@ours.network/cowork 1.1.0 → 1.1.1

package/dist/daemon.js

@@ -6368,25 +6368,22 @@ var init_intake = __esm({
               continue;
             }
             if (file !== void 0) {
-              const author = file.author_alias === void 0 ? file.author : {
-                identity: file.author_alias.participant_id,
-                display_name: file.author_alias.alias,
-                role: file.author.role
-              };
-              const metadata = await sendRoomBody(packet, intent.recipient_identity, {
+              const uploader = file.author_alias?.alias ?? file.author.display_name;
+              const notice = await sendRoomBody(packet, intent.recipient_identity, {
                 version: 1,
-                kind: "room_file",
+                kind: "room_msg",
                 room_id: roomId,
                 room_name: room.room_name,
-                file_id: file.file_id,
-                author,
-                filename: file.filename,
-                mime: file.mime,
-                size: file.size,
-                sha256: file.sha256,
+                message_id: file.file_id,
+                author: {
+                  identity: room.identity_cid,
+                  display_name: room.identity_name,
+                  role: ROOM_ROLE
+                },
+                text: `${uploader} sent a file`,
                 at: file.at
               });
-              if (metadata.status === "send_failed") {
+              if (notice.status === "send_failed") {
                 const failed = await this.store.append(roomId, {
                   version: 1,
                   kind: "relay_result",
@@ -6416,7 +6413,7 @@ var init_intake = __esm({
                 recipient_identity: intent.recipient_identity,
                 status: outcome2.status,
                 ...outcome2.wire_id === void 0 || outcome2.wire_id === "" ? {} : { wire_id: outcome2.wire_id },
-                ...metadata.wire_id === void 0 || metadata.wire_id === "" ? {} : { metadata_wire_id: metadata.wire_id }
+                ...notice.wire_id === void 0 || notice.wire_id === "" ? {} : { metadata_wire_id: notice.wire_id }
               });
               if (appended2.kind !== "relay_result") throw new Error("storage returned the wrong relay result kind");
               continue;

package/docs/07-messaging-history.md

@@ -50,9 +50,9 @@ name, slug, or room ID.
 
 Incoming message listings contain authorization metadata but no body. Cowork resolves each selected wire ID through persistent SDK history, verifies that the history row matches the listing, archives the message and complete recipient-intent fan-out, and then asks the SDK to read one oldest unread row. If an older introduction becomes unread between listing and acknowledgement, that authoritative row is archived through the same intake path before cowork retries the expected row. There is no defer operation; an empty acknowledgement means another reader already advanced the expected row.
 
-For a file, cowork reads the identity-scoped immutable blob while the item is still unread and verifies its length and SHA-256 against SDK metadata. It then durably archives the exact bytes as canonical base64 together with the reply reference and every per-recipient relay intent before selecting that exact 64-hex wire ID with `getFiles`. Each other active seat receives two SDK items: an authenticated `room_file` metadata envelope and a binary file containing the original bytes. The SDK receives bytes, never a local filesystem path, so there is no staging-file or path-permission dependency. A seat removed after fan-out is skipped terminally without receiving metadata or bytes. A crash can redrive an unfinished recipient from the cowork archive; an already terminal recipient is not retried.
+For a file, cowork reads the identity-scoped immutable blob while the item is still unread and verifies its length and SHA-256 against SDK metadata. It then durably archives the exact bytes as canonical base64 together with the reply reference and every per-recipient relay intent before selecting that exact 64-hex wire ID with `getFiles`. Each other active seat receives two SDK items: a standard `room_msg` envelope authored by the room with the text `<Participant> sent a file`, followed by a binary file containing the original bytes. The notice text uses the stored participant display name, or the room-scoped alias in anonymous rooms. This replaces the previous `room_file` JSON notice; the full author and file metadata remain in Cowork’s archive. The file still identifies the room as its transport sender. These are separate deliveries, so sending the notice first does not guarantee adjacent display. The SDK receives bytes, never a local filesystem path, so there is no staging-file or path-permission dependency. A seat removed after fan-out is skipped terminally without receiving the notice or bytes. A crash can redrive an unfinished recipient from the cowork archive; an already terminal recipient is not retried.
 
-In an anonymous room, SDK-authenticated file metadata identifies the author only by participant ID and alias. The operator archive still retains the real author and exact file bytes. The participant-facing history projection currently contains messages only; file records remain visible in the complete operator Archive/CLI history, while recipients retrieve file bytes through their ordinary ours file inbox.
+In an anonymous room, the notice text names only the room-scoped alias; it includes no participant ID or real participant identity. The envelope author is the room. The binary file’s authenticated sender remains the room. The operator archive still retains the real author and exact file bytes. The participant-facing history projection currently contains messages only; file records remain visible in the complete operator Archive/CLI history, while recipients retrieve file bytes through their ordinary ours file inbox.
 
 Cowork history records include messages, files, and the durable relay intent/result trail used for restart recovery. This application archive is distinct from the shared daemon's per-identity `history.sqlite3` and immutable blob store; neither is a substitute backup for the other.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/cowork",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "Durable ours mission rooms on the shared ours daemon.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",