pi-roundtable-web 0.25.0 → 0.26.1

package/src/app/routes.ts

@@ -19,11 +19,13 @@ import type {
 	CharacterRefusal,
 	MessagesView,
 	ModelsView,
+	RoomOneView,
 	RoomsView,
 	SchedulesView,
 	ScheduleView,
 	SessionView,
 	SkillView,
+	ThreadsDismissed,
 	WorkspaceConflict,
 	WorkspaceNew,
 	WorkspaceRefusalBody,
@@ -33,8 +35,14 @@ import type {
 } from "../api-types.ts";
 import type { Authenticated } from "../auth/authenticator.ts";
 import { type ConsolePresentation, message } from "../features.ts";
+import type { Gate } from "../gate.ts";
+import type { HostApp } from "../host/host-app.ts";
+import type { RoomReads } from "../host/reads.ts";
+import { readsOf, withExpiredFiles } from "../host/room-views.ts";
 import { json } from "../http.ts";
+import type { ResolvedOptions } from "../options.ts";
 import type { PushMutes } from "../push/mutes.ts";
+import { viewerOf, type WebAppRegistry } from "../web-app.ts";
 import { bad, bodyOf, HttpError, notFound } from "./api-http.ts";
 import type { CardLog } from "./card-log.ts";
 import { type FileDir, fileResponse, isFileId } from "./files.ts";
@@ -42,7 +50,7 @@ import type { LayoutStore } from "./layout.ts";
 import { LayoutRoutes } from "./layout-routes.ts";
 import { PromptApi, type PromptApiOptions } from "./prompt-routes.ts";
 import { PAGE_LIMIT, type RoomLog } from "./room-log.ts";
-import type { Rooms } from "./rooms.ts";
+import type { ResolvedRoom, Rooms } from "./rooms.ts";
 import { SkillDocApi } from "./skill-doc-routes.ts";
 import type { AppSurface } from "./surface.ts";
 import { TeamApi } from "./team-routes.ts";
@@ -69,13 +77,16 @@ export interface AppApiOptions {
 	/** The rooms whose push the owners muted. */
 	mutes: Pick<PushMutes, "set" | "setMany">;
 	/** The dispatch threads, which go with the room they hang under. */
-	threads: Pick<WebThreads, "under" | "removeUnder">;
+	threads: Pick<
+		WebThreads,
+		"under" | "removeUnder" | "dismiss" | "dismissFinished"
+	>;
 	/** The owners' shared arrangement of the room list: pins and folders. */
 	layout: LayoutStore;
 	conversations: Pick<ConversationPort, "startFresh">;
-	identity: Pick<IdentityService, "tierOf">;
+	identity: Pick<IdentityService, "principal">;
 	/** Present when the schedules pane is served. */
-	schedules?: Pick<ScheduleStore, "all" | "remove">;
+	schedules?: Pick<ScheduleStore, "all" | "get" | "remove">;
 	directory: Pick<AgentDirectory, "agent" | "agents" | "group" | "groups">;
 	team: Pick<
 		AgentTeam,
@@ -109,12 +120,28 @@ export interface AppApiOptions {
 	/** Present when the host has prompt documents (the prompts plugin): the main prompts the owner edits. */
 	prompts?: PromptApiOptions["prompts"];
 	avatars: Pick<AvatarStudio, "serve">;
+	/** The read cursors, for each room's unread count and who has read what. */
+	reads?: Pick<RoomReads, "unread" | "cursorOf" | "marks">;
+	/** Who may be served a file bound to a host room or a page. */
+	host?: Pick<HostApp, "mayRead">;
+	/** The name the app shows for a person. */
+	nameOf?(principalId: string): Promise<string>;
 	/** Present when the workspace pane is served. */
 	workspace?: WorkspaceFiles;
 	/** The mount, which a room's agent picture hangs under. */
 	mount: string;
 	/** How the console signs the person in, as the session reports it. */
