Function DirectRoomIdentity

internal/network/validate.go:219–242

DirectRoomIdentity derives the stable two-party direct room identity scoped to one workspace channel.

(
	workspaceID string,
	channel string,
	localPeer string,
	remotePeer string,
)

// DirectRoomIdentity derives the stable two-party direct room identity scoped to one workspace channel.
func DirectRoomIdentity(
	workspaceID string,
	channel string,
	localPeer string,
	remotePeer string,
) (string, string, string, error) {
	trimmedWorkspaceID := strings.TrimSpace(workspaceID)
	if err := ValidateWorkspaceID(trimmedWorkspaceID); err != nil {
		return "", "", "", err
	}
	trimmedChannel := strings.TrimSpace(channel)
	if err := ValidateChannel(trimmedChannel); err != nil {
		return "", "", "", err
	}
	peerA, peerB, err := NormalizeDirectRoomPeers(localPeer, remotePeer)
	if err != nil {
		return "", "", "", err
	}

	sum := sha256.Sum256([]byte(
		"agh-network/direct-room/v0\x00" + trimmedWorkspaceID + "\x00" + trimmedChannel + "\x00" + peerA + "\x00" + peerB,
	))
	return "direct_" + hex.EncodeToString(sum[:])[:32], peerA, peerB, nil
}

// ValidateDirectRoomBinding proves that an existing direct room row matches
// the deterministic identity for its workspace/channel-scoped peer pair.