@parlor/server 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 cychien
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,20 @@
-# Temporary Holding Version
+# @parlor/server
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+The Parlor server: every action over HTTP and MCP, live updates, auth and plugins, as one web-standard `fetch` handler.
+
+```sh
+pnpm add @parlor/server @parlor/core @parlor/data
+```
+
+```ts
+import { createRegistry } from "@parlor/core/registry";
+import { createDatabase } from "@parlor/data";
+import { createServer } from "@parlor/server";
+
+const registry = createRegistry({});
+const database = await createDatabase({ migrationsFolder: "migrations" });
+
+export default createServer({ actions: registry, database });
+```
+
+`parlor dev` serves it; `parlor build` wraps it as a Node or Bun server. Docs: https://cychien.github.io/parlor/reference/server/

package/dist/access.d.ts

@@ -0,0 +1,27 @@
+import { type Principal, type PrincipalKind } from "@parlor/core";
+import type { Caller } from "./caller.js";
+export declare const ROUTE_ACCESS: {
+    readonly manifest: readonly ["user", "agent"];
+    readonly actions: readonly ["user", "agent"];
+    readonly pluginActions: readonly ["user", "host"];
+    readonly mcp: readonly ["agent"];
+    readonly sync: readonly ["user", "host"];
+    readonly channels: readonly ["user"];
+    readonly ui: readonly ["user"];
+};
+export type Surface = keyof typeof ROUTE_ACCESS;
+/** An anonymous caller reaches every surface while no enforcing provider is installed. */
+export type KindsOf<S extends Surface> = "anonymous" | (typeof ROUTE_ACCESS)[S][number];
+export type CallerOf<K extends PrincipalKind> = Caller & {
+    readonly principal: Extract<Principal, {
+        readonly kind: K;
+    }>;
+};
+export declare function admits(surface: Surface, caller: Caller, enforcing: boolean): boolean;
+/**
+ * Narrows a caller to the kinds a surface admits, or refuses it: `unauthenticated` for an
+ * anonymous caller, `forbidden` for a signed-in principal of another kind.
+ */
+export declare function requireSurface<S extends Surface>(caller: Caller, surface: S, enforcing: boolean): CallerOf<KindsOf<S>>;
+export declare function requireAccess<K extends PrincipalKind>(caller: Caller, kinds: readonly K[], enforcing: boolean): CallerOf<K>;
+//# sourceMappingURL=access.d.ts.map

package/dist/access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.d.ts","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAI1C,eAAO,MAAM,YAAY;;;;;;;;CAQmC,CAAC;AAE7D,MAAM,MAAM,OAAO,GAAG,MAAM,OAAO,YAAY,CAAC;AAKhD,0FAA0F;AAC1F,MAAM,MAAM,OAAO,CAAC,CAAC,SAAS,OAAO,IAAI,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAExF,MAAM,MAAM,QAAQ,CAAC,CAAC,SAAS,aAAa,IAAI,MAAM,GAAG;IACvD,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC9D,CAAC;AAEF,wBAAgB,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,OAAO,CAIpF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,OAAO,EAC9C,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,EACV,SAAS,EAAE,OAAO,GACjB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAKtB;AAED,wBAAgB,aAAa,CAAC,CAAC,SAAS,aAAa,EACnD,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,SAAS,EAAE,OAAO,GACjB,QAAQ,CAAC,CAAC,CAAC,CAQb"}

package/dist/access.js

@@ -0,0 +1,41 @@
+import { ActionError, } from "@parlor/core";
+export const ROUTE_ACCESS = {
+    manifest: ["user", "agent"],
+    actions: ["user", "agent"],
+    pluginActions: ["user", "host"],
+    mcp: ["agent"],
+    sync: ["user", "host"],
+    channels: ["user"],
+    ui: ["user"],
+};
+/** Reached by anonymous callers even under an enforcing provider; each action checks `public`. */
+const OPEN_WHEN_ENFORCING = new Set(["actions"]);
+export function admits(surface, caller, enforcing) {
+    const { kind } = caller.principal;
+    if (kind === "anonymous")
+        return !enforcing || OPEN_WHEN_ENFORCING.has(surface);
+    return ROUTE_ACCESS[surface].includes(kind);
+}
+/**
+ * Narrows a caller to the kinds a surface admits, or refuses it: `unauthenticated` for an
+ * anonymous caller, `forbidden` for a signed-in principal of another kind.
+ */
+export function requireSurface(caller, surface, enforcing) {
+    if (admits(surface, caller, enforcing))
+        return caller;
+    const { kind } = caller.principal;
+    if (kind === "anonymous")
+        throw new ActionError("unauthenticated", "Sign in first.");
+    throw new ActionError("forbidden", `A ${kind} principal cannot use ${surface}.`);
+}
+export function requireAccess(caller, kinds, enforcing) {
+    const { kind } = caller.principal;
+    const listed = kinds.includes(kind);
+    if (kind === "anonymous" && (enforcing || !listed)) {
+        throw new ActionError("unauthenticated", "Sign in first.");
+    }
+    if (!listed)
+        throw new ActionError("forbidden", `A ${kind} principal cannot use this.`);
+    return caller;
+}
+//# sourceMappingURL=access.js.map

