@ours.network/cowork 1.0.7 → 1.0.9-nightly.20260903.9d2f23e

package/README.md

@@ -15,7 +15,7 @@ The localhost HTTP console has no authentication. Keep it bound to `127.0.0.1`;
 
 The same listener describes its own room management REST API: `http://127.0.0.1:3052/openapi.json` is the OpenAPI 3.1 document and `http://127.0.0.1:3052/docs` is the browser UI for it. Both are read-only, load no remote assets, and follow the console's loopback-only exposure rules.
 
-Start or install the shared daemon with `@ours.network/cli` 2.5.0 before starting cowork. Cowork never embeds, starts, stops, or silently substitutes an ours daemon. It uses the SDK-standard shared selection (the default `~/.ours` daemon, `OURS_CONFIG`, or a coherent `OURS_PORT` plus `OURS_STATE_DIR` selection) and fails clearly when that daemon is unavailable or mismatched.
+Start or install the shared daemon with `@ours.network/cli` 2.7.0 before starting cowork. Cowork never embeds, starts, stops, or silently substitutes an ours daemon. It uses the SDK-standard shared selection (the default `~/.ours` daemon, `OURS_CONFIG`, or a coherent `OURS_PORT` plus `OURS_STATE_DIR` selection) and fails clearly when that daemon is unavailable or mismatched.
 
 The shared daemon retains application payload history outside its protocol packets: each identity has a `history.sqlite3` database and immutable content-addressed file blobs. Cowork authorizes unread metadata by authenticated CID, reads the corresponding persistent history or blob, durably archives the room item and its complete fan-out, and only then advances that exact SDK unread item. There is no packet-inbox fallback, defer queue, host outbox, or cross-store transaction.
 

