@parlor/agent-host 0.0.0-stage → 0.2.0

package/dist/pairing.js

@@ -0,0 +1,312 @@
+import { createHash, randomBytes, randomInt } from "node:crypto";
+import { createServer } from "node:http";
+import { HOST_PAIRING_FRAGMENT, } from "@parlor/auth";
+import { hostAssertion } from "./assertion.js";
+import { workspaceOf } from "./naming.js";
+import { printable } from "./prompter.js";
+import { revokeGrant } from "./revoke.js";
+export const PAIRING_TIMEOUT_MS = 10 * 60_000;
+export class UnrevokedGrant extends Error {
+    grant;
+    name = "UnrevokedGrant";
+    constructor(grant, cause) {
+        super(cause.message, { cause });
+        this.grant = grant;
+    }
+}
+const MATCHING_ALPHABET = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
+const base64url = (bytes) => bytes.toString("base64url");
+function matchingCode() {
+    const part = () => Array.from({ length: 3 }, () => MATCHING_ALPHABET[randomInt(MATCHING_ALPHABET.length)]).join("");
+    return `${part()}-${part()}`;
+}
+async function appNameOf(origin) {
+    const response = await fetch(`${origin}/_parlor/manifest`);
+    if (!response.ok) {
+        throw new Error(`${origin} answered HTTP ${response.status}; is it a Parlor app?`);
+    }
+    const manifest = (await response.json());
+    return typeof manifest.app?.name === "string"
+        ? manifest.app.name
+        : new URL(origin).host;
+}
+const escapeHtml = (text) => printable(text).replace(/[&<>"']/g, (char) => `&#${char.charCodeAt(0)};`);
+const RESULT_STYLE = `:root{color-scheme:light dark;--bg:#f6f6f4;--card:#fff;--text:#1d1d1b;--muted:#5f5f5a;--line:#e2e2dc}@media (prefers-color-scheme:dark){:root{--bg:#151514;--card:#1f1f1d;--text:#ededea;--muted:#a3a39d;--line:#34342f}}*{box-sizing:border-box}body{margin:0;min-height:100vh;display:grid;place-items:center;padding:16px;background:var(--bg);color:var(--text);font:15px/1.5 system-ui,-apple-system,"Segoe UI",sans-serif}main{width:100%;max-width:420px;background:var(--card);border:1px solid var(--line);border-radius:12px;padding:28px}h1{font-size:20px;line-height:1.3;margin:0 0 8px}p{margin:0;color:var(--muted)}`;
+function resultPage(heading, detail) {
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escapeHtml(heading)}</title><style>${RESULT_STYLE}</style></head><body><main><h1>${escapeHtml(heading)}</h1><p>${escapeHtml(detail)}</p></main></body></html>`;
+}
+/** Holds the browser's request until the exchange settles, so the tab says what happened. */
+async function loopback(state) {
+    let deliver = () => undefined;
+    const callback = new Promise((resolve) => (deliver = resolve));
+    let waiting;
+    const server = createServer((request, response) => {
+        const url = new URL(request.url ?? "/", "http://127.0.0.1");
+        if (waiting ||
+            url.pathname !== "/callback" ||
+            url.searchParams.get("state") !== state) {
+            response
+                .writeHead(404, { "content-type": "text/plain" })
+                .end("Not this connection.");
+            return;
+        }
+        waiting = response;
+        const code = url.searchParams.get("code");
+        deliver(code ? { code } : { declined: true });
+    });
+    await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+    const { port } = server.address();
+    const answer = (heading, detail) => {
+        if (!waiting || waiting.headersSent)
+            return;
+        waiting
+            .writeHead(200, { "content-type": "text/html; charset=utf-8" })
+            .end(resultPage(heading, detail));
+    };
+    return {
+        redirectUri: `http://127.0.0.1:${port}/callback`,
+        callback,
+        answer,
+        redirect: (url) => {
+            if (!waiting || waiting.headersSent)
+                return;
+            waiting.writeHead(303, { location: url, "cache-control": "no-store" }).end();
+        },
+        close: () => {
+            answer("Parlor Host stopped", "Go back to your terminal.");
+            server.close();
+        },
+    };
+}
+async function exchange(origin, key, code, codeVerifier) {
+    const response = await fetch(`${origin}/_parlor/auth/hosts/token`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+            code,
+            codeVerifier,
+            publicKey: key.publicKey,
+            proof: await key.sign(new TextEncoder().encode(code)),
+        }),
+    });
+    const body = (await response.json().catch(() => undefined));
+    if (!response.ok || !body?.grant) {
+        throw new Error(body?.error?.message ?? `The app answered HTTP ${response.status}.`);
+    }
+    return body;
+}
+function timeout(ms) {
+    let timer;
+    const expired = new Promise((resolve) => {
+        timer = setTimeout(() => resolve("timeout"), ms);
+    });
+    return { expired, clear: () => clearTimeout(timer) };
+}
+/**
+ * Only the host starts a pairing: it makes the PKCE verifier, `state`, the matching code
+ * and the key pair, so nothing from the web side can complete one.
