@ours.network/install 1.2.1-nightly.1 → 1.2.1-nightly.10

package/assets/release-lock.json

@@ -8,15 +8,16 @@
       "name": "ours-release-set-verification",
       "version": "0.0.0",
       "dependencies": {
-        "@ours.network/claude-code": "1.2.0-nightly.3",
-        "@ours.network/cli": "2.8.1-nightly.1",
-        "@ours.network/codex": "1.2.0-nightly.3",
-        "@ours.network/cowork": "1.3.2-nightly.20260918.4d9242e",
-        "@ours.network/fleet": "1.2.0-nightly.1",
-        "@ours.network/mcp": "1.2.0-nightly.3",
-        "@ours.network/messenger-server": "1.0.31-nightly.1",
-        "@ours.network/sdk": "3.8.1-nightly.3",
-        "@ours.network/tg-connector": "1.0.1-nightly.1"
+        "@ours.network/claude-code": "1.2.0-nightly.5",
+        "@ours.network/cli": "2.8.1-nightly.7",
+        "@ours.network/codex": "1.2.0-nightly.5",
+        "@ours.network/cowork": "1.3.2-nightly.20260921.0d6bb50",
+        "@ours.network/daemon": "3.8.1-nightly.1",
+        "@ours.network/fleet": "1.2.0-nightly.3",
+        "@ours.network/mcp": "1.2.0-nightly.5",
+        "@ours.network/messenger-server": "1.0.31-nightly.3",
+        "@ours.network/sdk": "3.8.1-nightly.9",
+        "@ours.network/tg-connector": "1.0.1-nightly.3"
       }
     },
     "node_modules/@adapt-toolkit/sdk": {
@@ -439,9 +440,9 @@
       }
     },
     "node_modules/@agentclientprotocol/sdk": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/@agentclientprotocol/sdk/-/sdk-1.4.0.tgz",
-      "integrity": "sha512-/eufudw+aFY1LKLolT6yFE6UMmYRl7fMJ/DEONSIyR6wI3slHWITBsANRGqXEY8FRzqUxwh7QEaGiZHcJPVThg==",
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/@agentclientprotocol/sdk/-/sdk-1.5.0.tgz",
+      "integrity": "sha512-524jwbB2iYWA+kWWyv9fhKbhU89dH/lu9u5EXwVNmfYzopV8BujCDxByBDZhxRUkB7RWIJzISCnwivdDk+bdVg==",
       "license": "Apache-2.0",
       "peerDependencies": {
         "zod": "^3.25.0 || ^4.0.0"
@@ -565,9 +566,9 @@
       ]
     },
     "node_modules/@anthropic-ai/sdk": {
-      "version": "0.126.0",
-      "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.126.0.tgz",
-      "integrity": "sha512-VhiZl6rA/8uC+MgDaOhEcAWaIZ2tPnIY885jlZqxrGrutUW2nqCtophBtlsX0tk5kChBUjV/1NVjL3y0M4OwUg==",
+      "version": "0.127.0",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.127.0.tgz",
+      "integrity": "sha512-OKiVbG9LHCxjn4fBJZJFy/Bz3hqE1RYpwaeSEDNheQnvz0XNKmGT/Lhkz2Sf1a27Ldt3vVv+BkU81I0U/8EpoQ==",
       "license": "MIT",
       "optional": true,
       "peer": true,
@@ -811,9 +812,9 @@
       }
     },
     "node_modules/@fastify/websocket": {
-      "version": "11.3.0",
-      "resolved": "https://registry.npmjs.org/@fastify/websocket/-/websocket-11.3.0.tgz",
-      "integrity": "sha512-g89ag4BCcD9YP5wBZXixzoLnuf5j89p/sXFcfpCiv2pdEkYYukBEoK3heVzqsp0EAtszVDc2BBZG0KZqeAShIA==",
+      "version": "11.3.1",
+      "resolved": "https://registry.npmjs.org/@fastify/websocket/-/websocket-11.3.1.tgz",
+      "integrity": "sha512-3117Fteg0MC9zRl0ilNAQelRb+PNDvNuWe0yJ+jnLthaPPZnlml+GraGpesNUEQvLl8+3C+W4aKZz10XmQ10Mg==",
       "funding": [
         {
           "type": "github",
@@ -1051,13 +1052,14 @@
       }
     },
     "node_modules/@ours.network/claude-code": {
-      "version": "1.2.0-nightly.3",
-      "resolved": "https://registry.npmjs.org/@ours.network/claude-code/-/claude-code-1.2.0-nightly.3.tgz",
-      "integrity": "sha512-7ta6KnvoHB2i/yoaykhXvzKFQTIOPtDHeTzG1PRwHjdTJ4vcGEh4jWYMd2c1jjj73lC3q9qW3LYSRutIJovtQg==",
+      "version": "1.2.0-nightly.5",
+      "resolved": "https://registry.npmjs.org/@ours.network/claude-code/-/claude-code-1.2.0-nightly.5.tgz",
+      "integrity": "sha512-PxPegFvXx5bkvTprB8dcPjIYvE5bvjQoAtw31onOAZa0YdX2K7yYpesYcZ0sOnFdSQkI4+aaVyTb1Lj9EiMABQ==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",
-        "@ours.network/sdk": "3.8.1-nightly.3",
+        "@ours.network/mcp": "1.2.0-nightly.5",
+        "@ours.network/sdk": "3.8.1-nightly.9",
         "ws": "^8.21.0",
         "zod": "^3.25.76"
       },
@@ -1066,34 +1068,29 @@
       }
     },
     "node_modules/@ours.network/cli": {
-      "version": "2.8.1-nightly.1",
-      "resolved": "https://registry.npmjs.org/@ours.network/cli/-/cli-2.8.1-nightly.1.tgz",
-      "integrity": "sha512-1Rmbqlr790FhqQW/wQ//YEL7b0Q2KVSCA2TlpjaLRkj9Xh55rOoazBJjFuW/fUpTz3Z1B3MUPK9LWiYd+A0kNA==",
