@parley-im/parley 0.2.5 → 0.2.6

package/README.md

@@ -6,7 +6,7 @@ The agent runs on your computer, with your Claude or Codex login and plan. Links
 
 ## Using it
 
-Link your computer to your parley.im account once:
+Link your computer to your parley account once:
 
 ```bash
 parley login
@@ -22,6 +22,8 @@ Your agent writes a brief from what it knows and hands back a link like `https:/
 
 > We're done with Sam's session.
 
+Send parleys only to people you trust. A guest can ask about anything in the project folder, and the interviewer answers from what it finds there, including files you may have forgotten about. The blocked list and the agents' sandboxes keep secrets out and keep it inside the folder, but they shouldn't be the only thing between a stranger and your work.
+
 Or from a terminal:
 
 ```bash

package/dist/account.js

@@ -32,9 +32,9 @@ async function call(creds, path, init = {}) {
         signal: AbortSignal.timeout(15_000),
     });
     if (res.status === 401)
-        throw Object.assign(new Error("This computer isn't linked to parley.im anymore. Run parley login."), { unlinked: true });
+        throw Object.assign(new Error("This computer isn't linked to your parley account anymore. Run parley login."), { unlinked: true });
     if (!res.ok)
-        throw new Error((await res.json().catch(() => null))?.message ?? `parley.im answered ${res.status}`);
+        throw new Error((await res.json().catch(() => null))?.message ?? `parley's servers answered ${res.status}`);
     return res.json();
 }
 // What parley.im is told about a session: its id and a title for link

package/dist/cli.js

@@ -37,8 +37,8 @@ Commands
   parley limit ID N                            Let a session give N replies in total
   parley end ID                                Kill its link for good; the transcript stays
   parley delete ID                             Erase it, screenshots included
-  parley login | logout | whoami               Link this computer to parley.im, or unlink it
-  parley start | stop | status                 The background server (holds the parley.im connection)
+  parley login | logout | whoami               Link this computer to your parley account
+  parley start | stop | status                 The background server (holds the connection to parley)
   parley panel                                 Open the control panel (localhost)
   parley install                               Add parley's MCP tools to Claude Code and Codex; start at login
   parley uninstall                             Undo install (your conversations stay)
@@ -46,7 +46,7 @@ Commands
   parley --version
 
 Conversations and screenshots live in each project's .parley folder (kept out of git), with a
-readable transcript.md per session. Settings and your parley.im login live in ${paths.home}.`;
+readable transcript.md per session. Settings and your parley login live in ${paths.home}.`;
 const CLI_PATH = fileURLToPath(import.meta.url);
 async function main() {
     const [command, ...rest] = process.argv.slice(2);
@@ -88,7 +88,7 @@ async function main() {
             clearCredentials();
             if (await isServerUp(config))
                 await fetch(`http://localhost:${config.dashboardPort}/api/relay/restart`, { method: "POST" });
-            console.log(`Unlinked from ${creds.account.email}. Existing parley.im links stop working until you sign in again.`);
+            console.log(`Unlinked from ${creds.account.email}. Shared links stop working until you sign in again.`);
             return;
         }
         case "whoami": {
@@ -149,10 +149,11 @@ async function main() {
             console.log(`Link: ${linkFor(session, config)}`);
             console.log(`Replies allowed: ${session.reply_limit}`);
             console.log(`Watch: ${dashboardUrl(config, session)}`);
+            console.log(`\nSend it only to someone you trust: they can ask about anything in this folder.`);
             if (!readCredentials(config))
                 console.log("\nNot signed in, so this link only works on this computer. Run parley login to share links.");
             else if (!made.shared)
-                console.log(`\nparley.im didn't take the session yet; it will once the connection is back (see ${paths.log}).`);
+                console.log(`\nparley's servers didn't take the session yet; it will once the connection is back (see ${paths.log}).`);
             return;
         }
         case "list": {

package/dist/mcp.js

@@ -10,7 +10,7 @@ import { startSession, endSession, setReplyLimit } from "./control.js";
 import { readCredentials } from "./account.js";
 const INSTRUCTIONS = `Parley lets the user hand a guest a link to a private web chat with a read-only Claude or Codex running in their project folder. The guest talks; the agent listens, asks follow-ups, answers questions from the code, and everything is recorded.
 
