@ours.network/install 1.2.1-nightly.41 → 1.2.1-nightly.43

package/README.md

@@ -1,3 +1,87 @@
+## Start here: choose what you want
+
+Run `ours-install` with no options. It asks what you would like to do, in terms of goals:
+
+```
+  What would you like to do?
+  > (●) Add collaboration tools to my agent apps (Claude Code, Codex or another app)
+    ( ) Install the complete Ours workspace
+    ( ) Connect my agent apps to an Ours workspace that runs on another computer
+    ( ) Other setups (server only, custom ports or packages)
+```
+
+Your existing agent configuration, skills, plugins and custom settings stay as they are. Ours adds its own tools next to them; it does not replace or reconfigure your setup.
+
+**Collaboration tools** (`--plugin-only`) give the agent apps you already use their own secure Ours identity, so they can message other agents and people, share files and be woken when mail arrives. They install:
+
+- one container: the Ours daemon, published only on `127.0.0.1` (port 3050 by default); nothing else runs;
+- the Ours plugin in each selected app that was found on this computer: Claude Code and/or Codex;
+- the Ours command-line tools and the saved connection in `~/.ours-client`.
+
+No Cowork, Messenger, Telegram, Fleet or gateway containers are installed. Clients reach the daemon through a small prefix inside the daemon container that serves only `/daemon/…`, passes requests through unchanged (the daemon still checks every credential) and refuses every other path.
+
+```sh
+ours-install --plugin-only --state-dir ~/.ours-install --identity-name "Your Name" --integrations claude-code,codex
+```
+
+**The complete workspace** adds rooms per task where you invite other agents and people, task and progress tracking, access from your phone through the Ours App, persistent agents that keep working (Fleet), and orchestration of agents from several vendors.
+
+**Another agent app.** Choose "Another agent app" in the list. At the end the installer prints exact instructions for the version it installed: the prepared plugin folder, the MCP server command (`node <folder>/bin/proxy.mjs`, stdio), the skill file, and the npm package `@ours.network/claude-code@<version>`. The app must be able to run a local stdio MCP server and must set `CLAUDE_CODE_SESSION_ID` to a value unique to each agent session in that server's environment; without it the Ours tools refuse to act. Apps that cannot run MCP servers cannot use Ours this way. Do not use the public GitHub marketplace `adapt-toolkit/ours-claude-marketplace` with this release: it currently selects an older, incompatible plugin.
+
+### Updating
+
+When Ours is already installed, `ours-install` shows the installation and offers:
+
+```
+◆ Ours is already set up on this computer
+  • The complete Ours workspace — folder /home/me/.ours-install, running in Docker
+  What would you like to do?
+  > (●) Update Ours (recommended)
+    ( ) Repair: run setup again with the same choices
+    ( ) Remove Ours from this computer
+    ( ) Cancel
+```
+
+An update keeps the installation's product (collaboration tools or workspace), runtime, folder, identities, data, connected apps and their settings. It never adds workspace parts to a collaboration-tools installation; to switch, remove it first. An unfinished update or setup is offered as "Finish the earlier update or setup". Running the same setup again is safe: it keeps existing identities, and if the server's access credentials were replaced (`ours-install server access-replace`), it issues a fresh client credential.
+
+### Removing Ours completely
+
+```sh
+ours-install remove            # everything Ours created on this computer
+ours-install remove --dry-run  # only show the list
+ours-install remove --state-dir ~/.ours-install   # one installation
+```
+
+The command lists everything it found, grouped (services and containers; identities, keys, messages and settings; connections in your agent apps; persistent agents; programs and downloads; earlier installations), and what it keeps and why. Then it asks you to type `remove ours`. It runs only in a terminal; identities and their private keys exist nowhere else, so they are never deleted without a person confirming. Make a backup first if you may need them: `ours-install server backup server <label> --state-dir <folder>`.
+
+What it removes, and how it proves each item is Ours:
+
+| Item | Proof required |
+| --- | --- |
+| Containers | Compose project of the installation **and** a Compose project folder inside the installation folder (containers inherit image labels, so a label alone is not proof), or the installer's own helper names on its own image |
+| Images | the image ID recorded when this installer built it, or the image an owned container was created from; a name alone is never proof; only the name is removed (`docker image rm <tag>`, never by ID or with force) |
+| Volumes, network | the installation's Compose project label |
+| Build cache | only the record whose description is the installer's own npm cache mount (`id=/ours-dist-2-npm`), pruned by its record ID (`docker buildx prune --filter id=…`); kept while another Ours installation uses the engine |
+| Installation and connection folders | their own record (`installation.json` / `profile.json`) still names the installation; the folder is renamed aside, then deleted |
+| Downloaded programs | the owner record of each download folder; a damaged record keeps the folder |
+| Claude Code / Codex | the Ours plugin and plugin source (through their own CLIs), their Ours entries in `settings.json` / `config.toml`, and their cached copy of the Ours plugin, only when the source points into Ours downloads |
+| Ours tool records `~/.ours-mcp` | only the rows and session folders of the removed installation |
+| Persistent agents (Fleet) | services that reference this Ours connection, Fleet configuration and state set up by this client |
+| Earlier installations | old daemon and connector services, verified stopped first; marked plugin sections and old skills |
+
+It keeps Docker, Node.js, npm, Claude Code and Codex, your other settings, skills and plugins, shared images such as `node:24`, other build cache records, containers and images it cannot prove, and the temporary session guards in `/tmp/ours-<uid>` that every Ours tool session of your user shares.
