@ouro.bot/cli 0.1.0-alpha.861 → 0.1.0-alpha.863

package/changelog.json

@@ -1,6 +1,22 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.863",
+      "changes": [
+        "Fixed await ticks always failing resolve_await and cancel_await: the inbound pipeline rewrote the turn's current session to the private-runtime session, so the relationship guard never matched the await being ticked. The tick now carries its own binding, covering only the await being ticked.",
+        "Added media_queue, a read-only Sonarr/Radarr queue view (torrent and usenet: status, trackedDownloadState, percent, timeleft, stalled) for the Butler, and made sanctuary_get_download_queue say it only sees the usenet queue, and the await tick now receives the MCP tools its profile allows (it was given none)."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.862",
+      "changes": [
+        "Sanctuary tool context is now attached to every private-runtime turn of the sanctuary agent (await, habit, instinct, external-event), so await turns can observe the download queue.",
+        "The missing-Sanctuary-context result now uses code tool_context_missing and says it is a harness wiring gap, not a runtime outage.",
+        "restart_runtime now refuses to restart the daemon from autonomous turns (await, habit, external-event, instinct, scheduler) and enforces a persisted 6-hour cooldown, started only after the daemon accepts a restart.",
+        "resolve_await now constrains verdict to \"yes\" or \"no\", says that still pending is \"no\", and returns an explicit error naming the bad value and what to send."
+      ]
+    },
     {
       "version": "0.1.0-alpha.861",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.861",
+  "runtimeVersion": "0.1.0-alpha.863",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.ouro/mcp/media-mcp.mjs

@@ -863,6 +863,56 @@ function queueReport(rows) {
                             size_left_bytes: r.sizeleft ?? 0, stalled: isStalledRow(r, now) }))
 }
 
