@parlor/agent-host 0.0.0-stage → 0.2.0

package/dist/link.js

@@ -0,0 +1,277 @@
+import { CHAT_ACTIVITY_TAG, CHAT_TAG, HOST_PROTOCOL, } from "@parlor/chat";
+import { MAX_STREAM_BODY_BYTES } from "@parlor/chat/server";
+import { createActionClient, createPluginClient, } from "@parlor/client";
+import { createSyncClient } from "@parlor/sync/client";
+import { logEvent } from "./log.js";
+import { revokeGrant } from "./revoke.js";
+export const RECONNECT_MAX_MS = 4_000;
+export const ACTIVE_POLL_MS = 2_000;
+export const IDLE_POLL_MS = 15_000;
+const USER_ACTIVE_WINDOW_MS = 2 * 60_000;
+const REQUEST_TIMEOUT_MS = 10_000;
+const RETRY_BASE_MS = 250;
+const MAX_BATCH_BYTES = (MAX_STREAM_BODY_BYTES * 3) / 4;
+class LinkDown extends Error {
+    name = "LinkDown";
+}
+function coalesce(frames) {
+    const merged = [];
+    for (const frame of frames) {
+        const last = merged.at(-1);
+        if (last?.type === "delta" &&
+            frame.type === "delta" &&
+            last.itemId === frame.itemId &&
+            last.offset + last.text.length === frame.offset) {
+            merged[merged.length - 1] = { ...last, text: last.text + frame.text };
+        }
+        else {
+            merged.push(frame);
+        }
+    }
+    return merged;
+}
+function batches(frames) {
+    const out = [];
+    let current = [];
+    let bytes = 0;
+    for (const frame of frames) {
+        const size = JSON.stringify(frame).length;
+        if (current.length > 0 && bytes + size > MAX_BATCH_BYTES) {
+            out.push(current);
+            current = [];
+            bytes = 0;
+        }
+        current.push(frame);
+        bytes += size;
+    }
+    if (current.length > 0)
+        out.push(current);
+    return out;
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+class RequestTimeout extends Error {
+    name = "RequestTimeout";
+    constructor(ms) {
+        super(`The app did not answer within ${ms} ms.`);
+    }
+}
+function untilHeaders(inner, ms) {
+    return async (input, init) => {
+        const own = new AbortController();
+        const timer = setTimeout(() => own.abort(new RequestTimeout(ms)), ms);
+        const signal = init?.signal ? AbortSignal.any([init.signal, own.signal]) : own.signal;
+        try {
+            return await inner(input, { ...init, signal });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    };
+}
+function adaptivePoll(advertised, busy) {
+    let activeUntil = 0;
+    const idle = () => advertised && !busy() && Date.now() >= activeUntil;
+    return {
+        pollEveryMs: () => (idle() ? IDLE_POLL_MS : ACTIVE_POLL_MS),
+        touch: () => {
+            const wasIdle = idle();
+            activeUntil = Date.now() + USER_ACTIVE_WINDOW_MS;
+            return wasIdle;
+        },
+    };
+}
+export function createAppLink(grant, deps) {
+    const origin = grant.appOrigin.replace(/\/+$/, "");
+    let welcome;
+    let mode = "idle";
+    const modeNow = () => mode;
+    let revoked = false;
+    let sync;
+    let heartbeat;
+    const streams = new Map();
+    let admit = () => undefined;
+    let refuse = () => undefined;
+    const welcomed = new Promise((resolve, reject) => {
+        admit = resolve;
+        refuse = reject;
+    });
+    welcomed.catch(() => undefined);
+    const signedFetch = async (input, init) => {
+        if (mode === "closed")
+            throw new LinkDown("This app's link is closed.");
+        const request = new Request(input, init);
+        const method = request.method === "GET" ? "GET" : "POST";
+        const assertion = await deps.keys.assert(origin, { method, url: request.url });
+        const headers = new Headers(request.headers);
+        headers.set("authorization", `ParlorHost ${assertion}`);
+        const response = await deps.fetch(new Request(request, { headers }));
+        logEvent("http_request", {
+            method,
+            path: new URL(request.url).pathname,
+            status: response.status,
+        });
+        if (response.status === 401 && !revoked && modeNow() !== "closed") {
+            revoked = true;
+            queueMicrotask(() => deps.onRevoked(grant));
+        }
+        return response;
+    };
+    const timedFetch = untilHeaders(signedFetch, REQUEST_TIMEOUT_MS);
+    const plugin = createPluginClient(createActionClient({ baseUrl: origin, fetch: timedFetch }), "chat");
+    const drained = async (turnId) => {
+        if (turnId === undefined)
+            return;
+        while (true) {
+            const posting = streams.get(turnId)?.posting;
+            if (!posting)
+                return;
+            await posting;
+        }
+    };
+    const invoke = async (name, input, options) => {
+        if (name !== "hostHello")
+            await welcomed;
+        if (name === "hostAppend" || name === "hostFinish") {
+            await drained(input.turnId);
+        }
+        return plugin.invoke(name, input, options);
+    };
+    const calls = {
+        invoke,
+        call: async (name, input, options) => (await invoke(name, input, options)).data,