package/dist/access.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access.js","sourceRoot":"","sources":["../src/access.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,GAIZ,MAAM,cAAc,CAAC;AAMtB,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IAC1B,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IAC/B,GAAG,EAAE,CAAC,OAAO,CAAC;IACd,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,CAAC,MAAM,CAAC;IAClB,EAAE,EAAE,CAAC,MAAM,CAAC;CAC8C,CAAC;AAI7D,kGAAkG;AAClG,MAAM,mBAAmB,GAAyB,IAAI,GAAG,CAAU,CAAC,SAAS,CAAC,CAAC,CAAC;AAShF,MAAM,UAAU,MAAM,CAAC,OAAgB,EAAE,MAAc,EAAE,SAAkB;IACzE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAClC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChF,OAAQ,YAAY,CAAC,OAAO,CAA6B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAc,EACd,OAAU,EACV,SAAkB;IAElB,IAAI,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC;QAAE,OAAO,MAA8B,CAAC;IAC9E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAClC,IAAI,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IACrF,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,IAAI,yBAAyB,OAAO,GAAG,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,KAAmB,EACnB,SAAkB;IAElB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC;IAClC,MAAM,MAAM,GAAI,KAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,IAAI,KAAK,WAAW,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,IAAI,6BAA6B,CAAC,CAAC;IACxF,OAAO,MAAqB,CAAC;AAC/B,CAAC","sourcesContent":["import {\n  ActionError,\n  type AuthenticatedPrincipal,\n  type Principal,\n  type PrincipalKind,\n} from \"@parlor/core\";\n\nimport type { Caller } from \"./caller.js\";\n\ntype SignedInKind = AuthenticatedPrincipal[\"kind\"];\n\nexport const ROUTE_ACCESS = {\n  manifest: [\"user\", \"agent\"],\n  actions: [\"user\", \"agent\"],\n  pluginActions: [\"user\", \"host\"],\n  mcp: [\"agent\"],\n  sync: [\"user\", \"host\"],\n  channels: [\"user\"],\n  ui: [\"user\"],\n} as const satisfies Record<string, readonly SignedInKind[]>;\n\nexport type Surface = keyof typeof ROUTE_ACCESS;\n\n/** Reached by anonymous callers even under an enforcing provider; each action checks `public`. */\nconst OPEN_WHEN_ENFORCING: ReadonlySet<Surface> = new Set<Surface>([\"actions\"]);\n\n/** An anonymous caller reaches every surface while no enforcing provider is installed. */\nexport type KindsOf<S extends Surface> = \"anonymous\" | (typeof ROUTE_ACCESS)[S][number];\n\nexport type CallerOf<K extends PrincipalKind> = Caller & {\n  readonly principal: Extract<Principal, { readonly kind: K }>;\n};\n\nexport function admits(surface: Surface, caller: Caller, enforcing: boolean): boolean {\n  const { kind } = caller.principal;\n  if (kind === \"anonymous\") return !enforcing || OPEN_WHEN_ENFORCING.has(surface);\n  return (ROUTE_ACCESS[surface] as readonly SignedInKind[]).includes(kind);\n}\n\n/**\n * Narrows a caller to the kinds a surface admits, or refuses it: `unauthenticated` for an\n * anonymous caller, `forbidden` for a signed-in principal of another kind.\n */\nexport function requireSurface<S extends Surface>(\n  caller: Caller,\n  surface: S,\n  enforcing: boolean,\n): CallerOf<KindsOf<S>> {\n  if (admits(surface, caller, enforcing)) return caller as CallerOf<KindsOf<S>>;\n  const { kind } = caller.principal;\n  if (kind === \"anonymous\") throw new ActionError(\"unauthenticated\", \"Sign in first.\");\n  throw new ActionError(\"forbidden\", `A ${kind} principal cannot use ${surface}.`);\n}\n\nexport function requireAccess<K extends PrincipalKind>(\n  caller: Caller,\n  kinds: readonly K[],\n  enforcing: boolean,\n): CallerOf<K> {\n  const { kind } = caller.principal;\n  const listed = (kinds as readonly PrincipalKind[]).includes(kind);\n  if (kind === \"anonymous\" && (enforcing || !listed)) {\n    throw new ActionError(\"unauthenticated\", \"Sign in first.\");\n  }\n  if (!listed) throw new ActionError(\"forbidden\", `A ${kind} principal cannot use this.`);\n  return caller as CallerOf<K>;\n}\n"]}

package/dist/actions.d.ts

@@ -0,0 +1,43 @@
+import type { AgentOrigin } from "@parlor/agent-ui";
+import type { ConfirmationOutcome, ConfirmationRequest } from "@parlor/agent-ui/server";
+import { type ActionMap, type ActionSource, type DataProvider } from "@parlor/core";
+import { type ActionRegistry, type InvokeResult } from "@parlor/core/registry";
+import { type Surface } from "./access.js";
+import { type Caller, type CallerResolver } from "./caller.js";
+import type { ActionAudit } from "./plugin.js";
+import { type ScopeResolver } from "./scope.js";
+export { clientOf, sourceOf } from "./caller.js";
+export type Confirm = (request: ConfirmationRequest) => Promise<ConfirmationOutcome>;
+export interface ActionRunnerOptions<T extends ActionMap> {
+    readonly actions: ActionRegistry<T>;
+    readonly scope: ScopeResolver;
+    readonly database?: DataProvider | undefined;
+    readonly sync: boolean;
+    /** Resolves each request's identity once; without it every caller is anonymous. */
+    readonly callers?: CallerResolver | undefined;
+    readonly onClient?: ((clientId: string | undefined, audience: string) => void) | undefined;
+    readonly confirm?: Confirm | undefined;
+    readonly audit?: ((record: ActionAudit) => void) | undefined;
+    /** Throws for a caller the surface admits but the actions' owner does not; audited like any refusal. */
+    readonly admit?: ((caller: Caller) => Promise<void>) | undefined;
+    /** Awaited before every call, so it must memoize; defaults to creating the sync tables. */
+    readonly ready?: (() => Promise<void>) | undefined;
+}
+export interface RunOptions {
+    readonly signal?: AbortSignal | undefined;
+    readonly origin?: AgentOrigin | undefined;
+    /** Refuses callers the surface does not admit, inside the call so the refusal is audited. */
+    readonly surface?: Surface | undefined;
+    /** Also answer the sync cursor a read's result reflects, for a client that keeps it fresh. */
+    readonly cursor?: boolean | undefined;
+}
+export interface ActionRun extends InvokeResult {
+    /** Set for a read with `cursor`: every sync event of the caller's streams up to it is in `data`. */
+    readonly cursor?: string | undefined;
+}
+export interface ActionRunner {
+    run(name: string, input: unknown, request: Request | undefined, source: ActionSource, options?: RunOptions): Promise<ActionRun>;
+    ready(): Promise<void>;
+}
+export declare function createActionRunner<T extends ActionMap>(options: ActionRunnerOptions<T>): ActionRunner;
+//# sourceMappingURL=actions.d.ts.map

