@ouro.bot/cli 0.1.0-alpha.767 → 0.1.0-alpha.768

package/changelog.json

@@ -1,6 +1,13 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.768",
+      "changes": [
+        "Fix Sanctuary acceptance cursor snapshots for authenticated genesis and concurrent audit writes.",
+        "Cover fail-closed cursor schema, authority, and offset validation."
+      ]
+    },
     {
       "version": "0.1.0-alpha.767",
       "changes": [

package/deploy/unraid/sanctuary-acceptance-contract.json

@@ -102,7 +102,7 @@
       "fixed": {
         "allowedRoot": "/evidence",
         "evidencePath": "/evidence/cursor-snapshot.json",
-        "adapters": [{ "schema": "telegram-cursor-v1", "executable": "/opt/ouro/deploy/unraid/sanctuary-acceptance-adapter.sh" }]
+        "adapters": [{ "schema": "telegram-cursor-v1", "executable": "/opt/ouro/deploy/unraid/sanctuary-acceptance-adapter.sh", "allowGenesis": false }]
       }
     },
     "cursor-delta": {

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.767",
+  "runtimeVersion": "0.1.0-alpha.768",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-08-30T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.767</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.768</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/daemon/sanctuary-acceptance-adapter.js

@@ -99,6 +99,7 @@ const NETWORK_TIMEOUT_MS = 10_000;
 const KEY_DIRECTORY = "/boot/config/plugins/dynamix.my.servers/keys";
 const SELECTED_KEY_RECORD = "/run/ouro-acceptance/unraid-key.json";
 const TELEGRAM_OFFSET = "/home/ouro/AgentBundles/sanctuary.ouro/state/senses/telegram/offset.json";
+const TELEGRAM_IDENTITY_KEY = "/home/ouro/AgentBundles/sanctuary.ouro/state/senses/telegram/identity.key";
 const TELEGRAM_AUDIT = `/home/ouro/AgentBundles/sanctuary.ouro/${telegram_audit_ledger_1.TELEGRAM_ACCEPTANCE_AUDIT_RELATIVE_PATH}`;
 const TELEGRAM_AUDIT_HEAD = `/home/ouro/AgentBundles/sanctuary.ouro/${telegram_audit_ledger_1.TELEGRAM_ACCEPTANCE_AUDIT_HEAD_RELATIVE_PATH}`;
 const IMAGE_DIGEST_FILE = "/run/ouro-acceptance/image-digest";
@@ -1848,16 +1849,52 @@ async function storeTelegramBootstrap(payload, deps) {
     }
     return { stored: true };
 }
-function cursorSnapshot(deps) {
+function cursorSnapshot(payload, deps) {
+    exactKeys(payload, ["allowGenesis", "operation", "schema"], "Telegram cursor snapshot request");
+    if (payload.schema !== "telegram-cursor-v1" || typeof payload.allowGenesis !== "boolean")
+        throw new Error("Telegram cursor snapshot request is invalid");
     const offsetRaw = fixedFile(deps, TELEGRAM_OFFSET);
-    const auditRaw = fixedFile(deps, TELEGRAM_AUDIT);
-    const auditHeadRaw = fixedFile(deps, TELEGRAM_AUDIT_HEAD);
+    const identityKey = fixedFile(deps, TELEGRAM_IDENTITY_KEY).trim();
+    if (!/^[A-Za-z0-9_-]{43}$/u.test(identityKey) || Buffer.from(identityKey, "base64url").length !== 32) {
+        throw new Error("Telegram identity key is invalid");
+    }
     const offset = object(JSON.parse(offsetRaw), "Telegram offset");
     if (!Number.isSafeInteger(offset.nextUpdateId) || offset.nextUpdateId < 0)
         throw new Error("Telegram offset is invalid");
+    let auditCursorDigest;
+    let verificationFailure;
+    let observedAuditState = false;
+    for (let attempt = 0; attempt < 3; attempt += 1) {
+        const headBefore = optionalFixedFile(deps, TELEGRAM_AUDIT_HEAD);
+        const auditRaw = optionalFixedFile(deps, TELEGRAM_AUDIT);
+        const headAfter = optionalFixedFile(deps, TELEGRAM_AUDIT_HEAD);
+        if (headBefore === null && auditRaw === null && headAfter === null) {
+            if (payload.allowGenesis !== true)
+                throw new Error("Telegram audit genesis is not authorized for this snapshot");
+            if (!observedAuditState) {
+                auditCursorDigest = sha256("ouroboros.telegram.acceptance.cursor.v1\0genesis");
+                break;
+            }
+            continue;
+        }
+        observedAuditState = true;
+        if (headBefore !== null && auditRaw !== null && headAfter !== null && headBefore === headAfter) {
+            try {
+                (0, telegram_audit_ledger_1.verifyTelegramAuditLedger)({ ledgerRaw: auditRaw, headRaw: headAfter, identityKey });
+                auditCursorDigest = sha256(`ouroboros.telegram.acceptance.cursor.v1\0present\0${auditRaw}\0${headAfter}`);
