@nyte-ai/core 0.0.18 → 0.0.19

package/README.md

@@ -2,7 +2,7 @@
 
 Core owns durable session state and execution. `composeHost` (`@nyte-ai/core/server`) builds a host from a `Store`, the `@nyte-ai/ai` models, core plugins and a default workspace; [host](../host/README.md)'s `openHost`, which the sdk's Node `sdk.open` is, calls it with what a machine supplies. Clients do not import core: they use `@nyte-ai/sdk`, whose types are core's and schema's.
 
-The package has four entries: [src/index.ts](src/index.ts) (`.`), the client and plugin contract; [src/store.ts](src/store.ts) (`./store`), the store-backend SPI host's stores implement; [src/server.ts](src/server.ts) (`./server`), composition and the `ServerHost` port a listener serves a composed host through; and [src/testing.ts](src/testing.ts) (`./testing`), the kernel under a composed host, the steps the tests of other packages drive by hand and the scripted-turn harness ([src/harness.ts](src/harness.ts)) core's own tests share, outside the SDK contract. Each export's JSDoc is its contract, and the surface it implements is the baseline in [packages/lab/sdk-shape.ts](../lab/sdk-shape.ts).
+The package has four entries: [src/index.ts](src/index.ts) (`.`), the client and plugin contract; [src/store.ts](src/store.ts) (`./store`), the store-backend SPI host's stores implement; [src/server.ts](src/server.ts) (`./server`), composition and the `ServerHost` port a listener serves a composed host through; and [src/testing.ts](src/testing.ts) (`./testing`), the kernel under a composed host, the steps the tests of other packages drive by hand and the scripted-turn harness ([src/harness.ts](src/harness.ts)) core's own tests share, outside the SDK contract.
 
 A store is two primitives: immutable content-addressed objects, written before any publish, and refs, the only mutable state, published as one all-or-nothing `refs.set` batch. `memoryStore` (`./store`) is the in-process one; sqlite, postgres and Durable Object storage live in host. A head's `watch()` folds the session into one `SessionView` per change, and the sdk folds the wire's deltas with the same code, so no client derives what the view carries.
 

package/THIRD-PARTY-NOTICES.md

@@ -91,6 +91,9 @@ SOFTWARE.
 - Transcript reconciliation, checkpoint instruction snapshots, provider system
   updates, and cache warming are ported from the 1.0.0 release commit
   `a13d35a742c6ef8462812a28fbe1d8c8b7431c32`.
+- Fitting images to model limits (`packages/core/src/agent/images.ts` and
+  `packages/host/src/images`) is ported from `@earendil-works/pi-durable`'s
+  images at commit `73f8de80bc87021375f8b525292ac07492253002`.
 
 License: MIT, with the following notice:
 
@@ -148,6 +151,16 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
 ```
 
+## Photon (`silvia-odwyer/photon`)
+
+- Repository: https://github.com/silvia-odwyer/photon
+- Package: `@silvia-odwyer/photon` 0.3.3
+- What: the host decodes, orients, scales and re-encodes images for the model
+  with Photon's WebAssembly build.
+
+License: Apache License 2.0, reproduced in the appendix below. Copyright 2023
+Silvia O'Dwyer.
+
 ## Pierre
 
 - Repository: https://github.com/pierrecomputer/pierre
@@ -561,6 +574,59 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 ```
 
+## snapcn (`snapcndev/snapcn`)
+
+- Repository: https://github.com/snapcndev/snapcn
+- What: the launch film's Logo Flicker and Check Cycle scenes
+  (`packages/lab/video/src/snap-cn/`) are adapted from snapcn's registry
+  components at commit `47ee435f17d85f74abf48b095b40d64fc9616fb0`.
+
+License: MIT, with the following notice:
+
+```text
+MIT License
+
+Copyright (c) 2026 Sri Nath (snap-cn)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## Naybr, "Copyright Free Gameplay (No Commentary) - Minecraft Survival"
+
+- Source: https://www.youtube.com/watch?v=GPsGyv5zTlM, by Naybr (youtube.com/@Naybr)
+- What: the launch film opens on four shots from 0:30 to 2:30 of this video
+  (`clip` in `packages/lab/video/src/film/media.ts`). The footage is not in
+  the repository; `packages/lab/video/README.md` says how to fetch it.
