@parley-im/parley 0.1.1 → 0.2.0

package/dist/relay.js

@@ -1,10 +1,11 @@
-import { writeFileSync, readFileSync, existsSync, readdirSync } from "node:fs";
+import { writeFileSync, readFileSync, existsSync, readdirSync, mkdirSync } from "node:fs";
 import { randomBytes } from "node:crypto";
 import { join } from "node:path";
-import { paths } from "./config.js";
+import { sessionDir } from "./db.js";
 import { Problem, MAX_IMAGES } from "./api.js";
 import { readCredentials, relay as registry } from "./account.js";
 import { seal, open, sealBytes, openBytes } from "./seal.js";
+import { VERSION } from "./version.js";
 const IMAGE_TYPES = { "image/png": ".png", "image/jpeg": ".jpg", "image/gif": ".gif", "image/webp": ".webp" };
 const MAX_IMAGE_BYTES = 10 * 1024 * 1024;
 const MAX_SEALED_BYTES = 11 * 1024 * 1024;
@@ -18,7 +19,7 @@ const MAX_HELD_BYTES = 200 * 1024 * 1024;
 // A request older than this, or seen before, is a replay and gets refused.
 const FRESH_MS = 5 * 60_000;
 // This computer's connection to parley.im. It connects out (nothing listens
-// on your machine for the internet), answers tester pages' encrypted
+// on your machine for the internet), answers guest pages' encrypted
 // requests, and pushes each session's live events to them, encrypted with
 // that session's key. parley.im only sees which session a frame is for.
 export class RelayLink {
@@ -33,6 +34,9 @@ export class RelayLink {
     retry = null;
     ping = null;
     seen = new Map();
+    // parley.im's clock minus ours, from its hello. Guests' pages use the same
+    // clock, so a phone or laptop set to the wrong time doesn't matter.
+    clock = 0;
     incoming = new Map();
     held = new Map();
     // Events go out in order even though sealing them is asynchronous.
@@ -71,7 +75,7 @@ export class RelayLink {
             return;
         }
         this.status = { state: "connecting", relayUrl: creds.relayUrl, email: creds.account.email };
-        const ws = new WebSocket(`${creds.relayUrl.replace(/^http/, "ws")}/api/connect`, ["parley.v1", `parley.token.${creds.token}`]);
+        const ws = new WebSocket(`${creds.relayUrl.replace(/^http/, "ws")}/api/connect`, ["parley.v1", `parley.token.${creds.token}`, `parley.version.${VERSION}`]);
         this.ws = ws;
         ws.onopen = async () => {
             this.delay = 1000;
@@ -98,6 +102,10 @@ export class RelayLink {
                 this.status = { state: "unlinked", relayUrl: creds.relayUrl, error: "This computer was unlinked from its parley.im account. Run parley login." };
                 return;
             }
+            if (event.code === 4426) {
+                this.status = { state: "outdated", relayUrl: creds.relayUrl, error: event.reason || "parley on this computer is out of date. Update it with: npm install -g @parley-im/parley" };
+                return;
+            }
             if (event.code === 4000) {
                 this.status = { state: "replaced", relayUrl: creds.relayUrl, error: "Another parley on this computer took over the connection." };
                 return;
@@ -134,6 +142,10 @@ export class RelayLink {
         catch {
             return;
         }
+        if (frame.t === "hello" && typeof frame.now === "number") {
+            this.clock = frame.now - Date.now();
+            return;
+        }
         if (typeof frame.s === "string" && typeof frame.r === "string") {
             if (frame.t === "up")
                 return this.receive(frame);
@@ -156,10 +168,10 @@ export class RelayLink {
             // Not sealed with this session's key: tampered with, or a stale link.
             return fail("bad_request");
         }
-        if (req.r !== frame.r || typeof req.at !== "number" || Math.abs(Date.now() - req.at) > FRESH_MS || this.replayed(`${frame.s}:${frame.r}`)) {
+        if (req.r !== frame.r || typeof req.at !== "number" || Math.abs(Date.now() + this.clock - req.at) > FRESH_MS || this.replayed(`${frame.s}:${frame.r}`)) {
             return fail("stale");
         }
-        const reply = async (payload) => this.send({ t: "res", s: frame.s, c: frame.c, r: frame.r, d: await seal(session.e2e_key, session.token, "res", payload) });
+        const reply = async (payload) => this.send({ t: "res", s: frame.s, c: frame.c, r: frame.r, d: await seal(session.e2e_key, session.token, `res:${frame.r}`, payload) });
         const scope = { session, owner: false, base: "", images: "ref" };
         try {
             if (req.op === "state")
