@ouro.bot/cli 0.1.0-alpha.692 → 0.1.0-alpha.694

package/changelog.json

@@ -1,6 +1,19 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.694",
+      "changes": [
+        "Align Workbench setup with runtime MCP injection and stale bundle cleanup, including prompt/turn stale-state coverage."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.693",
+      "changes": [
+        "Load vault-backed provider credentials before manual context-loss Sentinel refreshes so a fresh CLI process cannot report false not-loaded provider warnings.",
+        "Have doctor lifecycle checks read the machine-local daemon log alongside bundle-local logs so stale historical bundle logs cannot mask live daemon activity."
+      ]
+    },
     {
       "version": "0.1.0-alpha.692",
       "changes": [

package/dist/heart/config-registry.js

@@ -203,9 +203,9 @@ const registryData = [
     {
         path: "senses.workbench",
         tier: "self",
-        description: "Workbench sense configuration. Controls whether the native terminal-agent control room is enabled for this agent.",
+        description: "Legacy Workbench sense marker. Runtime-injected Workbench tools do not require this bundle entry.",
         default: { enabled: false },
-        effects: "Enables the local Ouro Workbench sense. Workbench MCP registration remains in mcpServers.ouro_workbench.",
+        effects: "Kept only for old bundles; modern Workbench launches the boss with --workbench-mcp and injects tools per turn.",
         topics: ["senses", "workbench", "mcp", "terminal", "channels", "interface"],
         validate: validateObject({ enabled: validateBoolean }),
     },

