@ouro.bot/cli 0.1.0-alpha.283 → 0.1.0-alpha.285

package/changelog.json

@@ -1,13 +1,27 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.285",
+      "changes": [
+        "feat(daemon): wire startPeriodicReconciliation() after scheduler.start() in daemon-entry.ts — prevents silent habit death when OS cron fails by giving the daemon a self-healing reconciliation loop.",
+        "feat(guardrails): protect agent.json from agent self-modification — closes a vector where prompt injection could alter the agent's own identity, provider, or model settings.",
+        "feat(habits): add tools field to HabitFile interface and habit-parser — habits can now declare tools: [read, web_fetch] in frontmatter. Schema-only; runtime enforcement ships in a follow-up PR."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.284",
+      "changes": [
+        "fix(tui): Ctrl+C safety net + spinner 120ms to 300ms."
+      ]
+    },
     {
       "version": "0.1.0-alpha.283",
       "changes": [
-        "chore(housekeeping): clean up ~3600 leaked test secret dirs in `~/.agentsecrets/`. The auth CLI test suite was creating ephemeral agent secret dirs (auth-local-*, auth-store-*, auth-no-switch-*, etc.) without cleaning them up, accreting over weeks into thousands of orphaned entries. Also purged three non-test orphans (`testagent`, `model-reviews`, `config-model-facing-*`) that were leftovers from manual probe sessions. Only `slugger` and `ouroboros` — the two real agents on this machine — remain.",
-        "chore(housekeeping): remove orphan bundle stubs from `~/AgentBundles/` (default.ouro, thoughts-test-*, an empty `friends/` dir, and a .DS_Store). These were skeletal test leftovers with no real identity — the daemon was already filtering them out of `listEnabledBundleAgents`, so deletion is invisible to the runtime but stops confusing anyone inspecting the bundles directory.",
-        "chore(tests): replace the `outlookServer.stop` v8 ignore band-aid in `daemon.ts` with a proper test. `OuroDaemonOptions` gains an `outlookServerFactory` seam that lets tests inject an in-memory stub handle instead of binding port 6876 (which a running production daemon holds on dev machines, causing EADDRINUSE flakes). New `daemon-outlook-lifecycle.test.ts` covers the happy path (factory runs, stop is called), the error path (factory throws, daemon logs warn and keeps going, stop is a no-op), and the double-start guard. The default production factory path (`createDefaultOutlookServer` — wires the real `startOutlookHttpServer` with bundlesRoot + view builders) is v8-ignored because it only runs under real bind on port 6876; `startOutlookHttpServer` itself has full coverage in `outlook-http.test.ts`. Removed the redundant `if (!this.outlookServer)` wrapper in `startInner()` that was guarding against an unreachable retry scenario. `daemon.ts` now hits 100% statements / branches / functions / lines with zero port binding in the test suite.",
-        "chore(ci): tighten the wrapper publish-sync check timing. The version-bump check and wrapper-publish-sync check now run BEFORE the ~2+ minute coverage gate, not after. Previously, a contributor would wait for the full test suite to pass only to then see a 'version already published' error. Now the fast checks surface in under a minute, and coverage only runs once version/wrapper gates have cleared. Same checks, same logic — just reordered steps in `.github/workflows/coverage.yml`."
+        "chore(housekeeping): clean up ~3600 leaked test secret dirs in `~/.agentsecrets/`. The auth CLI test suite was creating ephemeral agent secret dirs (auth-local-*, auth-store-*, auth-no-switch-*, etc.) without cleaning them up, accreting over weeks into thousands of orphaned entries. Also purged three non-test orphans (`testagent`, `model-reviews`, `config-model-facing-*`) that were leftovers from manual probe sessions. Only `slugger` and `ouroboros` \u2014 the two real agents on this machine \u2014 remain.",
+        "chore(housekeeping): remove orphan bundle stubs from `~/AgentBundles/` (default.ouro, thoughts-test-*, an empty `friends/` dir, and a .DS_Store). These were skeletal test leftovers with no real identity \u2014 the daemon was already filtering them out of `listEnabledBundleAgents`, so deletion is invisible to the runtime but stops confusing anyone inspecting the bundles directory.",
+        "chore(tests): replace the `outlookServer.stop` v8 ignore band-aid in `daemon.ts` with a proper test. `OuroDaemonOptions` gains an `outlookServerFactory` seam that lets tests inject an in-memory stub handle instead of binding port 6876 (which a running production daemon holds on dev machines, causing EADDRINUSE flakes). New `daemon-outlook-lifecycle.test.ts` covers the happy path (factory runs, stop is called), the error path (factory throws, daemon logs warn and keeps going, stop is a no-op), and the double-start guard. The default production factory path (`createDefaultOutlookServer` \u2014 wires the real `startOutlookHttpServer` with bundlesRoot + view builders) is v8-ignored because it only runs under real bind on port 6876; `startOutlookHttpServer` itself has full coverage in `outlook-http.test.ts`. Removed the redundant `if (!this.outlookServer)` wrapper in `startInner()` that was guarding against an unreachable retry scenario. `daemon.ts` now hits 100% statements / branches / functions / lines with zero port binding in the test suite.",
+        "chore(ci): tighten the wrapper publish-sync check timing. The version-bump check and wrapper-publish-sync check now run BEFORE the ~2+ minute coverage gate, not after. Previously, a contributor would wait for the full test suite to pass only to then see a 'version already published' error. Now the fast checks surface in under a minute, and coverage only runs once version/wrapper gates have cleared. Same checks, same logic \u2014 just reordered steps in `.github/workflows/coverage.yml`."
       ]
     },
     {

