@ouro.bot/cli 0.1.0-alpha.786 → 0.1.0-alpha.788

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.788",
+      "changes": [
+        "Allow verified operator CLI and daemon await private wakes by default, including queued await-expiry alerts."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.787",
+      "changes": [
+        "Tolerate untitled Jellyfin catalog items in Sanctuary media reads."
+      ]
+    },
     {
       "version": "0.1.0-alpha.786",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.786",
+  "runtimeVersion": "0.1.0-alpha.788",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.786</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.788</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/private-runtime/policy.js

@@ -111,6 +111,12 @@ function emitPolicyEvaluated(deps, input) {
         meta: payload.meta,
     });
 }
+function hasOriginRef(refs, kind, id) {
+    return refs.some((ref) => ref.kind === kind && ref.id === id);
+}
+function hasNonEmptyOriginRef(refs, kind) {
+    return refs.some((ref) => ref.kind === kind && typeof ref.id === "string" && ref.id.trim().length > 0);
+}
 async function defaultResolveProviderLane(agent, lane, deps) {
     const bundlesRoot = deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)();
     const { config } = (0, auth_flow_1.readAgentConfigForAgent)(agent, bundlesRoot);
@@ -137,13 +143,31 @@ async function evaluatePolicy(request, context, deps) {
         return deps.evaluatePolicy(request, context);
     const originRefs = request.originRefs ?? [];
     if (request.triggerSource === "external-event"
-        && originRefs.some((ref) => ref.kind === "external-event" && typeof ref.id === "string" && ref.id.length > 0)
-        && originRefs.some((ref) => ref.kind === "daemon-command" && ref.id === "external.event.submit")) {
+        && hasNonEmptyOriginRef(originRefs, "external-event")
+        && hasOriginRef(originRefs, "daemon-command", "external.event.submit")) {
         return {
             result: "allow",
             reason: "verified daemon external event",
         };
     }
+    if (request.triggerSource === "operator-cli"
+        && hasOriginRef(originRefs, "cli-command", "ouro msg")
+        && hasNonEmptyOriginRef(originRefs, "daemon-receipt")) {
+        return {
+            result: "allow",
+            reason: "verified operator CLI message",
+        };
+    }
+    if ((request.triggerSource === "await-poke" || request.triggerSource === "await-scheduler" || request.triggerSource === "await-expiry")
+        && hasNonEmptyOriginRef(originRefs, "await")
+        && (hasOriginRef(originRefs, "daemon-command", "await.poke")
+            || hasOriginRef(originRefs, "scheduler", "await-scheduler")
+            || hasOriginRef(originRefs, "await-alert", "expired"))) {
+        return {
+            result: "allow",
+            reason: "verified daemon await check",
+        };
+    }
     return {
         result: "deny",
         reason: "private runtime policy denies by default",

package/dist/senses/sanctuary-media-optimization.js

@@ -64,6 +64,9 @@ function boundedLabel(value) {
 function optionalBoundedLabel(value) {
     return value === undefined || value === null ? null : boundedLabel(value);
 }
+function mediaTitle(item, type) {
+    return typeof item.Name === "string" ? boundedLabel(item.Name) : `Untitled ${type}`;
+}
 function basename(value) {
     const parts = string(value).replaceAll("\\", "/").split("/");
     return boundedLabel(parts[parts.length - 1]);
@@ -332,8 +335,8 @@ function createSanctuaryMediaOptimizationClient(options) {
         const sourceIds = new Set();
         let sourceCapped = false;
         for (const item of catalog.items) {
-            const untrustedTitle = boundedLabel(item.Name);
             const type = string(item.Type);
+            const untrustedTitle = mediaTitle(item, type);
             const mediaSources = array(item.MediaSources);
             if (mediaSources.length > 100)
                 throw new ReadFailure("invalid_response", "Jellyfin returned too many sources for one item");
@@ -469,8 +472,8 @@ function createSanctuaryMediaOptimizationClient(options) {
                     throw new ReadFailure("invalid_response", "Media catalog limit must be an integer from 1 to 20");
                 const catalog = await readJellyfinItems(deadline, { includeMediaSources: false });
                 const candidates = catalog.items.map((item) => {
-                    const title = boundedLabel(item.Name);
                     const type = string(item.Type);
+                    const title = mediaTitle(item, type);
                     const productionYear = optionalInteger(item.ProductionYear);
                     const premiereDate = optionalBoundedLabel(item.PremiereDate);
                     return { untrustedTitle: title, type, productionYear, premiereDate };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.786",
+  "version": "0.1.0-alpha.788",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.786",
+      "version": "0.1.0-alpha.788",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.786",
+  "version": "0.1.0-alpha.788",
   "engines": {
     "node": ">=22"
   },