@ouro.bot/cli 0.1.0-alpha.847 → 0.1.0-alpha.849

package/changelog.json

@@ -1,6 +1,26 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.849",
+      "changes": [
+        "The Butler can start a Sonarr series or Radarr movie search now (media_search_now) and blocklist-and-research stalled queue items (media_blocklist_stalled) without a Jellyseerr request id.",
+        "Media title lookup matches partial and misspelled titles across Sonarr, Radarr and Jellyfin, and falls back to the TVDB/TMDB lookup before saying a title is not in the library.",
+        "The Butler's always-loaded psyche now says to answer from primary sources rather than memory, re-read live state, label anything unreachable as unverified, and route missing tools to Claude Code instead of asking Ari to click.",
+        "media_blocklist_stalled removes each season pack once, reads the item's whole queue, and reports a failed delete without skipping the re-search; media_search_now no longer searches a lone typo-distance title match."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.848",
+      "changes": [
+        "Delegated commands: an A2A message whose signed envelope carries onBehalfOf \"principal\" (ouro a2a message --delegated) runs with the owner's sanctuary-owner authority only when the sender's friend record holds an operator-set delegationGrant and the sender is active family. The server posts a notice in the owner's Telegram chat first and refuses the command if that fails (JSON-RPC -32004). steward_policy_manage accepts the admitted command and records the source as \"<owner> via <peer> (delegated)\". Host execute stays Telegram-only.",
+        "Telegram: sendOwnerNotice / sendTelegramOwnerNotice post an idempotent Butler notice to the owner's chat and record it in the owner session.",
+        "Depend on @ouro.bot/friends 0.1.0-alpha.14.",
+        "Delegated commands: an A2A message whose signed envelope carries onBehalfOf \"principal\" (ouro a2a message --delegated) runs with the owner's sanctuary-owner authority only when the sender's friend record holds an operator-set delegationGrant and the sender is active family. Each message gets a fresh command id. The server posts a notice in the owner's Telegram chat first (30 s timeout) and refuses the command if that fails (JSON-RPC -32004). steward_policy_manage accepts the admitted command, records the source as \"<owner> via <peer> (delegated)\", and stamps delegatedVia (peer friend id, DID, notice id) on every audit row. Host execute stays Telegram-only.",
+        "A2A: a peer that types the delegated-command banner itself gets it marked as unverified in its turn.",
+        "Release gates: docs/audit-exceptions.json accepts a reviewed, dated exception per advisory URL (first entry: node-forge GHSA-86w9-cpqp-85rv via @bitwarden/cli, which has no patched release, due 2026-11-15); multer is overridden to 2.4.0; the mailroom raw-orphan debt is re-dated to 2026-10-31 and tracked as its own task."
+      ]
+    },
     {
       "version": "0.1.0-alpha.847",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.847",
+  "runtimeVersion": "0.1.0-alpha.849",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.ouro/mcp/media-mcp.mjs

@@ -31,6 +31,9 @@ const SONARR = cred?.sonarr ?? { url: "", apiKey: "" }
 const RADARR = cred?.radarr ?? { url: "", apiKey: "" }
 const PROWLARR = cred?.prowlarr ?? { url: "", apiKey: "" }
 const JELLYFIN_WEB = cred?.jellyfinWebUrl ?? "https://media.mendelow.cloud"
+// Optional: when the credential file carries { jellyfin: { url, apiKey } } the library
+// is searched in Jellyfin too. Absent, title resolution uses Sonarr and Radarr only.
+const JELLYFIN = cred?.jellyfin ?? { url: "", apiKey: "" }
 
 const TIMEOUT_MS = 45_000
 
@@ -66,6 +69,7 @@ function serviceOf(base) {
   if (base === SONARR.url) return "sonarr"
   if (base === RADARR.url) return "radarr"
   if (base === PROWLARR.url) return "prowlarr"
+  if (JELLYFIN.url && base === JELLYFIN.url) return "jellyfin"
   return "service"
 }
 
@@ -125,9 +129,128 @@ function shelfItem(item) {
   }
 }
 
+// ------------------------------------------------------- title resolution
+//
+// One resolver for every tool that takes a title. A title typed from memory is
+// rarely the catalogue's title: "chef" is "The Chef Show", "chef shwo" is a typo.
+// The 2026-09-29 failure was a library search that required the whole title and
+// so reported a tracked series as nonexistent. Matching is therefore partial and
+// typo-tolerant, in-library candidates always come first, and the TVDB/TMDB
+// lookup only runs when the library has nothing.
+
+export function normalizeTitle(s) {
+  return String(s ?? "")
+    .normalize("NFKD").replace(/[\u0300-\u036f]/g, "")
+    .toLowerCase().replace(/&/g, " and ").replace(/['\u2019]/g, "")
+    .replace(/[^a-z0-9]+/g, " ").trim().replace(/^the /, "")
+}
+
+// Optimal-string-alignment distance: an adjacent swap ("shwo") costs one edit.
+function editDistance(a, b) {
+  const d = Array.from({ length: a.length + 1 }, (_, i) => [i, ...Array(b.length).fill(0)])
+  for (let j = 1; j <= b.length; j += 1) d[0][j] = j
+  for (let i = 1; i <= a.length; i += 1) {
+    for (let j = 1; j <= b.length; j += 1) {
+      d[i][j] = Math.min(d[i - 1][j] + 1, d[i][j - 1] + 1, d[i - 1][j - 1] + (a[i - 1] === b[j - 1] ? 0 : 1))
+      if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) d[i][j] = Math.min(d[i][j], d[i - 2][j - 2] + 1)
+    }
+  }
+  return d[a.length][b.length]
+}
+
+const MATCH_RANK = { exact: 0, prefix: 1, token: 2, fuzzy: 3 }
+
+// Returns "exact" | "prefix" | "token" | "fuzzy" | null.
+export function matchKind(query, title) {
+  const nq = normalizeTitle(query)
+  const nt = normalizeTitle(title)
+  if (!nq || !nt) return null
+  if (nq === nt) return "exact"
+  if (nt.startsWith(nq)) return "prefix"
+  const qt = nq.split(" ")
+  const tt = nt.split(" ")
+  if (qt.every((q) => tt.some((t) => t === q || (q.length >= 3 && t.includes(q))))) return "token"
+  if (nq.length >= 3 && nt.includes(nq)) return "token"
+  // Typos. Short tokens must be exact; a 4-letter token may only be fuzzy when
+  // another query token already matched exactly, so "chef" never drifts to "chess".
+  const exactHit = (q) => tt.includes(q)
+  const fuzzyHit = (q) => tt.some((t) => {
+    if (q.length < 4 || t.length < 4) return false
+    const tol = q.length >= 8 ? 2 : 1
+    return editDistance(q, t) <= tol
+  })
+  const anyExact = qt.some(exactHit)
+  const ok = qt.every((q) => exactHit(q) || (fuzzyHit(q) && (q.length >= 5 || (qt.length > 1 && anyExact))))
+  return ok ? "fuzzy" : null
+}
+
+function rankCandidates(term, items) {
+  return items
+    .map((c) => ({ ...c, match: matchKind(term, c.title) }))
+    .filter((c) => c.match)
+    .sort((x, y) => MATCH_RANK[x.match] - MATCH_RANK[y.match]
+      || Math.abs(normalizeTitle(x.title).length - normalizeTitle(term).length) - Math.abs(normalizeTitle(y.title).length - normalizeTitle(term).length))
+}
+
+const libraryCandidate = (kind, i) => ({ kind, source: kind === "series" ? "sonarr" : "radarr", service_id: i.id, title: i.title,
+  year: i.year ?? null, tmdb_id: i.tmdbId ?? null, tvdb_id: i.tvdbId ?? null, in_library: true })
+
+// Every library item whose title matches, best first. Sonarr and Radarr are the
+// source of truth for what is tracked; Jellyfin (when configured) adds what is
+// on the shelf and marks items it shares with them.
+export async function findLibraryCandidates(term, kind = "any") {
+  const jobs = []
+  if (kind !== "movie") jobs.push(sonarr("/series").then((l) => (Array.isArray(l) ? l : []).map((i) => libraryCandidate("series", i))))
+  if (kind !== "series") jobs.push(radarr("/movie").then((l) => (Array.isArray(l) ? l : []).map((i) => libraryCandidate("movie", i))))
+  // One service being down must not hide the other's matches; say which failed.
+  const settled = await Promise.allSettled(jobs)
+  const notes = []
+  for (const r of settled) if (r.status === "rejected") notes.push(`library_unavailable: ${r.reason?.message ?? r.reason}`)
+  if (settled.every((r) => r.status === "rejected")) throw settled[0].reason
+  let items = settled.flatMap((r) => (r.status === "fulfilled" ? r.value : []))
+  if (JELLYFIN.url && JELLYFIN.apiKey) {
+    try {
+      const body = await req(JELLYFIN.url, "/Items", { key: JELLYFIN.apiKey, header: "X-Emby-Token",
+        query: { searchTerm: term, IncludeItemTypes: kind === "series" ? "Series" : kind === "movie" ? "Movie" : "Series,Movie", Recursive: true, Limit: 25 } })
+      for (const j of body?.Items ?? []) {
+        const k = j.Type === "Series" ? "series" : "movie"
+        const tmdb = Number(j.ProviderIds?.Tmdb ?? j.ProviderIds?.tmdb) || null
+        const twin = items.find((i) => i.kind === k && ((tmdb && i.tmdb_id === tmdb) || normalizeTitle(i.title) === normalizeTitle(j.Name)))
+        if (twin) twin.in_jellyfin = true
+        else items.push({ kind: k, source: "jellyfin", service_id: null, jellyfin_id: j.Id ?? null, title: j.Name, year: j.ProductionYear ?? null,
+          tmdb_id: tmdb, tvdb_id: null, in_library: true, in_jellyfin: true })
+      }
+    } catch (e) {
+      notes.push(`jellyfin_unavailable: ${e.message}`)
+    }
+  }
+  const ranked = rankCandidates(term, items)
+  if (notes.length) Object.defineProperty(ranked, "notes", { value: notes, enumerable: false })
+  return ranked
+}
+
+// The catalogue fallback, used only when the library has no candidate. These are
+// titles Sonarr/Radarr could add, so they are labelled not_in_library.
+export async function lookupCandidates(term, kind = "any") {
+  const out = []
+  const jobs = []
+  if (kind !== "movie") jobs.push(sonarr("/series/lookup", { query: { term } }).then((l) => (Array.isArray(l) ? l : []).forEach((i) => out.push({ kind: "series", source: "sonarr_lookup", service_id: i.id ?? null, title: i.title, year: i.year ?? null, tmdb_id: i.tmdbId ?? null, tvdb_id: i.tvdbId ?? null, in_library: Boolean(i.id), match: matchKind(term, i.title) ?? "lookup" }))).catch(() => {}))
+  if (kind !== "series") jobs.push(radarr("/movie/lookup", { query: { term } }).then((l) => (Array.isArray(l) ? l : []).forEach((i) => out.push({ kind: "movie", source: "radarr_lookup", service_id: i.id ?? null, title: i.title, year: i.year ?? null, tmdb_id: i.tmdbId ?? null, tvdb_id: null, in_library: Boolean(i.id), match: matchKind(term, i.title) ?? "lookup" }))).catch(() => {}))
+  await Promise.all(jobs)
+  return out.sort((x, y) => (MATCH_RANK[x.match] ?? 4) - (MATCH_RANK[y.match] ?? 4)).slice(0, 10)
+}
+
+// In-library candidates first; the lookup fallback only when there are none.
+export async function resolveTitle(term, kind = "any") {
+  const library = await findLibraryCandidates(term, kind)
+  if (library.length) return { library_matches: library, lookup_candidates: [], not_in_library: false, notes: library.notes ?? [] }
+  const lookup = (await lookupCandidates(term, kind)).filter((c) => !c.in_library).map((c) => ({ ...c, not_in_library: true }))
+  return { library_matches: [], lookup_candidates: lookup, not_in_library: true, notes: [] }
+}
+
 // ------------------------------------------------------------- tool: search
 