+                break;
+            }
+            catch (error) {
+                verificationFailure = error;
+            }
+        }
+    }
+    if (auditCursorDigest === undefined) {
+        throw new Error(`Telegram acceptance audit state could not be captured consistently${verificationFailure ? `: ${verificationFailure.message}` : ""}`, verificationFailure ? { cause: verificationFailure } : undefined);
+    }
     return {
         offsetDigest: sha256(JSON.stringify({ nextUpdateId: offset.nextUpdateId })),
-        auditCursorDigest: sha256(`${auditRaw}\0${auditHeadRaw}`),
+        auditCursorDigest,
     };
 }
 function telegramPollerQuiescence(payload, deps) {
@@ -2065,7 +2102,7 @@ function provenance(payload, deps) {
     const containerDigest = fixedFile(deps, CONTAINER_DIGEST_FILE).trim();
     if (!SHA256.test(imageDigest) || !SHA256.test(containerDigest))
         throw new Error("live provenance digest is invalid");
-    const cursor = cursorSnapshot(deps);
+    const cursor = cursorSnapshot({ operation: "snapshot", schema: "telegram-cursor-v1", allowGenesis: false }, deps);
     return { imageDigest, containerDigest, cursorDigest: sha256(`${cursor.offsetDigest}\0${cursor.auditCursorDigest}`) };
 }
 function evidenceSnapshot(payload, deps) {
@@ -2078,7 +2115,11 @@ function evidenceSnapshot(payload, deps) {
     const imageDigest = fixedFile(deps, IMAGE_DIGEST_FILE).trim();
     if (!SHA256.test(imageDigest))
         throw new Error("container image digest is invalid");
-    return { healthy: health.healthy, containerImageDigest: imageDigest, telegramOffsetDigest: cursorSnapshot(deps).offsetDigest };
+    return {
+        healthy: health.healthy,
+        containerImageDigest: imageDigest,
+        telegramOffsetDigest: cursorSnapshot({ operation: "snapshot", schema: "telegram-cursor-v1", allowGenesis: false }, deps).offsetDigest,
+    };
 }
 function bootId(deps) {
     const value = fixedFile(deps, BOOT_ID_FILE).trim();
@@ -2147,6 +2188,7 @@ function materializeConfig(payload, deps) {
         if (phase !== "before" && phase !== "after")
             throw new Error("cursor snapshot phase is invalid");
         config.evidencePath = `/evidence/cursor-${phase}.json`;
+        config.adapters = config.adapters.map((adapter) => ({ ...adapter, allowGenesis: phase === "before" }));
     }
     else if (command === "unraid-key-rotate") {
         const closed = object(JSON.parse(fixedFile(deps, CLOSED_INVENTORY_FILE)), "closed Unraid inventory");
@@ -2188,7 +2230,7 @@ async function executeSanctuaryAcceptanceAdapter(rawPayload, deps = createSanctu
                 result = telegramPollerQuiescence(payload, deps);
                 break;
             case "snapshot":
-                result = cursorSnapshot(deps);
+                result = cursorSnapshot(payload, deps);
                 break;
             case "inject_callbacks_concurrently":
                 result = await concurrentCallbackProbe(payload, deps);

package/dist/heart/daemon/sanctuary-acceptance-harness.js

@@ -1011,7 +1011,10 @@ async function cursorSnapshot(config, deps) {
             throw new Error("snapshot adapter schemas must be unique");
         schemas.add(schema);
         const executable = adapter(spec.executable, "snapshot adapter executable");
-        const payload = await deps.runAdapter(executable, { operation: "snapshot", schema });
+        const allowGenesis = spec.allowGenesis === undefined ? false : boolean(spec.allowGenesis, "snapshot adapter allowGenesis");
+        if (allowGenesis && evidencePath !== path.join(root, "cursor-before.json"))
+            throw new Error("snapshot adapter genesis authority is only valid for cursor-before evidence");
+        const payload = await deps.runAdapter(executable, { operation: "snapshot", schema, allowGenesis });
         const selected = fixedEvidenceValues(schema, payload);
         for (const [name, value] of Object.entries(selected))
             values[`${schema}.${name}`] = value;

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.767",
+  "version": "0.1.0-alpha.768",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.767",
+      "version": "0.1.0-alpha.768",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.767",
+  "version": "0.1.0-alpha.768",
   "engines": {
     "node": ">=22"
   },