@@ -169,11 +181,15 @@ export class RelayLink {
             if (req.op === "send") {
                 const text = String(req.text ?? "").trim();
                 const images = Array.isArray(req.images) ? req.images : [];
+                const clientId = typeof req.cid === "string" ? req.cid.slice(0, 64) : null;
+                const again = this.api.resent(scope, clientId);
+                if (again)
+                    return await reply({ ok: true, result: again });
                 this.api.check(scope, text, images.length);
                 const names = [];
                 for (const image of images.slice(0, MAX_IMAGES))
                     names.push(this.saveImage(session, image));
-                return await reply({ ok: true, result: this.api.post(scope, text, names) });
+                return await reply({ ok: true, result: this.api.post(scope, text, names, clientId) });
             }
             return await reply({ ok: false, error: "unknown", message: "Unknown request." });
         }
@@ -184,7 +200,7 @@ export class RelayLink {
             return reply({ ok: false, error: "broken", message: "Something broke on this end." });
         }
     }
-    // A screenshot arriving from a tester's page, in pieces, still encrypted.
+    // A screenshot arriving from a guest's page, in pieces, still encrypted.
     // parley.im only passes it along; it's decrypted and kept here.
     async receive(frame) {
         const now = Date.now();
@@ -230,7 +246,8 @@ export class RelayLink {
         }
         if (plain.length > MAX_IMAGE_BYTES)
             throw new Problem(413, "too_big", "That image is too big. The limit is 10 MB.");
-        const kept = readdirSync(paths.uploads).filter((name) => name.startsWith(`${session.id}-`)).length;
+        const dir = sessionDir(session);
+        const kept = existsSync(dir) ? readdirSync(dir).filter((name) => name.startsWith(`${session.id}-`)).length : 0;
         if (kept >= MAX_SHOTS)
             throw new Problem(429, "too_many", "This session can't take more screenshots.");
         const now = Date.now();
@@ -245,7 +262,7 @@ export class RelayLink {
         this.held.set(id, { session: session.id, bytes: plain, at: now });
         return id;
     }
-    // Keeps a screenshot that a tester's message refers to.
+    // Keeps a screenshot that a guest's message refers to.
     saveImage(session, image) {
         const ext = IMAGE_TYPES[image?.type];
         if (!ext || typeof image.id !== "string" || !/^[A-Za-z0-9_-]{8,40}$/.test(image.id)) {
@@ -256,10 +273,11 @@ export class RelayLink {
             throw new Problem(400, "bad_image", "That screenshot didn't arrive. Try adding it again.");
         this.held.delete(image.id);
         const name = `${session.id}-${image.id}${ext}`;
-        writeFileSync(join(paths.uploads, name), held.bytes);
+        mkdirSync(sessionDir(session), { recursive: true });
+        writeFileSync(join(sessionDir(session), name), held.bytes);
         return name;
     }
-    // A screenshot for a tester's page, encrypted here and sent in pieces.
+    // A screenshot for a guest's page, encrypted here and sent in pieces.
     async serve(frame) {
         const answer = (reply) => this.send({ t: "piece", r: frame.r, end: true, ...reply });
         const session = this.store.sessionByToken(frame.s);
@@ -267,11 +285,11 @@ export class RelayLink {
             return answer({ error: "ended", status: 410, message: "This parley has ended." });
         const id = String(frame.id ?? "");
         const name = /^[A-Za-z0-9_-]{8,40}$/.test(id)
-            ? Object.values(IMAGE_TYPES).map((ext) => `${session.id}-${id}${ext}`).find((n) => existsSync(join(paths.uploads, n)))
+            ? Object.values(IMAGE_TYPES).map((ext) => `${session.id}-${id}${ext}`).find((n) => existsSync(join(sessionDir(session), n)))
             : undefined;
         if (!name)
             return answer({ error: "missing", status: 404, message: "No such screenshot." });
-        const sealed = await sealBytes(session.e2e_key, session.token, "blob", readFileSync(join(paths.uploads, name)));
+        const sealed = await sealBytes(session.e2e_key, session.token, `shot:${id}`, readFileSync(join(sessionDir(session), name)));
         for (let at = 0; at < sealed.length; at += PIECE)
             this.send({ t: "piece", r: frame.r, d: Buffer.from(sealed.subarray(at, at + PIECE)).toString("base64url") });
         answer({});