-async function mediaSearch(a) {
+export async function mediaSearch(a) {
   const kind = a.kind ?? "any"
   const limit = Math.min(Math.max(a.limit ?? 12, 1), 20)
   const onShelf = a.on_shelf // true | false | undefined(any)
@@ -175,6 +298,10 @@ async function mediaSearch(a) {
     }
   }
 
+  // Partial and typo-tolerant library match, so a half-remembered title still
+  // finds what is tracked. Lookup candidates appear only when the library has none.
+  const resolution = a.query ? await resolveTitle(a.query, kind).catch((e) => ({ library_matches: [], lookup_candidates: [], not_in_library: null, notes: [`title_resolution_failed: ${e.message}`] })) : null
+
   let items = raw.filter((r) => r.mediaType !== "person").map(shelfItem)
   if (kind !== "any") items = items.filter((i) => i.kind === kind)
   if (a.year_range) {
@@ -189,9 +316,12 @@ async function mediaSearch(a) {
     source,
     matched: items.length,
     items: items.slice(0, limit),
+    ...(resolution ? { library_matches: resolution.library_matches.slice(0, 10), lookup_candidates: resolution.lookup_candidates, notes: resolution.notes } : {}),
     applied_filters: { kind, year_range: a.year_range ?? null, genres: a.genres ?? [], keywords: a.keywords ?? [], on_shelf: onShelf ?? "any" },
     // So the agent never claims something is missing when the filter caused it:
-    note: items.length === 0 ? "No matches for these filters. Loosen year_range/genres/keywords before concluding the shelf lacks it." : null,
+    note: resolution?.library_matches.length ? "library_matches lists items already tracked in Sonarr/Radarr (or on the Jellyfin shelf) whose titles match, best first. Offer these before anything else."
+      : items.length === 0 && resolution?.lookup_candidates.length ? "Nothing in the library matches; lookup_candidates are TVDB/TMDB titles that are not in the library."
+      : items.length === 0 ? "No matches for these filters. Loosen year_range/genres/keywords before concluding the shelf lacks it." : null,
   }
 }
 
@@ -360,15 +490,25 @@ async function resolveTarget(a) {
       const found = await findExistingRequest(pick.id, pick.mediaType === "tv" ? "series" : "movie")
       if (found?.hasRequest) return found
     }
+    // Jellyseerr's own search missed it: try the partial/typo-tolerant library
+    // match, and follow its best candidate back to a request by TMDB id.
+    const best = (await findLibraryCandidates(a.title).catch(() => [])).find((c) => c.tmdb_id)
+    if (best) {
+      const found = await findExistingRequest(best.tmdb_id, best.kind)
+      if (found?.hasRequest) return found
+    }
   }
   return null
 }
 
-async function mediaRequestStatus(a) {
+export async function mediaRequestStatus(a) {
   const request = await resolveTarget(a)
   if (!request) {
+    const resolution = a.title ? await resolveTitle(a.title).catch(() => null) : null
     return { found: false, reason: "no_matching_request",
              searched: { request_id: a.request_id ?? null, tmdb_id: a.tmdb_id ?? null, title: a.title ?? null },
+             ...(resolution ? { library_matches: resolution.library_matches.slice(0, 10), lookup_candidates: resolution.lookup_candidates,
+                                note: resolution.library_matches.length ? "Not requested through Jellyseerr, but these titles are already in the library. Use media_search_now with the service_id to act on one." : undefined } : {}),
              diagnosis: { stuck_stage: "request", stuck_reason: "never_requested",
                           likely_fix: "Submit it with media_request.", human_action_required: false } }
   }
@@ -446,6 +586,12 @@ async function mediaRequestStatus(a) {
 // torrent that has not moved a byte since it was grabbed is dead, not slow:
 // Radarr reports trackedDownloadStatus "ok" for these indefinitely, so
 // progress is measured against age rather than trusted from the row.
+// The one stall rule: nothing downloaded yet, and older than the stall window.
+export function isStalledRow(r, nowMs) {
+  return (r.size ?? 0) > 0 && (r.sizeleft ?? 0) >= (r.size ?? 0) && Boolean(r.added)
+    && (nowMs - Date.parse(r.added)) / 3_600_000 >= STALL_AFTER_HOURS
+}
+
 export function computeDownloadState(queueRecs, nowMs) {
   const byDownload = new Map()
   for (const r of queueRecs) byDownload.set(r.downloadId ?? `row:${r.id}`, r)
@@ -453,8 +599,7 @@ export function computeDownloadState(queueRecs, nowMs) {
   const sizeLeft = downloads.reduce((s, r) => s + (r.sizeleft ?? 0), 0)
   const sizeTotal = downloads.reduce((s, r) => s + (r.size ?? 0), 0)
   const stalledItems = downloads
-    .filter((r) => (r.size ?? 0) > 0 && (r.sizeleft ?? 0) >= (r.size ?? 0) && r.added
-      && (nowMs - Date.parse(r.added)) / 3_600_000 >= STALL_AFTER_HOURS)
+    .filter((r) => isStalledRow(r, nowMs))
     .map((r) => ({
       title: r.title ?? null,
       added_at: r.added ?? null,
@@ -652,12 +797,122 @@ async function mediaChainHealth() {
   }
 }
 
