@ouro.bot/cli 0.1.0-alpha.811 → 0.1.0-alpha.813

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.813",
+      "changes": [
+        "Unrelated logs no longer block Sanctuary containment checks; identity and authenticated audit safeguards remain intact."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.812",
+      "changes": [
+        "Accept Sanctuary's existing private frontend socket during deployment audits while retaining exact listener and ownership checks."
+      ]
+    },
     {
       "version": "0.1.0-alpha.811",
       "changes": [

package/deploy/unraid/README.txt

@@ -2787,12 +2787,9 @@ Packaged deployment-target containment gates:
   closed after eight attempts. It always makes bounded exact-ID unpause attempts,
   verifies the same ID and PID resumed their original running, unpaused state,
   and only then performs the final full-profile topology capture. It
-  rejects every owned UDP listener and every externally reachable owned TCP listener. Only loopback
-  Mailbox port 6876 plus stream-listening endpoints at the fixed daemon and
-  acceptance Unix control paths are permitted; all other named Unix endpoint
-  types (including datagrams) fail closed. Inherited descriptors for the same
-  socket inode are deduplicated, while unknown loopback ports, wildcard/host-address
-  listeners, process/socket/listener drift, or ambiguous ownership fail closed.
+  rejects every owned UDP listener and every externally reachable owned TCP listener.
+  Only loopback Mailbox port 6876 plus stream-listening endpoints at /tmp/ouroboros-daemon.sock, /tmp/ouroboros-daemon.sock.frontend, and /home/ouro/AgentBundles/sanctuary.ouro/state/acceptance/telegram-control.sock are permitted; all other named Unix endpoint types (including datagrams) fail closed.
+  Inherited descriptors for the same socket inode are deduplicated, while unknown loopback ports, wildcard/host-address listeners, process/socket/listener drift, or ambiguous ownership fail closed.
   Unit 18 uses the separately packaged fixed final command after activation.
   It accepts either the legacy-adoption topology with no canonical rollback or
   exactly one stopped, non-autostarted rollback; running/autostarted rollback,

package/deploy/unraid/sanctuary-deployment-target.mjs

@@ -16,6 +16,7 @@ const PROFILES = Object.freeze({
 })
 const DOCUMENTED_UNIX_CONTROLS = [
   "/tmp/ouroboros-daemon.sock",
+  "/tmp/ouroboros-daemon.sock.frontend",
   "/home/ouro/AgentBundles/sanctuary.ouro/state/acceptance/telegram-control.sock",
 ]
 const DOCUMENTED_LOOPBACK_TCP_CONTROLS = new Set([6876])

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.811",
+  "runtimeVersion": "0.1.0-alpha.813",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.811</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.813</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/daemon/sanctuary-acceptance-adapter.js

