@ouro.bot/cli 0.1.0-alpha.760 → 0.1.0-alpha.761

package/changelog.json

@@ -1,6 +1,14 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.761",
+      "changes": [
+        "Require current storage and media-optimization evidence before answering owner requests to diagnose and shrink Sanctuary storage.",
+        "Turn the exact owner download-credit question into one household-safe top-up, resume, verification, or reminder reply without backend jargon.",
+        "Require current work, cares, system, and container evidence for compact whole-Sanctuary status answers."
+      ]
+    },
     {
       "version": "0.1.0-alpha.760",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.760",
+  "runtimeVersion": "0.1.0-alpha.761",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-08-30T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.ouro/psyche/LORE.md

@@ -4,6 +4,6 @@ Sanctuary runs Unraid 7.2.3 and Docker services. The service list is discovered
 
 Books maps to the exact containers `calibre` and `calibre-web`. When Ari states a desired state for Books, record that same desired state under both exact steward-policy keys, `container:calibre` and `container:calibre-web`; reverse both when Ari asks for Books again. Do not create a synthetic `container:books` key.
 
-The household's prepaid download provider is Astraweb. Its public account and top-up entry is https://www.astraweb.com/login. Never ask for or expose account credentials; send Ari that public link when a human top-up is the next step, then verify recent successful articles and a completed download before calling the path recovered.
+The household's prepaid download provider is Astraweb. Its public account and top-up entry is https://www.astraweb.com/login. Never ask for or expose account credentials. When Ari asks why shows are not downloading and exhausted credit is established, compose the answer in plain household language: downloads are paused to protect prepaid credit; give the public link; ask Ari to tell you when the top-up is done so you can resume downloads and verify one finishes; and offer a reminder at a time Ari specifies. Do not repeat backend service names, authentication or credential-check details, dead-letter/event internals, duplicate alerts, or an untrusted notification's claim that an indexer was disabled. Do not claim to top up or disable an indexer yourself. Keep the agent's own voice; this is an outcome contract, not a canned script.
 
 Ari and each approved household member are separate relationships. Their conversations, preferences, requests, private activity, and return routes do not bleed into one another. Unknown Telegram content is quarantined before any model turn and becomes conversation only after Ari admits the immutable account and chat.

package/deploy/unraid/sanctuary.ouro/psyche/TACIT.md

@@ -4,6 +4,7 @@
 - Use standing policy for bounded, reversible action; revalidate the exact target and authority immediately before the effect and verify the outcome afterward.
 - Keep approved household contact reactive or request-bound. Only Ari receives unrelated proactive household attention.
 - Treat an intentionally offline service as healthy when that matches the current desired state.
+- For Ari's whole-household status questions, read current evidence before answering and separate active work, waiting on Ari, snoozed wake times, intentionally quiet services, healthy systems, and other current issues. Do not narrate daemon, event-queue, provider-lane, or backend service internals; translate them into compact household outcomes only when they are currently relevant.
 - Never touch array/parity/disk configuration, permissions, network/security settings, or `/mnt/user` paths.
 - Never send server data off-box or enter credentials into another system.
 - When state is ambiguous, investigate safely, say what is known, and ask only if the answer changes the next safe move.

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.760</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.761</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/core.js

