@fungi.computer/truffle 0.3.1 → 0.5.0

package/dist/private-local-session-discovery.js

@@ -1,3 +1,4 @@
+import { statSync } from "node:fs";
 import { readdir, realpath, stat } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import * as Effect from "effect/Effect";
@@ -102,6 +103,37 @@ export async function listPrivateLocalAgentStores(root, visibility = "active") {
     }
     return [...paths];
 }
+/** Entry-preserving survey: a symlink is archived as a link, not its target. */
+export async function probePrivateLocalAgentStoreEntries(home, maximum = 512) {
+    const directory = join(home, ".fungi", "agents");
+    let entries;
+    try {
+        entries = await readdir(directory, { withFileTypes: true });
+    }
+    catch (cause) {
+        if (cause instanceof Error && "code" in cause && cause.code === "ENOENT")
+            return [];
+        throw cause;
+    }
+    const stores = entries.filter((entry) => entry.isDirectory() || entry.isSymbolicLink());
+    if (stores.length > maximum)
+        throw new Error(`Fungi cannot survey ${String(stores.length)} Agent stores (maximum ${String(maximum)})`);
+    const candidates = [];
+    for (const store of stores) {
+        const entry = join(directory, store.name);
+        const databasePath = join(entry, "agent.sqlite");
+        try {
+            if ((await stat(databasePath)).isFile())
+                candidates.push({ agentId: store.name, entry, databasePath });
+        }
+        catch (cause) {
+            if (cause instanceof Error && "code" in cause && cause.code === "ENOENT")
+                continue;
+            throw cause;
+        }
+    }
+    return candidates;
+}
 const storedProfileSchema = z.strictObject({
     name: z.string().nullable(),
     createdBy: z.string().nullable(),
@@ -120,12 +152,44 @@ export class LocalStoreSchemaError extends Error {
         this.databasePath = databasePath;
     }
 }
+/** Profiles held at once; directory listings touch every store each call. */
+const cachedProfiles = 1_024;
+const profiles = new Map();
+/** Every committed write moves the store file (or its WAL); none rewrites it in place unseen. */
+function storeVersion(path) {
+    const version = (file) => {
+        const metadata = statSync(file, { bigint: true, throwIfNoEntry: false });
+        return metadata === undefined
+            ? "-"
+            : `${String(metadata.dev)}:${String(metadata.ino)}:${String(metadata.size)}:${String(metadata.mtimeNs)}:${String(metadata.ctimeNs)}`;
+    };
+    return `${version(path)}/${version(`${path}-wal`)}`;
+}
 /**
  * One Agent store's chosen display name, default model, whether it is
  * archived and the Agent that created it (absent when a human made it), read
- * without opening a host.
+ * without opening a host. Directory listings and the sub-agents footer read
+ * every store's profile on each call; an unchanged store file answers from
+ * memory instead of reopening SQLite (each Bun open/close also leaks native
+ * memory).
  */
 export function readPrivateLocalAgentProfile(path) {
+    const version = storeVersion(path);
+    const cached = profiles.get(path);
+    if (cached?.version === version)
+        return cached.profile;
+    const profile = openAgentProfile(path);
+    // The version is taken before the read, so a write racing it misses next time.
+    profiles.delete(path);
+    profiles.set(path, { version, profile });
+    if (profiles.size > cachedProfiles) {
+        const oldest = profiles.keys().next().value;
+        if (oldest !== undefined)
+            profiles.delete(oldest);
+    }
+    return profile;
+}
+function openAgentProfile(path) {
     const database = openPrivateReadOnlySqliteDatabase(path);
     try {
         const columns = database
@@ -153,15 +217,15 @@ export function readPrivateLocalAgentProfile(path) {
             folder: identity?.folder,
             model: readAgentDefaultModelJson(database),
         });
-        return {
+        return Object.freeze({
             name: stored.name ?? undefined,
             createdBy: stored.createdBy,
             archived: stored.archived === 1,
             mode: stored.mode,
-            writableFolders: stored.writableFolders,
+            writableFolders: Object.freeze(stored.writableFolders),
             folder: stored.folder,
             model: parseModelPreferenceJson(stored.model),
-        };
+        });
     }
     finally {
         database.close();

