@ours.network/install 1.2.1-nightly.32 → 1.2.1-nightly.33

package/README.md

@@ -8,9 +8,9 @@ This permanent command contains no tunnel credentials or enrollment expiry. On a
 
 `--disable-fleet-agents-setup` installs the Fleet CLI and saves the choice without opening its agent/model wizard or rewriting existing Fleet configuration. Configure agents in the App after device linking. Complete presets still work unattended; partial presets require a terminal and cannot use `OURS_ASSUME_YES`.
 
-The separate `ours-fleet setup-tunnel --file /private/setup-payload` step requires the matching Fleet follow-up release. Its private App payload remains scoped, signed-root-bound and expiring. Then run `ours-fleet link-device` and paste its private single-use code into the App. Do not put the expiring tunnel payload in the permanent installer command.
+The separate `ours-fleet setup-tunnel <encoded-v2-grant>` step is supported by the pinned Fleet release. Its private App payload remains scoped, signed-root-bound and expiring. Fleet prints its QR and private single-use connection code immediately after successful setup; scan or paste it into the App. `ours-fleet link-device` remains available for additional devices or expired codes. Do not put the expiring tunnel payload in the permanent installer command.
 
-Native packages currently provide server-only installation; full Fleet/App onboarding requires the supported gateway (Docker or Podman). The installer refuses unsupported native full-stack setup before changing anything. This PR does not add a native gateway or release unpublished Fleet commands.
+Native packages currently provide server-only installation; full Fleet/App onboarding requires the supported gateway (Docker or Podman). The installer refuses unsupported native full-stack setup before changing anything. This flow does not add a native gateway.
 
 See [one-connection setup, localhost:4050 and systemd migration](GATEWAY_SETUP.md) for the gateway-only client workflow.
 
@@ -624,4 +624,27 @@ Existing installation records keep their ports and identities. A listener acquir
 by another process after preflight still causes startup to fail safely; no foreign
 process is stopped and no retained installation is silently moved.
 
-Workspace setup pins Fleet `1.2.0-nightly.41` with its recorded registry integrity. This release includes first-time Fleet setup through the host API for the account App, direct App access to the workspace services with the device credential, separate `ours-fleet setup-tunnel` and `ours-fleet link-device` commands, host prerequisite checks before the one-time workspace proof (`setup-tunnel --check`), `setup-tunnel --resume` to finish a setup that stopped after the host saved its private pending setup record (not when the proof's answer was lost, or after the setup window expired with an unconfirmed non-default port), and persists the available Fleet loopback port used by the workspace tunnel. It also accepts a setup-generated configuration left behind after the host enrollment state was removed, runs the host Codex when it is at least as new as the packaged one, offers only the Codex models the signed-in account can use, and removes the temporary setup contact after confirmation. Fleet serves no pages and opens no browser: every screen is in the App. Fleet also serves the workspace notification routes, produces notifications through the server gateway with the imported producer credential, accepts the App's device credential on the notification presence socket so an open App receives no push, and defaults agent wakes to `monitor.interrupt: after_tool` (Hermes: no interrupt; role snapshots saved before this default keep no interrupt). Existing installation identities and configured ports remain retained; a retained-port collision fails safely.
+Workspace setup pins Fleet `1.2.0-nightly.44` with its recorded registry integrity. This release includes first-time Fleet setup through the host API for the account App, direct App access to the workspace services with the device credential, v2 positional one-use grants and automatic QR/connection-code output from `ours-fleet setup-tunnel`, optional private file/stdin inputs for legacy v1 payloads, a separate `ours-fleet link-device` command for additional devices, host prerequisite checks before the one-time workspace proof (`setup-tunnel --check`), `setup-tunnel --resume` to finish a setup that stopped after the host saved its private pending setup record (not when the proof's answer was lost, or after the setup window expired with an unconfirmed non-default port), and persists the available Fleet loopback port used by the workspace tunnel. It also accepts a setup-generated configuration left behind after the host enrollment state was removed, runs the host Codex when it is at least as new as the packaged one, offers only the Codex models the signed-in account can use, and removes the temporary setup contact after confirmation. Fleet serves no pages and opens no browser: every screen is in the App. Fleet also serves the workspace notification routes, produces notifications through the server gateway with the imported producer credential, accepts the App's device credential on the notification presence socket so an open App receives no push, and defaults agent wakes to `monitor.interrupt: after_tool` (Hermes: no interrupt; role snapshots saved before this default keep no interrupt). Existing installation identities and configured ports remain retained; a retained-port collision fails safely.
+
+### App tunnel setup prerelease sequencing
+
+The simplified App flow shows one copyable `ours-fleet setup-tunnel <encoded-v2-grant>`
+command for the installed host, including an SSH session on a VPS. Its argument
+contains only the existing v2 single-use grant (`version`, `appOrigin`, `code`,
+`expiresAt`), never a connector token or broad provider credential. The command can
+appear in shell history and process listings: keep it private and remove it from
+history after use. Base64 is encoding, not encryption. Server-side expiry and
+one-time redemption remain enforced. Fleet checks prerequisites before HTTPS POST
+redemption; it never prints the grant or puts it in a URL, and retains existing
+signed-root binding and scoped connector token-file controls. It prints the QR and
+connection code automatically; the App checks readiness and opens the code field.
+Private `--file`/`--stdin` transports remain optional and are the only transports
+for legacy v1 payloads with long-lived credentials.
+
+The nightly installer release manifest selects published Fleet `1.2.0-nightly.44`
+and its actual registry integrity through the normal release manifest/source-policy
+generators. This release includes v2 argument and private-input support. The former
+nightly.41 selection predates this capability. Merge and publish the repinned
+installer before deploying the App; the pin change alone is not an installer
+publication. Existing v1 private-file enrollment remains compatible. The legacy
+App wrapper refuses an older Fleet before reading or redeeming its grant.

