@ours.network/install 1.2.0-nightly.2 → 1.2.1-nightly.10

package/assets/release.json

@@ -0,0 +1,57 @@
+{
+  "schema": 1,
+  "channel": "nightly",
+  "installerVersion": "1.2.1-nightly.10",
+  "packages": {
+    "@ours.network/sdk": {
+      "version": "3.8.1-nightly.9",
+      "integrity": "sha512-9xh/7hWZ8zRV+8Vimu7OTf2qUAp4o4MJFxlCVtyi1YO0WyFFgk+dZcT8nWlXY/JWIPFdb8wnYW/OSoqGUAw4Hw=="
+    },
+    "@ours.network/cli": {
+      "version": "2.8.1-nightly.7",
+      "integrity": "sha512-Kq3iySBsOgazTxawxY8aFvaMTQ6fnkPZ2KmO/k6NhPaVpZbmBcL/9OWefKYEUlDMvuSOEVzjQLZa0Wac4oopuA=="
+    },
+    "@ours.network/tg-connector": {
+      "version": "1.0.1-nightly.3",
+      "integrity": "sha512-UDHEgM5C3mnnyfV3KTM2XFDGZ7vYs7oBE/3r8bKDtxJdlQZ4bxxI44LKrPI3gO2sdGROsDdM8/tvzwbJ8MiBYw=="
+    },
+    "@ours.network/cowork": {
+      "version": "1.3.2-nightly.20260921.0d6bb50",
+      "integrity": "sha512-gyUgY7Fw6RQVhONqexLNcS8m0WuBUQiHYIrWqd2FeAyyJOONjYGfbRtgJ67Xin1YTYf8Cxlomuf6j8cEc4ZwZg=="
+    },
+    "@ours.network/messenger-server": {
+      "version": "1.0.31-nightly.3",
+      "integrity": "sha512-j86POD2U2yh7jiIqbIixDu8TpEpaVf+dHLs3adtTRfTs6V7ucl//digdkyc1uaZrUliRduxXKBOrb/1Nu648xQ=="
+    },
+    "@ours.network/fleet": {
+      "version": "1.2.0-nightly.3",
+      "integrity": "sha512-FzizLkh1fQ9RkzmID1v42QlZs9E0QHWJ44IWIWzYd0DRaetcXg/5FUVTNc82U5yWZyveBZTJq6mvg9H73NSlkw=="
+    },
+    "@ours.network/mcp": {
+      "version": "1.2.0-nightly.5",
+      "integrity": "sha512-CsRsHlJwU5WkUeF8mMLysq9GsYLBA2wnl8v+qZhaJZhSJWoNb5TqfXd2v5/Su7VUpOaRwvubv/9Jf86eQgqhGw=="
+    },
+    "@ours.network/codex": {
+      "version": "1.2.0-nightly.5",
+      "integrity": "sha512-6E3tE0valPE0FSOsONh3BrrBo9Gxt1IgWm5Hwj0xm00mGQ+qsjGRrzCB8snrOh9OdnGuvPOF20aunmp4g4KoMg=="
+    },
+    "@ours.network/claude-code": {
+      "version": "1.2.0-nightly.5",
+      "integrity": "sha512-PxPegFvXx5bkvTprB8dcPjIYvE5bvjQoAtw31onOAZa0YdX2K7yYpesYcZ0sOnFdSQkI4+aaVyTb1Lj9EiMABQ=="
+    },
+    "@ours.network/daemon": {
+      "version": "3.8.1-nightly.1",
+      "integrity": "sha512-1+RA0UH/wJUSmKnmZuHS3v6UyH5PsrZWoqwa5rFKl6n2Cd8sWDs++DrwwV0IOFdgFcDOtb/k8mes4sI2J7J8mg=="
+    }
+  },
+  "hostCli": {
+    "@ours.network/sdk": {
+      "version": "3.8.1-nightly.9",
+      "integrity": "sha512-9xh/7hWZ8zRV+8Vimu7OTf2qUAp4o4MJFxlCVtyi1YO0WyFFgk+dZcT8nWlXY/JWIPFdb8wnYW/OSoqGUAw4Hw=="
+    },
+    "@ours.network/cli": {
+      "version": "2.8.1-nightly.7",
+      "integrity": "sha512-Kq3iySBsOgazTxawxY8aFvaMTQ6fnkPZ2KmO/k6NhPaVpZbmBcL/9OWefKYEUlDMvuSOEVzjQLZa0Wac4oopuA=="
+    }
+  }
+}

