Repository navigation
Armonia · Invite-only session control for collaborators #1878
Description
Important
Problem — Anyone who can see a session can drive it. The team design requires observation to follow membership while driving another person's agent requires that person's invitation.
Approach — Add person-scoped collaborator grants on sessions, reusing Fleet Studio's observe/control grant model with person principals, and check owner-or-collaborator on every action that changes a session.
Scope — in: invite, accept, revoke collaborator; checks on prompt, abort, revert, permission and question replies, archive, delete; attribution of each action; a driving indicator for collaborators. out: transferring ownership, machine-scoped control (unchanged).
Assumptions — Visibility filtering is in place, so only members can be invited.
Acceptance Criteria
- A member who is neither owner nor collaborator can read a session but is refused when prompting, aborting, reverting, replying to permissions or questions, archiving, or deleting.
- The owner can invite a member as collaborator; after acceptance the collaborator can perform those actions.
- Revoking a collaborator takes effect on their next action without a restart.
- A non-member cannot be invited.
- Every prompt and approval in a shared session records which person made it.
- A collaborator's client shows that they are driving another person's session.
Testing Decisions
Extend the Fleet Studio grant lifecycle and control-gated routing tests to person principals; add engine-level refusal tests for each session-changing action.
Key Decisions
- Grants are per session, not per environment.
- Agents acting inside a session act with the session owner's authority, never a collaborator's.
Constraints & Invariants
- Fails closed: missing grant, revoked grant, or unresolved principal denies the write.
Prior Art
- Fleet Studio grant lifecycle, the control request→approve flow, control-gated routing, the remote write gate, ADR 0034.
Activity
[-]Team engine · Invite-only session control for collaborators[/-][+]Armonia · Invite-only session control for collaborators[/+]