@ours.network/install 0.12.0-nightly.2 → 0.12.0-nightly.20

package/install.mjs

@@ -3,7 +3,8 @@
 // bootstrap, and the `ours-install` command once the stack is on the machine).
 //
 // ONE installer for the WHOLE stack — ours core (the daemon) + the harness plugins (Claude Code /
-// Codex) + ours-fleet + the Telegram connector — for someone who ALREADY has Claude and/or Codex.
+// Codex / Hermes) + ours-fleet + the Telegram connector — for someone who ALREADY has Claude,
+// Codex, and/or Hermes.
 // Its whole job: install the stack cleanly, then hand back ONE copy-paste prompt the user drops
 // into their agent to finish all real configuration conversationally. No tokens, no port editing,
 // no config files. See packages/installer/README.md and the UX spec for the full contract.
@@ -16,7 +17,7 @@
 // installed/started/restarted — it prints exactly what it WOULD do. That is the safe way to walk
 // the whole flow on a machine you don't want to touch (and how the tests drive it).
 import { spawn, spawnSync } from 'node:child_process';
-import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
 import { homedir, userInfo, platform as osPlatform, release as osRelease } from 'node:os';
 import { join, dirname } from 'node:path';
 import { banner, heading, ok, info, warn, c, box, withSpinner, openTty, makeWriter, closeSync } from './lib/ui.mjs';
@@ -24,10 +25,14 @@ import { askLine, askYesNo, isCancel } from './lib/prompt.mjs';
 import {
   suggestPort, parsePort, validateBroker, mergeConfig, parseVersion, parseStatus,
   detectPlatform, classifyHarnessProbe, buildHandoffPrompt,
-  DEFAULT_PORT,
+  DEFAULT_PORT, resolveChannel, pkgSpec,
 } from './lib/logic.mjs';
 
 const NPM = process.env.OURS_NPM || 'npm';
+// Release channel: OURS_CHANNEL=nightly installs @nightly for mcp/tg-connector/plugin
+// launchers but keeps @ours.network/fleet at @latest (fleet has no nightly). Default: latest.
+const CHANNEL = resolveChannel(process.env.OURS_CHANNEL || process.env.OURS_INSTALL_CHANNEL);
+const spec = (pkgKey) => pkgSpec(pkgKey, CHANNEL); // → "@ours.network/<key>@<tag>"
 let DRY = !!process.env.OURS_INSTALL_DRY_RUN;
 const SELFHOST_URL = 'ours.network';
 const CLAUDE_MARKET = 'adapt-toolkit/ours-claude-marketplace';
@@ -131,6 +136,21 @@ function detectHarness(name) {
   return { name, ...verdict };
 }
 
+// Hermes detection is DIFFERENT from Claude Code / Codex: Hermes has no driven CLI. Its ours plugin
+// (`ours-hermes-install`) never calls a `hermes` binary — it just writes ~/.hermes/config.yaml + the
+// skills — so "is it drivable?" is the wrong question. Per the Hermes plugin's own prerequisites,
+// presence == the config dir (~/.hermes, override with HERMES_DIR) exists. We still run the alias-safe
+// CLI probe in case a real `hermes` command is on PATH, purely to enrich detection; either signal
+// makes it installable. No config dir and no CLI → absent (skipped, like an uninstalled harness).
+function detectHermes() {
+  const dir = process.env.HERMES_DIR || join(homedir(), '.hermes');
+  const dirPresent = existsSync(dir);
+  const cli = detectHarness('hermes'); // best-effort — Hermes usually has no `--version` CLI
+  const status = dirPresent || cli.status === 'ok' ? 'ok' : 'absent';
+  const detail = dirPresent ? `config dir ${dir} present` : cli.detail;
+  return { name: 'hermes', label: 'Hermes', status, detail };
+}
+
 // Set by main() so the top-level catch can route a Ctrl+C (InstallCancelled) through the same
 // clean-exit path as the SIGINT handler.
 let cancelHandler = null;
@@ -148,7 +168,7 @@ const USAGE = `ours-install — the unified ours.network stack installer.
   ours-install [--dry-run] [--help] [--version]
 
 Guided ~3-minute setup for the whole stack: ours core (the daemon), the harness
-plugins (Claude Code + Codex), ours-fleet, and the Telegram connector — then one
+plugins (Claude Code + Codex + Hermes), ours-fleet, and the Telegram connector — then one
 copy-paste hand-off prompt. You approve each step; re-run any time to add a piece
 or update.
 