package/dist/runner.js

@@ -1,6 +1,6 @@
 import { join, extname } from "node:path";
-import { paths } from "./config.js";
 import { charter } from "./charter.js";
+import { sessionDir } from "./db.js";
 import { runClaudeTurn } from "./agents/claude.js";
 import { runCodexTurn } from "./agents/codex.js";
 import { modelLabel } from "./models.js";
@@ -79,8 +79,8 @@ export class Runner {
             signal.addEventListener("abort", finish);
         });
     }
-    submit(session, text, images) {
-        const message = this.store.addMessage(session.id, "tester", text, images, null);
+    submit(session, text, images, clientId = null) {
+        const message = this.store.addMessage(session.id, "guest", text, images, null, clientId);
         this.publish(session.id, { type: "message", message });
         this.kick(session.id);
         return message;
@@ -97,7 +97,7 @@ export class Runner {
             run.cancel();
     }
     // Kills the link for good: any reply in progress stops, open pages clear
-    // themselves, and every tester route answers 410 from here on.
+    // themselves, and every guest route answers 410 from here on.
     end(sessionId) {
         this.store.end(sessionId);
         this.runs.get(sessionId)?.cancel();
@@ -136,7 +136,7 @@ export class Runner {
         const text = pending.map((m) => m.body).join("\n\n");
         const images = pending
             .flatMap((m) => m.images)
-            .map((file) => ({ path: join(paths.uploads, file), mediaType: mediaTypeFor(file) }))
+            .map((file) => ({ path: join(sessionDir(session), file), mediaType: mediaTypeFor(file) }))
             .filter((image) => image.mediaType);
         const input = { session, config: this.config, charter: charter(session, this.config), text, images };
         const events = {
@@ -151,7 +151,7 @@ export class Runner {
             },
             onActivity: (line) => {
                 live.activity = line;
-                this.store.addActivity(turn.id, line);
+                this.store.addActivity(sessionId, turn.id, line);
                 this.publish(sessionId, { type: "activity", line });
             },
         };
@@ -166,24 +166,26 @@ export class Runner {
         let failed = false;
         run.done
             .then((result) => {
-            this.store.finishTurn(turn.id, "done", result.usage, null);
+            this.store.finishTurn(sessionId, turn.id, "done", result.usage, null);
             const message = this.store.addMessage(sessionId, "agent", result.text, [], turn.id);
             this.publish(sessionId, { type: "message", message });
         })
             .catch((error) => {
             if (this.store.session(sessionId)?.status !== "open") {
-                this.store.finishTurn(turn.id, "interrupted", null, "Session ended mid-reply.");
+                this.store.finishTurn(sessionId, turn.id, "interrupted", null, "Session ended mid-reply.");
                 failed = true;
                 return;
             }
             const reason = String(error?.message ?? error).slice(0, 2000);
             console.error(`[${sessionId}] turn ${turn.id} failed: ${reason}`);
-            this.store.finishTurn(turn.id, "failed", null, reason);
-            // Unanswered messages go back in the queue and ride along with the
-            // tester's next message, rather than retrying in a loop.
-            this.store.releaseTurn(turn.id);
+            this.store.finishTurn(sessionId, turn.id, "failed", null, reason);
+            // Unanswered messages ride along with the guest's next message,
+            // rather than retrying in a loop; a second failure sets them aside.
+            const { setAside } = this.store.failTurn(sessionId, turn.id);
             failed = true;
-            const message = this.store.addMessage(sessionId, "error", "Something went wrong on my end and I couldn't reply. Your message is saved, and I'll see it along with the next one you send.", [], turn.id);
+            const message = this.store.addMessage(sessionId, "error", setAside
+                ? "I still couldn't reply to that, so I've set it aside. It's saved for the person who sent you this link. Try saying it another way, or send it without the screenshot."
+                : "Something went wrong on my end and I couldn't reply. Your message is saved, and I'll see it along with the next one you send.", [], turn.id);
             this.publish(sessionId, { type: "message", message });
         })
             .finally(() => {