package/dist/private-mcp-form-contract.d.ts

@@ -51,6 +51,7 @@ declare const answerResult: Schema.Union<readonly [Schema.Struct<{
                 readonly kind: Schema.Literal<"policy">;
             }>]>>;
             readonly reason: Schema.NullOr<Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>>;
+            readonly denialNote: Schema.optionalKey<Schema.String>;
             readonly requestedAt: Schema.Int;
             readonly expiresAt: Schema.Int;
             readonly updatedAt: Schema.Int;
@@ -62,6 +63,7 @@ declare const answerResult: Schema.Union<readonly [Schema.Struct<{
 }>, Schema.Struct<{
     readonly kind: Schema.Literal<"refused">;
     readonly reason: Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>;
+    readonly denialNote: Schema.optionalKey<Schema.String>;
 }>, Schema.Struct<{
     readonly kind: Schema.Literal<"submitted">;
 }>, Schema.Struct<{
@@ -79,6 +81,7 @@ export declare const mcpFormApprovalContract: {
                 readonly id: Schema.String;
                 readonly decision: Schema.Literals<readonly ["approve", "deny", "always-allow"]>;
                 readonly expectedRevision: Schema.Int;
+                readonly denialNote: Schema.optionalKey<Schema.String>;
             }>;
             output: Schema.Union<readonly [Schema.Struct<{
                 readonly kind: Schema.Literal<"answered">;
@@ -115,6 +118,7 @@ export declare const mcpFormApprovalContract: {
                             readonly kind: Schema.Literal<"policy">;
                         }>]>>;
                         readonly reason: Schema.NullOr<Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>>;
+                        readonly denialNote: Schema.optionalKey<Schema.String>;
                         readonly requestedAt: Schema.Int;
                         readonly expiresAt: Schema.Int;
                         readonly updatedAt: Schema.Int;
@@ -126,6 +130,7 @@ export declare const mcpFormApprovalContract: {
             }>, Schema.Struct<{
                 readonly kind: Schema.Literal<"refused">;
                 readonly reason: Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>;
+                readonly denialNote: Schema.optionalKey<Schema.String>;
             }>, Schema.Struct<{
                 readonly kind: Schema.Literal<"submitted">;
             }>, Schema.Struct<{
@@ -171,6 +176,7 @@ export declare const mcpFormApprovalContract: {
                             readonly kind: Schema.Literal<"policy">;
                         }>]>>;
                         readonly reason: Schema.NullOr<Schema.Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>>;
+                        readonly denialNote: Schema.optionalKey<Schema.String>;
                         readonly requestedAt: Schema.Int;
                         readonly expiresAt: Schema.Int;
                         readonly updatedAt: Schema.Int;
@@ -183,10 +189,17 @@ export declare const mcpFormApprovalContract: {
                     readonly command: Schema.String;
                     readonly cwd: Schema.String;
                     readonly justification: Schema.String;
+                    readonly form: Schema.Literals<readonly ["direct", "shell"]>;
+                    readonly kind: Schema.Literals<readonly ["exec", "extension-install"]>;
+                    readonly argv: Schema.optionalKey<Schema.$Array<Schema.String>>;
                     readonly prefix: Schema.optionalKey<Schema.$Array<Schema.String>>;
                     readonly warning: Schema.optionalKey<Schema.String>;
                     readonly alwaysAllowCoverage: Schema.optionalKey<Schema.String>;
                     readonly alwaysAllowUnavailableReason: Schema.optionalKey<Schema.String>;
+                    readonly risk: Schema.optionalKey<Schema.Struct<{
+                        readonly summary: Schema.String;
+                        readonly detail: Schema.String;
+                    }>>;
                 }>>;
             }>>;
         }>;