@@ -221,7 +241,10 @@ async function main() {
     { name: 'claude', label: 'Claude Code' },
     { name: 'codex', label: 'Codex' },
   ];
+  // Claude Code + Codex are driven CLIs (alias-safe --version probe); Hermes is config-dir based
+  // (see detectHermes) so it gets its own detector, appended after them.
   const harnesses = harnessSpecs.map((h) => ({ ...h, ...detectHarness(h.name) }));
+  harnesses.push(detectHermes());
   for (const h of harnesses) {
     if (h.status === 'ok') line(ok(`'${h.name}'  → real program (its plugin can be installed)`));
     else if (h.status === 'alias') line(warn(`'${h.name}'  → ${h.detail}  (I won't call it — see the note below; you can still install it by hand)`));
@@ -232,7 +255,7 @@ async function main() {
   const anyHarness = harnesses.some((h) => h.status !== 'absent');
   if (!anyHarness) {
     line('');
-    line(warn('No Claude Code or Codex found on this machine.'));
+    line(warn('No Claude Code, Codex, or Hermes found on this machine.'));
     line(info('Install one of them first, then re-run ours-install to wire it up.'));
     finish(ttyFd); return;
   }
@@ -317,7 +340,7 @@ async function main() {
       // Without a daemon the rest is moot; go straight to the summary.
       return endScreen({ ttyFd, summary, chosenPort, chosenBroker });
     }
-    await actSpin('ensuring @ours.network/mcp@latest…', 'npm i -g @ours.network/mcp@latest', () => runAsync(NPM, ['i', '-g', '@ours.network/mcp@latest']));
+    await actSpin(`ensuring ${spec('mcp')}…`, `npm i -g ${spec('mcp')}`, () => runAsync(NPM, ['i', '-g', spec('mcp')]));
     const patch = { port: chosenPort };
     if (chosenBroker) patch.brokerUrl = chosenBroker;
     await act(`write config (${configPath()}) with port ${chosenPort}${chosenBroker ? ' + custom broker' : ''}`, async () => { writeConfigPatch(patch); return { ok: true }; });
@@ -332,7 +355,7 @@ async function main() {
     const running = daemonRunning();
     const upd = yes(`  ours core is installed (${before || '?'}) — check for an update now?`, false);
     if (upd) {
-      await actSpin('updating @ours.network/mcp@latest…', 'npm i -g @ours.network/mcp@latest', () => runAsync(NPM, ['i', '-g', '@ours.network/mcp@latest']));
+      await actSpin(`updating ${spec('mcp')}…`, `npm i -g ${spec('mcp')}`, () => runAsync(NPM, ['i', '-g', spec('mcp')]));
       const after = parseVersion(daemonVersionLine());
       if (before && after && before !== after) {
         await act(`ours-mcp restart (now v${after})`, async () => { if (!run('ours-mcp', ['restart']).ok) run('ours-mcp', ['start']); return { ok: true }; });
@@ -413,7 +436,7 @@ async function main() {
     const add = await act(`codex plugin marketplace add ${CODEX_MARKET}`, async () => run('codex', ['plugin', 'marketplace', 'add', CODEX_MARKET], { capture: true }));