package/dist/cli.js

@@ -4311,6 +4311,12 @@ var LowerCrockfordUlidSchema = external_exports.string().regex(
   /^[0-7][0-9a-hjkmnp-tv-z]{25}$/,
   "must be a 26-character lowercase Crockford ULID"
 );
+var ContainerIdSchema = external_exports.string().regex(/^[0-9a-f]{64}$/i, "must be a 64-character hexadecimal CID").transform((value) => value.toUpperCase());
+var RuntimeCommandNameSchema = external_exports.enum(["list-members", "remove-member"]);
+var RuntimeCommandGrantSchema = external_exports.object({
+  caller_cid: ContainerIdSchema,
+  command: RuntimeCommandNameSchema
+}).strict();
 function isStrictRfc3339(value) {
   const match = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d+)?(?:Z|[+-](\d{2}):(\d{2}))$/.exec(value);
   if (!match) return false;
@@ -4626,6 +4632,8 @@ var CurrentRoomSchema = external_exports.object({
       seen.add(role);
     }
   }),
+  /** Operator-managed, default-deny grants for the room identity's runtime commands. */
+  command_grants: external_exports.array(RuntimeCommandGrantSchema),
   anonymous: external_exports.boolean(),
   quiet_membership: external_exports.boolean(),
   membership_epoch: external_exports.number().int().nonnegative().safe(),
@@ -4686,6 +4694,25 @@ var CurrentRoomSchema = external_exports.object({
       });
     }
   }
+  const seenCommandGrants = /* @__PURE__ */ new Set();
+  for (const [index, grant] of room.command_grants.entries()) {
+    const key = `${grant.caller_cid}\0${grant.command}`;
+    if (seenCommandGrants.has(key)) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["command_grants", index],
+        message: "runtime command grants must be unique by caller CID and command"
+      });
+    }
+    seenCommandGrants.add(key);
+    if (!room.seats.some((seat) => seat.state === "active" && seat.identity === grant.caller_cid)) {
+      context.addIssue({
+        code: external_exports.ZodIssueCode.custom,
+        path: ["command_grants", index, "caller_cid"],
+        message: "runtime command grants require an active room identity"
+      });
+    }
+  }
   for (const [index, seat] of room.seats.entries()) {
     if (seat.replaces_seat === void 0) continue;
     const predecessor = byParticipant.get(seat.replaces_seat);
@@ -4726,6 +4753,7 @@ var RoomSchema = external_exports.preprocess((value) => {
     }
   }
   if (!Object.hasOwn(value, "rest_roles")) patch.rest_roles = [];
+  if (!Object.hasOwn(value, "command_grants")) patch.command_grants = [];
   if (Object.keys(patch).length === 0) return value;
   return { ...value, ...patch };
 }, CurrentRoomSchema);
@@ -4760,7 +4788,6 @@ var PostAsRoleInputSchema = external_exports.object({
 var RestRoleInputSchema = external_exports.object({
   role: RoleSchema
 }).strict();
-var ContainerIdSchema = external_exports.string().regex(/^[0-9a-f]{64}$/i, "must be a 64-character hexadecimal CID").transform((value) => value.toUpperCase());
 var AcceptExternalInviteInputSchema = external_exports.object({
   role: RoleSchema,
   invite: external_exports.string().refine(
@@ -4770,6 +4797,24 @@ var AcceptExternalInviteInputSchema = external_exports.object({
   expected_cid: ContainerIdSchema.optional(),
   replaces_seat: LowerCrockfordUlidSchema.optional()
 }).strict();
+var ListMembersCommandInputSchema = external_exports.object({}).strict();
+var CommandIdempotencyKeySchema = external_exports.string().regex(
+  /^[A-Za-z0-9._:-]{1,128}$/,
+  "must contain 1-128 portable idempotency-key characters"
+);
+var RemoveMemberCommandInputSchema = external_exports.object({
+  participant_id: LowerCrockfordUlidSchema,
+  expected_membership_epoch: external_exports.number().int().nonnegative().safe(),
+  confirm: external_exports.literal(true),
+  idempotency_key: CommandIdempotencyKeySchema
+}).strict();
+var RuntimeCommandAuditSchema = external_exports.object({
+  sender_cid: NonEmptyStringSchema,
+  sender_participant_id: LowerCrockfordUlidSchema,
+  request_wire_id: NonEmptyStringSchema,
+  idempotency_key: CommandIdempotencyKeySchema,
+  expected_membership_epoch: external_exports.number().int().nonnegative().safe()
+}).strict();
 var AuthorSnapshotSchema = external_exports.object({
   identity: NonEmptyStringSchema,
   display_name: NonEmptyStringSchema,
@@ -4880,7 +4925,8 @@ var MembershipIntentShape = {
   role: RoleSchema,
   alias: NonEmptyStringSchema.optional(),
   epoch: PositiveSafeIntegerSchema,
-  notify: external_exports.boolean()
+  notify: external_exports.boolean(),
+  command: RuntimeCommandAuditSchema.optional()
 };
 var MembershipResultShape = {
   kind: external_exports.literal("membership_result"),
@@ -5057,7 +5103,9 @@ var NATIVE_MUTATION_METHODS = /* @__PURE__ */ new Set([
   "room.recover.confirm",
   "room.rebind",
   "room.participant.remove",
-  "room.participant.replace"
+  "room.participant.replace",
+  "room.command.grant",
+  "room.command.revoke"
 ]);
 function rpcTimeoutForMethod(method) {
   return NATIVE_MUTATION_METHODS.has(method) ? NATIVE_RPC_TIMEOUT_MS : RPC_TIMEOUT_MS;
@@ -5101,6 +5149,9 @@ Room commands:
   list
   show <room-id>
   participants <room-id>
+  command-grants <room-id>
+  command-grant <room-id> <caller-cid> <list-members|remove-member>
+  command-revoke <room-id> <caller-cid> <list-members|remove-member>
   history <room-id> [--after <seq>] [--limit <n>] [--view operator|participant]
   message <room-id> --text <text>
   say <room-id> --role <label> --text <text>
@@ -5296,6 +5347,25 @@ async function roomRequest(command, args) {
       const [roomId] = exactPositionals(parseOptions(args), 1, `room ${command}`);
       return { method: `room.${command}`, params: { room_id: roomId } };
     }
+    case "command-grants": {
+      const [roomId] = exactPositionals(parseOptions(args), 1, "room command-grants");
+      return { method: "room.command.grants", params: { room_id: roomId } };
+    }
+    case "command-grant":
+    case "command-revoke": {
+      const [roomId, callerCid, runtimeCommand] = exactPositionals(
+        parseOptions(args),
+        3,
+        `room ${command}`
+      );
+      if (runtimeCommand !== "list-members" && runtimeCommand !== "remove-member") {
+        usageError("runtime command must be list-members or remove-member");
+      }
+      return {
+        method: command === "command-grant" ? "room.command.grant" : "room.command.revoke",
+        params: { room_id: roomId, caller_cid: callerCid, command: runtimeCommand }
+      };
+    }
     case "history": {
       const parsed = parseOptions(args, ["--after", "--limit", "--view"]);
       const [roomId] = exactPositionals(parsed, 1, "room history");
@@ -5719,7 +5789,11 @@ function serviceEnvironment(config) {
   };
 }
 function validateServiceConfiguration(config) {
-  const values = { cowork_cli: SELF, ...serviceEnvironment(config) };
+  const values = {
+    node_executable: process.execPath,
+    cowork_cli: SELF,
+    ...serviceEnvironment(config)
+  };
   for (const [label, value] of Object.entries(values)) {
     if (/[\x00-\x1f\x7f-\x9f]/.test(value)) {
       throw new CliError(EXIT.invalidState, "invalid_state", `${label} contains a control character unsafe for a service definition`);
@@ -5731,7 +5805,7 @@ function systemdValueQuote(value) {
 }
 function systemdExecutableQuote(value) {
   if (value.includes('"') || /[\0\n\r]/.test(value)) {
-    throw new CliError(EXIT.invalidState, "invalid_state", "cowork CLI path contains a character unsupported by systemd ExecStart");
+    throw new CliError(EXIT.invalidState, "invalid_state", "node_executable contains a character unsupported by systemd ExecStart");
   }
   return `"${value.replaceAll("\\", "\\\\").replaceAll("%", "%%")}"`;
 }
@@ -5761,7 +5835,7 @@ StartLimitIntervalSec=0
 
 [Service]
 Type=simple
-ExecStart=${systemdExecutableQuote(SELF)} serve
+ExecStart=${systemdExecutableQuote(process.execPath)} ${systemdValueQuote(SELF)} serve
 ${environment}
 Restart=on-failure
 RestartSec=5
@@ -5798,7 +5872,7 @@ function installLaunchd(config) {
 <plist version="1.0"><dict>
   <key>Label</key><string>${LAUNCHD_LABEL}</string>
   <key>ProgramArguments</key><array>
-    <string>${xml(SELF)}</string><string>serve</string>
+    <string>${xml(process.execPath)}</string><string>${xml(SELF)}</string><string>serve</string>
   </array>
   <key>EnvironmentVariables</key><dict>
 ${environment}