@volter/supercode-teams 0.2.125 → 0.2.127

package/README.md

@@ -132,3 +132,11 @@ enrollments).
 
 `limits.json` is read when the daemon starts: `maxAttachmentsPerPrincipal` (16),
 `protocolFloor` (2), `logRotateBytes` (16 MiB), `logKeep` (8).
+
+### RH2 agent DMs
+
+Share a session as its RH2 agent with `supercode teams sessions bind REF --room ROOM --agent PRINCIPAL --rh2 ORIGIN`.
+Only the session custodian can grant this binding. The returned `session` can be passed to RH2’s room-member door;
+no session-backed channel is created. The agent DM uses the exact resource `${ROOM}:dm:${PRINCIPAL}`.
+`unbind` accepts the same flags. `--conversation` remains available for existing grants; it is mutually exclusive
+with `--agent`. Opening a DM reads the existing session; sending a turn is a separate action.

package/bin/workspace.mjs

@@ -307,11 +307,11 @@ async function sessionsCommand(sub, command) {
   // A session view (RH2 ADR 0008): its owner lets a workplace Room's Conversation read this session with the tokens that
   // workplace signs. `bind` records it and prints what the workplace's own bind door takes; `unbind` removes it.
   if (sub === 'bind' || sub === 'unbind') {
-    only(flags, ['json', 'help', 'context', 'room', 'conversation', 'rh2']); requireArgs(rest, 1, 1, `sessions ${sub} REF --room ROOM --conversation CONVERSATION --rh2 ORIGIN`);
-    if (!flags.room || !flags.conversation || !flags.rh2) usage(`sessions ${sub} needs --room, --conversation and --rh2 (the workplace's origin)`);
-    const body = { issuer: new URL(String(flags.rh2)).origin, room: String(flags.room), conversation: String(flags.conversation) };
+    only(flags, ['json', 'help', 'context', 'room', 'agent', 'conversation', 'rh2']); requireArgs(rest, 1, 1, `sessions ${sub} REF --room ROOM --agent PRINCIPAL --rh2 ORIGIN`);
+    if (!flags.room || (!flags.agent && !flags.conversation) || (flags.agent && flags.conversation) || !flags.rh2) usage(`sessions ${sub} needs --room, --agent (or a legacy --conversation), and --rh2 (the workplace's origin)`);
+    const body = { issuer: new URL(String(flags.rh2)).origin, room: String(flags.room), conversation: flags.agent ? `${flags.room}:dm:${flags.agent}` : String(flags.conversation) };
     const bound = await command.client.request(sub === 'bind' ? 'POST' : 'DELETE', `${session.path}/view-bindings`, { body });
-    return output({ version: 1, context: scope(context), data: { teamsUrl: new URL(context.origin).origin, team: context.team_id, sessionId: bound.data.session_id, harness: bound.data.harness, principalId: context.principal_id, bindings: bound.data.bindings } });
+    return output({ version: 1, context: scope(context), data: { teamsUrl: new URL(context.origin).origin, team: context.team_id, sessionId: bound.data.session_id, harness: bound.data.harness, principalId: context.principal_id, ...(flags.agent ? { agentPrincipalId: String(flags.agent), session: { agentPrincipalId: String(flags.agent), teamsUrl: new URL(context.origin).origin, team: context.team_id, sessionId: bound.data.session_id, harness: bound.data.harness } } : {}), bindings: bound.data.bindings } });
   }
   if (sub === 'rename') { only(flags, ['json', 'help', 'context']); requireArgs(rest, 2, 2, 'sessions rename REF TITLE'); const descriptor = await session.descriptor(); return output(await command.client.request('PATCH', session.path, { body: { title: rest[1] }, ifMatch: descriptor.data.revision })); }
   if (sub === 'delete') { only(flags, ['json', 'help', 'context']); requireArgs(rest, 1, 1, 'sessions delete REF'); const descriptor = await session.descriptor(); await command.client.request('DELETE', session.path, { ifMatch: descriptor.data.revision }); return output({ version: 1, context: scope(context), data: null }); }

package/machine.mjs

@@ -534,11 +534,16 @@ export class TeamsMachine extends MachineCore {
     // Who typed it is noted before it is typed: a capture can read the session's new line before the door confirms
     // it (a loaded machine confirmed a frozen-then-resumed line after the line was captured, and it went up unnamed).
     // A refusal withdraws the note; an unconfirmed turn keeps it, as the line may well be in the session.
-    const note = { harness, session, text: request.text, at: Date.now(), source: { via: 'room', from: { principalId: principal ?? null, name: entry.name ?? null } } };
+    // Room context comes only from the server-authenticated claim. JSON quotes names as data,
+    // so a display name cannot introduce another header or masquerade as an instruction.
+    const text = entry.roomContext
+      ? `[Room ${JSON.stringify(entry.roomContext.name)} (${JSON.stringify(entry.roomContext.id)}); sender ${JSON.stringify(entry.name ?? entry.roomContext.sender)} (${JSON.stringify(entry.roomContext.sender)})]\n${request.text}`
+      : request.text;
+    const note = { harness, session, text, at: Date.now(), source: { via: 'room', from: { principalId: principal ?? null, name: entry.name ?? null } } };
     try { this.onTurn?.(note); } catch { /* naming is best-effort; the turn goes either way */ }
     this.#serveRequest('harness.v1.sessions.message', {
       locator: { harness, session_id: session, storage: { kind: 'file', path: '' } },
-      text: request.text,
+      text,
       from_name: entry.name ?? principal ?? 'a Room member',
       as_user: true,
     }, TURN_CONFIRM_MS).then((result) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/supercode-teams",
-  "version": "0.2.125",
+  "version": "0.2.127",
   "type": "module",
   "description": "A machine daemon serving this machine's doors, and a local or remote Teams server for shared session discovery, OpenTelemetry ingestion and access to enrolled machines.",
   "license": "MIT",