+// ------------------------------------------------------------ tool: media_queue
+
+const QUEUE_VIEW_MAX_ROWS = 100
+
+// One queue row as the owner's torrent or usenet client reports it through Sonarr/Radarr.
+export function queueRowView(r, nowMs) {
+  return {
+    queue_id: r.id ?? null, title: r.title ?? null, status: r.status ?? null,
+    tracked_download_state: r.trackedDownloadState ?? null, tracked_download_status: r.trackedDownloadStatus ?? null,
+    percent: pct(r), timeleft: r.timeleft ?? null, size_left_bytes: r.sizeleft ?? 0, size_bytes: r.size ?? 0,
+    protocol: r.protocol ?? null, download_client: r.downloadClient ?? null, indexer: r.indexer ?? null,
+    added: r.added ?? null, stalled: isStalledRow(r, nowMs),
+    ...(r.errorMessage ? { error_message: String(r.errorMessage).slice(0, 300) } : {}),
+  }
+}
+
+// Read-only: the Sonarr/Radarr download queue (torrent and usenet alike). Grabs, removes and blocklists nothing.
+export async function mediaQueue(a) {
+  if (a.kind !== "series" && a.kind !== "movie") return { result: "invalid_kind", message: "kind must be 'series' or 'movie'." }
+  let rows
+  let item = null
+  let total = null
+  if ((a.service_id !== undefined && a.service_id !== null) || a.tmdb_id || a.title) {
+    const found = await resolveLibraryItem(a)
+    if (!found.item) return { result: found.result, kind: a.kind, candidates: found.candidates }
+    item = found.item
+    rows = await itemQueue(a.kind, item.id)
+  } else {
+    rows = []
+    const client = arrFor(a.kind)
+    for (let page = 1; page <= QUEUE_MAX_PAGES; page++) {
+      const q = await client("/queue", { query: { page, pageSize: QUEUE_PAGE_SIZE, ...(a.kind === "series" ? { includeSeries: true } : {}) } })
+      const records = q?.records ?? []
+      rows.push(...records)
+      if (Number.isFinite(Number(q?.totalRecords))) total = Number(q.totalRecords)
+      if (!records.length || !(Number(q?.totalRecords) > page * QUEUE_PAGE_SIZE) || rows.length >= QUEUE_VIEW_MAX_ROWS) break
+    }
+  }
+  total = Math.max(total ?? 0, rows.length)
+  const now = Date.now()
+  const shown = rows.slice(0, QUEUE_VIEW_MAX_ROWS).map((r) => queueRowView(r, now))
+  return {
+    kind: a.kind, ...(item ? { service_id: item.id, title: item.title } : {}),
+    count: total, shown: shown.length, ...(total > shown.length ? { truncated: true } : {}), queue: shown,
+    summary: !total ? "Nothing for this is in the Sonarr/Radarr queue."
+      : `${total} queue row${total === 1 ? "" : "s"}${total > shown.length ? ` (showing ${shown.length})` : ""}; ${shown.filter((r) => r.stalled).length} stalled.`,
+    note: "Sonarr/Radarr do not report seeders or peers. A row stuck at the same percent with no timeleft is the stall signal; for a release's seeder count use media_indexer_search.",
+  }
+}
+
 async function runSearch(kind, serviceId) {
   const body = kind === "series" ? { name: "SeriesSearch", seriesId: serviceId } : { name: "MoviesSearch", movieIds: [serviceId] }
   const c = await arrFor(kind)("/command", { method: "POST", body })
@@ -1730,6 +1780,16 @@ const TOOL_LIST = [
       request_id: { type: "string" }, tmdb_id: { type: "number" }, title: { type: "string" },
     } },
   },
+  {
+    name: "media_queue",
+    description: "Read-only view of the Sonarr/Radarr download queue, torrent and usenet alike: for each row the title, status, trackedDownloadState, percent, timeleft, size left, download client and whether it is stalled. Use this to see whether a series or movie download is progressing (this is the tool for torrent downloads; sanctuary_get_download_queue only sees the usenet/SABnzbd queue). Give service_id, tmdb_id or title for one item, or omit them for the whole queue of that kind. It grabs, removes and blocklists nothing. Seeders and peers are not reported by Sonarr/Radarr; use media_indexer_search for a release's seeders.",
+    inputSchema: { type: "object", properties: {
+      kind: { type: "string", enum: ["series", "movie"] },
+      service_id: { type: "number", description: "Sonarr series id or Radarr movie id." },
+      tmdb_id: { type: "number" },
+      title: { type: "string", description: "Exact or near-exact library title." },
+    }, required: ["kind"] },
+  },
   {
     name: "media_search_now",
     description: "Trigger a Sonarr/Radarr search for a series or movie that is already in the library, and report its queue. Use this when the owner asks to search, re-search, or look again for something already in Sonarr/Radarr; no Jellyseerr request id is needed. Identify it by service_id, tmdb_id, or exact title. Never adds anything new: zero or several matches come back as 'not_found' or 'ambiguous' with candidates. Never tell the owner to click Search in the web UI.",
@@ -1856,6 +1916,7 @@ const HANDLERS = {
   media_chain_health: mediaChainHealth,
   media_play_or_resolve: mediaPlayOrResolve,
   media_search_now: mediaSearchNow,
+  media_queue: mediaQueue,
   media_blocklist_stalled: mediaBlocklistStalled,
   media_episodes: mediaEpisodes,
   media_fill_missing: mediaFillMissing,

package/deploy/unraid/sanctuary.ouro/psyche/TACIT.md

@@ -16,6 +16,7 @@
 - When a tool for the job is missing, say so in one line and route the work: ask Claude Code over A2A or record it as a follow-up. Never ask Ari to click through a web UI for work the house is meant to do.
 - Answer from primary sources, never from memory. For any factual claim about the world or the house (whether a title or series exists, what is on the shelf, a container's state, a version, a download's progress, a book's metadata, what Ari said before), look it up with the tools first (Sonarr/Radarr/Jellyfin and their TVDB/TMDB lookup, the Unraid tools, calibre-web, libgen, HEY, web_search, your own state files) and answer from what they return. Re-read live state instead of repeating a status from an earlier reply. When no tool can reach the source, say it is unverified rather than asserting it. Never say a title does not exist without a catalog lookup, and when the library holds a strong partial match, offer it first.
 - When episodes are missing, or Ari asks to get them, call `media_fill_missing` first. It re-reads Sonarr, matches releases by episode title and air year, grabs, imports by title and replaces stalled downloads in one call, and it is safe to call again. Relay its `summary` with the evidence it returns and follow its `next_step`; do not redo its steps by hand. When it keeps a stalled download, that download is the only copy and may still finish: never offer to clear, cancel or blocklist it. A yes or "get them" after that answer means call `media_fill_missing` again, never `media_blocklist_stalled`. When it reports `blocklisted_matches`, the only matching release is on the blocklist: tell Ari and offer to retry it; if he says yes, call `media_fill_missing` again with `retry_blocklisted` set to his words. When it grabs something that may never finish, say so plainly and file the follow-up with `await_condition` before ending the turn. When it reports `goal_met`, or an episode Ari asked for is imported, stop: say so and end the turn without further probing.
+- To see whether a series or movie download is progressing, including a torrent, call `media_queue`. `sanctuary_get_download_queue` reads only the usenet queue: an idle answer from it says nothing about a Sonarr or torrent download. A repeated ticking check keeps the download alive with `resolve_await` verdict `no` until `media_fill_missing` reports `goal_met`.
 - Before stating whether an episode is monitored, missing, downloading or on disk, read it from a tool in this turn (`media_fill_missing` or `media_episodes`). Never infer it from an earlier reply or from a tool that did not report it.
 - Use only the parameters a tool lists. If a call is refused for an unknown parameter or a wrong value, read the allowed ones from the refusal and call again correctly; never invent flags such as `dry_run`.
 - When an automatic search finds nothing for episodes that exist and `media_fill_missing` cannot place them, suspect numbering (streaming vs TVDB order, specials, absolute numbers). Read `media_episodes` (its `scene_code` is the numbering release names use), compare its titles with the `media_release_search` results (how Sonarr parsed each release) and with what `media_blocklist` holds, grab the right pack with `media_release_grab` and an explicit episode mapping, and after it downloads, map the files to episodes by title with `media_manual_import`. When Sonarr's search finds nothing, use `media_indexer_search` with the scene code, 'Season N', the year or an episode title to learn whether any release exists at all; if the only matching release has no seeders, still grab it with the right mapping (peers can reappear) and say plainly it may never finish instead of promising it will arrive. Report each step with what Sonarr returned.

