@ouro.bot/cli 0.1.0-alpha.797 → 0.1.0-alpha.799

package/dist/heart/daemon/sanctuary-package-management.js

@@ -0,0 +1,103 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSanctuaryPackageManagedRoots = resolveSanctuaryPackageManagedRoots;
+exports.resolveSanctuaryPackageManagementActivation = resolveSanctuaryPackageManagementActivation;
+exports.requireSanctuaryPackageManagementDecision = requireSanctuaryPackageManagementDecision;
+exports.prepareSanctuaryPackageManagedBundle = prepareSanctuaryPackageManagedBundle;
+const path = __importStar(require("node:path"));
+const runtime_1 = require("../../nerves/runtime");
+const sanctuary_bundle_migration_1 = require("./sanctuary-bundle-migration");
+const daemon_bootstrap_startup_1 = require("./daemon-bootstrap-startup");
+function resolveSanctuaryPackageManagedRoots(input) {
+    return {
+        packageRoot: path.join(input.repoRoot, "deploy", "unraid", "sanctuary.ouro"),
+        agentRoot: path.join(input.bundlesRoot, "sanctuary.ouro"),
+    };
+}
+function invalidDecision() {
+    return { kind: "invalid", failure: (0, daemon_bootstrap_startup_1.createSanctuaryBundlePreparationFailure)("roll_back_or_install_verified_release") };
+}
+function resolveSanctuaryPackageManagementActivation(input) {
+    if (input.mode !== "production")
+        return { kind: "inactive" };
+    const indices = input.argv.flatMap((value, index) => value === "--package-managed-agent" ? [index] : []);
+    if (indices.length === 0)
+        return { kind: "inactive" };
+    if (indices.length !== 1)
+        return invalidDecision();
+    const value = input.argv[indices[0] + 1];
+    if (value !== "sanctuary" || input.managedAgents.length !== 1 || input.managedAgents[0] !== "sanctuary")
+        return invalidDecision();
+    if (!path.isAbsolute(input.repoRoot) || !path.isAbsolute(input.bundlesRoot) || input.runtimePackageVersion.trim() !== input.runtimePackageVersion || input.runtimePackageVersion.length === 0)
+        return invalidDecision();
+    const roots = resolveSanctuaryPackageManagedRoots(input);
+    try {
+        const packageIdentity = (0, sanctuary_bundle_migration_1.inspectSanctuaryDirectoryFromBase)(input.repoRoot, ["deploy", "unraid", "sanctuary.ouro"]);
+        const agentIdentity = (0, sanctuary_bundle_migration_1.inspectSanctuaryDirectoryFromBase)(input.bundlesRoot, ["sanctuary.ouro"]);
+        if (!packageIdentity || !agentIdentity || (0, sanctuary_bundle_migration_1.sanctuaryDirectoriesShareIdentity)(packageIdentity, agentIdentity))
+            return invalidDecision();
+    }
+    catch {
+        return invalidDecision();
+    }
+    return { kind: "active", ...roots, runtimePackageVersion: input.runtimePackageVersion };
+}
+function requireSanctuaryPackageManagementDecision(decision) {
+    if (decision.kind === "invalid")
+        throw decision.failure;
+}
+function prepareSanctuaryPackageManagedBundle(decision, deps = {}) {
+    requireSanctuaryPackageManagementDecision(decision);
+    if (decision.kind === "inactive")
+        return undefined;
+    let inspection;
+    try {
+        inspection = (deps.ensure ?? sanctuary_bundle_migration_1.ensureSanctuaryPackageManagedBundle)({
+            packageRoot: decision.packageRoot,
+            agentRoot: decision.agentRoot,
+            runtimePackageVersion: decision.runtimePackageVersion,
+        });
+    }
+    catch {
+        throw (0, daemon_bootstrap_startup_1.createSanctuaryBundlePreparationFailure)("run_verified_update_recovery");
+    }
+    if (!inspection.ok || !inspection.data.ready) {
+        const action = inspection.ok ? inspection.data.repair.action : inspection.error.repair.action;
+        throw (0, daemon_bootstrap_startup_1.createSanctuaryBundlePreparationFailure)(action === "none" ? "run_verified_update_recovery" : action);
+    }
+    (0, runtime_1.emitNervesEvent)({ component: "daemon", event: "daemon.sanctuary_package_management_prepared", message: "prepared Sanctuary package-managed bundle", meta: { runtimePackageVersion: inspection.data.runtimePackageVersion, journalState: inspection.data.journalState } });
+    return inspection;
+}

