commonswarm 0.1.22 → 0.1.23

package/cswarm.cjs

@@ -13511,6 +13511,7 @@ __export(cli_exports, {
   listenerPermissionMode: () => listenerPermissionMode,
   listenerStatusJson: () => listenerStatusJson,
   renderRoster: () => renderRoster,
+  replyRefusalHint: () => replyRefusalHint,
   resolveDetachedClaudeExecutable: () => resolveDetachedClaudeExecutable,
   resolveDetachedCodexExecutable: () => resolveDetachedCodexExecutable,
   resolveTurnBudgetOrDefer: () => resolveTurnBudgetOrDefer
@@ -22162,15 +22163,8 @@ function createWorkspaceError(status, body) {
     return new CreateWorkspaceError(
       status,
       code,
-      /* D-067/D-075. This used to end "Archiving a workspace frees its slot; the CLI cannot archive
-       * one yet, so ask whoever operates this deployment." Both halves were dead ends. Archiving
-       * is unreachable from every surface — `archived_at` exists and nothing writes it — and on a
-       * self-serve deployment the reader IS the operator, so it named a person who does not exist
-       * to perform an action that does not exist.
-       *
-       * It now states the limit, does not offer a remedy that is unimplemented, and names the one
-       * route that does work: someone else's invitation, which is not capped. */
-      `${limit === null ? "You have already created as many workspaces as this account allows." : `You have already created ${limit} workspaces, which is the limit for one account.`} Workspaces cannot be removed yet, so this limit is a ceiling rather than a queue. Workspaces you were invited to do not count against it \u2014 a collaborator can still add you to theirs.`
+      /* Closing one live workspace now frees a slot; name the exact confirmed command. */
+      `${limit === null ? "You have already created as many workspaces as this account allows." : `You have already created ${limit} workspaces, which is the limit for one account.`} Close one with cswarm workspace close <full-id|exact-name> --confirm <same-selector>, then try again. Workspaces you were invited to do not count against it.`
     );
   }
   if (status === 403) {
@@ -22797,6 +22791,12 @@ var CONTENT_TYPES = /* @__PURE__ */ new Map([
   [".md", "text/markdown"],
   [".txt", "text/plain"],
   [".csv", "text/csv"],
+  // .html/.htm: a web/marketing team's deliverables (Fastio feedback 2026-08-19). Every
+  // download is served Content-Disposition: attachment (§5), never rendered inline, so HTML
+  // is no more dangerous than the .svg already permitted — the spec treats all downloads as
+  // untrusted attachments the consumer must not execute.
+  [".html", "text/html"],
+  [".htm", "text/html"],
   [".json", "application/json"],
   [".yaml", "application/yaml"],
   [".yml", "application/yaml"],
@@ -27730,6 +27730,7 @@ var DEFAULT_MEMBERSHIP_REVOKED = {
   message: "Your previously selected workspace is no longer available to this account. CommonSwarm cleared that saved selection."
 };
 var PROJECT_NOT_AVAILABLE = "That workspace is not available to this account. Run cswarm workspaces to see workspaces you can select.";
+var ARCHIVED_PROJECT_NOT_AVAILABLE = "That workspace is closed and cannot be selected. Run cswarm workspaces to see live workspaces you can select.";
 function compareText(left, right) {
   return left < right ? -1 : left > right ? 1 : 0;
 }
@@ -27767,8 +27768,8 @@ var WorkspaceResolutionError = class extends WorkspaceCliError {
 };
 var WorkspaceUnavailableError = class extends WorkspaceCliError {
   code = "project_not_available";
-  constructor() {
-    super(PROJECT_NOT_AVAILABLE);
+  constructor(message = PROJECT_NOT_AVAILABLE) {
+    super(message);
     this.name = "WorkspaceUnavailableError";
   }
   structured() {
@@ -27872,41 +27873,41 @@ function cloudWorkspaceDirectory(target2, fetcher = fetch) {
           "workspaces",
           {
             select: "workspace_id,name,archived_at",
+            archived_at: "is.null",
             order: "workspace_id.asc"
           },
           fetcher
         )
       ]);
-      const names = /* @__PURE__ */ new Map();
+      const roles = /* @__PURE__ */ new Map();
+      for (const row of membershipRows) {
+        const workspaceId2 = checkedUuid(row.workspace_id, "workspace_id");
+        roles.set(workspaceId2, checkedRole(row.role));
+      }
+      const result = [];
       for (const row of workspaceRows) {
         const workspaceId2 = checkedUuid(row.workspace_id, "workspace_id");
         const archivedAt = checkedNullableTimestamp(
           row.archived_at,
           "archived_at"
         );
-        names.set(workspaceId2, {
+        if (archivedAt !== null) continue;