+ */
+export async function pair(input) {
+    const origin = new URL(input.appOrigin).origin;
+    const appName = await appNameOf(origin);
+    const key = await input.keys.create(origin);
+    const codeVerifier = base64url(randomBytes(32));
+    const pairing = {
+        hostName: input.hostName,
+        platform: input.platform,
+        codeChallenge: base64url(createHash("sha256").update(codeVerifier).digest()),
+        state: base64url(randomBytes(16)),
+        matchingCode: matchingCode(),
+        keyThumbprint: key.thumbprint,
+    };
+    const grantOf = (granted) => ({
+        appOrigin: origin,
+        appName,
+        grantId: granted.grant.id,
+        hostId: granted.grant.hostId,
+        account: granted.account,
+        workspace: workspaceOf(input.workspaceRoot, origin),
+        createdAt: Date.now(),
+    });
+    const deadline = timeout(PAIRING_TIMEOUT_MS);
+    try {
+        if (input.channel.kind === "browser") {
+            const listener = await loopback(pairing.state);
+            try {
+                const query = new URLSearchParams({
+                    redirectUri: listener.redirectUri,
+                    ...pairing,
+                });
+                await input.channel.open(`${origin}/_parlor/auth/hosts/authorize?${query}`);
+                const callback = await Promise.race([listener.callback, deadline.expired]);
+                if (callback === "timeout")
+                    return { paired: false, reason: "timeout" };
+                if (!("code" in callback)) {
+                    listener.answer("Not connected", "You cancelled the connection.");
+                    return { paired: false, reason: "declined_in_app" };
+                }
+                let granted;
+                try {
+                    granted = await exchange(origin, key, callback.code, codeVerifier);
+                }
+                catch (error) {
+                    listener.answer("Not connected", error.message);
+                    throw error;
+                }
+                await key.keep(granted.grant.id);
+                const pairingSecret = base64url(randomBytes(32));
+                listener.redirect(`${origin}/#${new URLSearchParams({ [HOST_PAIRING_FRAGMENT]: pairingSecret })}`);
+                return {
+                    paired: true,
+                    grant: { ...grantOf(granted), pairingSecret },
+                    approvedBy: granted.approvedBy,
+                };
+            }
+            finally {
+                listener.close();
+            }
+        }
+        const callback = await Promise.race([
+            input.channel.authorize(pairing).then((code) => ({ code })),
+            deadline.expired,
+        ]);
+        if (callback === "timeout")
+            return { paired: false, reason: "timeout" };
+        const granted = await exchange(origin, key, callback.code, codeVerifier);
+        const grant = grantOf(granted);
+        const confirmed = await Promise.race([
+            input.channel.confirm({
+                appName,
+                appOrigin: origin,
+                account: granted.account,
+                matchingCode: pairing.matchingCode,
+            }),
+            deadline.expired,
+        ]);
+        if (confirmed !== true) {
+            await revokeGrant({
+                appOrigin: origin,
+                appName,
+                assert: (request) => hostAssertion((payload) => key.sign(payload), { kid: key.thumbprint, grantId: grant.grantId }, request),
+            }).catch(async (error) => {
+                await key.keep(grant.grantId);
+                throw new UnrevokedGrant({ ...grant, declined: true }, error);
+            });
+            return {
+                paired: false,
+                reason: confirmed === "timeout" ? "timeout" : "declined_locally",
+            };
+        }
+        await key.keep(grant.grantId);
+        return { paired: true, grant, approvedBy: granted.approvedBy };
+    }
+    finally {
+        deadline.clear();
+    }
+}
+function deferred() {
+    let resolve;
+    let reject;
+    const promise = new Promise((done, fail) => {
+        resolve = done;
+        reject = fail;
+    });
+    promise.catch(() => undefined);
+    return { promise, resolve, reject };
+}
+export function startLocalPairing(input) {
+    const ready = deferred();
+    const code = deferred();
+    const review = deferred();
+    const decision = deferred();
+    const outcome = pair({
+        ...input,
+        channel: {
+            kind: "ipc",
+            authorize: (pairing) => {
+                ready.resolve(pairing);
+                return code.promise;
+            },
+            confirm: (shown) => {
+                review.resolve({
+                    account: printable(shown.account.email ?? shown.account.name),
+                    appName: printable(shown.appName),
+                    matchingCode: shown.matchingCode,
+                });
+                return decision.promise;
+            },
+        },
+    });
+    outcome.then((result) => {
+        if (result.paired)
+            return;
+        const stopped = new Error(`The pairing ended: ${result.reason}.`);
+        ready.reject(stopped);
+        review.reject(stopped);
+    }, (error) => {
+        ready.reject(error);
+        review.reject(error);
+    });
+    outcome.catch(() => undefined);
+    return {
+        pairing: ready.promise,
+        finish: (value) => {
+            code.resolve(value);
+            return review.promise;
+        },
+        confirm: (connect) => {
+            decision.resolve(connect);
+            return outcome;
+        },
+    };
+}
+const isText = (value) => typeof value === "string" && value !== "";
+const isPoint = (value) => {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const key = value;
+    return key.kty === "EC" && key.crv === "P-256" && isText(key.x) && isText(key.y);
+};
+function presenceKeyOf(value) {
+    if (typeof value !== "object" || value === null)
+        return undefined;
+    const key = value;
+    if (!isPoint(key.publicKey))
+        return undefined;
+    const publicKey = { kty: "EC", crv: "P-256", x: key.publicKey.x, y: key.publicKey.y };
+    if (key.format === "webauthn" && isText(key.credentialId) && isText(key.rpId)) {
+        return {
+            format: "webauthn",
+            credentialId: key.credentialId,
+            rpId: key.rpId,
+            publicKey,
+        };
+    }
+    if (key.format === "es256-raw" && isText(key.keyId)) {
+        return { format: "es256-raw", keyId: key.keyId, publicKey };
+    }
+    return undefined;
+}
+export function pairingDeviceOf(value) {
+    if (typeof value !== "object" || value === null)
+        return undefined;
+    const device = value;
