@ours.network/cowork 1.1.1 → 1.1.3

package/README.md

@@ -15,7 +15,7 @@ The localhost HTTP console has no authentication. Keep it bound to `127.0.0.1`;
 
 The same listener describes its own room management REST API: `http://127.0.0.1:3052/openapi.json` is the OpenAPI 3.1 document and `http://127.0.0.1:3052/docs` is the browser UI for it. Both are read-only, load no remote assets, and follow the console's loopback-only exposure rules.
 
-Start or install the shared daemon with `@ours.network/cli` 2.7.0 before starting cowork. Cowork never embeds, starts, stops, or silently substitutes an ours daemon. It uses the SDK-standard shared selection (the default `~/.ours` daemon, `OURS_CONFIG`, or a coherent `OURS_PORT` plus `OURS_STATE_DIR` selection) and fails clearly when that daemon is unavailable or mismatched.
+Start or install the shared daemon with `@ours.network/cli` 2.7.2 before starting cowork. Cowork never embeds, starts, stops, or silently substitutes an ours daemon. It uses the SDK-standard shared selection (the default `~/.ours` daemon, `OURS_CONFIG`, or a coherent `OURS_PORT` plus `OURS_STATE_DIR` selection) and fails clearly when that daemon is unavailable or mismatched.
 
 The shared daemon retains application payload history outside its protocol packets: each identity has a `history.sqlite3` database and immutable content-addressed file blobs. Cowork authorizes unread metadata by authenticated CID, reads the corresponding persistent history or blob, durably archives the room item and its complete fan-out, and only then advances that exact SDK unread item. There is no packet-inbox fallback, defer queue, host outbox, or cross-store transaction.
 

package/dist/cli.js

@@ -4061,6 +4061,37 @@ var coerce = {
 };
 var NEVER = INVALID;
 
+// src/consumer-commands.ts
+var ConsumerCommandNameSchema = external_exports.string().max(128).regex(/^consumer\.[a-z0-9][a-z0-9.-]*[a-z0-9]$/);
+var ConsumerDefinitionSchema = external_exports.object({
+  name: ConsumerCommandNameSchema,
+  description: external_exports.string().min(1).max(1024),
+  input_schema: external_exports.record(external_exports.unknown()),
+  handler: external_exports.string().min(1).max(128)
+}).strict();
+var StoredConsumerDefinitionSchema = ConsumerDefinitionSchema.extend({
+  source: external_exports.enum(["rest", "local"]),
+  revision: external_exports.number().int().positive().safe()
+}).strict();
+var ConsumerConfigurationSchema = external_exports.object({
+  handlers: external_exports.array(external_exports.object({
+    id: external_exports.string().min(1).max(128),
+    url: external_exports.string().url(),
+    token_file: external_exports.string().min(1)
+  }).strict()).max(64),
+  definitions_file: external_exports.string().min(1).optional(),
+  timeout_ms: external_exports.number().int().min(100).max(3e4).default(5e3)
+}).strict();
+var MAX_CONSUMER_ARGUMENT_BYTES = 64 * 1024;
+var MAX_CONSUMER_RESPONSE_BYTES = 256 * 1024;
+var LocalFileSchema = external_exports.object({
+  version: external_exports.literal(1),
+  rooms: external_exports.array(external_exports.object({
+    room_id: external_exports.string().regex(/^[0-7][0-9a-hjkmnp-tv-z]{25}$/),
+    commands: external_exports.array(ConsumerDefinitionSchema).max(64)
+  }).strict()).max(256)
+}).strict();
+
 // src/config.ts
 var DIRECTORY_MODE = 448;
 var FILE_MODE = 384;
@@ -4068,6 +4099,7 @@ var NO_FOLLOW = nodeFs.constants.O_NOFOLLOW ?? 0;
 var CoworkConfigSchema = external_exports.object({
   version: external_exports.literal(1),
   stateDir: external_exports.string().min(1),
+  consumer_commands: ConsumerConfigurationSchema.optional(),
   rest: external_exports.object({
     enabled: external_exports.boolean(),
     port: external_exports.number().int().min(1).max(65535)
@@ -4115,6 +4147,7 @@ function loadConfig(env = process.env, io = {}) {
     return CoworkConfigSchema.parse({
       version: 1,
       stateDir: resolve(env.OURS_COWORK_STATE_DIR ?? file.stateDir),
+      ...file.consumer_commands === void 0 ? {} : { consumer_commands: file.consumer_commands },
       rest: {
         enabled: restPort === void 0 ? file.rest.enabled : true,
         port: restPort ?? file.rest.port
@@ -4289,6 +4322,41 @@ function lstatIfPresent(fs2, path) {
 