package/dist/private-mcp-form-contract.js

@@ -1,6 +1,6 @@
 import { ExtensionId, } from "@fungi.computer/shiitake/extensions";
 import * as Schema from "effect/Schema";
-import { ApprovalAnswerInputSchema, ApprovalRefusalSchema, ApprovalViewSchema, } from "@fungi.computer/approvals";
+import { ApprovalAnswerInputSchema, ApprovalDenialNoteSchema, ApprovalRefusalSchema, ApprovalViewSchema, } from "@fungi.computer/approvals";
 /** The actual MCP form, not a ledger record or an authorization decision. */
 export const McpFormApprovalRequestSchema = Schema.Struct({
     message: Schema.String,
@@ -36,10 +36,14 @@ const McpFormPendingSchema = Schema.Struct({
         command: Schema.String,
         cwd: Schema.String,
         justification: Schema.String,
+        form: Schema.Literals(["direct", "shell"]),
+        kind: Schema.Literals(["exec", "extension-install"]),
+        argv: Schema.optionalKey(Schema.Array(Schema.String)),
         prefix: Schema.optionalKey(Schema.Array(Schema.String)),
         warning: Schema.optionalKey(Schema.String),
         alwaysAllowCoverage: Schema.optionalKey(Schema.String),
         alwaysAllowUnavailableReason: Schema.optionalKey(Schema.String),
+        risk: Schema.optionalKey(Schema.Struct({ summary: Schema.String, detail: Schema.String })),
     })),
 });
 /** The existing Session extension slot carries only display-safe form data. */
@@ -52,6 +56,7 @@ export const mcpFormApprovalContract = {
                 id: Schema.String,
                 decision: Schema.Literals(["approve", "deny", "always-allow"]),
                 expectedRevision: ApprovalAnswerInputSchema.fields.expectedRevision,
+                denialNote: Schema.optionalKey(ApprovalDenialNoteSchema),
             }),
             output: answerResult,
         },

package/dist/private-mcp-form-session.d.ts

@@ -5,10 +5,17 @@ export type LocalApprovalReview = {
     command: string;
     cwd: string;
     justification: string;
+    form: "direct" | "shell";
+    kind: "exec" | "extension-install";
+    argv?: string[];
     prefix?: readonly string[];
     warning?: string;
     alwaysAllowCoverage?: string;
     alwaysAllowUnavailableReason?: string;
+    risk?: {
+        summary: string;
+        detail: string;
+    };
 };
 type Pending = {
     sessionId: string;
@@ -27,6 +34,7 @@ export declare function createMcpFormSession(): {
                 readonly id: import("effect/Schema").String;
                 readonly decision: import("effect/Schema").Literals<readonly ["approve", "deny", "always-allow"]>;
                 readonly expectedRevision: import("effect/Schema").Int;
+                readonly denialNote: import("effect/Schema").optionalKey<import("effect/Schema").String>;
             }>;
             output: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
                 readonly kind: import("effect/Schema").Literal<"answered">;
@@ -63,6 +71,7 @@ export declare function createMcpFormSession(): {
                             readonly kind: import("effect/Schema").Literal<"policy">;
                         }>]>>;
                         readonly reason: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>>;
+                        readonly denialNote: import("effect/Schema").optionalKey<import("effect/Schema").String>;
                         readonly requestedAt: import("effect/Schema").Int;
                         readonly expiresAt: import("effect/Schema").Int;
                         readonly updatedAt: import("effect/Schema").Int;
@@ -74,6 +83,7 @@ export declare function createMcpFormSession(): {
             }>, import("effect/Schema").Struct<{
                 readonly kind: import("effect/Schema").Literal<"refused">;
                 readonly reason: import("effect/Schema").Literals<readonly ["not-found", "not-eligible", "already-answered", "stale-revision", "expired", "declined", "fenced", "not-granted", "read-only", "pending", "in-flight", "outcome-unknown", "identity-conflict"]>;
+                readonly denialNote: import("effect/Schema").optionalKey<import("effect/Schema").String>;
             }>, import("effect/Schema").Struct<{
                 readonly kind: import("effect/Schema").Literal<"submitted">;
             }>, import("effect/Schema").Struct<{
@@ -115,6 +125,7 @@ export declare function createMcpFormSession(): {
                     readonly expiresAt: number;
                     readonly updatedAt: number;
                     readonly revision: number;
+                    readonly denialNote?: string;
                     readonly evidence?: readonly {
                         readonly kind: "artifact";
                         readonly ref: string;
@@ -126,13 +137,20 @@ export declare function createMcpFormSession(): {
                 readonly canSetAutoApprove: boolean;
             };
             readonly review?: {
+                readonly kind: "exec" | "extension-install";
+                readonly form: "direct" | "shell";
                 readonly command: string;
                 readonly cwd: string;
                 readonly justification: string;
+                readonly argv?: readonly string[];
                 readonly prefix?: readonly string[];
                 readonly warning?: string;
                 readonly alwaysAllowCoverage?: string;
                 readonly alwaysAllowUnavailableReason?: string;
+                readonly risk?: {
+                    readonly summary: string;
+                    readonly detail: string;
+                };
             };
         }[];
     }, {
@@ -169,6 +187,7 @@ export declare function createMcpFormSession(): {
                     readonly expiresAt: number;
                     readonly updatedAt: number;
                     readonly revision: number;
+                    readonly denialNote?: string;
                     readonly evidence?: readonly {
                         readonly kind: "artifact";
                         readonly ref: string;
@@ -180,13 +199,20 @@ export declare function createMcpFormSession(): {
                 readonly canSetAutoApprove: boolean;
             };
             readonly review?: {
+                readonly kind: "exec" | "extension-install";
+                readonly form: "direct" | "shell";
                 readonly command: string;
                 readonly cwd: string;
                 readonly justification: string;
+                readonly argv?: readonly string[];
                 readonly prefix?: readonly string[];
                 readonly warning?: string;
                 readonly alwaysAllowCoverage?: string;
                 readonly alwaysAllowUnavailableReason?: string;
+                readonly risk?: {
+                    readonly summary: string;
+                    readonly detail: string;
+                };
             };
         }[];
     }>;

