khala-cli 0.4.2 → 0.4.4

package/dist/{chunk-46PTKRZC.mjs → chunk-PJ3E3IVH.mjs}

@@ -3,14 +3,14 @@ import {
   ensureHelper,
   helperPaths,
   readHelperFile
-} from "./chunk-YP45XTOH.mjs";
+} from "./chunk-LHAMBQK7.mjs";
 import {
   parseChannelLink,
   resolveLocalOwnerName
-} from "./chunk-2OO725IZ.mjs";
+} from "./chunk-MZS7XFMC.mjs";
 import {
   KHALA_AGENT_VERSION
-} from "./chunk-MHZWR4A3.mjs";
+} from "./chunk-7CVU5OZ7.mjs";
 import {
   LOCAL_AGENT_DEVICE_PREFIX,
   LOCAL_IDLE_EXIT_MS,
@@ -35,37 +35,41 @@ import {
   newLocalEventId,
   newLocalRoomId,
   normalizeInitials
-} from "./chunk-BZ53MZEE.mjs";
+} from "./chunk-OS2JLDL7.mjs";
+import {
+  bundle
+} from "./chunk-ZRFXZK72.mjs";
+import "./chunk-5GLTKWJ5.mjs";
+import {
+  CHANNEL_EVENT_TYPE,
+  decodeChannelEvent,
+  encodeChannelEvent,
+  memberRenameContent
+} from "./chunk-P5CP32X2.mjs";
 import {
   StateError,
   ensureStateDir,
   readJson,
   writeJsonAtomic
-} from "./chunk-B5BFL7OD.mjs";
-import "./chunk-5GLTKWJ5.mjs";
+} from "./chunk-XEYKJMZL.mjs";
 import {
-  CHANNEL_EVENT_TYPE,
   DEFAULT_LISTENING_MODE,
-  HARNESSES,
   LISTENING_MODE_COMMAND_TYPE,
   LISTENING_MODE_MEMBER_KEY,
-  agentConfirmPagePath,
-  decodeChannelEvent,
   decodeListeningMode,
   decodeListeningModeCommand,
+  memberListeningMode
+} from "./chunk-AUJEUKVM.mjs";
+import {
+  HARNESSES,
+  agentConfirmPagePath,
   decodeWith,
-  encodeChannelEvent,
-  memberListeningMode,
-  memberRenameContent,
   object,
   utf8Length,
   validAgentRejoinSecret,
   validAgentSessionId
-} from "./chunk-N6LMHR7P.mjs";
-import {
-  bundle
-} from "./chunk-RW3DXWNC.mjs";
-import "./chunk-A3LJU4JA.mjs";
+} from "./chunk-SN3STAO2.mjs";
+import "./chunk-ZKDDKUUA.mjs";
 
 // src/local/cli.ts
 import { setTimeout as sleepDefault } from "node:timers/promises";
@@ -173,6 +177,8 @@ async function openLocalStore(input) {
         if (decoded.ok && decoded.value.roomId === roomId && decoded.value.seq > lastSeq(channel)) indexEvent(channel, decoded.value);
       }
       if (channel.events[0]?.type !== "m.room.create") continue;
+      const names = await readJson(path.join(channel.dir, "names.json"));
+      if (names?.v === 1 && typeof names.owner === "string" && checkName(names.owner, "username").ok) channel.ownerName = names.owner;
       const secrets = decodeChannelSecrets(await readJson(path.join(channel.dir, "secrets.json")));
       channel.secrets = secrets.ok ? secrets.value : emptySecrets();
       register(channel);
@@ -254,7 +260,7 @@ async function openLocalStore(input) {
       participantId: userId,
       ownerId: LOCAL_OWNER_ID,
       deviceId: human ? LOCAL_OWNER_DEVICE_ID : LOCAL_AGENT_DEVICE_PREFIX + userId.slice(7, 15),
-      displayName: human ? owner2.username : content.displayname,
+      displayName: human ? channel.ownerName ?? owner2.username : content.displayname,
       kind: content.kind,
       membership: content.membership,
       ...!human ? {
@@ -290,11 +296,13 @@ async function openLocalStore(input) {
       lastTs: channel.events.at(-1).ts,
       preview: message ? message.content.body : null,
       ...message ? { lastSender: { userId: message.sender, displayName: member(channel, message.sender)?.displayName ?? message.sender } } : {},
+      // `since` orders who held a name first in this channel, for the per-channel name prompt.
