@ouro.bot/cli 0.1.0-alpha.816 → 0.1.0-alpha.817

package/dist/heart/daemon/sanctuary-acceptance-adapter.js

@@ -64,8 +64,8 @@ const node_util_1 = require("node:util");
 const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
 const friends_1 = require("@ouro.bot/friends");
 const runtime_1 = require("../../nerves/runtime");
+const sanctuary_authority_resident_1 = require("../../senses/sanctuary-authority-resident");
 const telegram_approval_runtime_1 = require("../../senses/telegram-approval-runtime");
-const telegram_client_1 = require("../../senses/telegram-client");
 const telegram_effect_adapter_1 = require("../../senses/telegram-effect-adapter");
 const telegram_admission_1 = require("../../senses/telegram-admission");
 const sanctuary_interactive_control_1 = require("../../senses/sanctuary-interactive-control");
@@ -105,7 +105,6 @@ const ADAPTER_TIMEOUT_MS = 240_000;
 const NETWORK_TIMEOUT_MS = 10_000;
 const KEY_DIRECTORY = "/boot/config/plugins/dynamix.my.servers/keys";
 const SELECTED_KEY_RECORD = "/run/ouro-acceptance/unraid-key.json";
-const TELEGRAM_OFFSET = "/home/ouro/AgentBundles/sanctuary.ouro/state/senses/telegram/offset.json";
 const CALLBACK_PLAYBACK_JOURNAL = "state/approvals/sanctuary-callback-playback.sqlite";
 const TELEGRAM_IDENTITY_KEY = "/home/ouro/AgentBundles/sanctuary.ouro/state/senses/telegram/identity.key";
 const TELEGRAM_AUDIT = `/home/ouro/AgentBundles/sanctuary.ouro/${telegram_audit_ledger_1.TELEGRAM_ACCEPTANCE_AUDIT_RELATIVE_PATH}`;
@@ -115,7 +114,6 @@ const CONTAINER_DIGEST_FILE = "/run/ouro-acceptance/container-digest";
 const PROCESS_BINDING_DIGEST_FILE = "/run/ouro-acceptance/process-binding-digest";
 const POSTBOOT_HEALTH_FILE = "/run/ouro-acceptance/postboot-health.json";
 const BOOT_ID_FILE = "/run/ouro-acceptance/boot-id";
-const TELEGRAM_POLLER_COUNT_FILE = "/run/ouro-acceptance/telegram-poller-count.json";
 const CONTRACT_FILE = "/opt/ouro/deploy/unraid/sanctuary-acceptance-contract.json";
 const CLOSED_INVENTORY_FILE = "/run/ouro-acceptance/closed-inventory.json";
 const HOST_BROKER_SOCKET = "/run/ouro-host-acceptance/adapter.sock";
@@ -236,11 +234,31 @@ async function defaultHostRequest(payload, socketPath, timeoutMs) {
         socket.end(`${JSON.stringify(payload)}\n`);
     });
 }
+function acceptanceTelegramIdentity() {
+    const gateway = (0, sanctuary_authority_resident_1.openSanctuaryResidentAuthority)({}, {});
+    try {
+        return gateway.credentials;
+    }
+    finally {
+        gateway.authorityTransport.api.stop();
+    }
+}
 function createSanctuaryAcceptanceAdapterDependencies(secretFd = 3, options = {}) {
     const keyDirectory = options.keyDirectory ?? KEY_DIRECTORY;
     const adapterTimeoutMs = options.adapterTimeoutMs ?? ADAPTER_TIMEOUT_MS;
     const hostBrokerSocket = options.hostBrokerSocket ?? HOST_BROKER_SOCKET;
     const dependencies = {
+        gateway: () => (0, sanctuary_authority_resident_1.openSanctuaryResidentAuthority)({}, {}),
+        gatewayCursor: async () => {
+            const gateway = (0, sanctuary_authority_resident_1.openSanctuaryResidentAuthority)({}, {});
+            try {
+                const snapshot = await gateway.cursorSnapshot();
+                return { nextUpdateId: snapshot.cursor, progressDigest: snapshot.progressDigest };
+            }
+            finally {
+                gateway.authorityTransport.api.stop();
+            }
+        },
         readKeyFiles: () => readKeyDirectory(keyDirectory),
         readKeyRecords: () => readKeyRecords(keyDirectory),
         readDescriptor: () => (0, node_fs_1.readFileSync)(secretFd, "utf8"),
