@parlor/agent-host 0.0.0-stage → 0.1.0

package/dist/pairing.js

@@ -0,0 +1,312 @@
+import { createHash, randomBytes, randomInt } from "node:crypto";
+import { createServer } from "node:http";
+import { HOST_PAIRING_FRAGMENT, } from "@parlor/auth";
+import { hostAssertion } from "./assertion.js";
+import { workspaceOf } from "./naming.js";
+import { printable } from "./prompter.js";
+import { revokeGrant } from "./revoke.js";
+export const PAIRING_TIMEOUT_MS = 10 * 60_000;
+export class UnrevokedGrant extends Error {
+    grant;
+    name = "UnrevokedGrant";
+    constructor(grant, cause) {
+        super(cause.message, { cause });
+        this.grant = grant;
+    }
+}
+const MATCHING_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+const base64url = (bytes) => bytes.toString("base64url");
+function matchingCode() {
+    const part = () => Array.from({ length: 3 }, () => MATCHING_ALPHABET[randomInt(MATCHING_ALPHABET.length)]).join("");
+    return `${part()}-${part()}`;
+}
+async function appNameOf(origin) {
+    const response = await fetch(`${origin}/_parlor/manifest`);
+    if (!response.ok) {
+        throw new Error(`${origin} answered HTTP ${response.status}; is it a Parlor app?`);
+    }
+    const manifest = (await response.json());
+    return typeof manifest.app?.name === "string"
+        ? manifest.app.name
+        : new URL(origin).host;
+}
+const escapeHtml = (text) => printable(text).replace(/[&<>"']/g, (char) => `&#${char.charCodeAt(0)};`);
+const RESULT_STYLE = `:root{color-scheme:light dark;--bg:#f6f6f4;--card:#fff;--text:#1d1d1b;--muted:#5f5f5a;--line:#e2e2dc}@media (prefers-color-scheme:dark){:root{--bg:#151514;--card:#1f1f1d;--text:#ededea;--muted:#a3a39d;--line:#34342f}}*{box-sizing:border-box}body{margin:0;min-height:100vh;display:grid;place-items:center;padding:16px;background:var(--bg);color:var(--text);font:15px/1.5 system-ui,-apple-system,"Segoe UI",sans-serif}main{width:100%;max-width:420px;background:var(--card);border:1px solid var(--line);border-radius:12px;padding:28px}h1{font-size:20px;line-height:1.3;margin:0 0 8px}p{margin:0;color:var(--muted)}`;
+function resultPage(heading, detail) {
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(heading)}</title><style>${RESULT_STYLE}</style></head><body><main><h1>${escapeHtml(heading)}</h1><p>${escapeHtml(detail)}</p></main></body></html>`;
+}
+/** Holds the browser's request until the exchange settles, so the tab says what happened. */
+async function loopback(state) {
+    let deliver = () => undefined;
+    const callback = new Promise((resolve) => (deliver = resolve));
+    let waiting;
+    const server = createServer((request, response) => {
+        const url = new URL(request.url ?? "/", "http://127.0.0.1");
+        if (waiting ||
+            url.pathname !== "/callback" ||
+            url.searchParams.get("state") !== state) {
+            response
+                .writeHead(404, { "content-type": "text/plain" })
+                .end("Not this connection.");
+            return;
+        }
+        waiting = response;
+        const code = url.searchParams.get("code");
+        deliver(code ? { code } : { declined: true });
+    });
+    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+    const { port } = server.address();
+    const answer = (heading, detail) => {
+        if (!waiting || waiting.headersSent)
+            return;
+        waiting
+            .writeHead(200, { "content-type": "text/html; charset=utf-8" })
+            .end(resultPage(heading, detail));
+    };
+    return {
+        redirectUri: `http://127.0.0.1:${port}/callback`,
+        callback,
+        answer,
+        redirect: (url) => {
+            if (!waiting || waiting.headersSent)
+                return;
+            waiting.writeHead(303, { location: url, "cache-control": "no-store" }).end();
+        },
+        close: () => {
+            answer("Parlor Host stopped", "Go back to your terminal.");
+            server.close();
+        },
+    };
+}
+async function exchange(origin, key, code, codeVerifier) {
+    const response = await fetch(`${origin}/_parlor/auth/hosts/token`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+            code,
+            codeVerifier,
+            publicKey: key.publicKey,
+            proof: await key.sign(new TextEncoder().encode(code)),
+        }),
+    });
+    const body = (await response.json().catch(() => undefined));
+    if (!response.ok || !body?.grant) {
+        throw new Error(body?.error?.message ?? `The app answered HTTP ${response.status}.`);
+    }
+    return body;
+}
+function timeout(ms) {
+    let timer;
+    const expired = new Promise((resolve) => {
+        timer = setTimeout(() => resolve("timeout"), ms);
+    });
+    return { expired, clear: () => clearTimeout(timer) };
+}
+/**
+ * Only the host starts a pairing: it makes the PKCE verifier, `state`, the matching code
+ * and the key pair, so nothing from the web side can complete one.