@@ -1120,6 +1120,8 @@ async function runAgent(messages, callbacks, channel, signal, options) {
     let unresolvedHistoricalEffects = historicalFailedEffectsForExactRepeatedRequest(messages);
     let historicalToolFailureRetries = 0;
     let providerIterations = 0;
+    const requiredToolCallNames = [...new Set(options?.requiredToolCalls?.names ?? [])];
+    const dispatchedRequiredToolCalls = new Set();
     const toolLoopState = (0, tool_loop_1.createToolLoopState)();
     const toolFrictionLedger = (0, tool_friction_1.createToolFrictionLedger)();
     const finishTerminalProviderError = (error, classification) => {
@@ -1720,6 +1722,24 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                 if (isSoleSettle) {
                     const settleArgs = validatedCallArguments.get(result.toolCalls[0]);
                     callbacks.onToolStart("settle", settleArgs);
+                    const missingRequiredToolCalls = requiredToolCallNames.filter((name) => !dispatchedRequiredToolCalls.has(name));
+                    if (missingRequiredToolCalls.length > 0) {
+                        streamCallbackBuffer?.discard();
+                        callbacks.onToolEnd("settle", (0, tools_1.summarizeArgs)("settle", settleArgs), false);
+                        callbacks.onClearText?.();
+                        pushGenerated(msg);
+                        const gateMessage = `${options.requiredToolCalls.retryMessage} Missing required tool calls: ${missingRequiredToolCalls.join(", ")}.`;
+                        pushGenerated({ role: "tool", tool_call_id: result.toolCalls[0].id, content: gateMessage });
+                        providerRuntime.appendToolOutput(result.toolCalls[0].id, gateMessage);
+                        (0, runtime_1.emitNervesEvent)({
+                            level: "warn",
+                            component: "engine",
+                            event: "engine.required_tool_calls_pending",
+                            message: "settle rejected until required tool handlers dispatch",
+                            meta: { missingToolNames: missingRequiredToolCalls },
+                        });
+                        continue;
+                    }
                     // Private-runtime attention queue gate: reject settle if items remain
                     const attentionQueue = augmentedToolContext?.delegatedOrigins;
                     if (isPrivateRuntimeChannel && attentionQueue && attentionQueue.length > 0) {
@@ -2246,6 +2266,8 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                         const execToolFn = options?.execTool ?? tools_1.execTool;
                         const routineActionSelection = approvalCalls.find((entry) => entry.call.id === tc.id)?.routineActionSelection;
                         const executionToolContext = routineActionSelection && augmentedToolContext ? { ...augmentedToolContext, routineActionSelection } : augmentedToolContext;
+                        if (requiredToolCallNames.includes(tc.name))
+                            dispatchedRequiredToolCalls.add(tc.name);
                         toolResult = await execToolFn(tc.name, args, executionToolContext);
                         success = true;
                     }

package/dist/senses/sanctuary-download-credit-presentation.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.presentSanctuaryDownloadCreditReply = presentSanctuaryDownloadCreditReply;
+const runtime_1 = require("../nerves/runtime");
+const TOP_UP_LINK = "https://www.astraweb.com/login";
+const SAFE_FALLBACK = `Downloads are paused to protect your prepaid credit. Top it up here: ${TOP_UP_LINK}. Tell me when you’re done, and I’ll resume downloads and verify one finishes. Or tell me a reminder time, like “tomorrow at 9.”`;
+const FORBIDDEN_INTERNALS = /\b(?:SABnzbd|Sonarr|Radarr|Deluge|auth[ -]?check|credential|dead[ -]?letter|indexer has been disabled|keep watching)\b/iu;
+const EXHAUSTED_CREDIT = /(?:\b(?:prepaid )?credit (?:is |appear(?:s|ed)? |seems? )?(?:exhausted|depleted)\b|\bout of (?:prepaid )?credit\b|\bzero (?:prepaid )?credit\b|\bno (?:prepaid )?credit (?:left|remaining|available)\b)/iu;
+const REQUIRED_HOUSEHOLD_CONTRACT = [
+    /\bdownloads?\b/iu,
+    /\bpaused?\b/iu,
+    /\bprotect\b/iu,
+    /\bprepaid credit\b/iu,
+    /\btell me\b/iu,
+    /\bdone\b/iu,
+    /\bresume\b/iu,
+    /\bverify\b/iu,
+    /\b(?:finish(?:es|ed)?|completed?)\b/iu,
+    /\bremind(?:er)?\b/iu,
+    /\btime\b|\btomorrow at 9\b/iu,
+];
+function presentSanctuaryDownloadCreditReply(agentName, exactQuestion, text) {
+    if (agentName !== "sanctuary" || !exactQuestion || !text.includes(TOP_UP_LINK) || !/\bcredit\b/iu.test(text))
+        return text;
+    if (!FORBIDDEN_INTERNALS.test(text) && REQUIRED_HOUSEHOLD_CONTRACT.every((pattern) => pattern.test(text)))
+        return text;
+    if (!EXHAUSTED_CREDIT.test(text))
+        return text;
+    (0, runtime_1.emitNervesEvent)({ component: "senses", event: "senses.telegram_download_credit_reply_repaired", message: "repaired Sanctuary download-credit reply at the Telegram boundary", meta: { agentName } });
+    return SAFE_FALLBACK;
+}

