@ouro.bot/cli 0.1.0-alpha.763 → 0.1.0-alpha.765

package/changelog.json

@@ -1,6 +1,19 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.765",
+      "changes": [
+        "Require configured turn-local reads before accepting either tool-based or plain-text terminal responses, and fail closed at the bounded provider-turn cap when those reads never run.",
+        "Give Telegram concise phone-native plain-text response guidance instead of Teams Markdown guidance."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.764",
+      "changes": [
+        "Allow the Sanctuary Telegram bootstrap acceptance command to persist merged runtime credentials while preserving read-only containment for every other acceptance path."
+      ]
+    },
     {
       "version": "0.1.0-alpha.763",
       "changes": [

package/deploy/unraid/sanctuary-unit16-run.sh

@@ -411,7 +411,7 @@ run_harness() {
       --user 10001:10001 --read-only --cap-drop ALL --security-opt no-new-privileges \
       --mount "type=bind,src=$CONFIG_PATH,dst=/run/ouro-acceptance/config.json,readonly" \
       --mount "type=bind,src=$EVIDENCE_ROOT,dst=/evidence" \
-      --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli,readonly" \
+      --mount "type=bind,src=$RUNTIME_ROOT,dst=/home/ouro/.ouro-cli" \
       --mount "type=bind,src=$BUNDLE_ROOT,dst=/home/ouro/AgentBundles/sanctuary.ouro$BUNDLE_SUFFIX" \
       --mount "type=bind,src=$POLLER_FACT,dst=/run/ouro-acceptance/telegram-poller-count.json,readonly" \
       --mount "type=bind,src=$IMAGE_FACT,dst=/run/ouro-acceptance/image-digest,readonly" \

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.763",
+  "runtimeVersion": "0.1.0-alpha.765",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-08-30T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.763</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.765</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/core.js

@@ -1122,6 +1122,12 @@ async function runAgent(messages, callbacks, channel, signal, options) {
     let providerIterations = 0;
     const requiredToolCallNames = [...new Set(options?.requiredToolCalls?.names ?? [])];
     const dispatchedRequiredToolCalls = new Set();
+    const pendingRequiredToolCalls = () => {
+        const missing = requiredToolCallNames.filter((name) => !dispatchedRequiredToolCalls.has(name));
+        return missing.length > 0
+            ? { missing, message: `${options.requiredToolCalls.retryMessage} Missing required tool calls: ${missing.join(", ")}.` }
+            : null;
+    };
     const toolLoopState = (0, tool_loop_1.createToolLoopState)();
     const toolFrictionLedger = (0, tool_friction_1.createToolFrictionLedger)();
     const finishTerminalProviderError = (error, classification) => {
@@ -1520,6 +1526,24 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                     });
                     continue;
                 }
+                const requiredToolCallsGate = pendingRequiredToolCalls();
+                if (requiredToolCallsGate) {
+                    streamCallbackBuffer?.discard();
+                    callbacks.onClearText?.();
+                    if (providerIterations >= exports.MAX_PROVIDER_ITERATIONS) {
+                        throw new Error(`provider iteration limit exhausted at response ${exports.MAX_PROVIDER_ITERATIONS} before required tool calls completed`);
+                    }
+                    pushGenerated(msg);
+                    messages.push({ role: "user", content: requiredToolCallsGate.message });
+                    (0, runtime_1.emitNervesEvent)({
+                        level: "warn",
+                        component: "engine",
+                        event: "engine.required_tool_calls_pending",
+                        message: "terminal response rejected until required tool handlers dispatch",
+                        meta: { missingToolNames: requiredToolCallsGate.missing },
+                    });
+                    continue;
+                }
                 if (privateReturnTextAckRetryError) {
                     streamCallbackBuffer?.discard();
                     callbacks.onClearText?.();
@@ -1722,21 +1746,20 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                 if (isSoleSettle) {
                     const settleArgs = validatedCallArguments.get(result.toolCalls[0]);
                     callbacks.onToolStart("settle", settleArgs);
-                    const missingRequiredToolCalls = requiredToolCallNames.filter((name) => !dispatchedRequiredToolCalls.has(name));
-                    if (missingRequiredToolCalls.length > 0) {
+                    const requiredToolCallsGate = pendingRequiredToolCalls();
+                    if (requiredToolCallsGate) {
                         streamCallbackBuffer?.discard();
                         callbacks.onToolEnd("settle", (0, tools_1.summarizeArgs)("settle", settleArgs), false);
                         callbacks.onClearText?.();
                         pushGenerated(msg);
-                        const gateMessage = `${options.requiredToolCalls.retryMessage} Missing required tool calls: ${missingRequiredToolCalls.join(", ")}.`;
-                        pushGenerated({ role: "tool", tool_call_id: result.toolCalls[0].id, content: gateMessage });
-                        providerRuntime.appendToolOutput(result.toolCalls[0].id, gateMessage);
+                        pushGenerated({ role: "tool", tool_call_id: result.toolCalls[0].id, content: requiredToolCallsGate.message });
+                        providerRuntime.appendToolOutput(result.toolCalls[0].id, requiredToolCallsGate.message);
                         (0, runtime_1.emitNervesEvent)({
                             level: "warn",
                             component: "engine",
                             event: "engine.required_tool_calls_pending",
                             message: "settle rejected until required tool handlers dispatch",
-                            meta: { missingToolNames: missingRequiredToolCalls },
+                            meta: { missingToolNames: requiredToolCallsGate.missing },
                         });
                         continue;
                     }

package/dist/mind/prompt.js

@@ -410,6 +410,9 @@ function runtimeInfoSection(channel, options) {
     else if (channel === "mcp") {
         lines.push("this message arrived via a dev tool (e.g. claude code, codex) on behalf of a friend in a sense session. the user can see our conversation. if the dev-tool user asks a direct question, requests stop/pause/confirmation, or the work is complete, i answer with settle. during an active browser/tool/task flow, process comments are feedback to absorb; i keep using tools instead of settling for status. if friction appears, i first look for ad-hoc repairs with the tools i already have. if the friction reveals a harness gap, i create or revise a ponder packet and keep working. ponder does not create an outward deferral by itself.");
     }
+    else if (channel === "telegram") {
+        lines.push("i am responding in Telegram. i keep replies concise and phone-native. i do not use markdown. i do not introduce myself on boot.");
+    }
     else if (channel === "bluebubbles") {
         lines.push("i am responding in iMessage through BlueBubbles. i keep replies short and phone-native. i do not use markdown. i do not introduce myself on boot.");
         lines.push("during an active browser/tool/task flow, process comments from my friend are feedback to absorb, not a reason to settle. i speak once if useful, then keep working until complete, blocked, asked to stop/pause, or confirmation is required. timeout/recovery state is internal, not iMessage copy.");

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.763",
+  "version": "0.1.0-alpha.765",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.763",
+      "version": "0.1.0-alpha.765",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.763",
+  "version": "0.1.0-alpha.765",
   "engines": {
     "node": ">=22"
   },