+        const role = roles.get(workspaceId2);
+        if (!role) {
+          throw new Error(
+            "workspace read omitted the current user's live membership"
+          );
+        }
+        result.push({
+          workspace_id: workspaceId2,
           name: sanitizeDisplayLabel(
             checkedString(row.name, "workspace name"),
             "Unnamed workspace"
           ),
-          archived: archivedAt !== null
+          role,
+          archived: false
         });
       }
-      const result = membershipRows.map((row) => {
-        const workspaceId2 = checkedUuid(row.workspace_id, "workspace_id");
-        const project = names.get(workspaceId2);
-        if (!project) {
-          throw new Error(
-            "workspace read omitted a workspace for a live membership"
-          );
-        }
-        return {
-          workspace_id: workspaceId2,
-          name: project.name,
-          role: checkedRole(row.role),
-          archived: project.archived
-        };
-      });
       return sortWorkspaces(result);
     },
     async status(session, workspaceId2) {
@@ -27961,6 +27962,9 @@ function cloudWorkspaceDirectory(target2, fetcher = fetch) {
           you: userId === session.userId
         };
       });
+      if (!members.some((member) => member.you)) {
+        throw new WorkspaceUnavailableError();
+      }
       const memberNames = new Map(
         members.map((member) => [member.user_id, member.name])
       );
@@ -28086,6 +28090,32 @@ async function clearWorkspaceDefault(store2, userId, expectedWorkspaceId) {
     return true;
   });
 }
+async function updateWorkspaceDefaultAfterClose(store2, userId, closedWorkspaceId, workspaces) {
+  return await store2.withLock(async () => {
+    const current = await store2.readProfile();
+    if (current.userId !== userId || current.workspaceId !== closedWorkspaceId) {
+      return {
+        closedWasSelected: false,
+        nextWorkspace: null,
+        selectedWorkspaceId: current.userId === userId ? current.workspaceId : null
+      };
+    }
+    const nextWorkspace = sortWorkspaces(workspaces).find(
+      (workspace) => workspace.workspace_id !== closedWorkspaceId && !workspace.archived
+    ) ?? null;
+    await store2.writeProfile({
+      ...current,
+      workspaceId: nextWorkspace?.workspace_id ?? null,
+      principalId: null,
+      principalName: null
+    });
+    return {
+      closedWasSelected: true,
+      nextWorkspace,
+      selectedWorkspaceId: nextWorkspace?.workspace_id ?? null
+    };
+  });
+}
 function workspaceOverride(explicit, environmental) {
   if (explicit !== void 0) {
     if (!UUID_RE6.test(explicit)) {
@@ -28144,6 +28174,14 @@ async function resolveWorkspace(options) {
   throw new WorkspaceResolutionError(workspaces);
 }
 async function selectWorkspace(selector, workspaces, store2, userId) {
+  const selected = resolveWorkspaceSelector(selector, workspaces);
+  if (selected.archived) {
+    throw new WorkspaceUnavailableError(ARCHIVED_PROJECT_NOT_AVAILABLE);
+  }
+  await writeWorkspaceDefault(store2, userId, selected.workspace_id);
+  return selected;
+}
+function resolveWorkspaceSelector(selector, workspaces) {
   const sorted = sortWorkspaces(workspaces);
   let selected;
   if (UUID_RE6.test(selector)) {
@@ -28162,7 +28200,6 @@ async function selectWorkspace(selector, workspaces, store2, userId) {
     selected = matches[0];
   }
   if (!selected) throw new WorkspaceUnavailableError();
-  await writeWorkspaceDefault(store2, userId, selected.workspace_id);
   return selected;
 }
 function holderLabel(holder) {
@@ -28181,13 +28218,8 @@ function relativeExpiry(expiry, now = Date.now()) {
   const amount = relativeMagnitude(remaining);
   return remaining >= 0 ? `expires in ${amount}` : `expired ${amount} ago`;
 }
-var ARCHIVE_NOT_ENFORCED_CODE = "workspace_archive_not_enforced";
-var ARCHIVE_NOT_ENFORCED_MESSAGE = "Archiving a workspace does not restrict what members or their agents can do in it: an archived workspace stays selectable, and commands against it still succeed while your membership is live. Removing a workspace from this list means ending your membership, which this CLI cannot do \u2014 ask whoever runs the workspace.";
 function archiveKnownGaps() {
-  return [{
-    code: ARCHIVE_NOT_ENFORCED_CODE,
-    message: ARCHIVE_NOT_ENFORCED_MESSAGE
-  }];
+  return [];
 }
 function renderWorkspaces(workspaces, currentWorkspaceId) {
   if (workspaces.length === 0) {
@@ -28211,9 +28243,6 @@ function renderWorkspaces(workspaces, currentWorkspaceId) {
       "No workspace is selected. Run cswarm use <full-id|exact-name>."
