@ouro.bot/cli 0.1.0-alpha.761 → 0.1.0-alpha.763

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.763",
+      "changes": [
+        "Keep the Unit 16 host broker response channel open until asynchronous operations return a bounded success or failure envelope."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.762",
+      "changes": [
+        "Wait for the exact audited Sanctuary container and process to recover health before Unit 16 acceptance continues."
+      ]
+    },
     {
       "version": "0.1.0-alpha.761",
       "changes": [

package/deploy/unraid/sanctuary-unit16-host-broker.mjs

@@ -1707,21 +1707,9 @@ function writeClosedInventory(file) {
   chownSync(file, 0, 0)
 }
 
-async function main() {
-  if (process.getuid?.() !== 0) throw new Error("host broker must run as root")
-  const [profileName, targetContainerId, socket, closedInventory, expectedImage, initialSnapshot] = process.argv.slice(2)
-  if (!profileName || !targetContainerId || !socket || !closedInventory || !expectedImage || !initialSnapshot || process.argv.length !== 8) throw new Error("usage: broker <staging|final> <target-container-id> <socket> <closed-inventory> <expected-image-id> <initial-snapshot>")
-  activeProfile = targetProfile(profileName)
-  activeContainer = activeProfile.containerName
-  activeContainerId = text(targetContainerId, "attested target container id", SHA256)
-  expectedImageId = text(expectedImage, "expected image id", IMAGE_ID)
-  rmSync(socket, { force: true })
-  writeClosedInventory(closedInventory)
-  const snapshot = await containerSnapshot(expectedImageId)
-  const snapshotFd = openSync(initialSnapshot, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 0o600)
-  try { writeFileSync(snapshotFd, `${JSON.stringify(snapshot)}\n`); fsyncSync(snapshotFd) } finally { closeSync(snapshotFd) }
-  chownSync(initialSnapshot, 0, 0)
-  const server = createServer((connection) => {
+function createBrokerServer(dispatchRequest = dispatch) {
+  const dispatchDrain = createDispatchDrain()
+  const server = createServer({ allowHalfOpen: true }, (connection) => {
     let input = ""
     connection.setEncoding("utf8")
     connection.on("data", (chunk) => {
@@ -1730,14 +1718,31 @@ async function main() {
     })
     connection.on("end", async () => {
       try {
-        const result = await dispatchDrain.run(() => dispatch(JSON.parse(input)))
+        const result = await dispatchDrain.run(() => dispatchRequest(JSON.parse(input)))
         const scenario = result?.[ASYNC_RESTART_SCENARIO]
         const completed = scenario ? armRestartAfterResponseClosed(connection, scenario) : undefined
         connection.end(`${JSON.stringify({ ok: true, result })}\n`, completed)
       } catch { connection.end(`${JSON.stringify({ ok: false, error: "host operation failed" })}\n`) }
     })
   })
-  const dispatchDrain = createDispatchDrain()
+  return { server, dispatchDrain }
+}
+
+async function main() {
+  if (process.getuid?.() !== 0) throw new Error("host broker must run as root")
+  const [profileName, targetContainerId, socket, closedInventory, expectedImage, initialSnapshot] = process.argv.slice(2)
+  if (!profileName || !targetContainerId || !socket || !closedInventory || !expectedImage || !initialSnapshot || process.argv.length !== 8) throw new Error("usage: broker <staging|final> <target-container-id> <socket> <closed-inventory> <expected-image-id> <initial-snapshot>")
+  activeProfile = targetProfile(profileName)
+  activeContainer = activeProfile.containerName
+  activeContainerId = text(targetContainerId, "attested target container id", SHA256)
+  expectedImageId = text(expectedImage, "expected image id", IMAGE_ID)
+  rmSync(socket, { force: true })
+  writeClosedInventory(closedInventory)
+  const snapshot = await containerSnapshot(expectedImageId)
+  const snapshotFd = openSync(initialSnapshot, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 0o600)
+  try { writeFileSync(snapshotFd, `${JSON.stringify(snapshot)}\n`); fsyncSync(snapshotFd) } finally { closeSync(snapshotFd) }
+  chownSync(initialSnapshot, 0, 0)
+  const { server, dispatchDrain } = createBrokerServer()
   server.listen(socket, () => {
     chownSync(socket, 0, 10001)
     chmodSync(socket, 0o660)
@@ -1769,6 +1774,7 @@ export {
   armRestartAfterResponseClosed,
   completeHealthProbeFromReceipt,
   createDispatchDrain,
+  createBrokerServer,
   createHealthProbeOperationCoordinator,
   createOwnerMutationCoordinator,
   createInteractiveRestartDriver,