+
+License: Creative Commons Attribution, as published on YouTube. The author
+allows use, modification, redistribution and monetisation, with this credit
+wherever the gameplay is used: "Gameplay – youtube.com/@Naybr".
+
+## Photographs in the launch film
+
+- Source: Wikimedia Commons; each file's author and source page are listed in
+  `photos` in `packages/lab/video/src/film/media.ts`.
+- What: eleven photographs the launch film cuts between. They are not in the
+  repository.
+
+License: every one is public domain or CC0. None requires attribution.
+
 ## Design references
 
 These credits record design sources. They do not grant a license to the

package/dist/chunks/{compose-q1b0tppc.js → compose-0827b2k4.js}

@@ -1,17 +1,17 @@
 import {
   CORE_CONTEXT2
-} from "./compose-mryw0674.js";
+} from "./compose-5z835ej2.js";
 import {
   kvRef2
-} from "./compose-kb22bkpt.js";
+} from "./compose-cqpjcx2t.js";
 import {
   requireSession2,
   put2,
   readKv2
-} from "./compose-n10w4nkk.js";
+} from "./compose-vn7b7fdj.js";
 import {
   commit2
-} from "./compose-xpfr4wt3.js";
+} from "./compose-pnsvwd3m.js";
 
 // src/extend/plugin-api.ts
 import { isJsonObject, SdkError } from "@nyte-ai/schema";

package/dist/chunks/{compose-j3tkz0tb.js → compose-1g03zpvn.js}

@@ -1,23 +1,23 @@
 import {
   hostPrincipalsRef2
-} from "./compose-kb22bkpt.js";
+} from "./compose-cqpjcx2t.js";
 import {
   sendReceipt2
-} from "./compose-52afaf3v.js";
+} from "./compose-prchdrqk.js";
 import {
   move2
-} from "./compose-madtxnp1.js";
+} from "./compose-47f47sgy.js";
 import {
   heldReceipt2,
   applyBatch2
-} from "./compose-9tqm6g18.js";
+} from "./compose-57j0pme0.js";
 import {
   driveInProcess2
-} from "./compose-rpq9n0nz.js";
+} from "./compose-xaegezm3.js";
 import {
   redeemPairing2,
   authenticateToken2
-} from "./compose-5tkyrzr0.js";
+} from "./compose-jhs91x01.js";
 
 // src/api/server.ts
 function createServerHost2(kernel) {

package/dist/chunks/{compose-2g3enfv5.js → compose-31zqcfte.js}

@@ -1,19 +1,19 @@
 import {
   CORE_CONTEXT2
-} from "./compose-mryw0674.js";
+} from "./compose-5z835ej2.js";
 import {
   dev2
 } from "./compose-n116fnmp.js";
 import {
   readCall2
-} from "./compose-n10w4nkk.js";
+} from "./compose-vn7b7fdj.js";
 import {
   signalsPark2,
   runStep2
-} from "./compose-rehp8epe.js";
+} from "./compose-eemt6sea.js";
 import {
   stepPluginApi2
-} from "./compose-q1b0tppc.js";
+} from "./compose-0827b2k4.js";
 
 // src/extend/hooks.ts
 import { compile, JsonType, SdkError, SubmissionType, withJson } from "@nyte-ai/schema";

package/dist/chunks/{compose-4b1zf3p0.js → compose-4770pb1s.js}

@@ -1,6 +1,6 @@
 import {
   LOCAL2
-} from "./compose-mryw0674.js";
+} from "./compose-5z835ej2.js";
 import {
   check2
 } from "./compose-bj54tkph.js";
@@ -13,26 +13,32 @@ import {
 } from "./compose-bjx8s01m.js";
 import {
   decodeRunRecord2
-} from "./compose-1jz2j92f.js";
+} from "./compose-gxjc6vz9.js";
 import {
   runRef2
-} from "./compose-kb22bkpt.js";
+} from "./compose-cqpjcx2t.js";
 import {
   START2,
   load2,
   requireSession2,
   walkCommitPath2,
   readPositionCommit2
-} from "./compose-n10w4nkk.js";
+} from "./compose-vn7b7fdj.js";
 import {
   withFold2
-} from "./compose-6vf6dkk2.js";
+} from "./compose-xhtgytrh.js";
+import {
+  modelImage2
+} from "./compose-c4238qkb.js";
 import {
   scanResources2
-} from "./compose-y478gv6x.js";
+} from "./compose-mamr4qwf.js";
+import {
+  hiddenOwners2
+} from "./compose-bd8c5n7k.js";
 import {
   toolSource2
-} from "./compose-064y3n82.js";
+} from "./compose-r1pxdxbw.js";
 
 // src/agent/transcript.ts
 import { isJsonObject } from "@nyte-ai/schema";
@@ -60,7 +66,8 @@ async function requestBody2(kernel, models, runtime, input) {
