@volter/teams 0.2.14 → 0.2.16

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.2.14",
+  "version": "0.2.16",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",

package/server/agent-sessions.mjs

@@ -139,6 +139,21 @@ export async function agentSessionRoute(ctx){
     const receipt=await sendAgentMail(api,auth,decodeURIComponent(match[1]),body.text,req.headers['idempotency-key']);
     await send(res,200,result(api,auth,receipt),requestId);return true;
   }
+  if((match=/^\/machines\/([^/]+)\/agent-sessions$/.exec(sub))&&req.method==='POST'){
+    // A session this machine captured is declared its agent's by the machine itself, from the agent its launch named
+    // (the session's environment): the machine's custodian holds the session, so it records the lineage when it manages
+    // the agent, exactly as a declaration through /agents/{id}/sessions does.
+    // `main` is the launch's (SUPERCODE_AGENT_MAIN, chosen by the launcher): the custodian may set it through
+    // /agents/{id}/sessions already, so the machine acting for its custodian gains no authority by carrying it.
+    if(auth.kind!=='machine'||auth.machine_id!==match[1])fail(403,'forbidden','the owning machine declares its sessions\' agents');
+    const body=await parseJson(req);exact(body,['session','agent','main']);
+    if(typeof body.session!=='string'||typeof body.agent!=='string'||body.main!==undefined&&typeof body.main!=='boolean')fail(400,'invalid_request','session, agent and optional main boolean are required');
+    const agent=await api.store.one('SELECT * FROM agents WHERE team_id=? AND id=?',[auth.team_id,body.agent]);
+    if(!agent)fail(404,'not_found','agent not found');
+    if(!await manageableAgent(api,auth,agent))fail(403,'forbidden','only the agent\'s custodian, parent or sponsor declares its sessions');
+    const {session,guards:machineGuards}=await machineProfileSession(api,auth,body.session);
+    await declareOwnership(ctx,agent,session,{main:body.main},machineGuards);return true;
+  }
   if((match=/^\/machines\/([^/]+)\/session-profiles$/.exec(sub))&&req.method==='POST'){
     if(auth.kind!=='machine'||auth.machine_id!==match[1])fail(403,'forbidden','the owning machine reports resolved profiles');
     const body=await parseJson(req);exact(body,['session','profile','observed_at','observation_id']);
@@ -203,6 +218,12 @@ export async function agentSessionRoute(ctx){
   const body=await parseJson(req);exact(body,['session','main','starter_session']);
   if(typeof body.session!=='string'||body.main!==undefined&&typeof body.main!=='boolean')fail(400,'invalid_request','session reference and optional main boolean are required');
   const session=await api.store.authorizedSession({teamId:auth.team_id,principalId:auth.principal_id,credentialId:auth.credential_id,ref:body.session,now});
+  await declareOwnership(ctx,agent,session,body,[]);return true;
+}
+/** One session declared as one agent's: the session's custodian, who manages the agent, records it (rule 1). */
+async function declareOwnership(ctx,agent,session,body,extraGuards){
+  const {api,res,auth,requestId,send,result,guardedMutation}=ctx;
+  const now=api.clock.nowMs();
   if(session.custodian_id!==auth.principal_id)fail(403,'forbidden','only your own session can be declared');
   const old=await api.store.one('SELECT * FROM agent_sessions WHERE team_id=? AND session_id=?',[auth.team_id,session.id]);
   if(old?.agent_id&&old.agent_id!==agent.id)fail(409,'conflict','a session already owned by an agent cannot change identity');
@@ -221,6 +242,6 @@ export async function agentSessionRoute(ctx){
   // The main session is an Agent field (ontology Agent.main_session): its change is the agent's change too.
   if(main&&agent.main_session_id!==session.id)statements.push(publication(api,auth,'agent.changed',agent.id,{...data.agent,revision:agent.revision+1},now));
   statements.push(stmt('UPDATE teams SET auth_epoch=auth_epoch+1 WHERE id=?',auth.team_id),publish(api,auth,session.id,data,now));
-  await guardedMutation(api,res,auth,[...memberGuards(auth,now),ownerGuard(auth,session),...standing,...await managementGuards(api,auth,agent),revisionGuard(auth.team_id,session.id,old)],statements,{status:old?200:201,body:result(api,auth,data),targetId:session.id});
-  send(res,old?200:201,result(api,auth,data),requestId);return true;
+  await guardedMutation(api,res,auth,[...memberGuards(auth,now),ownerGuard(auth,session),...standing,...await managementGuards(api,auth,agent),revisionGuard(auth.team_id,session.id,old),...extraGuards],statements,{status:old?200:201,body:result(api,auth,data),targetId:session.id});
+  send(res,old?200:201,result(api,auth,data),requestId);
 }

package/server/http.mjs

@@ -67,7 +67,8 @@ export function createHttpHandler(api){return async(req,res)=>{const requestId=a
   if(req.method!=='GET')res._auditRecord={teamId:auth.team_id,actorId:auth.principal_id,act:auth.act??[],operation:`${req.method} ${path}`};
   if(['machine','ingest'].includes(auth.kind)){
     // a machine credential also publishes its own boards' events (the connector follows `workflow events`, D138 step 4)
-    const machineDoor=auth.kind==='machine'&&(sub==='/machines/events'||sub==='/event-sources'||/^\/event-sources\/[^/]+\/events$/.test(sub)||/^\/machines\/[^/]+\/configuration$/.test(sub)||sub===`/machines/${auth.machine_id}/session-profiles`||sub.startsWith(`/machines/${auth.machine_id}/agent-closures`)||sub===`/machines/${auth.machine_id}/heartbeat`||sub.startsWith(`/machines/${auth.machine_id}/effects`)||new RegExp(`^/machines/${auth.machine_id}/attachments/[^/]+(?:/frames)?$`).test(sub));
+    // and declares the agent each of its sessions' launch named (agent-sessions, D138 step 5)
+    const machineDoor=auth.kind==='machine'&&(sub==='/machines/events'||sub==='/event-sources'||/^\/event-sources\/[^/]+\/events$/.test(sub)||/^\/machines\/[^/]+\/configuration$/.test(sub)||sub===`/machines/${auth.machine_id}/session-profiles`||sub===`/machines/${auth.machine_id}/agent-sessions`||sub.startsWith(`/machines/${auth.machine_id}/agent-closures`)||sub===`/machines/${auth.machine_id}/heartbeat`||sub.startsWith(`/machines/${auth.machine_id}/effects`)||new RegExp(`^/machines/${auth.machine_id}/attachments/[^/]+(?:/frames)?$`).test(sub));
     const sourceDoor=sub.startsWith(`/sources/${auth.source_id}/captures`)||sub.startsWith(`/sources/${auth.source_id}/uploads`);
     if(!machineDoor&&!sourceDoor)fail(403,'forbidden','credential kind cannot use this operation');
   }