+    };
+    const post = (path, body) => timedFetch(`${origin}/_parlor/chat/${path}`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(body),
+    });
+    const flush = async (turnId, stream) => {
+        while (stream.pending.length > 0) {
+            if (mode === "closed")
+                break;
+            const frames = coalesce(stream.pending);
+            stream.pending = [];
+            for (const chunk of batches(frames)) {
+                await post("stream", { turnId, frames: chunk }).catch(() => undefined);
+            }
+        }
+        stream.posting = undefined;
+        if (stream.pending.length === 0)
+            streams.delete(turnId);
+    };
+    const api = {
+        calls,
+        stream(batch) {
+            if (mode === "closed" || batch.frames.length === 0)
+                return;
+            let stream = streams.get(batch.turnId);
+            if (!stream) {
+                stream = { pending: [], posting: undefined };
+                streams.set(batch.turnId, stream);
+            }
+            stream.pending.push(...batch.frames);
+            if (!stream.posting)
+                stream.posting = flush(batch.turnId, stream);
+        },
+        async heartbeat() {
+            await welcomed;
+            await post("heartbeat", {});
+        },
+    };
+    const close = () => {
+        mode = "closed";
+        sync?.stop();
+        sync = undefined;
+        if (heartbeat)
+            clearInterval(heartbeat);
+        heartbeat = undefined;
+        refuse(new LinkDown("This app's link is closed."));
+    };
+    const hello = async () => {
+        for (let attempt = 0;; attempt += 1) {
+            if (mode !== "serving" && mode !== "draining")
+                return undefined;
+            try {
+                return await plugin.call("hostHello", {
+                    protocols: { min: 1, max: HOST_PROTOCOL },
+                    hostVersion: deps.hostVersion,
+                    name: deps.hostName,
+                    platform: deps.platform,
+                    agents: [],
+                });
+            }
+            catch {
+                if (revoked || modeNow() === "closed")
+                    return undefined;
+                await sleep(Math.min(RETRY_BASE_MS * 2 ** attempt, RECONNECT_MAX_MS));
+            }
+        }
+    };
+    const link = {
+        grant,
+        api,
+        get protocol() {
+            return welcome?.protocol;
+        },
+        get mode() {
+            return mode;
+        },
+        start() {
+            if (mode !== "idle")
+                return;
+            mode = "serving";
+            void hello().then((answer) => {
+                if (!answer || modeNow() === "closed")
+                    return;
+                if (!answer.accepted) {
+                    close();
+                    logEvent("link_closed", { appOrigin: origin, reason: "incompatible" });
+                    deps.onIncompatible(grant, answer);
+                    return;
+                }
+                welcome = answer;
+                admit();
+                const polling = adaptivePoll(answer.userActivity === true, () => deps.busy?.() ?? false);
+                sync = createSyncClient({
+                    request: (path, init) => signedFetch(`${origin}${path}`, init),
+                    coalesceMs: 0,
+                    reconnectMaxMs: RECONNECT_MAX_MS,
+                    pollEveryMs: polling.pollEveryMs,
+                    onEvents: (events) => {
+                        const heads = events.flatMap((event) => event.tags.map((tag) => tag[0]));
+                        if (heads.some((head) => head === CHAT_TAG || head === CHAT_ACTIVITY_TAG)) {
+                            if (polling.touch())
+                                sync?.reconnectNow();
+                        }
+                        if (modeNow() === "serving" && heads.includes(CHAT_TAG))
+                            deps.onWake(link);
+                    },
+                    onUnauthorized: () => undefined,
+                    onError: () => undefined,
+                });
+                sync.start();
+                heartbeat = setInterval(() => void api.heartbeat().catch(() => undefined), answer.heartbeatMs);
+                heartbeat.unref();
+                if (modeNow() === "serving")
+                    deps.onWake(link);
+            });
+        },
+        drain() {
+            if (mode === "serving")
+                mode = "draining";
+        },
+        async stop(options = {}) {
+            if (options.revoke && !grant.dev) {
+                await revokeGrant({
+                    appOrigin: origin,
+                    appName: grant.appName,
+                    assert: (request) => deps.keys.assert(origin, request),
+                    fetch: deps.fetch,
+                });
+            }
+            close();
+        },
+    };
+    return link;
+}
+//# sourceMappingURL=link.js.map