package/dist/repertoire/tools-unraid.js

@@ -415,6 +415,7 @@ exports.unraidToolDefinitions = [
     readDefinition("unraid_get_disks", "Read bounded Sanctuary disk SMART, temperature, and parity health.", "getDisks"),
     readDefinition("unraid_get_notifications", "Read bounded unacknowledged Sanctuary notifications.", "getNotifications"),
     readDefinition("unraid_get_system", "Read bounded Sanctuary system and version health.", "getSystem"),
+    readDefinition("sanctuary_get_install_state", "Check whether this Butler installation matches its verified release and report any repair needed.", "getInstallState"),
     readDefinition("unraid_check_services", "Freshly check the fixed public Sanctuary service endpoints and return bounded status with an observation timestamp.", "checkServices"),
     readDefinition("sanctuary_get_download_queue", "Read the bounded live household download queue state, including whether the spend guard has paused it.", "getDownloadQueue"),
     {
@@ -479,5 +480,5 @@ exports.unraidToolDefinitions = [
     component: "repertoire",
     event: "repertoire.unraid_tools_loaded",
     message: "typed Unraid tools loaded",
-    meta: { operations: 9 },
+    meta: { operations: exports.unraidToolDefinitions.length },
 });

package/dist/senses/sanctuary-runtime.js

@@ -42,6 +42,8 @@ const path = __importStar(require("node:path"));
 const node_crypto_1 = require("node:crypto");
 const node_async_hooks_1 = require("node:async_hooks");
 const identity_1 = require("../heart/identity");
+const sanctuary_bundle_migration_1 = require("../heart/daemon/sanctuary-bundle-migration");
+const sanctuary_package_management_1 = require("../heart/daemon/sanctuary-package-management");
 const machine_identity_1 = require("../heart/machine-identity");
 const runtime_credentials_1 = require("../heart/runtime-credentials");
 const unraid_restart_1 = require("../repertoire/unraid-restart");
@@ -54,6 +56,7 @@ const sanctuary_grounding_1 = require("./sanctuary-grounding");
 const sanctuary_health_1 = require("./sanctuary-health");
 const sanctuary_sab_1 = require("./sanctuary-sab");
 const sanctuary_media_optimization_1 = require("./sanctuary-media-optimization");
+const bundle_manifest_1 = require("../mind/bundle-manifest");
 const sanctuaryToolReceipts = new node_async_hooks_1.AsyncLocalStorage();
 const sanctuaryToolGroundings = new node_async_hooks_1.AsyncLocalStorage();
 const acceptanceLedgerTails = new Map();
@@ -281,6 +284,10 @@ function createSanctuaryToolContext(agentName) {
             getDisks: acceptanceRead("unraid_get_disks", reads.getDisks),
             getNotifications: acceptanceRead("unraid_get_notifications", reads.getNotifications),
             getSystem: acceptanceRead("unraid_get_system", reads.getSystem),
+            getInstallState: acceptanceRead("sanctuary_get_install_state", async () => (0, sanctuary_bundle_migration_1.inspectSanctuaryPackageManagedBundle)({
+                ...(0, sanctuary_package_management_1.resolveSanctuaryPackageManagedRoots)({ repoRoot: (0, identity_1.getRepoRoot)(), bundlesRoot: (0, identity_1.getAgentBundlesRoot)() }),
+                runtimePackageVersion: (0, bundle_manifest_1.getPackageVersion)(),
+            })),
             checkServices: acceptanceRead("unraid_check_services", async () => {
                 const services = await Promise.all(sanctuary_health_1.SANCTUARY_PUBLIC_ENDPOINTS.map(async (url) => ({ name: new URL(url).hostname.split(".")[0], ...await (0, sanctuary_health_1.probeSanctuaryEndpoint)(url) })));
                 return { ok: true, data: { observedAt: new Date().toISOString(), services, degraded: services.some((service) => !service.ok) } };

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.797",
+  "version": "0.1.0-alpha.799",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.797",
+      "version": "0.1.0-alpha.799",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.797",
+  "version": "0.1.0-alpha.799",
   "engines": {
     "node": ">=22"
   },