@ouro.bot/cli 0.1.0-alpha.827 → 0.1.0-alpha.829

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.829",
+      "changes": [
+        "Sanctuary authority install: the fenced vault-read restores CAP_DAC_OVERRIDE and copies the credential store into a writable tmpfs, so the root migration can read the resident-owned vault instead of failing with a masked permission error."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.828",
+      "changes": [
+        "The media MCP's deterministic core (download-state and diagnosis) is now a tested, importable seam instead of only being verifiable in production."
+      ]
+    },
     {
       "version": "0.1.0-alpha.827",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.827",
+  "runtimeVersion": "0.1.0-alpha.829",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.ouro/mcp/media-mcp.mjs

@@ -10,6 +10,7 @@
 // Protocol: JSON-RPC 2.0 over stdio, newline framed, MCP 2024-11-05.
 
 import { readFileSync } from "node:fs"
+import { pathToFileURL } from "node:url"
 
 const CRED_PATH = process.env.SANCTUARY_MEDIA_CREDENTIALS ?? "/home/ouro/AgentBundles/sanctuary.ouro/mcp/media-credentials.json"
 
@@ -425,31 +426,43 @@ async function mediaRequestStatus(a) {
     last_grab_title: grabs[0]?.sourceTitle ?? null,
     monitored: entity ? Boolean(entity.monitored) : null,
   }
-  // A season pack shows up as one queue row per episode, all sharing one
-  // downloadId. Summing rows would report a 45 GB pack as 450 GB, so size and
-  // "how many downloads" are both counted per distinct download, not per row.
+  result.download = computeDownloadState(queueRecs, Date.now())
+
+  const chain = await chainHealth()
+  result.chain = chain
+  result.diagnosis = diagnose({ shelf, result, chain, entity, kind })
+  return result
+}
+
+// The deterministic core, split out so it can be tested without a live
+// Sonarr/Radarr. `computeDownloadState` and `diagnose` are the whole reason the
+// media surface can answer "why hasn't this downloaded" without the agent
+// guessing, and D-013 (a stalled download read as progress) shipped verified
+// only in production because there was no seam to test them through.
+//
+// A season pack shows up as one queue row per episode, all sharing one
+// downloadId. Summing rows would report a 45 GB pack as 450 GB, so size and
+// "how many downloads" are counted per distinct download, not per row. A
+// torrent that has not moved a byte since it was grabbed is dead, not slow:
+// Radarr reports trackedDownloadStatus "ok" for these indefinitely, so
+// progress is measured against age rather than trusted from the row.
+export function computeDownloadState(queueRecs, nowMs) {
   const byDownload = new Map()
   for (const r of queueRecs) byDownload.set(r.downloadId ?? `row:${r.id}`, r)
   const downloads = [...byDownload.values()]
   const sizeLeft = downloads.reduce((s, r) => s + (r.sizeleft ?? 0), 0)
   const sizeTotal = downloads.reduce((s, r) => s + (r.size ?? 0), 0)
-  // A torrent that has not moved a byte since it was grabbed is not slow, it is
-  // dead: no seeders, or a release the client cannot fetch. Radarr goes on
-  // reporting trackedDownloadStatus "ok" for these indefinitely, so a queue row
-  // on its own reads as healthy and any answer built from it reassures instead
-  // of acting. Measuring progress against age is what separates the two.
-  const now = Date.now()
   const stalledItems = downloads
     .filter((r) => (r.size ?? 0) > 0 && (r.sizeleft ?? 0) >= (r.size ?? 0) && r.added
-      && (now - Date.parse(r.added)) / 3_600_000 >= STALL_AFTER_HOURS)
+      && (nowMs - Date.parse(r.added)) / 3_600_000 >= STALL_AFTER_HOURS)
     .map((r) => ({
       title: r.title ?? null,
       added_at: r.added ?? null,
-      age_hours: Math.round((now - Date.parse(r.added)) / 3_600_000),
+      age_hours: Math.round((nowMs - Date.parse(r.added)) / 3_600_000),
       size_gb: Number(((r.size ?? 0) / 1073741824).toFixed(2)),
       queue_id: r.id ?? null,
     }))
-  result.download = {
+  return {
     active_downloads: downloads.length,
     active_items: queueRecs.length,
     states: [...new Set(downloads.map((r) => r.status))],
@@ -461,15 +474,10 @@ async function mediaRequestStatus(a) {
     stalled: stalledItems.length > 0,
     stalled_items: stalledItems,
   }
-
-  const chain = await chainHealth()
-  result.chain = chain
-  result.diagnosis = diagnose({ shelf, result, chain, entity, kind })
-  return result
 }
 
 // The deterministic core. The agent must never have to work this out itself.
-function diagnose({ shelf, result, chain, entity, kind }) {
+export function diagnose({ shelf, result, chain, entity, kind }) {
   const file = result.file ?? {}
   const onShelf = kind === "series" ? (file.episodes_on_disk ?? 0) > 0 : Boolean(file.on_shelf)
   const complete = kind === "series" ? (file.episodes_on_disk ?? 0) >= (file.episodes_total ?? Infinity) : onShelf
@@ -759,22 +767,29 @@ function exitWhenIdle() {
   if (stdinClosed && inFlight === 0) process.exit(0)
 }
 