   });
   const source = toolSource2(runtime);
   const named = agent?.tools;
-  const tools = source.list().filter((info) => info.exposure === "model" && (named === undefined || named.includes(info.name)));
+  const hidden = await hiddenOwners2(kernel, session, run);
+  const tools = source.list().filter((info) => info.exposure === "model" && (named === undefined || named.includes(info.name)) && (info.owner === null || !hidden.has(info.owner)));
   return {
     transcript: await runtime.hooks.transform("transform_transcript", { messages, tools }, where),
     source
@@ -364,7 +371,7 @@ async function toolResult(kernel, id, state, at, images) {
   const said = (words) => result([{ type: "text", text: words }], true);
   switch (outcome.kind) {
     case "ok": {
-      const content = await Promise.all(outcome.content.map((item) => item.kind === "text" ? Promise.resolve({ type: "text", text: item.text }) : fileContent(kernel, item, images)));
+      const content = (await Promise.all(outcome.content.map((item) => item.kind === "text" ? Promise.resolve([{ type: "text", text: item.text }]) : fileContent(kernel, item, images)))).flat();
       return result(content.length > 0 ? content : [
         {
           type: "text",
@@ -395,30 +402,35 @@ ${content}`;
 async function userContent(kernel, content, images) {
   if (typeof content === "string")
     return content;
-  return Promise.all(content.map((item) => {
+  const parts = await Promise.all(content.map((item) => {
     switch (item.kind) {
       case "text":
-        return Promise.resolve({ type: "text", text: item.text });
+        return Promise.resolve([{ type: "text", text: item.text }]);
       case "file":
         return fileContent(kernel, item, images);
       case "reference":
-        return mentionContent(kernel.store, item);
+        return mentionContent(kernel.store, item).then((mention) => [mention]);
       case "skill":
-        return Promise.resolve({
-          type: "text",
-          text: `<skill name="${escapeAttribute(item.name)}" location="${escapeAttribute(item.location)}">
+        return Promise.resolve([
+          {
+            type: "text",
+            text: `<skill name="${escapeAttribute(item.name)}" location="${escapeAttribute(item.location)}">
 Read the skill's file at its location and follow it.
 </skill>`
-        });
+          }
+        ]);
       case "excerpt":
-        return Promise.resolve({
-          type: "text",
-          text: `<excerpt ${excerptAttributes(item.source)}>
+        return Promise.resolve([
+          {
+            type: "text",
+            text: `<excerpt ${excerptAttributes(item.source)}>
 ${fencedExcerpt(item.text)}
 </excerpt>`
-        });
+          }
+        ]);
     }
   }));
+  return parts.flat();
 }
 async function fileContent(kernel, file, images) {
   const name = file.name ?? file.blob;
@@ -429,41 +441,45 @@ async function fileContent(kernel, file, images) {
   if (cached !== undefined) {
     cache.delete(file.blob);
     cache.set(file.blob, cached);
-    return { type: "image", data: cached, mimeType: file.mime };
+    return cached.map((part) => ({ ...part }));
   }
   const reader = await kernel.store.objects.blob(file.blob);
   if (reader === null)
-    return { type: "text", text: `[File ${name}, ${file.mime}: no longer stored]` };
+    return [{ type: "text", text: `[File ${name}, ${file.mime}: no longer stored]` }];
   try {
-    if (image) {
-      const chunks = [];
-      for await (const chunk of reader.chunks())
-        chunks.push(chunk);
-      const bytes = new Uint8Array(chunks.reduce((size, chunk) => size + chunk.byteLength, 0));
-      let offset = 0;
-      for (const chunk of chunks) {
