpoints.js";
 import {
   changedGuests,
   DEFAULT_GUEST_POLICY
@@ -14,7 +14,7 @@ const DEFAULT_APPROVAL_POLICY = {
 };
 const ApprovalPolicyDoc = defineDoc({
   kind: "slicc.approval-policy",
-  checkpointWhen: deltasOnly,
+  checkpointWhen: boundedDeltas,
   version: 1,
   scope: "session",
   initial: () => ({ overrides: {} })

package/dist/approvals/policy.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/approvals/policy.ts"],
-  "sourcesContent": ["import {\n  type Context,\n  type JsonValue,\n  type ReplicatedState,\n  replicatedState,\n} from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport { defineDoc, type Harness, type JsonObject } from '@earendil-works/pi-durable';\nimport { deltasOnly } from '../checkpoints.ts';\nimport {\n  changedGuests,\n  DEFAULT_GUEST_POLICY,\n  type GuestPolicy,\n  type GuestPolicyChange,\n} from '../guests/policy.ts';\nimport type { ApprovalKind } from './record.ts';\n\nexport type SudoPolicy = { approver: 'user' | 'agent' };\n\nexport type ApprovalPolicy = { guests: GuestPolicy; sudo: SudoPolicy };\n\nexport type ApprovalPolicyChange = { guests?: GuestPolicyChange; sudo?: Partial<SudoPolicy> };\n\nexport type ApprovalPolicySet =\n  | { policy: ApprovalPolicy; error: null }\n  | { policy: null; error: string };\n\nexport const DEFAULT_APPROVAL_POLICY: ApprovalPolicy = {\n  guests: DEFAULT_GUEST_POLICY,\n  sudo: { approver: 'user' },\n};\n\ntype Overrides = Partial<Record<keyof ApprovalPolicy, JsonObject>>;\n\nexport const ApprovalPolicyDoc = defineDoc<{ overrides: Overrides }>({\n  kind: 'slicc.approval-policy',\n  checkpointWhen: deltasOnly,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ overrides: {} }),\n});\n\nconst copy = <T>(value: T): T => JSON.parse(JSON.stringify(value));\n\nfunction changedSudo(next: ApprovalPolicy, change: unknown): string | null {\n  if (!change || typeof change !== 'object' || Array.isArray(change))\n    return 'The sudo policy is an object of policy entries.';\n  for (const [name, value] of Object.entries(change)) {\n    if (name !== 'approver') return `There is no sudo policy entry ${name}.`;\n    if (value !== 'user' && value !== 'agent')\n      return 'A sudo request is approved by user or agent.';\n    next.sudo.approver = value;\n  }\n  return null;\n}\n\nexport function changedPolicy(base: ApprovalPolicy, change: unknown): ApprovalPolicySet {\n  if (!change || typeof change !== 'object' || Array.isArray(change))\n    return { policy: null, error: 'An approval policy change is an object of sections.' };\n  const next = copy(base);\n  for (const [name, value] of Object.entries(change)) {\n    const error =\n      name === 'guests'\n        ? changedGuests(next.guests, value)\n        : name === 'sudo'\n          ? changedSudo(next, value)\n          : `There is no approval policy section ${name}.`;\n    if (error) return { policy: null, error };\n  }\n  return { policy: next, error: null };\n}\n\nexport function resolvedPolicy(overrides: Overrides): ApprovalPolicy {\n  const guests = (overrides.guests ?? {}) as Partial<GuestPolicy>;\n  return copy({\n    guests: {\n      ...DEFAULT_GUEST_POLICY,\n      ...guests,\n      always: { ...DEFAULT_GUEST_POLICY.always, ...guests.always },\n    },\n    sudo: { ...DEFAULT_APPROVAL_POLICY.sudo, ...overrides.sudo },\n  });\n}\n\nexport function overridden(\n  overrides: Overrides,\n  change: Record<string, Record<string, unknown>>,\n  policy: ApprovalPolicy\n): Overrides {\n  const next = copy(overrides);\n  for (const [section, entries] of Object.entries(change)) {\n    const key = section as keyof ApprovalPolicy;\n    const into = next[key] ?? {};\n    const resolved = policy[key] as unknown as JsonObject;\n    for (const name of Object.keys(entries))\n      into[name] = (\n        name === 'always'\n          ? { ...(into.always as object), ...(entries.always as object) }\n          : resolved[name]\n      ) as JsonValue;\n    next[key] = into;\n  }\n  return next;\n}\n\nexport interface ApprovalPolicies {\n  readonly state: ReplicatedState<ApprovalPolicy>;\n  current(): ApprovalPolicy;\n  set(change: unknown, context: Context): Promise<ApprovalPolicySet>;\n}\n\nexport const alwaysFor =\n  (policy: Pick<ApprovalPolicies, 'current'>) =>\n  (kind: ApprovalKind): boolean => {\n    const { always } = policy.current().guests;\n    return kind === 'guest-tool' ? always.tools : always.messages;\n  };\n\nexport async function attachApprovalPolicy(\n  harness: Pick<Harness, 'commit'>,\n  context: Context = BACKGROUND_CONTEXT\n): Promise<ApprovalPolicies> {\n  let overrides = await harness.commit(\n    async (tx) => copy((await tx.doc(ApprovalPolicyDoc)).overrides ?? {}),\n    context\n  );\n  const state = replicatedState<ApprovalPolicy>(resolvedPolicy(overrides));\n  let line: Promise<unknown> = Promise.resolve();\n  return {\n    state,\n    current: () => copy(state.value as ApprovalPolicy),\n    set(change, using) {\n      const run = line.then(async () => {\n        const made = changedPolicy(state.value as ApprovalPolicy, change);\n        if (!made.policy) return made;\n        const next = overridden(\n          overrides,\n          change as Record<string, Record<string, unknown>>,\n          made.policy\n        );\n        await harness.commit(async (tx) => {\n          (await tx.doc(ApprovalPolicyDoc)).overrides = copy(next);\n        }, using);\n        overrides = next;\n        const policy = resolvedPolicy(next);\n        state.replace(using, copy(policy));\n        return { policy: copy(policy), error: null };\n      });\n      line = run.catch(() => undefined);\n      return run;\n    },\n  };\n}\n"],
-  "mappings": "AAAA;AAAA,EAIE;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,iBAAgD;AACzD,SAAS,kBAAkB;AAC3B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAaA,MAAM,0BAA0C;AAAA,EACrD,QAAQ;AAAA,EACR,MAAM,EAAE,UAAU,OAAO;AAC3B;AAIO,MAAM,oBAAoB,UAAoC;AAAA,EACnE,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,WAAW,CAAC,EAAE;AAClC,CAAC;AAED,MAAM,OAAO,CAAI,UAAgB,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAEjE,SAAS,YAAY,MAAsB,QAAgC;AACzE,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM;AAC/D,WAAO;AACT,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,QAAI,SAAS,WAAY,QAAO,iCAAiC,IAAI;AACrE,QAAI,UAAU,UAAU,UAAU;AAChC,aAAO;AACT,SAAK,KAAK,WAAW;AAAA,EACvB;AACA,SAAO;AACT;AAEO,SAAS,cAAc,MAAsB,QAAoC;AACtF,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM;AAC/D,WAAO,EAAE,QAAQ,MAAM,OAAO,sDAAsD;AACtF,QAAM,OAAO,KAAK,IAAI;AACtB,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,UAAM,QACJ,SAAS,WACL,cAAc,KAAK,QAAQ,KAAK,IAChC,SAAS,SACP,YAAY,MAAM,KAAK,IACvB,uCAAuC,IAAI;AACnD,QAAI,MAAO,QAAO,EAAE,QAAQ,MAAM,MAAM;AAAA,EAC1C;AACA,SAAO,EAAE,QAAQ,MAAM,OAAO,KAAK;AACrC;AAEO,SAAS,eAAe,WAAsC;AACnE,QAAM,SAAU,UAAU,UAAU,CAAC;AACrC,SAAO,KAAK;AAAA,IACV,QAAQ;AAAA,MACN,GAAG;AAAA,MACH,GAAG;AAAA,MACH,QAAQ,EAAE,GAAG,qBAAqB,QAAQ,GAAG,OAAO,OAAO;AAAA,IAC7D;AAAA,IACA,MAAM,EAAE,GAAG,wBAAwB,MAAM,GAAG,UAAU,KAAK;AAAA,EAC7D,CAAC;AACH;AAEO,SAAS,WACd,WACA,QACA,QACW;AACX,QAAM,OAAO,KAAK,SAAS;AAC3B,aAAW,CAAC,SAAS,OAAO,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,UAAM,MAAM;AACZ,UAAM,OAAO,KAAK,GAAG,KAAK,CAAC;AAC3B,UAAM,WAAW,OAAO,GAAG;AAC3B,eAAW,QAAQ,OAAO,KAAK,OAAO;AACpC,WAAK,IAAI,IACP,SAAS,WACL,EAAE,GAAI,KAAK,QAAmB,GAAI,QAAQ,OAAkB,IAC5D,SAAS,IAAI;AAErB,SAAK,GAAG,IAAI;AAAA,EACd;AACA,SAAO;AACT;AAQO,MAAM,YACX,CAAC,WACD,CAAC,SAAgC;AAC/B,QAAM,EAAE,OAAO,IAAI,OAAO,QAAQ,EAAE;AACpC,SAAO,SAAS,eAAe,OAAO,QAAQ,OAAO;AACvD;AAEF,eAAsB,qBACpB,SACA,UAAmB,oBACQ;AAC3B,MAAI,YAAY,MAAM,QAAQ;AAAA,IAC5B,OAAO,OAAO,MAAM,MAAM,GAAG,IAAI,iBAAiB,GAAG,aAAa,CAAC,CAAC;AAAA,IACpE;AAAA,EACF;AACA,QAAM,QAAQ,gBAAgC,eAAe,SAAS,CAAC;AACvE,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM,KAAK,MAAM,KAAuB;AAAA,IACjD,IAAI,QAAQ,OAAO;AACjB,YAAM,MAAM,KAAK,KAAK,YAAY;AAChC,cAAM,OAAO,cAAc,MAAM,OAAyB,MAAM;AAChE,YAAI,CAAC,KAAK,OAAQ,QAAO;AACzB,cAAM,OAAO;AAAA,UACX;AAAA,UACA;AAAA,UACA,KAAK;AAAA,QACP;AACA,cAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,WAAC,MAAM,GAAG,IAAI,iBAAiB,GAAG,YAAY,KAAK,IAAI;AAAA,QACzD,GAAG,KAAK;AACR,oBAAY;AACZ,cAAM,SAAS,eAAe,IAAI;AAClC,cAAM,QAAQ,OAAO,KAAK,MAAM,CAAC;AACjC,eAAO,EAAE,QAAQ,KAAK,MAAM,GAAG,OAAO,KAAK;AAAA,MAC7C,CAAC;AACD,aAAO,IAAI,MAAM,MAAM,MAAS;AAChC,aAAO;AAAA,IACT;AAAA,EACF;AACF;",
+  "sourcesContent": ["import {\n  type Context,\n  type JsonValue,\n  type ReplicatedState,\n  replicatedState,\n} from '@earendil-works/chord';\nimport { BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport { defineDoc, type Harness, type JsonObject } from '@earendil-works/pi-durable';\nimport { boundedDeltas } from '../checkpoints.ts';\nimport {\n  changedGuests,\n  DEFAULT_GUEST_POLICY,\n  type GuestPolicy,\n  type GuestPolicyChange,\n} from '../guests/policy.ts';\nimport type { ApprovalKind } from './record.ts';\n\nexport type SudoPolicy = { approver: 'user' | 'agent' };\n\nexport type ApprovalPolicy = { guests: GuestPolicy; sudo: SudoPolicy };\n\nexport type ApprovalPolicyChange = { guests?: GuestPolicyChange; sudo?: Partial<SudoPolicy> };\n\nexport type ApprovalPolicySet =\n  | { policy: ApprovalPolicy; error: null }\n  | { policy: null; error: string };\n\nexport const DEFAULT_APPROVAL_POLICY: ApprovalPolicy = {\n  guests: DEFAULT_GUEST_POLICY,\n  sudo: { approver: 'user' },\n};\n\ntype Overrides = Partial<Record<keyof ApprovalPolicy, JsonObject>>;\n\nexport const ApprovalPolicyDoc = defineDoc<{ overrides: Overrides }>({\n  kind: 'slicc.approval-policy',\n  checkpointWhen: boundedDeltas,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ overrides: {} }),\n});\n\nconst copy = <T>(value: T): T => JSON.parse(JSON.stringify(value));\n\nfunction changedSudo(next: ApprovalPolicy, change: unknown): string | null {\n  if (!change || typeof change !== 'object' || Array.isArray(change))\n    return 'The sudo policy is an object of policy entries.';\n  for (const [name, value] of Object.entries(change)) {\n    if (name !== 'approver') return `There is no sudo policy entry ${name}.`;\n    if (value !== 'user' && value !== 'agent')\n      return 'A sudo request is approved by user or agent.';\n    next.sudo.approver = value;\n  }\n  return null;\n}\n\nexport function changedPolicy(base: ApprovalPolicy, change: unknown): ApprovalPolicySet {\n  if (!change || typeof change !== 'object' || Array.isArray(change))\n    return { policy: null, error: 'An approval policy change is an object of sections.' };\n  const next = copy(base);\n  for (const [name, value] of Object.entries(change)) {\n    const error =\n      name === 'guests'\n        ? changedGuests(next.guests, value)\n        : name === 'sudo'\n          ? changedSudo(next, value)\n          : `There is no approval policy section ${name}.`;\n    if (error) return { policy: null, error };\n  }\n  return { policy: next, error: null };\n}\n\nexport function resolvedPolicy(overrides: Overrides): ApprovalPolicy {\n  const guests = (overrides.guests ?? {}) as Partial<GuestPolicy>;\n  return copy({\n    guests: {\n      ...DEFAULT_GUEST_POLICY,\n      ...guests,\n      always: { ...DEFAULT_GUEST_POLICY.always, ...guests.always },\n    },\n    sudo: { ...DEFAULT_APPROVAL_POLICY.sudo, ...overrides.sudo },\n  });\n}\n\nexport function overridden(\n  overrides: Overrides,\n  change: Record<string, Record<string, unknown>>,\n  policy: ApprovalPolicy\n): Overrides {\n  const next = copy(overrides);\n  for (const [section, entries] of Object.entries(change)) {\n    const key = section as keyof ApprovalPolicy;\n    const into = next[key] ?? {};\n    const resolved = policy[key] as unknown as JsonObject;\n    for (const name of Object.keys(entries))\n      into[name] = (\n        name === 'always'\n          ? { ...(into.always as object), ...(entries.always as object) }\n          : resolved[name]\n      ) as JsonValue;\n    next[key] = into;\n  }\n  return next;\n}\n\nexport interface ApprovalPolicies {\n  readonly state: ReplicatedState<ApprovalPolicy>;\n  current(): ApprovalPolicy;\n  set(change: unknown, context: Context): Promise<ApprovalPolicySet>;\n}\n\nexport const alwaysFor =\n  (policy: Pick<ApprovalPolicies, 'current'>) =>\n  (kind: ApprovalKind): boolean => {\n    const { always } = policy.current().guests;\n    return kind === 'guest-tool' ? always.tools : always.messages;\n  };\n\nexport async function attachApprovalPolicy(\n  harness: Pick<Harness, 'commit'>,\n  context: Context = BACKGROUND_CONTEXT\n): Promise<ApprovalPolicies> {\n  let overrides = await harness.commit(\n    async (tx) => copy((await tx.doc(ApprovalPolicyDoc)).overrides ?? {}),\n    context\n  );\n  const state = replicatedState<ApprovalPolicy>(resolvedPolicy(overrides));\n  let line: Promise<unknown> = Promise.resolve();\n  return {\n    state,\n    current: () => copy(state.value as ApprovalPolicy),\n    set(change, using) {\n      const run = line.then(async () => {\n        const made = changedPolicy(state.value as ApprovalPolicy, change);\n        if (!made.policy) return made;\n        const next = overridden(\n          overrides,\n          change as Record<string, Record<string, unknown>>,\n          made.policy\n        );\n        await harness.commit(async (tx) => {\n          (await tx.doc(ApprovalPolicyDoc)).overrides = copy(next);\n        }, using);\n        overrides = next;\n        const policy = resolvedPolicy(next);\n        state.replace(using, copy(policy));\n        return { policy: copy(policy), error: null };\n      });\n      line = run.catch(() => undefined);\n      return run;\n    },\n  };\n}\n"],
+  "mappings": "AAAA;AAAA,EAIE;AAAA,OACK;AACP,SAAS,0BAA0B;AACnC,SAAS,iBAAgD;AACzD,SAAS,qBAAqB;AAC9B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AAaA,MAAM,0BAA0C;AAAA,EACrD,QAAQ;AAAA,EACR,MAAM,EAAE,UAAU,OAAO;AAC3B;AAIO,MAAM,oBAAoB,UAAoC;AAAA,EACnE,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,WAAW,CAAC,EAAE;AAClC,CAAC;AAED,MAAM,OAAO,CAAI,UAAgB,KAAK,MAAM,KAAK,UAAU,KAAK,CAAC;AAEjE,SAAS,YAAY,MAAsB,QAAgC;AACzE,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM;AAC/D,WAAO;AACT,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,QAAI,SAAS,WAAY,QAAO,iCAAiC,IAAI;AACrE,QAAI,UAAU,UAAU,UAAU;AAChC,aAAO;AACT,SAAK,KAAK,WAAW;AAAA,EACvB;AACA,SAAO;AACT;AAEO,SAAS,cAAc,MAAsB,QAAoC;AACtF,MAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM;AAC/D,WAAO,EAAE,QAAQ,MAAM,OAAO,sDAAsD;AACtF,QAAM,OAAO,KAAK,IAAI;AACtB,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AAClD,UAAM,QACJ,SAAS,WACL,cAAc,KAAK,QAAQ,KAAK,IAChC,SAAS,SACP,YAAY,MAAM,KAAK,IACvB,uCAAuC,IAAI;AACnD,QAAI,MAAO,QAAO,EAAE,QAAQ,MAAM,MAAM;AAAA,EAC1C;AACA,SAAO,EAAE,QAAQ,MAAM,OAAO,KAAK;AACrC;AAEO,SAAS,eAAe,WAAsC;AACnE,QAAM,SAAU,UAAU,UAAU,CAAC;AACrC,SAAO,KAAK;AAAA,IACV,QAAQ;AAAA,MACN,GAAG;AAAA,MACH,GAAG;AAAA,MACH,QAAQ,EAAE,GAAG,qBAAqB,QAAQ,GAAG,OAAO,OAAO;AAAA,IAC7D;AAAA,IACA,MAAM,EAAE,GAAG,wBAAwB,MAAM,GAAG,UAAU,KAAK;AAAA,EAC7D,CAAC;AACH;AAEO,SAAS,WACd,WACA,QACA,QACW;AACX,QAAM,OAAO,KAAK,SAAS;AAC3B,aAAW,CAAC,SAAS,OAAO,KAAK,OAAO,QAAQ,MAAM,GAAG;AACvD,UAAM,MAAM;AACZ,UAAM,OAAO,KAAK,GAAG,KAAK,CAAC;AAC3B,UAAM,WAAW,OAAO,GAAG;AAC3B,eAAW,QAAQ,OAAO,KAAK,OAAO;AACpC,WAAK,IAAI,IACP,SAAS,WACL,EAAE,GAAI,KAAK,QAAmB,GAAI,QAAQ,OAAkB,IAC5D,SAAS,IAAI;AAErB,SAAK,GAAG,IAAI;AAAA,EACd;AACA,SAAO;AACT;AAQO,MAAM,YACX,CAAC,WACD,CAAC,SAAgC;AAC/B,QAAM,EAAE,OAAO,IAAI,OAAO,QAAQ,EAAE;AACpC,SAAO,SAAS,eAAe,OAAO,QAAQ,OAAO;AACvD;AAEF,eAAsB,qBACpB,SACA,UAAmB,oBACQ;AAC3B,MAAI,YAAY,MAAM,QAAQ;AAAA,IAC5B,OAAO,OAAO,MAAM,MAAM,GAAG,IAAI,iBAAiB,GAAG,aAAa,CAAC,CAAC;AAAA,IACpE;AAAA,EACF;AACA,QAAM,QAAQ,gBAAgC,eAAe,SAAS,CAAC;AACvE,MAAI,OAAyB,QAAQ,QAAQ;AAC7C,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM,KAAK,MAAM,KAAuB;AAAA,IACjD,IAAI,QAAQ,OAAO;AACjB,YAAM,MAAM,KAAK,KAAK,YAAY;AAChC,cAAM,OAAO,cAAc,MAAM,OAAyB,MAAM;AAChE,YAAI,CAAC,KAAK,OAAQ,QAAO;AACzB,cAAM,OAAO;AAAA,UACX;AAAA,UACA;AAAA,UACA,KAAK;AAAA,QACP;AACA,cAAM,QAAQ,OAAO,OAAO,OAAO;AACjC,WAAC,MAAM,GAAG,IAAI,iBAAiB,GAAG,YAAY,KAAK,IAAI;AAAA,QACzD,GAAG,KAAK;AACR,oBAAY;AACZ,cAAM,SAAS,eAAe,IAAI;AAClC,cAAM,QAAQ,OAAO,KAAK,MAAM,CAAC;AACjC,eAAO,EAAE,QAAQ,KAAK,MAAM,GAAG,OAAO,KAAK;AAAA,MAC7C,CAAC;AACD,aAAO,IAAI,MAAM,MAAM,MAAS;AAChC,aAAO;AAAA,IACT;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/approvals/record.js