+
+If something cannot be removed, the summary says exactly what and why, the command exits with status 1 and keeps a small retry record (`~/.ours-removal.json`, identities only). Fix the reason and run `ours-install remove` again; it continues where it stopped:
+
+```
+◆ Removal summary
+  ! Some Ours items could not be removed yet:
+  !   - Container images of ours-235c4591528dc8a6 — ours-235c4591528dc8a6:runtime is still used by container user-made, which Ours did not create; remove that container if you no longer need it
+  • Fix the reason shown, then run ours-install remove again; it continues from where it stopped.
+```
+
+Running it when nothing is left changes nothing and says so.
+
 ## Install first, connect the App afterwards
 
 ```sh

package/assets/Dockerfile

@@ -28,6 +28,7 @@ COPY --chmod=644 scripts/runtime/legacy-import.mjs /opt/ours/docker/legacy-impor
 COPY --chmod=644 scripts/runtime/entrypoint.sh /opt/ours/docker/entrypoint.sh
 COPY --chmod=644 scripts/runtime/healthcheck.mjs /opt/ours/docker/healthcheck.mjs
 COPY --chmod=644 scripts/runtime/start-telegram.sh scripts/runtime/health-telegram.sh scripts/runtime/start-cowork.sh scripts/runtime/health-cowork.sh scripts/runtime/start-messenger.sh scripts/runtime/health-messenger.mjs scripts/runtime/notifications-gateway.mjs scripts/runtime/supervise.mjs scripts/runtime/recover.mjs scripts/runtime/dependency-ready.mjs /opt/ours/docker/
+COPY --chmod=644 scripts/runtime/daemon-client-prefix.mjs /opt/ours/docker/daemon-client-prefix.mjs
 RUN chmod 755 /opt/ours/maintenance /opt/ours/docker
 FROM node:24 AS maintenance
 LABEL network.ours.build-context="1"

package/assets/release-lock.json

@@ -429,9 +429,9 @@
       }
     },
     "node_modules/@agentclientprotocol/sdk": {
-      "version": "1.7.0",
-      "resolved": "https://registry.npmjs.org/@agentclientprotocol/sdk/-/sdk-1.7.0.tgz",
-      "integrity": "sha512-ZORuxsuEnLjRly7t6Ad7zAsWitjWsyprswyPUHz/yycPb+tTm3DGa8XheaHhRXqX8LS9snuxaYavXSRA50TlHw==",
+      "version": "1.8.0",
+      "resolved": "https://registry.npmjs.org/@agentclientprotocol/sdk/-/sdk-1.8.0.tgz",
+      "integrity": "sha512-fbP7qHZsFyTJVT0/RPrcWJ8An26qLXHEuGCHHEKDyxD1xpXV+Ejyh2LAE6vBAFePkpVjZeeohnbgvuEhZ7wLMg==",
       "license": "Apache-2.0",
       "peerDependencies": {
         "zod": "^3.25.0 || ^4.0.0"
@@ -542,9 +542,9 @@
       ]
     },
     "node_modules/@anthropic-ai/sdk": {
-      "version": "0.132.1",
-      "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.132.1.tgz",
-      "integrity": "sha512-Dg+Rd0effi+4FyNwgEx6JXl9COefsZ3C7BOPSKYIWboQOEIi9HXtu1WBdND0DIgMF7Qt1vuCSjsbs7sjUkzJuQ==",
+      "version": "0.133.0",
+      "resolved": "https://registry.npmjs.org/@anthropic-ai/sdk/-/sdk-0.133.0.tgz",
+      "integrity": "sha512-jlqUN8p8ESTJj+GJnA4KjzbEfF1waEoGzRT8jwytlYGFFgv+/DUQOxlYGvYw10UzhD1kwLqYzxvA3FrTB2YWuQ==",
       "license": "MIT",
       "optional": true,
       "peer": true,
@@ -712,9 +712,9 @@
       }
     },
     "node_modules/@fastify/websocket": {
-      "version": "11.3.3",
-      "resolved": "https://registry.npmjs.org/@fastify/websocket/-/websocket-11.3.3.tgz",
-      "integrity": "sha512-NBJoykKpFwrdX9Ezod1rt30p5NoPFu7vgeuUowSM3JVI5/hFNRPhetqkWMTiF/ifIzctwitbJut1gZ6FDg1mwQ==",
+      "version": "11.3.4",
+      "resolved": "https://registry.npmjs.org/@fastify/websocket/-/websocket-11.3.4.tgz",
