@ours.network/fleet 1.1.0-nightly.25 → 1.1.0-nightly.26

package/dist/rooms-tasks/provision.js

@@ -21,7 +21,6 @@ import { buildRoomMemberTask, sha256Text } from './member-startup.js';
 import { agentDir } from '../paths.js';
 import { readProvenance } from '../creation.js';
 import { readTempSupervisor, secureStoppedTempArchive, tempArchiveForCreationAction, tempSupervisorLiveness, } from '../temp-lifecycle.js';
-import { recordFleetAuditPresentation } from '../fleet-command-audit.js';
 export function getBinPath() {
     try {
         return realpathSync(process.argv[1]);
@@ -30,17 +29,6 @@ export function getBinPath() {
         return process.argv[1];
     }
 }
-function selectionSummary(selection) {
-    if ('ref' in selection)
-        return `ref:${selection.ref} (reference)`;
-    return `inline:sha256:${createHash('sha256').update(canonicalJson(selection.inline)).digest('hex').slice(0, 16)} (inline)`;
-}
-function permissionSummary(definition) {
-    const permissions = definition.permissions;
-    if (!permissions)
-        return undefined;
-    return `approval=${permissions.approval},filesystem=${permissions.filesystem},unattended=${permissions.unattended}`;
-}
 function launchDefinition(definition) {
     return {
         projection: redactLaunchDefinition(definition),
@@ -324,13 +312,6 @@ async function launchMemberUnlocked(input) {
                 ...(launched.callerRole ? { caller_role: launched.callerRole } : {}),
                 launch_id: supervisor.launchId, updated_at: new Date().toISOString(),
             } });
-        recordFleetAuditPresentation({ kind: 'agent_started', id: member.name, name: member.name,
-            lifetime: 'temporary', brain: selectionSummary(settings.definition.brain),
-            role: selectionSummary(settings.definition.role),
-            harness: presentation.harness, session: 'acp',
-            permissions: permissionSummary(settings.definition), parent: provision.roomId,
-            actionId: launched.creationActionId, inherited: [],
-            configuration: presentation });
     }
     catch (error) {
         updateMemberStartup(provision.roomId, member.name, { launch: {
@@ -341,8 +322,6 @@ async function launchMemberUnlocked(input) {
                 updated_at: new Date().toISOString(),
                 error: error instanceof Error ? error.message : String(error),
             } });
-        recordFleetAuditPresentation({ kind: 'lifecycle_failure', resource: 'Agent', id: member.name,
-            state: 'failed', category: 'readiness_failed', eventId: effectiveActionId });
         throw error;
     }
 }
@@ -360,9 +339,10 @@ function exactCoworkSeat(observed, member, expectedInviteId) {
     }
     return seat;
 }
-function reconcileMemberSeats(roomId, members, observed) {
+function reconcileMemberSeats(roomId, members, observed, ownerSeatCid) {
     const current = getRoomRecord(roomId);
-    let complete = true;
+    let complete = !ownerSeatCid || observed.some(seat => seat.identity_cid.toLowerCase() === ownerSeatCid.toLowerCase()
+        && seat.seat_state === 'active');
     const seats = current.member_seats.map(seat => {
         const member = members.find(candidate => candidate.name === seat.role_name);
         const found = exactCoworkSeat(observed, member, seat.invite_id);
@@ -442,7 +422,7 @@ export async function provisionMembers(input) {
     try {
         const initialRoom = await cowork.recoverRoom(roomId);
         assertCoworkRoomPolicy(initialRoom, roomPolicy.anonymous);
-        reconcileMemberSeats(roomId, members, initialRoom.seats);
+        reconcileMemberSeats(roomId, members, initialRoom.seats, existing.owner_seat_cid);
         for (const member of members) {
             const task = tasks.get(member.name);
             const currentSeat = getRoomRecord(roomId).member_seats
@@ -510,7 +490,7 @@ export async function provisionMembers(input) {
     for (;;) {
         const remote = await cowork.recoverRoom(roomId);
         assertCoworkRoomPolicy(remote, roomPolicy.anonymous);
-        const reconciled = reconcileMemberSeats(roomId, members, remote.seats);
+        const reconciled = reconcileMemberSeats(roomId, members, remote.seats, ownerSeatCid ?? undefined);
         if (reconciled.complete)
             break;
         if (policy.now() >= deadline) {
@@ -521,6 +501,15 @@ export async function provisionMembers(input) {
         await policy.sleep(delay);
         delay = Math.min(policy.maxDelayMs, Math.max(delay + 1, delay * 2));
     }
+    // Admission alone is insufficient: every expected member must still have
+    // the exact live launch that owns its authenticated Cowork seat.
+    for (const member of members) {
+        if (!await retainRunningLaunch({
+            provision: input, member, settings: settings.get(member.name),
+            task: tasks.get(member.name), roomIdentityCid,
+        }))
+            throw new Error(`active Cowork seat ${member.name} has no matching live Fleet launch`);
+    }
     if (taskId) {
         const taskMembers = getRoomRecord(roomId).member_seats.map(seat => {
             if (!seat.identity_cid)

