@ouro.bot/cli 0.1.0-alpha.733 → 0.1.0-alpha.735

package/changelog.json

@@ -1,6 +1,40 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.735",
+      "changes": [
+        "Repair Mendelow Cloud Butler for Sanctuary's Unraid legacy adoption with an explicit source-to-target machine identity migration that validates the complete credential envelope before applying only in-memory canonical clones while preserving the original source for recovery and the shipped durable approvals contract.",
+        "Split adoption into resumable preparation, hidden-input provider authentication, strict live GLM/Gemini readiness, and a noninteractive final install that revalidates the exact legacy container and image immediately before mutation.",
+        "Make legacy evidence capture restart-safe with exact container/image-bound validation, private atomic no-overwrite publication, deterministic partial-snapshot reuse, and fail-closed rejection of conflicting or unsafe evidence.",
+        "Supersede 0.1.0-alpha.734 before deployment; it must not be built, imported, or installed on Sanctuary."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.734",
+      "changes": [
+        "Ship Mendelow Cloud Butler for Sanctuary with an authorized durable Telegram inbox, restart-safe durable approvals, scoped Unraid read/restart tools, and transition-based proactive health alerts.",
+        "Pin the packaged Sanctuary agent to GLM-5.2 through the locked OpenAI-compatible provider in both outward and inner lanes; MiniMax is not a deployment fallback.",
+        "Fence ambiguous Telegram update, approval-prompt, approved-action, and alert-delivery crash windows so protected effects are never blindly replayed.",
+        "Route every packaged deterministic Sanctuary health source through one native daemon-owned Supercronic lifecycle with namespace-isolated manifests, exact readiness verification, durable occurrence receipts/cursors, habit-wide overlap rejection, coordinated shutdown, no model turn, and no verified-schedule timer fallback.",
+        "Consume each authenticated Sanctuary scheduler slot through a crash-durable no-replace claim before any health effect, keep Unit 16f strictly observer-only across failure and recovery, verify complete scheduler and owner attestations before host finalization, and fsync new receipt directories plus temporary cleanup across crash boundaries.",
+        "Package a reproducible non-root Unraid image and canonical Mendelow Cloud Butler bundle/template, pin production dependencies, reject stale or ambiguous server state, and strictly validate then conflict-reconcile one-time container credentials into the canonical vault before attested readback, cache activation, or source deletion; interrupted claims remain recoverable and bootstrap failure exits PID 1 nonzero.",
+        "Fail closed before handler dispatch when a provider emits malformed, duplicate, mixed-validity, or unadvertised tool calls; scope the typed Unraid Telegram profile to Sanctuary while preserving generic Telegram agents, and discard secret-bearing transport error objects after redaction.",
+        "Audit staged Unraid templates plus actual image and stopped-container inspect records against the exact immutable local Docker image ID, image environment, direct daemon command, non-root user, exact two writable roots, host networking, updater-off policy, and absence of ports, devices, capabilities, or injected container flags before activation; preserve one Telegram poller through bounded-readiness cutover, rollback, restore, and atomic Unraid autostart readback.",
+        "Consume approval decision tokens before continuation work and persist token-free terminal tombstones so failed callbacks cannot replay within the same process or after restart.",
+        "Give each agent an independently enforced paid habit budget, route health alerts through bounded private turns, and durably resume cached delivery payloads without replaying ambiguous sends.",
+        "Close final butler runtime coverage gaps with behavioral contracts and no production coverage suppressions, keep Supercronic single-owned when start races a pending restart, preserve idempotent prompt-binding abandonment records, initialize daemon heartbeat shutdown exactly once, remove duplicate post-schema validation branches in the core tool loop, and guard every update, staging, production, and restore activation boundary with fault-injected failure propagation, immediate temporary cleanup, and verified rollback before autostart changes persist.",
+        "Keep Telegram identities, approval bindings, and durable inbox receipts opaque across token rotation and legacy migration; proactively terminalize expired approvals, isolate per-record recovery failures, join active dispatch before shutdown, and retain exactly-once fences without persisting raw Telegram envelopes.",
+        "Ship a packaged non-logging Sanctuary acceptance harness for Telegram bootstrap, opaque evidence deltas, callback concurrency and replay, exact-set Unraid key rotation, and reboot-resume proof; make legacy cutover, provider readiness, backup restore, autostart, rollback, and credential retirement fail closed against the exact live Unraid topology before mutation.",
+        "Complete the operator-only Sanctuary acceptance gate with a fixed packaged contract, bounded subprocess and Telegram calls, a redacted full-matrix evidence index/verifier, live-shape Unraid key adapters, exact two-credential retirement, authenticated WebGUI autostart updates, cached-vault reuse, and fail-closed legacy-envelope import before provider readiness.",
+        "Bind the final Sanctuary proof to exact packaged harness bytes, complete per-operation evidence, sealed continuity coordinates, exact Unraid key identities and capability outcomes, and bounded host-side retirement adapters without exposing credential material or broad host control.",
+        "Make Unit16f wait for a real scheduler-origin Sanctuary health sweep, authenticate the exact live Supercronic parent and cron slot with Sanctuary identity material, bind the durable receipt to daemon-issued occurrence and runner identities plus the supervised single-child PID 1 manifest snapshot, and reject missing, duplicate, manual, paid, delivered, forged, or replayed evidence.",
+        "Keep approval expiry observation on absolute one-second deadlines independently of per-prompt Telegram edit retries, preserve authenticated expiry tombstones through restart, and compose the real durable prompt, callback, continuation, terminal-edit, and stale-tap lifecycle in tests.",
+        "Persist and authenticate the first approval-expiry observation before any side effect or callback acknowledgement, make that durable observation permanently terminal even across wall-clock rollback, roll back transient persistence failures for exact same-process retry, serialize callback, recovery, and tombstone-purge terminalization, MAC-bind tombstone, stale-tap, decision-attempt, late-terminal outcome, and deterministic settlement-receipt state, enforce one lifecycle-aware structural invariant across every callback and cleanup path so partial authority, expiry, tombstone, and delivery-interruption records fail closed, retain decision authority through an unfiltered append-and-rotation fsynced audit barrier for every approval, truthfully distinguish acknowledged, Telegram-rejected, and restart-indeterminate settlement, fail startup rather than orphan-clean an unrecovered decision fence, and prove approve/deny post-TTL recovery through real durable stores.",
+        "Pin each Telegram effect to one acceptance-scenario observation before its initial audit barrier, rotate healthy owners only at quiescent boundaries, reject marker changes before any effect can run, and bind delayed socket and timer callbacks to the scenario active when they execute.",
+        "Preserve and directly verify every fail-closed Sanctuary approval, restart, audit-lease, socket, filesystem-race, malformed-state, settlement, canonical-path, and quarantine-cleanup invariant at complete cross-platform branch coverage; remove dominated fallbacks only where owning workflows make them unreachable, keep receipts, active-marker facts, and marker lifecycle operations bound to one configured agent root, introduce cohesive production filesystem, loopback-server, process, and CLI boundaries for deterministic fault handling, normalize required health-probe dependencies without discarding optional overrides, and build-smoke the actual packaged process entry with canonical stderr and no logging leakage."
+      ]
+    },
     {
       "version": "0.1.0-alpha.733",
       "changes": [

