@parlor/agent-host 0.0.0-stage → 0.2.0

package/dist/grants.js

@@ -0,0 +1,157 @@
+import { execFile, spawn } from "node:child_process";
+import { createHash } from "node:crypto";
+import { promisify } from "node:util";
+import { hostAssertion } from "./assertion.js";
+import { jsonFile } from "./json-file.js";
+/** `~/.parlor/host/grants.json`, 0600, written atomically. */
+export function fileGrantStore(file) {
+    const grants = jsonFile(file);
+    return {
+        list: async () => Object.values(await grants.read()),
+        get: async (appOrigin) => (await grants.read())[appOrigin],
+        save: (grant) => grants.change((all) => {
+            all[grant.appOrigin] = grant;
+        }),
+        remove: (appOrigin) => grants.change((all) => {
+            delete all[appOrigin];
+        }),
+    };
+}
+const EC_P256 = { name: "ECDSA", namedCurve: "P-256" };
+const ES256 = { name: "ECDSA", hash: "SHA-256" };
+const ORIGIN = /^https?:\/\/[A-Za-z0-9.\-[\]:]+$/;
+function thumbprintOf({ crv, kty, x, y }) {
+    return createHash("sha256")
+        .update(JSON.stringify({ crv, kty, x, y }))
+        .digest("base64url");
+}
+const signer = (key) => async (payload) => Buffer.from(await crypto.subtle.sign(ES256, key, new Uint8Array(payload))).toString("base64url");
+function keysIn(secrets) {
+    const loaded = new Map();
+    const load = (appOrigin) => {
+        let entry = loaded.get(appOrigin);
+        if (!entry) {
+            entry = (async () => {
+                const secret = await secrets.read(appOrigin);
+                if (secret === undefined)
+                    return undefined;
+                const stored = JSON.parse(Buffer.from(secret, "base64url").toString("utf8"));
+                const key = await crypto.subtle.importKey("jwk", stored.jwk, EC_P256, false, [
+                    "sign",
+                ]);
+                return { key, kid: stored.kid, grantId: stored.grantId };
+            })();
+            entry.catch(() => loaded.delete(appOrigin));
+            loaded.set(appOrigin, entry);
+        }
+        return entry;
+    };
+    return {
+        async create(appOrigin) {
+            const pair = await crypto.subtle.generateKey(EC_P256, true, ["sign", "verify"]);
+            const exported = await crypto.subtle.exportKey("jwk", pair.publicKey);
+            const publicKey = {
+                kty: exported.kty,
+                crv: exported.crv,
+                x: exported.x,
+                y: exported.y,
+            };
+            const thumbprint = thumbprintOf(publicKey);
+            return {
+                publicKey,
+                thumbprint,
+                sign: signer(pair.privateKey),
+                keep: async (grantId) => {
+                    const jwk = await crypto.subtle.exportKey("jwk", pair.privateKey);
+                    const stored = { jwk, kid: thumbprint, grantId };
+                    await secrets.write(appOrigin, Buffer.from(JSON.stringify(stored)).toString("base64url"));
+                    loaded.delete(appOrigin);
+                },
+            };
+        },
+        async assert(appOrigin, request) {
+            const key = await load(appOrigin);
+            if (!key)
+                throw new Error(`This computer holds no key for ${appOrigin}.`);
+            return hostAssertion(signer(key.key), key, request);
+        },
+        async remove(appOrigin) {
+            loaded.delete(appOrigin);
+            await secrets.remove(appOrigin);
+        },
+    };
+}
+const run = promisify(execFile);
+const NOT_FOUND = 44;
+function macKeychain(service) {
+    const checked = (account) => {
+        if (!ORIGIN.test(account))
+            throw new Error(`${account} is not an app origin.`);
+        return account;
+    };
+    return {
+        async read(account) {
+            try {
+                const { stdout } = await run("security", [
+                    "find-generic-password",
+                    "-s",
+                    service,
+                    "-a",
+                    checked(account),
+                    "-w",
+                ]);
+                return stdout.trim();
+            }
+            catch (error) {
+                if (error.code === NOT_FOUND)
+                    return undefined;
+                throw error;
+            }
+        },
+        async write(account, secret) {
+            // Through `security -i` on stdin, so the private key never shows in a process list.
+            const command = `add-generic-password -U -s ${service} -a ${checked(account)} -w ${secret}\n`;
+            await new Promise((resolve, reject) => {
+                const child = spawn("security", ["-i"], { stdio: ["pipe", "ignore", "pipe"] });
+                let stderr = "";
+                child.stderr.on("data", (chunk) => (stderr += chunk.toString()));
+                child.once("error", reject);
+                child.once("exit", (code) => code === 0 && stderr.trim() === ""
+                    ? resolve()
+                    : reject(new Error(`The Keychain refused the key: ${stderr.trim() || code}`)));
+                child.stdin.end(command);
+            });
+            if ((await this.read(account)) !== secret) {
+                throw new Error("The Keychain did not keep the key.");
+            }
+        },
+        async remove(account) {
+            try {
+                await run("security", [
+                    "delete-generic-password",
+                    "-s",
+                    service,
+                    "-a",
+                    checked(account),
+                ]);
+            }
+            catch (error) {
+                if (error.code !== NOT_FOUND)
+                    throw error;
+            }
+        },
+    };
+}
+/** The macOS Keychain; other platforms are refused before pairing (`unsupportedHostPlatform`). */
+export function keychainHostKeys(service) {
+    return keysIn(macKeychain(service));
+}
+/** For `parlor-host dev`: one dev host token for every request, nothing on disk. */
+export function devHostKeys(hostToken) {
+    return {
+        create: () => Promise.reject(new Error("A parlor dev server needs no pairing.")),
+        assert: async () => hostToken,
+        remove: async () => undefined,
+    };
+}
+//# sourceMappingURL=grants.js.map