-Use create_session when the user wants someone to give feedback on a project. Write the brief from what you know about the project and what the user wants to learn. Later, use list_sessions to see which sessions are open, which have new messages, and how many replies each has used and spent; get_transcript to read them; set_reply_limit to give a session more room or less; and end_session when the user is done with one. Links live on parley.im and are end-to-end encrypted; the conversation itself happens on the user's computer, so guests can only get replies while it's awake and the parley server is running.`;
+Use create_session when the user wants someone to give feedback on a project. Write the brief from what you know about the project and what the user wants to learn. Later, use list_sessions to see which sessions are open, which have new messages, and how many replies each has used and spent; get_transcript to read them; set_reply_limit to give a session more room or less; and end_session when the user is done with one. Parleys are for people the user trusts: a guest can ask about anything in the project folder, and the interviewer may answer from files the user has forgotten are there. If the user wants to send one to strangers or post it publicly, say so plainly before making it. Links live on parley.im and are end-to-end encrypted; the conversation itself happens on the user's computer, so guests can only get replies while it's awake and the parley server is running.`;
 export async function runMcp() {
     const config = loadConfig();
     const store = new Store();
@@ -22,7 +22,8 @@ export async function runMcp() {
         title: "Create a feedback session",
         description: "Create a parley session: a private link the user can send to a guest. The guest chats with a fresh, read-only " +
             "agent in the project folder that hears their feedback, answers questions by reading the code, and records everything. " +
-            "Starts the local server and tunnel if needed. Returns the link to give the user.",
+            "Starts the local server and tunnel if needed. Returns the link to give the user. Only for guests the user trusts, " +
+            "since the guest can ask about anything in the project folder.",
         inputSchema: {
             project_dir: z.string().describe("Absolute path of the project folder, normally your current working directory."),
             guest: z.string().describe("Name of the person who will give feedback, e.g. 'Sam'."),
@@ -72,18 +73,19 @@ export async function runMcp() {
             "",
         ];
         if (!readCredentials(config)) {
-            lines.push("This computer isn't signed in to parley.im, so the link only works here. Have the user run `parley login` to share links.");
+            lines.push("This computer isn't signed in to parley, so the link only works here. Have the user run `parley login` to share links.");
         }
         else if (!made.serverUp) {
             lines.push("Warning: the parley server didn't come up, so the link won't answer yet. Check ~/.parley/server.log, then run `parley start`.");
         }
         else if (!made.shared) {
-            lines.push("Warning: parley.im didn't take the session yet. It will once the connection is back; `parley status` shows it.");
+            lines.push("Warning: parley's servers didn't take the session yet. It will once the connection is back; `parley status` shows it.");
         }
         else {
             lines.push("Everything after the # in the link is the session's encryption key: share the whole link, and only with the guest. " +
                 "Replies come from this computer, so it needs to be awake with parley running.");
         }
+        lines.push(`Tell the user to send it only to someone they trust: ${session.guest} can ask about anything in this project folder.`);
         return reply(lines.join("\n"));
     });
     server.registerTool("list_sessions", {

package/dist/relay.js

@@ -100,7 +100,7 @@ export class RelayLink {
                 return;
             this.ws = null;
             if (event.code === 4401) {
-                this.status = { state: "unlinked", relayUrl: creds.relayUrl, error: "This computer was unlinked from its parley.im account. Run parley login." };
+                this.status = { state: "unlinked", relayUrl: creds.relayUrl, error: "This computer was unlinked from its parley account. Run parley login." };
                 return;
             }
             if (event.code === 4426) {
@@ -123,7 +123,7 @@ export class RelayLink {
         try {
             const res = await fetch(`${creds.relayUrl}/api/me`, { headers: { authorization: `Bearer ${creds.token}` }, signal: AbortSignal.timeout(10_000) });
             if (res.status === 401) {
-                this.status = { state: "unlinked", relayUrl: creds.relayUrl, error: "This computer isn't linked to a parley.im account anymore. Run parley login." };
+                this.status = { state: "unlinked", relayUrl: creds.relayUrl, error: "This computer isn't linked to a parley account anymore. Run parley login." };
                 return;
             }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parley-im/parley",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "Send someone a link. They talk to a read-only Claude or Codex in your project, on your computer, and you get everything they said.",
   "keywords": [
     "claude",

package/web/app.css

@@ -462,7 +462,9 @@ body.panel { overflow: auto; }
 .menu-who span { font-size: 12px; color: var(--muted); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
 @keyframes drop { from { opacity: 0; transform: translateY(-4px) scale(0.98); } to { opacity: 1; transform: none; } }
 