package/dist/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAEL,KAAK,SAAS,EAEd,KAAK,YAAY,EACjB,KAAK,YAAY,EAGlB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,cAAc,EAEnB,KAAK,YAAY,EAElB,MAAM,uBAAuB,CAAC;AAU/B,OAAO,EAAkB,KAAK,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3D,OAAO,EACL,KAAK,MAAM,EACX,KAAK,cAAc,EAGpB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAsB,MAAM,aAAa,CAAC;AACnE,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,mBAAmB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAErF,MAAM,WAAW,mBAAmB,CAAC,CAAC,SAAS,SAAS;IACtD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,mFAAmF;IACnF,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EACd,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,GAC1D,SAAS,CAAC;IACd,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;IAC7D,wGAAwG;IACxG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;IACjE,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CACpD;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC1C,6FAA6F;IAC7F,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,SAAU,SAAQ,YAAY;IAC7C,oGAAoG;IACpG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CACD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,UAAU,GACnB,OAAO,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAsED,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,SAAS,EACpD,OAAO,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC9B,YAAY,CA8Hd"}

package/dist/actions.js

@@ -0,0 +1,169 @@
+import { ActionError, ANONYMOUS, isMutating, } from "@parlor/core";
+import { invokeAction, } from "@parlor/core/registry";
+import { encodeCursor } from "@parlor/sync";
+import { createPruner, ensureSyncTables, readSyncCursor, recordSyncEvent, } from "@parlor/sync/server";
+import { requireSurface } from "./access.js";
+import { AuthFailure } from "./auth.js";
+import { createCallerResolver, sourceFor, } from "./caller.js";
+import { DEFAULT_SCOPE } from "./scope.js";
+export { clientOf, sourceOf } from "./caller.js";
+function originOf(source, principal) {
+    const via = source === "agent" ? "agent" : "mcp";
+    return principal.kind === "agent" ? { via, name: principal.agent.name } : { via };
+}
+function confirmationGate(gate) {
+    return async ({ action, name, input, ctx }) => {
+        const turn = ctx.principal?.kind === "agent" ? ctx.principal.turn : undefined;
+        const outcome = await gate.confirm({
+            scope: gate.scope,
+            clientId: turn?.clientId ?? gate.clientId,
+            ...(turn ? { thread: { threadId: turn.threadId, turnId: turn.turnId } } : {}),
+            action: name,
+            description: action.description,
+            input,
+            origin: gate.origin ?? originOf(ctx.source, ctx.principal ?? ANONYMOUS),
+            signal: gate.signal,
+        });
+        if (outcome !== "cancelled") {
+            gate.answered(outcome === "shutdown" ? "unavailable" : outcome);
+        }
+        switch (outcome) {
+            case "approved":
+                return;
+            case "declined":
+                throw new ActionError("declined", `The user declined ${name} in the app; nothing ran. Do not retry unless they ask again.`);
+            case "timeout":
+                throw new ActionError("confirmation_timeout", `The user did not answer in time; ${name} did not run.`);
+            case "unavailable":
+                throw new ActionError("confirmation_unavailable", `No open app can ask the user to confirm ${name}. Ask the user to do it in the app themselves.`);
+            case "shutdown":
+                throw new ActionError("confirmation_unavailable", `The server shut down before the user answered; ${name} did not run. Try again once it is back, or ask the user to do it in the app themselves.`);
+            case "cancelled":
+                throw (gate.signal?.reason ?? new DOMException("The call was cancelled.", "AbortError"));
+        }
+    };
+}
+const INTERNAL_CALLER = {
+    principal: ANONYMOUS,
+    scope: DEFAULT_SCOPE,
+    audience: DEFAULT_SCOPE,
+    clientId: undefined,
+};
+export function createActionRunner(options) {
+    const { actions, scope, database, sync, onClient, confirm, audit, admit } = options;
+    const callers = options.callers ?? createCallerResolver(undefined, scope);
+    const pruner = sync && database ? createPruner(database) : undefined;
+    let prepared;
+    const ready = options.ready ??
+        (() => {
+            prepared ??=
+                sync && database
+                    ? ensureSyncTables(database.read())
+                    : Promise.resolve();
+            return prepared;
+        });
+    const cursorBefore = async (name, caller) => {
+        const action = actions.get(name);
+        if (!sync || !database || !action?.reads || isMutating(action))
+            return undefined;
+        const streams = caller.audience === caller.scope ? [caller.scope] : [caller.scope, caller.audience];
+        return encodeCursor(await readSyncCursor(database.read(), streams));
+    };
+    const invoke = async (name, input, request, caller, source, runOptions, trace) => {
+        if (runOptions.surface)
+            requireSurface(caller, runOptions.surface, callers.enforcing);
+        await admit?.(caller);
+        const client = caller.clientId;
+        onClient?.(client, caller.audience);
+        const signal = runOptions.signal ?? request?.signal;
+        const resolvedScope = caller.scope;
+        const cursor = runOptions.cursor ? await cursorBefore(name, caller) : undefined;
+        const result = await invokeAction(actions, name, input, { scope: resolvedScope, source, principal: caller.principal, signal, request }, {
+            data: database,
+            enforcing: callers.enforcing,
+            onRun: () => {
+                trace.stage = "ran";
+            },
+            confirm: confirm
+                ? confirmationGate({
+                    confirm,
+                    answered: (answer) => {
+                        trace.confirmation = answer;
+                    },
+                    scope: caller.audience,
+                    clientId: client,
+                    origin: runOptions.origin,
+                    signal,
+                })
+                : undefined,
+            onWrite: sync && database
+                ? async ({ action, tags, tx }) => {
+                    if (tags.length === 0)
+                        return;
+                    await recordSyncEvent(tx, {
+                        scope: action.notifies === "user" ? caller.audience : resolvedScope,
+                        tags,
+                        source: client,
+                    });
+                }
+                : undefined,
+        });
+        if (result.writes.length > 0)
+            pruner?.touch();
+        return cursor === undefined ? result : { ...result, cursor };
+    };
+    return {
+        ready,
+        async run(name, input, request, declared, runOptions = {}) {
+            await ready();
+            const caller = request ? await callers(request) : INTERNAL_CALLER;
+            const source = sourceFor(declared, caller, callers.enforcing);
+            const trace = { stage: "refused", confirmation: undefined };
+            if (!audit)
+                return invoke(name, input, request, caller, source, runOptions, trace);
+            const at = Date.now();
+            const record = async (outcome) => {
+                try {
+                    audit({
+                        at,
+                        action: name,
+                        principal: caller.principal,
+                        source,
+                        scope: caller.scope,
+                        inputDigest: await digest(input),
+                        stage: trace.stage,
+                        outcome,
+                        ...(trace.confirmation ? { confirmation: trace.confirmation } : {}),
+                    });
+                }
+                catch (error) {
+                    console.error("[parlor] audit failed:", error);
+                }
+            };
+            try {
+                const result = await invoke(name, input, request, caller, source, runOptions, trace);
+                await record("ok");
+                return result;
+            }
+            catch (error) {
+                await record(outcomeOf(error));
+                throw error;
+            }
+        },
+    };
+}
+function outcomeOf(error) {
+    if (error instanceof ActionError)
+        return error.code;
+    if (error instanceof AuthFailure)
+        return "unauthenticated";
+    if (error instanceof Error && error.name === "AbortError")
+        return "cancelled";
+    return "internal";
+}
+async function digest(input) {
+    const bytes = new TextEncoder().encode(JSON.stringify(input ?? null));
+    const hash = await crypto.subtle.digest("SHA-256", bytes);
+    return [...new Uint8Array(hash)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+//# sourceMappingURL=actions.js.map

