@volter/teams 0.1.45 → 0.1.47

package/browser-channel.d.ts

@@ -52,6 +52,13 @@ export type BrowserTurnAnswer =
  */
 export function sendBrowserTurn(channel: BrowserChannel, text: string, options?: { turnKey?: string }): Promise<BrowserTurnAnswer>;
 
+export interface MailHistoryEntry {
+  id: string; from: string; fromName: string; to: string; text: string; at: number;
+  direction: 'in' | 'out'; inReplyTo: string | null; delivery: string;
+}
+/** Read mailbox history without marking messages read. Requires observe on the bound session. */
+export function readBrowserMail(channel: BrowserChannel): Promise<MailHistoryEntry[]>;
+
 /** A pane's terminal stream. Events: `data` (text), `hello`, `notice`, `error-message`, `close`. */
 export interface BrowserPane extends ChannelEvents {
   write(text: string): void;

package/browser-channel.mjs

@@ -167,6 +167,21 @@ export async function sendBrowserTurn(channel, text, { turnKey } = {}) {
   });
 }
 
+/** Read one bound session's mailbox without consuming any messages. */
+export async function readBrowserMail(channel) {
+  const stream = await channel.open('mail', { request: { op: 'history' } });
+  return new Promise((resolve, reject) => {
+    let answer = '';
+    const timer = setTimeout(() => { stream.close(); reject(new Error('Mailbox read timed out')); }, 25_000);
+    stream.on('data', chunk => { answer += chunk; if (answer.length > 8_000_000) { stream.close(); reject(new Error('Mailbox response too large')); } });
+    stream.on('close', () => {
+      clearTimeout(timer);
+      try { const body = JSON.parse(answer); if (body.code !== 0) throw new Error(body.text || 'Mailbox unavailable'); resolve(body.rows); }
+      catch (error) { reject(error); }
+    });
+  });
+}
+
 /** A pane's terminal stream: 'data' (text), 'hello', 'notice', 'close'; write(text), resize(cols, rows), close(). */
 export async function attachBrowserPane(channel, { pane, mode = 'observe', cols = 120, rows = 40 }) {
   const stream = await channel.open('terminal', { pane, mode, cols, rows });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",

package/server/core.mjs

@@ -84,6 +84,14 @@ export async function maintain(api){const now=api.clock.nowMs();
     {sql:'UPDATE messages SET revision=(SELECT MIN(k.revision) FROM session_versions k WHERE k.team_id=messages.team_id AND k.session_id=messages.session_id AND k.revision>messages.revision AND k.revision<COALESCE(messages.until_revision,messages.revision+1)) WHERE team_id=? AND session_id=? AND revision=? AND EXISTS (SELECT 1 FROM session_versions k WHERE k.team_id=messages.team_id AND k.session_id=messages.session_id AND k.revision>messages.revision AND k.revision<COALESCE(messages.until_revision,messages.revision+1))',params:[team_id,session_id,revision]},
     ...['messages','session_artifacts','session_versions'].map(table=>({sql:`DELETE FROM ${table} WHERE team_id=? AND session_id=? AND revision=?`,params:[team_id,session_id,revision]})),
   ]);
+  // Retired versions release their native bundles. Keep every bundle still named by a version,
+  // continuation (including completed receipts), or in-flight capture, and leave a full day for uploads.
+  const orphaned=await api.store.query(`SELECT u.team_id,u.id FROM uploads u WHERE u.committed=1 AND u.created_at+86400000<=?
+    AND NOT EXISTS (SELECT 1 FROM session_artifacts a WHERE a.team_id=u.team_id AND a.upload_id=u.id)
+    AND NOT EXISTS (SELECT 1 FROM continuations c WHERE c.team_id=u.team_id AND instr(c.value_json,u.id)>0)
+    AND NOT EXISTS (SELECT 1 FROM captures c WHERE c.team_id=u.team_id AND c.state='staging' AND instr(c.begin_json,u.id)>0)
+    LIMIT 10`,[now]);
+  for(const upload of orphaned)await api.store.transaction([{sql:'DELETE FROM uploads WHERE team_id=? AND id=?',params:[upload.team_id,upload.id]}]);
   await api.store.transaction([
         {sql:'DELETE FROM cursors WHERE expires_at<=?',params:[now]},
         {sql:'DELETE FROM global_cursors WHERE expires_at<=?',params:[now]},
@@ -96,8 +104,8 @@ export async function maintain(api){const now=api.clock.nowMs();
         {sql:'INSERT OR IGNORE INTO capture_expiries(team_id,source_id,id,expired_at) SELECT team_id,source_id,id,? FROM uploads WHERE committed=0 AND created_at+86400000<=?',params:[now,now]},
         {sql:'DELETE FROM uploads WHERE committed=0 AND created_at+86400000<=?',params:[now]},
       ]).catch(()=>{});
-  const result={pruned_versions:stale.length,pruned_parts:parts.length,pruned_idempotency:expired.length,backlog:expired.length>=1000||stale.length>=VERSION_PRUNE_BATCH||parts.length>=PART_PRUNE_BATCH};
-  if(result.pruned_versions||result.pruned_parts||result.pruned_idempotency)console.log(`maintain: pruned ${result.pruned_idempotency} expired replay records, ${result.pruned_parts} parts, ${result.pruned_versions} versions${result.backlog?' (backlog)':''}`);
+  const result={pruned_versions:stale.length,pruned_parts:parts.length,pruned_idempotency:expired.length,pruned_uploads:orphaned.length,backlog:orphaned.length>=10||expired.length>=1000||stale.length>=VERSION_PRUNE_BATCH||parts.length>=PART_PRUNE_BATCH};
+  if(result.pruned_versions||result.pruned_parts||result.pruned_idempotency||result.pruned_uploads)console.log(`maintain: pruned ${result.pruned_uploads} unreachable bundles, ${result.pruned_idempotency} expired replay records, ${result.pruned_parts} parts, ${result.pruned_versions} versions${result.backlog?' (backlog)':''}`);
   return result;}
 /** Session versions `maintain` removes per run: small enough for one Durable Object alarm; a backlog runs again in seconds. */
 const VERSION_PRUNE_BATCH=20;

