@ouro.bot/cli 0.1.0-alpha.452 → 0.1.0-alpha.454

package/changelog.json

@@ -1,6 +1,22 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.454",
+      "changes": [
+        "The agent system prompt now carries an explicit Agent Mail setup runbook: Mailroom provisioning uses `ouro connect mail`, HEY archive bootstrap uses human-exported MBOX plus `ouro mail import-mbox`, and verification uses status, doctor, bounded mail tools, and the read-only Outlook mailbox.",
+        "Mail setup guidance now forbids invented paths such as HEY OAuth/IMAP, `ouro auth verify --provider mail`, `ouro mcp call mail ...`, ad hoc policy flags, autonomous sending, destructive mail actions, and production MX/DNS/forwarding changes without explicit human confirmation.",
+        "`docs/agent-mail-setup.md` now names the non-implementation paths directly so future agents can distinguish the shipped Mailroom flow from plausible-but-false mail-provider guesses."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.453",
+      "changes": [
+        "`ouro logs prune` now rotates oversized active launchd `.log` streams alongside `.ndjson` daemon streams, so doctor's bundle-local log-size remediation can compact the legacy stderr/stdout files it counts.",
+        "Log pruning still skips compressed and historical generation files, keeping rotation safe and idempotent while letting `rotateIfNeeded` handle generation shifting.",
+        "Regression coverage now locks `.log` pruning and the historical-file skip behavior for daemon logs."
+      ]
+    },
     {
       "version": "0.1.0-alpha.452",
       "changes": [

package/dist/heart/daemon/logs-prune.js

@@ -7,6 +7,15 @@ const crypto_1 = require("crypto");
 const nerves_1 = require("../../nerves");
 const runtime_1 = require("../../nerves/runtime");
 const identity_1 = require("../identity");
+function isActiveLogStream(name) {
+    if (name.endsWith(".ndjson")) {
+        return !/\.\d+\.ndjson$/.test(name);
+    }
+    if (name.endsWith(".log")) {
+        return !/\.\d+\.log$/.test(name);
+    }
+    return false;
+}
 function pruneDaemonLogs(options = {}) {
     /* v8 ignore next -- defensive: tests always pass logsDir to avoid prod paths @preserve */
     const logsDir = options.logsDir ?? (0, identity_1.getAgentDaemonLogsDir)(options.agentName);
@@ -35,17 +44,13 @@ function pruneDaemonLogs(options = {}) {
         }
         let filesCompacted = 0;
         let bytesFreed = 0;
-        // Enumerate and rotate each active .ndjson stream. We explicitly skip
-        // .gz and other files — only the active stream can be a rotation
-        // candidate. Legacy .N.ndjson uncompressed files are handled inside
-        // rotateIfNeeded's generation-shift step, so we skip them here to
+        // Enumerate and rotate each active structured stream plus legacy launchd
+        // .log streams. We explicitly skip .gz and other files — only the active
+        // stream can be a rotation candidate. Legacy generation files are handled
+        // inside rotateIfNeeded's generation-shift step, so we skip them here to
         // avoid double-rotating.
         for (const name of (0, fs_1.readdirSync)(logsDir)) {
-            if (!name.endsWith(".ndjson"))
-                continue;
-            // Skip legacy generation files like daemon.1.ndjson; rotateIfNeeded
-            // will migrate them on the next rotation of their parent stream.
-            if (/\.\d+\.ndjson$/.test(name))
+            if (!isActiveLogStream(name))
                 continue;
             const filePath = (0, path_1.join)(logsDir, name);
             let sizeBefore;

package/dist/mind/prompt.js

@@ -464,7 +464,10 @@ function senseRuntimeGuidance(channel, preReadStatusLines) {
     lines.push("If asked how to enable another sense, I explain the relevant agent.json senses entry and required agent-vault runtime/config fields instead of guessing.");
     lines.push("teams setup truth: run `ouro connect teams --agent <agent>` from the connect bay; it stores Teams runtime/config fields and enables `senses.teams.enabled`.");
     lines.push("bluebubbles setup truth: run `ouro connect bluebubbles --agent <agent>` from the connect bay; it stores this machine's BlueBubbles URL/password/listener config in the agent vault machine runtime item.");
-    lines.push("mail setup truth: run `ouro connect mail --agent <agent>` from the connect bay; it provisions Mailroom coordinates, stores private mail keys in the agent vault runtime/config item, and enables `senses.mail.enabled`. For HEY bootstrap, ask the human for the browser-exported MBOX path and run `ouro mail import-mbox --file <path> --owner-email <email> --source hey --agent <agent>`; HEY forwarding/DNS/MX remain human-confirmed steps.");
+    lines.push("mail setup truth: Agent Mail uses Mailroom, not HEY OAuth/IMAP. To provision, run `ouro connect mail --agent <agent>`; use the human's owner email when asked so Mailroom creates the delegated source alias.");
+    lines.push("mail setup truth: HEY archive bootstrap is human-exported MBOX only. Ask for the browser-downloaded MBOX path, then run `ouro mail import-mbox --file <path> --owner-email <email> --source hey --agent <agent>`.");
+    lines.push("mail setup truth: verify with `ouro status`, `ouro doctor --agent <agent>`, bounded mail tools (`mail_recent`, `mail_search`, `mail_thread`, `mail_access_log`), and the read-only Outlook Mailbox tab.");
+    lines.push("mail setup boundaries: do not invent `ouro auth verify --provider mail`, HEY OAuth, HEY IMAP, `ouro mcp call mail ...`, policy flags, autonomous sending, destructive mail actions, or production MX/DNS/forwarding changes. HEY export, HEY forwarding, DNS, MX cutover, sending, and destructive actions require explicit human confirmation.");
     if (channel === "cli") {
         lines.push("cli is interactive: it is available when the user opens it, not something `ouro up` daemonizes.");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.452",
+  "version": "0.1.0-alpha.454",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",