@ouro.bot/cli 0.1.0-alpha.747 → 0.1.0-alpha.749

package/changelog.json

@@ -1,6 +1,20 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.749",
+      "changes": [
+        "Fix Unraid Butler autostart updates through the root-local Docker manager backend with durable rollback and ghost-entry preservation.",
+        "Align the packaged Sanctuary template and bundle runtime metadata with alpha.749."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.748",
+      "changes": [
+        "Reject any unexpected running Ouro image or writable Sanctuary-root overlap, including legacy and package-managed layouts, across zero-poller and active-poller deployment handoffs.",
+        "Remove the exact legacy Unraid boot hook that rewrites the managed Usenet cron entry after reboot."
+      ]
+    },
     {
       "version": "0.1.0-alpha.747",
       "changes": [

package/deploy/unraid/README.txt

@@ -52,12 +52,55 @@ Effective-spec audit helper:
       trap - EXIT || return $?
       )
     }
-  Define these helpers in the same root shell. Each autostart change uses
-  Unraid's authenticated loopback WebGUI endpoint with the live root-session
-  CSRF token supplied only on request stdin. Requests have hard connection and
-  total timeouts, discard response bodies, and read back the durable array
-  autostart state without writing its backing file directly:
-    set_butler_autostart() {
+  Define these helpers in the same root shell. Each profile change calls Unraid's
+  own root-local Docker manager backend, after proving exact durable identities.
+  A missing Butler entry is a no-op when disabling; this avoids the backend's
+  false-to-index-zero behavior. The helper preserves every non-Butler row byte
+  for byte and restores the complete captured file atomically on any failure:
+    butler_autostart_counts() {
+      (
+      AUTOSTART_FILE=/var/lib/docker/unraid-autostart
+      test -f "$AUTOSTART_FILE" || return $?
+      awk '
+        $1 == "ouro-butler" { production++ }
+        $1 == "ouro-butler-staging" { staging++ }
+        $1 == "ouro-butler-rollback" { rollback++ }
+        $1 == "ouro-butler-legacy-evidence" { legacy++ }
+        END { printf "%d %d %d %d", production + 0, staging + 0, rollback + 0, legacy + 0 }
+      ' "$AUTOSTART_FILE"
+      )
+    }
+    snapshot_nonbutler_autostart() {
+      awk '
+        $1 != "ouro-butler" && $1 != "ouro-butler-staging" && $1 != "ouro-butler-rollback" && $1 != "ouro-butler-legacy-evidence" { print }
+      ' /var/lib/docker/unraid-autostart
+    }
+    run_unraid_autostart_backend() {
+      (
+      AUTOSTART_ACTION=$1
+      AUTOSTART_CONTAINER=$2
+      AUTOSTART_VALUE=$3
+      case "$AUTOSTART_ACTION:$AUTOSTART_VALUE" in wait:0|autostart:true|autostart:false) ;; *) return 1 ;; esac
+      case "$AUTOSTART_CONTAINER" in
+        ouro-butler|ouro-butler-staging|ouro-butler-rollback|ouro-butler-legacy-evidence) ;;
+        *) return 1 ;;
+      esac
+      timeout -s KILL 20 /usr/bin/php -r '
+        [$action, $container, $value] = array_slice($argv, 1);
+        $allowed = ["ouro-butler", "ouro-butler-staging", "ouro-butler-rollback", "ouro-butler-legacy-evidence"];
+        if (!in_array($container, $allowed, true)) exit(2);
+        if ($action === "wait" && $value === "0") {
+          $_POST = ["action" => "wait", "container" => $container, "wait" => "0"];
+        } elseif ($action === "autostart" && ($value === "true" || $value === "false")) {
+          $_POST = ["action" => "autostart", "container" => $container, "auto" => $value, "wait" => "0"];
+        } else exit(2);
+        $_SERVER["DOCUMENT_ROOT"] = "/usr/local/emhttp";
+        $_SERVER["REQUEST_URI"] = "docker";
+        require "/usr/local/emhttp/plugins/dynamix.docker.manager/include/UpdateConfig.php";
+      ' "$AUTOSTART_ACTION" "$AUTOSTART_CONTAINER" "$AUTOSTART_VALUE"
+      )
+    }
+    mutate_butler_autostart() {
       (
       AUTOSTART_CONTAINER=$1
       AUTOSTART_ENABLED=$2
@@ -66,35 +109,102 @@ Effective-spec audit helper:
         *) return 1 ;;
       esac
       case "$AUTOSTART_ENABLED" in true|false) ;; *) return 1 ;; esac
-      AUTOSTART_CSRF_FILE=/var/local/emhttp/var.ini
-      test -f "$AUTOSTART_CSRF_FILE" || return $?