+      "version": "2.8.1-nightly.7",
+      "resolved": "https://registry.npmjs.org/@ours.network/cli/-/cli-2.8.1-nightly.7.tgz",
+      "integrity": "sha512-Kq3iySBsOgazTxawxY8aFvaMTQ6fnkPZ2KmO/k6NhPaVpZbmBcL/9OWefKYEUlDMvuSOEVzjQLZa0Wac4oopuA==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
-        "@adapt-toolkit/sdk": "0.10.13-nightly.1",
-        "@adapt-toolkit/sdk-native": "0.10.13-nightly.1",
-        "@ours.network/sdk": "3.8.1-nightly.3",
-        "pg": "^8.16.3"
+        "@ours.network/sdk": "3.8.1-nightly.9"
       },
       "bin": {
         "ours": "dist/cli.js"
       },
       "engines": {
         "node": ">=22"
-      },
-      "optionalDependencies": {
-        "better-sqlite3": "^13.0.3"
       }
     },
     "node_modules/@ours.network/codex": {
-      "version": "1.2.0-nightly.3",
-      "resolved": "https://registry.npmjs.org/@ours.network/codex/-/codex-1.2.0-nightly.3.tgz",
-      "integrity": "sha512-dIWDqbo6hJzujegHRO6x1SsBnh5p1c6gRGj/WkPha/hcN7s/27P4jqBnJ7czQyVGiNVFZ1aAxj4c9+CDLzHENw==",
+      "version": "1.2.0-nightly.5",
+      "resolved": "https://registry.npmjs.org/@ours.network/codex/-/codex-1.2.0-nightly.5.tgz",
+      "integrity": "sha512-6E3tE0valPE0FSOsONh3BrrBo9Gxt1IgWm5Hwj0xm00mGQ+qsjGRrzCB8snrOh9OdnGuvPOF20aunmp4g4KoMg==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.29.0",
-        "@ours.network/sdk": "3.8.1-nightly.3",
+        "@ours.network/mcp": "1.2.0-nightly.5",
+        "@ours.network/sdk": "3.8.1-nightly.9",
         "ws": "^8.21.0",
         "zod": "^3.25.76"
       },
@@ -1106,12 +1103,12 @@
       }
     },
     "node_modules/@ours.network/cowork": {
-      "version": "1.3.2-nightly.20260918.4d9242e",
-      "resolved": "https://registry.npmjs.org/@ours.network/cowork/-/cowork-1.3.2-nightly.20260918.4d9242e.tgz",
-      "integrity": "sha512-04D2lJ97SrTrkVRRbdTZ0y+KvQdG/bpnmFFjsyUqQTij+5zEkNizTG/xhcCL8m7Mb0XvVFL8WzJ62Xgh5ahlRw==",
+      "version": "1.3.2-nightly.20260921.0d6bb50",
+      "resolved": "https://registry.npmjs.org/@ours.network/cowork/-/cowork-1.3.2-nightly.20260921.0d6bb50.tgz",
+      "integrity": "sha512-gyUgY7Fw6RQVhONqexLNcS8m0WuBUQiHYIrWqd2FeAyyJOONjYGfbRtgJ67Xin1YTYf8Cxlomuf6j8cEc4ZwZg==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
-        "@ours.network/sdk": "3.8.1-nightly.3",
+        "@ours.network/sdk": "3.8.1-nightly.9",
         "ajv": "8.20.0",
         "better-sqlite3": "13.0.3",
         "react": "18.3.1",
@@ -1125,17 +1122,39 @@
         "node": ">=22"
       }
     },
+    "node_modules/@ours.network/daemon": {
+      "version": "3.8.1-nightly.1",
+      "resolved": "https://registry.npmjs.org/@ours.network/daemon/-/daemon-3.8.1-nightly.1.tgz",
+      "integrity": "sha512-1+RA0UH/wJUSmKnmZuHS3v6UyH5PsrZWoqwa5rFKl6n2Cd8sWDs++DrwwV0IOFdgFcDOtb/k8mes4sI2J7J8mg==",
+      "license": "FSL-1.1-Apache-2.0",
+      "dependencies": {
+        "@adapt-toolkit/sdk": "0.10.13-nightly.1",
+        "@adapt-toolkit/sdk-native": "0.10.13-nightly.1",
+        "@ours.network/sdk": "3.8.1-nightly.9",
+        "ajv": "^8.20.0",
+        "pg": "^8.16.3"
+      },
+      "bin": {
+        "ours-daemon": "dist/cli.js"
+      },
+      "engines": {
+        "node": ">=22"
+      },
+      "optionalDependencies": {
+        "better-sqlite3": "^13.0.3"
+      }
+    },
     "node_modules/@ours.network/fleet": {
-      "version": "1.2.0-nightly.1",
-      "resolved": "https://registry.npmjs.org/@ours.network/fleet/-/fleet-1.2.0-nightly.1.tgz",
-      "integrity": "sha512-vioCobVbosmp9BgYo2XccjpPoVQd1wwV+Mt64Bm41/Vxtro2j85PUdy4AWcsY9jEFnJmj/UQfc5E5AxvlpPnrw==",
+      "version": "1.2.0-nightly.3",
+      "resolved": "https://registry.npmjs.org/@ours.network/fleet/-/fleet-1.2.0-nightly.3.tgz",
+      "integrity": "sha512-FzizLkh1fQ9RkzmID1v42QlZs9E0QHWJ44IWIWzYd0DRaetcXg/5FUVTNc82U5yWZyveBZTJq6mvg9H73NSlkw==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "@agentclientprotocol/sdk": "^1.3.0",
         "@fastify/static": "^10.1.2",
         "@fastify/websocket": "^11.2.0",
-        "@ours.network/cli": "2.8.1-nightly.1",
-        "@ours.network/sdk": "3.8.1-nightly.3",
+        "@ours.network/cli": "2.8.1-nightly.7",
+        "@ours.network/sdk": "3.8.1-nightly.9",
         "commander": "^12.1.0",