+      "integrity": "sha512-firnJtEOv6pfdoXIzFDMbd+omgWwFNfLtdM8JejNFr/9lT/9DHkEhjTShuRFeE4phqrevD2B3JRW0v6uyzWhHQ==",
       "funding": [
         {
           "type": "github",
@@ -1426,9 +1426,9 @@
       }
     },
     "node_modules/content-disposition": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
-      "integrity": "sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==",
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-2.0.1.tgz",
+      "integrity": "sha512-e+H0ZXHSWYrENhQzw1LPuP4oF5MzVKmDU6d3hxlvaPEYLLg62MxtQNPRx4SYSuYJSBUgnQIG4HIN2tEtNv7Dog==",
       "license": "MIT",
       "engines": {
         "node": ">=18"
@@ -1753,15 +1753,15 @@
       }
     },
     "node_modules/express": {
-      "version": "5.2.1",
-      "resolved": "https://registry.npmjs.org/express/-/express-5.2.1.tgz",
-      "integrity": "sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==",
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/express/-/express-5.3.0.tgz",
+      "integrity": "sha512-qCqy1xSoaugxOD4IVHb1ZWdkvCF2W3aE2okKouWj8VwJ+ztskSiXoBnCSJqfKT+cVPJhuJqe9YLbY425+Zh00g==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^2.0.0",
-        "body-parser": "^2.2.1",
-        "content-disposition": "^1.0.0",
-        "content-type": "^1.0.5",
+        "body-parser": "^2.3.0",
+        "content-disposition": "^2.0.1",
+        "content-type": "^2.0.0",
         "cookie": "^0.7.1",
         "cookie-signature": "^1.2.1",
         "debug": "^4.4.0",
@@ -1777,14 +1777,14 @@
         "on-finished": "^2.4.1",
         "once": "^1.4.0",
         "parseurl": "^1.3.3",
-        "proxy-addr": "^2.0.7",
-        "qs": "^6.14.0",
+        "proxy-addr": "^2.0.8",
+        "qs": "^6.16.0",
         "range-parser": "^1.2.1",
         "router": "^2.2.0",
         "send": "^1.1.0",
         "serve-static": "^2.2.0",
         "statuses": "^2.0.1",
-        "type-is": "^2.0.1",
+        "type-is": "^2.1.0",
         "vary": "^1.1.2"
       },
       "engines": {
@@ -1814,6 +1814,19 @@
         "express": ">= 4.11"
       }
     },
+    "node_modules/express/node_modules/content-type": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-2.1.0.tgz",
+      "integrity": "sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/fast-decode-uri-component": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/fast-decode-uri-component/-/fast-decode-uri-component-1.0.1.tgz",

package/assets/release.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "channel": "nightly",
-  "installerVersion": "1.2.1-nightly.41",
+  "installerVersion": "1.2.1-nightly.43",
   "packages": {
     "@ours.network/sdk": {
       "version": "3.8.1-nightly.17",

package/assets/scripts/build/build-common.mjs

@@ -8,7 +8,15 @@ export const SOURCE_ROOT = resolve(process.env.OURS_SOURCE_ROOT || '/src');
 export const OUT = join(ROOT, 'docker/vendor');
 export const CONFIG = JSON.parse(readFileSync(join(ROOT, 'sources.json'), 'utf8'));
 // Notifications joined the server set later; retained selections without it still build.
-export const SELECTED = new Set((process.env.OURS_BUILD_PACKAGES || ['sdk,cli,daemon,tg-connector,cowork,messenger-server', ...(CONFIG.packages?.['@ours.network/notifications'] ? ['notifications'] : [])].join(',')).split(',').map(name => '@ours.network/' + name));
+// A plugin-only server selection names only sdk, cli and daemon, and builds only those.