+    if (!isText(device.deviceId) || !isText(device.name) || !isText(device.platform)) {
+        return undefined;
+    }
+    if (!isPoint(device.signingKey))
+        return undefined;
+    return {
+        deviceId: device.deviceId,
+        name: device.name,
+        platform: device.platform,
+        signingKey: {
+            kty: "EC",
+            crv: "P-256",
+            x: device.signingKey.x,
+            y: device.signingKey.y,
+        },
+        presenceKey: presenceKeyOf(device.presenceKey),
+    };
+}
+//# sourceMappingURL=pairing.js.map

package/dist/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,YAAY,EAAoC,MAAM,WAAW,CAAC;AAG3E,OAAO,EAEL,qBAAqB,GAEtB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AA2C9C,MAAM,OAAO,cAAe,SAAQ,KAAK;IAG5B,KAAK;IAFE,IAAI,GAAG,gBAAgB,CAAC;IAC1C,YACW,KAAe,EACxB,KAAY;QAEZ,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;qBAHvB,KAAK;IAIhB,CAAC;CACF;AAED,MAAM,iBAAiB,GAAG,kCAAkC,CAAC;AAE7D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAEjE,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,GAAG,EAAE,CAChB,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,CAAC,EAAE,EACb,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAC7D,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAc;IACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,mBAAmB,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,kBAAkB,QAAQ,CAAC,MAAM,uBAAuB,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAEtC,CAAC;IACF,OAAO,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,KAAK,QAAQ;QAC3C,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI;QACnB,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;AAC3B,CAAC;AAID,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAClC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAE5E,MAAM,YAAY,GAAG,qmBAAqmB,CAAC;AAE3nB,SAAS,UAAU,CAAC,OAAe,EAAE,MAAc;IACjD,OAAO,yIAAyI,UAAU,CAAC,OAAO,CAAC,kBAAkB,YAAY,kCAAkC,UAAU,CAAC,OAAO,CAAC,WAAW,UAAU,CAAC,MAAM,CAAC,2BAA2B,CAAC;AACjT,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,QAAQ,CAAC,KAAa;IAOnC,IAAI,OAAO,GAAiC,GAAG,EAAE,CAAC,SAAS,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IACzE,IAAI,OAAmC,CAAC;IACxC,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC5D,IACE,OAAO;YACP,GAAG,CAAC,QAAQ,KAAK,WAAW;YAC5B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EACvC,CAAC;YACD,QAAQ;iBACL,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;iBAChD,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,OAAO,GAAG,QAAQ,CAAC;QACnB,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,MAAc,EAAE,EAAE;QACjD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO;QAC5C,OAAO;aACJ,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC;aAC9D,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,OAAO;QACL,WAAW,EAAE,oBAAoB,IAAI,WAAW;QAChD,QAAQ;QACR,MAAM;QACN,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE;YAChB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW;gBAAE,OAAO;YAC5C,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/E,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,CAAC,qBAAqB,EAAE,2BAA2B,CAAC,CAAC;YAC3D,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAc,EACd,GAAgB,EAChB,IAAY,EACZ,YAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,2BAA2B,EAAE;QACjE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI;YACJ,YAAY;YACZ,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SACtD,CAAC;KACH,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAE7C,CAAC;IACd,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,yBAAyB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,EAAU;IAIzB,IAAI,KAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,EAAE;QACjD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAgB;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,OAAO,GAAgB;QAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5E,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjC,YAAY,EAAE,YAAY,EAAE;QAC5B,aAAa,EAAE,GAAG,CAAC,UAAU;KAC9B,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,OAA0B,EAAY,EAAE,CAAC,CAAC;QACzD,SAAS,EAAE,MAAM;QACjB,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE;QACzB,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC;QACnD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;oBAChC,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,GAAG,OAAO;iBACX,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,iCAAiC,KAAK,EAAE,CAAC,CAAC;gBAC5E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC3E,IAAI,QAAQ,KAAK,SAAS;oBAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBACxE,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;oBAClE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;gBACtD,CAAC;gBACD,IAAI,OAA0B,CAAC;gBAC/B,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACrE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAG,KAAe,CAAC,OAAO,CAAC,CAAC;oBAC3D,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACjC,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjD,QAAQ,CAAC,QAAQ,CACf,GAAG,MAAM,KAAK,IAAI,eAAe,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAChF,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,EAAE,aAAa,EAAE;oBAC7C,UAAU,EAAE,OAAO,CAAC,UAAU;iBAC/B,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YAClC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,QAAQ,CAAC,OAAO;SACjB,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;YACnC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBACpB,OAAO;gBACP,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,YAAY,EAAE,OAAO,CAAC,YAAY;aACnC,CAAC;YACF,QAAQ,CAAC,OAAO;SACjB,CAAC,CAAC;QACH,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,WAAW,CAAC;gBAChB,SAAS,EAAE,MAAM;gBACjB,OAAO;gBACP,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAClB,aAAa,CACX,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAC9B,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAC/C,OAAO,CACR;aACJ,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAY,EAAE,EAAE;gBAC9B,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM,IAAI,cAAc,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YAChE,CAAC,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB;aACjE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAQD,SAAS,QAAQ;IACf,IAAI,OAA4B,CAAC;IACjC,IAAI,MAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC5C,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAmBD,MAAM,UAAU,iBAAiB,CAAC,KAAiC;IACjE,MAAM,KAAK,GAAG,QAAQ,EAAe,CAAC;IACtC,MAAM,IAAI,GAAG,QAAQ,EAAU,CAAC;IAChC,MAAM,MAAM,GAAG,QAAQ,EAAsB,CAAC;IAC9C,MAAM,QAAQ,GAAG,QAAQ,EAAW,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC;QACnB,GAAG,KAAK;QACR,OAAO,EAAE;YACP,IAAI,EAAE,KAAK;YACX,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;gBACrB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO,IAAI,CAAC,OAAO,CAAC;YACtB,CAAC;YACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBACjB,MAAM,CAAC,OAAO,CAAC;oBACb,