         "fastify": "^5.4.0",
         "react": "^19.1.1",
@@ -1183,13 +1202,12 @@
       "license": "MIT"
     },
     "node_modules/@ours.network/mcp": {
-      "version": "1.2.0-nightly.3",
-      "resolved": "https://registry.npmjs.org/@ours.network/mcp/-/mcp-1.2.0-nightly.3.tgz",
-      "integrity": "sha512-z0N5jn1jj9iwGRqU1d3AM2RX9mCr4T/WhASEKr+Vh52yNDMzhVjFlx0U0v8aS+GTfOQaPZTfL3TGMc17ETjh3g==",
+      "version": "1.2.0-nightly.5",
+      "resolved": "https://registry.npmjs.org/@ours.network/mcp/-/mcp-1.2.0-nightly.5.tgz",
+      "integrity": "sha512-CsRsHlJwU5WkUeF8mMLysq9GsYLBA2wnl8v+qZhaJZhSJWoNb5TqfXd2v5/Su7VUpOaRwvubv/9Jf86eQgqhGw==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
-        "@ours.network/cli": "2.8.1-nightly.1",
-        "@ours.network/sdk": "3.8.1-nightly.3"
+        "@ours.network/sdk": "3.8.1-nightly.9"
       },
       "bin": {
         "ours-mcp": "dist/cli.js"
@@ -1199,14 +1217,14 @@
       }
     },
     "node_modules/@ours.network/messenger-server": {
-      "version": "1.0.31-nightly.1",
-      "resolved": "https://registry.npmjs.org/@ours.network/messenger-server/-/messenger-server-1.0.31-nightly.1.tgz",
-      "integrity": "sha512-XB6N+Ppd4txmI0+2ZVFMWJxXi4DtMIDlFSHOzszNM5hopFebpw1Df+KKCK4Cgd/LZUkoOOYWGEYpib9m3RbHWw==",
+      "version": "1.0.31-nightly.3",
+      "resolved": "https://registry.npmjs.org/@ours.network/messenger-server/-/messenger-server-1.0.31-nightly.3.tgz",
+      "integrity": "sha512-j86POD2U2yh7jiIqbIixDu8TpEpaVf+dHLs3adtTRfTs6V7ucl//digdkyc1uaZrUliRduxXKBOrb/1Nu648xQ==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "@eslint-community/regexpp": "4.12.2",
         "@fontsource-variable/jetbrains-mono": "^5.3.0",
-        "@ours.network/sdk": "3.8.1-nightly.3",
+        "@ours.network/sdk": "3.8.1-nightly.9",
         "@radix-ui/react-dialog": "^1.1.23",
         "framer-motion": "^12.43.0",
         "jsqr": "^1.4.0",
@@ -1232,34 +1250,25 @@
       }
     },
     "node_modules/@ours.network/sdk": {
-      "version": "3.8.1-nightly.3",
-      "resolved": "https://registry.npmjs.org/@ours.network/sdk/-/sdk-3.8.1-nightly.3.tgz",
-      "integrity": "sha512-iUVCs+jryoeR2Ip/uHzpkJwbpoJeLDASUaE3lC+eYDj8dbI1MBwTpeOXFemUK052O6lA4ZWrhyRgE9pJU3a+Kw==",
+      "version": "3.8.1-nightly.9",
+      "resolved": "https://registry.npmjs.org/@ours.network/sdk/-/sdk-3.8.1-nightly.9.tgz",
+      "integrity": "sha512-9xh/7hWZ8zRV+8Vimu7OTf2qUAp4o4MJFxlCVtyi1YO0WyFFgk+dZcT8nWlXY/JWIPFdb8wnYW/OSoqGUAw4Hw==",
       "license": "FSL-1.1-Apache-2.0",
       "workspaces": [
         ".",
         "packages/*"
       ],
-      "dependencies": {
-        "@adapt-toolkit/sdk": "0.10.13-nightly.1",
-        "@adapt-toolkit/sdk-native": "0.10.13-nightly.1",
-        "ajv": "^8.20.0",
-        "pg": "^8.16.3"
-      },
       "engines": {
         "node": ">=22"
-      },
-      "optionalDependencies": {
-        "better-sqlite3": "^13.0.3"
       }
     },
     "node_modules/@ours.network/tg-connector": {
-      "version": "1.0.1-nightly.1",
-      "resolved": "https://registry.npmjs.org/@ours.network/tg-connector/-/tg-connector-1.0.1-nightly.1.tgz",
-      "integrity": "sha512-/Do7EfINknDks3yYndOi9aLc1alxB50qk+WKv8DRuZpDB89DDMQ+DoSGQerdvsMp32nQ3LICL8TPjcdFMZfx8Q==",
+      "version": "1.0.1-nightly.3",
+      "resolved": "https://registry.npmjs.org/@ours.network/tg-connector/-/tg-connector-1.0.1-nightly.3.tgz",
+      "integrity": "sha512-UDHEgM5C3mnnyfV3KTM2XFDGZ7vYs7oBE/3r8bKDtxJdlQZ4bxxI44LKrPI3gO2sdGROsDdM8/tvzwbJ8MiBYw==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
-        "@ours.network/sdk": "3.8.1-nightly.3",
+        "@ours.network/sdk": "3.8.1-nightly.9",
         "undici": "^7.28.0"
       },
       "bin": {
@@ -4285,9 +4294,9 @@
       }
     },
     "node_modules/lru-cache": {
-      "version": "11.5.2",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.2.tgz",
-      "integrity": "sha512-4pfM1Ff0x50o0tQwb5ucw/RzNyD0/YJME6IVcStalZuMWxdt3sR3huStTtxz4PUmvZfRguvDejasvQ2kifR11g==",
+      "version": "11.5.3",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-11.5.3.tgz",
+      "integrity": "sha512-U4N8FgzmWxc8k1VH8Kr6lQg18U7Fjvby6wXHVRX/ZZ7IwWbRMgrRbP0Wrb5q5NVinryp4SQampHKdvtecItxUg==",
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": "20 || >=22"