package/assets/scripts/build/build-common.mjs

@@ -7,7 +7,7 @@ export const ROOT = resolve(process.env.OURS_BUILD_ROOT || '/opt/ours');
 export const SOURCE_ROOT = resolve(process.env.OURS_SOURCE_ROOT || '/src');
 export const OUT = join(ROOT, 'docker/vendor');
 export const CONFIG = JSON.parse(readFileSync(join(ROOT, 'sources.json'), 'utf8'));
-export const SELECTED = new Set((process.env.OURS_BUILD_PACKAGES || 'sdk,cli,mcp,tg-connector,cowork,messenger-server').split(',').map(name => '@ours.network/' + name));
+export const SELECTED = new Set((process.env.OURS_BUILD_PACKAGES || 'sdk,cli,daemon,tg-connector,cowork,messenger-server').split(',').map(name => '@ours.network/' + name));
 export const inheritedLock = process.env.OURS_INSTALLER_LOCK_FD === '3' ? [3] : [];
 export const run = (args, cwd) => execFileSync(args[0], args.slice(1), { cwd, stdio: ['inherit', 'inherit', 'inherit', ...inheritedLock] });
 export const capture = (args, cwd, env = process.env) => execFileSync(args[0], args.slice(1), { cwd, env, encoding: 'utf8', stdio: ['ignore', 'pipe', 'inherit', ...inheritedLock] });

package/assets/scripts/build/build-sdk.mjs

@@ -2,8 +2,13 @@ import { join } from 'node:path';
 import { SOURCE_ROOT, SELECTED, pack, run } from './build-common.mjs';
 const source = join(SOURCE_ROOT, 'sdk');
 run(['npm', 'ci', '--no-audit', '--no-fund'], source);
-run(['bash', 'scripts/compile-mufl.sh'], source);
+if (SELECTED.has('@ours.network/daemon')) run(['bash', 'scripts/compile-mufl.sh'], source);
 run(['npm', 'run', 'build'], source);
 if (SELECTED.has('@ours.network/cli')) run(['npm', 'run', 'build:cli'], source);
 pack(source, '@ours.network/sdk', 'sdk');
 pack(join(source, 'packages/cli'), '@ours.network/cli', 'sdk');
+
+if (SELECTED.has('@ours.network/daemon')) {
+  run(['npm', 'run', 'build:daemon'], source);
+  pack(join(source, 'packages/daemon'), '@ours.network/daemon', 'sdk');
+}

package/assets/scripts/build/record-build.mjs

@@ -4,6 +4,7 @@ import { join, resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { execFileSync } from 'node:child_process';
 import { createBuildContext, CONTEXT } from '../maintenance/build-context.mjs';
+import { verifyRuntimeRelease } from '../maintenance/release-graph.mjs';
 export function finalizeBuild(root) {
   if (fs.realpathSync(root) !== root) throw new Error('Build root must be canonical');
   try { fs.lstatSync(join(root, CONTEXT)); throw new Error('Existing context cannot be regenerated'); }
@@ -20,6 +21,7 @@ export function finalizeBuild(root) {
     if (typeof spec !== 'string' || !/^file:docker\/vendor\/ours\.network-[a-z-]+\.tgz$/.test(spec)) throw new Error('Unexpected installer vendor reference');
     protect(join(root, spec.slice(5)));
   }
+  verifyRuntimeRelease(root);
   const tree = execFileSync('npm', ['ls', '--omit=dev', '--all', '--json'], { cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
   JSON.parse(tree);
   const path = join(root, 'dependency-tree.json');

package/assets/scripts/maintenance/build-context.mjs

@@ -8,7 +8,7 @@ import { semanticRecordEqual } from './provenance-compare.mjs';
 export const BASE_RECORDS = ['package-lock.json', 'dependency-tree.json'];
 export const CONTEXT = 'build-context.json';
 const admitted = new WeakMap();
-const packages = new Set(['sdk', 'cli', 'mcp', 'tg-connector', 'cowork', 'messenger-server', 'fleet', 'codex', 'claude-code', 'install'].map(n => '@ours.network/' + n));
+const packages = new Set(['sdk', 'cli', 'daemon', 'mcp', 'tg-connector', 'cowork', 'messenger-server', 'fleet', 'codex', 'claude-code', 'install'].map(n => '@ours.network/' + n));
 const digest = (bytes, algorithm = 'sha256', encoding = 'hex') => createHash(algorithm).update(bytes).digest(encoding);
 const fail = text => { throw new Error(`Build context: ${text}`); };
 const keys = (v, expected) => v && !Array.isArray(v) && typeof v === 'object' && Object.keys(v).sort().join('\0') === [...expected].sort().join('\0');

package/assets/scripts/maintenance/daemon-owner.mjs

@@ -0,0 +1,15 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+// Native callers provide an exact selected executable. Compose mounts the
+// selected runtime and supplies its bin directory, including retained releases.
+export function daemonOwner(env = process.env) {
+  if (env.OURS_CLI_PATH) return env.OURS_CLI_PATH;
+  const bin = env.OURS_DAEMON_BIN_DIR;
+  if (!bin) throw new Error('daemon maintenance requires its selected executable or bin directory');
+  const daemon = join(bin, 'ours-daemon');
+  if (existsSync(daemon)) return daemon;
+  const legacy = join(bin, 'ours');
+  if (existsSync(legacy)) return legacy;
+  throw new Error('selected runtime contains no daemon administrator');
+}

package/assets/scripts/maintenance/docker-layout-conversion.mjs

@@ -6,6 +6,8 @@ import { pathToFileURL } from 'node:url';
 import { copyPrivateTree, scanSource, createArchive, validateArchive } from './state-archive.mjs';
 import { publishNoReplace } from './state-native.mjs';
 