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;oBAC7D,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;oBACjC,YAAY,EAAE,KAAK,CAAC,YAAY;iBACjC,CAAC,CAAC;gBACH,OAAO,QAAQ,CAAC,OAAO,CAAC;YAC1B,CAAC;SACF;KACF,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CACV,CAAC,MAAM,EAAE,EAAE;QACT,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO;QAC1B,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAClE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;QACjB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CACF,CAAC;IACF,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QACD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE;YACnB,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,KAAc,EAAmB,EAAE,CACjD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC;AAI5C,MAAM,OAAO,GAAG,CAAC,KAAc,EAAkB,EAAE;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,OAAO,GAAG,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC,CAAC;AAEF,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;IACtF,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,SAAS;SACV,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE;YACV,GAAG,EAAE,IAAI;YACT,GAAG,EAAE,OAAO;YACZ,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;SACvB;QACD,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC;KAC/C,CAAC;AACJ,CAAC","sourcesContent":["import { createHash, randomBytes, randomInt } from \"node:crypto\";\nimport { createServer, type Server, type ServerResponse } from \"node:http\";\nimport type { AddressInfo } from \"node:net\";\n\nimport {\n  type AccountSummary,\n  HOST_PAIRING_FRAGMENT,\n  type HostGrantResponse,\n} from \"@parlor/auth\";\nimport type { HostPairing, PairingDevice } from \"@parlor/capabilities\";\n\nimport { hostAssertion } from \"./assertion.js\";\nimport type { AppGrant, HostKeyPair, HostKeys } from \"./grants.js\";\nimport { workspaceOf } from \"./naming.js\";\nimport { printable } from \"./prompter.js\";\nimport { revokeGrant } from \"./revoke.js\";\n\nexport const PAIRING_TIMEOUT_MS = 10 * 60_000;\n\nexport interface PairingReview {\n  readonly appName: string;\n  readonly appOrigin: string;\n  readonly account: AccountSummary;\n  readonly matchingCode: string;\n}\n\n/**\n * `browser`: a one-shot 127.0.0.1 listener (RFC 8252) accepting exactly this attempt's\n * `state`; the consent page is the one decision. `ipc`: the desktop shell's signed-in\n * webview gets the code from the backend and hands it over Tauri IPC, with no consent page,\n * so the shell's native dialog confirms the account the host got back.\n */\nexport type PairingChannel =\n  | { readonly kind: \"browser\"; open(url: string): Promise<void> }\n  | {\n      readonly kind: \"ipc\";\n      authorize(pairing: HostPairing): Promise<string>;\n      confirm(review: PairingReview): Promise<boolean>;\n    };\n\nexport interface PairInput {\n  readonly appOrigin: string;\n  readonly hostName: string;\n  readonly platform: string;\n  readonly channel: PairingChannel;\n  readonly keys: HostKeys;\n  readonly workspaceRoot: string;\n}\n\nexport type PairOutcome =\n  | {\n      readonly paired: true;\n      readonly grant: AppGrant;\n      readonly approvedBy: HostGrantResponse[\"approvedBy\"];\n    }\n  | {\n      readonly paired: false;\n      readonly reason: \"declined_locally\" | \"declined_in_app\" | \"timeout\";\n    };\n\nexport class UnrevokedGrant extends Error {\n  override readonly name = \"UnrevokedGrant\";\n  constructor(\n    readonly grant: AppGrant,\n    cause: Error,\n  ) {\n    super(cause.message, { cause });\n  }\n}\n\nconst MATCHING_ALPHABET = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n\nconst base64url = (bytes: Buffer) => bytes.toString(\"base64url\");\n\nfunction matchingCode(): string {\n  const part = () =>\n    Array.from(\n      { length: 3 },\n      () => MATCHING_ALPHABET[randomInt(MATCHING_ALPHABET.length)],\n    ).join(\"\");\n  return `${part()}-${part()}`;\n}\n\nasync function appNameOf(origin: string): Promise<string> {\n  const response = await fetch(`${origin}/_parlor/manifest`);\n  if (!response.ok) {\n    throw new Error(`${origin} answered HTTP ${response.status}; is it a Parlor app?`);\n  }\n  const manifest = (await response.json()) as {\n    readonly app?: { readonly name?: unknown };\n  };\n  return typeof manifest.app?.name === \"string\"\n    ? manifest.app.name\n    : new URL(origin).host;\n}\n\ntype Callback = { readonly code: string } | { readonly declined: true };\n\nconst escapeHtml = (text: string) =>\n  printable(text).replace(/[&<>\"']/g, (char) => `&#${char.charCodeAt(0)};`);\n\nconst RESULT_STYLE = `:root{color-scheme:light dark;--bg:#f6f6f4;--card:#fff;--text:#1d1d1b;--muted:#5f5f5a;--line:#e2e2dc}@media (prefers-color-scheme:dark){:root{--bg:#151514;--card:#1f1f1d;--text:#ededea;--muted:#a3a39d;--line:#34342f}}*{box-sizing:border-box}body{margin:0;min-height:100vh;display:grid;place-items:center;padding:16px;background:var(--bg);color:var(--text);font:15px/1.5 system-ui,-apple-system,\"Segoe UI\",sans-serif}main{width:100%;max-width:420px;background:var(--card);border:1px solid var(--line);border-radius:12px;padding:28px}h1{font-size:20px;line-height:1.3;margin:0 0 8px}p{margin:0;color:var(--muted)}`;\n\nfunction resultPage(heading: string, detail: string): string {\n  return `<!doctype html><html lang=\"en\"><head><meta charset=\"utf-8\"><meta name=\"viewport\" content=\"width=device-width, initial-scale=1\"><title>${escapeHtml(heading)}</title><style>${RESULT_STYLE}</style></head><body><main><h1>${escapeHtml(heading)}</h1><p>${escapeHtml(detail)}</p></main></body></html>`;\n}\n\n/** Holds the browser's request until the exchange settles, so the tab says what happened. */\nasync function loopback(state: string): Promise<{\n  readonly redirectUri: string;\n  readonly callback: Promise<Callback>;\n  readonly answer: (heading: string, detail: string) => void;\n  readonly redirect: (url: string) => void;\n  readonly close: () => void;\n}> {\n  let deliver: (callback: Callback) => void = () => undefined;\n  const callback = new Promise<Callback>((resolve) => (deliver = resolve));\n  let waiting: ServerResponse | undefined;\n  const server: Server = createServer((request, response) => {\n    const url = new URL(request.url ?? \"/\", \"http://127.0.0.1\");\n    if (\n      waiting ||\n      url.pathname !== \"/callback\" ||\n      url.searchParams.get(\"state\") !== state\n    ) {\n      response\n        .writeHead(404, { \"content-type\": \"text/plain\" })\n        .end(\"Not this connection.