@parlor/agent-host 0.0.0-stage → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (155) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +16 -2
  3. package/dist/acp.d.ts +165 -0
  4. package/dist/acp.d.ts.map +1 -0
  5. package/dist/acp.js +626 -0
  6. package/dist/acp.js.map +1 -0
  7. package/dist/adapter-launch.d.ts +7 -0
  8. package/dist/adapter-launch.d.ts.map +1 -0
  9. package/dist/adapter-launch.js +35 -0
  10. package/dist/adapter-launch.js.map +1 -0
  11. package/dist/agents.d.ts +32 -0
  12. package/dist/agents.d.ts.map +1 -0
  13. package/dist/agents.js +132 -0
  14. package/dist/agents.js.map +1 -0
  15. package/dist/assertion.d.ts +9 -0
  16. package/dist/assertion.d.ts.map +1 -0
  17. package/dist/assertion.js +22 -0
  18. package/dist/assertion.js.map +1 -0
  19. package/dist/control.d.ts +106 -0
  20. package/dist/control.d.ts.map +1 -0
  21. package/dist/control.js +32 -0
  22. package/dist/control.js.map +1 -0
  23. package/dist/daemon.d.ts +50 -0
  24. package/dist/daemon.d.ts.map +1 -0
  25. package/dist/daemon.js +543 -0
  26. package/dist/daemon.js.map +1 -0
  27. package/dist/dev-host.d.ts +5 -0
  28. package/dist/dev-host.d.ts.map +1 -0
  29. package/dist/dev-host.js +29 -0
  30. package/dist/dev-host.js.map +1 -0
  31. package/dist/device-list.d.ts +6 -0
  32. package/dist/device-list.d.ts.map +1 -0
  33. package/dist/device-list.js +30 -0
  34. package/dist/device-list.js.map +1 -0
  35. package/dist/embedded.d.ts +6 -0
  36. package/dist/embedded.d.ts.map +1 -0
  37. package/dist/embedded.js +3 -0
  38. package/dist/embedded.js.map +1 -0
  39. package/dist/fold.d.ts +38 -0
  40. package/dist/fold.d.ts.map +1 -0
  41. package/dist/fold.js +165 -0
  42. package/dist/fold.js.map +1 -0
  43. package/dist/grants.d.ts +54 -0
  44. package/dist/grants.d.ts.map +1 -0
  45. package/dist/grants.js +157 -0
  46. package/dist/grants.js.map +1 -0
  47. package/dist/index.d.ts +17 -0
  48. package/dist/index.d.ts.map +1 -0
  49. package/dist/index.js +17 -0
  50. package/dist/index.js.map +1 -0
  51. package/dist/json-file.d.ts +6 -0
  52. package/dist/json-file.d.ts.map +1 -0
  53. package/dist/json-file.js +35 -0
  54. package/dist/json-file.js.map +1 -0
  55. package/dist/lines.d.ts +5 -0
  56. package/dist/lines.d.ts.map +1 -0
  57. package/dist/lines.js +9 -0
  58. package/dist/lines.js.map +1 -0
  59. package/dist/link-device.d.ts +28 -0
  60. package/dist/link-device.d.ts.map +1 -0
  61. package/dist/link-device.js +40 -0
  62. package/dist/link-device.js.map +1 -0
  63. package/dist/link.d.ts +52 -0
  64. package/dist/link.d.ts.map +1 -0
  65. package/dist/link.js +277 -0
  66. package/dist/link.js.map +1 -0
  67. package/dist/lock.d.ts +7 -0
  68. package/dist/lock.d.ts.map +1 -0
  69. package/dist/lock.js +105 -0
  70. package/dist/lock.js.map +1 -0
  71. package/dist/log.d.ts +3 -0
  72. package/dist/log.d.ts.map +1 -0
  73. package/dist/log.js +18 -0
  74. package/dist/log.js.map +1 -0
  75. package/dist/main.d.ts +3 -0
  76. package/dist/main.d.ts.map +1 -0
  77. package/dist/main.js +520 -0
  78. package/dist/main.js.map +1 -0
  79. package/dist/mcp-proxy.d.ts +33 -0
  80. package/dist/mcp-proxy.d.ts.map +1 -0
  81. package/dist/mcp-proxy.js +317 -0
  82. package/dist/mcp-proxy.js.map +1 -0
  83. package/dist/naming.d.ts +7 -0
  84. package/dist/naming.d.ts.map +1 -0
  85. package/dist/naming.js +42 -0
  86. package/dist/naming.js.map +1 -0
  87. package/dist/pairing.d.ts +68 -0
  88. package/dist/pairing.d.ts.map +1 -0
  89. package/dist/pairing.js +312 -0
  90. package/dist/pairing.js.map +1 -0
  91. package/dist/paths.d.ts +19 -0
  92. package/dist/paths.d.ts.map +1 -0
  93. package/dist/paths.js +23 -0
  94. package/dist/paths.js.map +1 -0
  95. package/dist/policy.d.ts +37 -0
  96. package/dist/policy.d.ts.map +1 -0
  97. package/dist/policy.js +60 -0
  98. package/dist/policy.js.map +1 -0
  99. package/dist/pool.d.ts +34 -0
  100. package/dist/pool.d.ts.map +1 -0
  101. package/dist/pool.js +112 -0
  102. package/dist/pool.js.map +1 -0
  103. package/dist/prompter.d.ts +33 -0
  104. package/dist/prompter.d.ts.map +1 -0
  105. package/dist/prompter.js +98 -0
  106. package/dist/prompter.js.map +1 -0
  107. package/dist/release-main.d.ts +2 -0
  108. package/dist/release-main.d.ts.map +1 -0
  109. package/dist/release-main.js +50 -0
  110. package/dist/release-main.js.map +1 -0
  111. package/dist/release.d.ts +22 -0
  112. package/dist/release.d.ts.map +1 -0
  113. package/dist/release.js +81 -0
  114. package/dist/release.js.map +1 -0
  115. package/dist/revoke.d.ts +10 -0
  116. package/dist/revoke.d.ts.map +1 -0
  117. package/dist/revoke.js +23 -0
  118. package/dist/revoke.js.map +1 -0
  119. package/dist/self.d.ts +7 -0
  120. package/dist/self.d.ts.map +1 -0
  121. package/dist/self.js +10 -0
  122. package/dist/self.js.map +1 -0
  123. package/dist/service.d.ts +97 -0
  124. package/dist/service.d.ts.map +1 -0
  125. package/dist/service.js +205 -0
  126. package/dist/service.js.map +1 -0
  127. package/dist/shell-path.d.ts +10 -0
  128. package/dist/shell-path.d.ts.map +1 -0
  129. package/dist/shell-path.js +64 -0
  130. package/dist/shell-path.js.map +1 -0
  131. package/dist/skeleton-kit.d.ts +8 -0
  132. package/dist/skeleton-kit.d.ts.map +1 -0
  133. package/dist/skeleton-kit.js +143 -0
  134. package/dist/skeleton-kit.js.map +1 -0
  135. package/dist/spec-kit.d.ts +102 -0
  136. package/dist/spec-kit.d.ts.map +1 -0
  137. package/dist/spec-kit.js +372 -0
  138. package/dist/spec-kit.js.map +1 -0
  139. package/dist/testing/fake-agent.d.ts +65 -0
  140. package/dist/testing/fake-agent.d.ts.map +1 -0
  141. package/dist/testing/fake-agent.js +238 -0
  142. package/dist/testing/fake-agent.js.map +1 -0
  143. package/dist/trust.d.ts +20 -0
  144. package/dist/trust.d.ts.map +1 -0
  145. package/dist/trust.js +27 -0
  146. package/dist/trust.js.map +1 -0
  147. package/dist/turn.d.ts +32 -0
  148. package/dist/turn.d.ts.map +1 -0
  149. package/dist/turn.js +650 -0
  150. package/dist/turn.js.map +1 -0
  151. package/dist/version.d.ts +2 -0
  152. package/dist/version.d.ts.map +1 -0
  153. package/dist/version.js +6 -0
  154. package/dist/version.js.map +1 -0
  155. package/package.json +57 -3
@@ -0,0 +1,102 @@
1
+ import { type IncomingMessage, type ServerResponse } from "node:http";
2
+ import { type AnswerToSign, type ItemSignature, type PromptToSign } from "@parlor/chat";
3
+ import { type DeviceKeys, type DeviceVouch, type FrameworkServer } from "@parlor/server";
4
+ import type { AppGrant, HostKeys } from "./grants.js";
5
+ import type { TrustedDevice, TrustStore } from "./trust.js";
6
+ export declare const PASSWORD = "correct horse battery staple";
7
+ export declare class Browser {
8
+ #private;
9
+ readonly origin: string;
10
+ constructor(origin: string);
11
+ fetch(url: string, init?: RequestInit): Promise<Response>;
12
+ consent(url: string, decision: "connect" | "cancel"): Promise<{