+import { daemonOwner } from './daemon-owner.mjs';
+
 const COMPONENTS = ['daemon', 'telegram', 'cowork', 'messenger'];
 import { recordNames, readBuildRecords, validateBuildRecordSet } from './build-context.mjs';
 const DAEMON_STATE = '/var/lib/ours';
@@ -207,7 +209,7 @@ export async function runDockerLayoutCommand(argv, env = process.env) {
   const build = env.OURS_BUILD_ROOT || '/opt/ours';
   const options = {
     uid: process.getuid(), gid: process.getgid(), instanceId: env.OURS_DAEMON_ID,
-    cli: env.OURS_CLI_PATH || '/opt/ours/node_modules/.bin/ours',
+    cli: daemonOwner({ OURS_DAEMON_BIN_DIR: '/opt/ours/node_modules/.bin', ...env }),
     configPath: env.OURS_DAEMON_CONFIG || '/var/lib/ours/config.json',
     provenance: readBuildRecords(build),
   };

package/assets/scripts/maintenance/release-graph.mjs

@@ -0,0 +1,111 @@
+/** Enforce the selected ours artifacts; this is not third-party lock replay. */
+import { existsSync, lstatSync, readFileSync, realpathSync } from 'node:fs';
+import { join, resolve, relative, isAbsolute } from 'node:path';
+import { createHash } from 'node:crypto';
+
+const names = ['sdk', 'cli', 'tg-connector', 'cowork', 'messenger-server', 'fleet', 'mcp', 'codex', 'claude-code'].map(name => '@ours.network/' + name);
+const stable = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
+const nightly = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)-nightly\.(0|[1-9]\d*)(?:\.[0-9a-f]{7,40})?$/;
+const fail = message => { throw new Error(`Release graph refused: ${message}`); };
+function file(path) {
+  if (!lstatSync(path).isFile() || realpathSync(path) !== path) fail(`non-regular or linked file: ${path}`);
+  return readFileSync(path);
+}
+const json = path => JSON.parse(file(path));
+
+export function releaseBinding(policy) {
+  // Only an absent binding denotes explicit development/retained legacy inputs.
+  if (!Object.hasOwn(policy ?? {}, 'release')) return null;
+  const release = policy.release;
+  if (release?.schema !== 1 || !['stable', 'nightly'].includes(release.channel)) fail('invalid release binding');
+  const pattern = release.channel === 'nightly' ? nightly : stable;
+  if (typeof release.installerVersion !== 'string' || !pattern.test(release.installerVersion)) fail('invalid installer version/channel');
+  if (release.scope !== undefined && release.scope !== 'host-cli') fail('invalid release scope');
+  const required = release.scope === 'host-cli' ? ['@ours.network/cli', '@ours.network/sdk'] : [...names, ...(release.packages?.['@ours.network/daemon'] ? ['@ours.network/daemon'] : [])];
+  if (!release.packages || JSON.stringify(Object.keys(release.packages).sort()) !== JSON.stringify([...required].sort())) fail('release must select exactly the required ours packages');
+  if (release.scope === 'host-cli' && Object.hasOwn(release, 'hostCli')) fail('nested host CLI selection');
+  for (const [name, entry] of Object.entries(release.packages)) {
+    if (typeof entry?.version !== 'string' || !pattern.test(entry.version) || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(entry.integrity ?? '')) fail(`invalid release artifact: ${name}`);
+  }
+  if (Object.hasOwn(release, 'hostCli')) {
+    if (!release.hostCli || Object.keys(release.hostCli).sort().join(',') !== '@ours.network/cli,@ours.network/sdk') fail('host CLI must select exactly CLI and SDK');
+    for (const [name, entry] of Object.entries(release.hostCli)) {
+      if (typeof entry?.version !== 'string' || !pattern.test(entry.version) || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(entry.integrity ?? '')) fail(`invalid host CLI artifact: ${name}`);
+    }
+  }
+  if (!policy.packages || !Object.keys(policy.packages).length) fail('missing release source selection');
+  for (const [name, entry] of Object.entries(policy.packages)) {
+    if (entry?.type !== 'npm' || entry.version !== release.packages[name]?.version || Object.keys(entry).sort().join(',') !== 'type,version') fail(`source selection differs from release: ${name}`);
+  }
+  return release;
+}
+
+export function verifyReleaseGraph(root, policy, { requiredPackages = Object.keys(policy?.packages ?? {}) } = {}) {
+  const release = releaseBinding(policy);
+  if (!release) return { verified: false, reason: 'development or retained legacy source selection' };
+  root = resolve(root);
+  if (realpathSync(root) !== root) fail('build root is not canonical');
+  const manifest = json(join(root, 'package.json'));
+  if (manifest.name?.startsWith('@ours.network/') && manifest.version !== release.packages[manifest.name]?.version) fail(`root package differs from release: ${manifest.name}`);
+  const locks = ['package-lock.json', 'node_modules/.package-lock.json'].map(path => {
+    const lock = json(join(root, path));
