@ouro.bot/cli 0.1.0-alpha.730 → 0.1.0-alpha.731

package/README.md

@@ -187,6 +187,8 @@ ouro dev --repo-path /path       # start from a specific repo checkout
 ouro dev --clone                 # clone repo to ~/Projects/ouroboros, build, start
 ouro status
 ouro logs
+ouro logs prune --agent <name>
+ouro mail sync-cache --agent <name>
 ouro stop
 ouro vault unlock --agent <name>
 ouro vault status --agent <name>
@@ -232,8 +234,14 @@ The generic secret primitive is a vault item / credential in the owning agent va
 
 `ouro connect bluebubbles --agent <name>` is the standard local-Mac setup path. Besides saving the machine-scoped attachment, it installs or verifies the native-compatible BlueBubbles LaunchAgent for a same-user bridge and reconciles one Ouro-owned `[*]` webhook after the listener is bound. The daemon repairs that owned callback every 180 seconds, preserves unrelated callbacks, and creates the desired callback before removing a stale owned one. If the listener or BlueBubbles API is unavailable, connect says the attachment was saved but setup is incomplete; `ouro doctor` and `ouro bluebubbles host status --json` separate app, service, process, HTTP, and webhook failures.
 
+Doctor keeps transport proof separate from conversation activity. When the BlueBubbles upstream and exact owned webhook are healthy but no recent inbound event exists, the result is quiet/unverified: quiet is not delivery-failure proof, and Ouro does not invent a message to test it. Standard recovery remains `ouro connect bluebubbles --agent <name>` when host or webhook evidence is unhealthy.
+
 When BlueBubbles runs in another logged-in macOS account, standard setup installs a generic helper and returns one nonce-bound `human-required` Terminal command for that account plus `ouro bluebubbles host collect --request-id <id>`. Ouro never asks for or stores the other account's login password. The receipt proves that one handoff and reports launchd only as point-in-time evidence; current process and HTTP health are checked separately.
 
+### Bounded doctor repairs
+
+Doctor may recommend two local, agent-qualified repairs. `ouro mail sync-cache --agent <name>` compares read-only hosted authority with the reconstructible local cache, then rebuilds only that cache; it does not mutate hosted mail. `ouro logs prune --agent <name>` rotates only the validated agent bundle's regular log streams. Ouro offers the prune command only for a canonical direct `<name>.ouro` bundle with a present `agent.json`; task-only `.ouro` work directories are not agents.
+
 ## Setting Up On Another Machine
 
 To clone an existing agent onto a new machine (macOS, Linux, or Windows via WSL2), see **[docs/cross-machine-setup.md](docs/cross-machine-setup.md)**. The short version is bundle plus vault: `npx ouro.bot@latest`, open the home deck, choose clone, enter the bundle's git remote URL, unlock the agent vault, refresh/verify credentials, and start with `ouro up`.

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.731",
+      "changes": [
+        "Keep doctor grounded: ignore task-only bundle directories and distinguish quiet BlueBubbles activity from verified transport faults.",
+        "Add read-only hosted-mail authority comparison and a fail-closed foreground command that reconstructs only the local search cache.",
+        "Make daemon log pruning explicitly agent-scoped, shell-safe, and fail closed on unknown, symlinked, non-regular, or containment-escaping targets.",
+        "Keep doctor repair guidance on the same canonical target preflight enforced by log execution.",
+        "Require hosted-mail cache coverage and liveness to follow fresh current authority, keep quiet old state healthy, treat transient or empty authority as unverified, and refuse empty-authority convergence before local mutation.",
+        "Keep delegated cache repair family-only across shell quote concatenation, compound grammar, ordered scalar/array expansion (including fail-closed malformed, wildcard, and dependency-rejection paths), path-qualified executables, wrappers, encoded scripts, and ambiguous ANSI-C escape synthesis without blocking unrelated argument data; bound recursive and large-input classification, reject malformed or duplicate cache-sync agent flags, and emit paired lifecycle evidence for every local repair success or failure.",
+        "Document BlueBubbles, mail-cache, and targeted-log recovery as standard Ouro setup and diagnostic behavior."
+      ]
+    },
     {
       "version": "0.1.0-alpha.730",
       "changes": [

