@ai-ecoverse/slicc-spectrum 1.40.0 → 1.42.0

package/README.md

@@ -143,12 +143,12 @@ Text is Adobe Clean Spectrum VF, falling back to Adobe Clean, and code is Spectr
 | `<slicc-terminals>` | Terminal sessions in tabs, each a `<slicc-terminal>` on the session's `TerminalBackend`. Sessions stay alive while hidden; `exit` closes the tab. |
 | `<slicc-browser>` | Browser tabs with the agent driving each, an address bar, reload, and the active tab's screenshot. |
 | `<slicc-settings>` | Theme, the model and thinking level for new cones, composer and diff preferences, and accounts to connect, reconnect or disconnect. An account whose status is `signing-in` (or a non-API-key account while its `connect` is pending) reads “Signing in…”; when the port has `cancel(id)`, its row offers Cancel (`data-action="cancel-sign-in"`), and the rejected `connect` that follows shows no error. |
-| `<slicc-updates>` | Install / Update: component states, version changes, last checks, download and link counts, action buttons, failures with Retry, and collapsible install logs. Opens at boot until the agent is ready without failures. Background updates stay in the header's update status; new failures reopen the panel, and after a reload into a boot that isn't ready yet such a panel closes once the agent is ready. Every automatic close is saved to the layout. Also available through View and the rails. |
+| `<slicc-updates>` | Install / Update: component states, version changes, last checks, download and link counts, action buttons, failures with Retry, and collapsible install logs. Opens at boot until the agent is ready without failures. Background updates stay in the header's update status; new failures reopen the panel, and after a reload into a boot that isn't ready yet such a panel closes once the agent is ready. Every automatic close is saved to the layout. When the port offers packages, an Optional packages section lists them below as compact rows, each with its state, version, download size, requirements, commands, progress, errors and Install log; packages never count in the header or keep the panel open at boot. Also available through View and the rails. |
 | `<slicc-memory>` | What agents remember, per scope (everyone, a cone or a role), grouped by section: search, filter by tag, expand, edit, add and forget. Free text outside an entry shows “From MEMORY.md”. |
 | `<slicc-monitor>` | The live monitor: vitals with sparklines (active agents, spend, budget, fullest context), alerts, and the topology (cones and scoops, terminals, tabs, pending changes, sprinkles, tray followers). |
 | `<slicc-freezer>` | Every conversation in the session, from `frozen()`: cones, scoops and agent runs, each with a kind badge, live ones first with a Live light, then the newest first. A live row offers **Open**, which selects that agent; a stopped one offers **Thaw** and **Remove**, which deletes its working folders after a confirmation. A thawed scoop or agent run keeps its row, which says what it was thawed as. **Delete cone**, in the agents list (or <kbd>Delete</kbd> on a cone's row) and the header's cone picker, stops a cone after a confirmation; `/freeze` does it at once. Either way its conversation stays here, and a row without a `kind` counts as a cone. |
 | `<slicc-sprinkle>` | A SLICC sprinkle (`.shtml`), as a panel or, with `inline`, as a dip in the chat that grows to fit. A dip has a tab-like handle: drag it into the dock (or onto a rail, or use its open-as-panel button) and it lives on as a sprinkle panel, with a note in the chat where it was; which dips are out is saved in `slicc-ui.dips`. It runs in a sandboxed frame (`allow-scripts` only) with SLICC's sprinkle theme (the `--s2-*` tokens and `.sprinkle-*` classes), the app's fonts, and Lucide icons (`<i data-lucide>`, `LucideIcons.render()`). It talks back through `slicc.lick({ action, data })`, which reaches the owning cone as a `sprinkle` lick, and, when the port has `call`, reads files and keeps state (see [Sprinkle bridge](#sprinkle-bridge)). Panel sprinkles sit at the top of the right rail with their Lucide icon. |