+// ------------------------------------- tools: search_now / blocklist_stalled
+
+// Act on an item already in Sonarr/Radarr directly; no Jellyseerr request needed.
+// Never adds a library item: an unknown title is reported, not created.
+const arrFor = (kind) => (kind === "series" ? sonarr : radarr)
+
+async function resolveLibraryItem(a) {
+  let candidates
+  if ((a.service_id !== undefined && a.service_id !== null) || a.tmdb_id) {
+    const list = await arrFor(a.kind)(a.kind === "series" ? "/series" : "/movie")
+    const items = (Array.isArray(list) ? list : []).map((i) => libraryCandidate(a.kind, i))
+    const hit = items.filter((i) => (a.service_id !== undefined && a.service_id !== null ? i.service_id === Number(a.service_id) : i.tmdb_id === Number(a.tmdb_id)))
+    if (hit.length === 1) return { item: { id: hit[0].service_id, title: hit[0].title } }
+    candidates = hit
+  } else if (a.title) {
+    const ranked = (await findLibraryCandidates(a.title, a.kind)).filter((c) => c.service_id !== null)
+    // Act only when the best tier holds exactly one item and it is not merely a
+    // typo-distance match; otherwise name the candidates and let the caller pick.
+    const bestTier = ranked.filter((c) => c.match === ranked[0]?.match)
+    if (bestTier.length === 1 && bestTier[0].match !== "fuzzy") return { item: { id: bestTier[0].service_id, title: bestTier[0].title } }
+    if (!ranked.length) {
+      const lookup = (await lookupCandidates(a.title, a.kind)).filter((c) => !c.in_library).map((c) => ({ ...c, not_in_library: true }))
+      return { result: "not_found", candidates: lookup }
+    }
+    candidates = ranked
+  } else candidates = []
+  return { result: candidates.length ? "ambiguous" : "not_found", candidates: candidates.slice(0, 10) }
+}
+
+const QUEUE_PAGE_SIZE = 200
+const QUEUE_MAX_PAGES = 20
+
+// The item's queue rows. Filtered server-side (seriesIds/movieIds) and paged, so a
+// long queue cannot hide a row; the client-side filter stays as the backstop.
+async function itemQueue(kind, serviceId) {
+  const client = arrFor(kind)
+  const idKey = kind === "series" ? "seriesId" : "movieId"
+  const filter = kind === "series" ? { seriesIds: serviceId, includeSeries: true } : { movieIds: serviceId }
+  const rows = []
+  for (let page = 1; page <= QUEUE_MAX_PAGES; page++) {
+    const q = await client("/queue", { query: { ...filter, page, pageSize: QUEUE_PAGE_SIZE } })
+    const records = q?.records ?? []
+    rows.push(...records)
+    if (!records.length || !(Number(q?.totalRecords) > page * QUEUE_PAGE_SIZE)) break
+  }
+  return rows.filter((r) => r[idKey] === serviceId)
+}
+
+function queueReport(rows) {
+  const now = Date.now()
+  return rows.map((r) => ({ queue_id: r.id ?? null, title: r.title ?? null, status: r.status ?? null,
+                            size_left_bytes: r.sizeleft ?? 0, stalled: isStalledRow(r, now) }))
+}
+
+async function runSearch(kind, serviceId) {
+  const body = kind === "series" ? { name: "SeriesSearch", seriesId: serviceId } : { name: "MoviesSearch", movieIds: [serviceId] }
+  const c = await arrFor(kind)("/command", { method: "POST", body })
+  return { id: c?.id ?? null, name: c?.name ?? body.name, status: c?.status ?? null }
+}
+
+export async function mediaSearchNow(a) {
+  if (a.kind !== "series" && a.kind !== "movie") return { result: "invalid_kind", message: "kind must be 'series' or 'movie'." }
+  const found = await resolveLibraryItem(a)
+  if (!found.item) return { result: found.result, kind: a.kind, candidates: found.candidates }
+  const { item } = found
+  const command = await runSearch(a.kind, item.id)
+  return { kind: a.kind, service_id: item.id, title: item.title, command, queue: queueReport(await itemQueue(a.kind, item.id)) }
+}
+
+export async function mediaBlocklistStalled(a) {
+  if (a.kind !== "series" && a.kind !== "movie") return { result: "invalid_kind", message: "kind must be 'series' or 'movie'." }
+  if (a.service_id === undefined || a.service_id === null) return { result: "service_id_required" }
+  const serviceId = Number(a.service_id)
+  const rows = await itemQueue(a.kind, serviceId)
+  const now = Date.now()
+  let targets
+  if (Array.isArray(a.queue_ids) && a.queue_ids.length) {
+    const own = new Set(rows.map((r) => r.id))
+    const foreign = a.queue_ids.filter((id) => !own.has(id))
+    if (foreign.length) return { result: "queue_id_not_for_item", foreign_queue_ids: foreign, queue: queueReport(rows) }
+    targets = rows.filter((r) => a.queue_ids.includes(r.id))
+  } else {
+    targets = rows.filter((r) => isStalledRow(r, now))
+  }
+  // A season pack is many queue rows sharing one downloadId; deleting one removes
+  // the download for all, so delete once per download.
+  const seen = new Set()
+  targets = targets.filter((r) => {
+    const key = r.downloadId ? `d:${r.downloadId}` : `q:${r.id}`
+    if (seen.has(key)) return false
+    seen.add(key)
+    return true
+  })
+  if (!targets.length) return { result: "nothing_to_blocklist", queue: queueReport(rows) }
+  const removed = []
+  const failed = []
+  for (const row of targets) {
+    try {
+      await arrFor(a.kind)(`/queue/${row.id}`, { method: "DELETE", query: { removeFromClient: true, blocklist: true, skipRedownload: true } })
+      removed.push(row.id)
+    } catch (e) {
+      // 404: the row went away (finished or removed with its pack); not a failure to retry.
+      if (/_http_404$/.test(e.code ?? "")) removed.push(row.id)
+      else failed.push({ queue_id: row.id, error: e.message })
+    }
+  }
+  const command = a.research === false ? null : await runSearch(a.kind, serviceId)
+  return { removed, ...(failed.length ? { failed } : {}), command, queue: queueReport(await itemQueue(a.kind, serviceId)) }
+}
+
 // ------------------------------------------------------------------- schema
 
 const TOOLS = [
   {
     name: "media_search",
-    description: "Search or browse the household media catalogue. Use `query` for a title lookup; use `genres`/`keywords`/`year_range` to browse by vibe (e.g. keywords ['autumn','thanksgiving'] for cozy fall films). `on_shelf: true` restricts to what is already downloaded, `false` to what is not, omit for both. Every item says whether it is on the shelf and carries its tmdb_id so a follow-up media_request needs no second lookup.",
+    description: "Search or browse the household media catalogue. Use `query` for a title lookup: partial and misspelled titles are matched against the library first (Sonarr, Radarr, Jellyfin) and returned as `library_matches` with their kind and service id, and when nothing in the library matches, `lookup_candidates` (TVDB/TMDB) cover titles not in the library. Never say a title does not exist without reading both; use `genres`/`keywords`/`year_range` to browse by vibe (e.g. keywords ['autumn','thanksgiving'] for cozy fall films). `on_shelf: true` restricts to what is already downloaded, `false` to what is not, omit for both. Every item says whether it is on the shelf and carries its tmdb_id so a follow-up media_request needs no second lookup.",
     inputSchema: { type: "object", properties: {
       query: { type: "string", description: "Title or free text. Omit to browse by filters." },
       kind: { type: "string", enum: ["movie", "series", "any"], description: "Default any." },
@@ -710,6 +965,26 @@ const TOOLS = [
       request_id: { type: "string" }, tmdb_id: { type: "number" }, title: { type: "string" },
     } },
   },
+  {
+    name: "media_search_now",
+    description: "Trigger a Sonarr/Radarr search for a series or movie that is already in the library, and report its queue. Use this when the owner asks to search, re-search, or look again for something already in Sonarr/Radarr; no Jellyseerr request id is needed. Identify it by service_id, tmdb_id, or exact title. Never adds anything new: zero or several matches come back as 'not_found' or 'ambiguous' with candidates. Never tell the owner to click Search in the web UI.",
+    inputSchema: { type: "object", properties: {
+      kind: { type: "string", enum: ["series", "movie"] },
+      service_id: { type: "number", description: "Sonarr series id or Radarr movie id." },
+      title: { type: "string" },
+      tmdb_id: { type: "number" },
+    }, required: ["kind"] },
+  },
+  {
+    name: "media_blocklist_stalled",
+    description: "Clear stuck downloads for a series or movie already in Sonarr/Radarr: remove stalled queue rows from the download client, blocklist those releases so they are not grabbed again, then search again (research, default true). Use this when the owner asks to clear stuck or stalled downloads; no Jellyseerr request id is needed. Without queue_ids it targets the item's stalled rows; with queue_ids only those, and each must belong to the item. Explicit queue_ids are removed even if still downloading, so pass them only when the owner named those downloads. Rows of one season pack are removed once; a delete that fails is reported in `failed` and the re-search still runs.",
+    inputSchema: { type: "object", properties: {
+      kind: { type: "string", enum: ["series", "movie"] },
+      service_id: { type: "number", description: "Sonarr series id or Radarr movie id (media_search_now returns it)." },
+      queue_ids: { type: "array", items: { type: "number" } },
+      research: { type: "boolean", description: "Search again afterwards. Default true." },
+    }, required: ["kind", "service_id"] },
+  },
 ]
 
