@ouro.bot/cli 0.1.0-alpha.811 → 0.1.0-alpha.812

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.812",
+      "changes": [
+        "Accept Sanctuary's existing private frontend socket during deployment audits while retaining exact listener and ownership checks."
+      ]
+    },
     {
       "version": "0.1.0-alpha.811",
       "changes": [

package/deploy/unraid/README.txt

@@ -2787,12 +2787,9 @@ Packaged deployment-target containment gates:
   closed after eight attempts. It always makes bounded exact-ID unpause attempts,
   verifies the same ID and PID resumed their original running, unpaused state,
   and only then performs the final full-profile topology capture. It
-  rejects every owned UDP listener and every externally reachable owned TCP listener. Only loopback
-  Mailbox port 6876 plus stream-listening endpoints at the fixed daemon and
-  acceptance Unix control paths are permitted; all other named Unix endpoint
-  types (including datagrams) fail closed. Inherited descriptors for the same
-  socket inode are deduplicated, while unknown loopback ports, wildcard/host-address
-  listeners, process/socket/listener drift, or ambiguous ownership fail closed.
+  rejects every owned UDP listener and every externally reachable owned TCP listener.
+  Only loopback Mailbox port 6876 plus stream-listening endpoints at /tmp/ouroboros-daemon.sock, /tmp/ouroboros-daemon.sock.frontend, and /home/ouro/AgentBundles/sanctuary.ouro/state/acceptance/telegram-control.sock are permitted; all other named Unix endpoint types (including datagrams) fail closed.
+  Inherited descriptors for the same socket inode are deduplicated, while unknown loopback ports, wildcard/host-address listeners, process/socket/listener drift, or ambiguous ownership fail closed.
   Unit 18 uses the separately packaged fixed final command after activation.
   It accepts either the legacy-adoption topology with no canonical rollback or
   exactly one stopped, non-autostarted rollback; running/autostarted rollback,

package/deploy/unraid/sanctuary-deployment-target.mjs

@@ -16,6 +16,7 @@ const PROFILES = Object.freeze({
 })
 const DOCUMENTED_UNIX_CONTROLS = [
   "/tmp/ouroboros-daemon.sock",
+  "/tmp/ouroboros-daemon.sock.frontend",
   "/home/ouro/AgentBundles/sanctuary.ouro/state/acceptance/telegram-control.sock",
 ]
 const DOCUMENTED_LOOPBACK_TCP_CONTROLS = new Set([6876])

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.811",
+  "runtimeVersion": "0.1.0-alpha.812",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.811</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.812</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.811",
+  "version": "0.1.0-alpha.812",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.811",
+      "version": "0.1.0-alpha.812",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.811",
+  "version": "0.1.0-alpha.812",
   "engines": {
     "node": ">=22"
   },