@ours.network/cowork 1.1.2 → 1.1.4

package/README.md

@@ -15,7 +15,7 @@ The localhost HTTP console has no authentication. Keep it bound to `127.0.0.1`;
 
 The same listener describes its own room management REST API: `http://127.0.0.1:3052/openapi.json` is the OpenAPI 3.1 document and `http://127.0.0.1:3052/docs` is the browser UI for it. Both are read-only, load no remote assets, and follow the console's loopback-only exposure rules.
 
-Start or install the shared daemon with `@ours.network/cli` 2.7.0 before starting cowork. Cowork never embeds, starts, stops, or silently substitutes an ours daemon. It uses the SDK-standard shared selection (the default `~/.ours` daemon, `OURS_CONFIG`, or a coherent `OURS_PORT` plus `OURS_STATE_DIR` selection) and fails clearly when that daemon is unavailable or mismatched.
+Start or install the shared daemon with `@ours.network/cli` 2.7.2 before starting cowork. Cowork never embeds, starts, stops, or silently substitutes an ours daemon. It uses the SDK-standard shared selection (the default `~/.ours` daemon, `OURS_CONFIG`, or a coherent `OURS_PORT` plus `OURS_STATE_DIR` selection) and fails clearly when that daemon is unavailable or mismatched.
 
 The shared daemon retains application payload history outside its protocol packets: each identity has a `history.sqlite3` database and immutable content-addressed file blobs. Cowork authorizes unread metadata by authenticated CID, reads the corresponding persistent history or blob, durably archives the room item and its complete fan-out, and only then advances that exact SDK unread item. There is no packet-inbox fallback, defer queue, host outbox, or cross-store transaction.
 

package/dist/cli.js

@@ -4061,6 +4061,37 @@ var coerce = {
 };
 var NEVER = INVALID;
 
+// src/consumer-commands.ts
+var ConsumerCommandNameSchema = external_exports.string().max(128).regex(/^consumer\.[a-z0-9][a-z0-9.-]*[a-z0-9]$/);
+var ConsumerDefinitionSchema = external_exports.object({
+  name: ConsumerCommandNameSchema,
+  description: external_exports.string().min(1).max(1024),
+  input_schema: external_exports.record(external_exports.unknown()),
+  handler: external_exports.string().min(1).max(128)
+}).strict();
+var StoredConsumerDefinitionSchema = ConsumerDefinitionSchema.extend({
+  source: external_exports.enum(["rest", "local"]),
+  revision: external_exports.number().int().positive().safe()
+}).strict();
+var ConsumerConfigurationSchema = external_exports.object({
+  handlers: external_exports.array(external_exports.object({
+    id: external_exports.string().min(1).max(128),
+    url: external_exports.string().url(),
+    token_file: external_exports.string().min(1)
+  }).strict()).max(64),
+  definitions_file: external_exports.string().min(1).optional(),
+  timeout_ms: external_exports.number().int().min(100).max(3e4).default(5e3)
+}).strict();
+var MAX_CONSUMER_ARGUMENT_BYTES = 64 * 1024;
+var MAX_CONSUMER_RESPONSE_BYTES = 256 * 1024;
+var LocalFileSchema = external_exports.object({
+  version: external_exports.literal(1),
+  rooms: external_exports.array(external_exports.object({
+    room_id: external_exports.string().regex(/^[0-7][0-9a-hjkmnp-tv-z]{25}$/),
+    commands: external_exports.array(ConsumerDefinitionSchema).max(64)
+  }).strict()).max(256)
+}).strict();
+
 // src/config.ts
 var DIRECTORY_MODE = 448;
 var FILE_MODE = 384;
@@ -4068,6 +4099,7 @@ var NO_FOLLOW = nodeFs.constants.O_NOFOLLOW ?? 0;
 var CoworkConfigSchema = external_exports.object({
   version: external_exports.literal(1),
   stateDir: external_exports.string().min(1),
+  consumer_commands: ConsumerConfigurationSchema.optional(),
   rest: external_exports.object({
     enabled: external_exports.boolean(),
     port: external_exports.number().int().min(1).max(65535)
@@ -4115,6 +4147,7 @@ function loadConfig(env = process.env, io = {}) {
     return CoworkConfigSchema.parse({
       version: 1,
       stateDir: resolve(env.OURS_COWORK_STATE_DIR ?? file.stateDir),
+      ...file.consumer_commands === void 0 ? {} : { consumer_commands: file.consumer_commands },
       rest: {
         enabled: restPort === void 0 ? file.rest.enabled : true,
         port: restPort ?? file.rest.port
@@ -4347,7 +4380,7 @@ var LowerCrockfordUlidSchema = external_exports.string().regex(
   "must be a 26-character lowercase Crockford ULID"
 );
 var ContainerIdSchema = external_exports.string().regex(/^[0-9a-f]{64}$/i, "must be a 64-character hexadecimal CID").transform((value) => value.toUpperCase());
-var RuntimeCommandNameSchema = external_exports.enum(RUNTIME_COMMAND_NAMES);
+var RuntimeCommandNameSchema = external_exports.union([external_exports.enum(RUNTIME_COMMAND_NAMES), ConsumerCommandNameSchema]);
 var RuntimeCommandGrantSchema = external_exports.object({
   caller_cid: ContainerIdSchema,
   command: RuntimeCommandNameSchema
@@ -4689,6 +4722,8 @@ var CurrentRoomSchema = external_exports.object({
   }),
   /** Operator-managed, default-deny grants for the room identity's runtime commands. */
   command_grants: external_exports.array(RuntimeCommandGrantSchema),
+  consumer_commands: external_exports.array(StoredConsumerDefinitionSchema).max(64).optional(),
+  consumer_commands_revision: external_exports.number().int().nonnegative().safe().optional(),
   lifecycle_request: external_exports.object({
     request_id: external_exports.string().min(1).max(256),
     command: external_exports.enum(["room.close", "room.delete"]),