@ours.network/fleet 1.2.0-nightly.76 → 1.2.0-nightly.78

package/dist/application/session-control.js

@@ -207,13 +207,13 @@ export class RoleSessionControlAdapter {
                 clearTimeout(silence);
             silence = setTimeout(() => {
                 // Liveness only: no role/session snapshots, regardless of web traffic.
-                if (Date.now() - lastControlHeartbeat >= 6_000) {
+                if (Date.now() - lastControlHeartbeat >= 45_000) {
                     this.controlHealthy = false;
                     finish('control-silent');
                 }
                 else
                     armSilence();
-            }, Math.max(1, 6_000 - (Date.now() - lastControlHeartbeat)));
+            }, Math.max(1, 45_000 - (Date.now() - lastControlHeartbeat)));
             silence.unref?.();
         };
         let follow;
@@ -267,11 +267,20 @@ export class RoleSessionControlAdapter {
             follow = await this.openFollow(this.stateDir, passive ? { controller: false, expectedGeneration: passive.expectedGeneration, after: passive.after, signal: passive.signal } : request.after, message => {
                 if (closed)
                     return;
-                if (passive && message.controlHeartbeat === true) {
-                    lastControlHeartbeat = Date.now();
-                    this.controlHealthy = true;
-                    armSilence();
-                    return;
+                if (passive) {
+                    // A delayed callback must not revive an already elapsed source deadline.
+                    if (Date.now() - lastControlHeartbeat >= 45_000) {
+                        this.controlHealthy = false;
+                        finish('control-silent');
+                        return;
+                    }
+                    if (message.controlHeartbeat === true || message.conversationReplay || message.conversationReady || message.conversationEvent || message.conversationState) {
+                        lastControlHeartbeat = Date.now();
+                        this.controlHealthy = true;
+                        armSilence();
+                    }
+                    if (message.controlHeartbeat === true)
+                        return;
                 }
                 if (message.ok === false) {
                     finish(String(message.error ?? 'conversation follow refused'));

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
-  "version": "1.2.0-nightly.76",
-  "buildId": "adbb39fb78cd",
-  "commit": "54d1ea9c17b78705a6af6a9d83872078dbeaa41d",
+  "version": "1.2.0-nightly.78",
+  "buildId": "b2ec2cc5b628",
+  "commit": "42ac52e4fadbfe48faac20ac2518d7280947c981",
   "dirty": true,
-  "builtAt": "2026-10-19T11:49:00.042Z",
+  "builtAt": "2026-10-19T21:24:11.994Z",
   "capabilities": [
     "service.refresh-v1",
     "managed-cli.codex-reasoning-effort-v1",

package/dist/session/control.js

@@ -467,8 +467,14 @@ export class RoleControlServer {
                         let stopped = false;
                         let heartbeat;
                         let writing = Promise.resolve();
+                        let lastQualifyingOutputAt = Date.now();
                         const send = (message) => {
-                            const result = writing.then(() => writeMessage(message));
+                            const result = writing.then(async () => {
+                                if (message.controlHeartbeat === true && Date.now() - lastQualifyingOutputAt < 15_000)
+                                    return;
+                                await writeMessage(message);
+                                lastQualifyingOutputAt = Date.now();
+                            });
                             writing = result.catch(() => { });
                             return result;
                         };
@@ -517,7 +523,7 @@ export class RoleControlServer {
                                 heartbeatPending = true;
                                 void send({ controlHeartbeat: true }).catch(() => { stop(); socket.destroy(); })
                                     .finally(() => { heartbeatPending = false; });
-                            }, 2_000);
+                            }, 15_000);
                             heartbeat.unref();
                         }
                         socket.once('close', stop);

package/dist/web/conversation-stream.d.ts

@@ -9,6 +9,7 @@ export declare class ConversationStreamWriter {
     private waiting;
     private ended;
     private sequence;
+    private lastQualifyingOutputAt;
     pendingBytes: number;
     get busy(): boolean;
     constructor(output: Writable, failed: (reason: string) => void);

