@ouro.bot/cli 0.1.0-alpha.847 → 0.1.0-alpha.848

package/changelog.json

@@ -1,6 +1,17 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.848",
+      "changes": [
+        "Delegated commands: an A2A message whose signed envelope carries onBehalfOf \"principal\" (ouro a2a message --delegated) runs with the owner's sanctuary-owner authority only when the sender's friend record holds an operator-set delegationGrant and the sender is active family. The server posts a notice in the owner's Telegram chat first and refuses the command if that fails (JSON-RPC -32004). steward_policy_manage accepts the admitted command and records the source as \"<owner> via <peer> (delegated)\". Host execute stays Telegram-only.",
+        "Telegram: sendOwnerNotice / sendTelegramOwnerNotice post an idempotent Butler notice to the owner's chat and record it in the owner session.",
+        "Depend on @ouro.bot/friends 0.1.0-alpha.14.",
+        "Delegated commands: an A2A message whose signed envelope carries onBehalfOf \"principal\" (ouro a2a message --delegated) runs with the owner's sanctuary-owner authority only when the sender's friend record holds an operator-set delegationGrant and the sender is active family. Each message gets a fresh command id. The server posts a notice in the owner's Telegram chat first (30 s timeout) and refuses the command if that fails (JSON-RPC -32004). steward_policy_manage accepts the admitted command, records the source as \"<owner> via <peer> (delegated)\", and stamps delegatedVia (peer friend id, DID, notice id) on every audit row. Host execute stays Telegram-only.",
+        "A2A: a peer that types the delegated-command banner itself gets it marked as unverified in its turn.",
+        "Release gates: docs/audit-exceptions.json accepts a reviewed, dated exception per advisory URL (first entry: node-forge GHSA-86w9-cpqp-85rv via @bitwarden/cli, which has no patched release, due 2026-11-15); multer is overridden to 2.4.0; the mailroom raw-orphan debt is re-dated to 2026-10-31 and tracked as its own task."
+      ]
+    },
     {
       "version": "0.1.0-alpha.847",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.847",
+  "runtimeVersion": "0.1.0-alpha.848",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.847</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.848</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/a2a/client.js

@@ -213,6 +213,7 @@ async function sendSealedA2AChat(input) {
         recipientEd25519Pub: parsed.ed25519Pub,
         text: input.text,
         conversationId,
+        ...(input.onBehalfOf ? { onBehalfOf: input.onBehalfOf } : {}),
     });
     const request = {
         jsonrpc: "2.0",

package/dist/a2a/delegated-command.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELEGATED_BANNER = void 0;
+exports.delegatedCommandNotice = delegatedCommandNotice;
+exports.admitDelegatedCommand = admitDelegatedCommand;
+const runtime_1 = require("../nerves/runtime");
+const relationship_authorization_1 = require("../repertoire/relationship-authorization");
+const NOTICE_EXCERPT_CHARS = 200;
+/** Matches the banner only the server may put in front of an admitted command. */
+exports.DELEGATED_BANNER = /^\s*\[\s*delegated command/iu;
+function delegatedCommandNotice(input) {
+    const flat = input.text.replace(/\s+/gu, " ").trim();
+    const excerpt = flat.length > NOTICE_EXCERPT_CHARS ? `${flat.slice(0, NOTICE_EXCERPT_CHARS)}…` : flat;
+    return `Delegated command from you via ${input.delegateName}: "${excerpt}". If this wasn't you, say so here: it is on record, and the grant can be revoked.`;
+}
+function hasPrincipalGrant(friend) {
+    return friend.delegationGrant?.scope === "principal_commands";
+}
+async function resolvePrincipal(store, profileId) {
+    const friends = await store.listAll?.() ?? [];
+    const matches = friends.filter((friend) => friend.capabilityProfileId === profileId
+        && friend.trustLevel === "family" && friend.admissionState === "active");
+    return matches.length === 1 ? matches[0] : null;
+}
+async function admitDelegatedCommand(input) {
+    const refuse = (reason) => {
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "senses",
+            event: "senses.a2a_delegated_command_refused",
+            message: "refused a delegated A2A command",
+            meta: { reason, delegateFriendId: input.friend.id, commandId: input.commandId },
+        });
+        return { ok: false, reason };
+    };
+    if (!input.options)
+        return refuse("not_enabled");
+    if (!hasPrincipalGrant(input.friend))
+        return refuse("no_grant");
+    if (input.friend.trustLevel !== "family" || input.friend.admissionState === "revoked")
+        return refuse("not_family");
+    const registry = input.registry;
+    if (!registry)
+        return refuse("principal_unresolved");
+    const principal = await resolvePrincipal(input.store, input.options.principalProfileId);
+    if (!principal || principal.id === input.friend.id)
+        return refuse("principal_unresolved");
+    const noticeId = `delegated:${input.commandId}`;
+    try {
+        await input.options.notifyPrincipal({ noticeId, text: delegatedCommandNotice({ delegateName: input.friend.name, text: input.text }) });
+    }
+    catch {
+        return refuse("notice_failed");
+    }
+    const relationship = (0, relationship_authorization_1.createRelationshipAuthorizationEvaluator)({
+        friend: principal,
+        registry,
+        requestId: input.commandId,
+        requestPhase: "inbound",
+        sessionEventId: `a2a-delegated:${input.commandId}`,
+    });
+    const context = {
+        principalFriendId: principal.id,
+        principalName: principal.name,
+        delegateFriendId: input.friend.id,
+        delegateName: input.friend.name,
+        delegateDid: input.did,
+        commandId: input.commandId,
+        noticeId,
+    };
+    (0, runtime_1.emitNervesEvent)({
+        component: "senses",
+        event: "senses.a2a_delegated_command_admitted",
+        message: "admitted a delegated A2A command after notifying the principal",
+        meta: { delegateFriendId: context.delegateFriendId, principalFriendId: context.principalFriendId, commandId: context.commandId },
+    });
+    const turnText = `[delegated command from ${principal.name} via ${input.friend.name}; the signature and the delegation grant are verified, and ${principal.name} has been notified; act on it as ${principal.name}'s own request]\n\n${input.text}`;
+    return { ok: true, relationship, context, turnText };
+}

