@ours.network/fleet 1.2.0-nightly.62 → 1.2.0-nightly.63

package/README.md

@@ -1838,6 +1838,9 @@ See [Room layouts](docs/room-layouts.md) for YAML examples and CLI commands.
 
 Configure the web backend with `OURS_NOTIFICATIONS_ORIGIN` and a Fleet-scoped `OURS_NOTIFICATIONS_PRODUCER_TOKEN`. It reads each local supervisor ledger incrementally with persistent checkpoints under web state, correlating owner browser/channel prompts with terminal completion. Monitor/startup turns do not notify. First installation skips existing history; no agent restart or conversation controller is needed. Persist web state across deployment/restarts. Reads are bounded to 256 KiB per role per tick, and oversized model/media records are skipped across chunks. Expose `/notifications` through the generic authenticated prefix gateway with a server-side user token and `stripBrowserContext: true`; producer tokens stay server-side. All browser sessions of this single-owner console map to one stable notification account. See [ours-notifications](https://github.com/adapt-toolkit/ours-notifications) for configuration/API/release details.
 
+New agent notifications and confirmed role retirement use `/fleet/chats/agents/:roleId`, with each ID escaped once and matching message anchors retained. Deploy the app, notification service, and producers together: old query-based conversation links are intentionally unsupported. Existing pending payload URLs are replayed unchanged for idempotency; obsolete cleanup targets remain stored without being sent or treated as proof of absence. Task management notification paths are unchanged.
+
+
 Existing-host enrollment: `ours-fleet workspace-enroll --file <private-file> --preserve-profile` requires Messenger to advertise preservation support before any enrollment POST. It omits Name/Surname and leaves existing/absent profile untouched. Existing Fleet models and agents are retained; the installer must skip init when its configuration exists. Signed root proof, tunnel setup and device QR issuance remain the normal enrollment flow. Older Messenger fails closed and requires its preservation-capable release.
 
 ### Connect an installed host to the App

package/dist/application/role-removal-service.js

@@ -94,7 +94,7 @@ export class RoleRemovalService {
             await this.options.ops.backend.uninstall(preview.role);
             if (existsSync(sourceState))
                 renameSync(sourceState, join(recoveryPath, 'orphan-state'));
-            await retireNotificationTarget(`/fleet/chats?chat=${encodeURIComponent(preview.role)}`).catch(() => { });
+            await retireNotificationTarget(`/fleet/chats/agents/${encodeURIComponent(preview.role)}`).catch(() => { });
             this.options.ops.log(`removed orphaned backend/state '${preview.role}'`);
         }
         return { ...preview, removed: true, recoveryPath };

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
-  "version": "1.2.0-nightly.62",
-  "buildId": "dbb6bd7e2ef8",
-  "commit": "9162af7adc2521d0e1d5cbd79757919dfff402e3",
+  "version": "1.2.0-nightly.63",
+  "buildId": "9a1df2251871",
+  "commit": "ec4a9231a3a43772d7b7348e3fea407cf83e5bd1",
   "dirty": true,
-  "builtAt": "2026-10-13T21:20:26.416Z",
+  "builtAt": "2026-10-14T20:26:32.887Z",
   "capabilities": [
     "managed-cli.codex-reasoning-effort-v1",
     "managed-cli.setup-v1",

