@ouro.bot/cli 0.1.0-alpha.778 → 0.1.0-alpha.779

package/changelog.json

@@ -1,10 +1,22 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.779",
+      "changes": [
+        "Treat terminal turns waiting for new input as safe context-loss Sentinel idle states, preventing false critical health alerts after normal private-runtime rests.",
+        "Keep the coverage gate from reinstalling Mailbox UI dependencies during the nerves audit build.",
+        "Bound the release preflight npm audit check, fall back to the local offline audit cache, and surface registry audit endpoint outages without hanging CI.",
+        "Parse npm audit JSON so CI reports the vulnerable package and advisory summary instead of a blind dependency-audit failure.",
+        "Treat shell timeout exit statuses from npm audit as registry timeouts so CI uses the intended offline fallback."
+      ]
+    },
     {
       "version": "0.1.0-alpha.778",
       "changes": [
-        "Treat rested terminal turns waiting for new input as safe context-loss Sentinel idle states, matching settled turns and preventing false critical health alerts after normal private-runtime rests."
+        "Treat terminal turns waiting for new input as safe context-loss Sentinel idle states, preventing false critical health alerts after normal private-runtime rests.",
+        "Keep the coverage gate from reinstalling Mailbox UI dependencies during the nerves audit build.",
+        "Bound the release preflight npm audit check, fall back to the local offline audit cache, and surface registry audit endpoint outages without hanging CI."
       ]
     },
     {

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.778",
+  "runtimeVersion": "0.1.0-alpha.779",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.778</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.779</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/context-loss-gauntlet.js

@@ -81,17 +81,20 @@ function currentAskCheck(card) {
         evidence,
     });
 }
-function isSettledTurnWait(resume) {
+const TERMINAL_IDLE_OUTCOMES = new Set(["settled", "observed", "rested", "superseded"]);
+function isTerminalIdleTurnWait(resume) {
+    const blocker = resume.blockedBecause[0] ?? "";
+    const match = /^turn outcome ([a-z_]+); wait for new input before acting$/.exec(blocker);
     return resume.hasCompleteState
         && resume.recorderHealth.status === "ok"
         && resume.blockedBecause.length === 1
-        && (resume.blockedBecause[0] === "turn outcome settled; wait for new input before acting"
-            || resume.blockedBecause[0] === "turn outcome rested; wait for new input before acting")
+        && match !== null
+        && TERMINAL_IDLE_OUTCOMES.has(match[1])
         && resume.nextSafeAction.value === "inspect the latest session and wait for new input before acting";
 }
 function nextSafeActionCheck(card, resume) {
     const evidence = card.nextAction.source ? [card.nextAction.source] : [];
-    if (isSettledTurnWait(resume)) {
+    if (isTerminalIdleTurnWait(resume)) {
         return makeCheck({
             id: "next_safe_action",
             label: "Next safe action",
@@ -136,7 +139,7 @@ function staleGuardCheck(resume, card) {
             evidence,
         });
     }
-    if (isSettledTurnWait(resume)) {
+    if (isTerminalIdleTurnWait(resume)) {
         return makeCheck({
             id: "stale_guard",
             label: "Stale-state guard",

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.778",
+  "version": "0.1.0-alpha.779",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.778",
+      "version": "0.1.0-alpha.779",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.778",
+  "version": "0.1.0-alpha.779",
   "engines": {
     "node": ">=22"
   },
@@ -52,7 +52,7 @@
     "release:trust:repair-plan": "node scripts/npm-trusted-publishers.cjs repair-plan",
     "release:trust:repair": "node scripts/npm-trusted-publishers.cjs repair",
     "release:smoke": "node scripts/release-smoke.cjs",
-    "audit:nerves": "npm run build && node dist/nerves/coverage/cli-main.js"
+    "audit:nerves": "npm run build -- --skip-mailbox-ui-install && node dist/nerves/coverage/cli-main.js"
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.78.0",