13
+ readonly page: string;
14
+ readonly answer: Response;
15
+ }>;
16
+ }
17
+ export interface SpecApp {
18
+ readonly origin: string;
19
+ readonly server: FrameworkServer;
20
+ signUp(name: string): Promise<Browser>;
21
+ close(): Promise<void>;
22
+ }
23
+ export declare function startSpecApp(): Promise<SpecApp>;
24
+ export declare function memoryHostKeys(): HostKeys & {
25
+ readonly origins: () => readonly string[];
26
+ };
27
+ export declare function memoryTrust(): TrustStore & {
28
+ readonly pins: () => TrustedDevice[];
29
+ };
30
+ export declare class TestDevice {
31
+ readonly keys: DeviceKeys;
32
+ private readonly signing;
33
+ private readonly presence;
34
+ private constructor();
35
+ static create(id?: string, name?: string, platform?: string): Promise<TestDevice>;
36
+ get id(): import("@parlor/core").DeviceId;
37
+ private sign;
38
+ signPrompt(app: string, prompt: PromptToSign, at: number, presence?: boolean): Promise<ItemSignature>;
39
+ signAnswer(app: string, answer: AnswerToSign, at: number, presence: boolean): Promise<ItemSignature>;
40
+ /** This device's vouch for `device`, signed with its presence key unless `presence` is false. */
41
+ vouchFor(app: string, device: DeviceKeys, at: number, options?: {
42
+ readonly presence?: boolean;
43
+ readonly commitment?: string;
44
+ }): Promise<DeviceVouch>;
45
+ }
46
+ export interface StubApp {
47
+ readonly origin: string;
48
+ readonly seen: {
49
+ readonly method: string;
50
+ readonly path: string;
51
+ readonly body: string;
52
+ }[];
53
+ close(): Promise<void>;
54
+ }
55
+ export type Route = (request: IncomingMessage, body: string, response: ServerResponse) => boolean;
56
+ export declare function stubApp(route: Route): Promise<StubApp>;
57
+ export declare const json: (response: ServerResponse, value: unknown, status?: number) => ServerResponse<IncomingMessage>;
58
+ export declare const welcome: {
59
+ id: string;
60
+ accepted: boolean;
61
+ protocol: number;
62
+ leaseMs: number;
63
+ heartbeatMs: number;
64
+ };
65
+ export declare function hostRoutes(options: {
66
+ readonly wake: boolean;
67
+ readonly turn?: () => unknown;
68
+ }): Route;
69
+ export declare const claimedTurn: (turnId: string, agentId: string, context: string, text: string) => {
70
+ id: string;
71
+ turnId: string;
72
+ agent: {
73
+ hostId: string;
74
+ agentId: string;
75
+ };
76
+ clientId: string;
77
+ prompt: {
78
+ id: string;
79
+ threadId: string;
80
+ turnId: string;
81
+ seq: number;
82
+ at: number;
83
+ author: string;
84
+ kind: string;
85
+ body: {
86
+ text: string;
87
+ agent: {
88
+ hostId: string;
89
+ agentId: string;
90
+ };
91
+ };
92
+ };
93
+ device: undefined;
94
+ context: string;
95
+ token: {
96
+ token: string;
97
+ expiresAt: number;
98
+ };
99
+ leaseUntil: number;
100
+ };
101
+ export declare const grantFor: (origin: string, name: string, workspace: string) => AppGrant;
102
+ //# sourceMappingURL=spec-kit.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"spec-kit.d.ts","sourceRoot":"","sources":["../src/spec-kit.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,eAAe,EAEpB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AAYnB,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAKtB,OAAO,EAEL,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAQxB,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5D,eAAO,MAAM,QAAQ,iCAAiC,CAAC;AAIvD,qBAAa,OAAO;;IAGN,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAnC,YAAqB,MAAM,EAAE,MAAM,EAAI;IAEjC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqBlE;IAEK,OAAO,CACX,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,SAAS,GAAG,QAAQ,GAC7B,OAAO,CAAC;QACT,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;KAC3B,CAAC,CAeD;CACF;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAsErD;AAED,wBAAgB,cAAc,IAAI,QAAQ,GAAG;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,SAAS,MAAM,EAAE,CAAC;CAC3C,CAyCA;AAED,wBAAgB,WAAW,IAAI,UAAU,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,aAAa,EAAE,CAAA;CAAE,CAuBnF;AAID,qBAAa,UAAU;IAEnB,QAAQ,CAAC,IAAI,EAAE,UAAU;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAH3B,OAAO,eAIH;IAEJ,OAAa,MAAM,CACjB,EAAE,SAAa,EACf,IAAI,SAAoB,EACxB,QAAQ,SAAQ,GACf,OAAO,CAAC,UAAU,CAAC,CA6BrB;IAED,IAAI,EAAE,oCAEL;YAEa,IAAI;IAmBZ,UAAU,CACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,YAAY,EACpB,EAAE,EAAE,MAAM,EACV,QAAQ,UAAQ,GACf,OAAO,CAAC,aAAa,CAAC,CAQxB;IAEK,UAAU,CACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,YAAY,EACpB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,aAAa,CAAC,CAQxB;IAED,iGAAiG;IAC3F,QAAQ,CACZ,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,UAAU,EAClB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAC1E,OAAO,CAAC,WAAW,CAAC,CAiBtB;CACF;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;KACvB,EAAE,CAAC;IACJ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,MAAM,KAAK,GAAG,CAClB,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,cAAc,KACrB,OAAO,CAAC;AAEb,wBAAsB,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAsB5D;AAED,eAAO,MAAM,IAAI,aAAc,cAAc,SAAS,OAAO,qDAG9B,CAAC;AAEhC,eAAO,MAAM,OAAO;;;;;;CAMnB,CAAC;AAEF,wBAAgB,UAAU,CAAC,OAAO,EAAE;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;CAC/B,GAAG,KAAK,CAyER;AAED,eAAO,MAAM,WAAW,WACd,MAAM,WACL,MAAM,WACN,MAAM,QACT,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;QAkBH,KAAK;QAAY,SAAS;;;CAEnC,CAAC;AAEH,eAAO,MAAM,QAAQ,WAAY,MAAM,QAAQ,MAAM,aAAa,MAAM,KAAG,QAQzE,CAAC"}
@@ -0,0 +1,372 @@
1
+ import { createHash } from "node:crypto";
2
+ import { createServer as createHttpServer, } from "node:http";
3
+ import { answerStatement, betterAuthProvider, deviceCommitment, parlorAuth, promptStatement, statementBytes, vouchStatement, } from "@parlor/auth";
4
+ import { HOST_PROTOCOL, } from "@parlor/chat";
5
+ import { chat } from "@parlor/chat/server";
6
+ import { asId, defineAction } from "@parlor/core";
7
+ import { createRegistry } from "@parlor/core/registry";
8
+ import { createDatabase } from "@parlor/data";
9
+ import { createServer, } from "@parlor/server";
10
+ import { betterAuth } from "better-auth";
11
+ import { memoryAdapter } from "better-auth/adapters/memory";
12
+ import { getAuthTables } from "better-auth/db";
13
+ import { serve } from "srvx";
14
+ import { z } from "zod";
15
+ import { hostAssertion } from "./assertion.js";
16
+ export const PASSWORD = "correct horse battery staple";
17
+ const digest = (password) => createHash("sha256").update(password).digest("hex");
18
+ export class Browser {
19
+ origin;
20
+ #cookies = new Map();
21
+ constructor(origin) {
22
+ this.origin = origin;
23
+ }
24
+ async fetch(url, init = {}) {
25
+ const headers = new Headers(init.headers);
26
+ if (this.#cookies.size > 0) {
27
+ headers.set("cookie", [...this.#cookies].map(([name, value]) => `${name}=${value}`).join("; "));
28
+ }
29
+ if (init.method === "POST" && !headers.has("origin"))
30
+ headers.set("origin", this.origin);