-.live { display: inline-flex; align-items: center; gap: 7px; font-size: 13px; color: var(--muted); white-space: nowrap; }
+/* A session's status on the dashboard (not the chat's reply in progress,
+   which is li.live). */
+span.live { display: inline-flex; align-items: center; gap: 7px; font-size: 13px; color: var(--muted); white-space: nowrap; }
 .docs { padding-bottom: 40px; }
 .docs h2 { font-size: 17px; letter-spacing: -0.01em; margin: 36px 0 10px; }
 .docs p, .docs li { max-width: 66ch; }
@@ -475,8 +477,8 @@ body.panel { overflow: auto; }
 /* Long details shorten instead of pushing the buttons off a phone screen. */
 .trow.site-row .who-cell { min-width: 0; }
 
-/* parley.im's front page: what it is, in plain words, beside a glimpse of a
-   parley. */
+/* parley's front page: what it is, in plain words, beside a parley playing
+   out (home.js). */
 .landing { max-width: 1080px; }
 .front { display: flex; flex-wrap: wrap; gap: 48px; align-items: center; padding: 8vh 0 24px; }
 .front .intro { flex: 999 1 440px; min-width: 0; display: grid; gap: 18px; padding: 0; border: 0; background: none; margin: 0; font-size: inherit; color: inherit; }
@@ -486,15 +488,27 @@ body.panel { overflow: auto; }
 .front .cta .btn { height: 46px; padding: 0 20px; border-radius: 11px; font-size: 16px; font-weight: 700; }
 .front .cta .btn.ghost { color: var(--text); font-weight: 500; }
 .front .fine { font-size: 14px; color: var(--muted); margin: 0; }
-.glimpse {
-  flex: 1 1 320px; min-width: 0; display: grid; gap: 14px; padding: 20px; background: var(--panel);
-  border: 1px solid var(--line); border-radius: 18px; box-shadow: var(--shadow);
-}
-.glimpse .says { display: flex; gap: 10px; align-items: flex-start; margin: 0; font-size: 16px; line-height: 1.55; }
-.glimpse .says .flag { margin-top: 5px; }
-.glimpse .reply { justify-self: end; max-width: 85%; padding: 8px 12px; background: var(--guest); color: var(--guest-ink); border-radius: 13px 13px 4px 13px; font-size: 14px; line-height: 1.45; }
-.glimpse .writing { display: flex; gap: 10px; align-items: center; }
-.glimpse .writing .thinking { padding: 0; height: 16px; }
+.demo { flex: 1 1 380px; min-width: 0; margin: 0; display: grid; gap: 10px; }
+.demo-tabs { display: flex; gap: 4px; flex-wrap: wrap; }
+.demo-tabs button { font-family: var(--mono); font-size: 12px; padding: 6px 10px; border: 1px solid transparent; border-radius: 8px; background: none; color: var(--muted); cursor: pointer; }
+.demo-tabs button:hover { color: var(--text); }
+.demo-tabs button.on { background: var(--panel); border-color: var(--line); color: var(--text); }
+.demo-chat { background: var(--panel); border: 1px solid var(--line); border-radius: 18px; box-shadow: var(--shadow); overflow: hidden; }
+.demo-top { display: flex; align-items: center; gap: 8px; padding: 10px 14px; border-bottom: 1px solid var(--line); font-size: 14px; }
+.demo-top .mark { width: 20px; height: 20px; }
+.demo-top .product { font-family: var(--display); font-weight: 700; letter-spacing: -0.025em; }
+.demo-top .slash { color: var(--faint); }
+.demo-top .here { font-weight: 600; flex: 1; }
+.demo-msgs { list-style: none; margin: 0; padding: 18px 18px 6px; min-height: 340px; display: flex; flex-direction: column; gap: 14px; }
+.demo .msg { margin: 0; animation: rise 0.25s ease-out; }
+.demo .msg.agent .body { font-size: 15.5px; }
+.demo .msg.guest .bubble { font-size: 14.5px; max-width: 86%; }
+.demo .steps { margin-top: 2px; }
+.demo-say { margin: 0 14px 14px; padding: 8px 8px 8px 14px; border: 1.5px solid var(--line-strong); border-radius: 13px; color: var(--faint); font-size: 15px; display: flex; align-items: center; justify-content: space-between; }
+.demo-say .send-dot { width: 32px; height: 32px; border-radius: 9px; background: var(--subtle); }
+@keyframes rise { from { opacity: 0; transform: translateY(4px); } }
+@media (prefers-reduced-motion: reduce) { .demo .msg { animation: none; } }
+@media (max-width: 560px) { .demo-msgs { min-height: 400px; padding: 14px 12px 6px; } }
 .how { list-style: none; counter-reset: step; padding: 0; margin: 40px 0 0; display: grid; gap: 16px; grid-template-columns: repeat(auto-fit, minmax(240px, 1fr)); }
 .how li { counter-increment: step; border: 1px solid var(--line); border-radius: 16px; padding: 22px; background: var(--panel); display: grid; gap: 10px; align-content: start; }
 .how li::before { content: counter(step); font-family: var(--display); font-weight: 700; color: var(--accent); font-size: 15px; }