package/dist/heart/daemon/cli-exec.js

@@ -2649,7 +2649,6 @@ function enableAgentSense(agent, sense, deps) {
         mail: senses.mail ?? { enabled: false },
         voice: senses.voice ?? { enabled: false },
         a2a: senses.a2a ?? { enabled: false },
-        workbench: senses.workbench ?? { enabled: false },
         [sense]: { ...existing, enabled: true },
     };
     fs.writeFileSync(configPath, `${JSON.stringify(raw, null, 2)}\n`, "utf-8");
@@ -2661,17 +2660,32 @@ function connectMenuIsTTY(deps) {
 function readConnectBaySenseFlags(agent, deps) {
     const configPath = path.join(providerCliAgentRoot({ agent }, deps), "agent.json");
     const parsed = JSON.parse(fs.readFileSync(configPath, "utf-8"));
-    const workbenchCommand = parsed.mcpServers?.ouro_workbench?.command;
+    const senses = parsed.senses && typeof parsed.senses === "object" && !Array.isArray(parsed.senses)
+        ? parsed.senses
+        : undefined;
+    const mcpServers = parsed.mcpServers && typeof parsed.mcpServers === "object" && !Array.isArray(parsed.mcpServers)
+        ? parsed.mcpServers
+        : undefined;
+    const workbenchSensePresent = senses
+        ? Object.prototype.hasOwnProperty.call(senses, "workbench")
+        : false;
+    const workbenchMcpPresent = mcpServers
+        ? Object.prototype.hasOwnProperty.call(mcpServers, "ouro_workbench")
+        : false;
+    const workbenchCommand = mcpServers?.ouro_workbench?.command;
+    const workbenchEnabled = senses?.workbench?.enabled === true;
+    const workbenchMcpCommand = typeof workbenchCommand === "string" && workbenchCommand.trim().length > 0
+        ? workbenchCommand
+        : null;
     return {
-        teamsEnabled: parsed.senses?.teams?.enabled === true,
-        blueBubblesEnabled: parsed.senses?.bluebubbles?.enabled === true,
-        mailEnabled: parsed.senses?.mail?.enabled === true,
-        voiceEnabled: parsed.senses?.voice?.enabled === true,
-        a2aEnabled: parsed.senses?.a2a?.enabled === true,
-        workbenchEnabled: parsed.senses?.workbench?.enabled === true,
-        workbenchMcpCommand: typeof workbenchCommand === "string" && workbenchCommand.trim().length > 0
-            ? workbenchCommand
-            : null,
+        teamsEnabled: senses?.teams?.enabled === true,
+        blueBubblesEnabled: senses?.bluebubbles?.enabled === true,
+        mailEnabled: senses?.mail?.enabled === true,
+        voiceEnabled: senses?.voice?.enabled === true,
+        a2aEnabled: senses?.a2a?.enabled === true,
+        workbenchEnabled,
+        workbenchMcpCommand,
+        workbenchHasStaleBundleEntry: workbenchSensePresent || workbenchMcpPresent,
     };
 }
 function defaultWorkbenchMcpCandidates(deps) {
@@ -2713,21 +2727,30 @@ function resolveWorkbenchRuntimeMcp(flag, deps) {
         return null;
     return { ouro_workbench: { command, args: [] } };
 }
-function writeWorkbenchMcpRegistration(agent, executablePath, deps) {
+function removeWorkbenchMcpRegistration(agent, deps) {
     const { configPath } = (0, auth_flow_1.readAgentConfigForAgent)(agent, deps.bundlesRoot);
-    enableAgentSense(agent, "workbench", deps);
     const nextRaw = JSON.parse(fs.readFileSync(configPath, "utf-8"));
+    let changed = false;
     const mcpServers = nextRaw.mcpServers && typeof nextRaw.mcpServers === "object" && !Array.isArray(nextRaw.mcpServers)
         ? nextRaw.mcpServers
-        : {};
-    nextRaw.mcpServers = {
-        ...mcpServers,
-        ouro_workbench: {
-            command: executablePath,
-            args: [],
-        },
-    };
-    fs.writeFileSync(configPath, `${JSON.stringify(nextRaw, null, 2)}\n`, "utf-8");
+        : null;
+    if (mcpServers && "ouro_workbench" in mcpServers) {
+        delete mcpServers.ouro_workbench;
+        nextRaw.mcpServers = mcpServers;
+        changed = true;
+    }
+    const senses = nextRaw.senses && typeof nextRaw.senses === "object" && !Array.isArray(nextRaw.senses)
+        ? nextRaw.senses
+        : null;
+    if (senses && "workbench" in senses) {
+        delete senses.workbench;
+        nextRaw.senses = senses;
+        changed = true;
+    }
+    if (changed) {
+        fs.writeFileSync(configPath, `${JSON.stringify(nextRaw, null, 2)}\n`, "utf-8");
+    }
+    return changed;
 }
 async function buildConnectMenu(agent, deps, onProgress) {
     const bundlesRoot = path.dirname(providerCliAgentRoot({ agent }, deps));
@@ -2756,7 +2779,7 @@ async function buildConnectMenu(agent, deps, onProgress) {
     const runtimeConfig = await (0, runtime_credentials_1.refreshRuntimeCredentialConfig)(agent, { preserveCachedOnFailure: true });
     onProgress?.("loading this machine's settings");
     const machineRuntime = await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(agent, currentMachineId(deps), { preserveCachedOnFailure: true });
-    const { teamsEnabled, blueBubblesEnabled, mailEnabled, voiceEnabled, a2aEnabled, workbenchEnabled, workbenchMcpCommand, } = readConnectBaySenseFlags(agent, deps);
+    const { teamsEnabled, blueBubblesEnabled, mailEnabled, voiceEnabled, a2aEnabled, workbenchMcpCommand, workbenchHasStaleBundleEntry, } = readConnectBaySenseFlags(agent, deps);
     const perplexityApiKey = runtimeConfig.ok
         ? readRuntimeConfigString(runtimeConfig.config, "integrations.perplexityApiKey")
         : null;
@@ -2913,31 +2936,18 @@ async function buildConnectMenu(agent, deps, onProgress) {
         : runtimeConfigReadStatus(runtimeConfig);
     const a2aStatus = a2aEnabled ? "ready" : "missing";
     const installedWorkbenchMcp = findInstalledWorkbenchMcp(deps, workbenchMcpCommand);
-    const configuredWorkbenchMcpExists = cliPathExists(deps, workbenchMcpCommand);
-    const workbenchStatus = workbenchEnabled && configuredWorkbenchMcpExists
-        ? "ready"
-        : workbenchEnabled || workbenchMcpCommand
-            ? "needs attention"
-            : installedWorkbenchMcp
-                ? "not attached"
-                : "missing";
+    const workbenchStatus = installedWorkbenchMcp