       members: members(channel).map((m) => ({
         userId: m.userId,
         displayName: m.displayName,
         kind: m.kind,
-        ...m.harness !== void 0 ? { harness: m.harness } : {}
+        ...m.harness !== void 0 ? { harness: m.harness } : {},
+        since: channel.lastMember.get(m.userId).event.ts
       }))
     };
   }
@@ -472,6 +480,29 @@ async function openLocalStore(input) {
       }
       return result;
     },
+    ownerChannelName: (roomId) => channels.get(roomId)?.ownerName,
+    setOwnerChannelName: (roomId, name) => enqueue(async () => {
+      const channel = requireChannel(roomId);
+      const before = member(channel, LOCAL_OWNER_USER_ID);
+      const file = path.join(channel.dir, "names.json");
+      if (name === null) await fs.rm(file, { force: true });
+      else await writeJsonAtomic(file, { v: 1, owner: name });
+      if (name === null) delete channel.ownerName;
+      else channel.ownerName = name;
+      const after = member(channel, LOCAL_OWNER_USER_ID);
+      if (!before || !after || before.displayName === after.displayName) {
+        bump();
+        return null;
+      }
+      const event = await writeEvent(channel, {
+        type: "m.room.member",
+        sender: LOCAL_OWNER_USER_ID,
+        content: { user: LOCAL_OWNER_USER_ID, membership: before.membership, displayname: after.displayName, kind: "human" }
+      });
+      bump();
+      fire(channel.waiters);
+      return structuredClone(event);
+    }),
     owner: () => structuredClone(owner2),
     setOwner: (next) => {
       const owned = structuredClone(next);
@@ -520,8 +551,8 @@ var mime = {
 };
 function respond(res, result) {
   if (res.destroyed || res.writableEnded) return;
-  for (const [key, value] of Object.entries(result.headers ?? {})) {
-    if (!key.toLowerCase().startsWith("access-control-")) res.setHeader(key, value);
+  for (const [key2, value] of Object.entries(result.headers ?? {})) {
+    if (!key2.toLowerCase().startsWith("access-control-")) res.setHeader(key2, value);
   }
   res.setHeader("cache-control", "no-store");
   res.setHeader("x-content-type-options", "nosniff");
@@ -546,14 +577,14 @@ function readBody(req, signal) {
     const cleanup = () => {
       req.off("data", data);
       req.off("end", end);
-      req.off("error", fail5);
+      req.off("error", fail6);
       signal.removeEventListener("abort", abort);
     };
-    const fail5 = (err) => {
+    const fail6 = (err) => {
       cleanup();
       reject(err);
     };
-    const abort = () => fail5(new Error("client_disconnected"));
+    const abort = () => fail6(new Error("client_disconnected"));
     const data = (chunk) => {
       size += chunk.length;
       if (size > LOCAL_BODY_LIMIT_BYTES) {
@@ -573,7 +604,7 @@ function readBody(req, signal) {
     };
     req.on("data", data);
     req.on("end", end);
-    req.on("error", fail5);
+    req.on("error", fail6);
     signal.addEventListener("abort", abort, { once: true });
     if (signal.aborted) abort();
   });
@@ -730,17 +761,17 @@ function createHelperServer(options) {
     listen() {
       if (closing) return Promise.reject(new Error("server_closed"));
       return listenPromise ??= new Promise((resolve2, reject) => {
-        const fail5 = (err) => {
+        const fail6 = (err) => {
           cancelListen = void 0;
           reject(err);
         };
         cancelListen = () => {
-          server.off("error", fail5);
+          server.off("error", fail6);
           reject(new Error("server_closed"));
         };
-        server.once("error", fail5);
+        server.once("error", fail6);
         server.listen({ host: "127.0.0.1", port: options.port }, () => {
-          server.off("error", fail5);
+          server.off("error", fail6);
           cancelListen = void 0;
           const address = server.address();
           if (!address || typeof address === "string") return reject(new Error("invalid_address"));
@@ -775,9 +806,23 @@ function createHelperServer(options) {
 
 // src/local/routes/agent-join.ts
 import { createHash as createHash2, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
+
+// ../contracts/src/m1/channel-names.ts
+var key = (name) => name.trim().toLowerCase();
+function takenNames(names) {
+  return new Set([...names].map(key));
+}
+function freeAgentName(username, harness, taken) {
+  const used = takenNames(taken);
+  let n = 1;
+  while (n < 1e3 && used.has(key(defaultAgentName(username, harness, n)))) n++;
+  return defaultAgentName(username, harness, n);
+}
+
+// src/local/routes/agent-join.ts
 var sha256hex = (value) => createHash2("sha256").update(value).digest("hex");
 var b64 = (bytes) => Buffer.from(bytes).toString("base64url");
-var fail = (status, error2) => ({ status, json: { error: error2 } });
+var fail2 = (status, error2) => ({ status, json: { error: error2 } });
 function safeEqual(a, b) {
   const left = Buffer.from(a), right = Buffer.from(b);
   return left.length === right.length && timingSafeEqual2(left, right);
@@ -807,34 +852,31 @@ function agentJoinRoutes() {
   async function create(req, _params, ctx) {
     try {
       prune(ctx);
-      if (typeof req.body !== "object" || req.body === null || Array.isArray(req.body)) return fail(400, "invalid_link");
