@ours.network/fleet 1.2.0-nightly.77 → 1.2.0-nightly.78

package/dist/build-info.json

@@ -1,9 +1,9 @@
 {
-  "version": "1.2.0-nightly.77",
-  "buildId": "bba4bf03b747",
-  "commit": "9bdfe660ab6660b0aa75f2d2bc84254e2e811373",
+  "version": "1.2.0-nightly.78",
+  "buildId": "b2ec2cc5b628",
+  "commit": "42ac52e4fadbfe48faac20ac2518d7280947c981",
   "dirty": true,
-  "builtAt": "2026-10-19T20:21:21.233Z",
+  "builtAt": "2026-10-19T21:24:11.994Z",
   "capabilities": [
     "service.refresh-v1",
     "managed-cli.codex-reasoning-effort-v1",

package/dist/web/resource-views.js

@@ -1,6 +1,7 @@
 import { relative, resolve, sep } from 'node:path';
 import { agentsRoot, tmpRoot, stateRoot } from '../paths.js';
 import { randomUUID } from 'node:crypto';
+import { homedir } from 'node:os';
 import { observeFleetResources } from '../application/resource-observer.js';
 export async function abortableProjection(read, signal) {
     signal.throwIfAborted();
@@ -351,6 +352,14 @@ export class FleetResourceViews {
         // otherwise reserved for an independent task receipt.
         if (this.scope.configPath && resolve(path) === resolve(this.scope.configPath))
             return true;
+        // Adopted Codex history, telemetry and cache commits are not canonical
+        // Fleet preview inputs. Keep credentials, unknown paths and directory-level
+        // events conservative, and never override explicit config or role roots.
+        const roots = this.scope.roots ?? [agentsRoot(), tmpRoot()];
+        if (descriptor.resource === 'previews'
+            && /^(?:history\.jsonl|models_cache\.json|(?:thread_history|state|logs|queue|goals)_\d+\.sqlite(?:-wal|-shm|-journal)?)$/.test(relative(resolve(homedir(), '.codex'), path))
+            && !roots.some(root => { const local = relative(resolve(root), path); return local === '' || (local !== '..' && !local.startsWith('..' + sep)); }))
+            return false;
         // Preview selection reads role config/state and conversation ledgers, never
         // task layout run/operation/brief receipts. A worker may commit several of
         // these while that independent canonical preview read is in flight.
@@ -364,7 +373,6 @@ export class FleetResourceViews {
         // retain full wakes without requiring an outbox-quiet capture window.
         if (structural && /^[a-f0-9]{64}\.json$/.test(relative(resolve(stateRoot(), 'web', 'notification-outboxes'), path)))
             return false;
-        const roots = this.scope.roots ?? [agentsRoot(), tmpRoot()];
         for (const root of roots) {
             const parts = relative(resolve(root), path).split(sep);
             if (parts[0] === '..')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "1.2.0-nightly.77",
+  "version": "1.2.0-nightly.78",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",