package/web/chat.js

@@ -345,7 +345,7 @@
     end.onclick = () => endConversation(end);
     const open = !ended && session?.status !== "ended";
     els.sheetBody.replaceChildren(
-      el("p", {}, strong(who), " set this up to hear what you think of ", strong(projectName), sender ? `. parley.im checked it's really them, with Google.` : "."),
+      el("p", {}, strong(who), " set this up to hear what you think of ", strong(projectName), sender ? `. parley checked it's really them, with Google.` : "."),
       kv(facts),
       el("div", { className: "sheet-actions" }, save, open ? end : null),
       open ? el("p", { className: "fine" }, `Ending it stops this link working, for you and anyone else who has it. ${ownerName || "They"} keep${ownerName ? "s" : ""} everything said so far.`) : null,
@@ -358,7 +358,7 @@
         ? el(
             "p",
             {},
-            `Messages and screenshots are end-to-end encrypted between this page and ${theirs} computer. parley.im passes them along but can't read them; it knows who sent this link, the project's name and when messages go by. The key is the part of your link after the #, so anyone with the whole link can read this chat: keep it to yourself. (This page's code comes from parley.im, so that promise relies on parley.im serving it honestly. And ${agentName()} reads the conversation to reply, as with any ${agentName()} chat.)`,
+            `Messages and screenshots are end-to-end encrypted between this page and ${theirs} computer. parley passes them along but can't read them; it knows who sent this link, the project's name and when messages go by. The key is the part of your link after the #, so anyone with the whole link can read this chat: keep it to yourself. (This page's code comes from parley's servers, so that promise relies on parley serving it honestly. And ${agentName()} reads the conversation to reply, as with any ${agentName()} chat.)`,
           )
         : null,
         el("p", {}, `When the replies run out, the chat pauses until ${whom} adds more. Replies come from ${theirs} computer, so it needs to be on, and the link stops working for good once the chat ends.`),