+ */
+export async function pair(input) {
+    const origin = new URL(input.appOrigin).origin;
+    const appName = await appNameOf(origin);
+    const key = await input.keys.create(origin);
+    const codeVerifier = base64url(randomBytes(32));
+    const pairing = {
+        hostName: input.hostName,
+        platform: input.platform,
+        codeChallenge: base64url(createHash("sha256").update(codeVerifier).digest()),
+        state: base64url(randomBytes(16)),
+        matchingCode: matchingCode(),
+        keyThumbprint: key.thumbprint,
+    };
+    const grantOf = (granted) => ({
+        appOrigin: origin,
+        appName,
+        grantId: granted.grant.id,
+        hostId: granted.grant.hostId,
+        account: granted.account,
+        workspace: workspaceOf(input.workspaceRoot, origin),
+        createdAt: Date.now(),
+    });
+    const deadline = timeout(PAIRING_TIMEOUT_MS);
+    try {
+        if (input.channel.kind === "browser") {
+            const listener = await loopback(pairing.state);
+            try {
+                const query = new URLSearchParams({
+                    redirectUri: listener.redirectUri,
+                    ...pairing,
+                });
+                await input.channel.open(`${origin}/_parlor/auth/hosts/authorize?${query}`);
+                const callback = await Promise.race([listener.callback, deadline.expired]);
+                if (callback === "timeout")
+                    return { paired: false, reason: "timeout" };
+                if (!("code" in callback)) {
+                    listener.answer("Not connected", "You cancelled the connection.");
+                    return { paired: false, reason: "declined_in_app" };
+                }
+                let granted;
+                try {
+                    granted = await exchange(origin, key, callback.code, codeVerifier);
+                }
+                catch (error) {
+                    listener.answer("Not connected", error.message);
+                    throw error;
+                }
+                await key.keep(granted.grant.id);
+                const pairingSecret = base64url(randomBytes(32));
+                listener.redirect(`${origin}/#${new URLSearchParams({ [HOST_PAIRING_FRAGMENT]: pairingSecret })}`);
+                return {
+                    paired: true,
+                    grant: { ...grantOf(granted), pairingSecret },
+                    approvedBy: granted.approvedBy,
+                };
+            }
+            finally {
+                listener.close();
+            }
+        }
+        const callback = await Promise.race([
+            input.channel.authorize(pairing).then((code) => ({ code })),
+            deadline.expired,
+        ]);
+        if (callback === "timeout")
+            return { paired: false, reason: "timeout" };
+        const granted = await exchange(origin, key, callback.code, codeVerifier);
+        const grant = grantOf(granted);
+        const confirmed = await Promise.race([
+            input.channel.confirm({
+                appName,
+                appOrigin: origin,
+                account: granted.account,
+                matchingCode: pairing.matchingCode,
+            }),
+            deadline.expired,
+        ]);
+        if (confirmed !== true) {
+            await revokeGrant({
+                appOrigin: origin,
+                appName,
+                assert: (request) => hostAssertion((payload) => key.sign(payload), { kid: key.thumbprint, grantId: grant.grantId }, request),
+            }).catch(async (error) => {
+                await key.keep(grant.grantId);
+                throw new UnrevokedGrant({ ...grant, declined: true }, error);
+            });
+            return {
+                paired: false,
+                reason: confirmed === "timeout" ? "timeout" : "declined_locally",
+            };
+        }
+        await key.keep(grant.grantId);
+        return { paired: true, grant, approvedBy: granted.approvedBy };
+    }
+    finally {
+        deadline.clear();
+    }
+}
+function deferred() {
+    let resolve;
+    let reject;
+    const promise = new Promise((done, fail) => {
+        resolve = done;
+        reject = fail;
+    });
+    promise.catch(() => undefined);
+    return { promise, resolve, reject };
+}