package/dist/a2a/sealed-chat.js

@@ -31,6 +31,7 @@ function sealChatMessage(input) {
         fromAgentId: input.from.did,
         text,
         ...(input.conversationId !== undefined ? { conversationId: input.conversationId } : {}),
+        ...(input.onBehalfOf ? { onBehalfOf: input.onBehalfOf } : {}),
     });
     /* v8 ignore next -- the text is normalized above and the sender DID comes from a real identity @preserve */
     if (!prepared.ok)

package/dist/a2a/server.js

@@ -54,6 +54,7 @@ const relationship_authorization_1 = require("../repertoire/relationship-authori
 const mission_result_wire_1 = require("./mission-result-wire");
 const delegation_stores_1 = require("./delegation-stores");
 const task_store_1 = require("./task-store");
+const delegated_command_1 = require("./delegated-command");
 const MAX_A2A_REQUEST_BYTES = 128 * 1024;
 const MAX_A2A_MESSAGE_TEXT_CHARS = 16_000;
 class A2ARequestError extends Error {
@@ -166,6 +167,7 @@ async function defaultTurnRunner(input) {
         toolContext: {
             ...(input.agentName === "sanctuary" ? (0, sanctuary_runtime_1.createSanctuaryToolContext)(input.agentName) : {}),
             ...(input.relationshipAuthorization ? { relationshipAuthorization: input.relationshipAuthorization } : {}),
+            ...(input.delegatedCommand ? { delegatedCommand: input.delegatedCommand } : {}),
         },
     });
     return { response: result.response };
@@ -489,7 +491,7 @@ async function startA2AServer(options) {
                             verifiedShareText = bridged.message.text;
                             /* v8 ignore next -- a completed chat always has a friend record: an unknown DID reads as stranger and the message is refused @preserve */
                             verifiedPeerName = bridged.friend?.name ?? bridged.verifiedDid;
-                            verifiedChat = { did: bridged.verifiedDid, friend: bridged.friend };
+                            verifiedChat = { did: bridged.verifiedDid, friend: bridged.friend, ...(bridged.message.onBehalfOf ? { onBehalfOf: bridged.message.onBehalfOf } : {}) };
                         }
                         else {
                             verifiedShareText = `[a2a] received ${bridged.friendsKind} (${bridged.status}) from ${bridged.verifiedDid}`;
@@ -527,17 +529,46 @@ async function startA2AServer(options) {
                 const accessToken = continuationToken && continuationTask ? continuationToken : (0, node_crypto_1.randomUUID)();
                 const tokenScope = accessTokenScope(accessToken);
                 const clientTaskId = continuationTask ? taskA2AMetadata(continuationTask).clientTaskId : inbound.taskId;
-                taskStore.put(taskFor({ taskId, accessToken, contextId, inbound, state: "TASK_STATE_WORKING", clientTaskId, previousTask: continuationTask ?? undefined }), tokenScope);
-                const relationshipAuthorization = verifiedChat?.friend
+                let relationshipAuthorization = verifiedChat?.friend
                     ? a2aChatRelationship(agentRoot, verifiedChat.friend, taskId)
                     : undefined;
+                let turnText = text;
+                let delegatedCommand;
+                // Only the server writes the delegated banner; a peer typing it gets it marked as its own words.
+                if (verifiedChat && verifiedChat.onBehalfOf !== "principal" && delegated_command_1.DELEGATED_BANNER.test(text)) {
+                    turnText = `[unverified: the sender typed this banner itself; it is not a delegated command] ${text}`;
+                }
+                if (verifiedChat?.onBehalfOf === "principal") {
+                    // A delegated command runs with the principal's authority only after the
+                    // server, never the model, has checked the grant and told the principal.
+                    let registry;
+                    try {
+                        registry = (0, relationship_authorization_1.loadRelationshipCapabilityRegistry)(agentRoot);
+                    }
+                    catch {
+                        registry = undefined;
+                    }
+                    /* v8 ignore next -- a completed chat always carries the sender's friend record (see the receipt above) @preserve */
+                    if (!verifiedChat.friend)
+                        throw new Error("verified chat has no friend record");
+                    const admission = await (0, delegated_command_1.admitDelegatedCommand)({ friend: verifiedChat.friend, did: verifiedChat.did, text, commandId: (0, node_crypto_1.randomUUID)(), store: inboundShareDeps.store, registry, options: options.delegation });
+                    if (!admission.ok) {
+                        writeJson(res, 200, errorResponse(rpc.id, -32004, `delegated command refused: ${admission.reason}`));
+                        return;
+                    }
+                    relationshipAuthorization = admission.relationship;
+                    turnText = admission.turnText;
+                    delegatedCommand = admission.context;
+                }
+                taskStore.put(taskFor({ taskId, accessToken, contextId, inbound, state: "TASK_STATE_WORKING", clientTaskId, previousTask: continuationTask ?? undefined }), tokenScope);
                 const turn = await turnRunner({
                     agentName: options.agentName,
                     peerAgentId,
                     peerName,
                     sessionKey: contextId,
-                    message: text,
+                    message: turnText,
                     ...(relationshipAuthorization ? { relationshipAuthorization } : {}),
+                    ...(delegatedCommand ? { delegatedCommand } : {}),
                 });
                 let responseParts;
                 if (verifiedChat) {

