@ouro.bot/cli 0.1.0-alpha.284 → 0.1.0-alpha.285

package/changelog.json

@@ -1,6 +1,14 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.285",
+      "changes": [
+        "feat(daemon): wire startPeriodicReconciliation() after scheduler.start() in daemon-entry.ts — prevents silent habit death when OS cron fails by giving the daemon a self-healing reconciliation loop.",
+        "feat(guardrails): protect agent.json from agent self-modification — closes a vector where prompt injection could alter the agent's own identity, provider, or model settings.",
+        "feat(habits): add tools field to HabitFile interface and habit-parser — habits can now declare tools: [read, web_fetch] in frontmatter. Schema-only; runtime enforcement ships in a follow-up PR."
+      ]
+    },
     {
       "version": "0.1.0-alpha.284",
       "changes": [

package/dist/heart/daemon/daemon-entry.js

@@ -195,6 +195,7 @@ void daemon.start().then(() => {
             },
         });
         scheduler.start();
+        scheduler.startPeriodicReconciliation();
         scheduler.watchForChanges();
         habitSchedulers.push(scheduler);
     }

package/dist/heart/habits/habit-parser.js

@@ -41,6 +41,22 @@ const runtime_1 = require("../../nerves/runtime");
 function isHabitStatus(value) {
     return value === "active" || value === "paused";
 }
+function parseToolsField(raw) {
+    if (raw === undefined || raw === null)
+        return undefined;
+    // YAML dash-list: parseFrontmatter returns unknown[]
+    if (Array.isArray(raw)) {
+        return raw.filter((item) => typeof item === "string");
+    }
+    // Inline bracket format: parseFrontmatter returns string like "[a, b, c]"
+    if (typeof raw === "string" && raw.startsWith("[") && raw.endsWith("]")) {
+        const inner = raw.slice(1, -1);
+        if (inner.trim().length === 0)
+            return [];
+        return inner.split(",").map((s) => s.trim()).filter(Boolean);
+    }
+    return undefined;
+}
 function extractFrontmatterAndBody(content) {
     const lines = content.split(/\r?\n/);
     if (lines[0]?.trim() !== "---") {
@@ -71,6 +87,7 @@ function parseHabitFile(content, filePath) {
             status: "active",
             lastRun: null,
             created: null,
+            tools: undefined,
             body: content.trim(),
         };
     }
@@ -85,6 +102,7 @@ function parseHabitFile(content, filePath) {
     const lastRun = typeof rawLastRun === "string" && rawLastRun.length > 0 ? rawLastRun : null;
     const rawCreated = frontmatter.created;
     const created = typeof rawCreated === "string" && rawCreated.length > 0 ? rawCreated : null;
+    const tools = parseToolsField(frontmatter.tools);
     return {
         name: stem,
         title,
@@ -92,12 +110,15 @@ function parseHabitFile(content, filePath) {
         status,
         lastRun,
         created,
+        tools,
         body,
     };
 }
 function formatFrontmatterValue(value) {
     if (value === null || value === undefined)
         return "null";
+    if (Array.isArray(value))
+        return `[${value.join(", ")}]`;
     return String(value);
 }
 function renderHabitFile(frontmatter, body) {

package/dist/repertoire/guardrails.js

@@ -37,6 +37,7 @@ exports.OURO_CLI_TRUST_MANIFEST = void 0;
 exports.guardInvocation = guardInvocation;
 const fs = __importStar(require("node:fs"));
 const os = __importStar(require("node:os"));
+const path = __importStar(require("node:path"));
 const types_1 = require("../mind/friends/types");
 const runtime_1 = require("../nerves/runtime");
 const deny = (reason) => ({ allowed: false, reason });
@@ -56,6 +57,7 @@ const REASONS = {
 const READ_ONLY_TOOLS = new Set(["read_file", "glob", "grep"]);
 // --- protected path detection ---
 const PROTECTED_PATH_SEGMENTS = [".git/"];
+const PROTECTED_FILENAMES = ["agent.json"];
 function getProtectedAbsolutePrefixes() {
     return [`${os.homedir()}/.agentsecrets/`];
 }
@@ -68,6 +70,10 @@ function isProtectedPath(filePath) {
         if (filePath.startsWith(prefix))
             return true;
     }
+    for (const name of PROTECTED_FILENAMES) {
+        if (path.basename(filePath) === name)
+            return true;
+    }
     return false;
 }
 // --- destructive shell patterns ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.284",
+  "version": "0.1.0-alpha.285",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",