@ouro.bot/cli 0.1.0-alpha.756 → 0.1.0-alpha.757

package/changelog.json

@@ -1,6 +1,13 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.757",
+      "changes": [
+        "Allow authenticated steward policy writes to use the current version when the agent omits an explicit concurrency token.",
+        "Keep private external-event turns bound to their exact leased batch, with prompt-safe lease context and deterministic disposition completeness."
+      ]
+    },
     {
       "version": "0.1.0-alpha.756",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.756",
+  "runtimeVersion": "0.1.0-alpha.757",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-08-30T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.756</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.757</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/repertoire/tools-continuity.js

@@ -204,6 +204,7 @@ exports.continuityToolDefinitions = [
                         verificationRefs,
                     },
                 });
+                ctx?.externalEventAuthority?.recordCommittedDisposition?.(turnEvent);
                 (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.external_event_disposition", message: "external event disposition recorded", meta: { agentName, eventId: record.eventId, generation: record.generation, classification, decision } });
                 return JSON.stringify(handled, null, 2);
             };

package/dist/repertoire/tools-steward-policy.js

@@ -16,12 +16,12 @@ exports.stewardPolicyToolDefinition = {
         type: "function",
         function: {
             name: "steward_policy_manage",
-            description: "Read or update the household steward's typed desired-state and routine-action policy. Updates require the current authenticated family request and exact policy version.",
+            description: "Read or update the household steward's typed desired-state and routine-action policy. Updates require the current authenticated family request. expectedVersion is optional; omit it to apply against the current policy version, or supply a version from read for explicit stale-write detection.",
             parameters: {
                 type: "object",
                 properties: {
                     action: { type: "string", enum: ["read", "set_desired_state", "grant_routine_action"] },
-                    expectedVersion: { type: "integer", minimum: 0 },
+                    expectedVersion: { type: "integer", minimum: 0, description: "Optional version returned by read. When omitted, the runtime uses the current policy version." },
                     key: { type: "string" },
                     value: { type: "string" },
                     provenance: { type: "string", enum: ["stated", "observed", "default", "installed_explicit_policy"] },
@@ -51,7 +51,9 @@ exports.stewardPolicyToolDefinition = {
         const actor = ctx.relationshipAuthorization?.actor;
         if (!actor)
             throw new Error("steward policy mutation requires authenticated relationship authority");
-        const expectedVersion = Number(args.expectedVersion);
+        const expectedVersion = args.expectedVersion === undefined
+            ? (0, steward_policy_1.readStewardPolicy)(ctx.agentRoot).version
+            : Number(args.expectedVersion);
         if (!Number.isInteger(expectedVersion) || expectedVersion < 0)
             throw new Error("expectedVersion must be a nonnegative integer");
         let mutation;

package/dist/senses/private-runtime.js

@@ -835,6 +835,24 @@ function buildHeldReturnWakeMessage() {
         "Return each listed item with surface(delegationId=...) before resting or settling.",
     ].join("\n");
 }
+function buildExternalEventLeaseMessage(event) {
+    const members = [event, ...(event.relatedEvents ?? [])];
+    return [
+        "[current external-event disposition contract]",
+        "This exact lease frame is authoritative for this turn. Ignore older receipts, failed tool arguments, held-work summaries, and checkpoints when choosing disposition arguments.",
+        "Investigate the current observation, then call external_event_disposition once for every listed lease before settling.",
+        ...members.flatMap((member, index) => [
+            "",
+            `lease ${index + 1}:`,
+            `recordPath: ${JSON.stringify(member.recordPath)}`,
+            `expectedGeneration: ${member.generation}`,
+            `classifiedRevision: ${JSON.stringify(member.observationRevision)}`,
+        ]),
+    ].join("\n");
+}
+function externalEventLeaseKey(event) {
+    return JSON.stringify([event.recordPath, event.generation, event.observationRevision, event.claimOwner]);
+}
 function buildAlsoDueLine(agentRoot, currentHabitName, now) {
     const habitsDir = path.join(agentRoot, "habits");
     let files;
@@ -1126,7 +1144,10 @@ async function runPrivateRuntimeTurn(options) {
                     userContent = buildInstinctUserMessage(instincts, reason, state);
                 }
             }
-            if (shouldUseHeldReturnWake) {
+            if (options?.externalEvent) {
+                userContent = buildExternalEventLeaseMessage(options.externalEvent);
+            }
+            else if (shouldUseHeldReturnWake) {
                 userContent = buildHeldReturnWakeMessage();
             }
             // ── Session loader: wraps existing session logic ──────────────────
@@ -1197,6 +1218,7 @@ async function runPrivateRuntimeTurn(options) {
                     };
                 })()
                 : undefined;
+            const committedExternalEventLeases = new Set();
             const externalEventRelationship = options?.externalEvent
                 ? await (async () => {
                     const agentRoot = (0, identity_1.getAgentRoot)(agentName);
@@ -1231,6 +1253,9 @@ async function runPrivateRuntimeTurn(options) {
                                 const decision = initial.authorizeTool("external_event_disposition");
                                 return decision.allowed ? { allowed: true, reason: "relationship-authorized" } : { allowed: false, reason: decision.reason };
                             },
+                            recordCommittedDisposition: (event) => {
+                                committedExternalEventLeases.add(externalEventLeaseKey(event));
+                            },
                         },
                         externalEventEffects: {
                             deliverOwnerDecision: async (input) => {
@@ -1403,6 +1428,13 @@ async function runPrivateRuntimeTurn(options) {
                         ...(effectiveHabitSession ? { habitSession: effectiveHabitSession } : {}),
                     },
                 });
+                if (options?.externalEvent && ["settled", "observed", "rested"].includes(String(result.turnOutcome))) {
+                    const incomplete = [options.externalEvent, ...(options.externalEvent.relatedEvents ?? [])]
+                        .filter((event) => !committedExternalEventLeases.has(externalEventLeaseKey(event)));
+                    if (incomplete.length > 0) {
+                        throw new Error(`External-event turn did not commit dispositions for every exact lease (${incomplete.length} incomplete)`);
+                    }
+                }
                 if (externalRunBase) {
                     const lifecycle = result.turnOutcome === "settled" || result.turnOutcome === "observed" || result.turnOutcome === "rested"
                         ? "completed"

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.756",
+  "version": "0.1.0-alpha.757",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.756",
+      "version": "0.1.0-alpha.757",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.756",
+  "version": "0.1.0-alpha.757",
   "engines": {
     "node": ">=22"
   },