@ours.network/fleet 1.2.0-nightly.1 → 1.2.0-nightly.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1678,3 +1678,22 @@ under identical input names and versions, plus a missing-vendor negative check):
1678
1678
  ```sh
1679
1679
  node scripts/check-build-selected.mjs --sdk /artifacts/ours.network-sdk-3.7.2.tgz --cli /artifacts/ours.network-cli-2.7.2.tgz
1680
1680
  ```
1681
+
1682
+ ### Remote clients over HTTPS
1683
+
1684
+ A client may select an `https://` origin backed by a TLS reverse proxy. Keep the
1685
+ daemon listener private and configure the proxy separately with a certificate
1686
+ trusted by the client and matching the hostname. Node uses its normal trust
1687
+ store; a private CA may be supplied through `NODE_EXTRA_CA_CERTS` before starting
1688
+ the client. Certificate verification must remain enabled.
1689
+
1690
+ The existing issued client credential works over either transport; changing the
1691
+ URL scheme does not require a new credential. Keep the server's master on the
1692
+ server. Forward `x-ours-api-token` and the `x-ours-*` session headers unchanged,
1693
+ and support streamed request/response bodies and long polling. Client requests
1694
+ refuse redirects, including HTTPS-to-HTTP redirects: configure the final HTTPS
1695
+ origin directly. UUID/capability checks still precede credential-bearing calls.
1696
+
1697
+ This adds client HTTPS support, not an HTTPS daemon listener, certificate
1698
+ provisioning or automatic reverse-proxy configuration. Existing local HTTP and
1699
+ SSH-tunnel profiles continue to work.
@@ -1,9 +1,9 @@
1
1
  {
2
- "version": "1.2.0-nightly.1",
3
- "buildId": "1e4449b7d64e",
4
- "commit": "79fb01a75d39a721491c789b857f892c7c9d000f",
2
+ "version": "1.2.0-nightly.2",
3
+ "buildId": "e29dfb038997",
4
+ "commit": "95f30545961ab68e2196fe3c9b3759ab8319f0ca",
5
5
  "dirty": true,
6
- "builtAt": "2026-09-18T12:07:17.159Z",
6
+ "builtAt": "2026-09-19T07:35:12.185Z",
7
7
  "capabilities": [
8
8
  "monitor.interrupt.after_tool"
9
9
  ]
@@ -97,9 +97,9 @@ export function readClientProfile(env) {
97
97
  catch {
98
98
  throw invalid(configPath, 'has an invalid endpoint');
99
99
  }
100
- if (url.protocol !== 'http:' || url.username || url.password || url.pathname !== '/'
100
+ if ((url.protocol !== 'http:' && url.protocol !== 'https:') || url.username || url.password || url.pathname !== '/'
101
101
  || url.search || url.hash)
102
- throw invalid(configPath, 'endpoint must be a local HTTP origin');
102
+ throw invalid(configPath, 'endpoint must be an HTTP or HTTPS origin');
103
103
  const expectedInstanceId = row.expectedInstanceId.trim();
104
104
  if (!LOWERCASE_UUID.test(expectedInstanceId))
105
105
  throw invalid(configPath, 'expectedInstanceId must be a lowercase UUID');
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ours.network/fleet",
3
- "version": "1.2.0-nightly.1",
3
+ "version": "1.2.0-nightly.2",
4
4
  "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
5
5
  "type": "module",
6
6
  "license": "FSL-1.1-Apache-2.0",
@@ -41,8 +41,8 @@
41
41
  "@agentclientprotocol/sdk": "^1.3.0",
42
42
  "@fastify/static": "^10.1.2",
43
43
  "@fastify/websocket": "^11.2.0",
44
- "@ours.network/cli": "2.8.1-nightly.1",
45
- "@ours.network/sdk": "3.8.1-nightly.3",
44
+ "@ours.network/cli": "2.8.1-nightly.2",
45
+ "@ours.network/sdk": "3.8.1-nightly.4",
46
46
  "commander": "^12.1.0",
47
47
  "fastify": "^5.4.0",
48
48
  "react": "^19.1.1",