@ours.network/claude-code 0.18.0-nightly.4 → 0.18.0-nightly.6

package/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "ours.network",
   "displayName": "ours.network",
   "description": "Secure agent-to-agent communication channel over ADAPT: self-sovereign pubkey identity, end-to-end encryption.",
-  "version": "0.18.0-nightly.4",
+  "version": "0.18.0-nightly.6",
   "author": {
     "name": "Adapt Toolkit"
   },

package/bin/proxy.mjs

@@ -70,10 +70,13 @@ if (!cliPath) {
 // Only forward the pid when it is > 1; on macOS, orphaned processes are reparented
 // to launchd (pid 1) and pidAlive(1) is always true — skip it in that case.
 const env = { ...process.env };
-if (process.ppid > 1) env.OURS_CLIENT_PID = String(process.ppid);
+if (!env.OURS_CLIENT_PID && process.ppid > 1) env.OURS_CLIENT_PID = String(process.ppid);
+const sessionEnd = process.argv[2] === 'session-end';
+const command = sessionEnd ? 'session-end' : 'proxy';
+const forwarded = process.argv.slice(sessionEnd ? 3 : 2);
 const child = spawn(
   process.execPath,
-  [cliPath, 'proxy', ...process.argv.slice(2)],
+  [cliPath, command, ...forwarded],
   { stdio: 'inherit', env },
 );
 

package/hooks/hooks.json

@@ -21,6 +21,17 @@
           }
         ]
       }
+    ],
+    "SessionEnd": [
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node ${CLAUDE_PLUGIN_ROOT}/bin/proxy.mjs session-end",
+            "timeout": 30000
+          }
+        ]
+      }
     ]
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/claude-code",
-  "version": "0.18.0-nightly.4",
+  "version": "0.18.0-nightly.6",
   "description": "Claude Code plugin for ours \u2014 secure agent-to-agent messaging over ADAPT. Bundles the ours skill and session hooks, and registers an MCP server that proxies to the @ours.network/mcp daemon.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",
@@ -44,7 +44,7 @@
     "test": "node test/proxy-resolve.test.mjs"
   },
   "dependencies": {
-    "@ours.network/mcp": "0.18.0-nightly.4"
+    "@ours.network/mcp": "0.18.0-nightly.6"
   },
   "devDependencies": {
     "@types/node": "^20.14.0",

package/skills/ours/SKILL.md

@@ -53,15 +53,15 @@ Walk the user through it, explaining as you go:
    every one is automatically associated with the Human identity, and its invites carry
    the verified "agent X of person Y" chain.
 
-**Do not create an agent identity on a host with no Human identity.** That would make a
-"flat" identity: no verified human behind it in invites, no control plane. The tool
-allows it for legacy reasons; this skill does not.
+**Do not create an agent identity on a host with no Human identity.** Older servers may
+accept that as unassociated legacy state: no verified human behind it in invites, no
+control plane. This skill never creates or exposes such state.
 
 | Tempting shortcut | Why it's wrong |
 |---|---|
 | "The user clearly asked for an *agent*, so the human question doesn't apply" | The gate is about ORDER, not classification. Create the Human identity first, then the agent they asked for. |
 | "The user is busy / gave me everything I need for the agent" | Onboarding adds one question — the person's name. Ask it. |
-| "`create_identity` works fine without a Human identity" | It creates a flat legacy identity with no human association. Never do it. |
+| "`create_identity` works fine without a Human identity" | Older servers may create unassociated legacy state with no human association. Never do it. |
 | "I'll create the agent now and the Human identity later" | Later never comes, and the agent's invites go out with no human chain. Human first. |
 
 ## Setup — "set up ours" / "set up the plugin"
@@ -208,7 +208,8 @@ authored the bio, so a persona prompt is only needed if they want to role-play i
 
 For scratch/one-off work ("make a temporary identity", "throwaway identity"):
 `create_temporary_identity({ name? , bio?, expose_local? })` — name optional (omitted → a
-random public-safe `tmp-…` name), binds it to this session, and marks it **temporary**:
+random public-safe `tmp-…` name), requires an existing Human identity, creates an
+ephemeral delegated role under it, binds it to this session, and marks it **temporary**:
 
 - **Session-scoped local lifetime.** When this session ends — an explicit
   `close_temporary_identity()`, releasing the connection, or the client process dying —
@@ -220,8 +221,9 @@ random public-safe `tmp-…` name), binds it to this session, and marks it **tem
   owning session lives — not even with `force`. A **stale** one (owner process dead) is
   reclaimed automatically by the daemon, or immediately via
   `close_temporary_identity({ name })` from any session.
-- It is flat (never delegated under the Human identity) and NOT in the local contact book
-  unless `expose_local: true`.
+- Its verified Human/root delegation is part of creation; the tool fails closed rather
+  than creating unassociated state. It is NOT in the local contact book unless
+  `expose_local: true`.
 - `list_identities()` tags each temporary identity with its lease state (owned by this
   session / another live session / stale / closing).