@ours.network/fleet 1.2.0-nightly.48 → 1.2.0-nightly.49

package/dist/build-info.json

@@ -1,10 +1,11 @@
 {
-  "version": "1.2.0-nightly.48",
-  "buildId": "3f9ee2279814",
-  "commit": "c319f766cc541c22bd6327fe6cf7b9e3fdfc1945",
+  "version": "1.2.0-nightly.49",
+  "buildId": "992b454dab6f",
+  "commit": "007bb41d5f822b22ebc9c708882f6cd7e70ae537",
   "dirty": true,
-  "builtAt": "2026-10-06T07:13:59.670Z",
+  "builtAt": "2026-10-06T08:03:31.440Z",
   "capabilities": [
+    "managed-cli.codex-reasoning-effort-v1",
     "managed-cli.setup-v1",
     "workspace.enroll.preserve-profile-v1",
     "cowork.http-management-v1",

package/dist/capabilities.d.ts

@@ -18,7 +18,9 @@ export declare const CAP_HTTP_COWORK = "cowork.http-management-v1";
 export declare const CAP_WORKSPACE_PRESERVE_PROFILE = "workspace.enroll.preserve-profile-v1";
 /** `ours-fleet managed-cli setup|status` and the `managed_cli` Agent key (#233). */
 export declare const CAP_MANAGED_CLI_SETUP = "managed-cli.setup-v1";
-export declare const CAPABILITIES: readonly ["managed-cli.setup-v1", "workspace.enroll.preserve-profile-v1", "cowork.http-management-v1", "monitor.interrupt.after_tool"];
+/** Managed CLI accepts validated Codex Brain reasoning effort without dropping it (#235). */
+export declare const CAP_MANAGED_CLI_CODEX_EFFORT = "managed-cli.codex-reasoning-effort-v1";
+export declare const CAPABILITIES: readonly ["managed-cli.codex-reasoning-effort-v1", "managed-cli.setup-v1", "workspace.enroll.preserve-profile-v1", "cowork.http-management-v1", "monitor.interrupt.after_tool"];
 export type Capability = (typeof CAPABILITIES)[number];
 /** Does this build declare `token`? */
 export declare const hasCapability: (token: string) => boolean;

package/dist/capabilities.js

@@ -18,7 +18,10 @@ export const CAP_HTTP_COWORK = 'cowork.http-management-v1';
 export const CAP_WORKSPACE_PRESERVE_PROFILE = 'workspace.enroll.preserve-profile-v1';
 /** `ours-fleet managed-cli setup|status` and the `managed_cli` Agent key (#233). */
 export const CAP_MANAGED_CLI_SETUP = 'managed-cli.setup-v1';
+/** Managed CLI accepts validated Codex Brain reasoning effort without dropping it (#235). */
+export const CAP_MANAGED_CLI_CODEX_EFFORT = 'managed-cli.codex-reasoning-effort-v1';
 export const CAPABILITIES = [
+    CAP_MANAGED_CLI_CODEX_EFFORT,
     CAP_MANAGED_CLI_SETUP,
     CAP_WORKSPACE_PRESERVE_PROFILE,
     CAP_HTTP_COWORK,

package/dist/harness/codex-reasoning.d.ts

@@ -0,0 +1,5 @@
+/** Efforts supported by Fleet's Codex Brain contract. Keep native eligibility in sync. */
+export declare const CODEX_REASONING_EFFORTS: readonly ["low", "medium", "high", "xhigh", "max", "ultra"];
+export declare function isCodexReasoningEffort(value: unknown): value is string;
+/** Only inspected model tuning may bypass the managed CLI native-config guard. */
+export declare function isManagedCliCodexConfig(config: unknown): boolean;