 	authMode: SessionView["auth"];
+	/** Who the app admits; the session reports the person's tier only where it admits more than owners. */
+	admission?: ResolvedOptions["admission"];
+	/** The area handlers the pieces of the app plug in; without it the API is the owners' as in 0.25. */
+	registry?: Pick<WebAppRegistry, "areaFor">;
+	/** The onboarding gate; without it nobody is gated. */
+	gate?: Pick<Gate, "required">;
+	/** The tiers whose people may use push; default owners. */
+	pushTiers?: ResolvedOptions["push"]["tiers"];
+	/** Whether the yolo and long-running switches are served; `PUT rooms/<key>/mode` answers 404 without them. Default true. */
+	modeSwitches?: boolean;
 	/** The quiet hours of push, as the settings page shows them. */
 	quietHours?: NonNullable<SessionView["quietHours"]>;
 	/** Called after a change the other pages should refetch. */
@@ -296,7 +323,12 @@ export class AppApi {
 		const parts = partsOf(rest);
 		if (!parts) return undefined;
 		const [first, second] = parts;
+		const area =
+			first === "api" && second !== undefined
+				? this.#options.registry?.areaFor(second)
+				: undefined;
 		const mine =
+			area !== undefined ||
 			(first === "avatars" && parts.length === 2) ||
 			(first === "api" &&
 				[
@@ -316,6 +348,11 @@ export class AppApi {
 				].includes(second ?? ""));
 		if (!mine) return undefined;
 		try {
+			if (area)
+				return await area.handle(request, parts.slice(2), {
+					visitor: admission.visitor,
+					viewer: viewerOf(admission.visitor),
+				});
 			return await this.#route(request, parts, admission);
 		} catch (error) {
 			if (error instanceof HttpError || error instanceof UploadRefusal)
@@ -338,16 +375,13 @@ export class AppApi {
 		}
 	}
 
-	/** The owner who writes: their tier read again, as a speaker for the calls that need one. */
+	/** The owner who writes: the tier the request was admitted at, as a speaker for the calls that need one. */
 	async #owner(admission: Authenticated): Promise<Speaker> {
-		const { principal } = admission.visitor;
-		const tier = await this.#options.identity.tierOf(principal.id);
+		const { principal, tier, speakerId } = admission.visitor;
 		if (tier !== "owner")
 			throw new HttpError(403, "Only an owner may do this.");
 		return {
-			id: admission.actor
-				? `${admission.actor.provider}:${admission.actor.subject}`
-				: principal.id,
+			id: speakerId,
 			name: principal.displayName,
 			tier,
 			principalId: principal.id,
@@ -368,7 +402,8 @@ export class AppApi {
 				new Response("Not found", { status: 404 })
 			);
 		}
-		if (area === "session" && method === "GET") return this.#session(admission);
+		if (area === "session" && method === "GET")
+			return await this.#session(admission);
 		if (area === "models" && method === "GET")
 			return json({
 				models: await this.#options.team.usableModels(),
@@ -376,20 +411,21 @@ export class AppApi {
 		if (area === "rooms") return this.#rooms(request, parts, admission);
 		if (area === "folders")
 			return this.#layout.folders(request, parts, admission);
-		if (area === "uploads" && method === "POST" && !id) {
-			const owner = await this.#owner(admission);
+		// An upload is the sender's own, whoever they are; a file answers by the room it is bound to.