31
+ const response = await fetch(new URL(url, this.origin), {
32
+ ...init,
33
+ headers,
34
+ redirect: "manual",
35
+ });
36
+ for (const cookie of response.headers.getSetCookie()) {
37
+ const [pair] = cookie.split(";");
38
+ const at = pair.indexOf("=");
39
+ this.#cookies.set(pair.slice(0, at), pair.slice(at + 1));
40
+ }
41
+ return response;
42
+ }
43
+ async consent(url, decision) {
44
+ const page = await (await this.fetch(url)).text();
45
+ const fields = new URLSearchParams([...page.matchAll(/<input type="hidden" name="([^"]+)" value="([^"]*)">/g)].map((match) => [match[1], match[2].replaceAll("&amp;", "&")]));
46
+ fields.set("decision", decision);
47
+ const action = /<form method="post" action="([^"]+)"/.exec(page)?.[1] ?? "";
48
+ const answer = await this.fetch(action, {
49
+ method: "POST",
50
+ headers: { "content-type": "application/x-www-form-urlencoded" },
51
+ body: fields.toString(),
52
+ });
53
+ return { page, answer };
54
+ }
55
+ }
56
+ export async function startSpecApp() {
57
+ const database = await createDatabase({ dataDir: "memory://" });
58
+ let server;
59
+ const listener = serve({
60
+ port: 0,
61
+ hostname: "127.0.0.1",
62
+ silent: true,
63
+ fetch: (request) => server.fetch(request),
64
+ });
65
+ await listener.ready();
66
+ const origin = new URL(listener.url).origin;
67
+ const authOptions = parlorAuth({
68
+ origin,
69
+ signInPage: "/sign-in",
70
+ appName: "Hello",
71
+ secret: "a-test-secret-that-is-long-enough-for-better-auth",
72
+ emailAndPassword: {
73
+ enabled: true,
74
+ password: {
75
+ hash: (password) => Promise.resolve(digest(password)),
76
+ verify: ({ hash, password }) => Promise.resolve(digest(password) === hash),
77
+ },
78
+ },
79
+ });
80
+ const tables = Object.values(getAuthTables(authOptions)).map((table) => [
81
+ table.modelName,
82
+ [],
83
+ ]);
84
+ const instance = betterAuth({
85
+ ...authOptions,
86
+ database: memoryAdapter(Object.fromEntries(tables)),
87
+ });
88
+ server = createServer({
89
+ actions: createRegistry({
90
+ listTasks: defineAction({
91
+ description: "List tasks.",
92
+ input: z.object({}),
93
+ run: () => [],
94
+ }),
95
+ }),
96
+ auth: betterAuthProvider({ instance }),
97
+ plugins: [chat()],
98
+ database: {
99
+ read: () => database.read(),
100
+ transaction: (run) => database.transaction(run),
101
+ listen: (channel, handler, options) => database.listen(channel, handler, options),
102
+ },
103
+ });
104
+ return {
105
+ origin,
106
+ server,
107
+ async signUp(name) {
108
+ const browser = new Browser(origin);
109
+ const response = await browser.fetch("/_parlor/auth/sign-up/email", {
110
+ method: "POST",
111
+ headers: { "content-type": "application/json" },
112
+ body: JSON.stringify({
113
+ name,
114
+ email: `${name.toLowerCase()}@example.com`,
115
+ password: PASSWORD,
116
+ }),
117
+ });
118
+ if (response.status !== 200)
119
+ throw new Error(`sign-up answered ${response.status}`);
120
+ return browser;
121
+ },
122
+ async close() {
123
+ await listener.close(true);
124
+ await server.close();
125
+ },
126
+ };
127
+ }
128
+ export function memoryHostKeys() {
129
+ const kept = new Map();
130
+ const sign = (key) => async (payload) => Buffer.from(await crypto.subtle.sign({ name: "ECDSA", hash: "SHA-256" }, key, new Uint8Array(payload))).toString("base64url");
131
+ return {
132
+ origins: () => [...kept.keys()],
133
+ async create(appOrigin) {
134
+ const pair = await crypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, false, ["sign", "verify"]);
135
+ const { kty, crv, x, y } = await crypto.subtle.exportKey("jwk", pair.publicKey);
136
+ const publicKey = { kty: kty, crv: crv, x: x, y: y };
137
+ const thumbprint = createHash("sha256")
138
+ .update(JSON.stringify({ crv, kty, x, y }))
139
+ .digest("base64url");
140
+ return {
141
+ publicKey,
142
+ thumbprint,
143
+ sign: sign(pair.privateKey),
144
+ keep: async (grantId) => {
145
+ kept.set(appOrigin, { key: pair.privateKey, kid: thumbprint, grantId });
146
+ },
147
+ };
148
+ },
149
+ async assert(appOrigin, request) {
150
+ const key = kept.get(appOrigin);
151
+ if (!key)
152
+ throw new Error(`no key for ${appOrigin}`);
153
+ return hostAssertion(sign(key.key), key, request);
154
+ },
155
+ async remove(appOrigin) {
156
+ kept.delete(appOrigin);
157
+ },
158
+ };
159
+ }
160
+ export function memoryTrust() {
161
+ const pinned = new Map();
162
+ const keyOf = (appOrigin, deviceId) => `${appOrigin}\n${deviceId}`;
163
+ return {
164
+ pins: () => [...pinned.values()],
165
+ get: async (appOrigin, deviceId) => pinned.get(keyOf(appOrigin, deviceId)),
166
+ list: async (appOrigin) => [...pinned.entries()]
167
+ .filter(([key]) => key.startsWith(`${appOrigin}\n`))
168
+ .map(([, device]) => device),
169
+ pin: async (appOrigin, device) => void pinned.set(keyOf(appOrigin, device.deviceId), device),
170
+ forget: async (appOrigin, deviceId) => {
171
+ for (const key of [...pinned.keys()]) {
172
+ if (key.startsWith(`${appOrigin}\n`) &&
173
+ (deviceId === undefined || key.endsWith(`\n${deviceId}`))) {
174
+ pinned.delete(key);
175
+ }
176
+ }
177
+ },
178
+ };
179
+ }
180
+ const ES256 = { name: "ECDSA", hash: "SHA-256" };
181
+ export class TestDevice {
182
+ keys;
183
+ signing;
184
+ presence;
185
+ constructor(keys, signing, presence) {
186
+ this.keys = keys;
187
+ this.signing = signing;
188
+ this.presence = presence;
189
+ }
190
+ static async create(id = "device-1", name = "Chrome on macOS", platform = "web") {
191
+ const make = async () => {
192
+ const pair = await crypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, true, ["sign", "verify"]);
193
+ const { kty, crv, x, y } = await crypto.subtle.exportKey("jwk", pair.publicKey);
194
+ return {
195
+ privateKey: pair.privateKey,
196
+ publicKey: { kty: kty, crv: crv, x: x, y: y },
197
+ };
198
+ };
199
+ const [signing, presence] = [await make(), await make()];
200
+ return new TestDevice({
201
+ id: asId("device", id),
202
+ name,
203
+ platform,
204
+ signingKey: signing.publicKey,
205
+ presenceKey: {
206
+ format: "es256-raw",
207
+ keyId: "presence",
208
+ publicKey: presence.publicKey,
209
+ },
210
+ }, signing.privateKey, presence.privateKey);
211
+ }
212
+ get id() {
213
+ return this.keys.id;
214
+ }
215
+ async sign(key, bytes, presence, at) {
216
+ const signature = await crypto.subtle.sign(ES256, key, new Uint8Array(bytes));
217
+ return {
218
+ deviceId: this.id,
219
+ at,
220
+ signature: {
221
+ keyId: "key",
222
+ presence,
223
+ format: "es256-raw",
224
+ signature: Buffer.from(signature).toString("base64url"),
225
+ },
226
+ };
227
+ }
228
+ async signPrompt(app, prompt, at, presence = false) {
229
+ const statement = await promptStatement(app, prompt, at);
230
+ return this.sign(presence ? this.presence : this.signing, statementBytes(statement), presence ? "user" : "none", at);
231
+ }
232
+ async signAnswer(app, answer, at, presence) {
233