package/dist/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../src/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAKtC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAmD1C,8DAA8D;AAC9D,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,QAAQ,CAA2B,IAAI,CAAC,CAAC;IACxD,OAAO;QACL,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpD,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC;QAC1D,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YACpB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,CACpB,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;YACpB,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;KACL,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;AAChE,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,CAAC;AAC1D,MAAM,MAAM,GAAG,kCAAkC,CAAC;AAoBlD,SAAS,YAAY,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAc;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SAC1C,MAAM,CAAC,WAAW,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,GAAc,EAAE,EAAE,CAAC,KAAK,EAAE,OAAmB,EAAE,EAAE,CAC/D,MAAM,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CACjF,WAAW,CACZ,CAAC;AAEJ,SAAS,MAAM,CAAC,OAAoB;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0C,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,EAAE;QACjC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;gBAClB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7C,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,SAAS,CAAC;gBAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CACrC,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;oBAC3E,MAAM;iBACP,CAAC,CAAC;gBACH,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3D,CAAC,CAAC,EAAE,CAAC;YACL,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;YAChF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACtE,MAAM,SAAS,GAAe;gBAC5B,GAAG,EAAE,QAAQ,CAAC,GAAI;gBAClB,GAAG,EAAE,QAAQ,CAAC,GAAI;gBAClB,CAAC,EAAE,QAAQ,CAAC,CAAE;gBACd,CAAC,EAAE,QAAQ,CAAC,CAAE;aACf,CAAC;YACF,MAAM,UAAU,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YAC3C,OAAO;gBACL,SAAS;gBACT,UAAU;gBACV,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;gBAC7B,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;oBACtB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;oBAClE,MAAM,MAAM,GAAc,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;oBAC5D,MAAM,OAAO,CAAC,KAAK,CACjB,SAAS,EACT,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC1D,CAAC;oBACF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;aACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO;YAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,SAAS,GAAG,CAAC,CAAC;YAC1E,OAAO,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACzB,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAChC,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,OAAO,GAAG,CAAC,OAAe,EAAE,EAAE;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,wBAAwB,CAAC,CAAC;QAC/E,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,OAAO;YAChB,IAAI,CAAC;gBACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE;oBACvC,uBAAuB;oBACvB,IAAI;oBACJ,OAAO;oBACP,IAAI;oBACJ,OAAO,CAAC,OAAO,CAAC;oBAChB,IAAI;iBACL,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA4B,CAAC,IAAI,KAAK,SAAS;oBAAE,OAAO,SAAS,CAAC;gBACvE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM;YACzB,oFAAoF;YACpF,MAAM,OAAO,GAAG,8BAA8B,OAAO,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,MAAM,IAAI,CAAC;YAC9F,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC/E,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACzE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAC1B,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE;oBAChC,CAAC,CAAC,OAAO,EAAE;oBACX,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAChF,CAAC;gBACF,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,UAAU,EAAE;oBACpB,yBAAyB;oBACzB,IAAI;oBACJ,OAAO;oBACP,IAAI;oBACJ,OAAO,CAAC,OAAO,CAAC;iBACjB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA4B,CAAC,IAAI,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAC;YACpE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,OAAO;QACL,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAChF,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC7B,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC","sourcesContent":["import { execFile, spawn } from \"node:child_process\";\nimport { createHash } from \"node:crypto\";\nimport { promisify } from \"node:util\";\n\nimport type { AccountSummary } from \"@parlor/auth\";\nimport type { GrantId, HostId } from \"@parlor/core\";\n\nimport { hostAssertion } from \"./assertion.js\";\nimport { jsonFile } from \"./json-file.js\";\n\n/** One app this computer is connected to. Its key lives in `HostKeys`, never here. */\nexport interface AppGrant {\n  readonly appOrigin: string;\n  readonly appName: string;\n  readonly grantId: GrantId;\n  readonly hostId: HostId;\n  readonly account: AccountSummary;\n  /** The agents' working directory for this app; only the user changes it, here. */\n  readonly workspace: string;\n  readonly createdAt: number;\n  /** A `parlor dev` grant: in memory only. */\n  readonly dev?: true | undefined;\n  /** Refused here but not yet revoked by the app: kept only to retry the revoke, never served. */\n  readonly declined?: true | undefined;\n  /**\n   * Handed only to the browser that approved `connect`, through the loopback redirect; that\n   * browser proves it on its first prompt and is trusted without asking, then this is dropped.