package/dist/link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"link.js","sourceRoot":"","sources":["../src/link.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,aAAa,GAId,MAAM,cAAc,CAAC;AACtB,OAAO,EAA0B,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AAGxE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AACtC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AACpC,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC;AAEnC,MAAM,qBAAqB,GAAG,CAAC,GAAG,MAAM,CAAC;AACzC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAkDlC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,eAAe,GAAG,CAAC,qBAAqB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AAExD,MAAM,QAAS,SAAQ,KAAK;IACR,IAAI,GAAG,UAAU,CAAC;CACrC;AAOD,SAAS,QAAQ,CAAC,MAA4B;IAC5C,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,IACE,IAAI,EAAE,IAAI,KAAK,OAAO;YACtB,KAAK,CAAC,IAAI,KAAK,OAAO;YACtB,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAC/C,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,MAA4B;IAC3C,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAgB,EAAE,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAC1C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,GAAG,IAAI,GAAG,eAAe,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClB,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,CAAC,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,KAAK,IAAI,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEhF,MAAM,cAAe,SAAQ,KAAK;IACd,IAAI,GAAG,gBAAgB,CAAC;IAC1C,YAAY,EAAU;QACpB,KAAK,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;IACnD,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAmB,EAAE,EAAU;IACnD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACtF,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,UAAmB,EAAE,IAAmB;IAC5D,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,UAAU,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,WAAW,CAAC;IACtE,OAAO;QACL,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;QAC3D,KAAK,EAAE,GAAG,EAAE;YACV,MAAM,OAAO,GAAG,IAAI,EAAE,CAAC;YACvB,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,qBAAqB,CAAC;YACjD,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAe,EAAE,IAAiB;IAC9D,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,OAA6B,CAAC;IAClC,IAAI,IAAI,GAAa,MAAM,CAAC;IAC5B,MAAM,OAAO,GAAG,GAAa,EAAE,CAAC,IAAI,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAA4B,CAAC;IACjC,IAAI,SAAqC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAE9C,IAAI,KAAK,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;IACxC,IAAI,MAAM,GAA2B,GAAG,EAAE,CAAC,SAAS,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrD,KAAK,GAAG,OAAO,CAAC;QAChB,MAAM,GAAG,MAAM,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAEhC,MAAM,WAAW,GAAiB,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACtD,IAAI,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACzD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,cAAc,SAAS,EAAE,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,cAAc,EAAE;YACvB,MAAM;YACN,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ;YACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YAClE,OAAO,GAAG,IAAI,CAAC;YACf,cAAc,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,kBAAkB,CAC/B,kBAAkB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAC1D,MAAM,CACP,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,MAA0B,EAAE,EAAE;QACnD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;YAC7C,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,MAAM,OAAO,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAA8C,KAAK,EAC7D,IAAI,EACJ,KAAK,EACL,OAAO,EACP,EAAE;QACF,IAAI,IAAI,KAAK,WAAW;YAAE,MAAM,QAAQ,CAAC;QACzC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACnD,MAAM,OAAO,CAAE,KAAsC,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,MAAM,KAAK,GAAoC;QAC7C,MAAM;QACN,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI;KAChF,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAa,EAAE,EAAE,CAC3C,UAAU,CAAC,GAAG,MAAM,iBAAiB,IAAI,EAAE,EAAE;QAC3C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IAEL,MAAM,KAAK,GAAG,KAAK,EAAE,MAAc,EAAE,MAAkB,EAAE,EAAE;QACzD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,IAAI,IAAI,KAAK,QAAQ;gBAAE,MAAM;YAC7B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpC,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC;QAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,GAAG,GAAY;QACnB,KAAK;QACL,MAAM,CAAC,KAAK;YACV,IAAI,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC3D,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;gBAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,CAAC,SAAS;YACb,MAAM,QAAQ,CAAC;YACf,MAAM,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,GAAG,QAAQ,CAAC;QAChB,IAAI,EAAE,IAAI,EAAE,CAAC;QACb,IAAI,GAAG,SAAS,CAAC;QACjB,IAAI,SAAS;YAAE,aAAa,CAAC,SAAS,CAAC,CAAC;QACxC,SAAS,GAAG,SAAS,CAAC;QACtB,MAAM,CAAC,IAAI,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAsC,EAAE;QACzD,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,UAAU;gBAAE,OAAO,SAAS,CAAC;YAChE,IAAI,CAAC;gBACH,OAAO,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;oBACpC,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE;oBACzC,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,IAAI,EAAE,IAAI,CAAC,QAAQ;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,EAAE;iBACX,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,OAAO,IAAI,OAAO,EAAE,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBACxD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAY;QACpB,KAAK;QACL,GAAG;QACH,IAAI,QAAQ;YACV,OAAO,OAAO,EAAE,QAAQ,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI;YACN,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK;YACH,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO;YAC5B,IAAI,GAAG,SAAS,CAAC;YACjB,KAAK,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC3B,IAAI,CAAC,MAAM,IAAI,OAAO,EAAE,KAAK,QAAQ;oBAAE,OAAO;gBAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACrB,KAAK,EAAE,CAAC;oBACR,QAAQ,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;oBACvE,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBACnC,OAAO;gBACT,CAAC;gBACD,OAAO,GAAG,MAAM,CAAC;gBACjB,KAAK,EAAE,CAAC;gBACR,MAAM,OAAO,GAAG,YAAY,CAC1B,MAAM,CAAC,YAAY,KAAK,IAAI,EAC5B,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,KAAK,CAC7B,CAAC;gBACF,IAAI,GAAG,gBAAgB,CAAC;oBACtB,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC;oBAC9D,UAAU,EAAE,CAAC;oBACb,cAAc,EAAE,gBAAgB;oBAChC,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;wBACnB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;wBACzE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;4BAC1E,IAAI,OAAO,CAAC,KAAK,EAAE;gCAAE,IAAI,EAAE,YAAY,EAAE,CAAC;wBAC5C,CAAC;wBACD,IAAI,OAAO,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;4BAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC7E,CAAC;oBACD,cAAc,EAAE,GAAG,EAAE,CAAC,SAAS;oBAC/B,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;iBACzB,CAAC,CAAC;gBACH,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,SAAS,GAAG,WAAW,CACrB,GAAG,EAAE,CAAC,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EACjD,MAAM,CAAC,WAAW,CACnB,CAAC;gBACF,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,IAAI,OAAO,EAAE,KAAK,SAAS;oBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK;YACH,IAAI,IAAI,KAAK,SAAS;gBAAE,IAAI,GAAG,UAAU,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE;YACrB,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;gBACjC,MAAM,WAAW,CAAC;oBAChB,SAAS,EAAE,MAAM;oBACjB,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;oBACtD,KAAK,EAAE,IAAI,CAAC,KAAK;iBAClB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,EAAE,CAAC;QACV,CAAC;KACF,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import {\n  CHAT_ACTIVITY_TAG,\n  CHAT_TAG,\n  HOST_PROTOCOL,\n  type HostFrame,\n  type HostStreamBatch,\n  type HostWelcome,\n} from \"@parlor/chat\";\nimport { type ChatHostActionMap, MAX_STREAM_BODY_BYTES } from \"@parlor/chat/server\";\nimport {\n  createActionClient,\n  createPluginClient,\n  type PluginClient,\n} from \"@parlor/client\";\nimport type { TurnId } from \"@parlor/core\";\nimport { createSyncClient, type SyncClient } from \"@parlor/sync/client\";\n\nimport type { AppGrant, HostKeys } from \"./grants.js\";\nimport { logEvent } from \"./log.js\";\nimport { revokeGrant } from \"./revoke.js\";\n\nexport const RECONNECT_MAX_MS = 4_000;\nexport const ACTIVE_POLL_MS = 2_000;\nexport const IDLE_POLL_MS = 15_000;\n\nconst USER_ACTIVE_WINDOW_MS = 2 * 60_000;\nconst REQUEST_TIMEOUT_MS = 10_000;\n\nexport interface HostApi {\n  readonly calls: PluginClient<ChatHostActionMap>;\n  /** At most one post in flight per turn; frames produced meanwhile coalesce into the next. */\n  stream(batch: HostStreamBatch): void;\n  heartbeat(): Promise<void>;\n}\n\nexport interface AppLinkDeps {\n  readonly keys: HostKeys;\n  readonly hostVersion: string;\n  readonly hostName: string;\n  readonly platform: string;\n  readonly fetch: typeof fetch;\n  /** A turn may be waiting: claim until not_found, then ask for running turns' signals. */\n  readonly onWake: (link: AppLink) => void;\n  /** Whether a turn runs on this link, which keeps a poll deployment's `/sync` at the active interval. */\n  readonly busy?: (() => boolean) | undefined;\n  /** Any 401, or the stream closed for revocation. */\n  readonly onRevoked: (grant: AppGrant) => void;\n  /** No shared protocol: shown locally (\"update Parlor Host\"); the link stays down. */\n  readonly onIncompatible: (\n    grant: AppGrant,\n    welcome: Extract<HostWelcome, { readonly accepted: false }>,\n  ) => void;\n}\n\n/**\n * `idle` until started; `serving` wakes the host for turns; `draining` stays up for the\n * turns it runs but wakes nobody (a newer service took over the claiming); `closed` is final.