@@ -1,8 +1,8 @@
 import { defineDoc } from "@earendil-works/pi-durable";
-import { deltasOnly } from "../checkpoints.js";
+import { boundedDeltas } from "../checkpoints.js";
 const ApprovalsDoc = defineDoc({
   kind: "slicc.approvals",
-  checkpointWhen: deltasOnly,
+  checkpointWhen: boundedDeltas,
   version: 1,
   scope: "session",
   initial: () => ({ items: [] })

package/dist/approvals/record.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/approvals/record.ts"],
-  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\nimport { deltasOnly } from '../checkpoints.ts';\n\nexport type ApprovalKind = 'guest-message' | 'guest-tool' | 'sudo';\n\nexport type ApprovalState = 'pending' | 'approved' | 'rejected' | 'unanswered' | 'withdrawn';\n\nexport type ApprovalTier = 'user' | 'agent' | 'cone' | `scoop:${string}`;\n\nexport type ApprovalAnswer = 'once' | 'always' | 'deny';\n\nexport type DecidedBy = 'owner' | 'follower' | 'judge' | 'host' | `scoop:${string}`;\n\nexport type ApprovalRequester = {\n  kind: 'guest' | 'agent' | 'user';\n  name: string;\n  seat?: string;\n  agentId?: string;\n  where?: string;\n  device?: string;\n};\n\nexport type ApprovalVerdict = {\n  decision: 'allow' | 'deny' | 'unsure';\n  reason: string;\n  risk?: number;\n  aligned?: number;\n  model?: string;\n};\n\nexport type ApprovalAttachment = { name: string; mimeType: string; size: number };\n\nexport type GuestMessageDetail = { text: string; attachments: ApprovalAttachment[] };\n\nexport type GuestToolDetail = { tool: string; summary: string; arguments?: string; task?: number };\n\nexport type SudoDetail = {\n  command: string;\n  target?: string;\n  cwd?: string;\n  alwaysScope?: 'cwd';\n};\n\ntype Base = {\n  id: string;\n  seat?: string;\n  agentId: string;\n  requester: ApprovalRequester;\n  tier: string;\n  state: ApprovalState;\n  decidedBy: DecidedBy | null;\n  device?: string;\n  answer?: 'once' | 'always';\n  reviewer?: string;\n  reason?: string;\n  verdict?: ApprovalVerdict;\n  always: boolean;\n  createdAt: number;\n  expiresAt: number;\n  decidedAt?: number;\n};\n\nexport type GuestMessageApproval = Base & { kind: 'guest-message'; detail: GuestMessageDetail };\nexport type GuestToolApproval = Base & { kind: 'guest-tool'; detail: GuestToolDetail };\nexport type SudoApproval = Base & { kind: 'sudo'; detail: SudoDetail };\n\nexport type Approval = GuestMessageApproval | GuestToolApproval | SudoApproval;\n\ntype DraftOf<T extends Approval> = Pick<T, 'kind' | 'detail' | 'agentId' | 'requester'> & {\n  seat?: string;\n  tier: string;\n  always?: boolean;\n  expiresAt?: number;\n};\n\nexport type ApprovalDraft =\n  | DraftOf<GuestMessageApproval>\n  | DraftOf<GuestToolApproval>\n  | DraftOf<SudoApproval>;\n\nexport type ApprovalsState = { items: Approval[] };\n\nexport const ApprovalsDoc = defineDoc<ApprovalsState>({\n  kind: 'slicc.approvals',\n  checkpointWhen: deltasOnly,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ items: [] }),\n});\n\nexport const APPROVAL_MS = 300_000;\nexport const APPROVALS_KEPT = 100;\nexport const MAX_DELAY = 2_147_483_647;\nexport const REASON_LENGTH = 500;\n\nexport const REASONS = {\n  timeout: 'timeout',\n  unknownTier: 'unknown-tier',\n  unroutable: 'unroutable',\n  unknownAnswer: 'unknown-answer',\n  restart: 'restart',\n  revoked: 'revoked',\n  aborted: 'aborted',\n  disconnected: 'disconnected',\n  noScoop: 'no-scoop',\n  scoopStopped: 'scoop-stopped',\n  scoopAsked: 'scoop-asked',\n  scoopUndecided: 'scoop-undecided',\n} as const;\n\nexport const guestKind = (kind: ApprovalKind): boolean => kind !== 'sudo';\n\nexport const scoopTier = (tier: unknown): tier is `scoop:${string}` =>\n  typeof tier === 'string' && /^scoop:\\S+$/.test(tier);\n\nexport function knownTier(tier: unknown): tier is ApprovalTier {\n  if (tier === 'user' || tier === 'agent' || tier === 'cone') return true;\n  return scoopTier(tier);\n}\n\nexport function routable(kind: ApprovalKind, tier: ApprovalTier): boolean {\n  return !(kind === 'guest-tool' && tier === 'cone');\n}\n\nexport function answerOf(value: unknown): ApprovalAnswer | null {\n  return value === 'once' || value === 'always' || value === 'deny' ? value : null;\n}\n\nexport const personal = (by: DecidedBy): boolean => by === 'owner' || by === 'follower';\n\nexport function answerer(by: DecidedBy, item: Pick<Approval, 'tier' | 'reviewer'>): boolean {\n  if (personal(by)) return item.tier === 'user';\n  if (by === 'judge') return item.tier === 'agent';\n  if (scoopTier(by)) return scoopTier(item.tier) && item.reviewer === by;\n  return true;\n}\n\nexport type SudoApprover = 'user' | 'agent';\n\nexport const sudoApprover = (value: unknown): SudoApprover =>\n  value === 'agent' ? 'agent' : 'user';\n\nexport const tierOf = (kind: ApprovalKind, tier: string, sudo: SudoApprover): string =>\n  kind === 'sudo' ? sudo : tier;\n\nexport function gone(state: ApprovalState): string {\n  if (state === 'unanswered') return 'This request timed out.';\n  if (state === 'withdrawn') return 'This request was withdrawn.';\n  return 'Someone else already answered this.';\n}\n\nexport function cleanReason(reason: unknown): string | undefined {\n  if (typeof reason !== 'string') return undefined;\n  const text = reason.trim().slice(0, REASON_LENGTH);\n  return text || undefined;\n}\n\nconst decided = (item: Approval) => item.decidedAt ?? item.createdAt;\n\nexport function prune(items: Approval[], kept = APPROVALS_KEPT): Approval[] {\n  const settled = items.filter((item) => item.state !== 'pending');\n  settled.sort((a, b) => decided(a) - decided(b));\n  const drop = new Set(settled.slice(0, Math.max(0, settled.length - kept)));\n  return items.filter((item) => !drop.has(item));\n}\n\nexport type Settle = { state: Exclude<ApprovalState, 'pending'>; by: DecidedBy; reason?: string };\n\nexport type Ruling = { error?: string; settle?: Settle; answer?: 'once' | 'always' };\n\nconst why = (reason: string | undefined) => (reason ? { reason } : {});\n\nexport function ruled(\n  item: Approval,\n  answer: unknown,\n  reason: unknown,\n  by: DecidedBy,\n  at: number\n): Ruling {\n  if (item.state !== 'pending') return { error: gone(item.state) };\n  if (item.expiresAt <= at)\n    return {\n      error: gone('unanswered'),\n      settle: { state: 'unanswered', by: 'host', reason: REASONS.timeout },\n    };\n  if (!answerer(by, item)) return { error: \"This request isn't yours to answer.\" };\n  const known = answerOf(answer);\n  if (known === 'always' && scoopTier(by)) return { error: 'A scoop answers once or deny.' };\n  if (known === 'always' && !item.always)\n    return { error: \"Always isn't offered for this request.\" };\n  if (!known) return { settle: { state: 'rejected', by, reason: REASONS.unknownAnswer } };\n  const given = why(cleanReason(reason));\n  if (known === 'deny') return { settle: { state: 'rejected', by, ...given } };\n  return { settle: { state: 'approved', by, ...given }, answer: known };\n}\n"],
-  "mappings": "AAAA,SAAS,iBAAiB;AAC1B,SAAS,kBAAkB;AAiFpB,MAAM,eAAe,UAA0B;AAAA,EACpD,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAEM,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,YAAY;AAClB,MAAM,gBAAgB;AAEtB,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,EACT,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,cAAc;AAAA,EACd,SAAS;AAAA,EACT,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,gBAAgB;AAClB;AAEO,MAAM,YAAY,CAAC,SAAgC,SAAS;AAE5D,MAAM,YAAY,CAAC,SACxB,OAAO,SAAS,YAAY,cAAc,KAAK,IAAI;AAE9C,SAAS,UAAU,MAAqC;AAC7D,MAAI,SAAS,UAAU,SAAS,WAAW,SAAS,OAAQ,QAAO;AACnE,SAAO,UAAU,IAAI;AACvB;AAEO,SAAS,SAAS,MAAoB,MAA6B;AACxE,SAAO,EAAE,SAAS,gBAAgB,SAAS;AAC7C;AAEO,SAAS,SAAS,OAAuC;AAC9D,SAAO,UAAU,UAAU,UAAU,YAAY,UAAU,SAAS,QAAQ;AAC9E;AAEO,MAAM,WAAW,CAAC,OAA2B,OAAO,WAAW,OAAO;AAEtE,SAAS,SAAS,IAAe,MAAoD;AAC1F,MAAI,SAAS,EAAE,EAAG,QAAO,KAAK,SAAS;AACvC,MAAI,OAAO,QAAS,QAAO,KAAK,SAAS;AACzC,MAAI,UAAU,EAAE,EAAG,QAAO,UAAU,KAAK,IAAI,KAAK,KAAK,aAAa;AACpE,SAAO;AACT;AAIO,MAAM,eAAe,CAAC,UAC3B,UAAU,UAAU,UAAU;AAEzB,MAAM,SAAS,CAAC,MAAoB,MAAc,SACvD,SAAS,SAAS,OAAO;AAEpB,SAAS,KAAK,OAA8B;AACjD,MAAI,UAAU,aAAc,QAAO;AACnC,MAAI,UAAU,YAAa,QAAO;AAClC,SAAO;AACT;AAEO,SAAS,YAAY,QAAqC;AAC/D,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,OAAO,OAAO,KAAK,EAAE,MAAM,GAAG,aAAa;AACjD,SAAO,QAAQ;AACjB;AAEA,MAAM,UAAU,CAAC,SAAmB,KAAK,aAAa,KAAK;AAEpD,SAAS,MAAM,OAAmB,OAAO,gBAA4B;AAC1E,QAAM,UAAU,MAAM,OAAO,CAAC,SAAS,KAAK,UAAU,SAAS;AAC/D,UAAQ,KAAK,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;AAC9C,QAAM,OAAO,IAAI,IAAI,QAAQ,MAAM,GAAG,KAAK,IAAI,GAAG,QAAQ,SAAS,IAAI,CAAC,CAAC;AACzE,SAAO,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC;AAC/C;AAMA,MAAM,MAAM,CAAC,WAAgC,SAAS,EAAE,OAAO,IAAI,CAAC;AAE7D,SAAS,MACd,MACA,QACA,QACA,IACA,IACQ;AACR,MAAI,KAAK,UAAU,UAAW,QAAO,EAAE,OAAO,KAAK,KAAK,KAAK,EAAE;AAC/D,MAAI,KAAK,aAAa;AACpB,WAAO;AAAA,MACL,OAAO,KAAK,YAAY;AAAA,MACxB,QAAQ,EAAE,OAAO,cAAc,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAAA,IACrE;AACF,MAAI,CAAC,SAAS,IAAI,IAAI,EAAG,QAAO,EAAE,OAAO,sCAAsC;AAC/E,QAAM,QAAQ,SAAS,MAAM;AAC7B,MAAI,UAAU,YAAY,UAAU,EAAE,EAAG,QAAO,EAAE,OAAO,gCAAgC;AACzF,MAAI,UAAU,YAAY,CAAC,KAAK;AAC9B,WAAO,EAAE,OAAO,yCAAyC;AAC3D,MAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,QAAQ,QAAQ,cAAc,EAAE;AACtF,QAAM,QAAQ,IAAI,YAAY,MAAM,CAAC;AACrC,MAAI,UAAU,OAAQ,QAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,GAAG,MAAM,EAAE;AAC3E,SAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,GAAG,MAAM,GAAG,QAAQ,MAAM;AACtE;",
+  "sourcesContent": ["import { defineDoc } from '@earendil-works/pi-durable';\nimport { boundedDeltas } from '../checkpoints.ts';\n\nexport type ApprovalKind = 'guest-message' | 'guest-tool' | 'sudo';\n\nexport type ApprovalState = 'pending' | 'approved' | 'rejected' | 'unanswered' | 'withdrawn';\n\nexport type ApprovalTier = 'user' | 'agent' | 'cone' | `scoop:${string}`;\n\nexport type ApprovalAnswer = 'once' | 'always' | 'deny';\n\nexport type DecidedBy = 'owner' | 'follower' | 'judge' | 'host' | `scoop:${string}`;\n\nexport type ApprovalRequester = {\n  kind: 'guest' | 'agent' | 'user';\n  name: string;\n  seat?: string;\n  agentId?: string;\n  where?: string;\n  device?: string;\n};\n\nexport type ApprovalVerdict = {\n  decision: 'allow' | 'deny' | 'unsure';\n  reason: string;\n  risk?: number;\n  aligned?: number;\n  model?: string;\n};\n\nexport type ApprovalAttachment = { name: string; mimeType: string; size: number };\n\nexport type GuestMessageDetail = { text: string; attachments: ApprovalAttachment[] };\n\nexport type GuestToolDetail = { tool: string; summary: string; arguments?: string; task?: number };\n\nexport type SudoDetail = {\n  command: string;\n  target?: string;\n  cwd?: string;\n  alwaysScope?: 'cwd';\n};\n\ntype Base = {\n  id: string;\n  seat?: string;\n  agentId: string;\n  requester: ApprovalRequester;\n  tier: string;\n  state: ApprovalState;\n  decidedBy: DecidedBy | null;\n  device?: string;\n  answer?: 'once' | 'always';\n  reviewer?: string;\n  reason?: string;\n  verdict?: ApprovalVerdict;\n  always: boolean;\n  createdAt: number;\n  expiresAt: number;\n  decidedAt?: number;\n};\n\nexport type GuestMessageApproval = Base & { kind: 'guest-message'; detail: GuestMessageDetail };\nexport type GuestToolApproval = Base & { kind: 'guest-tool'; detail: GuestToolDetail };\nexport type SudoApproval = Base & { kind: 'sudo'; detail: SudoDetail };\n\nexport type Approval = GuestMessageApproval | GuestToolApproval | SudoApproval;\n\ntype DraftOf<T extends Approval> = Pick<T, 'kind' | 'detail' | 'agentId' | 'requester'> & {\n  seat?: string;\n  tier: string;\n  always?: boolean;\n  expiresAt?: number;\n};\n\nexport type ApprovalDraft =\n  | DraftOf<GuestMessageApproval>\n  | DraftOf<GuestToolApproval>\n  | DraftOf<SudoApproval>;\n\nexport type ApprovalsState = { items: Approval[] };\n\nexport const ApprovalsDoc = defineDoc<ApprovalsState>({\n  kind: 'slicc.approvals',\n  checkpointWhen: boundedDeltas,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ items: [] }),\n});\n\nexport const APPROVAL_MS = 300_000;\nexport const APPROVALS_KEPT = 100;\nexport const MAX_DELAY = 2_147_483_647;\nexport const REASON_LENGTH = 500;\n\nexport const REASONS = {\n  timeout: 'timeout',\n  unknownTier: 'unknown-tier',\n  unroutable: 'unroutable',\n  unknownAnswer: 'unknown-answer',\n  restart: 'restart',\n  revoked: 'revoked',\n  aborted: 'aborted',\n  disconnected: 'disconnected',\n  noScoop: 'no-scoop',\n  scoopStopped: 'scoop-stopped',\n  scoopAsked: 'scoop-asked',\n  scoopUndecided: 'scoop-undecided',\n} as const;\n\nexport const guestKind = (kind: ApprovalKind): boolean => kind !== 'sudo';\n\nexport const scoopTier = (tier: unknown): tier is `scoop:${string}` =>\n  typeof tier === 'string' && /^scoop:\\S+$/.test(tier);\n\nexport function knownTier(tier: unknown): tier is ApprovalTier {\n  if (tier === 'user' || tier === 'agent' || tier === 'cone') return true;\n  return scoopTier(tier);\n}\n\nexport function routable(kind: ApprovalKind, tier: ApprovalTier): boolean {\n  return !(kind === 'guest-tool' && tier === 'cone');\n}\n\nexport function answerOf(value: unknown): ApprovalAnswer | null {\n  return value === 'once' || value === 'always' || value === 'deny' ? value : null;\n}\n\nexport const personal = (by: DecidedBy): boolean => by === 'owner' || by === 'follower';\n\nexport function answerer(by: DecidedBy, item: Pick<Approval, 'tier' | 'reviewer'>): boolean {\n  if (personal(by)) return item.tier === 'user';\n  if (by === 'judge') return item.tier === 'agent';\n  if (scoopTier(by)) return scoopTier(item.tier) && item.reviewer === by;\n  return true;\n}\n\nexport type SudoApprover = 'user' | 'agent';\n\nexport const sudoApprover = (value: unknown): SudoApprover =>\n  value === 'agent' ? 'agent' : 'user';\n\nexport const tierOf = (kind: ApprovalKind, tier: string, sudo: SudoApprover): string =>\n  kind === 'sudo' ? sudo : tier;\n\nexport function gone(state: ApprovalState): string {\n  if (state === 'unanswered') return 'This request timed out.';\n  if (state === 'withdrawn') return 'This request was withdrawn.';\n  return 'Someone else already answered this.';\n}\n\nexport function cleanReason(reason: unknown): string | undefined {\n  if (typeof reason !== 'string') return undefined;\n  const text = reason.trim().slice(0, REASON_LENGTH);\n  return text || undefined;\n}\n\nconst decided = (item: Approval) => item.decidedAt ?? item.createdAt;\n\nexport function prune(items: Approval[], kept = APPROVALS_KEPT): Approval[] {\n  const settled = items.filter((item) => item.state !== 'pending');\n  settled.sort((a, b) => decided(a) - decided(b));\n  const drop = new Set(settled.slice(0, Math.max(0, settled.length - kept)));\n  return items.filter((item) => !drop.has(item));\n}\n\nexport type Settle = { state: Exclude<ApprovalState, 'pending'>; by: DecidedBy; reason?: string };\n\nexport type Ruling = { error?: string; settle?: Settle; answer?: 'once' | 'always' };\n\nconst why = (reason: string | undefined) => (reason ? { reason } : {});\n\nexport function ruled(\n  item: Approval,\n  answer: unknown,\n  reason: unknown,\n  by: DecidedBy,\n  at: number\n): Ruling {\n  if (item.state !== 'pending') return { error: gone(item.state) };\n  if (item.expiresAt <= at)\n    return {\n      error: gone('unanswered'),\n      settle: { state: 'unanswered', by: 'host', reason: REASONS.timeout },\n    };\n  if (!answerer(by, item)) return { error: \"This request isn't yours to answer.\" };\n  const known = answerOf(answer);\n  if (known === 'always' && scoopTier(by)) return { error: 'A scoop answers once or deny.' };\n  if (known === 'always' && !item.always)\n    return { error: \"Always isn't offered for this request.\" };\n  if (!known) return { settle: { state: 'rejected', by, reason: REASONS.unknownAnswer } };\n  const given = why(cleanReason(reason));\n  if (known === 'deny') return { settle: { state: 'rejected', by, ...given } };\n  return { settle: { state: 'approved', by, ...given }, answer: known };\n}\n"],
+  "mappings": "AAAA,SAAS,iBAAiB;AAC1B,SAAS,qBAAqB;AAiFvB,MAAM,eAAe,UAA0B;AAAA,EACpD,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAEM,MAAM,cAAc;AACpB,MAAM,iBAAiB;AACvB,MAAM,YAAY;AAClB,MAAM,gBAAgB;AAEtB,MAAM,UAAU;AAAA,EACrB,SAAS;AAAA,EACT,aAAa;AAAA,EACb,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,cAAc;AAAA,EACd,SAAS;AAAA,EACT,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,gBAAgB;AAClB;AAEO,MAAM,YAAY,CAAC,SAAgC,SAAS;AAE5D,MAAM,YAAY,CAAC,SACxB,OAAO,SAAS,YAAY,cAAc,KAAK,IAAI;AAE9C,SAAS,UAAU,MAAqC;AAC7D,MAAI,SAAS,UAAU,SAAS,WAAW,SAAS,OAAQ,QAAO;AACnE,SAAO,UAAU,IAAI;AACvB;AAEO,SAAS,SAAS,MAAoB,MAA6B;AACxE,SAAO,EAAE,SAAS,gBAAgB,SAAS;AAC7C;AAEO,SAAS,SAAS,OAAuC;AAC9D,SAAO,UAAU,UAAU,UAAU,YAAY,UAAU,SAAS,QAAQ;AAC9E;AAEO,MAAM,WAAW,CAAC,OAA2B,OAAO,WAAW,OAAO;AAEtE,SAAS,SAAS,IAAe,MAAoD;AAC1F,MAAI,SAAS,EAAE,EAAG,QAAO,KAAK,SAAS;AACvC,MAAI,OAAO,QAAS,QAAO,KAAK,SAAS;AACzC,MAAI,UAAU,EAAE,EAAG,QAAO,UAAU,KAAK,IAAI,KAAK,KAAK,aAAa;AACpE,SAAO;AACT;AAIO,MAAM,eAAe,CAAC,UAC3B,UAAU,UAAU,UAAU;AAEzB,MAAM,SAAS,CAAC,MAAoB,MAAc,SACvD,SAAS,SAAS,OAAO;AAEpB,SAAS,KAAK,OAA8B;AACjD,MAAI,UAAU,aAAc,QAAO;AACnC,MAAI,UAAU,YAAa,QAAO;AAClC,SAAO;AACT;AAEO,SAAS,YAAY,QAAqC;AAC/D,MAAI,OAAO,WAAW,SAAU,QAAO;AACvC,QAAM,OAAO,OAAO,KAAK,EAAE,MAAM,GAAG,aAAa;AACjD,SAAO,QAAQ;AACjB;AAEA,MAAM,UAAU,CAAC,SAAmB,KAAK,aAAa,KAAK;AAEpD,SAAS,MAAM,OAAmB,OAAO,gBAA4B;AAC1E,QAAM,UAAU,MAAM,OAAO,CAAC,SAAS,KAAK,UAAU,SAAS;AAC/D,UAAQ,KAAK,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,QAAQ,CAAC,CAAC;AAC9C,QAAM,OAAO,IAAI,IAAI,QAAQ,MAAM,GAAG,KAAK,IAAI,GAAG,QAAQ,SAAS,IAAI,CAAC,CAAC;AACzE,SAAO,MAAM,OAAO,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC;AAC/C;AAMA,MAAM,MAAM,CAAC,WAAgC,SAAS,EAAE,OAAO,IAAI,CAAC;AAE7D,SAAS,MACd,MACA,QACA,QACA,IACA,IACQ;AACR,MAAI,KAAK,UAAU,UAAW,QAAO,EAAE,OAAO,KAAK,KAAK,KAAK,EAAE;AAC/D,MAAI,KAAK,aAAa;AACpB,WAAO;AAAA,MACL,OAAO,KAAK,YAAY;AAAA,MACxB,QAAQ,EAAE,OAAO,cAAc,IAAI,QAAQ,QAAQ,QAAQ,QAAQ;AAAA,IACrE;AACF,MAAI,CAAC,SAAS,IAAI,IAAI,EAAG,QAAO,EAAE,OAAO,sCAAsC;AAC/E,QAAM,QAAQ,SAAS,MAAM;AAC7B,MAAI,UAAU,YAAY,UAAU,EAAE,EAAG,QAAO,EAAE,OAAO,gCAAgC;AACzF,MAAI,UAAU,YAAY,CAAC,KAAK;AAC9B,WAAO,EAAE,OAAO,yCAAyC;AAC3D,MAAI,CAAC,MAAO,QAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,QAAQ,QAAQ,cAAc,EAAE;AACtF,QAAM,QAAQ,IAAI,YAAY,MAAM,CAAC;AACrC,MAAI,UAAU,OAAQ,QAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,GAAG,MAAM,EAAE;AAC3E,SAAO,EAAE,QAAQ,EAAE,OAAO,YAAY,IAAI,GAAG,MAAM,GAAG,QAAQ,MAAM;AACtE;",
   "names": []
 }

