toolroll 0.9.49 → 0.9.50

package/dist/session-http.js

@@ -1,3 +1,4 @@
+import { adapterPolicy } from "./server/route-policy.js";
 import { SESSION_REQUEST_BYTES, SESSION_RESPONSE_BYTES, isSessionResponse, sessionDescriptor, validateSessionRequest, } from './session-contract.js';
 import { limitWords } from './request-budget.js';
 function readBody(request) {
@@ -122,6 +123,8 @@ export async function handleSessionHttp(request, response, options) {
     }
     if (options.admitAuthenticated && refuseAdmission(options.admitAuthenticated(request, actor)))
         return true;
+    if (!adapterPolicy({ caller: "bearer", capability: "act" }, spec.mutation ? "act" : "read").ok)
+        return reject(403, "forbidden", "Current operator access is required.");
     const media = request.headers['content-type']?.split(';')[0]?.trim().toLowerCase();
     if (media !== 'application/json')
         return reject(415, 'unsupported-media-type', 'Send the session request as application/json.');

package/dist/team-http.d.ts

@@ -2,8 +2,12 @@ import type { IncomingMessage, ServerResponse } from 'node:http';
 import { type TeamActor, type TeamExecute } from './team-contract.js';
 import { type Admission } from './request-budget.js';
 export declare const TEAM_REQUEST_BYTES: number;
+/** Account role belongs to HTTP authentication; API tokens carry their own scope. */
+export type TeamHttpActor = TeamActor & {
+    role?: 'approver' | 'viewer';
+};
 export type TeamHttpOptions = {
-    authenticate: (request: IncomingMessage) => TeamActor | null | Promise<TeamActor | null>;
+    authenticate: (request: IncomingMessage) => TeamHttpActor | null | Promise<TeamHttpActor | null>;
     /** Recheck the original credential/session and current account, without extending idle expiry. */
     revalidate: (request: IncomingMessage, actor: TeamActor) => boolean;
     authorizeMutation: (request: IncomingMessage, actor: TeamActor) => boolean;

package/dist/team-http.js

@@ -1,4 +1,5 @@
-import { TEAM_OPERATIONS, teamScopeAllows } from './team-contract.js';
+import { adapterPolicy } from "./server/route-policy.js";
+import { TEAM_OPERATIONS, TEAM_MUTATIONS, teamScopeAllows } from './team-contract.js';
 import { limitWords } from './request-budget.js';
 export const TEAM_REQUEST_BYTES = 64 * 1024;
 const failure = (code, message) => ({ version: 1, ok: false, code, message });
@@ -63,6 +64,9 @@ export async function handleTeamHttp(request, response, options) {
         return reject(401, 'unauthenticated', 'Sign in to continue.');
     if (options.admitAuthenticated && refuseAdmission(options.admitAuthenticated(request, actor)))
         return true;
+    const policyPrincipal = () => ({ caller: request.headers.authorization ? 'bearer' : 'cookie', capability: actor.principal?.scope ?? (actor.role === 'approver' ? 'act' : 'read'), token: actor.principal !== undefined });
+    if (!adapterPolicy(policyPrincipal()).ok)
+        return reject(403, 'read-only', 'Your token reads only. Use an act token for this.');
     const conversationId = url.searchParams.get('conversation') ?? undefined;
     if (url.pathname === '/api/team/events') {
         if (request.method !== 'GET')
@@ -147,7 +151,7 @@ export async function handleTeamHttp(request, response, options) {
         return reject(405, 'method-not-allowed', 'Use GET or POST.');
     if (!options.revalidate(request, actor))
         return reject(401, 'unauthenticated', 'Sign in to continue.');
-    if (!teamScopeAllows(actor, input.operation))
+    if (!adapterPolicy(policyPrincipal(), TEAM_MUTATIONS[input.operation] ? "act" : "read").ok || !teamScopeAllows(actor, input.operation))
         return reject(403, 'read-only', 'Your token reads only. Use an act token for this.');
     try {
         const result = await options.execute(actor, input);

package/dist/teams.js

@@ -1,3 +1,4 @@
+import { adapterPolicy } from "./server/route-policy.js";
 /** Microsoft Teams: the leased delivery loop hosted by the ordinary worker,
  * and the HTTPS receiver the console mounts for the Bot Framework. Teams
  * has no client-initiated socket, so inbound activities arrive over HTTPS
@@ -37,6 +38,8 @@ export async function handleTeamsHttp(request, response, options) {
     const claims = await verifyTeamsToken(request.headers.authorization, credentials.app, options.fetcher ?? fetch);
     if (claims === null)
         return reply(401);
+    if (!adapterPolicy({ caller: "service", capability: "none" }).ok)
+        return reply(403);
     if (refuseAdmission(options.admitTenant(credentials.tenant)))
         return true;
     if (Number(request.headers["content-length"] ?? 0) > TEAMS_ACTIVITY_BYTES)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolroll",
-  "version": "0.9.49",
+  "version": "0.9.50",
   "description": "A control plane for unattended coding agents — queue tasks, walk away, come back to pull requests. Agents build in leased worktrees, never touch your default branch, and interrupt you only for decisions that need a human.",
   "directories": {
     "doc": "docs"