package/dist/web/conversation-stream.js

@@ -8,6 +8,7 @@ export class ConversationStreamWriter {
     waiting = false;
     ended = false;
     sequence = 0;
+    lastQualifyingOutputAt = Date.now();
     pendingBytes = 0;
     get busy() { return Boolean(this.active); }
     constructor(output, failed) {
@@ -21,6 +22,8 @@ export class ConversationStreamWriter {
     send(type, payload) {
         if (this.ended)
             return false;
+        if (type === 'keepalive' && Date.now() - this.lastQualifyingOutputAt < 15_000)
+            return true;
         const id = String(++this.sequence);
         try {
             if (!this.active) {
@@ -38,6 +41,8 @@ export class ConversationStreamWriter {
                 this.queue.push({ type, payload, id, bytes });
                 this.pendingBytes += bytes;
             }
+            if (!this.ended)
+                this.lastQualifyingOutputAt = Date.now();
             return !this.ended;
         }
         catch {
@@ -96,6 +101,7 @@ export class ConversationStreamWriter {
     }
 }
 import { FleetError } from '../application/errors.js';
+import { presentAttachmentEvent } from './agent-attachments.js';
 export function registerConversationStream(app, services, auth) {
     const connections = new Set();
     app.addHook('preClose', async () => { for (const close of connections)
@@ -146,10 +152,12 @@ export function registerConversationStream(app, services, auth) {
                     resync('capability-unavailable', false);
                     return;
                 }
+                const stateDir = owner?.snapshot().stateDir;
+                const present = (event) => presentAttachmentEvent(stateDir, request.params.id, event);
                 const handle = await control.followConversation({ controller: false, expectedGeneration: generation, after, signal, roleObservation: owner,
                     onReplay: page => { if (active() && valid()) {
                         for (const event of page.events)
-                            writer.send('ledger', event);
+                            writer.send('ledger', present(event));
                         writer.send('ledger', { coveredThrough: page.coveredThrough });
                     } },
                     onReady: ready => {
@@ -160,7 +168,7 @@ export function registerConversationStream(app, services, auth) {
                         }
                     },
                     onEvent: event => { if (active() && valid()) {
-                        writer.send('ledger', event);
+                        writer.send('ledger', present(event));
                         writer.send('ledger', { coveredThrough: event.seq });
                     } },
                     onState: state => { if (active() && valid())

package/dist/web/resource-views.d.ts

@@ -9,6 +9,7 @@ export interface ResourceFrameBinding {
     readonly sequence: number;
     readonly revision: number;
     readonly baselineId?: string;
+    readonly source?: FleetResourceState;
 }
 export type ResourceHealthReason = 'auth_required' | 'unsupported' | 'upstream_unavailable';
 export type ResourceEnvelope = ResourceFrameBinding & ({
@@ -46,8 +47,16 @@ export type ResourceEnvelope = ResourceFrameBinding & ({
         readonly reason: ResourceHealthReason;
     };
 });
+interface ResourceCoverage {
+    protocolVersion: 1;
+    producerGeneration: string;
+    views: Array<ResourceFrameBinding & {
+        source: FleetResourceState;
+    }>;
+}
+type ResourceOutputRecord = ResourceEnvelope | ResourceCoverage;
 export interface ResourceWireFrame {
-    event: 'resource' | 'resource-chunk';
+    event: 'resource' | 'resource-chunk' | 'resource-coverage';
     data: Record<string, unknown>;
 }
 export declare const RESOURCE_FRAME_BYTES: number;
@@ -64,7 +73,7 @@ export declare class ResourceOutput {
     readonly signal: AbortSignal;
     readonly failed: (error: Error) => void;
     constructor(response: ServerResponse, signal: AbortSignal, failed: (error: Error) => void);
-    send(envelope: ResourceEnvelope): Promise<void>;
+    send(envelope: ResourceOutputRecord, admitted?: () => void): Promise<void>;
     close(error?: Error): void;
 }
 export interface ResourceDescriptor {
@@ -117,6 +126,7 @@ export declare class FleetResourceViews {
     private current;
     private retire;
     private emit;
+    private coverage;
     private affects;
     private schedule;
     private refresh;

