@ours.network/messenger-server 1.0.31-nightly.12 → 1.0.31-nightly.14

package/README.md

@@ -409,3 +409,7 @@ The older mock walkthrough and its browser tests describe an earlier design stag
 ### Dedicated notification service
 
 Set `OURS_NOTIFICATIONS_ORIGIN` and a Messenger-scoped `OURS_NOTIFICATIONS_PRODUCER_TOKEN` to forward incoming messages/files to [ours-notifications](https://github.com/adapt-toolkit/ours-notifications). Both settings must be provided together. The canonical watcher durably queues notifications even without a local push binding, freezes projected content before its first HTTP attempt, and retries the same payload after outages/restarts. Keep the Messenger state directory across restarts. When configured, new events use the dedicated service; legacy pending push jobs may finish. Existing standalone push endpoints remain for compatibility.
+
+Workspace enrollment supports optional `preserveProfile: true` on its protected POST endpoint. This skips human profile creation/replacement (including an absent profile); root checks and the signed binding command remain mandatory. The protected enrollment-identity response advertises `preserveProfile: true` so clients can fail closed against older servers. Omitted/false keeps fresh-host account profile setup.
+
+Messenger may run as the Human root or as a permanent identity under it. For the latter, the enrollment-identity response also carries `rootCid`, the root the daemon describes for the bound identity; `POST /api/identity/profile` accepts both. Only a Messenger bound to the root itself signs the workspace binding on `POST /api/workspace/enroll`; for an identity under the root the caller obtains that signature from the root outside Messenger.

package/dist/chunks/{chunk-UBWX7QOC.js → chunk-XNYNQSPB.js}

@@ -38,7 +38,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 var define_MESSENGER_BUILD_INFO_default;
 var init_define_MESSENGER_BUILD_INFO = __esm({
   "<define:__MESSENGER_BUILD_INFO__>"() {
-    define_MESSENGER_BUILD_INFO_default = { name: "@ours.network/messenger-server", version: "1.0.31-nightly.12", sha: "e10c4e8733c42c146f9a97d981bc1f0f504560a3", dirty: true };
+    define_MESSENGER_BUILD_INFO_default = { name: "@ours.network/messenger-server", version: "1.0.31-nightly.14", sha: "472ad12fdb461e51398c29e8e224d12caca9a43e", dirty: true };
   }
 });
 

package/dist/chunks/{server-YZYMQRLZ.js → server-ML4SVL44.js}

@@ -10,7 +10,7 @@ import {
   publicEngineError,
   publicInternalError,
   reportFailure
-} from "./chunk-UBWX7QOC.js";
+} from "./chunk-XNYNQSPB.js";
 
 // node_modules/bn.js/lib/bn.js
 var require_bn = __commonJS({
@@ -20622,6 +20622,15 @@ function inlineBase64(body) {
   }
   return value;
 }
+function humanIdentity(value) {
+  if (value === null || typeof value !== "object") return void 0;
+  const identity = value;
+  if (identity.temporary !== false || typeof identity.cid !== "string") return void 0;
+  if (identity.isRoot === true) return {};
+  const rootCid = identity.rootCid;
+  if (identity.isRoot !== false || identity.described !== true || typeof identity.roleId !== "string" || !identity.roleId || typeof rootCid !== "string" || !/^[a-f0-9]{64}$/i.test(rootCid) || rootCid.toLowerCase() === identity.cid.toLowerCase()) return void 0;
+  return { rootCid };
+}
 function publicIdentity(value) {
   if (value === null || typeof value !== "object") return {};
   const identity = value;
@@ -21017,16 +21026,18 @@ var ROUTES = {
   // field on this result.
   "GET /api/identity": async ({ client, deps }) => ({ ...publicIdentity(await client.currentIdentity()), humanProfile: readHumanProfile(deps.config.stateDir, deps.identityCid) }),
   "POST /api/identity/profile": async ({ client, deps, body }) => {
-    const identity = await client.currentIdentity();
-    if (!identity.isRoot || identity.temporary) throw bad("Human profile requires the root identity");
+    if (!humanIdentity(await client.currentIdentity())) throw bad("Human profile requires the Human root or a permanent identity under it");
     return writeHumanProfile(deps.config.stateDir, deps.identityCid, { name: profileName(body.name), surname: profileName(body.surname) });
   },
-  // First-party setup operation: daemon signs the command using this bound root.
+  // Who the person is on this host. A Messenger that runs as the Human root can sign the workspace proof
+  // itself; one that runs as the person's own identity under that root names the root the daemon describes
+  // for it, and the proof is then signed by that root outside Messenger.
   "GET /api/workspace/enrollment-identity": async ({ client }) => {
-    const identity = await client.currentIdentity();
-    if (!identity.isRoot || identity.temporary) throw bad("Workspace proof requires the bound Human root");
-    return { cid: identity.cid };
+    const identity = await client.currentIdentity(), human = humanIdentity(identity);
+    if (!human) throw bad("Workspace proof requires the bound Human root or a permanent identity under it");
+    return human.rootCid === void 0 ? { cid: identity.cid, preserveProfile: true } : { cid: identity.cid, rootCid: human.rootCid, preserveProfile: true };
   },
+  // First-party setup operation: daemon signs the command using this bound root.
   "POST /api/workspace/enroll": async ({ client, deps, body }) => {
     const identity = await client.currentIdentity();
     if (!identity.isRoot || identity.temporary) throw bad("Workspace proof requires the bound Human root");
@@ -21034,15 +21045,16 @@ var ROUTES = {
     if (!/^[A-F0-9]{64}$/.test(serverCid) || !/^[A-Za-z0-9_-]{43}$/.test(str(body, "hostWorkspaceId"))) throw bad("Invalid workspace proof");
     const challenge = body.challenge;
     if (!challenge || !["nonce", "workspaceId", "accountId"].every((k3) => typeof challenge[k3] === "string" && /^[A-Za-z0-9_-]{43}$/.test(String(challenge[k3]))) || !Number.isFinite(challenge.expiresAt) || Number(challenge.expiresAt) <= Date.now() || Number(challenge.expiresAt) > Date.now() + 16 * 6e4) throw bad("Workspace challenge expired or invalid");
+    const preserveProfile = optBool(body, "preserveProfile") === true;
     let humanProfile;
-    try {
+    if (!preserveProfile) try {
       humanProfile = { name: profileName(body.name), surname: profileName(body.surname) };
     } catch {
       throw bad("Name and Surname require printable text up to 100 characters");
     }
     const invitation = str(body, "invitation");
     if (invitation.length > 8192) throw bad("Workspace invitation too large");
-    writeHumanProfile(deps.config.stateDir, deps.identityCid, humanProfile);
+    if (humanProfile) writeHumanProfile(deps.config.stateDir, deps.identityCid, humanProfile);
     const peer = await client.addContact({ invite: invitation });
     if (peer.cid.toUpperCase() !== serverCid) throw bad("Enrollment server identity mismatch");
     const contactDeadline = Date.now() + 1e4;