 const HANDLERS = {
@@ -719,6 +994,8 @@ const HANDLERS = {
   media_diagnose_and_fix: mediaDiagnoseAndFix,
   media_chain_health: mediaChainHealth,
   media_play_or_resolve: mediaPlayOrResolve,
+  media_search_now: mediaSearchNow,
+  media_blocklist_stalled: mediaBlocklistStalled,
 }
 
 // ------------------------------------------------------------ jsonrpc stdio

package/deploy/unraid/sanctuary.ouro/psyche/TACIT.md

@@ -13,3 +13,5 @@
 - Never touch array/parity/disk configuration, permissions, network/security settings, or `/mnt/user` paths.
 - Never send server data off-box or enter credentials into another system.
 - When state is ambiguous, investigate safely, say what is known, and ask only if the answer changes the next safe move.
+- When a tool for the job is missing, say so in one line and route the work: ask Claude Code over A2A or record it as a follow-up. Never ask Ari to click through a web UI for work the house is meant to do.
+- Answer from primary sources, never from memory. For any factual claim about the world or the house (whether a title or series exists, what is on the shelf, a container's state, a version, a download's progress, a book's metadata, what Ari said before), look it up with the tools first (Sonarr/Radarr/Jellyfin and their TVDB/TMDB lookup, the Unraid tools, calibre-web, libgen, HEY, web_search, your own state files) and answer from what they return. Re-read live state instead of repeating a status from an earlier reply. When no tool can reach the source, say it is unverified rather than asserting it. Never say a title does not exist without a catalog lookup, and when the library holds a strong partial match, offer it first.

package/deploy/unraid/sanctuary.ouro/tool-profiles.json

@@ -2,7 +2,7 @@
   "version": 2,
   "profiles": {
     "sanctuary-owner": {
-      "version": 10,
+      "version": 11,
       "contextScopes": [
         "household.status",
         "household.policy",
@@ -64,7 +64,9 @@
         "media_request_status",
         "media_diagnose_and_fix",
         "media_chain_health",
-        "media_play_or_resolve"
+        "media_play_or_resolve",
+        "media_search_now",
+        "media_blocklist_stalled"
       ],
       "effectScopes": [
         "telegram.proactive",
@@ -132,7 +134,7 @@
       ]
     },
     "sanctuary-agent-peer": {
-      "version": 1,
+      "version": 2,
       "toolNames": [
         "external_event_disposition",
         "query_active_work",
@@ -187,7 +189,9 @@
         "media_request_status",
         "media_diagnose_and_fix",
         "media_chain_health",
-        "media_play_or_resolve"
+        "media_play_or_resolve",
+        "media_search_now",
+        "media_blocklist_stalled"
       ],
       "contextScopes": [
         "household.status",

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.847</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.849</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/a2a/client.js

@@ -213,6 +213,7 @@ async function sendSealedA2AChat(input) {
         recipientEd25519Pub: parsed.ed25519Pub,
         text: input.text,
         conversationId,
+        ...(input.onBehalfOf ? { onBehalfOf: input.onBehalfOf } : {}),
     });
     const request = {
         jsonrpc: "2.0",

package/dist/a2a/delegated-command.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DELEGATED_BANNER = void 0;
+exports.delegatedCommandNotice = delegatedCommandNotice;
+exports.admitDelegatedCommand = admitDelegatedCommand;
+const runtime_1 = require("../nerves/runtime");
+const relationship_authorization_1 = require("../repertoire/relationship-authorization");
+const NOTICE_EXCERPT_CHARS = 200;
+/** Matches the banner only the server may put in front of an admitted command. */
+exports.DELEGATED_BANNER = /^\s*\[\s*delegated command/iu;
+function delegatedCommandNotice(input) {
+    const flat = input.text.replace(/\s+/gu, " ").trim();
+    const excerpt = flat.length > NOTICE_EXCERPT_CHARS ? `${flat.slice(0, NOTICE_EXCERPT_CHARS)}…` : flat;
+    return `Delegated command from you via ${input.delegateName}: "${excerpt}". If this wasn't you, say so here: it is on record, and the grant can be revoked.`;
+}
+function hasPrincipalGrant(friend) {
+    return friend.delegationGrant?.scope === "principal_commands";
+}
+async function resolvePrincipal(store, profileId) {
+    const friends = await store.listAll?.() ?? [];
+    const matches = friends.filter((friend) => friend.capabilityProfileId === profileId
+        && friend.trustLevel === "family" && friend.admissionState === "active");
+    return matches.length === 1 ? matches[0] : null;
+}
+async function admitDelegatedCommand(input) {
+    const refuse = (reason) => {
+        (0, runtime_1.emitNervesEvent)({
+            level: "warn",
+            component: "senses",
+            event: "senses.a2a_delegated_command_refused",
+            message: "refused a delegated A2A command",
+            meta: { reason, delegateFriendId: input.friend.id, commandId: input.commandId },
+        });
+        return { ok: false, reason };
+    };
+    if (!input.options)
+        return refuse("not_enabled");
+    if (!hasPrincipalGrant(input.friend))
+        return refuse("no_grant");
+    if (input.friend.trustLevel !== "family" || input.friend.admissionState === "revoked")
+        return refuse("not_family");
+    const registry = input.registry;
+    if (!registry)
+        return refuse("principal_unresolved");
+    const principal = await resolvePrincipal(input.store, input.options.principalProfileId);
+    if (!principal || principal.id === input.friend.id)
+        return refuse("principal_unresolved");
+    const noticeId = `delegated:${input.commandId}`;
+    try {
+        await input.options.notifyPrincipal({ noticeId, text: delegatedCommandNotice({ delegateName: input.friend.name, text: input.text }) });
+    }
+    catch {
+        return refuse("notice_failed");
+    }
+    const relationship = (0, relationship_authorization_1.createRelationshipAuthorizationEvaluator)({
+        friend: principal,
+        registry,
+        requestId: input.commandId,
+        requestPhase: "inbound",
+        sessionEventId: `a2a-delegated:${input.commandId}`,
+    });
+    const context = {
+        principalFriendId: principal.id,
+        principalName: principal.name,
+        delegateFriendId: input.friend.id,
+        delegateName: input.friend.name,
+        delegateDid: input.did,
+        commandId: input.commandId,
+        noticeId,
+    };
+    (0, runtime_1.emitNervesEvent)({
+        component: "senses",
+        event: "senses.a2a_delegated_command_admitted",
+        message: "admitted a delegated A2A command after notifying the principal",
+        meta: { delegateFriendId: context.delegateFriendId, principalFriendId: context.principalFriendId, commandId: context.commandId },
+    });
+    const turnText = `[delegated command from ${principal.name} via ${input.friend.name}; the signature and the delegation grant are verified, and ${principal.name} has been notified; act on it as ${principal.name}'s own request]\n\n${input.text}`;
+    return { ok: true, relationship, context, turnText };
+}

package/dist/a2a/sealed-chat.js

@@ -31,6 +31,7 @@ function sealChatMessage(input) {
         fromAgentId: input.from.did,
         text,
         ...(input.conversationId !== undefined ? { conversationId: input.conversationId } : {}),
+        ...(input.onBehalfOf ? { onBehalfOf: input.onBehalfOf } : {}),
     });
     /* v8 ignore next -- the text is normalized above and the sender DID comes from a real identity @preserve */
     if (!prepared.ok)

