@ours.network/fleet 2.3.1 → 2.4.0-nightly.1

package/dist/web/resource-views.js

@@ -155,7 +155,7 @@ export function canonicalResourceDescriptor(input) {
     if (!input || typeof input !== 'object' || Array.isArray(input))
         throw Error('invalid resource descriptor');
     const value = input;
-    if (!/^[A-Za-z0-9_-]{1,128}$/.test(value.viewId) || !['directory', 'roles', 'tasks', 'task-lists', 'configuration', 'previews', 'task-layout', 'creation-action', 'action', 'member-addition', 'login', 'onboarding-health', 'subscriptions'].includes(value.resource)
+    if (!/^[A-Za-z0-9_-]{1,128}$/.test(value.viewId) || !['directory', 'roles', 'tasks', 'task-lists', 'configuration', 'previews', 'task-layout', 'creation-action', 'action', 'member-addition', 'login', 'onboarding-health', 'subscriptions', 'channels'].includes(value.resource)
         || Object.keys(value).some(key => !['viewId', 'resource', 'includeTemporary', 'includeDefinitions', 'ids', 'state', 'list', 'groupByList', 'includeDeleting', 'entityId', 'receiptId', 'provider', 'activityOnly'].includes(key)))
         throw Error('invalid resource descriptor');
     if (value.activityOnly !== undefined && value.resource !== 'previews')
@@ -364,22 +364,31 @@ export class FleetResourceViews {
             view.qualifiedAt = now;
         } });
     }
+    /** Whether `path` is, contains or lies within the manifest, its split definitions or another configuration input. */
+    configurationDependency(path) {
+        const manifest = resolve(this.scope.configPath ?? defaultConfigPath());
+        const root = resolve(splitRootFor(manifest)), changed = resolve(path);
+        const within = (candidate, parent) => {
+            const local = relative(parent, candidate);
+            return local === '' || (local !== '..' && !local.startsWith('..' + sep));
+        };
+        // Configuration and provenance read the manifest and split definitions;
+        // loadConfig also rejects legacy YAML files in the global fleet.d root.
+        // Ancestor replacement/unknown directory wakes remain conservative.
+        const legacy = resolve(fleetDDir());
+        return within(changed, root) || within(root, changed) || within(manifest, changed)
+            || within(changed, legacy) || within(legacy, changed)
+            || this.configurationInputs().some(input => within(resolve(input), changed));
+    }
     affects(descriptor, path, structural = false) {
-        if (descriptor.resource === 'configuration') {
-            const manifest = resolve(this.scope.configPath ?? defaultConfigPath());
-            const root = resolve(splitRootFor(manifest)), changed = resolve(path);
-            const within = (candidate, parent) => {
-                const local = relative(parent, candidate);
-                return local === '' || (local !== '..' && !local.startsWith('..' + sep));
-            };
-            // Configuration and provenance read the manifest and split definitions;
-            // loadConfig also rejects legacy YAML files in the global fleet.d root.
-            // Ancestor replacement/unknown directory wakes remain conservative.
-            const legacy = resolve(fleetDDir());
-            return within(changed, root) || within(root, changed) || within(manifest, changed)
-                || within(changed, legacy) || within(legacy, changed)
-                || this.configurationInputs().some(input => within(resolve(input), changed));
-        }
+        // The Channels projection commits only its own private database; no other view reads it.
+        const channelsRoot = resolve(stateRoot(), 'private-channels'), channelsPath = path === channelsRoot || path.startsWith(channelsRoot + sep);
+        if (descriptor.resource === 'channels')
+            return channelsPath || channelsRoot.startsWith(resolve(path) + sep);
+        if (channelsPath)
+            return false;
+        if (descriptor.resource === 'configuration')
+            return this.configurationDependency(path);
         // An explicitly selected manifest may use any pathname, including one
         // otherwise reserved for an independent task receipt.
         if (this.scope.configPath && resolve(path) === resolve(this.scope.configPath))
@@ -394,6 +403,14 @@ export class FleetResourceViews {
         if (roleProjection && !inRoleRoot && (/^(?:history\.jsonl|models_cache\.json|(?:thread_history|state|logs|queue|goals)_\d+\.sqlite(?:-wal|-shm|-journal)?)$/.test(relative(resolve(homedir(), '.codex'), path))
             || /^(?:workspace-devices\.db(?:-wal|-shm|-journal)?|audit[/\\]audit\.jsonl)$/.test(relative(resolve(stateRoot(), 'web'), path))))
             return false;
+        // Task and room workspaces hold their agents' own execution artifacts (checkouts,
+        // builds, test logs); role projections read nothing there except declared role
+        // roots and configuration (manifest, split definitions), which stay fenced. Working
+        // agents write there continuously, which otherwise fences every directory capture
+        // until it resyncs. The workspace directories themselves and their ancestors remain full wakes.
+        if (roleProjection && !inRoleRoot && /^(?:tasks|rooms)[/\\][^/\\]+[/\\]/.test(relative(resolve(stateRoot(), 'workspaces'), path))
+            && !this.configurationDependency(path))
+            return false;
         // Preview selection reads role config/state and conversation ledgers, never
         // task layout run/operation/brief receipts. A worker may commit several of
         // these while that independent canonical preview read is in flight.