+        ? workbenchHasStaleBundleEntry ? "needs attention" : "ready"
+        : "missing";
     const workbenchDetailLines = [
-        workbenchEnabled ? "senses.workbench.enabled = true" : "senses.workbench.enabled is not enabled",
-        workbenchMcpCommand
-            ? configuredWorkbenchMcpExists
-                ? `MCP command registered: ${workbenchMcpCommand}`
-                : `registered MCP command is missing: ${workbenchMcpCommand}`
-            : "mcpServers.ouro_workbench is not registered",
         installedWorkbenchMcp
             ? `OuroWorkbenchMCP found: ${installedWorkbenchMcp}`
             : "OuroWorkbenchMCP not found in ~/Applications or /Applications",
-        // Runtime injection is the boss's normal path: the Workbench app launches
-        // its boss with `ouro mcp-serve --workbench-mcp`, which injects the
-        // ouro_workbench MCP per-turn without any agent.json entry. A blank/“not
-        // registered” bundle state above is expected for a runtime-only boss; this
-        // `connect workbench` command only writes a persistent entry as an opt-in.
+        workbenchHasStaleBundleEntry
+            ? "stale bundle entry detected: remove senses.workbench and mcpServers.ouro_workbench; Workbench tools are injected at runtime instead"
+            : "bundle state: clean; no senses.workbench or mcpServers.ouro_workbench entry required",
         installedWorkbenchMcp
-            ? "boss runtime injection: when the Workbench app launches this agent it injects ouro_workbench per-turn; an agent.json entry is not required (this command writes one as an opt-in escape hatch)."
+            ? "boss runtime injection: when the Workbench app launches this agent it injects ouro_workbench per-turn; an agent.json entry is not required."
             : "boss runtime injection: install Ouro Workbench.app so the app can inject ouro_workbench per-turn when it launches this agent as boss (no agent.json entry required).",
     ];
     const entries = [
@@ -3073,7 +3083,7 @@ async function buildConnectMenu(agent, deps, onProgress) {
             name: "Ouro Workbench",
             section: "This machine",
             status: workbenchStatus,
-            description: "Native terminal-agent control room and local MCP sense.",
+            description: "Native terminal-agent control room with runtime-injected MCP tools.",
             detailLines: workbenchDetailLines,
             nextAction: (0, connect_bay_1.connectEntryNeedsAttention)({
                 option: "9",
@@ -4695,24 +4705,31 @@ async function executeConnectA2A(agent, deps) {
     return message;
 }
 async function executeConnectWorkbench(agent, deps) {
-    const { workbenchMcpCommand } = readConnectBaySenseFlags(agent, deps);
+    const { workbenchMcpCommand, workbenchHasStaleBundleEntry } = readConnectBaySenseFlags(agent, deps);
+    const changed = removeWorkbenchMcpRegistration(agent, deps);
+    const syncSummary = changed ? pushAgentBundleAfterCliMutation(agent, deps) : "";
     const executablePath = findInstalledWorkbenchMcp(deps, workbenchMcpCommand);
     if (!executablePath) {
         throw new Error([
             `Ouro Workbench is not installed for ${agent} on this machine.`,
+            changed
+                ? "agent.json: removed stale senses.workbench / mcpServers.ouro_workbench entries"
+                : "agent.json: no Workbench entries needed or written",
+            ...(syncSummary ? [syncSummary] : []),
             "Expected the MCP executable at one of:",
             ...defaultWorkbenchMcpCandidates(deps).map((candidate) => `  ${candidate}`),
             "Install or copy Ouro Workbench.app there, then run:",
             `  ouro connect workbench --agent ${agent}`,
         ].join("\n"));
     }
-    writeWorkbenchMcpRegistration(agent, executablePath, deps);
-    const syncSummary = pushAgentBundleAfterCliMutation(agent, deps);
     const message = [
-        `Workbench connected for ${agent}`,
-        "agent.json: senses.workbench.enabled = true",
-        `agent.json: mcpServers.ouro_workbench.command = ${executablePath}`,
-        "Workbench is a local machine sense; provider secrets stay in the agent vault.",
+        `Workbench runtime injection ready for ${agent}`,
+        `OuroWorkbenchMCP found: ${executablePath}`,
+        workbenchHasStaleBundleEntry
+            ? "agent.json: removed stale senses.workbench / mcpServers.ouro_workbench entries"
+            : "agent.json: no Workbench entries needed or written",
+        `boss launch path: ouro mcp-serve --agent ${agent} --workbench-mcp ${executablePath}`,
+        "Workbench tools are injected per served turn; provider secrets stay in the agent vault.",
         ...(syncSummary ? [syncSummary] : []),
     ].join("\n");
     deps.writeStdout(message);
@@ -7647,6 +7664,9 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
             throw new Error("work sentinel requires --agent <name>");
         const bundlesRoot = deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)();
         const agentRoot = deps.agentBundleRoot ?? path.join(bundlesRoot, `${command.agent}.ouro`);
+        if (command.kind === "work.sentinel.refresh") {
+            await (0, provider_credentials_1.refreshProviderCredentialPool)(command.agent, { preserveCachedOnFailure: true });
+        }
         const sentinel = command.kind === "work.sentinel.refresh"
             ? await refreshContextLossSentinel(command.agent, agentRoot, { trigger: "manual_cli", homeDir: deps.homeDir })
             : readContextLossSentinelView(agentRoot, { limit: 20 });
@@ -7885,6 +7905,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
             fetchImpl: deps.fetchImpl ?? fetch,
             socketPath: deps.socketPath,
             bundlesRoot: deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)(),
+            daemonLogsDir: path.join((0, ouro_version_manager_1.getOuroCliHome)(deps.homeDir), "daemon", "logs"),
             homedir: os.homedir(),
             envPath: process.env.PATH ?? "",
             platform: process.platform,