package/assets/release-lock.json

@@ -13,7 +13,7 @@
         "@ours.network/codex": "1.2.0-nightly.10",
         "@ours.network/cowork": "1.3.3-nightly.20261001.6d49d3a",
         "@ours.network/daemon": "3.8.1-nightly.7",
-        "@ours.network/fleet": "1.2.0-nightly.41",
+        "@ours.network/fleet": "1.2.0-nightly.44",
         "@ours.network/mcp": "1.2.0-nightly.10",
         "@ours.network/messenger-server": "1.0.31-nightly.14",
         "@ours.network/notifications": "0.3.1-nightly.1",
@@ -712,9 +712,9 @@
       }
     },
     "node_modules/@fastify/websocket": {
-      "version": "11.3.2",
-      "resolved": "https://registry.npmjs.org/@fastify/websocket/-/websocket-11.3.2.tgz",
-      "integrity": "sha512-WATdeYgpwf/3/AmKJ0TcP9dQtThJEeppbfgV5t2jkp4BJT6KgvKBgIK2sns/2xlyfoxZEiYkE4JBxH3PwVKkrw==",
+      "version": "11.3.3",
+      "resolved": "https://registry.npmjs.org/@fastify/websocket/-/websocket-11.3.3.tgz",
+      "integrity": "sha512-NBJoykKpFwrdX9Ezod1rt30p5NoPFu7vgeuUowSM3JVI5/hFNRPhetqkWMTiF/ifIzctwitbJut1gZ6FDg1mwQ==",
       "funding": [
         {
           "type": "github",
@@ -1001,9 +1001,9 @@
       }
     },
     "node_modules/@ours.network/fleet": {
-      "version": "1.2.0-nightly.41",
-      "resolved": "https://registry.npmjs.org/@ours.network/fleet/-/fleet-1.2.0-nightly.41.tgz",
-      "integrity": "sha512-7Ws+tGwSgoQVaAb0va6RNzs2lLH0TBJAOTWJn/rt4UcWJFDXzGyoWLgGou2KdKM9S54z4x0E7BGeRM5ZefLw9g==",
+      "version": "1.2.0-nightly.44",
+      "resolved": "https://registry.npmjs.org/@ours.network/fleet/-/fleet-1.2.0-nightly.44.tgz",
+      "integrity": "sha512-kbtcb8cwqM4cIbEJyLAnG8sOxfrArtm676aex8IggYKQ+EqD487kp7IEJ3jGoVvEClJ8PE13cRolmyV9aSx7QA==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "@agentclientprotocol/sdk": "^1.3.0",
@@ -2120,9 +2120,9 @@
       "license": "MIT"
     },
     "node_modules/hono": {
-      "version": "4.13.12",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.12.tgz",
-      "integrity": "sha512-6E2QDAc9Ick9Sq77ZrGS/dk2WUYni91aufTw6LJKpV7w8kW5/GxVUc650FOADOmlwg3K+f7Pun6XlV+pYmW6gw==",
+      "version": "4.13.13",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.13.tgz",
+      "integrity": "sha512-CQ46U0ZkAGmbT/4UxdzzGJpacP2IeKgY4a5/tOI9AABbpOMfK739wfDXmv1usCk+3RkKj1hQy4/fjhiwa2xlrA==",
       "license": "MIT",
       "engines": {
         "node": ">=16.9.0"