-      AUTOSTART_CSRF_TOKEN=$(awk -F= '$1 == "csrf_token" {
-        value = $2
-        sub(/^"/, "", value)
-        sub(/"$/, "", value)
-        print value
-      }' "$AUTOSTART_CSRF_FILE") || return $?
-      test -n "$AUTOSTART_CSRF_TOKEN" || return $?
-      case "$AUTOSTART_CSRF_TOKEN" in *[!A-Za-z0-9._-]*) return 1 ;; esac
-      printf '%s' "action=autostart&container=$AUTOSTART_CONTAINER&auto=$AUTOSTART_ENABLED&wait=0&csrf_token=$AUTOSTART_CSRF_TOKEN" | \
-        curl --silent --show-error --fail --request POST \
-          --connect-timeout 5 --max-time 15 \
-          --header 'Content-Type: application/x-www-form-urlencoded' \
-          --data-binary @- --output /dev/null \
-          http://127.0.0.1/plugins/dynamix.docker.manager/include/UpdateConfig.php || return $?
+      AUTOSTART_COUNT=$(awk -v name="$AUTOSTART_CONTAINER" '$1 == name { count++ } END { print count + 0 }' /var/lib/docker/unraid-autostart) || return $?
+      case "$AUTOSTART_COUNT" in 0|1) ;; *) return 1 ;; esac
+      if test "$AUTOSTART_ENABLED" = false && test "$AUTOSTART_COUNT" -eq 0; then
+        return 0
+      fi
+      if test "$AUTOSTART_COUNT" -eq 1; then
+        run_unraid_autostart_backend wait "$AUTOSTART_CONTAINER" 0 || return $?
+      fi
+      if test "$AUTOSTART_ENABLED" = false; then
+        run_unraid_autostart_backend autostart "$AUTOSTART_CONTAINER" false || return $?
+        AUTOSTART_EXPECTED_COUNT=0
+      else
+        if test "$AUTOSTART_COUNT" -eq 0; then
+          run_unraid_autostart_backend autostart "$AUTOSTART_CONTAINER" true || return $?
+        fi
+        AUTOSTART_EXPECTED_COUNT=1
+      fi
+      AUTOSTART_COUNT=$(awk -v name="$AUTOSTART_CONTAINER" '$1 == name { count++ } END { print count + 0 }' /var/lib/docker/unraid-autostart) || return $?
+      test "$AUTOSTART_COUNT" -eq "$AUTOSTART_EXPECTED_COUNT" || return $?
       )
     }
-    butler_autostart_counts() {
+    set_butler_autostart() {
       (
+      AUTOSTART_PROFILE=$1
+      case "$AUTOSTART_PROFILE" in disabled|production) ;; *) return 1 ;; esac
+      test "$(id -u)" -eq 0 || return $?
       AUTOSTART_FILE=/var/lib/docker/unraid-autostart
-      test -f "$AUTOSTART_FILE" || return $?
-      awk '
-        $1 == "ouro-butler" { production++ }
-        $1 == "ouro-butler-staging" { staging++ }
-        $1 == "ouro-butler-rollback" { rollback++ }
-        $1 == "ouro-butler-legacy-evidence" { legacy++ }
-        END { printf "%d %d %d %d", production + 0, staging + 0, rollback + 0, legacy + 0 }
-      ' "$AUTOSTART_FILE"
+      AUTOSTART_INCLUDE=/usr/local/emhttp/plugins/dynamix.docker.manager/include/UpdateConfig.php
+      test -f "$AUTOSTART_FILE" && test ! -L "$AUTOSTART_FILE" || return 1
+      test "$(stat -c '%u:%g:%a' "$AUTOSTART_FILE")" = 0:0:644 || return $?
+      test -f "$AUTOSTART_INCLUDE" && test ! -L "$AUTOSTART_INCLUDE" || return 1
+      test "$(stat -c '%u:%g:%a' "$AUTOSTART_INCLUDE")" = 0:0:644 || return $?
+      AUTOSTART_COUNTS=$(butler_autostart_counts) || return $?
+      set -- $AUTOSTART_COUNTS
+      test "$#" -eq 4 || return $?