+		if (area === "uploads" && method === "POST" && !id)
 			return json(
-				await this.#options.uploads.receive(request, owner.principalId),
+				await this.#options.uploads.receive(
+					request,
+					admission.visitor.principal.id,
+				),
 			);
-		}
 		if (area === "uploads" && method === "DELETE" && id && !action) {
-			const owner = await this.#owner(admission);
-			if (!this.#options.uploads.discard(id, owner.principalId))
+			if (!this.#options.uploads.discard(id, admission.visitor.principal.id))
 				throw notFound();
 			return json({ ok: true });
 		}
 		if (area === "files" && method === "GET" && id && !action)
-			return this.#file(id);
+			return await this.#file(id, admission);
 		if (area === "workspace") return this.#workspace(request, parts, admission);
 		if (area === "schedules") return this.#schedules(method, id, admission);
 		const owner = () => this.#owner(admission);
@@ -410,13 +446,21 @@ export class AppApi {
 		throw new HttpError(404, "There is no such API.");
 	}
 
-	#session(admission: Authenticated): Response {
-		const { principal } = admission.visitor;
+	async #session(admission: Authenticated): Promise<Response> {
+		const { principal, tier } = admission.visitor;
+		const { admission: admits = "owners", gate } = this.#options;
+		const pushTiers = this.#options.pushTiers ?? ["owner"];
+		const owed =
+			admits === "access" && gate
+				? await gate.required(viewerOf(admission.visitor))
+				: [];
 		return json({
 			principal: { id: principal.id, name: principal.displayName },
 			surface: this.#options.surface.surface,
 			auth: this.#options.authMode,
-			push: true,
+			...(admits === "access" ? { tier } : {}),
+			...(owed.length > 0 ? { gate: owed } : {}),
+			...(pushTiers.includes(tier) ? { push: true as const } : {}),
 			...(this.#options.prompts ? { prompts: true } : {}),
 			...(this.#options.skills ? { skillEdit: true } : {}),
 			...(this.#options.quietHours
@@ -436,15 +480,37 @@ export class AppApi {
 		const { method } = request;
 		const [, , key, action] = parts;
 		const { rooms, log, cards, modes, mutes, conversations } = this.#options;
+		// The agent rooms are the owners'; to anyone else this API does not exist.
+		if (admission.visitor.tier !== "owner") throw notFound();
 		if (!key) {
 			if (method !== "GET") throw new HttpError(405, "Method not allowed.");
+			const listed = await rooms.list();
+			// What each room holds past this person's cursor; a room they never read starts from what it has now.
+			const unread = await this.#options.reads?.unread(
+				admission.visitor.principal.id,
+				listed.map((one) => one.key),
+				new Set(listed.map((one) => one.key)),
+			);
 			return json({
-				rooms: await rooms.list(),
+				rooms: listed.map((one) => {
+					const count = unread?.get(one.key);
+					return count ? { ...one, unread: count } : one;
+				}),
 				...(await this.#layout.view()),
 			} satisfies RoomsView);
 		}
 		const room = await rooms.resolve(key);
 		if (!room) throw notFound();
+		if (!action && method === "GET") {
+			// A thread dismissed from the list still opens by its address; the page asks for its view.
+			const view = await rooms.threadView(room.key);
+			if (!view) throw notFound();
+			return json({ room: view } satisfies RoomOneView);
+		}
+		if (action === "dismiss" && method === "POST" && parts.length === 4)
+			return this.#dismiss(room, admission);
+		if (action === "dismiss-threads" && method === "POST" && parts.length === 4)
+			return this.#dismissFinished(room, admission);
 		if (action === "messages" && method === "GET" && parts.length === 4) {
 			const params = new URL(request.url).searchParams;
 			const before = params.get("before");
@@ -461,17 +527,26 @@ export class AppApi {
 			// The cards stand among the messages by the time they opened; a page that has older
 			// messages leaves the cards before its first one to the older page.
 			const first = page.messages[0];
+			const { reads, nameOf } = this.#options;
+			const self = admission.visitor.principal.id;
+			const cursor = await reads?.cursorOf(room.key, self);
 			return json({
 				...page,
+				messages: withExpiredFiles(page.messages, this.#options.files),
 				cards: await cards.during(room.key, {
 					...(page.more && first ? { from: first.at } : {}),
 					...(beforeId === undefined ? {} : { before: beforeId }),
 				}),
+				...(reads && nameOf
+					? { reads: await readsOf(reads, room.key, self, nameOf) }
+					: {}),
+				...(cursor === undefined ? {} : { cursor }),
 			} satisfies MessagesView);
 		}
 		if (action === "mode" && method === "PUT" && parts.length === 4) {
 			// Only an agent's or group's room has modes; a thread runs no turn of the owner's.