\n   */\n  readonly pairingSecret?: string | undefined;\n}\n\n/** One key per app grant in the OS keychain; the server holds only its public half. */\nexport interface HostKeys {\n  /** A pairing's new key pair, kept only once the pairing completes. */\n  create(appOrigin: string): Promise<HostKeyPair>;\n  /** A fresh `ParlorHost` assertion for one request. */\n  assert(\n    appOrigin: string,\n    request: { readonly method: \"GET\" | \"POST\"; readonly url: string },\n  ): Promise<string>;\n  remove(appOrigin: string): Promise<void>;\n}\n\nexport interface HostKeyPair {\n  readonly publicKey: JsonWebKey;\n  /** RFC 7638, the assertion's `kid`. */\n  readonly thumbprint: string;\n  sign(payload: Uint8Array): Promise<string>;\n  /** Binds the key to the grant the pairing produced and stores it. */\n  keep(grantId: GrantId): Promise<void>;\n}\n\nexport interface GrantStore {\n  list(): Promise<readonly AppGrant[]>;\n  get(appOrigin: string): Promise<AppGrant | undefined>;\n  save(grant: AppGrant): Promise<void>;\n  remove(appOrigin: string): Promise<void>;\n}\n\n/** `~/.parlor/host/grants.json`, 0600, written atomically. */\nexport function fileGrantStore(file: string): GrantStore {\n  const grants = jsonFile<Record<string, AppGrant>>(file);\n  return {\n    list: async () => Object.values(await grants.read()),\n    get: async (appOrigin) => (await grants.read())[appOrigin],\n    save: (grant) =>\n      grants.change((all) => {\n        all[grant.appOrigin] = grant;\n      }),\n    remove: (appOrigin) =>\n      grants.change((all) => {\n        delete all[appOrigin];\n      }),\n  };\n}\n\nconst EC_P256 = { name: \"ECDSA\", namedCurve: \"P-256\" } as const;\nconst ES256 = { name: \"ECDSA\", hash: \"SHA-256\" } as const;\nconst ORIGIN = /^https?:\\/\\/[A-Za-z0-9.\\-[\\]:]+$/;\n\ninterface StoredKey {\n  readonly jwk: JsonWebKey;\n  readonly kid: string;\n  readonly grantId: string;\n}\n\ninterface LoadedKey {\n  readonly key: CryptoKey;\n  readonly kid: string;\n  readonly grantId: string;\n}\n\ninterface SecretStore {\n  read(account: string): Promise<string | undefined>;\n  write(account: string, secret: string): Promise<void>;\n  remove(account: string): Promise<void>;\n}\n\nfunction thumbprintOf({ crv, kty, x, y }: JsonWebKey): string {\n  return createHash(\"sha256\")\n    .update(JSON.stringify({ crv, kty, x, y }))\n    .digest(\"base64url\");\n}\n\nconst signer = (key: CryptoKey) => async (payload: Uint8Array) =>\n  Buffer.from(await crypto.subtle.sign(ES256, key, new Uint8Array(payload))).toString(\n    \"base64url\",\n  );\n\nfunction keysIn(secrets: SecretStore): HostKeys {\n  const loaded = new Map<string, Promise<LoadedKey | undefined>>();\n  const load = (appOrigin: string) => {\n    let entry = loaded.get(appOrigin);\n    if (!entry) {\n      entry = (async () => {\n        const secret = await secrets.read(appOrigin);\n        if (secret === undefined) return undefined;\n        const stored = JSON.parse(\n          Buffer.from(secret, \"base64url\").toString(\"utf8\"),\n        ) as StoredKey;\n        const key = await crypto.subtle.importKey(\"jwk\", stored.jwk, EC_P256, false, [\n          \"sign\",\n        ]);\n        return { key, kid: stored.kid, grantId: stored.grantId };\n      })();\n      entry.catch(() => loaded.delete(appOrigin));\n      loaded.set(appOrigin, entry);\n    }\n    return entry;\n  };\n  return {\n    async create(appOrigin) {\n      const pair = await crypto.subtle.generateKey(EC_P256, true, [\"sign\", \"verify\"]);\n      const exported = await crypto.subtle.exportKey(\"jwk\", pair.publicKey);\n      const publicKey: JsonWebKey = {\n        kty: exported.kty!,\n        crv: exported.crv!,\n        x: exported.x!,\n        y: exported.y!,\n      };\n      const thumbprint = thumbprintOf(publicKey);\n      return {\n        publicKey,\n        thumbprint,\n        sign: signer(pair.privateKey),\n        keep: async (grantId) => {\n          const jwk = await crypto.subtle.exportKey(\"jwk\", pair.privateKey);\n          const stored: StoredKey = { jwk, kid: thumbprint, grantId };\n          await secrets.write(\n            appOrigin,\n            Buffer.from(JSON.stringify(stored)).toString(\"base64url\"),\n          );\n          loaded.delete(appOrigin);\n        },\n      };\n    },\n    async assert(appOrigin, request) {\n      const key = await load(appOrigin);\n      if (!key) throw new Error(`This computer holds no key for ${appOrigin}.`);\n      return hostAssertion(signer(key.key), key, request);\n    },\n    async remove(appOrigin) {\n      loaded.delete(appOrigin);\n      await secrets.remove(appOrigin);\n    },\n  };\n}\n\nconst run = promisify(execFile);\nconst NOT_FOUND = 44;\n\nfunction macKeychain(service: string): SecretStore {\n  const checked = (account: string) => {\n    if (!ORIGIN.test(account)) throw new Error(`${account} is not an app origin.