package/deploy/unraid/Dockerfile

@@ -0,0 +1,27 @@
+FROM node:22-bookworm-slim
+
+ARG SUPERCRONIC_SHA256=5adff01c5a797663948e656d2b61d10932369ee437eb5cb54fa872b2960f222b
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends ca-certificates curl procps python3 make g++ \
+  && rm -rf /var/lib/apt/lists/* \
+  && curl -fsSLo /usr/local/bin/supercronic https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-amd64 \
+  && echo "${SUPERCRONIC_SHA256}  /usr/local/bin/supercronic" | sha256sum -c - \
+  && chmod 0755 /usr/local/bin/supercronic \
+  && groupadd --gid 10001 ouro \
+  && useradd --uid 10001 --gid 10001 --home-dir /home/ouro --create-home --shell /usr/sbin/nologin ouro
+
+WORKDIR /opt/ouro
+COPY package.json npm-shrinkwrap.json ./
+RUN npm ci --omit=dev --workspaces=false --no-audit --no-fund
+COPY dist ./dist
+COPY assets ./assets
+COPY skills ./skills
+COPY changelog.json ./changelog.json
+COPY deploy/unraid/container-runtime.json ./container-runtime.json
+COPY deploy/unraid /opt/ouro/deploy/unraid
+RUN chown -R 10001:10001 /opt/ouro /home/ouro
+
+USER 10001:10001
+ENV HOME=/home/ouro
+HEALTHCHECK --interval=30s --timeout=5s --start-period=60s --retries=3 CMD ["node","/opt/ouro/dist/heart/daemon/container-healthcheck.js","--agent","sanctuary"]
+ENTRYPOINT ["node","/opt/ouro/dist/heart/daemon/daemon-entry.js"]