@@ -255,8 +273,7 @@ function createSanctuaryAcceptanceAdapterDependencies(secretFd = 3, options = {}
         callbackPlaybackSnapshot: (coordinateDigest) => callbackPlaybackSnapshot((0, identity_1.getAgentRoot)(TARGET_ID), coordinateDigest),
         interactiveRuntime: executeSanctuaryInteractiveRuntimeOperation,
         hostRequest: options.hostRequest ?? ((payload) => defaultHostRequest(payload, hostBrokerSocket, adapterTimeoutMs)),
-        telegramCredentials: () => (0, telegram_1.loadTelegramSenseCredentials)(TARGET_ID),
-        createTelegramApi: telegram_client_1.createTelegramBotApi,
+        telegramCredentials: acceptanceTelegramIdentity,
         readLiveGrounding: readIndependentSanctuaryGrounding,
         runProductionBoundaryProbe: runSanctuaryProductionBoundaryProbe,
         providerRuntime: core_1.getProviderRuntime,
@@ -529,7 +546,7 @@ async function projectTelegramAdmissions(agentRoot, credentials, identityKey) {
     const effectStore = new telegram_effect_adapter_1.FileTelegramEffectJournal(effectsRoot);
     try {
         const effects = new Map(effectStore.list().map((artifact) => [artifact.id, artifact]));
-        const botId = (0, telegram_1.telegramBotIdFromToken)(credentials.botToken);
+        const botId = credentials.botId;
         const ownerSessionKey = `telegram:${(0, telegram_1.opaqueTelegramSubject)(identityKey, botId, credentials.authorizedUserId, credentials.authorizedChatId)}`;
         const friendsRoot = path.join(agentRoot, "friends");
         const friendStore = (0, node_fs_1.existsSync)(friendsRoot) ? new friends_1.FileFriendStore(friendsRoot) : null;
@@ -657,10 +674,6 @@ function buildPostbootIntegritySnapshot(input) {
         return JSON.stringify(value);
     };
     const digest = (value) => (0, node_crypto_1.createHash)("sha256").update(canonical(value)).digest("hex");
-    const offset = input.offsetRaw === null ? { nextUpdateId: 0 } : object(JSON.parse(input.offsetRaw), "Telegram offset state");
-    if (JSON.stringify(Object.keys(offset).sort()) !== JSON.stringify(["nextUpdateId"]) || !Number.isSafeInteger(offset.nextUpdateId) || Number(offset.nextUpdateId) < 0) {
-        throw new Error("Telegram offset state is invalid");
-    }
     const checkpoints = input.checkpointsRaw === null ? {} : object(JSON.parse(input.checkpointsRaw), "approval checkpoint state");
     const approvalCheckpoints = Object.entries(checkpoints).map(([id, record]) => ({ idDigest: digest(id), recordDigest: digest(record) }))
         .sort((left, right) => left.idDigest.localeCompare(right.idDigest));
@@ -675,7 +688,7 @@ function buildPostbootIntegritySnapshot(input) {
     }));
     return {
         schemaVersion: "sanctuary-postboot-integrity-v2", activeScenarioHandleDigest: input.activeScenarioHandleDigest,
-        telegramNextUpdateId: Number(offset.nextUpdateId), approvalCheckpoints,
+        telegramNextUpdateId: input.telegramNextUpdateId, approvalCheckpoints,
         approvalExecutionCount: new Set(restartAttempts.filter((row) => row.state !== "attempt_not_started").map((row) => row.idDigest)).size, restartAttempts,
         fingerprintDigest: digest(input.cronRaw), sweeps, deliveries,
         audits: input.auditLedgerEntries.map((row) => ({ idDigest: digest(row), recordDigest: digest(row), scenarioHandleDigest: typeof row.meta.scenarioHandleDigest === "string" ? row.meta.scenarioHandleDigest : null, scenarioRelevant: scenarioRelevantEvents.has(row.event) })),
@@ -781,7 +794,7 @@ function parseHealthProbeReceipt(raw, label, scenarioHandleDigest, identityKey)
     return { ...validated, phases };
 }
 function auditContainsSensitiveMaterial(raw, credentials) {