+    if (lock.lockfileVersion !== 3 || !lock.packages || Array.isArray(lock.packages)) fail(`invalid lock: ${path}`);
+    const entries = new Map();
+    for (const [location, entry] of Object.entries(lock.packages)) {
+      const match = location.match(/(?:^|\/)node_modules\/(@ours\.network\/[^/]+)$/);
+      if (!match) continue;
+      const name = match[1], expected = release.packages[name];
+      if (!expected || entry?.link || entry.version !== expected.version || entry.integrity !== expected.integrity) fail(`version/integrity mismatch: ${path}:${location}`);
+      const installed = resolve(root, location), rel = relative(root, installed);
+      if (!rel || rel.startsWith('..') || isAbsolute(rel)) fail(`escaping lock location: ${location}`);
+      if (typeof entry.resolved !== 'string') fail(`missing artifact location: ${location}`);
+      if (entry.resolved.startsWith('file:')) {
+        const archive = resolve(root, entry.resolved.slice(5));
+        const archiveRel = relative(root, archive);
+        if (archiveRel.startsWith('..') || isAbsolute(archiveRel) || !archive.endsWith('.tgz')) fail(`unbound local artifact: ${location}`);
+        const integrity = 'sha512-' + createHash('sha512').update(file(archive)).digest('base64');
+        if (integrity !== expected.integrity) fail(`vendor bytes differ from release: ${location}`);
+      } else if (!entry.resolved.startsWith(`https://registry.npmjs.org/${name}/-/`)) fail(`non-official artifact: ${location}`);
+      entries.set(location, { name, entry, installed });
+    }
+    return entries;
+  });
+  const [declared, installed] = locks;
+  const direct = Object.entries(manifest.dependencies ?? {}).filter(([name]) => name.startsWith('@ours.network/'));
+  if (!manifest.name?.startsWith('@ours.network/') && JSON.stringify(direct.map(([name]) => name).sort()) !== JSON.stringify([...requiredPackages].sort())) fail('direct package set differs from release source selection');
+  for (const [name, spec] of direct) {
+    const expected = release.packages[name], locked = declared.get(`node_modules/${name}`)?.entry;
+    if (!expected || (spec !== expected.version && !(typeof spec === 'string' && spec.startsWith('file:') && spec === locked?.resolved))) fail(`direct package spec differs from release: ${name}`);
+  }
+  for (const name of Object.keys(manifest.dependencies ?? {}).filter(name => name.startsWith('@ours.network/'))) {
+    if (!declared.has(`node_modules/${name}`) || !installed.has(`node_modules/${name}`)) fail(`missing direct release package: ${name}`);
+  }
+  for (const [location, value] of declared) {
+    // npm's root lock retains dev-only entries omitted from a production install.
+    if (!installed.has(location) && !value.entry.dev && !value.entry.optional) fail(`installed release entry missing: ${location}`);
+  }
+  for (const [location, value] of installed) {
+    const expected = declared.get(location);
+    if (!expected || expected.entry.version !== value.entry.version || expected.entry.integrity !== value.entry.integrity || expected.entry.resolved !== value.entry.resolved) fail(`installed/root lock mismatch: ${location}`);
+    if (!lstatSync(value.installed).isDirectory() || realpathSync(value.installed) !== value.installed) fail(`linked installed package: ${location}`);
+    const actual = json(join(value.installed, 'package.json'));
+    if (actual.name !== value.name || actual.version !== value.entry.version) fail(`installed package differs from release: ${location}`);
+  }
+  return { verified: true, packages: installed.size };
+}
+
+export function verifyRuntimeRelease(root) {
+  const path = join(resolve(root), 'sources.json');
+  // Historic installations predate sources/release bindings; their existing
+  // provenance and conversion checks remain authoritative until explicit update.
+  if (!existsSync(path)) return { verified: false, reason: 'legacy runtime without sources' };
+  return verifyReleaseGraph(root, json(path));
+}
+
+/** The client command has its own exact dependency selection, never a graph bypass. */
+export function hostCliPolicy(policy) {
+  const release = releaseBinding(policy);
+  if (!release?.hostCli) return null;
+  const { hostCli, ...base } = release;
+  return { release: { ...base, scope: 'host-cli', packages: hostCli }, packages: Object.fromEntries(Object.entries(hostCli).map(([name, p]) => [name, { type: 'npm', version: p.version }])) };
+}

package/assets/scripts/maintenance/state-operation.mjs

@@ -9,6 +9,8 @@ import { createArchive, extractArchive, validateArchive, scanSource, copyPrivate
 import { exchange, tryLock, setMtimeNs } from './state-native.mjs';
 import { recordNames, readBuildRecords, equalBuildRecords, initializeBuildMarker } from './build-context.mjs';
 