+      if (typeof req.body !== "object" || req.body === null || Array.isArray(req.body)) return fail2(400, "invalid_link");
       const body = req.body;
-      if (!Object.hasOwn(body, "link") || Object.keys(body).some((key) => !["link", "harness", "label", "sessionId", "rejoinSecret"].includes(key))) return fail(400, "invalid_link");
-      if (typeof body.link !== "string" || !parseChannelLink(body.link)) return fail(400, "invalid_link");
-      if (Object.hasOwn(body, "sessionId") && !validAgentSessionId(body.sessionId)) return fail(400, "invalid_link");
-      if (Object.hasOwn(body, "rejoinSecret") && !validAgentRejoinSecret(body.rejoinSecret)) return fail(400, "invalid_link");
+      if (!Object.hasOwn(body, "link") || Object.keys(body).some((key2) => !["link", "harness", "label", "sessionId", "rejoinSecret"].includes(key2))) return fail2(400, "invalid_link");
+      if (typeof body.link !== "string" || !parseChannelLink(body.link)) return fail2(400, "invalid_link");
+      if (Object.hasOwn(body, "sessionId") && !validAgentSessionId(body.sessionId)) return fail2(400, "invalid_link");
+      if (Object.hasOwn(body, "rejoinSecret") && !validAgentRejoinSecret(body.rejoinSecret)) return fail2(400, "invalid_link");
       const harness = body.harness;
-      if (!HARNESSES.includes(harness)) return fail(400, "invalid_harness");
+      if (!HARNESSES.includes(harness)) return fail2(400, "invalid_harness");
       const url = new URL(body.link);
-      if (url.origin !== ctx.origin && url.origin !== ctx.origin.replace("://127.0.0.1:", "://localhost:")) return fail(404, "link_unavailable");
+      if (url.origin !== ctx.origin && url.origin !== ctx.origin.replace("://127.0.0.1:", "://localhost:")) return fail2(404, "link_unavailable");
       const token = url.pathname.slice("/join/".length);
-      if (!/^[A-Za-z0-9_-]{43}$/u.test(token)) return fail(404, "link_unavailable");
+      if (!/^[A-Za-z0-9_-]{43}$/u.test(token)) return fail2(404, "link_unavailable");
       const username = ctx.store.owner().username;
-      if (!checkName(defaultAgentName(username, harness, 2), "agent").ok) return fail(503, "unavailable");
+      if (!checkName(defaultAgentName(username, harness, 2), "agent").ok) return fail2(503, "unavailable");
       return await queue(async () => {
         const link = await ctx.store.consumeLink(token);
-        if (!link || !ctx.store.hasChannel(link.roomId)) return fail(404, "link_unavailable");
+        if (!link || !ctx.store.hasChannel(link.roomId)) return fail2(404, "link_unavailable");
         const roomId = link.roomId;
         const sessionKey = body.sessionId === void 0 || body.rejoinSecret === void 0 ? void 0 : sha256hex(JSON.stringify([harness, body.sessionId, body.rejoinSecret]));
         const previous = sessionKey ? ctx.store.memberForSession(roomId, sessionKey) : void 0;
-        const taken = new Set(ctx.store.members(roomId).map((member) => member.displayName.toLowerCase()));
-        let n = 1;
-        while (taken.has(defaultAgentName(username, harness, n).toLowerCase())) n++;
-        const checked = checkName(defaultAgentName(username, harness, n), "agent");
-        if (!checked.ok) return fail(503, "unavailable");
+        const checked = checkName(freeAgentName(username, harness, ctx.store.members(roomId).map((member) => member.displayName)), "agent");
+        if (!checked.ok) return fail2(503, "unavailable");
         let userId = previous?.userId ?? newLocalAgentUserId(ctx.random(4));
         for (let attempt = 0; attempt < 5 && !previous && ctx.store.channelOfMember(userId) !== void 0; attempt++) userId = newLocalAgentUserId(ctx.random(4));
-        if (!previous && ctx.store.channelOfMember(userId) !== void 0) return fail(503, "unavailable");
+        if (!previous && ctx.store.channelOfMember(userId) !== void 0) return fail2(503, "unavailable");
         const deviceId = "KH_LOCAL_" + userId.slice("@agent-".length, -":local".length);
         const accessToken = b64(ctx.random(LOCAL_TOKEN_BYTES));
         await ctx.store.append(roomId, {
@@ -865,13 +907,13 @@ function agentJoinRoutes() {
         return { status: 201, json: result };
       });
     } catch {
-      return fail(503, "unavailable");
+      return fail2(503, "unavailable");
     }
   }
   async function poll(req, _params, ctx) {
     prune(ctx);
     const entry = authenticate(req, ctx);
-    if (!entry) return fail(404, "not_found");
+    if (!entry) return fail2(404, "not_found");
     if (entry.state === "confirmed" && ctx.now() >= entry.expiresAt) {
       ctx.joins.delete(entry.joinId);
       return { status: 200, json: { state: "expired" } };
@@ -883,8 +925,8 @@ function agentJoinRoutes() {
   async function ready(req, _params, ctx) {
     prune(ctx);
     const entry = authenticate(req, ctx);
-    if (!entry) return fail(404, "not_found");
-    if (entry.state === "confirmed") return fail(409, "not_confirmed");
+    if (!entry) return fail2(404, "not_found");
+    if (entry.state === "confirmed") return fail2(409, "not_confirmed");
     entry.state = "ready";
     return { status: 204 };
   }
@@ -896,7 +938,7 @@ function agentJoinRoutes() {
 }
 
 // src/local/routes/rooms.ts
-var fail2 = (status, error2) => ({ status, json: { error: error2 } });
+var fail3 = (status, error2) => ({ status, json: { error: error2 } });
