@ours.network/fleet 1.1.3 → 1.1.4

package/README.md

@@ -599,6 +599,19 @@ tasks:
   close_room_on_done: true
 ```
 
+Owner-attached rooms require **ours-cowork 1.3.0 or newer**. Fleet sets the
+configured Owner role's command policy to `["*"]` before accepting the Owner
+invite, and reapplies it during Owner-seat recovery. Cowork stores the wildcard
+verbatim, authorizing current and future room runtime commands (including command
+grants and room close/delete) for active seats with that exact role. Other roles'
+grants are unchanged; host/global APIs remain outside this authorization.
+
+Older Cowork versions reject the wildcard. Fleet leaves provisioning at
+`waiting_owner_authorization` with upgrade guidance, without accepting the Owner
+invite or falling back to an enumerated grant list. Upgrade Cowork and retry the
+originating task. Existing active rooms are not retroactively migrated, and rooms
+with Owner attachment disabled receive no Owner grant.
+
 Fleet launches each template member with a dedicated one-time Cowork invite.
 The generated temporary-agent briefing contains the exact identity name, invite,
 Cowork role, and task. The agent creates that identity itself with ours MCP

package/dist/application/task-room-service.d.ts

@@ -233,6 +233,7 @@ export declare class TaskRoomApplicationService {
         };
         taskId: string;
     }): Promise<TaskProvisioningContinuationResult>;
+    private setOwnerRoomCommands;
     private reconcileProvisioningOwner;
     private acceptTerminal;
     listTemplates(): import("../rooms-tasks/types.js").TemplateDefinition[];

package/dist/application/task-room-service.js

@@ -16,7 +16,8 @@ import { withFileLock } from '../atomic-file.js';
 import { launchFleetWorker } from '../rooms-tasks/external-worker.js';
 import { storedRoomLaunchPolicy, TASK_CANCELLABLE_STATES, TASK_TERMINAL_STATES } from '../rooms-tasks/types.js';
 import { deriveTaskRoomName } from '../rooms-tasks/task-room-name.js';
-const OWNER_ROOM_COMMANDS = ['list-members', 'remove-member'];
+// Cowork 1.3.0+ stores this selector verbatim and matches future room commands.
+const OWNER_ROOM_COMMANDS = ['*'];
 /** Repairable terminal observation derived entirely from durable Task/Room state. */
 export function recordTaskProvisioningOutcome(outcome) {
     const room = outcome.room;
@@ -234,7 +235,7 @@ export class TaskRoomApplicationService {
             && active === expected && launched === expected;
         const blocker = task.outcome?.summary ?? task.blocked?.reason ?? room?.saga.error;
         const nextAction = room?.provisioning_detail === 'waiting_owner_authorization'
-            ? `Restore ours-cowork, then run ours-fleet task start ${task.task_id}.`
+            ? `Ensure ours-cowork 1.3.0 or newer is running and available, then run ours-fleet task start ${task.task_id}.`
             : room?.provisioning_detail === 'waiting_owner_invite'
                 ? `Rotate rooms.owner.public_invite, then run ours-fleet task start ${task.task_id}.`
                 : room?.provisioning_detail === 'owner_cid_mismatch'
@@ -497,6 +498,15 @@ export class TaskRoomApplicationService {
             return { kind: 'provisioning_resume_failed', task, room, issues };
         }
     }
+    async setOwnerRoomCommands(cowork, roomId, role) {
+        try {
+            await cowork.setRoleCommands(roomId, { role, commands: [...OWNER_ROOM_COMMANDS] });
+        }
+        catch (error) {
+            setSagaError(roomId, error instanceof Error ? error.message : String(error), 'Ensure ours-cowork 1.3.0 or newer is running and available, then retry the originating task or room create command.', 'waiting_owner_authorization');
+            throw error;
+        }
+    }
     async reconcileProvisioningOwner(cfg, roomId) {
         if (!cfg.rooms)
             throw new ConfigError('rooms: configuration is required before creating or querying rooms');
@@ -518,9 +528,7 @@ export class TaskRoomApplicationService {
             const ownerCid = room.owner_seat_cid.toLowerCase();
             const ownerSeat = remote.seats.find(seat => seat.identity_cid.toLowerCase() === ownerCid && seat.seat_state !== 'removed');
             if (ownerSeat)
-                await cowork.setRoleCommands(roomId, {
-                    role: ownerSeat.role, commands: [...OWNER_ROOM_COMMANDS],
-                });
+                await this.setOwnerRoomCommands(cowork, roomId, ownerSeat.role);
             if (room.saga.phase === 'attach_owner')
                 advanceSaga(roomId, 'create_members', 3);
             return;
@@ -532,9 +540,7 @@ export class TaskRoomApplicationService {
             .find(seat => seat.identity_cid.toLowerCase() === expected && seat.seat_state !== 'removed');
         if (!existing && !cfg.ownerInvite)
             throw new ConfigError('rooms.owner: configure public_invite or public_invite_file before continuing task provisioning');
-        await cowork.setRoleCommands(roomId, {
-            role: existing?.role ?? cfg.rooms.owner.role, commands: [...OWNER_ROOM_COMMANDS],
-        });
+        await this.setOwnerRoomCommands(cowork, roomId, existing?.role ?? cfg.rooms.owner.role);
         const acceptedCid = existing?.identity_cid ?? (await cowork.acceptInvite(roomId, cfg.ownerInvite, {
             role: cfg.rooms.owner.role, expected_cid: cfg.rooms.owner.expected_cid,
         })).seat_cid;
@@ -899,15 +905,7 @@ export class TaskRoomApplicationService {
         room = advanceSaga(room.room_id, 'create_room', 1);
         if (attachOwner) {
             room = advanceSaga(room.room_id, 'attach_owner', 2);
-            try {
-                await cowork.setRoleCommands(room.room_id, {
-                    role: rooms.owner.role, commands: [...OWNER_ROOM_COMMANDS],
-                });
-            }
-            catch (error) {
-                setSagaError(room.room_id, error instanceof Error ? error.message : String(error), 'Restore Cowork availability, then retry the originating task or room create command.', 'waiting_owner_authorization');
-                throw error;
-            }
+            await this.setOwnerRoomCommands(cowork, room.room_id, rooms.owner.role);
             try {
                 const accepted = await cowork.acceptInvite(room.room_id, cfg.ownerInvite, {
                     role: rooms.owner.role, expected_cid: rooms.owner.expected_cid,

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
-  "version": "1.1.3",
-  "buildId": "9bc6c69e96b7",
-  "commit": "e5f5f9cfcdbcebc9314af235ebd64654caa05017",
+  "version": "1.1.4",
+  "buildId": "a288595a172d",
+  "commit": "72d6d26ea49eaf1941885e721eab76e177f974af",
   "dirty": false,
-  "builtAt": "2026-09-10T07:07:12.783Z",
+  "builtAt": "2026-09-11T09:05:53.118Z",
   "capabilities": [
     "monitor.interrupt.after_tool"
   ]

package/dist/rooms-tasks/cowork-adapter.d.ts

@@ -75,7 +75,7 @@ export interface CoworkAdapter {
     }): Promise<CoworkRoleBriefingInfo>;
     setRoleCommands(roomId: string, opts: {
         role: string;
-        commands: Array<'list-members' | 'remove-member'>;
+        commands: Array<'*' | 'list-members' | 'remove-member'>;
     }): Promise<void>;
     getHistory(roomId: string, opts?: {
         after?: number;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.1.3",
+  "version": "1.1.4",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",