+const APPLICATIONS = ['tg-connector', 'cowork', 'messenger-server', 'notifications'];
+export const SELECTED = new Set((process.env.OURS_BUILD_PACKAGES || ['sdk', 'cli', 'daemon',
+  ...APPLICATIONS.filter(name => name !== 'notifications' || CONFIG.packages?.['@ours.network/notifications'])
+    .filter(name => !isDaemonOnly(CONFIG) || CONFIG.packages?.['@ours.network/' + name])].join(',')).split(',').map(name => '@ours.network/' + name));
+function isDaemonOnly(config) {
+  const names = Object.keys(config.packages ?? {}).sort().join(',');
+  return names === '@ours.network/cli,@ours.network/daemon,@ours.network/sdk';
+}
 export const inheritedLock = process.env.OURS_INSTALLER_LOCK_FD === '3' ? [3] : [];
 export const run = (args, cwd) => execFileSync(args[0], args.slice(1), { cwd, stdio: ['inherit', 'inherit', 'inherit', ...inheritedLock] });
 export const capture = (args, cwd, env = process.env) => execFileSync(args[0], args.slice(1), { cwd, env, encoding: 'utf8', stdio: ['ignore', 'pipe', 'inherit', ...inheritedLock] });

package/assets/scripts/maintenance/docker-layout-conversion.mjs

@@ -101,11 +101,21 @@ export function bindDockerLayout(staging, options) {
   fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\n');
 }
 
+/** The installation's applications: all four, or the daemon alone for collaboration tools. */
+export function selectedComponents(env = process.env) {
+  const raw = env.OURS_SERVER_APPLICATIONS;
+  if (raw === undefined || raw === '') return COMPONENTS;
+  const selected = raw.split(',');
+  if (selected[0] !== 'daemon' || new Set(selected).size !== selected.length || selected.some(name => !COMPONENTS.includes(name))) throw new Error('invalid OURS_SERVER_APPLICATIONS selection');
+  return selected;
+}
+
 /** Offline validation also covers components intentionally left stopped. */
 export function validateDockerLayout(tree, options) {
+  const components = options.components ?? COMPONENTS;
   validateBuildRecordSet(options.provenance);
   scanSource(tree, options);
-  for (const component of COMPONENTS) {
+  for (const component of components) {
     if (fs.readdirSync(join(tree, component, '.ours-provenance')).sort().join() !== recordNames(options.provenance).sort().join()) throw new Error('Mixed component provenance');
     for (const name of recordNames(options.provenance)) {
       if (!privateBytes(join(tree, component, '.ours-provenance', name), options).equals(options.provenance[name])) {
@@ -123,11 +133,11 @@ export function validateDockerLayout(tree, options) {
   if (daemon.stateDir !== DAEMON_STATE || daemon.port !== 3050
     || (daemon.networkMcp !== undefined && (daemon.networkMcp?.applicationConfigPath !== join(MCP_STATE, 'config.json')
       || JSON.stringify(daemon.networkMcp?.profile) !== JSON.stringify(profile)))
-    || objectAt(join(tree, 'cowork/config.json'), options).stateDir !== '/var/lib/ours-cowork') {
+    || (components.includes('cowork') && objectAt(join(tree, 'cowork/config.json'), options).stateDir !== '/var/lib/ours-cowork')) {
     throw new Error('Converted Docker deployment configuration is inconsistent');
   }
   if (fs.existsSync(join(tree, 'mcp/config.json'))) objectAt(join(tree, 'mcp/config.json'), options);
-  for (const path of ['daemon/daemon-token', ...COMPONENTS.filter(name => name !== 'daemon').map(name => `credentials/${name}/daemon-token`)]) {
+  for (const path of ['daemon/daemon-token', ...components.filter(name => name !== 'daemon').map(name => `credentials/${name}/daemon-token`)]) {
     if (!privateBytes(join(tree, path), options).length) throw new Error('Converted managed credential is empty');
   }
 }
@@ -214,13 +224,14 @@ export async function runDockerLayoutCommand(argv, env = process.env) {
     cli: daemonOwner({ OURS_DAEMON_BIN_DIR: '/opt/ours/node_modules/.bin', ...env }),
     configPath: env.OURS_DAEMON_CONFIG || '/var/lib/ours/config.json',
     provenance: readBuildRecords(build),
+    components: selectedComponents(env),
   };
   if (!options.uid || !options.gid) throw new Error('Conversion requires a non-root owner');
   if (operation === 'cleanup') {
     console.log(JSON.stringify({ emptyVolumes: cleanupDockerSource(source, options) }));
     return;
   }
-  try {
+  if (options.components.includes('cowork')) try {
     execFileSync(env.OURS_COWORK_CLI_PATH || '/opt/ours/node_modules/.bin/ours-cowork', ['--json', 'prepare-backup'], {
       env: { ...env, OURS_COWORK_CONFIG: env.OURS_COWORK_CONFIG || '/var/lib/ours-cowork/config.json',
         OURS_COWORK_STATE_DIR: env.OURS_COWORK_STATE_DIR || '/var/lib/ours-cowork' },

package/assets/scripts/maintenance/recover-notifications.mjs

@@ -4,7 +4,17 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { runStateOperation } from './state-operation.mjs';
 
-const root = fs.mkdtempSync(join(tmpdir(), 'ours-notifications-recovery-'));
+// The shipped state-operation service is read_only without a /tmp tmpfs, and
+// retained Compose definitions cannot gain one. /dev/shm stays a writable
+// in-memory mount there, so evidence never enters the stored-state volume.