\n */\nexport type LinkMode = \"idle\" | \"serving\" | \"draining\" | \"closed\";\n\n/** The host's whole conversation with one app, each request carrying a fresh assertion. */\nexport interface AppLink {\n  readonly grant: AppGrant;\n  readonly api: HostApi;\n  /** Set once `hostHello` was welcomed; every other call waits for it. */\n  readonly protocol: number | undefined;\n  readonly mode: LinkMode;\n  start(): void;\n  /** Stops waking the host and keeps everything else, so running turns finish on this link. */\n  drain(): void;\n  /** With `revoke`, a refused revoke throws and leaves the link running. */\n  stop(options?: { readonly revoke?: boolean | undefined }): Promise<void>;\n}\n\ntype Accepted = Extract<HostWelcome, { readonly accepted: true }>;\n\nconst RETRY_BASE_MS = 250;\nconst MAX_BATCH_BYTES = (MAX_STREAM_BODY_BYTES * 3) / 4;\n\nclass LinkDown extends Error {\n  override readonly name = \"LinkDown\";\n}\n\ninterface TurnStream {\n  pending: HostFrame[];\n  posting: Promise<void> | undefined;\n}\n\nfunction coalesce(frames: readonly HostFrame[]): HostFrame[] {\n  const merged: HostFrame[] = [];\n  for (const frame of frames) {\n    const last = merged.at(-1);\n    if (\n      last?.type === \"delta\" &&\n      frame.type === \"delta\" &&\n      last.itemId === frame.itemId &&\n      last.offset + last.text.length === frame.offset\n    ) {\n      merged[merged.length - 1] = { ...last, text: last.text + frame.text };\n    } else {\n      merged.push(frame);\n    }\n  }\n  return merged;\n}\n\nfunction batches(frames: readonly HostFrame[]): HostFrame[][] {\n  const out: HostFrame[][] = [];\n  let current: HostFrame[] = [];\n  let bytes = 0;\n  for (const frame of frames) {\n    const size = JSON.stringify(frame).length;\n    if (current.length > 0 && bytes + size > MAX_BATCH_BYTES) {\n      out.push(current);\n      current = [];\n      bytes = 0;\n    }\n    current.push(frame);\n    bytes += size;\n  }\n  if (current.length > 0) out.push(current);\n  return out;\n}\n\nconst sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));\n\nclass RequestTimeout extends Error {\n  override readonly name = \"RequestTimeout\";\n  constructor(ms: number) {\n    super(`The app did not answer within ${ms} ms.`);\n  }\n}\n\nfunction untilHeaders(inner: typeof fetch, ms: number): typeof fetch {\n  return async (input, init) => {\n    const own = new AbortController();\n    const timer = setTimeout(() => own.abort(new RequestTimeout(ms)), ms);\n    const signal = init?.signal ? AbortSignal.any([init.signal, own.signal]) : own.signal;\n    try {\n      return await inner(input, { ...init, signal });\n    } finally {\n      clearTimeout(timer);\n    }\n  };\n}\n\nfunction adaptivePoll(advertised: boolean, busy: () => boolean) {\n  let activeUntil = 0;\n  const idle = () => advertised && !busy() && Date.now() >= activeUntil;\n  return {\n    pollEveryMs: () => (idle() ? IDLE_POLL_MS : ACTIVE_POLL_MS),\n    touch: () => {\n      const wasIdle = idle();\n      activeUntil = Date.now() + USER_ACTIVE_WINDOW_MS;\n      return wasIdle;\n    },\n  };\n}\n\nexport function createAppLink(grant: AppGrant, deps: AppLinkDeps): AppLink {\n  const origin = grant.appOrigin.replace(/\\/+$/, \"\");\n  let welcome: Accepted | undefined;\n  let mode: LinkMode = \"idle\";\n  const modeNow = (): LinkMode => mode;\n  let revoked = false;\n  let sync: SyncClient | undefined;\n  let heartbeat: NodeJS.Timeout | undefined;\n  const streams = new Map<TurnId, TurnStream>();\n\n  let admit: () => void = () => undefined;\n  let refuse: (error: Error) => void = () => undefined;\n  const welcomed = new Promise<void>((resolve, reject) => {\n    admit = resolve;\n    refuse = reject;\n  });\n  welcomed.catch(() => undefined);\n\n  const signedFetch: typeof fetch = async (input, init) => {\n    if (mode === \"closed\") throw new LinkDown(\"This app's link is closed.\");\n    const request = new Request(input, init);\n    const method = request.method === \"GET\" ? \"GET\" : \"POST\";\n    const assertion = await deps.keys.assert(origin, { method, url: request.url });\n    const headers = new Headers(request.headers);\n    headers.set(\"authorization\", `ParlorHost ${assertion}`);\n    const response = await deps.fetch(new Request(request, { headers }));\n    logEvent(\"http_request\", {\n      method,\n      path: new URL(request.url).pathname,\n      status: response.status,\n    });\n    if (response.status === 401 && !revoked && modeNow() !== \"closed\") {\n      revoked = true;\n      queueMicrotask(() => deps.onRevoked(grant));\n    }\n    return response;\n  };\n\n  const timedFetch = untilHeaders(signedFetch, REQUEST_TIMEOUT_MS);\n\n  const plugin = createPluginClient<ChatHostActionMap>(\n    createActionClient({ baseUrl: origin, fetch: timedFetch }),\n    \"chat\",\n  );\n\n  const drained = async (turnId: TurnId | undefined) => {\n    if (turnId === undefined) return;\n    while (true) {\n      const posting = streams.get(turnId)?.posting;\n      if (!posting) return;\n      await posting;\n    }\n  };\n\n  const invoke: PluginClient<ChatHostActionMap>[\"invoke\"] = async (\n    name,\n    input,\n    options,\n  ) => {\n    if (name !