@ours.network/install 1.2.1-nightly.34 → 1.2.1-nightly.35

package/README.md

@@ -637,7 +637,7 @@ Existing installation records keep their ports and identities. A listener acquir
 by another process after preflight still causes startup to fail safely; no foreign
 process is stopped and no retained installation is silently moved.
 
-Workspace setup pins Fleet `1.2.0-nightly.45` with its recorded registry integrity. This release includes first-time Fleet setup through the host API for the account App, direct App access to the workspace services with the device credential, v2 positional one-use grants and automatic QR/connection-code output from `ours-fleet setup-tunnel`, optional private file/stdin inputs for legacy v1 payloads, a separate `ours-fleet link-device` command for additional devices, host prerequisite checks before the one-time workspace proof (`setup-tunnel --check`), `setup-tunnel --resume` to finish a setup that stopped after the host saved its private pending setup record (not when the proof's answer was lost, or after the setup window expired with an unconfirmed non-default port), and persists the available Fleet loopback port used by the workspace tunnel. It also accepts a setup-generated configuration left behind after the host enrollment state was removed, runs the host Codex when it is at least as new as the packaged one, offers only the Codex models the signed-in account can use, and removes the temporary setup contact after confirmation. Fleet serves no pages and opens no browser: every screen is in the App. Fleet also serves the workspace notification routes, produces notifications through the server gateway with the imported producer credential, accepts the App's device credential on the notification presence socket so an open App receives no push, and defaults agent wakes to `monitor.interrupt: after_tool` (Hermes: no interrupt; role snapshots saved before this default keep no interrupt). Existing installation identities and configured ports remain retained; a retained-port collision fails safely.
+Workspace setup pins Fleet `1.2.0-nightly.46` with its recorded registry integrity. This release includes first-time Fleet setup through the host API for the account App, direct App access to the workspace services with the device credential, v2 positional one-use grants and automatic QR/connection-code output from `ours-fleet setup-tunnel`, optional private file/stdin inputs for legacy v1 payloads, a separate `ours-fleet link-device` command for additional devices, host prerequisite checks before the one-time workspace proof (`setup-tunnel --check`), `setup-tunnel --resume` to finish a setup that stopped after the host saved its private pending setup record (not when the proof's answer was lost, or after the setup window expired with an unconfirmed non-default port), and persists the available Fleet loopback port used by the workspace tunnel. It also accepts a setup-generated configuration left behind after the host enrollment state was removed, runs the host Codex when it is at least as new as the packaged one, offers only the Codex models the signed-in account can use, and removes the temporary setup contact after confirmation. Fleet serves no pages and opens no browser: every screen is in the App. Fleet also serves the workspace notification routes, produces notifications through the server gateway with the imported producer credential, accepts the App's device credential on the notification presence socket so an open App receives no push, and defaults agent wakes to `monitor.interrupt: after_tool` (Hermes: no interrupt; role snapshots saved before this default keep no interrupt). Existing installation identities and configured ports remain retained; a retained-port collision fails safely.
 
 ### App tunnel setup prerelease sequencing
 
@@ -654,10 +654,17 @@ connection code automatically; the App checks readiness and opens the code field
 Private `--file`/`--stdin` transports remain optional and are the only transports
 for legacy v1 payloads with long-lived credentials.
 
-The nightly installer release manifest selects published Fleet `1.2.0-nightly.45`
+The nightly installer release manifest selects published Fleet `1.2.0-nightly.46`
 and its actual registry integrity through the normal release manifest/source-policy
 generators. This release includes v2 argument and private-input support. The former
 nightly.41 selection predates this capability. Merge and publish the repinned
 installer before deploying the App; the pin change alone is not an installer
 publication. Existing v1 private-file enrollment remains compatible. The legacy
 App wrapper refuses an older Fleet before reading or redeeming its grant.
+
+The notification gateway permits daemon-authenticated producer selection only on
+POST `/api/v1/send` and `/api/v1/delete-target`. The latter retires a removed
+conversation using the credential's fixed user/source scope. Browser inbox
+`/api/v1/delete` continues to require the user credential. The notification
+service must support the scoped lifecycle route; this change does not repin or
+publish an installer release.

