@ours.network/fleet 1.2.0-nightly.53 → 1.2.0-nightly.55

package/dist/temp-lifecycle.js

@@ -1,8 +1,11 @@
 import { appendFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, statSync, } from 'node:fs';
+import { parse } from 'yaml';
 import { randomUUID } from 'node:crypto';
 import { basename, join } from 'node:path';
 import { replaceFileAtomically, withFileLock, withSynchronousFileLock } from './atomic-file.js';
 import { realExec } from './exec.js';
+import { captureMemberEnvironment, catalogLiveness, memberKey, readMember, registerMember, unregisterMember, unregisterTaskMember } from './supervisor/catalog.js';
+import { ensureFleetParent } from './supervisor/fleet.js';
 import { stateRoot, tmpRoot } from './paths.js';
 export const TEMP_SUPERVISOR_FILE = '.temp-supervisor.json';
 export const TEMP_TERMINATION_FILE = 'termination.jsonl';
@@ -13,26 +16,40 @@ export const TEMP_LAUNCH_GRACE_MS = 60_000;
 const metadataPath = (dir) => join(dir, TEMP_SUPERVISOR_FILE);
 export const tempSystemdUnit = (name) => `ours-fleet-temp-${name}.service`;
 export const tempLaunchdLabel = (name) => `network.ours.fleet.temp.${name}`;
-export function prepareTempSupervisor(dir, role) {
+export function prepareTempSupervisor(dir, role, taskOwner) {
     const record = {
-        version: 1, role, launchId: randomUUID(), createdAt: new Date().toISOString(), phase: 'launching',
+        version: 1, role, launchId: randomUUID(), createdAt: new Date().toISOString(), phase: 'launching', ...(taskOwner ? { taskOwner } : {}),
     };
     replaceFileAtomically(metadataPath(dir), JSON.stringify(record, null, 2) + '\n');
     return record;
 }
 export function readTempSupervisor(dir) {
+    let value;
     try {
-        const value = JSON.parse(readFileSync(metadataPath(dir), 'utf8'));
-        if (value.version !== 1 || typeof value.role !== 'string' || typeof value.launchId !== 'string')
-            return undefined;
-        return value;
+        value = JSON.parse(readFileSync(metadataPath(dir), 'utf8'));
     }
     catch {
         return undefined;
     }
+    if (!value || typeof value !== 'object' || value.version !== 1 || typeof value.role !== 'string' || typeof value.launchId !== 'string')
+        return undefined;
+    if (value.kind !== undefined && !['fleet-managed', 'systemd-transient', 'launchd-transient', 'detached'].includes(value.kind))
+        throw Error('TEMP_SUPERVISOR_KIND_UNSUPPORTED');
+    return value;
+}
+/** Broad scans retain unsupported entries instead of blocking other members. */
+export function readTempSupervisorForScan(dir) {
+    try {
+        return readTempSupervisor(dir);
+    }
+    catch (error) {
+        if (error instanceof Error && error.message === 'TEMP_SUPERVISOR_KIND_UNSUPPORTED')
+            return undefined;
+        throw error;
+    }
 }
 const metadataLockPath = (dir) => join(stateRoot(), 'locks', 'temp-supervisors', encodeURIComponent(basename(dir)));
-async function updateTempSupervisor(dir, update) {
+export async function updateTempSupervisor(dir, update) {
     // The launcher and the just-started supervisor are separate processes. Lock
     // their read/merge/write updates so neither can discard the other's kind,
     // target, pid or phase. The lock lives outside the role directory so an
@@ -48,54 +65,22 @@ async function updateTempSupervisor(dir, update) {
         return next;
     });
 }
-/**
- * Launch a temp supervisor outside the caller's service-manager ownership
- * boundary. `detached: true` creates a new process group but does not escape a
- * systemd cgroup; a transient unit does, and is not enabled across reboot.
- */
+/** Register managed members under Fleet; explicit manual mode uses a detached child. */
 export function makeTempSupervisorLauncher(options = {}) {
     const exec = options.exec ?? realExec;
     const platform = options.platform ?? process.platform;
     const supervisor = options.supervisor ?? process.env.OURS_FLEET_SUPERVISOR;
     return async (binPath, args, dir) => {
-        const inherited = [
-            'HOME', 'PATH', 'XDG_RUNTIME_DIR', 'OURS_FLEET_HOME', 'OURS_FLEET_SOCKET_ROOT', 'CODEX_HOME',
-            // Preserve runtime selection across the service-manager boundary, including
-            // an explicit empty value which selects the bundle over manager defaults.