package/dist/harness/codex-reasoning.js

@@ -0,0 +1,12 @@
+/** Efforts supported by Fleet's Codex Brain contract. Keep native eligibility in sync. */
+export const CODEX_REASONING_EFFORTS = ['low', 'medium', 'high', 'xhigh', 'max', 'ultra'];
+export function isCodexReasoningEffort(value) {
+    return typeof value === 'string' && CODEX_REASONING_EFFORTS.includes(value);
+}
+/** Only inspected model tuning may bypass the managed CLI native-config guard. */
+export function isManagedCliCodexConfig(config) {
+    if (config == null)
+        return true;
+    return typeof config === 'object' && !Array.isArray(config)
+        && Object.entries(config).every(([key, value]) => key === 'model_reasoning_effort' && isCodexReasoningEffort(value));
+}

package/dist/harness/codex.js

@@ -8,6 +8,7 @@ import { harnessRuntimeDir } from '../isolation/policy.js';
 import { resolveBundledAcpAgent, } from './acp-agent.js';
 import { VERIFIED_CODEX_ACP_VERSIONS, probeCodexRuntime, codexVersionAtLeast, hostCodex } from './codex-runtime.js';
 import { CodexAgentSessionAdapter } from './codex-session.js';
+import { CODEX_REASONING_EFFORTS, isCodexReasoningEffort } from './codex-reasoning.js';
 const OPTION_KEYS = [
     'launcher', 'sandbox', 'approval', 'permission_mode', 'search', 'profile', 'config', 'add_dirs',
     'monitor',
@@ -141,6 +142,13 @@ function neutralSandboxMode(role) {
 function isNativeConfigKeyAllowed(key) {
     return NATIVE_CONFIG_ALLOWLIST.has(key);
 }
+/** Brain wins; a validated native effort also needs delivery through ACP's selection API. */
+function reasoningEffort(role) {
+    if (typeof role.effort === 'string')
+        return role.effort;
+    const value = role.harness_options?.config?.model_reasoning_effort;
+    return isCodexReasoningEffort(value) ? value : undefined;
+}
 /** Defense in depth for callers which launch a role after validation was bypassed. */
 export function nativeCodexConfig(role) {
     const options = role.harness_options;
@@ -318,10 +326,8 @@ export function makeCodexAdapter(exec = realExec, transport, nativeTransport) {
         id: 'codex',
         agentSession: new CodexAgentSessionAdapter({
             resolveBrain(brain) {
-                const levels = ['low', 'medium', 'high', 'xhigh', 'max', 'ultra'];
-                if (brain.effort != null
-                    && (typeof brain.effort !== 'string' || !levels.includes(brain.effort)))
-                    throw new Error(`Codex Brain effort must be one of: ${levels.join(', ')}`);
+                if (brain.effort != null && !isCodexReasoningEffort(brain.effort))
+                    throw new Error(`Codex Brain effort must be one of: ${CODEX_REASONING_EFFORTS.join(', ')}`);
                 const harnessOptions = { ...(brain.harnessOptions ?? {}) };
                 if (brain.effort)
                     harnessOptions.config = {
@@ -343,8 +349,8 @@ export function makeCodexAdapter(exec = realExec, transport, nativeTransport) {
             sessionConfigSelections: role => [
                 ...(typeof role.model === 'string'
                     ? [{ configId: 'model', value: role.model }] : []),
-                ...(typeof role.effort === 'string'
-                    ? [{ configId: 'reasoning_effort', value: role.effort }] : []),
+                ...(reasoningEffort(role)
+                    ? [{ configId: 'reasoning_effort', value: reasoningEffort(role) }] : []),
             ],
             permissionModeId: role => acpAgentMode(role),
             mcpServers: () => undefined,