package/dist/runner.js

@@ -94,6 +94,7 @@ function localFleetAuditor(stateDir, caller, log) {
                 attempt = store.outcome(attempt.correlationId, caller, 'delivered');
             return attempt;
         },
+        async present() { },
     };
 }
 /** Environment injected only into the managed harness process. */
@@ -655,6 +656,7 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
             control.setFleetAuditor(ownerChannel ? {
                 begin: (requestId, argv) => ownerChannel.beginFleetCommandAudit(requestId, argv),
                 finish: input => ownerChannel.finishFleetCommandAudit(input),
+                present: presentations => ownerChannel.notifyFleetLifecycle(presentations),
             } : localFleetAuditor(dir, name, deps.log));
             await control.start();
         }

package/dist/session/control.d.ts

@@ -9,7 +9,7 @@ export interface ControlRequest {
     version: 1 | 2 | 3;
     id: string;
     token: string;
-    command: 'status' | 'snapshot' | 'submit_prompt' | 'respond_permission' | 'interrupt' | 'follow' | 'events_since' | 'owner_channel_manage' | 'loop_status' | 'loop_run_now' | 'loop_disable' | 'loop_enable' | 'reload_config' | 'conversation_page' | 'conversation_follow' | 'submit_prompt_v2' | 'interrupt_v2' | 'respond_permission_v2' | 'fleet_spawn' | 'fleet_audit_begin' | 'fleet_audit_finish';
+    command: 'status' | 'snapshot' | 'submit_prompt' | 'respond_permission' | 'interrupt' | 'follow' | 'events_since' | 'owner_channel_manage' | 'loop_status' | 'loop_run_now' | 'loop_disable' | 'loop_enable' | 'reload_config' | 'conversation_page' | 'conversation_follow' | 'submit_prompt_v2' | 'interrupt_v2' | 'respond_permission_v2' | 'fleet_spawn' | 'fleet_audit_begin' | 'fleet_audit_present' | 'fleet_audit_finish';
     text?: string;
     permissionId?: string;
     optionId?: string;

package/dist/session/control.js

@@ -3,7 +3,7 @@ import { chmodSync, existsSync, readFileSync, rmSync, writeFileSync } from 'node
 import { createConnection, createServer } from 'node:net';
 import { join } from 'node:path';
 import { SessionControlError } from './types.js';
-import { validateFleetAuditBegin, validateFleetAuditFinish, } from '../fleet-command-audit.js';
+import { validateFleetAuditBegin, validateFleetAuditFinish, validateFleetAuditPresentations, } from '../fleet-command-audit.js';
 import { interruptSession, queueSessionPrompt, respondSessionPermission, respondSessionPermissionV2, } from '../application/session-mutations.js';
 const MAX_LINE_BYTES = 64 * 1024;
 /** Commands that require protocol version 3. */
@@ -349,6 +349,19 @@ export class RoleControlServer {
                     this.write(socket, { version: 1, id: request.id, ok: true, result });
                     return;
                 }
+                case 'fleet_audit_present': {
+                    if (!this.fleetAuditor)
+                        throw new SessionControlError('rejected', 'fleet auditing is unavailable');
+                    try {
+                        validateFleetAuditPresentations(request.audit?.presentations);
+                    }
+                    catch {
+                        throw new SessionControlError('rejected', 'valid Fleet lifecycle presentations are required');
+                    }
+                    await this.fleetAuditor.present(request.audit.presentations);
+                    this.write(socket, { version: 1, id: request.id, ok: true, result: { delivered: true } });
+                    return;
+                }
                 case 'owner_channel_manage': {
                     if (!request.ownerChannel || typeof request.ownerChannel.action !== 'string')
                         throw new SessionControlError('rejected', 'owner-channel management action is required');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.1.0-nightly.25",
+  "version": "1.1.0-nightly.26",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",