-			if (room.readOnly) throw notFound();
+			if (room.readOnly || this.#options.modeSwitches === false)
+				throw notFound();
 			const owner = await this.#owner(admission);
 			const body = await bodyOf(request);
 			const change: ModeChange = {};
@@ -513,10 +588,47 @@ export class AppApi {
 		throw new HttpError(404, "There is no such API.");
 	}
 
-	#file(id: string): Response {
+	/** Takes one finished thread off the room list for every owner; an open one is refused. */
+	async #dismiss(
+		room: ResolvedRoom,
+		admission: Authenticated,
+	): Promise<Response> {
+		if (room.kind !== "thread") throw notFound();
+		await this.#owner(admission);
+		const outcome = await this.#options.threads.dismiss(room.name);
+		if (outcome === "missing") throw notFound();
+		if (outcome === "open")
+			throw new HttpError(409, "The thread is still open.");
+		this.#options.changed();
+		return json({ dismissed: 1 } satisfies ThreadsDismissed);
+	}
+
+	/** Takes every finished thread of a room off the room list; the open ones stay. */
+	async #dismissFinished(
+		room: ResolvedRoom,
+		admission: Authenticated,
+	): Promise<Response> {
+		if (room.kind === "thread") throw notFound();
+		await this.#owner(admission);
+		const dismissed = await this.#options.threads.dismissFinished(room.key);
+		if (dismissed) this.#options.changed();
+		return json({ dismissed } satisfies ThreadsDismissed);
+	}
+
+	async #file(id: string, admission: Authenticated): Promise<Response> {
 		if (!isFileId(id)) throw notFound();
-		const meta = this.#options.files.meta(id);
-		const blob = this.#options.files.blob(id);
+		const { files, host } = this.#options;
+		// A file bound to a host room or page is for the people it is open to, owners too; every other stored file belongs to an agent room, which only owners read.
+		const bound = files.binding(id)?.room;
+		if (bound === undefined) {
+			if (admission.visitor.tier !== "owner") throw notFound();
+		} else if (
+			!host ||
+			!(await host.mayRead(viewerOf(admission.visitor), bound))
+		)
+			throw notFound();
+		const meta = files.meta(id);
+		const blob = files.blob(id);
 		if (!meta || !blob) throw notFound();
 		return fileResponse(meta, blob);
 	}
@@ -636,6 +748,18 @@ export class AppApi {
 		throw new HttpError(404, "There is no such API.");
 	}
 
+	/** Whether a schedule is the visitor's own: its creator id names their principal. */
+	async #ownSchedule(
+		createdById: string,
+		principalId: string,
+	): Promise<boolean> {
+		if (createdById === principalId) return true;
+		// A schedule from 0.8 names its creator by a user id that the backfill made a principal's id.
+		return (
+			(await this.#options.identity.principal(createdById))?.id === principalId
+		);
+	}
+
 	async #schedules(
 		method: string,
 		id: string | undefined,
@@ -643,11 +767,19 @@ export class AppApi {
 	): Promise<Response> {
 		const { schedules, rooms } = this.#options;
 		if (!schedules) throw new HttpError(404, "This pane is not served.");
+		const { tier, principal } = admission.visitor;
+		const owner = tier === "owner";
 		if (method === "GET" && !id) {
 			const all = await schedules.all();
 			const views: ScheduleView[] = [];
 			for (const schedule of all) {
-				const room = await rooms.resolve(schedule.channel);
+				// The owners see every schedule; anyone else sees their own, and no room of the owners.
+				if (
+					!owner &&
+					!(await this.#ownSchedule(schedule.createdById, principal.id))
+				)
+					continue;
+				const room = owner ? await rooms.resolve(schedule.channel) : undefined;
 				views.push({
 					id: schedule.id,
 					...(room ? { room: room.key } : {}),
@@ -667,9 +799,17 @@ export class AppApi {
 			return json({ schedules: views } satisfies SchedulesView);
 		}
 		if (method === "DELETE" && id) {
-			await this.#owner(admission);
 			const number = Number(id);
 			if (!Number.isInteger(number)) throw bad("The schedule id is a number.");
+			// Another person's schedule is not there to remove, for anyone but the owners.
+			if (!owner) {
+				const found = await schedules.get(number);
+				if (
+					!found ||
+					!(await this.#ownSchedule(found.createdById, principal.id))
+				)
+					throw new HttpError(404, "There is no such schedule.");
+			}
 			const removed = await schedules.remove(number);
 			if (!removed) throw new HttpError(404, "There is no such schedule.");
 			this.#options.changed();