+function scratch() {
+  for (const base of [tmpdir(), '/dev/shm']) {
+    try { return fs.mkdtempSync(join(base, 'ours-notifications-recovery-')); }
+    catch (error) { if (!['EROFS', 'EACCES', 'ENOENT'].includes(error.code)) throw error; }
+  }
+  throw new Error('No writable private scratch directory for recovery evidence');
+}
+const root = scratch();
 fs.chmodSync(root, 0o700);
 try {
   const evidence = JSON.parse(fs.readFileSync(0, 'utf8'));

package/assets/scripts/maintenance/state-operation.mjs

@@ -13,6 +13,14 @@ import { daemonOwner } from './daemon-owner.mjs';
 
 const PROVENANCE = '.ours-provenance';
 const APPLICATIONS = ['daemon', 'telegram', 'cowork', 'messenger'];
+/** The installation's applications; plugin-only installations select only the daemon. */
+export function selectedApplications(env = process.env) {
+  const raw = env.OURS_SERVER_APPLICATIONS;
+  if (raw === undefined || raw === '') return APPLICATIONS;
+  const selected = raw.split(',');
+  if (selected[0] !== 'daemon' || new Set(selected).size !== selected.length || selected.some(name => !APPLICATIONS.includes(name))) fail('invalid OURS_SERVER_APPLICATIONS selection');
+  return selected;
+}
 const exists = path => { try { fs.lstatSync(path); return true; } catch (e) { if (e.code === 'ENOENT') return false; throw e; } };
 const canonical = path => exists(path) ? fs.realpathSync(path) : join(canonical(dirname(path)), basename(path));
 const sameRecords = (a, b) => recordNames(a).length === recordNames(b).length && recordNames(a).every(name => a[name].equals(b[name]));
@@ -26,11 +34,13 @@ export async function runStateOperation(argv, env = process.env, checkpoints = {
     if (!value || resolve(value) !== value || canonical(value) !== value) fail(`${name} must select an absolute canonical path`);
     return value;
   };
+  const applications = selectedApplications(env);
   const state = selected('OURS_STATE_ROOT'), live = selected('OURS_LIVE_ROOT'), build = selected('OURS_BUILD_ROOT');
   if ([state, build].some(path => path === live || path.startsWith(live + '/'))) fail('maintenance and build records must be outside live application state');
   const backups = join(state, 'backups'), maintenance = join(state, '.maintenance');
   const domain = argv[1];
   if (![...APPLICATIONS, 'server'].includes(domain)) fail('select server, daemon, telegram, cowork or messenger');
+  if (domain !== 'server' && !applications.includes(domain)) fail(`${domain} is not part of this installation`);
   if (Object.hasOwn(env, 'OURS_STATE_DOMAIN') && env.OURS_STATE_DOMAIN !== domain) fail('selected volume domain does not match operation');
   const compatible = argv.at(-1) === '--compatible';
   if (compatible) argv = argv.slice(0, -1);
@@ -76,6 +86,7 @@ export async function runStateOperation(argv, env = process.env, checkpoints = {
   }
   function prepare() {
     if (!['server', 'cowork'].includes(domain) && !paired) return;
+    if (!applications.includes('cowork')) return;
     if (!env.OURS_COWORK_CLI_PATH || !env.OURS_COWORK_CONFIG) fail('Cowork maintenance requires its selected executable and configuration');
     owner([env.OURS_COWORK_CLI_PATH, '--json', 'prepare-backup'], { OURS_COWORK_CONFIG: env.OURS_COWORK_CONFIG });
   }
@@ -88,7 +99,7 @@ export async function runStateOperation(argv, env = process.env, checkpoints = {
     } catch (e) { fs.closeSync(fd); throw e; }
   }
   function validateTree(tree, records) {
-    const roots = domain === 'server' ? APPLICATIONS.map(name => join(tree, name)) : [tree];
+    const roots = domain === 'server' ? applications.map(name => join(tree, name)) : [tree];
     // Notifications shares Messenger's service, but owns a separate state directory.
     // Older installations/backups may contain only its empty mount placeholder.
     // Include every retained notification generation in full-server maintenance.
