@ours.network/fleet 1.1.0-nightly.6 → 1.1.0-nightly.8

package/dist/rooms-tasks/templates.js

@@ -1,54 +1,4 @@
 import { createHash } from 'node:crypto';
-const TEAM = {
-    name: 'team',
-    version: 1,
-    builtin: true,
-    description: 'Phased task pipeline: Architect specifies, Developer implements, Tester verifies',
-    room: { quiet_membership: false, anonymous: false },
-    contract: [
-        'Architect produces a spec and posts it to the room. Work pauses for owner approval.',
-        'Developer implements per approved spec.',
-        'Tester verifies spec conformance and test coverage.',
-        'Completion requires tester sign-off.',
-    ].join('\n'),
-    members: [
-        { slot: 'architect', role: 'Architect', count: 1, agent: { ref: 'Architect' } },
-        { slot: 'developer', role: 'Developer', count: 1, agent: { ref: 'Developer' } },
-        { slot: 'tester', role: 'Tester', count: 1, agent: { ref: 'Tester' } },
-    ],
-};
-const PAIR = {
-    name: 'pair',
-    version: 1,
-    builtin: true,
-    description: 'Deliberation pair: Secretary writes code, Critic reviews — every decision deliberated together',
-    room: { quiet_membership: false, anonymous: false },
-    contract: [
-        'Secretary and Critic deliberate every decision together before acting.',
-        'Secretary writes code; Critic reviews and challenges.',
-        'No material change lands without both agreeing.',
-        'Completion requires joint sign-off.',
-    ].join('\n'),
-    members: [
-        { slot: 'secretary', role: 'Secretary', count: 1, agent: { ref: 'Secretary' } },
-        { slot: 'critic', role: 'Critic', count: 1, agent: { ref: 'Critic' } },
-    ],
-};
-const SINGLE = {
-    name: 'single',
-    version: 1,
-    builtin: true,
-    description: 'Solo agent: one general-purpose agent works the task with owner oversight',
-    room: { quiet_membership: false, anonymous: false },
-    contract: [
-        'Agent works the task autonomously, consulting the owner when blocked.',
-        'Owner reviews and approves completion.',
-    ].join('\n'),
-    members: [
-        { slot: 'agent', role: 'Agent', count: 1, agent: { ref: 'Agent' } },
-    ],
-};
-export const BUILTIN_TEMPLATES = [TEAM, PAIR, SINGLE];
 export function hashTemplate(t) {
     const canonical = JSON.stringify({
         name: t.name, version: t.version, description: t.description,
@@ -57,38 +7,21 @@ export function hashTemplate(t) {
     return createHash('sha256').update(canonical).digest('hex');
 }
 export function snapshotTemplate(t) {
-    return { ...t, content_hash: hashTemplate(t) };
+    const { sourceFile: _, ...semantic } = t;
+    return { ...semantic, content_hash: hashTemplate(t) };
 }
 export function resolveTemplate(name, customTemplates) {
     const atIdx = name.lastIndexOf('@');
     const baseName = atIdx > 0 ? name.slice(0, atIdx) : name;
     const versionStr = atIdx > 0 ? name.slice(atIdx + 1) : undefined;
     const version = versionStr ? parseInt(versionStr, 10) : undefined;
-    const custom = customTemplates[baseName];
-    if (custom) {
-        if (version !== undefined && custom.version !== version)
-            return undefined;
-        return custom;
-    }
-    const builtin = BUILTIN_TEMPLATES.find(b => b.name === baseName);
-    if (builtin) {
-        if (version !== undefined && builtin.version !== version)
-            return undefined;
-        return builtin;
-    }
-    return undefined;
+    const template = customTemplates[baseName];
+    if (!template || (version !== undefined && template.version !== version))
+        return undefined;
+    return template;
 }
 export function listTemplates(customTemplates) {
-    const result = [];
-    const overridden = new Set();
-    for (const [name, t] of Object.entries(customTemplates)) {
-        result.push({ ...t, name });
-        if (BUILTIN_TEMPLATES.some(b => b.name === name))
-            overridden.add(name);
-    }
-    for (const b of BUILTIN_TEMPLATES) {
-        if (!overridden.has(b.name))
-            result.push(b);
-    }
-    return result.sort((a, b) => a.name.localeCompare(b.name));
+    return Object.entries(customTemplates)
+        .map(([name, template]) => ({ ...template, name }))
+        .sort((a, b) => a.name.localeCompare(b.name));
 }