package/dist/a2a/server.js

@@ -54,6 +54,7 @@ const relationship_authorization_1 = require("../repertoire/relationship-authori
 const mission_result_wire_1 = require("./mission-result-wire");
 const delegation_stores_1 = require("./delegation-stores");
 const task_store_1 = require("./task-store");
+const delegated_command_1 = require("./delegated-command");
 const MAX_A2A_REQUEST_BYTES = 128 * 1024;
 const MAX_A2A_MESSAGE_TEXT_CHARS = 16_000;
 class A2ARequestError extends Error {
@@ -166,6 +167,7 @@ async function defaultTurnRunner(input) {
         toolContext: {
             ...(input.agentName === "sanctuary" ? (0, sanctuary_runtime_1.createSanctuaryToolContext)(input.agentName) : {}),
             ...(input.relationshipAuthorization ? { relationshipAuthorization: input.relationshipAuthorization } : {}),
+            ...(input.delegatedCommand ? { delegatedCommand: input.delegatedCommand } : {}),
         },
     });
     return { response: result.response };
@@ -489,7 +491,7 @@ async function startA2AServer(options) {
                             verifiedShareText = bridged.message.text;
                             /* v8 ignore next -- a completed chat always has a friend record: an unknown DID reads as stranger and the message is refused @preserve */
                             verifiedPeerName = bridged.friend?.name ?? bridged.verifiedDid;
-                            verifiedChat = { did: bridged.verifiedDid, friend: bridged.friend };
+                            verifiedChat = { did: bridged.verifiedDid, friend: bridged.friend, ...(bridged.message.onBehalfOf ? { onBehalfOf: bridged.message.onBehalfOf } : {}) };
                         }
                         else {
                             verifiedShareText = `[a2a] received ${bridged.friendsKind} (${bridged.status}) from ${bridged.verifiedDid}`;
@@ -527,17 +529,46 @@ async function startA2AServer(options) {
                 const accessToken = continuationToken && continuationTask ? continuationToken : (0, node_crypto_1.randomUUID)();
                 const tokenScope = accessTokenScope(accessToken);
                 const clientTaskId = continuationTask ? taskA2AMetadata(continuationTask).clientTaskId : inbound.taskId;
-                taskStore.put(taskFor({ taskId, accessToken, contextId, inbound, state: "TASK_STATE_WORKING", clientTaskId, previousTask: continuationTask ?? undefined }), tokenScope);
-                const relationshipAuthorization = verifiedChat?.friend
+                let relationshipAuthorization = verifiedChat?.friend
                     ? a2aChatRelationship(agentRoot, verifiedChat.friend, taskId)
                     : undefined;
+                let turnText = text;
+                let delegatedCommand;
+                // Only the server writes the delegated banner; a peer typing it gets it marked as its own words.
+                if (verifiedChat && verifiedChat.onBehalfOf !== "principal" && delegated_command_1.DELEGATED_BANNER.test(text)) {
+                    turnText = `[unverified: the sender typed this banner itself; it is not a delegated command] ${text}`;
+                }
+                if (verifiedChat?.onBehalfOf === "principal") {
+                    // A delegated command runs with the principal's authority only after the
+                    // server, never the model, has checked the grant and told the principal.
+                    let registry;
+                    try {
+                        registry = (0, relationship_authorization_1.loadRelationshipCapabilityRegistry)(agentRoot);
+                    }
+                    catch {
+                        registry = undefined;
+                    }
+                    /* v8 ignore next -- a completed chat always carries the sender's friend record (see the receipt above) @preserve */
+                    if (!verifiedChat.friend)
+                        throw new Error("verified chat has no friend record");
+                    const admission = await (0, delegated_command_1.admitDelegatedCommand)({ friend: verifiedChat.friend, did: verifiedChat.did, text, commandId: (0, node_crypto_1.randomUUID)(), store: inboundShareDeps.store, registry, options: options.delegation });
+                    if (!admission.ok) {
+                        writeJson(res, 200, errorResponse(rpc.id, -32004, `delegated command refused: ${admission.reason}`));
+                        return;
+                    }
+                    relationshipAuthorization = admission.relationship;
+                    turnText = admission.turnText;
+                    delegatedCommand = admission.context;
+                }
+                taskStore.put(taskFor({ taskId, accessToken, contextId, inbound, state: "TASK_STATE_WORKING", clientTaskId, previousTask: continuationTask ?? undefined }), tokenScope);
                 const turn = await turnRunner({
                     agentName: options.agentName,
                     peerAgentId,
                     peerName,
                     sessionKey: contextId,
-                    message: text,
+                    message: turnText,
                     ...(relationshipAuthorization ? { relationshipAuthorization } : {}),
+                    ...(delegatedCommand ? { delegatedCommand } : {}),
                 });
                 let responseParts;
                 if (verifiedChat) {

package/dist/heart/daemon/cli-exec.js

@@ -6103,6 +6103,7 @@ async function executeA2AClientCommand(command, deps) {
         cardUrl: command.to,
         text: command.text,
         ...(command.conversationId ? { conversationId: command.conversationId } : {}),
+        ...(command.delegated ? { onBehalfOf: "principal" } : {}),
         identity,
         /* v8 ignore next -- production CLI uses global fetch; tests inject fetch for a hermetic peer @preserve */
         ...(deps.fetchImpl ? { fetchImpl: deps.fetchImpl } : {}),

package/dist/heart/daemon/cli-parse.js

@@ -1512,17 +1512,22 @@ function parseA2ACommand(args) {
         return { kind: "a2a.identity", ...(identityFile ? { identityFile } : {}), ...(json ? { json: true } : {}) };
     }
     if (sub === "message") {
-        const usageText = "Usage: ouro a2a message --to <card-url> --text <text> [--context <id>] [--identity-file <path>] [--json]";
+        const usageText = "Usage: ouro a2a message --to <card-url> --text <text> [--context <id>] [--delegated] [--identity-file <path>] [--json]";
         let to;
         let text;
         let conversationId;
         let identityFile;
         let json = false;
+        let delegated = false;
         for (let i = 0; i < rest.length; i += 1) {
             if (rest[i] === "--to" && rest[i + 1]) {
                 to = rest[++i];
                 continue;
             }
+            if (rest[i] === "--delegated") {
+                delegated = true;
+                continue;
+            }
             if (rest[i] === "--text" && rest[i + 1]) {
                 text = rest[++i];
                 continue;
@@ -1543,7 +1548,7 @@ function parseA2ACommand(args) {
         }
         if (!to || !text)
             throw new Error(usageText);
-        return { kind: "a2a.message", to, text, ...(conversationId ? { conversationId } : {}), ...(identityFile ? { identityFile } : {}), ...(json ? { json: true } : {}) };
+        return { kind: "a2a.message", to, text, ...(conversationId ? { conversationId } : {}), ...(delegated ? { delegated: true } : {}), ...(identityFile ? { identityFile } : {}), ...(json ? { json: true } : {}) };
     }
     if (sub === "onboard") {
         let cardUrl;

package/dist/heart/daemon/sanctuary-acceptance-harness.js

@@ -60,7 +60,7 @@ function exactSanctuaryContainmentProfileBoundaries(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const boundaries = value;
-    const versions = { "sanctuary-owner": 10, "sanctuary-household": 5, "sanctuary-event": 4 };
+    const versions = { "sanctuary-owner": 11, "sanctuary-household": 5, "sanctuary-event": 4 };
     if (!(0, node_util_1.isDeepStrictEqual)(Object.keys(boundaries).sort(), Object.keys(versions).sort()))
         return false;
     const packageRoot = path.resolve(__dirname, "../../../deploy/unraid/sanctuary.ouro");