+import { daemonOwner } from './daemon-owner.mjs';
+
 const PROVENANCE = '.ours-provenance';
 const APPLICATIONS = ['daemon', 'telegram', 'cowork', 'messenger'];
 const exists = path => { try { fs.lstatSync(path); return true; } catch (e) { if (e.code === 'ENOENT') return false; throw e; } };
@@ -145,9 +147,9 @@ export async function runStateOperation(argv, env = process.env, checkpoints = {
   }
   function retainAuthority(staging) {
     if (!['daemon', 'server'].includes(domain)) return;
-    if (!env.OURS_CLI_PATH || !env.OURS_DAEMON_CONFIG) fail('daemon maintenance requires its selected executable and configuration');
+    if (!env.OURS_DAEMON_CONFIG) fail('daemon maintenance requires its selected executable and configuration');
     const daemon = commonTree ? join(staging, 'daemon') : staging;
-    owner([env.OURS_CLI_PATH, 'config', 'access-retain', '--config', env.OURS_DAEMON_CONFIG, '--target-state-dir', daemon, '--json']);
+    owner([daemonOwner(env), 'config', 'access-retain', '--config', env.OURS_DAEMON_CONFIG, '--target-state-dir', daemon, '--json']);
     if (!commonTree) return;
     const credentials = join(live, 'credentials'), destination = join(staging, 'credentials');
     for (const name of ['telegram', 'cowork', 'messenger']) if (!privateStat(join(credentials, name, 'daemon-token'), false, 0o600).size) fail('current managed credential is empty');

package/assets/scripts/runtime/client-setup.mjs

@@ -2,7 +2,7 @@ import { readBuildRecords, initializeBuildMarker } from '../maintenance/build-co
 import { spawnSync } from 'node:child_process';
 import { randomBytes } from 'node:crypto';
 import {
-  closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readFileSync,
+  existsSync, closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readFileSync,
   realpathSync, renameSync, unlinkSync, writeFileSync, readdirSync, chmodSync, chownSync,
 } from 'node:fs';
 
@@ -67,7 +67,7 @@ function validateCommon(idName = 'OURS_DAEMON_ID') {
 
 function composeConfig(domain) {
   if (domain === 'daemon') {
-    const value = { stateDir: '/var/lib/ours', port: 3050, apiVisibility: 'owner', networkMcp: { profile: { endpoint: 'http://127.0.0.1:3050', expectedInstanceId: process.env.OURS_DAEMON_ID, credentialPath: '/var/lib/ours/daemon-token' }, applicationConfigPath: '/var/lib/ours-mcp/config.json' } };
+    const value = { stateDir: '/var/lib/ours', port: 3050, apiVisibility: 'owner' };
     if (process.env.OURS_BROKER_URL) value.brokerUrl = process.env.OURS_BROKER_URL;
     return value;
   }
@@ -155,7 +155,7 @@ async function telegramInput() {
 }
 
 function cliJson(args) {
-  const result = spawnSync(process.execPath, ['/opt/ours/node_modules/@ours.network/cli/dist/cli.js', ...args], {
+  const result = spawnSync(process.execPath, [existsSync('/opt/ours/node_modules/@ours.network/daemon/dist/cli.js') ? '/opt/ours/node_modules/@ours.network/daemon/dist/cli.js' : '/opt/ours/node_modules/@ours.network/cli/dist/cli.js', ...args], {
     encoding: 'utf8', timeout: 60_000, maxBuffer: 1024 * 1024,
   });
   if (result.status !== 0) fail('Official OURS CLI operation failed');

package/assets/scripts/runtime/entrypoint.sh

@@ -10,4 +10,4 @@ else
   exit "$status"
 fi
 node /opt/ours/docker/check-start.mjs
-exec node /opt/ours/node_modules/@ours.network/cli/dist/cli.js daemon serve
+exec node /opt/ours/node_modules/@ours.network/daemon/dist/cli.js serve