`);\n    return account;\n  };\n  return {\n    async read(account) {\n      try {\n        const { stdout } = await run(\"security\", [\n          \"find-generic-password\",\n          \"-s\",\n          service,\n          \"-a\",\n          checked(account),\n          \"-w\",\n        ]);\n        return stdout.trim();\n      } catch (error) {\n        if ((error as { code?: unknown }).code === NOT_FOUND) return undefined;\n        throw error;\n      }\n    },\n    async write(account, secret) {\n      // Through `security -i` on stdin, so the private key never shows in a process list.\n      const command = `add-generic-password -U -s ${service} -a ${checked(account)} -w ${secret}\\n`;\n      await new Promise<void>((resolve, reject) => {\n        const child = spawn(\"security\", [\"-i\"], { stdio: [\"pipe\", \"ignore\", \"pipe\"] });\n        let stderr = \"\";\n        child.stderr.on(\"data\", (chunk: Buffer) => (stderr += chunk.toString()));\n        child.once(\"error\", reject);\n        child.once(\"exit\", (code) =>\n          code === 0 && stderr.trim() === \"\"\n            ? resolve()\n            : reject(new Error(`The Keychain refused the key: ${stderr.trim() || code}`)),\n        );\n        child.stdin.end(command);\n      });\n      if ((await this.read(account)) !== secret) {\n        throw new Error(\"The Keychain did not keep the key.\");\n      }\n    },\n    async remove(account) {\n      try {\n        await run(\"security\", [\n          \"delete-generic-password\",\n          \"-s\",\n          service,\n          \"-a\",\n          checked(account),\n        ]);\n      } catch (error) {\n        if ((error as { code?: unknown }).code !== NOT_FOUND) throw error;\n      }\n    },\n  };\n}\n\n/** The macOS Keychain; other platforms are refused before pairing (`unsupportedHostPlatform`). */\nexport function keychainHostKeys(service: string): HostKeys {\n  return keysIn(macKeychain(service));\n}\n\n/** For `parlor-host dev`: one dev host token for every request, nothing on disk. */\nexport function devHostKeys(hostToken: string): HostKeys {\n  return {\n    create: () => Promise.reject(new Error(\"A parlor dev server needs no pairing.\")),\n    assert: async () => hostToken,\n    remove: async () => undefined,\n  };\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export { type AcpAgentHandlers, type AcpStdio, acpLauncher, type AgentAsk, type AgentAskAnswer, type AgentCapabilities, type AgentConnection, type AgentExit, type AgentLauncher, type AgentModes, type AgentSession, type AgentUpdate, type AskEffect, type LaunchOptions, type McpToolRef, type OpenSessionInput, type PromptBlock, serveAcpAgent, SessionRefused, type StdioMcpServer, type StopReason, type ToolKind, type TurnHandlers, } from "./acp.js";
+export { AGENT_PROFILES, type AgentLaunch, type AgentProfile, DETECT_TIMEOUT_MS, detectAgents, loadProfiles, } from "./agents.js";
+export { connectControl, type ControlClient, type ControlFailure, type ControlOp, CONTROL_PROTOCOL, type ControlRequest, type ControlResponse, } from "./control.js";
+export { createHostDaemon, type DaemonDeps, type HostDaemon } from "./daemon.js";
+export { finishFold, type FoldStep, foldUpdate, startFold, type TurnFold, } from "./fold.js";
+export { type AppGrant, devHostKeys, fileGrantStore, type GrantStore, type HostKeyPair, type HostKeys, keychainHostKeys, } from "./grants.js";
+export { ACTIVE_POLL_MS, type AppLink, type AppLinkDeps, createAppLink, type HostApi, IDLE_POLL_MS, RECONNECT_MAX_MS, } from "./link.js";
+export { createMcpProxy, type McpProxy, NO_TURN_MESSAGE, type ProxySession, runMcpProxyProcess, } from "./mcp-proxy.js";
+export { pair, PAIRING_TIMEOUT_MS, type PairingChannel, type PairInput, type PairOutcome, } from "./pairing.js";
+export { type HostPaths, hostPaths } from "./paths.js";
+export { approvalFor, changePolicy, DEFAULT_POLICY, DEV_POLICY, isAppTool, loadPolicy, type RemotePolicy, } from "./policy.js";
+export { createSessionPool, type LiveSession, type PooledGrant, type SessionPool, } from "./pool.js";
+export { type LocalPrompter, macDialogPrompter, terminalPrompter } from "./prompter.js";
+export { type AdoptOutcome, ensureService, type HostRelease, installLoginItem, type ServiceClient, } from "./service.js";
+export { fileTrustStore, type TrustedDevice, type TrustStore } from "./trust.js";
+export { PROMPT_MAX_AGE_MS, runTurn, type TurnDeps } from "./turn.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,aAAa,EACb,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,YAAY,GAClB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,UAAU,EACV,KAAK,QAAQ,EACb,UAAU,EACV,SAAS,EACT,KAAK,QAAQ,GACd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,QAAQ,EACb,WAAW,EACX,cAAc,EACd,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,cAAc,EACd,KAAK,OAAO,EACZ,KAAK,WAAW,EAChB,aAAa,EACb,KAAK,OAAO,EACZ,YAAY,EACZ,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,cAAc,EACd,KAAK,QAAQ,EACb,eAAe,EACf,KAAK,YAAY,EACjB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,IAAI,EACJ,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EACL,WAAW,EACX,YAAY,EACZ,cAAc,EACd,UAAU,EACV,SAAS,EACT,UAAU,EACV,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,KAAK,aAAa,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EACL,KAAK,YAAY,EACjB,aAAa,EACb,KAAK,WAAW,EAChB,gBAAgB,EAChB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+export { acpLauncher, serveAcpAgent, SessionRefused, } from "./acp.js";