package/dist/managed-cli.js

@@ -26,6 +26,7 @@ import { managedPinMarker } from './fleet-command-audit.js';
 import { MANAGED_CLI_WORKFLOW_IDS, splitRootFor, } from './config.js';
 import { resolveBundledAcpAgent } from './harness/acp-agent.js';
 import { executableOnPath, hostCodex } from './harness/codex-runtime.js';
+import { isManagedCliCodexConfig } from './harness/codex-reasoning.js';
 import { getAdapter } from './harness/registry.js';
 import { agentDir, defaultConfigPath, home, stateRoot } from './paths.js';
 /** Capability-gated by the installer; see src/capabilities.ts. */
@@ -333,8 +334,8 @@ export function analyzeManagedCli(role, configPath, options = {}) {
     // directories the role adds. Native settings Fleet cannot read may add more.
     const native = (role.harness_options ?? {});
     const writable = [workspace, ...(Array.isArray(native.add_dirs) ? native.add_dirs.filter((dir) => typeof dir === 'string').map(dir => resolve(workspace, dir)) : [])];
-    if (role.harness === 'codex' && (native.profile != null || (native.config && typeof native.config === 'object' && Object.keys(native.config).length)))
-        reasons.push('harness_native.config or harness_native.profile changes Codex\'s native sandbox in ways Fleet does not inspect (for example extra writable roots), so it cannot tell whether the agent could replace the pinned files; drop them or keep this role sandboxed');
+    if (role.harness === 'codex' && (native.profile != null || !isManagedCliCodexConfig(native.config)))
+        reasons.push('harness_native.config or harness_native.profile contains invalid or uninspected Codex settings (for example extra writable roots), so Fleet does not inspect enough to tell whether the agent could replace the pinned files; only validated model_reasoning_effort is supported; drop the other settings or keep this role sandboxed');
     if (role.isolation)
         reasons.push('the role declares isolation:, and Fleet\'s outer sandbox is kept as-is; the workflow is not qualified inside it');
     if (!plainExecutable(paths.node))

package/dist/web/workspace-tunnel.js

@@ -21,12 +21,14 @@ export function startWorkspaceTunnel(origin) {
             return;
         child = spawn('cloudflared', ['tunnel', '--no-autoupdate', 'run', '--token-file', tokenFile], { stdio: 'ignore' });
         let scheduled = false;
+        // Keep an error listener for the child's whole lifetime, including shutdown.
         const retry = () => { if (scheduled || stopped)
             return; scheduled = true; timer = setTimeout(launch, backoff); backoff = Math.min(30000, backoff * 2); };
-        child.once('error', retry);
+        child.on('error', retry);
         child.once('exit', retry);
     };
     launch();
-    return async () => { stopped = true; clearTimeout(timer); const current = child; if (!current || current.exitCode !== null)
-        return; await new Promise(resolve => { const timeout = setTimeout(() => { current.kill('SIGKILL'); resolve(); }, 5000); current.once('exit', () => { clearTimeout(timeout); resolve(); }); current.kill('SIGTERM'); }); };
+    // A failed spawn has no pid and reports error/close rather than exit.
+    return async () => { stopped = true; clearTimeout(timer); const current = child; if (!current?.pid || current.exitCode !== null || current.signalCode !== null)
+        return; await new Promise(resolve => { const timeout = setTimeout(() => { current.kill('SIGKILL'); resolve(); }, 5000); current.once('close', () => { clearTimeout(timeout); resolve(); }); current.kill('SIGTERM'); }); };
 }

package/docs/validation/managed-cli-permissions.md

@@ -127,9 +127,14 @@ commands; roles declaring `isolation:`; unspellable paths; a Node path needing
 quotes; Codex older than 0.160.0 with quoted paths; and any pinned file the
 agent could replace — inside its workspace or a `harness_options.add_dirs`
 directory, lexically or through a symlink. Codex roles with
-`harness_options.config` or `harness_options.profile` are unsupported too:
-those change the native sandbox (for example extra writable roots) in ways Fleet
-does not inspect. Native user settings Fleet cannot read are outside this check.
+`harness_options.profile` or uninspected `harness_options.config` remain unsupported:
+those can change the native sandbox (for example extra writable roots) in ways
+Fleet does not inspect. The only accepted nonempty config is
+`model_reasoning_effort` with a supported value (`low`, `medium`, `high`, `xhigh`,
+`max`, `ultra`). This includes the config generated by Codex Brain `effort` (#235).
+The chosen effort remains in native launch config and ACP reasoning selection;
+adding any unknown or security-bearing config key still prevents policy setup.
+Native user settings Fleet cannot read are outside this check.
 
 ### Qualification
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.48",
+  "version": "1.2.0-nightly.49",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",