-    const knownValues = credentials ? [credentials.botToken, credentials.authorizedUserId, credentials.authorizedChatId] : [];
+    const knownValues = credentials ? [credentials.botToken ?? "", credentials.authorizedUserId, credentials.authorizedChatId] : [];
     return knownValues.some((value) => value.length > 0 && raw.includes(value))
         || /\b\d{5,16}:[A-Za-z0-9_-]{20,}\b/u.test(raw)
         || /"(?:authorized_?user_?id|authorized_?chat_?id|transport_?user_?id|transport_?chat_?id|user_?id|chat_?id|update_?id|message_?id)"\s*:\s*"?\d{5,16}"?/iu.test(raw)
@@ -1233,7 +1246,7 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
     const identityRaw = optionalFixedFile(deps, pathFor(agentRoot, "state/senses/telegram/identity.key"));
     const auditRaw = optionalFixedFile(deps, TELEGRAM_AUDIT);
     const auditHeadRaw = optionalFixedFile(deps, TELEGRAM_AUDIT_HEAD);
-    const offsetRaw = optionalFixedFile(deps, TELEGRAM_OFFSET);
+    const gatewayCursor = await readGatewayCursor(deps);
     const checkpointsRaw = optionalFixedFile(deps, pathFor(agentRoot, "state/approvals/checkpoints.json"));
     const restartAttemptsRaw = optionalFixedFile(deps, pathFor(agentRoot, "state/acceptance/restart-attempts.ndjson")) ?? "";
     const telegramTurnsRaw = optionalFixedFile(deps, pathFor(agentRoot, "state/acceptance/telegram-turns.ndjson")) ?? "";
@@ -1331,11 +1344,7 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
     });
     const restartAttempts = parseRestartAttempts(restartAttemptsRaw, scenarioHandleDigest);
     const telegramTurns = parseTelegramTurnReceipts(telegramTurnsRaw, scenarioHandleDigest, identityRaw?.trim() ?? null);
-    const telegramOffsetState = offsetRaw === null ? { nextUpdateId: 0 } : object(JSON.parse(offsetRaw), "Telegram offset state");
-    if (JSON.stringify(Object.keys(telegramOffsetState).sort()) !== JSON.stringify(["nextUpdateId"])
-        || !Number.isSafeInteger(telegramOffsetState.nextUpdateId) || Number(telegramOffsetState.nextUpdateId) < 0)
-        throw new Error("Telegram offset state is invalid");
-    const telegramNextUpdateId = Number(telegramOffsetState.nextUpdateId);
+    const telegramNextUpdateId = gatewayCursor.nextUpdateId;
     const groundingTool = label === "unit-16d-whats-up" ? "unraid_get_system" : label === "unit-16d-1-space" ? "unraid_get_storage" : null;
     const liveGrounding = groundingTool && deps.readLiveGrounding ? await deps.readLiveGrounding(groundingTool) : undefined;
     let identity;
@@ -1343,7 +1352,7 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
         throw new Error("Telegram approval identity key is missing or malformed");
     }
     if (identityRaw && /^[A-Za-z0-9_-]{43}\n?$/u.test(identityRaw)) {
-        const credentials = deps.telegramCredentials ? deps.telegramCredentials() : (0, telegram_1.loadTelegramSenseCredentials)(TARGET_ID);
+        const credentials = deps.telegramCredentials ? deps.telegramCredentials() : acceptanceTelegramIdentity();
         const identityKey = identityRaw.trim();
         const auditSchema = label === "unit-16d-whats-up" || label === "unit-16d-1-space" ? "sanctuary-telegram-turn-receipt-v4" : "sanctuary-telegram-turn-receipt-v3";
         for (const entry of auditEntries.filter((candidate) => candidate.event === "senses.telegram_turn_start" || candidate.event === "senses.telegram_turn_end" || candidate.event === "senses.telegram_turn_error")) {
@@ -1374,10 +1383,10 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
         }
         // Unknown admission needs the same surfaces for its zero-work digest.
