@ours.network/fleet 1.2.0-nightly.21 → 1.2.0-nightly.23

package/dist/web/server.js

@@ -17,6 +17,7 @@ import { FleetEventBus } from './events.js';
 import { ROLE_NAME_RE } from '../config.js';
 import { TaskListError } from '../rooms-tasks/task-lists.js';
 import { TaskStateError } from '../rooms-tasks/task-state.js';
+import { isProvider } from '../subscriptions/store.js';
 const statusFor = (code) => ({
     role_not_found: 404, resource_not_found: 404, unauthorized: 401, forbidden: 403, conflict: 409,
     idempotency_conflict: 409, stale_state: 409, rate_limited: 429,
@@ -433,6 +434,86 @@ export async function buildWebServer(services, boundary, options = {}) {
         });
         return result;
     });
+    // Claude Code / Codex subscription profiles. Responses carry account metadata
+    // only; token values never leave the CLI-owned credential files.
+    const subscriptions = () => {
+        if (!services.subscriptions)
+            throw new FleetError('capability_unavailable', 'subscription management is unavailable');
+        return services.subscriptions;
+    };
+    const provider = (raw) => {
+        if (!isProvider(raw))
+            throw new FleetError('invalid_request', 'unknown subscription provider');
+        return raw;
+    };
+    const subscriptionsChanged = () => events.publish('subscription.changed', {});
+    app.get('/api/v1/subscriptions', async (request) => {
+        auth.authenticate(request);
+        return { providers: await subscriptions().list() };
+    });
+    app.post('/api/v1/subscriptions/:provider/logins', async (request, reply) => {
+        const session = auth.authenticate(request, true);
+        const login = await subscriptions().startLogin(provider(request.params.provider), session.id);
+        await audit.record({ requestId: request.id, browser: session.id, action: `subscription.login.${request.params.provider}`, result: login.state });
+        reply.code(201);
+        return login;
+    });
+    app.get('/api/v1/subscriptions/:provider/logins/:loginId', async (request) => {
+        const session = auth.authenticate(request);
+        return subscriptions().login(request.params.loginId, session.id).view();
+    });
+    app.post('/api/v1/subscriptions/:provider/logins/:loginId/code', async (request) => {
+        const session = auth.authenticate(request, true);
+        const code = request.body?.code;
+        if (typeof code !== 'string')
+            throw new FleetError('invalid_request', 'code is required');
+        const login = subscriptions().login(request.params.loginId, session.id);
+        login.submitCode(code.trim());
+        await audit.record({ requestId: request.id, browser: session.id, action: `subscription.login.code.${request.params.provider}`, result: 'submitted' });
+        return login.view();
+    });
+    app.delete('/api/v1/subscriptions/:provider/logins/:loginId', async (request) => {
+        const session = auth.authenticate(request, true);
+        const login = subscriptions().login(request.params.loginId, session.id);
+        login.cancel();
+        return login.view();
+    });
+    app.post('/api/v1/subscriptions/:provider/active', async (request) => {
+        const session = auth.authenticate(request, true);
+        const profileId = request.body?.profileId;
+        if (typeof profileId !== 'string')
+            throw new FleetError('invalid_request', 'profileId is required');
+        const view = await subscriptions().setActive(provider(request.params.provider), profileId);
+        subscriptionsChanged();
+        await audit.record({ requestId: request.id, browser: session.id, action: `subscription.activate.${request.params.provider}`, result: 'succeeded' });
+        return view;
+    });
+    app.post('/api/v1/subscriptions/:provider/profiles/:profileId/check', async (request) => {
+        auth.authenticate(request, true);
+        return subscriptions().check(provider(request.params.provider), request.params.profileId);
+    });
+    app.post('/api/v1/subscriptions/claude/profiles/:profileId/probe', async (request) => {
+        const session = auth.authenticate(request, true);
+        const usage = await subscriptions().probeClaudeUsage(request.params.profileId);
+        await audit.record({ requestId: request.id, browser: session.id, action: 'subscription.usage.probe.claude', result: usage.source });
+        return { usage };
+    });
+    app.patch('/api/v1/subscriptions/:provider/profiles/:profileId', async (request) => {
+        auth.authenticate(request, true);
+        const label = request.body?.label;
+        if (typeof label !== 'string')
+            throw new FleetError('invalid_request', 'label is required');
+        await subscriptions().rename(provider(request.params.provider), request.params.profileId, label);
+        subscriptionsChanged();
+        return { ok: true };
+    });
+    app.delete('/api/v1/subscriptions/:provider/profiles/:profileId', async (request) => {
+        const session = auth.authenticate(request, true);
+        await subscriptions().remove(provider(request.params.provider), request.params.profileId);
+        subscriptionsChanged();
+        await audit.record({ requestId: request.id, browser: session.id, action: `subscription.remove.${request.params.provider}`, result: 'succeeded' });
+        return { ok: true };
+    });
     app.get('/api/v1/topology', async (request) => {
         auth.authenticate(request);
         if (!services.topology)
@@ -543,13 +624,22 @@ export async function buildWebServer(services, boundary, options = {}) {
         const control = await services.session(request.params.id);
         if (!control.conversationPage)
             throw new FleetError('capability_unavailable', 'this role has no conversation ledger');
-        const page = await control.conversationPage({
-            after: request.query.after,
-            limit: request.query.limit ? Number(request.query.limit) : undefined,
-        });
+        const limit = request.query.limit ? Number(request.query.limit) : undefined;
+        // `latest` / `before` page backwards from the newest event; `after` pages forward for live updates.
+        const backward = request.query.latest === '1' || request.query.before !== undefined;
+        if (backward && request.query.after !== undefined)
+            throw new FleetError('invalid_request', 'after cannot be combined with latest or before');
+        if (backward && !control.conversationTail)
+            throw new FleetError('capability_unavailable', 'this role cannot page its conversation backwards');
         const role = await services.repository.get(request.params.id);
         const stateDir = role ? services.repository.stateDir(role) : undefined;
-        return { ...page, events: page.events.map(event => presentAttachmentEvent(stateDir, request.params.id, event)) };
+        const present = (event) => presentAttachmentEvent(stateDir, request.params.id, event);
+        if (backward) {
+            const page = await control.conversationTail({ before: request.query.before, limit });
+            return { ...page, events: page.events.map(present), context: page.context.map(present) };
+        }
+        const page = await control.conversationPage({ after: request.query.after, limit });
+        return { ...page, events: page.events.map(present) };
     });
     app.get('/api/v1/roles/:id/attachments/:attachmentId', async (request, reply) => {
         auth.authenticate(request);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.21",
+  "version": "1.2.0-nightly.23",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",