@ouro.bot/cli 0.1.0-alpha.830 → 0.1.0-alpha.831

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.831",
+      "changes": [
+        "Sanctuary: the Telegram long-poll survives transient transport failures — a dropped authority socket or a Telegram API error is retried with exponential backoff instead of exiting the sense process, so a gateway restart no longer crash-loops the resident. Non-transport (dispatch/durable-audit) failures still surface."
+      ]
+    },
     {
       "version": "0.1.0-alpha.830",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.830",
+  "runtimeVersion": "0.1.0-alpha.831",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.830</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.831</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/frontend-socket-client.js

@@ -36,6 +36,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SocketFrontendClient = void 0;
 const net = __importStar(require("node:net"));
 const runtime_1 = require("../nerves/runtime");
+// A dropped or refused frontend socket is a transient transport condition, not a
+// logic failure: the caller (e.g. the Telegram long-poll loop) should reconnect
+// and retry rather than exit. Flag such errors so that layer can classify them.
+function markTransientTransport(error) {
+    return Object.assign(error, { isTransientTransportError: true });
+}
+function transientTransportError(message) {
+    return markTransientTransport(new Error(message));
+}
 class SocketFrontendClient {
     socketPath;
     pending = new Map();
@@ -65,7 +74,7 @@ class SocketFrontendClient {
         return () => this.closeListeners.delete(listener);
     }
     close() {
-        this.failPending(new Error("frontend socket closed"));
+        this.failPending(transientTransportError("frontend socket closed"));
         this.socket?.destroy();
         this.socket = null;
     }
@@ -78,19 +87,20 @@ class SocketFrontendClient {
             const socket = net.createConnection(this.socketPath);
             const fail = (error) => {
                 this.connecting = null;
-                reject(error);
+                reject(markTransientTransport(error));
             };
             socket.once("error", fail);
             socket.once("connect", () => {
                 socket.removeListener("error", fail);
                 socket.on("error", (error) => {
-                    this.failPending(error);
+                    const transient = markTransientTransport(error);
+                    this.failPending(transient);
                     for (const listener of this.closeListeners)
-                        listener(error);
+                        listener(transient);
                 });
                 socket.on("data", (chunk) => this.handleData(chunk.toString("utf8")));
                 socket.on("close", () => {
-                    const error = new Error("frontend socket closed");
+                    const error = transientTransportError("frontend socket closed");
                     this.failPending(error);
                     for (const listener of this.closeListeners)
                         listener(error);

package/dist/senses/telegram-client.js

@@ -80,6 +80,12 @@ class FileTelegramOffsetStore {
 exports.FileTelegramOffsetStore = FileTelegramOffsetStore;
 const DEFAULT_TELEGRAM_INDETERMINATE_RETENTION_MS = 24 * 60 * 60 * 1_000;
 const DEFAULT_TELEGRAM_MAX_INDETERMINATE_RECEIPTS = 1_000;
+// Long-poll retry backoff. A transient failure (a Telegram 5xx, a dropped
+// authority socket in the resident, or a relayed gateway 409 during a
+// getUpdates-session reclaim) must not exit the sense process; the loop waits
+// and retries, doubling from the base up to the cap and resetting on success.
+const TELEGRAM_POLL_RETRY_BASE_MS = 1_000;
+const TELEGRAM_POLL_RETRY_MAX_MS = 30_000;
 const TELEGRAM_UPDATE_DIGEST_DOMAIN = "ouroboros.telegram.update.v1";
 const TELEGRAM_UPDATE_SEQUENCE_DOMAIN = "ouroboros.telegram.update-sequence.v1";
 const TELEGRAM_UPDATE_DIGEST = /^tgu_[A-Za-z0-9_-]{43}$/u;
@@ -469,14 +475,26 @@ class FileTelegramUpdateInboxStore {
     }
 }
 exports.FileTelegramUpdateInboxStore = FileTelegramUpdateInboxStore;
+// A poll failure is retryable when it is a transient transport condition: a
+// Telegram Bot API error (network/HTTP), or an authority-socket error flagged
+// transient by the resident's socket client (a dropped or refused connection).
+// Dispatch and durable-audit invariant failures are not transport conditions;
+// they must surface rather than be spun on indefinitely.
+function isRetryablePollError(error) {
+    if (error instanceof TelegramApiError)
+        return true;
+    return error instanceof Error
+        && error.isTransientTransportError === true;
+}
 function createTelegramLongPoll(options) {
     let nextUpdateId = options.offsetStore.load();
     const shutdown = new AbortController();
-    const retryAfterPollError = (signal) => new Promise((resolve, reject) => {
-        const timer = setTimeout(resolve, 1_000);
+    const retryAfterPollError = (signal, attempt) => new Promise((resolve) => {
+        const delay = Math.min(TELEGRAM_POLL_RETRY_BASE_MS * 2 ** Math.max(0, attempt - 1), TELEGRAM_POLL_RETRY_MAX_MS);
+        const timer = setTimeout(resolve, delay);
         signal.addEventListener("abort", () => {
             clearTimeout(timer);
-            reject(signal.reason);
+            resolve();
         }, { once: true });
     });
     const inboundAttachments = (message) => {
@@ -690,23 +708,37 @@ function createTelegramLongPoll(options) {
         pollOnce,
         async run(signal) {
             const runSignal = signal ? AbortSignal.any([shutdown.signal, signal]) : shutdown.signal;
+            let consecutiveFailures = 0;
             while (!runSignal.aborted) {
                 try {
                     await pollOnce(runSignal);
+                    consecutiveFailures = 0;
                 }
                 catch (error) {
                     if (shutdown.signal.aborted || signal?.aborted)
                         return;
-                    if (!(error instanceof TelegramApiError))
+                    // Only transient transport failures are retried here: a Telegram API
+                    // error, or a dropped/again-failing authority socket in the resident.
+                    // Exiting the process on those (as an unhandled throw would) only
+                    // trades an in-process retry for a heavier container/daemon restart
+                    // cycle, which is what produced the observed ~10s crash-loops. A
+                    // non-transport failure (a dispatch or durable-audit invariant) still
+                    // surfaces so it is not silently spun on.
+                    if (!isRetryablePollError(error))
                         throw error;
+                    consecutiveFailures += 1;
                     (0, runtime_1.emitNervesEvent)({
                         level: "warn",
                         component: "senses",
                         event: "telegram.poll_retry",
                         message: "Telegram long poll request failed; retrying",
-                        meta: { status: error.status, errorCode: error.errorCode },
+                        meta: {
+                            attempt: consecutiveFailures,
+                            ...(error instanceof TelegramApiError ? { status: error.status, errorCode: error.errorCode } : {}),
+                            reason: error.message,
+                        },
                     });
-                    await retryAfterPollError(runSignal);
+                    await retryAfterPollError(runSignal, consecutiveFailures);
                 }
             }
         },

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.830",
+  "version": "0.1.0-alpha.831",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.830",
+      "version": "0.1.0-alpha.831",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.830",
+  "version": "0.1.0-alpha.831",
   "engines": {
     "node": ">=22"
   },