package/dist/rooms-tasks/types.d.ts

@@ -205,7 +205,8 @@ export interface TemplateDefinition {
     name: string;
     version: number;
     description: string;
-    builtin?: boolean;
+    /** Authoring provenance only; excluded from snapshots and semantic hashes. */
+    sourceFile?: string;
     room?: TemplateRoomConfig;
     contract?: string;
     members: TemplateMemberSlot[];

package/dist/runner.d.ts

@@ -1,5 +1,6 @@
 import { type ResolvedRole } from './config.js';
 import { type MonitorHandle, type MonitorOpts, type FetchLike } from './monitor.js';
+import { type DaemonGenerationProbe } from './daemon-recovery.js';
 import { type Exec } from './exec.js';
 import { RoleControlServer } from './session/control.js';
 import type { AgentSession, ExitRecord, TurnResult } from './session/types.js';
@@ -15,6 +16,7 @@ export interface RunnerDeps {
     log(line: string): void;
     /** HTTP transport for the monitor's daemon long-poll (injectable for tests). */
     fetch: FetchLike;
+    probeGeneration(env: NodeJS.ProcessEnv): Promise<DaemonGenerationProbe>;
     /** Construct the supervisor mail monitor (injectable so tests stub it out). */
     createMonitor(opts: MonitorOpts): MonitorHandle;
     /** Construct trusted owner ingress (injectable for lifecycle tests). */
@@ -31,6 +33,11 @@ export interface RunnerDeps {
     /** Lets a test (or a shutdown path) end the supervised restart loop. */
     shouldStop?(): boolean;
 }
+export declare const SUPERVISOR_RECYCLE_REQUIRED = "OWNER_CHANNEL_SUPERVISOR_RECYCLE_REQUIRED";
+export declare class SupervisorRecycleRequiredError extends Error {
+    readonly code = "OWNER_CHANNEL_SUPERVISOR_RECYCLE_REQUIRED";
+    constructor();
+}
 /** Environment injected only into the managed harness process. */
 export declare function managedFleetProxyEnv(role: ResolvedRole, stateDir: string): Record<string, string>;
 /**
@@ -176,4 +183,4 @@ export declare function runSupervised(name: string, opts?: {
     allowResumeRotation?: boolean;
 }, d: Partial<RunnerDeps>) => Promise<AttemptResult>): Promise<RestartLedger>;
 /** Temp-agent entrypoint: run once, journal why it ended, then archive its evidence. */
-export declare function runTemp(name: string, deps?: Partial<RunnerDeps>): Promise<void>;
+export declare function runTemp(name: string, deps?: Partial<RunnerDeps>, attempt?: typeof runOnce): Promise<void>;