package/dist/seal.js

@@ -1,12 +1,14 @@
-// End-to-end encryption between your computer and a tester's browser.
+// End-to-end encryption between your computer and a guest's browser.
 //
 // Each session has its own random 256-bit key. It lives in your parley
-// database and in the tester's link after the "#", which browsers never send
+// database and in the guest's link after the "#", which browsers never send
 // to a server, so parley.im only ever carries ciphertext. Everything is
 // AES-256-GCM with a fresh 96-bit IV per message, and bound to the session and
-// direction ("req", "res", "evt", "blob") so a relay can't replay a reply as
-// a request or move a message between sessions. web/seal.js is the browser
-// side of the same format.
+// purpose so a relay can't replay a reply as a request or move a message
+// between sessions: "req", "evt", "blob" (an upload), a reply to one request
+// ("res:<request id>") and a screenshot by its id ("shot:<id>"), so replies
+// and screenshots can't be swapped for others either. web/seal.js is the
+// browser side of the same format.
 const subtle = globalThis.crypto.subtle;
 const encoder = new TextEncoder();
 const decoder = new TextDecoder();

package/dist/server.js

@@ -1,16 +1,17 @@
 import { createServer } from "node:http";
-import { readFileSync, writeFileSync, existsSync, createReadStream } from "node:fs";
+import { readFileSync, writeFileSync, existsSync, mkdirSync, createReadStream } from "node:fs";
 import { join, extname, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import { randomBytes } from "node:crypto";
-import { loadConfig, paths } from "./config.js";
-import { Store } from "./db.js";
+import { loadConfig } from "./config.js";
+import { VERSION } from "./version.js";
+import { Store, sessionDir } from "./db.js";
 import { Runner, mediaTypeFor } from "./runner.js";
 import { Conversations, Problem, MAX_TEXT, ownsUpload } from "./api.js";
 import { RelayLink } from "./relay.js";
 import { createSession } from "./control.js";
 import { readCredentials, relay as registry, ownerName } from "./account.js";
-import { writeState, clearState } from "./state.js";
+import { writeState, clearState, isServerUp } from "./state.js";
 const WEB = join(dirname(fileURLToPath(import.meta.url)), "..", "web");
 const MAX_UPLOAD = 10 * 1024 * 1024;
 // Long polls end well before any proxy's idle timeout.
@@ -22,7 +23,7 @@ const STATIC_TYPES = {
     ".html": "text/html; charset=utf-8",
 };
 // Two local servers: your control panel (and your view of each session), and
-// local tester links for development or when you're not signed in. Shared
+// local guest links for development or when you're not signed in. Shared
 // links go through parley.im instead, over the connection in relay.ts.
 export async function serve() {
     const config = loadConfig();
@@ -36,12 +37,12 @@ export async function serve() {
         dashboardPort: config.dashboardPort,
         startedAt: new Date().toISOString(),
     };
-    const tester = createServer((req, res) => handleTester(req, res).catch((e) => fail(res, e)));
+    const guest = createServer((req, res) => handleGuest(req, res).catch((e) => fail(res, e)));
     const dashboard = createServer((req, res) => handleDashboard(req, res).catch((e) => fail(res, e)));
-    async function handleTester(req, res) {
+    async function handleGuest(req, res) {
         const url = new URL(req.url ?? "/", "http://x");
         if (url.pathname === "/health")
-            return json(res, { ok: true, pid: process.pid });
+            return json(res, { ok: true, pid: process.pid, version: VERSION });
         if (url.pathname.startsWith("/static/"))
             return sendStatic(res, url.pathname.slice(8));
         const m = url.pathname.match(/^\/s\/([A-Za-z0-9_-]{16,})(\/.*)?$/);
@@ -68,7 +69,7 @@ export async function serve() {
         }
         const url = new URL(req.url ?? "/", "http://x");
         if (url.pathname === "/health")
-            return json(res, { ok: true, pid: process.pid });
+            return json(res, { ok: true, pid: process.pid, version: VERSION });
         if (url.pathname === "/")
             return sendStatic(res, "panel.html");
         if (url.pathname.startsWith("/static/"))
@@ -91,19 +92,19 @@ export async function serve() {
             try {
                 session = createSession(store, config, {
                     projectDir: String(body.projectDir ?? ""),
-                    tester: String(body.tester ?? ""),
+                    guest: String(body.guest ?? ""),
                     brief: String(body.brief ?? ""),
                     greeting: body.greeting ? String(body.greeting) : null,
-                    agent: (body.agent === "codex" ? "codex" : "claude"),