+export function startLocalPairing(input) {
+    const ready = deferred();
+    const code = deferred();
+    const review = deferred();
+    const decision = deferred();
+    const outcome = pair({
+        ...input,
+        channel: {
+            kind: "ipc",
+            authorize: (pairing) => {
+                ready.resolve(pairing);
+                return code.promise;
+            },
+            confirm: (shown) => {
+                review.resolve({
+                    account: printable(shown.account.email ?? shown.account.name),
+                    appName: printable(shown.appName),
+                    matchingCode: shown.matchingCode,
+                });
+                return decision.promise;
+            },
+        },
+    });
+    outcome.then((result) => {
+        if (result.paired)
+            return;
+        const stopped = new Error(`The pairing ended: ${result.reason}.`);
+        ready.reject(stopped);
+        review.reject(stopped);
+    }, (error) => {
+        ready.reject(error);
+        review.reject(error);
+    });
+    outcome.catch(() => undefined);
+    return {
+        pairing: ready.promise,
+        finish: (value) => {
+            code.resolve(value);
+            return review.promise;
+        },
+        confirm: (connect) => {
+            decision.resolve(connect);
+            return outcome;
+        },
+    };
+}
+const isText = (value) => typeof value === "string" && value !== "";
+const isPoint = (value) => {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const key = value;
+    return key.kty === "EC" && key.crv === "P-256" && isText(key.x) && isText(key.y);
+};
+function presenceKeyOf(value) {
+    if (typeof value !== "object" || value === null)
+        return undefined;
+    const key = value;
+    if (!isPoint(key.publicKey))
+        return undefined;
+    const publicKey = { kty: "EC", crv: "P-256", x: key.publicKey.x, y: key.publicKey.y };
+    if (key.format === "webauthn" && isText(key.credentialId) && isText(key.rpId)) {
+        return {
+            format: "webauthn",
+            credentialId: key.credentialId,
+            rpId: key.rpId,
+            publicKey,
+        };
+    }
+    if (key.format === "es256-raw" && isText(key.keyId)) {
+        return { format: "es256-raw", keyId: key.keyId, publicKey };
+    }
+    return undefined;
+}
+export function pairingDeviceOf(value) {
+    if (typeof value !== "object" || value === null)
+        return undefined;
+    const device = value;
+    if (!isText(device.deviceId) || !isText(device.name) || !isText(device.platform)) {
+        return undefined;
+    }
+    if (!isPoint(device.signingKey))
+        return undefined;
+    return {
+        deviceId: device.deviceId,
+        name: device.name,
+        platform: device.platform,
+        signingKey: {
+            kty: "EC",
+            crv: "P-256",
+            x: device.signingKey.x,
+            y: device.signingKey.y,
+        },
+        presenceKey: presenceKeyOf(device.presenceKey),
+    };
+}
+//# sourceMappingURL=pairing.js.map

package/dist/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,YAAY,EAAoC,MAAM,WAAW,CAAC;AAG3E,OAAO,EAEL,qBAAqB,GAEtB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AA2C9C,MAAM,OAAO,cAAe,SAAQ,KAAK;IAG5B,KAAK;IAFE,IAAI,GAAG,gBAAgB,CAAC;IAC1C,YACW,KAAe,EACxB,KAAY;QAEZ,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;qBAHvB,KAAK;IAIhB,CAAC;CACF;AAED,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;AAE7D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEjE,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,GAAG,EAAE,CAChB,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,CAAC,EAAE,EACb,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAC7D,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAc;IACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,kBAAkB,QAAQ,CAAC,MAAM,uBAAuB,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAEtC,CAAC;IACF,OAAO,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,KAAK,QAAQ;QAC3C,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;QACnB,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;AAC3B,CAAC;AAID,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAE5E,MAAM,YAAY,GAAG,qmBAAqmB,CAAC;AAE3nB,SAAS,UAAU,CAAC,OAAe,EAAE,MAAc;IACjD,OAAO,yIAAyI,UAAU,CAAC,OAAO,CAAC,kBAAkB,YAAY,kCAAkC,UAAU,CAAC,OAAO,CAAC,WAAW,UAAU,CAAC,MAAM,CAAC,2BAA2B,CAAC;AACjT,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,QAAQ,CAAC,KAAa;IAOnC,IAAI,OAAO,GAAiC,GAAG,EAAE,CAAC,SAAS,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IACzE,IAAI,OAAmC,CAAC;IACxC,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC5D,IACE,OAAO;YACP,GAAG,CAAC,QAAQ,KAAK,WAAW;YAC5B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EACvC,CAAC;YACD,QAAQ;iBACL,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;iBAChD,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,OAAO,GAAG,QAAQ,CAAC;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE;QACjD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO;QAC5C,OAAO;aACJ,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;aAC9D,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,OAAO;QACL,WAAW,EAAE,oBAAoB,IAAI,WAAW;QAChD,QAAQ;QACR,MAAM;QACN,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO;YAC5C,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/E,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,CAAC,qBAAqB,EAAE,2BAA2B,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAc,EACd,GAAgB,EAChB,IAAY,EACZ,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,2BAA2B,EAAE;QACjE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI;YACJ,YAAY;YACZ,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SACtD,CAAC;KACH,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAE7C,CAAC;IACd,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,yBAAyB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IAIzB,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;QACjD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAgB;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,OAAO,GAAgB;QAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5E,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjC,YAAY,EAAE,YAAY,EAAE;QAC5B,aAAa,EAAE,GAAG,CAAC,UAAU;KAC9B,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,OAA0B,EAAY,EAAE,CAAC,CAAC;QACzD,SAAS,EAAE,MAAM;QACjB,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;QACnD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;oBAChC,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,GAAG,OAAO;iBACX,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,iCAAiC,KAAK,EAAE,CAAC,CAAC;gBAC5E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC3E,IAAI,QAAQ,KAAK,SAAS;oBAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBACxE,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;oBAClE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;gBACtD,CAAC;gBACD,IAAI,OAA0B,CAAC;gBAC/B,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACrE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;oBAC3D,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjC,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjD,QAAQ,CAAC,QAAQ,CACf,GAAG,MAAM,KAAK,IAAI,eAAe,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAChF,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE;oBAC7C,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAClC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,QAAQ,CAAC,OAAO;SACjB,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACnC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBACpB,OAAO;gBACP,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC;YACF,QAAQ,CAAC,OAAO;SACjB,CAAC,CAAC;QACH,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,WAAW,CAAC;gBAChB,SAAS,EAAE,MAAM;gBACjB,OAAO;gBACP,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAClB,aAAa,CACX,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAC9B,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAC/C,OAAO,CACR;aACJ,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAY,EAAE,EAAE;gBAC9B,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM,IAAI,cAAc,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;aACjE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,SAAS,QAAQ;IACf,IAAI,OAA4B,CAAC;IACjC,IAAI,MAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC5C,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAmBD,MAAM,UAAU,iBAAiB,CAAC,KAAiC;IACjE,MAAM,KAAK,GAAG,QAAQ,EAAe,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,EAAU,CAAC;IAChC,MAAM,MAAM,GAAG,QAAQ,EAAsB,CAAC;IAC9C,MAAM,QAAQ,GAAG,QAAQ,EAAW,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC;QACnB,GAAG,KAAK;QACR,