-            'CODEX_PATH',
-            // The child supervisor performs daemon identity and wake probes itself;
-            // it must resolve the same ours profile as the spawning supervisor.
-            'OURS_PORT', 'OURS_STATE_DIR', 'OURS_API_TOKEN', 'OURS_CONFIG',
-        ]
-            .flatMap(key => process.env[key] !== undefined ? [`${key}=${process.env[key]}`] : []);
         const role = args.at(-1);
         if (!role)
             throw new Error('temporary supervisor launch requires a role name');
-        const log = join(dir, 'supervisor.log');
-        if (supervisor !== 'none' && platform === 'linux') {
-            const target = tempSystemdUnit(role);
-            await updateTempSupervisor(dir, { phase: 'launching', kind: 'systemd-transient', target, binPath });
-            const result = await exec('systemd-run', [
-                '--user', '--quiet', '--collect', `--unit=${target}`,
-                '--property=Type=exec', '--property=KillMode=control-group', '--property=TimeoutStopSec=15s',
-                `--property=StandardOutput=append:${log}`, `--property=StandardError=append:${log}`,
-                ...inherited.map(value => `--setenv=${value}`),
-                process.execPath, binPath, ...args,
-            ]);
-            if (result.code !== 0)
-                throw new Error(`systemd-run ${target} failed: ${result.stderr.trim() || `exit ${result.code}`}`);
-            await updateTempSupervisor(dir, { phase: 'active' });
-            return;
-        }
-        if (supervisor !== 'none' && platform === 'darwin') {
-            const target = tempLaunchdLabel(role);
-            await updateTempSupervisor(dir, { phase: 'launching', kind: 'launchd-transient', target, binPath });
-            const result = await exec('launchctl', [
-                'submit', '-l', target, '-o', log, '-e', log, '--',
-                '/usr/bin/env', ...inherited, process.execPath, binPath, ...args,
-            ]);
-            if (result.code !== 0)
-                throw new Error(`launchctl submit ${target} failed: ${result.stderr.trim() || `exit ${result.code}`}`);
+        const metadata = readTempSupervisor(dir);
+        if (supervisor !== 'none') {
+            const kind = metadata?.taskOwner ? 'task' : 'temporary';
+            await updateTempSupervisor(dir, { phase: 'launching', kind: 'fleet-managed', target: memberKey(role, kind), binPath });
+            await ensureFleetParent(exec, platform);
+            await registerMember({ name: role, kind, dir, environment: await captureMemberEnvironment(),
+                ...(metadata?.taskOwner ? { taskOwner: metadata.taskOwner, launchId: metadata.launchId } : {}) });
             await updateTempSupervisor(dir, { phase: 'active' });
             return;
         }
@@ -211,7 +196,7 @@ export function archiveTempState(role, reason, outcome, detail, now = new Date()
     return paths.target;
 }
 function isArchiveForLaunch(path, role, launchId) {
-    const supervisor = readTempSupervisor(path);
+    const supervisor = readTempSupervisorForScan(path);
     if (supervisor?.role !== role || supervisor.launchId !== launchId)
         return false;
     try {
@@ -256,7 +241,7 @@ export function tempArchiveForCreationAction(role, creationActionId) {
         return undefined;
     }
     const matches = entries.flatMap(path => {
-        const supervisor = readTempSupervisor(path);
+        const supervisor = readTempSupervisorForScan(path);
         if (!supervisor || supervisor.role !== role || !isArchiveForLaunch(path, role, supervisor.launchId))
             return [];
         try {
@@ -317,7 +302,15 @@ function recoverInterruptedArchives(now) {
     const recovered = [];
     for (const name of names) {
         const source = join(archiveRoot(), name);
-        const supervisor = readTempSupervisor(source);
+        let supervisor;
+        try {
+            supervisor = readTempSupervisor(source);
+        }
+        catch (error) {
+            if (error instanceof Error && error.message === 'TEMP_SUPERVISOR_KIND_UNSUPPORTED')
+                continue;
+            throw error;
+        }
         let line;
         try {
             line = readFileSync(join(source, TEMP_TERMINATION_FILE), 'utf8')
@@ -393,11 +386,13 @@ export async function tempSupervisorLiveness(dir, deps = {}) {