+                    agent: body.agent === "codex" || body.agent === "claude" ? body.agent : null,
                     model: body.model ? String(body.model) : null,
-                    replyLimit: body.replyLimit ? Number(body.replyLimit) : null,
+                    replyLimit: body.replyLimit == null ? null : Number(body.replyLimit),
                 });
             }
             catch (error) {
                 return problem(res, 400, "invalid", error.message);
             }
             const shared = await share(session);
-            return json(res, { ...api.ownerView(session), shared });
+            return json(res, { ...api.ownerView(session), session, shared });
         }
         const action = url.pathname.match(/^\/api\/sessions\/([a-z0-9]+)\/(end|delete|limit)$/);
         if (action && req.method === "POST") {
@@ -170,8 +171,12 @@ export async function serve() {
                 const body = await readJson(req, MAX_TEXT * 4 + 10_000);
                 const textBody = String(body.text ?? "").trim();
                 const images = (Array.isArray(body.images) ? body.images : []).map(String).filter((name) => ownsUpload(session, name));
+                const clientId = typeof body.cid === "string" ? body.cid.slice(0, 64) : null;
+                const again = api.resent(scope, clientId);
+                if (again)
+                    return json(res, again);
                 api.check(scope, textBody, images.length);
-                return json(res, api.post(scope, textBody, images));
+                return json(res, api.post(scope, textBody, images, clientId));
             }
             if (rest === "/api/uploads" && req.method === "POST") {
                 if (scope.owner)
@@ -184,17 +189,20 @@ export async function serve() {
                     throw new Problem(429, "slow_down", "That's a lot of uploads very fast. Give it a few seconds.");
                 const data = await readBody(req, MAX_UPLOAD);
                 const name = `${session.id}-${randomBytes(9).toString("base64url")}${ext}`;
-                writeFileSync(join(paths.uploads, name), data);
+                mkdirSync(sessionDir(session), { recursive: true });
+                writeFileSync(join(sessionDir(session), name), data);
                 return json(res, { name, url: `${scope.base}/uploads/${name}` });
             }
             const upload = rest.match(/^\/uploads\/([A-Za-z0-9_.-]+)$/);
             if (upload && req.method === "GET") {
                 const name = upload[1];
-                const file = join(paths.uploads, name);
+                const file = join(sessionDir(session), name);
                 if (!ownsUpload(session, name) || !existsSync(file))
                     return notFound(res);
                 res.writeHead(200, { "content-type": mediaTypeFor(name) ?? "application/octet-stream", "cache-control": "private, max-age=86400" });
-                return createReadStream(file).pipe(res);
+                return createReadStream(file)
+                    .on("error", () => res.destroy())
+                    .pipe(res);
             }
             return notFound(res);
         }
@@ -223,9 +231,15 @@ export async function serve() {
             events: events.map(({ event }) => api.eventView(event, scope)).filter(Boolean),
         });
     }
-    tester.listen(config.port, "127.0.0.1");
+    // Already running (started at login, and again by hand, say): leave it be
+    // and exit cleanly, which also tells a login service not to retry.
+    if (await isServerUp(config)) {
+        console.log(`parley: a server is already running on ${config.dashboardPort}; leaving it be.`);
+        process.exit(0);
+    }
+    guest.listen(config.port, "127.0.0.1");
     dashboard.listen(config.dashboardPort, "127.0.0.1");
-    await Promise.all([tester, dashboard].map((server) => new Promise((resolve, reject) => {
+    await Promise.all([guest, dashboard].map((server) => new Promise((resolve, reject) => {
         server.once("listening", resolve);
         server.once("error", reject);
     })));
@@ -241,9 +255,10 @@ export async function serve() {
     };
     process.on("SIGINT", shutdown);
     process.on("SIGTERM", shutdown);
-    // One bad turn (say, a session deleted mid-reply) shouldn't take every
-    // other tester's link down with it.
+    // One bad turn (say, a session deleted mid-reply) or one broken request
+    // shouldn't take every other guest's link down with it.
     process.on("unhandledRejection", (error) => console.error("unhandled:", error));
+    process.on("uncaughtException", (error) => console.error("uncaught:", error));
 }
 function sendFile(res, status, name) {
     send(res, status, STATIC_TYPES[extname(name)], readFileSync(join(WEB, name)));