package/assets/release-lock.json

@@ -13,10 +13,10 @@
         "@ours.network/codex": "1.2.0-nightly.10",
         "@ours.network/cowork": "1.3.3-nightly.20261001.6d49d3a",
         "@ours.network/daemon": "3.8.1-nightly.7",
-        "@ours.network/fleet": "1.2.0-nightly.45",
+        "@ours.network/fleet": "1.2.0-nightly.46",
         "@ours.network/mcp": "1.2.0-nightly.10",
-        "@ours.network/messenger-server": "1.0.31-nightly.14",
-        "@ours.network/notifications": "0.3.1-nightly.1",
+        "@ours.network/messenger-server": "1.0.31-nightly.15",
+        "@ours.network/notifications": "0.3.1-nightly.2",
         "@ours.network/sdk": "3.8.1-nightly.15",
         "@ours.network/tg-connector": "1.0.1-nightly.9"
       }
@@ -1001,9 +1001,9 @@
       }
     },
     "node_modules/@ours.network/fleet": {
-      "version": "1.2.0-nightly.45",
-      "resolved": "https://registry.npmjs.org/@ours.network/fleet/-/fleet-1.2.0-nightly.45.tgz",
-      "integrity": "sha512-Mwcwt6wpS74QgmLYTmtJaq2nLtQMK7+xmn+gARkWiLH0klzEClPNkpPPs0p8DWMiQtsAShq94iS5iOo/GzzL2Q==",
+      "version": "1.2.0-nightly.46",
+      "resolved": "https://registry.npmjs.org/@ours.network/fleet/-/fleet-1.2.0-nightly.46.tgz",
+      "integrity": "sha512-k39gR9pKGPb6V4c2nhmfZAuHZmI9jgW+Hd1cTjDydJm7feRbnILTuEKxn5E+EUOxl/NwMIpWEJgCx99P+yQGtA==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "@agentclientprotocol/sdk": "^1.3.0",
@@ -1047,9 +1047,9 @@
       }
     },
     "node_modules/@ours.network/messenger-server": {
-      "version": "1.0.31-nightly.14",
-      "resolved": "https://registry.npmjs.org/@ours.network/messenger-server/-/messenger-server-1.0.31-nightly.14.tgz",
-      "integrity": "sha512-0lMoIadihMQqN0sdW20DF4a94Nc6bx0lnaCckSnn5VqOmvqELNdG3kRZ1Heh9VwkPEu6qNM27AR7tWpTbzvJCg==",
+      "version": "1.0.31-nightly.15",
+      "resolved": "https://registry.npmjs.org/@ours.network/messenger-server/-/messenger-server-1.0.31-nightly.15.tgz",
+      "integrity": "sha512-NEpPsn3x4ZxYjhTo3c8JSYPKgfkhZ/W9s0u5Bd6OALWj40qc5ethui1uHfpw5Cu3+XHJz28WPh5e4RbjUMCmXQ==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "@eslint-community/regexpp": "4.12.2",
@@ -1066,9 +1066,9 @@
       }
     },
     "node_modules/@ours.network/notifications": {
-      "version": "0.3.1-nightly.1",
-      "resolved": "https://registry.npmjs.org/@ours.network/notifications/-/notifications-0.3.1-nightly.1.tgz",
-      "integrity": "sha512-rIkrtixoHqBfgCKDDCEYFl4W2Zzh0hOw3axX2+GppQ9gYkujKrk9M2KLGoYhu8RwwTMRl497jgMcTBe7UAHCgA==",
+      "version": "0.3.1-nightly.2",
+      "resolved": "https://registry.npmjs.org/@ours.network/notifications/-/notifications-0.3.1-nightly.2.tgz",
+      "integrity": "sha512-OjnrJ8ZuOfKYT4KAmiRLU7czfiuacs6rShwOvvqxqBaUKcs1UwjsYwHARNb6erMxG4am3xxcE0ItahL+d2vt4A==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "web-push": "3.6.7",

package/assets/release.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "channel": "nightly",
-  "installerVersion": "1.2.1-nightly.34",
+  "installerVersion": "1.2.1-nightly.35",
   "packages": {
     "@ours.network/sdk": {
       "version": "3.8.1-nightly.15",
@@ -20,16 +20,16 @@
       "integrity": "sha512-tqoLOWc4O8CGwLdO1j6ukm6Vn57EE0zbuxKo4BWd0QVwu9ObKgHCEMOKPgW2mXHeESXSv9m7edcIrnK8I5gD+w=="
     },
     "@ours.network/messenger-server": {
-      "version": "1.0.31-nightly.14",
-      "integrity": "sha512-0lMoIadihMQqN0sdW20DF4a94Nc6bx0lnaCckSnn5VqOmvqELNdG3kRZ1Heh9VwkPEu6qNM27AR7tWpTbzvJCg=="
+      "version": "1.0.31-nightly.15",
+      "integrity": "sha512-NEpPsn3x4ZxYjhTo3c8JSYPKgfkhZ/W9s0u5Bd6OALWj40qc5ethui1uHfpw5Cu3+XHJz28WPh5e4RbjUMCmXQ=="
     },
     "@ours.network/notifications": {
-      "version": "0.3.1-nightly.1",
-      "integrity": "sha512-rIkrtixoHqBfgCKDDCEYFl4W2Zzh0hOw3axX2+GppQ9gYkujKrk9M2KLGoYhu8RwwTMRl497jgMcTBe7UAHCgA=="
+      "version": "0.3.1-nightly.2",
+      "integrity": "sha512-OjnrJ8ZuOfKYT4KAmiRLU7czfiuacs6rShwOvvqxqBaUKcs1UwjsYwHARNb6erMxG4am3xxcE0ItahL+d2vt4A=="
     },
     "@ours.network/fleet": {
-      "version": "1.2.0-nightly.45",
-      "integrity": "sha512-Mwcwt6wpS74QgmLYTmtJaq2nLtQMK7+xmn+gARkWiLH0klzEClPNkpPPs0p8DWMiQtsAShq94iS5iOo/GzzL2Q=="
+      "version": "1.2.0-nightly.46",
+      "integrity": "sha512-k39gR9pKGPb6V4c2nhmfZAuHZmI9jgW+Hd1cTjDydJm7feRbnILTuEKxn5E+EUOxl/NwMIpWEJgCx99P+yQGtA=="
     },
     "@ours.network/mcp": {
       "version": "1.2.0-nightly.10",