package/dist/heart/daemon/cli-help.js

@@ -402,7 +402,7 @@ const SUBCOMMAND_HELP = {
         example: "ouro connect a2a --agent <agent>",
     },
     "connect workbench": {
-        description: "Attach native Ouro Workbench on this machine and register its MCP sense",
+        description: "Verify native Ouro Workbench runtime injection and clean stale bundle entries",
         usage: "ouro connect workbench [--agent <name>]",
         example: "ouro connect workbench --agent <agent>",
     },

package/dist/heart/daemon/doctor.js

@@ -783,83 +783,106 @@ function computeSummary(categories) {
  * to answer the operator's question after the daemon has gone silent: "did
  * it crash? when did it last do anything? did it just upgrade?"
  *
- * Reads daemon.ndjson from the first available agent bundle (one daemon
- * serves all agents, so any agent's bundle has the shared log).
+ * Reads the machine-local daemon.ndjson when available, plus any
+ * bundle-local copies left by older runtimes. The newest parseable event
+ * is the liveness signal; stale bundle logs cannot mask a live daemon.
  */
 function checkLifecycle(deps) {
     const checks = [];
     const HOUR_MS = 60 * 60 * 1000;
     const STALE_THRESHOLD_MS = 5 * 60 * 1000;
-    const cutoff = Date.now() - HOUR_MS;
+    const now = Date.now();
+    const cutoff = now - HOUR_MS;
+    const logPaths = [];
+    const seenLogPaths = new Set();
+    const addLogPath = (candidate) => {
+        if (seenLogPaths.has(candidate) || !deps.existsSync(candidate))
+            return;
+        seenLogPaths.add(candidate);
+        logPaths.push(candidate);
+    };
+    if (deps.daemonLogsDir) {
+        addLogPath(`${deps.daemonLogsDir}/daemon.ndjson`);
+    }
     const agents = discoverAgents(deps);
-    let logPath = null;
     for (const agentDir of agents) {
-        const candidate = `${deps.bundlesRoot}/${agentDir}/state/daemon/logs/daemon.ndjson`;
-        if (deps.existsSync(candidate)) {
-            logPath = candidate;
-            break;
-        }
+        addLogPath(`${deps.bundlesRoot}/${agentDir}/state/daemon/logs/daemon.ndjson`);
     }
-    if (!logPath) {
-        checks.push({ label: "daemon log readable", status: "warn", detail: "no daemon.ndjson found in any agent bundle" });
+    if (logPaths.length === 0) {
+        checks.push({ label: "daemon log readable", status: "warn", detail: "no daemon.ndjson found in daemon or agent bundle logs" });
         return { name: "Lifecycle", checks };
     }
     let lastTs = null;
     let lastEvent = null;
+    let lastEventTimeMs = Number.NEGATIVE_INFINITY;
     let startCount = 0;
     let installCount = 0;
     let installVersions = [];
     let processErrors = [];
     let lastEntryAgeMs = Number.POSITIVE_INFINITY;
-    try {
-        // Read the whole log via deps.readFileSync, then take the tail. For a
-        // chatty daemon this can be a few MB; we only inspect the last 5000
-        // lines which is enough for the last hour of activity. If the file is
-        // small (typical case), reading it all is cheap.
-        const raw = deps.readFileSync(logPath);
-        const allLines = raw.split("\n").filter((l) => l.trim());
-        const usable = allLines.length > 5000 ? allLines.slice(-5000) : allLines;
-        for (const line of usable) {
-            let parsed;
-            try {
-                parsed = JSON.parse(line);
-            }
-            catch {
-                continue;
-            }
-            const ts = typeof parsed.ts === "string" ? parsed.ts : null;
-            const event = typeof parsed.event === "string" ? parsed.event : null;
-            if (!ts || !event)
-                continue;
-            const tsMs = Date.parse(ts);
-            if (Number.isNaN(tsMs))
-                continue;
-            lastTs = ts;
-            lastEvent = event;
-            lastEntryAgeMs = Math.min(lastEntryAgeMs, Date.now() - tsMs);
-            if (tsMs < cutoff)
-                continue;
-            if (event === "daemon.daemon_started")
-                startCount++;
-            if (event === "daemon.cli_version_install_end") {
-                installCount++;
-                const meta = parsed.meta;
-                const ver = typeof meta?.version === "string" ? meta.version : null;
-                if (ver)
-                    installVersions.push(ver);
-            }
-            if (event === "daemon.agent_process_error") {
-                const meta = parsed.meta;
-                const reason = typeof meta?.reason === "string" ? meta.reason : "unknown";
-                const agent = typeof meta?.agent === "string" ? meta.agent : "unknown";
-                processErrors.push(`${agent}: ${reason}`);
+    let readCount = 0;
+    const readErrors = [];
+    for (const logPath of logPaths) {
+        try {
+            // Read the whole log via deps.readFileSync, then take the tail. For a
+            // chatty daemon this can be a few MB; we only inspect the last 5000
+            // lines which is enough for the last hour of activity. If the file is
+            // small (typical case), reading it all is cheap.
+            const raw = deps.readFileSync(logPath);
+            readCount++;
+            const allLines = raw.split("\n").filter((l) => l.trim());
+            const usable = allLines.length > 5000 ? allLines.slice(-5000) : allLines;
+            for (const line of usable) {
+                let parsed;
+                try {
+                    parsed = JSON.parse(line);
+                }
+                catch {
+                    continue;
+                }
+                const ts = typeof parsed.ts === "string" ? parsed.ts : null;
+                const event = typeof parsed.event === "string" ? parsed.event : null;
+                if (!ts || !event)
+                    continue;
+                const tsMs = Date.parse(ts);
+                if (Number.isNaN(tsMs))
+                    continue;
+                if (tsMs > lastEventTimeMs) {
+                    lastEventTimeMs = tsMs;
+                    lastTs = ts;
+                    lastEvent = event;
+                    lastEntryAgeMs = Math.max(0, now - tsMs);
+                }
+                if (tsMs < cutoff)
+                    continue;
+                if (event === "daemon.daemon_started")
+                    startCount++;
+                if (event === "daemon.cli_version_install_end") {
+                    installCount++;
+                    const meta = parsed.meta;
+                    const ver = typeof meta?.version === "string" ? meta.version : null;
+                    if (ver)
+                        installVersions.push(ver);
+                }
+                if (event === "daemon.agent_process_error") {
+                    const meta = parsed.meta;
+                    const reason = typeof meta?.reason === "string" ? meta.reason : "unknown";
+                    const agent = typeof meta?.agent === "string" ? meta.agent : "unknown";
+                    processErrors.push(`${agent}: ${reason}`);
+                }
             }
         }
+        catch (error) {
+            readErrors.push(`${logPath}: ${error instanceof Error ? error.message : /* v8 ignore next -- non-Error throw is unreachable from deps.readFileSync (always Error) @preserve */ String(error)}`);
+        }
     }
-    catch (error) {
-        checks.push({ label: "daemon log readable", status: "fail", detail: `read failed: ${error instanceof Error ? error.message : /* v8 ignore next -- non-Error throw is unreachable from deps.readFileSync (always Error) @preserve */ String(error)}` });
+    if (readCount === 0) {
+        checks.push({ label: "daemon log readable", status: "fail", detail: `read failed: ${readErrors.join("; ")}` });
         return { name: "Lifecycle", checks };
     }
+    if (readErrors.length > 0) {
+        checks.push({ label: "daemon log readable", status: "warn", detail: `some daemon logs were unreadable: ${readErrors.join("; ")}` });
+    }
     if (lastTs === null) {
         checks.push({ label: "recent daemon activity", status: "warn", detail: "no parseable events in tail of daemon.ndjson" });
     }