-| `<slicc-network>` | Network: the route and its health in plain words with the bios `detail`, a line on browser automation (`data-browser`: through the SLICC extension, through slicc-node, not available with how to get it, or `declined`, muted: off for this session, reload to be asked again) when the status has `browser`, **Check again** (`data-action="check"`) when the port has `check`, a **Tailscale** section (`data-tailnet` with the state) when the status has `tailnet`, **Get the whole web** with the Chrome extension link (`data-action="install-extension"`, when `extensionUrl` is set) and `npx @ai-ecoverse/slicc-node` with a copy button (`data-action="copy-command"`), folded away when the route already reaches the whole web, and recent failures with host, error and time. The header's **Network** indicator (`data-network`, `data-health`) opens it: a status light, green for `ok`, yellow for `limited` and red for `failing`, with the state in its text and label and `detail` as its tooltip, which adds "Tailscale is connected." while the tailnet runs; on a phone, a cloud icon for the state. Offered only when the model has a `network` port. |
+| `<slicc-network>` | Network: the route and its health in plain words with the bios `detail`, a line on browser automation (`data-browser`: through the SLICC extension, through slicc-node, not available with how to get it, or `declined`, muted: off for this session, reload to be asked again) when the status has `browser`, **Check again** (`data-action="check"`) when the port has `check`, a **Tailscale** section (`data-tailnet` with the state) when the status has `tailnet`, **Get the whole web** with the Chrome extension link (`data-action="install-extension"`, when `extensionUrl` is set) and `npx @ai-ecoverse/slicc-node` with a copy button (`data-action="copy-command"`), folded away when the route already reaches the whole web (`proxy`, `extension` or `tailnet`, whose line names `tailnet.exitNode`), and recent failures with host, error and time. The header's **Network** indicator (`data-network`, `data-health`) opens it: a status light, green for `ok`, yellow for `limited` and red for `failing`, with the state in its text and label and `detail` as its tooltip, which adds "Tailscale is connected." while the tailnet runs; on a phone, a cloud icon for the state. Offered only when the model has a `network` port. |
 | `<slicc-tray>` | The tray indicator in the header: connection, the float's name, followers and budget; its panel adds role, runtime, spend, the follower list, the join link, and disconnect or reconnect. |
 | `<slicc-confirm>` | The confirmation dialog `confirm()` opens. Not for direct use. |
 | `<slicc-prompt>` | The name dialog `prompt()` opens. Not for direct use. |
@@ -205,10 +205,10 @@ Paths are the agent's: `/shared/…` and `/home/…`, nothing else. A refusal or
 | `monitor` | all of them | A snapshot of vitals, alerts and sections, re-emitted as the system changes, and `resync`. |
 | `sprinkles` | `@ai-ecoverse/slicc-agent` | Sprinkles (`inline` ones show as dips in the chat, not in the rail) and `send`, which turns a sprinkle's lick into a lick on its cone. The optional `call(id, method, args)` serves the [sprinkle bridge](#sprinkle-bridge) for sprinkle `id`: `readFile` and `exists` (`[path]`) resolve with a string and a boolean, `getState` (`[]`) with the saved value or `null`, and `setState` (`[value]`) once it is saved. The adapter owns path policy and keeps state per sprinkle; `<slicc-sprinkle>` awaits `getState` before it builds a frame, mirrors what the frame saves, and forwards only these four methods from its own frame. The dummy keeps state in memory and maps `/shared/x` to `/home/x` in its files, refusing anything outside `/home`. |
 | `tray` | the tray protocol | Connection, role, float kind, followers, spend and budget; `reconnect` and `disconnect`. |
