@ouro.bot/cli 0.1.0-alpha.844 → 0.1.0-alpha.846

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.846",
+      "changes": [
+        "Sanctuary: a natural question about the Butler's version ('what version are you on?') now requires a fresh install-state read, and any version it states must match that read. After an upgrade it had answered 'Just checked the live state: 0.1.0-alpha.841' from earlier conversation while running 845, with no tool call."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.845",
+      "changes": [
+        "Senses: a turn that errors now tells the person so instead of going silent (naming the step limit when that is the cause). This was the mechanism behind the Butler's answer-then-greet sequence (D-004): a question hit the provider step limit (D-007), nothing was sent, and each prod became its own turn. The engine still refuses to answer without evidence; the private channel stays silent."
+      ]
+    },
     {
       "version": "0.1.0-alpha.844",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.844",
+  "runtimeVersion": "0.1.0-alpha.846",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.844</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.846</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/senses/sanctuary-install-state-contract.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.sanctuaryInstallStateRequiredToolCalls = sanctuaryInstallStateRequiredToolCalls;
+exports.sanctuaryVersionQuestionRequiredToolCalls = sanctuaryVersionQuestionRequiredToolCalls;
 const runtime_1 = require("../nerves/runtime");
 const TOOL_NAME = "sanctuary_get_install_state";
 const REQUEST = /\b(?:use|run|call)\s+sanctuary_get_install_state\b/iu;
@@ -124,3 +125,45 @@ function sanctuaryInstallStateRequiredToolCalls(request, advertisedToolNames) {
         },
     };
 }
+const VERSION_QUESTION = /\b(?:what|which)(?:'s|\s+is)?\s+(?:your\s+|the\s+)?(?:current\s+|live\s+|installed\s+|running\s+)?version\b|\bversion\s+(?:are|r)\s+(?:you|u)\b|\bwhat\s+(?:are\s+you|you're)\s+(?:on|running)\b|\bare\s+you\s+(?:on|running)\s+(?:the\s+)?(?:latest|newest|new|current)\b/iu;
+const VERSION_CLAIM = /\bv?\d+\.\d+\.\d+(?:-[0-9A-Za-z]+(?:\.[0-9A-Za-z]+)*)?\b/gu;
+/**
+ * A natural question about the Butler's own version must be answered from a fresh
+ * install-state read. After an upgrade the Butler once answered "Just checked the live
+ * state: 0.1.0-alpha.841" from earlier conversation while it was running 845, with no
+ * tool call at all. Unlike the explicit install-state contract, the wording stays free:
+ * only the version it states is checked against the read.
+ */
+function sanctuaryVersionQuestionRequiredToolCalls(request, advertisedToolNames) {
+    const normalizedRequest = request.normalize("NFKC").replace(/[‘’]/gu, "'");
+    if (!advertisedToolNames.includes(TOOL_NAME) || REQUEST.test(normalizedRequest) || !VERSION_QUESTION.test(normalizedRequest))
+        return undefined;
+    let current;
+    (0, runtime_1.emitNervesEvent)({
+        component: "senses",
+        event: "senses.sanctuary_version_question_required",
+        message: "a question about the running version requires a fresh install-state read",
+        meta: { requiredToolName: TOOL_NAME },
+    });
+    return {
+        names: [TOOL_NAME],
+        retryMessage: "Call sanctuary_get_install_state with empty arguments now, then state the version from that fresh result, not from earlier conversation.",
+        requireSuccessfulResults: true,
+        validateRequiredToolResult: (name, result, args) => {
+            if (name !== TOOL_NAME || Object.keys(args).length !== 0)
+                return false;
+            current = parseInstallState(result);
+            return current !== undefined;
+        },
+        validateTerminalAnswer: (answer) => {
+            if (!current)
+                return "Call sanctuary_get_install_state and state the version from that fresh result.";
+            const known = new Set([current.runtimePackageVersion, current.packagedBundleVersion, ...(current.liveBundleVersion ? [current.liveBundleVersion] : [])].map((version) => version.replace(/^v/u, "")));
+            const claimed = [...answer.normalize("NFKC").matchAll(VERSION_CLAIM)].map((match) => match[0].replace(/^v/u, ""));
+            if (claimed.length === 0)
+                return `State the running version from the fresh result: ${current.runtimePackageVersion}.`;
+            const stale = claimed.filter((version) => !known.has(version));
+            return stale.length === 0 ? undefined : `The fresh install-state result says ${current.runtimePackageVersion}; do not state ${stale.join(", ")} as the current version.`;
+        },
+    };
+}