package/assets/scripts/runtime/notifications-gateway.mjs

@@ -21,7 +21,7 @@ export function daemonCredentialCheck(daemonUrl) {
 /**
  * Front the notification service with the server's own authentication.
  * A request carrying a server API credential is checked with the daemon; only then
- * does it act as this installation's owner (or, for /api/v1/send, as the named
+ * does it act as this installation's owner (or, for producer lifecycle routes, as the named
  * producer). A request without one keeps its own Authorization, which the service
  * checks against its scoped tokens. Nothing is injected for an unauthenticated caller.
  */
@@ -33,7 +33,7 @@ export function createNotificationsAdapter({ service, userToken, verifyServerCre
     if (credential === undefined) return producer === undefined;
     if (typeof credential !== 'string' || !credential || !await verifyServerCredential(credential)) return false;
     const path = new URL(req.url ?? '/', 'http://localhost').pathname;
-    if (producer !== undefined && !(req.method === 'POST' && path === '/api/v1/send')) return false;
+    if (producer !== undefined && !(req.method === 'POST' && ['/api/v1/send', '/api/v1/delete-target'].includes(path))) return false;
     req.headers.authorization = `Bearer ${producer ?? userToken}`;
     return true;
   };

package/assets/sources.json

@@ -2,7 +2,7 @@
   "release": {
     "schema": 1,
     "channel": "nightly",
-    "installerVersion": "1.2.1-nightly.34",
+    "installerVersion": "1.2.1-nightly.35",
     "packages": {
       "@ours.network/sdk": {
         "version": "3.8.1-nightly.15",
@@ -21,16 +21,16 @@
         "integrity": "sha512-tqoLOWc4O8CGwLdO1j6ukm6Vn57EE0zbuxKo4BWd0QVwu9ObKgHCEMOKPgW2mXHeESXSv9m7edcIrnK8I5gD+w=="
       },
       "@ours.network/messenger-server": {
-        "version": "1.0.31-nightly.14",
-        "integrity": "sha512-0lMoIadihMQqN0sdW20DF4a94Nc6bx0lnaCckSnn5VqOmvqELNdG3kRZ1Heh9VwkPEu6qNM27AR7tWpTbzvJCg=="
+        "version": "1.0.31-nightly.15",
+        "integrity": "sha512-NEpPsn3x4ZxYjhTo3c8JSYPKgfkhZ/W9s0u5Bd6OALWj40qc5ethui1uHfpw5Cu3+XHJz28WPh5e4RbjUMCmXQ=="
       },
       "@ours.network/notifications": {
-        "version": "0.3.1-nightly.1",
-        "integrity": "sha512-rIkrtixoHqBfgCKDDCEYFl4W2Zzh0hOw3axX2+GppQ9gYkujKrk9M2KLGoYhu8RwwTMRl497jgMcTBe7UAHCgA=="
+        "version": "0.3.1-nightly.2",
+        "integrity": "sha512-OjnrJ8ZuOfKYT4KAmiRLU7czfiuacs6rShwOvvqxqBaUKcs1UwjsYwHARNb6erMxG4am3xxcE0ItahL+d2vt4A=="
       },
       "@ours.network/fleet": {
-        "version": "1.2.0-nightly.45",
-        "integrity": "sha512-Mwcwt6wpS74QgmLYTmtJaq2nLtQMK7+xmn+gARkWiLH0klzEClPNkpPPs0p8DWMiQtsAShq94iS5iOo/GzzL2Q=="
+        "version": "1.2.0-nightly.46",
+        "integrity": "sha512-k39gR9pKGPb6V4c2nhmfZAuHZmI9jgW+Hd1cTjDydJm7feRbnILTuEKxn5E+EUOxl/NwMIpWEJgCx99P+yQGtA=="
       },
       "@ours.network/mcp": {
         "version": "1.2.0-nightly.10",
@@ -79,15 +79,15 @@
     },
     "@ours.network/messenger-server": {
       "type": "npm",
-      "version": "1.0.31-nightly.14"
+      "version": "1.0.31-nightly.15"
     },
     "@ours.network/notifications": {
       "type": "npm",
-      "version": "0.3.1-nightly.1"
+      "version": "0.3.1-nightly.2"
     },
     "@ours.network/fleet": {
       "type": "npm",
-      "version": "1.2.0-nightly.45"
+      "version": "1.2.0-nightly.46"
     },
     "@ours.network/mcp": {
       "type": "npm",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/install",
-  "version": "1.2.1-nightly.34",
+  "version": "1.2.1-nightly.35",
   "private": false,
   "description": "The all-in-one ours.network installer: one shared daemon, MCP, cowork, Telegram, Fleet initialization, harness plugins, Human identity, progress UI, and guided next steps.",
   "type": "module",