package/dist/senses/sanctuary-full-visibility-contract.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanctuaryFullVisibilityRequiredToolCalls = sanctuaryFullVisibilityRequiredToolCalls;
+const runtime_1 = require("../nerves/runtime");
+const REQUIRED_TOOL_NAMES = ["query_active_work", "query_cares", "unraid_get_system", "unraid_list_containers"];
+const WHOLE_STATUS_REQUESTS = new Set(["what are you working on", "what's going on with sanctuary"]);
+function sanctuaryFullVisibilityRequiredToolCalls(request, advertisedToolNames) {
+    const normalized = request.normalize("NFKC").trim().toLocaleLowerCase("en-US").replaceAll("’", "'").replace(/[?!.\s]+$/gu, "");
+    if (!WHOLE_STATUS_REQUESTS.has(normalized) || !REQUIRED_TOOL_NAMES.every((name) => advertisedToolNames.includes(name)))
+        return undefined;
+    (0, runtime_1.emitNervesEvent)({ component: "senses", event: "senses.sanctuary_full_visibility_reads_required", message: "required current Sanctuary visibility reads", meta: { toolCount: REQUIRED_TOOL_NAMES.length } });
+    return {
+        names: REQUIRED_TOOL_NAMES,
+        retryMessage: "Before answering, read current active work, cares, system health, and service state. Then give Ari one compact household summary; do not ask him to choose a status slice.",
+    };
+}

package/dist/senses/sanctuary-storage-optimization-contract.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanctuaryStorageOptimizationRequiredToolCalls = sanctuaryStorageOptimizationRequiredToolCalls;
+const runtime_1 = require("../nerves/runtime");
+const REQUIRED_TOOL_NAMES = ["unraid_get_storage", "sanctuary_get_media_optimization"];
+function normalizedRequest(request) {
+    return request
+        .normalize("NFKC")
+        .toLowerCase()
+        .replace(/[‘’]/gu, "'")
+        .replace(/[^a-z0-9']+/gu, " ")
+        .trim();
+}
+function sanctuaryStorageOptimizationRequiredToolCalls(request, advertisedToolNames) {
+    const normalized = normalizedRequest(request);
+    const hasStorageSubject = /\b(?:space|storage)\b/u.test(normalized);
+    const hasUsageDiagnosis = /\b(?:using|taking up|find what|diagnos(?:e|is))\b/u.test(normalized);
+    const hasShrinkIntent = /\b(?:make it smaller|shrink|reclaim|free up|reduce|optimi[sz])\b/u.test(normalized);
+    const advertised = new Set(advertisedToolNames);
+    if (!hasStorageSubject || !hasUsageDiagnosis || !hasShrinkIntent || !REQUIRED_TOOL_NAMES.every((name) => advertised.has(name)))
+        return undefined;
+    const names = [...REQUIRED_TOOL_NAMES];
+    (0, runtime_1.emitNervesEvent)({
+        component: "senses",
+        event: "senses.sanctuary_storage_optimization_obligation",
+        message: "storage diagnosis and optimization intent requires both safe evidence reads",
+        meta: { requiredToolNames: names },
+    });
+    return {
+        names,
+        retryMessage: "Run both safe reads now, identify the largest measured evidence, report Unmanic and Jellyfin findings, and propose a sample encode without inventing future savings. Do not ask permission or send Ari to a shell or QDirStat while these typed reads are available.",
+    };
+}