package/assets/scripts/runtime/legacy-import.mjs

@@ -0,0 +1,103 @@
+/** Import a stopped, read-only host migration stage into the managed Docker volume. */
+import * as fs from 'node:fs';
+import { dirname, join, resolve, isAbsolute } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { randomUUID } from 'node:crypto';
+// Repository layout and the maintenance image intentionally place this binding differently.
+const nativeModule = new URL('../maintenance/state-native.mjs', import.meta.url);
+const { publishNoReplace } = await import(fs.existsSync(nativeModule) ? nativeModule.href : new URL('./state-native.mjs', import.meta.url).href);
+
+const MARKER = '.ours-legacy-import.json';
+const COMPONENTS = ['mcp', 'daemon'];
+const fail = message => { throw Error(`Legacy volume import: ${message}`); };
+function canonical(path) {
+  if (typeof path !== 'string' || !isAbsolute(path) || resolve(path) !== path) fail('paths must be normalized absolute paths');
+  if (fs.realpathSync(path) !== path) fail('symlink paths are not supported');
+}
+function privateEntry(path, uid, gid, directory) {
+  const stat = fs.lstatSync(path);
+  if (!(directory ? stat.isDirectory() : stat.isFile()) || stat.isSymbolicLink()
+    || stat.uid !== uid || stat.gid !== gid
+    || (directory ? (stat.mode & 0o7777) !== 0o700 : ((stat.mode & 0o7077) !== 0 || !(stat.mode & 0o400)))
+    || (!directory && stat.nlink !== 1)) fail('unsafe ownership, permissions, or linked state entry');
+  return stat;
+}
+function scan(root, uid, gid) {
+  const entries = [];
+  function visit(path, relative) {
+    const stat = fs.lstatSync(path), directory = stat.isDirectory();
+    privateEntry(path, uid, gid, directory); entries.push({ relative, directory, mode: stat.mode & 0o700 });
+    if (directory) for (const name of fs.readdirSync(path).sort()) visit(join(path, name), relative ? join(relative, name) : name);
+  }
+  canonical(root); visit(root, ''); return entries;
+}
+function readReceipt(root, uid, gid, targetRoot) {
+  privateEntry(join(root, MARKER), uid, gid, false);
+  const value = JSON.parse(fs.readFileSync(join(root, MARKER), 'utf8'));
+  const keys = ['sourceStateDir', 'sourceConfigPath', 'targetRoot', 'rootName'];
+  if (!value || typeof value !== 'object' || Array.isArray(value)
+    || Object.keys(value).sort().join('\0') !== [...keys].sort().join('\0')
+    || keys.some(key => typeof value[key] !== 'string' || !value[key])
+    || value.targetRoot !== targetRoot
+    || ['sourceStateDir', 'sourceConfigPath', 'targetRoot'].some(key => !isAbsolute(value[key]) || resolve(value[key]) !== value[key])) fail('invalid or mismatched migration receipt');
+  return Object.fromEntries(keys.map(key => [key, value[key]]));
+}
+const same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+function existingDestination(path, expected, uid, gid, targetRoot) {
+  if (!fs.existsSync(path)) return false;
+  canonical(path); privateEntry(path, uid, gid, true);
+  if (!fs.readdirSync(path).length) return false;
+  if (!fs.existsSync(join(path, MARKER)) || !same(readReceipt(path, uid, gid, targetRoot), expected)) fail('nonmatching existing destination');
+  return true;
+}
+function makeDirectory(path, uid, gid) {
+  if (!fs.existsSync(path)) { fs.mkdirSync(path, { mode: 0o700 }); fs.chownSync(path, uid, gid); }
+  canonical(path); privateEntry(path, uid, gid, true);
+}
+
+/** Caller holds installation exclusion and has stopped all destination writers. */
+export function importLegacyVolume({ sourceRoot = '/legacy-import', storageRoot = '/storage', targetRoot, uid, gid }) {
+  if (![uid, gid].every(value => Number.isSafeInteger(value) && value >= 0)) fail('numeric target UID/GID required');
+  if (typeof targetRoot !== 'string' || !isAbsolute(targetRoot) || resolve(targetRoot) !== targetRoot) fail('expected target root required');
+  canonical(sourceRoot); canonical(storageRoot);
+  const sourceOwner = fs.lstatSync(sourceRoot);
+  privateEntry(sourceRoot, sourceOwner.uid, sourceOwner.gid, true);
+  const sources = COMPONENTS.map(component => {
+    const path = join(sourceRoot, component);
+    const entries = scan(path, sourceOwner.uid, sourceOwner.gid);
+    return { component, path, entries, receipt: readReceipt(path, sourceOwner.uid, sourceOwner.gid, targetRoot) };
+  });
+  if (!same(sources[0].receipt, sources[1].receipt)) fail('source daemon and MCP receipts differ');
+  const rootStat = fs.lstatSync(storageRoot);
+  const freshRoot = rootStat.isDirectory() && rootStat.uid === 0 && rootStat.gid === 0 && fs.readdirSync(storageRoot).length === 0;
+  if (!freshRoot) privateEntry(storageRoot, uid, gid, true);
+  const state = join(storageRoot, 'state');
+  if (fs.existsSync(state)) { canonical(state); privateEntry(state, uid, gid, true); }
+  // Validate every existing destination before changing even an empty volume.
+  for (const source of sources) source.reused = existingDestination(join(state, source.component), source.receipt, uid, gid, targetRoot);
+  if (freshRoot) { fs.chmodSync(storageRoot, 0o700); fs.chownSync(storageRoot, uid, gid); }
+  makeDirectory(state, uid, gid);
+  for (const source of sources) {
+    if (source.reused) continue;
+    const destination = join(state, source.component), staging = join(state, `.legacy-import-${randomUUID()}`);
+    try {
+      fs.cpSync(source.path, staging, { recursive: true, errorOnExist: true, force: false });
+      for (const entry of [...source.entries].reverse()) {
+        const path = entry.relative ? join(staging, entry.relative) : staging;
+        fs.chmodSync(path, entry.mode); fs.chownSync(path, uid, gid);
+      }
+      scan(staging, uid, gid);
+      if (!same(readReceipt(staging, uid, gid, targetRoot), source.receipt)) fail('copied receipt changed');
+      if (fs.existsSync(destination)) fs.rmdirSync(destination); // empty skeleton only
+      publishNoReplace(staging, destination);
+    } finally { fs.rmSync(staging, { recursive: true, force: true }); }
+  }
+  return { imported: sources.filter(source => !source.reused).map(source => source.component), retained: sources.filter(source => source.reused).map(source => source.component) };
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  try {
+    importLegacyVolume({ targetRoot: process.env.OURS_LEGACY_TARGET_ROOT, uid: Number(process.env.OURS_UID), gid: Number(process.env.OURS_GID) });
+    console.log('Legacy daemon and MCP state imported into the selected volume.');
+  } catch (error) { console.error(error.message); process.exitCode = 1; }
+}