OAAO,EAAE;YACP,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;gBACrB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO,IAAI,CAAC,OAAO,CAAC;YACtB,CAAC;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,MAAM,CAAC,OAAO,CAAC;oBACb,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC7D,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;oBACjC,YAAY,EAAE,KAAK,CAAC,YAAY;iBACjC,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,OAAO,CAAC;YAC1B,CAAC;SACF;KACF,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,EAAE,EAAE;QACT,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO;QAC1B,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAClE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CACF,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QACD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;YACnB,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAmB,EAAE,CACjD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC;AAI5C,MAAM,OAAO,GAAG,CAAC,KAAc,EAAkB,EAAE;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC,CAAC;AAEF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IACtF,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS;SACV,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE;YACV,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,OAAO;YACZ,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC;KAC/C,CAAC;AACJ,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,19 @@
+export interface HostPaths {
+    readonly root: string;
+    readonly grants: string;
+    readonly trust: string;
+    readonly policy: string;
+    readonly sessions: string;
+    readonly agents: string;
+    readonly control: string;
+    readonly proxy: string;
+    readonly versions: string;
+    /** What the login item points at; a link into `versions/<version>/`, never into an app bundle. */
+    readonly current: string;
+    readonly lock: string;
+    readonly logs: string;
+    readonly launchAgent: string;
+    readonly workspaces: string;
+}
+export declare function hostPaths(root?: string): HostPaths;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,SAAS,CAAC,IAAI,GAAE,MAA2C,GAAG,SAAS,CAmBtF"}

package/dist/paths.js

@@ -0,0 +1,23 @@
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+export function hostPaths(root = join(homedir(), ".parlor", "host")) {
+    const run = join(root, "run");
+    const home = dirname(dirname(root));
+    return {
+        root,
+        grants: join(root, "grants.json"),
+        trust: join(root, "trust.json"),
+        policy: join(root, "policy.json"),
+        sessions: join(root, "sessions.json"),
+        agents: join(root, "agents.json"),
+        control: join(run, "control.sock"),
+        proxy: join(run, "proxy.sock"),
+        versions: join(root, "versions"),
+        current: join(root, "current"),
+        lock: join(root, "service.lock"),
+        logs: join(root, "logs"),
+        launchAgent: join(home, "Library", "LaunchAgents", "dev.parlor.host.plist"),
+        workspaces: join(home, "Parlor"),
+    };
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoB1C,MAAM,UAAU,SAAS,CAAC,IAAI,GAAW,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACjC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QACrC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QAClC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;QAC9B,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,uBAAuB,CAAC;QAC3E,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,37 @@
+import type { AgentAsk } from "./acp.js";
+import type { TrustedDevice } from "./trust.js";
+/**
+ * What this computer enforces on remote turns, whatever the app or its backend says. Set
+ * only on this computer (`parlor-host config` or the Mac app's settings).
+ */
+export interface RemotePolicy {
+    /** `local`: an untrusted device is approved in a dialog here before its first prompt runs. */
+    readonly deviceApproval: "local" | "off";
+    /**
+     * Where an answer to the agent's own permission prompts counts: on any trusted device
+     * with presence, only on this computer, or (`parlor dev` only) anywhere.
+     */
+    readonly answers: "presence" | "computer" | "off";
+    /**
+     * How long a linked device with Face ID or Touch ID sends before its next prompt needs them
+     * again. Absent: never.