+export { AGENT_PROFILES, DETECT_TIMEOUT_MS, detectAgents, loadProfiles, } from "./agents.js";
+export { connectControl, CONTROL_PROTOCOL, } from "./control.js";
+export { createHostDaemon } from "./daemon.js";
+export { finishFold, foldUpdate, startFold, } from "./fold.js";
+export { devHostKeys, fileGrantStore, keychainHostKeys, } from "./grants.js";
+export { ACTIVE_POLL_MS, createAppLink, IDLE_POLL_MS, RECONNECT_MAX_MS, } from "./link.js";
+export { createMcpProxy, NO_TURN_MESSAGE, runMcpProxyProcess, } from "./mcp-proxy.js";
+export { pair, PAIRING_TIMEOUT_MS, } from "./pairing.js";
+export { hostPaths } from "./paths.js";
+export { approvalFor, changePolicy, DEFAULT_POLICY, DEV_POLICY, isAppTool, loadPolicy, } from "./policy.js";
+export { createSessionPool, } from "./pool.js";
+export { macDialogPrompter, terminalPrompter } from "./prompter.js";
+export { ensureService, installLoginItem, } from "./service.js";
+export { fileTrustStore } from "./trust.js";
+export { PROMPT_MAX_AGE_MS, runTurn } from "./turn.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,WAAW,EAeX,aAAa,EACb,cAAc,GAKf,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,cAAc,EAGd,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,cAAc,EAId,gBAAgB,GAGjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,gBAAgB,EAAoC,MAAM,aAAa,CAAC;AACjF,OAAO,EACL,UAAU,EAEV,UAAU,EACV,SAAS,GAEV,MAAM,WAAW,CAAC;AACnB,OAAO,EAEL,WAAW,EACX,cAAc,EAId,gBAAgB,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,cAAc,EAGd,aAAa,EAEb,YAAY,EACZ,gBAAgB,GACjB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,cAAc,EAEd,eAAe,EAEf,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,IAAI,EACJ,kBAAkB,GAInB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAkB,SAAS,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EACL,WAAW,EACX,YAAY,EACZ,cAAc,EACd,UAAU,EACV,SAAS,EACT,UAAU,GAEX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iBAAiB,GAIlB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAsB,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAEL,aAAa,EAEb,gBAAgB,GAEjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAuC,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAiB,MAAM,WAAW,CAAC","sourcesContent":["export {\n  type AcpAgentHandlers,\n  type AcpStdio,\n  acpLauncher,\n  type AgentAsk,\n  type AgentAskAnswer,\n  type AgentCapabilities,\n  type AgentConnection,\n  type AgentExit,\n  type AgentLauncher,\n  type AgentModes,\n  type AgentSession,\n  type AgentUpdate,\n  type AskEffect,\n  type LaunchOptions,\n  type McpToolRef,\n  type OpenSessionInput,\n  type PromptBlock,\n  serveAcpAgent,\n  SessionRefused,\n  type StdioMcpServer,\n  type StopReason,\n  type ToolKind,\n  type TurnHandlers,\n} from \"./acp.js\";\nexport {\n  AGENT_PROFILES,\n  type AgentLaunch,\n  type AgentProfile,\n  DETECT_TIMEOUT_MS,\n  detectAgents,\n  loadProfiles,\n} from \"./agents.js\";\nexport {\n  connectControl,\n  type ControlClient,\n  type ControlFailure,\n  type ControlOp,\n  CONTROL_PROTOCOL,\n  type ControlRequest,\n  type ControlResponse,\n} from \"./control.js\";\nexport { createHostDaemon, type DaemonDeps, type HostDaemon } from \"./daemon.js\";\nexport {\n  finishFold,\n  type FoldStep,\n  foldUpdate,\n  startFold,\n  type TurnFold,\n} from \"./fold.js\";\nexport {\n  type AppGrant,\n  devHostKeys,\n  fileGrantStore,\n  type GrantStore,\n  type HostKeyPair,\n  type HostKeys,\n  keychainHostKeys,\n} from \"./grants.js\";\nexport {\n  ACTIVE_POLL_MS,\n  type AppLink,\n  type AppLinkDeps,\n  createAppLink,\n  type HostApi,\n  IDLE_POLL_MS,\n  RECONNECT_MAX_MS,\n} from \"./link.js\";\nexport {\n  createMcpProxy,\n  type McpProxy,\n  NO_TURN_MESSAGE,\n  type ProxySession,\n  runMcpProxyProcess,\n} from \"./mcp-proxy.js\";\nexport {\n  pair,\n  PAIRING_TIMEOUT_MS,\n  type PairingChannel,\n  type PairInput,\n  type PairOutcome,\n} from \"./pairing.js\";\nexport { type HostPaths, hostPaths } from \"./paths.js\";\nexport {\n  approvalFor,\n  changePolicy,\n  DEFAULT_POLICY,\n  DEV_POLICY,\n  isAppTool,\n  loadPolicy,\n  type RemotePolicy,\n} from \"./policy.js\";\nexport {\n  createSessionPool,\n  type LiveSession,\n  type PooledGrant,\n  type SessionPool,\n} from \"./pool.js\";\nexport { type LocalPrompter, macDialogPrompter, terminalPrompter } from \"./prompter.js\";\nexport {\n  type AdoptOutcome,\n  ensureService,\n  type HostRelease,\n  installLoginItem,\n  type ServiceClient,\n} from \"./service.js\";\nexport { fileTrustStore, type TrustedDevice, type TrustStore } from \"./trust.js\";\nexport { PROMPT_MAX_AGE_MS, runTurn, type TurnDeps } from \"./turn.js\";\n"]}