package/dist/heart/daemon/sense-manager.js

@@ -50,6 +50,8 @@ const DEFAULT_BLUEBUBBLES_PORT = 18790;
 const DEFAULT_BLUEBUBBLES_WEBHOOK_PATH = "/bluebubbles-webhook";
 const BLUEBUBBLES_RUNTIME_FRESHNESS_WINDOW_MS = 90_000;
 const SENSE_CONFIG_RETRY_DELAYS_MS = [1_000, 2_000, 5_000, 10_000, 30_000, 60_000];
+const WORKBENCH_RUNTIME_INJECTION_DETAIL = "runtime-injected by Workbench app; no agent.json entry required";
+const WORKBENCH_STALE_BUNDLE_DETAIL = "stale agent.json Workbench entry; run 'ouro connect workbench' to clean it and use runtime injection";
 function defaultSenses() {
     return {
         cli: { ...identity_1.DEFAULT_AGENT_SENSES.cli },
@@ -78,12 +80,26 @@ function readAgentSenses(agentJsonPath) {
                 reason: error instanceof Error ? error.message : String(error),
             },
         });
-        return defaults;
+        return { senses: defaults, workbenchHasStaleBundleEntry: false };
     }
     const rawSenses = parsed.senses;
     if (!rawSenses || typeof rawSenses !== "object" || Array.isArray(rawSenses)) {
-        return defaults;
-    }
+        const rawMcpServers = parsed.mcpServers;
+        const workbenchHasStaleBundleEntry = !!rawMcpServers
+            && typeof rawMcpServers === "object"
+            && !Array.isArray(rawMcpServers)
+            && Object.prototype.hasOwnProperty.call(rawMcpServers, "ouro_workbench");
+        if (workbenchHasStaleBundleEntry)
+            defaults.workbench = { enabled: true };
+        return { senses: defaults, workbenchHasStaleBundleEntry };
+    }
+    const workbenchSensePresent = Object.prototype.hasOwnProperty.call(rawSenses, "workbench");
+    const rawMcpServers = parsed.mcpServers;
+    const workbenchMcpPresent = !!rawMcpServers
+        && typeof rawMcpServers === "object"
+        && !Array.isArray(rawMcpServers)
+        && Object.prototype.hasOwnProperty.call(rawMcpServers, "ouro_workbench");
+    const workbenchHasStaleBundleEntry = workbenchSensePresent || workbenchMcpPresent;
     for (const sense of ["cli", "teams", "bluebubbles", "mail", "voice", "a2a", "workbench"]) {
         const rawSense = rawSenses[sense];
         if (!rawSense || typeof rawSense !== "object" || Array.isArray(rawSense)) {
@@ -94,7 +110,10 @@ function readAgentSenses(agentJsonPath) {
             defaults[sense] = { enabled };
         }
     }
-    return defaults;
+    if (workbenchHasStaleBundleEntry) {
+        defaults.workbench = { enabled: true };
+    }
+    return { senses: defaults, workbenchHasStaleBundleEntry };
 }
 function textField(record, key) {
     const value = record?.[key];
@@ -141,7 +160,7 @@ function runtimeConfigUnavailableDetail(agent, runtimeConfig) {
         return `missing vault ${itemName} (${agent})`;
     return `vault ${itemName} unavailable (${compactRuntimeConfigError(agent, runtimeConfig.error)})`;
 }
-function senseFactsFromRuntimeConfig(agent, senses, runtimeConfig, machineRuntimeConfig = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent)) {
+function senseFactsFromRuntimeConfig(agent, senses, runtimeConfig, machineRuntimeConfig = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent), workbenchHasStaleBundleEntry = false) {
     const base = {
         cli: { configured: true, detail: "local interactive terminal" },
         teams: { configured: false, detail: "not enabled in agent.json" },
@@ -304,10 +323,10 @@ function senseFactsFromRuntimeConfig(agent, senses, runtimeConfig, machineRuntim
             detail: publicUrl ? `${publicUrl}${endpointPath}` : `:${port} ${endpointPath}`,
         };
     }
-    if (senses.workbench.enabled) {
+    if (workbenchHasStaleBundleEntry || senses.workbench.enabled) {
         base.workbench = {
-            configured: true,
-            detail: "native Workbench local control room; MCP registration is stored in agent.json",
+            configured: false,
+            detail: WORKBENCH_STALE_BUNDLE_DETAIL,
         };
     }
     return base;
@@ -328,7 +347,7 @@ function senseRepairHint(agent, sense) {
     }
     /* v8 ignore next -- Workbench is deliberately not daemon-managed, so getSenseInventory never asks the daemon manager for a repair hint @preserve */
     if (sense === "workbench") {
-        return `Agent-runnable: run 'ouro connect workbench --agent ${agent}' to enable senses.workbench.enabled and mcpServers.ouro_workbench in agent.json.`;
+        return `Agent-runnable: install Ouro Workbench.app, then launch the boss through Workbench or run 'ouro mcp-serve --agent ${agent} --workbench-mcp'; 'ouro connect workbench --agent ${agent}' only cleans stale bundle entries.`;
     }
     return `Run 'ouro connect bluebubbles --agent ${agent}' to attach BlueBubbles on this machine; then run 'ouro up' again.`;
 }
@@ -527,9 +546,9 @@ class DaemonSenseManager {
         const bundlesRoot = options.bundlesRoot ?? path.join(os.homedir(), "AgentBundles");
         this.bundlesRoot = bundlesRoot;
         this.contexts = new Map(options.agents.map((agent) => {
-            const senses = readAgentSenses(path.join(bundlesRoot, `${agent}.ouro`, "agent.json"));
-            const facts = senseFactsFromRuntimeConfig(agent, senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent));
-            return [agent, { senses, facts }];
+            const { senses, workbenchHasStaleBundleEntry } = readAgentSenses(path.join(bundlesRoot, `${agent}.ouro`, "agent.json"));