package/assets/release.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "channel": "nightly",
-  "installerVersion": "1.2.1-nightly.32",
+  "installerVersion": "1.2.1-nightly.33",
   "packages": {
     "@ours.network/sdk": {
       "version": "3.8.1-nightly.15",
@@ -28,8 +28,8 @@
       "integrity": "sha512-rIkrtixoHqBfgCKDDCEYFl4W2Zzh0hOw3axX2+GppQ9gYkujKrk9M2KLGoYhu8RwwTMRl497jgMcTBe7UAHCgA=="
     },
     "@ours.network/fleet": {
-      "version": "1.2.0-nightly.41",
-      "integrity": "sha512-7Ws+tGwSgoQVaAb0va6RNzs2lLH0TBJAOTWJn/rt4UcWJFDXzGyoWLgGou2KdKM9S54z4x0E7BGeRM5ZefLw9g=="
+      "version": "1.2.0-nightly.44",
+      "integrity": "sha512-kbtcb8cwqM4cIbEJyLAnG8sOxfrArtm676aex8IggYKQ+EqD487kp7IEJ3jGoVvEClJ8PE13cRolmyV9aSx7QA=="
     },
     "@ours.network/mcp": {
       "version": "1.2.0-nightly.10",

package/assets/sources.json

@@ -2,7 +2,7 @@
   "release": {
     "schema": 1,
     "channel": "nightly",
-    "installerVersion": "1.2.1-nightly.32",
+    "installerVersion": "1.2.1-nightly.33",
     "packages": {
       "@ours.network/sdk": {
         "version": "3.8.1-nightly.15",
@@ -29,8 +29,8 @@
         "integrity": "sha512-rIkrtixoHqBfgCKDDCEYFl4W2Zzh0hOw3axX2+GppQ9gYkujKrk9M2KLGoYhu8RwwTMRl497jgMcTBe7UAHCgA=="
       },
       "@ours.network/fleet": {
-        "version": "1.2.0-nightly.41",
-        "integrity": "sha512-7Ws+tGwSgoQVaAb0va6RNzs2lLH0TBJAOTWJn/rt4UcWJFDXzGyoWLgGou2KdKM9S54z4x0E7BGeRM5ZefLw9g=="
+        "version": "1.2.0-nightly.44",
+        "integrity": "sha512-kbtcb8cwqM4cIbEJyLAnG8sOxfrArtm676aex8IggYKQ+EqD487kp7IEJ3jGoVvEClJ8PE13cRolmyV9aSx7QA=="
       },
       "@ours.network/mcp": {
         "version": "1.2.0-nightly.10",
@@ -87,7 +87,7 @@
     },
     "@ours.network/fleet": {
       "type": "npm",
-      "version": "1.2.0-nightly.41"
+      "version": "1.2.0-nightly.44"
     },
     "@ours.network/mcp": {
       "type": "npm",

package/lib/setup.mjs

@@ -139,7 +139,7 @@ export async function executeSetupPlan(plan, effects, { server = runServerComman
       disableFleetAgentsSetup: plan.disableFleetAgentsSetup, preset: true, nonInteractive: !plan.interactive }, effects);
     if (result !== 0) return result;
   }
-  if (plan.disableFleetAgentsSetup && plan.integrations?.includes('fleet')) effects.out(info('Fleet is installed. Run ours-fleet setup-tunnel with the private expiring App setup file, then ours-fleet link-device. Configure agents and models in the App after linking.'));
+  if (plan.disableFleetAgentsSetup && plan.integrations?.includes('fleet')) effects.out(info('Fleet is installed. Run ours-fleet setup-tunnel with the expiring one-use payload from the App command; a compatible Fleet prints the QR and connection code automatically. Configure agents and models in the App after linking.'));
   effects.out(ok(`Requested ${plan.operation} completed. Existing identities were retained.`));
   if (plan.integrations?.includes('fleet') && !plan.disableFleetAgentsSetup) effects.out(info('Fleet is configured but stopped. Review its settings, then run ours-fleet doctor, ours-fleet config and ours-fleet up.'));
   return 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/install",
-  "version": "1.2.1-nightly.32",
+  "version": "1.2.1-nightly.33",
   "private": false,
   "description": "The all-in-one ours.network installer: one shared daemon, MCP, cowork, Telegram, Fleet initialization, harness plugins, Human identity, progress UI, and guided next steps.",
   "type": "module",