     // A concurrent spawn writes the target before systemd-run/launchctl has
     // registered it. A not-yet-created unit looks exactly like an inactive one,
     // so launch phase plus its bounded grace is not cleanup authority.
-    if (record.phase === 'launching'
+    if (record.phase === 'launching' && !requestedTempStopReason(dir)
         && (!Number.isFinite(age) || age < TEMP_LAUNCH_GRACE_MS))
         return 'unknown';
     // Older writers could lose `kind` in an unlocked metadata RMW while retaining
     // the supervisor pid. Exact argv ownership is stronger than the missing tag.
+    if (record.kind === 'fleet-managed')
+        return (await catalogLiveness(record.target ?? memberKey(record.role, record.taskOwner ? 'task' : 'temporary'), exec)).state;
     if (record.pid && (!record.kind || record.kind === 'detached'))
         return detachedProcessLiveness(record, deps);
     if (record.kind === 'systemd-transient' && record.target) {
@@ -461,6 +456,13 @@ export async function stopTempSupervisor(role, deps = {}) {
     replaceFileAtomically(join(dir, TEMP_STOP_REQUEST_FILE), JSON.stringify({
         version: 1, role, reason: 'operator-stop', requestedAt: new Date().toISOString(),
     }) + '\n');
+    if (record.kind === 'fleet-managed') {
+        if (record.taskOwner)
+            await unregisterTaskMember(role, { ...record.taskOwner, launchId: record.launchId }, { exec, sleep: deps.sleep });
+        else
+            await unregisterMember(record.target ?? memberKey(role, 'temporary'), { exec, sleep: deps.sleep });
+        return 'stopped';
+    }
     if (record.kind === 'systemd-transient' && record.target) {
         const result = await exec('systemctl', ['--user', 'stop', record.target]);
         if (result.code !== 0
@@ -511,6 +513,26 @@ export async function stopTempSupervisor(role, deps = {}) {
     (deps.kill ?? process.kill)(record.pid, 'SIGTERM');
     return 'stopped';
 }
+/** Legacy task snapshots remain recovery evidence even before explicit migration. */
+function hasRetainedTaskReference(dir) {
+    try {
+        if (basename(dir).startsWith('layout-')) {
+            const provenance = JSON.parse(readFileSync(join(dir, 'creation.json'), 'utf8'));
+            if (typeof provenance.creationActionId === 'string' && provenance.creationActionId.startsWith('task-'))
+                return true;
+        }
+        const startup = parse(readFileSync(join(dir, 'role.yaml'), 'utf8'))?.roomMemberStartup;
+        if (!startup?.room_id || !/^[A-Za-z0-9_-]{1,120}$/.test(startup.room_id))
+            return false;
+        const room = JSON.parse(readFileSync(join(stateRoot(), 'rooms', `${startup.room_id}.json`), 'utf8'));
+        return typeof room.task_id === 'string'
+            && room.member_seats.some((seat) => seat.role_name === basename(dir));
+    }
+    catch (error) {
+        // An unreadable role/room is uncertain ownership, never permission to reclaim.
+        return error.code !== 'ENOENT';
+    }
+}
 /**
  * Move a bounded batch of definitely-dead temp state into the evidence archive.
  * Unknown/legacy/live entries are preserved; absence of proof is never cleanup authority.
@@ -532,8 +554,18 @@ export async function reclaimStaleTempState(deps = {}) {
     const archived = [...recovered];
     for (const entry of entries) {
         const dir = join(tmpRoot(), entry.name);
-        if (!readTempSupervisor(dir))
-            continue; // legacy evidence has no safe ownership proof
+        const supervisor = readTempSupervisorForScan(dir);
+        if (!supervisor || supervisor.taskOwner || hasRetainedTaskReference(dir))
+            continue;
+        if (supervisor?.kind === 'fleet-managed' && supervisor.target) {
+            try {
+                if (readMember(supervisor.target)?.desired === 'running')
+                    continue;
+            }
+            catch {
+                continue;
+            } // uncertain catalog intent is never reclamation authority
+        }
         if (await tempSupervisorLiveness(dir, deps) !== 'stopped')
             continue;
         const target = archiveTempState(entry.name, 'stale-supervisor', 'reclaimed', 'supervisor is definitively stopped; state moved from the live roster without deletion', now);