package/dist/runner.js

@@ -6,6 +6,8 @@ import { agentDir, stateRoot } from './paths.js';
 import { loadConfig, findRole, isolationContextFor, resolveMonitorConfig, resolvePermissions, } from './config.js';
 import { getAdapter } from './harness/registry.js';
 import { createMonitor, probeIdentityPresence, } from './monitor.js';
+import { DaemonGenerationObserver, RoleRecoveryController, probeDaemonGeneration, } from './daemon-recovery.js';
+import { recoverAgentIdentity } from './agent-recovery-gate.js';
 import { realExec } from './exec.js';
 import { resolveIsolation } from './isolation/policy.js';
 import { selectIsolationBackend } from './isolation/registry.js';
@@ -24,6 +26,14 @@ import { FLEET_PROXY_CALLER_ENV, FLEET_PROXY_STATE_DIR_ENV, } from './fleet-prox
 import { effectivePermissionMode } from './permissions.js';
 import { assertModelPinReachesChild, effectiveRoleModel, repinModelEnv } from './model-env.js';
 import { archiveTempState, markTempSupervisorActive, requestedTempStopReason, } from './temp-lifecycle.js';
+export const SUPERVISOR_RECYCLE_REQUIRED = 'OWNER_CHANNEL_SUPERVISOR_RECYCLE_REQUIRED';
+export class SupervisorRecycleRequiredError extends Error {
+    code = SUPERVISOR_RECYCLE_REQUIRED;
+    constructor() {
+        super('owner channel requires a fresh supervisor process after unproven client quiescence');
+        this.name = 'SupervisorRecycleRequiredError';
+    }
+}
 const defaultDeps = () => ({
     exec: realExec,
     cpuDelegated: () => cpuControllerDelegated(),
@@ -38,6 +48,7 @@ const defaultDeps = () => ({
     now: () => Date.now(),
     log: line => process.stderr.write(line + '\n'),
     fetch: (url, init) => globalThis.fetch(url, init),
+    probeGeneration: env => probeDaemonGeneration((url, init) => globalThis.fetch(url, init), env),
     createMonitor: opts => createMonitor(opts),
     createOwnerChannel: opts => new OwnerChannel(opts),
     startAgentSession: (adapter, options) => adapter.start(options),
@@ -532,6 +543,9 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
         name, identity: role.identity, agentDir: dir, cfg: role.monitor,
         deps: resolvedMonitorDeps,
     }) : null;
+    const daemonObserver = new DaemonGenerationObserver();
+    const initialDaemon = daemonObserver.observe(await deps.probeGeneration(resolvedMonitorDeps.env));
+    let sessionStartedWithoutDaemonBaseline = initialDaemon.kind !== 'baseline';
     if (monitor)
         await monitor.prime({ resetCursor: resetMonitorCursor });
     rmSync(exitFile, { force: true });
@@ -546,6 +560,7 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
     let ownerBinder;
     let loopManager;
     let arbiter;
+    let recoveryController;
     let reloadLoopConfig;
     let loopGeneration = JSON.stringify((role.loops ?? []).map(loop => [
         loop.name, loop.definitionHash, loop.promptHash,
@@ -782,16 +797,49 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
     // The monitor loop lives exactly as long as the session: it starts once the
     // pane pid is known and is stopped when that pid dies (task dies with runner).
     monitorLoop ??= monitor?.run(pid);
+    recoveryController = new RoleRecoveryController({
+        role: name, identity: role.identity, stateDir: dir, now: deps.now, sleep: deps.sleep,
+        log: deps.log,
+        recoverAgent: async () => {
+            const evidence = await recoverAgentIdentity(arbiter, role.identity);
+            return evidence.ok ? { ok: true } : { ok: false, reason: evidence.reason };
+        },
+        recoverOwner: async (epoch) => {
+            if (!ownerChannel?.recover)
+                return { ok: true };
+            try {
+                await ownerChannel.recover(epoch);
+                return { ok: true };
+            }
+            catch (error) {
+                return { ok: false, reason: error instanceof Error
+                        ? `OWNER_${error.name.toUpperCase()}` : 'OWNER_UNKNOWN_ERROR' };
+            }
+        },
+    });
     const start = deps.now();
     let nextLoopReloadAt = deps.now() + 30_000;
     let nextIdentityPollAt = deps.now();
+    let nextDaemonProbeAt = deps.now();
     let lastReloadError = '';
     let identityObserved = false;
     let identityAbsentSince;
     let retirementReason;
+    let supervisorRecycleRequired = false;
     while (sessionHandle.isAlive()) {
         await deps.sleep(temp ? 500 : 2000);
         const now = deps.now();
+        if (now >= nextDaemonProbeAt) {
+            nextDaemonProbeAt = now + 2_000;
+            const observation = daemonObserver.observe(await deps.probeGeneration(resolvedMonitorDeps.env));