package/dist/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../src/actions.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,WAAW,EAEX,SAAS,EAGT,UAAU,GAEX,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,YAAY,GAGb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,eAAe,GAEhB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAgB,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAGL,oBAAoB,EACpB,SAAS,GACV,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,aAAa,EAAsB,MAAM,YAAY,CAAC;AAE/D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAwDjD,SAAS,QAAQ,CAAC,MAAoB,EAAE,SAAoB;IAC1D,MAAM,GAAG,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACjD,OAAO,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAU;IAClC,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,QAAQ;YACzC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS,CAAC;YACvE,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAClE,CAAC;QACD,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,UAAU;gBACb,OAAO;YACT,KAAK,UAAU;gBACb,MAAM,IAAI,WAAW,CACnB,UAAU,EACV,qBAAqB,IAAI,+DAA+D,CACzF,CAAC;YACJ,KAAK,SAAS;gBACZ,MAAM,IAAI,WAAW,CACnB,sBAAsB,EACtB,oCAAoC,IAAI,eAAe,CACxD,CAAC;YACJ,KAAK,aAAa;gBAChB,MAAM,IAAI,WAAW,CACnB,0BAA0B,EAC1B,2CAA2C,IAAI,gDAAgD,CAChG,CAAC;YACJ,KAAK,UAAU;gBACb,MAAM,IAAI,WAAW,CACnB,0BAA0B,EAC1B,kDAAkD,IAAI,0FAA0F,CACjJ,CAAC;YACJ,KAAK,WAAW;gBACd,MAAM,CACJ,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,YAAY,CAAC,yBAAyB,EAAE,YAAY,CAAC,CACjF,CAAC;QACN,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,eAAe,GAAW;IAC9B,SAAS,EAAE,SAAS;IACpB,KAAK,EAAE,aAAa;IACpB,QAAQ,EAAE,aAAa;IACvB,QAAQ,EAAE,SAAS;CACpB,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,OAA+B;IAE/B,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IACpF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,IAAI,QAAmC,CAAC;IACxC,MAAM,KAAK,GACT,OAAO,CAAC,KAAK;QACb,CAAC,GAAG,EAAE;YACJ,QAAQ;gBACN,IAAI,IAAI,QAAQ;oBACd,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAkB,CAAC;oBACnD,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IAEL,MAAM,YAAY,GAAG,KAAK,EACxB,IAAY,EACZ,MAAc,EACe,EAAE;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,CAAC;QACjF,MAAM,OAAO,GACX,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtF,OAAO,YAAY,CAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,IAAI,EAAkB,EAAE,OAAO,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAClB,IAAY,EACZ,KAAc,EACd,OAA4B,EAC5B,MAAc,EACd,MAAoB,EACpB,UAAsB,EACtB,KAAY,EACQ,EAAE;QACtB,IAAI,UAAU,CAAC,OAAO;YAAE,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACtF,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/B,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,OAAO,EAAE,MAAM,CAAC;QACpD,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,YAAY,CAC/B,OAAO,EACP,IAAI,EACJ,KAAK,EACL,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,EAC9E;YACE,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,GAAG,EAAE;gBACV,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YACtB,CAAC;YACD,OAAO,EAAE,OAAO;gBACd,CAAC,CAAC,gBAAgB,CAAC;oBACf,OAAO;oBACP,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;wBACnB,KAAK,CAAC,YAAY,GAAG,MAAM,CAAC;oBAC9B,CAAC;oBACD,KAAK,EAAE,MAAM,CAAC,QAAQ;oBACtB,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,MAAM;iBACP,CAAC;gBACJ,CAAC,CAAC,SAAS;YACb,OAAO,EACL,IAAI,IAAI,QAAQ;gBACd,CAAC,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE;oBAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;wBAAE,OAAO;oBAC9B,MAAM,eAAe,CAAC,EAAkB,EAAE;wBACxC,KAAK,EAAE,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa;wBACnE,IAAI;wBACJ,MAAM,EAAE,MAAM;qBACf,CAAC,CAAC;gBACL,CAAC;gBACH,CAAC,CAAC,SAAS;SAChB,CACF,CAAC;QACF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC9C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;IAC/D,CAAC,CAAC;IAEF,OAAO;QACL,KAAK;QACL,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,GAAG,EAAE;YACvD,MAAM,KAAK,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;YAClE,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAU,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK;gBAAE,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;YACnF,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,KAAK,EAAE,OAA+B,EAAE,EAAE;gBACvD,IAAI,CAAC;oBACH,KAAK,CAAC;wBACJ,EAAE;wBACF,MAAM,EAAE,IAAI;wBACZ,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,MAAM;wBACN,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,WAAW,EAAE,MAAM,MAAM,CAAC,KAAK,CAAC;wBAChC,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,OAAO;wBACP,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpE,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CACzB,IAAI,EACJ,KAAK,EACL,OAAO,EACP,MAAM,EACN,MAAM,EACN,UAAU,EACV,KAAK,CACN,CAAC;gBACF,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAOD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC;IACpD,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,iBAAiB,CAAC;IAC3D,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,WAAW,CAAC;IAC9E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,KAAc;IAClC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC","sourcesContent":["import type { AgentOrigin } from \"@parlor/agent-ui\";\nimport type { ConfirmationOutcome, ConfirmationRequest } from \"@parlor/agent-ui/server\";\nimport {\n  ActionError,\n  type ActionMap,\n  ANONYMOUS,\n  type ActionSource,\n  type DataProvider,\n  isMutating,\n  type Principal,\n} from \"@parlor/core\";\nimport {\n  type ActionRegistry,\n  invokeAction,\n  type InvokeResult,\n  type PreparedCall,\n} from \"@parlor/core/registry\";\nimport { encodeCursor } from \"@parlor/sync\";\nimport {\n  createPruner,\n  ensureSyncTables,\n  readSyncCursor,\n  recordSyncEvent,\n  type SyncDatabase,\n} from \"@parlor/sync/server\";\n\nimport { requireSurface, type Surface } from \"./access.js\";\nimport { AuthFailure } from \"./auth.js\";\nimport {\n  type Caller,\n  type CallerResolver,\n  createCallerResolver,\n  sourceFor,\n} from \"./caller.js\";\nimport type { ActionAudit, ConfirmationAnswer } from \"./plugin.js\";\nimport { DEFAULT_SCOPE, type ScopeResolver } from \"./scope.js\";\n\nexport { clientOf, sourceOf } from \"./caller.js\";\n\nexport type Confirm = (request: ConfirmationRequest) => Promise<ConfirmationOutcome>;\n\nexport interface ActionRunnerOptions<T extends ActionMap> {\n  readonly actions: ActionRegistry<T>;\n  readonly scope: ScopeResolver;\n  readonly database?: DataProvider | undefined;\n  readonly sync: boolean;\n  /** Resolves each request's identity once; without it every caller is anonymous. */\n  readonly callers?: CallerResolver | undefined;\n  readonly onClient?:\n    | ((clientId: string | undefined, audience: string) => void)\n    | undefined;\n  readonly confirm?: Confirm | undefined;\n  readonly audit?: ((record: ActionAudit) => void) | undefined;\n  /** Throws for a caller the surface admits but the actions' owner does not; audited like any refusal. */\n  readonly admit?: ((caller: Caller) => Promise<void>) | undefined;\n  /** Awaited before every call, so it must memoize; defaults to creating the sync tables. */\n  readonly ready?: (() => Promise<void>) | undefined;\n}\n\nexport interface RunOptions {\n  readonly signal?: AbortSignal | undefined;\n  readonly origin?: AgentOrigin | undefined;\n  /** Refuses callers the surface does not admit, inside the call so the refusal is audited. */\n  readonly surface?: Surface | undefined;\n  /** Also answer the sync cursor a read's result reflects, for a client that keeps it fresh. */\n  readonly cursor?: boolean | undefined;\n}\n\nexport interface ActionRun extends InvokeResult {\n  /** Set for a read with `cursor`: every sync event of the caller's streams up to it is in `data`. */\n  readonly cursor?: string | undefined;\n}\n\nexport interface ActionRunner {\n  run(\n    name: string,\n    input: unknown,\n    request: Request | undefined,\n    source: ActionSource,\n    options?: RunOptions,\n  ): Promise<ActionRun>;\n  ready(): Promise<void>;\n}\n\ninterface Gate {\n  readonly confirm: Confirm;\n  readonly answered: (answer: ConfirmationAnswer) => void;\n  readonly scope: string;\n  readonly clientId: string | undefined;\n  readonly origin: AgentOrigin | undefined;\n  readonly signal: AbortSignal | undefined;\n}\n\nfunction originOf(source: ActionSource, principal: Principal): AgentOrigin {\n  const via = source === \"agent\" ? \"agent\" : \"mcp\";\n  return principal.kind === \"agent\" ? { via, name: principal.agent.name } : { via };\n}\n\nfunction confirmationGate(gate: Gate): (call: PreparedCall) => Promise<void> {\n  return async ({ action, name, input, ctx }) => {\n    const turn = ctx.principal?.kind === \"agent\" ? ctx.principal.turn : undefined;\n    const outcome = await gate.confirm({\n      scope: gate.scope,\n      clientId: turn?.clientId ?? gate.clientId,\n      ...