package/deploy/unraid/sanctuary.ouro/tool-profiles.json

@@ -2,7 +2,7 @@
   "version": 2,
   "profiles": {
     "sanctuary-owner": {
-      "version": 13,
+      "version": 14,
       "contextScopes": [
         "household.status",
         "household.policy",
@@ -66,6 +66,7 @@
         "media_chain_health",
         "media_play_or_resolve",
         "media_search_now",
+        "media_queue",
         "media_blocklist_stalled",
         "media_episodes",
         "media_indexer_search",
@@ -141,7 +142,7 @@
       ]
     },
     "sanctuary-agent-peer": {
-      "version": 4,
+      "version": 5,
       "toolNames": [
         "external_event_disposition",
         "query_active_work",
@@ -198,6 +199,7 @@
         "media_chain_health",
         "media_play_or_resolve",
         "media_search_now",
+        "media_queue",
         "media_blocklist_stalled",
         "media_episodes",
         "media_indexer_search",

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.861</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.863</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/a2a/server.js

@@ -165,7 +165,7 @@ async function defaultTurnRunner(input) {
         // every Unraid read answered "Sanctuary runtime is unavailable"). The relationship
         // profile still decides which of those tools the peer may call.
         toolContext: {
-            ...(input.agentName === "sanctuary" ? (0, sanctuary_runtime_1.createSanctuaryToolContext)(input.agentName) : {}),
+            ...((0, sanctuary_runtime_1.isSanctuaryAgent)(input.agentName) ? (0, sanctuary_runtime_1.createSanctuaryToolContext)(input.agentName) : {}),
             ...(input.relationshipAuthorization ? { relationshipAuthorization: input.relationshipAuthorization } : {}),
             ...(input.delegatedCommand ? { delegatedCommand: input.delegatedCommand } : {}),
         },

package/dist/heart/daemon/sanctuary-acceptance-harness.js

@@ -60,7 +60,7 @@ function exactSanctuaryContainmentProfileBoundaries(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const boundaries = value;
-    const versions = { "sanctuary-owner": 13, "sanctuary-household": 5, "sanctuary-event": 4 };
+    const versions = { "sanctuary-owner": 14, "sanctuary-household": 5, "sanctuary-event": 4 };
     if (!(0, node_util_1.isDeepStrictEqual)(Object.keys(boundaries).sort(), Object.keys(versions).sort()))
         return false;
     const packageRoot = path.resolve(__dirname, "../../../deploy/unraid/sanctuary.ouro");