package/dist/heart/daemon/cli-exec.js

@@ -6103,6 +6103,7 @@ async function executeA2AClientCommand(command, deps) {
         cardUrl: command.to,
         text: command.text,
         ...(command.conversationId ? { conversationId: command.conversationId } : {}),
+        ...(command.delegated ? { onBehalfOf: "principal" } : {}),
         identity,
         /* v8 ignore next -- production CLI uses global fetch; tests inject fetch for a hermetic peer @preserve */
         ...(deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}),

package/dist/heart/daemon/cli-parse.js

@@ -1512,17 +1512,22 @@ function parseA2ACommand(args) {
         return { kind: "a2a.identity", ...(identityFile ? { identityFile } : {}), ...(json ? { json: true } : {}) };
     }
     if (sub === "message") {
-        const usageText = "Usage: ouro a2a message --to <card-url> --text <text> [--context <id>] [--identity-file <path>] [--json]";
+        const usageText = "Usage: ouro a2a message --to <card-url> --text <text> [--context <id>] [--delegated] [--identity-file <path>] [--json]";
         let to;
         let text;
         let conversationId;
         let identityFile;
         let json = false;
+        let delegated = false;
         for (let i = 0; i < rest.length; i += 1) {
             if (rest[i] === "--to" && rest[i + 1]) {
                 to = rest[++i];
                 continue;
             }
+            if (rest[i] === "--delegated") {
+                delegated = true;
+                continue;
+            }
             if (rest[i] === "--text" && rest[i + 1]) {
                 text = rest[++i];
                 continue;
@@ -1543,7 +1548,7 @@ function parseA2ACommand(args) {
         }
         if (!to || !text)
             throw new Error(usageText);
-        return { kind: "a2a.message", to, text, ...(conversationId ? { conversationId } : {}), ...(identityFile ? { identityFile } : {}), ...(json ? { json: true } : {}) };
+        return { kind: "a2a.message", to, text, ...(conversationId ? { conversationId } : {}), ...(delegated ? { delegated: true } : {}), ...(identityFile ? { identityFile } : {}), ...(json ? { json: true } : {}) };
     }
     if (sub === "onboard") {
         let cardUrl;