package/dist/temp-supervisor-recovery.d.ts

@@ -1,3 +1,3 @@
 export declare const TEMP_RECYCLE_EXIT = 75;
 /** Keep the service's main process alive while replacing a PID-scoped worker. */
-export declare function runTempSupervisor(name: string, entrypoint: string, initial?: () => Promise<void>): Promise<void>;
+export declare function runTempSupervisor(name: string, entrypoint: string, initial?: () => Promise<void>, suspendOnStop?: boolean): Promise<void>;

package/dist/temp-supervisor-recovery.js

@@ -2,7 +2,7 @@ import { spawn } from 'node:child_process';
 import { runTemp, SupervisorRecycleRequiredError } from './runner.js';
 export const TEMP_RECYCLE_EXIT = 75;
 /** Keep the service's main process alive while replacing a PID-scoped worker. */
-export async function runTempSupervisor(name, entrypoint, initial = () => runTemp(name)) {
+export async function runTempSupervisor(name, entrypoint, initial = () => runTemp(name), suspendOnStop = false) {
     try {
         await initial();
         return;
@@ -12,7 +12,7 @@ export async function runTempSupervisor(name, entrypoint, initial = () => runTem
             throw error;
     }
     for (let attempt = 0; attempt < 3; attempt++) {
-        const child = spawn(process.execPath, [entrypoint, '_run-temp-worker', name], {
+        const child = spawn(process.execPath, [entrypoint, '_run-temp-worker', name, ...(suspendOnStop ? ['--suspend-on-stop'] : [])], {
             stdio: 'inherit',
             env: process.env,
         });

package/dist/web/server.js

@@ -1,3 +1,5 @@
+import { conversationHasAttachment } from '../application/conversation-history.js';
+import { readDeliveredFile } from '../file-delivery/store.js';
 import { WorkspaceDeviceAuthError } from './workspace-devices.js';
 import { readFileSync } from 'node:fs';
 import { packagedPresetRoot } from '../preset-bootstrap.js';
@@ -756,6 +758,28 @@ export async function buildWebServer(services, boundary, options = {}) {
         const page = await control.conversationPage({ after: request.query.after, limit });
         return { ...page, events: page.events.map(present) };
     });
+    app.get('/api/v1/roles/:id/artifacts/:artifactId', async (request, reply) => {
+        auth.authenticate(request);
+        const role = await services.repository.get(request.params.id);
+        if (!role)
+            throw new FleetError('role_not_found', 'Agent not found');
+        const stateDir = services.repository.stateDir(role);
+        if (!stateDir)
+            throw new FleetError('resource_not_found', 'Agent file not found');
+        try {
+            const { record, bytes } = await readDeliveredFile(stateDir, request.params.artifactId);
+            if (!await conversationHasAttachment(stateDir, record))
+                throw Error('ARTIFACT_NOT_PUBLISHED');
+            reply.header('Cache-Control', 'private, no-store');
+            reply.header('X-Content-Type-Options', 'nosniff');
+            reply.header('Content-Security-Policy', "default-src 'none'; sandbox");
+            reply.header('Content-Disposition', `attachment; filename*=UTF-8''${encodeURIComponent(record.name).replace(/'/g, '%27')}`);
+            return reply.type('application/octet-stream').send(bytes);
+        }
+        catch {
+            throw new FleetError('resource_not_found', 'Agent file unavailable');
+        }
+    });
     app.get('/api/v1/roles/:id/attachments/:attachmentId', async (request, reply) => {
         auth.authenticate(request);
         const role = await services.repository.get(request.params.id);