package/dist/senses/telegram.js

@@ -64,9 +64,12 @@ const runtime_1 = require("../nerves/runtime");
 const nerves_1 = require("../nerves");
 const sanctuary_interactive_control_1 = require("./sanctuary-interactive-control");
 const sanctuary_sab_1 = require("./sanctuary-sab");
+const sanctuary_download_credit_presentation_1 = require("./sanctuary-download-credit-presentation");
 const shared_turn_1 = require("./shared-turn");
 const telegram_client_1 = require("./telegram-client");
 const sanctuary_runtime_1 = require("./sanctuary-runtime");
+const sanctuary_full_visibility_contract_1 = require("./sanctuary-full-visibility-contract");
+const sanctuary_storage_optimization_contract_1 = require("./sanctuary-storage-optimization-contract");
 const sanctuary_grounding_1 = require("./sanctuary-grounding");
 const telegram_approval_runtime_1 = require("./telegram-approval-runtime");
 const telegram_audit_ledger_1 = require("./telegram-audit-ledger");
@@ -976,12 +979,13 @@ function createTelegramSenseApp(options) {
             approvalReconciliationsInFlight.add(failsafe);
         }, delay);
     };
-    const deliverButlerEffect = async (text, idempotencyKey, signal, onMessageDelivered) => {
+    const deliverButlerEffect = async (text, idempotencyKey, signal, onMessageDelivered, exactDownloadCreditQuestion = false) => {
+        const presentedText = (0, sanctuary_download_credit_presentation_1.presentSanctuaryDownloadCreditReply)(options.agentName, exactDownloadCreditQuestion, text);
         return executeAuthorizedEffect({
             idempotencyKey,
             target: configuredOwnerTarget(),
             authorClass: "butler",
-            effect: { kind: "text", text },
+            effect: { kind: "text", text: presentedText },
             ...(signal ? { signal } : {}),
             ...(onMessageDelivered ? { onMessageDelivered } : {}),
         });
@@ -1070,10 +1074,18 @@ function createTelegramSenseApp(options) {
                 authorizeTool: async (name, args) => (await options.resolveRelationshipAuthorization(relationshipCoordinates)).authorizeTool(name, args),
             };
         };
-        return async ({ runAgentOptions }) => ({
-            ...runAgentOptions,
-            toolContext: { ...runAgentOptions.toolContext, relationshipAuthorization: await resolveLiveRelationshipAuthorization() },
-        });
+        return async ({ runAgentOptions }) => {
+            const relationshipAuthorization = await resolveLiveRelationshipAuthorization();
+            const requiredToolCalls = options.agentName === "sanctuary" && relationshipAuthorization.profileId === "sanctuary-owner"
+                ? (0, sanctuary_storage_optimization_contract_1.sanctuaryStorageOptimizationRequiredToolCalls)(input.userMessage, relationshipAuthorization.advertisedToolNames)
+                    ?? (0, sanctuary_full_visibility_contract_1.sanctuaryFullVisibilityRequiredToolCalls)(input.userMessage, relationshipAuthorization.advertisedToolNames)
+                : undefined;
+            return {
+                ...runAgentOptions,
+                ...(requiredToolCalls ? { requiredToolCalls } : {}),
+                toolContext: { ...runAgentOptions.toolContext, relationshipAuthorization },
+            };
+        };
     };
     const dispatchResolvedRelationshipTurn = async (input) => {
         const sessionPath = (0, shared_turn_1.getSenseSessionPath)(options.agentName, input.friendId, "telegram", input.sessionKey, agentRoot);
@@ -1118,7 +1130,7 @@ function createTelegramSenseApp(options) {
             ...(orientationFrame ? { orientationFrame } : {}),
             toolContext: { ...(toolContext ?? {}), attachmentIds: input.attachmentIds ?? [] },
             prepareRunAgentOptions: prepareRelationshipRunAgentOptions({ friendId: input.friendId, requestId: input.requestId,
-                sessionEventId: input.eventId, userId: input.userId, chatId: input.chatId, sessionKey: input.sessionKey }),
+                sessionEventId: input.eventId, userId: input.userId, chatId: input.chatId, sessionKey: input.sessionKey, userMessage: input.text }),
             deliverySink: { onDelivery: (delivery) => deliver(delivery.text, delivery.kind === "settle") },
