@ouro.bot/cli 0.1.0-alpha.787 → 0.1.0-alpha.789

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.789",
+      "changes": [
+        "Warm private-runtime machine credentials before accepting buffered work, so Sanctuary turns can use machine-scoped tools immediately after startup."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.788",
+      "changes": [
+        "Allow verified operator CLI and daemon await private wakes by default, including queued await-expiry alerts."
+      ]
+    },
     {
       "version": "0.1.0-alpha.787",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.787",
+  "runtimeVersion": "0.1.0-alpha.789",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>Mendelow Cloud Butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.787</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.789</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/agent-entry.js

@@ -179,9 +179,8 @@ Promise.resolve().then(() => __importStar(require("./runtime-credentials"))).the
     if (providerTargets.length > 0 && providerPoolMissingTargets(providerPool, providerTargets)) {
         await refreshProviderCredentialPool(agentName, { preserveCachedOnFailure: true, providers: providerTargets }).catch(() => undefined);
     }
-    /* v8 ignore next 7 -- process-start best-effort machine credential refresh runs in a child entrypoint and is covered operationally by daemon startup tests @preserve */
     if (!readMachineRuntimeCredentialConfig(agentName).ok) {
-        void Promise.resolve().then(() => __importStar(require("./machine-identity"))).then(({ loadOrCreateMachineIdentity }) => {
+        await Promise.resolve().then(() => __importStar(require("./machine-identity"))).then(({ loadOrCreateMachineIdentity }) => {
             const machine = loadOrCreateMachineIdentity();
             return refreshMachineRuntimeCredentialConfig(agentName, machine.machineId, { preserveCachedOnFailure: true });
         })

package/dist/heart/private-runtime/policy.js

@@ -111,6 +111,12 @@ function emitPolicyEvaluated(deps, input) {
         meta: payload.meta,
     });
 }
+function hasOriginRef(refs, kind, id) {
+    return refs.some((ref) => ref.kind === kind && ref.id === id);
+}
+function hasNonEmptyOriginRef(refs, kind) {
+    return refs.some((ref) => ref.kind === kind && typeof ref.id === "string" && ref.id.trim().length > 0);
+}
 async function defaultResolveProviderLane(agent, lane, deps) {
     const bundlesRoot = deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)();
     const { config } = (0, auth_flow_1.readAgentConfigForAgent)(agent, bundlesRoot);
@@ -137,13 +143,31 @@ async function evaluatePolicy(request, context, deps) {
         return deps.evaluatePolicy(request, context);
     const originRefs = request.originRefs ?? [];
     if (request.triggerSource === "external-event"
-        && originRefs.some((ref) => ref.kind === "external-event" && typeof ref.id === "string" && ref.id.length > 0)
-        && originRefs.some((ref) => ref.kind === "daemon-command" && ref.id === "external.event.submit")) {
+        && hasNonEmptyOriginRef(originRefs, "external-event")
+        && hasOriginRef(originRefs, "daemon-command", "external.event.submit")) {
         return {
             result: "allow",
             reason: "verified daemon external event",
         };
     }
+    if (request.triggerSource === "operator-cli"
+        && hasOriginRef(originRefs, "cli-command", "ouro msg")
+        && hasNonEmptyOriginRef(originRefs, "daemon-receipt")) {
+        return {
+            result: "allow",
+            reason: "verified operator CLI message",
+        };
+    }
+    if ((request.triggerSource === "await-poke" || request.triggerSource === "await-scheduler" || request.triggerSource === "await-expiry")
+        && hasNonEmptyOriginRef(originRefs, "await")
+        && (hasOriginRef(originRefs, "daemon-command", "await.poke")
+            || hasOriginRef(originRefs, "scheduler", "await-scheduler")
+            || hasOriginRef(originRefs, "await-alert", "expired"))) {
+        return {
+            result: "allow",
+            reason: "verified daemon await check",
+        };
+    }
     return {
         result: "deny",
         reason: "private runtime policy denies by default",

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.787",
+  "version": "0.1.0-alpha.789",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.787",
+      "version": "0.1.0-alpha.789",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.787",
+  "version": "0.1.0-alpha.789",
   "engines": {
     "node": ">=22"
   },