(turn ? { thread: { threadId: turn.threadId, turnId: turn.turnId } } : {}),\n      action: name,\n      description: action.description,\n      input,\n      origin: gate.origin ?? originOf(ctx.source, ctx.principal ?? ANONYMOUS),\n      signal: gate.signal,\n    });\n    if (outcome !== \"cancelled\") {\n      gate.answered(outcome === \"shutdown\" ? \"unavailable\" : outcome);\n    }\n    switch (outcome) {\n      case \"approved\":\n        return;\n      case \"declined\":\n        throw new ActionError(\n          \"declined\",\n          `The user declined ${name} in the app; nothing ran. Do not retry unless they ask again.`,\n        );\n      case \"timeout\":\n        throw new ActionError(\n          \"confirmation_timeout\",\n          `The user did not answer in time; ${name} did not run.`,\n        );\n      case \"unavailable\":\n        throw new ActionError(\n          \"confirmation_unavailable\",\n          `No open app can ask the user to confirm ${name}. Ask the user to do it in the app themselves.`,\n        );\n      case \"shutdown\":\n        throw new ActionError(\n          \"confirmation_unavailable\",\n          `The server shut down before the user answered; ${name} did not run. Try again once it is back, or ask the user to do it in the app themselves.`,\n        );\n      case \"cancelled\":\n        throw (\n          gate.signal?.reason ?? new DOMException(\"The call was cancelled.\", \"AbortError\")\n        );\n    }\n  };\n}\n\nconst INTERNAL_CALLER: Caller = {\n  principal: ANONYMOUS,\n  scope: DEFAULT_SCOPE,\n  audience: DEFAULT_SCOPE,\n  clientId: undefined,\n};\n\nexport function createActionRunner<T extends ActionMap>(\n  options: ActionRunnerOptions<T>,\n): ActionRunner {\n  const { actions, scope, database, sync, onClient, confirm, audit, admit } = options;\n  const callers = options.callers ?? createCallerResolver(undefined, scope);\n  const pruner = sync && database ? createPruner(database) : undefined;\n  let prepared: Promise<void> | undefined;\n  const ready =\n    options.ready ??\n    (() => {\n      prepared ??=\n        sync && database\n          ? ensureSyncTables(database.read() as SyncDatabase)\n          : Promise.resolve();\n      return prepared;\n    });\n\n  const cursorBefore = async (\n    name: string,\n    caller: Caller,\n  ): Promise<string | undefined> => {\n    const action = actions.get(name);\n    if (!sync || !database || !action?.reads || isMutating(action)) return undefined;\n    const streams =\n      caller.audience === caller.scope ? [caller.scope] : [caller.scope, caller.audience];\n    return encodeCursor(await readSyncCursor(database.read() as SyncDatabase, streams));\n  };\n\n  const invoke = async (\n    name: string,\n    input: unknown,\n    request: Request | undefined,\n    caller: Caller,\n    source: ActionSource,\n    runOptions: RunOptions,\n    trace: Trace,\n  ): Promise<ActionRun> => {\n    if (runOptions.surface) requireSurface(caller, runOptions.surface, callers.enforcing);\n    await admit?.(caller);\n    const client = caller.clientId;\n    onClient?.(client, caller.audience);\n    const signal = runOptions.signal ?? request?.signal;\n    const resolvedScope = caller.scope;\n    const cursor = runOptions.cursor ? await cursorBefore(name, caller) : undefined;\n    const result = await invokeAction(\n      actions,\n      name,\n      input,\n      { scope: resolvedScope, source, principal: caller.principal, signal, request },\n      {\n        data: database,\n        enforcing: callers.enforcing,\n        onRun: () => {\n          trace.stage = \"ran\";\n        },\n        confirm: confirm\n          ? confirmationGate({\n              confirm,\n              answered: (answer) => {\n                trace.confirmation = answer;\n              },\n              scope: caller.audience,\n              clientId: client,\n              origin: runOptions.origin,\n              signal,\n            })\n          : undefined,\n        onWrite:\n          sync && database\n            ? async ({ action, tags, tx }) => {\n                if (tags.length === 0) return;\n                await recordSyncEvent(tx as SyncDatabase, {\n                  scope: action.notifies === \"user\" ? caller.audience : resolvedScope,\n                  tags,\n                  source: client,\n                });\n              }\n            : undefined,\n      },\n    );\n    if (result.writes.length > 0) pruner?.touch();\n    return cursor === undefined ? result : { ...result, cursor };\n  };\n\n  return {\n    ready,\n    async run(name, input, request, declared, runOptions = {}) {\n      await ready();\n      const caller = request ? await callers(request) : INTERNAL_CALLER;\n      const source = sourceFor(declared, caller, callers.enforcing);\n      const trace: Trace = { stage: \"refused\", confirmation: undefined };\n      if (!audit) return invoke(name, input, request, caller, source, runOptions, trace);\n      const at = Date.now();\n      const record = async (outcome: ActionAudit[\"outcome\"]) => {\n        try {\n          audit({\n            at,\n            action: name,\n            principal: caller.principal,\n            source,\n            scope: caller.scope,\n            inputDigest: await digest(input),\n            stage: trace.stage,\n            outcome,\n            ...(trace.confirmation ? { confirmation: trace.confirmation } : {}),\n          });\n        } catch (error) {\n          console.error(\"[parlor] audit failed:\", error);\n        }\n      };\n      try {\n        const result = await invoke(\n          name,\n          input,\n          request,\n          caller,\n          source,\n          runOptions,\n          trace,\n        );\n        await record(\"ok\");\n        return result;\n      } catch (error) {\n        await record(outcomeOf(error));\n        throw error;\n      }\n    },\n  };\n}\n\ninterface Trace {\n  stage: ActionAudit[\"stage\"];\n  confirmation: ConfirmationAnswer | undefined;\n}\n\nfunction outcomeOf(error: unknown): ActionAudit[\"outcome\"] {\n  if (error instanceof ActionError) return error.code;\n  if (error instanceof AuthFailure) return \"unauthenticated\";\n  if (error instanceof Error && error.name === \"AbortError\") return \"cancelled\";\n  return \"internal\";\n}\n\nasync function digest(input: unknown): Promise<string> {\n  const bytes = new TextEncoder().encode(JSON.stringify(input ?? null));\n  const hash = await crypto.subtle.digest(\"SHA-256\", bytes);\n  return [...new Uint8Array(hash)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n"]}