 function serial2() {
   let tail = Promise.resolve();
   return (fn) => {
@@ -909,18 +951,18 @@ function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
 }
 function resolve(req, params, ctx, need) {
-  if (req.auth.kind === "none") return fail2(401, "unauthorized");
+  if (req.auth.kind === "none") return fail3(401, "unauthorized");
   const userId = req.auth.kind === "owner" ? LOCAL_OWNER_USER_ID : req.auth.userId;
   let roomId;
   try {
     roomId = decodeURIComponent(params[0]);
   } catch {
-    return fail2(404, "not_found");
+    return fail3(404, "not_found");
   }
-  if (!ctx.store.hasChannel(roomId)) return fail2(404, "not_found");
-  if (req.auth.kind === "agent" && req.auth.roomId !== roomId) return fail2(403, "not_member");
+  if (!ctx.store.hasChannel(roomId)) return fail3(404, "not_found");
+  if (req.auth.kind === "agent" && req.auth.roomId !== roomId) return fail3(403, "not_member");
   const member = ctx.store.member(roomId, userId);
-  if (!member || need === "present" && member.membership === "leave" || need === "joined" && member.membership !== "join") return fail2(403, "not_member");
+  if (!member || need === "present" && member.membership === "leave" || need === "joined" && member.membership !== "join") return fail3(403, "not_member");
   return { userId, kind: req.auth.kind, roomId, member };
 }
 var announcementTxn = (event) => `local.join.${event.eventId.slice(1)}`;
@@ -972,7 +1014,7 @@ function roomRoutes() {
         const caller = resolve(req, params, ctx, need);
         return "status" in caller ? caller : await handle(req, params, ctx, caller);
       } catch {
-        return fail2(503, "unavailable");
+        return fail3(503, "unavailable");
       }
     }
   });
@@ -989,7 +1031,7 @@ function roomRoutes() {
       }
     })),
     route("POST", /^\/api\/local\/rooms\/([^/]+)\/join$/u, "present", async (req, params, ctx) => {
-      if (req.body !== void 0 && (!isPlainObject(req.body) || Object.keys(req.body).length > 0)) return fail2(400, "invalid_request");
+      if (req.body !== void 0 && (!isPlainObject(req.body) || Object.keys(req.body).length > 0)) return fail3(400, "invalid_request");
       return enqueue(async () => {
         const caller = resolve(req, params, ctx, "present");
         if ("status" in caller) return caller;
@@ -1015,13 +1057,13 @@ function roomRoutes() {
             txnId: announcementTxn(joined)
           });
         }
-        return event ? { status: 200, json: { seq: event.seq, ts: event.ts } } : fail2(503, "unavailable");
+        return event ? { status: 200, json: { seq: event.seq, ts: event.ts } } : fail3(503, "unavailable");
       });
     }),
     route("GET", /^\/api\/local\/rooms\/([^/]+)\/events$/u, "joined", async (req, params, ctx, caller) => {
       const rawAfter = req.query.get("after") ?? "0";
       const rawWait = req.query.get("wait") ?? "0";
-      if (!/^\d{1,15}$/u.test(rawAfter) || !/^\d{1,2}$/u.test(rawWait) || Number(rawWait) > LOCAL_LONG_POLL_MAX_S) return fail2(400, "invalid_request");
+      if (!/^\d{1,15}$/u.test(rawAfter) || !/^\d{1,2}$/u.test(rawWait) || Number(rawWait) > LOCAL_LONG_POLL_MAX_S) return fail3(400, "invalid_request");
       const after = Number(rawAfter);
       const wait = Number(rawWait);
       if (req.signal.aborted) return { status: 200, json: { events: [], next: after } };
@@ -1043,7 +1085,7 @@ function roomRoutes() {
     route("GET", /^\/api\/local\/rooms\/([^/]+)\/messages$/u, "joined", async (req, _params, ctx, caller) => {
       const before = req.query.get("before");
       const limit = req.query.get("limit") ?? "50";
-      if (before !== null && !/^\$[A-Za-z0-9_-]{1,128}$/u.test(before) || !/^\d{1,3}$/u.test(limit) || Number(limit) < 1 || Number(limit) > 100) return fail2(400, "invalid_request");
+      if (before !== null && !/^\$[A-Za-z0-9_-]{1,128}$/u.test(before) || !/^\d{1,3}$/u.test(limit) || Number(limit) < 1 || Number(limit) > 100) return fail3(400, "invalid_request");
       return { status: 200, json: ctx.store.history(caller.roomId, before ?? void 0, Number(limit)) };
     }),
     route("POST", /^\/api\/local\/rooms\/([^/]+)\/send$/u, "joined", async (req, params, ctx) => {
@@ -1051,16 +1093,16 @@ function roomRoutes() {
         const r = object(req.body, "", ["txnId", "type", "content"]);
         return { txnId: r.field("txnId"), type: r.field("type"), content: r.field("content") };
       });
-      if (!decoded.ok) return fail2(400, "invalid_request");
+      if (!decoded.ok) return fail3(400, "invalid_request");
       const { txnId, type, content } = decoded.value;
-      if (typeof txnId !== "string" || !/^[A-Za-z0-9._-]{1,64}$/u.test(txnId) || type !== "m.room.message" && type !== "com.khala.event.v1" || !isPlainObject(content)) return fail2(400, "invalid_request");
-      if (utf8Length(JSON.stringify(content)) > 32768) return fail2(413, "payload_too_large");
+      if (typeof txnId !== "string" || !/^[A-Za-z0-9._-]{1,64}$/u.test(txnId) || type !== "m.room.message" && type !== "com.khala.event.v1" || !isPlainObject(content)) return fail3(400, "invalid_request");
+      if (utf8Length(JSON.stringify(content)) > 32768) return fail3(413, "payload_too_large");
       let stored = content;