package/dist/web/resource-views.js

@@ -1,6 +1,7 @@
 import { relative, resolve, sep } from 'node:path';
 import { agentsRoot, tmpRoot, stateRoot } from '../paths.js';
 import { randomUUID } from 'node:crypto';
+import { homedir } from 'node:os';
 import { observeFleetResources } from '../application/resource-observer.js';
 export async function abortableProjection(read, signal) {
     signal.throwIfAborted();
@@ -64,7 +65,7 @@ export class ResourceOutput {
             response.once('close', this.#abort);
         }
     }
-    send(envelope) {
+    send(envelope, admitted) {
         if (this.#closed)
             return Promise.reject(new Error('resource output closed'));
         const bytes = Buffer.byteLength(JSON.stringify(envelope));
@@ -73,6 +74,7 @@ export class ResourceOutput {
         if (this.#active && this.#pendingBytes + bytes > RESOURCE_PENDING_BYTES) {
             return this.#fail(new Error('resource pending limit exceeded'));
         }
+        admitted?.();
         return new Promise((resolve, reject) => {
             const item = { envelope, bytes, resolve, reject };
             if (!this.#active) {
@@ -108,7 +110,7 @@ export class ResourceOutput {
         try {
             while (this.#active && !this.#closed) {
                 const item = this.#active;
-                for (const frame of resourceFrames(item.envelope)) {
+                for (const frame of ('views' in item.envelope ? [{ event: 'resource-coverage', data: item.envelope }] : resourceFrames(item.envelope))) {
                     if (this.#closed)
                         break;
                     const writable = this.response.write(`event: ${frame.event}\ndata: ${JSON.stringify(frame.data)}\n\n`);
@@ -192,11 +194,13 @@ export class FleetResourceViews {
         const id = randomUUID(), controller = new AbortController();
         let connection;
         let timer;
+        let healthTimer;
         const close = () => {
             if (controller.signal.aborted)
                 return;
             controller.abort();
             clearInterval(timer);
+            clearInterval(healthTimer);
             this.connections.delete(id);
             if (connection) {
                 for (const view of connection.views.values())
@@ -235,19 +239,24 @@ export class FleetResourceViews {
             close();
         }
         else {
+            // Preserve credential retirement timing independently of sparse wire health.
             timer = setInterval(() => {
                 if (!authorized()) {
                     close();
                     return;
                 }
-                for (const view of connection.views.values())
-                    if (!view.failed && view.covered && view.covered.position === view.source.snapshot().position)
-                        void this.emit(connection, view, 'coverage', { source: view.covered }).catch(close);
-                // Keep the transport live with no subscribed views; never claim source coverage from bytes.
-                if (!connection.views.size)
-                    response.write(': keepalive\n\n');
             }, 2000);
             timer.unref();
+            healthTimer = setInterval(() => {
+                if (!authorized()) {
+                    close();
+                    return;
+                }
+                this.coverage(connection).catch(close);
+                if (!connection.views.size)
+                    response.write(': keepalive\n\n');
+            }, 15000);
+            healthTimer.unref();
         }
         return { connectionId: id, close };
     }
@@ -321,10 +330,42 @@ export class FleetResourceViews {
     }
     current(connection, view) { return !connection.controller.signal.aborted && !view.controller.signal.aborted && connection.views.get(view.descriptor.viewId) === view; }
     retire(view) { view.controller.abort(); view.rejectInitial(new ResourceBindingError(409, 'resource binding retired')); }
-    emit(connection, view, kind, payload) {
-        return connection.output.send({ protocolVersion: 1, producerGeneration: this.producerGeneration, viewId: view.descriptor.viewId, subscriptionEpoch: view.epoch, baselineId: view.baselineId, sequence: ++view.sequence, revision: view.revision, kind, payload });
+    emit(connection, view, kind, payload, source) {
+        return connection.output.send({ protocolVersion: 1, producerGeneration: this.producerGeneration, viewId: view.descriptor.viewId, subscriptionEpoch: view.epoch, baselineId: view.baselineId, sequence: view.sequence + 1, revision: view.revision, kind, payload, ...(source ? { source } : {}) }, () => { view.sequence++; if (source || kind === 'ready')
+            view.qualifiedAt = Date.now(); });
+    }
+    // Admission allocates sequences atomically; the existing writer keeps this
+    // complete batch behind any active chunk assembly and earlier data records.
+    coverage(connection) {
+        const now = Date.now();