package/dist/checkpoints.js

@@ -1,5 +1,9 @@
+const BASE_EVERY = 64;
 const deltasOnly = () => false;
+const boundedDeltas = (_value, _ops, info) => info.deltasSinceBase >= BASE_EVERY;
 export {
+  BASE_EVERY,
+  boundedDeltas,
   deltasOnly
 };
 //# sourceMappingURL=checkpoints.js.map

package/dist/checkpoints.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/checkpoints.ts"],
-  "sourcesContent": ["export const deltasOnly = (): boolean => false;\n"],
-  "mappings": "AAAO,MAAM,aAAa,MAAe;",
+  "sourcesContent": ["import type { CheckpointInfo } from '@earendil-works/pi-durable';\n\nexport const BASE_EVERY = 64;\n\nexport const deltasOnly = (): boolean => false;\n\nexport const boundedDeltas = (_value: unknown, _ops: unknown, info: CheckpointInfo): boolean =>\n  info.deltasSinceBase >= BASE_EVERY;\n"],
+  "mappings": "AAEO,MAAM,aAAa;AAEnB,MAAM,aAAa,MAAe;AAElC,MAAM,gBAAgB,CAAC,QAAiB,MAAe,SAC5D,KAAK,mBAAmB;",
   "names": []
 }

package/dist/codemode/index.js

@@ -11,7 +11,7 @@ import {
   defineExtension,
   defineTool
 } from "@earendil-works/pi-durable";
-import { deltasOnly } from "../checkpoints.js";
+import { boundedDeltas } from "../checkpoints.js";
 import { scrubItems } from "../secrets/scrub.js";
 const CODEMODE = "codemode";
 const DEFAULT_MAX_OUTPUT_TOKENS = 1e4;
@@ -19,7 +19,7 @@ const MEMORY_LIMIT_BYTES = 256 * 1024 * 1024;
 const CHARS_PER_TOKEN = 4;
 const CodemodeDoc = defineDoc({
   kind: "slicc.codemode",
-  checkpointWhen: deltasOnly,
+  checkpointWhen: boundedDeltas,
   version: 1,
   scope: "conversation",
   history: "rewindable",