+            if (observation.kind === 'lost')
+                recoveryController.noteLoss(observation.reason);
+            if (observation.kind === 'changed' || observation.kind === 'available'
+                || (observation.kind === 'baseline' && sessionStartedWithoutDaemonBaseline)) {
+                sessionStartedWithoutDaemonBaseline = false;
+                void recoveryController.recover(observation.generation).catch(error => deps.log(`[${name}] daemon recovery controller failed: ${error?.name ?? 'Error'}`));
+            }
+        }
         if (temp && deps.shouldStop?.()) {
             retirementReason = requestedTempStopReason(dir) ?? 'supervisor-signal';
             deps.log(`[${name}] temporary supervisor retirement requested (${retirementReason})`);
@@ -842,6 +890,11 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
         control?.setLoopManager(undefined);
         await loopManager.stop();
     }
+    // Let already-settled path operations publish their aggregate result before
+    // the shutdown fence invalidates the epoch. This never waits on I/O.
+    await Promise.resolve();
+    await Promise.resolve();
+    recoveryController?.cancel();
     control?.setConfigReloader(undefined);
     // Close the authenticated control route before releasing the binder lease;
     // otherwise the predecessor can unlink the replacement's new socket.
@@ -852,7 +905,12 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
     }
     if (ownerChannel)
         await ownerChannel.close();
-    ownerBinder?.release();
+    if (ownerChannel?.binderReleaseSafe?.() === false) {
+        deps.log(`[${name}] owner binder retained because client quiescence was not proven at shutdown`);
+        supervisorRecycleRequired = true;
+    }
+    else
+        ownerBinder?.release();
     if (monitor) {
         monitor.stop();
         await monitorLoop;
@@ -901,6 +959,8 @@ export async function runOnce(name, opts = {}, partialDeps = {}) {
     }
     else
         deps.log(`[${name}] ${exitRecord.detail} (${elapsed.toFixed(0)}s) -> next start RESUMES context`);
+    if (supervisorRecycleRequired)
+        throw new SupervisorRecycleRequiredError();
     return {
         elapsedSecs: elapsed, exit: exitRecord, rotated, mode, modelRecovery,
         ...(retirementReason ? { retirementReason } : {}),
@@ -977,6 +1037,16 @@ export async function runSupervised(name, opts = {}, partialDeps = {}, attempt =
                 result = await attempt(name, { configPath: opts.configPath, allowResumeRotation: !ledger.resumeDiscarded }, deps);
             }
             catch (e) {
+                if (e instanceof SupervisorRecycleRequiredError) {
+                    writeRestartLedger(dir, {
+                        ...ledger,
+                        lastReason: SUPERVISOR_RECYCLE_REQUIRED,
+                        nextDelayMs: 0,
+                        updatedAt: stamp(),
+                    });
+                    deps.log(`[${name}] supervisor recycle required: ${SUPERVISOR_RECYCLE_REQUIRED}`);
+                    throw e;
+                }
                 // A session that could not even start is an immediate failure like any
                 // other; it must count, or an unstartable role loops forever.
                 result = {
@@ -1070,7 +1140,7 @@ function fastFailSecsFor(name, configPath) {
     }
 }
 /** Temp-agent entrypoint: run once, journal why it ended, then archive its evidence. */
-export async function runTemp(name, deps = {}) {
+export async function runTemp(name, deps = {}, attempt = runOnce) {
     const dir = agentDir(name, true);
     await markTempSupervisorActive(dir);
     let signal;
@@ -1081,7 +1151,7 @@ export async function runTemp(name, deps = {}) {
     let result;
     let failure;
     try {
-        result = await runOnce(name, { temp: true }, {
+        result = await attempt(name, { temp: true }, {
             ...deps,
             shouldStop: () => Boolean(signal) || (deps.shouldStop?.() ?? false),
         });
@@ -1095,6 +1165,7 @@ export async function runTemp(name, deps = {}) {
         const requested = requestedTempStopReason(dir);
         const reason = requested
             ?? result?.retirementReason
+            ?? (failure instanceof SupervisorRecycleRequiredError ? 'supervisor-recycle' : undefined)
             ?? (signal ? 'supervisor-signal' : failure ? 'startup-failure' : 'session-ended');
         // A service-manager stop can make the child connection close before the
         // runner reaches its normal loop. That is still a successful requested