-| `updates` (optional) | BIOS installers | `list()` returns `UpdateItem` rows for BIOS, kernel, agent, grammars, global pnpm packages, skills and UI. `ready()` explicitly reports agent readiness, independently of agent activity. Emit `items` whenever rows or readiness change. Use `queued` for a row that waits for another component before it starts; it reads "Waiting" and doesn't count as updating. Use `starting` for an installed row that is only starting up: it reads "Starting" without a checked line, and the header shows a neutral "Starting" only when nothing is failed, updating or ready. A `failed` row with an installed `from` version reads "Update failed". `act(id, action)` resolves when dispatched or rejects with a displayed error; actions are `retry`, `update-now`, `restart-agent` and `reload`. Missing ports preserve existing adapters and report disconnected information in the panel. Real installer wiring belongs to ai-ecoverse/slicc-bios#70. |
-| `network` (optional) | BIOS | `status()` returns the `NetworkStatus`: `route` (`proxy` for slicc-node, `extension` for the Chrome extension relay, `page` for the page's own fetch, limited by CORS, or `null`), `health` (`ok`, `limited` or `failing`, decided by the port), a one-line `detail`, recent `failures` (`{ url, error, at }`, newest first), an optional `extensionUrl` and an optional `browser` (`{ via, detail?, declined? }`, `via` being `extension`, `proxy` or `null` when browser automation isn't available, and `declined: true` once the user declined browser control for the session). Emit `network` when it changes. The optional `check()` tests the route again. An optional `tailnet` (`TailnetStatus`) shows the Tailscale section: `state` (`off`, `loading`, `needs-login`, `starting`, `running` or `failed`, a status light), a plain-language `detail` (progress, or the failure reason in an error box with **Retry** through `check()`), a `loginUrl` (**Sign in to Tailscale**, a new tab), the `node` (`{ name, addresses }`; the name and the first 100.x address, each with a Copy button), `exitNode` (the name in use or `null`), `exitNodes` (`{ id, name, online }`), `autoExitNode`, `shieldsUp` (a muted line when `true`, a warning when `false`) and `peers` (a count). The optional `setTailnet(on)` adds the **Use Tailscale** switch (`data-action="tailnet"`); `submitAuthKey(key)` adds an auth-key field to `needs-login` (a password field without a `name`, cleared on submit, never kept in component state); `setExitNode(id | 'auto' | null)` adds the **Exit node** picker (None, Automatic, and each node, offline ones disabled) to `running`, with a line saying where traffic goes; `logoutTailnet()` adds **Sign out**, behind a confirm. A rejected call shows its message in the section. Peers are never named beyond the exit-node list. Without the port, the indicator and the Network panel don't show. |
+| `updates` (optional) | BIOS installers | `list()` returns `UpdateItem` rows for BIOS, kernel, agent, grammars, global pnpm packages, skills and UI. `ready()` explicitly reports agent readiness, independently of agent activity. Emit `items` whenever rows or readiness change. Use `queued` for a row that waits for another component before it starts; it reads "Waiting" and doesn't count as updating. Use `starting` for an installed row that is only starting up: it reads "Starting" without a checked line, and the header shows a neutral "Starting" only when nothing is failed, updating or ready. A `failed` row with an installed `from` version reads "Update failed". `act(id, action)` resolves when dispatched or rejects with a displayed error; actions are `retry`, `update-now`, `restart-agent` and `reload`. Missing ports preserve existing adapters and report disconnected information in the panel. Optional `packages()` returns `PackageItem` rows for optional tools, each with a short catalog `id`, its npm `package` (shown in the name's tooltip and at the top of its Install log), `label`, a one-sentence `description`, the `commands` it provides, `requires` (other package ids, read as "Needs Python", "Installs Python too", or "Needs Python (not installed)" on an installed row), `state` (`available`, `queued`, `installing`, `installed`, `outdated`, `updating`, `removing` or `failed`), the installed `version`, the `offered` version and its `size` in bytes, `progress` counted in packages (or `null` for an indeterminate bar), `error`, `actions` (`install`, `update`, `remove`, `retry`) and an optional `log`. Emit `packages` whenever they change. `actPackage(id, action)` keeps the row's button pending until it settles; it shows any confirm itself, resolves without a change when that confirm is cancelled, and rejects with a displayed error on a real failure. Hooks: `section[data-section="packages"]`, `li[data-id][data-state]`, buttons with `data-action` and `[data-error]`. Real installer wiring belongs to ai-ecoverse/slicc-bios#70. |