     const inst = add.ok ? await act('codex plugin add ours@ours-codex-marketplace', async () => run('codex', ['plugin', 'add', 'ours@ours-codex-marketplace'], { capture: true })) : add;
     // Owner-mandated: choosing the Codex plugin ALSO installs the ours-codex live launcher, same step.
-    const wrap = inst.ok ? await actSpin('installing the ours-codex live launcher…', 'npm i -g @ours.network/codex@latest (provides ours-codex)', () => runAsync(NPM, ['i', '-g', '@ours.network/codex@latest'])) : inst;
+    const wrap = inst.ok ? await actSpin('installing the ours-codex live launcher…', `npm i -g ${spec('codex')} (provides ours-codex)`, () => runAsync(NPM, ['i', '-g', spec('codex')])) : inst;
     if (inst.ok && wrap.ok) {
       line(ok(`Codex plugin + ours-codex live launcher installed — pointed at port ${chosenPort}. No problems.`));
       // Plain-language: what ours-codex is and why you'd use it (background wake vs blocking).
@@ -427,17 +450,39 @@ async function main() {
     } else { failCodex(); record({ key: 'codex', label: 'Codex plugin + ours-codex', state: 'failed', note: 'marketplace/install step failed' }); }
     return true;
   }
+  // Hermes: NOT a driven CLI. Its plugin install is `npm i -g @ours.network/hermes@<channel>` then
+  // `ours-hermes-install`, which writes ~/.hermes/config.yaml (the ours MCP server) + the skills. No
+  // marketplace/plugin-add, no alias-safety gate — nothing here calls the `hermes` binary. We pass
+  // --skip-daemon because the unified installer already owns the daemon (Step 1, chosen port);
+  // ours-hermes-install would otherwise re-ensure/restart it. Same never-dead-end contract as above.
+  async function installHermes() {
+    const go = yes('  Install the ours plugin into Hermes?', true);
+    if (!go) { line(info('skipped — re-run ours-install to add it.')); record({ key: 'hermes', label: 'Hermes plugin', state: 'skipped' }); return false; }
+    const npmOk = await actSpin(`installing ${spec('hermes')}…`, `npm i -g ${spec('hermes')} (provides ours-hermes-install)`, () => runAsync(NPM, ['i', '-g', spec('hermes')]));
+    const inst = npmOk.ok
+      ? await act('ours-hermes-install --skip-daemon (writes ~/.hermes: ours MCP server + skills)', async () => run('ours-hermes-install', ['--skip-daemon'], { capture: true }))
+      : npmOk;
+    if (inst.ok) {
+      line(ok('Hermes plugin installed — the ours MCP server + skills are registered in ~/.hermes. No problems.'));
+      line(info("(run '/reload-mcp' in Hermes to load the ours tools.)"));
+      record({ key: 'hermes', label: 'Hermes plugin', state: 'installed', note: 'run /reload-mcp' });
+    } else { failHermes(); record({ key: 'hermes', label: 'Hermes plugin', state: 'failed', note: 'npm/ours-hermes-install step failed' }); }
+    return true;
+  }
 