@@ -1372,59 +1372,62 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
                 throw new Error("Telegram approval evidence MAC is invalid");
             }
         }
-        const expectedSubject = (0, telegram_1.opaqueTelegramSubject)(identityKey, credentials.botToken, credentials.authorizedUserId, credentials.authorizedChatId);
-        const observedSubjects = auditEntries.flatMap((entry) => typeof entry.meta.subject === "string" ? [entry.meta.subject] : []);
-        const approvalSubjects = approvalRecords.map((projection) => projection.approval).filter((record) => record.transport === "telegram").map((record) => record.requesterId);
-        const rawValues = [...new Set([credentials.botToken, credentials.authorizedUserId, credentials.authorizedChatId])];
-        const persistedIdentitySurfaces = readBoundedIdentitySurfaces(agentRoot);
-        const surfacePairs = Array.from({ length: Math.floor(persistedIdentitySurfaces.length / 2) }, (_, index) => ({
-            relativePath: persistedIdentitySurfaces[index * 2],
-            raw: persistedIdentitySurfaces[index * 2 + 1],
-        }));
-        const canonicalSessionPath = path.join("state", "sessions", `telegram-user:${expectedSubject}`, "telegram", `telegram_${expectedSubject}.json`);
-        const canonicalSessionCount = surfacePairs.filter(({ relativePath, raw }) => {
-            if (relativePath !== canonicalSessionPath)
-                return false;
-            object(JSON.parse(raw), "canonical Telegram session");
-            return true;
-        }).length;
-        const sessionSurfaceDigest = (0, node_crypto_1.createHash)("sha256").update(JSON.stringify(surfacePairs.filter(({ relativePath }) => relativePath === path.join("state", "senses", "telegram", "identity-subjects.json")
-            || relativePath.startsWith(`state${path.sep}sessions${path.sep}`)
-            || relativePath.startsWith(`state${path.sep}pending${path.sep}`)
-            || relativePath.startsWith(`state${path.sep}pending-returns${path.sep}`)))).digest("hex");
-        const friendSurfaceDigest = (0, node_crypto_1.createHash)("sha256").update(JSON.stringify(surfacePairs.filter(({ relativePath }) => relativePath.startsWith(`friends${path.sep}`)))).digest("hex");
-        const canonicalFriendCount = surfacePairs.reduce((count, { relativePath, raw }) => {
-            if (!relativePath.startsWith(`friends${path.sep}`) || !relativePath.endsWith(".json"))
-                return count;
-            const record = object(JSON.parse(raw), "Telegram Friend identity");
-            if (!Array.isArray(record.externalIds))
-                return count;
-            return count + record.externalIds.filter((value) => {
-                const identity = object(value, "Telegram Friend external identity");
-                return identity.provider === "telegram-user" && identity.externalId === expectedSubject;
+        // Unknown admission needs the same surfaces for its zero-work digest.
+        if (sanctuary_acceptance_harness_1.SANCTUARY_SCENARIO_SOURCES[label].includes("identity-surface-audit") || label === "unit-16d-2-unknown-admission") {
+            const expectedSubject = (0, telegram_1.opaqueTelegramSubject)(identityKey, credentials.botToken, credentials.authorizedUserId, credentials.authorizedChatId);
+            const observedSubjects = auditEntries.flatMap((entry) => typeof entry.meta.subject === "string" ? [entry.meta.subject] : []);
+            const approvalSubjects = approvalRecords.map((projection) => projection.approval).filter((record) => record.transport === "telegram").map((record) => record.requesterId);
+            const rawValues = [...new Set([credentials.botToken, credentials.authorizedUserId, credentials.authorizedChatId])];
+            const persistedIdentitySurfaces = readBoundedIdentitySurfaces(agentRoot);
+            const surfacePairs = Array.from({ length: Math.floor(persistedIdentitySurfaces.length / 2) }, (_, index) => ({
+                relativePath: persistedIdentitySurfaces[index * 2],
+                raw: persistedIdentitySurfaces[index * 2 + 1],
+            }));
+            const canonicalSessionPath = path.join("state", "sessions", `telegram-user:${expectedSubject}`, "telegram", `telegram_${expectedSubject}.json`);
+            const canonicalSessionCount = surfacePairs.filter(({ relativePath, raw }) => {
+                if (relativePath !== canonicalSessionPath)
+                    return false;
+                object(JSON.parse(raw), "canonical Telegram session");
+                return true;
             }).length;
-        }, 0);
-        const surfaceRecords = [...persistedIdentitySurfaces, auditRaw ?? "", auditHeadRaw ?? "", JSON.stringify(approvalRecords)];
-        const surfaceSubjects = surfaceRecords.flatMap((raw) => raw.match(/tg_[A-Za-z0-9_-]{43}/gu) ?? []);