package/dist/json-file.d.ts

@@ -0,0 +1,6 @@
+export interface JsonFile<T extends object> {
+    read(): Promise<T>;
+    change(edit: (value: T) => void): Promise<void>;
+}
+export declare function jsonFile<T extends object>(file: string): JsonFile<T>;
+//# sourceMappingURL=json-file.d.ts.map

package/dist/json-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-file.d.ts","sourceRoot":"","sources":["../src/json-file.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,QAAQ,CAAC,CAAC,SAAS,MAAM;IACxC,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,wBAAgB,QAAQ,CAAC,CAAC,SAAS,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CA4BpE"}

package/dist/json-file.js

@@ -0,0 +1,35 @@
+import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { withFileLock } from "./lock.js";
+export function jsonFile(file) {
+    let writing = Promise.resolve();
+    const read = async () => {
+        try {
+            return JSON.parse(await readFile(file, "utf8"));
+        }
+        catch (error) {
+            if (error.code === "ENOENT")
+                return {};
+            throw error;
+        }
+    };
+    return {
+        read,
+        change(edit) {
+            const next = writing.then(async () => {
+                await mkdir(dirname(file), { recursive: true, mode: 0o700 });
+                await withFileLock(`${file}.lock`, async () => {
+                    const value = await read();
+                    edit(value);
+                    const staged = `${file}.${process.pid}.tmp`;
+                    await writeFile(staged, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o600 });
+                    await chmod(staged, 0o600);
+                    await rename(staged, file);
+                });
+            });
+            writing = next.catch(() => undefined);
+            return next;
+        },
+    };
+}
+//# sourceMappingURL=json-file.js.map

package/dist/json-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-file.js","sourceRoot":"","sources":["../src/json-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAOzC,MAAM,UAAU,QAAQ,CAAmB,IAAY;IACrD,IAAI,OAAO,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,IAAI,GAAG,KAAK,IAAgB,EAAE;QAClC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,EAAO,CAAC;YACvE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,IAAI;QACJ,MAAM,CAAC,IAAI;YACT,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACnC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,MAAM,YAAY,CAAC,GAAG,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE;oBAC5C,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;oBAC3B,IAAI,CAAC,KAAK,CAAC,CAAC;oBACZ,MAAM,MAAM,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;oBAC5C,MAAM,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBAChF,MAAM,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;oBAC3B,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC7B,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { chmod, mkdir, readFile, rename, writeFile } from \"node:fs/promises\";\nimport { dirname } from \"node:path\";\n\nimport { withFileLock } from \"./lock.js\";\n\nexport interface JsonFile<T extends object> {\n  read(): Promise<T>;\n  change(edit: (value: T) => void): Promise<void>;\n}\n\nexport function jsonFile<T extends object>(file: string): JsonFile<T> {\n  let writing: Promise<unknown> = Promise.resolve();\n  const read = async (): Promise<T> => {\n    try {\n      return JSON.parse(await readFile(file, \"utf8\")) as T;\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return {} as T;\n      throw error;\n    }\n  };\n  return {\n    read,\n    change(edit) {\n      const next = writing.then(async () => {\n        await mkdir(dirname(file), { recursive: true, mode: 0o700 });\n        await withFileLock(`${file}.lock`, async () => {\n          const value = await read();\n          edit(value);\n          const staged = `${file}.${process.pid}.tmp`;\n          await writeFile(staged, `${JSON.stringify(value, null, 2)}\\n`, { mode: 0o600 });\n          await chmod(staged, 0o600);\n          await rename(staged, file);\n        });\n      });\n      writing = next.catch(() => undefined);\n      return next;\n    },\n  };\n}\n"]}

package/dist/lines.d.ts

@@ -0,0 +1,5 @@
+import { type Interface } from "node:readline";
+import type { Readable } from "node:stream";
+/** Newline-delimited input; a broken stream ends it instead of throwing from readline. */
+export declare function onLines(input: Readable, handle: (line: string) => void): Interface;
+//# sourceMappingURL=lines.d.ts.map

package/dist/lines.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lines.d.ts","sourceRoot":"","sources":["../src/lines.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,0FAA0F;AAC1F,wBAAgB,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,SAAS,CAKlF"}

package/dist/lines.js

@@ -0,0 +1,9 @@
+import { createInterface } from "node:readline";
+/** Newline-delimited input; a broken stream ends it instead of throwing from readline. */
+export function onLines(input, handle) {
+    const lines = createInterface({ input, crlfDelay: Infinity });
+    lines.on("line", handle);
+    lines.on("error", () => input.destroy());
+    return lines;
+}
+//# sourceMappingURL=lines.js.map

package/dist/lines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lines.js","sourceRoot":"","sources":["../src/lines.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAkB,MAAM,eAAe,CAAC;AAGhE,0FAA0F;AAC1F,MAAM,UAAU,OAAO,CAAC,KAAe,EAAE,MAA8B;IACrE,MAAM,KAAK,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { createInterface, type Interface } from \"node:readline\";\nimport type { Readable } from \"node:stream\";\n\n/** Newline-delimited input; a broken stream ends it instead of throwing from readline. */\nexport function onLines(input: Readable, handle: (line: string) => void): Interface {\n  const lines = createInterface({ input, crlfDelay: Infinity });\n  lines.on(\"line\", handle);\n  lines.on(\"error\", () => input.destroy());\n  return lines;\n}\n"]}