       if (type === "m.room.message") {
-        if (content["msgtype"] !== "m.text" && content["msgtype"] !== "m.notice" || typeof content["body"] !== "string" || content["body"].length < 1 || content["body"].length > 8e3) return fail2(400, "invalid_request");
+        if (content["msgtype"] !== "m.text" && content["msgtype"] !== "m.notice" || typeof content["body"] !== "string" || content["body"].length < 1 || content["body"].length > 8e3) return fail3(400, "invalid_request");
       } else {
         const event = decodeChannelEvent(content);
-        if (!event.ok) return fail2(400, "invalid_request");
+        if (!event.ok) return fail3(400, "invalid_request");
         stored = { ...event.value };
       }
       return enqueue(async () => {
@@ -1079,12 +1121,12 @@ function roomRoutes() {
       try {
         target = decodeURIComponent(params[1]);
       } catch {
-        return fail2(400, "invalid_request");
+        return fail3(400, "invalid_request");
       }
-      if (caller.kind !== "agent" || target !== caller.userId) return fail2(409, "conflict");
+      if (caller.kind !== "agent" || target !== caller.userId) return fail3(409, "conflict");
       const body = decodeWith(() => object(req.body, "", ["listeningMode"]).field("listeningMode"));
       const mode = decodeListeningMode(body.ok ? body.value : void 0);
-      if (!body.ok || !mode.ok) return fail2(400, "invalid_request");
+      if (!body.ok || !mode.ok) return fail3(400, "invalid_request");
       return enqueue(async () => {
         const current = resolve(req, params, ctx, "joined");
         if ("status" in current) return current;
@@ -1102,7 +1144,7 @@ function roomRoutes() {
 // src/local/routes/owner.ts
 var ID = /^[A-Za-z0-9._-]{1,64}$/u;
 var USER = /^@[^\s:]+:\S+$/u;
-var fail3 = (status, error2) => ({ status, json: { error: error2 } });
+var fail4 = (status, error2) => ({ status, json: { error: error2 } });
 function serial3() {
   let tail = Promise.resolve();
   return (work) => {
@@ -1112,8 +1154,8 @@ function serial3() {
   };
 }
 function owner(req, adminOnly) {
-  if (req.auth.kind === "none") return fail3(401, "unauthorized");
-  if (req.auth.kind !== "owner" || adminOnly && req.auth.via !== "admin") return fail3(403, "forbidden");
+  if (req.auth.kind === "none") return fail4(401, "unauthorized");
+  if (req.auth.kind !== "owner" || adminOnly && req.auth.via !== "admin") return fail4(403, "forbidden");
   return null;
 }
 function plainObject(value) {
@@ -1157,7 +1199,7 @@ function ownerRoutes(options = {}) {
         }
         return await (options2.serial ? queue(() => handler(req, params, ctx)) : handler(req, params, ctx));
       } catch {
-        return fail3(503, "unavailable");
+        return fail4(503, "unavailable");
       }
     } };
   }
@@ -1165,27 +1207,27 @@ function ownerRoutes(options = {}) {
     route("GET", /^\/api\/local\/channels$/u, async (req, _params, { store }) => {
       const since = req.query.get("since");
       const wait = req.query.get("wait") ?? "0";
-      if (since !== null && !/^\d{1,15}$/u.test(since) || !/^\d{1,2}$/u.test(wait) || Number(wait) > LOCAL_LONG_POLL_MAX_S) return fail3(400, "invalid_request");
+      if (since !== null && !/^\d{1,15}$/u.test(since) || !/^\d{1,2}$/u.test(wait) || Number(wait) > LOCAL_LONG_POLL_MAX_S) return fail4(400, "invalid_request");
       if (since !== null && Number(since) === store.revision() && Number(wait) > 0) await store.waitForRevision(Number(since), Number(wait) * 1e3, req.signal);
       return { status: 200, json: { revision: store.revision(), channels: store.listChannels() } };
     }),
     route("GET", /^\/api\/local\/channels\/by-operation\/([^/]+)$/u, async (_req, params, { store }) => {
       const id = decodeParam(params[0]);
-      if (id === null || !ID.test(id)) return fail3(404, "not_found");
+      if (id === null || !ID.test(id)) return fail4(404, "not_found");
       const roomId = store.findByOperation(id);
-      return roomId === void 0 ? fail3(404, "not_found") : { status: 200, json: { roomId } };
+      return roomId === void 0 ? fail4(404, "not_found") : { status: 200, json: { roomId } };
     }),
     route("GET", /^\/api\/local\/channels\/([^/]+)$/u, async (_req, params, { store }) => {
       const roomId = channelParam(params[0], store);
       const summary = roomId === null ? void 0 : store.channelSummary(roomId);
-      return summary === void 0 ? fail3(404, "not_found") : { status: 200, json: summary };
+      return summary === void 0 ? fail4(404, "not_found") : { status: 200, json: summary };
     }),
     route("POST", /^\/api\/local\/channels$/u, async (req, _params, ctx) => {
       const body = req.body;
-      if (!plainObject(body) || !Object.hasOwn(body, "name") || Object.keys(body).some((key) => key !== "name" && key !== "operationId") || typeof body.name !== "string") return fail3(400, "invalid_request");
+      if (!plainObject(body) || !Object.hasOwn(body, "name") || Object.keys(body).some((key2) => key2 !== "name" && key2 !== "operationId") || typeof body.name !== "string") return fail4(400, "invalid_request");
       const name = body.name.trim();
-      if ([...name].length < 1 || [...name].length > 64 || /[\u0000-\u001f\u007f]/u.test(name)) return fail3(400, "invalid_request");
