@ouro.bot/cli 0.1.0-alpha.805 → 0.1.0-alpha.807

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.807",
+      "changes": [
+        "Check provider readiness before opening chat after an explicit hatch."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.806",
+      "changes": [
+        "Require fresh install-state evidence for explicit Sanctuary owner requests."
+      ]
+    },
     {
       "version": "0.1.0-alpha.805",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.805",
+  "runtimeVersion": "0.1.0-alpha.807",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.805</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.807</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/daemon/cli-exec.js

@@ -8530,6 +8530,9 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
         await performSystemSetup(deps);
         const daemonResult = await ensureDaemonRunning(deps);
         if (deps.startChat) {
+            const health = await checkProviderHealthBeforeChat(hatchInput.agentName, deps);
+            if (!health.ok)
+                return health.output;
             await deps.startChat(hatchInput.agentName);
             return "";
         }

package/dist/senses/sanctuary-install-state-contract.js

@@ -0,0 +1,126 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanctuaryInstallStateRequiredToolCalls = sanctuaryInstallStateRequiredToolCalls;
+const runtime_1 = require("../nerves/runtime");
+const TOOL_NAME = "sanctuary_get_install_state";
+const REQUEST = /\b(?:use|run|call)\s+sanctuary_get_install_state\b/iu;
+const NEGATED_REQUEST = /\b(?:do not|don't|dont|never|must not|should not|cannot|can't)\s+(?:(?:under|any|all|circumstances|whatsoever|ever|please|really|actually|immediately)\s+)*(?:use|run|call)\s+sanctuary_get_install_state\b|\bnot\s+to\s+(?:use|run|call)\s+sanctuary_get_install_state\b|\b(?:do not|don't|dont)\s+(?:(?:want|need|ask)\b(?:(?![.!?;,:]).){0,64}|(?:(?:under|any|all|circumstances|whatsoever|ever|please|really|actually|immediately)\s+)*(?:attempt|try|plan|intend)\s+(?:to\s+)?)(?:use|run|call)\s+sanctuary_get_install_state\b/giu;
+const HISTORICAL_QUESTION = /\b(?:did|have|has)\s+(?:you\s+)?(?:use|run|call)\s+sanctuary_get_install_state\b[^.!?;:]*/giu;
+const MISMATCH_CODES = new Set([
+    "managed_file_missing",
+    "managed_file_content",
+    "managed_file_mode",
+    "bundle_meta_missing",
+    "bundle_meta_field",
+    "bundle_meta_mode",
+]);
+const REPAIR_ACTIONS = new Set([
+    "restart_from_verified_release",
+    "run_verified_update_recovery",
+    "roll_back_or_install_verified_release",
+]);
+function parseInstallState(result) {
+    try {
+        const parsed = JSON.parse(result);
+        const data = parsed.ok === true && parsed.data && typeof parsed.data === "object" && !Array.isArray(parsed.data)
+            ? parsed.data
+            : undefined;
+        const repair = data?.repair && typeof data.repair === "object" && !Array.isArray(data.repair)
+            ? data.repair
+            : undefined;
+        if (!data
+            || typeof data.runtimePackageVersion !== "string" || data.runtimePackageVersion.length === 0
+            || typeof data.packagedBundleVersion !== "string" || data.packagedBundleVersion.length === 0
+            || !(typeof data.liveBundleVersion === "string" && data.liveBundleVersion.length > 0 || data.liveBundleVersion === null)
+            || !["exact", "mismatch"].includes(String(data.parity))
+            || !Array.isArray(data.mismatchCodes)
+            || !data.mismatchCodes.every((code) => typeof code === "string" && MISMATCH_CODES.has(code))
+            || !["absent", "rollback", "committing"].includes(String(data.journalState))
+            || typeof data.ready !== "boolean"
+            || !(repair?.actor === "none" && repair.action === "none"
+                || repair?.actor === "human-required" && typeof repair.action === "string" && REPAIR_ACTIONS.has(repair.action)))
+            return undefined;
+        return {
+            runtimePackageVersion: data.runtimePackageVersion,
+            packagedBundleVersion: data.packagedBundleVersion,
+            liveBundleVersion: data.liveBundleVersion,
+            parity: data.parity,
+            journalState: data.journalState,
+            ready: data.ready,
+            repairAction: repair.action,
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+function exactAnswerPattern(current) {
+    const value = (raw) => raw.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+    const assignment = String.raw `\s*(?:(?:is)\s+|[:=]\s*)?`;
+    const separator = String.raw `\s*[,;]\s*`;
+    return new RegExp(String.raw `runtime(?: package)?(?: version)?${assignment}${value(current.runtimePackageVersion)}${separator}`