         if (sanctuary_acceptance_harness_1.SANCTUARY_SCENARIO_SOURCES[label].includes("identity-surface-audit") || label === "unit-16d-2-unknown-admission") {
-            const expectedSubject = (0, telegram_1.opaqueTelegramSubject)(identityKey, credentials.botToken, credentials.authorizedUserId, credentials.authorizedChatId);
+            const expectedSubject = (0, telegram_1.opaqueTelegramSubject)(identityKey, credentials.botId, credentials.authorizedUserId, credentials.authorizedChatId);
             const observedSubjects = auditEntries.flatMap((entry) => typeof entry.meta.subject === "string" ? [entry.meta.subject] : []);
             const approvalSubjects = approvalRecords.map((projection) => projection.approval).filter((record) => record.transport === "telegram").map((record) => record.requesterId);
-            const rawValues = [...new Set([credentials.botToken, credentials.authorizedUserId, credentials.authorizedChatId])];
+            const rawValues = [...new Set([credentials.authorizedUserId, credentials.authorizedChatId])];
             const persistedIdentitySurfaces = readBoundedIdentitySurfaces(agentRoot);
             const surfacePairs = Array.from({ length: Math.floor(persistedIdentitySurfaces.length / 2) }, (_, index) => ({
                 relativePath: persistedIdentitySurfaces[index * 2],
@@ -1409,7 +1418,7 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
             const surfaceRecords = [...persistedIdentitySurfaces, auditRaw ?? "", auditHeadRaw ?? "", JSON.stringify(approvalRecords)];
             const surfaceSubjects = surfaceRecords.flatMap((raw) => raw.match(/tg_[A-Za-z0-9_-]{43}/gu) ?? []);
             const structuredRawId = /"(?:authorizedUserId|authorizedChatId|transportUserId|transportChatId|userId|chatId|updateId|messageId)"\s*:\s*"?\d{1,20}"?/gu;
-            const rawLeakCount = surfaceRecords.reduce((count, raw) => count + rawValues.filter((value) => raw.includes(value)).length + (raw.match(structuredRawId)?.length ?? 0), 0);
+            const rawLeakCount = surfaceRecords.reduce((count, raw) => count + rawValues.filter((value) => raw.includes(value)).length + (raw.match(structuredRawId)?.length ?? 0) + Number(auditContainsSensitiveMaterial(raw)), 0);
             const mismatchCount = [...surfaceSubjects, ...observedSubjects, ...approvalSubjects].filter((subject) => subject !== expectedSubject).length;
             identity = {
                 keyPresent: true,
@@ -1462,7 +1471,7 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
     }
     const health = parseHealthAcceptanceState(healthRaw);
     const activeMarker = (0, sanctuary_acceptance_marker_1.readSanctuaryAcceptanceMarker)(TARGET_ID, agentRoot);
-    const postbootIntegrity = buildPostbootIntegritySnapshot({ offsetRaw, checkpointsRaw, restartAttempts: parseRestartAttempts(restartAttemptsRaw, null), cronRaw, health, auditLedgerEntries, activeScenarioHandleDigest: activeMarker?.scenarioHandleDigest ?? null });
+    const postbootIntegrity = buildPostbootIntegritySnapshot({ telegramNextUpdateId, checkpointsRaw, restartAttempts: parseRestartAttempts(restartAttemptsRaw, null), cronRaw, health, auditLedgerEntries, activeScenarioHandleDigest: activeMarker?.scenarioHandleDigest ?? null });
     const prebootIntegrity = rebootCheckpoint && typeof rebootCheckpoint.prebootIntegrity === "object" && !Array.isArray(rebootCheckpoint.prebootIntegrity)
         ? rebootCheckpoint.prebootIntegrity : undefined;
     const healthProbe = parseHealthProbeReceipt(healthProbeRaw, label, scenarioHandleDigest, identityRaw?.trim() ?? null);
@@ -1550,7 +1559,7 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
             const selection = select(context);
             const schemas = (0, tools_1.toolSelectionSchemas)(selection);
             const schemaToolNames = schemas.map((tool) => tool.function.name);
-            const expectedNames = profile.toolNames.filter((name) => (inner || name !== "rest") && (name !== "set_reasoning_effort" || runtime.capabilities.has("reasoning-effort")));
+            const expectedNames = profile.toolNames.filter((name) => name !== "sanctuary_host_execute" && (inner || name !== "rest") && (name !== "set_reasoning_effort" || runtime.capabilities.has("reasoning-effort")));
             const excludedNames = ["vault_get", "mcp_call", "exec", "credential_get", ...(profileId === "sanctuary-owner" ? [] : tools_1.SANCTUARY_OWNER_ADDITIONS)];
             const poisoned = select({ ...context, relationshipAuthorization: {
                     ...context.relationshipAuthorization, advertisedToolNames: [...profile.toolNames, ...excludedNames, "mcp__containment_poison"],