-      if (Object.hasOwn(body, "operationId") && (typeof body.operationId !== "string" || !ID.test(body.operationId))) return fail3(400, "invalid_request");
+      if ([...name].length < 1 || [...name].length > 64 || /[\u0000-\u001f\u007f]/u.test(name)) return fail4(400, "invalid_request");
+      if (Object.hasOwn(body, "operationId") && (typeof body.operationId !== "string" || !ID.test(body.operationId))) return fail4(400, "invalid_request");
       const { store } = ctx;
       const { roomId } = await store.createChannel(name, body.operationId);
       if (store.member(roomId, LOCAL_OWNER_USER_ID)?.membership !== "join") await store.append(roomId, {
@@ -1200,54 +1242,69 @@ function ownerRoutes(options = {}) {
     }, { serial: true }),
     route("DELETE", /^\/api\/local\/channels\/([^/]+)$/u, async (_req, params, ctx) => {
       const roomId = channelParam(params[0], ctx.store);
-      if (roomId === null) return fail3(404, "not_found");
+      if (roomId === null) return fail4(404, "not_found");
       await ctx.store.deleteChannel(roomId);
       for (const [id, join] of ctx.joins) if (join.roomId === roomId) ctx.joins.delete(id);
       return { status: 204 };
     }, { serial: true }),
     route("POST", /^\/api\/local\/channels\/([^/]+)\/links$/u, async (_req, params, ctx) => {
       const roomId = channelParam(params[0], ctx.store);
-      if (roomId === null) return fail3(404, "not_found");
+      if (roomId === null) return fail4(404, "not_found");
       const link = await ctx.store.mintLink(roomId, "join");
       return { status: 200, json: { shareLink: `${ctx.origin}/join/${link.token}`, expiresAt: link.expiresAt } };
     }, { serial: true }),
     route("POST", /^\/api\/local\/channels\/([^/]+)\/mode$/u, async (req, params, { store }) => {
       const roomId = channelParam(params[0], store);
-      if (roomId === null) return fail3(404, "not_found");
+      if (roomId === null) return fail4(404, "not_found");
       const body = decodeWith(() => {
         const reader = object(req.body, "", ["agent", "mode", "txnId"]);
         return { agent: reader.field("agent"), mode: reader.field("mode"), txnId: reader.field("txnId") };
       });
-      if (!body.ok || typeof body.value.txnId !== "string" || !ID.test(body.value.txnId)) return fail3(400, "invalid_request");
+      if (!body.ok || typeof body.value.txnId !== "string" || !ID.test(body.value.txnId)) return fail4(400, "invalid_request");
       const command = decodeListeningModeCommand({ v: 1, agent: body.value.agent, mode: body.value.mode });
-      if (!command.ok) return fail3(400, "invalid_request");
+      if (!command.ok) return fail4(400, "invalid_request");
       const member = store.member(roomId, command.value.agent);
-      if (!member || member.membership === "leave" || member.kind !== "agent") return fail3(404, "not_found");
+      if (!member || member.membership === "leave" || member.kind !== "agent") return fail4(404, "not_found");
       const event = await store.append(roomId, { type: LISTENING_MODE_COMMAND_TYPE, sender: LOCAL_OWNER_USER_ID, content: command.value, txnId: body.value.txnId });
       return { status: 200, json: { eventId: event.eventId } };
     }, { serial: true }),
     route("POST", /^\/api\/local\/agents\/([^/]+)\/name$/u, async (req, params, { store }) => {
       const userId = decodeParam(params[0]);
-      if (userId === null || !USER.test(userId)) return fail3(400, "invalid_request");
+      if (userId === null || !USER.test(userId)) return fail4(400, "invalid_request");
       const body = decodeWith(() => object(req.body, "", ["name"]).field("name"));
-      if (!body.ok || typeof body.value !== "string") return fail3(400, "invalid_request");
+      if (!body.ok || typeof body.value !== "string") return fail4(400, "invalid_request");
       const checked = checkName(body.value, "agent");
       if (!checked.ok) return { status: 400, json: { error: "invalid_name", reason: checked.error } };
       const roomId = store.channelOfMember(userId);
-      if (roomId === void 0) return fail3(404, "not_found");
+      if (roomId === void 0) return fail4(404, "not_found");
       const member = store.member(roomId, userId);
-      if (!member || member.membership === "leave" || member.kind !== "agent") return fail3(404, "not_found");
-      if (store.members(roomId).some((other) => other.userId !== userId && other.displayName.toLowerCase() === checked.name.toLowerCase())) return fail3(409, "name_taken");
+      if (!member || member.membership === "leave" || member.kind !== "agent") return fail4(404, "not_found");
+      if (store.members(roomId).some((other) => other.userId !== userId && other.displayName.toLowerCase() === checked.name.toLowerCase())) return fail4(409, "name_taken");
       if (member.displayName !== checked.name) await store.append(roomId, { type: "m.room.member", sender: LOCAL_OWNER_USER_ID, content: memberContent2(member, member.membership, { displayname: checked.name }) });
       return { status: 200, json: { matrixUserId: userId, name: checked.name } };
     }, { serial: true }),
+    // The owner's own name in one channel. Only the owner's session reaches it; agents get 403 above,
+    // and there is no subject field, so no one can rename another member here.