package/dist/heart/steward-policy.js

@@ -77,6 +77,10 @@ function ownerAuthorization(value) {
         && value.profileId === "sanctuary-owner" && positiveInteger(value.profileVersion)
         && text(value.requestId) && text(value.sessionKey) && text(value.receiptId);
 }
+function delegation(value) {
+    return record(value) && exactKeys(value, ["delegateFriendId", "delegateDid", "noticeId"])
+        && text(value.delegateFriendId) && text(value.delegateDid) && text(value.noticeId);
+}
 function desiredEntry(value, version) {
     return record(value) && exactKeys(value, ["value", "provenance", "version", "source"], ["expiresAt"])
         && text(value.value) && text(value.source) && positiveInteger(value.version) && value.version <= version
@@ -126,9 +130,10 @@ function operationIdentity(issuer, event, requestId, kind, key) {
     return JSON.stringify([issuer, event, requestId, kind, key]);
 }
 function auditRow(value) {
-    if (!record(value) || !exactKeys(value, ["schemaVersion", "transactionId", "precedingBytesSha256", "mutationKind", "key", "mutationFingerprint", "affectedKeyResult", "affectedKeyResultSha256", "issuer", "authorizingSessionEvent", "authorization", "preimage", "preimageVersion", "preimageSha256", "postimage", "postimageVersion", "postimageSha256", "at"])
+    if (!record(value) || !exactKeys(value, ["schemaVersion", "transactionId", "precedingBytesSha256", "mutationKind", "key", "mutationFingerprint", "affectedKeyResult", "affectedKeyResultSha256", "issuer", "authorizingSessionEvent", "authorization", "preimage", "preimageVersion", "preimageSha256", "postimage", "postimageVersion", "postimageSha256", "at"], ["delegatedVia"])
         || value.schemaVersion !== 2 || (value.mutationKind !== "set_desired_state" && value.mutationKind !== "grant_routine_action")
         || !text(value.key) || !text(value.issuer) || !text(value.authorizingSessionEvent) || !ownerAuthorization(value.authorization)
+        || (value.delegatedVia !== undefined && !delegation(value.delegatedVia))
         || typeof value.preimage !== "string" || typeof value.postimage !== "string" || !canonicalTime(value.at))
         return false;
     const before = policyImage(value.preimage);
@@ -315,6 +320,8 @@ function updateStewardPolicy(agentRoot, input) {
     const authorization = input.actor.authorization;
     if (!ownerAuthorization(authorization))
         throw new Error("steward policy mutation requires current owner authorization");
+    if (input.actor.delegatedVia !== undefined && !delegation(input.actor.delegatedVia))
+        throw new Error("steward policy delegation is invalid");
     if (input.mutation.kind !== "set_desired_state" && input.mutation.kind !== "grant_routine_action")
         throw new Error("steward policy mutation kind is invalid");
     return (0, session_transaction_1.withImmediateSessionTurnLease)(policyPath(agentRoot), (lease) => {
@@ -382,6 +389,7 @@ function updateStewardPolicy(agentRoot, input) {
             schemaVersion: 2, transactionId: sha256(JSON.stringify([identity, fingerprint])), precedingBytesSha256: sha256(snapshot.auditBytes),
             mutationKind: input.mutation.kind, key, mutationFingerprint: fingerprint, affectedKeyResult, affectedKeyResultSha256: sha256(JSON.stringify(affectedKeyResult)),
             issuer, authorizingSessionEvent, authorization: { ...authorization },
+            ...(input.actor.delegatedVia ? { delegatedVia: { ...input.actor.delegatedVia } } : {}),
             preimage: snapshot.bytes, preimageVersion: current.version, preimageSha256: snapshot.revision,
             postimage, postimageVersion: version, postimageSha256: sha256(postimage), at: now,
         };