+        + String.raw `packaged(?: bundle)?(?: version)?${assignment}${value(current.packagedBundleVersion)}${separator}`
+        + String.raw `live(?: bundle)?(?: version)?${assignment}${value(current.liveBundleVersion ?? "null")}${separator}`
+        + String.raw `parity${assignment}${value(current.parity)}${separator}`
+        + String.raw `journal(?: state)?${assignment}${value(current.journalState)}${separator}`
+        + String.raw `ready(?: state)?${assignment}${value(String(current.ready))}${separator}`
+        + String.raw `repair(?: action)?${assignment}${value(current.repairAction)}(?=$|[\s,;.!?])`, "iu");
+}
+const RESIDUAL_INSTALL_STATE_CLAIM = /(?:^|[.!?;,]\s*)(?:(?:and|but|however|yet)\s+)*(?:(?:the\s+)?(?:runtime(?: package)?(?: version)?|packaged(?: bundle)?(?: version)?|live(?: bundle)?(?: version)?)\s*(?:(?:is)\s+|[:=]\s*)?(?=v?\d|unknown\b|null\b|missing\b|corrupt\b)|(?:the\s+)?installed package(?: version)?\b|(?:the\s+)?parity\s*(?:(?:is)\s+|[:=]\s*)?(?=(?:not\s+)?(?:exact|mismatch)\b)|(?:the\s+)?journal(?: state)?\s*(?:(?:is)\s+|[:=]\s*)?(?=(?:not\s+)?(?:absent|rollback|committing)\b)|(?:the\s+)?ready(?: state)?\s*(?:(?:is)\s+|[:=]\s*)?(?=(?:not\s+)?(?:true|false|ready)\b)|(?:the\s+)?repair(?: action)?\s*(?:(?:is)\s+|[:=]\s*)?(?=none\b|restart_from_verified_release\b|run_verified_update_recovery\b|roll_back_or_install_verified_release\b|required\b|needed\b)|(?:the\s+)?(?:install(?:ation)?|sanctuary|bundle|service|system|it)\s+(?:is(?:\s+not)?|isn't)\s+ready\b)/iu;
+function sanctuaryInstallStateRequiredToolCalls(request, advertisedToolNames) {
+    const normalizedRequest = request.normalize("NFKC").replace(/[‘’]/gu, "'");
+    const negationRequest = normalizedRequest.replace(/,/gu, " ");
+    const affirmativeRequest = negationRequest
+        .replace(NEGATED_REQUEST, " ")
+        .replace(HISTORICAL_QUESTION, " ");
+    if (!advertisedToolNames.includes(TOOL_NAME)
+        || !REQUEST.test(affirmativeRequest))
+        return undefined;
+    let current;
+    const retryMessage = "Call sanctuary_get_install_state with empty arguments, then answer only from that fresh result.";
+    (0, runtime_1.emitNervesEvent)({
+        component: "senses",
+        event: "senses.sanctuary_install_state_required",
+        message: "explicit Sanctuary install-state request requires a fresh verified read",
+        meta: { requiredToolName: TOOL_NAME },
+    });
+    return {
+        names: [TOOL_NAME],
+        retryMessage,
+        requireSuccessfulResults: true,
+        validateRequiredToolResult: (name, result, args) => {
+            if (name !== TOOL_NAME || Object.keys(args).length !== 0)
+                return false;
+            current = parseInstallState(result);
+            return current !== undefined;
+        },
+        validateTerminalAnswer: (answer) => {
+            if (!current) {
+                return "Answer from the fresh install-state result and include its runtime package version, packaged bundle version, live bundle version, parity, journal state, ready state, and repair action.";
+            }
+            const normalizedAnswer = answer.normalize("NFKC").replace(/[‘’]/gu, "'").replace(/\*\*|`/gu, "");
+            const exactMatches = [...normalizedAnswer.matchAll(new RegExp(exactAnswerPattern(current).source, "giu"))];
+            if (exactMatches.length === 0) {
+                const currentValues = [
+                    current.runtimePackageVersion,
+                    current.packagedBundleVersion,
+                    current.liveBundleVersion ?? "null",
+                    current.parity,
+                    current.journalState,
+                    String(current.ready),
+                    current.repairAction,
+                ];
+                return currentValues.every((value) => normalizedAnswer.includes(value))
+                    ? "State each fresh install-state value exactly once in one compact answer."
+                    : "Answer from the fresh install-state result and include its runtime package version, packaged bundle version, live bundle version, parity, journal state, ready state, and repair action.";
+            }
+            if (exactMatches.length !== 1)
+                return "State each fresh install-state value exactly once in one compact answer.";
+            const match = exactMatches[0];
+            const residual = normalizedAnswer.replace(match[0], " ").trim();
+            if (RESIDUAL_INSTALL_STATE_CLAIM.test(residual))
+                return "State each fresh install-state value exactly once in one compact answer.";
+            return undefined;
+        },
+    };
+}