+ const statement = await answerStatement(app, answer, at);
234
+ return this.sign(presence ? this.presence : this.signing, statementBytes(statement), presence ? "user" : "none", at);
235
+ }
236
+ /** This device's vouch for `device`, signed with its presence key unless `presence` is false. */
237
+ async vouchFor(app, device, at, options = {}) {
238
+ const commitment = options.commitment ??
239
+ (await deviceCommitment(app, device.id, device.signingKey, device.presenceKey?.publicKey));
240
+ const presence = options.presence ?? true;
241
+ const { signature } = await this.sign(presence ? this.presence : this.signing, statementBytes(vouchStatement(app, this.id, device.id, commitment, at)), presence ? "user" : "none", at);
242
+ return { voucher: this.id, commitment, at, signature };
243
+ }
244
+ }
245
+ export async function stubApp(route) {
246
+ const seen = [];
247
+ const server = createHttpServer((request, response) => {
248
+ let body = "";
249
+ request.setEncoding("utf8");
250
+ request.on("data", (chunk) => (body += chunk));
251
+ request.on("end", () => {
252
+ const path = new URL(request.url ?? "/", "http://stub").pathname;
253
+ seen.push({ method: request.method ?? "GET", path, body });
254
+ if (!route(request, body, response))
255
+ response.writeHead(404).end();
256
+ });
257
+ });
258
+ await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
259
+ return {
260
+ origin: `http://127.0.0.1:${server.address().port}`,
261
+ seen,
262
+ close: () => new Promise((resolve) => {
263
+ server.closeAllConnections();
264
+ server.close(() => resolve());
265
+ }),
266
+ };
267
+ }
268
+ export const json = (response, value, status = 200) => response
269
+ .writeHead(status, { "content-type": "application/json" })
270
+ .end(JSON.stringify(value));
271
+ export const welcome = {
272
+ id: "h",
273
+ accepted: true,
274
+ protocol: HOST_PROTOCOL,
275
+ leaseMs: 60_000,
276
+ heartbeatMs: 30_000,
277
+ };
278
+ export function hostRoutes(options) {
279
+ let claimed = false;
280
+ return (request, body, response) => {
281
+ const path = new URL(request.url ?? "/", "http://stub").pathname;
282
+ const action = path.startsWith("/_parlor/chat/actions/")
283
+ ? path.split("/").at(-1)
284
+ : undefined;
285
+ if (action === "hostHello")
286
+ return (json(response, { data: welcome, tags: [] }), true);
287
+ if (action === "hostClaim") {
288
+ if (options.turn && !claimed) {
289
+ claimed = true;
290
+ return (json(response, { data: options.turn(), tags: [] }), true);
291
+ }
292
+ return (json(response, { error: { code: "not_found", message: "No turn." } }, 404), true);
293
+ }
294
+ if (action === "hostSignals")
295
+ return (json(response, { data: [], tags: [] }), true);
296
+ if (action) {
297
+ return (json(response, {
298
+ data: {
299
+ id: "t1",
300
+ leaseUntil: Date.now() + 60_000,
301
+ token: { token: "turn-2", expiresAt: Date.now() + 60_000 },
302
+ },
303
+ tags: [],
304
+ }),
305
+ true);
306
+ }
307
+ if (path === "/_parlor/sync/token") {
308
+ return (json(response, {
309
+ protocol: 1,
310
+ transport: "sse",
311
+ endpoint: "/_parlor/sync/stream",
312
+ pollIntervalMs: 2_000,
313
+ }),
314
+ true);
315
+ }
316
+ if (path === "/_parlor/sync/stream") {
317
+ response.writeHead(200, { "content-type": "text/event-stream" });
318
+ response.write(`event: handshake\ndata: ${JSON.stringify({ capabilities: [], keepAliveMs: 10_000 })}\n\n`);
319
+ if (options.wake) {
320
+ const events = [{ version: 1, id: "e1", tags: [["parlor_chat", "t1"]] }];
321
+ response.write(`event: message\ndata: ${JSON.stringify({ events, cursor: "1.e1" })}\n\n`);
322
+ }
323
+ return true;
324
+ }
325
+ if (path === "/_parlor/mcp") {
326
+ const message = JSON.parse(body);
327
+ if (message.id === undefined)
328
+ return (response.writeHead(202).end(), true);
329
+ const result = message.method === "initialize"
330
+ ? {
331
+ protocolVersion: "2025-06-18",
332
+ capabilities: { tools: {} },
333
+ serverInfo: { name: "stub", version: "1" },
334
+ }
335
+ : message.method === "tools/list"
336
+ ? { tools: [] }
337
+ : { content: [{ type: "text", text: "[]" }] };
338
+ return (json(response, { jsonrpc: "2.0", id: message.id, result }), true);
339
+ }
340
+ return false;
341
+ };
342
+ }
343
+ export const claimedTurn = (turnId, agentId, context, text) => ({
344
+ id: "t1",
345
+ turnId,
346
+ agent: { hostId: "h-A", agentId },
347
+ clientId: "tab",
348
+ prompt: {
349
+ id: `p-${turnId}`,
350
+ threadId: "t1",
351
+ turnId,
352
+ seq: 1,
353
+ at: Date.now(),
354
+ author: "user",
355
+ kind: "prompt",
356
+ body: { text, agent: { hostId: "h-A", agentId } },
357
+ },
358
+ device: undefined,
359
+ context,
360
+ token: { token: "turn-1", expiresAt: Date.now() + 60_000 },
361
+ leaseUntil: Date.now() + 60_000,
362
+ });
363
+ export const grantFor = (origin, name, workspace) => ({
364
+ appOrigin: origin,
365
+ appName: name,
366
+ grantId: asId("grant", `host:${name}`),
367
+ hostId: asId("host", `h-${name}`),
368
+ account: { userId: asId("user", "alice"), name: "Alice", email: "alice@example.com" },
369
+ workspace,
370
+ createdAt: 1,
371
+ });
372
+ //# sourceMappingURL=spec-kit.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"spec-kit.js","sourceRoot":"","sources":["../src/spec-kit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,YAAY,IAAI,gBAAgB,GAIjC,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,cAAc,EACd,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,aAAa,GAGd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAuB,MAAM,cAAc,CAAC;AACnE,OAAO,EACL,YAAY,GAIb,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAI/C,MAAM,CAAC,MAAM,QAAQ,GAAG,8BAA8B,CAAC;AAEvD,MAAM,MAAM,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEzF,MAAM,OAAO,OAAO;IAGG,MAAM;IAFlB,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,YAAqB,MAAc;sBAAd,MAAM;IAAW,CAAC;IAEvC,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,IAAI,GAAgB,EAAE;QAC7C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CACT,QAAQ,EACR,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YACtD,GAAG,IAAI;YACP,OAAO;YACP,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;YACrD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,IAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,GAAW,EACX,QAA8B;QAK9B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,eAAe,CAChC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,uDAAuD,CAAC,CAAC,CAAC,GAAG,CAC7E,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAC3D,CACF,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;YACtC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1B,CAAC;CACF;AASD,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,QAAQ,GAAmB,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAChF,IAAI,MAAmC,CAAC;IACxC,MAAM,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAO,CAAC,KAAK,CAAC,OAAO,CAAC;KAC3C,CAAC,CAAC;IACH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAI,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