@ouro.bot/cli 0.1.0-alpha.861 → 0.1.0-alpha.862

package/changelog.json

@@ -1,6 +1,15 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.862",
+      "changes": [
+        "Sanctuary tool context is now attached to every private-runtime turn of the sanctuary agent (await, habit, instinct, external-event), so await turns can observe the download queue.",
+        "The missing-Sanctuary-context result now uses code tool_context_missing and says it is a harness wiring gap, not a runtime outage.",
+        "restart_runtime now refuses to restart the daemon from autonomous turns (await, habit, external-event, instinct, scheduler) and enforces a persisted 6-hour cooldown, started only after the daemon accepts a restart.",
+        "resolve_await now constrains verdict to \"yes\" or \"no\", says that still pending is \"no\", and returns an explicit error naming the bad value and what to send."
+      ]
+    },
     {
       "version": "0.1.0-alpha.861",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.861",
+  "runtimeVersion": "0.1.0-alpha.862",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.861</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.862</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/a2a/server.js

@@ -165,7 +165,7 @@ async function defaultTurnRunner(input) {
         // every Unraid read answered "Sanctuary runtime is unavailable"). The relationship
         // profile still decides which of those tools the peer may call.
         toolContext: {
-            ...(input.agentName === "sanctuary" ? (0, sanctuary_runtime_1.createSanctuaryToolContext)(input.agentName) : {}),
+            ...((0, sanctuary_runtime_1.isSanctuaryAgent)(input.agentName) ? (0, sanctuary_runtime_1.createSanctuaryToolContext)(input.agentName) : {}),
             ...(input.relationshipAuthorization ? { relationshipAuthorization: input.relationshipAuthorization } : {}),
             ...(input.delegatedCommand ? { delegatedCommand: input.delegatedCommand } : {}),
         },

package/dist/repertoire/tools-awaiting.js

@@ -243,7 +243,7 @@ async function resolveAwaitTool(name, verdict, observation, agentRoot, agentName
         return JSON.stringify({ error: `await "${name}" is not pending (status: ${existing.status})` });
     }
     if (verdict !== "yes" && verdict !== "no") {
-        return JSON.stringify({ error: "verdict must be 'yes' or 'no'" });
+        return JSON.stringify({ error: `verdict must be exactly "yes" or "no" (got ${JSON.stringify(verdict)}); use "no" with an observation while still waiting` });
     }
     if (!observation || !observation.trim()) {
         return JSON.stringify({ error: "observation is required" });
@@ -521,12 +521,12 @@ exports.awaitingToolDefinitions = [
             type: "function",
             function: {
                 name: "resolve_await",
-                description: "Resolve a pending await with a verdict. verdict='yes' archives and fires the alert. verdict='no' records the observation and continues polling.",
+                description: "Resolve a pending await with a verdict. verdict='yes' archives and fires the alert. verdict='no' records the observation and continues polling; still pending is always 'no'.",
                 parameters: {
                     type: "object",
                     properties: {
                         name: { type: "string", description: "Await name (filename stem)." },
-                        verdict: { type: "string", description: "'yes' if the condition is met, 'no' otherwise." },
+                        verdict: { type: "string", enum: ["yes", "no"], description: "Exactly 'yes' if the condition is met. Exactly 'no' for anything else, including still pending, not yet, or unable to tell: send 'no' with an observation and polling continues." },
                         observation: { type: "string", description: "One-line summary of what I saw this tick." },
                     },
                     required: ["name", "verdict", "observation"],