package/dist/auth.d.ts

@@ -0,0 +1,97 @@
+import type { AuthenticatedPrincipal, DeviceId, GrantId, HostPrincipal, Principal, ThreadId, TurnId, UserId } from "@parlor/core";
+import type { ServerPlugin } from "./plugin.js";
+/**
+ * Where identity comes from. The server calls `authenticate` once per request and hands
+ * the principal to actions, MCP, sync and agent UI. It installs like any plugin, first.
+ */
+export interface AuthProvider extends ServerPlugin {
+    /**
+     * When true, an anonymous caller is refused by non-public actions, by MCP (with
+     * `challenge`) and by `/ui`, and `x-parlor-source` no longer decides an action's source.
+     */
+    readonly enforcing: boolean;
+    /**
+     * Missing credentials resolve to `anonymous`. Present but invalid, expired or revoked
+     * credentials throw `AuthFailure`, which every surface answers with 401.
+     */
+    authenticate(request: Request): Promise<Principal>;
+    /** The 401 an MCP client reads to discover the authorization server (RFC 9728). */
+    challenge(request: Request): Response;
+    /**
+     * Aborts when the session or grant behind the principal is revoked. Held connections
+     * (sync streams) close on it.
+     */
+    revoked(principal: AuthenticatedPrincipal): AbortSignal;
+    /**
+     * Mints the turn token an inline agent's MCP calls carry while one chat turn runs,
+     * bound to the host's grant. Optional so providers written before chat still compile;
+     * `chat()` refuses to start on a provider without it.
+     */
+    delegate?(host: HostPrincipal, turn: TurnDelegation): Promise<Delegation>;
+    /**
+     * Whether the host grant still holds. Lists of computers drop a grant that answers
+     * false at once, without waiting for the host to notice. Absent means every grant holds.
+     */
+    hostActive?(grantId: GrantId): Promise<boolean>;
+    /** A device's public keys as the account registered them, for prompt and answer signatures. */
+    device?(userId: UserId, deviceId: DeviceId): Promise<DeviceKeys | undefined>;
+    /** Who the agent works for, for the turn's context block. */
+    account?(userId: UserId): Promise<AccountProfile | undefined>;
+}
+/** Announced when a computer's grant is added or removed; whatever lists computers reads it. */
+export declare const HOST_GRANTS_TAG = "parlor_auth_hosts";
+export interface TurnDelegation {
+    readonly threadId: ThreadId;
+    readonly turnId: TurnId;
+    readonly clientId: string;
+    readonly agent: string;
+    readonly ttlMs: number;
+}
+export interface Delegation {
+    readonly token: string;
+    readonly expiresAt: number;
+}
+export interface DeviceKeys {
+    readonly id: DeviceId;
+    readonly name: string;
+    readonly platform: string;
+    readonly signingKey: JsonWebKey;
+    readonly presenceKey?: PresenceKey | undefined;
+    /** Linked devices' signed word that this one is the user's; each computer checks them itself. */
+    readonly vouches?: readonly DeviceVouch[] | undefined;
+}
+/** A `VouchStatement` as the voucher signed it, with its presence key. */
+export interface DeviceVouch {
+    readonly voucher: DeviceId;
+    readonly commitment: string;
+    readonly at: number;
+    readonly signature: {
+        readonly keyId: string;
+        readonly presence: "none" | "user";
+        readonly format: "es256-raw" | "webauthn";
+        readonly signature: string;
+        readonly authenticatorData?: string | undefined;
+        readonly clientDataJSON?: string | undefined;
+    };
+}
+export type PresenceKey = {
+    readonly format: "webauthn";
+    readonly credentialId: string;
+    readonly rpId: string;
+    readonly publicKey: JsonWebKey;
+} | {
+    readonly format: "es256-raw";
+    readonly keyId: string;
+    readonly publicKey: JsonWebKey;
+};
+export interface AccountProfile {
+    readonly name: string;
+    readonly email?: string | undefined;
+}
+export type AuthFailureReason = "invalid" | "expired" | "revoked";
+export declare class AuthFailure extends Error {
+    readonly reason: AuthFailureReason;
+    readonly name = "AuthFailure";
+    constructor(reason: AuthFailureReason, message: string);
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,QAAQ,EACR,OAAO,EACP,aAAa,EACb,SAAS,EACT,QAAQ,EACR,MAAM,EACN,MAAM,EACP,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD;;;GAGG;AACH,MAAM,WAAW,YAAa,SAAQ,YAAY;IAChD;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B;;;OAGG;IACH,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,mFAAmF;IACnF,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAAC;IACtC;;;OAGG;IACH,OAAO,CAAC,SAAS,EAAE,sBAAsB,GAAG,WAAW,CAAC;IACxD;;;;OAIG;IACH,QAAQ,CAAC,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1E;;;OAGG;IACH,UAAU,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,+FAA+F;IAC/F,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAC7E,6DAA6D;IAC7D,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;CAC/D;AAED,gGAAgG;AAChG,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAC/C,iGAAiG;IACjG,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,WAAW,EAAE,GAAG,SAAS,CAAC;CACvD;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;QACnC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,CAAC;QAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,MAAM,WAAW,GACnB;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEN,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAAC;AAElE,qBAAa,WAAY,SAAQ,KAAK;IAGlC,QAAQ,CAAC,MAAM,EAAE,iBAAiB;IAFpC,SAAkB,IAAI,iBAAiB;IACvC,YACW,MAAM,EAAE,iBAAiB,EAClC,OAAO,EAAE,MAAM,EAGhB;CACF"}