package/deploy/unraid/sanctuary-unit16-run.sh

@@ -129,14 +129,18 @@ start_broker() {
   /usr/local/bin/node "$TARGET_AUDITOR" "$TARGET_PROFILE" "$IMAGE_ID" >"$PRIVATE_ROOT/deployment-target.json"
   chmod 0400 "$PRIVATE_ROOT/deployment-target.json"
   chown 0:0 "$PRIVATE_ROOT/deployment-target.json"
-  TARGET_CONTAINER_ID=$(/usr/local/bin/node -e '
+  TARGET_CONTAINER_BINDING=$(/usr/local/bin/node -e '
     const fs = require("node:fs"); const value = JSON.parse(fs.readFileSync(process.argv[1], "utf8")); const deployment = value && value.deployment;
     if (value?.schemaVersion !== "sanctuary-effective-deployment-v1" || deployment?.schemaVersion !== "sanctuary-deployment-target-v1"
       || deployment.profile !== process.argv[3] || deployment.targetContainerName !== process.argv[4]
-      || deployment.targetImageId !== process.argv[2] || !/^[0-9a-f]{64}$/.test(deployment.targetContainerId)) process.exit(1);
-    process.stdout.write(deployment.targetContainerId);
+      || deployment.targetImageId !== process.argv[2] || !/^[0-9a-f]{64}$/.test(deployment.targetContainerId)
+      || !Number.isSafeInteger(deployment.targetPid) || deployment.targetPid <= 0 || deployment.targetPid > 4_194_304) process.exit(1);
+    process.stdout.write(`${deployment.targetContainerId} ${deployment.targetPid}`);
   ' "$PRIVATE_ROOT/deployment-target.json" "$IMAGE_ID" "$TARGET_PROFILE" "$PRODUCTION_CONTAINER")
-  test -n "$TARGET_CONTAINER_ID" || return 1
+  set -- $TARGET_CONTAINER_BINDING
+  test "$#" -eq 2 || return 1
+  TARGET_CONTAINER_ID=$1
+  TARGET_CONTAINER_PID=$2
   /usr/local/bin/node "$BROKER_PROGRAM" "$TARGET_PROFILE" "$TARGET_CONTAINER_ID" "$BROKER_SOCKET" "$CLOSED_INVENTORY" "$IMAGE_ID" "$BROKER_SNAPSHOT" </dev/null >/dev/null 2>&1 &
   BROKER_PID=$!
   ATTEMPT=0
@@ -149,6 +153,26 @@ start_broker() {
   test "$(stat -c '%u:%g %a' "$BROKER_SOCKET")" = "0:10001 660" || return 1
   test "$(stat -c '%u:%g %a' "$CLOSED_INVENTORY")" = "0:0 600" || return 1
   test "$(stat -c '%u:%g %a' "$BROKER_SNAPSHOT")" = "0:0 600" || return 1
+  await_post_audit_health
+  refresh_live_facts
+}
+
+await_post_audit_health() {
+  POST_AUDIT_ATTEMPT=0
+  while test "$POST_AUDIT_ATTEMPT" -lt 120; do
+    POST_AUDIT_STATE=$(/usr/bin/timeout -s KILL 20 /usr/bin/docker inspect --format '{{.Id}} {{.Name}} {{.Image}} {{.State.Running}} {{.State.Paused}} {{.State.Restarting}} {{.State.Dead}} {{.State.Pid}} {{if .State.Health}}{{.State.Health.Status}}{{else}}missing{{end}}' "$TARGET_CONTAINER_ID") || return 1
+    set -- $POST_AUDIT_STATE
+    test "$#" -eq 9 || return 1
+    test "$1" = "$TARGET_CONTAINER_ID" && test "$2" = "/$PRODUCTION_CONTAINER" && test "$3" = "$IMAGE_ID" || return 1
+    test "$4" = true && test "$6" = false && test "$7" = false || return 1
+    test "$8" = "$TARGET_CONTAINER_PID" || return 1
+    if test "$5" = false && test "$9" = healthy; then return 0; fi
+    test "$5" = true || test "$5" = false || return 1
+    test "$9" = starting || test "$9" = unhealthy || return 1
+    POST_AUDIT_ATTEMPT=$((POST_AUDIT_ATTEMPT + 1))
+    sleep 1
+  done
+  return 1
 }
 
 prepare_live_facts() {

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.761",
+  "runtimeVersion": "0.1.0-alpha.763",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-08-30T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.761</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.763</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.761",
+  "version": "0.1.0-alpha.763",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.761",
+      "version": "0.1.0-alpha.763",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.761",
+  "version": "0.1.0-alpha.763",
   "engines": {
     "node": ">=22"
   },