@oh-my-pi/pi-wire 15.11.8 → 15.12.1

package/CHANGELOG.md

@@ -2,8 +2,16 @@
 
 ## [Unreleased]
 
+## [15.12.0] - 2026-06-12
+### Added
+
+- Added `readOnly` flags to participant and session payload types to indicate when a guest is connected via a read-only (view) link
+- Added `writeToken` to `GuestFrame` hello payloads and parsed collaboration links so full-access links can carry and expose a write-capability token
+- Added `ROOM_KEY_BYTES` and `WRITE_TOKEN_BYTES` constants for room key and write-token sizing in the wire protocol
+- Added `DEFAULT_SHARE_URL` (`https://my.omp.sh/s`), the default share viewer/upload base for `/share` links
+
 ## [15.11.8] - 2026-06-12
 
 ### Added
 
-- Added shared collab live-session wire contracts for the host CLI and browser guest client.
+- Added shared collab live-session wire contracts for the host CLI and browser guest client.

package/dist/types/index.d.ts

@@ -213,6 +213,8 @@ export interface ContextUsage {
 export interface Participant {
     name: string;
     role: "host" | "guest";
+    /** True when the guest joined through a read-only (view) link. */
+    readOnly?: boolean;
 }
 /** Debounced footer snapshot broadcast by the host. */
 export interface SessionState {
@@ -285,6 +287,12 @@ export type GuestFrame = {
     t: "hello";
     proto: number;
     name: string;
+    /**
+     * base64url write token proving full-link possession; absent for
+     * read-only (view) links. The host marks peers without a valid token
+     * read-only and rejects their mutating frames.
+     */
+    writeToken?: string;
 } | {
     t: "prompt";
     text: string;
@@ -311,6 +319,8 @@ export type HostFrame = {
     entries: SessionEntry[];
     state: SessionState;
     agents: AgentSnapshot[];
+    /** True when this peer joined through a read-only (view) link. */
+    readOnly?: boolean;
 } | {
     t: "entry";
     entry: SessionEntry;
@@ -350,13 +360,25 @@ export declare const COLLAB_PROTO = 1;
 /** Plaintext envelope prefix: `[4B uint32 BE peerId][sealed payload]`. */
 export declare const ENVELOPE_HEADER_LENGTH = 4;
 export declare const ROOM_ID_BYTES = 16;
+/** AES-256-GCM room key; the seal key for every collab frame. */
+export declare const ROOM_KEY_BYTES = 32;
+/**
+ * Random write token appended to the room key in full links
+ * (`base64url(key ∥ token)`); view links carry the bare key. Possession
+ * proves prompt/abort/agent-cmd capability to the host.
+ */
+export declare const WRITE_TOKEN_BYTES = 16;
 /** Default public relay; bare `<roomId>#<key>` links resolve against it. */
-export declare const DEFAULT_RELAY_URL = "wss://relay.omp.sh";
+export declare const DEFAULT_RELAY_URL = "wss://my.omp.sh";
+/** Default share viewer/upload base; `/share` links resolve against `<base>/<id>#<key>`. */
+export declare const DEFAULT_SHARE_URL = "https://my.omp.sh/s";
 export interface ParsedCollabLink {
     /** wss://host[:port]/r/<roomId> — no query, no fragment. */
     wsUrl: string;
     roomId: string;
     key: Uint8Array;
+    /** Write token from a full link; absent for read-only (view) links. */
+    writeToken?: Uint8Array;
 }
 /** Relay → host control message. */
 export type RelayControlToHost = {

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-wire",
-	"version": "15.11.8",
+	"version": "15.12.1",
 	"description": "Shared wire protocol types for Oh My Pi packages",
 	"homepage": "https://omp.sh",
 	"author": "Can Boluk",

package/src/index.ts

@@ -217,6 +217,8 @@ export interface ContextUsage {
 export interface Participant {
 	name: string;
 	role: "host" | "guest";
+	/** True when the guest joined through a read-only (view) link. */
+	readOnly?: boolean;
 }
 
 /** Debounced footer snapshot broadcast by the host. */
@@ -296,7 +298,17 @@ export interface SubagentLifecyclePayload {
 // ═══════════════════════════════════════════════════════════════════════════
 
 export type GuestFrame =
-	| { t: "hello"; proto: number; name: string }
+	| {
+			t: "hello";
+			proto: number;
+			name: string;
+			/**
+			 * base64url write token proving full-link possession; absent for
+			 * read-only (view) links. The host marks peers without a valid token
+			 * read-only and rejects their mutating frames.
+			 */
+			writeToken?: string;
+	  }
 	| { t: "prompt"; text: string; images?: ImageContent[] }
 	| { t: "abort" }
 	| { t: "agent-cmd"; cmd: "chat" | "kill" | "revive"; agentId: string; text?: string }
@@ -313,6 +325,8 @@ export type HostFrame =
 			entries: SessionEntry[];
 			state: SessionState;
 			agents: AgentSnapshot[];
+			/** True when this peer joined through a read-only (view) link. */
+			readOnly?: boolean;
 	  }
 	| { t: "entry"; entry: SessionEntry }
 	| { t: "event"; event: AgentEvent }
@@ -339,14 +353,29 @@ export const ENVELOPE_HEADER_LENGTH = 4;
 
 export const ROOM_ID_BYTES = 16;
 
+/** AES-256-GCM room key; the seal key for every collab frame. */
+export const ROOM_KEY_BYTES = 32;
+
+/**
+ * Random write token appended to the room key in full links
+ * (`base64url(key ∥ token)`); view links carry the bare key. Possession
+ * proves prompt/abort/agent-cmd capability to the host.
+ */
+export const WRITE_TOKEN_BYTES = 16;
+
 /** Default public relay; bare `<roomId>#<key>` links resolve against it. */
-export const DEFAULT_RELAY_URL = "wss://relay.omp.sh";
+export const DEFAULT_RELAY_URL = "wss://my.omp.sh";
+
+/** Default share viewer/upload base; `/share` links resolve against `<base>/<id>#<key>`. */
+export const DEFAULT_SHARE_URL = "https://my.omp.sh/s";
 
 export interface ParsedCollabLink {
 	/** wss://host[:port]/r/<roomId> — no query, no fragment. */
 	wsUrl: string;
 	roomId: string;
 	key: Uint8Array;
+	/** Write token from a full link; absent for read-only (view) links. */
+	writeToken?: Uint8Array;
 }
 
 // ═══════════════════════════════════════════════════════════════════════════