+     */
+    readonly promptPresence?: {
+        readonly maxAgeHours: number;
+    } | "off" | undefined;
+}
+export declare const DEFAULT_POLICY: RemotePolicy;
+export declare const DEV_POLICY: RemotePolicy;
+/** When `device`'s prompts need Face ID or Touch ID again; undefined when they never do. */
+export declare function presenceDueAt(policy: RemotePolicy, device: TrustedDevice): number | undefined;
+/**
+ * The app's own tools are allowed once without asking: the server already enforces the
+ * app's `confirm: true`, and asking twice only teaches users to click through.
+ */
+export declare function isAppTool(ask: AgentAsk, appServer: string): boolean;
+/** The ask item's `approval`; `undefined` lets any trusted device answer without presence. */
+export declare function approvalFor(policy: RemotePolicy, ask: AgentAsk): "presence" | "computer" | undefined;
+/** `base` with the settings `parlor-host config` wrote to `file`; read afresh on every call. */
+export declare function loadPolicy(file: string, base: RemotePolicy): Promise<RemotePolicy>;
+export declare function changePolicy(file: string, base: RemotePolicy, change: Partial<RemotePolicy>): Promise<RemotePolicy>;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,EAAE,OAAO,GAAG,KAAK,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,KAAK,CAAC;IAClD;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,GAAG,SAAS,CAAC;CAChF;AAED,eAAO,MAAM,cAAc,EAAE,YAI5B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,YAIxB,CAAC;AAEF,4FAA4F;AAC5F,wBAAgB,aAAa,CAC3B,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,aAAa,GACpB,MAAM,GAAG,SAAS,CAIpB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,QAAQ,GACZ,UAAU,GAAG,UAAU,GAAG,SAAS,CAGrC;AAOD,gGAAgG;AAChG,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,YAAY,CAAC,CAYvB;AAaD,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAC5B,OAAO,CAAC,YAAY,CAAC,CAGvB"}

package/dist/policy.js

@@ -0,0 +1,60 @@
+import { jsonFile } from "./json-file.js";
+export const DEFAULT_POLICY = {
+    deviceApproval: "local",
+    answers: "presence",
+    promptPresence: { maxAgeHours: 18 },
+};
+export const DEV_POLICY = {
+    deviceApproval: "off",
+    answers: "off",
+    promptPresence: "off",
+};
+/** When `device`'s prompts need Face ID or Touch ID again; undefined when they never do. */
+export function presenceDueAt(policy, device) {
+    const setting = policy.promptPresence;
+    if (setting === undefined || setting === "off" || !device.presenceKey)
+        return undefined;
+    return (device.presenceAt ?? device.approvedAt) + setting.maxAgeHours * 3_600_000;
+}
+/**
+ * The app's own tools are allowed once without asking: the server already enforces the
+ * app's `confirm: true`, and asking twice only teaches users to click through.
+ */
+export function isAppTool(ask, appServer) {
+    return ask.kind === "permission" && ask.mcp?.server === appServer;
+}
+/** The ask item's `approval`; `undefined` lets any trusted device answer without presence. */
+export function approvalFor(policy, ask) {
+    if (ask.kind === "question" || policy.answers === "off")
+        return undefined;
+    return policy.answers;
+}
+const choose = (allowed, value, base) => allowed.find((candidate) => candidate === value) ?? base;
+/** `base` with the settings `parlor-host config` wrote to `file`; read afresh on every call. */
+export async function loadPolicy(file, base) {
+    let overlay;
+    try {
+        overlay = await jsonFile(file).read();
+    }
+    catch {
+        return base;
+    }
+    return {
+        deviceApproval: choose(["local", "off"], overlay.deviceApproval, base.deviceApproval),
+        answers: choose(["presence", "computer", "off"], overlay.answers, base.answers),
+        promptPresence: promptPresenceOf(overlay.promptPresence, base.promptPresence),
+    };
+}
+function promptPresenceOf(value, base) {
+    if (value === "off")
+        return "off";
+    const hours = value?.maxAgeHours;
+    return typeof hours === "number" && Number.isFinite(hours) && hours > 0
+        ? { maxAgeHours: hours }
+        : base;
+}
+export async function changePolicy(file, base, change) {
+    await jsonFile(file).change((overlay) => Object.assign(overlay, change));
+    return loadPolicy(file, base);