package/assets/release.json

@@ -1,43 +1,57 @@
 {
   "schema": 1,
   "channel": "nightly",
-  "installerVersion": "1.2.1-nightly.1",
+  "installerVersion": "1.2.1-nightly.10",
   "packages": {
     "@ours.network/sdk": {
-      "version": "3.8.1-nightly.3",
-      "integrity": "sha512-iUVCs+jryoeR2Ip/uHzpkJwbpoJeLDASUaE3lC+eYDj8dbI1MBwTpeOXFemUK052O6lA4ZWrhyRgE9pJU3a+Kw=="
+      "version": "3.8.1-nightly.9",
+      "integrity": "sha512-9xh/7hWZ8zRV+8Vimu7OTf2qUAp4o4MJFxlCVtyi1YO0WyFFgk+dZcT8nWlXY/JWIPFdb8wnYW/OSoqGUAw4Hw=="
     },
     "@ours.network/cli": {
-      "version": "2.8.1-nightly.1",
-      "integrity": "sha512-1Rmbqlr790FhqQW/wQ//YEL7b0Q2KVSCA2TlpjaLRkj9Xh55rOoazBJjFuW/fUpTz3Z1B3MUPK9LWiYd+A0kNA=="
+      "version": "2.8.1-nightly.7",
+      "integrity": "sha512-Kq3iySBsOgazTxawxY8aFvaMTQ6fnkPZ2KmO/k6NhPaVpZbmBcL/9OWefKYEUlDMvuSOEVzjQLZa0Wac4oopuA=="
     },
     "@ours.network/tg-connector": {
-      "version": "1.0.1-nightly.1",
-      "integrity": "sha512-/Do7EfINknDks3yYndOi9aLc1alxB50qk+WKv8DRuZpDB89DDMQ+DoSGQerdvsMp32nQ3LICL8TPjcdFMZfx8Q=="
+      "version": "1.0.1-nightly.3",
+      "integrity": "sha512-UDHEgM5C3mnnyfV3KTM2XFDGZ7vYs7oBE/3r8bKDtxJdlQZ4bxxI44LKrPI3gO2sdGROsDdM8/tvzwbJ8MiBYw=="
     },
     "@ours.network/cowork": {
-      "version": "1.3.2-nightly.20260918.4d9242e",
-      "integrity": "sha512-04D2lJ97SrTrkVRRbdTZ0y+KvQdG/bpnmFFjsyUqQTij+5zEkNizTG/xhcCL8m7Mb0XvVFL8WzJ62Xgh5ahlRw=="
+      "version": "1.3.2-nightly.20260921.0d6bb50",
+      "integrity": "sha512-gyUgY7Fw6RQVhONqexLNcS8m0WuBUQiHYIrWqd2FeAyyJOONjYGfbRtgJ67Xin1YTYf8Cxlomuf6j8cEc4ZwZg=="
     },
     "@ours.network/messenger-server": {
-      "version": "1.0.31-nightly.1",
-      "integrity": "sha512-XB6N+Ppd4txmI0+2ZVFMWJxXi4DtMIDlFSHOzszNM5hopFebpw1Df+KKCK4Cgd/LZUkoOOYWGEYpib9m3RbHWw=="
+      "version": "1.0.31-nightly.3",
+      "integrity": "sha512-j86POD2U2yh7jiIqbIixDu8TpEpaVf+dHLs3adtTRfTs6V7ucl//digdkyc1uaZrUliRduxXKBOrb/1Nu648xQ=="
     },
     "@ours.network/fleet": {
-      "version": "1.2.0-nightly.1",
-      "integrity": "sha512-vioCobVbosmp9BgYo2XccjpPoVQd1wwV+Mt64Bm41/Vxtro2j85PUdy4AWcsY9jEFnJmj/UQfc5E5AxvlpPnrw=="
+      "version": "1.2.0-nightly.3",
+      "integrity": "sha512-FzizLkh1fQ9RkzmID1v42QlZs9E0QHWJ44IWIWzYd0DRaetcXg/5FUVTNc82U5yWZyveBZTJq6mvg9H73NSlkw=="
     },
     "@ours.network/mcp": {
-      "version": "1.2.0-nightly.3",
-      "integrity": "sha512-z0N5jn1jj9iwGRqU1d3AM2RX9mCr4T/WhASEKr+Vh52yNDMzhVjFlx0U0v8aS+GTfOQaPZTfL3TGMc17ETjh3g=="
+      "version": "1.2.0-nightly.5",
+      "integrity": "sha512-CsRsHlJwU5WkUeF8mMLysq9GsYLBA2wnl8v+qZhaJZhSJWoNb5TqfXd2v5/Su7VUpOaRwvubv/9Jf86eQgqhGw=="
     },
     "@ours.network/codex": {
-      "version": "1.2.0-nightly.3",
-      "integrity": "sha512-dIWDqbo6hJzujegHRO6x1SsBnh5p1c6gRGj/WkPha/hcN7s/27P4jqBnJ7czQyVGiNVFZ1aAxj4c9+CDLzHENw=="
+      "version": "1.2.0-nightly.5",
+      "integrity": "sha512-6E3tE0valPE0FSOsONh3BrrBo9Gxt1IgWm5Hwj0xm00mGQ+qsjGRrzCB8snrOh9OdnGuvPOF20aunmp4g4KoMg=="
     },
     "@ours.network/claude-code": {
-      "version": "1.2.0-nightly.3",
-      "integrity": "sha512-7ta6KnvoHB2i/yoaykhXvzKFQTIOPtDHeTzG1PRwHjdTJ4vcGEh4jWYMd2c1jjj73lC3q9qW3LYSRutIJovtQg=="
+      "version": "1.2.0-nightly.5",
+      "integrity": "sha512-PxPegFvXx5bkvTprB8dcPjIYvE5bvjQoAtw31onOAZa0YdX2K7yYpesYcZ0sOnFdSQkI4+aaVyTb1Lj9EiMABQ=="
+    },
+    "@ours.network/daemon": {
+      "version": "3.8.1-nightly.1",
+      "integrity": "sha512-1+RA0UH/wJUSmKnmZuHS3v6UyH5PsrZWoqwa5rFKl6n2Cd8sWDs++DrwwV0IOFdgFcDOtb/k8mes4sI2J7J8mg=="
+    }
+  },
+  "hostCli": {
+    "@ours.network/sdk": {
+      "version": "3.8.1-nightly.9",
+      "integrity": "sha512-9xh/7hWZ8zRV+8Vimu7OTf2qUAp4o4MJFxlCVtyi1YO0WyFFgk+dZcT8nWlXY/JWIPFdb8wnYW/OSoqGUAw4Hw=="
+    },
+    "@ours.network/cli": {
+      "version": "2.8.1-nightly.7",
+      "integrity": "sha512-Kq3iySBsOgazTxawxY8aFvaMTQ6fnkPZ2KmO/k6NhPaVpZbmBcL/9OWefKYEUlDMvuSOEVzjQLZa0Wac4oopuA=="
     }
   }
 }