package/dist/web/runtime.js

@@ -1,3 +1,4 @@
+import { createChannels } from '../channels/runtime.js';
 import { ConversationRoleObserver } from '../application/conversation-role-observer.js';
 import { replaceFileAtomically } from '../atomic-file.js';
 import { validateAccountOrigin } from '../account-origin.js';
@@ -196,6 +197,15 @@ export async function startWebConsole(options) {
     const taskRooms = new TaskRoomApplicationService(options.configPath, { binPath: () => options.binPath });
     // One-time, lock-guarded mission key migration before serving; failure leaves it to the next mutation.
     await taskRooms.prepareMissionKeys().catch(error => console.warn(`mission key migration deferred: ${error.message}`));
+    // Ours Channels runs only where a daemon client profile exists.
+    let channels;
+    try {
+        channels = createChannels({ configPath: configuration.path, repository });
+    }
+    catch (error) {
+        console.warn(`Ours Channels unavailable: ${error.message}`);
+        channels = undefined;
+    }
     let server;
     try {
         server = await buildWebServer({
@@ -219,6 +229,7 @@ export async function startWebConsole(options) {
                 });
             },
             codexModels: createCodexModelDiscovery(),
+            ...(channels ? { channels: channels.service } : {}),
             subscriptions: new SubscriptionService({
                 agents: async () => (await query.list(true)).map(({ role, status }) => ({
                     roleId: role.id, stateDir: repository.stateDir(role), running: status.supervisor.liveness === 'running',
@@ -241,6 +252,7 @@ export async function startWebConsole(options) {
         }, { origin: `http://127.0.0.1:${requestedPort}`, host: `127.0.0.1:${requestedPort}` }, { auth });
     }
     catch (error) {
+        channels?.close();
         lock.release();
         throw error;
     }
@@ -336,6 +348,7 @@ export async function startWebConsole(options) {
                 await control?.close();
                 await gateway?.close();
                 await server.close();
+                channels?.close();
             }
             finally {
                 lock.release();

package/dist/web/server.d.ts

@@ -24,6 +24,7 @@ import type { PresetProvenance } from '../application/preset-provenance.js';
 import type { OfferedModels } from '../subscriptions/cli.js';
 import type { SubscriptionService } from '../subscriptions/service.js';
 import type { LayoutBindingGrants } from '../rooms-tasks/layout-binding-grants.js';
+import type { ChannelsService } from '../channels/service.js';
 export interface WebServices {
     resourceScope?: FleetResourceScope;
     invalidateResourceCaches?(): void;
@@ -48,6 +49,8 @@ export interface WebServices {
     presetProvenance?: PresetProvenance;
     oursTools?: Pick<SupervisorOursTools, 'list' | 'call'>;
     subscriptions?: SubscriptionService;
+    /** Ours Channels: Owner-only cross-identity external contacts. Absent: not configured. */
+    channels?: ChannelsService;
     /** First-time setup from the packaged presets; the account App supplies only the model choices. */
     onboardingSetup?(answers: InitAnswers): Promise<void>;
     /** The Codex models the runtime that sessions will use offers the active account. Absent: this server cannot tell, and filters nothing. */