package/dist/heart/daemon/cli-exec.js

@@ -118,6 +118,7 @@ const provider_ping_progress_1 = require("./provider-ping-progress");
 const provider_ping_1 = require("../provider-ping");
 const provider_readiness_cache_1 = require("../provider-readiness-cache");
 const agent_discovery_1 = require("./agent-discovery");
+const prunable_bundle_1 = require("./prunable-bundle");
 const boot_sync_probe_1 = require("./boot-sync-probe");
 const connect_bay_1 = require("./connect-bay");
 const runtime_capability_check_1 = require("../runtime-capability-check");
@@ -495,6 +496,7 @@ function invalidAgentSelectionMessage(agentNames) {
 }
 function agentResolutionFailureMode(command) {
     switch (command.kind) {
+        case "daemon.logs.prune":
         case "friend.list":
         case "friend.show":
         case "friend.create":
@@ -539,6 +541,7 @@ function agentResolutionFailureMode(command) {
         case "connect":
         case "account.ensure":
         case "mail.import-mbox":
+        case "mail.sync-cache":
         case "auth.run":
         case "auth.verify":
         case "auth.switch":
@@ -552,12 +555,12 @@ function agentResolutionFailureMode(command) {
             return undefined;
     }
 }
-async function resolveMissingAgentName(deps, failureMode) {
+async function resolveMissingAgentName(deps, failureMode, candidateOverride) {
     const runtimeAgent = runtimeContextAgentName(deps);
     if (runtimeAgent) {
         return { ok: true, agent: runtimeAgent };
     }
-    const discoveredAgents = normalizeCliAgentNames(await listCliAgents(deps));
+    const discoveredAgents = normalizeCliAgentNames(candidateOverride ?? await listCliAgents(deps));
     if (discoveredAgents.length === 0) {
         return { ok: false, message: noAgentsFoundMessage(), failureMode };
     }
@@ -587,7 +590,9 @@ async function resolveCommandAgent(command, deps) {
     if (explicitAgent) {
         return { ok: true, command: { ...command, agent: explicitAgent } };
     }
-    const resolvedAgent = await resolveMissingAgentName(deps, failureMode);
+    const resolvedAgent = await resolveMissingAgentName(deps, failureMode, command.kind === "daemon.logs.prune"
+        ? (0, prunable_bundle_1.listPrunableAgentBundles)({ bundlesRoot: deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)() })
+        : undefined);
     if (!resolvedAgent.ok)
         return resolvedAgent;
     return { ok: true, command: { ...command, agent: resolvedAgent.agent } };
@@ -6399,6 +6404,12 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
     if (command.kind === "mail.backfill-indexes") {
         return executeMailBackfillIndexes(command, deps);
     }
+    if (command.kind === "mail.sync-cache") {
+        const { runHostedMailCacheSync } = await Promise.resolve().then(() => __importStar(require("../../mailroom/cache-sync-cli")));
+        const text = await runHostedMailCacheSync(command.agent);
+        deps.writeStdout(text);
+        return text;
+    }
     if (command.kind === "daemon.up") {
         // ── dev mode cleanup: delete dev-config.json so the wrapper stops dispatching to dev repo ──
         /* v8 ignore start -- dev-config cleanup: requires real filesystem state @preserve */
@@ -7048,7 +7059,10 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
             deps.writeStdout(message);
             return message;
         }
-        const result = deps.pruneDaemonLogs();
+        const result = deps.pruneDaemonLogs({
+            agentName: command.agent,
+            bundlesRoot: deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)(),
+        });
         const message = `compacted ${result.filesCompacted} file${result.filesCompacted === 1 ? "" : "s"}, freed ${result.bytesFreed} bytes`;
         deps.writeStdout(message);
         return message;
@@ -8354,6 +8368,8 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
             readFileSync: (p) => fs.readFileSync(p, "utf-8"),
             readdirSync: (p) => fs.readdirSync(p),
             statSync: (p) => fs.statSync(p),
+            lstatSync: (p) => fs.lstatSync(p),
+            realpathSync: (p) => fs.realpathSync(p),
             /* v8 ignore stop */
             checkSocketAlive: deps.checkSocketAlive,
             fetchImpl: deps.fetchImpl ?? fetch,
@@ -8363,6 +8379,24 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
             homedir: os.homedir(),
             envPath: process.env.PATH ?? "",
             platform: process.platform,
+            observeHostedMailAuthority: async (agentName) => {
+                const resolved = (0, reader_1.resolveHostedMailAuthority)(agentName);
+                if (!resolved.ok)
+                    return { ok: false, definitive: true, detail: resolved.error };
+                try {
+                    return { ok: true, observation: await resolved.authority.observeMessageIndexAuthority(agentName) };
+                }
+                catch (error) {
+                    const statusCode = typeof error === "object" && error !== null && "statusCode" in error
+                        ? error.statusCode
+                        : undefined;
+                    return {
+                        ok: false,
+                        definitive: statusCode === 401 || statusCode === 403 || statusCode === 404,
+                        detail: error instanceof Error ? error.message : String(error),
+                    };
+                }
+            },
         };
         const doctorResult = command.category
             ? await (0, doctor_1.runDoctorChecks)(doctorDeps, { category: command.category })

