@ours.network/install 1.2.1-nightly.37 → 1.2.1-nightly.38

package/README.md

@@ -637,7 +637,7 @@ Existing installation records keep their ports and identities. A listener acquir
 by another process after preflight still causes startup to fail safely; no foreign
 process is stopped and no retained installation is silently moved.
 
-Workspace setup pins Fleet `1.2.0-nightly.49` with its recorded registry integrity. This release includes first-time Fleet setup through the host API for the account App, direct App access to the workspace services with the device credential, v2 positional one-use grants and automatic QR/connection-code output from `ours-fleet setup-tunnel`, optional private file/stdin inputs for legacy v1 payloads, a separate `ours-fleet link-device` command for additional devices, host prerequisite checks before the one-time workspace proof (`setup-tunnel --check`), `setup-tunnel --resume` to finish a setup that stopped after the host saved its private pending setup record (not when the proof's answer was lost, or after the setup window expired with an unconfirmed non-default port), and persists the available Fleet loopback port used by the workspace tunnel. It also accepts a setup-generated configuration left behind after the host enrollment state was removed, runs the host Codex when it is at least as new as the packaged one, offers only the Codex models the signed-in account can use, and removes the temporary setup contact after confirmation. Fleet serves no pages and opens no browser: every screen is in the App. Fleet also serves the workspace notification routes, produces notifications through the server gateway with the imported producer credential, accepts the App's device credential on the notification presence socket so an open App receives no push, and defaults agent wakes to `monitor.interrupt: after_tool` (Hermes: no interrupt; role snapshots saved before this default keep no interrupt). Existing installation identities and configured ports remain retained; a retained-port collision fails safely.
+Workspace setup pins Fleet `1.2.0-nightly.50` with its recorded registry integrity. This release includes first-time Fleet setup through the host API for the account App, direct App access to the workspace services with the device credential, v2 positional one-use grants and automatic QR/connection-code output from `ours-fleet setup-tunnel`, optional private file/stdin inputs for legacy v1 payloads, a separate `ours-fleet link-device` command for additional devices, host prerequisite checks before the one-time workspace proof (`setup-tunnel --check`), `setup-tunnel --resume` to finish a setup that stopped after the host saved its private pending setup record (not when the proof's answer was lost, or after the setup window expired with an unconfirmed non-default port), and persists the available Fleet loopback port used by the workspace tunnel. It also accepts a setup-generated configuration left behind after the host enrollment state was removed, runs the host Codex when it is at least as new as the packaged one, offers only the Codex models the signed-in account can use, and removes the temporary setup contact after confirmation. Fleet serves no pages and opens no browser: every screen is in the App. Fleet also serves the workspace notification routes, produces notifications through the server gateway with the imported producer credential, accepts the App's device credential on the notification presence socket so an open App receives no push, and defaults agent wakes to `monitor.interrupt: after_tool` (Hermes: no interrupt; role snapshots saved before this default keep no interrupt). Existing installation identities and configured ports remain retained; a retained-port collision fails safely.
 
 ### App tunnel setup prerelease sequencing
 
@@ -654,7 +654,7 @@ connection code automatically; the App checks readiness and opens the code field
 Private `--file`/`--stdin` transports remain optional and are the only transports
 for legacy v1 payloads with long-lived credentials.
 
-The nightly installer release manifest selects published Fleet `1.2.0-nightly.49`
+The nightly installer release manifest selects published Fleet `1.2.0-nightly.50`
 and its actual registry integrity through the normal release manifest/source-policy
 generators. This release includes v2 argument and private-input support. The former
 nightly.41 selection predates this capability. Merge and publish the repinned