\");\n      return;\n    }\n    waiting = response;\n    const code = url.searchParams.get(\"code\");\n    deliver(code ? { code } : { declined: true });\n  });\n  await new Promise<void>((resolve) => server.listen(0, \"127.0.0.1\", resolve));\n  const { port } = server.address() as AddressInfo;\n  const answer = (heading: string, detail: string) => {\n    if (!waiting || waiting.headersSent) return;\n    waiting\n      .writeHead(200, { \"content-type\": \"text/html; charset=utf-8\" })\n      .end(resultPage(heading, detail));\n  };\n  return {\n    redirectUri: `http://127.0.0.1:${port}/callback`,\n    callback,\n    answer,\n    redirect: (url) => {\n      if (!waiting || waiting.headersSent) return;\n      waiting.writeHead(303, { location: url, \"cache-control\": \"no-store\" }).end();\n    },\n    close: () => {\n      answer(\"Parlor Host stopped\", \"Go back to your terminal.\");\n      server.close();\n    },\n  };\n}\n\nasync function exchange(\n  origin: string,\n  key: HostKeyPair,\n  code: string,\n  codeVerifier: string,\n): Promise<HostGrantResponse> {\n  const response = await fetch(`${origin}/_parlor/auth/hosts/token`, {\n    method: \"POST\",\n    headers: { \"content-type\": \"application/json\" },\n    body: JSON.stringify({\n      code,\n      codeVerifier,\n      publicKey: key.publicKey,\n      proof: await key.sign(new TextEncoder().encode(code)),\n    }),\n  });\n  const body = (await response.json().catch(() => undefined)) as\n    | (HostGrantResponse & { readonly error?: { readonly message?: string } })\n    | undefined;\n  if (!response.ok || !body?.grant) {\n    throw new Error(body?.error?.message ?? `The app answered HTTP ${response.status}.`);\n  }\n  return body;\n}\n\nfunction timeout(ms: number): {\n  readonly expired: Promise<\"timeout\">;\n  readonly clear: () => void;\n} {\n  let timer: NodeJS.Timeout | undefined;\n  const expired = new Promise<\"timeout\">((resolve) => {\n    timer = setTimeout(() => resolve(\"timeout\"), ms);\n  });\n  return { expired, clear: () => clearTimeout(timer) };\n}\n\n/**\n * Only the host starts a pairing: it makes the PKCE verifier, `state`, the matching code\n * and the key pair, so nothing from the web side can complete one.\n */\nexport async function pair(input: PairInput): Promise<PairOutcome> {\n  const origin = new URL(input.appOrigin).origin;\n  const appName = await appNameOf(origin);\n  const key = await input.keys.create(origin);\n  const codeVerifier = base64url(randomBytes(32));\n  const pairing: HostPairing = {\n    hostName: input.hostName,\n    platform: input.platform,\n    codeChallenge: base64url(createHash(\"sha256\").update(codeVerifier).digest()),\n    state: base64url(randomBytes(16)),\n    matchingCode: matchingCode(),\n    keyThumbprint: key.thumbprint,\n  };\n  const grantOf = (granted: HostGrantResponse): AppGrant => ({\n    appOrigin: origin,\n    appName,\n    grantId: granted.grant.id,\n    hostId: granted.grant.hostId,\n    account: granted.account,\n    workspace: workspaceOf(input.workspaceRoot, origin),\n    createdAt: Date.now(),\n  });\n  const deadline = timeout(PAIRING_TIMEOUT_MS);\n  try {\n    if (input.channel.kind === \"browser\") {\n      const listener = await loopback(pairing.state);\n      try {\n        const query = new URLSearchParams({\n          redirectUri: listener.redirectUri,\n          ...pairing,\n        });\n        await input.channel.open(`${origin}/_parlor/auth/hosts/authorize?${query}`);\n        const callback = await Promise.race([listener.callback, deadline.expired]);\n        if (callback === \"timeout\") return { paired: false, reason: \"timeout\" };\n        if (!(\"code\" in callback)) {\n          listener.answer(\"Not connected\", \"You cancelled the connection.\");\n          return { paired: false, reason: \"declined_in_app\" };\n        }\n        let granted: HostGrantResponse;\n        try {\n          granted = await exchange(origin, key, callback.code, codeVerifier);\n        } catch (error) {\n          listener.answer(\"Not connected\", (error as Error).message);\n          throw error;\n        }\n        await key.keep(granted.grant.id);\n        const pairingSecret = base64url(randomBytes(32));\n        listener.redirect(\n          `${origin}/#${new URLSearchParams({ [HOST_PAIRING_FRAGMENT]: pairingSecret })}`,\n        );\n        return {\n          paired: true,\n          grant: { ...grantOf(granted), pairingSecret },\n          approvedBy: granted.approvedBy,\n        };\n      } finally {\n        listener.close();\n      }\n    }\n\n    const callback = await Promise.race([\n      input.channel.authorize(pairing).then((code) => ({ code })),\n      deadline.expired,\n    ]);\n    if (callback === \"timeout\") return { paired: false, reason: \"timeout\" };\n    const granted = await exchange(origin, key, callback.code, codeVerifier);\n    const grant = grantOf(granted);\n    const confirmed = await Promise.race([\n      input.channel.confirm({\n        appName,\n        appOrigin: origin,\n        account: granted.account,\n        matchingCode: pairing.matchingCode,\n      }),\n      deadline.expired,\n    ]);\n    if (confirmed !== true) {\n      await revokeGrant({\n        appOrigin: origin,\n        appName,\n        assert: (request) =>\n          hostAssertion(\n            (payload) => key.sign(payload),\n            { kid: key.thumbprint, grantId: grant.grantId },\n            request,\n          ),\n      }).catch(async (error: Error) => {\n        await key.keep(grant.grantId);\n        throw new UnrevokedGrant({ ...grant, declined: true }, error);\n      });\n      return {\n        paired: false,\n        reason: confirmed === \"timeout\" ? \"timeout\" : \"declined_locally\",\n      };\n    }\n    await key.keep(grant.grantId);\n    return { paired: true, grant, approvedBy: granted.approvedBy };\n  } finally {\n    deadline.clear();\n  }\n}\n\ninterface Deferred<T> {\n  readonly promise: Promise<T>;\n  readonly resolve: (value: T) => void;\n  readonly reject: (error: unknown) => void;\n}\n\nfunction deferred<T>(): Deferred<T> {\n  let resolve!: (value: T) => void;\n  let reject!: (error: unknown) => void;\n  const promise = new Promise<T>((done, fail) => {\n    resolve = done;\n    reject = fail;\n  });\n  promise.catch(() => undefined);\n  return { promise, resolve, reject };\n}\n\nexport interface LocalPairingReview {\n  readonly account: string;\n  readonly appName: string;\n  readonly matchingCode: string;\n}\n\n/**\n * A pairing driven over the control socket by the desktop shell: `pairing` once the host\n * made its key and code, `finish` with the code the signed-in page got from the backend,\n * `confirm` with the user's answer in the native dialog.