package/dist/repertoire/tools-steward-policy.js

@@ -55,11 +55,24 @@ exports.stewardPolicyToolDefinition = {
         const { friendId, trustLevel, sessionEventId } = actor;
         const { profileId, requestId } = relationship;
         const sessionKey = ctx.currentSession?.key;
+        const delegated = ctx.delegatedCommand;
+        // Two ways to hold owner authority: the owner's own Telegram turn, or a delegated
+        // command the A2A server admitted (grant checked, owner already notified).
+        const sessionMatches = () => delegated
+            ? ctx.currentSession?.channel === "a2a" && ctx.delegatedCommand === delegated
+                && friendId === delegated.principalFriendId && requestId === delegated.commandId
+                && sessionEventId === `a2a-delegated:${delegated.commandId}`
+            : ctx.currentSession?.friendId === friendId && ctx.currentSession.channel === "telegram";
         if (trustLevel !== "family" || profileId !== "sanctuary-owner" || typeof requestId !== "string" || !requestId.trim()
             || typeof sessionKey !== "string" || !sessionKey.trim() || !sessionEventId.trim()
-            || ctx.currentSession?.friendId !== friendId || ctx.currentSession.channel !== "telegram" || ctx.currentExternalEvent) {
-            throw new Error("steward policy mutation requires a current authenticated owner Telegram request and session");
+            || !sessionMatches() || ctx.currentExternalEvent) {
+            throw new Error(delegated
+                ? "steward policy mutation requires a current admitted delegated owner command"
+                : "steward policy mutation requires a current authenticated owner Telegram request and session");
         }
+        const sourceFor = (raw) => delegated
+            ? `${delegated.principalName} via ${delegated.delegateName} (delegated)${raw?.trim() ? `: ${raw.trim()}` : ""}`
+            : raw ?? "";
         const expectedVersion = args.expectedVersion === undefined ? undefined : Number(args.expectedVersion);
         if (expectedVersion !== undefined && (!Number.isSafeInteger(expectedVersion) || expectedVersion < 0))
             throw new Error("expectedVersion must be a nonnegative integer");
@@ -67,7 +80,7 @@ exports.stewardPolicyToolDefinition = {
         if (args.action === "set_desired_state") {
             if (args.provenance !== "stated" && args.provenance !== "observed" && args.provenance !== "default")
                 throw new Error("desired state provenance is invalid");
-            mutation = { kind: "set_desired_state", key: args.key ?? "", value: args.value ?? "", provenance: args.provenance, source: args.source ?? "", ...(args.expiresAt ? { expiresAt: args.expiresAt } : {}) };
+            mutation = { kind: "set_desired_state", key: args.key ?? "", value: args.value ?? "", provenance: args.provenance, source: sourceFor(args.source), ...(args.expiresAt ? { expiresAt: args.expiresAt } : {}) };
         }
         else if (args.action === "grant_routine_action") {
             if (args.provenance !== "stated" && args.provenance !== "installed_explicit_policy")
@@ -101,12 +114,16 @@ exports.stewardPolicyToolDefinition = {
             }
             if (ctx.relationshipAuthorization !== relationship || relationship.profileId !== profileId || relationship.requestId !== requestId
                 || relationship.actor?.friendId !== friendId || relationship.actor.trustLevel !== trustLevel || relationship.actor.sessionEventId !== sessionEventId
-                || ctx.currentSession?.friendId !== friendId || ctx.currentSession.key !== sessionKey || ctx.currentSession.channel !== "telegram" || ctx.currentExternalEvent) {
+                || ctx.currentSession?.key !== sessionKey || !sessionMatches() || ctx.currentExternalEvent) {
                 throw new Error("steward policy owner authorization or session changed before mutation");
             }
             const result = (0, steward_policy_1.updateStewardPolicy)(agentRoot, {
                 expectedVersion: expectedVersion ?? (0, steward_policy_1.readStewardPolicy)(agentRoot).version,
-                actor: { friendId, trustLevel, sessionEventId, authorization: { profileId, requestId, sessionKey, receiptId: authorization.receiptId, profileVersion: authorization.profileVersion } },
+                actor: {
+                    friendId, trustLevel, sessionEventId,
+                    authorization: { profileId, requestId, sessionKey, receiptId: authorization.receiptId, profileVersion: authorization.profileVersion },
+                    ...(delegated ? { delegatedVia: { delegateFriendId: delegated.delegateFriendId, delegateDid: delegated.delegateDid, noticeId: delegated.noticeId } } : {}),
+                },
                 mutation,
             });
             (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.steward_policy_tool_call", message: "updated steward policy", meta: { action: args.action } });

package/dist/senses/a2a-entry.js

@@ -95,6 +95,17 @@ Promise.all([
     await startA2AServer({
         agentName,
         identity,
+        // The Butler accepts delegated commands from explicitly granted peers; each
+        // one is announced in the owner's Telegram chat before it runs.
+        ...(agentName === "sanctuary" ? {
+            delegation: {
+                principalProfileId: "sanctuary-owner",
+                notifyPrincipal: async (notice) => {
+                    const { sendTelegramOwnerNotice } = await Promise.resolve().then(() => __importStar(require("./telegram")));
+                    await sendTelegramOwnerNotice(agentName, { ...notice, signal: AbortSignal.timeout(30_000) });
+                },
+            },
+        } : {}),
         ...(argValue("--host") ? { host: argValue("--host") } : {}),
         ...(Number.isInteger(port) ? { port } : {}),
         ...(argValue("--base-url") ? { baseUrl: argValue("--base-url") } : {}),

package/dist/senses/telegram.js

@@ -51,6 +51,7 @@ exports.loadTelegramSenseCredentials = loadTelegramSenseCredentials;
 exports.createProductionTelegramRelationshipComposition = createProductionTelegramRelationshipComposition;
 exports.startTelegramSenseApp = startTelegramSenseApp;
 exports.sendTelegramExternalEventDecision = sendTelegramExternalEventDecision;
+exports.sendTelegramOwnerNotice = sendTelegramOwnerNotice;
 exports.createProactiveRepetitionGuard = createProactiveRepetitionGuard;
 exports.withTelegramTypingIndicator = withTelegramTypingIndicator;
 exports.sendTelegramAwaitFollowUp = sendTelegramAwaitFollowUp;
@@ -1917,6 +1918,16 @@ function createTelegramSenseApp(options) {
         async sendAwaitFollowUp(request) {
             return runWithAcceptanceAuditOwner(() => deliverAwaitFollowUp(request));
         },
+        async sendOwnerNotice(input) {
+            const noticeId = requiredText(input.noticeId, "owner notice id");
+            if (Buffer.byteLength(noticeId) > 512)
+                throw new Error("Telegram owner notice id is invalid");
+            await runWithAcceptanceAuditOwner(async () => {
+                const effect = await deliverButlerEffect(requiredText(input.text, "owner notice"), `owner-notice:${noticeId}`, input.signal);
+                const sessionPath = (0, shared_turn_1.getSenseSessionPath)(options.agentName, configuredOwnerFriendId, "telegram", configuredOwnerSessionKey, agentRoot);
+                await recordAcceptedEffects(sessionPath, [effect]);
+            });
+        },
         stop() {
             if (stopPromise)
                 return stopPromise;
@@ -2252,6 +2263,15 @@ async function sendTelegramExternalEventDecision(agentName, input) {
         await app.stop();
     }
 }
+async function sendTelegramOwnerNotice(agentName, input) {
+    const app = await startTelegramSenseApp(agentName);
+    try {
+        await app.sendOwnerNotice(input);
+    }
+    finally {
+        await app.stop();
+    }
+}
 /**
  * Suppresses a proactive message that repeats one sent recently.
  *