package/assets/release-lock.json

@@ -13,7 +13,7 @@
         "@ours.network/codex": "1.2.0-nightly.12",
         "@ours.network/cowork": "1.3.3-nightly.20261005.f549477",
         "@ours.network/daemon": "3.8.1-nightly.9",
-        "@ours.network/fleet": "1.2.0-nightly.49",
+        "@ours.network/fleet": "1.2.0-nightly.50",
         "@ours.network/mcp": "1.2.0-nightly.12",
         "@ours.network/messenger-server": "1.0.31-nightly.17",
         "@ours.network/notifications": "0.3.1-nightly.2",
@@ -1002,9 +1002,9 @@
       }
     },
     "node_modules/@ours.network/fleet": {
-      "version": "1.2.0-nightly.49",
-      "resolved": "https://registry.npmjs.org/@ours.network/fleet/-/fleet-1.2.0-nightly.49.tgz",
-      "integrity": "sha512-CbhqgskezARmx8IpH8097geE5UVbrABKR5CK10iX4nR4wf0oRZSMNEV5xNPvm2R20n7dZ5ZWd/mxp4aORZU9Xw==",
+      "version": "1.2.0-nightly.50",
+      "resolved": "https://registry.npmjs.org/@ours.network/fleet/-/fleet-1.2.0-nightly.50.tgz",
+      "integrity": "sha512-5hotA7c/I29Fj6KM3jjDxwmtlt1H5nKCCOWir4G37CqHcYIvMDuTwJKiL7RHR0OYjCdoS3zHj2hEKlwA+06M+A==",
       "license": "FSL-1.1-Apache-2.0",
       "dependencies": {
         "@agentclientprotocol/sdk": "^1.3.0",

package/assets/release.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "channel": "nightly",
-  "installerVersion": "1.2.1-nightly.37",
+  "installerVersion": "1.2.1-nightly.38",
   "packages": {
     "@ours.network/sdk": {
       "version": "3.8.1-nightly.17",
@@ -28,8 +28,8 @@
       "integrity": "sha512-OjnrJ8ZuOfKYT4KAmiRLU7czfiuacs6rShwOvvqxqBaUKcs1UwjsYwHARNb6erMxG4am3xxcE0ItahL+d2vt4A=="
     },
     "@ours.network/fleet": {
-      "version": "1.2.0-nightly.49",
-      "integrity": "sha512-CbhqgskezARmx8IpH8097geE5UVbrABKR5CK10iX4nR4wf0oRZSMNEV5xNPvm2R20n7dZ5ZWd/mxp4aORZU9Xw=="
+      "version": "1.2.0-nightly.50",
+      "integrity": "sha512-5hotA7c/I29Fj6KM3jjDxwmtlt1H5nKCCOWir4G37CqHcYIvMDuTwJKiL7RHR0OYjCdoS3zHj2hEKlwA+06M+A=="
     },
     "@ours.network/mcp": {
       "version": "1.2.0-nightly.12",

package/assets/scripts/runtime/notifications-gateway.mjs

@@ -6,14 +6,14 @@ import { readFileSync, statSync } from 'node:fs';
 const BROWSER = ['cookie', 'origin', 'sec-fetch-site', 'sec-fetch-mode', 'sec-fetch-dest', 'sec-fetch-user'];
 const SERVER_CREDENTIAL = 'x-ours-api-token', PRODUCER = 'x-ours-notifications-producer';
 