+    route("POST", /^\/api\/local\/channels\/([^/]+)\/name$/u, async (req, params, { store }) => {
+      const roomId = channelParam(params[0], store);
+      if (roomId === null) return fail4(404, "not_found");
+      const body = decodeWith(() => object(req.body, "", ["name"]).field("name"));
+      if (!body.ok || typeof body.value !== "string") return fail4(400, "invalid_request");
+      const checked = checkName(body.value, "username");
+      if (!checked.ok) return { status: 400, json: { error: "invalid_name", reason: checked.error } };
+      const self = store.member(roomId, LOCAL_OWNER_USER_ID);
+      if (!self || self.membership !== "join") return fail4(404, "not_found");
+      if (store.members(roomId).some((other) => other.userId !== LOCAL_OWNER_USER_ID && other.displayName.toLowerCase() === checked.name.toLowerCase())) return fail4(409, "name_taken");
+      await store.setOwnerChannelName(roomId, checked.name === store.owner().username ? null : checked.name);
+      return { status: 200, json: { name: checked.name } };
+    }, { serial: true }),
     route("DELETE", /^\/api\/local\/channels\/([^/]+)\/members\/([^/]+)$/u, async (_req, params, ctx) => {
       const roomId = channelParam(params[0], ctx.store);
-      if (roomId === null) return fail3(404, "not_found");
+      if (roomId === null) return fail4(404, "not_found");
       const userId = decodeParam(params[1]);
-      if (userId === null || !USER.test(userId) || userId === LOCAL_OWNER_USER_ID) return fail3(400, "invalid_request");
+      if (userId === null || !USER.test(userId) || userId === LOCAL_OWNER_USER_ID) return fail4(400, "invalid_request");
       const member = ctx.store.member(roomId, userId);
-      if (!member || member.membership === "leave") return fail3(404, "not_found");
+      if (!member || member.membership === "leave") return fail4(404, "not_found");
       await ctx.store.append(roomId, { type: "m.room.member", sender: LOCAL_OWNER_USER_ID, content: memberContent2(member, "leave") });
       await announce(ctx.store, roomId, `${member.displayName} left`);
       for (const [id, join] of ctx.joins) if (join.credentials.userId === userId) ctx.joins.delete(id);
@@ -1255,15 +1312,15 @@ function ownerRoutes(options = {}) {
     }, { serial: true }),
     route("POST", /^\/api\/local\/open$/u, async (req, _params, ctx) => {
       const body = req.body === void 0 ? {} : req.body;
-      if (!plainObject(body) || Object.keys(body).some((key) => key !== "roomId") || Object.hasOwn(body, "roomId") && typeof body.roomId !== "string") return fail3(400, "invalid_request");
+      if (!plainObject(body) || Object.keys(body).some((key2) => key2 !== "roomId") || Object.hasOwn(body, "roomId") && typeof body.roomId !== "string") return fail4(400, "invalid_request");
       const roomId = body.roomId;
-      if (roomId !== void 0 && !ctx.store.hasChannel(roomId)) return fail3(404, "not_found");
+      if (roomId !== void 0 && !ctx.store.hasChannel(roomId)) return fail4(404, "not_found");
       const link = ctx.mintOpenToken(roomId);
       return { status: 200, json: { openUrl: `${ctx.origin}/open/${link.token}`, expiresAt: link.expiresAt } };
     }, { adminOnly: true }),
     route("GET", /^\/open\/([A-Za-z0-9_-]{43})$/u, async (_req, params, ctx) => {
       const opened = ctx.consumeOpenToken(params[0]);
-      if (opened === null) return fail3(404, "link_unavailable");
+      if (opened === null) return fail4(404, "link_unavailable");
       const sid = ctx.createOwnerSession();
       const location = opened.roomId && ctx.store.hasChannel(opened.roomId) ? `/channels/${encodeURIComponent(opened.roomId)}` : "/conversations";
       return { status: 302, location, headers: { "set-cookie": `khala_local_owner=${sid}; HttpOnly; SameSite=Strict; Path=/`, "cache-control": "no-store", "referrer-policy": "no-referrer" } };
@@ -1276,8 +1333,8 @@ function ownerRoutes(options = {}) {
 }
 
 // src/local/routes/profile.ts
-var fail4 = (status, error2) => ({ status, json: { error: error2 } });
-var field = (body, key) => decodeWith(() => object(body, "", [key]).field(key));
+var fail5 = (status, error2) => ({ status, json: { error: error2 } });