   // ============================================================================================
-  // STEP 2 / 4 — harness plugins (Claude Code + Codex). The installer drives the plugin CLIs.
+  // STEP 2 / 4 — harness plugins (Claude Code + Codex + Hermes). The installer drives the plugin
+  // CLIs for Claude/Codex; Hermes installs via npm + ours-hermes-install (no CLI driving).
   // ============================================================================================
   line(heading('2/4 — harness plugins'));
-  line(info('These teach Claude Code and Codex the ours skills, so you can just talk to your agent'));
-  line(info("to message people and set things up. I'll install them for you — no commands to type."));
+  line(info('These teach Claude Code, Codex, and Hermes the ours skills, so you can just talk to your'));
+  line(info("agent to message people and set things up. I'll install them for you — no commands to type."));
   for (const h of harnesses) {
     if (h.status === 'absent') continue; // nothing to offer; pre-flight already noted it
     line('');
-    const acted = h.name === 'claude' ? await installClaude(h) : await installCodex(h);
+    const acted = h.name === 'claude' ? await installClaude(h)
+      : h.name === 'codex' ? await installCodex(h)
+        : await installHermes(h);
     cont(acted);
   }
 
@@ -451,7 +496,8 @@ async function main() {
   line(info('over Telegram so they talk to each other — and it all configures maximally easily.'));
   const goFleet = yes('  Install it?', true);
   if (goFleet) {
-    await actSpin('installing @ours.network/fleet@latest…', 'npm i -g @ours.network/fleet@latest', () => runAsync(NPM, ['i', '-g', '@ours.network/fleet@latest']));
+    // ours-fleet is ALWAYS @latest — it has no nightly tag (pkgSpec pins it even under OURS_CHANNEL=nightly).
+    await actSpin(`installing ${spec('fleet')}…`, `npm i -g ${spec('fleet')}`, () => runAsync(NPM, ['i', '-g', spec('fleet')]));
     const init = await act('ours-fleet init (one-time host setup: units, dirs, linger)', async () => run('ours-fleet', ['init']));
     if (!init.ok) line(warn(`ours-fleet host setup didn't finish — retry '${c.cyan('ours-fleet init')}'.`));
 
@@ -467,7 +513,7 @@ async function main() {
         const r = await act(`claude plugin install ${CLAUDE_FLEET_PLUGIN}`, async () => run('claude', ['plugin', 'install', CLAUDE_FLEET_PLUGIN], { capture: true }));
         if (r.ok) { line(ok('Claude Code fleet plugin installed — you can spawn agents from Claude Code. No problems.')); fleetIn.push('Claude Code'); }
         else failClaudeFleet();
-      } else { // codex
+      } else if (h.name === 'codex') {
         if (h.status !== 'ok') { manualCodexFleet(h); continue; }
         await act(`codex plugin marketplace add ${CODEX_MARKET}`, async () => run('codex', ['plugin', 'marketplace', 'add', CODEX_MARKET], { capture: true }));
         const r = await act(`codex plugin add ${CODEX_FLEET_PLUGIN}`, async () => run('codex', ['plugin', 'add', CODEX_FLEET_PLUGIN], { capture: true }));
@@ -478,7 +524,10 @@ async function main() {
     // Only claim the skill is present where the fleet plugin actually installed.
     if (init.ok && fleetIn.length) line(ok(`ours-fleet ready — ${fleetIn.join(' + ')} now know the fleet skill. No problems.`));
     else if (init.ok) line(info('ours-fleet CLI is installed; add the fleet plugin to your harness with the commands above.'));
-    const fleetOk = init.ok && (fleetIn.length > 0 || harnesses.every((h) => h.status === 'absent'));
+    // Fleet plugins target Claude Code + Codex only (Hermes has none) — so "no fleet-capable harness
+    // to install into" means every claude/codex is absent, NOT every harness (Hermes doesn't count).
+    const fleetCapableAbsent = harnesses.filter((h) => h.name === 'claude' || h.name === 'codex').every((h) => h.status === 'absent');
+    const fleetOk = init.ok && (fleetIn.length > 0 || fleetCapableAbsent);
     record({ key: 'fleet', label: 'ours-fleet', state: fleetOk ? 'installed' : 'failed', version: globalVersion('@ours.network/fleet'), note: fleetIn.length ? fleetIn.join(' + ') : (init.ok ? 'CLI only — add plugin manually' : 'ours-fleet init failed') });
   } else {
     line(info('skipped cleanly — re-run ours-install any time to add it.'));
@@ -494,7 +543,7 @@ async function main() {
   line(info("Telegram. (You'll set up the actual bot later, with your agent — not here.)"));
   const goTg = yes('  Install it?', false);
   if (goTg) {
-    await actSpin('installing @ours.network/tg-connector@latest…', 'npm i -g @ours.network/tg-connector@latest', () => runAsync(NPM, ['i', '-g', '@ours.network/tg-connector@latest']));
+    await actSpin(`installing ${spec('tg-connector')}…`, `npm i -g ${spec('tg-connector')}`, () => runAsync(NPM, ['i', '-g', spec('tg-connector')]));
     const asService = yes('  Keep it running in the background so it starts automatically on boot?', true);
     if (asService) {
       const svc = await act('ours-tg-connector install-service (starts on boot)', async () => run('ours-tg-connector', ['install-service']));
@@ -555,6 +604,13 @@ function failCodex() {
   line('    ' + c.cyan('npm i -g @ours.network/codex'));
   line(info('Your daemon and other steps are intact. Continuing.'));
 }
+function failHermes() {
+  line(warn('Couldn\'t install the Hermes plugin automatically (network or npm).'));
+  line(info('Install it by hand — run these two, then run /reload-mcp in Hermes:'));
+  line('    ' + c.cyan('npm i -g @ours.network/hermes'));
+  line('    ' + c.cyan('ours-hermes-install'));
+  line(info('Your daemon and other steps are intact. Continuing.'));
+}
 // --- fleet HARNESS PLUGIN never-dead-end messaging ---------------------------------------------
 function manualClaudeFleet(h) {
   line(warn(h.status === 'alias'

