@plannotator/pi-extension 0.28.48 → 0.28.49

package/generated/tailnet-audience.ts

@@ -21,9 +21,12 @@
  *    address (every entry in 100.64.0.0/10 or fd7a:115c:a1e0::/48, so a local
  *    reverse proxy that passes a client's headers on cannot make a forged
  *    login the owner), and the login is the one that owns this machine
- *    (`tailscale status --json`, Self.UserID -> LoginName).
+ *    (`tailscale status --json`, Self.UserID -> LoginName), or, when
+ *    Tailscale names no owner (a tagged machine, or an untagged one whose
+ *    owner it does not report), one of the logins in `inboxTailscaleAllow`,
+ *    the rule the Inbox's `isOwnerRequest` follows.
  *  - `peer`: through serve and anything else (another login, a tagged device
- *    with no login, a funnel request, or an owner nobody could read).
+ *    with no login, a funnel request, or no owner named and no allowlist).
  *
  * The same marks the Inbox's window port refuses (#1867: a local reverse
  * proxy that sends only loopback `X-Forwarded-For` reads as local).
@@ -90,9 +93,13 @@ export function cameThroughTailscale(headers: Headers): boolean {
   return value !== null && value.split(",").map(forwardedAddress).some(isTailnetAddress);
 }
 
-/** Who a request is from, for a session whose machine is owned by `ownerLogin` (null: nobody could say). */
-export function tailnetAudience(headers: Headers, ownerLogin: string | null): TailnetAudience {
+/**
+ * Who a request is from, for a session whose owner is any of `ownerLogins`
+ * (`readTailnetOwners` in packages/server/session-tailnet.ts: the owner
+ * Tailscale names, else the allowlist). Empty: nobody is the owner.
+ */
+export function tailnetAudience(headers: Headers, ownerLogins: readonly string[]): TailnetAudience {
   if (!cameThroughTailscaleServe(headers)) return "local";
-  if (!ownerLogin || !forwardedForIsTailnet(headers)) return "peer";
-  return checkTailnetIdentity(headers, [normalizeTailnetLogin(ownerLogin)]).ok ? "owner" : "peer";
+  if (ownerLogins.length === 0 || !forwardedForIsTailnet(headers)) return "peer";
+  return checkTailnetIdentity(headers, ownerLogins.map(normalizeTailnetLogin)).ok ? "owner" : "peer";
 }

package/generated/ulid.ts

@@ -0,0 +1,21 @@
+// @generated — DO NOT EDIT. Source: packages/core/ulid.ts
+/**
+ * A ULID (48-bit millisecond time + 80 random bits, Crockford base32), so ids
+ * sort by creation time and a later sync can keep them as they are. The
+ * Inbox's ids (`msg_…`) and Shape's (`shp_…`) use it. No imports: Pi vendors it.
+ */
+const CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+
+export function ulid(now: number = Date.now()): string {
+  let time = Math.max(0, Math.floor(now));
+  let timePart = "";
+  for (let i = 0; i < 10; i++) {
+    timePart = CROCKFORD[time % 32] + timePart;
+    time = Math.floor(time / 32);
+  }
+  const bytes = new Uint8Array(16);
+  globalThis.crypto.getRandomValues(bytes);
+  let randomPart = "";
+  for (let i = 0; i < 16; i++) randomPart += CROCKFORD[bytes[i]! % 32];
+  return timePart + randomPart;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plannotator/pi-extension",
-  "version": "0.28.48",
+  "version": "0.28.49",
   "type": "module",
   "description": "Plannotator Pi extension - interactive plan review with annotations, annotate agent messages, and review code/PRs",
   "author": "backnotprop",