+            const facts = senseFactsFromRuntimeConfig(agent, senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent), workbenchHasStaleBundleEntry);
+            return [agent, { senses, workbenchHasStaleBundleEntry, facts }];
         }));
         const managedSenseAgents = [...this.contexts.entries()].flatMap(([agent, context]) => {
             return ["teams", "bluebubbles", "mail", "voice", "a2a"]
@@ -553,7 +572,7 @@ class DaemonSenseManager {
                 const context = this.contexts.get(parsed.agent);
                 if (!context)
                     return { ok: true };
-                context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(parsed.agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(parsed.agent));
+                context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(parsed.agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(parsed.agent), context.workbenchHasStaleBundleEntry);
                 const fact = context.facts[parsed.sense];
                 if (fact.configured)
                     return { ok: true };
@@ -641,7 +660,7 @@ class DaemonSenseManager {
             /* v8 ignore next -- defensive: config refreshes are only scheduled for known agent contexts @preserve */
             if (!context)
                 return;
-            context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, refreshed, machineRefreshed);
+            context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, refreshed, machineRefreshed, context.workbenchHasStaleBundleEntry);
             if (!context.facts[parsed.sense].configured) {
                 if (this.shouldRetryConfigRefresh(parsed.sense, refreshed, machineRefreshed)) {
                     retryAfterMs = this.nextConfigRetryDelayMs(name);
@@ -696,7 +715,7 @@ class DaemonSenseManager {
                 ? await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(agent, currentMachineId(), { preserveCachedOnFailure: true })
                 : (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent);
             /* v8 ignore stop */
-            context.facts = senseFactsFromRuntimeConfig(agent, context.senses, runtimeConfig, machineRuntimeConfig);
+            context.facts = senseFactsFromRuntimeConfig(agent, context.senses, runtimeConfig, machineRuntimeConfig, context.workbenchHasStaleBundleEntry);
         });
         await Promise.all(refreshes);
     }
@@ -751,7 +770,7 @@ class DaemonSenseManager {
         for (const [agent, context] of this.contexts.entries()) {
             const runtimeConfig = (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent);
             const machineRuntimeConfig = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent);
-            context.facts = senseFactsFromRuntimeConfig(agent, context.senses, runtimeConfig, machineRuntimeConfig);
+            context.facts = senseFactsFromRuntimeConfig(agent, context.senses, runtimeConfig, machineRuntimeConfig, context.workbenchHasStaleBundleEntry);
             if (!context.senses.bluebubbles.enabled || !context.facts.bluebubbles.configured || !machineRuntimeConfig.ok) {
                 continue;
             }
@@ -805,7 +824,7 @@ class DaemonSenseManager {
         const machineRuntimeConfig = needsMachineConfig
             ? await (0, runtime_credentials_1.refreshMachineRuntimeCredentialConfig)(parsed.agent, currentMachineId(), { preserveCachedOnFailure: true })
             : (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(parsed.agent);
-        context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, runtimeConfig, machineRuntimeConfig);
+        context.facts = senseFactsFromRuntimeConfig(parsed.agent, context.senses, runtimeConfig, machineRuntimeConfig, context.workbenchHasStaleBundleEntry);
         this.processManager.resetAgentFailureState?.(managedName);
         await this.processManager.startAgent?.(managedName);
         return this.listSenseRows().find((row) => row.agent === parsed.agent && row.sense === parsed.sense) ?? null;
@@ -821,7 +840,7 @@ class DaemonSenseManager {
             runtime.set(parsed.agent, current);
         }
         const rows = [...this.contexts.entries()].flatMap(([agent, context]) => {
-            context.facts = senseFactsFromRuntimeConfig(agent, context.senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent));
+            context.facts = senseFactsFromRuntimeConfig(agent, context.senses, (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent), (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent), context.workbenchHasStaleBundleEntry);
             const blueBubblesRuntimeFacts = readBlueBubblesRuntimeFacts(agent, this.bundlesRoot, runtime.get(agent)?.bluebubbles);
             const blueBubblesConfigured = context.facts.bluebubbles.configured;
             const runtimeInfo = {
@@ -871,7 +890,9 @@ class DaemonSenseManager {
                                 ?? context.facts[entry.sense].detail
                             : context.facts[entry.sense].detail
                         : context.facts[entry.sense].detail
-                    : "not enabled in agent.json",
+                    : entry.sense === "workbench"
+                        ? WORKBENCH_RUNTIME_INJECTION_DETAIL
+                        : "not enabled in agent.json",
                 ...(entry.sense === "bluebubbles" && blueBubblesConfigured ? {
                     proofMethod: blueBubblesRuntimeFacts.proofMethod,
                     lastProofAt: blueBubblesRuntimeFacts.lastProofAt,