+| `network` (optional) | BIOS | `status()` returns the `NetworkStatus`: `route` (`proxy` for slicc-node, `extension` for the Chrome extension relay, `tailnet` while a Tailscale exit node carries the traffic, `page` for the page's own fetch, limited by CORS, or `null`), `health` (`ok`, `limited` or `failing`, decided by the port), a one-line `detail`, recent `failures` (`{ url, error, at }`, newest first), an optional `extensionUrl` and an optional `browser` (`{ via, detail?, declined? }`, `via` being `extension`, `proxy` or `null` when browser automation isn't available, and `declined: true` once the user declined browser control for the session). Emit `network` when it changes. The optional `check()` tests the route again. An optional `tailnet` (`TailnetStatus`) shows the Tailscale section: `state` (`off`, `loading`, `needs-login`, `starting`, `running` or `failed`, a status light), a plain-language `detail` (progress, or the failure reason in an error box with **Retry** through `check()`), a `loginUrl` (**Sign in to Tailscale**, a new tab), the `node` (`{ name, addresses }`; the name and the first 100.x address, each with a Copy button), `exitNode` (the name in use or `null`), `exitNodes` (`{ id, name, online }`), `autoExitNode`, `shieldsUp` (a muted line when `true`, a warning when `false`) and `peers` (a count). The optional `setTailnet(on)` adds the **Use Tailscale** switch (`data-action="tailnet"`); `submitAuthKey(key)` adds an auth-key field to `needs-login` (a password field without a `name`, cleared on submit, never kept in component state); `setExitNode(id | 'auto' | null)` adds the **Exit node** picker (None, Automatic, and each node, offline ones disabled) to `running`, with a line saying where traffic goes; `logoutTailnet()` adds **Sign out**, behind a confirm. A rejected call shows its message in the section. Peers are never named beyond the exit-node list. Without the port, the indicator and the Network panel don't show. |
 
-The dummy supports `createDummyModel({ updates: 'boot' | 'starting' | 'current' | 'available' | 'restart' | 'failure' })`, also selectable with `?updates=` on `/ui/`. Fixtures stay stable for inspection; `model.updates.setScenario('current')` completes boot. Dummy Update now and Retry simulate download and link progress; Restart agent and Reload only change fixture state, never restart a real process or reload the browser. `updateFixtures` and `DummyUpdates` are exported from `/dummy`. `createDummyModel({ mounts: 'mount' | 'cancel' | 'fail' | 'needs' })` (or `?mounts=` on `/ui/`) turns on the optional mount members, which are off by default: `mountFolder` mounts invented files at `/mnt/photos`, resolves with `null`, or rejects, as `model.files.mount.scenario` says; `needs` also lists `/mnt/photos` in `needsFolder()` until a folder is inserted there. `createDummyModel({ network: 'ok' | 'limited' | 'failing' | 'off' })` (or `?network=` on `/ui/`, default `limited`) sets the dummy network: slicc-node (with browser automation through it), the page fetch with CORS failures, or no route, all invented; `off` leaves out the port. `model.network.setScenario()` switches it and Check again re-emits after a short wait. `createDummyModel({ tailnet: 'off' | 'needs-login' | 'running' | 'failed' })` (or `?tailnet=` on `/ui/`, off by default) adds an invented tailnet: an auth key starting with `tskey-` signs in, `mast-pi` and `keel-router` are online exit nodes and `buoy-laptop` is offline, and Retry on `failed` connects. `networkFixtures`, `tailnetFixtures` and `DummyNetwork` are exported from `/dummy`. `createDummyModel({ changes: 'files' | 'git' | 'nogit' })` (or `?changes=` on `/ui/`, default `files`) adds a git `changes` port: `git` lists the pending changes under `/workspace/harbor` and `/workspace/skills` with their `repo` and no author, and `nogit` reports git as unavailable. `DummyChanges` is exported from `/dummy`.