package/dist/heart/steward-policy.js

@@ -77,6 +77,10 @@ function ownerAuthorization(value) {
         && value.profileId === "sanctuary-owner" && positiveInteger(value.profileVersion)
         && text(value.requestId) && text(value.sessionKey) && text(value.receiptId);
 }
+function delegation(value) {
+    return record(value) && exactKeys(value, ["delegateFriendId", "delegateDid", "noticeId"])
+        && text(value.delegateFriendId) && text(value.delegateDid) && text(value.noticeId);
+}
 function desiredEntry(value, version) {
     return record(value) && exactKeys(value, ["value", "provenance", "version", "source"], ["expiresAt"])
         && text(value.value) && text(value.source) && positiveInteger(value.version) && value.version <= version
@@ -126,9 +130,10 @@ function operationIdentity(issuer, event, requestId, kind, key) {
     return JSON.stringify([issuer, event, requestId, kind, key]);
 }
 function auditRow(value) {
-    if (!record(value) || !exactKeys(value, ["schemaVersion", "transactionId", "precedingBytesSha256", "mutationKind", "key", "mutationFingerprint", "affectedKeyResult", "affectedKeyResultSha256", "issuer", "authorizingSessionEvent", "authorization", "preimage", "preimageVersion", "preimageSha256", "postimage", "postimageVersion", "postimageSha256", "at"])
+    if (!record(value) || !exactKeys(value, ["schemaVersion", "transactionId", "precedingBytesSha256", "mutationKind", "key", "mutationFingerprint", "affectedKeyResult", "affectedKeyResultSha256", "issuer", "authorizingSessionEvent", "authorization", "preimage", "preimageVersion", "preimageSha256", "postimage", "postimageVersion", "postimageSha256", "at"], ["delegatedVia"])
         || value.schemaVersion !== 2 || (value.mutationKind !== "set_desired_state" && value.mutationKind !== "grant_routine_action")
         || !text(value.key) || !text(value.issuer) || !text(value.authorizingSessionEvent) || !ownerAuthorization(value.authorization)
+        || (value.delegatedVia !== undefined && !delegation(value.delegatedVia))
         || typeof value.preimage !== "string" || typeof value.postimage !== "string" || !canonicalTime(value.at))
         return false;
     const before = policyImage(value.preimage);
@@ -315,6 +320,8 @@ function updateStewardPolicy(agentRoot, input) {
     const authorization = input.actor.authorization;
     if (!ownerAuthorization(authorization))
         throw new Error("steward policy mutation requires current owner authorization");
+    if (input.actor.delegatedVia !== undefined && !delegation(input.actor.delegatedVia))
+        throw new Error("steward policy delegation is invalid");
     if (input.mutation.kind !== "set_desired_state" && input.mutation.kind !== "grant_routine_action")
         throw new Error("steward policy mutation kind is invalid");
     return (0, session_transaction_1.withImmediateSessionTurnLease)(policyPath(agentRoot), (lease) => {
@@ -382,6 +389,7 @@ function updateStewardPolicy(agentRoot, input) {
             schemaVersion: 2, transactionId: sha256(JSON.stringify([identity, fingerprint])), precedingBytesSha256: sha256(snapshot.auditBytes),
             mutationKind: input.mutation.kind, key, mutationFingerprint: fingerprint, affectedKeyResult, affectedKeyResultSha256: sha256(JSON.stringify(affectedKeyResult)),
             issuer, authorizingSessionEvent, authorization: { ...authorization },
+            ...(input.actor.delegatedVia ? { delegatedVia: { ...input.actor.delegatedVia } } : {}),
             preimage: snapshot.bytes, preimageVersion: current.version, preimageSha256: snapshot.revision,
             postimage, postimageVersion: version, postimageSha256: sha256(postimage), at: now,
         };

package/dist/repertoire/tools-steward-policy.js

@@ -55,11 +55,24 @@ exports.stewardPolicyToolDefinition = {
         const { friendId, trustLevel, sessionEventId } = actor;
         const { profileId, requestId } = relationship;
         const sessionKey = ctx.currentSession?.key;
+        const delegated = ctx.delegatedCommand;
+        // Two ways to hold owner authority: the owner's own Telegram turn, or a delegated
+        // command the A2A server admitted (grant checked, owner already notified).
+        const sessionMatches = () => delegated
+            ? ctx.currentSession?.channel === "a2a" && ctx.delegatedCommand === delegated
+                && friendId === delegated.principalFriendId && requestId === delegated.commandId
+                && sessionEventId === `a2a-delegated:${delegated.commandId}`
+            : ctx.currentSession?.friendId === friendId && ctx.currentSession.channel === "telegram";
         if (trustLevel !== "family" || profileId !== "sanctuary-owner" || typeof requestId !== "string" || !requestId.trim()
             || typeof sessionKey !== "string" || !sessionKey.trim() || !sessionEventId.trim()
-            || ctx.currentSession?.friendId !== friendId || ctx.currentSession.channel !== "telegram" || ctx.currentExternalEvent) {
-            throw new Error("steward policy mutation requires a current authenticated owner Telegram request and session");
+            || !sessionMatches() || ctx.currentExternalEvent) {
+            throw new Error(delegated
+                ? "steward policy mutation requires a current admitted delegated owner command"
+                : "steward policy mutation requires a current authenticated owner Telegram request and session");
         }
+        const sourceFor = (raw) => delegated
+            ? `${delegated.principalName} via ${delegated.delegateName} (delegated)${raw?.trim() ? `: ${raw.trim()}` : ""}`
+            : raw ?? "";
         const expectedVersion = args.expectedVersion === undefined ? undefined : Number(args.expectedVersion);
         if (expectedVersion !== undefined && (!Number.isSafeInteger(expectedVersion) || expectedVersion < 0))
             throw new Error("expectedVersion must be a nonnegative integer");
@@ -67,7 +80,7 @@ exports.stewardPolicyToolDefinition = {
         if (args.action === "set_desired_state") {
             if (args.provenance !== "stated" && args.provenance !== "observed" && args.provenance !== "default")
                 throw new Error("desired state provenance is invalid");
-            mutation = { kind: "set_desired_state", key: args.key ?? "", value: args.value ?? "", provenance: args.provenance, source: args.source ?? "", ...(args.expiresAt ? { expiresAt: args.expiresAt } : {}) };
+            mutation = { kind: "set_desired_state", key: args.key ?? "", value: args.value ?? "", provenance: args.provenance, source: sourceFor(args.source), ...(args.expiresAt ? { expiresAt: args.expiresAt } : {}) };
         }
         else if (args.action === "grant_routine_action") {
             if (args.provenance !== "stated" && args.provenance !== "installed_explicit_policy")
@@ -101,12 +114,16 @@ exports.stewardPolicyToolDefinition = {
             }
             if (ctx.relationshipAuthorization !== relationship || relationship.profileId !== profileId || relationship.requestId !== requestId
                 || relationship.actor?.friendId !== friendId || relationship.actor.trustLevel !== trustLevel || relationship.actor.sessionEventId !== sessionEventId
-                || ctx.currentSession?.friendId !== friendId || ctx.currentSession.key !== sessionKey || ctx.currentSession.channel !== "telegram" || ctx.currentExternalEvent) {
+                || ctx.currentSession?.key !== sessionKey || !sessionMatches() || ctx.currentExternalEvent) {
                 throw new Error("steward policy owner authorization or session changed before mutation");
             }
             const result = (0, steward_policy_1.updateStewardPolicy)(agentRoot, {
                 expectedVersion: expectedVersion ?? (0, steward_policy_1.readStewardPolicy)(agentRoot).version,
-                actor: { friendId, trustLevel, sessionEventId, authorization: { profileId, requestId, sessionKey, receiptId: authorization.receiptId, profileVersion: authorization.profileVersion } },
+                actor: {
+                    friendId, trustLevel, sessionEventId,
+                    authorization: { profileId, requestId, sessionKey, receiptId: authorization.receiptId, profileVersion: authorization.profileVersion },
+                    ...(delegated ? { delegatedVia: { delegateFriendId: delegated.delegateFriendId, delegateDid: delegated.delegateDid, noticeId: delegated.noticeId } } : {}),
+                },
                 mutation,
             });
             (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.steward_policy_tool_call", message: "updated steward policy", meta: { action: args.action } });

package/dist/repertoire/tools.js

@@ -73,6 +73,7 @@ const SANCTUARY_RELATIONSHIP_BASE_TOOLS = new Set([
 exports.SANCTUARY_MCP_PROVIDED_TOOLS = new Set([
     "media_search", "media_request", "media_request_status",
     "media_diagnose_and_fix", "media_chain_health", "media_play_or_resolve",
+    "media_search_now", "media_blocklist_stalled",
 ]);
 /** Channels a Sanctuary turn can arrive on from the host itself, not from a remote party. */
 const SANCTUARY_LOCAL_CHANNELS = new Set(["inner", "cli", "mcp"]);

package/dist/senses/a2a-entry.js

@@ -95,6 +95,17 @@ Promise.all([
     await startA2AServer({
         agentName,
         identity,
+        // The Butler accepts delegated commands from explicitly granted peers; each
+        // one is announced in the owner's Telegram chat before it runs.
+        ...(agentName === "sanctuary" ? {
+            delegation: {
+                principalProfileId: "sanctuary-owner",
+                notifyPrincipal: async (notice) => {
+                    const { sendTelegramOwnerNotice } = await Promise.resolve().then(() => __importStar(require("./telegram")));
+                    await sendTelegramOwnerNotice(agentName, { ...notice, signal: AbortSignal.timeout(30_000) });
+                },
+            },
+        } : {}),
         ...(argValue("--host") ? { host: argValue("--host") } : {}),
         ...(Number.isInteger(port) ? { port } : {}),
         ...(argValue("--base-url") ? { baseUrl: argValue("--base-url") } : {}),