package/assets/scripts/build/build-common.mjs

@@ -7,7 +7,7 @@ export const ROOT = resolve(process.env.OURS_BUILD_ROOT || '/opt/ours');
 export const SOURCE_ROOT = resolve(process.env.OURS_SOURCE_ROOT || '/src');
 export const OUT = join(ROOT, 'docker/vendor');
 export const CONFIG = JSON.parse(readFileSync(join(ROOT, 'sources.json'), 'utf8'));
-export const SELECTED = new Set((process.env.OURS_BUILD_PACKAGES || 'sdk,cli,mcp,tg-connector,cowork,messenger-server').split(',').map(name => '@ours.network/' + name));
+export const SELECTED = new Set((process.env.OURS_BUILD_PACKAGES || 'sdk,cli,daemon,tg-connector,cowork,messenger-server').split(',').map(name => '@ours.network/' + name));
 export const inheritedLock = process.env.OURS_INSTALLER_LOCK_FD === '3' ? [3] : [];
 export const run = (args, cwd) => execFileSync(args[0], args.slice(1), { cwd, stdio: ['inherit', 'inherit', 'inherit', ...inheritedLock] });
 export const capture = (args, cwd, env = process.env) => execFileSync(args[0], args.slice(1), { cwd, env, encoding: 'utf8', stdio: ['ignore', 'pipe', 'inherit', ...inheritedLock] });

package/assets/scripts/build/build-sdk.mjs

@@ -2,8 +2,13 @@ import { join } from 'node:path';
 import { SOURCE_ROOT, SELECTED, pack, run } from './build-common.mjs';
 const source = join(SOURCE_ROOT, 'sdk');
 run(['npm', 'ci', '--no-audit', '--no-fund'], source);
-run(['bash', 'scripts/compile-mufl.sh'], source);
+if (SELECTED.has('@ours.network/daemon')) run(['bash', 'scripts/compile-mufl.sh'], source);
 run(['npm', 'run', 'build'], source);
 if (SELECTED.has('@ours.network/cli')) run(['npm', 'run', 'build:cli'], source);
 pack(source, '@ours.network/sdk', 'sdk');
 pack(join(source, 'packages/cli'), '@ours.network/cli', 'sdk');
+
+if (SELECTED.has('@ours.network/daemon')) {
+  run(['npm', 'run', 'build:daemon'], source);
+  pack(join(source, 'packages/daemon'), '@ours.network/daemon', 'sdk');
+}

package/assets/scripts/maintenance/build-context.mjs

@@ -8,7 +8,7 @@ import { semanticRecordEqual } from './provenance-compare.mjs';
 export const BASE_RECORDS = ['package-lock.json', 'dependency-tree.json'];
 export const CONTEXT = 'build-context.json';
 const admitted = new WeakMap();
-const packages = new Set(['sdk', 'cli', 'mcp', 'tg-connector', 'cowork', 'messenger-server', 'fleet', 'codex', 'claude-code', 'install'].map(n => '@ours.network/' + n));
+const packages = new Set(['sdk', 'cli', 'daemon', 'mcp', 'tg-connector', 'cowork', 'messenger-server', 'fleet', 'codex', 'claude-code', 'install'].map(n => '@ours.network/' + n));
 const digest = (bytes, algorithm = 'sha256', encoding = 'hex') => createHash(algorithm).update(bytes).digest(encoding);
 const fail = text => { throw new Error(`Build context: ${text}`); };
 const keys = (v, expected) => v && !Array.isArray(v) && typeof v === 'object' && Object.keys(v).sort().join('\0') === [...expected].sort().join('\0');