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAsB1C,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,cAAc,EAAE,OAAO;IACvB,OAAO,EAAE,UAAU;IACnB,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;CACpC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,cAAc,EAAE,KAAK;IACrB,OAAO,EAAE,KAAK;IACd,cAAc,EAAE,KAAK;CACtB,CAAC;AAEF,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAC3B,MAAoB,EACpB,MAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACxF,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAa,EAAE,SAAiB;IACxD,OAAO,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;AACpE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CACzB,MAAoB,EACpB,GAAa;IAEb,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC1E,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAID,MAAM,MAAM,GAAG,CAAmB,OAAqB,EAAE,KAAc,EAAE,IAAO,EAAK,EAAE,CACrF,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;AAE3D,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,IAAkB;IAElB,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAU,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC;QACrF,OAAO,EAAE,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;QAC/E,cAAc,EAAE,gBAAgB,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAc,EACd,IAAoC;IAEpC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,KAAK,GAAI,KAAmD,EAAE,WAAW,CAAC;IAChF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACrE,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE;QACxB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAkB,EAClB,MAA6B;IAE7B,MAAM,QAAQ,CAAU,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC"}

package/dist/pool.d.ts

@@ -0,0 +1,34 @@
+import type { AgentConnection, AgentSession } from "./acp.js";
+import type { AppGrant } from "./grants.js";
+import type { ProxySession } from "./mcp-proxy.js";
+export interface LiveSession {
+    readonly session: AgentSession;
+    readonly proxy: ProxySession;
+}
+export type PooledGrant = Pick<AppGrant, "appOrigin" | "grantId">;
+/**
+ * Processes per (app, agent), so two apps never share an agent process or its MCP
+ * servers; sessions per (grant, thread, agent), so a thread keeps its context across
+ * turns and never carries it to another account.
+ */
+export interface SessionPool {
+    process(appOrigin: string, agentId: string): AgentConnection | undefined;
+    /**
+     * The running process, or the one `start` launches for every turn that asks meanwhile.
+     * A `drop` during the launch aborts `signal` and kills whatever `start` returns.
+     */
+    launch(appOrigin: string, agentId: string, start: (signal: AbortSignal) => Promise<AgentConnection>): Promise<AgentConnection>;
+    session(grant: PooledGrant, threadId: string, agentId: string): LiveSession | undefined;
+    remember(grant: PooledGrant, threadId: string, agentId: string, session: LiveSession): void;
+    /** The last session id, from `sessions.json`, for `session/resume` after a restart. */
+    resumable(grant: PooledGrant, threadId: string, agentId: string): Promise<string | undefined>;
+    drop(appOrigin: string, agentId?: string): Promise<void>;
+    /** Erases the grant's remembered session ids, once the grant is gone. */
+    forget(grant: PooledGrant): Promise<void>;
+}
+/**
+ * Sessions live inside their process: `launch()` hands out the connection with its
+ * sessions tracked, so dropping a process forgets every session it held.
+ */
+export declare function createSessionPool(stateFile: string): SessionPool;
+//# sourceMappingURL=pool.d.ts.map

package/dist/pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../src/pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAAC;IACzE;;;OAGG;IACH,MAAM,CACJ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,eAAe,CAAC,GACvD,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IACxF,QAAQ,CACN,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,WAAW,GACnB,IAAI,CAAC;IACR,uFAAuF;IACvF,SAAS,CACP,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,yEAAyE;IACzE,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAYD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAyGhE"}

package/dist/pool.js

@@ -0,0 +1,112 @@
+import { jsonFile } from "./json-file.js";
+const keyOf = (...parts) => parts.join("\u0000");
+const sessionKeyOf = (grant, threadId, agentId) => keyOf(grant.appOrigin, grant.grantId, threadId, agentId);
+/**
+ * Sessions live inside their process: `launch()` hands out the connection with its
+ * sessions tracked, so dropping a process forgets every session it held.