,WAAW,GAAG,UAAU,CAAC;QAC7B,MAAM;QACN,UAAU,EAAE,UAAU;QACtB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,mDAAmD;QAC3D,gBAAgB,EAAE;YAChB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE;gBACR,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACrD,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC;aAC3E;SACF;KACF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACtE,KAAK,CAAC,SAAS;QACf,EAAE;KACH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,GAAG,WAAW;QACd,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;KACpD,CAAC,CAAC;IACH,MAAM,GAAG,YAAY,CAAC;QACpB,OAAO,EAAE,cAAc,CAAC;YACtB,SAAS,EAAE,YAAY,CAAC;gBACtB,WAAW,EAAE,aAAa;gBAC1B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnB,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE;aACd,CAAC;SACH,CAAC;QACF,IAAI,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;QACjB,QAAQ,EAAE;YACR,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;YAC3B,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC;YAC/C,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;SAClF;KACF,CAAC,CAAC;IACH,OAAO;QACL,MAAM;QACN,MAAM;QACN,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAClE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI;oBACJ,KAAK,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc;oBAC1C,QAAQ,EAAE,QAAQ;iBACnB,CAAC;aACH,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,MAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc;IAG5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4D,CAAC;IACjF,MAAM,IAAI,GAAG,CAAC,GAAc,EAAE,EAAE,CAAC,KAAK,EAAE,OAAmB,EAAE,EAAE,CAC7D,MAAM,CAAC,IAAI,CACT,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACtB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,GAAG,EACH,IAAI,UAAU,CAAC,OAAO,CAAC,CACxB,CACF,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC1B,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAChF,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,GAAI,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC,EAAE,CAAE,EAAE,CAAC,EAAE,CAAE,EAAE,CAAC;YACzD,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;iBACpC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;iBAC1C,MAAM,CAAC,WAAW,CAAC,CAAC;YACvB,OAAO;gBACL,SAAS;gBACT,UAAU;gBACV,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC3B,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACtB,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC1E,CAAC;aACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,EAAE,CAAC,CAAC;YACrD,OAAO,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAE,QAAgB,EAAE,EAAE,CAAC,GAAG,SAAS,KAAK,QAAQ,EAAE,CAAC;IACnF,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1E,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CACxB,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,SAAS,IAAI,CAAC,CAAC;aACnD,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;QAChC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAC/B,KAAK,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC5D,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;YACpC,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACrC,IACE,GAAG,CAAC,UAAU,CAAC,GAAG,SAAS,IAAI,CAAC;oBAChC,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC,CAAC,EACzD,CAAC;oBACD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,CAAC;AAE1D,MAAM,OAAO,UAAU;IAEV,IAAI;IACI,OAAO;IACP,QAAQ;IAH3B,YACW,IAAgB,EACR,OAAkB,EAClB,QAAmB;oBAF3B,IAAI;uBACI,OAAO;wBACP,QAAQ;IACxB,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,EAAE,GAAG,UAAU,EACf,IAAI,GAAG,iBAAiB,EACxB,QAAQ,GAAG,KAAK;QAEhB,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAChF,OAAO;gBACL,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,EAAE,GAAG,EAAE,GAAI,EAAE,GAAG,EAAE,GAAI,EAAE,CAAC,EAAE,CAAE,EAAE,CAAC,EAAE,CAAE,EAAE;aAClD,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,IAAI,UAAU,CACnB;YACE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;YACtB,IAAI;YACJ,QAAQ;YACR,UAAU,EAAE,OAAO,CAAC,SAAS;YAC7B,WAAW,EAAE;gBACX,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B;SACF,EACD,OAAO,CAAC,UAAU,EAClB,QAAQ,CAAC,UAAU,CACpB,CAAC;IACJ,CAAC;IAED,IAAI,EAAE;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,GAAc,EACd,KAAiB,EACjB,QAAyB,EACzB,EAAU;QAEV,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9E,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,EAAE;YACF,SAAS,EAAE;gBACT,KAAK,EAAE,KAAK;gBACZ,QAAQ;gBACR,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;aACxD;SACsB,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,UAAU,CACd,GAAW,EACX,MAAoB,EACpB,EAAU,EACV,QAAQ,GAAG,KAAK;QAEhB,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,IAAI,CACd,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EACvC,cAAc,CAAC,SAAS,CAAC,EACzB,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC1B,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CACd,GAAW,EACX,MAAoB,EACpB,EAAU,EACV,QAAiB;QAEjB,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,IAAI,CACd,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EACvC,cAAc,CAAC,SAAS,CAAC,EACzB,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC1B,EAAE,CACH,CAAC;IACJ,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,QAAQ,CACZ,GAAW,EACX,MAAkB,EAClB,EAAU,EACV,OAAO,GAAkE,EAAE;QAE3E,MAAM,UAAU,GACd,OAAO,CAAC,UAAU;YAClB,CAAC,MAAM,gBAAgB,CACrB,GAAG,EACH,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,WAAW,EAAE,SAAS,CAC9B,CAAC,CAAC;QACL,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;QAC1C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CACnC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EACvC,cAAc,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EACvE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC1B,EAAE,CACH,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;CACF;AAkBD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAY;IACxC,MAAM,IAAI,GAA8B,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAW,gBAAgB,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;QAC5D,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACrB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC;YACjE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC;gBAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACrE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,OAAO;QACL,MAAM,EAAE,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE;QACpE,IAAI;QACJ,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YACtB,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC7B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,QAAwB,EAAE,KAAc,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,CAC7E,QAAQ;KACL,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;KACzD,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAEhC,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,EAAE,EAAE,GAAG;IACP,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,aAAa;IACvB,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,MAAM;CACpB,CAAC;AAEF,MAAM,UAAU,UAAU,CAAC,OAG1B;IACC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC;YACtD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACxB,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,MAAM,KAAK,WAAW;YACxB,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACpE,CAAC;YACD,OAAO,CACL,IAAI,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,CACjF,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,KAAK,aAAa;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QACpF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CACL,IAAI,CAAC,QAAQ,EAAE;gBACb,IAAI,EAAE;oBACJ,EAAE,EAAE,IAAI;oBACR,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;oBAC/B,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE;iBAC3D;gBACD,IAAI,EAAE,EAAE;aACT,CAAC;gBACF,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACnC,OAAO,CACL,IAAI,CAAC,QAAQ,EAAE;gBACb,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,sBAAsB;gBAChC,cAAc,EAAE,KAAK;aACtB,CAAC;gBACF,IAAI,CACL,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;YACpC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACjE,QAAQ,CAAC,KAAK,CACZ,2BAA2B,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,MAAM,CAC3F,CAAC;YACF,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;gBACzE,QAAQ,CAAC,KAAK,CACZ,yBAAyB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,MAAM,CAC1E,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoC,CAAC;YACpE,IAAI,OAAO,CAAC,EAAE,KAAK,SAAS;gBAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3E,MAAM,MAAM,GACV,OAAO,CAAC,MAAM,KAAK,YAAY;gBAC7B,CAAC,CAAC;oBACE,eAAe,EAAE,YAAY;oBAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;iBAC3C;gBACH,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,YAAY;oBAC/B,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;oBACf,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAAc,EACd,OAAe,EACf,OAAe,EACf,IAAY,EACZ,EAAE,CAAC,CAAC;IACJ,EAAE,EAAE,IAAI;IACR,MAAM;IACN,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;IACjC,QAAQ,EAAE,KAAK;IACf,MAAM,EAAE;QACN,EAAE,EAAE,KAAK,MAAM,EAAE;QACjB,QAAQ,EAAE,IAAI;QACd,MAAM;QACN,GAAG,EAAE,CAAC;QACN,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE;QACd,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;KAClD;IACD,MAAM,EAAE,SAAS;IACjB,OAAO;IACP,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE;IAC1D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;CAChC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,SAAiB,EAAY,EAAE,CAAC,CAAC;IACtF,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;IACtC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC;IACjC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE;IACrF,SAAS;IACT,SAAS,EAAE,CAAC;CACb,CAAC,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport {\n createServer as createHttpServer,\n type IncomingMessage,\n type Server,\n type ServerResponse,\n} from \"node:http\";\nimport type { AddressInfo } from \"node:net\";\n\nimport {\n answerStatement,\n betterAuthProvider,\n deviceCommitment,\n parlorAuth,\n promptStatement,\n statementBytes,\n vouchStatement,\n} from \"@parlor/auth\";\nimport {\n type AnswerToSign,\n HOST_PROTOCOL,\n type ItemSignature,\n type PromptToSign,\n} from \"@parlor/chat\";\nimport { chat } from \"@parlor/chat/server\";\nimport { asId, defineAction } from \"@parlor/core\";\nimport { createRegistry } from \"@parlor/core/registry\";\nimport { createDatabase, type DatabaseHandle } from \"@parlor/data\";\nimport {\n createServer,\n type DeviceKeys,\n type DeviceVouch,\n type FrameworkServer,\n} from \"@parlor/server\";\nimport { betterAuth } from \"better-auth\";\nimport { memoryAdapter } from \"better-auth/adapters/memory\";\nimport { getAuthTables } from \"better-auth/db\";\nimport { serve } from \"srvx\";\nimport { z } from \"zod\";\n\nimport { hostAssertion } from \"./assertion.js\";\nimport type { AppGrant, HostKeys } from \"./grants.js\";\nimport type { TrustedDevice, TrustStore } from \"./trust.js\";\n\nexport const PASSWORD = \"correct horse battery staple\";\n\nconst digest = (password: string) => createHash(\"sha256\").update(password).digest(\"hex\");\n\nexport class Browser {\n readonly #cookies = new Map<string, string>();\n\n constructor(readonly origin: string) {}\n\n async fetch(url: string, init: RequestInit = {}): Promise<Response> {\n const headers = new Headers(init.headers);\n if (this.#cookies.size > 0) {\n headers.set(\n \"cookie\",\n [...this.#cookies].map(([name, value]) => `${name}=${value}`).join(\"; \"),\n );\n }\n if (init.method === \"POST\" && !headers.has(\"origin\"))\n headers.set(\"origin\", this.origin);\n const response = await fetch(new URL(url, this.origin), {\n ...init,\n headers,\n redirect: \"manual\",\n });\n for (const cookie of response.headers.getSetCookie()) {\n const [pair] = cookie.split(\";\");\n const at = pair!.indexOf(\"=\");\n this.#cookies.set(pair!.slice(0, at), pair!.slice(at + 1));\n }\n return response;\n }\n\n async consent(\n url: string,\n decision: \"connect\" | \"cancel\",\n ): Promise<{\n readonly page: string;\n readonly answer: Response;\n }> {\n const page = await (await this.fetch(url)).text();\n const fields = new URLSearchParams(\n [...page.matchAll(/<input type=\"hidden\" name=\"([^\"]+)\" value=\"([^\"]*)\">/g)].map(\n (match) => [match[1]!, match[2]!.replaceAll(\"&amp;\", \"&\")],\n ),\n );\n fields.set(\"decision\", decision);\n const action = /<form method=\"post\" action=\"([^\"]+)\"/.exec(page)?.[1] ?? \"\";\n const answer = await this.fetch(action, {\n method: \"POST\",\n headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\n body: fields.toString(),\n });\n return { page, answer };\n }\n}\n\nexport interface SpecApp {\n readonly origin: string;\n readonly server: FrameworkServer;\n signUp(name: string): Promise<Browser>;\n close(): Promise<void>;\n}\n\nexport async function startSpecApp(): Promise<SpecApp> {\n const database: DatabaseHandle = await createDatabase({ dataDir: \"memory://\" });\n let server: FrameworkServer | undefined;\n const listener = serve({\n port: 0,\n hostname: \"127.0.0.1\",\n silent: true,\n fetch: (request) => server!.fetch(request),\n });\n await listener.ready();\n const origin = new URL(listener.url!).origin;\n const authOptions = parlorAuth({\n origin,\n signInPage: \"/sign-in\",\n appName: \"Hello\",\n secret: \"a-test-secret-that-is-long-enough-for-better-auth\",\n emailAndPassword: {\n enabled: true,\n password: {\n hash: (password) => Promise.resolve(digest(password)),\n verify: ({ hash, password }) => Promise.resolve(digest(password) === hash),\n },\n },\n });\n const tables = Object.values(getAuthTables(authOptions)).map((table) => [\n table.modelName,\n [],\n ]);\n const instance = betterAuth({\n ...authOptions,\n database: memoryAdapter(Object.fromEntries(tables)),\n });\n server = createServer({\n actions: createRegistry({\n listTasks: defineAction({\n description: \"List tasks.