+      for AUTOSTART_COUNT in "$@"; do case "$AUTOSTART_COUNT" in 0|1) ;; *) return 1 ;; esac; done
+      if test "$AUTOSTART_PROFILE" = production; then
+        docker container inspect ouro-butler >/dev/null 2>&1 || return $?
+      fi
+      AUTOSTART_BACKUP=$(mktemp /var/lib/docker/.unraid-autostart.ouro.XXXXXX) || return $?
+      AUTOSTART_NONBUTLER_BEFORE=$(mktemp /run/unraid-autostart.nonbutler-before.XXXXXX) || { rm -f -- "$AUTOSTART_BACKUP"; return 1; }
+      AUTOSTART_NONBUTLER_AFTER=$(mktemp /run/unraid-autostart.nonbutler-after.XXXXXX) || { rm -f -- "$AUTOSTART_BACKUP" "$AUTOSTART_NONBUTLER_BEFORE"; return 1; }
+      AUTOSTART_COMMITTED=no
+      AUTOSTART_BACKUP_READY=no
+      AUTOSTART_RESTORE_TMP=
+      autostart_cleanup() {
+        AUTOSTART_STATUS=$?
+        trap - EXIT HUP INT TERM
+        if test "$AUTOSTART_COMMITTED" = yes; then
+          rm -f -- "$AUTOSTART_BACKUP" || AUTOSTART_STATUS=1
+        elif test "$AUTOSTART_BACKUP_READY" = yes; then
+          AUTOSTART_RESTORE_TMP=$(mktemp /var/lib/docker/.unraid-autostart.restore.XXXXXX) || AUTOSTART_RESTORE_TMP=
+          if test -n "$AUTOSTART_RESTORE_TMP" \
+            && cp -p -- "$AUTOSTART_BACKUP" "$AUTOSTART_RESTORE_TMP" \
+            && sync -f "$AUTOSTART_RESTORE_TMP" \
+            && mv -f -- "$AUTOSTART_RESTORE_TMP" "$AUTOSTART_FILE" \
+            && sync -f "$AUTOSTART_FILE" \
+            && sync -f /var/lib/docker; then
+            rm -f -- "$AUTOSTART_BACKUP" || AUTOSTART_STATUS=1
+          else
+            test -z "$AUTOSTART_RESTORE_TMP" || rm -f -- "$AUTOSTART_RESTORE_TMP"
+            printf 'CRITICAL: Butler autostart rollback failed; recovery copy preserved at %s\n' "$AUTOSTART_BACKUP" >&2
+            AUTOSTART_STATUS=1
+          fi
+        else
+          rm -f -- "$AUTOSTART_BACKUP" || AUTOSTART_STATUS=1
+        fi
+        rm -f -- "$AUTOSTART_NONBUTLER_BEFORE" "$AUTOSTART_NONBUTLER_AFTER" || AUTOSTART_STATUS=1
+        exit "$AUTOSTART_STATUS"
+      }
+      trap autostart_cleanup EXIT
+      trap 'exit 129' HUP
+      trap 'exit 130' INT
+      trap 'exit 143' TERM
+      cp -p -- "$AUTOSTART_FILE" "$AUTOSTART_BACKUP" || return $?
+      cmp -s -- "$AUTOSTART_FILE" "$AUTOSTART_BACKUP" || return 1
+      sync -f "$AUTOSTART_BACKUP" || return $?
+      sync -f /var/lib/docker || return $?
+      AUTOSTART_BACKUP_READY=yes
+      snapshot_nonbutler_autostart >"$AUTOSTART_NONBUTLER_BEFORE" || return $?
+      mutate_butler_autostart ouro-butler-staging false || return $?
+      mutate_butler_autostart ouro-butler-rollback false || return $?
+      mutate_butler_autostart ouro-butler-legacy-evidence false || return $?
+      if test "$AUTOSTART_PROFILE" = production; then
+        mutate_butler_autostart ouro-butler true || return $?
+        AUTOSTART_EXPECTED_COUNTS="1 0 0 0"
+      else
+        mutate_butler_autostart ouro-butler false || return $?
+        AUTOSTART_EXPECTED_COUNTS="0 0 0 0"
+      fi
+      verify_butler_autostart "$AUTOSTART_EXPECTED_COUNTS" || return $?
+      snapshot_nonbutler_autostart >"$AUTOSTART_NONBUTLER_AFTER" || return $?
+      cmp -s -- "$AUTOSTART_NONBUTLER_BEFORE" "$AUTOSTART_NONBUTLER_AFTER" || return 1
+      sync -f "$AUTOSTART_FILE" || return $?