@@ -1635,7 +1644,7 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
         ? await projectTelegramAdmissions(agentRoot, dependency(deps.telegramCredentials, "Telegram credentials")(), identityRaw?.trim() ?? null)
         : [];
     const sourceValues = {
-        "identity-key": identityRaw, "telegram-audit": auditEntries, "telegram-offset": offsetRaw,
+        "identity-key": identityRaw, "telegram-audit": auditEntries, "telegram-offset": gatewayCursor.progressDigest,
         "approval-journal": approvals, "approval-checkpoints": checkpointsRaw, "container-inspect": container,
         "provider-live-check": liveProvider ?? null, "cron-runtime": cronRaw, "health-runtime": health, "restart-attempt-ledger": restartAttempts,
         "digest-runtime": health, "reboot-checkpoint": rebootCheckpoint, "telegram-turn-receipts": telegramTurns, "read-only-denial-receipt": denialReceipt ?? null,
@@ -1703,7 +1712,7 @@ async function readDefaultSanctuaryScenarioFacts(label, scenarioHandleDigest, de
         },
     };
 }
-function postbootIntegritySnapshot(deps) {
+async function postbootIntegritySnapshot(deps) {
     const agentRoot = (0, identity_1.getAgentRoot)(TARGET_ID);
     const identityRaw = optionalFixedFile(deps, pathFor(agentRoot, "state/senses/telegram/identity.key"));
     const auditRaw = optionalFixedFile(deps, TELEGRAM_AUDIT);
@@ -1719,7 +1728,7 @@ function postbootIntegritySnapshot(deps) {
     });
     const restartAttemptsRaw = optionalFixedFile(deps, pathFor(agentRoot, "state/acceptance/restart-attempts.ndjson")) ?? "";
     return buildPostbootIntegritySnapshot({
-        offsetRaw: optionalFixedFile(deps, TELEGRAM_OFFSET), checkpointsRaw: optionalFixedFile(deps, pathFor(agentRoot, "state/approvals/checkpoints.json")),
+        telegramNextUpdateId: (await readGatewayCursor(deps)).nextUpdateId, checkpointsRaw: optionalFixedFile(deps, pathFor(agentRoot, "state/approvals/checkpoints.json")),
         restartAttempts: parseRestartAttempts(restartAttemptsRaw, null), cronRaw: optionalFixedFile(deps, "/home/ouro/.ouro-cli/scheduler/sanctuary.crontab"),
         health: parseHealthAcceptanceState(optionalFixedFile(deps, pathFor(agentRoot, "state/health/sanctuary-health.json"))), auditLedgerEntries,
         activeScenarioHandleDigest: (0, sanctuary_acceptance_marker_1.readSanctuaryAcceptanceMarker)(TARGET_ID)?.scenarioHandleDigest ?? null,
@@ -1881,18 +1890,21 @@ async function runtimeConfig(reader, label, ...args) {
         throw new Error(`${label} is unavailable`);
     return result.config;
 }
-function cursorSnapshot(payload, deps) {
+async function readGatewayCursor(deps) {
+    const cursor = await dependency(deps.gatewayCursor, "signed gateway cursor")();
+    if (!cursor || !Number.isSafeInteger(cursor.nextUpdateId) || cursor.nextUpdateId < 0 || typeof cursor.progressDigest !== "string" || !/^sha256:[a-f0-9]{64}$/u.test(cursor.progressDigest))
+        throw new Error("signed gateway cursor is invalid");
+    return cursor;
+}
+async function cursorSnapshot(payload, deps) {
     exactKeys(payload, ["allowGenesis", "operation", "schema"], "Telegram cursor snapshot request");
     if (payload.schema !== "telegram-cursor-v1" || typeof payload.allowGenesis !== "boolean")
         throw new Error("Telegram cursor snapshot request is invalid");
-    const offsetRaw = fixedFile(deps, TELEGRAM_OFFSET);
+    const cursor = await readGatewayCursor(deps);
     const identityKey = fixedFile(deps, TELEGRAM_IDENTITY_KEY).trim();
     if (!/^[A-Za-z0-9_-]{43}$/u.test(identityKey) || Buffer.from(identityKey, "base64url").length !== 32) {
         throw new Error("Telegram identity key is invalid");
     }
-    const offset = object(JSON.parse(offsetRaw), "Telegram offset");
-    if (!Number.isSafeInteger(offset.nextUpdateId) || offset.nextUpdateId < 0)
-        throw new Error("Telegram offset is invalid");
     let auditCursorDigest;
     let verificationFailure;
     let observedAuditState = false;
@@ -1925,19 +1937,33 @@ function cursorSnapshot(payload, deps) {
         throw new Error(`Telegram acceptance audit state could not be captured consistently${verificationFailure ? `: ${verificationFailure.message}` : ""}`, verificationFailure ? { cause: verificationFailure } : undefined);
     }
     return {
-        offsetDigest: sha256(JSON.stringify({ nextUpdateId: offset.nextUpdateId })),
+        offsetDigest: cursor.progressDigest.slice("sha256:".length),
         auditCursorDigest,
     };
 }
-function telegramPollerQuiescence(payload, deps) {
+async function telegramPollerQuiescence(payload, deps) {