package/dist/senses/shared-turn.js

@@ -42,6 +42,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.stripThinkBlocks = stripThinkBlocks;
 exports.extractOutwardSenseDeliveryText = extractOutwardSenseDeliveryText;
 exports.getSenseSessionPath = getSenseSessionPath;
+exports.erroredTurnReply = erroredTurnReply;
 exports.runSenseTurn = runSenseTurn;
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
@@ -333,6 +334,17 @@ function getSenseSessionPath(agentName, friendId, channel, sessionKey, agentRoot
  * Caller provides channel, session key, friend, and message;
  * this function handles all pipeline wiring.
  */
+/**
+ * What an outward sense says when a turn errors and provider failover has nothing to say.
+ * Such turns used to end in silence: the owner saw no reply, prodded, and later got
+ * the late answer followed by a greeting to a prod (D-004); the step-limit stop was the
+ * observed cause (D-007). The engine still refuses to answer without evidence.
+ */
+function erroredTurnReply(errorMessage) {
+    return /iteration limit exhausted/u.test(errorMessage ?? "")
+        ? "I couldn't finish that one: I ran out of steps before I had an answer I could stand behind. Ask me again, or ask something narrower, and I'll take another run at it."
+        : "I couldn't finish that one: something went wrong before I had an answer. Ask me again and I'll retry.";
+}
 async function runSenseTurn(options) {
     return (0, turn_execution_lease_1.withTurnExecutionLease)(async () => {
         const owner = Object.freeze({ agentName: options.agentName, agentRoot: (0, identity_1.getAgentRoot)(options.agentName) });
@@ -453,6 +465,7 @@ async function runSenseTurnExclusive(options, owner) {
             // once the turn completes.
             let committedResponseText = "";
             let pendingResponseText = "";
+            let terminalErrorMessage;
             let terminalDeliveryKind = "text";
             const deliveries = [];
             const deliveryFailures = [];
@@ -535,6 +548,8 @@ async function runSenseTurnExclusive(options, owner) {
                     emitFrontendEvent({ type: "tool_completed", data: { name, summary: _summary, success } });
                 },
                 onError: (error, severity) => {
+                    if (severity === "terminal")
+                        terminalErrorMessage = error.message;
                     emitFrontendEvent({ type: "error", data: { message: error.message, severity } });
                 },
                 onClearText: () => {
@@ -661,7 +676,9 @@ async function runSenseTurnExclusive(options, owner) {
             const eventView = currentTurnEventView(terminalEvents, existingEventIds, userMessage, options.precommittedIngress, options.ingressRelations);
             let finalDeliveryKind = terminalDeliveryKind;
             const acceptedTerminalOutcome = turnResult.turnOutcome === "settled" || turnResult.turnOutcome === "blocked";
-            const failoverText = turnResult.turnOutcome === "errored" ? turnResult.failoverMessage?.trim() : undefined;
+            const failoverText = turnResult.turnOutcome === "errored"
+                ? turnResult.failoverMessage?.trim() || (channel === "inner" ? undefined : erroredTurnReply(terminalErrorMessage))
+                : undefined;
             const expectsOutwardResponse = acceptedTerminalOutcome || turnResult.turnOutcome === "command" || Boolean(failoverText);
             let finalCausalCoordinate;
             if (acceptedTerminalOutcome) {

package/dist/senses/telegram.js

@@ -1234,9 +1234,12 @@ function createTelegramSenseApp(options) {
             const installState = isSanctuaryOwner
                 ? (0, sanctuary_install_state_contract_1.sanctuaryInstallStateRequiredToolCalls)(input.userMessage, relationshipAuthorization.advertisedToolNames)
                 : undefined;
+            const versionQuestion = isSanctuaryOwner
+                ? (0, sanctuary_install_state_contract_1.sanctuaryVersionQuestionRequiredToolCalls)(input.userMessage, relationshipAuthorization.advertisedToolNames)
+                : undefined;
             if (input.fullVisibilityProgress && fullVisibility)
                 input.fullVisibilityProgress.fallback = fullVisibility.emptyResponseFallback;
-            const contracts = [storageOptimization, fullVisibility, staleDockerCare, mediaCatalog, installState].filter(Boolean);
+            const contracts = [storageOptimization, fullVisibility, staleDockerCare, mediaCatalog, installState, versionQuestion].filter(Boolean);
             const ownedNames = contracts.map((contract) => new Set(contract.names));
             const requiredToolCalls = contracts.length === 0 ? undefined : {
                 names: [...new Set(contracts.flatMap((contract) => [...contract.names]))],

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.844",
+  "version": "0.1.0-alpha.846",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.844",
+      "version": "0.1.0-alpha.846",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.844",
+  "version": "0.1.0-alpha.846",
   "engines": {
     "node": ">=22"
   },