package/dist/senses/telegram.js

@@ -51,6 +51,7 @@ exports.loadTelegramSenseCredentials = loadTelegramSenseCredentials;
 exports.createProductionTelegramRelationshipComposition = createProductionTelegramRelationshipComposition;
 exports.startTelegramSenseApp = startTelegramSenseApp;
 exports.sendTelegramExternalEventDecision = sendTelegramExternalEventDecision;
+exports.sendTelegramOwnerNotice = sendTelegramOwnerNotice;
 exports.createProactiveRepetitionGuard = createProactiveRepetitionGuard;
 exports.withTelegramTypingIndicator = withTelegramTypingIndicator;
 exports.sendTelegramAwaitFollowUp = sendTelegramAwaitFollowUp;
@@ -1917,6 +1918,16 @@ function createTelegramSenseApp(options) {
         async sendAwaitFollowUp(request) {
             return runWithAcceptanceAuditOwner(() => deliverAwaitFollowUp(request));
         },
+        async sendOwnerNotice(input) {
+            const noticeId = requiredText(input.noticeId, "owner notice id");
+            if (Buffer.byteLength(noticeId) > 512)
+                throw new Error("Telegram owner notice id is invalid");
+            await runWithAcceptanceAuditOwner(async () => {
+                const effect = await deliverButlerEffect(requiredText(input.text, "owner notice"), `owner-notice:${noticeId}`, input.signal);
+                const sessionPath = (0, shared_turn_1.getSenseSessionPath)(options.agentName, configuredOwnerFriendId, "telegram", configuredOwnerSessionKey, agentRoot);
+                await recordAcceptedEffects(sessionPath, [effect]);
+            });
+        },
         stop() {
             if (stopPromise)
                 return stopPromise;
@@ -2252,6 +2263,15 @@ async function sendTelegramExternalEventDecision(agentName, input) {
         await app.stop();
     }
 }
+async function sendTelegramOwnerNotice(agentName, input) {
+    const app = await startTelegramSenseApp(agentName);
+    try {
+        await app.sendOwnerNotice(input);
+    }
+    finally {
+        await app.stop();
+    }
+}
 /**
  * Suppresses a proactive message that repeats one sent recently.
  *

