@volter/supercode-teams 0.2.126 → 0.2.128

package/machine.mjs

@@ -534,11 +534,16 @@ export class TeamsMachine extends MachineCore {
     // Who typed it is noted before it is typed: a capture can read the session's new line before the door confirms
     // it (a loaded machine confirmed a frozen-then-resumed line after the line was captured, and it went up unnamed).
     // A refusal withdraws the note; an unconfirmed turn keeps it, as the line may well be in the session.
-    const note = { harness, session, text: request.text, at: Date.now(), source: { via: 'room', from: { principalId: principal ?? null, name: entry.name ?? null } } };
+    // Room context comes only from the server-authenticated claim. JSON quotes names as data,
+    // so a display name cannot introduce another header or masquerade as an instruction.
+    const text = entry.roomContext
+      ? `[Room ${JSON.stringify(entry.roomContext.name)} (${JSON.stringify(entry.roomContext.id)}); sender ${JSON.stringify(entry.name ?? entry.roomContext.sender)} (${JSON.stringify(entry.roomContext.sender)})]\n${request.text}`
+      : request.text;
+    const note = { harness, session, text, at: Date.now(), source: { via: 'room', from: { principalId: principal ?? null, name: entry.name ?? null } } };
     try { this.onTurn?.(note); } catch { /* naming is best-effort; the turn goes either way */ }
     this.#serveRequest('harness.v1.sessions.message', {
       locator: { harness, session_id: session, storage: { kind: 'file', path: '' } },
-      text: request.text,
+      text,
       from_name: entry.name ?? principal ?? 'a Room member',
       as_user: true,
     }, TURN_CONFIRM_MS).then((result) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/supercode-teams",
-  "version": "0.2.126",
+  "version": "0.2.128",
   "type": "module",
   "description": "A machine daemon serving this machine's doors, and a local or remote Teams server for shared session discovery, OpenTelemetry ingestion and access to enrolled machines.",
   "license": "MIT",

package/server/harness-routes.mjs

@@ -13,7 +13,8 @@ import { captureDigest, captureMessages, handleOtlpRoute, sha256, validateArtifa
 import { handleCatalogEvents, handleSessionEvents, sessionNames } from './event-routes.mjs';
 import { exact } from '@volter/teams/server/request-json';
 import { MESSAGE_AT, OPEN_REVISION } from '@volter/teams/server/migrations';
-import { delegatedSessionOf, looksDelegated } from '@volter/teams/server/delegated';
+import { delegatedRoomNoticeOf, delegatedSessionOf, looksDelegated } from '@volter/teams/server/delegated';
+import { deliverSessionRoomNotice } from '@volter/teams/server/machine-link';
 import { renderSourceCollectorConfig } from './otlp/collector-config.mjs';
 import { attachmentActionRoute, createAttachment, liveGrantRoute, machineEffectRoute } from './effects.mjs';
 import { exportSessionRoute, operationRoute } from './exports.mjs';
@@ -26,6 +27,14 @@ function unverifiedSubject(token){try{return String(JSON.parse(Buffer.from(Strin
 
 async function preAuth({ api, req, res, path, requestId }) {
   let early;
+  if(req.method==='POST'&&(early=/^\/api\/v1\/teams\/([^/]+)\/sessions\/([^/]+)\/room-notices$/.exec(path))){
+    const access=await delegatedRoomNoticeOf(api,bearer(req.headers.authorization));
+    if(!access || access.teamId!==early[1] || access.sessionRef!==decodeURIComponent(early[2])) fail(401,'authentication_required','authentication required');
+    checkRate(api,`room-notices:${access.issuer}:${access.teamId}`,120,10);
+    const receipt=await deliverSessionRoomNotice(api,access);
+    send(res,200,{data:receipt},requestId);return true;
+  }
+
   // A session view (RH2 ADR 0008): a workplace page reads one session with a token its workplace signed for a Room and
   // Conversation, which reaches only a session its owner bound to them (session_view_bindings). A member's own
   // credential takes the ordinary routes below.