@ouro.bot/cli 0.1.0-alpha.784 → 0.1.0-alpha.785

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.785",
+      "changes": [
+        "Harden Telegram effect recovery so invalid transport-control artifacts cannot crash the butler startup loop."
+      ]
+    },
     {
       "version": "0.1.0-alpha.784",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.784",
+  "runtimeVersion": "0.1.0-alpha.785",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.784</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.785</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/senses/telegram-effect-adapter.js

@@ -241,6 +241,25 @@ class FileTelegramEffectJournal {
         const filePath = this.artifactPath(id);
         return fs.existsSync(filePath) ? this.read(id) : null;
     }
+    quarantineInvalid(id, reason) {
+        this.assertRootIdentity();
+        const filePath = this.artifactPath(id);
+        if (!fs.existsSync(filePath))
+            return;
+        const quarantineRoot = path.join(path.dirname(this.root), `${path.basename(this.root)}.quarantine`);
+        fs.mkdirSync(quarantineRoot, { recursive: true, mode: 0o700 });
+        fs.chmodSync(quarantineRoot, 0o700);
+        const quarantinePath = path.join(quarantineRoot, `${id}.${Date.now()}.${process.pid}.invalid.json`);
+        fs.renameSync(filePath, quarantinePath);
+        fs.chmodSync(quarantinePath, 0o600);
+        (0, runtime_1.emitNervesEvent)({
+            level: "error",
+            component: "senses",
+            event: "senses.telegram_effect_artifact_quarantined",
+            message: "quarantined invalid Telegram effect artifact",
+            meta: { artifactId: id, reason },
+        });
+    }
     write(artifact) {
         this.assertRootIdentity();
         const filePath = this.artifactPath(artifact.id);
@@ -268,6 +287,28 @@ class FileTelegramEffectJournal {
             .filter((entry) => entry.isFile() && /^[a-f0-9]{64}\.json$/u.test(entry.name))
             .map((entry) => this.read(entry.name.slice(0, -5)));
     }
+    listRecoverable() {
+        this.assertRootIdentity();
+        const entries = fs.readdirSync(this.descriptorRoot, { withFileTypes: true });
+        this.assertRootIdentity();
+        const artifacts = [];
+        for (const entry of entries.filter((candidate) => candidate.isFile() && /^[a-f0-9]{64}\.json$/u.test(candidate.name))) {
+            const id = entry.name.slice(0, -5);
+            try {
+                artifacts.push(this.read(id));
+            }
+            catch (error) {
+                (0, runtime_1.emitNervesEvent)({
+                    level: "error",
+                    component: "senses",
+                    event: "senses.telegram_effect_recovery_artifact_skipped",
+                    message: "skipped invalid Telegram effect artifact during recovery",
+                    meta: { artifactId: id, error: error instanceof Error ? error.message : String(error) },
+                });
+            }
+        }
+        return artifacts;
+    }
 }
 exports.FileTelegramEffectJournal = FileTelegramEffectJournal;
 function prepareTelegramEffect(store, input) {
@@ -281,7 +322,15 @@ function prepareTelegramEffect(store, input) {
     if (target.kind === "admission_gate" && input.authorization.transport.chatId !== target.chatId)
         throw new Error("Telegram admission transport route changed");
     const id = artifactId(idempotencyKey);
-    const existing = store.readIfExists(id);
+    let existing = null;
+    try {
+        existing = store.readIfExists(id);
+    }
+    catch (error) {
+        if (!isTransportOnlyControl({ authorClass: input.authorClass, effect: input.effect, target }))
+            throw error;
+        store.quarantineInvalid(id, error instanceof Error ? error.message : String(error));
+    }
     if (existing) {
         if (JSON.stringify(existing.target) !== JSON.stringify(target)
             || existing.authorClass !== input.authorClass
@@ -526,7 +575,7 @@ async function sweepTelegramSystemFailsafes(input) {
 }
 async function recoverTelegramEffectOutbox(input) {
     const limit = Math.min(Math.max(input.maxArtifacts ?? 20, 1), 100);
-    const candidates = input.store.list()
+    const candidates = input.store.listRecoverable()
         .filter((artifact) => (!input.matches || input.matches(artifact))
         && !artifact.parts.some((part) => part.state === "attempting" || part.state === "indeterminate")
         && artifact.parts.some((part) => part.state === "prepared" && (part.attempts ?? 0) < 3))

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.784",
+  "version": "0.1.0-alpha.785",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.784",
+      "version": "0.1.0-alpha.785",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.784",
+  "version": "0.1.0-alpha.785",
   "engines": {
     "node": ">=22"
   },