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.847",
+  "version": "0.1.0-alpha.849",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.847",
+      "version": "0.1.0-alpha.849",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",
@@ -18,7 +18,7 @@
         "@microsoft/teams.common": "2.0.11",
         "@microsoft/teams.dev": "2.0.11",
         "@microsoft/teams.graph": "2.0.11",
-        "@ouro.bot/friends": "0.1.0-alpha.12",
+        "@ouro.bot/friends": "0.1.0-alpha.14",
         "@types/react": "^17.0.91",
         "@types/ws": "^8.18.1",
         "ajv": "^8.20.0",
@@ -1357,9 +1357,9 @@
       }
     },
     "node_modules/@ouro.bot/friends": {
-      "version": "0.1.0-alpha.12",
-      "resolved": "https://registry.npmjs.org/@ouro.bot/friends/-/friends-0.1.0-alpha.12.tgz",
-      "integrity": "sha512-pzV2PQvi1eUkcog3iDDHIvwSBDwpsB8/ykrJpoZQ/wB84qQa0xGKJSDnTt45r8H4j/68Cc5LU6vcjlwI5GG47g==",
+      "version": "0.1.0-alpha.14",
+      "resolved": "https://registry.npmjs.org/@ouro.bot/friends/-/friends-0.1.0-alpha.14.tgz",
+      "integrity": "sha512-ikb633DfL8Mz4jgNJtIoMZ9F3hqYngc9o8VzVb9dSlMdwp15bvlVXUvnF/uWqQ7gzmX0GeTx54LQn8AtYFOmsg==",
       "license": "Apache-2.0",
       "dependencies": {
         "libsodium-wrappers": "0.8.4"
@@ -2257,14 +2257,14 @@
       }
     },
     "node_modules/@zone-eu/mailsplit": {
-      "version": "5.4.16",
-      "resolved": "https://registry.npmjs.org/@zone-eu/mailsplit/-/mailsplit-5.4.16.tgz",
-      "integrity": "sha512-zQ9iXvlT3Wi/hazeC1MdI4rQc1UJwJ6IQ6QzSZ5KDxLZZWQSazWLOzImLFluXadKShJ9WJvI1xH+AyVS8b9azg==",
+      "version": "5.4.19",
+      "resolved": "https://registry.npmjs.org/@zone-eu/mailsplit/-/mailsplit-5.4.19.tgz",
+      "integrity": "sha512-nDWzw+X3tqfwd7DpDThAjg3KqtrNA6bG2gkrf6m2j1JBaGyyKAZzu1TguzB4GEco+HYpXAbXZ7kbl4Sn8H1vXw==",
       "license": "(MIT OR EUPL-1.1+)",
       "dependencies": {
-        "libbase64": "1.3.0",
-        "libmime": "5.4.3",
-        "libqp": "2.1.1"
+        "libbase64": "1.3.1",
+        "libmime": "5.4.6",
+        "libqp": "2.1.2"
       }
     },
     "node_modules/accepts": {
@@ -2460,13 +2460,13 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.18.1",
-      "resolved": "https://ms-feed-25.pkgs.visualstudio.com/1es-public/_packaging/npm-public/npm/registry/axios/-/axios-1.18.1.tgz",
-      "integrity": "sha1-1j+YY7zYk4gVyG+eKr04AYnZbf4=",
+      "version": "1.20.0",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.20.0.tgz",
+      "integrity": "sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",
-        "form-data": "^4.0.5",
+        "form-data": "^4.0.6",
         "https-proxy-agent": "^5.0.1",
         "proxy-from-env": "^2.1.0"
       }
@@ -2621,9 +2621,9 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "5.0.9",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.9.tgz",
-      "integrity": "sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==",
+      "version": "5.0.12",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.12.tgz",
+      "integrity": "sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -2681,12 +2681,6 @@
       "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
       "license": "BSD-3-Clause"
     },
-    "node_modules/buffer-from": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
-      "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
-      "license": "MIT"
-    },
     "node_modules/bundle-name": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/bundle-name/-/bundle-name-4.1.0.tgz",
@@ -2975,35 +2969,6 @@
         "node": ">=20"
       }
     },
-    "node_modules/concat-stream": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-2.0.0.tgz",
-      "integrity": "sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==",
-      "engines": [
-        "node >= 6.0"
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "buffer-from": "^1.0.0",
-        "inherits": "^2.0.3",
-        "readable-stream": "^3.0.2",
-        "typedarray": "^0.0.6"
-      }
-    },
-    "node_modules/concat-stream/node_modules/readable-stream": {
-      "version": "3.6.2",
-      "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
-      "integrity": "sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==",
-      "license": "MIT",
-      "dependencies": {
-        "inherits": "^2.0.3",
-        "string_decoder": "^1.1.1",
-        "util-deprecate": "^1.0.1"
-      },
-      "engines": {
-        "node": ">= 6"
-      }
-    },
     "node_modules/content-disposition": {
       "version": "1.1.0",
       "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz",
@@ -3567,9 +3532,9 @@
       }
     },
     "node_modules/encoding-japanese": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/encoding-japanese/-/encoding-japanese-2.3.0.tgz",
-      "integrity": "sha512-eQyh1vzHz13DUkZcJO+0IOAoKXRQwKV5IBffeuYsWZyRLGiSzfzXObCqWvqFXdX0UU8qOk+lBXbkUhMCpdJe4Q==",
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/encoding-japanese/-/encoding-japanese-2.4.0.tgz",
+      "integrity": "sha512-PE0KjlsDy9JSsoU4C2Q8NXb1kC4c+bZRac9ZvHXUE4q1Ht63gScKMdEy9jst9+Fi3M4eDkqzkEhBZvix4blP2A==",
       "license": "MIT",
       "engines": {
         "node": ">=18.0.0"
@@ -4015,9 +3980,9 @@
       "license": "MIT"
     },
     "node_modules/fast-uri": {
-      "version": "3.1.7",
-      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz",
-      "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==",
+      "version": "3.1.8",
+      "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.8.tgz",
+      "integrity": "sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==",
       "funding": [
         {
           "type": "github",
@@ -5360,27 +5325,27 @@
       }
     },
     "node_modules/libbase64": {
-      "version": "1.3.0",
-      "resolved": "https://registry.npmjs.org/libbase64/-/libbase64-1.3.0.tgz",
-      "integrity": "sha512-GgOXd0Eo6phYgh0DJtjQ2tO8dc0IVINtZJeARPeiIJqge+HdsWSuaDTe8ztQ7j/cONByDZ3zeB325AHiv5O0dg==",
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/libbase64/-/libbase64-1.3.1.tgz",
+      "integrity": "sha512-1b9LXEjEtXj35YKOR9RqNKBootlb37qbIzmqiw4MsP52cjOsfR6i/AYU1Y8qN4kV2TJQmLJ5aiXn45qI6h+Szw==",
       "license": "MIT"
     },
     "node_modules/libmime": {
-      "version": "5.4.3",
-      "resolved": "https://registry.npmjs.org/libmime/-/libmime-5.4.3.tgz",
-      "integrity": "sha512-di9BoDabBUMqjeD/wGj+hHpSgdqAph5ui7w6OdY6NpzU6O6VFLQsMOg9tqCjm/zf9OHzAM9EZxSOF7uIb8O8Hw==",
+      "version": "5.4.6",
+      "resolved": "https://registry.npmjs.org/libmime/-/libmime-5.4.6.tgz",
+      "integrity": "sha512-Cgx1vHd76GTwDaLNsl0K44CjNFfhkX/1bMcoruoWr8Ugcl0/zMw7x/8NpZERIOcpGyzlQo10tOEw9goGsv2Wlg==",
       "license": "MIT",
       "dependencies": {
-        "encoding-japanese": "2.3.0",
+        "encoding-japanese": "2.4.0",
         "iconv-lite": "0.7.3",
-        "libbase64": "1.3.0",
-        "libqp": "2.1.1"
+        "libbase64": "1.3.1",
+        "libqp": "2.1.2"
       }
     },
     "node_modules/libqp": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/libqp/-/libqp-2.1.1.tgz",
-      "integrity": "sha512-0Wd+GPz1O134cP62YU2GTOPNA7Qgl09XwCqM5zpBv87ERCXdfDtyKXvV7c9U22yWJh44QZqBocFnXN11K96qow==",
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/libqp/-/libqp-2.1.2.tgz",
+      "integrity": "sha512-rp+U80tl9Os4K7GnVbPzPRmghPu6eqB8rcF+ontvNAnoga0JhMFG/bkTD/reC8yoznKMgOc5/ttZHJasiWeFPw==",
       "license": "MIT"
     },
     "node_modules/libsodium": {
@@ -5869,19 +5834,19 @@
       }
     },
     "node_modules/mailparser": {
-      "version": "3.9.23",
-      "resolved": "https://registry.npmjs.org/mailparser/-/mailparser-3.9.23.tgz",
-      "integrity": "sha512-5jpsKltHt9oudhMu6mXxiwWMWV/CILfly+m9xhKiKW6cdmfOVvcAZ/NCuChV6QlADJqx1e5E2hwDAkP7lTP+Lg==",
+      "version": "3.9.33",
+      "resolved": "https://registry.npmjs.org/mailparser/-/mailparser-3.9.33.tgz",
+      "integrity": "sha512-+ZYhApN4f7B8+jokb7VZeml8lxYHixVJ3tJTB5iPG9/MJpy8YmBHGdy+AWJ9dmtUX6t0xlu4rxwj1b7eWCvbDA==",
       "license": "MIT",
       "dependencies": {
-        "@zone-eu/mailsplit": "5.4.16",
-        "encoding-japanese": "2.3.0",
+        "@zone-eu/mailsplit": "5.4.19",
+        "encoding-japanese": "2.4.0",
         "he": "1.2.0",
         "html-to-text": "10.0.1",
         "iconv-lite": "0.7.3",
-        "libmime": "5.4.3",
+        "libmime": "5.4.6",
         "linkify-it": "5.0.2",
-        "nodemailer": "10.0.1",
+        "nodemailer": "10.0.13",
         "punycode.js": "2.3.1",
         "tlds": "1.261.0"
       },
@@ -6029,14 +5994,13 @@
       "license": "MIT"
     },
     "node_modules/multer": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/multer/-/multer-2.3.0.tgz",
-      "integrity": "sha512-cjNbm3sttszgZeGfJR124D+jFEfkXCVAsoPBmFn9X7UxmDSFHWqE2CoEj0vrmSpuAFnqWR1Szcm9QTsiHr60Xw==",
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-2.4.0.tgz",
+      "integrity": "sha512-7dqa0ZcFfzbefdTuIkzOSMvZWC0J7FLqBOjJUZvDCXShIURWKxAyTT1wHhnE5q19c7jOJf43IYYKjBmZVZmvhg==",
       "license": "MIT",
       "dependencies": {
         "append-field": "^1.0.0",
         "busboy": "^1.6.0",
-        "concat-stream": "^2.0.0",
         "type-is": "^1.6.18"
       },
       "engines": {
@@ -6171,9 +6135,9 @@
       }
     },
     "node_modules/nodemailer": {
-      "version": "10.0.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.1.tgz",
-      "integrity": "sha512-c+gU9cL9HLDax3vjxL88kW+6NOgdtEUWaZ+AUtxdJR6LLhf0kGdCLExof7yiKW7zdO9EfXCSIgmhGyFmUM0mYQ==",
+      "version": "10.0.13",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-10.0.13.tgz",
+      "integrity": "sha512-SzG86OlvcW/NNhUFC6uROMwRTL4n7MswfQqC/T8mhkmnY1YVa23zUEMYi4ijSeXSl9GLz9ZeTJDUatEDuY5FeQ==",
       "license": "MIT-0",
       "engines": {
         "node": ">=20.0.0"
@@ -7177,13 +7141,13 @@
       }
     },
     "node_modules/smtp-server": {
-      "version": "3.19.9",
-      "resolved": "https://registry.npmjs.org/smtp-server/-/smtp-server-3.19.9.tgz",
-      "integrity": "sha512-ljndWZ9km1qI/1fUj+VTQwG0ts5NRX+Lb95NPttoUZRvaOMUSPKdph9YoHpxpQfOomafzWvNHJcZkFL2v6OXYw==",
+      "version": "3.19.16",
+      "resolved": "https://registry.npmjs.org/smtp-server/-/smtp-server-3.19.16.tgz",
+      "integrity": "sha512-EAO7FiexdU+s/IiW92MIRDSOaVTGF2skmXEpSvl+A+NDMDLnv+NnoYpmEh+7kmARU1F1NTTe3am35IBMEEnN1w==",
       "license": "MIT-0",
       "dependencies": {
         "ipv6-normalize": "1.0.1",
-        "nodemailer": "10.0.1",
+        "nodemailer": "10.0.13",
         "punycode.js": "2.3.1"
       },
       "engines": {
@@ -7607,12 +7571,6 @@
         "url": "https://opencollective.com/express"
       }
     },
-    "node_modules/typedarray": {
-      "version": "0.0.6",
-      "resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
-      "integrity": "sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==",
-      "license": "MIT"
-    },
     "node_modules/typescript": {
       "version": "5.9.3",
       "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
@@ -7658,9 +7616,9 @@
       "license": "MIT"
     },
     "node_modules/undici": {
-      "version": "7.29.0",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.0.tgz",
-      "integrity": "sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==",
+      "version": "7.30.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.30.0.tgz",
+      "integrity": "sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==",
       "dev": true,
       "license": "MIT",
       "engines": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.847",
+  "version": "0.1.0-alpha.849",
   "engines": {
     "node": ">=22"
   },
@@ -65,7 +65,7 @@
     "@microsoft/teams.common": "2.0.11",
     "@microsoft/teams.dev": "2.0.11",
     "@microsoft/teams.graph": "2.0.11",
-    "@ouro.bot/friends": "0.1.0-alpha.12",
+    "@ouro.bot/friends": "0.1.0-alpha.14",
     "@types/react": "^17.0.91",
     "@types/ws": "^8.18.1",
     "ajv": "^8.20.0",
@@ -100,7 +100,7 @@
   "overrides": {
     "deepmerge-ts": "^8.0.1",
     "form-data": "4.0.6",
-    "multer": "2.3.0",
+    "multer": "2.4.0",
     "tmp": "0.2.7",
     "@microsoft/teams.apps": {
       "@azure/msal-node": "^5.2.2"