package/dist/link-device.d.ts

@@ -0,0 +1,28 @@
+import type { AssertionRequest } from "./assertion.js";
+import type { TrustedDevice, TrustStore } from "./trust.js";
+export declare const LINK_PATH = "/_parlor/auth/hosts/devices/link";
+export interface LinkDeviceInput {
+    readonly appOrigin: string;
+    readonly code: string;
+    readonly assert: (request: AssertionRequest) => Promise<string>;
+    readonly trust: TrustStore;
+    /** Asked on this computer once the code checked out; only true links. */
+    readonly confirm: (device: {
+        readonly name: string;
+        readonly platform: string;
+    }) => Promise<boolean>;
+    readonly now?: (() => number) | undefined;
+    readonly fetch?: typeof fetch | undefined;
+}
+export type LinkOutcome = {
+    readonly linked: true;
+    readonly device: TrustedDevice;
+} | {
+    readonly linked: false;
+};
+/**
+ * Links the device showing `code` from this computer: the app finds it, this computer checks
+ * its keys hash to that code, so the app cannot slip in other keys, and the user confirms here.
+ */
+export declare function linkDevice(input: LinkDeviceInput): Promise<LinkOutcome>;
+//# sourceMappingURL=link-device.d.ts.map

package/dist/link-device.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-device.d.ts","sourceRoot":"","sources":["../src/link-device.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5D,eAAO,MAAM,SAAS,qCAAqC,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;QACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;KAC3B,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAA;CAAE,CAAC;AAE/B;;;GAGG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAuC7E"}

package/dist/link-device.js

@@ -0,0 +1,40 @@
+import { deviceCommitment, linkCode, normalizeLinkCode, } from "@parlor/auth";
+import { printable } from "./prompter.js";
+export const LINK_PATH = "/_parlor/auth/hosts/devices/link";
+/**
+ * Links the device showing `code` from this computer: the app finds it, this computer checks
+ * its keys hash to that code, so the app cannot slip in other keys, and the user confirms here.
+ */
+export async function linkDevice(input) {
+    const origin = new URL(input.appOrigin).origin;
+    const url = `${origin}${LINK_PATH}`;
+    const authorization = `ParlorHost ${await input.assert({ method: "POST", url })}`;
+    const response = await (input.fetch ?? fetch)(url, {
+        method: "POST",
+        headers: { authorization, "content-type": "application/json" },
+        body: JSON.stringify({ code: input.code }),
+    });
+    const body = (await response.json().catch(() => undefined));
+    if (!response.ok || !body?.signingKey) {
+        throw new Error(body?.error?.message ?? `The app answered HTTP ${response.status}.`);
+    }
+    const commitment = await deviceCommitment(origin, body.id, body.signingKey, body.presenceKey?.publicKey);
+    if (linkCode(commitment) !== normalizeLinkCode(input.code)) {
+        throw new Error("The app returned a device whose keys do not match this code, so nothing was linked. Show a new code on the device and try again.");
+    }
+    const shown = { name: printable(body.name), platform: printable(body.platform) };
+    if (!(await input.confirm(shown)))
+        return { linked: false };
+    const device = {
+        deviceId: body.id,
+        signingKey: body.signingKey,
+        presenceKey: body.presenceKey,
+        name: body.name,
+        platform: body.platform,
+        approvedAt: (input.now ?? Date.now)(),
+        via: "local",
+    };
+    await input.trust.pin(origin, device);
+    return { linked: true, device };
+}
+//# sourceMappingURL=link-device.js.map

package/dist/link-device.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link-device.js","sourceRoot":"","sources":["../src/link-device.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,iBAAiB,GAElB,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG1C,MAAM,CAAC,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAoB5D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAsB;IACrD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,SAAS,EAAE,CAAC;IACpC,MAAM,aAAa,GAAG,cAAc,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC9D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;KAC3C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAE7C,CAAC;IACd,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,IAAI,yBAAyB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,gBAAgB,CACvC,MAAM,EACN,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,WAAW,EAAE,SAAS,CAC5B,CAAC;IACF,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,kIAAkI,CACnI,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;IACjF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAkB;QAC5B,QAAQ,EAAE,IAAI,CAAC,EAAE;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE;QACrC,GAAG,EAAE,OAAO;KACb,CAAC;IACF,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC","sourcesContent":["import {\n  deviceCommitment,\n  linkCode,\n  normalizeLinkCode,\n  type PendingDevice,\n} from \"@parlor/auth\";\n\nimport type { AssertionRequest } from \"./assertion.js\";\nimport { printable } from \"./prompter.js\";\nimport type { TrustedDevice, TrustStore } from \"./trust.js\";\n\nexport const LINK_PATH = \"/_parlor/auth/hosts/devices/link\";\n\nexport interface LinkDeviceInput {\n  readonly appOrigin: string;\n  readonly code: string;\n  readonly assert: (request: AssertionRequest) => Promise<string>;\n  readonly trust: TrustStore;\n  /** Asked on this computer once the code checked out; only true links. */\n  readonly confirm: (device: {\n    readonly name: string;\n    readonly platform: string;\n  }) => Promise<boolean>;\n  readonly now?: (() => number) | undefined;\n  readonly fetch?: typeof fetch | undefined;\n}\n\nexport type LinkOutcome =\n  | { readonly linked: true; readonly device: TrustedDevice }\n  | { readonly linked: false };\n\n/**\n * Links the device showing `code` from this computer: the app finds it, this computer checks\n * its keys hash to that code, so the app cannot slip in other keys, and the user confirms here.\n */\nexport async function linkDevice(input: LinkDeviceInput): Promise<LinkOutcome> {\n  const origin = new URL(input.appOrigin).origin;\n  const url = `${origin}${LINK_PATH}`;\n  const authorization = `ParlorHost ${await input.assert({ method: \"POST\", url })}`;\n  const response = await (input.fetch ?? fetch)(url, {\n    method: \"POST\",\n    headers: { authorization, \"content-type\": \"application/json\" },\n    body: JSON.stringify({ code: input.code }),\n  });\n  const body = (await response.json().catch(() => undefined)) as\n    | (PendingDevice & { readonly error?: { readonly message?: string } })\n    | undefined;\n  if (!response.ok || !body?.signingKey) {\n    throw new Error(body?.error?.message ?? `The app answered HTTP ${response.status}.`);\n  }\n  const commitment = await deviceCommitment(\n    origin,\n    body.id,\n    body.signingKey,\n    body.presenceKey?.publicKey,\n  );\n  if (linkCode(commitment) !== normalizeLinkCode(input.code)) {\n    throw new Error(\n      \"The app returned a device whose keys do not match this code, so nothing was linked. Show a new code on the device and try again.\",\n    );\n  }\n  const shown = { name: printable(body.name), platform: printable(body.platform) };\n  if (!(await input.confirm(shown))) return { linked: false };\n  const device: TrustedDevice = {\n    deviceId: body.id,\n    signingKey: body.signingKey,\n    presenceKey: body.presenceKey,\n    name: body.name,\n    platform: body.platform,\n    approvedAt: (input.now ?? Date.now)(),\n    via: \"local\",\n  };\n  await input.trust.pin(origin, device);\n  return { linked: true, device };\n}\n"]}