package/dist/codemode/index.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/codemode/index.ts"],
-  "sourcesContent": ["import type { Context, JsonValue } from '@earendil-works/chord';\nimport { withAbortSignal } from '@earendil-works/chord/context';\nimport { Type } from '@earendil-works/pi-ai';\nimport {\n  type CodemodeError,\n  type CodemodeJsonSchema,\n  type CodemodeOutputItem,\n  type CodemodeResult,\n  type CodemodeRun,\n  type CodemodeRunOptions,\n  CodemodeSandbox,\n  type CodemodeSandboxOptions,\n  type CodemodeTool,\n  loadQuickJSWasm,\n  parseCodemodeSource,\n  renderDeclarations,\n} from '@earendil-works/pi-codemode';\nimport {\n  type Agent,\n  defineDoc,\n  defineExtension,\n  defineTool,\n  type Extension,\n  type JsonObject,\n  type NestedToolExecutionResult,\n  type ToolExecutionApi,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { deltasOnly } from '../checkpoints.ts';\nimport { scrubItems } from '../secrets/scrub.ts';\n\nexport const CODEMODE = 'codemode';\nexport const DEFAULT_MAX_OUTPUT_TOKENS = 10_000;\nexport const MEMORY_LIMIT_BYTES = 256 * 1024 * 1024;\nconst CHARS_PER_TOKEN = 4;\n\nexport const CodemodeDoc = defineDoc<{ store: Record<string, JsonValue> }>({\n  kind: 'slicc.codemode',\n  checkpointWhen: deltasOnly,\n  version: 1,\n  scope: 'conversation',\n  history: 'rewindable',\n  fork: 'asOf',\n  initial: () => ({ store: {} }),\n});\n\nexport interface Sandbox {\n  execute(\n    code: string,\n    options: { signal?: AbortSignal; store?: Record<string, unknown> }\n  ): Promise<CodemodeResult>;\n  start(code: string, options: CodemodeRunOptions): CodemodeRun;\n  close(): Promise<void>;\n}\n\nexport type SandboxFactory = (options: CodemodeSandboxOptions) => Sandbox;\n\nexport interface CodemodeExtra {\n  tools: CodemodeTool[];\n  globals: CodemodeTool[];\n}\n\nexport interface CodemodeOptions {\n  sandbox: SandboxFactory;\n  declared: readonly ToolRegistration[];\n  extra?: (api: ToolExecutionApi, agent: Agent, context: Context) => Promise<CodemodeExtra>;\n}\n\nconst INTRO = `Run JavaScript that calls other tools. The input is raw JavaScript (not JSON, no code fence), run as an async function body in a QuickJS sandbox: top-level \\`await\\` and \\`return\\` work. No Node, file system, network, or timers.\n- \\`await tools.<name>({ ...args })\\` resolves to a string, or an object if the tool's declaration says so, and rejects with an Error on failure. Calls still running when the script ends are cancelled.\n- Optional first line: \\`// @options: {\"max_output_tokens\": 10000, \"timeout_ms\": 60000}\\``;\n\nconst GLOBALS = [\n  'Globals:',\n  '- `text(value)`, `image(dataUrlOrImageBlock)`, `console.log(...)`, and top-level `return` add output; `exit()` ends the script. With several text items, each starts with a `==> text N/M <==` line, and `console` lines follow the other output in one `<console_output>` block.',\n  '- `store(key, value)` and `load(key)` keep JSON values across codemode calls in this conversation.',\n  '- `ALL_TOOLS` lists every tool scripts can call.',\n].join('\\n');\n\nconst DISCOVERY =\n  '- `await searchTools(query, { limit?, namespace? })`, `await describeTool(name)`, `await describeNamespace(name)`: find unlisted tools, such as MCP tools.';\n\nconst BASH_OUTPUT: CodemodeJsonSchema = {\n  type: 'object',\n  properties: {\n    output: { type: 'string' },\n    exit_code: { type: 'number' },\n    truncated: { type: 'boolean' },\n    full_output_path: { type: 'string' },\n  },\n  required: ['output', 'exit_code'],\n};\n\nfunction scriptTool(tool: ToolRegistration): Omit<CodemodeTool, 'execute'> {\n  return {\n    name: tool.name,\n    description: tool.description,\n    inputSchema: tool.parameters as CodemodeJsonSchema,\n    ...(tool.name === 'bash' ? { outputSchema: BASH_OUTPUT } : {}),\n  };\n}\n\nexport function codemodeDescription(\n  declared: readonly ToolRegistration[],\n  discovery = false\n): string {\n  const tools = declared\n    .filter((tool) => tool.name !== CODEMODE)\n    .map((tool) => ({ ...scriptTool(tool), execute: () => undefined }));\n  const sections = [INTRO, discovery ? `${GLOBALS}\\n${DISCOVERY}` : GLOBALS];\n  if (tools.length) sections.push(`Nested tools:\\n${renderDeclarations({ tools })}`);\n  return sections.join('\\n\\n');\n}\n\nfunction textOf(value: unknown): string {\n  if (typeof value === 'string') return value;\n  if (!Array.isArray(value)) return '';\n  return value\n    .filter((part) => part?.type === 'text')\n    .map((part) => part.text)\n    .join('\\n');\n}\n\nfunction errorOf(result: NestedToolExecutionResult): string {\n  const errors = result.diagnostics\n    .filter((diagnostic) => diagnostic.severity === 'error')\n    .map((diagnostic) => diagnostic.message);\n  return [textOf(result.structuredOutput), ...errors].filter(Boolean).join('\\n');\n}\n\ninterface ShellOutput {\n  output: string;\n  exitCode: number;\n  truncated?: boolean;\n  fullOutputPath?: string;\n}\n\nfunction shellOutput(value: unknown): ShellOutput | undefined {\n  const shell = value as Partial<ShellOutput> | undefined;\n  return typeof shell?.output === 'string' && typeof shell.exitCode === 'number'\n    ? (shell as ShellOutput)\n    : undefined;\n}\n\nexport async function callNested(\n  name: string,\n  args: unknown,\n  api: ToolExecutionApi,\n  context: Context\n): Promise<unknown> {\n  const result = await api.executeTool(name, (args ?? {}) as JsonObject, context);\n  const shell = name === 'bash' ? shellOutput(result.structuredOutput) : undefined;\n  if (shell)\n    return {\n      output: shell.output,\n      exit_code: shell.exitCode,\n      ...(shell.truncated ? { truncated: true } : {}),\n      ...(shell.fullOutputPath ? { full_output_path: shell.fullOutputPath } : {}),\n    };\n  if (result.isError) throw new Error(errorOf(result) || `Tool \"${name}\" failed`);\n  return textOf(result.structuredOutput);\n}\n\nfunction valueText(value: unknown): string {\n  return typeof value === 'string' ? value : (JSON.stringify(value) ?? String(value));\n}\n\nexport function formatOutput(output: readonly CodemodeOutputItem[]): CodemodeOutputItem[] {\n  const total = output.filter((item) => item.type === 'text' && !item.console).length;\n  const items: CodemodeOutputItem[] = [];\n  const lines: string[] = [];\n  let index = 0;\n  for (const item of output) {\n    if (item.type === 'image') items.push(item);\n    else if (item.console) lines.push(item.text);\n    else {\n      index++;\n      items.push({\n        type: 'text',\n        text: total > 1 ? `==> text ${index}/${total} <==\\n${item.text}` : item.text,\n      });\n    }\n  }\n  if (lines.length)\n    items.push({ type: 'text', text: `<console_output>\\n${lines.join('\\n')}\\n</console_output>` });\n  return items;\n}\n\nexport function joinText(items: readonly CodemodeOutputItem[]): CodemodeOutputItem[] {\n  const joined: CodemodeOutputItem[] = [];\n  for (const item of items) {\n    const last = joined.at(-1);\n    if (item.type === 'text' && last?.type === 'text') {\n      const separator = last.text === '' || last.text.endsWith('\\n') ? '' : '\\n';\n      joined[joined.length - 1] = { type: 'text', text: `${last.text}${separator}${item.text}` };\n    } else joined.push(item);\n  }\n  return joined;\n}\n\nexport function formatError(error: CodemodeError, calls: CodemodeResult['calls']): string {\n  const heads: Record<string, string> = {\n    timeout: `Script timed out: ${error.message}`,\n    aborted: `Script aborted: ${error.message}`,\n    sandbox: `Script sandbox failed: ${error.message}`,\n  };\n  const head =\n    error.kind === 'script'\n      ? (error.stack ?? `${error.name ?? 'Error'}: ${error.message}`)\n      : heads[error.kind];\n  const summary = calls.length\n    ? `Tool calls made before the failure (they are not undone): ${calls.map((call) => `${call.name} (${call.status})`).join(', ')}`\n    : 'No tool calls were made.';\n  return `${head}\\n\\n${summary}`;\n}\n\nexport function truncate(\n  items: readonly CodemodeOutputItem[],\n  maxTokens: number\n): { items: CodemodeOutputItem[]; full: string | null } {\n  const text = items\n    .filter((item) => item.type === 'text')\n    .map((item) => item.text)\n    .join('\\n');\n  const limit = maxTokens * CHARS_PER_TOKEN;\n  if (text.length <= limit) return { items: [...items], full: null };\n  const half = Math.floor(limit / 2);\n  const kept = `${text.slice(0, half)}\\n\\n[\u2026 ${text.length - 2 * half} characters omitted \u2026]\\n\\n${text.slice(-half)}`;\n  return {\n    items: [{ type: 'text', text: kept }, ...items.filter((item) => item.type === 'image')],\n    full: text,\n  };\n}\n\nasync function spill(api: ToolExecutionApi, text: string, context: Context): Promise<string> {\n  const path = `/tmp/slicc-codemode-${api.callId.replace(/[^\\w-]/g, '_')}.txt`;\n  const written = await api.env?.writeFile(path, text, context);\n  return written?.ok ? path : '';\n}\n\nasync function saveStore(\n  api: ToolExecutionApi,\n  result: CodemodeResult,\n  context: Context\n): Promise<void> {\n  if (!result.ok) return;\n  const { set, delete: removed } = result.storeWrites;\n  if (!Object.keys(set).length && !removed.length) return;\n  await api.commit(async (tx) => {\n    const doc = await tx.doc(CodemodeDoc, api.conversationId);\n    for (const key of removed) delete doc.store[key];\n    Object.assign(doc.store, set);\n  }, context);\n}\n\nexport function codemodeTool(options: CodemodeOptions): ToolRegistration {\n  return defineTool({\n    name: CODEMODE,\n    description: codemodeDescription(options.declared, options.extra !== undefined),\n    parameters: Type.Object({ code: Type.String({ description: 'Raw JavaScript source.' }) }),\n    replay: 'unsafe',\n    callers: ['model'],\n    async execute({ code }, api, context) {\n      const started = performance.now();\n      const parsed = parseCodemodeSource(code);\n      const agent = await api.agent(context);\n      const callable = agent.tools.filter((tool) => tool.name !== CODEMODE);\n      const tools: CodemodeTool[] = callable.map((tool) => ({\n        ...scriptTool(tool),\n        execute: (args, { signal }) =>\n          callNested(tool.name, args, api, withAbortSignal(signal, context)),\n      }));\n      const extra = options.extra\n        ? await options.extra(api, agent, context)\n        : { tools: [], globals: [] };\n      const replaced = new Set(extra.tools.map((tool) => tool.name));\n      const scripted = [...tools.filter((tool) => !replaced.has(tool.name)), ...extra.tools];\n      const saved = await api.snapshot(CodemodeDoc, api.conversationId, context);\n      const sandbox = options.sandbox({\n        tools: scripted,\n        ...(extra.globals.length ? { globals: extra.globals } : {}),\n        timeoutMs: parsed.options.timeoutMs ?? Number.POSITIVE_INFINITY,\n        memoryLimitBytes: MEMORY_LIMIT_BYTES,\n      });\n      let result: CodemodeResult;\n      try {\n        result = await sandbox.execute(parsed.code, {\n          signal: context.abortSignal as AbortSignal,\n          store: { ...saved?.store },\n        });\n      } finally {\n        await sandbox.close();\n      }\n      await saveStore(api, result, context);\n      const output = [...result.output];\n      if (result.ok && result.value !== undefined)\n        output.push({ type: 'text', text: valueText(result.value) });\n      const items = formatOutput(output);\n      if (!result.ok)\n        items.push({\n          type: 'text',\n          text: `Script error:\\n${formatError(result.error, result.calls)}`,\n        });\n      const cut = truncate(\n        await scrubItems(joinText(items)),\n        parsed.options.maxOutputTokens ?? DEFAULT_MAX_OUTPUT_TOKENS\n      );\n      const path = cut.full === null ? '' : await spill(api, cut.full, context);\n      const note = path ? [{ type: 'text' as const, text: `Full output: ${path}` }] : [];\n      const seconds = ((performance.now() - started) / 1000).toFixed(1);\n      const header = `${result.ok ? 'Script completed' : 'Script failed'}\\nWall time ${seconds} seconds\\nOutput:\\n`;\n      return {\n        output: [{ type: 'text', text: header }, ...joinText([...cut.items, ...note])],\n        ...(result.ok ? {} : { isError: true }),\n      };\n    },\n  }) as ToolRegistration;\n}\n\nexport function codemodeExtension(tools: readonly ToolRegistration[]): Extension {\n  return defineExtension({ name: 'slicc-codemode', tools });\n}\n\nexport function disabledBySettings(text: string | undefined): boolean {\n  if (!text) return false;\n  try {\n    const settings = JSON.parse(text) as { defaultTools?: unknown };\n    return Array.isArray(settings.defaultTools) && settings.defaultTools.includes(`-${CODEMODE}`);\n  } catch {\n    return false;\n  }\n}\n\nexport type Fetcher = (url: string) => Promise<Response>;\n\nexport function wasmCandidates(from: URL): string[] {\n  const out: string[] = [];\n  let dir = new URL('.', from);\n  for (;;) {\n    out.push(new URL('node_modules/quickjs-wasi/quickjs.wasm', dir).href);\n    if (dir.pathname === '/') return out;\n    dir = new URL('..', dir);\n  }\n}\n\nexport async function locateWasm(\n  fetcher: Fetcher,\n  from: URL\n): Promise<WebAssembly.Module | undefined> {\n  for (const url of wasmCandidates(from)) {\n    const response = await fetcher(url).catch(() => undefined);\n    if (response?.ok) return WebAssembly.compile(await response.arrayBuffer());\n  }\n  return undefined;\n}\n\nlet shared: SandboxFactory | undefined;\n\nexport function sharedSandbox(): SandboxFactory | undefined {\n  return shared;\n}\n\nexport function sandboxFactory(\n  wasm: () => Promise<WebAssembly.Module | undefined>,\n  workerUrl?: string | URL\n): SandboxFactory {\n  let found: Promise<WebAssembly.Module | undefined> | undefined;\n  const factory: SandboxFactory = (options) => {\n    found ??= wasm().catch(() => undefined);\n    return new CodemodeSandbox({\n      ...options,\n      ...(workerUrl ? { workerUrl } : {}),\n      wasm: found.then((module) => module ?? loadQuickJSWasm()),\n    });\n  };\n  shared = factory;\n  return factory;\n}\n"],
-  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,YAAY;AACrB;AAAA,EAOE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,kBAAkB;AAC3B,SAAS,kBAAkB;AAEpB,MAAM,WAAW;AACjB,MAAM,4BAA4B;AAClC,MAAM,qBAAqB,MAAM,OAAO;AAC/C,MAAM,kBAAkB;AAEjB,MAAM,cAAc,UAAgD;AAAA,EACzE,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAwBD,MAAM,QAAQ;AAAA;AAAA;AAId,MAAM,UAAU;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAEX,MAAM,YACJ;AAEF,MAAM,cAAkC;AAAA,EACtC,MAAM;AAAA,EACN,YAAY;AAAA,IACV,QAAQ,EAAE,MAAM,SAAS;AAAA,IACzB,WAAW,EAAE,MAAM,SAAS;AAAA,IAC5B,WAAW,EAAE,MAAM,UAAU;AAAA,IAC7B,kBAAkB,EAAE,MAAM,SAAS;AAAA,EACrC;AAAA,EACA,UAAU,CAAC,UAAU,WAAW;AAClC;AAEA,SAAS,WAAW,MAAuD;AACzE,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,GAAI,KAAK,SAAS,SAAS,EAAE,cAAc,YAAY,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,SAAS,oBACd,UACA,YAAY,OACJ;AACR,QAAM,QAAQ,SACX,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ,EACvC,IAAI,CAAC,UAAU,EAAE,GAAG,WAAW,IAAI,GAAG,SAAS,MAAM,OAAU,EAAE;AACpE,QAAM,WAAW,CAAC,OAAO,YAAY,GAAG,OAAO;AAAA,EAAK,SAAS,KAAK,OAAO;AACzE,MAAI,MAAM,OAAQ,UAAS,KAAK;AAAA,EAAkB,mBAAmB,EAAE,MAAM,CAAC,CAAC,EAAE;AACjF,SAAO,SAAS,KAAK,MAAM;AAC7B;AAEA,SAAS,OAAO,OAAwB;AACtC,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,SAAO,MACJ,OAAO,CAAC,SAAS,MAAM,SAAS,MAAM,EACtC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACd;AAEA,SAAS,QAAQ,QAA2C;AAC1D,QAAM,SAAS,OAAO,YACnB,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO,EACtD,IAAI,CAAC,eAAe,WAAW,OAAO;AACzC,SAAO,CAAC,OAAO,OAAO,gBAAgB,GAAG,GAAG,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC/E;AASA,SAAS,YAAY,OAAyC;AAC5D,QAAM,QAAQ;AACd,SAAO,OAAO,OAAO,WAAW,YAAY,OAAO,MAAM,aAAa,WACjE,QACD;AACN;AAEA,eAAsB,WACpB,MACA,MACA,KACA,SACkB;AAClB,QAAM,SAAS,MAAM,IAAI,YAAY,MAAO,QAAQ,CAAC,GAAkB,OAAO;AAC9E,QAAM,QAAQ,SAAS,SAAS,YAAY,OAAO,gBAAgB,IAAI;AACvE,MAAI;AACF,WAAO;AAAA,MACL,QAAQ,MAAM;AAAA,MACd,WAAW,MAAM;AAAA,MACjB,GAAI,MAAM,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,MAC7C,GAAI,MAAM,iBAAiB,EAAE,kBAAkB,MAAM,eAAe,IAAI,CAAC;AAAA,IAC3E;AACF,MAAI,OAAO,QAAS,OAAM,IAAI,MAAM,QAAQ,MAAM,KAAK,SAAS,IAAI,UAAU;AAC9E,SAAO,OAAO,OAAO,gBAAgB;AACvC;AAEA,SAAS,UAAU,OAAwB;AACzC,SAAO,OAAO,UAAU,WAAW,QAAS,KAAK,UAAU,KAAK,KAAK,OAAO,KAAK;AACnF;AAEO,SAAS,aAAa,QAA6D;AACxF,QAAM,QAAQ,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,UAAU,CAAC,KAAK,OAAO,EAAE;AAC7E,QAAM,QAA8B,CAAC;AACrC,QAAM,QAAkB,CAAC;AACzB,MAAI,QAAQ;AACZ,aAAW,QAAQ,QAAQ;AACzB,QAAI,KAAK,SAAS,QAAS,OAAM,KAAK,IAAI;AAAA,aACjC,KAAK,QAAS,OAAM,KAAK,KAAK,IAAI;AAAA,SACtC;AACH;AACA,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,MAAM,QAAQ,IAAI,YAAY,KAAK,IAAI,KAAK;AAAA,EAAS,KAAK,IAAI,KAAK,KAAK;AAAA,MAC1E,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,MAAM;AACR,UAAM,KAAK,EAAE,MAAM,QAAQ,MAAM;AAAA,EAAqB,MAAM,KAAK,IAAI,CAAC;AAAA,mBAAsB,CAAC;AAC/F,SAAO;AACT;AAEO,SAAS,SAAS,OAA4D;AACnF,QAAM,SAA+B,CAAC;AACtC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,OAAO,GAAG,EAAE;AACzB,QAAI,KAAK,SAAS,UAAU,MAAM,SAAS,QAAQ;AACjD,YAAM,YAAY,KAAK,SAAS,MAAM,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK;AACtE,aAAO,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,QAAQ,MAAM,GAAG,KAAK,IAAI,GAAG,SAAS,GAAG,KAAK,IAAI,GAAG;AAAA,IAC3F,MAAO,QAAO,KAAK,IAAI;AAAA,EACzB;AACA,SAAO;AACT;AAEO,SAAS,YAAY,OAAsB,OAAwC;AACxF,QAAM,QAAgC;AAAA,IACpC,SAAS,qBAAqB,MAAM,OAAO;AAAA,IAC3C,SAAS,mBAAmB,MAAM,OAAO;AAAA,IACzC,SAAS,0BAA0B,MAAM,OAAO;AAAA,EAClD;AACA,QAAM,OACJ,MAAM,SAAS,WACV,MAAM,SAAS,GAAG,MAAM,QAAQ,OAAO,KAAK,MAAM,OAAO,KAC1D,MAAM,MAAM,IAAI;AACtB,QAAM,UAAU,MAAM,SAClB,6DAA6D,MAAM,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC,KAC5H;AACJ,SAAO,GAAG,IAAI;AAAA;AAAA,EAAO,OAAO;AAC9B;AAEO,SAAS,SACd,OACA,WACsD;AACtD,QAAM,OAAO,MACV,OAAO,CAAC,SAAS,KAAK,SAAS,MAAM,EACrC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACZ,QAAM,QAAQ,YAAY;AAC1B,MAAI,KAAK,UAAU,MAAO,QAAO,EAAE,OAAO,CAAC,GAAG,KAAK,GAAG,MAAM,KAAK;AACjE,QAAM,OAAO,KAAK,MAAM,QAAQ,CAAC;AACjC,QAAM,OAAO,GAAG,KAAK,MAAM,GAAG,IAAI,CAAC;AAAA;AAAA,UAAU,KAAK,SAAS,IAAI,IAAI;AAAA;AAAA,EAA6B,KAAK,MAAM,CAAC,IAAI,CAAC;AACjH,SAAO;AAAA,IACL,OAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,OAAO,CAAC;AAAA,IACtF,MAAM;AAAA,EACR;AACF;AAEA,eAAe,MAAM,KAAuB,MAAc,SAAmC;AAC3F,QAAM,OAAO,uBAAuB,IAAI,OAAO,QAAQ,WAAW,GAAG,CAAC;AACtE,QAAM,UAAU,MAAM,IAAI,KAAK,UAAU,MAAM,MAAM,OAAO;AAC5D,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEA,eAAe,UACb,KACA,QACA,SACe;AACf,MAAI,CAAC,OAAO,GAAI;AAChB,QAAM,EAAE,KAAK,QAAQ,QAAQ,IAAI,OAAO;AACxC,MAAI,CAAC,OAAO,KAAK,GAAG,EAAE,UAAU,CAAC,QAAQ,OAAQ;AACjD,QAAM,IAAI,OAAO,OAAO,OAAO;AAC7B,UAAM,MAAM,MAAM,GAAG,IAAI,aAAa,IAAI,cAAc;AACxD,eAAW,OAAO,QAAS,QAAO,IAAI,MAAM,GAAG;AAC/C,WAAO,OAAO,IAAI,OAAO,GAAG;AAAA,EAC9B,GAAG,OAAO;AACZ;AAEO,SAAS,aAAa,SAA4C;AACvE,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa,oBAAoB,QAAQ,UAAU,QAAQ,UAAU,MAAS;AAAA,IAC9E,YAAY,KAAK,OAAO,EAAE,MAAM,KAAK,OAAO,EAAE,aAAa,yBAAyB,CAAC,EAAE,CAAC;AAAA,IACxF,QAAQ;AAAA,IACR,SAAS,CAAC,OAAO;AAAA,IACjB,MAAM,QAAQ,EAAE,KAAK,GAAG,KAAK,SAAS;AACpC,YAAM,UAAU,YAAY,IAAI;AAChC,YAAM,SAAS,oBAAoB,IAAI;AACvC,YAAM,QAAQ,MAAM,IAAI,MAAM,OAAO;AACrC,YAAM,WAAW,MAAM,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ;AACpE,YAAM,QAAwB,SAAS,IAAI,CAAC,UAAU;AAAA,QACpD,GAAG,WAAW,IAAI;AAAA,QAClB,SAAS,CAAC,MAAM,EAAE,OAAO,MACvB,WAAW,KAAK,MAAM,MAAM,KAAK,gBAAgB,QAAQ,OAAO,CAAC;AAAA,MACrE,EAAE;AACF,YAAM,QAAQ,QAAQ,QAClB,MAAM,QAAQ,MAAM,KAAK,OAAO,OAAO,IACvC,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,EAAE;AAC7B,YAAM,WAAW,IAAI,IAAI,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;AAC7D,YAAM,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,IAAI,CAAC,GAAG,GAAG,MAAM,KAAK;AACrF,YAAM,QAAQ,MAAM,IAAI,SAAS,aAAa,IAAI,gBAAgB,OAAO;AACzE,YAAM,UAAU,QAAQ,QAAQ;AAAA,QAC9B,OAAO;AAAA,QACP,GAAI,MAAM,QAAQ,SAAS,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,QACzD,WAAW,OAAO,QAAQ,aAAa,OAAO;AAAA,QAC9C,kBAAkB;AAAA,MACpB,CAAC;AACD,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,QAAQ,QAAQ,OAAO,MAAM;AAAA,UAC1C,QAAQ,QAAQ;AAAA,UAChB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,QAC3B,CAAC;AAAA,MACH,UAAE;AACA,cAAM,QAAQ,MAAM;AAAA,MACtB;AACA,YAAM,UAAU,KAAK,QAAQ,OAAO;AACpC,YAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAChC,UAAI,OAAO,MAAM,OAAO,UAAU;AAChC,eAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAC7D,YAAM,QAAQ,aAAa,MAAM;AACjC,UAAI,CAAC,OAAO;AACV,cAAM,KAAK;AAAA,UACT,MAAM;AAAA,UACN,MAAM;AAAA,EAAkB,YAAY,OAAO,OAAO,OAAO,KAAK,CAAC;AAAA,QACjE,CAAC;AACH,YAAM,MAAM;AAAA,QACV,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,QAChC,OAAO,QAAQ,mBAAmB;AAAA,MACpC;AACA,YAAM,OAAO,IAAI,SAAS,OAAO,KAAK,MAAM,MAAM,KAAK,IAAI,MAAM,OAAO;AACxE,YAAM,OAAO,OAAO,CAAC,EAAE,MAAM,QAAiB,MAAM,gBAAgB,IAAI,GAAG,CAAC,IAAI,CAAC;AACjF,YAAM,YAAY,YAAY,IAAI,IAAI,WAAW,KAAM,QAAQ,CAAC;AAChE,YAAM,SAAS,GAAG,OAAO,KAAK,qBAAqB,eAAe;AAAA,YAAe,OAAO;AAAA;AAAA;AACxF,aAAO;AAAA,QACL,QAAQ,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC;AAAA,QAC7E,GAAI,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK;AAAA,MACvC;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,SAAS,kBAAkB,OAA+C;AAC/E,SAAO,gBAAgB,EAAE,MAAM,kBAAkB,MAAM,CAAC;AAC1D;AAEO,SAAS,mBAAmB,MAAmC;AACpE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACF,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,MAAM,QAAQ,SAAS,YAAY,KAAK,SAAS,aAAa,SAAS,IAAI,QAAQ,EAAE;AAAA,EAC9F,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIO,SAAS,eAAe,MAAqB;AAClD,QAAM,MAAgB,CAAC;AACvB,MAAI,MAAM,IAAI,IAAI,KAAK,IAAI;AAC3B,aAAS;AACP,QAAI,KAAK,IAAI,IAAI,0CAA0C,GAAG,EAAE,IAAI;AACpE,QAAI,IAAI,aAAa,IAAK,QAAO;AACjC,UAAM,IAAI,IAAI,MAAM,GAAG;AAAA,EACzB;AACF;AAEA,eAAsB,WACpB,SACA,MACyC;AACzC,aAAW,OAAO,eAAe,IAAI,GAAG;AACtC,UAAM,WAAW,MAAM,QAAQ,GAAG,EAAE,MAAM,MAAM,MAAS;AACzD,QAAI,UAAU,GAAI,QAAO,YAAY,QAAQ,MAAM,SAAS,YAAY,CAAC;AAAA,EAC3E;AACA,SAAO;AACT;AAEA,IAAI;AAEG,SAAS,gBAA4C;AAC1D,SAAO;AACT;AAEO,SAAS,eACd,MACA,WACgB;AAChB,MAAI;AACJ,QAAM,UAA0B,CAAC,YAAY;AAC3C,cAAU,KAAK,EAAE,MAAM,MAAM,MAAS;AACtC,WAAO,IAAI,gBAAgB;AAAA,MACzB,GAAG;AAAA,MACH,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,MACjC,MAAM,MAAM,KAAK,CAAC,WAAW,UAAU,gBAAgB,CAAC;AAAA,IAC1D,CAAC;AAAA,EACH;AACA,WAAS;AACT,SAAO;AACT;",