@@ -152,7 +163,7 @@ export async function runStateOperation(argv, env = process.env, checkpoints = {
         fs.chmodSync(path, 0o600);
       }
     }
-    if (['server', 'cowork'].includes(domain)) bindConfig(join(tree, domain === 'server' ? 'cowork/config.json' : 'config.json'), env.OURS_COWORK_CONFIG, ['version', 'stateDir', 'rest']);
+    if (['server', 'cowork'].includes(domain) && applications.includes('cowork')) bindConfig(join(tree, domain === 'server' ? 'cowork/config.json' : 'config.json'), env.OURS_COWORK_CONFIG, ['version', 'stateDir', 'rest']);
   }
   function retainAuthority(staging) {
     if (!['daemon', 'server'].includes(domain)) return;
@@ -161,7 +172,7 @@ export async function runStateOperation(argv, env = process.env, checkpoints = {
     owner([daemonOwner(env), 'config', 'access-retain', '--config', env.OURS_DAEMON_CONFIG, '--target-state-dir', daemon, '--json']);
     if (!commonTree) return;
     const credentials = join(live, 'credentials'), destination = join(staging, 'credentials');
-    for (const name of ['telegram', 'cowork', 'messenger']) if (!privateStat(join(credentials, name, 'daemon-token'), false, 0o600).size) fail('current managed credential is empty');
+    for (const name of applications.filter(name => name !== 'daemon')) if (!privateStat(join(credentials, name, 'daemon-token'), false, 0o600).size) fail('current managed credential is empty');
     fs.rmSync(destination, { recursive: true }); copyTree(credentials, destination);
   }
   function replace(staging) {
@@ -191,7 +202,7 @@ export async function runStateOperation(argv, env = process.env, checkpoints = {
       const previous = readRecords(selected('OURS_PREVIOUS_BUILD_ROOT'), false);
       const expected = readRecords(selected('OURS_EXPECTED_BUILD_ROOT'), false);
       if (!sameRecords(target, expected)) fail('recovery runtime differs from the retained candidate');
-      const core = APPLICATIONS.map(name => readRecords(join(live, name, PROVENANCE)));
+      const core = applications.map(name => readRecords(join(live, name, PROVENANCE)));
       const oldCore = core.every(records => sameRecords(records, previous));
       const newCore = core.every(records => sameRecords(records, target));
       if (!newCore && !(env.OURS_RECOVERY_PHASE === 'prepared' && oldCore)) fail('recovery core provenance differs from the retained candidate');

package/assets/scripts/runtime/client-setup.mjs

@@ -7,12 +7,18 @@ import {
   realpathSync, renameSync, unlinkSync, writeFileSync, readdirSync, chmodSync, chownSync,
 } from 'node:fs';
 
-const DELIVERY_FILES = [
-  '/credentials/telegram/daemon-token',
-  '/credentials/cowork/daemon-token',
-  '/credentials/messenger/daemon-token',
-];
 const fail = (message) => { throw new Error(message); };
+/** Applications of this installation; plugin-only installations have only the daemon. */
+const APPLICATIONS = (() => {
+  const all = ['daemon', 'telegram', 'cowork', 'messenger'];
+  const raw = process.env.OURS_SERVER_APPLICATIONS;
+  if (raw === undefined || raw === '') return all;
+  const selected = raw.split(',');
+  if (selected[0] !== 'daemon' || new Set(selected).size !== selected.length || selected.some(name => !all.includes(name))) fail('Invalid OURS_SERVER_APPLICATIONS selection');
+  return selected;
+})();
+const CONSUMERS = APPLICATIONS.filter(name => name !== 'daemon');
+const DELIVERY_FILES = CONSUMERS.map(name => `/credentials/${name}/daemon-token`);
 let diagnosticStage = 'validation';
 const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
 
@@ -153,11 +159,11 @@ function prepare() {
   process.umask(0o077);
   validateCommon();
   for (const path of ['/storage/state', '/storage/state/mcp', '/storage/state/credentials',
-    ...['telegram', 'cowork', 'messenger'].map(name => `/storage/state/credentials/${name}`),
+    ...CONSUMERS.map(name => `/storage/state/credentials/${name}`),
     '/storage/backups', '/storage/.maintenance']) ensureDirectory(path);
   const coworkPort = Number(process.env.OURS_COWORK_REST_PORT);
   if (!Number.isSafeInteger(coworkPort) || coworkPort < 1 || coworkPort > 65535) fail('Configure a valid cowork REST port');
-  for (const domain of ['daemon', 'telegram', 'cowork', 'messenger']) {
+  for (const domain of APPLICATIONS) {
     const data = `/storage/state/${domain}`;
     ensureDirectory(data);
     // access-init owns the fresh-state check; no installer files enter daemon
@@ -173,14 +179,16 @@ function prepare() {
       fail('Existing daemon configuration differs; use the supported maintenance workflow');
     }
   } else atomicJson(path, expected);
-  const coworkPath = '/storage/state/cowork/config.json';
-  const cowork = composeConfig('cowork');
-  if (!existingPrivate(coworkPath, false)) atomicJson(coworkPath, cowork);
-  else {
-    const config = jsonObject(coworkPath);