package/dist/heart/sense-truth.js

@@ -30,6 +30,9 @@ function resolveStatus(enabled, daemonManaged, runtimeInfo) {
         return "disabled";
     }
     if (!daemonManaged) {
+        if (runtimeInfo?.configured === false) {
+            return "needs_config";
+        }
         return "interactive";
     }
     if (runtimeInfo?.runtime === "error") {

package/dist/heart/turn-context.js

@@ -131,6 +131,28 @@ function hasOpenAIRealtimeVoiceConfig(options) {
 function recordOrUndefined(value) {
     return !!value && typeof value === "object" && !Array.isArray(value) ? value : undefined;
 }
+function rawWorkbenchBundleEntryPresent() {
+    try {
+        const raw = JSON.parse(fs.readFileSync(path.join((0, identity_1.getAgentRoot)(), "agent.json"), "utf-8"));
+        const senses = recordOrUndefined(raw.senses);
+        const mcpServers = recordOrUndefined(raw.mcpServers);
+        const hasWorkbenchSense = senses
+            ? Object.prototype.hasOwnProperty.call(senses, "workbench")
+            : false;
+        const hasWorkbenchMcp = mcpServers
+            ? Object.prototype.hasOwnProperty.call(mcpServers, "ouro_workbench")
+            : false;
+        return hasWorkbenchSense || hasWorkbenchMcp;
+    }
+    catch {
+        return null;
+    }
+}
+function hasStaleWorkbenchBundleEntry(config) {
+    return rawWorkbenchBundleEntryPresent()
+        ?? (config.senses?.workbench?.enabled === true
+            || Object.prototype.hasOwnProperty.call(config.mcpServers ?? {}, "ouro_workbench"));
+}
 function readSenseStatusLines() {
     const config = (0, identity_1.loadAgentConfig)();
     const configuredSenses = config.senses ?? {};
@@ -175,6 +197,7 @@ function readSenseStatusLines() {
         && hasTextField(voice, "whisperCliPath")
         && hasTextField(voice, "whisperModelPath");
     const privateKeys = mailroom?.privateKeys;
+    const workbenchHasStaleBundleEntry = hasStaleWorkbenchBundleEntry(config);
     const configured = {
         cli: true,
         teams: hasTextField(teams, "clientId") && hasTextField(teams, "clientSecret") && hasTextField(teams, "tenantId"),
@@ -187,8 +210,7 @@ function readSenseStatusLines() {
                 ? openAIRealtimeVoiceReady
                 : cascadeVoiceReady,
         a2a: true,
-        workbench: typeof config.mcpServers?.ouro_workbench?.command === "string"
-            && config.mcpServers.ouro_workbench.command.trim().length > 0,
+        workbench: false,
     };
     const rows = [
         { label: "CLI", status: "interactive" },
@@ -216,13 +238,13 @@ function readSenseStatusLines() {
             label: "Workbench",
             // Workbench can be injected at runtime (the Workbench app spawns
             // `ouro mcp-serve --workbench-mcp` for its boss) with NO agent.json entry.
-            // A disabled/needs_config row here does NOT mean the tools are absent —
+            // A disabled/stale row here does NOT mean the tools are absent —
             // the authoritative signal is whether `workbench_*` tools are in the
             // toolset this turn. The annotation prevents the agent from misreading the
             // row as "blocked".
-            status: !senses.workbench.enabled
-                ? "disabled (runtime-injected when launched by Workbench app)"
-                : configured.workbench ? "ready" : "needs_config",
+            status: workbenchHasStaleBundleEntry
+                ? "stale_bundle_entry (runtime-injected when launched by Workbench app; run ouro connect workbench to clean agent.json)"
+                : "disabled (runtime-injected when launched by Workbench app)",
         },
     ];
     return rows.map((row) => `- ${row.label}: ${row.status}`);