package/dist/private-mcp-form-session.js

@@ -49,15 +49,18 @@ export function createMcpFormSession() {
                             if (input.decision === "always-allow" &&
                                 entry.alwaysAllow === undefined)
                                 return { kind: "refused", reason: "not-pending" };
+                            if (input.denialNote !== undefined && input.decision !== "deny")
+                                return { kind: "refused", reason: "not-pending" };
                             if (input.decision === "always-allow")
                                 entry.alwaysAllow?.("prefix");
-                            const result = await entry.approvals.answer({
+                            const answer = {
                                 recordId: entry.approval.record.recordId,
-                                decision: input.decision === "always-allow"
-                                    ? "approve"
-                                    : input.decision,
+                                decision: input.decision === "deny" ? "deny" : "approve",
                                 expectedRevision: input.expectedRevision,
-                            });
+                            };
+                            const result = await entry.approvals.answer(input.denialNote === undefined
+                                ? answer
+                                : { ...answer, denialNote: input.denialNote });
                             return result;
                         }
                         finally {

package/dist/private-provider-rejection.d.ts

@@ -1,5 +1,5 @@
 import type { AssistantMessage } from "@earendil-works/pi-ai";
-import type { ProviderRejection } from "@fungi.computer/mule";
+import { type ProviderRejection } from "@fungi.computer/mule";
 /** Evidence owned by one Local request, never inferred from assistant prose. */
 export type ModelFailureInput = Readonly<{
     refusal?: Readonly<{