package/web/home.js

@@ -0,0 +1,90 @@
+// parley's front page: plays the demo, three short parleys in turn, the way
+// a guest sees one. The first is already in the page, so without script (or
+// for anyone who prefers less motion) it just sits there, and the tabs swap
+// scenes without playing them.
+(() => {
+  const root = document.getElementById("demo");
+  const list = document.getElementById("demo-msgs");
+  const data = document.getElementById("scenes");
+  if (!root || !list || !data) return;
+  const scenes = JSON.parse(data.textContent);
+  const tabs = [...root.querySelectorAll("[data-scene]")];
+  const still = matchMedia("(prefers-reduced-motion: reduce)").matches;
+  let run = 0; // a new run cancels the one playing
+
+  const el = (tag, className, text) => {
+    const node = document.createElement(tag);
+    if (className) node.className = className;
+    if (text != null) node.textContent = text;
+    return node;
+  };
+  const guest = (text) => {
+    const node = el("li", "msg guest");
+    node.append(el("div", "bubble", text));
+    return node;
+  };
+  const agent = (text) => {
+    const node = el("li", "msg agent");
+    const body = el("div", "body");
+    body.append(el("p", "", text));
+    node.append(body);
+    return node;
+  };
+  const wait = (ms, id) => new Promise((resolve, reject) => setTimeout(() => (id === run ? resolve() : reject(new Error("stopped"))), ms));
+
+  function pick(i) {
+    tabs.forEach((tab, j) => {
+      tab.classList.toggle("on", i === j);
+      tab.setAttribute("aria-pressed", String(i === j));
+    });
+  }
+
+  function show(i) {
+    const scene = scenes[i];
+    pick(i);
+    list.replaceChildren(guest(scene.asks), agent(scene.says), guest(scene.then));
+  }
+
+  async function play(i, id) {
+    const scene = scenes[i];
+    pick(i);
+    list.replaceChildren();
+    await wait(500, id);
+    list.append(guest(scene.asks));
+    await wait(900, id);
+    // Working: the agent looks something up in the project, then writes.
+    const node = el("li", "msg agent");
+    const body = el("div", "body");
+    body.innerHTML = `<span class="thinking"><span></span><span></span><span></span></span>`;
+    const steps = el("ul", "steps");
+    node.append(body, steps);
+    list.append(node);
+    await wait(700, id);
+    steps.append(el("li", "now", scene.step));
+    await wait(1400, id);
+    const p = el("p", "cursor");
+    body.replaceChildren(p);
+    const words = scene.says.split(" ");
+    for (let w = 1; w <= words.length; w++) {
+      p.textContent = words.slice(0, w).join(" ");
+      await wait(55, id);
+    }
+    p.classList.remove("cursor");
+    steps.remove();
+    await wait(1500, id);
+    list.append(guest(scene.then));
+    await wait(4500, id);
+  }
+
+  async function loop(from) {
+    const id = ++run;
+    try {
+      for (let i = from; ; i = (i + 1) % scenes.length) await play(i, id);
+    } catch {
+      // Stopped for another scene.
+    }
+  }
+
+  tabs.forEach((tab, i) => tab.addEventListener("click", () => (still ? show(i) : loop(i))));
+  if (!still) loop(0);
+})();

package/web/panel.html

@@ -15,7 +15,7 @@
 </header>
 
 <div class="page">
-  <p class="notice" id="signed-out" hidden style="margin:18px 0 0">This computer isn't signed in to parley.im, so links only work on this computer. Run <code>parley login</code> in a terminal to share them.</p>
+  <p class="notice" id="signed-out" hidden style="margin:18px 0 0">This computer isn't signed in to parley, so links only work on this computer. Run <code>parley login</code> in a terminal to share them.</p>
   <div class="stats" id="stats"></div>
 
   <div class="toolbar">

package/web/panel.js

@@ -207,7 +207,7 @@
         await navigator.clipboard.writeText(s.link);
         copy.textContent = "Copied";
       };
-      $("made").replaceChildren(el("strong", { textContent: `Session for ${s.guest} is ready.` }), el("div", { className: "linkbox" }, link, copy), el("a", { className: "cell-muted", href: `/o/${s.id}`, textContent: "Open it" }));
+      $("made").replaceChildren(el("strong", { textContent: `Session for ${s.guest} is ready.` }), el("div", { className: "linkbox" }, link, copy), el("p", { className: "cell-muted", style: "margin:0", textContent: "Send it only to someone you trust: they can ask about anything in this project folder." }), el("a", { className: "cell-muted", href: `/o/${s.id}`, textContent: "Open it" }));
       $("made").hidden = false;
       $("f-guest").value = $("f-brief").value = $("f-greeting").value = "";
       refresh();