\",\n input: z.object({}),\n run: () => [],\n }),\n }),\n auth: betterAuthProvider({ instance }),\n plugins: [chat()],\n database: {\n read: () => database.read(),\n transaction: (run) => database.transaction(run),\n listen: (channel, handler, options) => database.listen(channel, handler, options),\n },\n });\n return {\n origin,\n server,\n async signUp(name) {\n const browser = new Browser(origin);\n const response = await browser.fetch(\"/_parlor/auth/sign-up/email\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({\n name,\n email: `${name.toLowerCase()}@example.com`,\n password: PASSWORD,\n }),\n });\n if (response.status !== 200) throw new Error(`sign-up answered ${response.status}`);\n return browser;\n },\n async close() {\n await listener.close(true);\n await server!.close();\n },\n };\n}\n\nexport function memoryHostKeys(): HostKeys & {\n readonly origins: () => readonly string[];\n} {\n const kept = new Map<string, { key: CryptoKey; kid: string; grantId: string }>();\n const sign = (key: CryptoKey) => async (payload: Uint8Array) =>\n Buffer.from(\n await crypto.subtle.sign(\n { name: \"ECDSA\", hash: \"SHA-256\" },\n key,\n new Uint8Array(payload),\n ),\n ).toString(\"base64url\");\n return {\n origins: () => [...kept.keys()],\n async create(appOrigin) {\n const pair = await crypto.subtle.generateKey(\n { name: \"ECDSA\", namedCurve: \"P-256\" },\n false,\n [\"sign\", \"verify\"],\n );\n const { kty, crv, x, y } = await crypto.subtle.exportKey(\"jwk\", pair.publicKey);\n const publicKey = { kty: kty!, crv: crv!, x: x!, y: y! };\n const thumbprint = createHash(\"sha256\")\n .update(JSON.stringify({ crv, kty, x, y }))\n .digest(\"base64url\");\n return {\n publicKey,\n thumbprint,\n sign: sign(pair.privateKey),\n keep: async (grantId) => {\n kept.set(appOrigin, { key: pair.privateKey, kid: thumbprint, grantId });\n },\n };\n },\n async assert(appOrigin, request) {\n const key = kept.get(appOrigin);\n if (!key) throw new Error(`no key for ${appOrigin}`);\n return hostAssertion(sign(key.key), key, request);\n },\n async remove(appOrigin) {\n kept.delete(appOrigin);\n },\n };\n}\n\nexport function memoryTrust(): TrustStore & { readonly pins: () => TrustedDevice[] } {\n const pinned = new Map<string, TrustedDevice>();\n const keyOf = (appOrigin: string, deviceId: string) => `${appOrigin}\\n${deviceId}`;\n return {\n pins: () => [...pinned.values()],\n get: async (appOrigin, deviceId) => pinned.get(keyOf(appOrigin, deviceId)),\n list: async (appOrigin) =>\n [...pinned.entries()]\n .filter(([key]) => key.startsWith(`${appOrigin}\\n`))\n .map(([, device]) => device),\n pin: async (appOrigin, device) =>\n void pinned.set(keyOf(appOrigin, device.deviceId), device),\n forget: async (appOrigin, deviceId) => {\n for (const key of [...pinned.keys()]) {\n if (\n key.startsWith(`${appOrigin}\\n`) &&\n (deviceId === undefined || key.endsWith(`\\n${deviceId}`))\n ) {\n pinned.delete(key);\n }\n }\n },\n };\n}\n\nconst ES256 = { name: \"ECDSA\", hash: \"SHA-256\" } as const;\n\nexport class TestDevice {\n private constructor(\n readonly keys: DeviceKeys,\n private readonly signing: CryptoKey,\n private readonly presence: CryptoKey,\n ) {}\n\n static async create(\n id = \"device-1\",\n name = \"Chrome on macOS\",\n platform = \"web\",\n ): Promise<TestDevice> {\n const make = async () => {\n const pair = await crypto.subtle.generateKey(\n { name: \"ECDSA\", namedCurve: \"P-256\" },\n true,\n [\"sign\", \"verify\"],\n );\n const { kty, crv, x, y } = await crypto.subtle.exportKey(\"jwk\", pair.publicKey);\n return {\n privateKey: pair.privateKey,\n publicKey: { kty: kty!, crv: crv!, x: x!, y: y! },\n };\n };\n const [signing, presence] = [await make(), await make()];\n return new TestDevice(\n {\n id: asId(\"device\", id),\n name,\n platform,\n signingKey: signing.publicKey,\n presenceKey: {\n format: \"es256-raw\",\n keyId: \"presence\",\n publicKey: presence.publicKey,\n },\n },\n signing.privateKey,\n presence.privateKey,\n );\n }\n\n get id() {\n return this.keys.id;\n }\n\n private async sign(\n key: CryptoKey,\n bytes: Uint8Array,\n presence: \"none\" | \"user\",\n at: number,\n ) {\n const signature = await crypto.subtle.sign(ES256, key, new Uint8Array(bytes));\n return {\n deviceId: this.id,\n at,\n signature: {\n keyId: \"key\",\n presence,\n format: \"es256-raw\",\n signature: Buffer.from(signature).toString(\"base64url\"),\n },\n } satisfies ItemSignature;\n }\n\n async signPrompt(\n app: string,\n prompt: PromptToSign,\n at: number,\n presence = false,\n ): Promise<ItemSignature> {\n const statement = await promptStatement(app, prompt, at);\n return this.sign(\n presence ? this.presence : this.signing,\n statementBytes(statement),\n presence ? \"user\" : \"none\",\n at,\n );\n }\n\n async signAnswer(\n app: string,\n answer: AnswerToSign,\n at: number,\n presence: boolean,\n ): Promise<ItemSignature> {\n const statement = await answerStatement(app, answer, at);\n return this.sign(\n presence ? this.presence : this.signing,\n statementBytes(statement),\n presence ? \"user\" : \"none\",\n at,\n );\n }\n\n /** This device's vouch for `device`, signed with its presence key unless `presence` is false. */\n async vouchFor(\n app: string,\n device: DeviceKeys,\n at: number,\n options: { readonly presence?: boolean; readonly commitment?: string } = {},\n ): Promise<DeviceVouch> {\n const commitment =\n options.commitment ??\n (await deviceCommitment(\n app,\n device.id,\n device.signingKey,\n device.presenceKey?.publicKey,\n ));\n const presence = options.presence ?? true;\n const { signature } = await this.sign(\n presence ? this.presence : this.signing,\n statementBytes(vouchStatement(app, this.id, device.id, commitment, at)),\n presence ? \"user\" : \"none\",\n at,\n );\n return { voucher: this.id, commitment, at, signature };\n }\n}\n\nexport interface StubApp {\n readonly origin: string;\n readonly seen: {\n readonly method: string;\n readonly path: string;\n readonly body: string;\n }[];\n close(): Promise<void>;\n}\n\nexport type Route = (\n request: IncomingMessage,\n body: string,\n response: ServerResponse,\n) => boolean;\n\nexport async function stubApp(route: Route): Promise<StubApp> {\n const seen: StubApp[\"seen\"][number][] = [];\n const server: Server = createHttpServer((request, response) => {\n let body = \"\";\n request.setEncoding(\"utf8\");\n request.on(\"data\", (chunk: string) => (body += chunk));\n request.on(\"end\", () => {\n const path = new URL(request.url ?? \"/\", \"http://stub\").pathname;\n seen.push({ method: request.method ?? \"GET\", path, body });\n if (!route(request, body, response)) response.writeHead(404).end();\n });\n });\n await new Promise<void>((resolve) => server.listen(0, \"127.0.0.1\", resolve));\n return {\n origin: `http://127.0.0.1:${(server.address() as AddressInfo).port}`,\n seen,\n close: () =>\n new Promise((resolve) => {\n server.closeAllConnections();\n server.close(() => resolve());\n }),\n };\n}\n\nexport const json = (response: ServerResponse, value: unknown, status = 200) =>\n response\n .writeHead(status, { \"content-type\": \"application/json\" })\n .end(JSON.stringify(value));\n\nexport const welcome = {\n id: \"h\",\n accepted: true,\n protocol: HOST_PROTOCOL,\n leaseMs: 60_000,\n heartbeatMs: 30_000,\n};\n\nexport function hostRoutes(options: {\n readonly wake: boolean;\n readonly turn?: () => unknown;\n}): Route {\n let claimed = false;\n return (request, body, response) => {\n const path = new URL(request.url ?? \"/\", \"http://stub\").pathname;\n const action = path.startsWith(\"/_parlor/chat/actions/\")\n ? path.split(\"/\").at(-1)\n : undefined;\n if (action === \"hostHello\")\n return (json(response, { data: welcome, tags: [] }), true);\n if (action === \"hostClaim\") {\n if (options.turn && !claimed) {\n claimed = true;\n return (json(response, { data: options.turn(), tags: [] }), true);\n }\n return (\n json(response, { error: { code: \"not_found\", message: \"No turn.