+      sync -f /var/lib/docker || return $?
+      AUTOSTART_COMMITTED=yes
       )
     }
     verify_butler_autostart() {
@@ -105,17 +215,11 @@ Effective-spec audit helper:
       )
     }
     disable_butler_autostart() {
-      set_butler_autostart ouro-butler-staging false || return $?
-      set_butler_autostart ouro-butler-rollback false || return $?
-      set_butler_autostart ouro-butler-legacy-evidence false || return $?
-      set_butler_autostart ouro-butler false || return $?
+      set_butler_autostart disabled || return $?
       verify_butler_autostart "0 0 0 0" || return $?
     }
     enable_butler_autostart() {
-      set_butler_autostart ouro-butler-staging false || return $?
-      set_butler_autostart ouro-butler-rollback false || return $?
-      set_butler_autostart ouro-butler-legacy-evidence false || return $?
-      set_butler_autostart ouro-butler true || return $?
+      set_butler_autostart production || return $?
       verify_butler_autostart "1 0 0 0" || return $?
     }
   This bounded wait accepts only Docker's healthy state. The image healthcheck
@@ -141,7 +245,8 @@ Effective-spec audit helper:
       return 1
     }
   Define these fail-closed image and topology helpers in the same shell. They use
-  exact Docker image IDs and exact container names; no mutation is performed:
+  exact Docker image IDs and container identity, image provenance, and writable
+  root overlap; no mutation is performed:
     validate_exact_image_id() {
       VALIDATE_IMAGE_ID=$1
       case "$VALIDATE_IMAGE_ID" in
@@ -155,18 +260,43 @@ Effective-spec audit helper:
       docker image inspect "$VALIDATE_IMAGE_ID" >/dev/null || return $?
     }
     assert_only_running_butler() {
+      (
       EXPECTED_RUNNING_BUTLER=$1
-      RUNNING_BUTLER_NAMES=$(docker container ls --format '{{.Names}}') || return $?
-      RUNNING_BUTLER_COUNTS=$(printf '%s\n' "$RUNNING_BUTLER_NAMES" | awk -v expected="$EXPECTED_RUNNING_BUTLER" '
-        {
-          if ($0 == "ouro-butler" || $0 == "ouro-butler-staging" || $0 == "ouro-butler-rollback" || $0 == "ouro-butler-legacy-evidence") {
-            butlers++
-            if ($0 == expected) matching++
+      case "$EXPECTED_RUNNING_BUTLER" in
+        -) EXPECTED_RUNNING_BUTLER_COUNT=0 ;;
+        ouro-butler|ouro-butler-staging) EXPECTED_RUNNING_BUTLER_COUNT=1 ;;
+        *) return 1 ;;
+      esac
+      RUNNING_CONTAINER_IDS=$(docker container ls -q) || return $?
+      MATCHING_RUNNING_BUTLERS=0
+      for RUNNING_CONTAINER_ID in $RUNNING_CONTAINER_IDS; do
+        RUNNING_CONTAINER_NAME=$(docker container inspect --format '{{.Name}}' "$RUNNING_CONTAINER_ID") || return $?
+        RUNNING_CONTAINER_NAME=${RUNNING_CONTAINER_NAME#/}
+        if test "$RUNNING_CONTAINER_NAME" = "$EXPECTED_RUNNING_BUTLER"; then
+          MATCHING_RUNNING_BUTLERS=$(( MATCHING_RUNNING_BUTLERS + 1 ))
+          continue
+        fi
+        RUNNING_CONTAINER_IMAGE_ID=$(docker container inspect --format '{{.Image}}' "$RUNNING_CONTAINER_ID") || return $?
+        RUNNING_CONTAINER_IMAGE_REF=$(docker container inspect --format '{{.Config.Image}}' "$RUNNING_CONTAINER_ID") || return $?
+        RUNNING_CONTAINER_IMAGE_SOURCE=$(docker image inspect --format '{{with .Config.Labels}}{{index . "org.opencontainers.image.source"}}{{end}}' "$RUNNING_CONTAINER_IMAGE_ID") || return $?