+ */
+export function createSessionPool(stateFile) {
+    const processes = new Map();
+    const launching = new Map();
+    const owners = new WeakMap();
+    const sessions = new Map();
+    const remembered = jsonFile(stateFile);
+    const discard = (owner) => {
+        processes.delete(owner);
+        for (const [key, entry] of sessions) {
+            if (entry.owner !== owner)
+                continue;
+            entry.live.proxy.dispose();
+            sessions.delete(key);
+        }
+    };
+    const adopt = (owner, connection) => {
+        const tracked = {
+            capabilities: connection.capabilities,
+            exited: connection.exited,
+            kill: () => connection.kill(),
+            openSession: async (input) => {
+                const session = await connection.openSession(input);
+                owners.set(session, owner);
+                return session;
+            },
+        };
+        processes.set(owner, tracked);
+        void connection.exited.then(() => {
+            if (processes.get(owner) === tracked)
+                discard(owner);
+        });
+        return tracked;
+    };
+    const ownedBy = (appOrigin, agentId) => (owner) => agentId === undefined
+        ? owner.startsWith(keyOf(appOrigin, ""))
+        : owner === keyOf(appOrigin, agentId);
+    return {
+        process: (appOrigin, agentId) => processes.get(keyOf(appOrigin, agentId)),
+        launch(appOrigin, agentId, start) {
+            const owner = keyOf(appOrigin, agentId);
+            const running = processes.get(owner);
+            if (running)
+                return Promise.resolve(running);
+            const pending = launching.get(owner);
+            if (pending)
+                return pending.connection;
+            const controller = new AbortController();
+            const connection = (async () => {
+                try {
+                    const started = await start(controller.signal);
+                    if (controller.signal.aborted) {
+                        await started.kill();
+                        throw new Error("This computer stopped serving the app while the agent started.");
+                    }
+                    return adopt(owner, started);
+                }
+                finally {
+                    if (launching.get(owner)?.controller === controller)
+                        launching.delete(owner);
+                }
+            })();
+            launching.set(owner, { controller, connection });
+            return connection;
+        },
+        session: (grant, threadId, agentId) => sessions.get(sessionKeyOf(grant, threadId, agentId))?.live,
+        remember(grant, threadId, agentId, live) {
+            const owner = keyOf(grant.appOrigin, agentId);
+            if (owners.get(live.session) !== owner || processes.get(owner) === undefined) {
+                throw new Error("Remember a session opened through the pool's own process.");
+            }
+            const key = sessionKeyOf(grant, threadId, agentId);
+            sessions.set(key, { live, owner });
+            void remembered
+                .change((all) => void (all[key] = live.session.id))
+                .catch(() => undefined);
+        },
+        resumable: async (grant, threadId, agentId) => {
+            const all = await remembered.read().catch(() => ({}));
+            return all[sessionKeyOf(grant, threadId, agentId)];
+        },
+        async drop(appOrigin, agentId) {
+            const owned = ownedBy(appOrigin, agentId);
+            for (const [owner, pending] of launching) {
+                if (!owned(owner))
+                    continue;
+                launching.delete(owner);
+                pending.controller.abort();
+            }
+            const dropped = [...processes].filter(([owner]) => owned(owner));
+            for (const [owner] of dropped)
+                discard(owner);
+            await Promise.all(dropped.map(([, connection]) => connection.kill()));
+        },
+        async forget(grant) {
+            const prefix = keyOf(grant.appOrigin, grant.grantId, "");
+            await remembered.change((all) => {
+                for (const key of Object.keys(all)) {
+                    if (key.startsWith(prefix))
+                        delete all[key];
+                }
+            });
+        },
+    };
+}
+//# sourceMappingURL=pool.js.map