@ouro.bot/cli 0.1.0-alpha.459 → 0.1.0-alpha.460

package/changelog.json

@@ -1,6 +1,14 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.460",
+      "changes": [
+        "Mail read tools now distinguish an unpopulated Mailroom store from a real empty inbox: `mail_recent` and `mail_search` tell the agent when no mail has been imported or received yet instead of returning a bare `No matching mail.`",
+        "Empty delegated HEY/source reads now surface the configured source alias, explain that absence is onboarding/import/forwarding state rather than evidence about the human's inbox, and point the agent back to the agent-run setup/import flow.",
+        "The system prompt now carries the empty-Mailroom invariant plus the four Agent Mail golden paths, so agents know to validate HEY import, native Screener mail, cross-sense reaction, and Ouro Outlook audit without asking the human to remember the checklist."
+      ]
+    },
     {
       "version": "0.1.0-alpha.459",
       "changes": [

package/dist/mind/prompt.js

@@ -468,7 +468,9 @@ function senseRuntimeGuidance(channel, preReadStatusLines) {
     lines.push("mail setup hard rule: never tell the human to run `ouro account ensure`, `ouro connect mail`, `ouro mail import-mbox`, `ouro status`, or `ouro doctor` for setup. Say what I am about to run, run it myself, and report the result. If my current surface cannot run shell/tools, I ask for a tool-capable Ouro setup session or companion to continue; I do not offload CLI operation to the human.");
     lines.push("mail setup truth: Agent Mail uses Mailroom, not HEY OAuth/IMAP. For the full work substrate account, the agent-runnable command is `ouro account ensure --agent <agent> --owner-email <email> --source hey`; use `ouro connect mail --agent <agent> --owner-email <email> --source hey` for mail-only repair/provisioning, or `--no-delegated-source` for native-only mail. The detailed runbook is `docs/agent-mail-setup.md`.");
     lines.push("mail setup truth: HEY archive bootstrap is human-exported MBOX only. I ask for the browser-downloaded MBOX path, then I run `ouro mail import-mbox --file <path> --owner-email <email> --source hey --agent <agent>` myself and verify the import.");
+    lines.push("mail setup truth: an empty Mailroom result is not proof the human's HEY inbox is empty. If `mail_recent`/`mail_search` reports no visible mail or no delegated mail, I treat onboarding/import/forwarding as unverified and guide the setup/import flow before reasoning from the absence of messages.");
     lines.push("mail setup truth: verify with `ouro status`, `ouro doctor`, bounded mail tools (`mail_recent`, `mail_search`, `mail_thread`, `mail_access_log`), and the read-only Outlook Mailbox tab. `ouro doctor` is installation-wide; do not invent `ouro doctor --agent <agent>`.");
+    lines.push("mail validation golden paths: HEY import updates a real work object; native send/receive exercises Screener allow/discard and recovery; mail can trigger another configured sense; Ouro Outlook audits imports, decisions, sends, and access logs.");
     lines.push("mail setup boundaries: do not invent `ouro auth verify --provider mail`, HEY OAuth, HEY IMAP, `ouro mcp call mail ...`, policy flags, autonomous sending, destructive mail actions, or production MX/DNS/forwarding changes. HEY export, HEY forwarding, DNS, MX cutover, sending, and destructive actions require explicit human confirmation.");
     if (channel === "cli") {
         lines.push("cli is interactive: it is available when the user opens it, not something `ouro up` daemonizes.");