package/dist/repertoire/tools-runtime.js

@@ -1,14 +1,99 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runtimeToolDefinitions = void 0;
+exports.runtimeToolDefinitions = exports.RESTART_COOLDOWN_MS = void 0;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const node_crypto_1 = require("node:crypto");
 const identity_1 = require("../heart/identity");
 const runtime_1 = require("../nerves/runtime");
 const socket_client_1 = require("../heart/daemon/socket-client");
-async function restartRuntime(args, agentName) {
+exports.RESTART_COOLDOWN_MS = 6 * 60 * 60 * 1000;
+function restartCooldownPath(agentName) {
+    return path.join((0, identity_1.getAgentStateRoot)(agentName), "daemon", "restart-runtime-cooldown.json");
+}
+function readLastRestartMs(agentName) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(restartCooldownPath(agentName), "utf8"));
+        return typeof parsed.requestedAtMs === "number" ? parsed.requestedAtMs : null;
+    }
+    catch {
+        return null;
+    }
+}
+// The cooldown is stored per agent, but the restart it limits is daemon-wide.
+function recordRestart(agentName, nowMs) {
+    try {
+        const file = restartCooldownPath(agentName);
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        const temporary = `${file}.tmp-${process.pid}-${(0, node_crypto_1.randomUUID)()}`;
+        fs.writeFileSync(temporary, JSON.stringify({ requestedAtMs: nowMs }), "utf8");
+        fs.renameSync(temporary, file);
+    }
+    catch {
+        // A failed cooldown write must not block an otherwise allowed restart.
+    }
+}
+async function restartRuntime(args, agentName, ctx) {
     if (typeof args.reason !== "string" || args.reason.trim().length === 0) {
         return JSON.stringify({ error: "reason is required (one-line audit string)" });
     }
     const reason = args.reason.trim();
+    if (ctx?.autonomousTurnKind) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "repertoire",
+            event: "repertoire.runtime_restart_refused",
+            message: "restart_runtime refused in an autonomous turn",
+            meta: { agent: agentName, turnKind: ctx.autonomousTurnKind, reason },
+        });
+        return JSON.stringify({
+            refused: true,
+            code: "autonomous_turn_restart_refused",
+            error: `restart_runtime is not allowed from an autonomous ${ctx.autonomousTurnKind} turn: restarting the daemon kills in-flight work for every agent and habit. A tool error or missing capability is not evidence of a dead runtime. Record or report the problem (note it, surface it to the owner) instead of restarting.`,
+        });
+    }
+    const lastMs = readLastRestartMs(agentName);
+    const nowMs = Date.now();
+    if (lastMs !== null && lastMs <= nowMs && nowMs - lastMs < exports.RESTART_COOLDOWN_MS) {
+        return JSON.stringify({
+            refused: true,
+            code: "restart_cooldown",
+            error: `a restart was already requested ${Math.round((nowMs - lastMs) / 60000)} minutes ago; agent-requested restarts are limited to one per 6 hours. Record or report the problem instead.`,
+            retryAfterMs: exports.RESTART_COOLDOWN_MS - (nowMs - lastMs),
+        });
+    }
     (0, runtime_1.emitNervesEvent)({
         component: "repertoire",
         event: "repertoire.runtime_restart_requested",
@@ -21,6 +106,9 @@ async function restartRuntime(args, agentName) {
             reason,
             requestedBy: agentName,
         });
+        // Only a daemon that accepted the command starts the cooldown; a failed attempt must not lock the owner out.
+        if (response.ok)
+            recordRestart(agentName, nowMs);
         return JSON.stringify({
             requested: true,
             reason,
@@ -110,9 +198,9 @@ exports.runtimeToolDefinitions = [
                 },
             },
         },
-        handler: async (args) => {
+        handler: async (args, ctx) => {
             const agentName = (0, identity_1.getAgentName)();
-            return restartRuntime({ reason: args.reason }, agentName);
+            return restartRuntime({ reason: args.reason }, agentName, ctx);
         },
         riskProfile: { mutates: "external_side_effect", risk: "high", reason: "restarts the hosting runtime" },
     },

package/dist/repertoire/tools-unraid.js

@@ -336,7 +336,7 @@ function createUnraidReadTools(client) {
 }
 const emptyParameters = { type: "object", properties: {}, additionalProperties: false };
 function missingRuntime() {
-    return JSON.stringify({ ok: false, error: { code: "invalid_response", message: "Sanctuary runtime is unavailable", degraded: true } });
+    return JSON.stringify({ ok: false, error: { code: "tool_context_missing", message: "Sanctuary tools are not wired into this turn; this is a harness wiring gap, not a runtime outage — do not restart; report it.", degraded: true } });
 }
 function householdRepairObligation(selection, target) {
     if (selection?.kind !== "standing" || selection.requester.kind !== "household_request")

