@ouro.bot/cli 0.1.0-alpha.230 → 0.1.0-alpha.231

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.231",
+      "changes": [
+        "fix: defense-in-depth group chat blocking for proactive BB delivery — sendProactiveBlueBubblesMessageToSession now rejects group chat keys (;+;) unless intent is explicit_cross_chat (bridge/delegation responses). All upper-layer paths (surface tool, send_message tool, inner-dialog delegation) now filter to DM sessions only for proactive outreach, and pass explicit_cross_chat intent for bridge/delegation returns where group responses are legitimate."
+      ]
+    },
     {
       "version": "0.1.0-alpha.230",
       "changes": [

package/dist/repertoire/tools-session.js

@@ -592,11 +592,10 @@ exports.sessionToolDefinitions = [
                     const bbDir = path.join(agentRoot, "state", "sessions", friendId, "bluebubbles");
                     if (fs.existsSync(bbDir)) {
                         const files = fs.readdirSync(bbDir).filter((f) => f.endsWith(".json"));
-                        // Prefer individual chats (;-;) over group chats (;+;) for proactive DMs
+                        // Only use DM sessions (;-;) for proactive delivery — never group chats (;+;)
                         const dmFile = files.find((f) => f.includes(";-;"));
-                        const chosen = dmFile ?? files[0];
-                        if (chosen) {
-                            resolvedKey = chosen.replace(/\.json$/, "");
+                        if (dmFile) {
+                            resolvedKey = dmFile.replace(/\.json$/, "");
                         }
                     }
                 }

package/dist/repertoire/tools-surface.js

@@ -118,6 +118,7 @@ exports.surfaceToolDefinition = {
                                     friendId: bridgeTarget.friendId,
                                     sessionKey: bridgeTarget.key,
                                     text: content,
+                                    intent: "explicit_cross_chat",
                                 });
                                 if (proactiveResult.delivered) {
                                     // Inject surfaced content into the target session so it knows what was delivered
@@ -145,8 +146,8 @@ exports.surfaceToolDefinition = {
                 // Priority 2: Try proactive delivery first, then queue to freshest session
                 const allFriendSessions = (0, session_activity_1.listSessionActivity)({ sessionsDir, friendsDir, agentName, activeThresholdMs: Number.MAX_SAFE_INTEGER })
                     .filter((s) => s.friendId === friendId && s.channel !== "inner");
-                // 2a: Attempt proactive BB delivery on any BB session (prefer freshest)
-                const bbSession = allFriendSessions.find((s) => s.channel === "bluebubbles");
+                // 2a: Attempt proactive BB delivery on a DM session (;-; = individual, never ;+; = group)
+                const bbSession = allFriendSessions.find((s) => s.channel === "bluebubbles" && s.key.includes(";-;"));
                 if (bbSession) {
                     const { sendProactiveBlueBubblesMessageToSession } = await Promise.resolve().then(() => __importStar(require("../senses/bluebubbles")));
                     const proactiveResult = await sendProactiveBlueBubblesMessageToSession({

package/dist/senses/bluebubbles/index.js

@@ -1137,6 +1137,21 @@ async function sendProactiveBlueBubblesMessageToSession(params, deps = {}) {
         });
         return { delivered: false, reason: "missing_target" };
     }
+    // Proactive outreach to individuals must go to DMs, never group chats.
+    // Explicit cross-chat responses (bridge completions, delegation returns) ARE allowed to groups
+    // because the request originated from that group.
+    /* v8 ignore start -- group gate: only fires when proactive send targets a group session @preserve */
+    if (chat.isGroup && params.intent !== "explicit_cross_chat") {
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "senses",
+            event: "senses.bluebubbles_proactive_group_blocked",
+            message: "proactive send blocked: would route to group chat",
+            meta: { friendId: params.friendId, sessionKey: params.sessionKey, chatGuid: chat.chatGuid ?? null, intent: params.intent ?? null },
+        });
+        return { delivered: false, reason: "group_blocked" };
+    }
+    /* v8 ignore stop */
     try {
         await client.sendText({ chat, text: params.text });
         (0, runtime_1.emitNervesEvent)({

package/dist/senses/inner-dialog.js

@@ -300,6 +300,7 @@ async function tryDeliverDelegatedCompletion(target, outboundEnvelope) {
         friendId: target.friendId,
         sessionKey: target.key,
         text: outboundEnvelope.content,
+        intent: "explicit_cross_chat",
     });
     return result.delivered;
 }
@@ -417,14 +418,15 @@ async function routeDelegatedCompletion(agentRoot, agentName, completion, draine
         return;
     }
     // Priority 2: Freshest active friend session.
-    const freshest = (0, session_activity_1.findFreshestFriendSession)({
+    // For BB, prefer DM sessions (;-;) over group chats (;+;) — proactive outreach should never land in groups.
+    const allFriendSessions = (0, session_activity_1.listSessionActivity)({
         sessionsDir: path.join(agentRoot, "state", "sessions"),
         friendsDir: path.join(agentRoot, "friends"),
         agentName,
-        friendId: delegatedFrom.friendId,
-        activeOnly: true,
-    });
-    if (freshest && freshest.channel !== "inner") {
+    }).filter((s) => s.friendId === delegatedFrom.friendId && s.channel !== "inner");
+    const bbDm = allFriendSessions.find((s) => s.channel === "bluebubbles" && s.key.includes(";-;"));
+    const freshest = bbDm ?? allFriendSessions.find((s) => s.channel !== "bluebubbles" || s.key.includes(";-;")) ?? allFriendSessions[0];
+    if (freshest) {
         if (await tryDeliverDelegatedCompletion(freshest, outboundEnvelope)) {
             advanceObligationQuietly(agentName, obligationId, { status: "returned", returnedAt: timestamp, returnTarget: "freshest-session" });
             return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.230",
+  "version": "0.1.0-alpha.231",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",