package/assets/scripts/maintenance/daemon-owner.mjs

@@ -0,0 +1,15 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+// Native callers provide an exact selected executable. Compose mounts the
+// selected runtime and supplies its bin directory, including retained releases.
+export function daemonOwner(env = process.env) {
+  if (env.OURS_CLI_PATH) return env.OURS_CLI_PATH;
+  const bin = env.OURS_DAEMON_BIN_DIR;
+  if (!bin) throw new Error('daemon maintenance requires its selected executable or bin directory');
+  const daemon = join(bin, 'ours-daemon');
+  if (existsSync(daemon)) return daemon;
+  const legacy = join(bin, 'ours');
+  if (existsSync(legacy)) return legacy;
+  throw new Error('selected runtime contains no daemon administrator');
+}

package/assets/scripts/maintenance/docker-layout-conversion.mjs

@@ -6,6 +6,8 @@ import { pathToFileURL } from 'node:url';
 import { copyPrivateTree, scanSource, createArchive, validateArchive } from './state-archive.mjs';
 import { publishNoReplace } from './state-native.mjs';
 
+import { daemonOwner } from './daemon-owner.mjs';
+
 const COMPONENTS = ['daemon', 'telegram', 'cowork', 'messenger'];
 import { recordNames, readBuildRecords, validateBuildRecordSet } from './build-context.mjs';
 const DAEMON_STATE = '/var/lib/ours';
@@ -207,7 +209,7 @@ export async function runDockerLayoutCommand(argv, env = process.env) {
   const build = env.OURS_BUILD_ROOT || '/opt/ours';
   const options = {
     uid: process.getuid(), gid: process.getgid(), instanceId: env.OURS_DAEMON_ID,
-    cli: env.OURS_CLI_PATH || '/opt/ours/node_modules/.bin/ours',
+    cli: daemonOwner({ OURS_DAEMON_BIN_DIR: '/opt/ours/node_modules/.bin', ...env }),
     configPath: env.OURS_DAEMON_CONFIG || '/var/lib/ours/config.json',
     provenance: readBuildRecords(build),
   };

package/assets/scripts/maintenance/release-graph.mjs

@@ -20,10 +20,19 @@ export function releaseBinding(policy) {
   if (release?.schema !== 1 || !['stable', 'nightly'].includes(release.channel)) fail('invalid release binding');
   const pattern = release.channel === 'nightly' ? nightly : stable;
   if (typeof release.installerVersion !== 'string' || !pattern.test(release.installerVersion)) fail('invalid installer version/channel');
-  if (!release.packages || JSON.stringify(Object.keys(release.packages).sort()) !== JSON.stringify([...names].sort())) fail('release must select exactly nine ours packages');
+  if (release.scope !== undefined && release.scope !== 'host-cli') fail('invalid release scope');
+  const required = release.scope === 'host-cli' ? ['@ours.network/cli', '@ours.network/sdk'] : [...names, ...(release.packages?.['@ours.network/daemon'] ? ['@ours.network/daemon'] : [])];
+  if (!release.packages || JSON.stringify(Object.keys(release.packages).sort()) !== JSON.stringify([...required].sort())) fail('release must select exactly the required ours packages');
+  if (release.scope === 'host-cli' && Object.hasOwn(release, 'hostCli')) fail('nested host CLI selection');
   for (const [name, entry] of Object.entries(release.packages)) {
     if (typeof entry?.version !== 'string' || !pattern.test(entry.version) || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(entry.integrity ?? '')) fail(`invalid release artifact: ${name}`);
   }
+  if (Object.hasOwn(release, 'hostCli')) {
+    if (!release.hostCli || Object.keys(release.hostCli).sort().join(',') !== '@ours.network/cli,@ours.network/sdk') fail('host CLI must select exactly CLI and SDK');
+    for (const [name, entry] of Object.entries(release.hostCli)) {
+      if (typeof entry?.version !== 'string' || !pattern.test(entry.version) || !/^sha512-[A-Za-z0-9+/]{86}==$/.test(entry.integrity ?? '')) fail(`invalid host CLI artifact: ${name}`);
+    }
+  }
   if (!policy.packages || !Object.keys(policy.packages).length) fail('missing release source selection');
   for (const [name, entry] of Object.entries(policy.packages)) {
     if (entry?.type !== 'npm' || entry.version !== release.packages[name]?.version || Object.keys(entry).sort().join(',') !== 'type,version') fail(`source selection differs from release: ${name}`);
@@ -92,3 +101,11 @@ export function verifyRuntimeRelease(root) {
   if (!existsSync(path)) return { verified: false, reason: 'legacy runtime without sources' };
   return verifyReleaseGraph(root, json(path));
 }
+
+/** The client command has its own exact dependency selection, never a graph bypass. */
+export function hostCliPolicy(policy) {
+  const release = releaseBinding(policy);
+  if (!release?.hostCli) return null;
+  const { hostCli, ...base } = release;
+  return { release: { ...base, scope: 'host-cli', packages: hostCli }, packages: Object.fromEntries(Object.entries(hostCli).map(([name, p]) => [name, { type: 'npm', version: p.version }])) };
+}

package/assets/scripts/maintenance/state-operation.mjs

@@ -9,6 +9,8 @@ import { createArchive, extractArchive, validateArchive, scanSource, copyPrivate
 import { exchange, tryLock, setMtimeNs } from './state-native.mjs';
 import { recordNames, readBuildRecords, equalBuildRecords, initializeBuildMarker } from './build-context.mjs';
 