package/assets/scripts/runtime/runtime-common.mjs

@@ -1,4 +1,5 @@
 import { readBuildRecords, initializeBuildMarker } from '../maintenance/build-context.mjs';
+import { verifyRuntimeRelease } from '../maintenance/release-graph.mjs';
 import { accessSync, constants, lstatSync, readFileSync } from 'node:fs';
 
 export function privatePath(path, directory = false, writable = false) {
@@ -43,5 +44,6 @@ export function checkCredential(path) {
 // Called with the startup state-directory lock held. These are build records,
 // not a storage schema or a declaration that arbitrary upgrades are compatible.
 export function recordBuild(state) {
+  verifyRuntimeRelease('/opt/ours');
   initializeBuildMarker(`${state}/.ours-provenance`, readBuildRecords('/opt/ours'));
 }

package/assets/sources.json

@@ -1,21 +1,101 @@
 {
-  "sources": {
-    "sdk": { "type": "git", "url": "https://github.com/adapt-toolkit/ours-sdk.git", "commit": "9cb51add34888e6ae2cc3b554c97362bb1ca2d33" },
-    "telegram": { "type": "git", "url": "https://github.com/adapt-toolkit/ours-tg-connector.git", "commit": "81798b836b15ac4ba9b32ac180f94fb258a54a41" },
-    "cowork": { "type": "git", "url": "https://github.com/adapt-toolkit/ours-cowork.git", "commit": "1e17f7666c1682a858101c98a8f371aac7b737e3" },
-    "messenger": { "type": "git", "url": "https://github.com/adapt-toolkit/ours-messenger-server.git", "commit": "fc852e49eb3b43c077f59cf4919536be6f6d03b1" },
-    "fleet": { "type": "git", "url": "https://github.com/adapt-toolkit/ours-fleet.git", "commit": "b8444a7aac2eb6148a3ab534e90308bfc76447d7" },
-    "mcp": { "type": "git", "url": "https://github.com/adapt-toolkit/ours-mcp.git", "commit": "3d970d0cb7baf52351d5cd44dd59d4a2f705207b" }
+  "release": {
+    "schema": 1,
+    "channel": "nightly",
+    "installerVersion": "1.2.1-nightly.10",
+    "packages": {
+      "@ours.network/sdk": {
+        "version": "3.8.1-nightly.9",
+        "integrity": "sha512-9xh/7hWZ8zRV+8Vimu7OTf2qUAp4o4MJFxlCVtyi1YO0WyFFgk+dZcT8nWlXY/JWIPFdb8wnYW/OSoqGUAw4Hw=="
+      },
+      "@ours.network/cli": {
+        "version": "2.8.1-nightly.7",
+        "integrity": "sha512-Kq3iySBsOgazTxawxY8aFvaMTQ6fnkPZ2KmO/k6NhPaVpZbmBcL/9OWefKYEUlDMvuSOEVzjQLZa0Wac4oopuA=="
+      },
+      "@ours.network/tg-connector": {
+        "version": "1.0.1-nightly.3",
+        "integrity": "sha512-UDHEgM5C3mnnyfV3KTM2XFDGZ7vYs7oBE/3r8bKDtxJdlQZ4bxxI44LKrPI3gO2sdGROsDdM8/tvzwbJ8MiBYw=="
+      },
+      "@ours.network/cowork": {
+        "version": "1.3.2-nightly.20260921.0d6bb50",
+        "integrity": "sha512-gyUgY7Fw6RQVhONqexLNcS8m0WuBUQiHYIrWqd2FeAyyJOONjYGfbRtgJ67Xin1YTYf8Cxlomuf6j8cEc4ZwZg=="
+      },
+      "@ours.network/messenger-server": {
+        "version": "1.0.31-nightly.3",
+        "integrity": "sha512-j86POD2U2yh7jiIqbIixDu8TpEpaVf+dHLs3adtTRfTs6V7ucl//digdkyc1uaZrUliRduxXKBOrb/1Nu648xQ=="
+      },
+      "@ours.network/fleet": {
+        "version": "1.2.0-nightly.3",
+        "integrity": "sha512-FzizLkh1fQ9RkzmID1v42QlZs9E0QHWJ44IWIWzYd0DRaetcXg/5FUVTNc82U5yWZyveBZTJq6mvg9H73NSlkw=="
+      },
+      "@ours.network/mcp": {
+        "version": "1.2.0-nightly.5",
+        "integrity": "sha512-CsRsHlJwU5WkUeF8mMLysq9GsYLBA2wnl8v+qZhaJZhSJWoNb5TqfXd2v5/Su7VUpOaRwvubv/9Jf86eQgqhGw=="
+      },
+      "@ours.network/codex": {
+        "version": "1.2.0-nightly.5",
+        "integrity": "sha512-6E3tE0valPE0FSOsONh3BrrBo9Gxt1IgWm5Hwj0xm00mGQ+qsjGRrzCB8snrOh9OdnGuvPOF20aunmp4g4KoMg=="
+      },
+      "@ours.network/claude-code": {
+        "version": "1.2.0-nightly.5",
+        "integrity": "sha512-PxPegFvXx5bkvTprB8dcPjIYvE5bvjQoAtw31onOAZa0YdX2K7yYpesYcZ0sOnFdSQkI4+aaVyTb1Lj9EiMABQ=="
+      },
+      "@ours.network/daemon": {
+        "version": "3.8.1-nightly.1",
+        "integrity": "sha512-1+RA0UH/wJUSmKnmZuHS3v6UyH5PsrZWoqwa5rFKl6n2Cd8sWDs++DrwwV0IOFdgFcDOtb/k8mes4sI2J7J8mg=="
+      }
+    },
+    "hostCli": {
+      "@ours.network/sdk": {
+        "version": "3.8.1-nightly.9",
+        "integrity": "sha512-9xh/7hWZ8zRV+8Vimu7OTf2qUAp4o4MJFxlCVtyi1YO0WyFFgk+dZcT8nWlXY/JWIPFdb8wnYW/OSoqGUAw4Hw=="
+      },
+      "@ours.network/cli": {
+        "version": "2.8.1-nightly.7",
+        "integrity": "sha512-Kq3iySBsOgazTxawxY8aFvaMTQ6fnkPZ2KmO/k6NhPaVpZbmBcL/9OWefKYEUlDMvuSOEVzjQLZa0Wac4oopuA=="
+      }
+    }
   },
   "packages": {
-    "@ours.network/sdk": { "source": "sdk" },
-    "@ours.network/cli": { "source": "sdk" },
-    "@ours.network/tg-connector": { "source": "telegram" },
-    "@ours.network/cowork": { "source": "cowork" },
-    "@ours.network/messenger-server": { "source": "messenger" },
-    "@ours.network/fleet": { "source": "fleet" },
-    "@ours.network/mcp": { "source": "mcp" },
-    "@ours.network/codex": { "source": "mcp" },
-    "@ours.network/claude-code": { "source": "mcp" }
+    "@ours.network/sdk": {
+      "type": "npm",
+      "version": "3.8.1-nightly.9"
+    },
+    "@ours.network/cli": {
+      "type": "npm",
+      "version": "2.8.1-nightly.7"
+    },
+    "@ours.network/tg-connector": {
+      "type": "npm",
+      "version": "1.0.1-nightly.3"
+    },
+    "@ours.network/cowork": {
+      "type": "npm",
+      "version": "1.3.2-nightly.20260921.0d6bb50"
+    },
+    "@ours.network/messenger-server": {
+      "type": "npm",
+      "version": "1.0.31-nightly.3"
+    },
+    "@ours.network/fleet": {
+      "type": "npm",
+      "version": "1.2.0-nightly.3"
+    },
+    "@ours.network/mcp": {
+      "type": "npm",
+      "version": "1.2.0-nightly.5"
+    },
+    "@ours.network/codex": {
+      "type": "npm",
+      "version": "1.2.0-nightly.5"
+    },
+    "@ours.network/claude-code": {
+      "type": "npm",
+      "version": "1.2.0-nightly.5"
+    },
+    "@ours.network/daemon": {
+      "type": "npm",
+      "version": "3.8.1-nightly.1"
+    }
   }
 }

