@ours.network/fleet 1.2.0-nightly.49 → 1.2.0-nightly.50

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
-  "version": "1.2.0-nightly.49",
-  "buildId": "992b454dab6f",
-  "commit": "007bb41d5f822b22ebc9c708882f6cd7e70ae537",
+  "version": "1.2.0-nightly.50",
+  "buildId": "f9c280d92583",
+  "commit": "e8706ae9eecd3a26992da89c9c7c38651a8ea5fd",
   "dirty": true,
-  "builtAt": "2026-10-06T08:03:31.440Z",
+  "builtAt": "2026-10-06T10:15:17.427Z",
   "capabilities": [
     "managed-cli.codex-reasoning-effort-v1",
     "managed-cli.setup-v1",

package/dist/web/auth.js

@@ -1,3 +1,4 @@
+import { WorkspaceDeviceAuthError } from './workspace-devices.js';
 import { randomBytes, timingSafeEqual } from 'node:crypto';
 import { FleetError } from '../application/errors.js';
 import { TrustedDeviceStore } from './device-store.js';
@@ -117,7 +118,7 @@ export class WebAuth {
         if (authorization.startsWith('Bearer ')) {
             this.validateBoundary(request, mutation);
             if (!this.workspaceDevices)
-                throw new FleetError('unauthorized', 'workspace bearer credential is invalid');
+                throw new WorkspaceDeviceAuthError('workspace bearer credential is invalid');
             const device = this.requireWorkspaceDevices().authenticate(authorization.slice(7));
             const id = `workspace:${device.id}`;
             const session = { id, csrf: '', createdAt: device.createdAt, lastSeenAt: this.now(), absoluteExpiresAt: device.expiresAt };

package/dist/web/prefix-gateway.d.ts

@@ -1,3 +1,4 @@
+import type { AuditSink } from './audit.js';
 import { type IncomingMessage } from 'node:http';
 import type { WebAuth } from './auth.js';
 /** Each entry exposes one dedicated backend listener. Endpoint dispatch stays upstream. */
@@ -21,6 +22,8 @@ export interface GatewayOptions {
     auth: WebAuth | 'backend';
     fleetOrigin: string;
     services: ServiceTarget[];
+    /** Bounded unauthorized-response diagnostics: fixed service/action enums only. */
+    audit?: Pick<AuditSink, 'record'>;
 }
 /** Raw transport deliberately runs outside Fastify's JSON parser and body limits. */
 export declare function createPrefixGateway(options: GatewayOptions): {