+  "sourcesContent": ["import type { Context, JsonValue } from '@earendil-works/chord';\nimport { withAbortSignal } from '@earendil-works/chord/context';\nimport { Type } from '@earendil-works/pi-ai';\nimport {\n  type CodemodeError,\n  type CodemodeJsonSchema,\n  type CodemodeOutputItem,\n  type CodemodeResult,\n  type CodemodeRun,\n  type CodemodeRunOptions,\n  CodemodeSandbox,\n  type CodemodeSandboxOptions,\n  type CodemodeTool,\n  loadQuickJSWasm,\n  parseCodemodeSource,\n  renderDeclarations,\n} from '@earendil-works/pi-codemode';\nimport {\n  type Agent,\n  defineDoc,\n  defineExtension,\n  defineTool,\n  type Extension,\n  type JsonObject,\n  type NestedToolExecutionResult,\n  type ToolExecutionApi,\n  type ToolRegistration,\n} from '@earendil-works/pi-durable';\nimport { boundedDeltas } from '../checkpoints.ts';\nimport { scrubItems } from '../secrets/scrub.ts';\n\nexport const CODEMODE = 'codemode';\nexport const DEFAULT_MAX_OUTPUT_TOKENS = 10_000;\nexport const MEMORY_LIMIT_BYTES = 256 * 1024 * 1024;\nconst CHARS_PER_TOKEN = 4;\n\nexport const CodemodeDoc = defineDoc<{ store: Record<string, JsonValue> }>({\n  kind: 'slicc.codemode',\n  checkpointWhen: boundedDeltas,\n  version: 1,\n  scope: 'conversation',\n  history: 'rewindable',\n  fork: 'asOf',\n  initial: () => ({ store: {} }),\n});\n\nexport interface Sandbox {\n  execute(\n    code: string,\n    options: { signal?: AbortSignal; store?: Record<string, unknown> }\n  ): Promise<CodemodeResult>;\n  start(code: string, options: CodemodeRunOptions): CodemodeRun;\n  close(): Promise<void>;\n}\n\nexport type SandboxFactory = (options: CodemodeSandboxOptions) => Sandbox;\n\nexport interface CodemodeExtra {\n  tools: CodemodeTool[];\n  globals: CodemodeTool[];\n}\n\nexport interface CodemodeOptions {\n  sandbox: SandboxFactory;\n  declared: readonly ToolRegistration[];\n  extra?: (api: ToolExecutionApi, agent: Agent, context: Context) => Promise<CodemodeExtra>;\n}\n\nconst INTRO = `Run JavaScript that calls other tools. The input is raw JavaScript (not JSON, no code fence), run as an async function body in a QuickJS sandbox: top-level \\`await\\` and \\`return\\` work. No Node, file system, network, or timers.\n- \\`await tools.<name>({ ...args })\\` resolves to a string, or an object if the tool's declaration says so, and rejects with an Error on failure. Calls still running when the script ends are cancelled.\n- Optional first line: \\`// @options: {\"max_output_tokens\": 10000, \"timeout_ms\": 60000}\\``;\n\nconst GLOBALS = [\n  'Globals:',\n  '- `text(value)`, `image(dataUrlOrImageBlock)`, `console.log(...)`, and top-level `return` add output; `exit()` ends the script. With several text items, each starts with a `==> text N/M <==` line, and `console` lines follow the other output in one `<console_output>` block.',\n  '- `store(key, value)` and `load(key)` keep JSON values across codemode calls in this conversation.',\n  '- `ALL_TOOLS` lists every tool scripts can call.',\n].join('\\n');\n\nconst DISCOVERY =\n  '- `await searchTools(query, { limit?, namespace? })`, `await describeTool(name)`, `await describeNamespace(name)`: find unlisted tools, such as MCP tools.';\n\nconst BASH_OUTPUT: CodemodeJsonSchema = {\n  type: 'object',\n  properties: {\n    output: { type: 'string' },\n    exit_code: { type: 'number' },\n    truncated: { type: 'boolean' },\n    full_output_path: { type: 'string' },\n  },\n  required: ['output', 'exit_code'],\n};\n\nfunction scriptTool(tool: ToolRegistration): Omit<CodemodeTool, 'execute'> {\n  return {\n    name: tool.name,\n    description: tool.description,\n    inputSchema: tool.parameters as CodemodeJsonSchema,\n    ...(tool.name === 'bash' ? { outputSchema: BASH_OUTPUT } : {}),\n  };\n}\n\nexport function codemodeDescription(\n  declared: readonly ToolRegistration[],\n  discovery = false\n): string {\n  const tools = declared\n    .filter((tool) => tool.name !== CODEMODE)\n    .map((tool) => ({ ...scriptTool(tool), execute: () => undefined }));\n  const sections = [INTRO, discovery ? `${GLOBALS}\\n${DISCOVERY}` : GLOBALS];\n  if (tools.length) sections.push(`Nested tools:\\n${renderDeclarations({ tools })}`);\n  return sections.join('\\n\\n');\n}\n\nfunction textOf(value: unknown): string {\n  if (typeof value === 'string') return value;\n  if (!Array.isArray(value)) return '';\n  return value\n    .filter((part) => part?.type === 'text')\n    .map((part) => part.text)\n    .join('\\n');\n}\n\nfunction errorOf(result: NestedToolExecutionResult): string {\n  const errors = result.diagnostics\n    .filter((diagnostic) => diagnostic.severity === 'error')\n    .map((diagnostic) => diagnostic.message);\n  return [textOf(result.structuredOutput), ...errors].filter(Boolean).join('\\n');\n}\n\ninterface ShellOutput {\n  output: string;\n  exitCode: number;\n  truncated?: boolean;\n  fullOutputPath?: string;\n}\n\nfunction shellOutput(value: unknown): ShellOutput | undefined {\n  const shell = value as Partial<ShellOutput> | undefined;\n  return typeof shell?.output === 'string' && typeof shell.exitCode === 'number'\n    ? (shell as ShellOutput)\n    : undefined;\n}\n\nexport async function callNested(\n  name: string,\n  args: unknown,\n  api: ToolExecutionApi,\n  context: Context\n): Promise<unknown> {\n  const result = await api.executeTool(name, (args ?? {}) as JsonObject, context);\n  const shell = name === 'bash' ? shellOutput(result.structuredOutput) : undefined;\n  if (shell)\n    return {\n      output: shell.output,\n      exit_code: shell.exitCode,\n      ...(shell.truncated ? { truncated: true } : {}),\n      ...(shell.fullOutputPath ? { full_output_path: shell.fullOutputPath } : {}),\n    };\n  if (result.isError) throw new Error(errorOf(result) || `Tool \"${name}\" failed`);\n  return textOf(result.structuredOutput);\n}\n\nfunction valueText(value: unknown): string {\n  return typeof value === 'string' ? value : (JSON.stringify(value) ?? String(value));\n}\n\nexport function formatOutput(output: readonly CodemodeOutputItem[]): CodemodeOutputItem[] {\n  const total = output.filter((item) => item.type === 'text' && !item.console).length;\n  const items: CodemodeOutputItem[] = [];\n  const lines: string[] = [];\n  let index = 0;\n  for (const item of output) {\n    if (item.type === 'image') items.push(item);\n    else if (item.console) lines.push(item.text);\n    else {\n      index++;\n      items.push({\n        type: 'text',\n        text: total > 1 ? `==> text ${index}/${total} <==\\n${item.text}` : item.text,\n      });\n    }\n  }\n  if (lines.length)\n    items.push({ type: 'text', text: `<console_output>\\n${lines.join('\\n')}\\n</console_output>` });\n  return items;\n}\n\nexport function joinText(items: readonly CodemodeOutputItem[]): CodemodeOutputItem[] {\n  const joined: CodemodeOutputItem[] = [];\n  for (const item of items) {\n    const last = joined.at(-1);\n    if (item.type === 'text' && last?.type === 'text') {\n      const separator = last.text === '' || last.text.endsWith('\\n') ? '' : '\\n';\n      joined[joined.length - 1] = { type: 'text', text: `${last.text}${separator}${item.text}` };\n    } else joined.push(item);\n  }\n  return joined;\n}\n\nexport function formatError(error: CodemodeError, calls: CodemodeResult['calls']): string {\n  const heads: Record<string, string> = {\n    timeout: `Script timed out: ${error.message}`,\n    aborted: `Script aborted: ${error.message}`,\n    sandbox: `Script sandbox failed: ${error.message}`,\n  };\n  const head =\n    error.kind === 'script'\n      ? (error.stack ?? `${error.name ?? 'Error'}: ${error.message}`)\n      : heads[error.kind];\n  const summary = calls.length\n    ? `Tool calls made before the failure (they are not undone): ${calls.map((call) => `${call.name} (${call.status})`).join(', ')}`\n    : 'No tool calls were made.';\n  return `${head}\\n\\n${summary}`;\n}\n\nexport function truncate(\n  items: readonly CodemodeOutputItem[],\n  maxTokens: number\n): { items: CodemodeOutputItem[]; full: string | null } {\n  const text = items\n    .filter((item) => item.type === 'text')\n    .map((item) => item.text)\n    .join('\\n');\n  const limit = maxTokens * CHARS_PER_TOKEN;\n  if (text.length <= limit) return { items: [...items], full: null };\n  const half = Math.floor(limit / 2);\n  const kept = `${text.slice(0, half)}\\n\\n[\u2026 ${text.length - 2 * half} characters omitted \u2026]\\n\\n${text.slice(-half)}`;\n  return {\n    items: [{ type: 'text', text: kept }, ...items.filter((item) => item.type === 'image')],\n    full: text,\n  };\n}\n\nasync function spill(api: ToolExecutionApi, text: string, context: Context): Promise<string> {\n  const path = `/tmp/slicc-codemode-${api.callId.replace(/[^\\w-]/g, '_')}.txt`;\n  const written = await api.env?.writeFile(path, text, context);\n  return written?.ok ? path : '';\n}\n\nasync function saveStore(\n  api: ToolExecutionApi,\n  result: CodemodeResult,\n  context: Context\n): Promise<void> {\n  if (!result.ok) return;\n  const { set, delete: removed } = result.storeWrites;\n  if (!Object.keys(set).length && !removed.length) return;\n  await api.commit(async (tx) => {\n    const doc = await tx.doc(CodemodeDoc, api.conversationId);\n    for (const key of removed) delete doc.store[key];\n    Object.assign(doc.store, set);\n  }, context);\n}\n\nexport function codemodeTool(options: CodemodeOptions): ToolRegistration {\n  return defineTool({\n    name: CODEMODE,\n    description: codemodeDescription(options.declared, options.extra !== undefined),\n    parameters: Type.Object({ code: Type.String({ description: 'Raw JavaScript source.' }) }),\n    replay: 'unsafe',\n    callers: ['model'],\n    async execute({ code }, api, context) {\n      const started = performance.now();\n      const parsed = parseCodemodeSource(code);\n      const agent = await api.agent(context);\n      const callable = agent.tools.filter((tool) => tool.name !== CODEMODE);\n      const tools: CodemodeTool[] = callable.map((tool) => ({\n        ...scriptTool(tool),\n        execute: (args, { signal }) =>\n          callNested(tool.name, args, api, withAbortSignal(signal, context)),\n      }));\n      const extra = options.extra\n        ? await options.extra(api, agent, context)\n        : { tools: [], globals: [] };\n      const replaced = new Set(extra.tools.map((tool) => tool.name));\n      const scripted = [...tools.filter((tool) => !replaced.has(tool.name)), ...extra.tools];\n      const saved = await api.snapshot(CodemodeDoc, api.conversationId, context);\n      const sandbox = options.sandbox({\n        tools: scripted,\n        ...(extra.globals.length ? { globals: extra.globals } : {}),\n        timeoutMs: parsed.options.timeoutMs ?? Number.POSITIVE_INFINITY,\n        memoryLimitBytes: MEMORY_LIMIT_BYTES,\n      });\n      let result: CodemodeResult;\n      try {\n        result = await sandbox.execute(parsed.code, {\n          signal: context.abortSignal as AbortSignal,\n          store: { ...saved?.store },\n        });\n      } finally {\n        await sandbox.close();\n      }\n      await saveStore(api, result, context);\n      const output = [...result.output];\n      if (result.ok && result.value !== undefined)\n        output.push({ type: 'text', text: valueText(result.value) });\n      const items = formatOutput(output);\n      if (!result.ok)\n        items.push({\n          type: 'text',\n          text: `Script error:\\n${formatError(result.error, result.calls)}`,\n        });\n      const cut = truncate(\n        await scrubItems(joinText(items)),\n        parsed.options.maxOutputTokens ?? DEFAULT_MAX_OUTPUT_TOKENS\n      );\n      const path = cut.full === null ? '' : await spill(api, cut.full, context);\n      const note = path ? [{ type: 'text' as const, text: `Full output: ${path}` }] : [];\n      const seconds = ((performance.now() - started) / 1000).toFixed(1);\n      const header = `${result.ok ? 'Script completed' : 'Script failed'}\\nWall time ${seconds} seconds\\nOutput:\\n`;\n      return {\n        output: [{ type: 'text', text: header }, ...joinText([...cut.items, ...note])],\n        ...(result.ok ? {} : { isError: true }),\n      };\n    },\n  }) as ToolRegistration;\n}\n\nexport function codemodeExtension(tools: readonly ToolRegistration[]): Extension {\n  return defineExtension({ name: 'slicc-codemode', tools });\n}\n\nexport function disabledBySettings(text: string | undefined): boolean {\n  if (!text) return false;\n  try {\n    const settings = JSON.parse(text) as { defaultTools?: unknown };\n    return Array.isArray(settings.defaultTools) && settings.defaultTools.includes(`-${CODEMODE}`);\n  } catch {\n    return false;\n  }\n}\n\nexport type Fetcher = (url: string) => Promise<Response>;\n\nexport function wasmCandidates(from: URL): string[] {\n  const out: string[] = [];\n  let dir = new URL('.', from);\n  for (;;) {\n    out.push(new URL('node_modules/quickjs-wasi/quickjs.wasm', dir).href);\n    if (dir.pathname === '/') return out;\n    dir = new URL('..', dir);\n  }\n}\n\nexport async function locateWasm(\n  fetcher: Fetcher,\n  from: URL\n): Promise<WebAssembly.Module | undefined> {\n  for (const url of wasmCandidates(from)) {\n    const response = await fetcher(url).catch(() => undefined);\n    if (response?.ok) return WebAssembly.compile(await response.arrayBuffer());\n  }\n  return undefined;\n}\n\nlet shared: SandboxFactory | undefined;\n\nexport function sharedSandbox(): SandboxFactory | undefined {\n  return shared;\n}\n\nexport function sandboxFactory(\n  wasm: () => Promise<WebAssembly.Module | undefined>,\n  workerUrl?: string | URL\n): SandboxFactory {\n  let found: Promise<WebAssembly.Module | undefined> | undefined;\n  const factory: SandboxFactory = (options) => {\n    found ??= wasm().catch(() => undefined);\n    return new CodemodeSandbox({\n      ...options,\n      ...(workerUrl ? { workerUrl } : {}),\n      wasm: found.then((module) => module ?? loadQuickJSWasm()),\n    });\n  };\n  shared = factory;\n  return factory;\n}\n"],
+  "mappings": "AACA,SAAS,uBAAuB;AAChC,SAAS,YAAY;AACrB;AAAA,EAOE;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EAEE;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,qBAAqB;AAC9B,SAAS,kBAAkB;AAEpB,MAAM,WAAW;AACjB,MAAM,4BAA4B;AAClC,MAAM,qBAAqB,MAAM,OAAO;AAC/C,MAAM,kBAAkB;AAEjB,MAAM,cAAc,UAAgD;AAAA,EACzE,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAwBD,MAAM,QAAQ;AAAA;AAAA;AAId,MAAM,UAAU;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAEX,MAAM,YACJ;AAEF,MAAM,cAAkC;AAAA,EACtC,MAAM;AAAA,EACN,YAAY;AAAA,IACV,QAAQ,EAAE,MAAM,SAAS;AAAA,IACzB,WAAW,EAAE,MAAM,SAAS;AAAA,IAC5B,WAAW,EAAE,MAAM,UAAU;AAAA,IAC7B,kBAAkB,EAAE,MAAM,SAAS;AAAA,EACrC;AAAA,EACA,UAAU,CAAC,UAAU,WAAW;AAClC;AAEA,SAAS,WAAW,MAAuD;AACzE,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,aAAa,KAAK;AAAA,IAClB,GAAI,KAAK,SAAS,SAAS,EAAE,cAAc,YAAY,IAAI,CAAC;AAAA,EAC9D;AACF;AAEO,SAAS,oBACd,UACA,YAAY,OACJ;AACR,QAAM,QAAQ,SACX,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ,EACvC,IAAI,CAAC,UAAU,EAAE,GAAG,WAAW,IAAI,GAAG,SAAS,MAAM,OAAU,EAAE;AACpE,QAAM,WAAW,CAAC,OAAO,YAAY,GAAG,OAAO;AAAA,EAAK,SAAS,KAAK,OAAO;AACzE,MAAI,MAAM,OAAQ,UAAS,KAAK;AAAA,EAAkB,mBAAmB,EAAE,MAAM,CAAC,CAAC,EAAE;AACjF,SAAO,SAAS,KAAK,MAAM;AAC7B;AAEA,SAAS,OAAO,OAAwB;AACtC,MAAI,OAAO,UAAU,SAAU,QAAO;AACtC,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,QAAO;AAClC,SAAO,MACJ,OAAO,CAAC,SAAS,MAAM,SAAS,MAAM,EACtC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACd;AAEA,SAAS,QAAQ,QAA2C;AAC1D,QAAM,SAAS,OAAO,YACnB,OAAO,CAAC,eAAe,WAAW,aAAa,OAAO,EACtD,IAAI,CAAC,eAAe,WAAW,OAAO;AACzC,SAAO,CAAC,OAAO,OAAO,gBAAgB,GAAG,GAAG,MAAM,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AAC/E;AASA,SAAS,YAAY,OAAyC;AAC5D,QAAM,QAAQ;AACd,SAAO,OAAO,OAAO,WAAW,YAAY,OAAO,MAAM,aAAa,WACjE,QACD;AACN;AAEA,eAAsB,WACpB,MACA,MACA,KACA,SACkB;AAClB,QAAM,SAAS,MAAM,IAAI,YAAY,MAAO,QAAQ,CAAC,GAAkB,OAAO;AAC9E,QAAM,QAAQ,SAAS,SAAS,YAAY,OAAO,gBAAgB,IAAI;AACvE,MAAI;AACF,WAAO;AAAA,MACL,QAAQ,MAAM;AAAA,MACd,WAAW,MAAM;AAAA,MACjB,GAAI,MAAM,YAAY,EAAE,WAAW,KAAK,IAAI,CAAC;AAAA,MAC7C,GAAI,MAAM,iBAAiB,EAAE,kBAAkB,MAAM,eAAe,IAAI,CAAC;AAAA,IAC3E;AACF,MAAI,OAAO,QAAS,OAAM,IAAI,MAAM,QAAQ,MAAM,KAAK,SAAS,IAAI,UAAU;AAC9E,SAAO,OAAO,OAAO,gBAAgB;AACvC;AAEA,SAAS,UAAU,OAAwB;AACzC,SAAO,OAAO,UAAU,WAAW,QAAS,KAAK,UAAU,KAAK,KAAK,OAAO,KAAK;AACnF;AAEO,SAAS,aAAa,QAA6D;AACxF,QAAM,QAAQ,OAAO,OAAO,CAAC,SAAS,KAAK,SAAS,UAAU,CAAC,KAAK,OAAO,EAAE;AAC7E,QAAM,QAA8B,CAAC;AACrC,QAAM,QAAkB,CAAC;AACzB,MAAI,QAAQ;AACZ,aAAW,QAAQ,QAAQ;AACzB,QAAI,KAAK,SAAS,QAAS,OAAM,KAAK,IAAI;AAAA,aACjC,KAAK,QAAS,OAAM,KAAK,KAAK,IAAI;AAAA,SACtC;AACH;AACA,YAAM,KAAK;AAAA,QACT,MAAM;AAAA,QACN,MAAM,QAAQ,IAAI,YAAY,KAAK,IAAI,KAAK;AAAA,EAAS,KAAK,IAAI,KAAK,KAAK;AAAA,MAC1E,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,MAAM;AACR,UAAM,KAAK,EAAE,MAAM,QAAQ,MAAM;AAAA,EAAqB,MAAM,KAAK,IAAI,CAAC;AAAA,mBAAsB,CAAC;AAC/F,SAAO;AACT;AAEO,SAAS,SAAS,OAA4D;AACnF,QAAM,SAA+B,CAAC;AACtC,aAAW,QAAQ,OAAO;AACxB,UAAM,OAAO,OAAO,GAAG,EAAE;AACzB,QAAI,KAAK,SAAS,UAAU,MAAM,SAAS,QAAQ;AACjD,YAAM,YAAY,KAAK,SAAS,MAAM,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK;AACtE,aAAO,OAAO,SAAS,CAAC,IAAI,EAAE,MAAM,QAAQ,MAAM,GAAG,KAAK,IAAI,GAAG,SAAS,GAAG,KAAK,IAAI,GAAG;AAAA,IAC3F,MAAO,QAAO,KAAK,IAAI;AAAA,EACzB;AACA,SAAO;AACT;AAEO,SAAS,YAAY,OAAsB,OAAwC;AACxF,QAAM,QAAgC;AAAA,IACpC,SAAS,qBAAqB,MAAM,OAAO;AAAA,IAC3C,SAAS,mBAAmB,MAAM,OAAO;AAAA,IACzC,SAAS,0BAA0B,MAAM,OAAO;AAAA,EAClD;AACA,QAAM,OACJ,MAAM,SAAS,WACV,MAAM,SAAS,GAAG,MAAM,QAAQ,OAAO,KAAK,MAAM,OAAO,KAC1D,MAAM,MAAM,IAAI;AACtB,QAAM,UAAU,MAAM,SAClB,6DAA6D,MAAM,IAAI,CAAC,SAAS,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,CAAC,KAC5H;AACJ,SAAO,GAAG,IAAI;AAAA;AAAA,EAAO,OAAO;AAC9B;AAEO,SAAS,SACd,OACA,WACsD;AACtD,QAAM,OAAO,MACV,OAAO,CAAC,SAAS,KAAK,SAAS,MAAM,EACrC,IAAI,CAAC,SAAS,KAAK,IAAI,EACvB,KAAK,IAAI;AACZ,QAAM,QAAQ,YAAY;AAC1B,MAAI,KAAK,UAAU,MAAO,QAAO,EAAE,OAAO,CAAC,GAAG,KAAK,GAAG,MAAM,KAAK;AACjE,QAAM,OAAO,KAAK,MAAM,QAAQ,CAAC;AACjC,QAAM,OAAO,GAAG,KAAK,MAAM,GAAG,IAAI,CAAC;AAAA;AAAA,UAAU,KAAK,SAAS,IAAI,IAAI;AAAA;AAAA,EAA6B,KAAK,MAAM,CAAC,IAAI,CAAC;AACjH,SAAO;AAAA,IACL,OAAO,CAAC,EAAE,MAAM,QAAQ,MAAM,KAAK,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,OAAO,CAAC;AAAA,IACtF,MAAM;AAAA,EACR;AACF;AAEA,eAAe,MAAM,KAAuB,MAAc,SAAmC;AAC3F,QAAM,OAAO,uBAAuB,IAAI,OAAO,QAAQ,WAAW,GAAG,CAAC;AACtE,QAAM,UAAU,MAAM,IAAI,KAAK,UAAU,MAAM,MAAM,OAAO;AAC5D,SAAO,SAAS,KAAK,OAAO;AAC9B;AAEA,eAAe,UACb,KACA,QACA,SACe;AACf,MAAI,CAAC,OAAO,GAAI;AAChB,QAAM,EAAE,KAAK,QAAQ,QAAQ,IAAI,OAAO;AACxC,MAAI,CAAC,OAAO,KAAK,GAAG,EAAE,UAAU,CAAC,QAAQ,OAAQ;AACjD,QAAM,IAAI,OAAO,OAAO,OAAO;AAC7B,UAAM,MAAM,MAAM,GAAG,IAAI,aAAa,IAAI,cAAc;AACxD,eAAW,OAAO,QAAS,QAAO,IAAI,MAAM,GAAG;AAC/C,WAAO,OAAO,IAAI,OAAO,GAAG;AAAA,EAC9B,GAAG,OAAO;AACZ;AAEO,SAAS,aAAa,SAA4C;AACvE,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa,oBAAoB,QAAQ,UAAU,QAAQ,UAAU,MAAS;AAAA,IAC9E,YAAY,KAAK,OAAO,EAAE,MAAM,KAAK,OAAO,EAAE,aAAa,yBAAyB,CAAC,EAAE,CAAC;AAAA,IACxF,QAAQ;AAAA,IACR,SAAS,CAAC,OAAO;AAAA,IACjB,MAAM,QAAQ,EAAE,KAAK,GAAG,KAAK,SAAS;AACpC,YAAM,UAAU,YAAY,IAAI;AAChC,YAAM,SAAS,oBAAoB,IAAI;AACvC,YAAM,QAAQ,MAAM,IAAI,MAAM,OAAO;AACrC,YAAM,WAAW,MAAM,MAAM,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ;AACpE,YAAM,QAAwB,SAAS,IAAI,CAAC,UAAU;AAAA,QACpD,GAAG,WAAW,IAAI;AAAA,QAClB,SAAS,CAAC,MAAM,EAAE,OAAO,MACvB,WAAW,KAAK,MAAM,MAAM,KAAK,gBAAgB,QAAQ,OAAO,CAAC;AAAA,MACrE,EAAE;AACF,YAAM,QAAQ,QAAQ,QAClB,MAAM,QAAQ,MAAM,KAAK,OAAO,OAAO,IACvC,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,EAAE;AAC7B,YAAM,WAAW,IAAI,IAAI,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;AAC7D,YAAM,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,KAAK,IAAI,CAAC,GAAG,GAAG,MAAM,KAAK;AACrF,YAAM,QAAQ,MAAM,IAAI,SAAS,aAAa,IAAI,gBAAgB,OAAO;AACzE,YAAM,UAAU,QAAQ,QAAQ;AAAA,QAC9B,OAAO;AAAA,QACP,GAAI,MAAM,QAAQ,SAAS,EAAE,SAAS,MAAM,QAAQ,IAAI,CAAC;AAAA,QACzD,WAAW,OAAO,QAAQ,aAAa,OAAO;AAAA,QAC9C,kBAAkB;AAAA,MACpB,CAAC;AACD,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,QAAQ,QAAQ,OAAO,MAAM;AAAA,UAC1C,QAAQ,QAAQ;AAAA,UAChB,OAAO,EAAE,GAAG,OAAO,MAAM;AAAA,QAC3B,CAAC;AAAA,MACH,UAAE;AACA,cAAM,QAAQ,MAAM;AAAA,MACtB;AACA,YAAM,UAAU,KAAK,QAAQ,OAAO;AACpC,YAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAChC,UAAI,OAAO,MAAM,OAAO,UAAU;AAChC,eAAO,KAAK,EAAE,MAAM,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAC7D,YAAM,QAAQ,aAAa,MAAM;AACjC,UAAI,CAAC,OAAO;AACV,cAAM,KAAK;AAAA,UACT,MAAM;AAAA,UACN,MAAM;AAAA,EAAkB,YAAY,OAAO,OAAO,OAAO,KAAK,CAAC;AAAA,QACjE,CAAC;AACH,YAAM,MAAM;AAAA,QACV,MAAM,WAAW,SAAS,KAAK,CAAC;AAAA,QAChC,OAAO,QAAQ,mBAAmB;AAAA,MACpC;AACA,YAAM,OAAO,IAAI,SAAS,OAAO,KAAK,MAAM,MAAM,KAAK,IAAI,MAAM,OAAO;AACxE,YAAM,OAAO,OAAO,CAAC,EAAE,MAAM,QAAiB,MAAM,gBAAgB,IAAI,GAAG,CAAC,IAAI,CAAC;AACjF,YAAM,YAAY,YAAY,IAAI,IAAI,WAAW,KAAM,QAAQ,CAAC;AAChE,YAAM,SAAS,GAAG,OAAO,KAAK,qBAAqB,eAAe;AAAA,YAAe,OAAO;AAAA;AAAA;AACxF,aAAO;AAAA,QACL,QAAQ,CAAC,EAAE,MAAM,QAAQ,MAAM,OAAO,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC;AAAA,QAC7E,GAAI,OAAO,KAAK,CAAC,IAAI,EAAE,SAAS,KAAK;AAAA,MACvC;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAEO,SAAS,kBAAkB,OAA+C;AAC/E,SAAO,gBAAgB,EAAE,MAAM,kBAAkB,MAAM,CAAC;AAC1D;AAEO,SAAS,mBAAmB,MAAmC;AACpE,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACF,UAAM,WAAW,KAAK,MAAM,IAAI;AAChC,WAAO,MAAM,QAAQ,SAAS,YAAY,KAAK,SAAS,aAAa,SAAS,IAAI,QAAQ,EAAE;AAAA,EAC9F,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAIO,SAAS,eAAe,MAAqB;AAClD,QAAM,MAAgB,CAAC;AACvB,MAAI,MAAM,IAAI,IAAI,KAAK,IAAI;AAC3B,aAAS;AACP,QAAI,KAAK,IAAI,IAAI,0CAA0C,GAAG,EAAE,IAAI;AACpE,QAAI,IAAI,aAAa,IAAK,QAAO;AACjC,UAAM,IAAI,IAAI,MAAM,GAAG;AAAA,EACzB;AACF;AAEA,eAAsB,WACpB,SACA,MACyC;AACzC,aAAW,OAAO,eAAe,IAAI,GAAG;AACtC,UAAM,WAAW,MAAM,QAAQ,GAAG,EAAE,MAAM,MAAM,MAAS;AACzD,QAAI,UAAU,GAAI,QAAO,YAAY,QAAQ,MAAM,SAAS,YAAY,CAAC;AAAA,EAC3E;AACA,SAAO;AACT;AAEA,IAAI;AAEG,SAAS,gBAA4C;AAC1D,SAAO;AACT;AAEO,SAAS,eACd,MACA,WACgB;AAChB,MAAI;AACJ,QAAM,UAA0B,CAAC,YAAY;AAC3C,cAAU,KAAK,EAAE,MAAM,MAAM,MAAS;AACtC,WAAO,IAAI,gBAAgB;AAAA,MACzB,GAAG;AAAA,MACH,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;AAAA,MACjC,MAAM,MAAM,KAAK,CAAC,WAAW,UAAU,gBAAgB,CAAC;AAAA,IAC1D,CAAC;AAAA,EACH;AACA,WAAS;AACT,SAAO;AACT;",
   "names": []
 }