== \"hostHello\") await welcomed;\n    if (name === \"hostAppend\" || name === \"hostFinish\") {\n      await drained((input as { readonly turnId?: TurnId }).turnId);\n    }\n    return plugin.invoke(name, input, options);\n  };\n  const calls: PluginClient<ChatHostActionMap> = {\n    invoke,\n    call: async (name, input, options) => (await invoke(name, input, options)).data,\n  };\n\n  const post = (path: string, body: unknown) =>\n    timedFetch(`${origin}/_parlor/chat/${path}`, {\n      method: \"POST\",\n      headers: { \"content-type\": \"application/json\" },\n      body: JSON.stringify(body),\n    });\n\n  const flush = async (turnId: TurnId, stream: TurnStream) => {\n    while (stream.pending.length > 0) {\n      if (mode === \"closed\") break;\n      const frames = coalesce(stream.pending);\n      stream.pending = [];\n      for (const chunk of batches(frames)) {\n        await post(\"stream\", { turnId, frames: chunk }).catch(() => undefined);\n      }\n    }\n    stream.posting = undefined;\n    if (stream.pending.length === 0) streams.delete(turnId);\n  };\n\n  const api: HostApi = {\n    calls,\n    stream(batch) {\n      if (mode === \"closed\" || batch.frames.length === 0) return;\n      let stream = streams.get(batch.turnId);\n      if (!stream) {\n        stream = { pending: [], posting: undefined };\n        streams.set(batch.turnId, stream);\n      }\n      stream.pending.push(...batch.frames);\n      if (!stream.posting) stream.posting = flush(batch.turnId, stream);\n    },\n    async heartbeat() {\n      await welcomed;\n      await post(\"heartbeat\", {});\n    },\n  };\n\n  const close = () => {\n    mode = \"closed\";\n    sync?.stop();\n    sync = undefined;\n    if (heartbeat) clearInterval(heartbeat);\n    heartbeat = undefined;\n    refuse(new LinkDown(\"This app's link is closed.\"));\n  };\n\n  const hello = async (): Promise<HostWelcome | undefined> => {\n    for (let attempt = 0; ; attempt += 1) {\n      if (mode !== \"serving\" && mode !== \"draining\") return undefined;\n      try {\n        return await plugin.call(\"hostHello\", {\n          protocols: { min: 1, max: HOST_PROTOCOL },\n          hostVersion: deps.hostVersion,\n          name: deps.hostName,\n          platform: deps.platform,\n          agents: [],\n        });\n      } catch {\n        if (revoked || modeNow() === \"closed\") return undefined;\n        await sleep(Math.min(RETRY_BASE_MS * 2 ** attempt, RECONNECT_MAX_MS));\n      }\n    }\n  };\n\n  const link: AppLink = {\n    grant,\n    api,\n    get protocol() {\n      return welcome?.protocol;\n    },\n    get mode() {\n      return mode;\n    },\n    start() {\n      if (mode !== \"idle\") return;\n      mode = \"serving\";\n      void hello().then((answer) => {\n        if (!answer || modeNow() === \"closed\") return;\n        if (!answer.accepted) {\n          close();\n          logEvent(\"link_closed\", { appOrigin: origin, reason: \"incompatible\" });\n          deps.onIncompatible(grant, answer);\n          return;\n        }\n        welcome = answer;\n        admit();\n        const polling = adaptivePoll(\n          answer.userActivity === true,\n          () => deps.busy?.() ?? false,\n        );\n        sync = createSyncClient({\n          request: (path, init) => signedFetch(`${origin}${path}`, init),\n          coalesceMs: 0,\n          reconnectMaxMs: RECONNECT_MAX_MS,\n          pollEveryMs: polling.pollEveryMs,\n          onEvents: (events) => {\n            const heads = events.flatMap((event) => event.tags.map((tag) => tag[0]));\n            if (heads.some((head) => head === CHAT_TAG || head === CHAT_ACTIVITY_TAG)) {\n              if (polling.touch()) sync?.reconnectNow();\n            }\n            if (modeNow() === \"serving\" && heads.includes(CHAT_TAG)) deps.onWake(link);\n          },\n          onUnauthorized: () => undefined,\n          onError: () => undefined,\n        });\n        sync.start();\n        heartbeat = setInterval(\n          () => void api.heartbeat().catch(() => undefined),\n          answer.heartbeatMs,\n        );\n        heartbeat.unref();\n        if (modeNow() === \"serving\") deps.onWake(link);\n      });\n    },\n    drain() {\n      if (mode === \"serving\") mode = \"draining\";\n    },\n    async stop(options = {}) {\n      if (options.revoke && !grant.dev) {\n        await revokeGrant({\n          appOrigin: origin,\n          appName: grant.appName,\n          assert: (request) => deps.keys.assert(origin, request),\n          fetch: deps.fetch,\n        });\n      }\n      close();\n    },\n  };\n  return link;\n}\n"]}