-/** Ask the daemon, exactly like the gateway's auth_request, whether a server API credential is valid. */
+/** true: accepted; false: explicitly denied; null: the daemon could not decide. */
 export function daemonCredentialCheck(daemonUrl) {
   return token => new Promise(resolve => {
     const req = request(new URL('/identities', daemonUrl), { method: 'GET', headers: { [SERVER_CREDENTIAL]: token }, timeout: 5000 }, res => {
-      res.resume(); resolve(res.statusCode >= 200 && res.statusCode < 300);
+      res.resume(); resolve(res.statusCode >= 200 && res.statusCode < 300 ? true : [401,403].includes(res.statusCode) ? false : null);
     });
     req.on('timeout', () => req.destroy());
-    req.on('error', () => resolve(false));
+    req.on('error', () => resolve(null));
     req.end();
   });
 }
@@ -30,23 +30,31 @@ export function createNotificationsAdapter({ service, userToken, verifyServerCre
     for (const name of BROWSER) delete req.headers[name];
     const credential = req.headers[SERVER_CREDENTIAL], producer = req.headers[PRODUCER];
     delete req.headers[SERVER_CREDENTIAL]; delete req.headers[PRODUCER];
-    if (credential === undefined) return producer === undefined;
-    if (typeof credential !== 'string' || !credential || !await verifyServerCredential(credential)) return false;
+    if (credential === undefined) return producer === undefined ? 200 : 401;
+    if (typeof credential !== 'string' || !credential) return 401;
+    let verified;
+    try { verified = await verifyServerCredential(credential); } catch { return 503; }
+    if (verified !== true) return verified === false ? 401 : 503;
     const path = new URL(req.url ?? '/', 'http://localhost').pathname;
-    if (producer !== undefined && !(req.method === 'POST' && ['/api/v1/send', '/api/v1/delete-target'].includes(path))) return false;
+    if (producer !== undefined && !(req.method === 'POST' && ['/api/v1/send', '/api/v1/delete-target'].includes(path))) return 401;
     req.headers.authorization = `Bearer ${producer ?? userToken}`;
-    return true;
+    return 200;
   };
   const server = createServer(async (req, res) => {
     if (req.url === '/healthz' && req.method === 'GET') { res.writeHead(200, { 'content-type': 'application/json' }); res.end('{"ok":true}'); return; }
-    if (!await authorize(req)) { res.writeHead(401, { 'content-type': 'application/json', 'cache-control': 'no-store' }); res.end('{"error":"authentication required"}'); return; }
+    const status = await authorize(req);
+    if (status !== 200) {
+      res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store', ...(status === 503 ? { 'retry-after': '1' } : {}) });
+      res.end(status === 503 ? '{"error":{"code":"authentication_unavailable","message":"Server authentication is temporarily unavailable"}}' : '{"error":"authentication required"}'); return;
+    }
     service.server.emit('request', req, res);
   });
   // Upgraded connections leave the HTTP server's connection tracking, so shutdown ends them itself.
   const upgraded = new Set();
   server.on('upgrade', async (req, socket, head) => {
     upgraded.add(socket); socket.once('close', () => upgraded.delete(socket));
-    if (!await authorize(req)) { socket.end('HTTP/1.1 401 Unauthorized\r\nConnection: close\r\nContent-Length: 0\r\n\r\n'); return; }
+    const status = await authorize(req);
+    if (status !== 200) { socket.end(`HTTP/1.1 ${status} ${status === 503 ? 'Service Unavailable' : 'Unauthorized'}\r\nConnection: close\r\n${status === 503 ? 'Retry-After: 1\r\n' : ''}Content-Length: 0\r\n\r\n`); return; }
     service.server.emit('upgrade', req, socket, head);
   });
   return { server, async close() {

package/assets/sources.json

@@ -2,7 +2,7 @@
   "release": {
     "schema": 1,
     "channel": "nightly",
-    "installerVersion": "1.2.1-nightly.37",
+    "installerVersion": "1.2.1-nightly.38",
     "packages": {
       "@ours.network/sdk": {
         "version": "3.8.1-nightly.17",
@@ -29,8 +29,8 @@
         "integrity": "sha512-OjnrJ8ZuOfKYT4KAmiRLU7czfiuacs6rShwOvvqxqBaUKcs1UwjsYwHARNb6erMxG4am3xxcE0ItahL+d2vt4A=="
       },
       "@ours.network/fleet": {
-        "version": "1.2.0-nightly.49",
-        "integrity": "sha512-CbhqgskezARmx8IpH8097geE5UVbrABKR5CK10iX4nR4wf0oRZSMNEV5xNPvm2R20n7dZ5ZWd/mxp4aORZU9Xw=="
+        "version": "1.2.0-nightly.50",
+        "integrity": "sha512-5hotA7c/I29Fj6KM3jjDxwmtlt1H5nKCCOWir4G37CqHcYIvMDuTwJKiL7RHR0OYjCdoS3zHj2hEKlwA+06M+A=="
       },
       "@ours.network/mcp": {
         "version": "1.2.0-nightly.12",
@@ -87,7 +87,7 @@
     },
     "@ours.network/fleet": {
       "type": "npm",
-      "version": "1.2.0-nightly.49"
+      "version": "1.2.0-nightly.50"
     },
     "@ours.network/mcp": {
       "type": "npm",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ours.network/install",
-  "version": "1.2.1-nightly.37",
+  "version": "1.2.1-nightly.38",
   "private": false,
   "description": "The all-in-one ours.network installer: one shared daemon, MCP, cowork, Telegram, Fleet initialization, harness plugins, Human identity, progress UI, and guided next steps.",
   "type": "module",