@ours.network/cowork 0.3.7-nightly.20260815.80ea770 → 0.4.0

package/README.md

@@ -1,6 +1,6 @@
 # ours-cowork
 
-`ours-cowork` is a standalone standard-SDK daemon for durable ours mission rooms. It owns one ordinary ours identity per room through an embedded `@ours.network/sdk` runtime, an ordered local archive, a private Unix management socket, and a localhost web console with room RPC.
+`ours-cowork` is a standalone daemon for durable ours mission rooms. It owns one ordinary packet per room, an ordered local archive, a private Unix management socket, and a localhost web console with room RPC.
 
 ```sh
 ours-cowork web
@@ -9,21 +9,23 @@ ours-cowork docs
 
 `ours-cowork web` starts the daemon if it is absent, waits for the console, and opens `http://127.0.0.1:3052/`. Create a room with a friendly display name first, then add each invitation requirement from its Invite panel. Names are trimmed, normalized to Unicode NFC, and may contain 1–64 Unicode characters excluding control and format characters. Duplicate names are allowed. The Communication view contains the human-readable room chat; operational records remain in Events and the complete ordered stream remains in Archive.
 
-The friendly `room_name` is presentation metadata. New rooms use the globally unique SDK identity `ours-cowork-<room_id>`; that authenticated name is independent of later display-name changes. Duplicate display names are allowed because identity CIDs and room IDs, not names, are the authorization and routing keys. Pre-1.0 rooms using `cowork-room-<room_id>` or `ours-cowork-room:<name>` custom packet state are detected and refused: back them up with the old release, recreate them, and re-invite their participants.
+The friendly `room_name` is presentation metadata. New rooms announce the technical identity `ours-cowork-room:<initial room_name>`; that authenticated announced name is frozen when the display name later changes. Duplicate display and announced names are allowed because identity CIDs, not names, are the authorization and routing keys. The opaque `room_id` remains the stable key for URLs, storage, and identity correlation. Existing `cowork-room-<room_id>` identities are never renamed or recreated, and rooms created before friendly names existed migrate only their display metadata to `Room <first 8 room_id characters>`.
 
 The localhost HTTP console has no authentication. Keep it bound to `127.0.0.1`; do not proxy, forward, or expose the port to other hosts. Room state is refreshed by periodic polling, not pushed to the browser.
 
+The same listener describes its own room management REST API: `http://127.0.0.1:3052/openapi.json` is the OpenAPI 3.1 document and `http://127.0.0.1:3052/docs` is the browser UI for it. Both are read-only, load no remote assets, and follow the console's loopback-only exposure rules.
+
 The package runs independently with its own config and state directory. Operator room commands use one JSONL request over `management.sock`. Use `--json` for automation; its stdout is a single JSON value and diagnostics are included in that value.
 
 Ordinary ours-mcp identities can join only as remote participants over the ours protocol.
 
-Active participants can also send files through the room identity. Cowork treats
-them as opaque bytes, archives them before consuming SDK inbox state, and relays an
-SDK-authenticated metadata envelope plus the binary file to every other active seat.
+Active participants can also send files through the room packet. Cowork treats
+them as opaque bytes, archives them before consuming packet state, and relays a
+signed metadata envelope plus the core binary file to every other active seat.
 Files are limited to 2 MiB; larger inputs fail loudly instead of weakening
 crash recovery guarantees.
 
-The release package contains the standalone daemon, operator CLI, deterministic web assets, and all eleven offline operator topics. Standard identity, messaging, reply, file, and lifecycle behavior comes from the public `@ours.network/sdk`; no custom MUFL room actor is shipped.
+The release package contains the standalone daemon, operator CLI, compiled room packet, deterministic web assets, and all eleven offline operator topics. It has no dependency on another agent daemon.
 
 Licensed under [FSL-1.1-Apache-2.0](./LICENSE).
 

package/dist/cli.js

@@ -4328,9 +4328,9 @@ var RoomNameSchema = external_exports.string().refine(
     });
   }
 });
-var ROOM_IDENTITY_PREFIX = "ours-cowork-";
-function roomIdentityName(roomId) {
-  return `${ROOM_IDENTITY_PREFIX}${LowerCrockfordUlidSchema.parse(roomId)}`;
+var ROOM_IDENTITY_PREFIX = "ours-cowork-room:";
+function roomIdentityName(roomName) {
+  return `${ROOM_IDENTITY_PREFIX}${RoomNameSchema.parse(roomName)}`;
 }
 function legacyRoomIdentityName(roomId) {
   return `cowork-room-${LowerCrockfordUlidSchema.parse(roomId)}`;
@@ -4510,7 +4510,7 @@ var RoleBriefingSchema = external_exports.object({
 }).strict();
 function refineRoomLineage(room, context) {
   const pendingIdentityName = legacyRoomIdentityName(room.room_id);
-  const currentPendingIdentityName = roomIdentityName(room.room_id);
+  const currentPendingIdentityName = room.room_name === void 0 ? void 0 : roomIdentityName(room.room_name);
   const exactPacketPending = room.state === "provisioning" && room.status === "packet_pending" && (room.identity_name === pendingIdentityName || room.identity_name === currentPendingIdentityName) && room.invites.length === 0 && room.seats.length === 0 && room.activated_at === void 0 && room.closed_at === void 0;
   if (room.identity_cid === "" && !exactPacketPending) {
     context.addIssue({
@@ -4738,10 +4738,6 @@ var AuthorAliasSchema = external_exports.object({
   participant_id: LowerCrockfordUlidSchema,
   alias: NonEmptyStringSchema
 }).strict();
-var ReplyReferenceSchema = external_exports.object({
-  wire_id: NonEmptyStringSchema,
-  sentence: PositiveSafeIntegerSchema.optional()
-}).strict();
 var MessageShape = {
   kind: external_exports.literal("message"),
   message_id: LowerCrockfordUlidSchema,
@@ -4766,8 +4762,7 @@ var MessageShape = {
     }
   }),
   source_msg_id: external_exports.number().int().nonnegative().safe().optional(),
-  source_wire_id: NonEmptyStringSchema.optional(),
-  source_reply_to: ReplyReferenceSchema.optional()
+  source_wire_id: NonEmptyStringSchema.optional()
 };
 var RelayIntentShape = {
   kind: external_exports.literal("relay_intent"),
@@ -4810,8 +4805,7 @@ var FileShape = {
     }
   }),
   source_file_id: external_exports.number().int().nonnegative().safe(),
-  source_wire_id: NonEmptyStringSchema.optional(),
-  source_reply_to: ReplyReferenceSchema.optional()
+  source_wire_id: NonEmptyStringSchema.optional()
 };
 var MembershipIntentShape = {
   kind: external_exports.literal("membership_intent"),