package/dist/web/prefix-gateway.js

@@ -1,3 +1,5 @@
+import { randomUUID } from 'node:crypto';
+import { WorkspaceDeviceAuthError } from './workspace-devices.js';
 import { createServer, request as httpRequest } from 'node:http';
 import { request as httpsRequest } from 'node:https';
 /** The App offers exactly these two subprotocols; only the marker is ever answered or forwarded. */
@@ -22,6 +24,16 @@ function headersFor(message) {
 /** Raw transport deliberately runs outside Fastify's JSON parser and body limits. */
 export function createPrefixGateway(options) {
     const auth = options.auth === 'backend' ? undefined : options.auth;
+    let auditWindow = Date.now(), auditCount = 0;
+    const rejected = (requestId, prefix, result) => {
+        if (Date.now() - auditWindow >= 60_000) {
+            auditWindow = Date.now();
+            auditCount = 0;
+        }
+        if (auditCount++ >= 60)
+            return;
+        void options.audit?.record({ requestId, action: 'gateway' + prefix.replaceAll('/', '.'), result, errorCode: 'unauthorized' }).catch(() => { });
+    };
     const services = options.services.map(target => {
         if (!/^\/[a-z][a-z0-9-]*$/.test(target.prefix) || target.prefix === '/fleet')
             throw new Error('invalid service prefix');
@@ -67,6 +79,8 @@ export function createPrefixGateway(options) {
         for (const key of Object.keys(headers))
             if (key.startsWith('x-forwarded-') || key === 'forwarded')
                 delete headers[key];
+        delete headers['x-ours-workspace-auth'];
+        delete headers['x-ours-request-id'];
         if (route.service) {
             if (auth)
                 for (const name of ['cookie', 'authorization', 'x-csrf-token', 'x-ours-api-token'])
@@ -108,10 +122,11 @@ export function createPrefixGateway(options) {
     const accountCors = (req) => {
         const origin = auth?.accountOrigin(req);
         return origin ? { 'access-control-allow-origin': origin, vary: 'Origin',
-            'access-control-expose-headers': 'Accept-Ranges, Content-Disposition, Content-Length, Content-Range, Content-Type, ETag' } : {};
+            'access-control-expose-headers': 'Accept-Ranges, Content-Disposition, Content-Length, Content-Range, Content-Type, ETag, X-Ours-Workspace-Auth, X-Ours-Request-Id' } : {};
     };
     const server = createServer((req, res) => {
         const cors = accountCors(req);
+        const requestId = randomUUID();
         let route;
         try {
             if (req.method === 'OPTIONS' && cors.vary && req.headers['access-control-request-method'] && select(req).service) {
@@ -126,7 +141,12 @@ export function createPrefixGateway(options) {
         }
         catch (error) {
             const code = error.code;
-            res.writeHead(code === 'unauthorized' ? 401 : 403, { ...cors, 'content-type': 'application/json', 'cache-control': 'no-store' });
+            const deviceRejected = error instanceof WorkspaceDeviceAuthError;
+            if (code === 'unauthorized')
+                rejected(requestId, '/auth', deviceRejected ? 'device_rejected' : 'gateway_rejected');
+            res.writeHead(code === 'unauthorized' ? 401 : 403, { ...cors, 'content-type': 'application/json', 'cache-control': 'no-store',
+                ...(code === 'unauthorized' ? { 'x-ours-request-id': requestId } : {}),
+                ...(deviceRejected ? { 'x-ours-workspace-auth': 'rejected' } : {}) });
             res.end(JSON.stringify({ error: { code: code ?? 'forbidden', message: error.message } }));
             return;
         }
@@ -136,6 +156,14 @@ export function createPrefixGateway(options) {
             const headers = headersFor(response);
             if (route.service) {
                 delete headers['set-cookie'];
+                // Only Fleet may assert device rejection; never trust a service's marker or correlation id.
+                delete headers['x-ours-workspace-auth'];
+                delete headers['x-ours-request-id'];
+                if (response.statusCode === 401) {
+                    headers['x-ours-request-id'] = requestId;
+                    headers['x-ours-workspace-auth'] = 'service';
+                    rejected(requestId, route.service.prefix, 'upstream_401');
+                }
                 for (const key of Object.keys(headers))
                     if (key.startsWith('access-control-'))
                         delete headers[key];

package/dist/web/runtime.js

@@ -249,7 +249,7 @@ export async function startWebConsole(options) {
             const services = ['daemon', 'cowork', 'messenger', 'notifications'].map(name => ({ prefix: '/' + name, origin: provider.origin, upstreamPrefix: basePath + '/' + name, stripBrowserContext: true, headers: { 'X-Ours-Api-Token': credential, ...(name === 'messenger' ? { Origin: provider.origin, 'X-Ours-Messenger-CSRF': '1' } : name === 'cowork' ? { Origin: provider.origin } : {}) },
                 // The App reports a visible page to the notification service, so an open app is not sent a push.
                 ...(name === 'notifications' ? { deviceSocketPaths: ['/api/v1/presence'] } : {}) }));
-            gateway = createPrefixGateway({ auth: server.auth, fleetOrigin: address, services });
+            gateway = createPrefixGateway({ auth: server.auth, fleetOrigin: address, services, audit });
             const listen = (port) => new Promise((resolve, reject) => { gateway.server.once('error', reject); gateway.server.listen(port, bind, () => { gateway.server.off('error', reject); resolve(); }); });
             try {
                 await listen(requestedPort);