package/dist/state.js

@@ -26,16 +26,19 @@ export function linkFor(session, config) {
         return `${config.relayUrl}/s/${session.token}#${session.e2e_key}`;
     return `http://localhost:${config.port}/s/${session.token}`;
 }
-export const isShared = (config) => readCredentials(config) !== null;
 export function dashboardUrl(config, session) {
     return `http://localhost:${config.dashboardPort}${session ? `/o/${session.id}` : "/"}`;
 }
-export async function isServerUp(config) {
+// The running server, as it describes itself, or null if none answers.
+export async function serverHealth(config) {
     try {
         const res = await fetch(`http://127.0.0.1:${config.dashboardPort}/health`, { signal: AbortSignal.timeout(1500) });
-        return res.ok;
+        return res.ok ? (await res.json()) : null;
     }
     catch {
-        return false;
+        return null;
     }
 }
+export async function isServerUp(config) {
+    return (await serverHealth(config)) !== null;
+}

package/dist/transcript.js

@@ -1,5 +1,6 @@
 import { join } from "node:path";
-import { paths } from "./config.js";
+import { sessionDir } from "./db.js";
+import { modelLabel } from "./models.js";
 const agentName = (s) => (s.agent === "codex" ? "Codex" : "Claude");
 const time = (iso) => new Date(iso).toLocaleString("en-US", { month: "short", day: "numeric", hour: "numeric", minute: "2-digit" });
 // Which model(s) answered, and on what login, from the recorded turns.
@@ -8,7 +9,7 @@ export function interviewer(store, session) {
     const auths = new Set();
     for (const turn of store.turns(session.id)) {
         if (typeof turn.usage?.model === "string")
-            models.add(turn.usage.model);
+            models.add(modelLabel(turn.usage.model));
         if (typeof turn.usage?.auth === "string")
             auths.add(turn.usage.auth === "none" ? "your subscription" : turn.usage.auth);
     }
@@ -20,33 +21,45 @@ export function interviewer(store, session) {
 // it marks everything shown as read.
 export function transcript(store, session, link, { onlyNew = false } = {}) {
     const messages = store.messages(session.id, onlyNew ? session.read_through : 0);
+    const text = render(store, session, messages, { link, onlyNew, image: (name) => `Screenshot: ${join(sessionDir(session), name)}` });
+    if (messages.length)
+        store.markRead(session.id, messages.at(-1).id);
+    return text;
+}
+// The whole session for <project>/.parley/<id>/transcript.md, beside its
+// screenshots. Reading it doesn't mark anything read.
+export function record(store, session) {
+    return render(store, session, store.messages(session.id), { link: null, onlyNew: false, image: (name) => `![Screenshot](${name})` });
+}
+function render(store, session, messages, { link, onlyNew, image }) {
     const stats = store.stats(session.id);
     const lines = [];
-    lines.push(`# Feedback from ${session.tester} on ${session.project_name}${onlyNew ? " (new since you last read)" : ""}`, "", `- Session: ${session.id}, ${session.status === "open" ? "open" : `ended ${time(session.ended_at ?? session.updated_at)}, link no longer works`}`, `- Interviewer: ${interviewer(store, session)}, started ${time(session.created_at)}`, `- Project: ${session.project_dir}`, ...(session.status === "open" ? [`- Tester link: ${link}`] : []), `- Messages: ${stats.tester_messages} from ${session.tester}, ${stats.agent_messages} from ${agentName(session)}`, `- Replies: ${stats.replies} of ${session.reply_limit}${spend(stats.cost_usd)}`, "");
+    lines.push(`# Feedback from ${session.guest} on ${session.project_name}${onlyNew ? " (new since you last read)" : ""}`, "", `- Session: ${session.id}, ${session.status === "open" ? "open" : `ended ${time(session.ended_at ?? session.updated_at)}, link no longer works`}`, `- Interviewer: ${interviewer(store, session)}, started ${time(session.created_at)}`, `- Project: ${session.project_dir}`, `- Files: ${sessionDir(session)}`, ...(session.status === "open" && link ? [`- Guest link: ${link}`] : []), `- Messages: ${stats.guest_messages} from ${session.guest}, ${stats.agent_messages} from ${agentName(session)}`, `- Replies: ${stats.replies} of ${session.reply_limit}${spend(stats.cost_usd)}`, "");
     if (!onlyNew)
         lines.push("## Brief", "", session.brief.trim(), "", "## Conversation", "");
     if (!messages.length)
         lines.push("_Nothing new._");
     for (const m of messages) {
-        const who = m.role === "tester" ? session.tester : m.role === "agent" ? agentName(session) : "Parley (error shown to tester)";
+        const who = m.role === "guest" ? session.guest : m.role === "agent" ? agentName(session) : "Parley (error shown to guest)";
         lines.push(`### ${who} · ${time(m.created_at)} · #${m.id}`, "", m.body.trim());
-        for (const image of m.images)
-            lines.push("", `Screenshot: ${join(paths.uploads, image)}`);
+        const error = m.role === "error" && m.turn_id ? store.turn(m.session_id, m.turn_id)?.error : null;
+        if (error)
+            lines.push("", `Why it failed (only you see this): ${error}`);
+        for (const name of m.images)
+            lines.push("", image(name));
         lines.push("");
     }
-    if (messages.length)
-        store.markRead(session.id, messages.at(-1).id);
     return lines.join("\n");
 }
 const spend = (usd) => (usd ? `, about $${usd.toFixed(2)} at API prices` : "");
 export function summaryLine(store, session, link) {
     const stats = store.stats(session.id);
     const unread = stats.unread ? `, ${stats.unread} new since you last read` : "";
-    const heard = stats.last_tester_at ? `last heard from ${time(stats.last_tester_at)}` : "hasn't said anything yet";
+    const heard = stats.last_guest_at ? `last heard from ${time(stats.last_guest_at)}` : "hasn't said anything yet";
     const status = session.status === "open" ? "open" : `ended ${time(session.ended_at ?? session.updated_at)}`;
     return [
-        `${session.id}  ${session.tester} on ${session.project_name}  [${status}, ${agentName(session)}]`,
-        `  ${stats.tester_messages} message${stats.tester_messages === 1 ? "" : "s"} from ${session.tester}${unread}; ${heard}`,
+        `${session.id}  ${session.guest} on ${session.project_name}  [${status}, ${agentName(session)}]`,
+        `  ${stats.guest_messages} message${stats.guest_messages === 1 ? "" : "s"} from ${session.guest}${unread}; ${heard}`,
         `  ${stats.replies} of ${session.reply_limit} replies used${spend(stats.cost_usd)}`,
         ...(session.status === "open" ? [`  ${link}`] : []),
     ].join("\n");

