@volter/teams 0.2.28 → 0.2.29

package/machine-core.mjs

@@ -247,7 +247,7 @@ export class MachineCore extends EventEmitter {
     }
     const index = this.nextConnection++;
     // A delegated caller's claim also carries the name its workplace signed for it (who typed a turn).
-    const entry = { channel, admitted, principal: claim.principal, name: typeof claim.name === 'string' ? claim.name : null, roomContext: claim.roomContext ?? null, verify: () => this.#admitClaim(claim), localAdmission: () => admitFromGrants(claim, { custodianId: this.custodianId, grants: this.linkGrants }) };
+    const entry = { channel, admitted, principal: claim.principal, principalName: typeof claim.principal_name === 'string' ? claim.principal_name : null, name: typeof claim.name === 'string' ? claim.name : null, roomContext: claim.roomContext ?? null, verify: () => this.#admitClaim(claim), localAdmission: () => admitFromGrants(claim, { custodianId: this.custodianId, grants: this.linkGrants }) };
     this.connections.set(index, entry);
     stream.on('close', () => { this.connections.delete(index); this.connectionClosed(index); });
     this.log.append({ principal: entry.principal, cap: 'connect', target: '*', outcome: admitted.class, detail: 'server' });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/teams",
-  "version": "0.2.28",
+  "version": "0.2.29",
   "type": "module",
   "description": "Volter Teams, the neutral team plane: machine identity and daemon core, the local door and server link, admission from machine grants, product doors, and the Teams server's neutral routes (company RFC 0008).",
   "license": "MIT",

package/server/machine-link.mjs

@@ -73,13 +73,16 @@ async function claimFor(api, auth, machineId) {
   const membership = await api.store.one('SELECT active FROM memberships WHERE team_id=? AND principal_id=?', [auth.team_id, auth.principal_id]);
   if (!membership?.active) return null;
   const groups = auth.group_ids ?? [];
-  if (machine.custodian_id === auth.principal_id) return { principal: auth.principal_id, groups, custodian: true };
+  // The principal's name travels with its claim: the machine says who sent what came over this stream (a sender's
+  // identity is the link's, never a return address) without asking anyone.
+  const principal_name = (await api.store.one('SELECT display_name FROM principals WHERE id=?', [auth.principal_id]))?.display_name ?? null;
+  if (machine.custodian_id === auth.principal_id) return { principal: auth.principal_id, principal_name, groups, custodian: true };
   const subjects = [auth.principal_id, ...groups];
   const rows = await api.store.query(`SELECT id, revision FROM machine_grants WHERE team_id=? AND machine_id=? AND expires_at>? AND subject_id IN (${subjects.map(() => '?').join(',')}) ORDER BY id`, [auth.team_id, machineId, api.clock.nowMs(), ...subjects]);
   // Every member holds the team's standing mail grant (TEAM_MAIL_GRANT) besides their own.
   const held = [...rows, { id: TEAM_MAIL_GRANT, revision: 1 }];
   // Revisions let the machine notice a grant it holds has changed (rewritten, narrowed) and resync.
-  return { principal: auth.principal_id, groups: [...groups, teamSubject(auth.team_id)], grants: held.map((row) => row.id), revisions: Object.fromEntries(held.map((row) => [row.id, row.revision])) };
+  return { principal: auth.principal_id, principal_name, groups: [...groups, teamSubject(auth.team_id)], grants: held.map((row) => row.id), revisions: Object.fromEntries(held.map((row) => [row.id, row.revision])) };
 }
 
 /** Close every channel a member leaving the team, or a group losing a member or being deleted, leaves without its claimed authority. */