package/docs/acp-files.md

@@ -0,0 +1,102 @@
+# Sending files in an ACP chat
+
+An opted-in managed Agent uses the existing Ours `send_file` tool:
+
+```json
+{"path":"deliverables/report.pdf"}
+```
+
+Omitting `contact` sends to the current ACP chat. Supplying a non-empty contact
+keeps ordinary Ours delivery:
+
+```json
+{"contact":"Alice","path":"deliverables/report.pdf"}
+```
+
+Only an absent contact chooses the chat. Null, empty or whitespace-only contacts,
+unknown fields and unknown recipients fail without falling back to chat. Outside
+opt-in, contact remains required. Current-chat sending accepts `path`, optional
+`filename` and `mime`; inline base64 and Ours reply fields are unsupported.
+
+Each call makes one attempt. Failures are returned to the agent. There is no
+request ID, deduplication, automatic retry or recovery of failed sends. If a user
+asks to resend, another tool call makes a new attempt and can produce another
+attachment. UUIDs identify stored attachments; the stored SHA-256 checks integrity.
+Neither is a retry key.
+
+Set this on the Agent definition, not manifest defaults or a Brain:
+
+```yaml
+file_delivery:
+  enabled: true
+  directory: deliverables
+```
+
+The tool description advertises this directory and the 20 MiB limit to the Agent.
+The directory is a non-hidden subtree of the Agent's working directory. Both
+routes interpret relative paths from that working directory; absolute paths keep
+their usual meaning. Chat sending additionally enforces the export directory.
+The Agent should finish writing the file before calling `send_file`. Symlinks,
+hardlinks, hidden/credential paths, changed files and files over 20 MiB fail.
+
+Initial support requires Linux, the managed Ours connector, a stock Codex or
+Claude ACP adapter, and a tracked active turn. Idle, scheduled, steered, cancelled,
+replaced and unsupported sessions cannot export. Existing native tool approval
+and the neutral role permission policy both apply before bytes are read. An
+`ask` decision needs an attached controller; `deny` refuses. A native policy that
+refuses MCP execution (including Codex `never` without a native tool allowance)
+can still refuse before Fleet receives the call.
+
+Codex requires native runtime 0.159.0 or newer and Fleet's managed App Server
+proxy. Before each turn, its public exact-thread, paginated MCP inventory must
+show a connected managed `ours` with the expected optional-contact schema.
+Ours aliases, filtered aliases, ambiguous identity, failed discovery and an
+incompatible schema make the turn unavailable. Unrelated identified tools are
+preserved. Explicitly disabled Ours is rejected before replacement. Inherited
+TOML MCP settings, including project/profile sources, are conservatively
+unsupported until their disabling semantics can be qualified before replacement.
+Use a clean Codex configuration home for this initial opt-in.
+
+Claude ACP 0.63.0's installed wrapper has no public same-session inventory RPC. Initial
+support therefore requires an operator's explicit restricted MCP configuration:
+
+```yaml
+harness_options:
+  mcp_servers_only: true
+  mcp_servers:
+    ours: { command: ours-mcp, args: [proxy] }
+```
+
+Fleet replaces that connector with its bound bridge. Additional explicit MCP
+servers and custom ACP commands are unsupported for this feature. Default-off
+Agents retain their existing configuration.
+
+Successful sends copy complete bytes into private immutable storage and append a
+server-origin `file.attached` event containing the actual session generation,
+ACP session and managed turn. One export can run at a time. Cancellation or
+steering before publication revokes it; cancellation after publication does not
+undo it. Unpublished stored bytes are never replayed or republished. Storage is
+bounded to 100 files and 200 MiB per role incarnation, including incomplete and
+orphaned copies. Exhausted storage fails; no automatic recovery is performed.
+
+The App renders persisted file cards from these typed events. HTML and images
+also download as files. Downloads require authentication, the matching role
+incarnation, a published conversation event and intact bytes. Deleted, missing,
+changed or orphaned artifacts return unavailable. Remote workspaces fetch bytes
+using their existing device credential, limit the read to 20 MiB and prevent
+saving after a workspace change.
+
+## Release prerequisite and qualification
+
+This source requires the companion MCP implementation's
+`MANAGED_FILE_DELIVERY_VERSION = 1`. Fleet pins published
+`@ours.network/mcp@1.2.0-nightly.13`, which includes it. Older MCP packages without
+this capability fail closed when file delivery is enabled. Changes to the MCP
+pin require clean installed-package qualification without a built MCP overlay.
+
+The deterministic native fixture uses real ACP adapters, the real managed
+connector and an isolated daemon. A local scripted provider supplies only tool
+intents; approval, read, copy, publication and bytes come from the implementation.
+It does not qualify external-model inference, deployment or arbitrary native
+MCP request-to-ACP tool-call ID mapping. Correlation is the authenticated bridge
+and the actual active Fleet turn, which is revoked by cancellation/steering.