\n */\nexport interface LocalPairing {\n  readonly pairing: Promise<HostPairing>;\n  finish(code: string): Promise<LocalPairingReview>;\n  confirm(connect: boolean): Promise<PairOutcome>;\n}\n\nexport function startLocalPairing(input: Omit<PairInput, \"channel\">): LocalPairing {\n  const ready = deferred<HostPairing>();\n  const code = deferred<string>();\n  const review = deferred<LocalPairingReview>();\n  const decision = deferred<boolean>();\n  const outcome = pair({\n    ...input,\n    channel: {\n      kind: \"ipc\",\n      authorize: (pairing) => {\n        ready.resolve(pairing);\n        return code.promise;\n      },\n      confirm: (shown) => {\n        review.resolve({\n          account: printable(shown.account.email ?? shown.account.name),\n          appName: printable(shown.appName),\n          matchingCode: shown.matchingCode,\n        });\n        return decision.promise;\n      },\n    },\n  });\n  outcome.then(\n    (result) => {\n      if (result.paired) return;\n      const stopped = new Error(`The pairing ended: ${result.reason}.`);\n      ready.reject(stopped);\n      review.reject(stopped);\n    },\n    (error: unknown) => {\n      ready.reject(error);\n      review.reject(error);\n    },\n  );\n  outcome.catch(() => undefined);\n  return {\n    pairing: ready.promise,\n    finish: (value) => {\n      code.resolve(value);\n      return review.promise;\n    },\n    confirm: (connect) => {\n      decision.resolve(connect);\n      return outcome;\n    },\n  };\n}\n\nconst isText = (value: unknown): value is string =>\n  typeof value === \"string\" && value !== \"\";\n\ntype Point = JsonWebKey & { readonly x: string; readonly y: string };\n\nconst isPoint = (value: unknown): value is Point => {\n  if (typeof value !== \"object\" || value === null) return false;\n  const key = value as Record<string, unknown>;\n  return key.kty === \"EC\" && key.crv === \"P-256\" && isText(key.x) && isText(key.y);\n};\n\nfunction presenceKeyOf(value: unknown): PairingDevice[\"presenceKey\"] {\n  if (typeof value !== \"object\" || value === null) return undefined;\n  const key = value as Record<string, unknown>;\n  if (!isPoint(key.publicKey)) return undefined;\n  const publicKey = { kty: \"EC\", crv: \"P-256\", x: key.publicKey.x, y: key.publicKey.y };\n  if (key.format === \"webauthn\" && isText(key.credentialId) && isText(key.rpId)) {\n    return {\n      format: \"webauthn\",\n      credentialId: key.credentialId,\n      rpId: key.rpId,\n      publicKey,\n    };\n  }\n  if (key.format === \"es256-raw\" && isText(key.keyId)) {\n    return { format: \"es256-raw\", keyId: key.keyId, publicKey };\n  }\n  return undefined;\n}\n\nexport function pairingDeviceOf(value: unknown): PairingDevice | undefined {\n  if (typeof value !== \"object\" || value === null) return undefined;\n  const device = value as Record<string, unknown>;\n  if (!isText(device.deviceId) || !isText(device.name) || !isText(device.platform)) {\n    return undefined;\n  }\n  if (!isPoint(device.signingKey)) return undefined;\n  return {\n    deviceId: device.deviceId,\n    name: device.name,\n    platform: device.platform,\n    signingKey: {\n      kty: \"EC\",\n      crv: \"P-256\",\n      x: device.signingKey.x,\n      y: device.signingKey.y,\n    },\n    presenceKey: presenceKeyOf(device.presenceKey),\n  };\n}\n"]}

package/dist/paths.d.ts

@@ -0,0 +1,19 @@
+export interface HostPaths {
+    readonly root: string;
+    readonly grants: string;
+    readonly trust: string;
+    readonly policy: string;
+    readonly sessions: string;
+    readonly agents: string;
+    readonly control: string;
+    readonly proxy: string;
+    readonly versions: string;
+    /** What the login item points at; a link into `versions/<version>/`, never into an app bundle. */
+    readonly current: string;
+    readonly lock: string;
+    readonly logs: string;
+    readonly launchAgent: string;
+    readonly workspaces: string;
+}
+export declare function hostPaths(root?: string): HostPaths;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wBAAgB,SAAS,CAAC,IAAI,GAAE,MAA2C,GAAG,SAAS,CAmBtF"}

package/dist/paths.js

@@ -0,0 +1,23 @@
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+export function hostPaths(root = join(homedir(), ".parlor", "host")) {
+    const run = join(root, "run");
+    const home = dirname(dirname(root));
+    return {
+        root,
+        grants: join(root, "grants.json"),
+        trust: join(root, "trust.json"),
+        policy: join(root, "policy.json"),
+        sessions: join(root, "sessions.json"),
+        agents: join(root, "agents.json"),
+        control: join(run, "control.sock"),
+        proxy: join(run, "proxy.sock"),
+        versions: join(root, "versions"),
+        current: join(root, "current"),
+        lock: join(root, "service.lock"),
+        logs: join(root, "logs"),
+        launchAgent: join(home, "Library", "LaunchAgents", "dev.parlor.host.plist"),
+        workspaces: join(home, "Parlor"),
+    };
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAoB1C,MAAM,UAAU,SAAS,CAAC,IAAI,GAAW,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACjC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QAC/B,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC;QACrC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACjC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC;QAClC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC;QAC9B,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,uBAAuB,CAAC;QAC3E,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;KACjC,CAAC;AACJ,CAAC","sourcesContent":["import { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\n\nexport interface HostPaths {\n  readonly root: string;\n  readonly grants: string;\n  readonly trust: string;\n  readonly policy: string;\n  readonly sessions: string;\n  readonly agents: string;\n  readonly control: string;\n  readonly proxy: string;\n  readonly versions: string;\n  /** What the login item points at; a link into `versions/<version>/`, never into an app bundle. */\n  readonly current: string;\n  readonly lock: string;\n  readonly logs: string;\n  readonly launchAgent: string;\n  readonly workspaces: string;\n}\n\nexport function hostPaths(root: string = join(homedir(), \".parlor\", \"host\")): HostPaths {\n  const run = join(root, \"run\");\n  const home = dirname(dirname(root));\n  return {\n    root,\n    grants: join(root, \"grants.json\"),\n    trust: join(root, \"trust.json\"),\n    policy: join(root, \"policy.json\"),\n    sessions: join(root, \"sessions.json\"),\n    agents: join(root, \"agents.json\"),\n    control: join(run, \"control.sock\"),\n    proxy: join(run, \"proxy.sock\"),\n    versions: join(root, \"versions\"),\n    current: join(root, \"current\"),\n    lock: join(root, \"service.lock\"),\n    logs: join(root, \"logs\"),\n    launchAgent: join(home, \"Library\", \"LaunchAgents\", \"dev.parlor.host.plist\"),\n    workspaces: join(home, \"Parlor\"),\n  };\n}\n"]}

package/dist/policy.d.ts

@@ -0,0 +1,37 @@
+import type { AgentAsk } from "./acp.js";
+import type { TrustedDevice } from "./trust.js";
+/**
+ * What this computer enforces on remote turns, whatever the app or its backend says. Set
+ * only on this computer (`parlor-host config` or the Mac app's settings).