package/server/machine-link.mjs

@@ -212,7 +212,7 @@ async function delegatedChannel(api, teamId, machineId, token) {
 
 /**
  * A session-view token's channel (RH2 ADR 0008): the member's own browser types a turn into one session its owner
- * bound to the token's Room and Conversation. `control` scope only; the grant minted is `interact` on exactly that
+ * bound to the token's Room and Conversation. Both scopes can observe its mail; only `control` can interact with that
  * session (`session:<harness>/<native id>`) on the machine it runs on, for the token's life, and the claim carries
  * the member's name from the token. Anything else is refused as a session that does not exist.
  */
@@ -220,7 +220,7 @@ async function delegatedSessionChannel(api, teamId, sessionRef, token) {
   const unknown = { status: 404, code: 'not_found', message: 'session not found' };
   const access = await delegatedSessionOf(api, token);
   if (!access) return { status: 401, code: 'authentication_required', message: 'authentication required' };
-  if (access.teamId !== teamId || access.scope !== 'control' || access.sessionRef !== sessionRef) return unknown;
+  if (access.teamId !== teamId || !['view', 'control'].includes(access.scope) || access.sessionRef !== sessionRef) return unknown;
   const target = await boundSessionTarget(api, teamId, access);
   if (!target) return unknown;
   const now = api.clock.nowMs(), id = api.ids.next('grant'), principal = delegatedPrincipal(access);
@@ -229,7 +229,7 @@ async function delegatedSessionChannel(api, teamId, sessionRef, token) {
     { sql: 'SELECT 1 ok FROM machines WHERE team_id=? AND id=? AND revoked_at IS NULL', params: [teamId, target.machineId], code: 'not_found', status: 404, message: 'session not found' },
   ], [
     { sql: "DELETE FROM machine_grants WHERE team_id=? AND issuer_id LIKE 'delegated:%' AND expires_at<=?", params: [teamId, now] },
-    { sql: 'INSERT INTO machine_grants(team_id,id,machine_id,subject_id,caps_json,targets_json,issuer_id,created_at,expires_at) VALUES (?,?,?,?,?,?,?,?,?)', params: [teamId, id, target.machineId, principal, JSON.stringify(['interact']), JSON.stringify([`session:${target.harness}/${target.nativeId}`]), issuer, now, access.expiresAt] },
+    { sql: 'INSERT INTO machine_grants(team_id,id,machine_id,subject_id,caps_json,targets_json,issuer_id,created_at,expires_at) VALUES (?,?,?,?,?,?,?,?,?)', params: [teamId, id, target.machineId, principal, JSON.stringify(access.scope === 'control' ? ['observe', 'interact'] : ['observe']), JSON.stringify([`session:${target.harness}/${target.nativeId}`]), issuer, now, access.expiresAt] },
   ]).catch((error) => { if (error.code !== 'not_found') throw error; return null; });
   return { door: 'channel', teamId, machineId: target.machineId, auth: { kind: 'delegated', team_id: teamId, principal_id: principal, group_ids: [], grant_id: id, grant_issuer: issuer, expires_at: access.expiresAt, name: access.name } };
 }

package/session-follow.d.ts

@@ -33,6 +33,9 @@ export function followTeamSession(options: FollowTeamSessionOptions): { stop():
 /** A message another session sent this one, from its envelope: its sender and body, or null for an ordinary turn. */
 export function peerMessage(text: string): { name: string; address: string; body: string } | null;
 