package/dist/heart/daemon/cli-help.js

@@ -40,7 +40,7 @@ exports.COMMAND_REGISTRY = {
     logs: {
         category: "Lifecycle",
         description: "View or prune daemon logs",
-        usage: "ouro logs [prune]",
+        usage: "ouro logs | ouro logs prune --agent <name>",
         example: "ouro logs",
         subcommands: ["prune"],
     },
@@ -261,10 +261,10 @@ exports.COMMAND_REGISTRY = {
     },
     mail: {
         category: "Auth",
-        description: "Import delegated mail and repair hosted Mailroom mailbox indexes",
-        usage: "ouro mail <import-mbox|backfill-indexes> [--agent <name>]",
+        description: "Import delegated mail and repair hosted Mailroom indexes or local search cache",
+        usage: "ouro mail <import-mbox|backfill-indexes|sync-cache> [--agent <name>]",
         example: "ouro mail import-mbox --discover --owner-email you@example.com --source hey --agent <agent>",
-        subcommands: ["import-mbox", "backfill-indexes"],
+        subcommands: ["import-mbox", "backfill-indexes", "sync-cache"],
     },
     use: {
         category: "Auth",
@@ -540,6 +540,11 @@ const SUBCOMMAND_HELP = {
         usage: "ouro mail backfill-indexes [--agent <name>] [--foreground]",
         example: "ouro mail backfill-indexes --agent <agent>",
     },
+    "mail sync-cache": {
+        description: "Converge the local decrypted search cache against complete hosted Mailroom authority in the foreground.",
+        usage: "ouro mail sync-cache [--agent <name>]",
+        example: "ouro mail sync-cache --agent <agent>",
+    },
     "provider refresh": {
         description: "Reload this agent's provider credentials from its vault into the running daemon",
         usage: "ouro provider refresh [--agent <name>]",

package/dist/heart/daemon/cli-parse.js

@@ -19,6 +19,7 @@ const cli_help_1 = require("./cli-help");
 const cli_desk_1 = require("./cli-desk");
 const flight_recorder_1 = require("../../arc/flight-recorder");
 const core_1 = require("../../nerves/review/core");
+const prunable_bundle_1 = require("./prunable-bundle");
 const vault_items_1 = require("./vault-items");
 // ── Shared helpers ──
 function extractAgentFlag(args) {
@@ -29,6 +30,22 @@ function extractAgentFlag(args) {
     const rest = [...args.slice(0, idx), ...args.slice(idx + 2)];
     return { agent, rest };
 }
+function parseLogsCommand(args) {
+    if (args.length === 0)
+        return { kind: "daemon.logs" };
+    if (args[0] !== "prune")
+        throw new Error("Usage: ouro logs prune [--agent <name>]");
+    const tail = args.slice(1);
+    const agentFlagCount = tail.filter((token) => token === "--agent").length;
+    const { agent, rest } = extractAgentFlag(tail);
+    if (agentFlagCount > 1 ||
+        rest.length > 0 ||
+        (agentFlagCount === 1 && !agent) ||
+        (agent !== undefined && !(0, prunable_bundle_1.isSafePrunableAgentName)(agent))) {
+        throw new Error("Usage: ouro logs prune [--agent <name>]");
+    }
+    return { kind: "daemon.logs.prune", ...(agent ? { agent } : {}) };
+}
 function extractFacingFlag(args) {
     const idx = args.indexOf("--facing");
     if (idx === -1 || idx + 1 >= args.length)
@@ -1094,7 +1111,17 @@ function parseConnectCommand(args) {
 }
 function parseMailCommand(args) {
     const [sub, ...subArgs] = args;
-    const usageText = "Usage: ouro mail import-mbox (--file <path>|--discover) [--owner-email <email>] [--source <label>] [--agent <name>] [--foreground]\n       ouro mail backfill-indexes [--agent <name>] [--foreground]";
+    const usageText = "Usage: ouro mail import-mbox (--file <path>|--discover) [--owner-email <email>] [--source <label>] [--agent <name>] [--foreground]\n       ouro mail backfill-indexes [--agent <name>] [--foreground]\n       ouro mail sync-cache [--agent <name>]";
+    if (sub === "sync-cache") {
+        const agentFlagCount = subArgs.filter((token) => token === "--agent").length;
+        const { agent, rest } = extractAgentFlag(subArgs);
+        if (agentFlagCount > 1 ||
+            rest.length > 0 ||
+            (agentFlagCount === 1 && (!agent || agent.trim().length === 0 || agent.trim().startsWith("--")))) {
+            throw new Error("Usage: ouro mail sync-cache [--agent <name>]");
+        }
+        return { kind: "mail.sync-cache", ...(agent ? { agent } : {}) };
+    }
     if (sub === "backfill-indexes") {
         const { agent, rest } = extractAgentFlag(subArgs);
         let foreground = false;
@@ -2568,11 +2595,8 @@ function parseOuroCommand(args) {
         return parseMailCommand(args.slice(1));
     if (head === "dns")
         return parseDnsCommand(args.slice(1));
-    if (head === "logs") {
-        if (second === "prune")
-            return { kind: "daemon.logs.prune" };
-        return { kind: "daemon.logs" };
-    }
+    if (head === "logs")
+        return parseLogsCommand(args.slice(1));
     if (head === "mailbox" || head === "outlook")
         return { kind: "mailbox", ...(args.includes("--json") ? { json: true } : {}) };
     if (head === "hatch")