package/dist/repertoire/tools-mail.js

@@ -129,6 +129,63 @@ function renderAccessLog(entries) {
     })
         .join("\n");
 }
+function renderSourceGrantStatus(config, agentId) {
+    if (!config.registryPath) {
+        return [
+            "delegated source aliases: unknown (runtime config has no registryPath).",
+            `agent-runnable repair: run ouro connect mail --agent ${agentId} --owner-email <human-email> --source hey.`,
+        ];
+    }
+    try {
+        const registry = readRegistry(config.registryPath);
+        const grants = registry.sourceGrants
+            .filter((grant) => grant.agentId === agentId && grant.enabled)
+            .map((grant) => `${grant.source}:${grant.ownerEmail} -> ${grant.aliasAddress}`);
+        if (grants.length === 0) {
+            return [
+                "delegated source aliases: none configured yet.",
+                `agent-runnable next step: run ouro account ensure --agent ${agentId} --owner-email <human-email> --source hey.`,
+            ];
+        }
+        return [`delegated source aliases: ${grants.join("; ")}.`];
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : /* v8 ignore next -- fs and JSON.parse failures are Error instances. @preserve */ String(error);
+        return [
+            `delegated source aliases: unreadable registry (${message}).`,
+            `agent-runnable repair: run ouro connect mail --agent ${agentId} --owner-email <human-email> --source hey.`,
+        ];
+    }
+}
+async function renderEmptyMailResult(input) {
+    const anyVisible = await input.store.listMessages({ agentId: input.agentId, limit: 1 });
+    if (anyVisible.length === 0) {
+        return [
+            "No visible mail yet.",
+            `mail onboarding status: Mailroom is provisioned for ${input.config.mailboxAddress}, but this agent's encrypted store has 0 messages.`,
+            ...renderSourceGrantStatus(input.config, input.agentId),
+            "interpretation: this is not evidence that the human's HEY inbox is empty; Agent Mail has not yet received or imported mail visible to this agent.",
+            `agent next move: guide setup from docs/agent-mail-setup.md. If HEY mail is needed, ensure the delegated hey alias exists, ask the human for the exported MBOX file path, run ouro mail import-mbox --agent ${input.agentId} --owner-email <human-email> --source hey --file <mbox-path>, then verify with mail_recent/mail_search/Ouro Outlook.`,
+            "validation golden paths: HEY import updates a real work object; native send/receive goes through Screener; email can trigger another sense such as iMessage; Ouro Outlook audits the full story.",
+        ].join("\n");
+    }
+    if (input.scope === "delegated" || input.source) {
+        const delegated = await input.store.listMessages({
+            agentId: input.agentId,
+            compartmentKind: "delegated",
+            ...(input.source ? { source: input.source } : {}),
+            limit: 1,
+        });
+        if (delegated.length === 0) {
+            return [
+                "No delegated mail is visible for this source/scope yet.",
+                ...renderSourceGrantStatus(input.config, input.agentId),
+                "Mailroom has other mail, so check the delegated HEY import/forwarding/source filter before treating the human inbox as empty.",
+            ].join("\n");
+        }
+    }
+    return "No matching mail.";
+}
 function actorFromContext(ctx, agentId) {
     const friend = ctx?.context?.friend;
     if (friend) {
@@ -293,8 +350,15 @@ exports.mailToolDefinitions = [
                 tool: "mail_recent",
                 reason: args.reason || "recent mail overview",
             });
-            if (messages.length === 0)
-                return "No matching mail.";
+            if (messages.length === 0) {
+                return renderEmptyMailResult({
+                    agentId: resolved.agentName,
+                    config: resolved.config,
+                    store: resolved.store,
+                    ...(scope ? { scope } : {}),
+                    ...(args.source ? { source: args.source } : {}),
+                });
+            }
             return (0, file_store_1.decryptMessages)(messages, resolved.config.privateKeys).map(renderMessageSummary).join("\n\n");
         },
         summaryKeys: ["scope", "placement", "source", "limit"],
@@ -473,6 +537,15 @@ exports.mailToolDefinitions = [
                 tool: "mail_search",
                 reason: args.reason || `search: ${query}`,
             });
+            if (all.length === 0) {
+                return renderEmptyMailResult({
+                    agentId: resolved.agentName,
+                    config: resolved.config,
+                    store: resolved.store,
+                    ...(scope ? { scope } : {}),
+                    ...(args.source ? { source: args.source } : {}),
+                });
+            }
             if (matching.length === 0)
                 return "No matching mail.";
             return matching.map(renderMessageSummary).join("\n\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.459",
+  "version": "0.1.0-alpha.460",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",