package/dist/heart/daemon/daemon-entry.js

@@ -195,6 +195,7 @@ void daemon.start().then(() => {
             },
         });
         scheduler.start();
+        scheduler.startPeriodicReconciliation();
         scheduler.watchForChanges();
         habitSchedulers.push(scheduler);
     }

package/dist/heart/habits/habit-parser.js

@@ -41,6 +41,22 @@ const runtime_1 = require("../../nerves/runtime");
 function isHabitStatus(value) {
     return value === "active" || value === "paused";
 }
+function parseToolsField(raw) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    // YAML dash-list: parseFrontmatter returns unknown[]
+    if (Array.isArray(raw)) {
+        return raw.filter((item) => typeof item === "string");
+    }
+    // Inline bracket format: parseFrontmatter returns string like "[a, b, c]"
+    if (typeof raw === "string" && raw.startsWith("[") && raw.endsWith("]")) {
+        const inner = raw.slice(1, -1);
+        if (inner.trim().length === 0)
+            return [];
+        return inner.split(",").map((s) => s.trim()).filter(Boolean);
+    }
+    return undefined;
+}
 function extractFrontmatterAndBody(content) {
     const lines = content.split(/\r?\n/);
     if (lines[0]?.trim() !== "---") {
@@ -71,6 +87,7 @@ function parseHabitFile(content, filePath) {
             status: "active",
             lastRun: null,
             created: null,
+            tools: undefined,
             body: content.trim(),
         };
     }
@@ -85,6 +102,7 @@ function parseHabitFile(content, filePath) {
     const lastRun = typeof rawLastRun === "string" && rawLastRun.length > 0 ? rawLastRun : null;
     const rawCreated = frontmatter.created;
     const created = typeof rawCreated === "string" && rawCreated.length > 0 ? rawCreated : null;
+    const tools = parseToolsField(frontmatter.tools);
     return {
         name: stem,
         title,
@@ -92,12 +110,15 @@ function parseHabitFile(content, filePath) {
         status,
         lastRun,
         created,
+        tools,
         body,
     };
 }
 function formatFrontmatterValue(value) {
     if (value === null || value === undefined)
         return "null";
+    if (Array.isArray(value))
+        return `[${value.join(", ")}]`;
     return String(value);
 }
 function renderHabitFile(frontmatter, body) {

package/dist/repertoire/guardrails.js

@@ -37,6 +37,7 @@ exports.OURO_CLI_TRUST_MANIFEST = void 0;
 exports.guardInvocation = guardInvocation;
 const fs = __importStar(require("node:fs"));
 const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
 const types_1 = require("../mind/friends/types");
 const runtime_1 = require("../nerves/runtime");
 const deny = (reason) => ({ allowed: false, reason });
@@ -56,6 +57,7 @@ const REASONS = {
 const READ_ONLY_TOOLS = new Set(["read_file", "glob", "grep"]);
 // --- protected path detection ---
 const PROTECTED_PATH_SEGMENTS = [".git/"];
+const PROTECTED_FILENAMES = ["agent.json"];
 function getProtectedAbsolutePrefixes() {
     return [`${os.homedir()}/.agentsecrets/`];
 }
@@ -68,6 +70,10 @@ function isProtectedPath(filePath) {
         if (filePath.startsWith(prefix))
             return true;
     }
+    for (const name of PROTECTED_FILENAMES) {
+        if (path.basename(filePath) === name)
+            return true;
+    }
     return false;
 }
 // --- destructive shell patterns ---

package/dist/senses/cli/ouro-tui.js

@@ -103,7 +103,7 @@ function Spinner({ phrasePool, elapsed }) {
     const [currentPhrase, setCurrentPhrase] = (0, react_1.useState)(() => phrasePool.length > 0 ? phrasePool[Math.floor(Math.random() * phrasePool.length)] : "");
     // Animate ring frames
     (0, react_1.useEffect)(() => {
-        const iv = setInterval(() => setFrame(f => (f + 1) % RING_FRAMES.length), 120);
+        const iv = setInterval(() => setFrame(f => (f + 1) % RING_FRAMES.length), 300);
         return () => clearInterval(iv);
     }, []);
     // Rotate phrases every 3 seconds

package/dist/senses/cli.js

@@ -929,6 +929,19 @@ async function main(agentName, options) {
     if (agentName)
         (0, identity_1.setAgentName)(agentName);
     const pasteDebounceMs = options?.pasteDebounceMs ?? 50;
+    // Safety net: process-level SIGINT handler ensures Ctrl+C always exits,
+    // even when Ink's event loop is blocked by expensive renders.
+    /* v8 ignore start -- process signal handler @preserve */
+    let sigintCount = 0;
+    const sigintHandler = () => {
+        sigintCount++;
+        if (sigintCount >= 2)
+            process.exit(1);
+    };
+    if (!options?._testInputSource) {
+        process.on("SIGINT", sigintHandler);
+    }
+    /* v8 ignore stop */
     // Register spinner hooks so log output clears the spinner before printing
     (0, nerves_1.registerSpinnerHooks)(pauseActiveSpinner, resumeActiveSpinner);
     // Fallback: apply pending updates for daemon-less direct CLI usage

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.283",
+  "version": "0.1.0-alpha.285",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",