@ours.network/cowork 1.0.5 → 1.0.7

package/README.md

@@ -7,9 +7,9 @@ ours-cowork web
 ours-cowork docs
 ```
 
-`ours-cowork web` starts the daemon if it is absent, waits for the console, and opens `http://127.0.0.1:3052/`. Create a room with a name first, then add each invitation requirement from its Invite panel. Names are trimmed, normalized to Unicode NFC, and may contain 1–64 Unicode characters excluding control and format characters. A normalized name must be unique among identities in the shared daemon. The Communication view contains the human-readable room chat; operational records remain in Events and the complete ordered stream remains in Archive.
+`ours-cowork web` starts the daemon if it is absent, waits for the console, and opens `http://127.0.0.1:3052/`. Create a room with a name first, then add each invitation requirement from its Invite panel. Names are trimmed, normalized to Unicode NFC, and may contain 1–64 Unicode characters excluding control and format characters. The bounded identity name must not collide with an identity in the shared daemon. The Communication view contains the human-readable room chat; operational records remain in Events and the complete ordered stream remains in Archive.
 
-Each room identity is exactly `ours-cowork:<room name>`, preserving the normalized name supplied at creation so Messenger can display it directly without separate `room_name` metadata. The authenticated identity name is frozen at creation; later room settings may change `room_name` but do not rename the identity, CID, contacts, or history. Identity CIDs, not names, remain the authorization and routing keys. Because identity names are daemon-global, creating another room with the same normalized name fails closed. Earlier unreleased ID- and slug-based identity formats are unsupported; no migration is provided for this unreleased major.
+Each room identity is `ours-cowork:<bounded room name>`. Cowork NFC-normalizes the creation name and retains its first 52 Unicode code points so the complete SDK identity stays within 64 code points. The authenticated identity name is frozen at creation; later room settings may change `room_name` but do not rename the identity, CID, contacts, or history. Identity CIDs, not names, remain the authorization and routing keys. Because identity names are daemon-global, equal names—including distinct long titles with the same retained prefix—collide cleanly. Earlier unreleased ID- and slug-based identity formats are unsupported; no migration is provided for this unreleased major.
 
 The localhost HTTP console has no authentication. Keep it bound to `127.0.0.1`; do not proxy, forward, or expose the port to other hosts. Room state is refreshed by periodic polling, not pushed to the browser.
 
@@ -41,3 +41,4 @@ ours-cowork docs web
 ```
 
 Before production use, read the limitations topic. In particular, backups require a stopped daemon and restore uses the complete state directory.
+Lost room identity leases are recovered automatically with a non-force bind and exact persisted-CID proof. Operators can invoke the same safe path explicitly with `ours-cowork room rebind <room-id>`; it never recreates an established identity or steals a live lease.

package/dist/cli.js

@@ -4298,6 +4298,7 @@ var MAX_FILE_NAME_BYTES = 255;
 var MAX_MIME_BYTES = 255;
 var MAX_ROLE_BYTES = 256;
 var MAX_ROOM_NAME_CHARACTERS = 64;
+var MAX_ROOM_IDENTITY_NAME_CHARACTERS = 64;
 function utf8Bounded(label, maximumBytes) {
   return external_exports.string().refine((value) => Buffer.byteLength(value, "utf8") >= 1, `${label} must be at least 1 UTF-8 byte`).refine(
     (value) => Buffer.byteLength(value, "utf8") <= maximumBytes,
@@ -4345,6 +4346,7 @@ var RoomNameSchema = external_exports.string().refine(
   }
 });
 var ROOM_IDENTITY_PREFIX = "ours-cowork:";
+var MAX_ROOM_IDENTITY_TITLE_CHARACTERS = MAX_ROOM_IDENTITY_NAME_CHARACTERS - Array.from(ROOM_IDENTITY_PREFIX).length;
 function isPersistedRoomIdentityName(roomId, identityName) {
   if (!LowerCrockfordUlidSchema.safeParse(roomId).success || !identityName.startsWith(ROOM_IDENTITY_PREFIX)) {
     return false;
@@ -5053,6 +5055,7 @@ var NATIVE_MUTATION_METHODS = /* @__PURE__ */ new Set([
   "room.close",
   "room.recover",
   "room.recover.confirm",
+  "room.rebind",
   "room.participant.remove",
   "room.participant.replace"
 ]);
@@ -5105,6 +5108,7 @@ Room commands:
   close <room-id>
   delete <room-id> --yes
   recover <room-id> [--confirm <old-invite-id> <new-invite-id>]
+  rebind <room-id>
 
 Run \u2018ours-cowork docs\u2019 for the offline documentation index.`;
 }
@@ -5349,6 +5353,11 @@ async function roomRequest(command, args) {
       exactPositionals(parsed, 1, "room recover");
       return { method: "room.recover", params: { room_id: roomId } };
     }
+    case "rebind": {
+      const parsed = parseOptions(args, []);
+      const [roomId] = exactPositionals(parsed, 1, "room rebind");
+      return { method: "room.rebind", params: { room_id: roomId } };
+    }
     default:
       usageError(`unknown room command: ${command}`);
   }