@ouro.bot/cli 0.1.0-alpha.741 → 0.1.0-alpha.743

package/changelog.json

@@ -1,6 +1,48 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.743",
+      "changes": [
+        "Turn Sanctuary system evidence into one deduplicated, agent-owned care loop with durable snoozes, reminders, and resolution.",
+        "Add family-safe Telegram admission, relationship-scoped privacy and authority, approval, revocation, and friendly household UX.",
+        "Publish Mendelow Cloud Butler as a non-root multi-architecture Unraid Community Apps container with read-only privileged event ingress, provenance, and an SBOM.",
+        "Harden exact-image Unraid updates and privileged event ingestion with package-derived deployment staging, transactional guard installation, canonical boot verification, bounded spool recovery, and fail-closed integrity checks.",
+        "Keep live Sanctuary upgrades aligned with the packaged Butler contract through an idempotent package-managed persona, tools, habits, and metadata migration with exact non-recursive cleanup, a digest-verified crash-durable rollback journal bound to exact old and target images, and no package-carried action authority.",
+        "Recover package-managed upgrades across every old-container rename, start, and autostart kill boundary by accepting only an exact, unambiguous old-image production topology before idempotently completing rollback.",
+        "Treat missing credentials, transport failures, HTTP or API rejection, malformed JSON, and schema drift as redacted indeterminate Usenet health evidence for the existing agent-owned incident loop while keeping SAB credentials out of process arguments and repeated classified observations quiet.",
+        "Adopt the exact unmarked legacy Usenet cron entry without duplicate guard runs, and preserve credential-censored host scripts, boot hooks, cron state, image labels, and package provenance in a verified transactional backup and restore path.",
+        "Keep durable host snapshots credential-free by storing only Butler-owned boot and cron fragments, preserving unrelated live content during transactional restore, and rejecting common header, CLI, URL, private-key, JSON, YAML, and Telegram secret forms in owned assets.",
+        "Restrict host restore to four exact canonical Butler boot hooks, fail closed on indeterminate crontab reads, preserve similarly named third-party hooks, and attempt every rollback compensation before surfacing failure.",
+        "Keep installer transaction copies on private ephemeral storage, reserve temporary cron files against symlink races, recognize only the two exact Butler cron forms, and remove exact target-local residue on the next run after interruption.",
+        "Preserve similarly marked external cron jobs during install, restore, and boot activation while reserving every root-crontab working file inside a private transaction directory.",
+        "Keep the cross-platform coverage gate truthful by excluding the BlueBubbles ingress evidence file that contains only TypeScript declarations and no executable production code.",
+        "Verify boot-installed guard assets using Unraid's real VFAT ownership and mode semantics while retaining stricter staged-file permissions before installation.",
+        "Make the Butler signal-first and family-friendly with agent-owned issue triage, quiet unchanged evidence, canonical owner context, terminal request-bound household returns, owner-managed admission and revocation, learned preferences, full operational visibility, and a warm, wry voice.",
+        "Preserve owner, household, and external-event authority across scheduled awaits, terminally archive definitively stale bindings while preserving corrupt state for repair, and keep event snoozes on the existing exact-receipt disposition and router path without fabricating human obligations.",
+        "Verify real Sanctuary service, storage, download-queue, spend-guard, and recovery outcomes while keeping first-class Community Apps publication immutable, public, securely installed, and bound to the canonical ouro-butler container.",
+        "Bind every post-activation acceptance launch explicitly to the final production topology so staging defaults cannot inspect or drive the wrong container.",
+        "Publish the Community Apps listing under the Mendelow Cloud Butler name, label the alpha channel as beta, and place it in the Utilities category.",
+        "Align final Sanctuary acceptance with the live four-mount container, live relationship profiles, pending stranger quarantine and admission-card flow, and acceptance-only delivery probe without inventing dropped updates, family sessions, or a production daily digest.",
+        "Fail closed when admission acceptance lacks its production Telegram credential dependency, and cover missing identity, unresolved live-profile handlers, absent admission projections, and both quarantine branches at the release gate."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.742",
+      "changes": [
+        "Ship Sanctuary on the cost-effective MiniMax-M3 provider path after live vault readiness proved both outward and inner lanes, with optional Gemini no longer required for readiness.",
+        "Keep the packaged Unraid bundle on the same MiniMax-M3 lane the live Sanctuary vault uses.",
+        "Update the packaged Unraid readiness/adoption checks to require only the production MiniMax credential and live MiniMax lane checks before cutover.",
+        "Accept Supercronic's real shell-mediated cron process tree while preserving authenticated Sanctuary scheduler provenance.",
+        "Refresh machine-scoped runtime credentials before the Sanctuary health habit creates typed Unraid tools.",
+        "Create the Sanctuary health state directory before taking the first health sweep lease.",
+        "Retry cached Sanctuary health Telegram deliveries from the durable outbox after an indeterminate send and pin the Unraid template DNS resolver for Node-based Telegram egress.",
+        "Sequence same-provider Flash acceptance probes to avoid provider-side rate-limit flakiness while preserving exact provider/model attempt binding.",
+        "Treat settled Telegram turns that are safely waiting for new input as healthy context-loss state instead of relatching the Sentinel as blocked.",
+        "Validate the live container process tree for agent, Telegram, and Supercronic health instead of failing on a stale child PID in daemon-health.json.",
+        "Accept Supercronic's real shell-mediated cron ancestry when authenticating Sanctuary health scheduler fires."
+      ]
+    },
     {
       "version": "0.1.0-alpha.741",
       "changes": [

package/deploy/unraid/Dockerfile

@@ -1,10 +1,15 @@
 FROM node:22-bookworm-slim
 
-ARG SUPERCRONIC_SHA256=5adff01c5a797663948e656d2b61d10932369ee437eb5cb54fa872b2960f222b
+LABEL org.opencontainers.image.source="https://github.com/ourostack/ouroboros"
+
+ARG TARGETARCH
+ARG SUPERCRONIC_AMD64_SHA256=5adff01c5a797663948e656d2b61d10932369ee437eb5cb54fa872b2960f222b
+ARG SUPERCRONIC_ARM64_SHA256=c0576a8eb092e3f79108ed0a2155a25c7766af78456e5a6070e54757ef513bfe
 RUN apt-get update \
   && apt-get install -y --no-install-recommends ca-certificates curl procps python3 make g++ \
   && rm -rf /var/lib/apt/lists/* \
-  && curl -fsSLo /usr/local/bin/supercronic https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-amd64 \
+  && case "$TARGETARCH" in amd64) SUPERCRONIC_SHA256="$SUPERCRONIC_AMD64_SHA256" ;; arm64) SUPERCRONIC_SHA256="$SUPERCRONIC_ARM64_SHA256" ;; *) echo "unsupported architecture: $TARGETARCH" >&2; exit 1 ;; esac \
+  && curl -fsSLo /usr/local/bin/supercronic "https://github.com/aptible/supercronic/releases/download/v0.2.46/supercronic-linux-${TARGETARCH}" \
   && echo "${SUPERCRONIC_SHA256}  /usr/local/bin/supercronic" | sha256sum -c - \
   && chmod 0755 /usr/local/bin/supercronic \
   && groupadd --gid 10001 ouro \