     );
   }
-  if (workspaces.some((workspace) => workspace.archived)) {
-    lines.push(ARCHIVE_NOT_ENFORCED_MESSAGE);
-  }
   return lines.join("\n");
 }
 function renderStatus(options) {
@@ -36933,8 +36962,8 @@ var ACCEPTED_AGENT_CREDENTIAL_MESSAGES = [
   AGENT_CREDENTIAL_MESSAGE_D088
 ];
 function packageVersion() {
-  if ("0.1.22".length > 0) {
-    return "0.1.22";
+  if ("0.1.23".length > 0) {
+    return "0.1.23";
   }
   try {
     const value = JSON.parse(
@@ -37072,6 +37101,7 @@ Usage:
   cswarm invite [--url <url> --anon-key <key>] [--workspace-id <uuid>] --email <email>
   cswarm invite revoke [--url <url> --anon-key <key>] [--workspace-id <uuid>] --invitation-id <uuid> [--json]
   cswarm member remove <full-user-id|exact-name> --confirm <same-selector> [--url <url> --anon-key <key>] [--workspace-id <uuid>] [--json]
+  cswarm workspace close <full-id|exact-name> --confirm <same-selector> [--url <url> --anon-key <key>] [--json]
   cswarm accept --link-stdin [--name <name>] [--no-browser] [--json]
   cswarm accept <https://...#invite=...|cswarm://accept/...> [--name <name>] [--no-browser] [--json]  # unsafe: shell history/process list
   cswarm accept --invitation-token-stdin [--url <url> --anon-key <key>]
@@ -37100,6 +37130,7 @@ Credential selection for command/dogfood:
                             feedback      command only, nothing persisted     -- either form
                             listen start  persists durable state, rotates -- needs expires_at
                             token revoke  names what it revokes           -- needs token_id
+                            workspace close is human-session-only; it never accepts an agent token
 
 Found a bug or missing feature in cswarm itself? cswarm feedback sends it to the
 deployment's operators \u2014 agents are encouraged to report friction they hit.
@@ -37108,6 +37139,8 @@ Signals (intention sharing) accept the same credential selection. Agent mode
 never opens a browser or infers a human's saved workspace. Durations use a whole
 number plus m, h, or d (for example 90m, 24h, or 7d) and are capped at 30d.
 Place -- before signal text that itself begins with -- to stop option parsing.
+Signal text is at most 2000 characters and --about at most 500; a longer body is
+refused locally before any network call, so compose within the limit.
 
 listen start --turn-budget bounds ONE worker prompt turn (default 10m): how long
 the worker may think and use tools on a single message before the turn times out
@@ -37120,7 +37153,7 @@ TTL); a turn that lands just before a rotation can be clamped to the ~5m
 renewal lead, and if it times out there, durable delivery retries it on the
 fresh credential.
 
-Invite, legacy token accept, principal create/revoke, human token mint/revoke, link, and new require a
+Invite, legacy token accept, principal create/revoke, human token mint/revoke, link, new, and workspace close require a
 stored human login. Agent self-surrender of a token uses --agent-token-stdin and never takes the secret on argv. Invite-link accept signs in when needed, then accepts and
 registers one principal. Invitation links, agent credentials, and capability links
 appear only in fresh success responses.