package/dist/private-provider-rejection.js

@@ -1,24 +1,44 @@
 import { isContextOverflow } from "@earendil-works/pi-ai/utils/overflow";
+import { isRetryableProviderRejection, } from "@fungi.computer/mule";
 /** Local retries only a typed transient, never cancellation or a turn refusal. */
 export function modelFailureRetryable(failure) {
     return (failure.refusal === undefined &&
         failure.upstream?.stopReason !== "aborted" &&
-        failure.rejection?.code === "provider_unavailable");
+        isRetryableProviderRejection(failure.rejection));
 }
 /** The one owned wording for a failed Local model request. */
 export function modelFailureMessage(provider, failure) {
+    const name = provider === "anthropic"
+        ? "Anthropic"
+        : provider === "openai"
+            ? "OpenAI"
+            : provider;
     if (failure.refusal !== undefined)
         return `${failure.refusal.category}: ${failure.refusal.message}`;
     // Typed subscription evidence wins over all SDK/provider wording.
-    if (failure.rejection?.code === "usage-limit-reached")
-        return `${provider} usage limit reached (usage-limit-reached). Check ChatGPT Settings > Usage, then try again later.`;
-    if (modelFailureRetryable(failure))
-        return `${provider} service unavailable. Try again shortly.`;
+    if (failure.rejection?.code === "usage-limit-reached") {
+        const subscription = provider === "anthropic"
+            ? " on your Claude subscription"
+            : provider === "openai"
+                ? " on your ChatGPT subscription"
+                : "";
+        const resetAt = failure.rejection.resetAt;
+        const reset = resetAt === undefined
+            ? ""
+            : `; resets at ${new Intl.DateTimeFormat(undefined, { hour: "2-digit", minute: "2-digit", hourCycle: "h23" }).format(resetAt)}`;
+        return `${name} usage limit reached${subscription}${reset}.`;
+    }
+    if (failure.rejection?.code === "rate-limit")
+        return `${name} rate limit reached; try again shortly.`;
+    if (failure.rejection?.code === "overloaded")
+        return `${name} is overloaded; try again shortly.`;
+    if (failure.rejection?.code === "provider_unavailable")
+        return `${name} is unavailable; try again shortly.`;
     if (failure.upstream !== undefined) {
         if (isContextOverflow(failure.upstream))
-            return `${provider} request exceeds the context window. Compact the Session or choose another model.`;
+            return `${name} request exceeds the context window; compact the Session or choose another model.`;
     }
     if (failure.rejection?.code === "provider_rejected")
-        return `${provider} rejected the model request (${failure.rejection.code}, HTTP ${String(failure.rejection.status)}). Check /login or choose another model with /model.`;
-    return `${provider} model request failed without a provider rejection. Retry the request.`;
+        return `${name} rejected the request (HTTP ${String(failure.rejection.status)}); check your sign-in or choose another model.`;
+    return `${name} model request failed; try again.`;
 }

package/dist/private-sqlite-owner.d.ts

@@ -18,13 +18,19 @@ export type PrivateBunSqliteDatabase = {
 };
 /** The actual Node connection or Local's explicit native Bun adapter. */
 export type PrivateSqliteDatabase = DatabaseSync | PrivateBunSqliteDatabase;
+/**
+ * How long a store's writer waits out a reader's shared lock before its
+ * commit fails. Status reads and the Board read a live store; a reader holds
+ * its lock for one statement, so this bounds a rare wait, never a hang.
+ */
+export declare const storeWriteBusyTimeoutMs = 2000;
 /**
  * A listing owns this database until its existing finally close. Bun's
  * node:sqlite prepare/close leaves native statements alive until GC. Native
  * close(true) on the native Bun driver explicitly finalizes every statement
  * before releasing the connection, including when a read or decoding fails.
  */
-export declare function openPrivateReadOnlySqliteDatabase(path: string): PrivateSqliteDatabase;
+export declare function openPrivateReadOnlySqliteDatabase(path: string, timeout?: number): PrivateSqliteDatabase;
 /** Writable connections own their statements through deterministic close. */
 export declare function openPrivateWritableSqliteDatabase(path: string, timeout: number): PrivateSqliteDatabase;
 export type PrivateSqliteFailureCode = "busy" | "locked" | "corrupt" | "not_a_database" | "other";