+import { daemonOwner } from './daemon-owner.mjs';
+
 const PROVENANCE = '.ours-provenance';
 const APPLICATIONS = ['daemon', 'telegram', 'cowork', 'messenger'];
 const exists = path => { try { fs.lstatSync(path); return true; } catch (e) { if (e.code === 'ENOENT') return false; throw e; } };
@@ -145,9 +147,9 @@ export async function runStateOperation(argv, env = process.env, checkpoints = {
   }
   function retainAuthority(staging) {
     if (!['daemon', 'server'].includes(domain)) return;
-    if (!env.OURS_CLI_PATH || !env.OURS_DAEMON_CONFIG) fail('daemon maintenance requires its selected executable and configuration');
+    if (!env.OURS_DAEMON_CONFIG) fail('daemon maintenance requires its selected executable and configuration');
     const daemon = commonTree ? join(staging, 'daemon') : staging;
-    owner([env.OURS_CLI_PATH, 'config', 'access-retain', '--config', env.OURS_DAEMON_CONFIG, '--target-state-dir', daemon, '--json']);
+    owner([daemonOwner(env), 'config', 'access-retain', '--config', env.OURS_DAEMON_CONFIG, '--target-state-dir', daemon, '--json']);
     if (!commonTree) return;
     const credentials = join(live, 'credentials'), destination = join(staging, 'credentials');
     for (const name of ['telegram', 'cowork', 'messenger']) if (!privateStat(join(credentials, name, 'daemon-token'), false, 0o600).size) fail('current managed credential is empty');

package/assets/scripts/runtime/client-setup.mjs

@@ -2,7 +2,7 @@ import { readBuildRecords, initializeBuildMarker } from '../maintenance/build-co
 import { spawnSync } from 'node:child_process';
 import { randomBytes } from 'node:crypto';
 import {
-  closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readFileSync,
+  existsSync, closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readFileSync,
   realpathSync, renameSync, unlinkSync, writeFileSync, readdirSync, chmodSync, chownSync,
 } from 'node:fs';
 
@@ -67,7 +67,7 @@ function validateCommon(idName = 'OURS_DAEMON_ID') {
 
 function composeConfig(domain) {
   if (domain === 'daemon') {
-    const value = { stateDir: '/var/lib/ours', port: 3050, apiVisibility: 'owner', networkMcp: { profile: { endpoint: 'http://127.0.0.1:3050', expectedInstanceId: process.env.OURS_DAEMON_ID, credentialPath: '/var/lib/ours/daemon-token' }, applicationConfigPath: '/var/lib/ours-mcp/config.json' } };
+    const value = { stateDir: '/var/lib/ours', port: 3050, apiVisibility: 'owner' };
     if (process.env.OURS_BROKER_URL) value.brokerUrl = process.env.OURS_BROKER_URL;
     return value;
   }
@@ -155,7 +155,7 @@ async function telegramInput() {
 }
 
 function cliJson(args) {
-  const result = spawnSync(process.execPath, ['/opt/ours/node_modules/@ours.network/cli/dist/cli.js', ...args], {
+  const result = spawnSync(process.execPath, [existsSync('/opt/ours/node_modules/@ours.network/daemon/dist/cli.js') ? '/opt/ours/node_modules/@ours.network/daemon/dist/cli.js' : '/opt/ours/node_modules/@ours.network/cli/dist/cli.js', ...args], {
     encoding: 'utf8', timeout: 60_000, maxBuffer: 1024 * 1024,
   });
   if (result.status !== 0) fail('Official OURS CLI operation failed');

package/assets/scripts/runtime/entrypoint.sh

@@ -10,4 +10,4 @@ else
   exit "$status"
 fi
 node /opt/ours/docker/check-start.mjs
-exec node /opt/ours/node_modules/@ours.network/cli/dist/cli.js daemon serve
+exec node /opt/ours/node_modules/@ours.network/daemon/dist/cli.js serve