+        const eligible = [...connection.views.values()].filter(view => this.current(connection, view) && !view.failed && !view.running && !view.dirty && view.payload !== undefined && view.covered && view.covered.health === 'healthy' && view.covered.position === view.source.snapshot().position && now - (view.qualifiedAt ?? 0) >= 15000);
+        if (!eligible.length)
+            return Promise.resolve();
+        const views = eligible.map(view => ({ protocolVersion: 1, producerGeneration: this.producerGeneration, viewId: view.descriptor.viewId, subscriptionEpoch: view.epoch, baselineId: view.baselineId, sequence: view.sequence + 1, revision: view.revision, source: view.covered }));
+        return connection.output.send({ protocolVersion: 1, producerGeneration: this.producerGeneration, views }, () => { for (const view of eligible) {
+            view.sequence++;
+            view.qualifiedAt = now;
+        } });
     }
     affects(descriptor, path, structural = false) {
+        // An explicitly selected manifest may use any pathname, including one
+        // otherwise reserved for an independent task receipt.
+        if (this.scope.configPath && resolve(path) === resolve(this.scope.configPath))
+            return true;
+        // Adopted Codex history, telemetry and cache commits are not canonical
+        // Fleet preview inputs. Keep credentials, unknown paths and directory-level
+        // events conservative, and never override explicit config or role roots.
+        const roots = this.scope.roots ?? [agentsRoot(), tmpRoot()];
+        if (descriptor.resource === 'previews'
+            && /^(?:history\.jsonl|models_cache\.json|(?:thread_history|state|logs|queue|goals)_\d+\.sqlite(?:-wal|-shm|-journal)?)$/.test(relative(resolve(homedir(), '.codex'), path))
+            && !roots.some(root => { const local = relative(resolve(root), path); return local === '' || (local !== '..' && !local.startsWith('..' + sep)); }))
+            return false;
+        // Preview selection reads role config/state and conversation ledgers, never
+        // task layout run/operation/brief receipts. A worker may commit several of
+        // these while that independent canonical preview read is in flight.
+        // Unknown paths and directory-level events retain full invalidation.
+        if (descriptor.resource === 'previews' && /^task-[A-Za-z0-9_-]+(?:\.op\.json|\.json|\.brief\.md)$/.test(relative(resolve(stateRoot(), 'layouts'), path)))
+            return false;
         // Only classify known activity writes under the configured role roots.
         // Parent/unknown events and every other file retain full invalidation.
         // The canonical web producer atomically replaces hashed checkpoint files.
@@ -332,7 +373,6 @@ export class FleetResourceViews {
         // retain full wakes without requiring an outbox-quiet capture window.
         if (structural && /^[a-f0-9]{64}\.json$/.test(relative(resolve(stateRoot(), 'web', 'notification-outboxes'), path)))
             return false;
-        const roots = this.scope.roots ?? [agentsRoot(), tmpRoot()];
         for (const root of roots) {
             const parts = relative(resolve(root), path).split(sep);
             if (parts[0] === '..')
@@ -400,7 +440,7 @@ export class FleetResourceViews {
             view.covered = source;
             if (changed) {
                 view.revision++;
-                await this.emit(connection, view, 'snapshot', payload);
+                await this.emit(connection, view, 'snapshot', payload, source);
                 if (!this.current(connection, view))
                     return;
                 view.payload = payload;
@@ -410,8 +450,6 @@ export class FleetResourceViews {
                 if (this.current(connection, view))
                     view.resolveInitial({ payload, source, producerGeneration: this.producerGeneration, revision: view.revision, baselineId: view.baselineId, descriptor: view.descriptor });
             }
-            else
-                await this.emit(connection, view, 'coverage', { source });
         }
         catch (error) {
             if (!this.current(connection, view))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.76",
+  "version": "1.2.0-nightly.78",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",
@@ -48,9 +48,9 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "^1.3.0",
     "@fastify/websocket": "^11.2.0",
-    "@ours.network/cli": "3.1.1-nightly.2",
-    "@ours.network/mcp": "1.2.0-nightly.16",
-    "@ours.network/sdk": "4.1.1-nightly.2",
+    "@ours.network/cli": "3.1.1-nightly.4",
+    "@ours.network/mcp": "1.2.0-nightly.18",
+    "@ours.network/sdk": "4.1.1-nightly.4",
     "commander": "^12.1.0",
     "fastify": "^5.4.0",
     "qrcode": "1.5.4",
@@ -64,7 +64,7 @@
     "@agentclientprotocol/codex-acp": "1.10.0"
   },
   "devDependencies": {
-    "@ours.network/daemon": "4.1.1-nightly.2",
+    "@ours.network/daemon": "4.1.1-nightly.4",
     "@types/node": "^22.20.4",
     "@types/qrcode": "^1.5.6",
     "@types/ws": "^8.18.1",