@ouro.bot/cli 0.1.0-alpha.461 → 0.1.0-alpha.462

package/changelog.json

@@ -1,6 +1,14 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.462",
+      "changes": [
+        "Agent Mail prompt guidance now explicitly separates golden paths from supporting diagnostics, so agents do not answer a golden-path question with `ouro status`, `ouro doctor`, or mail tool names.",
+        "The golden-path contract now appears before diagnostic checks in the sense guidance, making HEY-to-work-object, native Screener mail, cross-sense reaction, and Outlook audit the dominant validation story.",
+        "Empty Mailroom tool output now says diagnostics help verify the four golden paths but are not substitutes for them."
+      ]
+    },
     {
       "version": "0.1.0-alpha.461",
       "changes": [

package/dist/mind/prompt.js

@@ -469,7 +469,6 @@ function senseRuntimeGuidance(channel, preReadStatusLines) {
     lines.push("mail setup truth: Agent Mail uses Mailroom, not HEY OAuth/IMAP. For the full work substrate account, the agent-runnable command is `ouro account ensure --agent <agent> --owner-email <email> --source hey`; use `ouro connect mail --agent <agent> --owner-email <email> --source hey` for mail-only repair/provisioning, or `--no-delegated-source` for native-only mail. The detailed runbook is `docs/agent-mail-setup.md`.");
     lines.push("mail setup truth: HEY archive bootstrap is human-exported MBOX only. I ask for the browser-downloaded MBOX path, then I run `ouro mail import-mbox --file <path> --owner-email <email> --source hey --agent <agent>` myself and verify the import.");
     lines.push("mail setup truth: an empty Mailroom result is not proof the human's HEY inbox is empty. If `mail_recent`/`mail_search` reports no visible mail or no delegated mail, I treat onboarding/import/forwarding as unverified and guide the setup/import flow before reasoning from the absence of messages.");
-    lines.push("mail setup truth: verify with `ouro status`, `ouro doctor`, bounded mail tools (`mail_recent`, `mail_search`, `mail_thread`, `mail_access_log`), and the read-only Outlook Mailbox tab. `ouro doctor` is installation-wide; do not invent `ouro doctor --agent <agent>`.");
     lines.push("mail validation contract: when a human asks for Agent Mail golden paths, I mean these exact four checks before claiming setup works:");
     lines.push("- golden path 1, HEY archive to work object: import the human-provided HEY MBOX and use delegated mail to update a real work object, such as travel plans.");
     lines.push("- golden path 2, native mail and Screener: send and receive agent-native mail, confirm unknown senders enter Screener, get family authorization for allow/discard, verify sender policy, and confirm discarded mail is recoverable.");
@@ -477,6 +476,7 @@ function senseRuntimeGuidance(channel, preReadStatusLines) {
         ? "- golden path 3, cross-sense reaction: use a mail-derived update or decision to trigger another configured sense when available."
         : "- golden path 3, cross-sense reaction: use a mail-derived update or decision to trigger another configured sense, such as texting the family member on iMessage when BlueBubbles is available.");
     lines.push("- golden path 4, Ouro Outlook audit: inspect the read-only mailbox UI for imported mail, native inbound, Screener decisions, outbound draft/send records, and mail access logs.");
+    lines.push("mail validation distinction: `ouro status`, `ouro doctor`, bounded mail tools (`mail_recent`, `mail_search`, `mail_thread`, `mail_access_log`), and the read-only Outlook Mailbox tab are supporting diagnostics, not the golden paths. If asked to name golden paths, do not substitute diagnostic commands for the four paths above. `ouro doctor` is installation-wide; do not invent `ouro doctor --agent <agent>`.");
     lines.push("mail setup boundaries: do not invent `ouro auth verify --provider mail`, HEY OAuth, HEY IMAP, `ouro mcp call mail ...`, policy flags, autonomous sending, destructive mail actions, or production MX/DNS/forwarding changes. HEY export, HEY forwarding, DNS, MX cutover, sending, and destructive actions require explicit human confirmation.");
     if (channel === "cli") {
         lines.push("cli is interactive: it is available when the user opens it, not something `ouro up` daemonizes.");

package/dist/repertoire/tools-mail.js

@@ -171,6 +171,7 @@ async function renderEmptyMailResult(input) {
             "2. Native mail and Screener: send and receive agent-native mail, confirm unknown senders enter Screener, get family authorization for allow/discard, verify sender policy, and confirm discarded mail is recoverable.",
             "3. Cross-sense reaction: use a mail-derived update or decision to trigger another configured sense, such as texting the family member on iMessage when BlueBubbles is available.",
             "4. Ouro Outlook audit: inspect the read-only mailbox UI for imported mail, native inbound, Screener decisions, outbound draft/send records, and mail access logs.",
+            "supporting diagnostics are separate: ouro status, ouro doctor, bounded mail tools, and Outlook inspection help verify the paths but are not substitutes for them.",
         ].join("\n");
     }
     if (input.scope === "delegated" || input.source) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.461",
+  "version": "0.1.0-alpha.462",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",