package/dist/cli.js

@@ -7,7 +7,7 @@ import {
   normalizeBasePath,
   operatorError,
   reportFailure
-} from "./chunks/chunk-UBWX7QOC.js";
+} from "./chunks/chunk-XNYNQSPB.js";
 
 // src/cli.ts
 init_define_MESSENGER_BUILD_INFO();
@@ -131,7 +131,7 @@ async function main() {
   }
   if (process.argv.length !== 3) throw new ConfigurationError("serve does not accept command-line options");
   const cfg = loadConfig();
-  const { start } = await import("./chunks/server-YZYMQRLZ.js");
+  const { start } = await import("./chunks/server-ML4SVL44.js");
   const handle = await start(cfg, BUILD_INFO);
   let closing = false;
   const shutdown = (signal) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/messenger-server",
-  "version": "1.0.31-nightly.12",
+  "version": "1.0.31-nightly.14",
   "description": "Self-hosted Messenger REST/SSE backend for one identity on a shared Ours daemon.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",
@@ -33,7 +33,7 @@
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "test:startup": "node --import tsx tests/startup-readiness.test.mjs",
     "test:runtime-catalog-candidate": "node --import tsx tests/runtime-command-catalog-reopen-e2e.test.mjs",
-    "test:offline": "for f in tests/notification-producer.test.mjs tests/base-path.test.mjs tests/build-epoch.test.mjs tests/owner-session.test.mjs tests/v1-runtime.test.mjs tests/typed-commands-core.test.mjs tests/shared-daemon-contract.test.mjs tests/room-envelope-matrix.test.mjs tests/bundle-smoke.test.mjs tests/build-metadata.test.mjs tests/production-security.test.mjs tests/conversation-page.test.mjs tests/media-response.test.mjs tests/html-preview-transform.test.mjs tests/html-preview-response.test.mjs tests/push-store.test.mjs tests/push-store-hardening.test.mjs tests/push-delivery.test.mjs tests/push-queue-saturation.test.mjs tests/events.test.mjs tests/watch-cursor.test.mjs tests/watch-reconcile.test.mjs tests/introduction-send-guard.test.mjs tests/sse-e2e.test.mjs tests/presence.test.mjs tests/static-hosting.test.mjs tests/room-preview.test.mjs; do echo \"# $f\"; node --import tsx \"$f\" || exit 1; done",
+    "test:offline": "for f in tests/workspace-profile-preservation.test.mjs tests/notification-producer.test.mjs tests/base-path.test.mjs tests/build-epoch.test.mjs tests/owner-session.test.mjs tests/v1-runtime.test.mjs tests/typed-commands-core.test.mjs tests/shared-daemon-contract.test.mjs tests/room-envelope-matrix.test.mjs tests/bundle-smoke.test.mjs tests/build-metadata.test.mjs tests/production-security.test.mjs tests/conversation-page.test.mjs tests/media-response.test.mjs tests/html-preview-transform.test.mjs tests/html-preview-response.test.mjs tests/push-store.test.mjs tests/push-store-hardening.test.mjs tests/push-delivery.test.mjs tests/push-queue-saturation.test.mjs tests/events.test.mjs tests/watch-cursor.test.mjs tests/watch-reconcile.test.mjs tests/introduction-send-guard.test.mjs tests/sse-e2e.test.mjs tests/presence.test.mjs tests/static-hosting.test.mjs tests/room-preview.test.mjs; do echo \"# $f\"; node --import tsx \"$f\" || exit 1; done",
     "test:loopback": "for f in tests/shared-daemon-e2e.test.mjs tests/typed-command-loopback-e2e.test.mjs tests/introduction-send.test.mjs tests/rest-e2e.test.mjs; do echo \"# $f\"; node --import tsx \"$f\" || exit 1; done",
     "test": "npm run build && npm run test:startup && npm run test:offline && npm run test:loopback"
   },