-        const structuredRawId = /"(?:authorizedUserId|authorizedChatId|transportUserId|transportChatId|userId|chatId|updateId|messageId)"\s*:\s*"?\d{1,20}"?/gu;
-        const rawLeakCount = surfaceRecords.reduce((count, raw) => count + rawValues.filter((value) => raw.includes(value)).length + (raw.match(structuredRawId)?.length ?? 0), 0);
-        const mismatchCount = [...surfaceSubjects, ...observedSubjects, ...approvalSubjects].filter((subject) => subject !== expectedSubject).length;
-        identity = {
-            keyPresent: true,
-            subjectOpaque: /^tg_[A-Za-z0-9_-]{43}$/u.test(expectedSubject)
-                && mismatchCount === 0,
-            rawIdentityAbsent: rawLeakCount === 0,
-            liveSubjectObserved: observedSubjects.includes(expectedSubject) && telegramTurns.some((turn) => turn.status === "success"),
-            inspectedRecordCount: surfaceRecords.length,
-            opaqueSubjectCount: [...surfaceSubjects, ...observedSubjects, ...approvalSubjects].filter((subject) => subject === expectedSubject).length,
-            mismatchCount,
-            rawLeakCount,
-            canonicalSessionCount,
-            canonicalFriendCount,
-            sessionSurfaceDigest,
-            friendSurfaceDigest,
-            surfaceDigest: (0, node_crypto_1.createHash)("sha256").update(JSON.stringify(surfaceRecords)).digest("hex"),
-        };
+            const sessionSurfaceDigest = (0, node_crypto_1.createHash)("sha256").update(JSON.stringify(surfacePairs.filter(({ relativePath }) => relativePath === path.join("state", "senses", "telegram", "identity-subjects.json")
+                || relativePath.startsWith(`state${path.sep}sessions${path.sep}`)
+                || relativePath.startsWith(`state${path.sep}pending${path.sep}`)
+                || relativePath.startsWith(`state${path.sep}pending-returns${path.sep}`)))).digest("hex");
+            const friendSurfaceDigest = (0, node_crypto_1.createHash)("sha256").update(JSON.stringify(surfacePairs.filter(({ relativePath }) => relativePath.startsWith(`friends${path.sep}`)))).digest("hex");
+            const canonicalFriendCount = surfacePairs.reduce((count, { relativePath, raw }) => {
+                if (!relativePath.startsWith(`friends${path.sep}`) || !relativePath.endsWith(".json"))
+                    return count;
+                const record = object(JSON.parse(raw), "Telegram Friend identity");
+                if (!Array.isArray(record.externalIds))
+                    return count;
+                return count + record.externalIds.filter((value) => {
+                    const identity = object(value, "Telegram Friend external identity");
+                    return identity.provider === "telegram-user" && identity.externalId === expectedSubject;
+                }).length;
+            }, 0);
+            const surfaceRecords = [...persistedIdentitySurfaces, auditRaw ?? "", auditHeadRaw ?? "", JSON.stringify(approvalRecords)];
+            const surfaceSubjects = surfaceRecords.flatMap((raw) => raw.match(/tg_[A-Za-z0-9_-]{43}/gu) ?? []);
+            const structuredRawId = /"(?:authorizedUserId|authorizedChatId|transportUserId|transportChatId|userId|chatId|updateId|messageId)"\s*:\s*"?\d{1,20}"?/gu;
+            const rawLeakCount = surfaceRecords.reduce((count, raw) => count + rawValues.filter((value) => raw.includes(value)).length + (raw.match(structuredRawId)?.length ?? 0), 0);
+            const mismatchCount = [...surfaceSubjects, ...observedSubjects, ...approvalSubjects].filter((subject) => subject !== expectedSubject).length;
+            identity = {
+                keyPresent: true,
+                subjectOpaque: /^tg_[A-Za-z0-9_-]{43}$/u.test(expectedSubject)
+                    && mismatchCount === 0,
+                rawIdentityAbsent: rawLeakCount === 0,
+                liveSubjectObserved: observedSubjects.includes(expectedSubject) && telegramTurns.some((turn) => turn.status === "success"),
+                inspectedRecordCount: surfaceRecords.length,
+                opaqueSubjectCount: [...surfaceSubjects, ...observedSubjects, ...approvalSubjects].filter((subject) => subject === expectedSubject).length,
+                mismatchCount,
+                rawLeakCount,
+                canonicalSessionCount,
+                canonicalFriendCount,
+                sessionSurfaceDigest,
+                friendSurfaceDigest,
+                surfaceDigest: (0, node_crypto_1.createHash)("sha256").update(JSON.stringify(surfaceRecords)).digest("hex"),
+            };
+        }
     }
     const container = options.skipContainerSnapshot === true
         ? null

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.811",
+  "version": "0.1.0-alpha.813",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.811",
+      "version": "0.1.0-alpha.813",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.811",
+  "version": "0.1.0-alpha.813",
   "engines": {
     "node": ">=22"
   },