     if (payload.expectedState !== "stopped" || JSON.stringify(Object.keys(payload).sort()) !== JSON.stringify(["expectedState", "operation"])) {
         throw new Error("Telegram poller quiescence request is invalid");
     }
-    const fact = object(JSON.parse(fixedFile(deps, TELEGRAM_POLLER_COUNT_FILE)), "Telegram poller count");
-    exactKeys(fact, ["activePollers", "productionContainerStopped"], "Telegram poller count");
-    if (fact.activePollers !== 0 || fact.productionContainerStopped !== true)
-        throw new Error("Telegram poller is not quiescent");
-    return { quiesced: true, activePollers: 0 };
+    const fact = object(await dependency(deps.hostRequest, "Sanctuary host broker")({ operation: "telegram_gateway_quiescence", targetId: TARGET_ID }), "Telegram root poller proof");
+    exactKeys(fact, ["schemaVersion", "activePollers", "residentStopped", "processBindingDigest", "keyId", "publicKeyDigest", "botId", "observedAt"], "Telegram root poller proof");
+    const gateway = dependency(deps.gateway, "Telegram root gateway")();
+    try {
+        if (!await gateway.authorityTransport.hostApproval?.refresh())
+            throw new Error("Telegram root gateway health is unavailable");
+        const cursor = await gateway.cursorSnapshot();
+        const now = (deps.now ?? Date.now)();
+        if (fact.schemaVersion !== 1 || fact.activePollers !== 1 || fact.residentStopped !== true
+            || typeof fact.processBindingDigest !== "string" || !SHA256.test(fact.processBindingDigest)
+            || fact.keyId !== cursor.keyId || fact.publicKeyDigest !== cursor.publicKeyDigest || fact.botId !== cursor.botId
+            || typeof fact.observedAt !== "string" || !Number.isFinite(Date.parse(fact.observedAt))
+            || Date.parse(fact.observedAt) > now || now - Date.parse(fact.observedAt) > 30_000)
+            throw new Error("Telegram root poller proof is invalid or stale");
+        return { quiesced: true, activePollers: 1 };
+    }
+    finally {
+        gateway.authorityTransport.api.stop();
+    }
 }
 function callbackUpdate(value) {
     const update = object(value, "callback update");
@@ -2013,13 +2039,10 @@ function callbackCoordinate(update) {
         digest: sha256(`ouroboros.sanctuary.callback-coordinate.v1\0${JSON.stringify(coordinate)}`),
     };
 }
-function callbackPlaybackPreflight(payload, deps) {
+async function callbackPlaybackPreflight(payload, deps) {
     exactKeys(payload, ["operation", "update"], "callback playback preflight request");
     const coordinate = callbackCoordinate(callbackUpdate(payload.update));
-    const offset = object(JSON.parse(fixedFile(deps, TELEGRAM_OFFSET)), "Telegram offset");
-    exactKeys(offset, ["nextUpdateId"], "Telegram offset");
-    if (!Number.isSafeInteger(offset.nextUpdateId) || Number(offset.nextUpdateId) < 0)
-        throw new Error("Telegram offset is invalid");
+    const offset = await readGatewayCursor(deps);
     const snapshot = object(dependency(deps.callbackPlaybackSnapshot, "callback playback journal")(coordinate.digest), "callback playback journal snapshot");
     exactKeys(snapshot, ["coordinateDigest", "journalDigest", "playbackCount"], "callback playback journal snapshot");
     if (snapshot.coordinateDigest !== coordinate.digest || typeof snapshot.journalDigest !== "string" || !SHA256.test(snapshot.journalDigest)
@@ -2221,17 +2244,17 @@ async function probeRevokedKey(payload, deps) {
         throw new Error("revoked Unraid key recovery cleanup failed");
     return { valid: false, status: response.status, id };
 }
-function provenance(payload, deps) {
+async function provenance(payload, deps) {
     if (payload.schema !== "sanctuary-unit-16-provenance-v1")
         throw new Error("provenance schema is invalid");
     const imageDigest = fixedFile(deps, IMAGE_DIGEST_FILE).trim();
     const containerDigest = fixedFile(deps, CONTAINER_DIGEST_FILE).trim();
     if (!SHA256.test(imageDigest) || !SHA256.test(containerDigest))
         throw new Error("live provenance digest is invalid");
-    const cursor = cursorSnapshot({ operation: "snapshot", schema: "telegram-cursor-v1", allowGenesis: false }, deps);
+    const cursor = await cursorSnapshot({ operation: "snapshot", schema: "telegram-cursor-v1", allowGenesis: false }, deps);
     return { imageDigest, containerDigest, cursorDigest: sha256(`${cursor.offsetDigest}\0${cursor.auditCursorDigest}`) };
 }
-function evidenceSnapshot(payload, deps) {
+async function evidenceSnapshot(payload, deps) {
     if (payload.schema !== "postboot-health-v1")
         throw new Error("evidence schema is invalid");