\" } }, 404), true\n );\n }\n if (action === \"hostSignals\") return (json(response, { data: [], tags: [] }), true);\n if (action) {\n return (\n json(response, {\n data: {\n id: \"t1\",\n leaseUntil: Date.now() + 60_000,\n token: { token: \"turn-2\", expiresAt: Date.now() + 60_000 },\n },\n tags: [],\n }),\n true\n );\n }\n if (path === \"/_parlor/sync/token\") {\n return (\n json(response, {\n protocol: 1,\n transport: \"sse\",\n endpoint: \"/_parlor/sync/stream\",\n pollIntervalMs: 2_000,\n }),\n true\n );\n }\n if (path === \"/_parlor/sync/stream\") {\n response.writeHead(200, { \"content-type\": \"text/event-stream\" });\n response.write(\n `event: handshake\\ndata: ${JSON.stringify({ capabilities: [], keepAliveMs: 10_000 })}\\n\\n`,\n );\n if (options.wake) {\n const events = [{ version: 1, id: \"e1\", tags: [[\"parlor_chat\", \"t1\"]] }];\n response.write(\n `event: message\\ndata: ${JSON.stringify({ events, cursor: \"1.e1\" })}\\n\\n`,\n );\n }\n return true;\n }\n if (path === \"/_parlor/mcp\") {\n const message = JSON.parse(body) as { id?: number; method: string };\n if (message.id === undefined) return (response.writeHead(202).end(), true);\n const result =\n message.method === \"initialize\"\n ? {\n protocolVersion: \"2025-06-18\",\n capabilities: { tools: {} },\n serverInfo: { name: \"stub\", version: \"1\" },\n }\n : message.method === \"tools/list\"\n ? { tools: [] }\n : { content: [{ type: \"text\", text: \"[]\" }] };\n return (json(response, { jsonrpc: \"2.0\", id: message.id, result }), true);\n }\n return false;\n };\n}\n\nexport const claimedTurn = (\n turnId: string,\n agentId: string,\n context: string,\n text: string,\n) => ({\n id: \"t1\",\n turnId,\n agent: { hostId: \"h-A\", agentId },\n clientId: \"tab\",\n prompt: {\n id: `p-${turnId}`,\n threadId: \"t1\",\n turnId,\n seq: 1,\n at: Date.now(),\n author: \"user\",\n kind: \"prompt\",\n body: { text, agent: { hostId: \"h-A\", agentId } },\n },\n device: undefined,\n context,\n token: { token: \"turn-1\", expiresAt: Date.now() + 60_000 },\n leaseUntil: Date.now() + 60_000,\n});\n\nexport const grantFor = (origin: string, name: string, workspace: string): AppGrant => ({\n appOrigin: origin,\n appName: name,\n grantId: asId(\"grant\", `host:${name}`),\n hostId: asId(\"host\", `h-${name}`),\n account: { userId: asId(\"user\", \"alice\"), name: \"Alice\", email: \"alice@example.com\" },\n workspace,\n createdAt: 1,\n});\n"]}
@@ -0,0 +1,65 @@
1
+ import { type AcpStdio, type AgentModes, type StopReason, type ToolKind } from "../acp.js";
2
+ import type { AgentProfile } from "../agents.js";
3
+ /**
4
+ * A scripted agent on the real ACP transport (through `serveAcpAgent`), so the adapter,
5
+ * fold, permission, cancel and MCP proxy paths are tested as Claude Code and Codex drive
6
+ * them. A prompt's text names the step list to play: the whole text, or its last line when
7
+ * the host put its context block first. Every reply chunk goes out prefixed with
8
+ * `[t:<epoch ms>]`, the time it was written.
9
+ */
10
+ export interface FakeAgentScript {
11
+ readonly advertise?: {
12
+ readonly resume?: boolean | undefined;
13
+ readonly close?: boolean | undefined;
14
+ readonly mcpHttp?: boolean | undefined;
15
+ readonly modes?: AgentModes | undefined;
16
+ } | undefined;
17
+ readonly steps: Readonly<Record<string, readonly FakeStep[]>>;
18
+ /** For a prompt no step names: reply with it. */
19
+ readonly fallback?: "echo" | undefined;
20
+ }
21
+ export type FakeStep = {
22
+ readonly kind: "reply";
23
+ readonly chunks: readonly string[];
24
+ readonly perSecond?: number;
25
+ } | {
26
+ readonly kind: "thought";
27
+ readonly text: string;
28
+ } | {
29
+ readonly kind: "tool";
30
+ readonly title: string;
31
+ readonly toolKind: ToolKind;
32
+ readonly mcp?: {
33
+ readonly server: string;
34
+ readonly tool: string;
35
+ } | undefined;
36
+ readonly askPermission: boolean;
37
+ /** The permission request's own title, when it differs from the call's. */
38
+ readonly askTitle?: string | undefined;
39
+ }
40
+ /** Calls an app tool through the MCP server the host passed in `session/new`. */
41
+ | {
42
+ readonly kind: "call_app";
43
+ readonly tool: string;
44
+ readonly input: unknown;
45
+ } | {
46
+ readonly kind: "plan";
47
+ readonly entries: readonly string[];
48
+ } | {
49
+ readonly kind: "question";
50
+ readonly message: string;
51
+ readonly schema: Readonly<Record<string, unknown>>;
52
+ } | {
53
+ readonly kind: "wait_for_cancel";
54
+ } | {
55
+ readonly kind: "exit";
56
+ readonly code: number;
57
+ } | {
58
+ readonly kind: "stop";
59
+ readonly reason: Exclude<StopReason, "cancelled">;
60
+ };
61
+ /** The fixture's entry point: serves `script` on `io` (the process's stdio). */
62
+ export declare function serveFakeAgent(script: FakeAgentScript, io: AcpStdio): Promise<void>;
63
+ /** A profile that launches the fixture at `entry` with `scriptFile`. */
64
+ export declare function fakeAgentProfile(entry: string, scriptFile: string): AgentProfile;
65
+ //# sourceMappingURL=fake-agent.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"fake-agent.d.ts","sourceRoot":"","sources":["../../src/testing/fake-agent.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,QAAQ,EAGb,KAAK,UAAU,EAKf,KAAK,UAAU,EACf,KAAK,QAAQ,EACd,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,CAAC,EACf;QACE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;KACzC,GACD,SAAS,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC,CAAC,CAAC;IAC9D,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,MAAM,QAAQ,GAChB;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACnD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AACH,iFAAiF;GAC/E;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC9D;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,GACpC;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;CAAE,CAAC;AA8GjF,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAiJnF;AAED,wEAAwE;AACxE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,YAAY,CAOhF"}