+The dummy supports `createDummyModel({ updates: 'boot' | 'starting' | 'current' | 'available' | 'restart' | 'failure' })`, also selectable with `?updates=` on `/ui/`. Fixtures stay stable for inspection; `model.updates.setScenario('current')` completes boot. Dummy Update now and Retry simulate download and link progress; Restart agent and Reload only change fixture state, never restart a real process or reload the browser. `createDummyModel({ packages: 'mixed' | 'empty' | 'fail' | 'off' })` (or `?packages=` on `/ui/`, off by default) adds invented optional packages in every state: Install and Retry finish after a short wait and install missing requirements too, `fail` makes them fail, and removing Python while uv is installed asks through the `confirm` option (the `/ui/` page passes spectrum's `confirm`). `updateFixtures`, `packageFixtures` and `DummyUpdates` are exported from `/dummy`. `createDummyModel({ mounts: 'mount' | 'cancel' | 'fail' | 'needs' })` (or `?mounts=` on `/ui/`) turns on the optional mount members, which are off by default: `mountFolder` mounts invented files at `/mnt/photos`, resolves with `null`, or rejects, as `model.files.mount.scenario` says; `needs` also lists `/mnt/photos` in `needsFolder()` until a folder is inserted there. `createDummyModel({ network: 'ok' | 'limited' | 'failing' | 'off' })` (or `?network=` on `/ui/`, default `limited`) sets the dummy network: slicc-node (with browser automation through it), the page fetch with CORS failures, or no route, all invented; `off` leaves out the port. `model.network.setScenario()` switches it and Check again re-emits after a short wait. `createDummyModel({ tailnet: 'off' | 'needs-login' | 'running' | 'failed' })` (or `?tailnet=` on `/ui/`, off by default) adds an invented tailnet: an auth key starting with `tskey-` signs in, `mast-pi` and `keel-router` are online exit nodes and `buoy-laptop` is offline, and Retry on `failed` connects. While the dummy tailnet runs with an exit node, the route is `tailnet` and the health `ok`. `networkFixtures`, `tailnetFixtures` and `DummyNetwork` are exported from `/dummy`. `createDummyModel({ changes: 'files' | 'git' | 'nogit' })` (or `?changes=` on `/ui/`, default `files`) adds a git `changes` port: `git` lists the pending changes under `/workspace/harbor` and `/workspace/skills` with their `repo` and no author, and `nogit` reports git as unavailable. `DummyChanges` is exported from `/dummy`.
 
 On phones the update status and the tray show only their status light and the network indicator a cloud icon, with the text in their labels and tooltips; the agent picker keeps room for the cone's name, cut with an ellipsis when long, and the bottom rail scrolls when needed. The update status comes first so progress and failures remain reachable on narrow screens.
 

package/dist/slicc-dummy.js

@@ -3874,6 +3874,7 @@ function tailnetFixtures(scenario) {
 }
 var DummyNetwork = class extends Emitter {
   scenario;
+  #base;
   #status;
   #clock;
   #tailnet;
@@ -3882,14 +3883,25 @@ var DummyNetwork = class extends Emitter {
     this.scenario = scenario;
     this.#clock = clock2;
     this.#tailnet = tailnet ? tailnetFixtures(tailnet) : void 0;
-    this.#status = this.#with(networkFixtures(scenario));
+    this.#base = networkFixtures(scenario);
+    this.#status = this.#with(this.#base);
   }
   #with(status) {
-    return this.#tailnet ? { ...status, tailnet: this.#tailnet } : status;
+    const tailnet = this.#tailnet;
+    if (!tailnet) return status;
+    const exit = tailnet.state === "running" ? tailnet.exitNode : null;
+    if (!exit) return { ...status, tailnet };
+    return {
+      ...status,
+      route: "tailnet",
+      health: "ok",
+      detail: `${exit} carries everything except this computer\u2019s own services.`,