package/dist/web/server.js

@@ -1,3 +1,4 @@
+import { WorkspaceDeviceAuthError } from './workspace-devices.js';
 import { readFileSync } from 'node:fs';
 import { packagedPresetRoot } from '../preset-bootstrap.js';
 import { validateCatalog } from '../init-wizard.js';
@@ -48,6 +49,7 @@ export async function buildWebServer(services, boundary, options = {}) {
         if (request.headers.origin === auth.appOrigin && request.url.startsWith('/api/')) {
             reply.header('Access-Control-Allow-Origin', auth.appOrigin).header('Vary', 'Origin');
             reply.header('Access-Control-Allow-Methods', 'GET,POST,PUT,PATCH,DELETE,OPTIONS');
+            reply.header('Access-Control-Expose-Headers', 'X-Ours-Workspace-Auth, X-Ours-Request-Id');
             reply.header('Access-Control-Allow-Headers', 'Authorization,Content-Type,X-CSRF-Token,Idempotency-Key');
             if (request.method === 'OPTIONS') {
                 auth.validateBoundary(request, false);
@@ -78,6 +80,10 @@ export async function buildWebServer(services, boundary, options = {}) {
             requestId: request.id, action: `${request.method} ${request.routeOptions.url ?? request.url}`,
             result: 'rejected', errorCode: fleetError.code,
         });
+        if (error instanceof WorkspaceDeviceAuthError)
+            reply.header('X-Ours-Workspace-Auth', 'rejected');
+        if (fleetError.code === 'unauthorized')
+            reply.header('X-Ours-Request-Id', request.id);
         reply.code(statusFor(fleetError.code)).send({ error: fleetError.toJSON() });
     });
     app.post('/api/v1/auth/exchange', async (request, reply) => {

package/dist/web/workspace-devices.d.ts

@@ -1,3 +1,8 @@
+import { FleetError } from '../application/errors.js';
+/** Only failure of the enrolled device check may invalidate the App's saved credential. */
+export declare class WorkspaceDeviceAuthError extends FleetError {
+    constructor(message?: string);
+}
 export interface WorkspaceDevice {
     id: string;
     label: string;

package/dist/web/workspace-devices.js

@@ -6,6 +6,10 @@ import { stateRoot } from '../paths.js';
 import { FleetError } from '../application/errors.js';
 const opaque = () => randomBytes(32).toString('base64url');
 const hash = (value) => createHash('sha256').update(value).digest('hex');
+/** Only failure of the enrolled device check may invalidate the App's saved credential. */
+export class WorkspaceDeviceAuthError extends FleetError {
+    constructor(message = 'workspace device is missing, expired, or revoked') { super('unauthorized', message); }
+}
 export class WorkspaceDeviceStore {
     now;
     db;
@@ -73,7 +77,7 @@ export class WorkspaceDeviceStore {
         const row = this.db.prepare('SELECT * FROM devices WHERE id=? AND revokedAt IS NULL AND expiresAt>?').get(id, now);
         const supplied = Buffer.from(hash(token || '')), expected = Buffer.from(String(row?.hash || '0'.repeat(64)));
         if (!row || !timingSafeEqual(supplied, expected))
-            throw new FleetError('unauthorized', 'workspace device is missing, expired, or revoked');
+            throw new WorkspaceDeviceAuthError();
         this.db.prepare('UPDATE devices SET lastUsedAt=? WHERE id=?').run(now, id);
         return { id, label: String(row.label), createdAt: Number(row.createdAt), lastUsedAt: now, expiresAt: Number(row.expiresAt), revokedAt: null };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.49",
+  "version": "1.2.0-nightly.50",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",