buckyos 0.7.124 → 0.7.126

package/README.md

@@ -289,3 +289,38 @@ npm dist-tag add buckyos@<已验证版本> latest
 
 回滚 dist-tag 不会改变已经安装的 BuckyOS system Tool；系统 Tool 只随 installer/updater 事务
 更新或回滚。
+
+### Session inbox addresses (breaking change)
+
+MsgCenter queue calls (`getNext`, `peekBox`, `listBoxByTime`) require `mailbox`
+in place of `owner`: `did:bns:alice/session-123` selects exactly that session;
+`did:bns:alice` selects only records without a session. Existing `session_id`
+values define the partitions, including automatically derived `dm:<peer DID>`
+and group sessions. Set `msg.to_session` (MsgObject v2) to address a chosen session;
+`msg.thread.topic` is only a semantic hint and never selects a session.
+
+```ts
+import { mailboxAddress } from 'buckyos'
+const record = await client.getNext({
+  mailbox: mailboxAddress('did:bns:alice', 'session-123'),
+  box_kind: 'INBOX',
+  lock_on_take: true,
+})
+```
+
+`listMailboxes(owner, boxKind)` lists inboxes with unread records for an authorized
+owner-wide router. `moveRecord(recordId, mailbox)` moves a record within one
+owner; `updateRecordSession` also moves its inbox. Both source and destination
+require write access. Omitting the session in `moveRecord` selects the default
+inbox. Record responses include their canonical `mailbox` address.
+
+RBAC resources are `obj://msg-center/inbox/<did>/<session_id>` (and analogous
+`sent`, `group_inbox`, `request_box` paths). Read access permits non-locking
+reads; consumption and updates require write access. Exact grants do not cover
+other sessions, the default inbox, owner-wide projections, or delivery queues.
+
+Use `mailboxResource(mailboxAddress(owner, sessionId), 'INBOX')` to construct
+RBAC policy keys. Resource encoding additionally escapes dots, percent signs,
+and pattern characters so `keyMatch3` cannot expand an exact session grant.
+For example, `did:web:agent.zone/approval.1` maps to
+`obj://msg-center/inbox/did:web:agent%2Ezone/approval%2E1`.

package/cli/dist/cli.mjs

@@ -4865,7 +4865,7 @@ function invalid(stage, message, entry) {
 function stableJsonDigest(value) {
   return sha256Bytes(new TextEncoder().encode(ndn.toCanonicalJsonString(value)));
 }
-const PACKAGE_VERSION = "0.7.124";
+const PACKAGE_VERSION = "0.7.126";
 const TOOL_VERSION = PACKAGE_VERSION;
 const SDK_VERSION = PACKAGE_VERSION;
 const PROTOCOL_VERSION = "1";
@@ -6328,6 +6328,7 @@ function createAppModule(dependencies = {}) {
     installCommand(dependencies),
     upgradeCommand(dependencies),
     uninstallCommand(dependencies),
+    cancelCommand$1(),
     lifecycleCommand("start", "Start an installed App"),
     lifecycleCommand("stop", "Stop an installed App"),
     restartCommand(),
@@ -6345,6 +6346,34 @@ function createAppModule(dependencies = {}) {
     })
   };
 }
+function cancelCommand$1() {
+  return {
+    verb: "cancel",
+    summary: "Cancel an installation or upgrade task and release its App mutation",
+    positionals: [{ name: "task_id", description: "Installation Task ID", required: true }],
+    options: [{
+      name: "force",
+      description: "Defer staging cleanup after cancellation",
+      type: "boolean"
+    }],
+    inputSchema: {
+      type: "object",
+      properties: { task_id: { type: "string", minLength: 1 }, force: { type: "boolean" } },
+      required: ["task_id"],
+      additionalProperties: false
+    },
+    outputSchema: OBJECT_OUTPUT$4,
+    resultSchemaVersion: 1,
+    access: { mode: "fixed", level: "write" },
+    asyncMode: "sync",
+    requiresSession: true,
+    examples: ["buckyos app cancel t-0123456789abcdef0123456789abcdef --force"],
+    handler: async (ctx, input) => await callControl(ctx, "apps.install.cancel", {
+      task_id: expectString$1(input, "task_id"),
+      force: input.force === true
+    })
+  };
+}
 function fetchCommand(dependencies) {
   return {
     verb: "fetch",