+      tailnet
+    };
   }
   #set(tailnet) {
     this.#tailnet = tailnet;
-    this.#status = this.#with(this.#status);
+    this.#status = this.#with(this.#base);
     this.emit("network", this.#status);
   }
   status() {
@@ -3897,13 +3909,15 @@ var DummyNetwork = class extends Emitter {
   }
   setScenario(scenario) {
     this.scenario = scenario;
-    this.#status = this.#with(networkFixtures(scenario));
+    this.#base = networkFixtures(scenario);
+    this.#status = this.#with(this.#base);
     this.emit("network", this.#status);
   }
   async check() {
     await this.#clock.sleep(4);
     if (this.#tailnet?.state === "failed") this.#tailnet = tailnetFixtures("running");
-    this.#status = this.#with(networkFixtures(this.scenario));
+    this.#base = networkFixtures(this.scenario);
+    this.#status = this.#with(this.#base);
     this.emit("network", this.#status);
   }
   async setTailnet(on) {
@@ -4322,15 +4336,188 @@ function updateFixtures(scenario) {
   }
   return items;
 }
+var offer = (id, label, description, commands, offered, size, requires) => ({
+  id,
+  package: `@harbor/${id}-wasm`,
+  label,
+  description,
+  commands,
+  ...requires ? { requires } : {},
+  state: "available",
+  version: null,
+  offered,
+  size,
+  progress: null,
+  error: null,
+  actions: ["install"]
+});
+var fetchFailed = "The download stopped. Check the connection and try again.";
+function packageFixtures(scenario) {
+  if (scenario === "empty") return [];
+  const items = [
+    offer("git", "git", "Version control for your projects.", ["git"], "2.47.1", 43e5),
+    offer(
+      "python",
+      "Python",
+      "Python with pip, for scripts and data work.",
+      ["python3", "pip"],
+      "3.13.1",
+      284e5
+    ),
+    offer(
+      "uv",
+      "uv",
+      "Fast Python package and project manager.",
+      ["uv", "uvx"],
+      "0.9.2",
+      61e5,
+      ["python"]
+    ),
+    offer("ruff", "Ruff", "Python linter and formatter.", ["ruff"], "0.14.0", 98e5, [
+      "python"
+    ]),
+    offer(
+      "esbuild",
+      "esbuild",
+      "Bundles and minifies JavaScript and TypeScript.",
+      ["esbuild"],
+      "0.25.10",
+      101e5
+    ),
+    offer(
+      "tsc",
+      "TypeScript",
+      "Type-checks and compiles TypeScript.",
+      ["tsc"],
+      "5.9.3",
+      236e5
+    ),
+    offer(
+      "biome",
+      "Biome",
+      "Formats and lints JavaScript, TypeScript and JSON.",
+      ["biome"],
+      "2.2.4",
+      192e5
+    ),
+    offer(
+      "pdf",
+      "PDF tools",
+      "Extract text, pages and details from PDF files.",
+      ["pdftotext", "pdfinfo", "pdfseparate"],
+      "24.8.0",
+      79e5
+    )
+  ];
+  const at3 = (id) => items.findIndex((item) => item.id === id);
+  const patch = (id, change) => {
+    items[at3(id)] = { ...items[at3(id)], ...change };
+  };
+  patch("python", { state: "installed", version: "3.13.1", actions: ["remove"] });
+  patch("uv", { state: "outdated", version: "0.8.1", actions: ["update", "remove"] });
+  patch("esbuild", {
+    state: "installing",
+    actions: [],
+    log: "Packages: +1\nProgress: resolved 1, downloaded 0, added 0"
+  });
+  patch("biome", { state: "installed", version: "2.2.4", actions: ["remove"] });
+  patch("pdf", {
+    state: "failed",
+    error: fetchFailed,
+    actions: ["retry"],
+    log: "Packages: +1\nERR_PNPM_FETCH_TIMEOUT Request timed out after 30000ms"
+  });
+  return items;
+}
 var DummyUpdates = class extends Emitter {
   #items;
   #ready;
   #clock;
-  constructor(scenario, clock2) {
+  #packages = [];
+  #fail = false;
+  #confirm;
+  constructor(scenario, clock2, options = {}) {
     super();
     this.#items = updateFixtures(scenario);