-process.stdin.setEncoding("utf8")
-process.stdin.on("data", (chunk) => {
-  buf += chunk
-  let nl
-  while ((nl = buf.indexOf("\n")) >= 0) {
-    const line = buf.slice(0, nl).trim()
-    buf = buf.slice(nl + 1)
-    if (!line) continue
-    let msg
-    try { msg = JSON.parse(line) } catch { continue }
-    inFlight += 1
-    handle(msg)
-      .catch((e) => {
-        if (msg.id !== undefined) send({ jsonrpc: "2.0", id: msg.id, error: { code: -32603, message: e.message } })
-      })
-      .finally(() => { inFlight -= 1; exitWhenIdle() })
-  }
-})
-process.stdin.on("end", () => { stdinClosed = true; exitWhenIdle() })
+// Only run the stdio server when invoked directly (node media-mcp.mjs, exactly
+// how agent.json launches it). Guarding this lets the test suite import the
+// module for computeDownloadState/diagnose without attaching to stdin or exiting
+// the test process. The launch is a plain node <abs-path>, so argv[1] is the
+// file's own path and this comparison holds.
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  process.stdin.setEncoding("utf8")
+  process.stdin.on("data", (chunk) => {
+    buf += chunk
+    let nl
+    while ((nl = buf.indexOf("\n")) >= 0) {
+      const line = buf.slice(0, nl).trim()
+      buf = buf.slice(nl + 1)
+      if (!line) continue
+      let msg
+      try { msg = JSON.parse(line) } catch { continue }
+      inFlight += 1
+      handle(msg)
+        .catch((e) => {
+          if (msg.id !== undefined) send({ jsonrpc: "2.0", id: msg.id, error: { code: -32603, message: e.message } })
+        })
+        .finally(() => { inFlight -= 1; exitWhenIdle() })
+    }
+  })
+  process.stdin.on("end", () => { stdinClosed = true; exitWhenIdle() })
+}

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.827</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.829</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/daemon/sanctuary-authority-root-lifecycle.js

@@ -732,15 +732,29 @@ class SanctuaryAuthorityRootLifecycle {
         }
     }
     #vault(operation, input) {
+        // The fenced container runs root with every capability dropped, but the
+        // resident credential store is owned by the resident uid (10001), so a bare
+        // cap-dropped root cannot even read it (EACCES on agent.json → surfaces as
+        // "vault owner unavailable"). CAP_DAC_OVERRIDE is restored — the single
+        // capability needed to read the resident's files, nothing broader — and the
+        // read-only bitwarden app-data is copied into a writable tmpfs inside the
+        // container before the CLI runs, because bitwarden cannot unlock a store it
+        // cannot write to. The copy stays inside the container's own tmpfs, so the
+        // fence still never writes to resident state. `operation` is one of the four
+        // fixed literals validated by the CLI, never external input.
+        const cli = "/opt/ouro/dist/heart/daemon/sanctuary-authority-root-lifecycle.js";
         return JSON.parse(this.#docker([
-            "run", "--rm", "-i", "--pull=never", "--network", "host", "--user", "0:0", "--read-only", "--cap-drop=ALL",
-            "--security-opt=no-new-privileges", "--entrypoint", "/usr/local/bin/node",
+            "run", "--rm", "-i", "--pull=never", "--network", "host", "--user", "0:0", "--read-only",
+            "--cap-drop=ALL", "--cap-add=DAC_OVERRIDE", "--security-opt=no-new-privileges", "--entrypoint", "/bin/sh",
             "--mount", `type=bind,src=${RUNTIME},dst=/home/ouro/.ouro-cli,readonly`,
+            "--mount", `type=bind,src=${RUNTIME}/bitwarden,dst=/home/ouro/.bw-src,readonly`,
             "--mount", `type=bind,src=${BUNDLE},dst=/home/ouro/AgentBundles/sanctuary.ouro,readonly`,
             "--tmpfs", "/home/ouro/.ouro-cli/bitwarden:rw,nosuid,nodev,noexec,mode=0700",
+            "--tmpfs", "/home/ouro/.config:rw,nosuid,nodev,noexec,mode=0700",
             "--tmpfs", "/tmp:rw,nosuid,nodev,noexec,mode=0700",
             "--env", `OURO_AUTHORITY_REMOVE_INTERLOCK=${this.#request.epochId}`,
-            this.#transaction.targetImageId, "/opt/ouro/dist/heart/daemon/sanctuary-authority-root-lifecycle.js", "vault", operation,
+            this.#transaction.targetImageId, "-c",
+            `cp -r /home/ouro/.bw-src/. /home/ouro/.ouro-cli/bitwarden/ && exec /usr/local/bin/node ${cli} vault ${operation}`,
         ], input === undefined ? undefined : JSON.stringify(input)));
     }
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.827",
+  "version": "0.1.0-alpha.829",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.827",
+      "version": "0.1.0-alpha.829",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.827",
+  "version": "0.1.0-alpha.829",
   "engines": {
     "node": ">=22"
   },