package/dist/private-sqlite-owner.js

@@ -7,14 +7,26 @@ const decodeSqliteRow = Schema.decodeUnknownSync(sqliteRowSchema);
 const bunSqlite = Object.hasOwn(process.versions, "bun")
     ? await import("bun:sqlite")
     : undefined;
+/**
+ * How long a reader waits out a live runtime's commit. Stores use a rollback
+ * journal, so a commit briefly locks readers out; a reader that gives up at
+ * once would read a busy store as an unreadable one.
+ */
+const readBusyTimeoutMs = 250;
+/**
+ * How long a store's writer waits out a reader's shared lock before its
+ * commit fails. Status reads and the Board read a live store; a reader holds
+ * its lock for one statement, so this bounds a rare wait, never a hang.
+ */
+export const storeWriteBusyTimeoutMs = 2_000;
 /**
  * A listing owns this database until its existing finally close. Bun's
  * node:sqlite prepare/close leaves native statements alive until GC. Native
  * close(true) on the native Bun driver explicitly finalizes every statement
  * before releasing the connection, including when a read or decoding fails.
  */
-export function openPrivateReadOnlySqliteDatabase(path) {
-    return openPrivateSqliteDatabase(path, true, 0);
+export function openPrivateReadOnlySqliteDatabase(path, timeout = readBusyTimeoutMs) {
+    return openPrivateSqliteDatabase(path, true, timeout);
 }
 /** Writable connections own their statements through deterministic close. */
 export function openPrivateWritableSqliteDatabase(path, timeout) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/truffle",
-  "version": "0.3.1",
+  "version": "0.5.0",
   "private": false,
   "description": "Truffle: Fungi's local Agent runtime, bundled into the fungi command",
   "type": "module",
@@ -50,9 +50,21 @@
       "types": "./dist/local-extensions.d.ts",
       "import": "./dist/local-extensions.js"
     },
+    "./upgrade": {
+      "types": "./dist/local-upgrade.d.ts",
+      "import": "./dist/local-upgrade.js"
+    },
     "./rules": {
       "types": "./dist/private-local-exec-rules.d.ts",
       "import": "./dist/private-local-exec-rules.js"
+    },
+    "./board-agents": {
+      "types": "./dist/local-board-agents.d.ts",
+      "import": "./dist/local-board-agents.js"
+    },
+    "./board-shipping": {
+      "types": "./dist/local-board-shipping.d.ts",
+      "import": "./dist/local-board-shipping.js"
     }
   },
   "files": [
@@ -65,26 +77,26 @@
     "@cf-wasm/photon": "0.4.0",
     "@earendil-works/pi-ai": "1.3.0",
     "@effect/platform-node": "4.0.2",
-    "@fungi.computer/agar": "0.3.1",
-    "@fungi.computer/approvals": "0.1.0",
-    "@fungi.computer/bird-dog": "0.2.0",
+    "@fungi.computer/agar": "0.5.0",
+    "@fungi.computer/approvals": "0.2.0",
+    "@fungi.computer/bird-dog": "0.3.0",
     "@fungi.computer/cairn": "0.1.0",
     "@fungi.computer/capnweb": "0.12.0",
     "@fungi.computer/carrier": "0.2.0",
     "@fungi.computer/cordyceps": "0.4.0",
     "@fungi.computer/gills": "0.2.0",
-    "@fungi.computer/graft": "0.1.2",
-    "@fungi.computer/knapsack": "0.3.0",
-    "@fungi.computer/lantern": "0.3.0",
-    "@fungi.computer/mycelium": "0.2.2",
-    "@fungi.computer/nacre": "0.0.2",
+    "@fungi.computer/graft": "0.1.4",
+    "@fungi.computer/knapsack": "0.4.0",
+    "@fungi.computer/lantern": "0.3.1",
+    "@fungi.computer/mycelium": "0.2.3",
+    "@fungi.computer/nacre": "0.1.0",
     "@fungi.computer/seam": "0.2.0",
-    "@fungi.computer/shiitake": "0.4.0",
-    "@fungi.computer/shiitake-extensions": "0.2.0",
-    "@fungi.computer/veil": "0.2.0",
+    "@fungi.computer/shiitake": "0.6.0",
+    "@fungi.computer/shiitake-extensions": "0.4.0",
+    "@fungi.computer/veil": "0.2.1",
     "@fungi.computer/watchdog": "0.1.0",
-    "@fungi.computer/whistle": "0.1.0",
-    "@fungi.computer/zookeeper": "0.0.3",
+    "@fungi.computer/whistle": "0.3.0",
+    "@fungi.computer/zookeeper": "0.0.5",
     "@jellybrick/dbus-next": "0.11.4",