-        bytes.set(chunk, offset);
-        offset += chunk.byteLength;
-      }
-      const data = bytes.toBase64();
-      cache.set(file.blob, data);
-      let size = [...cache.values()].reduce((total, kept) => total + kept.length, 0);
-      for (const [blob, kept] of cache) {
-        if (size <= IMAGE_CACHE_CHARS)
-          break;
-        cache.delete(blob);
-        size -= kept.length;
-      }
-      return { type: "image", data, mimeType: file.mime };
+    if (!image)
+      return [
+        {
+          type: "text",
+          text: `[File ${name}, ${reader.size === null ? "unknown size" : `${reader.size} bytes`}, ${file.mime}]`
+        }
+      ];
+    const chunks = [];
+    for await (const chunk of reader.chunks())
+      chunks.push(chunk);
+    const bytes = new Uint8Array(chunks.reduce((size, chunk) => size + chunk.byteLength, 0));
+    let offset = 0;
+    for (const chunk of chunks) {
+      bytes.set(chunk, offset);
+      offset += chunk.byteLength;
     }
-    return {
-      type: "text",
-      text: `[File ${name}, ${reader.size === null ? "unknown size" : `${reader.size} bytes`}, ${file.mime}]`
-    };
+    const content = await modelImage2(kernel.images, { bytes, mime: file.mime, name });
+    cache.set(file.blob, content);
+    let size = [...cache.values()].reduce((total, kept) => total + cachedChars(kept), 0);
+    for (const [blob, kept] of cache) {
+      if (size <= IMAGE_CACHE_CHARS)
+        break;
+      cache.delete(blob);
+      size -= cachedChars(kept);
+    }
+    return content.map((part) => ({ ...part }));
   } finally {
     await reader.close();
   }
 }
+function cachedChars(content) {
+  return content.reduce((total, part) => total + (part.type === "image" ? part.data.length : part.text.length), 0);
+}
 async function mentionContent(store, mention) {
   const reader = mention.blob === undefined ? null : await store.objects.blob(mention.blob);
   if (reader === null)

package/dist/chunks/{compose-madtxnp1.js → compose-47f47sgy.js}

@@ -5,7 +5,7 @@ import {
   headRef2,
   inboxRef2,
   receiptRef2
-} from "./compose-kb22bkpt.js";
+} from "./compose-cqpjcx2t.js";
 import {
   MAIN2,
   EMPTY_REVISION2,
@@ -20,28 +20,28 @@ import {
   createPosition2,
   toCommitObjectId2,
   guard2
-} from "./compose-n10w4nkk.js";
+} from "./compose-vn7b7fdj.js";
 import {
   commit2
-} from "./compose-xpfr4wt3.js";
+} from "./compose-pnsvwd3m.js";
 import {
   withFold2
-} from "./compose-6vf6dkk2.js";
+} from "./compose-xhtgytrh.js";
 import {
   fence2,
   finishFence2
-} from "./compose-9m19b27b.js";
+} from "./compose-gvrqkyn4.js";
 import {
   holdSummary2,
   summaryHeld2,
   summarizedMove2
-} from "./compose-p3q14yt1.js";
+} from "./compose-g2a1f1yx.js";
 import {
   settleReceipt2,
   reserve2,
   known2,
   typedReceipt2
-} from "./compose-52afaf3v.js";
+} from "./compose-prchdrqk.js";
 
 // src/engine/move.ts
 import { asId, SdkError } from "@nyte-ai/schema";

package/dist/chunks/{compose-1z7q169s.js → compose-5489evqa.js}

@@ -1,100 +1,105 @@
 import {
   CORE_CONTEXT2
-} from "./compose-mryw0674.js";
+} from "./compose-5z835ej2.js";
 import {
   envelope2,
   decodeHostIdentity2
-} from "./compose-1jz2j92f.js";
+} from "./compose-gxjc6vz9.js";
 import {
   kvRef2,
   hostIdentityRef2
-} from "./compose-kb22bkpt.js";
+} from "./compose-cqpjcx2t.js";
 import {
   dev2
 } from "./compose-n116fnmp.js";
 import {
   readKv2
-} from "./compose-n10w4nkk.js";
+} from "./compose-vn7b7fdj.js";
 import {
   createPartTable2
-} from "./compose-drdej9yt.js";
+} from "./compose-c2rnebv0.js";
 import {
   EMPTY_CATALOG2
-} from "./compose-7k6nsmtq.js";
+} from "./compose-6gt28900.js";
 import {
   createFoldCache2,
   createLogPublisher2,
   pollStore2