package/dist/cone.js

@@ -1,8 +1,8 @@
 import { defineDoc } from "@earendil-works/pi-durable";
-import { deltasOnly } from "./checkpoints.js";
+import { boundedDeltas } from "./checkpoints.js";
 const ConeDoc = defineDoc({
   kind: "slicc.cone",
-  checkpointWhen: deltasOnly,
+  checkpointWhen: boundedDeltas,
   version: 1,
   scope: "session",
   initial: () => ({ conversation: null })

package/dist/cone.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/cone.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { type Conversation, defineDoc } from '@earendil-works/pi-durable';\nimport { deltasOnly } from './checkpoints.ts';\n\nexport const ConeDoc = defineDoc<{ conversation: number | null }>({\n  kind: 'slicc.cone',\n  checkpointWhen: deltasOnly,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ conversation: null }),\n});\n\nexport interface Cones {\n  cone(): Conversation;\n  switchCone(conversation: Conversation, context: Context): Promise<void>;\n}\n"],
-  "mappings": "AACA,SAA4B,iBAAiB;AAC7C,SAAS,kBAAkB;AAEpB,MAAM,UAAU,UAA2C;AAAA,EAChE,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,cAAc,KAAK;AACvC,CAAC;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { type Conversation, defineDoc } from '@earendil-works/pi-durable';\nimport { boundedDeltas } from './checkpoints.ts';\n\nexport const ConeDoc = defineDoc<{ conversation: number | null }>({\n  kind: 'slicc.cone',\n  checkpointWhen: boundedDeltas,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ conversation: null }),\n});\n\nexport interface Cones {\n  cone(): Conversation;\n  switchCone(conversation: Conversation, context: Context): Promise<void>;\n}\n"],
+  "mappings": "AACA,SAA4B,iBAAiB;AAC7C,SAAS,qBAAqB;AAEvB,MAAM,UAAU,UAA2C;AAAA,EAChE,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,cAAc,KAAK;AACvC,CAAC;",
   "names": []
 }

package/dist/guests/guard.js

@@ -7,7 +7,7 @@ import {
   ToolTask
 } from "@earendil-works/pi-durable";
 import { REASONS, scoopTier } from "../approvals/record.js";
-import { deltasOnly } from "../checkpoints.js";
+import { boundedDeltas } from "../checkpoints.js";
 import { scrubText, scrubTexts } from "../secrets/scrub.js";
 import { gateKind, gateRefusal } from "./policy.js";
 import { GuestsDoc, isGate, liveSeat } from "./seats.js";
@@ -105,7 +105,7 @@ function reasonOf(item) {
 }
 const GuestTaintDoc = defineDoc({
   kind: "slicc.guest-taint",
-  checkpointWhen: deltasOnly,
+  checkpointWhen: boundedDeltas,
   version: 1,
   scope: "conversation",
   history: "rewindable",
@@ -114,7 +114,7 @@ const GuestTaintDoc = defineDoc({
 });
 const LickTaintDoc = defineDoc({
   kind: "slicc.lick-taint",
-  checkpointWhen: deltasOnly,
+  checkpointWhen: boundedDeltas,
   version: 1,
   scope: "session",
   initial: () => ({ licks: {} })