+ */
+export interface RemotePolicy {
+    /** `local`: an untrusted device is approved in a dialog here before its first prompt runs. */
+    readonly deviceApproval: "local" | "off";
+    /**
+     * Where an answer to the agent's own permission prompts counts: on any trusted device
+     * with presence, only on this computer, or (`parlor dev` only) anywhere.
+     */
+    readonly answers: "presence" | "computer" | "off";
+    /**
+     * How long a linked device with Face ID or Touch ID sends before its next prompt needs them
+     * again. Absent: never.
+     */
+    readonly promptPresence?: {
+        readonly maxAgeHours: number;
+    } | "off" | undefined;
+}
+export declare const DEFAULT_POLICY: RemotePolicy;
+export declare const DEV_POLICY: RemotePolicy;
+/** When `device`'s prompts need Face ID or Touch ID again; undefined when they never do. */
+export declare function presenceDueAt(policy: RemotePolicy, device: TrustedDevice): number | undefined;
+/**
+ * The app's own tools are allowed once without asking: the server already enforces the
+ * app's `confirm: true`, and asking twice only teaches users to click through.
+ */
+export declare function isAppTool(ask: AgentAsk, appServer: string): boolean;
+/** The ask item's `approval`; `undefined` lets any trusted device answer without presence. */
+export declare function approvalFor(policy: RemotePolicy, ask: AgentAsk): "presence" | "computer" | undefined;
+/** `base` with the settings `parlor-host config` wrote to `file`; read afresh on every call. */
+export declare function loadPolicy(file: string, base: RemotePolicy): Promise<RemotePolicy>;
+export declare function changePolicy(file: string, base: RemotePolicy, change: Partial<RemotePolicy>): Promise<RemotePolicy>;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,EAAE,OAAO,GAAG,KAAK,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,UAAU,GAAG,KAAK,CAAC;IAClD;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,KAAK,GAAG,SAAS,CAAC;CAChF;AAED,eAAO,MAAM,cAAc,EAAE,YAI5B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,YAIxB,CAAC;AAEF,4FAA4F;AAC5F,wBAAgB,aAAa,CAC3B,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,aAAa,GACpB,MAAM,GAAG,SAAS,CAIpB;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CACzB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,QAAQ,GACZ,UAAU,GAAG,UAAU,GAAG,SAAS,CAGrC;AAOD,gGAAgG;AAChG,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,YAAY,GACjB,OAAO,CAAC,YAAY,CAAC,CAYvB;AAaD,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAC5B,OAAO,CAAC,YAAY,CAAC,CAGvB"}

package/dist/policy.js

@@ -0,0 +1,60 @@
+import { jsonFile } from "./json-file.js";
+export const DEFAULT_POLICY = {
+    deviceApproval: "local",
+    answers: "presence",
+    promptPresence: { maxAgeHours: 18 },
+};
+export const DEV_POLICY = {
+    deviceApproval: "off",
+    answers: "off",
+    promptPresence: "off",
+};
+/** When `device`'s prompts need Face ID or Touch ID again; undefined when they never do. */
+export function presenceDueAt(policy, device) {
+    const setting = policy.promptPresence;
+    if (setting === undefined || setting === "off" || !device.presenceKey)
+        return undefined;
+    return (device.presenceAt ?? device.approvedAt) + setting.maxAgeHours * 3_600_000;
+}
+/**
+ * The app's own tools are allowed once without asking: the server already enforces the
+ * app's `confirm: true`, and asking twice only teaches users to click through.
+ */
+export function isAppTool(ask, appServer) {
+    return ask.kind === "permission" && ask.mcp?.server === appServer;
+}
+/** The ask item's `approval`; `undefined` lets any trusted device answer without presence. */
+export function approvalFor(policy, ask) {
+    if (ask.kind === "question" || policy.answers === "off")
+        return undefined;
+    return policy.answers;
+}
+const choose = (allowed, value, base) => allowed.find((candidate) => candidate === value) ?? base;
+/** `base` with the settings `parlor-host config` wrote to `file`; read afresh on every call. */
+export async function loadPolicy(file, base) {
+    let overlay;
+    try {
+        overlay = await jsonFile(file).read();
+    }
+    catch {
+        return base;
+    }
+    return {
+        deviceApproval: choose(["local", "off"], overlay.deviceApproval, base.deviceApproval),
+        answers: choose(["presence", "computer", "off"], overlay.answers, base.answers),
+        promptPresence: promptPresenceOf(overlay.promptPresence, base.promptPresence),
+    };
+}
+function promptPresenceOf(value, base) {
+    if (value === "off")
+        return "off";
+    const hours = value?.maxAgeHours;
+    return typeof hours === "number" && Number.isFinite(hours) && hours > 0
+        ? { maxAgeHours: hours }
+        : base;
+}
+export async function changePolicy(file, base, change) {
+    await jsonFile(file).change((overlay) => Object.assign(overlay, change));
+    return loadPolicy(file, base);
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAsB1C,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,cAAc,EAAE,OAAO;IACvB,OAAO,EAAE,UAAU;IACnB,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;CACpC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,cAAc,EAAE,KAAK;IACrB,OAAO,EAAE,KAAK;IACd,cAAc,EAAE,KAAK;CACtB,CAAC;AAEF,4FAA4F;AAC5F,MAAM,UAAU,aAAa,CAC3B,MAAoB,EACpB,MAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACxF,OAAO,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAa,EAAE,SAAiB;IACxD,OAAO,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;AACpE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CACzB,MAAoB,EACpB,GAAa;IAEb,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC1E,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAID,MAAM,MAAM,GAAG,CAAmB,OAAqB,EAAE,KAAc,EAAE,IAAO,EAAK,EAAE,CACrF,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC;AAE3D,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,IAAkB;IAElB,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAU,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC;QACrF,OAAO,EAAE,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;QAC/E,cAAc,EAAE,gBAAgB,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC;KAC9E,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAc,EACd,IAAoC;IAEpC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,KAAK,GAAI,KAAmD,EAAE,WAAW,CAAC;IAChF,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QACrE,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE;QACxB,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAkB,EAClB,MAA6B;IAE7B,MAAM,QAAQ,CAAU,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC","sourcesContent":["import type { AgentAsk } from \"./acp.js\";\nimport { jsonFile } from \"./json-file.js\";\nimport type { TrustedDevice } from \"./trust.js\";\n\n/**\n * What this computer enforces on remote turns, whatever the app or its backend says. Set\n * only on this computer (`parlor-host config` or the Mac app's settings).