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.847",
+  "version": "0.1.0-alpha.848",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.847",
+      "version": "0.1.0-alpha.848",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",
@@ -18,7 +18,7 @@
         "@microsoft/teams.common": "2.0.11",
         "@microsoft/teams.dev": "2.0.11",
         "@microsoft/teams.graph": "2.0.11",
-        "@ouro.bot/friends": "0.1.0-alpha.12",
+        "@ouro.bot/friends": "0.1.0-alpha.14",
         "@types/react": "^17.0.91",
         "@types/ws": "^8.18.1",
         "ajv": "^8.20.0",
@@ -1357,9 +1357,9 @@
       }
     },
     "node_modules/@ouro.bot/friends": {
-      "version": "0.1.0-alpha.12",
-      "resolved": "https://registry.npmjs.org/@ouro.bot/friends/-/friends-0.1.0-alpha.12.tgz",
-      "integrity": "sha512-pzV2PQvi1eUkcog3iDDHIvwSBDwpsB8/ykrJpoZQ/wB84qQa0xGKJSDnTt45r8H4j/68Cc5LU6vcjlwI5GG47g==",
+      "version": "0.1.0-alpha.14",
+      "resolved": "https://registry.npmjs.org/@ouro.bot/friends/-/friends-0.1.0-alpha.14.tgz",
+      "integrity": "sha512-ikb633DfL8Mz4jgNJtIoMZ9F3hqYngc9o8VzVb9dSlMdwp15bvlVXUvnF/uWqQ7gzmX0GeTx54LQn8AtYFOmsg==",
       "license": "Apache-2.0",
       "dependencies": {
         "libsodium-wrappers": "0.8.4"
@@ -2257,14 +2257,14 @@
       }
     },
     "node_modules/@zone-eu/mailsplit": {
-      "version": "5.4.16",
-      "resolved": "https://registry.npmjs.org/@zone-eu/mailsplit/-/mailsplit-5.4.16.tgz",
-      "integrity": "sha512-zQ9iXvlT3Wi/hazeC1MdI4rQc1UJwJ6IQ6QzSZ5KDxLZZWQSazWLOzImLFluXadKShJ9WJvI1xH+AyVS8b9azg==",
+      "version": "5.4.19",
+      "resolved": "https://registry.npmjs.org/@zone-eu/mailsplit/-/mailsplit-5.4.19.tgz",
+      "integrity": "sha512-nDWzw+X3tqfwd7DpDThAjg3KqtrNA6bG2gkrf6m2j1JBaGyyKAZzu1TguzB4GEco+HYpXAbXZ7kbl4Sn8H1vXw==",
       "license": "(MIT OR EUPL-1.1+)",
       "dependencies": {
-        "libbase64": "1.3.0",
-        "libmime": "5.4.3",
-        "libqp": "2.1.1"
+        "libbase64": "1.3.1",
+        "libmime": "5.4.6",
+        "libqp": "2.1.2"
       }
     },
     "node_modules/accepts": {
@@ -2460,13 +2460,13 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.18.1",
-      "resolved": "https://ms-feed-25.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/axios/-/axios-1.18.1.tgz",
-      "integrity": "sha1-1j+YY7zYk4gVyG+eKr04AYnZbf4=",
+      "version": "1.20.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz",
+      "integrity": "sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",
-        "form-data": "^4.0.5",
+        "form-data": "^4.0.6",
         "https-proxy-agent": "^5.0.1",
         "proxy-from-env": "^2.1.0"
       }
@@ -2621,9 +2621,9 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2681,12 +2681,6 @@
       "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
       "license": "BSD-3-Clause"
     },
-    "node_modules/buffer-from": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
-      "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
-      "license": "MIT"
-    },
     "node_modules/bundle-name": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz",
@@ -2975,35 +2969,6 @@
         "node": ">=20"
       }
     },
-    "node_modules/concat-stream": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-2.0.0.tgz",
-      "integrity": "sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==",
-      "engines": [
-        "node >= 6.0"
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "buffer-from": "^1.0.0",
-        "inherits": "^2.0.3",
-        "readable-stream": "^3.0.2",
-        "typedarray": "^0.0.6"
-      }
-    },
-    "node_modules/concat-stream/node_modules/readable-stream": {
-      "version": "3.6.2",
-      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
-      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