+        test "$RUNNING_CONTAINER_IMAGE_SOURCE" != https://github.com/ourostack/ouroboros || return 1
+        test "$RUNNING_CONTAINER_IMAGE_ID" != sha256:681449ad47a2621705cd339b481e6339236b31dc65e195b1cf5025d0f2191d7d || return 1
+        case "$RUNNING_CONTAINER_IMAGE_REF" in
+          ouro-butler|ouro-butler:*|ouro-butler@sha256:*|ouroboros-butler|ouroboros-butler:*|ouroboros-butler@sha256:*|ghcr.io/ourostack/ouroboros-butler|ghcr.io/ourostack/ouroboros-butler:*|ghcr.io/ourostack/ouroboros-butler@sha256:*) return 1 ;;
+        esac
+        RUNNING_WRITABLE_MOUNT_SOURCES=$(docker container inspect --format '{{range .Mounts}}{{if .RW}}{{println .Source}}{{end}}{{end}}' "$RUNNING_CONTAINER_ID") || return $?
+        if printf '%s\n' "$RUNNING_WRITABLE_MOUNT_SOURCES" | awk '
+          function overlaps(path, root) {
+            return length(path) > 0 && (path == root || index(path, root "/") == 1 || index(root, path "/") == 1)
           }
-        }
-        END { printf "%d %d", butlers + 0, matching + 0 }
-      ') || return $?
-      test "$RUNNING_BUTLER_COUNTS" = "1 1" || return $?
+          overlaps($0, "/mnt/user/appdata/ouro-butler/runtime") || overlaps($0, "/mnt/user/appdata/ouro-butler/runtime/.ouro-cli") || overlaps($0, "/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro") || overlaps($0, "/mnt/user/appdata/ouro-butler/AgentBundles") { found = 1 }
+          END { exit found ? 0 : 1 }
+        '; then
+          return 1
+        fi
+      done
+      test "$MATCHING_RUNNING_BUTLERS" -eq "$EXPECTED_RUNNING_BUTLER_COUNT" || return $?
+      )
     }
     assert_update_topology() {
       EXPECTED_ROLLBACK_IMAGE_ID=$1
@@ -786,6 +916,7 @@ Effective-spec audit helper:
         && CURRENT_LEGACY_EVIDENCE_IMAGE_ID=$(docker inspect --format '{{.Image}}' ouro-butler-legacy-evidence) \
         && test "$CURRENT_LEGACY_EVIDENCE_IMAGE_ID" = "$LEGACY_STAGING_IMAGE_ID" \
         && test "$(docker inspect --format '{{.State.Running}}' ouro-butler-legacy-evidence)" = false \
+        && assert_only_running_butler - \
         && docker create --name ouro-butler-staging --network host --restart unless-stopped --user 10001:10001 \
           --mount "type=bind,src=/mnt/user/appdata/ouro-butler/runtime/.ouro-cli,dst=/home/ouro/.ouro-cli" \
           --mount "type=bind,src=/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro,dst=/home/ouro/AgentBundles/sanctuary.ouro" \
@@ -799,6 +930,7 @@ Effective-spec audit helper:
         && docker stop ouro-butler-staging \
         && test "$(docker inspect --format '{{.Image}}' ouro-butler-staging)" = "$IMAGE_ID" \
         && docker rm ouro-butler-staging \
+        && assert_only_running_butler - \
         && docker create --name ouro-butler --network host --restart unless-stopped --user 10001:10001 \
           --mount "type=bind,src=/mnt/user/appdata/ouro-butler/runtime/.ouro-cli,dst=/home/ouro/.ouro-cli" \
           --mount "type=bind,src=/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro,dst=/home/ouro/AgentBundles/sanctuary.ouro" \
@@ -1362,6 +1494,7 @@ Update:
       cmp -s "$EVENT_SCRIPT_STAGE/install-usenet-guard.sh" /boot/config/custom/ouro-events/install-usenet-guard.sh
       test "$(grep -Fxc '/bin/bash /boot/config/custom/ouro-events/install-usenet-guard.sh --boot --install-root /boot/config/custom' /boot/config/go)" = 1
       test "$(grep -Fxc '/boot/config/custom/ouro-events/bootstrap-spool.sh --mount' /boot/config/go || true)" = 0
+      test "$(grep -Fxc '(crontab -l 2>/dev/null | grep -v usenet_health; echo "*/15 * * * * /bin/bash /boot/config/custom/usenet_health.sh") | crontab -' /boot/config/go || true)" = 0
       INSTALLED_GUARD_CRON=$(crontab -l)
       test "$(printf '%s\n' "$INSTALLED_GUARD_CRON" | grep -Fxc '*/15 * * * * /bin/bash /boot/config/custom/usenet_health.sh # ouro:usenet-health')" = 1
       INSTALLED_LEGACY_GUARD_COUNT=$(printf '%s\n' "$INSTALLED_GUARD_CRON" | grep -Fxc '*/15 * * * * /bin/bash /boot/config/custom/usenet_health.sh' || true)
@@ -1511,6 +1644,7 @@ ouro-butler-rollback
       && remove_stopped_rollback_if_present "$ROLLBACK_IMAGE_ID" \
       && docker rename ouro-butler ouro-butler-rollback \
       && test "$(docker inspect --format '{{.State.Running}}' ouro-butler-rollback)" = false \
+      && assert_only_running_butler - \
       && migrate_sanctuary_package_managed_bundle "$IMAGE_ID" migrate "$ROLLBACK_IMAGE_ID"; then
       :
     else
@@ -1566,7 +1700,8 @@ ouro-butler-rollback
       && assert_only_running_butler ouro-butler-staging \
       && wait_butler_ready ouro-butler-staging \
       && docker stop ouro-butler-staging \
-      && docker rm ouro-butler-staging; then
+      && docker rm ouro-butler-staging \
+      && assert_only_running_butler -; then
       :
     else
       STAGING_ACTIVATION_STATUS=$?