package/dist/guests/guard.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/guests/guard.ts"],
-  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { awaitWithContext, BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport {\n  type ConversationId,\n  defineDoc,\n  defineExtension,\n  type Extension,\n  type Harness,\n  type HookApi,\n  hook,\n  LiveDoc,\n  type SubmissionId,\n  type TaskId,\n  type ToolHookCall,\n  ToolTask,\n} from '@earendil-works/pi-durable';\nimport type { Approval, Approvals } from '../approvals/index.ts';\nimport { REASONS, scoopTier } from '../approvals/record.ts';\nimport { deltasOnly } from '../checkpoints.ts';\nimport { scrubText, scrubTexts } from '../secrets/scrub.ts';\nimport { type GuestPolicy, gateKind, gateRefusal } from './policy.ts';\nimport { type AlwaysTool, GuestsDoc, isGate, liveSeat, type SeatRecord } from './seats.ts';\n\nexport const GUEST_GUARD = 'slicc-guest-guard';\nexport const GUEST_REQUEST = 'guest:';\nexport const LICK_REQUEST = 'lick:';\nexport const GUEST_TOOL_MEMO = 'slicc.guest-tool';\nexport const SUMMARY_LENGTH = 2000;\n\nexport const GATE_REASONS = {\n  unknown:\n    'A guest started this run, and its seat names no review for tool calls that this agent knows.',\n  ended: \"A guest started this run, and that guest's seat has ended.\",\n  rejected: 'The owner declined this tool call in a run a guest started.',\n  judged: 'The automatic check declined this tool call in a run a guest started',\n  unanswered: 'Nobody approved this tool call in a run a guest started in time.',\n  unroutable: \"The cone can't review a tool call it is itself waiting on.\",\n  withdrawn: 'The review of this tool call was withdrawn.',\n} as const;\n\nexport interface GateHost {\n  approvals: Pick<Approvals, 'state' | 'request' | 'settled' | 'withdraw'>;\n  policy(): GuestPolicy;\n  now?: () => number;\n}\n\nexport interface GuestToolGate {\n  readonly extension: Extension;\n  bind(host: GateHost): void;\n}\n\ntype Held = Pick<Harness, 'submission' | 'commit' | 'waitForTask'>;\n\ntype Taint = { seat: SeatRecord | null; tier: string };\n\nexport function canonical(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(canonical).join(',')}]`;\n  if (value && typeof value === 'object')\n    return `{${Object.keys(value)\n      .sort()\n      .map((key) => `${JSON.stringify(key)}:${canonical((value as Record<string, unknown>)[key])}`)\n      .join(',')}}`;\n  return JSON.stringify(value ?? null);\n}\n\nfunction leaves(value: unknown, found: string[]): void {\n  if (typeof value === 'string') found.push(value);\n  else if (value && typeof value === 'object')\n    for (const item of Object.values(value)) leaves(item, found);\n}\n\nfunction replaced(value: unknown, texts: string[]): unknown {\n  if (typeof value === 'string') return texts.shift();\n  if (Array.isArray(value)) return value.map((item) => replaced(item, texts));\n  if (value && typeof value === 'object')\n    return Object.fromEntries(\n      Object.entries(value).map(([key, item]) => [key, replaced(item, texts)])\n    );\n  return value;\n}\n\nexport async function scrubbedArguments(\n  args: Record<string, unknown>\n): Promise<Record<string, unknown>> {\n  const found: string[] = [];\n  leaves(args, found);\n  return replaced(args, await scrubTexts(found)) as Record<string, unknown>;\n}\n\nexport async function argumentsHash(args: string): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(args));\n  return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, '0')).join('');\n}\n\nasync function shownArguments(text: string): Promise<string> {\n  try {\n    return canonical(await scrubbedArguments(JSON.parse(text)));\n  } catch {\n    return scrubText(text);\n  }\n}\n\nexport async function sealedRules(rules: readonly AlwaysTool[]): Promise<AlwaysTool[] | null> {\n  if (rules.every((rule) => rule.argumentsHash)) return null;\n  return Promise.all(\n    rules.map(async (rule) =>\n      rule.argumentsHash\n        ? rule\n        : {\n            ...rule,\n            argumentsHash: await argumentsHash(rule.arguments),\n            arguments: await shownArguments(rule.arguments),\n          }\n    )\n  );\n}\n\nexport function summaryOf(args: Record<string, unknown>): string {\n  const values = Object.values(args);\n  const text = values.length === 1 && typeof values[0] === 'string' ? values[0] : canonical(args);\n  return text.length > SUMMARY_LENGTH ? `${text.slice(0, SUMMARY_LENGTH - 1)}\u2026` : text;\n}\n\nconst SCOOP_SAID: Record<string, (name: string) => string> = {\n  [REASONS.noScoop]: (name) => `there is no scoop ${name} in this cone to review it.`,\n  [REASONS.scoopStopped]: (name) => `the scoop ${name} is stopped, so it can't review it.`,\n  [REASONS.scoopAsked]: (name) =>\n    `the scoop ${name} can't review a call that asks something of it.`,\n  [REASONS.scoopUndecided]: (name) => `the scoop ${name} ended its review without deciding.`,\n};\n\nfunction scoopReason(item: Approval): string | null {\n  const name = item.tier.slice('scoop:'.length);\n  if (item.decidedBy?.startsWith('scoop:'))\n    return `The scoop ${name} declined this tool call in a run a guest started${item.reason ? `: ${item.reason}` : '.'}`;\n  const said = SCOOP_SAID[item.reason ?? ''];\n  return said ? `A guest started this run, and ${said(name)}` : null;\n}\n\nexport function reasonOf(item: Approval): string {\n  const scooped = item.state === 'rejected' && scoopTier(item.tier) ? scoopReason(item) : null;\n  if (scooped) return scooped;\n  if (item.state === 'rejected' && item.decidedBy === 'judge')\n    return item.verdict\n      ? `${GATE_REASONS.judged}: ${item.verdict.reason}`\n      : `${GATE_REASONS.judged}.`;\n  if (item.state === 'rejected')\n    return item.reason && item.reason !== REASONS.unknownAnswer\n      ? `${GATE_REASONS.rejected} ${item.reason}`\n      : GATE_REASONS.rejected;\n  if (item.state === 'withdrawn') return GATE_REASONS.withdrawn;\n  if (item.reason === REASONS.unknownTier) return GATE_REASONS.unknown;\n  if (item.reason === REASONS.unroutable) return GATE_REASONS.unroutable;\n  return GATE_REASONS.unanswered;\n}\n\nexport type InheritedTaint = { seat: string | null; tier: string };\n\nexport const GuestTaintDoc = defineDoc<{ taints: InheritedTaint[] }>({\n  kind: 'slicc.guest-taint',\n  checkpointWhen: deltasOnly,\n  version: 1,\n  scope: 'conversation',\n  history: 'rewindable',\n  fork: 'asOf',\n  initial: () => ({ taints: [] }),\n});\n\nexport const LickTaintDoc = defineDoc<{ licks: Record<string, InheritedTaint[]> }>({\n  kind: 'slicc.lick-taint',\n  checkpointWhen: deltasOnly,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ licks: {} }),\n});\n\ntype TaintReader = Pick<Harness, 'submission' | 'snapshot'>;\n\nexport async function lickTaints(\n  inputs: readonly SubmissionId[],\n  licks: Readonly<Record<string, InheritedTaint[]>>,\n  harness: Pick<Harness, 'submission'>,\n  context: Context\n): Promise<InheritedTaint[]> {\n  if (!Object.keys(licks).length) return [];\n  const found: InheritedTaint[] = [];\n  for (const id of inputs) {\n    const record = await (await harness.submission(id, context))?.status(context);\n    const request = record?.requestId ?? '';\n    if (request.startsWith(LICK_REQUEST))\n      found.push(...(licks[request.slice(LICK_REQUEST.length)] ?? []));\n  }\n  return distinctTaints(found);\n}\n\nexport async function runTaints(\n  harness: TaintReader,\n  conversationId: ConversationId,\n  context: Context\n): Promise<InheritedTaint[]> {\n  const live = await harness.snapshot(LiveDoc, conversationId, context);\n  const inputs = live?.run?.inputs ?? [];\n  const inherited = (await harness.snapshot(GuestTaintDoc, conversationId, context))?.taints ?? [];\n  const seats = (await harness.snapshot(GuestsDoc, context))?.seats ?? {};\n  const found = inputs.length ? await taintsOf(inputs, seats, harness, context) : [];\n  const licks = (await harness.snapshot(LickTaintDoc, context))?.licks ?? {};\n  return distinctTaints([\n    ...found.map((taint) => ({ seat: taint.seat?.id ?? null, tier: taint.tier })),\n    ...inherited,\n    ...(await lickTaints(inputs, licks, harness, context)),\n  ]);\n}\n\nexport function distinctTaints(taints: readonly InheritedTaint[]): InheritedTaint[] {\n  const kept = new Map<string, InheritedTaint>();\n  for (const taint of taints) kept.set(`${taint.seat}\\n${taint.tier}`, taint);\n  return [...kept.values()];\n}\n\nfunction inheritedTaints(\n  inherited: readonly InheritedTaint[],\n  seats: Readonly<Record<string, SeatRecord>>\n): Taint[] {\n  return inherited.map((taint) => ({\n    seat: taint.seat === null ? null : (seats[taint.seat] ?? null),\n    tier: taint.tier,\n  }));\n}\n\nexport async function taintsOf(\n  inputs: readonly SubmissionId[],\n  seats: Readonly<Record<string, SeatRecord>>,\n  harness: Pick<Harness, 'submission'>,\n  context: Context\n): Promise<Taint[]> {\n  const found = new Map<string, Taint>();\n  for (const id of inputs) {\n    const seat = Object.values(seats).find((record) =>\n      record.submissions?.some((entry) => entry.id === String(id))\n    );\n    const tier = seat?.submissions?.find((entry) => entry.id === String(id))?.tools;\n    if (seat) {\n      found.set(`${seat.id}\\n${tier}`, { seat, tier: String(tier) });\n      continue;\n    }\n    const submission = await harness.submission(id, context);\n    const record = submission ? await submission.status(context) : undefined;\n    if (record?.requestId?.startsWith(GUEST_REQUEST)) return [{ seat: null, tier: '' }];\n  }\n  return [...found.values()];\n}\n\nfunction settledEarly(\n  seat: SeatRecord,\n  tier: string,\n  policy: GuestPolicy,\n  at: number,\n  tool: string,\n  hash: string\n): string | null {\n  if (!policy.allowedToolGates.includes(gateKind(tier)))\n    return gateRefusal(\"a guest's tool calls\", policy.allowedToolGates);\n  if (!liveSeat(seat, at)) return GATE_REASONS.ended;\n  if (tier === 'off') return '';\n  const kept = seat.alwaysTools?.some((rule) => rule.tool === tool && rule.argumentsHash === hash);\n  return policy.always.tools && kept ? '' : null;\n}\n\nconst ended = (status: string) => status === 'terminal' || status === 'completing';\n\nexport function guestToolGate(harness: () => Held | undefined): GuestToolGate {\n  let resolveHost: (host: GateHost) => void = () => {};\n  const bound = new Promise<GateHost>((resolve) => {\n    resolveHost = resolve;\n  });\n  const watched = new Set<string>();\n  const watch = (host: GateHost, id: string, task: number) => {\n    const held = harness();\n    if (!held || watched.has(id)) return;\n    watched.add(id);\n    void held\n      .waitForTask(task as unknown as TaskId, BACKGROUND_CONTEXT)\n      .then((record) =>\n        ended(record.state.status)\n          ? host.approvals.withdraw(id, REASONS.aborted, BACKGROUND_CONTEXT)\n          : undefined\n      )\n      .catch(() => undefined)\n      .finally(() => watched.delete(id));\n  };\n  const remember = (seat: string, rule: AlwaysTool) =>\n    (harness() as Held).commit(async (tx) => {\n      const record = (await tx.doc(GuestsDoc)).seats[seat];\n      if (!record || record.revoked !== null) return;\n      const kept = (record.alwaysTools ?? []).filter(\n        (entry) => entry.tool !== rule.tool || entry.argumentsHash !== rule.argumentsHash\n      );\n      record.alwaysTools = [...kept, rule];\n    }, BACKGROUND_CONTEXT);\n  const review = async (\n    taint: Taint,\n    call: ToolHookCall,\n    api: HookApi,\n    context: Context\n  ): Promise<string | undefined> => {\n    const { seat } = taint;\n    if (seat === null || !isGate(taint.tier)) return GATE_REASONS.unknown;\n    const host = await awaitWithContext(bound, context);\n    const policy = host.policy();\n    const now = host.now ?? Date.now;\n    const hash = await argumentsHash(canonical(call.arguments));\n    const always = policy.always.tools;\n    const early = settledEarly(seat, taint.tier, policy, now(), call.name, hash);\n    if (early !== null) return early || undefined;\n    const id = await api.memo<string>(\n      `${GUEST_TOOL_MEMO}:${seat.id}:${taint.tier}`,\n      `apr-${crypto.randomUUID()}`,\n      context\n    );\n    const task = Number(api.taskId);\n    const shown = await scrubbedArguments(call.arguments);\n    const asked = await host.approvals.request(\n      {\n        id,\n        kind: 'guest-tool',\n        seat: seat.id,\n        agentId: seat.agentId,\n        requester: { kind: 'guest', name: seat.label, seat: seat.id },\n        tier: taint.tier,\n        detail: {\n          tool: call.name,\n          summary: summaryOf(shown),\n          arguments: canonical(shown),\n          task,\n        },\n      },\n      BACKGROUND_CONTEXT\n    );\n    watch(host, id, task);\n    const live = async () =>\n      liveSeat((await api.snapshot(GuestsDoc, context))?.seats[seat.id], now());\n    if (!(await live())) {\n      await host.approvals.withdraw(id, REASONS.revoked, BACKGROUND_CONTEXT);\n      return GATE_REASONS.ended;\n    }\n    const item = asked.state === 'pending' ? await host.approvals.settled(id, context) : asked;\n    if (item.state !== 'approved') return reasonOf(item);\n    if (!(await live())) return GATE_REASONS.ended;\n    if (item.answer === 'always' && always)\n      await remember(seat.id, {\n        approval: item.id,\n        tool: call.name,\n        argumentsHash: hash,\n        arguments: canonical(shown),\n        by: item.decidedBy,\n        at: item.decidedAt ?? now(),\n      });\n    return undefined;\n  };\n  return {\n    extension: defineExtension({\n      name: GUEST_GUARD,\n      hooks: [\n        hook(ToolTask, {\n          async beforeTool(call, api, context) {\n            const live = await api.snapshot(LiveDoc, api.conversationId, context);\n            const inputs = live?.run?.inputs ?? [];\n            const inherited =\n              (await api.snapshot(GuestTaintDoc, api.conversationId, context))?.taints ?? [];\n            if (!inputs.length && !inherited.length) return undefined;\n            const seats = (await api.snapshot(GuestsDoc, context))?.seats ?? {};\n            const held = harness() as Held;\n            const found = inputs.length ? await taintsOf(inputs, seats, held, context) : [];\n            const licks = (await api.snapshot(LickTaintDoc, context))?.licks ?? {};\n            const licked = await lickTaints(inputs, licks, held, context);\n            for (const taint of [...found, ...inheritedTaints([...inherited, ...licked], seats)]) {\n              const block = await review(taint, call, api, context);\n              if (block) return { block };\n            }\n            return undefined;\n          },\n        }),\n      ],\n    }),\n    bind(host) {\n      resolveHost(host);\n      for (const item of host.approvals.state.value ?? [])\n        if (item.kind === 'guest-tool' && item.state === 'pending' && item.detail.task)\n          watch(host, item.id, item.detail.task);\n    },\n  };\n}\n"],
-  "mappings": "AACA,SAAS,kBAAkB,0BAA0B;AACrD;AAAA,EAEE;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,EAIA;AAAA,OACK;AAEP,SAAS,SAAS,iBAAiB;AACnC,SAAS,kBAAkB;AAC3B,SAAS,WAAW,kBAAkB;AACtC,SAA2B,UAAU,mBAAmB;AACxD,SAA0B,WAAW,QAAQ,gBAAiC;AAEvE,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,kBAAkB;AACxB,MAAM,iBAAiB;AAEvB,MAAM,eAAe;AAAA,EAC1B,SACE;AAAA,EACF,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,WAAW;AACb;AAiBO,SAAS,UAAU,OAAwB;AAChD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC;AACnE,MAAI,SAAS,OAAO,UAAU;AAC5B,WAAO,IAAI,OAAO,KAAK,KAAK,EACzB,KAAK,EACL,IAAI,CAAC,QAAQ,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,UAAW,MAAkC,GAAG,CAAC,CAAC,EAAE,EAC3F,KAAK,GAAG,CAAC;AACd,SAAO,KAAK,UAAU,SAAS,IAAI;AACrC;AAEA,SAAS,OAAO,OAAgB,OAAuB;AACrD,MAAI,OAAO,UAAU,SAAU,OAAM,KAAK,KAAK;AAAA,WACtC,SAAS,OAAO,UAAU;AACjC,eAAW,QAAQ,OAAO,OAAO,KAAK,EAAG,QAAO,MAAM,KAAK;AAC/D;AAEA,SAAS,SAAS,OAAgB,OAA0B;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,MAAM;AAClD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,SAAS,MAAM,KAAK,CAAC;AAC1E,MAAI,SAAS,OAAO,UAAU;AAC5B,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC;AAAA,IACzE;AACF,SAAO;AACT;AAEA,eAAsB,kBACpB,MACkC;AAClC,QAAM,QAAkB,CAAC;AACzB,SAAO,MAAM,KAAK;AAClB,SAAO,SAAS,MAAM,MAAM,WAAW,KAAK,CAAC;AAC/C;AAEA,eAAsB,cAAc,MAA+B;AACjE,QAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,EAAE,OAAO,IAAI,CAAC;AACnF,SAAO,CAAC,GAAG,IAAI,WAAW,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC9F;AAEA,eAAe,eAAe,MAA+B;AAC3D,MAAI;AACF,WAAO,UAAU,MAAM,kBAAkB,KAAK,MAAM,IAAI,CAAC,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,UAAU,IAAI;AAAA,EACvB;AACF;AAEA,eAAsB,YAAY,OAA4D;AAC5F,MAAI,MAAM,MAAM,CAAC,SAAS,KAAK,aAAa,EAAG,QAAO;AACtD,SAAO,QAAQ;AAAA,IACb,MAAM;AAAA,MAAI,OAAO,SACf,KAAK,gBACD,OACA;AAAA,QACE,GAAG;AAAA,QACH,eAAe,MAAM,cAAc,KAAK,SAAS;AAAA,QACjD,WAAW,MAAM,eAAe,KAAK,SAAS;AAAA,MAChD;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,UAAU,MAAuC;AAC/D,QAAM,SAAS,OAAO,OAAO,IAAI;AACjC,QAAM,OAAO,OAAO,WAAW,KAAK,OAAO,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,IAAI,UAAU,IAAI;AAC9F,SAAO,KAAK,SAAS,iBAAiB,GAAG,KAAK,MAAM,GAAG,iBAAiB,CAAC,CAAC,WAAM;AAClF;AAEA,MAAM,aAAuD;AAAA,EAC3D,CAAC,QAAQ,OAAO,GAAG,CAAC,SAAS,qBAAqB,IAAI;AAAA,EACtD,CAAC,QAAQ,YAAY,GAAG,CAAC,SAAS,aAAa,IAAI;AAAA,EACnD,CAAC,QAAQ,UAAU,GAAG,CAAC,SACrB,aAAa,IAAI;AAAA,EACnB,CAAC,QAAQ,cAAc,GAAG,CAAC,SAAS,aAAa,IAAI;AACvD;AAEA,SAAS,YAAY,MAA+B;AAClD,QAAM,OAAO,KAAK,KAAK,MAAM,SAAS,MAAM;AAC5C,MAAI,KAAK,WAAW,WAAW,QAAQ;AACrC,WAAO,aAAa,IAAI,oDAAoD,KAAK,SAAS,KAAK,KAAK,MAAM,KAAK,GAAG;AACpH,QAAM,OAAO,WAAW,KAAK,UAAU,EAAE;AACzC,SAAO,OAAO,iCAAiC,KAAK,IAAI,CAAC,KAAK;AAChE;AAEO,SAAS,SAAS,MAAwB;AAC/C,QAAM,UAAU,KAAK,UAAU,cAAc,UAAU,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI;AACxF,MAAI,QAAS,QAAO;AACpB,MAAI,KAAK,UAAU,cAAc,KAAK,cAAc;AAClD,WAAO,KAAK,UACR,GAAG,aAAa,MAAM,KAAK,KAAK,QAAQ,MAAM,KAC9C,GAAG,aAAa,MAAM;AAC5B,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK,UAAU,KAAK,WAAW,QAAQ,gBAC1C,GAAG,aAAa,QAAQ,IAAI,KAAK,MAAM,KACvC,aAAa;AACnB,MAAI,KAAK,UAAU,YAAa,QAAO,aAAa;AACpD,MAAI,KAAK,WAAW,QAAQ,YAAa,QAAO,aAAa;AAC7D,MAAI,KAAK,WAAW,QAAQ,WAAY,QAAO,aAAa;AAC5D,SAAO,aAAa;AACtB;AAIO,MAAM,gBAAgB,UAAwC;AAAA,EACnE,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS,OAAO,EAAE,QAAQ,CAAC,EAAE;AAC/B,CAAC;AAEM,MAAM,eAAe,UAAuD;AAAA,EACjF,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAID,eAAsB,WACpB,QACA,OACA,SACA,SAC2B;AAC3B,MAAI,CAAC,OAAO,KAAK,KAAK,EAAE,OAAQ,QAAO,CAAC;AACxC,QAAM,QAA0B,CAAC;AACjC,aAAW,MAAM,QAAQ;AACvB,UAAM,SAAS,OAAO,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,OAAO,OAAO;AAC5E,UAAM,UAAU,QAAQ,aAAa;AACrC,QAAI,QAAQ,WAAW,YAAY;AACjC,YAAM,KAAK,GAAI,MAAM,QAAQ,MAAM,aAAa,MAAM,CAAC,KAAK,CAAC,CAAE;AAAA,EACnE;AACA,SAAO,eAAe,KAAK;AAC7B;AAEA,eAAsB,UACpB,SACA,gBACA,SAC2B;AAC3B,QAAM,OAAO,MAAM,QAAQ,SAAS,SAAS,gBAAgB,OAAO;AACpE,QAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,QAAM,aAAa,MAAM,QAAQ,SAAS,eAAe,gBAAgB,OAAO,IAAI,UAAU,CAAC;AAC/F,QAAM,SAAS,MAAM,QAAQ,SAAS,WAAW,OAAO,IAAI,SAAS,CAAC;AACtE,QAAM,QAAQ,OAAO,SAAS,MAAM,SAAS,QAAQ,OAAO,SAAS,OAAO,IAAI,CAAC;AACjF,QAAM,SAAS,MAAM,QAAQ,SAAS,cAAc,OAAO,IAAI,SAAS,CAAC;AACzE,SAAO,eAAe;AAAA,IACpB,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE;AAAA,IAC5E,GAAG;AAAA,IACH,GAAI,MAAM,WAAW,QAAQ,OAAO,SAAS,OAAO;AAAA,EACtD,CAAC;AACH;AAEO,SAAS,eAAe,QAAqD;AAClF,QAAM,OAAO,oBAAI,IAA4B;AAC7C,aAAW,SAAS,OAAQ,MAAK,IAAI,GAAG,MAAM,IAAI;AAAA,EAAK,MAAM,IAAI,IAAI,KAAK;AAC1E,SAAO,CAAC,GAAG,KAAK,OAAO,CAAC;AAC1B;AAEA,SAAS,gBACP,WACA,OACS;AACT,SAAO,UAAU,IAAI,CAAC,WAAW;AAAA,IAC/B,MAAM,MAAM,SAAS,OAAO,OAAQ,MAAM,MAAM,IAAI,KAAK;AAAA,IACzD,MAAM,MAAM;AAAA,EACd,EAAE;AACJ;AAEA,eAAsB,SACpB,QACA,OACA,SACA,SACkB;AAClB,QAAM,QAAQ,oBAAI,IAAmB;AACrC,aAAW,MAAM,QAAQ;AACvB,UAAM,OAAO,OAAO,OAAO,KAAK,EAAE;AAAA,MAAK,CAACA,YACtCA,QAAO,aAAa,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO,EAAE,CAAC;AAAA,IAC7D;AACA,UAAM,OAAO,MAAM,aAAa,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO,EAAE,CAAC,GAAG;AAC1E,QAAI,MAAM;AACR,YAAM,IAAI,GAAG,KAAK,EAAE;AAAA,EAAK,IAAI,IAAI,EAAE,MAAM,MAAM,OAAO,IAAI,EAAE,CAAC;AAC7D;AAAA,IACF;AACA,UAAM,aAAa,MAAM,QAAQ,WAAW,IAAI,OAAO;AACvD,UAAM,SAAS,aAAa,MAAM,WAAW,OAAO,OAAO,IAAI;AAC/D,QAAI,QAAQ,WAAW,WAAW,aAAa,EAAG,QAAO,CAAC,EAAE,MAAM,MAAM,MAAM,GAAG,CAAC;AAAA,EACpF;AACA,SAAO,CAAC,GAAG,MAAM,OAAO,CAAC;AAC3B;AAEA,SAAS,aACP,MACA,MACA,QACA,IACA,MACA,MACe;AACf,MAAI,CAAC,OAAO,iBAAiB,SAAS,SAAS,IAAI,CAAC;AAClD,WAAO,YAAY,wBAAwB,OAAO,gBAAgB;AACpE,MAAI,CAAC,SAAS,MAAM,EAAE,EAAG,QAAO,aAAa;AAC7C,MAAI,SAAS,MAAO,QAAO;AAC3B,QAAM,OAAO,KAAK,aAAa,KAAK,CAAC,SAAS,KAAK,SAAS,QAAQ,KAAK,kBAAkB,IAAI;AAC/F,SAAO,OAAO,OAAO,SAAS,OAAO,KAAK;AAC5C;AAEA,MAAM,QAAQ,CAAC,WAAmB,WAAW,cAAc,WAAW;AAE/D,SAAS,cAAc,SAAgD;AAC5E,MAAI,cAAwC,MAAM;AAAA,EAAC;AACnD,QAAM,QAAQ,IAAI,QAAkB,CAAC,YAAY;AAC/C,kBAAc;AAAA,EAChB,CAAC;AACD,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,QAAQ,CAAC,MAAgB,IAAY,SAAiB;AAC1D,UAAM,OAAO,QAAQ;AACrB,QAAI,CAAC,QAAQ,QAAQ,IAAI,EAAE,EAAG;AAC9B,YAAQ,IAAI,EAAE;AACd,SAAK,KACF,YAAY,MAA2B,kBAAkB,EACzD;AAAA,MAAK,CAAC,WACL,MAAM,OAAO,MAAM,MAAM,IACrB,KAAK,UAAU,SAAS,IAAI,QAAQ,SAAS,kBAAkB,IAC/D;AAAA,IACN,EACC,MAAM,MAAM,MAAS,EACrB,QAAQ,MAAM,QAAQ,OAAO,EAAE,CAAC;AAAA,EACrC;AACA,QAAM,WAAW,CAAC,MAAc,SAC7B,QAAQ,EAAW,OAAO,OAAO,OAAO;AACvC,UAAM,UAAU,MAAM,GAAG,IAAI,SAAS,GAAG,MAAM,IAAI;AACnD,QAAI,CAAC,UAAU,OAAO,YAAY,KAAM;AACxC,UAAM,QAAQ,OAAO,eAAe,CAAC,GAAG;AAAA,MACtC,CAAC,UAAU,MAAM,SAAS,KAAK,QAAQ,MAAM,kBAAkB,KAAK;AAAA,IACtE;AACA,WAAO,cAAc,CAAC,GAAG,MAAM,IAAI;AAAA,EACrC,GAAG,kBAAkB;AACvB,QAAM,SAAS,OACb,OACA,MACA,KACA,YACgC;AAChC,UAAM,EAAE,KAAK,IAAI;AACjB,QAAI,SAAS,QAAQ,CAAC,OAAO,MAAM,IAAI,EAAG,QAAO,aAAa;AAC9D,UAAM,OAAO,MAAM,iBAAiB,OAAO,OAAO;AAClD,UAAM,SAAS,KAAK,OAAO;AAC3B,UAAM,MAAM,KAAK,OAAO,KAAK;AAC7B,UAAM,OAAO,MAAM,cAAc,UAAU,KAAK,SAAS,CAAC;AAC1D,UAAM,SAAS,OAAO,OAAO;AAC7B,UAAM,QAAQ,aAAa,MAAM,MAAM,MAAM,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI;AAC3E,QAAI,UAAU,KAAM,QAAO,SAAS;AACpC,UAAM,KAAK,MAAM,IAAI;AAAA,MACnB,GAAG,eAAe,IAAI,KAAK,EAAE,IAAI,MAAM,IAAI;AAAA,MAC3C,OAAO,OAAO,WAAW,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,UAAM,QAAQ,MAAM,kBAAkB,KAAK,SAAS;AACpD,UAAM,QAAQ,MAAM,KAAK,UAAU;AAAA,MACjC;AAAA,QACE;AAAA,QACA,MAAM;AAAA,QACN,MAAM,KAAK;AAAA,QACX,SAAS,KAAK;AAAA,QACd,WAAW,EAAE,MAAM,SAAS,MAAM,KAAK,OAAO,MAAM,KAAK,GAAG;AAAA,QAC5D,MAAM,MAAM;AAAA,QACZ,QAAQ;AAAA,UACN,MAAM,KAAK;AAAA,UACX,SAAS,UAAU,KAAK;AAAA,UACxB,WAAW,UAAU,KAAK;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,MACA;AAAA,IACF;AACA,UAAM,MAAM,IAAI,IAAI;AACpB,UAAM,OAAO,YACX,UAAU,MAAM,IAAI,SAAS,WAAW,OAAO,IAAI,MAAM,KAAK,EAAE,GAAG,IAAI,CAAC;AAC1E,QAAI,CAAE,MAAM,KAAK,GAAI;AACnB,YAAM,KAAK,UAAU,SAAS,IAAI,QAAQ,SAAS,kBAAkB;AACrE,aAAO,aAAa;AAAA,IACtB;AACA,UAAM,OAAO,MAAM,UAAU,YAAY,MAAM,KAAK,UAAU,QAAQ,IAAI,OAAO,IAAI;AACrF,QAAI,KAAK,UAAU,WAAY,QAAO,SAAS,IAAI;AACnD,QAAI,CAAE,MAAM,KAAK,EAAI,QAAO,aAAa;AACzC,QAAI,KAAK,WAAW,YAAY;AAC9B,YAAM,SAAS,KAAK,IAAI;AAAA,QACtB,UAAU,KAAK;AAAA,QACf,MAAM,KAAK;AAAA,QACX,eAAe;AAAA,QACf,WAAW,UAAU,KAAK;AAAA,QAC1B,IAAI,KAAK;AAAA,QACT,IAAI,KAAK,aAAa,IAAI;AAAA,MAC5B,CAAC;AACH,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,gBAAgB;AAAA,MACzB,MAAM;AAAA,MACN,OAAO;AAAA,QACL,KAAK,UAAU;AAAA,UACb,MAAM,WAAW,MAAM,KAAK,SAAS;AACnC,kBAAM,OAAO,MAAM,IAAI,SAAS,SAAS,IAAI,gBAAgB,OAAO;AACpE,kBAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,kBAAM,aACH,MAAM,IAAI,SAAS,eAAe,IAAI,gBAAgB,OAAO,IAAI,UAAU,CAAC;AAC/E,gBAAI,CAAC,OAAO,UAAU,CAAC,UAAU,OAAQ,QAAO;AAChD,kBAAM,SAAS,MAAM,IAAI,SAAS,WAAW,OAAO,IAAI,SAAS,CAAC;AAClE,kBAAM,OAAO,QAAQ;AACrB,kBAAM,QAAQ,OAAO,SAAS,MAAM,SAAS,QAAQ,OAAO,MAAM,OAAO,IAAI,CAAC;AAC9E,kBAAM,SAAS,MAAM,IAAI,SAAS,cAAc,OAAO,IAAI,SAAS,CAAC;AACrE,kBAAM,SAAS,MAAM,WAAW,QAAQ,OAAO,MAAM,OAAO;AAC5D,uBAAW,SAAS,CAAC,GAAG,OAAO,GAAG,gBAAgB,CAAC,GAAG,WAAW,GAAG,MAAM,GAAG,KAAK,CAAC,GAAG;AACpF,oBAAM,QAAQ,MAAM,OAAO,OAAO,MAAM,KAAK,OAAO;AACpD,kBAAI,MAAO,QAAO,EAAE,MAAM;AAAA,YAC5B;AACA,mBAAO;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,IACD,KAAK,MAAM;AACT,kBAAY,IAAI;AAChB,iBAAW,QAAQ,KAAK,UAAU,MAAM,SAAS,CAAC;AAChD,YAAI,KAAK,SAAS,gBAAgB,KAAK,UAAU,aAAa,KAAK,OAAO;AACxE,gBAAM,MAAM,KAAK,IAAI,KAAK,OAAO,IAAI;AAAA,IAC3C;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { Context } from '@earendil-works/chord';\nimport { awaitWithContext, BACKGROUND_CONTEXT } from '@earendil-works/chord/context';\nimport {\n  type ConversationId,\n  defineDoc,\n  defineExtension,\n  type Extension,\n  type Harness,\n  type HookApi,\n  hook,\n  LiveDoc,\n  type SubmissionId,\n  type TaskId,\n  type ToolHookCall,\n  ToolTask,\n} from '@earendil-works/pi-durable';\nimport type { Approval, Approvals } from '../approvals/index.ts';\nimport { REASONS, scoopTier } from '../approvals/record.ts';\nimport { boundedDeltas } from '../checkpoints.ts';\nimport { scrubText, scrubTexts } from '../secrets/scrub.ts';\nimport { type GuestPolicy, gateKind, gateRefusal } from './policy.ts';\nimport { type AlwaysTool, GuestsDoc, isGate, liveSeat, type SeatRecord } from './seats.ts';\n\nexport const GUEST_GUARD = 'slicc-guest-guard';\nexport const GUEST_REQUEST = 'guest:';\nexport const LICK_REQUEST = 'lick:';\nexport const GUEST_TOOL_MEMO = 'slicc.guest-tool';\nexport const SUMMARY_LENGTH = 2000;\n\nexport const GATE_REASONS = {\n  unknown:\n    'A guest started this run, and its seat names no review for tool calls that this agent knows.',\n  ended: \"A guest started this run, and that guest's seat has ended.