         });
         if (effects.length === 0 && result.response.trim())
@@ -1265,6 +1277,7 @@ function createTelegramSenseApp(options) {
         const turnMetricsObserver = { providerInvocationCount: 0, toolInvocationCount: 0 };
         const toolReceiptObserver = { toolResultDigests: [], toolGroundings: [] };
         const normalizedRequest = message.text.normalize("NFKC").trim().toLocaleLowerCase("en-US");
+        const exactDownloadCreditQuestion = normalizedRequest === "why aren't my shows downloading?";
         const groundingIntentTool = groundedAcceptance
             ? /^(?:what['’]?s up|status)\??$/u.test(normalizedRequest) ? "unraid_get_system"
                 : /^how much (?:space|storage) is left\??$/u.test(normalizedRequest) ? "unraid_get_storage"
@@ -1317,7 +1330,7 @@ function createTelegramSenseApp(options) {
                             bufferedGroundedDeliveries.push(delivery.kind);
                         }
                         else {
-                            turnEffects.push(await deliverButlerEffect(delivery.text, `turn:${subject}:${message.updateId}:delivery:${deliveryOrdinal++}`, undefined, (messageId, chunk) => { deliveredMessageIds.push(messageId); deliveredChunks.push(chunk); }));
+                            turnEffects.push(await deliverButlerEffect(delivery.text, `turn:${subject}:${message.updateId}:delivery:${deliveryOrdinal++}`, undefined, (messageId, chunk) => { deliveredMessageIds.push(messageId); deliveredChunks.push(chunk); }, exactDownloadCreditQuestion));
                             deliveryCount += 1;
                         }
                     },
@@ -1333,6 +1346,7 @@ function createTelegramSenseApp(options) {
                         userId: message.userId,
                         chatId: message.chatId,
                         sessionKey: currentSessionKey,
+                        userMessage: message.text,
                     }),
                 } : {}),
                 ...(approvalRuntime ? { approvalCoordinatorFactory: approvalRuntime.coordinator } : {}),
@@ -1351,7 +1365,7 @@ function createTelegramSenseApp(options) {
                 deliveryCount = 1;
             }
             else if (deliveryCount === 0 && result.response.trim()) {
-                const artifact = await deliverButlerEffect(result.response, `turn:${subject}:${message.updateId}:delivery:${deliveryOrdinal++}`, undefined, (messageId, chunk) => { deliveredMessageIds.push(messageId); deliveredChunks.push(chunk); });
+                const artifact = await deliverButlerEffect(result.response, `turn:${subject}:${message.updateId}:delivery:${deliveryOrdinal++}`, undefined, (messageId, chunk) => { deliveredMessageIds.push(messageId); deliveredChunks.push(chunk); }, exactDownloadCreditQuestion);
                 turnEffects.push(artifact);
                 responseFallbackArtifactId = artifact.id;
             }
@@ -1395,7 +1409,7 @@ function createTelegramSenseApp(options) {
             });
             const fallback = "I couldn't complete that turn. The failure was recorded; please try again.";
             if (deliveredMessageIds.length === 0)
-                turnEffects.push(await deliverButlerEffect(fallback, `turn:${subject}:${message.updateId}:fallback`, undefined, (messageId, chunk) => { deliveredMessageIds.push(messageId); deliveredChunks.push(chunk); }));
+                turnEffects.push(await deliverButlerEffect(fallback, `turn:${subject}:${message.updateId}:fallback`, undefined, (messageId, chunk) => { deliveredMessageIds.push(messageId); deliveredChunks.push(chunk); }, exactDownloadCreditQuestion));
             await recordAcceptedEffects(currentSessionPath, turnEffects, { text: message.text, reference: inboundReference, attachmentIds: hydrated.attachmentIds });
         }
         finally {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.760",
+  "version": "0.1.0-alpha.761",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.760",
+      "version": "0.1.0-alpha.761",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.760",
+  "version": "0.1.0-alpha.761",
   "engines": {
     "node": ">=22"
   },