package/install.mjs

@@ -3,14 +3,14 @@
 import { readFileSync } from 'node:fs';
 
 import { realEffects } from './lib/effects.mjs';
-import { runInstall } from './lib/orchestrate.mjs';
+import { runSetup } from './lib/setup.mjs';
 import { closeSync, makeWriter, openTty } from './lib/ui.mjs';
 
 const version = JSON.parse(readFileSync(new URL('./package.json', import.meta.url), 'utf8')).version;
 const ttyFd = openTty();
 
 try {
-  const code = await runInstall(process.argv.slice(2), realEffects({
+  const code = await runSetup(process.argv.slice(2), realEffects({
     write: makeWriter(ttyFd),
     ttyFd,
     env: process.env,

package/install.sh

@@ -9,7 +9,7 @@
 # pipes a script into your shell). It just gets Node.js/npm sorted, then does the same
 # `npm i -g @ours.network/install` and runs `ours-install`. Meant to be run as:
 #
-#     curl -fsSL https://raw.githubusercontent.com/adapt-toolkit/ours-mcp/main/packages/installer/install.sh | bash
+#     curl -fsSL https://raw.githubusercontent.com/adapt-toolkit/ours-network/main/install.sh | bash
 #
 # This file is a THIN bootstrap: it checks that Node.js + npm are present (and prints friendly,
 # per-OS guidance if not), then runs the real experience — the Node installer (install.mjs) that