     "@modelcontextprotocol/client": "2.0.0",
     "@napi-rs/keyring": "2.1.2",
@@ -97,16 +109,19 @@
     "miniflare": "5.20260828.0-alpha",
     "proper-lockfile": "4.1.2",
     "re2js": "1.3.3",
+    "semver": "7.8.5",
+    "shell-quote": "1.10.0",
     "write-file-atomic": "8.0.0",
     "yaml": "2.9.0",
     "zod": "4.4.3"
   },
   "devDependencies": {
     "@cloudflare/codemode": "0.5.1",
-    "@fungi.computer/mule": "0.2.0",
+    "@fungi.computer/mule": "0.2.1",
     "@modelcontextprotocol/server": "2.0.0",
     "@types/node": "24.13.3",
     "@types/proper-lockfile": "4.1.4",
+    "@types/semver": "7.8.0",
     "@types/write-file-atomic": "4.0.3",
     "bun": "1.4.2",
     "bun-types": "1.4.1",
@@ -149,12 +164,13 @@
     "build": "if [ ! -f src/private-local-native-digests.js ]; then pnpm run build:native; fi && node scripts/generate-native-digests.mjs --verify && pnpm run clean && tsc -p tsconfig.build.json && cp src/private-local-native-digests.js dist/private-local-native-digests.js && node scripts/copy-seatbelt.mjs && esbuild src/internal/private-workerd-sandbox-worker.mjs --outfile=dist/internal/private-workerd-sandbox-worker.mjs --bundle --format=esm --platform=neutral --conditions=workerd,browser --target=es2024 --external:cloudflare:workers --metafile=dist/internal/sandbox-metafile.json --log-level=warning && esbuild src/internal/local-image-fit-worker.mjs --outfile=dist/internal/local-image-fit-worker.mjs --bundle --format=esm --platform=node --target=es2024 --metafile=dist/internal/image-fit-metafile.json --log-level=warning",
     "clean": "node --input-type=module --eval \"import { rm } from 'node:fs/promises'; await rm('dist', { recursive: true, force: true });\"",
     "test": "pnpm run test:node && pnpm run test:merge && pnpm run test:stop-all",
+    "soak:memory": "bun scripts/service-memory-soak.mjs",
     "test:stop-all": "bun test ./test/private-local-stop-all.bun.test.ts",
     "test:full": "pnpm run test && pnpm run test:bun",
     "test:node": "../../node_modules/.bin/vitest run",
     "test:bun": "pnpm run test:mesh-link && pnpm run test:bun:batch && bun test ./test/private-workerd-deadline.bun.test.ts",
     "test:mesh-link": "bun test ./test/private-local-mesh-links.bun.test.ts",
-    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts ./test/private-local-native-service.bun.test.ts",
+    "test:bun:batch": "bun test ./test/private-sqlite-approval-driver.bun.test.ts ./test/mcp-form-service.bun.test.ts ./test/private-local-service-discovery.bun.test.ts ./test/private-local-service-listener.bun.test.ts ./test/private-local-service-manager.bun.test.ts ./test/private-local-service-rebind.bun.test.ts ./test/private-local-service-stop.bun.test.ts ./test/private-local-service-ensure.bun.test.ts ./test/private-local-service-identity.bun.test.ts ./test/private-local-service-kill-resume.bun.test.ts ./test/private-local-service-idle-owners.bun.test.ts ./test/private-local-service-idle-delegation.bun.test.ts ./test/private-local-mail-retry.bun.test.ts ./test/private-local-service-log-native.bun.test.ts ./test/private-local-service-log.bun.test.ts ./test/private-local-sqlite-lifetime.bun.test.ts ./test/private-sqlite-driver.bun.test.ts ./test/private-local-reload.bun.test.ts ./test/private-local-auth-rpc.bun.test.ts ./test/private-workerd-forage.bun.test.ts ./test/local-extensions.bun.test.ts ./test/local-extension-archive.bun.test.ts ./test/local-zookeeper-slot.bun.test.ts ./test/local-extension-skills.bun.test.ts ./test/private-local-sandbox-service.bun.test.ts ./test/private-local-native-service.bun.test.ts",
     "build:native": "fungi-apply-patch-build --out native/bin && node scripts/build-bwrap.mjs --out native/bin && node scripts/generate-native-digests.mjs",
     "test:patch": "node --test --test-timeout=30000 test/apply-patch.native.mjs",
     "test:sandbox:linux": "node --import tsx test/fixtures/local-sandbox-proof.mts",