+var field = (body, key2) => decodeWith(() => object(body, "", [key2]).field(key2));
 var iso = (ctx) => new Date(ctx.now()).toISOString();
 async function cascade(store, previous, next) {
   for (const { roomId } of store.listChannels()) {
@@ -1287,12 +1344,13 @@ async function cascade(store, previous, next) {
       const owner2 = members.find((m) => m.userId === LOCAL_OWNER_USER_ID);
       if (owner2 && previous !== next) {
         try {
-          await store.append(roomId, {
+          if (store.ownerChannelName(roomId) !== void 0) await store.setOwnerChannelName(roomId, null);
+          else await store.append(roomId, {
             type: "m.room.member",
             sender: LOCAL_OWNER_USER_ID,
             content: { user: LOCAL_OWNER_USER_ID, membership: owner2.membership, displayname: next, kind: "human" }
           });
-          taken.delete(previous.toLowerCase());
+          taken.delete(owner2.displayName.toLowerCase());
           taken.add(next.toLowerCase());
         } catch {
         }
@@ -1344,12 +1402,12 @@ function profileRoutes(options = {}) {
     method,
     pattern,
     async handle(req, _params, ctx) {
-      if (req.auth.kind === "none") return fail4(401, "unauthorized");
-      if (req.auth.kind === "agent") return fail4(403, "forbidden");
+      if (req.auth.kind === "none") return fail5(401, "unauthorized");
+      if (req.auth.kind === "agent") return fail5(403, "forbidden");
       try {
         return await queue(() => run(req, ctx));
       } catch {
-        return fail4(503, "unavailable");
+        return fail5(503, "unavailable");
       }
     }
   });
@@ -1368,7 +1426,7 @@ function profileRoutes(options = {}) {
     }),
     route("POST", /^\/api\/local\/profile\/username$/u, async (req, ctx) => {
       const parsed = field(req.body, "username");
-      if (!parsed.ok) return fail4(400, "invalid_request");
+      if (!parsed.ok) return fail5(400, "invalid_request");
       const checked = checkName(parsed.value, "username");
       if (!checked.ok) return { status: 400, json: { error: "invalid_username", reason: checked.error } };
       const username = checked.name;
@@ -1384,8 +1442,8 @@ function profileRoutes(options = {}) {
     }),
     route("POST", /^\/api\/local\/profile\/color$/u, async (req, ctx) => {
       const parsed = field(req.body, "color");
-      if (!parsed.ok) return fail4(400, "invalid_request");
-      if (!isHumanColorId(parsed.value)) return fail4(400, "invalid_color");
+      if (!parsed.ok) return fail5(400, "invalid_request");
+      if (!isHumanColorId(parsed.value)) return fail5(400, "invalid_color");
       const color = parsed.value;
       const p = ctx.store.owner();
       if (p.color !== color) await ctx.store.setOwner({ ...p, color, updatedAt: iso(ctx) });
@@ -1393,9 +1451,9 @@ function profileRoutes(options = {}) {
     }),
     route("POST", /^\/api\/local\/profile\/initials$/u, async (req, ctx) => {
       const parsed = field(req.body, "initials");
-      if (!parsed.ok) return fail4(400, "invalid_request");
+      if (!parsed.ok) return fail5(400, "invalid_request");
       const initials = parsed.value === null ? null : normalizeInitials(parsed.value);
-      if (parsed.value !== null && initials === null) return fail4(400, "invalid_initials");
+      if (parsed.value !== null && initials === null) return fail5(400, "invalid_initials");
       const p = ctx.store.owner();
       if (p.initials !== initials) await ctx.store.setOwner({ ...p, initials, updatedAt: iso(ctx) });
       return { status: 200, json: { initials } };
@@ -1468,9 +1526,9 @@ async function runHelper(options = {}) {
           return { token, expiresAt: new Date(expiresAt).toISOString() };
         },
         consumeOpenToken(token) {
-          const key = hash(token).toString("hex");
-          const entry = openTokens.get(key);
-          openTokens.delete(key);
+          const key2 = hash(token).toString("hex");
+          const entry = openTokens.get(key2);
+          openTokens.delete(key2);
           return !entry || entry.expiresAt <= now() ? null : entry.roomId === void 0 ? {} : { roomId: entry.roomId };
         },
         createOwnerSession() {