-    if (config.version !== 1 || config.stateDir !== cowork.stateDir || config.rest?.enabled !== true || config.rest?.host !== '0.0.0.0') fail('Existing cowork configuration conflicts with Compose');
+  if (APPLICATIONS.includes('cowork')) {
+    const coworkPath = '/storage/state/cowork/config.json';
+    const cowork = composeConfig('cowork');
+    if (!existingPrivate(coworkPath, false)) atomicJson(coworkPath, cowork);
+    else {
+      const config = jsonObject(coworkPath);
+      if (config.version !== 1 || config.stateDir !== cowork.stateDir || config.rest?.enabled !== true || config.rest?.host !== '0.0.0.0') fail('Existing cowork configuration conflicts with Compose');
+    }
   }
-  prepareNotifications();
+  if (APPLICATIONS.includes('messenger')) prepareNotifications();
   console.log('OURS persistent volumes are ready');
 }
 
@@ -258,7 +266,10 @@ function exactKeys(value, allowed, label) {
 try {
   const operation = process.argv[2];
   if (operation === 'prepare') prepare();
-  else if (operation === 'telegram-input') { prepare(); await telegramInput(); }
+  else if (operation === 'telegram-input') {
+    if (!APPLICATIONS.includes('telegram')) fail('This installation has no Telegram connector');
+    prepare(); await telegramInput();
+  }
   else if (['access-init', 'access-issue', 'access-replace'].includes(operation)) access(operation, process.argv[3]);
   else fail('usage: client-setup.mjs prepare | telegram-input | access-init | access-issue [OUTPUT] | access-replace');
 } catch (error) {

package/assets/scripts/runtime/daemon-client-prefix.mjs

@@ -0,0 +1,115 @@
+import { spawn } from 'node:child_process';
+import { createServer, request } from 'node:http';
+import { connect } from 'node:net';
+import { pathToFileURL } from 'node:url';
+
+/**
+ * Plugin-only installations run no gateway container. Current client releases
+ * still address the daemon as <serverUrl>/daemon, so the daemon container itself
+ * serves that one prefix. Requests and responses pass through unchanged, including
+ * the client's own credential and instance checks; nothing is added or injected.
+ * Any other path, method form or host-absolute target is refused.
+ */
+export const PREFIX = '/daemon';
+export const CAPABILITY = 'ours.daemon-prefix-v1';
+const HOP = ['connection', 'keep-alive', 'proxy-connection', 'transfer-encoding', 'te', 'trailer', 'upgrade'];
+
+/** Only origin-form targets under the prefix; the remainder is the daemon path. */
+export function daemonPath(target) {
+  if (typeof target !== 'string' || !target.startsWith(PREFIX + '/') || /[\s\\]/.test(target)) return null;
+  const rest = target.slice(PREFIX.length);
+  // A dot segment could step out of the prefix once normalized by the daemon.
+  for (const segment of rest.split('?')[0].split('/')) {
+    let decoded;
+    try { decoded = decodeURIComponent(segment); } catch { return null; }
+    if (decoded === '.' || decoded === '..' || decoded.includes('/')) return null;
+  }
+  return rest;
+}
+
+export function discovery(instanceId) {
+  return { schema: 1, instanceId, services: { daemon: PREFIX }, capabilities: [CAPABILITY] };
+}
+
+/** Headers as received, minus hop-by-hop ones; repeated headers keep every value. */
+function headersFor(raw) {
+  const headers = {};
+  for (let i = 0; i < raw.length; i += 2) {
+    const name = raw[i].toLowerCase();
+    if (HOP.includes(name)) continue;
+    if (!Object.hasOwn(headers, name)) headers[name] = raw[i + 1];
+    else if (name === 'set-cookie') headers[name] = [].concat(headers[name], raw[i + 1]);
+    else headers[name] = `${headers[name]}, ${raw[i + 1]}`;
+  }
+  return headers;
+}
+
+export function createPrefixServer({ upstreamPort = 3050, upstreamHost = '127.0.0.1', instanceId }) {
+  const reply = (res, status, body) => {
+    res.writeHead(status, { 'content-type': 'application/json', 'cache-control': 'no-store' });
+    res.end(JSON.stringify(body));
+  };
+  const server = createServer((req, res) => {
+    if (req.url === '/.well-known/ours' && req.method === 'GET') return reply(res, 200, discovery(instanceId));
+    if (req.url === PREFIX) { res.writeHead(308, { location: PREFIX + '/' }); res.end(); return; }
+    const path = daemonPath(req.url);
+    if (path === null) return reply(res, 404, { error: 'not found' });
+    const upstream = request({ host: upstreamHost, port: upstreamPort, method: req.method, path, headers: headersFor(req.rawHeaders) }, response => {
+      res.writeHead(response.statusCode ?? 502, headersFor(response.rawHeaders));
+      response.pipe(res);
+      response.on('error', () => res.destroy());
+    });
+    upstream.on('error', () => { if (!res.headersSent) reply(res, 502, { error: 'daemon unavailable' }); else res.destroy(); });
+    // A client that goes away cancels its long poll or stream at the daemon too.