+/** Overlay actual envelopes, deduplicating copies already delivered into the native transcript. */
+export function withMail<Entry extends { id: string; ts: number | null; mail?: { id: string } }>(transcript: Entry[], rows: import('./browser-channel.js').MailHistoryEntry[], options?: { agentName?: string }): Array<Entry | { id: string; role: 'notice'; text: string; ts: number; truncated: boolean; mail: { id: string; from: string; to: string; direction: 'in' | 'out'; inReplyTo?: string | null } }>;
+
 export function personImage(seed?: string): string;
 export function agentImage(seed: string): string;
 

package/session-follow.mjs

@@ -83,7 +83,7 @@ export function peerMessage(text) {
   const attributes = (tag) => Object.fromEntries([...tag.matchAll(/([\w-]+)="([^"]*)"/g)].map((m) => [m[1], m[2]]));
   const own = attributes(inner[1]), outer = attributes(opens[0][1]);
   const body = text.slice(inner.index + inner[0].length, close).trim();
-  return { name: own['from-name'] || outer['from-name'] || own.from || outer.from || 'Another session', address: own.from || outer.from || '', body };
+  return { id: own.id || outer.id || null, name: own['from-name'] || outer['from-name'] || own.from || outer.from || 'Another session', address: own.from || outer.from || '', body };
 }
 
 /** A person's picture: the brand's person placeholder, seeded; an empty seed is its one standard anonymous face. */
@@ -109,12 +109,17 @@ export function withPeople(transcript, messages, { agentName = null, sessionId =
   const people = transcript.map((entry) => {
     if (entry.role === 'assistant') return { ...entry, actor: { id: sessionId, ...(agentName ? { name: agentName } : {}), image: agent(sessionId), kind: 'agent' } };
     if (entry.role !== 'user') return entry;
+    const automated = /^\s*<(hook_prompt|supercode-notice)\b[^>]*>([\s\S]*)<\/\1>\s*$/.exec(entry.text);
+    // This exact legacy wake string is emitted by mail_route::CODEX_WAKE. Do
+    // not infer automation from general wording in a person's own message.
+    const legacyWake = entry.text.trim() === 'You have unread supercode messages. Read them with: supercode message inbox';
+    if (automated || legacyWake) return { ...entry, role: 'notice', code: 'automation', text: `${automated?.[1] === 'hook_prompt' ? 'Hook' : 'Mailbox'} notification: ${automated ? automated[2].trim() : entry.text.trim()}` };
     // A harness's delivery notice about a message is a compact system line, not a person's turn.
     if (/^\s*\[Cross-session [a-z ]*notice\]/i.test(entry.text)) return { ...entry, role: 'notice', text: entry.text.trim().split('\n')[0] };
     const peer = peerMessage(entry.text);
     if (peer) {
       const seed = peer.address.startsWith('sc:') ? peer.address : peer.name;
-      return { ...entry, text: peer.body, actor: { id: seed, name: peer.name, image: agent(seed), kind: 'agent' }, context: [{ id: `${entry.id}:envelope`, kind: 'envelope', label: 'Delivered by supercode', detail: entry.text }] };
+      return { ...entry, text: peer.body, mail: { id: peer.id || entry.id, from: peer.name, to: agentName || 'This session', direction: 'in' }, actor: { id: seed, name: peer.name, image: agent(seed), kind: 'agent' }, context: [{ id: `${entry.id}:envelope`, kind: 'envelope', label: 'Delivered by supercode', detail: entry.text }] };
     }
     const metadata = byTime.get(entry.ts) ?? {};
     const name = metadata.source_name || null;
@@ -132,6 +137,22 @@ export function withPeople(transcript, messages, { agentName = null, sessionId =
   });
 }
 
+/** Overlay real mail on the native transcript without rewriting native messages.
+ * Stable envelope IDs deduplicate harness-delivered copies. Neither rendering
+ * nor expanding an envelope changes its mailbox state. */
+export function withMail(transcript, rows, { agentName = 'This session' } = {}) {
+  const mail = rows.map(row => ({ id: `mail:${row.id}`, role: 'notice', text: row.text, ts: row.at, truncated: false,
+    mail: { id: row.id, from: row.fromName || row.from, to: row.direction === 'in' ? agentName : row.to,
+      direction: row.direction, inReplyTo: row.inReplyTo } }));
+  const result = transcript.filter(entry => !entry.mail || !rows.some(row => row.id === entry.mail.id || row.id.startsWith(entry.mail.id)));
+  // Keep native tool/result ordering intact (some native entries have no time).
+  for (const entry of mail.sort((a, b) => a.ts - b.ts)) {
+    const index = result.findIndex(item => Number.isFinite(item.ts) && item.ts > entry.ts);
+    result.splice(index < 0 ? result.length : index, 0, entry);
+  }
+  return result;
+}
+
 const SOURCES = { 'claude-code': 'claude_code', codex: 'codex', gemini: 'gemini', goose: 'goose', grok: 'grok', opencode: 'opencode', pi: 'pi' };
 
 /** A team session's captured messages (their values, oldest first) as the harness SDK's normalized session, for supercode-ui's projection. */