package/dist/link.d.ts

@@ -0,0 +1,52 @@
+import { type HostStreamBatch, type HostWelcome } from "@parlor/chat";
+import { type ChatHostActionMap } from "@parlor/chat/server";
+import { type PluginClient } from "@parlor/client";
+import type { AppGrant, HostKeys } from "./grants.js";
+export declare const RECONNECT_MAX_MS = 4000;
+export declare const ACTIVE_POLL_MS = 2000;
+export declare const IDLE_POLL_MS = 15000;
+export interface HostApi {
+    readonly calls: PluginClient<ChatHostActionMap>;
+    /** At most one post in flight per turn; frames produced meanwhile coalesce into the next. */
+    stream(batch: HostStreamBatch): void;
+    heartbeat(): Promise<void>;
+}
+export interface AppLinkDeps {
+    readonly keys: HostKeys;
+    readonly hostVersion: string;
+    readonly hostName: string;
+    readonly platform: string;
+    readonly fetch: typeof fetch;
+    /** A turn may be waiting: claim until not_found, then ask for running turns' signals. */
+    readonly onWake: (link: AppLink) => void;
+    /** Whether a turn runs on this link, which keeps a poll deployment's `/sync` at the active interval. */
+    readonly busy?: (() => boolean) | undefined;
+    /** Any 401, or the stream closed for revocation. */
+    readonly onRevoked: (grant: AppGrant) => void;
+    /** No shared protocol: shown locally ("update Parlor Host"); the link stays down. */
+    readonly onIncompatible: (grant: AppGrant, welcome: Extract<HostWelcome, {
+        readonly accepted: false;
+    }>) => void;
+}
+/**
+ * `idle` until started; `serving` wakes the host for turns; `draining` stays up for the
+ * turns it runs but wakes nobody (a newer service took over the claiming); `closed` is final.
+ */
+export type LinkMode = "idle" | "serving" | "draining" | "closed";
+/** The host's whole conversation with one app, each request carrying a fresh assertion. */
+export interface AppLink {
+    readonly grant: AppGrant;
+    readonly api: HostApi;
+    /** Set once `hostHello` was welcomed; every other call waits for it. */
+    readonly protocol: number | undefined;
+    readonly mode: LinkMode;
+    start(): void;
+    /** Stops waking the host and keeps everything else, so running turns finish on this link. */
+    drain(): void;
+    /** With `revoke`, a refused revoke throws and leaves the link running. */
+    stop(options?: {
+        readonly revoke?: boolean | undefined;
+    }): Promise<void>;
+}
+export declare function createAppLink(grant: AppGrant, deps: AppLinkDeps): AppLink;
+//# sourceMappingURL=link.d.ts.map

package/dist/link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.d.ts","sourceRoot":"","sources":["../src/link.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,KAAK,iBAAiB,EAAyB,MAAM,qBAAqB,CAAC;AACpF,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAItD,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AACtC,eAAO,MAAM,cAAc,OAAQ,CAAC;AACpC,eAAO,MAAM,YAAY,QAAS,CAAC;AAKnC,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,iBAAiB,CAAC,CAAC;IAChD,6FAA6F;IAC7F,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IACrC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC;IAC7B,yFAAyF;IACzF,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACzC,wGAAwG;IACxG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,GAAG,SAAS,CAAC;IAC5C,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC9C,qFAAqF;IACrF,QAAQ,CAAC,cAAc,EAAE,CACvB,KAAK,EAAE,QAAQ,EACf,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;KAAE,CAAC,KACxD,IAAI,CAAC;CACX;AAED;;;GAGG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAElE,2FAA2F;AAC3F,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,KAAK,IAAI,IAAI,CAAC;IACd,6FAA6F;IAC7F,KAAK,IAAI,IAAI,CAAC;IACd,0EAA0E;IAC1E,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1E;AAuFD,wBAAgB,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAyMzE"}