package/dist/version.js

@@ -0,0 +1,15 @@
+import { readFileSync } from "node:fs";
+// This copy of parley's version, from package.json (one folder up from both
+// src/ and dist/).
+export const VERSION = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version;
+// Negative, zero or positive, like a sort comparator: "0.1.10" is newer than "0.1.9".
+export function compareVersions(a, b) {
+    const pa = a.split(".").map(Number);
+    const pb = b.split(".").map(Number);
+    for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+        const d = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (d)
+            return d;
+    }
+    return 0;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parley-im/parley",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Send someone a link. They talk to a read-only Claude or Codex in your project, on your computer, and you get everything they said.",
   "keywords": [
     "claude",
@@ -26,7 +26,7 @@
     "access": "public"
   },
   "engines": {
-    "node": ">=24"
+    "node": ">=22.13"
   },
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.build.json",

package/web/app.css

@@ -1,4 +1,4 @@
-/* parley: one stylesheet for the tester chat, your session view and your
+/* parley: one stylesheet for the guest chat, your session view and your
    control panel. Neutral surfaces, one accent, and a monospace face only where
    it means something (code, paths, the agent's activity, numbers). */
 
@@ -135,6 +135,8 @@ button, input, textarea, select { font: inherit; color: inherit; }
 /* ---------- chat ---------- */
 
 .app { display: flex; flex-direction: column; height: 100dvh; overflow: hidden; }
+/* The chat never scrolls the page itself, only its conversation. */
+body:has(> .app) { overflow: hidden; overscroll-behavior: none; }
 .layout { flex: 1; min-height: 0; display: flex; }
 .chat { flex: 1; min-width: 0; min-height: 0; display: flex; flex-direction: column; }
 .chat-inner { width: 100%; max-width: 760px; margin: 0 auto; }
@@ -158,18 +160,19 @@ button, input, textarea, select { font: inherit; color: inherit; }
   font-family: var(--mono); font-size: 14px; line-height: 1.55;
 }
 .msg.agent::before { content: "●"; color: var(--accent); font-size: 10px; line-height: 23px; }
-.msg.tester::before { content: "›"; color: var(--muted); font-weight: 600; top: 10px; }
+.msg.guest::before { content: "›"; color: var(--muted); font-weight: 600; top: 10px; }
 .msg.error::before { content: "!"; color: var(--danger); font-weight: 700; }
 .meta { font-size: 12px; color: var(--faint); margin-bottom: 2px; }
 .meta .who { color: var(--muted); font-weight: 600; }
-.msg.tester .bubble { background: var(--subtle); border: 1px solid var(--line); border-radius: 10px; padding: 9px 12px; }
-.msg.tester .meta { display: none; }
-/* Testers get just the conversation: no names or times on every message. */
-.tester-view .msg .meta, .tester-view .msg .stamp { display: none; }
-.tester-view .msg { margin-bottom: 16px; }
-.tester-view .msg.tester::before { top: 9px; }
-.msg.tester .stamp { font-size: 12px; color: var(--faint); margin-top: 4px; }
+.msg.guest .bubble { background: var(--subtle); border: 1px solid var(--line); border-radius: 10px; padding: 9px 12px; }
+.msg.guest .meta { display: none; }
+/* Guests get just the conversation: no names or times on every message. */
+.guest-view .msg .meta, .guest-view .msg .stamp { display: none; }
+.guest-view .msg { margin-bottom: 16px; }
+.guest-view .msg.guest::before { top: 9px; }
+.msg.guest .stamp { font-size: 12px; color: var(--faint); margin-top: 4px; }
 .msg.error .body { color: var(--danger); font-size: 14px; }
+.msg.error .detail { margin-top: 6px; font-size: 12px; color: var(--muted); white-space: pre-wrap; word-break: break-word; }
 .msg .body { overflow-wrap: anywhere; }
 