 // src/contracts.ts
 import { createHash } from "node:crypto";
+
+// src/command-names.ts
+var SHARED_ROOM_COMMANDS = [
+  "room.settings",
+  "room.briefing.role.set",
+  "room.briefing.role.delete",
+  "room.invite",
+  "room.accept",
+  "room.rebind",
+  "room.close",
+  "room.delete",
+  "room.participant.remove",
+  "room.revoke",
+  "room.recover",
+  "room.recover.confirm",
+  "room.show",
+  "room.participants",
+  "room.command.grants",
+  "room.command.role.grants",
+  "room.command.role.set",
+  "room.command.grant",
+  "room.command.revoke",
+  "room.history",
+  "room.message",
+  "room.say",
+  "room.role.rest.add",
+  "room.role.rest.remove"
+];
+var RUNTIME_COMMAND_NAMES = [
+  "list-members",
+  "remove-member",
+  ...SHARED_ROOM_COMMANDS
+];
+
+// src/contracts.ts
 var MAX_TEXT_BYTES = 262144;
 var MAX_FILE_BYTES = 2 * 1024 * 1024;
 var MAX_HISTORY_PAGE_BYTES = 3 * 1024 * 1024;
@@ -4312,7 +4380,7 @@ var LowerCrockfordUlidSchema = external_exports.string().regex(
   "must be a 26-character lowercase Crockford ULID"
 );
 var ContainerIdSchema = external_exports.string().regex(/^[0-9a-f]{64}$/i, "must be a 64-character hexadecimal CID").transform((value) => value.toUpperCase());
-var RuntimeCommandNameSchema = external_exports.enum(["list-members", "remove-member"]);
+var RuntimeCommandNameSchema = external_exports.union([external_exports.enum(RUNTIME_COMMAND_NAMES), ConsumerCommandNameSchema]);
 var RuntimeCommandGrantSchema = external_exports.object({
   caller_cid: ContainerIdSchema,
   command: RuntimeCommandNameSchema
@@ -4654,6 +4722,16 @@ var CurrentRoomSchema = external_exports.object({
   }),
   /** Operator-managed, default-deny grants for the room identity's runtime commands. */
   command_grants: external_exports.array(RuntimeCommandGrantSchema),
+  consumer_commands: external_exports.array(StoredConsumerDefinitionSchema).max(64).optional(),
+  consumer_commands_revision: external_exports.number().int().nonnegative().safe().optional(),
+  lifecycle_request: external_exports.object({
+    request_id: external_exports.string().min(1).max(256),
+    command: external_exports.enum(["room.close", "room.delete"]),
+    caller_cid: ContainerIdSchema,
+    accepted_at: Rfc3339Schema,
+    state: external_exports.enum(["pending", "failed", "completed"]),
+    error: external_exports.literal("lifecycle_failed").optional()
+  }).strict().optional(),
   /** Operator-managed command policy inherited by authenticated active seats of an exact role. */
   role_command_grants: external_exports.array(RuntimeRoleCommandGrantSchema).superRefine((grants, context) => {
     const seen = /* @__PURE__ */ new Set();
@@ -5155,9 +5233,9 @@ Room commands:
   participants <room-id>
   command-grants <room-id>
   role-command-grants <room-id>
-  role-command-set <room-id> --role <label> --commands <list-members,remove-member|none>
-  command-grant <room-id> <caller-cid> <list-members|remove-member>
-  command-revoke <room-id> <caller-cid> <list-members|remove-member>
+  role-command-set <room-id> --role <label> --commands <command,...|none>
+  command-grant <room-id> <caller-cid> <command>
+  command-revoke <room-id> <caller-cid> <command>
   history <room-id> [--after <seq>] [--limit <n>] [--view operator|participant]
   message <room-id> --text <text>
   say <room-id> --role <label> --text <text>
@@ -5353,8 +5431,8 @@ async function roomRequest(command, args) {
       const role = requiredFlag(parsed, "--role", "room role-command-set");
       const value = requiredFlag(parsed, "--commands", "room role-command-set");
       const commands = value === "none" ? [] : value.split(",");
-      if (new Set(commands).size !== commands.length || commands.some((item) => item !== "list-members" && item !== "remove-member")) {
-        usageError("--commands must be a unique comma-separated subset of list-members,remove-member or none");
+      if (new Set(commands).size !== commands.length || commands.some((item) => !RuntimeCommandNameSchema.safeParse(item).success)) {
+        usageError("--commands must be a unique comma-separated list of built-in command names or none");
       }
       return { method: "room.command.role.set", params: { room_id: roomId, role, commands } };
     }
@@ -5365,8 +5443,8 @@ async function roomRequest(command, args) {
         3,
         `room ${command}`
       );
-      if (runtimeCommand !== "list-members" && runtimeCommand !== "remove-member") {
-        usageError("runtime command must be list-members or remove-member");
+      if (!RuntimeCommandNameSchema.safeParse(runtimeCommand).success) {
+        usageError("runtime command must be a supported built-in command name");
       }
       return {
         method: command === "command-grant" ? "room.command.grant" : "room.command.revoke",