package/dist/mind/prompt.js

@@ -435,6 +435,28 @@ function hasTextField(record, key) {
 function recordOrUndefined(value) {
     return !!value && typeof value === "object" && !Array.isArray(value) ? value : undefined;
 }
+function rawWorkbenchBundleEntryPresent() {
+    try {
+        const raw = JSON.parse(fs.readFileSync(path.join((0, identity_1.getAgentRoot)(), "agent.json"), "utf-8"));
+        const senses = recordOrUndefined(raw.senses);
+        const mcpServers = recordOrUndefined(raw.mcpServers);
+        const hasWorkbenchSense = senses
+            ? Object.prototype.hasOwnProperty.call(senses, "workbench")
+            : false;
+        const hasWorkbenchMcp = mcpServers
+            ? Object.prototype.hasOwnProperty.call(mcpServers, "ouro_workbench")
+            : false;
+        return hasWorkbenchSense || hasWorkbenchMcp;
+    }
+    catch {
+        return null;
+    }
+}
+function hasStaleWorkbenchBundleEntry(config) {
+    return rawWorkbenchBundleEntryPresent()
+        ?? (config.senses?.workbench?.enabled === true
+            || Object.prototype.hasOwnProperty.call(config.mcpServers ?? {}, "ouro_workbench"));
+}
 function localSenseStatusLines() {
     const config = (0, identity_1.loadAgentConfig)();
     const configuredSenses = config.senses ?? {};
@@ -460,6 +482,7 @@ function localSenseStatusLines() {
     const portableVoice = recordOrUndefined(runtimePayload.voice) ?? recordOrUndefined(payload.voice);
     const integrations = recordOrUndefined(runtimePayload.integrations) ?? recordOrUndefined(payload.integrations);
     const privateKeys = mailroom?.privateKeys;
+    const workbenchHasStaleBundleEntry = hasStaleWorkbenchBundleEntry(config);
     const configured = {
         cli: true,
         teams: hasTextField(teams, "clientId") && hasTextField(teams, "clientSecret") && hasTextField(teams, "tenantId"),
@@ -470,8 +493,7 @@ function localSenseStatusLines() {
             && hasTextField(voice, "whisperCliPath")
             && hasTextField(voice, "whisperModelPath"),
         a2a: true,
-        workbench: typeof config.mcpServers?.ouro_workbench?.command === "string"
-            && config.mcpServers.ouro_workbench.command.trim().length > 0,
+        workbench: false,
     };
     const rows = [
         { label: "CLI", status: "interactive" },
@@ -499,13 +521,13 @@ function localSenseStatusLines() {
             label: "Workbench",
             // Workbench can be injected at runtime (the Workbench app spawns
             // `ouro mcp-serve --workbench-mcp` for its boss) with NO agent.json entry.
-            // A disabled/needs_config row here does NOT mean the tools are absent —
+            // A disabled/stale row here does NOT mean the tools are absent —
             // the authoritative signal is whether `workbench_*` tools are in the
             // toolset this turn. The annotation prevents the agent from misreading the
             // row as "blocked".
-            status: !senses.workbench.enabled
-                ? "disabled (runtime-injected when launched by Workbench app)"
-                : configured.workbench ? "ready" : "needs_config",
+            status: workbenchHasStaleBundleEntry
+                ? "stale_bundle_entry (runtime-injected when launched by Workbench app; run ouro connect workbench to clean agent.json)"
+                : "disabled (runtime-injected when launched by Workbench app)",
         },
     ];
     return rows.map((row) => `- ${row.label}: ${row.status}`);
@@ -525,7 +547,7 @@ function senseRuntimeGuidance(channel, preReadStatusLines) {
     lines.push("teams setup truth: run `ouro connect teams --agent <agent>` from the connect bay; it stores Teams runtime/config fields and enables `senses.teams.enabled`.");
     lines.push("bluebubbles setup truth: run `ouro connect bluebubbles --agent <agent>` from the connect bay; it stores this machine's BlueBubbles URL/password/listener config in the agent vault machine runtime item.");
     lines.push("a2a setup truth: run `ouro connect a2a --agent <agent>` to enable the A2A sense, `ouro a2a card --agent <agent> --base-url <public-url>` to publish an agent card, and `ouro a2a onboard --agent <agent> --card-url <peer-card-url>` to add a peer as an agent friend. A2A uses the existing friend trust model, not a separate trust registry.");
-    lines.push("workbench setup truth: Ouro Workbench is the local machine sense for terminal/TUI agents. When the Workbench app launches me as its boss it injects the `ouro_workbench` MCP into my turn at runtime (it spawns `ouro mcp-serve --agent <me> --workbench-mcp`), so I receive the tools for the served session without any `agent.json` `mcpServers.ouro_workbench` entry — nothing is written to the bundle, so this stays path-free and cross-machine clean. The authoritative signal that Workbench is active is simply that the `workbench_*` tools are present in my toolset this turn; the sense table or `agent.json` may still read as disabled/needs_config because no bundle entry exists, and that is expected under runtime injection — I do NOT treat that as blocked or as a trust-level problem. I observe and queue auditable Workbench actions through `workbench_status`, `workbench_sense`, `workbench_transcript_tail`, `workbench_search_transcripts`, `workbench_recovery_drill`, and `workbench_request_action`; raw provider secrets remain in the agent vault, and Apple notarization is unrelated to local use. The explicit `ouro connect workbench --agent <me>` command still writes a persistent bundle entry as an opt-in escape hatch, but the boss does not need it.");
+    lines.push("workbench setup truth: Ouro Workbench is the local machine sense for terminal/TUI agents. When the Workbench app launches me as its boss it injects the `ouro_workbench` MCP into my turn at runtime (it spawns `ouro mcp-serve --agent <me> --workbench-mcp`), so I receive the tools for the served session without any `agent.json` `mcpServers.ouro_workbench` entry — nothing is written to the bundle, so this stays path-free and cross-machine clean. The authoritative signal that Workbench is active is simply that the `workbench_*` tools are present in my toolset this turn; the sense table may read as disabled when no bundle entry exists, or as `stale_bundle_entry` when legacy bundle config needs cleanup, and neither state proves the runtime-injected tools are absent — I do NOT treat that as blocked or as a trust-level problem. I observe and queue auditable Workbench actions through `workbench_status`, `workbench_sense`, `workbench_transcript_tail`, `workbench_search_transcripts`, `workbench_recovery_drill`, and `workbench_request_action`; raw provider secrets remain in the agent vault, and Apple notarization is unrelated to local use. The explicit `ouro connect workbench --agent <me>` command verifies the installed MCP binary and removes stale Workbench bundle entries; it does not enable `senses.workbench` or write `mcpServers.ouro_workbench`.");
     lines.push("mail setup AX: if a human asks me to set up email, I do not hand them a terminal checklist. I guide the flow end-to-end: name the current phase, run agent-runnable commands myself with shell/tools when available, ask the human only for human-required facts or browser actions, wait for their reply, verify the result, then continue.");
     lines.push("mail setup hard rule: never tell the human to run `ouro account ensure`, `ouro connect mail`, `ouro mail import-mbox`, `ouro status`, or `ouro doctor` for setup. Say what I am about to run, run it myself, and report the result. If my current surface cannot run shell/tools, I ask for a tool-capable Ouro setup session or companion to continue; I do not offload CLI operation to the human.");
     lines.push("mail setup truth: Agent Mail uses Mailroom, not HEY OAuth/IMAP. For the full work substrate account, the agent-runnable command is `ouro account ensure --agent <agent> --owner-email <email> --source hey`; use `ouro connect mail --agent <agent> --owner-email <email> --source hey` for mail-only repair/provisioning, or `--no-delegated-source` for native-only mail. The detailed runbook is `docs/agent-mail-setup.md`.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.692",
+  "version": "0.1.0-alpha.694",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",