package/deploy/unraid/ouro-events/install-usenet-guard.sh

@@ -49,6 +49,7 @@ LEGACY_BOOT_HOOK="/boot/config/custom/ouro-events/bootstrap-spool.sh --mount"
 LEGACY_BASH_BOOT_HOOK="/bin/bash /boot/config/custom/ouro-events/bootstrap-spool.sh --mount"
 CANONICAL_PREVIOUS_BOOT_HOOK="/bin/bash /boot/config/custom/ouro-events/install-usenet-guard.sh --boot"
 CANONICAL_BOOT_HOOK="$CANONICAL_PREVIOUS_BOOT_HOOK --install-root /boot/config/custom"
+LEGACY_CRON_BOOT_HOOK='(crontab -l 2>/dev/null | grep -v usenet_health; echo "*/15 * * * * /bin/bash /boot/config/custom/usenet_health.sh") | crontab -'
 printf -v HEALTH_SCRIPT_Q '%q' "$INSTALL_ROOT/usenet_health.sh"
 CRON_LINE="*/15 * * * * /bin/bash $HEALTH_SCRIPT_Q # ouro:usenet-health"
 LEGACY_CRON_LINE="*/15 * * * * /bin/bash $HEALTH_SCRIPT_Q"
@@ -125,7 +126,7 @@ render_inactive_cron() {
 
 is_canonical_butler_go_hook() {
   case "$1" in
-    "$LEGACY_BOOT_HOOK"|"$LEGACY_BASH_BOOT_HOOK"|"$CANONICAL_PREVIOUS_BOOT_HOOK"|"$CANONICAL_BOOT_HOOK") return 0 ;;
+    "$LEGACY_BOOT_HOOK"|"$LEGACY_BASH_BOOT_HOOK"|"$CANONICAL_PREVIOUS_BOOT_HOOK"|"$CANONICAL_BOOT_HOOK"|"$PREVIOUS_INSTALLER_BOOT_HOOK"|"$BOOT_HOOK"|"$LEGACY_CRON_BOOT_HOOK") return 0 ;;
     *) return 1 ;;
   esac
 }
@@ -232,7 +233,7 @@ install_transaction() {
     printf '#!/bin/bash\n' > "$stage/go.base"
   fi
   go_candidate="$stage/go.candidate"
-  grep -Fvx -e "$LEGACY_BOOT_HOOK" -e "$LEGACY_BASH_BOOT_HOOK" -e "$PREVIOUS_INSTALLER_BOOT_HOOK" -e "$BOOT_HOOK" "$stage/go.base" > "$stage/go.filtered" || true
+  render_go_without_owned "$stage/go.base" "$stage/go.filtered"
   if [ -s "$stage/go.filtered" ]; then
     awk -v hook="$BOOT_HOOK" 'NR == 1 && /^#!/ { print; print hook; next } NR == 1 { print hook } { print }' "$stage/go.filtered" > "$go_candidate"
   else

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.747",
+  "runtimeVersion": "0.1.0-alpha.749",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-08-30T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.747</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.749</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.747",
+  "version": "0.1.0-alpha.749",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.747",
+      "version": "0.1.0-alpha.749",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.747",
+  "version": "0.1.0-alpha.749",
   "engines": {
     "node": ">=22"
   },