package/dist/auth.js

@@ -0,0 +1,11 @@
+/** Announced when a computer's grant is added or removed; whatever lists computers reads it. */
+export const HOST_GRANTS_TAG = "parlor_auth_hosts";
+export class AuthFailure extends Error {
+    reason;
+    name = "AuthFailure";
+    constructor(reason, message) {
+        super(message);
+        this.reason = reason;
+    }
+}
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAoDA,gGAAgG;AAChG,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AA4DnD,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGzB,MAAM;IAFC,IAAI,GAAG,aAAa,CAAC;IACvC,YACW,MAAyB,EAClC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;sBAHN,MAAM;IAIjB,CAAC;CACF","sourcesContent":["import type {\n  AuthenticatedPrincipal,\n  DeviceId,\n  GrantId,\n  HostPrincipal,\n  Principal,\n  ThreadId,\n  TurnId,\n  UserId,\n} from \"@parlor/core\";\n\nimport type { ServerPlugin } from \"./plugin.js\";\n\n/**\n * Where identity comes from. The server calls `authenticate` once per request and hands\n * the principal to actions, MCP, sync and agent UI. It installs like any plugin, first.\n */\nexport interface AuthProvider extends ServerPlugin {\n  /**\n   * When true, an anonymous caller is refused by non-public actions, by MCP (with\n   * `challenge`) and by `/ui`, and `x-parlor-source` no longer decides an action's source.\n   */\n  readonly enforcing: boolean;\n  /**\n   * Missing credentials resolve to `anonymous`. Present but invalid, expired or revoked\n   * credentials throw `AuthFailure`, which every surface answers with 401.\n   */\n  authenticate(request: Request): Promise<Principal>;\n  /** The 401 an MCP client reads to discover the authorization server (RFC 9728). */\n  challenge(request: Request): Response;\n  /**\n   * Aborts when the session or grant behind the principal is revoked. Held connections\n   * (sync streams) close on it.\n   */\n  revoked(principal: AuthenticatedPrincipal): AbortSignal;\n  /**\n   * Mints the turn token an inline agent's MCP calls carry while one chat turn runs,\n   * bound to the host's grant. Optional so providers written before chat still compile;\n   * `chat()` refuses to start on a provider without it.\n   */\n  delegate?(host: HostPrincipal, turn: TurnDelegation): Promise<Delegation>;\n  /**\n   * Whether the host grant still holds. Lists of computers drop a grant that answers\n   * false at once, without waiting for the host to notice. Absent means every grant holds.\n   */\n  hostActive?(grantId: GrantId): Promise<boolean>;\n  /** A device's public keys as the account registered them, for prompt and answer signatures. */\n  device?(userId: UserId, deviceId: DeviceId): Promise<DeviceKeys | undefined>;\n  /** Who the agent works for, for the turn's context block. */\n  account?(userId: UserId): Promise<AccountProfile | undefined>;\n}\n\n/** Announced when a computer's grant is added or removed; whatever lists computers reads it. */\nexport const HOST_GRANTS_TAG = \"parlor_auth_hosts\";\n\nexport interface TurnDelegation {\n  readonly threadId: ThreadId;\n  readonly turnId: TurnId;\n  readonly clientId: string;\n  readonly agent: string;\n  readonly ttlMs: number;\n}\n\nexport interface Delegation {\n  readonly token: string;\n  readonly expiresAt: number;\n}\n\nexport interface DeviceKeys {\n  readonly id: DeviceId;\n  readonly name: string;\n  readonly platform: string;\n  readonly signingKey: JsonWebKey;\n  readonly presenceKey?: PresenceKey | undefined;\n  /** Linked devices' signed word that this one is the user's; each computer checks them itself. */\n  readonly vouches?: readonly DeviceVouch[] | undefined;\n}\n\n/** A `VouchStatement` as the voucher signed it, with its presence key. */\nexport interface DeviceVouch {\n  readonly voucher: DeviceId;\n  readonly commitment: string;\n  readonly at: number;\n  readonly signature: {\n    readonly keyId: string;\n    readonly presence: \"none\" | \"user\";\n    readonly format: \"es256-raw\" | \"webauthn\";\n    readonly signature: string;\n    readonly authenticatorData?: string | undefined;\n    readonly clientDataJSON?: string | undefined;\n  };\n}\n\nexport type PresenceKey =\n  | {\n      readonly format: \"webauthn\";\n      readonly credentialId: string;\n      readonly rpId: string;\n      readonly publicKey: JsonWebKey;\n    }\n  | {\n      readonly format: \"es256-raw\";\n      readonly keyId: string;\n      readonly publicKey: JsonWebKey;\n    };\n\nexport interface AccountProfile {\n  readonly name: string;\n  readonly email?: string | undefined;\n}\n\nexport type AuthFailureReason = \"invalid\" | \"expired\" | \"revoked\";\n\nexport class AuthFailure extends Error {\n  override readonly name = \"AuthFailure\";\n  constructor(\n    readonly reason: AuthFailureReason,\n    message: string,\n  ) {\n    super(message);\n  }\n}\n"]}