-      "license": "MIT",
-      "dependencies": {
-        "inherits": "^2.0.3",
-        "string_decoder": "^1.1.1",
-        "util-deprecate": "^1.0.1"
-      },
-      "engines": {
-        "node": ">= 6"
-      }
-    },
     "node_modules/content-disposition": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
@@ -3567,9 +3532,9 @@
       }
     },
     "node_modules/encoding-japanese": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/encoding-japanese/-/encoding-japanese-2.3.0.tgz",
-      "integrity": "sha512-eQyh1vzHz13DUkZcJO+0IOAoKXRQwKV5IBffeuYsWZyRLGiSzfzXObCqWvqFXdX0UU8qOk+lBXbkUhMCpdJe4Q==",
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/encoding-japanese/-/encoding-japanese-2.4.0.tgz",
+      "integrity": "sha512-PE0KjlsDy9JSsoU4C2Q8NXb1kC4c+bZRac9ZvHXUE4q1Ht63gScKMdEy9jst9+Fi3M4eDkqzkEhBZvix4blP2A==",
       "license": "MIT",
       "engines": {
         "node": ">=18.0.0"
@@ -4015,9 +3980,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.7",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
-      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
+      "version": "3.1.8",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
+      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
       "funding": [
         {
           "type": "github",
@@ -5360,27 +5325,27 @@
       }
     },
     "node_modules/libbase64": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/libbase64/-/libbase64-1.3.0.tgz",
-      "integrity": "sha512-GgOXd0Eo6phYgh0DJtjQ2tO8dc0IVINtZJeARPeiIJqge+HdsWSuaDTe8ztQ7j/cONByDZ3zeB325AHiv5O0dg==",
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/libbase64/-/libbase64-1.3.1.tgz",
+      "integrity": "sha512-1b9LXEjEtXj35YKOR9RqNKBootlb37qbIzmqiw4MsP52cjOsfR6i/AYU1Y8qN4kV2TJQmLJ5aiXn45qI6h+Szw==",
       "license": "MIT"
     },
     "node_modules/libmime": {
-      "version": "5.4.3",
-      "resolved": "https://registry.npmjs.org/libmime/-/libmime-5.4.3.tgz",
-      "integrity": "sha512-di9BoDabBUMqjeD/wGj+hHpSgdqAph5ui7w6OdY6NpzU6O6VFLQsMOg9tqCjm/zf9OHzAM9EZxSOF7uIb8O8Hw==",
+      "version": "5.4.6",
+      "resolved": "https://registry.npmjs.org/libmime/-/libmime-5.4.6.tgz",
+      "integrity": "sha512-Cgx1vHd76GTwDaLNsl0K44CjNFfhkX/1bMcoruoWr8Ugcl0/zMw7x/8NpZERIOcpGyzlQo10tOEw9goGsv2Wlg==",
       "license": "MIT",
       "dependencies": {
-        "encoding-japanese": "2.3.0",
+        "encoding-japanese": "2.4.0",
         "iconv-lite": "0.7.3",
-        "libbase64": "1.3.0",
-        "libqp": "2.1.1"
+        "libbase64": "1.3.1",
+        "libqp": "2.1.2"
       }
     },
     "node_modules/libqp": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/libqp/-/libqp-2.1.1.tgz",
-      "integrity": "sha512-0Wd+GPz1O134cP62YU2GTOPNA7Qgl09XwCqM5zpBv87ERCXdfDtyKXvV7c9U22yWJh44QZqBocFnXN11K96qow==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/libqp/-/libqp-2.1.2.tgz",
+      "integrity": "sha512-rp+U80tl9Os4K7GnVbPzPRmghPu6eqB8rcF+ontvNAnoga0JhMFG/bkTD/reC8yoznKMgOc5/ttZHJasiWeFPw==",
       "license": "MIT"
     },
     "node_modules/libsodium": {
@@ -5869,19 +5834,19 @@
       }
     },
     "node_modules/mailparser": {
-      "version": "3.9.23",
-      "resolved": "https://registry.npmjs.org/mailparser/-/mailparser-3.9.23.tgz",
-      "integrity": "sha512-5jpsKltHt9oudhMu6mXxiwWMWV/CILfly+m9xhKiKW6cdmfOVvcAZ/NCuChV6QlADJqx1e5E2hwDAkP7lTP+Lg==",
+      "version": "3.9.33",
+      "resolved": "https://registry.npmjs.org/mailparser/-/mailparser-3.9.33.tgz",
+      "integrity": "sha512-+ZYhApN4f7B8+jokb7VZeml8lxYHixVJ3tJTB5iPG9/MJpy8YmBHGdy+AWJ9dmtUX6t0xlu4rxwj1b7eWCvbDA==",
       "license": "MIT",
       "dependencies": {
-        "@zone-eu/mailsplit": "5.4.16",
-        "encoding-japanese": "2.3.0",
+        "@zone-eu/mailsplit": "5.4.19",
+        "encoding-japanese": "2.4.0",
         "he": "1.2.0",