     this.#ready = scenario !== "boot" && scenario !== "starting";
     this.#clock = clock2;
+    this.#confirm = options.confirm;
+    if (options.packages) {
+      this.#packages = packageFixtures(options.packages);
+      this.#fail = options.packages === "fail";
+      this.packages = () => this.#packages;
+      this.actPackage = (id, action) => this.#actPackage(id, action);
+    }
+  }
+  #patchPackage(id, patch) {
+    this.#packages = this.#packages.map((item) => item.id === id ? { ...item, ...patch } : item);
+    this.emit("packages", this.#packages);
+  }
+  async #actPackage(id, action) {
+    const item = this.#packages.find((candidate) => candidate.id === id);
+    if (!item?.actions.includes(action)) throw new Error(`Package action unavailable: ${id}`);
+    if (action === "remove") {
+      const users = this.#packages.filter((other) => other.version !== null && other.requires?.includes(id)).map((other) => other.label);
+      if (users.length && this.#confirm) {
+        const names = new Intl.ListFormat("en", { type: "conjunction" }).format(users);
+        const verb = users.length === 1 ? "needs it and stops" : "need it and stop";
+        const ok = await this.#confirm({
+          title: `Remove ${item.label}?`,
+          body: `${names} ${verb} working until ${item.label} is back.`,
+          action: "Remove",
+          variant: "confirmation"
+        });
+        if (!ok) return;
+      }
+      this.#patchPackage(id, { state: "removing", error: null, actions: [] });
+      await this.#clock.sleep(2);
+      this.#patchPackage(id, {
+        state: "available",
+        version: null,
+        actions: ["install"],
+        log: void 0
+      });
+      return;
+    }
+    const log = "Packages: +1";
+    this.#patchPackage(id, {
+      state: action === "update" ? "updating" : "installing",
+      error: null,
+      actions: [],
+      log: `${log}
+Progress: resolved 1, downloaded 0, added 0`
+    });
+    await this.#clock.sleep(4);
+    if (this.#fail) {
+      this.#patchPackage(id, {
+        state: "failed",
+        error: fetchFailed,
+        actions: ["retry"],
+        log: `${log}
+ERR_PNPM_FETCH_TIMEOUT Request timed out after 30000ms`
+      });
+      throw new Error(fetchFailed);
+    }
+    for (const need of item.requires ?? []) {
+      const required = this.#packages.find((candidate) => candidate.id === need);
+      if (required && required.version === null) {
+        this.#patchPackage(need, {
+          state: "installed",
+          version: required.offered,
+          error: null,
+          actions: ["remove"]
+        });
+      }
+    }
+    this.#patchPackage(id, {
+      state: "installed",
+      version: item.offered,
+      progress: null,
+      actions: ["remove"],
+      log: `${log}
+Progress: resolved 1, downloaded 1, added 1
+Done in 3.8s`
+    });
   }
   list() {
     return this.#items;
@@ -4382,6 +4569,8 @@ function createDummyModel({
   delay = 30,
   storage = null,
   updates = "current",
+  packages = "off",
+  confirm,
   mounts = "off",
   network = "limited",
   tailnet,
@@ -4419,7 +4608,10 @@ function createDummyModel({
     ]),
     sprinkles: new DummySprinkles(sprinkles, agent, files3),
     tray: new DummyTray(tray, time),
-    updates: new DummyUpdates(updates, time),
+    updates: new DummyUpdates(updates, time, {
+      ...packages === "off" ? {} : { packages },
+      confirm
+    }),
     ...network === "off" ? {} : { network: new DummyNetwork(network, time, tailnet) },
     ...changes === "files" ? {} : { changes: new DummyChanges(files3, changes === "git") }
   };
@@ -4431,6 +4623,7 @@ export {
   DummyUpdates,
   createDummyModel,
   networkFixtures,
+  packageFixtures,
   tailnetFixtures,
   updateFixtures
 };