package/dist/senses/telegram.js

@@ -71,6 +71,7 @@ const config_1 = require("../heart/config");
 const telegram_client_1 = require("./telegram-client");
 const sanctuary_runtime_2 = require("./sanctuary-runtime");
 const sanctuary_full_visibility_contract_1 = require("./sanctuary-full-visibility-contract");
+const sanctuary_install_state_contract_1 = require("./sanctuary-install-state-contract");
 const sanctuary_media_catalog_contract_1 = require("./sanctuary-media-catalog-contract");
 const sanctuary_storage_optimization_contract_1 = require("./sanctuary-storage-optimization-contract");
 const sanctuary_grounding_1 = require("./sanctuary-grounding");
@@ -1108,9 +1109,12 @@ function createTelegramSenseApp(options) {
             const mediaCatalog = isSanctuaryHouseholdConversation
                 ? (0, sanctuary_media_catalog_contract_1.sanctuaryMediaCatalogRequiredToolCalls)(input.userMessage, relationshipAuthorization.advertisedToolNames)
                 : undefined;
+            const installState = isSanctuaryOwner
+                ? (0, sanctuary_install_state_contract_1.sanctuaryInstallStateRequiredToolCalls)(input.userMessage, relationshipAuthorization.advertisedToolNames)
+                : undefined;
             if (input.fullVisibilityProgress && fullVisibility)
                 input.fullVisibilityProgress.fallback = fullVisibility.emptyResponseFallback;
-            const contracts = [storageOptimization, fullVisibility, staleDockerCare, mediaCatalog].filter(Boolean);
+            const contracts = [storageOptimization, fullVisibility, staleDockerCare, mediaCatalog, installState].filter(Boolean);
             const ownedNames = contracts.map((contract) => new Set(contract.names));
             const requiredToolCalls = contracts.length === 0 ? undefined : {
                 names: [...new Set(contracts.flatMap((contract) => [...contract.names]))],

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.805",
+  "version": "0.1.0-alpha.807",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.805",
+      "version": "0.1.0-alpha.807",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.805",
+  "version": "0.1.0-alpha.807",
   "engines": {
     "node": ">=22"
   },