+    res.on('close', () => { if (!res.writableFinished) upstream.destroy(); });
+    req.pipe(upstream);
+  });
+  server.on('upgrade', (req, socket, head) => {
+    const path = daemonPath(req.url);
+    if (path === null) { socket.end('HTTP/1.1 404 Not Found\r\nConnection: close\r\nContent-Length: 0\r\n\r\n'); return; }
+    const upstream = connect(upstreamPort, upstreamHost, () => {
+      const lines = [`${req.method} ${path} HTTP/1.1`];
+      for (let i = 0; i < req.rawHeaders.length; i += 2) lines.push(`${req.rawHeaders[i]}: ${req.rawHeaders[i + 1]}`);
+      upstream.write(lines.join('\r\n') + '\r\n\r\n');
+      if (head?.length) upstream.write(head);
+      upstream.pipe(socket); socket.pipe(upstream);
+    });
+    const close = () => { upstream.destroy(); socket.destroy(); };
+    upstream.on('error', close); socket.on('error', close);
+    upstream.on('close', () => socket.destroy()); socket.on('close', () => upstream.destroy());
+  });
+  // Absolute-form ("GET http://host/...") and CONNECT never reach the daemon.
+  server.on('connect', (req, socket) => socket.end('HTTP/1.1 405 Method Not Allowed\r\nConnection: close\r\nContent-Length: 0\r\n\r\n'));
+  return server;
+}
+
+/**
+ * Run the daemon's own locked, recovering entrypoint as the single child and
+ * serve the prefix beside it. Either one ending stops the other, so the
+ * container exits and its restart policy recovers both together.
+ */
+async function main() {
+  const port = Number(process.env.OURS_DAEMON_CLIENT_PREFIX_PORT);
+  const instanceId = process.env.OURS_DAEMON_ID ?? '';
+  if (!Number.isInteger(port) || port < 1 || port > 65535 || !/^[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}$/.test(instanceId)) {
+    console.error('OURS daemon client prefix requires a port and the daemon UUID'); process.exit(2);
+  }
+  const runtime = process.env.OURS_RUNTIME_ROOT ?? '/opt/ours';
+  const child = spawn('/bin/sh', ['-e', `${runtime}/docker/entrypoint.sh`], { stdio: 'inherit' });
+  const server = createPrefixServer({ instanceId });
+  let stopping = false;
+  const stop = (signal, code) => {
+    if (stopping) return;
+    stopping = true;
+    server.close();
+    if (child.exitCode === null && child.signalCode === null) child.kill(signal);
+    else process.exit(code);
+  };
+  child.on('exit', (code, signal) => { server.close(); process.exit(code ?? (signal ? 1 : 0)); });
+  child.on('error', () => { server.close(); process.exit(1); });
+  server.on('error', error => { console.error(`OURS daemon client prefix stopped: ${error.code ?? error.message}`); stop('SIGTERM', 1); });
+  for (const signal of ['SIGTERM', 'SIGINT']) process.on(signal, () => stop(signal, 0));
+  server.listen(port, '0.0.0.0', () => console.error(`OURS daemon client prefix ready on ${PREFIX}`));
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) await main();

package/assets/sources.json

@@ -2,7 +2,7 @@
   "release": {
     "schema": 1,
     "channel": "nightly",
-    "installerVersion": "1.2.1-nightly.41",
+    "installerVersion": "1.2.1-nightly.43",
     "packages": {
       "@ours.network/sdk": {
         "version": "3.8.1-nightly.17",

package/lib/docker-conversion-runtime.mjs

@@ -1,4 +1,5 @@
 import { runContainer } from './container-engine.mjs';
+import { isPluginOnly } from './product.mjs';
 import * as fs from 'node:fs';
 import { join } from 'node:path';
 import { randomUUID } from 'node:crypto';
@@ -64,7 +65,8 @@ export async function runDockerConversion(record, selected, operation, label, ef
     }
   } else {
     addMount('storage', '/var/lib/ours', 'state/daemon', true);
-    addMount('storage', '/var/lib/ours-cowork', 'state/cowork', false);
+    // A collaboration-tools installation has no Cowork state to mount.
+    if (!isPluginOnly(record)) addMount('storage', '/var/lib/ours-cowork', 'state/cowork', false);
   }
   const definition = {
     services: {
@@ -74,7 +76,7 @@ export async function runDockerConversion(record, selected, operation, label, ef
         network_mode: 'none', read_only: true, cap_drop: ['ALL'],
         security_opt: ['no-new-privileges:true'], tmpfs: ['/tmp:rw,nosuid,nodev,noexec,size=64m,mode=1777'],
         entrypoint: ['node', '/opt/ours/docker/docker-layout-conversion.mjs'],
-        environment: { HOME: '/tmp', OURS_DAEMON_ID: record.instanceId },
+        environment: { HOME: '/tmp', OURS_DAEMON_ID: record.instanceId, OURS_SERVER_APPLICATIONS: isPluginOnly(record) ? 'daemon' : '' },
         volumes: mounts,
       },
     },