@@ -37815,6 +37848,53 @@ async function runMember(args) {
 `);
   }
 }
+async function runWorkspace(args) {
+  args.assertShape([...TARGET_FLAGS, "confirm", "json"], 3);
+  if (args.positionals[1] !== "close") {
+    throw new UsageError(
+      `unknown workspace command: ${args.positionals[1] ?? "(missing)"}`
+    );
+  }
+  const selector = args.positionals[2];
+  if (args.required("confirm") !== selector) {
+    throw new Error(
+      "--confirm must exactly repeat the workspace selector; no request was sent"
+    );
+  }
+  const cloud = await target(args);
+  const human = await humanCredential(args, cloud);
+  const directory = cloudWorkspaceDirectory(cloud);
+  const projects = await directory.list(human);
+  const selected = resolveWorkspaceSelector(selector, projects);
+  const response = (await sendConnectWithPending(
+    new ThinCommandClient(cloud),
+    human,
+    selected.workspace_id,
+    { kind: "archive_workspace" }
+  )).response;
+  if (response.status !== "accepted") {
+    throw new Error(
+      `Workspace close was rejected: ${response.reason ?? "domain rejection"}. The workspace is still open.`
+    );
+  }
+  const { closedWasSelected, nextWorkspace, selectedWorkspaceId } = await updateWorkspaceDefaultAfterClose(
+    human.store,
+    human.userId,
+    selected.workspace_id,
+    projects
+  );
+  const message = nextWorkspace ? `Closed workspace ${selected.name} (${selected.workspace_id}). It is hidden for everyone, and ${nextWorkspace.name} (${nextWorkspace.workspace_id}) is now selected.` : closedWasSelected ? `Closed workspace ${selected.name} (${selected.workspace_id}). It is hidden for everyone. No live workspace remains, so the selected workspace was cleared.` : `Closed workspace ${selected.name} (${selected.workspace_id}). It is hidden for everyone. Your selected workspace was not changed.`;
+  const output = {
+    message,
+    status: response.status,
+    workspace_id: selected.workspace_id,
+    selected_workspace_id: selectedWorkspaceId,
+    command_event_ids: response.event_ids
+  };
+  if (args.has("json")) printJson(output);
+  else process.stdout.write(`${message}
+`);
+}
 async function runLegacyAccept(args) {
   const invitationToken = await invitationCredential(args);
   const cloud = await target(args);
@@ -38507,8 +38587,10 @@ function resolveTurnBudgetOrDefer(configuredBudgetMs, credentialExpiresAt, nowMs
   }
   return clampTurnBudgetToCredential(configuredBudgetMs, credentialExpiresAt, nowMs);
 }
+var SIGNAL_BODY_MAX = 2e3;
+var SIGNAL_ABOUT_MAX = 500;
 function signalText(value, label) {
-  const maximum = label === "body" ? 2e3 : 500;
+  const maximum = label === "body" ? SIGNAL_BODY_MAX : SIGNAL_ABOUT_MAX;
   if (value.length < (label === "body" ? 1 : 0) || value.length > maximum) {
     throw new Error(
       `${label === "body" ? "signal text" : "--about"} must be ${label === "body" ? "1.." : "at most "}${maximum} characters`
@@ -38767,6 +38849,10 @@ Check whether you are about to do the same work.
 `}`
   );
 }
+function replyRefusalHint(error) {
+  if (!(error instanceof CommandHttpError) || error.status !== 403) return null;
+  return "reply was refused (403). The most common cause is that the signal was not addressed to you \u2014 you cannot reply to your own ask; reply to the other party's signal, reach someone directly with cswarm ask --to <agent>, or post a channel-visible cswarm note. If you did receive that signal, the refusal is an authorization one instead: the credential may be revoked or expired, or it may not be a member of this workspace.";
+}
 async function runReply(args) {
   args.assertShape([
     ...TARGET_FLAGS,
@@ -38798,7 +38884,14 @@ async function runReply(args) {
     about: null,
     ...untilMs2 === void 0 ? {} : { until_ms: untilMs2 }
   };
-  const result = await postSignalCommand(cloud, credential, command2);
+  let result;
+  try {
+    result = await postSignalCommand(cloud, credential, command2);
+  } catch (error) {
+    const hint = replyRefusalHint(error);
+    if (hint !== null) throw new Error(hint);
+    throw error;
+  }
   const signal = result.response.signal;
   if (args.has("json")) {
     printJson({
@@ -40355,6 +40448,10 @@ async function main() {
     await runMember(args);
     return;
   }
+  if (verb === "workspace") {
+    await runWorkspace(args);
+    return;
+  }
   if (verb === "target") {
     await runTarget(args);
     return;
@@ -40500,6 +40597,7 @@ ${usage()}
   listenerPermissionMode,
   listenerStatusJson,
   renderRoster,
+  replyRefusalHint,
   resolveDetachedClaudeExecutable,
   resolveDetachedCodexExecutable,
   resolveTurnBudgetOrDefer

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "commonswarm",
-  "version": "0.1.22",
+  "version": "0.1.23",
   "description": "CommonSwarm CLI — coordination for teams where people and AI agents work side by side.",
   "bin": {
     "cswarm": "cswarm.cjs"