package/dist/web/server.js

@@ -424,6 +424,9 @@ export async function buildWebServer(services, boundary, options = {}) {
     const project = async (descriptor, signal, owner = '') => {
         signal.throwIfAborted();
         services.invalidateResourceCaches?.();
+        // Role projections load the configuration: fence this capture on its external inputs too.
+        if (['directory', 'roles', 'previews'].includes(descriptor.resource))
+            services.configuration?.observeValidationInputs();
         switch (descriptor.resource) {
             case 'task-layout':
                 try {
@@ -456,6 +459,10 @@ export async function buildWebServer(services, boundary, options = {}) {
                     throw error;
                 }
             case 'subscriptions': return { providers: await subscriptions().list(true) };
+            case 'channels':
+                if (!services.channels)
+                    throw new FleetError('capability_unavailable', 'Ours Channels is not configured on this server');
+                return services.channels.snapshot();
             case 'onboarding-health': {
                 const revision = services.configuration?.read().revision;
                 if (onboardingObserved && onboardingObserved.revision !== revision)
@@ -552,6 +559,25 @@ export async function buildWebServer(services, boundary, options = {}) {
     });
     for (const resource of ['task-layout', 'creation-action', 'action', 'member-addition', 'login', 'onboarding-health'])
         app.get('/api/v1/' + resource, async () => { throw new ResourceBindingError(409, 'resource binding required'); });
+    const channels = () => { if (!services.channels)
+        throw new FleetError('capability_unavailable', 'Ours Channels is not configured on this server'); return services.channels; };
+    const channelCid = (value) => { const cid = String(value ?? ''); if (!/^[0-9A-Fa-f]{64}$/.test(cid))
+        throw new FleetError('invalid_request', 'a 64-hex container id is required'); return cid.toUpperCase(); };
+    const optionalInt = (value, name, max = Number.MAX_SAFE_INTEGER) => { if (value === undefined || value === '')
+        return undefined; const n = Number(value); if (!Number.isSafeInteger(n) || n < 1 || n > max)
+        throw new FleetError('invalid_request', `${name} must be an integer from 1 to ${max}`); return n; };
+    app.get('/api/v1/channels', async (request) => {
+        auth.authenticate(request);
+        const query = request.query;
+        return channels().list({ ...(query.cursor ? { cursor: String(query.cursor) } : {}), ...(query.q ? { q: String(query.q).slice(0, 200) } : {}), ...(query.root ? { root: channelCid(query.root) } : {}), ...(query.limit ? { limit: optionalInt(query.limit, 'limit', 200) } : {}) });
+    });
+    app.get('/api/v1/channels-status', async (request) => { auth.authenticate(request); return channels().status(); });
+    app.get('/api/v1/channels/:cid', async (request) => { auth.authenticate(request); return channels().get(channelCid(request.params.cid)); });
+    app.get('/api/v1/channels/:cid/perspectives/:source/messages', async (request) => {
+        auth.authenticate(request);
+        const before = optionalInt(request.query.before_seq, 'before_seq'), limit = optionalInt(request.query.limit, 'limit', 200);
+        return channels().history(channelCid(request.params.cid), channelCid(request.params.source), { ...(before !== undefined ? { before_seq: before } : {}), ...(limit !== undefined ? { limit } : {}) });
+    });
     app.get('/api/v1/directory', async (request) => { auth.authenticate(request); return project({ viewId: 'read', resource: 'directory' }, new AbortController().signal); });
     app.get('/api/v1/previews', async (request) => { auth.authenticate(request); const query = request.query, ids = String(query.ids ?? '').split(',').filter(Boolean); return project(canonicalResourceDescriptor({ viewId: 'read', resource: 'previews', ids, ...(query.activityOnly === 'true' ? { activityOnly: true } : {}) }), new AbortController().signal); });
     app.get('/api/v1/task-lists', async (request) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/fleet",
-  "version": "2.3.1",
+  "version": "2.4.0-nightly.1",
   "description": "Harness-agnostic fleet of persistent, identity-bound AI agents. Declarative fleet.yaml, managed native/ACP sessions, supervision, and ours.network messaging.",
   "type": "module",
   "license": "FSL-1.1-Apache-2.0",
@@ -49,9 +49,9 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "^1.3.0",
     "@fastify/websocket": "^11.2.0",
-    "@ours.network/cli": "4.2.0",
-    "@ours.network/mcp": "2.0.3",
-    "@ours.network/sdk": "5.2.0",
+    "@ours.network/cli": "4.2.1-nightly.1",
+    "@ours.network/mcp": "2.1.0-nightly.1",
+    "@ours.network/sdk": "5.2.1-nightly.1",
     "commander": "^12.1.0",
     "fastify": "^5.4.0",
     "qrcode": "1.5.4",
@@ -65,7 +65,7 @@
     "@agentclientprotocol/codex-acp": "1.10.0"
   },
   "devDependencies": {
-    "@ours.network/daemon": "5.2.0",
+    "@ours.network/daemon": "5.2.1-nightly.1",
     "@types/node": "^22.20.4",
     "@types/qrcode": "^1.5.6",
     "@types/ws": "^8.18.1",