@ouro.bot/cli 0.1.0-alpha.288 → 0.1.0-alpha.289

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.289",
+      "changes": [
+        "feat(senses): enforce per-habit tool restrictions during inner dialog turns. When a habit file declares a `tools` field in its frontmatter (e.g., `tools: [read, web_fetch, send_message]`), the inner dialog adapter now filters the full tool repertoire to only those declared tools before passing them to the turn runner. Habits without a `tools` field retain the full repertoire (backwards compatible). Fail-closed design: unknown tool names in the `tools` array are silently excluded rather than causing errors. Two nerves events provide observability: `habit.tools_restricted` (emitted with declared vs resolved tool lists) and `habit.tools_unrestricted` (emitted when a successfully-parsed habit runs with full repertoire). Existing guardrails (protected paths, destructive command blocking) still apply at execution time. 6 new test cases cover restriction, unknown tool exclusion, unrestricted event emission, no event on parse failure, tools passthrough to turn runner, and empty tools array behavior."
+      ]
+    },
     {
       "version": "0.1.0-alpha.288",
       "changes": [

package/dist/senses/inner-dialog.js

@@ -53,6 +53,7 @@ const identity_1 = require("../heart/identity");
 const context_1 = require("../mind/context");
 const prompt_1 = require("../mind/prompt");
 const mcp_manager_1 = require("../repertoire/mcp-manager");
+const tools_1 = require("../repertoire/tools");
 const bundle_manifest_1 = require("../mind/bundle-manifest");
 const pending_1 = require("../mind/pending");
 const obligations_1 = require("../arc/obligations");
@@ -535,6 +536,8 @@ async function runInnerDialogTurn(options) {
         };
         // ── Adapter concern: build user message ──────────────────────────
         let userContent;
+        let habitTools;
+        let habitParsedSuccessfully = false;
         if (existingMessages.length === 0) {
             // Fresh session: bootstrap message with non-canonical cleanup nudge
             const aspirations = readAspirations((0, identity_1.getAgentRoot)());
@@ -568,6 +571,7 @@ async function runInnerDialogTurn(options) {
                     habitBody = parsed.body || undefined;
                     habitTitle = parsed.title || habitName;
                     habitLastRun = parsed.lastRun;
+                    habitTools = parsed.tools;
                 }
                 catch {
                     // Habit file missing or unreadable
@@ -577,6 +581,7 @@ async function runInnerDialogTurn(options) {
                     userContent = `habit "${habitName}" could not be read (file not found or unreadable). check habits/${habitName}.md exists.`;
                 }
                 else {
+                    habitParsedSuccessfully = true;
                     // Unified path: gather context for ALL habits (heartbeat included)
                     const obligations = (0, obligations_1.listActiveReturnObligations)(agentName);
                     const nowMs = now().getTime();
@@ -631,6 +636,30 @@ async function runInnerDialogTurn(options) {
         const selfFriend = createSelfFriend(agentName);
         const selfContext = { friend: selfFriend, channel: innerCapabilities };
         const mcpManager = await (0, mcp_manager_1.getSharedMcpManager)() ?? undefined;
+        // ── Habit tool enforcement ───────────────────────────────────────
+        let habitToolsResolved;
+        if (habitTools !== undefined) {
+            const fullTools = (0, tools_1.getToolsForChannel)(innerCapabilities);
+            habitToolsResolved = fullTools.filter((t) => habitTools.includes(t.function.name));
+            (0, runtime_1.emitNervesEvent)({
+                event: "habit.tools_restricted",
+                component: "senses",
+                message: "habit running with restricted tools",
+                meta: {
+                    habitName: options?.habitName,
+                    declared: habitTools,
+                    resolved: habitToolsResolved.map((t) => t.function.name),
+                },
+            });
+        }
+        else if (reason === "habit" && options?.habitName && habitParsedSuccessfully) {
+            (0, runtime_1.emitNervesEvent)({
+                event: "habit.tools_unrestricted",
+                component: "senses",
+                message: "habit running with full tool repertoire",
+                meta: { habitName: options.habitName },
+            });
+        }
         const sessionLoader = {
             loadOrCreate: async () => {
                 if (existingMessages.length > 0) {
@@ -694,6 +723,7 @@ async function runInnerDialogTurn(options) {
                 traceId,
                 toolChoiceRequired: true,
                 mcpManager,
+                ...(habitToolsResolved !== undefined && { tools: habitToolsResolved }),
                 toolContext: {
                     signin: async () => undefined,
                     delegatedOrigins: attentionQueue,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.288",
+  "version": "0.1.0-alpha.289",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",