package/dist/body.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The request body as text, or undefined once it passes `limitBytes`. A declared
+ * `Content-Length` over the limit is refused unread; otherwise the stream is read chunk by
+ * chunk and cancelled the moment the bytes read pass the limit.
+ */
+export declare function readBoundedText(request: Request, limitBytes: number): Promise<string | undefined>;
+//# sourceMappingURL=body.d.ts.map

package/dist/body.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../src/body.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmB7B"}

package/dist/body.js

@@ -0,0 +1,29 @@
+/**
+ * The request body as text, or undefined once it passes `limitBytes`. A declared
+ * `Content-Length` over the limit is refused unread; otherwise the stream is read chunk by
+ * chunk and cancelled the moment the bytes read pass the limit.
+ */
+export async function readBoundedText(request, limitBytes) {
+    const declared = Number(request.headers.get("content-length"));
+    if (declared > limitBytes)
+        return undefined;
+    const reader = request.body?.getReader();
+    if (!reader)
+        return "";
+    const decoder = new TextDecoder();
+    let text = "";
+    let size = 0;
+    for (;;) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        size += value.byteLength;
+        if (size > limitBytes) {
+            await reader.cancel();
+            return undefined;
+        }
+        text += decoder.decode(value, { stream: true });
+    }
+    return text + decoder.decode();
+}
+//# sourceMappingURL=body.js.map

package/dist/body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body.js","sourceRoot":"","sources":["../src/body.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,OAAgB,EAChB,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC/D,IAAI,QAAQ,GAAG,UAAU;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI;YAAE,MAAM;QAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,IAAI,GAAG,UAAU,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;AACjC,CAAC","sourcesContent":["/**\n * The request body as text, or undefined once it passes `limitBytes`. A declared\n * `Content-Length` over the limit is refused unread; otherwise the stream is read chunk by\n * chunk and cancelled the moment the bytes read pass the limit.\n */\nexport async function readBoundedText(\n  request: Request,\n  limitBytes: number,\n): Promise<string | undefined> {\n  const declared = Number(request.headers.get(\"content-length\"));\n  if (declared > limitBytes) return undefined;\n  const reader = request.body?.getReader();\n  if (!reader) return \"\";\n  const decoder = new TextDecoder();\n  let text = \"\";\n  let size = 0;\n  for (;;) {\n    const { done, value } = await reader.read();\n    if (done) break;\n    size += value.byteLength;\n    if (size > limitBytes) {\n      await reader.cancel();\n      return undefined;\n    }\n    text += decoder.decode(value, { stream: true });\n  }\n  return text + decoder.decode();\n}\n"]}

package/dist/caller.d.ts

@@ -0,0 +1,21 @@
+import { type ActionSource, type Principal } from "@parlor/core";
+import type { AuthProvider } from "./auth.js";
+import type { ScopeResolver } from "./scope.js";
+export interface Caller {
+    readonly principal: Principal;
+    readonly scope: string;
+    /** Scope plus user: whose screens this caller may see and drive (`audienceOf`). */
+    readonly audience: string;
+    /** The tab or app the request came from: a routing hint, never an identity. */
+    readonly clientId: string | undefined;
+}
+export interface CallerResolver {
+    (request: Request): Promise<Caller>;
+    readonly enforcing: boolean;
+}
+export declare function sourceOf(request: Request): ActionSource;
+export declare function clientOf(request: Request): string | undefined;
+export declare function sourceFor(declared: ActionSource, caller: Caller, enforcing: boolean): ActionSource;
+/** `prepare` runs before the provider sees a request, so its tables exist by then. */
+export declare function createCallerResolver(auth: AuthProvider | undefined, scope: ScopeResolver, prepare?: () => Promise<void>): CallerResolver;
+//# sourceMappingURL=caller.d.ts.map

package/dist/caller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller.d.ts","sourceRoot":"","sources":["../src/caller.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,SAAS,EAEf,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,mFAAmF;IACnF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,WAAW,cAAc;IAC7B,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AASD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,CAGvD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE7D;AAED,wBAAgB,SAAS,CACvB,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,OAAO,GACjB,YAAY,CAId;AAED,sFAAsF;AACtF,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,YAAY,GAAG,SAAS,EAC9B,KAAK,EAAE,aAAa,EACpB,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAC5B,cAAc,CAwBhB"}