package/docs/fleet-migration.md

@@ -0,0 +1,54 @@
+# Upgrade to one Fleet service
+
+Permanent and task agents share one systemd user service on Linux or one
+LaunchAgent on macOS. Install the package and explicitly run `ours-fleet init`;
+package installation alone does not migrate services. New task/temporary launches
+refuse `FLEET_SERVICE_NOT_INSTALLED` until init succeeds. Native supervision uses
+the OS user's home; a custom `OURS_FLEET_HOME` is refused. Manual/isolated fleets
+can use `OURS_FLEET_SUPERVISOR=none` without boot recovery.
+
+Before init, back up Fleet configuration, private member/runtime/session state,
+task/room records and native units/plists. Preserve operator readiness commands,
+timeout/restart settings and environment in the common parent's explicit
+systemd drop-ins (`~/.config/systemd/user/ours-fleet.service.d/`). Conflicting
+per-agent settings need operator resolution. Migration does not copy scripts or
+silently discard hooks. Resolve `OPERATOR_DROPIN_REQUIRED` or `UNSUPPORTED_DROPIN`,
+reload the user manager, verify its effective settings, then retry.
+
+Init preflights configured permanent agents, retires only their proven old native
+services and registers them after exact old-process absence. `up NAME` migrates
+only NAME. Existing identity and conversation files remain in place. On Linux,
+enabled legacy roles transfer running boot intent, including enabled inactive
+roles; disabled inactive roles remain untouched. macOS stopped roles stay stopped.
+Interrupted transfers retain receipts; retry with the original state instead of
+deleting proof or starting old and new supervisors together.
+
+The parent starts existing agent runners. Adding a member does not restart it.
+Restarting the parent affects every managed agent. Permanent agents resume their
+conversation with their existing readiness/continuity prompts and may receive a
+new private runtime instance after orderly release. Task agents retain their
+original identity, runtime owner and conversation. Managed stop persists across
+parent restart/reboot. Non-resumable temporary agents retire on parent shutdown.
+
+## Existing tasks
+
+Running pre-upgrade transient task members remain untouched and report
+`migration_pending`; init does not make them durable. Clean legacy shutdown or
+explicit temporary stop releases/archives them. After abrupt process loss,
+`ours-fleet task recover-members TASK_ID` can adopt a stopped single-room member
+only with its original owner, identity, launch, workspace, conversation and room
+admission intact and exact process absence proven. Missing/mismatched evidence
+and unmarked legacy layouts require reconciliation. There is no automatic live
+handover: let old work retire normally, or preserve and inspect its original
+state before a controlled transition. Do not create replacement identities,
+redeem invitations again or fabricate ownership records to force recovery.
+
+## Rollback
+
+Stop the common parent and prove all managed process groups absent. Preserve an
+offline backup of catalog, receipts, private state and operator drop-ins. Restore
+the prior Fleet release and reviewed legacy units/plists, enabling only intended
+running agents. Keep the common parent disabled while legacy supervision runs.
+Re-entering central mode requires retained-proof reconciliation and old-process
+absence. Physical reboot/boot ordering, real macOS launchd and live host migration
+have not been qualified by the isolated process and injected native tests.