 .shots { display: flex; flex-wrap: wrap; gap: 8px; margin-top: 8px; }
@@ -196,7 +199,7 @@ button, input, textarea, select { font: inherit; color: inherit; }
 .body li { margin: 0.15em 0; }
 .body h4 { margin: 0.8em 0 0.3em; font-size: 1em; }
 .body code { font-family: var(--mono); font-size: 0.86em; background: var(--subtle); border: 1px solid var(--line); padding: 0.05em 0.35em; border-radius: 5px; }
-.msg.tester .body code { background: var(--panel); }
+.msg.guest .body code { background: var(--panel); }
 .body pre { background: var(--subtle); border: 1px solid var(--line); padding: 10px 12px; border-radius: 8px; overflow-x: auto; margin: 0 0 0.65em; font-size: 13px; }
 .body pre code { background: none; border: 0; padding: 0; font-size: inherit; }
 .body a { color: var(--accent); }
@@ -227,10 +230,12 @@ textarea {
   field-sizing: content;
   max-height: calc(1.55em * 8 + 16px);
 }
-/* On phones it stops at three lines and scrolls inside, so the conversation
-   keeps the room. */
+/* On phones it stops at two lines and scrolls inside, and screenshots get
+   smaller thumbnails, so the conversation keeps the room. */
 @media (pointer: coarse) {
-  textarea { max-height: calc(1.55em * 3 + 16px); }
+  textarea { max-height: calc(1.55em * 2 + 16px); }
+  .attachments { padding: 8px 8px 0; gap: 6px; }
+  .thumb img { width: 40px; height: 40px; border-radius: 6px; }
 }
 textarea::placeholder { color: var(--faint); }
 .icon-btn {
@@ -380,6 +385,7 @@ body.panel { overflow: auto; }
 .site code { font-family: var(--mono); font-size: 0.88em; background: var(--subtle); border: 1px solid var(--line); padding: 0.05em 0.35em; border-radius: 5px; }
 .site h3 { margin: 32px 0 8px; }
 .stack { display: grid; gap: 10px; max-width: 360px; margin-top: 16px; }
+.live { display: inline-flex; align-items: center; gap: 7px; font-size: 13px; color: var(--muted); white-space: nowrap; }
 .docs { padding-bottom: 40px; }
 .docs h2 { font-size: 17px; letter-spacing: -0.01em; margin: 36px 0 10px; }
 .docs p, .docs li { max-width: 66ch; }
@@ -389,6 +395,8 @@ body.panel { overflow: auto; }
 .docs pre code { background: none; border: 0; padding: 0; font-size: inherit; }
 .docs blockquote { margin: 10px 0; padding: 8px 14px; border-left: 3px solid var(--accent); background: var(--accent-soft); border-radius: 0 8px 8px 0; color: var(--text); }
 .trow.site-row { grid-template-columns: 1fr auto; }
+/* Long details shorten instead of pushing the buttons off a phone screen. */
+.trow.site-row .who-cell { min-width: 0; }
 
 /* parley.im's front page: no words, just home.js drawing on a faint grid. */
 body.home { overflow: hidden; }

package/web/chat.html

@@ -11,7 +11,7 @@
 <meta property="og:description" content="{{PREVIEW_TEXT}}">
 <meta property="og:site_name" content="parley">
 <title>{{TITLE}}</title>
-<link rel="icon" href="/static/icon.svg">
+<link rel="icon" href="/static/icon.svg?v=2" type="image/svg+xml">
 <link rel="stylesheet" href="/static/app.css">
 </head>
 <body>