@ours.network/fleet 1.2.0-nightly.28 → 1.2.0-nightly.29

package/README.md

@@ -1825,3 +1825,5 @@ See [Room layouts](docs/room-layouts.md) for YAML examples and CLI commands.
 ### Dedicated notification service
 
 Configure the web backend with `OURS_NOTIFICATIONS_ORIGIN` and a Fleet-scoped `OURS_NOTIFICATIONS_PRODUCER_TOKEN`. It reads each local supervisor ledger incrementally with persistent checkpoints under web state, correlating owner browser/channel prompts with terminal completion. Monitor/startup turns do not notify. First installation skips existing history; no agent restart or conversation controller is needed. Persist web state across deployment/restarts. Reads are bounded to 256 KiB per role per tick, and oversized model/media records are skipped across chunks. Expose `/notifications` through the generic authenticated prefix gateway with a server-side user token and `stripBrowserContext: true`; producer tokens stay server-side. All browser sessions of this single-owner console map to one stable notification account. See [ours-notifications](https://github.com/adapt-toolkit/ours-notifications) for configuration/API/release details.
+
+Existing-host enrollment: `ours-fleet workspace-enroll --file <private-file> --preserve-profile` requires Messenger to advertise preservation support before any enrollment POST. It omits Name/Surname and leaves existing/absent profile untouched. Existing Fleet models and agents are retained; the installer must skip init when its configuration exists. Signed root proof, tunnel setup and device QR issuance remain the normal enrollment flow. Older Messenger fails closed and requires its preservation-capable release.

package/dist/build-info.json

@@ -1,10 +1,11 @@
 {
-  "version": "1.2.0-nightly.28",
-  "buildId": "7b8a6a05d7bf",
-  "commit": "e3c40e2873a322b6f0b43d940475eed2a94eb2c4",
+  "version": "1.2.0-nightly.29",
+  "buildId": "cc1740d5df7b",
+  "commit": "e4737a56d25b0244222bd94b25c299825b8f916f",
   "dirty": true,
-  "builtAt": "2026-10-01T07:15:35.480Z",
+  "builtAt": "2026-10-01T10:23:02.435Z",
   "capabilities": [
+    "workspace.enroll.preserve-profile-v1",
     "cowork.http-management-v1",
     "monitor.interrupt.after_tool"
   ]

package/dist/capabilities.d.ts

@@ -15,7 +15,8 @@
 /** `monitor.interrupt: after_tool` — cancel at the next tool boundary (#67). */
 export declare const CAP_MONITOR_INTERRUPT_AFTER_TOOL = "monitor.interrupt.after_tool";
 export declare const CAP_HTTP_COWORK = "cowork.http-management-v1";
-export declare const CAPABILITIES: readonly ["cowork.http-management-v1", "monitor.interrupt.after_tool"];
+export declare const CAP_WORKSPACE_PRESERVE_PROFILE = "workspace.enroll.preserve-profile-v1";
+export declare const CAPABILITIES: readonly ["workspace.enroll.preserve-profile-v1", "cowork.http-management-v1", "monitor.interrupt.after_tool"];
 export type Capability = (typeof CAPABILITIES)[number];
 /** Does this build declare `token`? */
 export declare const hasCapability: (token: string) => boolean;

package/dist/capabilities.js

@@ -15,7 +15,9 @@
 /** `monitor.interrupt: after_tool` — cancel at the next tool boundary (#67). */
 export const CAP_MONITOR_INTERRUPT_AFTER_TOOL = 'monitor.interrupt.after_tool';
 export const CAP_HTTP_COWORK = 'cowork.http-management-v1';
+export const CAP_WORKSPACE_PRESERVE_PROFILE = 'workspace.enroll.preserve-profile-v1';
 export const CAPABILITIES = [
+    CAP_WORKSPACE_PRESERVE_PROFILE,
     CAP_HTTP_COWORK,
     CAP_MONITOR_INTERRUPT_AFTER_TOOL,
 ];

package/dist/cli.js

@@ -1531,10 +1531,11 @@ webCommand.command('open').description('securely open or re-pair a browser with
 });
 cOpt(program.command('workspace-enroll').description('enroll this host using a private account setup file'))
     .requiredOption('--file <path>', 'owned private payload file')
+    .option('--preserve-profile', 'retain the existing human profile without creating or rewriting it')
     .option('--migrate-app-origin', 'explicitly migrate the same workspace to its new account origin after verified signed proof')
     .action(async (opts) => {
     try {
-        const result = await enrollWorkspace(readWorkspacePayload(opts.file), opts.configuration, { migrateAppOrigin: opts.migrateAppOrigin });
+        const result = await enrollWorkspace(readWorkspacePayload(opts.file), opts.configuration, { migrateAppOrigin: opts.migrateAppOrigin, preserveProfile: opts.preserveProfile });
         if (!existsSync(new WebAccessStore().path))
             configureWebAccess({ pairing: true });
         const manager = new WebServiceManager();

package/dist/workspace-enrollment.d.ts

@@ -18,6 +18,7 @@ export interface WorkspacePayload {
 export declare function readWorkspacePayload(file: string): WorkspacePayload;
 export declare function enrollWorkspace(payload: WorkspacePayload, configuration?: string, options?: {
     migrateAppOrigin?: boolean;
+    preserveProfile?: boolean;
 }): Promise<{
     origin: string;
     hostWorkspaceId: string;

package/dist/workspace-enrollment.js

@@ -63,6 +63,8 @@ export async function enrollWorkspace(payload, configuration = defaultConfigPath
     const identity = await request('workspace/enrollment-identity');
     if (!/^[a-f0-9]{64}$/i.test(identity.cid))
         throw Error('Bound Messenger identity unavailable');
+    if (options.preserveProfile && identity.preserveProfile !== true)
+        throw Error('Existing-host setup requires Messenger profile-preservation support; update the host Messenger before retrying');
     if (loaded.rooms && loaded.rooms.owner.expected_cid.toLowerCase() !== identity.cid.toLowerCase())
         throw Error('Retained room owner CID conflicts with the Human root');
     const inviteFile = loaded.rooms?.owner.public_invite_file || join(dir, 'owner.invite');
@@ -74,7 +76,8 @@ export async function enrollWorkspace(payload, configuration = defaultConfigPath
     const devices = new WorkspaceDeviceStore();
     const hostWorkspaceId = devices.workspaceId;
     devices.close();
-    const result = await request('workspace/enroll', { ...payload, hostWorkspaceId });
+    const { name, surname, ...proofPayload } = payload;
+    const result = await request('workspace/enroll', options.preserveProfile ? { ...proofPayload, hostWorkspaceId, preserveProfile: true } : { ...payload, hostWorkspaceId });
     if (!result.submitted || !/^[a-f0-9]{64}$/i.test(result.rootCid) || typeof result.ownerInvite !== 'string')
         throw Error('Malformed workspace enrollment response');
     if (loaded.rooms && loaded.rooms.owner.expected_cid.toLowerCase() !== result.rootCid.toLowerCase())

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.28",
+  "version": "1.2.0-nightly.29",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",