package/dist/temp-lifecycle.d.ts

@@ -5,7 +5,7 @@ export declare const TEMP_STOP_REQUEST_FILE = ".temp-stop-request.json";
 export declare const TEMP_RECLAIM_BATCH = 32;
 export declare const TEMP_LAUNCH_GRACE_MS = 60000;
 export type TempSupervisorKind = 'systemd-transient' | 'launchd-transient' | 'detached';
-export type TempTerminationReason = 'identity-closed' | 'session-ended' | 'operator-stop' | 'supervisor-signal' | 'startup-failure' | 'stale-supervisor';
+export type TempTerminationReason = 'identity-closed' | 'session-ended' | 'operator-stop' | 'supervisor-signal' | 'supervisor-recycle' | 'startup-failure' | 'stale-supervisor';
 export interface TempSupervisorRecord {
     version: 1;
     role: string;

package/dist/web/fleet-config-service.js

@@ -12,7 +12,7 @@ import { isSensitiveConfigKey } from '../sensitive-config.js';
 export const REDACTED_ENV_VALUE = '__OURS_FLEET_SECRET_REDACTED__';
 const MAX_CONFIG_BYTES = 256 * 1024;
 const DIFF_CONTEXT_LINES = 3;
-const KINDS = ['agents', 'roles', 'brains'];
+const KINDS = ['agents', 'roles', 'brains', 'room_templates'];
 const emptyReport = () => ({ ok: true, checks: [] });
 export class FleetConfigService {
     path;
@@ -176,7 +176,8 @@ function readSources(manifest) {
         }
         trustedDirectory(dir);
         for (const name of readdirSync(dir).sort()) {
-            if (kind === 'agents' && !['.yaml', '.yml'].includes(extname(name).toLowerCase()))
+            if ((kind === 'agents' || kind === 'room_templates')
+                && !['.yaml', '.yml'].includes(extname(name).toLowerCase()))
                 continue;
             documents.set(join(kind, name), trustedFile(join(dir, name)));
         }
@@ -222,7 +223,7 @@ function renderProposal(current, model) {
             ? render(current.documents.get(oldRel), doc) : stringify(doc));
     }
     for (const [rel, source] of current.documents)
-        if (rel.startsWith('roles/') || rel.startsWith('brains/'))
+        if (rel.startsWith('roles/') || rel.startsWith('brains/') || rel.startsWith('room_templates/'))
             next.set(rel, source);
     return next;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.1.0-nightly.6",
+  "version": "1.1.0-nightly.8",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",
@@ -16,6 +16,7 @@
     "dist",
     "contrib",
     "examples",
+    "presets",
     "README.md",
     "LICENSE"
   ],

package/presets/fleet/agents/Agent.yaml

@@ -0,0 +1,3 @@
+role: { ref: Agent }
+brain: { ref: claude-default }
+permissions: { approval: ask, filesystem: workspace, unattended: deny }

package/presets/fleet/agents/Architect.yaml

@@ -0,0 +1,3 @@
+role: { ref: Architect }
+brain: { ref: claude-default }
+permissions: { approval: ask, filesystem: workspace, unattended: deny }

package/presets/fleet/agents/Critic.yaml

@@ -0,0 +1,3 @@
+role: { ref: Critic }
+brain: { ref: claude-default }
+permissions: { approval: ask, filesystem: workspace, unattended: deny }

package/presets/fleet/agents/Developer.yaml

@@ -0,0 +1,3 @@
+role: { ref: Developer }
+brain: { ref: claude-default }
+permissions: { approval: ask, filesystem: workspace, unattended: deny }

package/presets/fleet/agents/Secretary.yaml

@@ -0,0 +1,3 @@
+role: { ref: Secretary }
+brain: { ref: claude-default }
+permissions: { approval: ask, filesystem: workspace, unattended: deny }

package/presets/fleet/agents/Tester.yaml

@@ -0,0 +1,3 @@
+role: { ref: Tester }
+brain: { ref: claude-default }
+permissions: { approval: ask, filesystem: workspace, unattended: deny }

package/presets/fleet/brains/claude-default.yaml

@@ -0,0 +1,5 @@
+harness: claude-code
+session: acp
+model: null
+effort: high
+max_tokens: 500000

package/presets/fleet/roles/Agent.yaml

@@ -0,0 +1,6 @@
+mission: Complete the assigned task safely and report a verifiable result.
+persona: |
+  Work autonomously within the stated scope. Inspect before changing, preserve unrelated
+  state, test material work, and ask the owner when authority or intent is ambiguous.
+  Do not expand scope, publish, deploy, or claim completion without evidence.
+bio: General-purpose task agent; engage for one bounded task with owner oversight.

package/presets/fleet/roles/Architect.yaml

@@ -0,0 +1,6 @@
+mission: Produce an implementable specification for the assigned goal.
+persona: |
+  Map constraints, interfaces, risks, acceptance criteria, and migration behavior before
+  implementation. Resolve ambiguity with the owner and hand off a bounded design. Do not
+  implement or approve deployment unless the task explicitly expands your role.
+bio: Solution architect; engage to turn a goal into a bounded, reviewable specification.