package/dist/notifications/fleet-producer.js

@@ -1,5 +1,5 @@
 import { roomsDir } from '../rooms-tasks/room-state.js';
-import { drainNotificationTargetCleanup } from './target-cleanup.js';
+import { drainNotificationTargetCleanup, notificationAgentId } from './target-cleanup.js';
 import { closeSync, existsSync, lstatSync, openSync, readSync, readFileSync, readdirSync, statSync } from 'node:fs';
 import { join } from 'node:path';
 import { createHash } from 'node:crypto';
@@ -71,7 +71,7 @@ export class FleetNotificationProducer {
     }
     poll() {
         this.cleanup ??= drainNotificationTargetCleanup(this.config, undefined, undefined, { beforeDelete: async (url) => {
-                const name = new URL(url, 'https://ours.invalid').searchParams.get('chat');
+                const name = notificationAgentId(url);
                 if (!name || !/^[A-Za-z0-9_-]+$/.test(name))
                     return false;
                 // A recreated or retained role still has a valid target. Filesystem errors cannot prove removal.
@@ -126,7 +126,7 @@ export class FleetNotificationProducer {
                     if (!outbox) {
                         const key = createHash('sha256').update(roleDir).digest('hex');
                         outbox = new NotificationOutbox(join(this.stateDir, key + '.json'), this.config, async (value, eventId) => ({ eventId, title: `${roleId}: agent completed`, body: 'Your agent finished responding. Open the chat to view the result.',
-                            url: `/fleet/chats?chat=${encodeURIComponent(roleId)}&detail=1`, ...value }), this.warn);
+                            url: `/fleet/chats/agents/${encodeURIComponent(roleId)}`, ...value }), this.warn);
                         if (!outbox.checkpoint) {
                             const segment = this.existing.has(roleDir) ? segments.at(-1) : segments[0];
                             outbox.saveCheckpoint({ segment, offset: this.existing.has(roleDir) ? statSync(join(dir, segment)).size : 0, prompts: [] });
@@ -187,7 +187,7 @@ export class FleetNotificationProducer {
                         if (['message.chunk', 'message.replace'].includes(event.kind) && event.promptId && event.messageId && current.prompts.includes(prompt))
                             current.messages[prompt] = event.messageId;
                         if (event.kind === 'turn.completed' && event.promptId && current.prompts.includes(prompt)) {
-                            if (!outbox.enqueue(`${roleId}:${event.sessionGeneration}:${event.seq}`, { ...(taskRoles ? { taskId: taskRoles.get(roleId) ?? null } : {}), url: `/fleet/chats?chat=${encodeURIComponent(roleId)}&detail=1#fleet-message-${encodeURIComponent(current.messages[prompt] ?? event.promptId)}` }))
+                            if (!outbox.enqueue(`${roleId}:${event.sessionGeneration}:${event.seq}`, { ...(taskRoles ? { taskId: taskRoles.get(roleId) ?? null } : {}), url: `/fleet/chats/agents/${encodeURIComponent(roleId)}#fleet-message-${encodeURIComponent(current.messages[prompt] ?? event.promptId)}` }))
                                 break;
                             current.prompts = current.prompts.filter(p => p !== prompt);
                             delete current.messages[prompt];

package/dist/notifications/target-cleanup.d.ts

@@ -1,4 +1,6 @@
 import { type ProducerConfig } from './outbox.js';
+/** Only the canonical agent namespace can authorize role-target cleanup. */
+export declare function notificationAgentId(path: string): string | null;
 /** Queue only after the owning lifecycle has established deletion, never on a failed inventory read. */
 export declare function retireNotificationTarget(url: string, config?: ProducerConfig | undefined, dir?: string, request?: typeof fetch): Promise<void>;
 /** Persisted retries also run from the ordinary web notification producer after restart. */

package/dist/notifications/target-cleanup.js

@@ -5,6 +5,24 @@ import { replaceFileAtomically } from '../atomic-file.js';
 import { stateRoot } from '../paths.js';
 import { producerConfig } from './outbox.js';
 const cleanupDir = () => join(stateRoot(), 'notifications', 'removed-targets');
+/** Only the canonical agent namespace can authorize role-target cleanup. */
+export function notificationAgentId(path) {
+    try {
+        if (typeof path !== 'string' || /[\\\x00-\x20]|%(?:2f|5c|00|0[ad])/i.test(path))
+            return null;
+        const match = /^\/fleet\/chats\/agents\/([^/?#]+)(?:[?#]|$)/.exec(path);
+        if (!match)
+            return null;
+        const url = new URL(path, 'https://ours.invalid');
+        if (['source', 'chat', 'task', 'detail'].some(key => url.searchParams.has(key)))
+            return null;
+        const id = decodeURIComponent(match[1]);
+        return /^[A-Za-z0-9_-]+$/.test(id) ? id : null;
+    }
+    catch {
+        return null;
+    }
+}
 /** Queue only after the owning lifecycle has established deletion, never on a failed inventory read. */
 export async function retireNotificationTarget(url, config = producerConfig(), dir = cleanupDir(), request = fetch) {
     if (!config)
@@ -17,11 +35,15 @@ export async function retireNotificationTarget(url, config = producerConfig(), d
 export async function drainNotificationTargetCleanup(config, dir = cleanupDir(), request = fetch, options = {}) {
     if (!existsSync(dir))
         return;
-    for (const file of readdirSync(dir).filter(file => /^[a-f0-9]{64}\.json$/.test(file)).slice(0, 32)) {
+    let attempts = 0;
+    for (const file of readdirSync(dir).filter(file => /^[a-f0-9]{64}\.json$/.test(file))) {
+        if (attempts >= 32)
+            break;
         try {
             const path = join(dir, file), value = JSON.parse(readFileSync(path, 'utf8'));
-            if (typeof value.url !== 'string' || !value.url.startsWith('/fleet/chats?'))
+            if (!notificationAgentId(value.url))
                 continue;
+            attempts++;
             if (options.beforeDelete && !(await options.beforeDelete(value.url))) {
                 rmSync(path, { force: true });
                 continue;