package/dist/lock.d.ts

@@ -0,0 +1,7 @@
+export declare const LOCK_TOKEN_ENV = "PARLOR_HOST_LOCK_TOKEN";
+export declare function holdsLock(path: string, token: string): Promise<boolean>;
+/** A lock is held until its owner dies or its pid is taken by a process that started after the lock was written. */
+export declare function withFileLock<T>(path: string, work: (token: string) => Promise<T>): Promise<T>;
+/** Runs `work` under the lock `inherited` names when this process's parent holds it, else under a lock of its own. */
+export declare function withInheritedLock<T>(path: string, inherited: string | undefined, work: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=lock.d.ts.map

package/dist/lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.d.ts","sourceRoot":"","sources":["../src/lock.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,cAAc,2BAA2B,CAAC;AA6EvD,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG7E;AAED,oHAAoH;AACpH,wBAAsB,YAAY,CAAC,CAAC,EAClC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GAClC,OAAO,CAAC,CAAC,CAAC,CAQZ;AAED,sHAAsH;AACtH,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACrB,OAAO,CAAC,CAAC,CAAC,CAGZ"}

package/dist/lock.js

@@ -0,0 +1,105 @@
+import { execFile } from "node:child_process";
+import { randomUUID } from "node:crypto";
+import { open, readFile, rename, rm, stat } from "node:fs/promises";
+import { promisify } from "node:util";
+const run = promisify(execFile);
+export const LOCK_TOKEN_ENV = "PARLOR_HOST_LOCK_TOKEN";
+const RETRY_MS = 20;
+const UNWRITTEN_MS = 1_000;
+const ACQUIRE_TIMEOUT_MS = 120_000;
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+function alive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return error.code === "EPERM";
+    }
+}
+async function startedAt(pid) {
+    try {
+        const { stdout } = await run("ps", ["-o", "lstart=", "-p", String(pid)], {
+            env: { ...process.env, LC_ALL: "C" },
+        });
+        const started = Date.parse(stdout.trim());
+        return Number.isNaN(started) ? undefined : started;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** `ps` reports whole seconds, rounded down, so a real owner never reads as started after its own lock. */
+async function reusedPid(pid, lockedAt) {
+    const started = await startedAt(pid);
+    return started !== undefined && started > lockedAt;
+}
+async function stale(path, verdicts) {
+    try {
+        const [text, { mtimeMs }] = await Promise.all([readFile(path, "utf8"), stat(path)]);
+        const age = Date.now() - mtimeMs;
+        const pid = Number.parseInt(text, 10);
+        if (!Number.isInteger(pid))
+            return age > UNWRITTEN_MS;
+        if (!alive(pid))
+            return true;
+        const key = `${pid}:${mtimeMs}`;
+        let reused = verdicts.get(key);
+        if (reused === undefined) {
+            reused = await reusedPid(pid, mtimeMs);
+            verdicts.set(key, reused);
+        }
+        return reused;
+    }
+    catch {
+        return false;
+    }
+}
+async function acquire(path, token) {
+    const deadline = Date.now() + ACQUIRE_TIMEOUT_MS;
+    const verdicts = new Map();
+    for (;;) {
+        try {
+            const file = await open(path, "wx", 0o600);
+            await file.writeFile(`${process.pid}\n${token}\n`);
+            await file.close();
+            return;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        if (await stale(path, verdicts)) {
+            await rename(path, `${path}.stale.${process.pid}`).catch(() => undefined);
+            await rm(`${path}.stale.${process.pid}`, { force: true });
+            continue;
+        }
+        if (Date.now() > deadline)
+            throw new Error(`Could not take the lock ${path}.`);
+        await sleep(RETRY_MS);
+    }
+}
+const tokenOf = (text) => text.split("\n")[1];
+export async function holdsLock(path, token) {
+    const text = await readFile(path, "utf8").catch(() => undefined);
+    return text !== undefined && tokenOf(text) === token;
+}
+/** A lock is held until its owner dies or its pid is taken by a process that started after the lock was written. */
+export async function withFileLock(path, work) {
+    const token = randomUUID();
+    await acquire(path, token);
+    try {
+        return await work(token);
+    }
+    finally {
+        if (await holdsLock(path, token))
+            await rm(path, { force: true });
+    }
+}
+/** Runs `work` under the lock `inherited` names when this process's parent holds it, else under a lock of its own. */
+export async function withInheritedLock(path, inherited, work) {
+    if (inherited && (await holdsLock(path, inherited)))
+        return work();
+    return withFileLock(path, work);
+}
+//# sourceMappingURL=lock.js.map