package/docs/task-workspaces.md

@@ -159,3 +159,29 @@ claiming complete erasure. An identity with no recoverable authenticated binding
 requires restoring its actual ownership evidence; a name-only force removal is
 not supported. Room deletion removes the linked Task's dead room/member links and preserves its workspace; use explicit
 Task deletion when the request includes the associated Task and its artifacts.
+
+
+## Retained task agents
+
+Task agents use the common Fleet service and existing runners while remaining
+outside the standalone agent roster. Recovery retains their original identity,
+private runtime owner, launch, working directory, admitted room and supported
+backend conversation. `ours-fleet task recover-members TASK_ID` resumes proven
+stopped members or resets their held restart circuit; it never creates identities
+or invitations. See [upgrade and rollback](fleet-migration.md) for legacy tasks.
+
+Recovery delivers an undispatched assignment once, continues interrupted work,
+and sends no readiness/work prompt to a completed idle conversation. An uncertain
+dispatch gets a continuation instead of replaying the assignment. First-session
+retry requires proof that no readiness/work was submitted; established session
+loss requires restoration of the original context. Task agents require a resumable
+harness. Missing ownership, workspace or room evidence keeps recovery held.
+
+Parent shutdown suspends task agents. Explicit member stop terminally releases
+the exact saved owner and archives its launch; it does not complete the task.
+Finish/cancel/review retain their existing semantics. Task deletion stops and
+unregisters only owned members, verifies identity absence and retries cleanup
+before erasing task/room/workspace resources. Permanent siblings remain intact.
+Standalone CLI/web removal refuses `TASK_MEMBER_IS_TASK_OWNED`; use the owning
+task lifecycle. Lost/corrupt task or launch records require restoring original
+backup evidence or explicit ownership reconciliation before deletion can finish.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.53",
+  "version": "1.2.0-nightly.55",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",
@@ -22,7 +22,9 @@
     "docs/live-voice.md",
     "docs/room-layouts.md",
     "docs/validation/managed-cli-permissions.md",
-    "LICENSE"
+    "docs/fleet-migration.md",
+    "LICENSE",
+    "docs/acp-files.md"
   ],
   "engines": {
     "node": ">=22.13.0"
@@ -37,13 +39,15 @@
     "test:pack": "vitest run --config vitest.integration.config.ts",
     "prepack": "npm run build",
     "prepublishOnly": "npm run build && npm test",
+    "test:task-recovery": "node test/task-runtime-recovery.integration.mjs",
+    "test:fleet-recovery": "node test/fleet-manager-recovery.integration.mjs",
     "test:v1-recovery": "node test/fleet-v1-recovery.integration.mjs retry && node test/fleet-v1-recovery.integration.mjs terminal-after-failure && node test/fleet-v1-recovery.integration.mjs terminal-release-failure"
   },
   "dependencies": {
     "@agentclientprotocol/sdk": "^1.3.0",
     "@fastify/websocket": "^11.2.0",
     "@ours.network/cli": "2.8.1-nightly.15",
-    "@ours.network/mcp": "1.2.0-nightly.12",
+    "@ours.network/mcp": "1.2.0-nightly.13",
     "@ours.network/sdk": "3.8.1-nightly.17",
     "commander": "^12.1.0",
     "fastify": "^5.4.0",