@volter/supercode-teams 0.2.124 → 0.2.126

package/README.md

@@ -132,3 +132,11 @@ enrollments).
 
 `limits.json` is read when the daemon starts: `maxAttachmentsPerPrincipal` (16),
 `protocolFloor` (2), `logRotateBytes` (16 MiB), `logKeep` (8).
+
+### RH2 agent DMs
+
+Share a session as its RH2 agent with `supercode teams sessions bind REF --room ROOM --agent PRINCIPAL --rh2 ORIGIN`.
+Only the session custodian can grant this binding. The returned `session` can be passed to RH2’s room-member door;
+no session-backed channel is created. The agent DM uses the exact resource `${ROOM}:dm:${PRINCIPAL}`.
+`unbind` accepts the same flags. `--conversation` remains available for existing grants; it is mutually exclusive
+with `--agent`. Opening a DM reads the existing session; sending a turn is a separate action.

package/bin/workspace.mjs

@@ -307,11 +307,11 @@ async function sessionsCommand(sub, command) {
   // A session view (RH2 ADR 0008): its owner lets a workplace Room's Conversation read this session with the tokens that
   // workplace signs. `bind` records it and prints what the workplace's own bind door takes; `unbind` removes it.
   if (sub === 'bind' || sub === 'unbind') {
-    only(flags, ['json', 'help', 'context', 'room', 'conversation', 'rh2']); requireArgs(rest, 1, 1, `sessions ${sub} REF --room ROOM --conversation CONVERSATION --rh2 ORIGIN`);
-    if (!flags.room || !flags.conversation || !flags.rh2) usage(`sessions ${sub} needs --room, --conversation and --rh2 (the workplace's origin)`);
-    const body = { issuer: new URL(String(flags.rh2)).origin, room: String(flags.room), conversation: String(flags.conversation) };
+    only(flags, ['json', 'help', 'context', 'room', 'agent', 'conversation', 'rh2']); requireArgs(rest, 1, 1, `sessions ${sub} REF --room ROOM --agent PRINCIPAL --rh2 ORIGIN`);
+    if (!flags.room || (!flags.agent && !flags.conversation) || (flags.agent && flags.conversation) || !flags.rh2) usage(`sessions ${sub} needs --room, --agent (or a legacy --conversation), and --rh2 (the workplace's origin)`);
+    const body = { issuer: new URL(String(flags.rh2)).origin, room: String(flags.room), conversation: flags.agent ? `${flags.room}:dm:${flags.agent}` : String(flags.conversation) };
     const bound = await command.client.request(sub === 'bind' ? 'POST' : 'DELETE', `${session.path}/view-bindings`, { body });
-    return output({ version: 1, context: scope(context), data: { teamsUrl: new URL(context.origin).origin, team: context.team_id, sessionId: bound.data.session_id, harness: bound.data.harness, principalId: context.principal_id, bindings: bound.data.bindings } });
+    return output({ version: 1, context: scope(context), data: { teamsUrl: new URL(context.origin).origin, team: context.team_id, sessionId: bound.data.session_id, harness: bound.data.harness, principalId: context.principal_id, ...(flags.agent ? { agentPrincipalId: String(flags.agent), session: { agentPrincipalId: String(flags.agent), teamsUrl: new URL(context.origin).origin, team: context.team_id, sessionId: bound.data.session_id, harness: bound.data.harness } } : {}), bindings: bound.data.bindings } });
   }
   if (sub === 'rename') { only(flags, ['json', 'help', 'context']); requireArgs(rest, 2, 2, 'sessions rename REF TITLE'); const descriptor = await session.descriptor(); return output(await command.client.request('PATCH', session.path, { body: { title: rest[1] }, ifMatch: descriptor.data.revision })); }
   if (sub === 'delete') { only(flags, ['json', 'help', 'context']); requireArgs(rest, 1, 1, 'sessions delete REF'); const descriptor = await session.descriptor(); await command.client.request('DELETE', session.path, { ifMatch: descriptor.data.revision }); return output({ version: 1, context: scope(context), data: null }); }
@@ -701,7 +701,14 @@ async function connectorCommand(verb, { flags, rest, output, client, context, te
       if (!serviceBin) unsupported('--install requires invocation through the native supercode CLI');
       const serviceEnv = { ...process.env, SUPERCODE_TEAMS_ENTRY: fileURLToPath(new URL('./teams.mjs', import.meta.url)) };
       // Refuse source-backed installs before Windows stops the running connector.
-      execFileSync(serviceBin, ['__teams-connector-service', 'validate', contextName, path, context.server_id, context.team_id], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], env: serviceEnv });
+      try {
+        execFileSync(serviceBin, ['__teams-connector-service', 'validate', contextName, path, context.server_id, context.team_id], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], env: serviceEnv });
+      } catch (error) {
+        // In particular, an older native CLI may not have the validation door.
+        // Its support-report child must not keep a refused Windows install alive.
+        await core.close();
+        throw error;
+      }
       // Ending a Windows task ends only the console host it started, never the connector under it, so the task
       // would refuse its new run while the old connector went on: the running one is asked to stop first.
       if (process.platform === 'win32') await stopRunningConnector(saved);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/supercode-teams",
-  "version": "0.2.124",
+  "version": "0.2.126",
   "type": "module",
   "description": "A machine daemon serving this machine's doors, and a local or remote Teams server for shared session discovery, OpenTelemetry ingestion and access to enrolled machines.",
   "license": "MIT",