-} from "./compose-7b8ajk7a.js";
+} from "./compose-rd5e5nxg.js";
 import {
   createModelState2
-} from "./compose-dbx6ftbm.js";
+} from "./compose-csh5vv2t.js";
 import {
   createWaitRegistry2
-} from "./compose-ef936rsa.js";
+} from "./compose-ks2rdteq.js";
 import {
   pluginSecrets2
-} from "./compose-q1b0tppc.js";
+} from "./compose-0827b2k4.js";
 import {
   settingInfos2
-} from "./compose-b5xz0dj7.js";
+} from "./compose-qwbe95qs.js";
 import {
   bumpGeneration2
-} from "./compose-064y3n82.js";
+} from "./compose-r1pxdxbw.js";
 import {
   createModelsApi2,
-  createConfigurationResolver2
-} from "./compose-r7dx7rpz.js";
+  createConfigurationResolver2,
+  rememberChoice2
+} from "./compose-exfx5b4d.js";
 import {
   createRequest2
-} from "./compose-djq2bt61.js";
+} from "./compose-ccrh32hd.js";
 import {
-  createJobTable2
-} from "./compose-yn2et568.js";
+  createJobTable2,
+  jobHandle2
+} from "./compose-y9c31w4e.js";
 import {
   createPageTable2
-} from "./compose-t53j8yxv.js";
+} from "./compose-se7wwcq1.js";
 import {
   createEnvironmentRegistry2
-} from "./compose-0bpspysf.js";
+} from "./compose-qknd62yj.js";
 import {
   dropScans2,
   resourcesPlugin2
-} from "./compose-y478gv6x.js";
+} from "./compose-mamr4qwf.js";
 import {
   createCompactor2,
   createSummarizer2
-} from "./compose-r12cnkpc.js";
+} from "./compose-hf6xkwdw.js";
 import {
   stoppableTool2
-} from "./compose-aa73dbe8.js";
+} from "./compose-hms4hf6p.js";
 import {
   readMcpWorkspace2
-} from "./compose-1gd9vkye.js";
+} from "./compose-v9yf9mrh.js";
 import {
   createTurnDriver2
-} from "./compose-k8aghhv2.js";
+} from "./compose-5cmp34zp.js";
+import {
+  openPresence2
+} from "./compose-gvm49f4b.js";
 import {
   createWorkspaceState2,
   createWorkspaces2
-} from "./compose-eqr5qwp1.js";
+} from "./compose-tb5ywdfk.js";
 import {
   sweepWorktrees2
-} from "./compose-s2aew2c9.js";
+} from "./compose-gxvetm0j.js";
 import {
   stopStart2
-} from "./compose-dc2ns6gd.js";
+} from "./compose-seyhq3fb.js";
 import {
   createExecutionState2,
   driveInProcess2,
   dispatchHead2
-} from "./compose-rpq9n0nz.js";
+} from "./compose-xaegezm3.js";
 import {
   createConnectionRegistry2
-} from "./compose-5tkyrzr0.js";
+} from "./compose-jhs91x01.js";
 import {
   createSettingsApi2
-} from "./compose-xd0kdp3t.js";
+} from "./compose-jrqn6xhy.js";
 import {
   createPartDefinitions2
 } from "./compose-0rx7ygxq.js";
@@ -104,30 +109,30 @@ import {
   checkPlugins2,
   replacePlugins2,
   hostPluginRows2
-} from "./compose-gaps3heh.js";
+} from "./compose-m1ecjzm2.js";
 import {
   createHostState2
 } from "./compose-xm52jghq.js";
 import {
   rerunAction2
-} from "./compose-wgphshsn.js";
+} from "./compose-azq5jxr2.js";
 import {
   sessionHandle2,
   activationSession2
-} from "./compose-gg8b9b21.js";
+} from "./compose-s5522cth.js";
 import {
   createConnection2,
   createHost2
-} from "./compose-7pc3p5ex.js";
+} from "./compose-q1d09qpr.js";
 import {
   createServerHost2
-} from "./compose-j3tkz0tb.js";
+} from "./compose-1g03zpvn.js";
 import {
   delegationPlugin2
 } from "./compose-n93897b0.js";
 import {
   environmentPlugin2
-} from "./compose-amr0k1m1.js";
+} from "./compose-q1rrtq3a.js";
 import {
   mcpPlugin2
 } from "./compose-597de3tc.js";
@@ -149,6 +154,7 @@ var NO_MODELS = {
   usage: async () => unavailable("models"),
   refresh: async () => unavailable("models"),
   setDefault: async () => unavailable("models"),
+  setListing: async () => unavailable("models"),
   verify: async () => unavailable("models"),
   login: () => unavailable("models"),
   logout: async () => unavailable("models")
@@ -267,9 +273,13 @@ async function applySeed(kernel, seed) {
 }
 async function composeKernel(options, store) {