     const health = object(JSON.parse(fixedFile(deps, POSTBOOT_HEALTH_FILE)), "postboot health");
@@ -2244,7 +2267,7 @@ function evidenceSnapshot(payload, deps) {
     return {
         healthy: health.healthy,
         containerImageDigest: imageDigest,
-        telegramOffsetDigest: cursorSnapshot({ operation: "snapshot", schema: "telegram-cursor-v1", allowGenesis: false }, deps).offsetDigest,
+        telegramOffsetDigest: (await cursorSnapshot({ operation: "snapshot", schema: "telegram-cursor-v1", allowGenesis: false }, deps)).offsetDigest,
     };
 }
 function bootId(deps) {
@@ -2296,7 +2319,7 @@ function pollReboot(payload, deps) {
         throw new Error("requestId is invalid");
     return { targetId: TARGET_ID, requestId, state: "ready", bootId: bootId(deps) };
 }
-function materializeConfig(payload, deps) {
+async function materializeConfig(payload, deps) {
     const command = text(payload.command, "materializer command");
     const contract = object(JSON.parse(fixedFile(deps, CONTRACT_FILE)), "acceptance contract");
     const templates = object(contract.configTemplates, "acceptance config templates");
@@ -2304,9 +2327,7 @@ function materializeConfig(payload, deps) {
     const config = { ...object(template.fixed, "acceptance fixed config") };
     const adapterPath = "/opt/ouro/deploy/unraid/sanctuary-acceptance-adapter.sh";
     if (command === "telegram-bootstrap") {
-        const offset = object(JSON.parse(fixedFile(deps, TELEGRAM_OFFSET)), "Telegram offset");
-        if (!Number.isSafeInteger(offset.nextUpdateId) || offset.nextUpdateId < 0)
-            throw new Error("Telegram offset is invalid");
+        const offset = await readGatewayCursor(deps);
         Object.assign(config, { expectedBotId: "8541786263", expectedUsername: "MendelowCloudButlerBot", currentOffset: offset.nextUpdateId });
     }
     else if (command === "cursor-snapshot") {
@@ -2332,36 +2353,23 @@ function materializeConfig(payload, deps) {
 }
 async function telegramReadiness(payload, deps) {
     exactKeys(payload, ["operation"], "Telegram readiness payload");
-    let refreshed;
+    let gateway;
     try {
-        refreshed = await dependency(deps.refreshRuntime, "runtime credential refresher")(TARGET_ID);
+        gateway = dependency(deps.gateway, "Telegram root gateway")();
     }
     catch {
-        throw new Error("Telegram runtime credentials are unavailable; actor: human-required; unlock or repair vault runtime/config");
-    }
-    if (!refreshed.ok)
-        throw new Error("Telegram runtime credentials are unavailable; actor: human-required; unlock or repair vault runtime/config");
-    let credentials;
-    try {
-        credentials = dependency(deps.telegramCredentials, "Telegram credentials")();
-        (0, telegram_1.telegramBotIdFromToken)(credentials.botToken);
-    }
-    catch {
-        throw new Error("Telegram runtime credentials are invalid; actor: human-required; repair vault runtime/config");
-    }
-    let api;
-    try {
-        api = dependency(deps.createTelegramApi, "Telegram API factory")({ token: credentials.botToken });
-    }
-    catch {
-        throw new Error("Telegram client initialization failed; actor: agent-runnable; retry Telegram readiness");
+        throw new Error("Telegram gateway inventory or pins are unavailable; actor: agent-runnable; inspect root migration");
     }
+    const api = gateway.authorityTransport.api;
     let bot;
     try {
+        if (!await gateway.authorityTransport.hostApproval?.refresh())
+            throw new Error("root authority is unhealthy");
+        await gateway.cursorSnapshot();
         bot = await api.request("getMe", {}, AbortSignal.timeout(30_000));
     }
     catch {
-        throw new Error("Telegram getMe failed; actor: agent-runnable; retry Telegram readiness");
+        throw new Error("Telegram gateway health or identity probe failed; actor: agent-runnable; inspect root authority");
     }
     finally {
         try {
@@ -2372,9 +2380,9 @@ async function telegramReadiness(payload, deps) {
         }
     }
     if (!bot || typeof bot !== "object" || Array.isArray(bot)
-        || String(bot.id) !== "8541786263"
+        || String(bot.id) !== gateway.credentials.botId || gateway.credentials.botId !== "8541786263"
         || bot.username !== "MendelowCloudButlerBot") {
-        throw new Error("Telegram bot identity mismatch; actor: human-required; repair vault runtime/config");
+        throw new Error("Telegram bot identity mismatch; actor: human-required; repair root gateway identity");
     }
     return { ready: true, identityMatches: true };
 }