\n */\nexport interface RemotePolicy {\n  /** `local`: an untrusted device is approved in a dialog here before its first prompt runs. */\n  readonly deviceApproval: \"local\" | \"off\";\n  /**\n   * Where an answer to the agent's own permission prompts counts: on any trusted device\n   * with presence, only on this computer, or (`parlor dev` only) anywhere.\n   */\n  readonly answers: \"presence\" | \"computer\" | \"off\";\n  /**\n   * How long a linked device with Face ID or Touch ID sends before its next prompt needs them\n   * again. Absent: never.\n   */\n  readonly promptPresence?: { readonly maxAgeHours: number } | \"off\" | undefined;\n}\n\nexport const DEFAULT_POLICY: RemotePolicy = {\n  deviceApproval: \"local\",\n  answers: \"presence\",\n  promptPresence: { maxAgeHours: 18 },\n};\n\nexport const DEV_POLICY: RemotePolicy = {\n  deviceApproval: \"off\",\n  answers: \"off\",\n  promptPresence: \"off\",\n};\n\n/** When `device`'s prompts need Face ID or Touch ID again; undefined when they never do. */\nexport function presenceDueAt(\n  policy: RemotePolicy,\n  device: TrustedDevice,\n): number | undefined {\n  const setting = policy.promptPresence;\n  if (setting === undefined || setting === \"off\" || !device.presenceKey) return undefined;\n  return (device.presenceAt ?? device.approvedAt) + setting.maxAgeHours * 3_600_000;\n}\n\n/**\n * The app's own tools are allowed once without asking: the server already enforces the\n * app's `confirm: true`, and asking twice only teaches users to click through.\n */\nexport function isAppTool(ask: AgentAsk, appServer: string): boolean {\n  return ask.kind === \"permission\" && ask.mcp?.server === appServer;\n}\n\n/** The ask item's `approval`; `undefined` lets any trusted device answer without presence. */\nexport function approvalFor(\n  policy: RemotePolicy,\n  ask: AgentAsk,\n): \"presence\" | \"computer\" | undefined {\n  if (ask.kind === \"question\" || policy.answers === \"off\") return undefined;\n  return policy.answers;\n}\n\ntype Overlay = { readonly [K in keyof RemotePolicy]?: unknown };\n\nconst choose = <T extends string>(allowed: readonly T[], value: unknown, base: T): T =>\n  allowed.find((candidate) => candidate === value) ?? base;\n\n/** `base` with the settings `parlor-host config` wrote to `file`; read afresh on every call. */\nexport async function loadPolicy(\n  file: string,\n  base: RemotePolicy,\n): Promise<RemotePolicy> {\n  let overlay: Overlay;\n  try {\n    overlay = await jsonFile<Overlay>(file).read();\n  } catch {\n    return base;\n  }\n  return {\n    deviceApproval: choose([\"local\", \"off\"], overlay.deviceApproval, base.deviceApproval),\n    answers: choose([\"presence\", \"computer\", \"off\"], overlay.answers, base.answers),\n    promptPresence: promptPresenceOf(overlay.promptPresence, base.promptPresence),\n  };\n}\n\nfunction promptPresenceOf(\n  value: unknown,\n  base: RemotePolicy[\"promptPresence\"],\n): RemotePolicy[\"promptPresence\"] {\n  if (value === \"off\") return \"off\";\n  const hours = (value as { readonly maxAgeHours?: unknown } | null)?.maxAgeHours;\n  return typeof hours === \"number\" && Number.isFinite(hours) && hours > 0\n    ? { maxAgeHours: hours }\n    : base;\n}\n\nexport async function changePolicy(\n  file: string,\n  base: RemotePolicy,\n  change: Partial<RemotePolicy>,\n): Promise<RemotePolicy> {\n  await jsonFile<Overlay>(file).change((overlay) => Object.assign(overlay, change));\n  return loadPolicy(file, base);\n}\n"]}

package/dist/pool.d.ts

@@ -0,0 +1,34 @@
+import type { AgentConnection, AgentSession } from "./acp.js";
+import type { AppGrant } from "./grants.js";
+import type { ProxySession } from "./mcp-proxy.js";
+export interface LiveSession {
+    readonly session: AgentSession;
+    readonly proxy: ProxySession;
+}
+export type PooledGrant = Pick<AppGrant, "appOrigin" | "grantId">;
+/**
+ * Processes per (app, agent), so two apps never share an agent process or its MCP
+ * servers; sessions per (grant, thread, agent), so a thread keeps its context across
+ * turns and never carries it to another account.
+ */
+export interface SessionPool {
+    process(appOrigin: string, agentId: string): AgentConnection | undefined;
+    /**
+     * The running process, or the one `start` launches for every turn that asks meanwhile.
+     * A `drop` during the launch aborts `signal` and kills whatever `start` returns.
+     */
+    launch(appOrigin: string, agentId: string, start: (signal: AbortSignal) => Promise<AgentConnection>): Promise<AgentConnection>;
+    session(grant: PooledGrant, threadId: string, agentId: string): LiveSession | undefined;
+    remember(grant: PooledGrant, threadId: string, agentId: string, session: LiveSession): void;
+    /** The last session id, from `sessions.json`, for `session/resume` after a restart. */
+    resumable(grant: PooledGrant, threadId: string, agentId: string): Promise<string | undefined>;
+    drop(appOrigin: string, agentId?: string): Promise<void>;
+    /** Erases the grant's remembered session ids, once the grant is gone. */
+    forget(grant: PooledGrant): Promise<void>;
+}
+/**
+ * Sessions live inside their process: `launch()` hands out the connection with its
+ * sessions tracked, so dropping a process forgets every session it held.
+ */
+export declare function createSessionPool(stateFile: string): SessionPool;
+//# sourceMappingURL=pool.d.ts.map

package/dist/pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool.d.ts","sourceRoot":"","sources":["../src/pool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;CAC9B;AAED,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;AAElE;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAAC;IACzE;;;OAGG;IACH,MAAM,CACJ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,OAAO,CAAC,eAAe,CAAC,GACvD,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IACxF,QAAQ,CACN,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,WAAW,GACnB,IAAI,CAAC;IACR,uFAAuF;IACvF,SAAS,CACP,KAAK,EAAE,WAAW,EAClB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,yEAAyE;IACzE,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3C;AAYD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,CAyGhE"}