   const identity = await hostIdentity2(store);
+  const instance = crypto.randomUUID();
+  const presence = options.member === undefined ? null : await openPresence2(store, { instance, holder: identity.id, member: options.member });
   const kernel = createKernel2({
     hostId: identity.id,
-    store,
+    instance,
+    presence,
+    store: presence?.store ?? store,
     description: options.description,
     host: createHostState2({
       catalog: asId(crypto.randomUUID()),
@@ -281,6 +291,7 @@ async function composeKernel(options, store) {
     models: options.models,
     mcp: options.mcp,
     github: options.github,
+    images: options.images,
     builtins: BUILTINS,
     hostPlugins: options.plugins,
     pluginSources: options.pluginSources,
@@ -290,6 +301,10 @@ async function composeKernel(options, store) {
     loadPlugins: options.loadPlugins
   });
   kernel.host.update({ plugins: hostPluginRows2(kernel) });
+  presence?.revoked.addEventListener("abort", () => {
+    kernel.executionState.closing.abort();
+    options.revoked?.();
+  }, { once: true });
   return kernel;
 }
 function createKernel2(input) {
@@ -318,7 +333,8 @@ function createKernel2(input) {
   let pages = null;
   const kernel = {
     hostId: input.hostId,
-    instance: crypto.randomUUID(),
+    instance: input.instance ?? crypto.randomUUID(),
+    presence: input.presence ?? null,
     poll: input.poll ?? null,
     externalCommits: new Set,
     store: input.store,
@@ -358,6 +374,10 @@ function createKernel2(input) {
     get resolveConfiguration() {
       return resolveConfiguration ??= models === undefined ? async () => unavailable("resolveConfiguration") : createConfigurationResolver2(kernel, models);
     },
+    rememberChoice: async (choice, scope) => {
+      if (models !== undefined)
+        await rememberChoice2(kernel, models, choice, scope);
+    },
     get waits() {
       return waits ??= createWaitRegistry2(kernel, (session, call) => rerunAction2(kernel, session, call));
     },
@@ -382,6 +402,7 @@ function createKernel2(input) {
     connections: createConnectionRegistry2(),
     secrets: input.secrets ?? null,
     github: input.github ?? null,
+    images: input.images ?? null,
     get mcp() {
       if (mcp === undefined)
         mcp = input.mcp?.({ secrets: pluginSecrets2(kernel, "mcp") }) ?? null;
@@ -428,7 +449,9 @@ async function release(kernel, driver) {
   await driver?.close();
   const sessions = [...kernel.plugins.runtimes().keys()];
   const workspaces = (await kernel.store.refs.list("workspaces/")).map((ref) => asId(ref.name.slice("workspaces/".length)));
-  await Promise.allSettled(workspaces.flatMap((workspace) => kernel.jobs.list(workspace).flatMap((job) => job.view.state.kind === "running" ? [job.process.stop()] : [])));
+  const running = workspaces.flatMap((workspace) => kernel.jobs.list(workspace).filter((job) => job.view.state.kind === "running"));
+  await Promise.allSettled(running.map((job) => job.process.stop()));
+  await Promise.allSettled(running.map((job) => jobHandle2(kernel, job.view.id).settled()));
   for (const session of sessions)
     await kernel.plugins.close(session);
   dropScans2(kernel);
@@ -436,6 +459,11 @@ async function release(kernel, driver) {
     await kernel.environments.detach(session);
   for (const workspace of workspaces)
     await kernel.environments.detachWorkspace(workspace);
+  const state = kernel.executionState;
+  await kernel.presence?.close([...state.undrained].flatMap((name) => {
+    const held = state.held.get(name);
+    return held === undefined ? [] : [{ name, expect: held.revision }];
+  }));
 }
 async function storedIdentity(store) {
   const ref = await store.refs.get(hostIdentityRef2());