\",\n  rejected: 'The owner declined this tool call in a run a guest started.',\n  judged: 'The automatic check declined this tool call in a run a guest started',\n  unanswered: 'Nobody approved this tool call in a run a guest started in time.',\n  unroutable: \"The cone can't review a tool call it is itself waiting on.\",\n  withdrawn: 'The review of this tool call was withdrawn.',\n} as const;\n\nexport interface GateHost {\n  approvals: Pick<Approvals, 'state' | 'request' | 'settled' | 'withdraw'>;\n  policy(): GuestPolicy;\n  now?: () => number;\n}\n\nexport interface GuestToolGate {\n  readonly extension: Extension;\n  bind(host: GateHost): void;\n}\n\ntype Held = Pick<Harness, 'submission' | 'commit' | 'waitForTask'>;\n\ntype Taint = { seat: SeatRecord | null; tier: string };\n\nexport function canonical(value: unknown): string {\n  if (Array.isArray(value)) return `[${value.map(canonical).join(',')}]`;\n  if (value && typeof value === 'object')\n    return `{${Object.keys(value)\n      .sort()\n      .map((key) => `${JSON.stringify(key)}:${canonical((value as Record<string, unknown>)[key])}`)\n      .join(',')}}`;\n  return JSON.stringify(value ?? null);\n}\n\nfunction leaves(value: unknown, found: string[]): void {\n  if (typeof value === 'string') found.push(value);\n  else if (value && typeof value === 'object')\n    for (const item of Object.values(value)) leaves(item, found);\n}\n\nfunction replaced(value: unknown, texts: string[]): unknown {\n  if (typeof value === 'string') return texts.shift();\n  if (Array.isArray(value)) return value.map((item) => replaced(item, texts));\n  if (value && typeof value === 'object')\n    return Object.fromEntries(\n      Object.entries(value).map(([key, item]) => [key, replaced(item, texts)])\n    );\n  return value;\n}\n\nexport async function scrubbedArguments(\n  args: Record<string, unknown>\n): Promise<Record<string, unknown>> {\n  const found: string[] = [];\n  leaves(args, found);\n  return replaced(args, await scrubTexts(found)) as Record<string, unknown>;\n}\n\nexport async function argumentsHash(args: string): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(args));\n  return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, '0')).join('');\n}\n\nasync function shownArguments(text: string): Promise<string> {\n  try {\n    return canonical(await scrubbedArguments(JSON.parse(text)));\n  } catch {\n    return scrubText(text);\n  }\n}\n\nexport async function sealedRules(rules: readonly AlwaysTool[]): Promise<AlwaysTool[] | null> {\n  if (rules.every((rule) => rule.argumentsHash)) return null;\n  return Promise.all(\n    rules.map(async (rule) =>\n      rule.argumentsHash\n        ? rule\n        : {\n            ...rule,\n            argumentsHash: await argumentsHash(rule.arguments),\n            arguments: await shownArguments(rule.arguments),\n          }\n    )\n  );\n}\n\nexport function summaryOf(args: Record<string, unknown>): string {\n  const values = Object.values(args);\n  const text = values.length === 1 && typeof values[0] === 'string' ? values[0] : canonical(args);\n  return text.length > SUMMARY_LENGTH ? `${text.slice(0, SUMMARY_LENGTH - 1)}\u2026` : text;\n}\n\nconst SCOOP_SAID: Record<string, (name: string) => string> = {\n  [REASONS.noScoop]: (name) => `there is no scoop ${name} in this cone to review it.`,\n  [REASONS.scoopStopped]: (name) => `the scoop ${name} is stopped, so it can't review it.`,\n  [REASONS.scoopAsked]: (name) =>\n    `the scoop ${name} can't review a call that asks something of it.`,\n  [REASONS.scoopUndecided]: (name) => `the scoop ${name} ended its review without deciding.`,\n};\n\nfunction scoopReason(item: Approval): string | null {\n  const name = item.tier.slice('scoop:'.length);\n  if (item.decidedBy?.startsWith('scoop:'))\n    return `The scoop ${name} declined this tool call in a run a guest started${item.reason ? `: ${item.reason}` : '.'}`;\n  const said = SCOOP_SAID[item.reason ?? ''];\n  return said ? `A guest started this run, and ${said(name)}` : null;\n}\n\nexport function reasonOf(item: Approval): string {\n  const scooped = item.state === 'rejected' && scoopTier(item.tier) ? scoopReason(item) : null;\n  if (scooped) return scooped;\n  if (item.state === 'rejected' && item.decidedBy === 'judge')\n    return item.verdict\n      ? `${GATE_REASONS.judged}: ${item.verdict.reason}`\n      : `${GATE_REASONS.judged}.`;\n  if (item.state === 'rejected')\n    return item.reason && item.reason !== REASONS.unknownAnswer\n      ? `${GATE_REASONS.rejected} ${item.reason}`\n      : GATE_REASONS.rejected;\n  if (item.state === 'withdrawn') return GATE_REASONS.withdrawn;\n  if (item.reason === REASONS.unknownTier) return GATE_REASONS.unknown;\n  if (item.reason === REASONS.unroutable) return GATE_REASONS.unroutable;\n  return GATE_REASONS.unanswered;\n}\n\nexport type InheritedTaint = { seat: string | null; tier: string };\n\nexport const GuestTaintDoc = defineDoc<{ taints: InheritedTaint[] }>({\n  kind: 'slicc.guest-taint',\n  checkpointWhen: boundedDeltas,\n  version: 1,\n  scope: 'conversation',\n  history: 'rewindable',\n  fork: 'asOf',\n  initial: () => ({ taints: [] }),\n});\n\nexport const LickTaintDoc = defineDoc<{ licks: Record<string, InheritedTaint[]> }>({\n  kind: 'slicc.lick-taint',\n  checkpointWhen: boundedDeltas,\n  version: 1,\n  scope: 'session',\n  initial: () => ({ licks: {} }),\n});\n\ntype TaintReader = Pick<Harness, 'submission' | 'snapshot'>;\n\nexport async function lickTaints(\n  inputs: readonly SubmissionId[],\n  licks: Readonly<Record<string, InheritedTaint[]>>,\n  harness: Pick<Harness, 'submission'>,\n  context: Context\n): Promise<InheritedTaint[]> {\n  if (!Object.keys(licks).length) return [];\n  const found: InheritedTaint[] = [];\n  for (const id of inputs) {\n    const record = await (await harness.submission(id, context))?.status(context);\n    const request = record?.requestId ?? '';\n    if (request.startsWith(LICK_REQUEST))\n      found.push(...(licks[request.slice(LICK_REQUEST.length)] ?? []));\n  }\n  return distinctTaints(found);\n}\n\nexport async function runTaints(\n  harness: TaintReader,\n  conversationId: ConversationId,\n  context: Context\n): Promise<InheritedTaint[]> {\n  const live = await harness.snapshot(LiveDoc, conversationId, context);\n  const inputs = live?.run?.inputs ?? [];\n  const inherited = (await harness.snapshot(GuestTaintDoc, conversationId, context))?.taints ?? [];\n  const seats = (await harness.snapshot(GuestsDoc, context))?.seats ?? {};\n  const found = inputs.length ? await taintsOf(inputs, seats, harness, context) : [];\n  const licks = (await harness.snapshot(LickTaintDoc, context))?.licks ?? {};\n  return distinctTaints([\n    ...found.map((taint) => ({ seat: taint.seat?.id ?? null, tier: taint.tier })),\n    ...inherited,\n    ...(await lickTaints(inputs, licks, harness, context)),\n  ]);\n}\n\nexport function distinctTaints(taints: readonly InheritedTaint[]): InheritedTaint[] {\n  const kept = new Map<string, InheritedTaint>();\n  for (const taint of taints) kept.set(`${taint.seat}\\n${taint.tier}`, taint);\n  return [...kept.values()];\n}\n\nfunction inheritedTaints(\n  inherited: readonly InheritedTaint[],\n  seats: Readonly<Record<string, SeatRecord>>\n): Taint[] {\n  return inherited.map((taint) => ({\n    seat: taint.seat === null ? null : (seats[taint.seat] ?? null),\n    tier: taint.tier,\n  }));\n}\n\nexport async function taintsOf(\n  inputs: readonly SubmissionId[],\n  seats: Readonly<Record<string, SeatRecord>>,\n  harness: Pick<Harness, 'submission'>,\n  context: Context\n): Promise<Taint[]> {\n  const found = new Map<string, Taint>();\n  for (const id of inputs) {\n    const seat = Object.values(seats).find((record) =>\n      record.submissions?.some((entry) => entry.id === String(id))\n    );\n    const tier = seat?.submissions?.find((entry) => entry.id === String(id))?.tools;\n    if (seat) {\n      found.set(`${seat.id}\\n${tier}`, { seat, tier: String(tier) });\n      continue;\n    }\n    const submission = await harness.submission(id, context);\n    const record = submission ? await submission.status(context) : undefined;\n    if (record?.requestId?.startsWith(GUEST_REQUEST)) return [{ seat: null, tier: '' }];\n  }\n  return [...found.values()];\n}\n\nfunction settledEarly(\n  seat: SeatRecord,\n  tier: string,\n  policy: GuestPolicy,\n  at: number,\n  tool: string,\n  hash: string\n): string | null {\n  if (!policy.allowedToolGates.includes(gateKind(tier)))\n    return gateRefusal(\"a guest's tool calls\", policy.allowedToolGates);\n  if (!liveSeat(seat, at)) return GATE_REASONS.ended;\n  if (tier === 'off') return '';\n  const kept = seat.alwaysTools?.some((rule) => rule.tool === tool && rule.argumentsHash === hash);\n  return policy.always.tools && kept ? '' : null;\n}\n\nconst ended = (status: string) => status === 'terminal' || status === 'completing';\n\nexport function guestToolGate(harness: () => Held | undefined): GuestToolGate {\n  let resolveHost: (host: GateHost) => void = () => {};\n  const bound = new Promise<GateHost>((resolve) => {\n    resolveHost = resolve;\n  });\n  const watched = new Set<string>();\n  const watch = (host: GateHost, id: string, task: number) => {\n    const held = harness();\n    if (!held || watched.has(id)) return;\n    watched.add(id);\n    void held\n      .waitForTask(task as unknown as TaskId, BACKGROUND_CONTEXT)\n      .then((record) =>\n        ended(record.state.status)\n          ? host.approvals.withdraw(id, REASONS.aborted, BACKGROUND_CONTEXT)\n          : undefined\n      )\n      .catch(() => undefined)\n      .finally(() => watched.delete(id));\n  };\n  const remember = (seat: string, rule: AlwaysTool) =>\n    (harness() as Held).commit(async (tx) => {\n      const record = (await tx.doc(GuestsDoc)).seats[seat];\n      if (!record || record.revoked !== null) return;\n      const kept = (record.alwaysTools ?? []).filter(\n        (entry) => entry.tool !== rule.tool || entry.argumentsHash !== rule.argumentsHash\n      );\n      record.alwaysTools = [...kept, rule];\n    }, BACKGROUND_CONTEXT);\n  const review = async (\n    taint: Taint,\n    call: ToolHookCall,\n    api: HookApi,\n    context: Context\n  ): Promise<string | undefined> => {\n    const { seat } = taint;\n    if (seat === null || !isGate(taint.tier)) return GATE_REASONS.unknown;\n    const host = await awaitWithContext(bound, context);\n    const policy = host.policy();\n    const now = host.now ?? Date.now;\n    const hash = await argumentsHash(canonical(call.arguments));\n    const always = policy.always.tools;\n    const early = settledEarly(seat, taint.tier, policy, now(), call.name, hash);\n    if (early !== null) return early || undefined;\n    const id = await api.memo<string>(\n      `${GUEST_TOOL_MEMO}:${seat.id}:${taint.tier}`,\n      `apr-${crypto.randomUUID()}`,\n      context\n    );\n    const task = Number(api.taskId);\n    const shown = await scrubbedArguments(call.arguments);\n    const asked = await host.approvals.request(\n      {\n        id,\n        kind: 'guest-tool',\n        seat: seat.id,\n        agentId: seat.agentId,\n        requester: { kind: 'guest', name: seat.label, seat: seat.id },\n        tier: taint.tier,\n        detail: {\n          tool: call.name,\n          summary: summaryOf(shown),\n          arguments: canonical(shown),\n          task,\n        },\n      },\n      BACKGROUND_CONTEXT\n    );\n    watch(host, id, task);\n    const live = async () =>\n      liveSeat((await api.snapshot(GuestsDoc, context))?.seats[seat.id], now());\n    if (!(await live())) {\n      await host.approvals.withdraw(id, REASONS.revoked, BACKGROUND_CONTEXT);\n      return GATE_REASONS.ended;\n    }\n    const item = asked.state === 'pending' ? await host.approvals.settled(id, context) : asked;\n    if (item.state !== 'approved') return reasonOf(item);\n    if (!(await live())) return GATE_REASONS.ended;\n    if (item.answer === 'always' && always)\n      await remember(seat.id, {\n        approval: item.id,\n        tool: call.name,\n        argumentsHash: hash,\n        arguments: canonical(shown),\n        by: item.decidedBy,\n        at: item.decidedAt ?? now(),\n      });\n    return undefined;\n  };\n  return {\n    extension: defineExtension({\n      name: GUEST_GUARD,\n      hooks: [\n        hook(ToolTask, {\n          async beforeTool(call, api, context) {\n            const live = await api.snapshot(LiveDoc, api.conversationId, context);\n            const inputs = live?.run?.inputs ?? [];\n            const inherited =\n              (await api.snapshot(GuestTaintDoc, api.conversationId, context))?.taints ?? [];\n            if (!inputs.length && !inherited.length) return undefined;\n            const seats = (await api.snapshot(GuestsDoc, context))?.seats ?? {};\n            const held = harness() as Held;\n            const found = inputs.length ? await taintsOf(inputs, seats, held, context) : [];\n            const licks = (await api.snapshot(LickTaintDoc, context))?.licks ?? {};\n            const licked = await lickTaints(inputs, licks, held, context);\n            for (const taint of [...found, ...inheritedTaints([...inherited, ...licked], seats)]) {\n              const block = await review(taint, call, api, context);\n              if (block) return { block };\n            }\n            return undefined;\n          },\n        }),\n      ],\n    }),\n    bind(host) {\n      resolveHost(host);\n      for (const item of host.approvals.state.value ?? [])\n        if (item.kind === 'guest-tool' && item.state === 'pending' && item.detail.task)\n          watch(host, item.id, item.detail.task);\n    },\n  };\n}\n"],
+  "mappings": "AACA,SAAS,kBAAkB,0BAA0B;AACrD;AAAA,EAEE;AAAA,EACA;AAAA,EAIA;AAAA,EACA;AAAA,EAIA;AAAA,OACK;AAEP,SAAS,SAAS,iBAAiB;AACnC,SAAS,qBAAqB;AAC9B,SAAS,WAAW,kBAAkB;AACtC,SAA2B,UAAU,mBAAmB;AACxD,SAA0B,WAAW,QAAQ,gBAAiC;AAEvE,MAAM,cAAc;AACpB,MAAM,gBAAgB;AACtB,MAAM,eAAe;AACrB,MAAM,kBAAkB;AACxB,MAAM,iBAAiB;AAEvB,MAAM,eAAe;AAAA,EAC1B,SACE;AAAA,EACF,OAAO;AAAA,EACP,UAAU;AAAA,EACV,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,WAAW;AACb;AAiBO,SAAS,UAAU,OAAwB;AAChD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,IAAI,MAAM,IAAI,SAAS,EAAE,KAAK,GAAG,CAAC;AACnE,MAAI,SAAS,OAAO,UAAU;AAC5B,WAAO,IAAI,OAAO,KAAK,KAAK,EACzB,KAAK,EACL,IAAI,CAAC,QAAQ,GAAG,KAAK,UAAU,GAAG,CAAC,IAAI,UAAW,MAAkC,GAAG,CAAC,CAAC,EAAE,EAC3F,KAAK,GAAG,CAAC;AACd,SAAO,KAAK,UAAU,SAAS,IAAI;AACrC;AAEA,SAAS,OAAO,OAAgB,OAAuB;AACrD,MAAI,OAAO,UAAU,SAAU,OAAM,KAAK,KAAK;AAAA,WACtC,SAAS,OAAO,UAAU;AACjC,eAAW,QAAQ,OAAO,OAAO,KAAK,EAAG,QAAO,MAAM,KAAK;AAC/D;AAEA,SAAS,SAAS,OAAgB,OAA0B;AAC1D,MAAI,OAAO,UAAU,SAAU,QAAO,MAAM,MAAM;AAClD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,SAAS,MAAM,KAAK,CAAC;AAC1E,MAAI,SAAS,OAAO,UAAU;AAC5B,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,SAAS,MAAM,KAAK,CAAC,CAAC;AAAA,IACzE;AACF,SAAO;AACT;AAEA,eAAsB,kBACpB,MACkC;AAClC,QAAM,QAAkB,CAAC;AACzB,SAAO,MAAM,KAAK;AAClB,SAAO,SAAS,MAAM,MAAM,WAAW,KAAK,CAAC;AAC/C;AAEA,eAAsB,cAAc,MAA+B;AACjE,QAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI,YAAY,EAAE,OAAO,IAAI,CAAC;AACnF,SAAO,CAAC,GAAG,IAAI,WAAW,MAAM,CAAC,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAC9F;AAEA,eAAe,eAAe,MAA+B;AAC3D,MAAI;AACF,WAAO,UAAU,MAAM,kBAAkB,KAAK,MAAM,IAAI,CAAC,CAAC;AAAA,EAC5D,QAAQ;AACN,WAAO,UAAU,IAAI;AAAA,EACvB;AACF;AAEA,eAAsB,YAAY,OAA4D;AAC5F,MAAI,MAAM,MAAM,CAAC,SAAS,KAAK,aAAa,EAAG,QAAO;AACtD,SAAO,QAAQ;AAAA,IACb,MAAM;AAAA,MAAI,OAAO,SACf,KAAK,gBACD,OACA;AAAA,QACE,GAAG;AAAA,QACH,eAAe,MAAM,cAAc,KAAK,SAAS;AAAA,QACjD,WAAW,MAAM,eAAe,KAAK,SAAS;AAAA,MAChD;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,UAAU,MAAuC;AAC/D,QAAM,SAAS,OAAO,OAAO,IAAI;AACjC,QAAM,OAAO,OAAO,WAAW,KAAK,OAAO,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,IAAI,UAAU,IAAI;AAC9F,SAAO,KAAK,SAAS,iBAAiB,GAAG,KAAK,MAAM,GAAG,iBAAiB,CAAC,CAAC,WAAM;AAClF;AAEA,MAAM,aAAuD;AAAA,EAC3D,CAAC,QAAQ,OAAO,GAAG,CAAC,SAAS,qBAAqB,IAAI;AAAA,EACtD,CAAC,QAAQ,YAAY,GAAG,CAAC,SAAS,aAAa,IAAI;AAAA,EACnD,CAAC,QAAQ,UAAU,GAAG,CAAC,SACrB,aAAa,IAAI;AAAA,EACnB,CAAC,QAAQ,cAAc,GAAG,CAAC,SAAS,aAAa,IAAI;AACvD;AAEA,SAAS,YAAY,MAA+B;AAClD,QAAM,OAAO,KAAK,KAAK,MAAM,SAAS,MAAM;AAC5C,MAAI,KAAK,WAAW,WAAW,QAAQ;AACrC,WAAO,aAAa,IAAI,oDAAoD,KAAK,SAAS,KAAK,KAAK,MAAM,KAAK,GAAG;AACpH,QAAM,OAAO,WAAW,KAAK,UAAU,EAAE;AACzC,SAAO,OAAO,iCAAiC,KAAK,IAAI,CAAC,KAAK;AAChE;AAEO,SAAS,SAAS,MAAwB;AAC/C,QAAM,UAAU,KAAK,UAAU,cAAc,UAAU,KAAK,IAAI,IAAI,YAAY,IAAI,IAAI;AACxF,MAAI,QAAS,QAAO;AACpB,MAAI,KAAK,UAAU,cAAc,KAAK,cAAc;AAClD,WAAO,KAAK,UACR,GAAG,aAAa,MAAM,KAAK,KAAK,QAAQ,MAAM,KAC9C,GAAG,aAAa,MAAM;AAC5B,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK,UAAU,KAAK,WAAW,QAAQ,gBAC1C,GAAG,aAAa,QAAQ,IAAI,KAAK,MAAM,KACvC,aAAa;AACnB,MAAI,KAAK,UAAU,YAAa,QAAO,aAAa;AACpD,MAAI,KAAK,WAAW,QAAQ,YAAa,QAAO,aAAa;AAC7D,MAAI,KAAK,WAAW,QAAQ,WAAY,QAAO,aAAa;AAC5D,SAAO,aAAa;AACtB;AAIO,MAAM,gBAAgB,UAAwC;AAAA,EACnE,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS;AAAA,EACT,MAAM;AAAA,EACN,SAAS,OAAO,EAAE,QAAQ,CAAC,EAAE;AAC/B,CAAC;AAEM,MAAM,eAAe,UAAuD;AAAA,EACjF,MAAM;AAAA,EACN,gBAAgB;AAAA,EAChB,SAAS;AAAA,EACT,OAAO;AAAA,EACP,SAAS,OAAO,EAAE,OAAO,CAAC,EAAE;AAC9B,CAAC;AAID,eAAsB,WACpB,QACA,OACA,SACA,SAC2B;AAC3B,MAAI,CAAC,OAAO,KAAK,KAAK,EAAE,OAAQ,QAAO,CAAC;AACxC,QAAM,QAA0B,CAAC;AACjC,aAAW,MAAM,QAAQ;AACvB,UAAM,SAAS,OAAO,MAAM,QAAQ,WAAW,IAAI,OAAO,IAAI,OAAO,OAAO;AAC5E,UAAM,UAAU,QAAQ,aAAa;AACrC,QAAI,QAAQ,WAAW,YAAY;AACjC,YAAM,KAAK,GAAI,MAAM,QAAQ,MAAM,aAAa,MAAM,CAAC,KAAK,CAAC,CAAE;AAAA,EACnE;AACA,SAAO,eAAe,KAAK;AAC7B;AAEA,eAAsB,UACpB,SACA,gBACA,SAC2B;AAC3B,QAAM,OAAO,MAAM,QAAQ,SAAS,SAAS,gBAAgB,OAAO;AACpE,QAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,QAAM,aAAa,MAAM,QAAQ,SAAS,eAAe,gBAAgB,OAAO,IAAI,UAAU,CAAC;AAC/F,QAAM,SAAS,MAAM,QAAQ,SAAS,WAAW,OAAO,IAAI,SAAS,CAAC;AACtE,QAAM,QAAQ,OAAO,SAAS,MAAM,SAAS,QAAQ,OAAO,SAAS,OAAO,IAAI,CAAC;AACjF,QAAM,SAAS,MAAM,QAAQ,SAAS,cAAc,OAAO,IAAI,SAAS,CAAC;AACzE,SAAO,eAAe;AAAA,IACpB,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE;AAAA,IAC5E,GAAG;AAAA,IACH,GAAI,MAAM,WAAW,QAAQ,OAAO,SAAS,OAAO;AAAA,EACtD,CAAC;AACH;AAEO,SAAS,eAAe,QAAqD;AAClF,QAAM,OAAO,oBAAI,IAA4B;AAC7C,aAAW,SAAS,OAAQ,MAAK,IAAI,GAAG,MAAM,IAAI;AAAA,EAAK,MAAM,IAAI,IAAI,KAAK;AAC1E,SAAO,CAAC,GAAG,KAAK,OAAO,CAAC;AAC1B;AAEA,SAAS,gBACP,WACA,OACS;AACT,SAAO,UAAU,IAAI,CAAC,WAAW;AAAA,IAC/B,MAAM,MAAM,SAAS,OAAO,OAAQ,MAAM,MAAM,IAAI,KAAK;AAAA,IACzD,MAAM,MAAM;AAAA,EACd,EAAE;AACJ;AAEA,eAAsB,SACpB,QACA,OACA,SACA,SACkB;AAClB,QAAM,QAAQ,oBAAI,IAAmB;AACrC,aAAW,MAAM,QAAQ;AACvB,UAAM,OAAO,OAAO,OAAO,KAAK,EAAE;AAAA,MAAK,CAACA,YACtCA,QAAO,aAAa,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO,EAAE,CAAC;AAAA,IAC7D;AACA,UAAM,OAAO,MAAM,aAAa,KAAK,CAAC,UAAU,MAAM,OAAO,OAAO,EAAE,CAAC,GAAG;AAC1E,QAAI,MAAM;AACR,YAAM,IAAI,GAAG,KAAK,EAAE;AAAA,EAAK,IAAI,IAAI,EAAE,MAAM,MAAM,OAAO,IAAI,EAAE,CAAC;AAC7D;AAAA,IACF;AACA,UAAM,aAAa,MAAM,QAAQ,WAAW,IAAI,OAAO;AACvD,UAAM,SAAS,aAAa,MAAM,WAAW,OAAO,OAAO,IAAI;AAC/D,QAAI,QAAQ,WAAW,WAAW,aAAa,EAAG,QAAO,CAAC,EAAE,MAAM,MAAM,MAAM,GAAG,CAAC;AAAA,EACpF;AACA,SAAO,CAAC,GAAG,MAAM,OAAO,CAAC;AAC3B;AAEA,SAAS,aACP,MACA,MACA,QACA,IACA,MACA,MACe;AACf,MAAI,CAAC,OAAO,iBAAiB,SAAS,SAAS,IAAI,CAAC;AAClD,WAAO,YAAY,wBAAwB,OAAO,gBAAgB;AACpE,MAAI,CAAC,SAAS,MAAM,EAAE,EAAG,QAAO,aAAa;AAC7C,MAAI,SAAS,MAAO,QAAO;AAC3B,QAAM,OAAO,KAAK,aAAa,KAAK,CAAC,SAAS,KAAK,SAAS,QAAQ,KAAK,kBAAkB,IAAI;AAC/F,SAAO,OAAO,OAAO,SAAS,OAAO,KAAK;AAC5C;AAEA,MAAM,QAAQ,CAAC,WAAmB,WAAW,cAAc,WAAW;AAE/D,SAAS,cAAc,SAAgD;AAC5E,MAAI,cAAwC,MAAM;AAAA,EAAC;AACnD,QAAM,QAAQ,IAAI,QAAkB,CAAC,YAAY;AAC/C,kBAAc;AAAA,EAChB,CAAC;AACD,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,QAAQ,CAAC,MAAgB,IAAY,SAAiB;AAC1D,UAAM,OAAO,QAAQ;AACrB,QAAI,CAAC,QAAQ,QAAQ,IAAI,EAAE,EAAG;AAC9B,YAAQ,IAAI,EAAE;AACd,SAAK,KACF,YAAY,MAA2B,kBAAkB,EACzD;AAAA,MAAK,CAAC,WACL,MAAM,OAAO,MAAM,MAAM,IACrB,KAAK,UAAU,SAAS,IAAI,QAAQ,SAAS,kBAAkB,IAC/D;AAAA,IACN,EACC,MAAM,MAAM,MAAS,EACrB,QAAQ,MAAM,QAAQ,OAAO,EAAE,CAAC;AAAA,EACrC;AACA,QAAM,WAAW,CAAC,MAAc,SAC7B,QAAQ,EAAW,OAAO,OAAO,OAAO;AACvC,UAAM,UAAU,MAAM,GAAG,IAAI,SAAS,GAAG,MAAM,IAAI;AACnD,QAAI,CAAC,UAAU,OAAO,YAAY,KAAM;AACxC,UAAM,QAAQ,OAAO,eAAe,CAAC,GAAG;AAAA,MACtC,CAAC,UAAU,MAAM,SAAS,KAAK,QAAQ,MAAM,kBAAkB,KAAK;AAAA,IACtE;AACA,WAAO,cAAc,CAAC,GAAG,MAAM,IAAI;AAAA,EACrC,GAAG,kBAAkB;AACvB,QAAM,SAAS,OACb,OACA,MACA,KACA,YACgC;AAChC,UAAM,EAAE,KAAK,IAAI;AACjB,QAAI,SAAS,QAAQ,CAAC,OAAO,MAAM,IAAI,EAAG,QAAO,aAAa;AAC9D,UAAM,OAAO,MAAM,iBAAiB,OAAO,OAAO;AAClD,UAAM,SAAS,KAAK,OAAO;AAC3B,UAAM,MAAM,KAAK,OAAO,KAAK;AAC7B,UAAM,OAAO,MAAM,cAAc,UAAU,KAAK,SAAS,CAAC;AAC1D,UAAM,SAAS,OAAO,OAAO;AAC7B,UAAM,QAAQ,aAAa,MAAM,MAAM,MAAM,QAAQ,IAAI,GAAG,KAAK,MAAM,IAAI;AAC3E,QAAI,UAAU,KAAM,QAAO,SAAS;AACpC,UAAM,KAAK,MAAM,IAAI;AAAA,MACnB,GAAG,eAAe,IAAI,KAAK,EAAE,IAAI,MAAM,IAAI;AAAA,MAC3C,OAAO,OAAO,WAAW,CAAC;AAAA,MAC1B;AAAA,IACF;AACA,UAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,UAAM,QAAQ,MAAM,kBAAkB,KAAK,SAAS;AACpD,UAAM,QAAQ,MAAM,KAAK,UAAU;AAAA,MACjC;AAAA,QACE;AAAA,QACA,MAAM;AAAA,QACN,MAAM,KAAK;AAAA,QACX,SAAS,KAAK;AAAA,QACd,WAAW,EAAE,MAAM,SAAS,MAAM,KAAK,OAAO,MAAM,KAAK,GAAG;AAAA,QAC5D,MAAM,MAAM;AAAA,QACZ,QAAQ;AAAA,UACN,MAAM,KAAK;AAAA,UACX,SAAS,UAAU,KAAK;AAAA,UACxB,WAAW,UAAU,KAAK;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,MACA;AAAA,IACF;AACA,UAAM,MAAM,IAAI,IAAI;AACpB,UAAM,OAAO,YACX,UAAU,MAAM,IAAI,SAAS,WAAW,OAAO,IAAI,MAAM,KAAK,EAAE,GAAG,IAAI,CAAC;AAC1E,QAAI,CAAE,MAAM,KAAK,GAAI;AACnB,YAAM,KAAK,UAAU,SAAS,IAAI,QAAQ,SAAS,kBAAkB;AACrE,aAAO,aAAa;AAAA,IACtB;AACA,UAAM,OAAO,MAAM,UAAU,YAAY,MAAM,KAAK,UAAU,QAAQ,IAAI,OAAO,IAAI;AACrF,QAAI,KAAK,UAAU,WAAY,QAAO,SAAS,IAAI;AACnD,QAAI,CAAE,MAAM,KAAK,EAAI,QAAO,aAAa;AACzC,QAAI,KAAK,WAAW,YAAY;AAC9B,YAAM,SAAS,KAAK,IAAI;AAAA,QACtB,UAAU,KAAK;AAAA,QACf,MAAM,KAAK;AAAA,QACX,eAAe;AAAA,QACf,WAAW,UAAU,KAAK;AAAA,QAC1B,IAAI,KAAK;AAAA,QACT,IAAI,KAAK,aAAa,IAAI;AAAA,MAC5B,CAAC;AACH,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,WAAW,gBAAgB;AAAA,MACzB,MAAM;AAAA,MACN,OAAO;AAAA,QACL,KAAK,UAAU;AAAA,UACb,MAAM,WAAW,MAAM,KAAK,SAAS;AACnC,kBAAM,OAAO,MAAM,IAAI,SAAS,SAAS,IAAI,gBAAgB,OAAO;AACpE,kBAAM,SAAS,MAAM,KAAK,UAAU,CAAC;AACrC,kBAAM,aACH,MAAM,IAAI,SAAS,eAAe,IAAI,gBAAgB,OAAO,IAAI,UAAU,CAAC;AAC/E,gBAAI,CAAC,OAAO,UAAU,CAAC,UAAU,OAAQ,QAAO;AAChD,kBAAM,SAAS,MAAM,IAAI,SAAS,WAAW,OAAO,IAAI,SAAS,CAAC;AAClE,kBAAM,OAAO,QAAQ;AACrB,kBAAM,QAAQ,OAAO,SAAS,MAAM,SAAS,QAAQ,OAAO,MAAM,OAAO,IAAI,CAAC;AAC9E,kBAAM,SAAS,MAAM,IAAI,SAAS,cAAc,OAAO,IAAI,SAAS,CAAC;AACrE,kBAAM,SAAS,MAAM,WAAW,QAAQ,OAAO,MAAM,OAAO;AAC5D,uBAAW,SAAS,CAAC,GAAG,OAAO,GAAG,gBAAgB,CAAC,GAAG,WAAW,GAAG,MAAM,GAAG,KAAK,CAAC,GAAG;AACpF,oBAAM,QAAQ,MAAM,OAAO,OAAO,MAAM,KAAK,OAAO;AACpD,kBAAI,MAAO,QAAO,EAAE,MAAM;AAAA,YAC5B;AACA,mBAAO;AAAA,UACT;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAAA,IACD,KAAK,MAAM;AACT,kBAAY,IAAI;AAChB,iBAAW,QAAQ,KAAK,UAAU,MAAM,SAAS,CAAC;AAChD,YAAI,KAAK,SAAS,gBAAgB,KAAK,UAAU,aAAa,KAAK,OAAO;AACxE,gBAAM,MAAM,KAAK,IAAI,KAAK,OAAO,IAAI;AAAA,IAC3C;AAAA,EACF;AACF;",
   "names": ["record"]
 }

package/dist/guests/review.js

@@ -5,7 +5,7 @@ import {
   defineTask
 } from "@earendil-works/pi-durable";
 import { ApprovalsDoc } from "../approvals/record.js";
-import { deltasOnly } from "../checkpoints.js";
+import { boundedDeltas } from "../checkpoints.js";
 import { pauseUntil } from "../pause.js";
 import {
   GUEST_INPUT_KIND,
@@ -16,7 +16,7 @@ import { GUEST_REQUEST } from "./guard.js";
 import { GuestsDoc, liveSeat } from "./seats.js";
 const GuestReviewsDoc = defineDoc({
   kind: "slicc.guest-reviews",
-  checkpointWhen: deltasOnly,
+  checkpointWhen: boundedDeltas,
   version: 1,
   scope: "session",
   initial: () => ({ next: 1, reviews: {} })