package/dist/ops.js

@@ -271,7 +271,7 @@ export async function rmRole(cfg, name, deps) {
     rmSync(agentDir(name), { recursive: true, force: true });
     if (generatedSource && existsSync(role.sourceFile)) {
         unlinkSync(role.sourceFile);
-        await retireNotificationTarget(`/fleet/chats?chat=${encodeURIComponent(name)}`).catch(() => { });
+        await retireNotificationTarget(`/fleet/chats/agents/${encodeURIComponent(name)}`).catch(() => { });
         deps.log(`removed ${role.sourceFile}`);
     }
     deps.log(`removed '${name}' (its ours identity is left intact)`);

package/dist/subscriptions/login.d.ts

@@ -56,6 +56,7 @@ export declare class ClaudeLogin extends BaseLogin {
     private child?;
     private output;
     private submitted;
+    private continued;
     /** Resolves with the CLI exit status once it exits. */
     exited: Promise<number | null>;
     constructor(owner: string, bins: SubscriptionBinaries, home: string, profileId: string);

package/dist/subscriptions/login.js

@@ -73,13 +73,27 @@ export class ClaudeLogin extends BaseLogin {
     child;
     output = '';
     submitted = false;
+    continued = false;
     /** Resolves with the CLI exit status once it exits. */
     exited;
     constructor(owner, bins, home, profileId) {
         super('claude', owner, 'paste_code');
-        const child = spawn(bins.script, ['-qefc', `${shellQuote(bins.claude)} auth login`, '/dev/null'], {
-            env: profileEnv('CLAUDE_CONFIG_DIR', profileId, home), stdio: ['pipe', 'pipe', 'pipe'],
+        const darwin = process.platform === 'darwin';
+        const args = darwin
+            ? ['-q', '/dev/null', bins.claude, 'auth', 'login']
+            : ['-qefc', `${shellQuote(bins.claude)} auth login`, '/dev/null'];
+        // BSD script accepts a real pipe, but rejects Node's socket-backed stdin.
+        // Own the pipeline as one process group so cancellation also stops cat.
+        const child = spawn(darwin ? '/bin/sh' : bins.script, darwin
+            ? ['-c', '/bin/cat 3>&- | { "$@" 3>&-; result=$?; printf "%s\\n" "$result" >&3; exit "$result"; }', 'fleet-claude-login', bins.script, ...args] : args, {
+            detached: darwin,
+            env: profileEnv('CLAUDE_CONFIG_DIR', profileId, home),
+            stdio: darwin ? ['pipe', 'pipe', 'pipe', 'pipe'] : ['pipe', 'pipe', 'pipe'],
         });
+        // The terminal has exited; release cat's input so the shell can finish.
+        // Only the shell owns fd 3. Final close remains the authoritative status.
+        if (darwin)
+            child.stdio[3]?.once('data', () => child.stdin.end());
         this.child = child;
         child.stdin.on('error', () => { });
         const onData = (chunk) => {
@@ -98,14 +112,16 @@ export class ClaudeLogin extends BaseLogin {
                 }
             }
             // Claude asks for Enter after success; the answer carries no secret.
-            if (this.submitted && /press enter/i.test(this.output))
+            if (this.submitted && !this.continued && /press enter/i.test(this.output)) {
+                this.continued = true;
                 child.stdin.write('\r');
+            }
         };
         child.stdout.on('data', onData);
         child.stderr.on('data', onData);
         this.exited = new Promise(resolve => {
             child.once('error', () => { this.end('failed', 'could not start the sign-in'); resolve(null); });
-            child.once('close', code => resolve(code));
+            child.once('close', code => { this.child = undefined; resolve(code); });
         });
     }
     submitCode(code) {
@@ -118,7 +134,16 @@ export class ClaudeLogin extends BaseLogin {
         this.output = '';
         this.child?.stdin.write(`${code}\r`);
     }
-    stop() { this.child?.kill('SIGTERM'); }
+    stop() {
+        if (process.platform === 'darwin' && this.child?.pid) {
+            try {
+                process.kill(-this.child.pid, 'SIGTERM');
+            }
+            catch { /* already exited */ }
+        }
+        else
+            this.child?.kill('SIGTERM');
+    }
 }
 /** Codex device-code login through the app-server's supported account API. */
 export class CodexDeviceLogin extends BaseLogin {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.62",
+  "version": "1.2.0-nightly.63",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",