package/dist/senses/private-runtime.js

@@ -46,6 +46,7 @@ exports.enrichDelegatedFromWithBridge = enrichDelegatedFromWithBridge;
 exports.routeDelegatedCompletion = routeDelegatedCompletion;
 exports.buildParseErrorNudge = buildParseErrorNudge;
 exports.buildHeldReturnWakeMessage = buildHeldReturnWakeMessage;
+exports.sanctuaryToolContextFor = sanctuaryToolContextFor;
 exports.runPrivateRuntimeTurn = runPrivateRuntimeTurn;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
@@ -968,6 +969,28 @@ function reduceHabitSessionToNoSend(habitSession) {
         },
     };
 }
+/** Sanctuary tool context for a private turn: always for the sanctuary agent, and for sanctuary external events.
+ * Sanctuary external events keep the strict behavior (a missing config fails the turn); other turns degrade to
+ * no context so a config gap cannot stop the agent from waking at all. */
+function sanctuaryToolContextFor(agentName, externalEventSource) {
+    const sanctuaryEvent = externalEventSource === "sanctuary-health" || externalEventSource === "sanctuary-usenet";
+    if (sanctuaryEvent)
+        return (0, sanctuary_runtime_1.createSanctuaryToolContext)(agentName);
+    if (!(0, sanctuary_runtime_1.isSanctuaryAgent)(agentName))
+        return {};
+    try {
+        return (0, sanctuary_runtime_1.createSanctuaryToolContext)(agentName);
+    }
+    catch (error) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "senses",
+            event: "senses.sanctuary_tool_context_unavailable",
+            message: "sanctuary tool context could not be built for a private turn",
+            meta: { agent: agentName, reason: String(error) },
+        });
+        return {};
+    }
+}
 async function runPrivateRuntimeTurn(options) {
     const now = options?.now ?? (() => new Date());
     const reason = options?.reason ?? "instinct";
@@ -1476,6 +1499,12 @@ async function runPrivateRuntimeTurn(options) {
                         toolContext: {
                             signin: async () => undefined,
                             delegatedOrigins: attentionQueue,
+                            // Every private-runtime turn is autonomous; restart_runtime refuses to act on one.
+                            autonomousTurnKind: options?.externalEvent ? "external-event"
+                                : reason === "await" || reason === "habit" || reason === "instinct" ? reason : "scheduler",
+                            // The Butler's Sanctuary read tools need the typed runtime on every private turn
+                            // (await, habit, instinct, external-event), not only on sanctuary external events.
+                            ...(sanctuaryToolContextFor(agentName, options?.externalEvent?.source)),
                             ...(relationshipAwait ? {
                                 friendStore: relationshipAwait.store,
                                 context: relationshipAwait.context,
@@ -1489,7 +1518,6 @@ async function runPrivateRuntimeTurn(options) {
                                 relationshipAuthorization: externalEventRelationship.relationshipAuthorization,
                                 externalEventAuthority: externalEventRelationship.externalEventAuthority,
                                 externalEventEffects: externalEventRelationship.externalEventEffects,
-                                ...(["sanctuary-health", "sanctuary-usenet"].includes(options.externalEvent.source) ? (0, sanctuary_runtime_1.createSanctuaryToolContext)(agentName) : {}),
                             } : {}),
                             ...(options?.noSend ? { noSend: true } : {}),
                             ...(effectiveHabitSession ? { habitSession: effectiveHabitSession } : {}),

package/dist/senses/sanctuary-runtime.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSanctuaryAgent = isSanctuaryAgent;
 exports.runWithSanctuaryToolReceiptCollection = runWithSanctuaryToolReceiptCollection;
 exports.loadSanctuarySabApiKey = loadSanctuarySabApiKey;
 exports.ensureSanctuarySourceRuntimeReady = ensureSanctuarySourceRuntimeReady;
@@ -60,6 +61,10 @@ const bundle_manifest_1 = require("../mind/bundle-manifest");
 const sanctuaryToolReceipts = new node_async_hooks_1.AsyncLocalStorage();
 const sanctuaryToolGroundings = new node_async_hooks_1.AsyncLocalStorage();
 const acceptanceLedgerTails = new Map();
+/** The Butler agent whose private and A2A turns carry the Sanctuary tool context. */
+function isSanctuaryAgent(agentName) {
+    return agentName === "sanctuary";
+}
 function isSanctuaryExternalEventSource(source) {
     return source === "sanctuary-health" || source === "sanctuary-usenet";
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.861",
+  "version": "0.1.0-alpha.862",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.861",
+      "version": "0.1.0-alpha.862",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.861",
+  "version": "0.1.0-alpha.862",
   "engines": {
     "node": ">=22"
   },