@ours.network/install 1.2.0-nightly.1 → 1.2.1-nightly.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -140,9 +140,9 @@ both channels.
140
140
  ## Selected network installations (2.0)
141
141
 
142
142
  The installed package carries its compatible `assets/sources.json` policy.
143
- `--sources` remains available as an explicit development override. Feature
144
- revisions in the testing delivery remain unpublished; local build evidence does
145
- not prove remote fetchability or compatibility of a replacement source set.
143
+ `--sources` remains available as an explicit development override. Published releases bind that policy to exact component versions and registry
144
+ SHA-512 values. Acquisition validates the ours dependency graph before activation.
145
+ A development override without a release binding is not a qualified product release.
146
146
 
147
147
  ```sh
148
148
  ours-install server install --mode docker --state-dir /private/ours-install
package/assets/Dockerfile CHANGED
@@ -5,7 +5,7 @@ FROM toolchain AS build
5
5
  WORKDIR /opt/ours
6
6
  COPY sources.json /opt/ours/sources.json
7
7
  COPY scripts/build/*.mjs /build-scripts/
8
- COPY scripts/maintenance/build-context.mjs scripts/maintenance/provenance-compare.mjs /maintenance/
8
+ COPY scripts/maintenance/build-context.mjs scripts/maintenance/provenance-compare.mjs scripts/maintenance/release-graph.mjs /maintenance/
9
9
  RUN --mount=type=secret,id=github_token --mount=type=cache,id=ours-dist-2-npm,target=/root/.npm,sharing=locked node /build-scripts/build.mjs
10
10
  # Testing delivery: npm resolves transitive versions afresh; repeat builds may differ.
11
11
  # build.mjs creates package.json once from the sources.json selections.
@@ -16,7 +16,7 @@ RUN node /build-scripts/record-build.mjs
16
16
  # must be able to read it. Protected state/host copies retain private ownership.
17
17
  RUN chmod 755 /opt/ours /opt/ours/docker /opt/ours/docker/vendor && chmod 644 package.json package-lock.json dependency-tree.json build-context.json docker/vendor/*.tgz
18
18
  LABEL network.ours.build-context="1"
19
- COPY scripts/maintenance/build-context.mjs scripts/maintenance/provenance-compare.mjs /opt/ours/maintenance/
19
+ COPY scripts/maintenance/build-context.mjs scripts/maintenance/provenance-compare.mjs scripts/maintenance/release-graph.mjs /opt/ours/maintenance/
20
20
  COPY scripts/runtime/runtime-common.mjs /opt/ours/docker/runtime-common.mjs
21
21
  COPY scripts/runtime/check-client.mjs /opt/ours/docker/check-client.mjs
22
22
  COPY scripts/runtime/check-start.mjs /opt/ours/docker/check-start.mjs