package/lib/logic.mjs

@@ -26,6 +26,45 @@ export function canonHarnesses(raw) {
   return { names, unknown };
 }
 
+// ── Release CHANNEL / npm dist-tag selection (owner 2026-07-17) ─────────────────
+// The installer normally installs everything at @latest (stable). Setting
+// OURS_CHANNEL=nightly (or OURS_INSTALL_CHANNEL) makes it install the NIGHTLY tag
+// for the packages that HAVE a nightly (mcp, tg-connector, and the harness-plugin
+// launchers claude-code/codex/hermes — all lockstep-published to the `nightly` tag),
+// but keep @ours.network/fleet at @latest ALWAYS: ours-fleet lives in its own repo
+// and publishes NO nightly tag, so `@nightly` there would 404 the whole install.
+export const DEFAULT_CHANNEL = 'latest';
+
+// Packages that follow the selected channel (nightly ⇒ @nightly). Short keys map to
+// the @ours.network/<key> npm name. NOTE fleet is deliberately ABSENT — it is pinned.
+const CHANNEL_TRACKING_PKGS = new Set(['mcp', 'tg-connector', 'claude-code', 'codex', 'hermes']);
+// Packages ALWAYS pinned to @latest regardless of channel (no nightly tag exists).
+const STABLE_ONLY_PKGS = new Set(['fleet']);
+
+// Normalize a raw channel selection to 'latest' | 'nightly'. Anything unrecognized
+// (incl. undefined/'') falls back to the safe default 'latest' — never guesses a tag.
+export function resolveChannel(raw) {
+  const v = String(raw || '').trim().toLowerCase();
+  if (v === 'nightly' || v === 'prerelease' || v === 'next') return 'nightly';
+  return DEFAULT_CHANNEL; // 'latest' and everything else
+}
+
+// The npm dist-tag to install for one package key under a channel. fleet is ALWAYS
+// 'latest'; channel-tracking packages take the channel; anything else defaults to 'latest'.
+export function pkgTag(pkgKey, channel = DEFAULT_CHANNEL) {
+  const key = String(pkgKey || '').replace(/^@ours\.network\//, '');
+  if (STABLE_ONLY_PKGS.has(key)) return 'latest';
+  const ch = resolveChannel(channel);
+  if (ch === 'nightly' && CHANNEL_TRACKING_PKGS.has(key)) return 'nightly';
+  return 'latest';
+}
+
+// Full `@ours.network/<key>@<tag>` spec for `npm i -g`, honoring the channel.
+export function pkgSpec(pkgKey, channel = DEFAULT_CHANNEL) {
+  const key = String(pkgKey || '').replace(/^@ours\.network\//, '');
+  return `@ours.network/${key}@${pkgTag(key, channel)}`;
+}
+
 // The Telegram connector owns 3051 — the installer must never hand a daemon that port.
 export const RESERVED_PORTS = [3051];
 export const DEFAULT_PORT = 3050;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/install",
-  "version": "0.12.0-nightly.2",
+  "version": "0.12.0-nightly.20",
   "private": false,
   "description": "The unified ours.network stack installer (ours-install): one guided ~3-minute flow for ours core (the daemon) + the harness plugins (Claude Code / Codex) + ours-fleet + the Telegram connector, then a single copy-paste hand-off prompt. Self-contained (Node built-ins only); run as `ours-install` or via curl|bash (install.sh).",
   "type": "module",