package/dist/lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock.js","sourceRoot":"","sources":["../src/lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC,MAAM,CAAC,MAAM,cAAc,GAAG,wBAAwB,CAAC;AACvD,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAEhF,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAQ,KAA+B,CAAC,IAAI,KAAK,OAAO,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE;YACvE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;SACrC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,2GAA2G;AAC3G,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,QAAgB;IACpD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,QAAQ,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,QAA8B;IAC/D,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,GAAG,YAAY,CAAC;QACtD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACvC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,KAAa;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC5C,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC;YACnD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,UAAU,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1E,MAAM,EAAE,CAAC,GAAG,IAAI,UAAU,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,GAAG,CAAC,CAAC;QAC/E,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAsB,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1E,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;AACvD,CAAC;AAED,oHAAoH;AACpH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAmC;IAEnC,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;IAC3B,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC;YAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,SAA6B,EAC7B,IAAsB;IAEtB,IAAI,SAAS,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAAE,OAAO,IAAI,EAAE,CAAC;IACnE,OAAO,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { open, readFile, rename, rm, stat } from \"node:fs/promises\";\nimport { promisify } from \"node:util\";\n\nconst run = promisify(execFile);\n\nexport const LOCK_TOKEN_ENV = \"PARLOR_HOST_LOCK_TOKEN\";\nconst RETRY_MS = 20;\nconst UNWRITTEN_MS = 1_000;\nconst ACQUIRE_TIMEOUT_MS = 120_000;\n\nconst sleep = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));\n\nfunction alive(pid: number): boolean {\n  try {\n    process.kill(pid, 0);\n    return true;\n  } catch (error) {\n    return (error as NodeJS.ErrnoException).code === \"EPERM\";\n  }\n}\n\nasync function startedAt(pid: number): Promise<number | undefined> {\n  try {\n    const { stdout } = await run(\"ps\", [\"-o\", \"lstart=\", \"-p\", String(pid)], {\n      env: { ...process.env, LC_ALL: \"C\" },\n    });\n    const started = Date.parse(stdout.trim());\n    return Number.isNaN(started) ? undefined : started;\n  } catch {\n    return undefined;\n  }\n}\n\n/** `ps` reports whole seconds, rounded down, so a real owner never reads as started after its own lock. */\nasync function reusedPid(pid: number, lockedAt: number): Promise<boolean> {\n  const started = await startedAt(pid);\n  return started !== undefined && started > lockedAt;\n}\n\nasync function stale(path: string, verdicts: Map<string, boolean>): Promise<boolean> {\n  try {\n    const [text, { mtimeMs }] = await Promise.all([readFile(path, \"utf8\"), stat(path)]);\n    const age = Date.now() - mtimeMs;\n    const pid = Number.parseInt(text, 10);\n    if (!Number.isInteger(pid)) return age > UNWRITTEN_MS;\n    if (!alive(pid)) return true;\n    const key = `${pid}:${mtimeMs}`;\n    let reused = verdicts.get(key);\n    if (reused === undefined) {\n      reused = await reusedPid(pid, mtimeMs);\n      verdicts.set(key, reused);\n    }\n    return reused;\n  } catch {\n    return false;\n  }\n}\n\nasync function acquire(path: string, token: string): Promise<void> {\n  const deadline = Date.now() + ACQUIRE_TIMEOUT_MS;\n  const verdicts = new Map<string, boolean>();\n  for (;;) {\n    try {\n      const file = await open(path, \"wx\", 0o600);\n      await file.writeFile(`${process.pid}\\n${token}\\n`);\n      await file.close();\n      return;\n    } catch (error) {\n      if ((error as NodeJS.ErrnoException).code !== \"EEXIST\") throw error;\n    }\n    if (await stale(path, verdicts)) {\n      await rename(path, `${path}.stale.${process.pid}`).catch(() => undefined);\n      await rm(`${path}.stale.${process.pid}`, { force: true });\n      continue;\n    }\n    if (Date.now() > deadline) throw new Error(`Could not take the lock ${path}.`);\n    await sleep(RETRY_MS);\n  }\n}\n\nconst tokenOf = (text: string): string | undefined => text.split(\"\\n\")[1];\n\nexport async function holdsLock(path: string, token: string): Promise<boolean> {\n  const text = await readFile(path, \"utf8\").catch(() => undefined);\n  return text !== undefined && tokenOf(text) === token;\n}\n\n/** A lock is held until its owner dies or its pid is taken by a process that started after the lock was written. */\nexport async function withFileLock<T>(\n  path: string,\n  work: (token: string) => Promise<T>,\n): Promise<T> {\n  const token = randomUUID();\n  await acquire(path, token);\n  try {\n    return await work(token);\n  } finally {\n    if (await holdsLock(path, token)) await rm(path, { force: true });\n  }\n}\n\n/** Runs `work` under the lock `inherited` names when this process's parent holds it, else under a lock of its own. */\nexport async function withInheritedLock<T>(\n  path: string,\n  inherited: string | undefined,\n  work: () => Promise<T>,\n): Promise<T> {\n  if (inherited && (await holdsLock(path, inherited))) return work();\n  return withFileLock(path, work);\n}\n"]}

package/dist/log.d.ts

@@ -0,0 +1,3 @@
+export declare function openHostLog(path: string): void;
+export declare function logEvent(event: string, fields: Readonly<Record<string, unknown>>): void;
+//# sourceMappingURL=log.d.ts.map

package/dist/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAKA,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAG9C;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,CAOvF"}

package/dist/log.js

@@ -0,0 +1,18 @@
+import { appendFileSync, mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+let file;
+export function openHostLog(path) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    file = path;
+}
+export function logEvent(event, fields) {
+    if (file === undefined)
+        return;
+    try {
+        appendFileSync(file, `${JSON.stringify({ at: Date.now(), event, ...fields })}\n`, {
+            mode: 0o600,
+        });
+    }
+    catch { }
+}
+//# sourceMappingURL=log.js.map

package/dist/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../src/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,IAAI,IAAwB,CAAC;AAE7B,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,IAAI,GAAG,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,MAAyC;IAC/E,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC/B,IAAI,CAAC;QACH,cAAc,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE;YAChF,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC","sourcesContent":["import { appendFileSync, mkdirSync } from \"node:fs\";\nimport { dirname } from \"node:path\";\n\nlet file: string | undefined;\n\nexport function openHostLog(path: string): void {\n  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });\n  file = path;\n}\n\nexport function logEvent(event: string, fields: Readonly<Record<string, unknown>>): void {\n  if (file === undefined) return;\n  try {\n    appendFileSync(file, `${JSON.stringify({ at: Date.now(), event, ...fields })}\\n`, {\n      mode: 0o600,\n    });\n  } catch {}\n}\n"]}

package/dist/main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../src/main.ts"],"names":[],"mappings":""}