@@ -2398,13 +2406,13 @@ async function executeSanctuaryAcceptanceAdapter(rawPayload, deps = createSanctu
                 result = await revokedKeyAuthRejection(payload, deps);
                 break;
             case "quiesce_telegram_poller":
-                result = telegramPollerQuiescence(payload, deps);
+                result = await telegramPollerQuiescence(payload, deps);
                 break;
             case "snapshot":
-                result = cursorSnapshot(payload, deps);
+                result = await cursorSnapshot(payload, deps);
                 break;
             case "callback_playback_preflight":
-                result = callbackPlaybackPreflight(payload, deps);
+                result = await callbackPlaybackPreflight(payload, deps);
                 break;
             case "inject_callbacks_concurrently":
                 result = await concurrentCallbackProbe(payload, deps);
@@ -2449,10 +2457,10 @@ async function executeSanctuaryAcceptanceAdapter(rawPayload, deps = createSanctu
                 result = await probeRevokedKey(payload, deps);
                 break;
             case "evidence_snapshot":
-                result = evidenceSnapshot(payload, deps);
+                result = await evidenceSnapshot(payload, deps);
                 break;
             case "capture_evidence_provenance":
-                result = provenance(payload, deps);
+                result = await provenance(payload, deps);
                 break;
             case "capture_acceptance_scenario":
                 result = await captureAcceptanceScenario(payload, deps);
@@ -2468,7 +2476,7 @@ async function executeSanctuaryAcceptanceAdapter(rawPayload, deps = createSanctu
                 result = await rebootPreflight(payload, deps);
                 break;
             case "postboot_integrity_snapshot":
-                result = postbootIntegritySnapshot(deps);
+                result = await postbootIntegritySnapshot(deps);
                 break;
             case "request_reboot":
                 result = await requestReboot(payload, deps);
@@ -2477,7 +2485,7 @@ async function executeSanctuaryAcceptanceAdapter(rawPayload, deps = createSanctu
                 result = pollReboot(payload, deps);
                 break;
             case "materialize_config":
-                result = materializeConfig(payload, deps);
+                result = await materializeConfig(payload, deps);
                 break;
             case "telegram_readiness":
                 result = await telegramReadiness(payload, deps);
@@ -2596,23 +2604,19 @@ async function executeSanctuaryInteractiveRuntimeOperation(rawPayload, supplied)
     return (0, sanctuary_interactive_control_1.executeSanctuaryInteractiveEngine)(rawPayload, deps);
 }
 async function executeSanctuaryAcceptanceCallbackProbe(rawUpdate, replay, deps = {
-    refresh: runtime_credentials_1.refreshRuntimeCredentialConfig,
-    credentials: telegram_1.loadTelegramSenseCredentials,
+    gateway: () => (0, sanctuary_authority_resident_1.openSanctuaryResidentAuthority)({}, {}),
     identityKey: telegram_1.readOrCreateTelegramIdentityKey,
-    createApi: telegram_client_1.createTelegramBotApi,
     createRuntime: telegram_approval_runtime_1.createTelegramApprovalRuntime,
     toolContext: sanctuary_runtime_1.createSanctuaryToolContext,
     effects: createAcceptanceProbeEffects,
     recordCallbackPlayback: (coordinateDigest) => recordCallbackPlayback((0, identity_1.getAgentRoot)(TARGET_ID), coordinateDigest),
 }) {
     const update = callbackUpdate(rawUpdate);
-    const refreshed = await deps.refresh(TARGET_ID);
-    if (!refreshed.ok)
-        throw new Error("Telegram runtime credentials are unavailable");
-    const credentials = deps.credentials(TARGET_ID);
+    const gateway = deps.gateway();
+    const credentials = gateway.credentials;
     const identityKey = deps.identityKey((0, identity_1.getAgentRoot)(TARGET_ID));
-    const subject = (0, telegram_1.opaqueTelegramSubject)(identityKey, credentials.botToken, credentials.authorizedUserId, credentials.authorizedChatId);
-    const api = deps.createApi({ token: credentials.botToken });
+    const subject = (0, telegram_1.opaqueTelegramSubject)(identityKey, credentials.botId, credentials.authorizedUserId, credentials.authorizedChatId);
+    const api = gateway.authorityTransport.api;
     const effectBoundary = deps.effects?.({ agentRoot: (0, identity_1.getAgentRoot)(TARGET_ID), api, subject, chatId: credentials.authorizedChatId });
     const unavailableEffects = {
         sendText: async () => { throw new Error("Telegram acceptance probe effect boundary is unavailable"); },