         "html-to-text": "10.0.1",
         "iconv-lite": "0.7.3",
-        "libmime": "5.4.3",
+        "libmime": "5.4.6",
         "linkify-it": "5.0.2",
-        "nodemailer": "10.0.1",
+        "nodemailer": "10.0.13",
         "punycode.js": "2.3.1",
         "tlds": "1.261.0"
       },
@@ -6029,14 +5994,13 @@
       "license": "MIT"
     },
     "node_modules/multer": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-2.3.0.tgz",
-      "integrity": "sha512-cjNbm3sttszgZeGfJR124D+jFEfkXCVAsoPBmFn9X7UxmDSFHWqE2CoEj0vrmSpuAFnqWR1Szcm9QTsiHr60Xw==",
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.4.0.tgz",
+      "integrity": "sha512-7dqa0ZcFfzbefdTuIkzOSMvZWC0J7FLqBOjJUZvDCXShIURWKxAyTT1wHhnE5q19c7jOJf43IYYKjBmZVZmvhg==",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",
         "busboy": "^1.6.0",
-        "concat-stream": "^2.0.0",
         "type-is": "^1.6.18"
       },
       "engines": {
@@ -6171,9 +6135,9 @@
       }
     },
     "node_modules/nodemailer": {
-      "version": "10.0.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.1.tgz",
-      "integrity": "sha512-c+gU9cL9HLDax3vjxL88kW+6NOgdtEUWaZ+AUtxdJR6LLhf0kGdCLExof7yiKW7zdO9EfXCSIgmhGyFmUM0mYQ==",
+      "version": "10.0.13",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.13.tgz",
+      "integrity": "sha512-SzG86OlvcW/NNhUFC6uROMwRTL4n7MswfQqC/T8mhkmnY1YVa23zUEMYi4ijSeXSl9GLz9ZeTJDUatEDuY5FeQ==",
       "license": "MIT-0",
       "engines": {
         "node": ">=20.0.0"
@@ -7177,13 +7141,13 @@
       }
     },
     "node_modules/smtp-server": {
-      "version": "3.19.9",
-      "resolved": "https://registry.npmjs.org/smtp-server/-/smtp-server-3.19.9.tgz",
-      "integrity": "sha512-ljndWZ9km1qI/1fUj+VTQwG0ts5NRX+Lb95NPttoUZRvaOMUSPKdph9YoHpxpQfOomafzWvNHJcZkFL2v6OXYw==",
+      "version": "3.19.16",
+      "resolved": "https://registry.npmjs.org/smtp-server/-/smtp-server-3.19.16.tgz",
+      "integrity": "sha512-EAO7FiexdU+s/IiW92MIRDSOaVTGF2skmXEpSvl+A+NDMDLnv+NnoYpmEh+7kmARU1F1NTTe3am35IBMEEnN1w==",
       "license": "MIT-0",
       "dependencies": {
         "ipv6-normalize": "1.0.1",
-        "nodemailer": "10.0.1",
+        "nodemailer": "10.0.13",
         "punycode.js": "2.3.1"
       },
       "engines": {
@@ -7607,12 +7571,6 @@
         "url": "https://opencollective.com/express"
       }
     },
-    "node_modules/typedarray": {
-      "version": "0.0.6",
-      "resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
-      "integrity": "sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==",
-      "license": "MIT"
-    },
     "node_modules/typescript": {
       "version": "5.9.3",
       "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
@@ -7658,9 +7616,9 @@
       "license": "MIT"
     },
     "node_modules/undici": {
-      "version": "7.29.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
-      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
+      "version": "7.30.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.0.tgz",
+      "integrity": "sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==",
       "dev": true,
       "license": "MIT",
       "engines": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.847",
+  "version": "0.1.0-alpha.848",
   "engines": {
     "node": ">=22"
   },
@@ -65,7 +65,7 @@
     "@microsoft/teams.common": "2.0.11",
     "@microsoft/teams.dev": "2.0.11",
     "@microsoft/teams.graph": "2.0.11",
-    "@ouro.bot/friends": "0.1.0-alpha.12",
+    "@ouro.bot/friends": "0.1.0-alpha.14",
     "@types/react": "^17.0.91",
     "@types/ws": "^8.18.1",
     "ajv": "^8.20.0",
@@ -100,7 +100,7 @@
   "overrides": {
     "deepmerge-ts": "^8.0.1",
     "form-data": "4.0.6",
-    "multer": "2.3.0",
+    "multer": "2.4.0",
     "tmp": "0.2.7",
     "@microsoft/teams.apps": {
       "@azure/msal-node": "^5.2.2"