package/presets/fleet/roles/Critic.yaml

@@ -0,0 +1,6 @@
+mission: Independently challenge the proposed solution and verify its evidence.
+persona: |
+  Audit assumptions, safety boundaries, regressions, tests, and delivery claims. Explain
+  concrete objections and acceptance criteria; do not edit the implementation or block
+  on taste alone. Sign off only when material risks have evidence-backed resolution.
+bio: Independent reviewer; engage to challenge design, implementation, and verification.

package/presets/fleet/roles/Developer.yaml

@@ -0,0 +1,6 @@
+mission: Implement the approved specification with maintainable code and tests.
+persona: |
+  Make the smallest coherent change that satisfies the specification. Preserve unrelated
+  work, validate behavior in proportion to risk, and report deviations immediately. Do
+  not redesign approved scope, waive failing tests, publish, or deploy without authority.
+bio: Implementation specialist; engage after a specification is approved.

package/presets/fleet/roles/Secretary.yaml

@@ -0,0 +1,6 @@
+mission: Implement the agreed solution and maintain the task's shared record.
+persona: |
+  Turn agreed decisions into focused code, documentation, and tests. Keep collaborators
+  informed with compact evidence and preserve unrelated state. Pause material work for
+  required review; do not merge, publish, or widen scope without owner authorization.
+bio: Implementing partner and record keeper; engage to deliver reviewed changes.

package/presets/fleet/roles/Tester.yaml

@@ -0,0 +1,6 @@
+mission: Verify that the implementation satisfies the approved specification.
+persona: |
+  Test observable behavior, failure paths, compatibility, and regression risk independently.
+  Report reproducible evidence and distinguish defects from preferences. Do not repair the
+  implementation or sign off with unresolved material failures.
+bio: Independent verifier; engage to assess conformance, safety, and regression coverage.

package/presets/fleet/room_templates/pair.yaml

@@ -0,0 +1,11 @@
+version: 1
+description: "Deliberation pair: Secretary writes code, Critic reviews — every decision deliberated together"
+room: { quiet_membership: false, anonymous: false }
+contract: |
+  Secretary and Critic deliberate every decision together before acting.
+  Secretary writes code; Critic reviews and challenges.
+  No material change lands without both agreeing.
+  Completion requires joint sign-off.
+members:
+  - { slot: secretary, role: Secretary, count: 1, agent: { ref: Secretary } }
+  - { slot: critic, role: Critic, count: 1, agent: { ref: Critic } }

package/presets/fleet/room_templates/single.yaml

@@ -0,0 +1,8 @@
+version: 1
+description: "Solo agent: one general-purpose agent works the task with owner oversight"
+room: { quiet_membership: false, anonymous: false }
+contract: |
+  Agent works the task autonomously, consulting the owner when blocked.
+  Owner reviews and approves completion.
+members:
+  - { slot: agent, role: Agent, count: 1, agent: { ref: Agent } }

package/presets/fleet/room_templates/team.yaml

@@ -0,0 +1,12 @@
+version: 1
+description: "Phased task pipeline: Architect specifies, Developer implements, Tester verifies"
+room: { quiet_membership: false, anonymous: false }
+contract: |
+  Architect produces a spec and posts it to the room. Work pauses for owner approval.
+  Developer implements per approved spec.
+  Tester verifies spec conformance and test coverage.
+  Completion requires tester sign-off.
+members:
+  - { slot: architect, role: Architect, count: 1, agent: { ref: Architect } }
+  - { slot: developer, role: Developer, count: 1, agent: { ref: Developer } }
+  - { slot: tester, role: Tester, count: 1, agent: { ref: Tester } }

package/presets/fleet.yaml

@@ -0,0 +1,7 @@
+api_version: ours.network/fleet/v2
+
+defaults:
+  permissions: { approval: ask, filesystem: workspace, unattended: deny }
+
+# Rooms require an authenticated owner CID/invite before they can be started.
+# See `ours-fleet docs`, then add `rooms:` and `tasks:` here.

package/presets/manifest.json

@@ -0,0 +1,5 @@
+{
+  "schema_version": 1,
+  "preset_revision": 1,
+  "description": "ours-fleet standard configuration presets"
+}