@ouro.bot/cli 0.1.0-alpha.849 → 0.1.0-alpha.850

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/changelog.json CHANGED
@@ -1,6 +1,13 @@
1
1
  {
2
2
  "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
3
3
  "versions": [
4
+ {
5
+ "version": "0.1.0-alpha.850",
6
+ "changes": [
7
+ "Delegated A2A commands can now change the steward policy: the admitted owner relationship carries its request id, which the owner gate requires (the live Butler admitted a delegated command on 849 and then refused every policy write).",
8
+ "ouro a2a message lists --delegated in the top-level usage."
9
+ ]
10
+ },
4
11
  {
5
12
  "version": "0.1.0-alpha.849",
6
13
  "changes": [
@@ -1,5 +1,5 @@
1
1
  {
2
- "runtimeVersion": "0.1.0-alpha.849",
2
+ "runtimeVersion": "0.1.0-alpha.850",
3
3
  "bundleSchemaVersion": 3,
4
4
  "lastUpdated": "2026-09-03T00:00:00.000Z"
5
5
  }
@@ -1,7 +1,7 @@
1
1
  <?xml version="1.0"?>
2
2
  <Container version="2">
3
3
  <Name>ouro-butler</Name>
4
- <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.849</Repository>
4
+ <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.850</Repository>
5
5
  <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
6
6
  <Network>host</Network>
7
7
  <Shell>sh</Shell>
@@ -52,13 +52,19 @@ async function admitDelegatedCommand(input) {
52
52
  catch {
53
53
  return refuse("notice_failed");
54
54
  }
55
- const relationship = (0, relationship_authorization_1.createRelationshipAuthorizationEvaluator)({
56
- friend: principal,
57
- registry,
55
+ // Owner-gated tools (steward policy) bind the mutation to `requestId` on the tool
56
+ // context's relationship, as the Telegram owner turn does; the evaluator alone
57
+ // only scopes its receipts by it, so carry it on the relationship itself.
58
+ const relationship = {
59
+ ...(0, relationship_authorization_1.createRelationshipAuthorizationEvaluator)({
60
+ friend: principal,
61
+ registry,
62
+ requestId: input.commandId,
63
+ requestPhase: "inbound",
64
+ sessionEventId: `a2a-delegated:${input.commandId}`,
65
+ }),
58
66
  requestId: input.commandId,
59
- requestPhase: "inbound",
60
- sessionEventId: `a2a-delegated:${input.commandId}`,
61
- });
67
+ };
62
68
  const context = {
63
69
  principalFriendId: principal.id,
64
70
  principalName: principal.name,
@@ -153,7 +153,7 @@ function usage() {
153
153
  " ouro a2a onboard [--agent <name>] (--card-url <url>|--did <did:key> --name <name>) [--trust <level>] [--name <name>]",
154
154
  " ouro a2a serve [--agent <name>] [--host <host>] [--port <port>] [--base-url <url>] [--path <path>]",
155
155
  " ouro a2a identity [--identity-file <path>] [--json]",
156
- " ouro a2a message --to <card-url> --text <text> [--context <id>] [--identity-file <path>] [--json]",
156
+ " ouro a2a message --to <card-url> --text <text> [--context <id>] [--delegated] [--identity-file <path>] [--json]",
157
157
  " ouro whoami [--agent <name>]",
158
158
  " ouro session list [--agent <name>]",
159
159
  " ouro mcp list",
@@ -1,12 +1,12 @@
1
1
  {
2
2
  "name": "@ouro.bot/cli",
3
- "version": "0.1.0-alpha.849",
3
+ "version": "0.1.0-alpha.850",
4
4
  "lockfileVersion": 3,
5
5
  "requires": true,
6
6
  "packages": {
7
7
  "": {
8
8
  "name": "@ouro.bot/cli",
9
- "version": "0.1.0-alpha.849",
9
+ "version": "0.1.0-alpha.850",
10
10
  "dependencies": {
11
11
  "@anthropic-ai/sdk": "^0.78.0",
12
12
  "@azure/identity": "^4.13.0",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ouro.bot/cli",
3
- "version": "0.1.0-alpha.849",
3
+ "version": "0.1.0-alpha.850",
4
4
  "engines": {
5
5
  "node": ">=22"
6
6
  },