package/assets/scripts/runtime/legacy-import.mjs

@@ -0,0 +1,103 @@
+/** Import a stopped, read-only host migration stage into the managed Docker volume. */
+import * as fs from 'node:fs';
+import { dirname, join, resolve, isAbsolute } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { randomUUID } from 'node:crypto';
+// Repository layout and the maintenance image intentionally place this binding differently.
+const nativeModule = new URL('../maintenance/state-native.mjs', import.meta.url);
+const { publishNoReplace } = await import(fs.existsSync(nativeModule) ? nativeModule.href : new URL('./state-native.mjs', import.meta.url).href);
+
+const MARKER = '.ours-legacy-import.json';
+const COMPONENTS = ['mcp', 'daemon'];
+const fail = message => { throw Error(`Legacy volume import: ${message}`); };
+function canonical(path) {
+  if (typeof path !== 'string' || !isAbsolute(path) || resolve(path) !== path) fail('paths must be normalized absolute paths');
+  if (fs.realpathSync(path) !== path) fail('symlink paths are not supported');
+}
+function privateEntry(path, uid, gid, directory) {
+  const stat = fs.lstatSync(path);
+  if (!(directory ? stat.isDirectory() : stat.isFile()) || stat.isSymbolicLink()
+    || stat.uid !== uid || stat.gid !== gid
+    || (directory ? (stat.mode & 0o7777) !== 0o700 : ((stat.mode & 0o7077) !== 0 || !(stat.mode & 0o400)))
+    || (!directory && stat.nlink !== 1)) fail('unsafe ownership, permissions, or linked state entry');
+  return stat;
+}
+function scan(root, uid, gid) {
+  const entries = [];
+  function visit(path, relative) {
+    const stat = fs.lstatSync(path), directory = stat.isDirectory();
+    privateEntry(path, uid, gid, directory); entries.push({ relative, directory, mode: stat.mode & 0o700 });
+    if (directory) for (const name of fs.readdirSync(path).sort()) visit(join(path, name), relative ? join(relative, name) : name);
+  }
+  canonical(root); visit(root, ''); return entries;
+}
+function readReceipt(root, uid, gid, targetRoot) {
+  privateEntry(join(root, MARKER), uid, gid, false);
+  const value = JSON.parse(fs.readFileSync(join(root, MARKER), 'utf8'));
+  const keys = ['sourceStateDir', 'sourceConfigPath', 'targetRoot', 'rootName'];
+  if (!value || typeof value !== 'object' || Array.isArray(value)
+    || Object.keys(value).sort().join('\0') !== [...keys].sort().join('\0')
+    || keys.some(key => typeof value[key] !== 'string' || !value[key])
+    || value.targetRoot !== targetRoot
+    || ['sourceStateDir', 'sourceConfigPath', 'targetRoot'].some(key => !isAbsolute(value[key]) || resolve(value[key]) !== value[key])) fail('invalid or mismatched migration receipt');
+  return Object.fromEntries(keys.map(key => [key, value[key]]));
+}
+const same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+function existingDestination(path, expected, uid, gid, targetRoot) {
+  if (!fs.existsSync(path)) return false;
+  canonical(path); privateEntry(path, uid, gid, true);
+  if (!fs.readdirSync(path).length) return false;
+  if (!fs.existsSync(join(path, MARKER)) || !same(readReceipt(path, uid, gid, targetRoot), expected)) fail('nonmatching existing destination');
+  return true;
+}
+function makeDirectory(path, uid, gid) {
+  if (!fs.existsSync(path)) { fs.mkdirSync(path, { mode: 0o700 }); fs.chownSync(path, uid, gid); }
+  canonical(path); privateEntry(path, uid, gid, true);
+}
+
+/** Caller holds installation exclusion and has stopped all destination writers. */
+export function importLegacyVolume({ sourceRoot = '/legacy-import', storageRoot = '/storage', targetRoot, uid, gid }) {
+  if (![uid, gid].every(value => Number.isSafeInteger(value) && value >= 0)) fail('numeric target UID/GID required');
+  if (typeof targetRoot !== 'string' || !isAbsolute(targetRoot) || resolve(targetRoot) !== targetRoot) fail('expected target root required');
+  canonical(sourceRoot); canonical(storageRoot);
+  const sourceOwner = fs.lstatSync(sourceRoot);
+  privateEntry(sourceRoot, sourceOwner.uid, sourceOwner.gid, true);
+  const sources = COMPONENTS.map(component => {
+    const path = join(sourceRoot, component);
+    const entries = scan(path, sourceOwner.uid, sourceOwner.gid);
+    return { component, path, entries, receipt: readReceipt(path, sourceOwner.uid, sourceOwner.gid, targetRoot) };
+  });
+  if (!same(sources[0].receipt, sources[1].receipt)) fail('source daemon and MCP receipts differ');
+  const rootStat = fs.lstatSync(storageRoot);
+  const freshRoot = rootStat.isDirectory() && rootStat.uid === 0 && rootStat.gid === 0 && fs.readdirSync(storageRoot).length === 0;
+  if (!freshRoot) privateEntry(storageRoot, uid, gid, true);
+  const state = join(storageRoot, 'state');
+  if (fs.existsSync(state)) { canonical(state); privateEntry(state, uid, gid, true); }
+  // Validate every existing destination before changing even an empty volume.
+  for (const source of sources) source.reused = existingDestination(join(state, source.component), source.receipt, uid, gid, targetRoot);
+  if (freshRoot) { fs.chmodSync(storageRoot, 0o700); fs.chownSync(storageRoot, uid, gid); }
+  makeDirectory(state, uid, gid);
+  for (const source of sources) {
+    if (source.reused) continue;
+    const destination = join(state, source.component), staging = join(state, `.legacy-import-${randomUUID()}`);
+    try {
+      fs.cpSync(source.path, staging, { recursive: true, errorOnExist: true, force: false });
+      for (const entry of [...source.entries].reverse()) {
+        const path = entry.relative ? join(staging, entry.relative) : staging;
+        fs.chmodSync(path, entry.mode); fs.chownSync(path, uid, gid);
+      }
+      scan(staging, uid, gid);
+      if (!same(readReceipt(staging, uid, gid, targetRoot), source.receipt)) fail('copied receipt changed');
+      if (fs.existsSync(destination)) fs.rmdirSync(destination); // empty skeleton only
+      publishNoReplace(staging, destination);
+    } finally { fs.rmSync(staging, { recursive: true, force: true }); }
+  }
+  return { imported: sources.filter(source => !source.reused).map(source => source.component), retained: sources.filter(source => source.reused).map(source => source.component) };
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  try {
+    importLegacyVolume({ targetRoot: process.env.OURS_LEGACY_TARGET_ROOT, uid: Number(process.env.OURS_UID), gid: Number(process.env.OURS_GID) });
+    console.log('Legacy daemon and MCP state imported into the selected volume.');
+  } catch (error) { console.error(error.message); process.exitCode = 1; }
+}