package/dist/repertoire/tools-awaiting.js

@@ -83,6 +83,20 @@ function validateName(name) {
         return "name must be alphanumeric, underscores, or hyphens";
     return null;
 }
+/**
+ * The relationship scope a resolve/cancel is judged against. A turn that is ticking an await carries that await's own
+ * binding (`awaitTick`), because the pipeline rewrites `currentSession` to the private-runtime session; that binding covers the
+ * ticked await only, so a tick can never touch any other await. Every other turn is judged by its current session.
+ */
+function relationshipScopeFor(ctx, awaitName) {
+    const tick = ctx.awaitTick;
+    if (tick) {
+        return tick.awaitName === awaitName
+            ? { session: { friendId: tick.friendId, channel: tick.channel, key: tick.key }, requestId: tick.requestId ?? undefined }
+            : { session: undefined, requestId: undefined };
+    }
+    return { session: ctx.currentSession, requestId: ctx.relationshipAuthorization?.requestId };
+}
 function readAwaitDefinition(agentRoot, name) {
     const filePath = awaitFilePath(agentRoot, name);
     try {
@@ -243,7 +257,7 @@ async function resolveAwaitTool(name, verdict, observation, agentRoot, agentName
         return JSON.stringify({ error: `await "${name}" is not pending (status: ${existing.status})` });
     }
     if (verdict !== "yes" && verdict !== "no") {
-        return JSON.stringify({ error: "verdict must be 'yes' or 'no'" });
+        return JSON.stringify({ error: `verdict must be exactly "yes" or "no" (got ${JSON.stringify(verdict)}); use "no" with an observation while still waiting` });
     }
     if (!observation || !observation.trim()) {
         return JSON.stringify({ error: "observation is required" });
@@ -521,12 +535,12 @@ exports.awaitingToolDefinitions = [
             type: "function",
             function: {
                 name: "resolve_await",
-                description: "Resolve a pending await with a verdict. verdict='yes' archives and fires the alert. verdict='no' records the observation and continues polling.",
+                description: "Resolve a pending await with a verdict. verdict='yes' archives and fires the alert. verdict='no' records the observation and continues polling; still pending is always 'no'.",
                 parameters: {
                     type: "object",
                     properties: {
                         name: { type: "string", description: "Await name (filename stem)." },
-                        verdict: { type: "string", description: "'yes' if the condition is met, 'no' otherwise." },
+                        verdict: { type: "string", enum: ["yes", "no"], description: "Exactly 'yes' if the condition is met. Exactly 'no' for anything else, including still pending, not yet, or unable to tell: send 'no' with an observation and polling continues." },
                         observation: { type: "string", description: "One-line summary of what I saw this tick." },
                     },
                     required: ["name", "verdict", "observation"],
@@ -537,10 +551,9 @@ exports.awaitingToolDefinitions = [
             const agentRoot = (0, identity_1.getAgentRoot)();
             const agentName = (0, identity_1.getAgentName)();
             if (ctx?.relationshipAuthorization) {
-                const session = ctx.currentSession;
-                const requestId = ctx.relationshipAuthorization.requestId;
-                const existing = readAwaitDefinition(agentRoot, String(a.name ?? ""));
                 const awaitName = String(a.name ?? "");
+                const { session, requestId } = relationshipScopeFor(ctx, awaitName);
+                const existing = readAwaitDefinition(agentRoot, awaitName);
                 let binding = null;
                 if (session?.channel === "external-event" && existing?.wake_at) {
                     binding = inspectExternalEventAwait(agentName, { recordPath: session.key, awaitName, wakeAt: existing.wake_at });
@@ -590,8 +603,7 @@ exports.awaitingToolDefinitions = [
             const agentRoot = (0, identity_1.getAgentRoot)();
             const agentName = (0, identity_1.getAgentName)();
             if (ctx?.relationshipAuthorization) {
-                const session = ctx.currentSession;
-                const requestId = ctx.relationshipAuthorization.requestId;
+                const { session, requestId } = relationshipScopeFor(ctx, String(a.name ?? ""));
                 if (!session || !requestId || !hasActiveRelationshipFollowUp(agentRoot, {
                     friendId: session.friendId,
                     channel: session.channel,

package/dist/repertoire/tools-runtime.js

@@ -1,14 +1,99 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.runtimeToolDefinitions = void 0;
+exports.runtimeToolDefinitions = exports.RESTART_COOLDOWN_MS = void 0;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const node_crypto_1 = require("node:crypto");
 const identity_1 = require("../heart/identity");
 const runtime_1 = require("../nerves/runtime");
 const socket_client_1 = require("../heart/daemon/socket-client");
-async function restartRuntime(args, agentName) {
+exports.RESTART_COOLDOWN_MS = 6 * 60 * 60 * 1000;
+function restartCooldownPath(agentName) {
+    return path.join((0, identity_1.getAgentStateRoot)(agentName), "daemon", "restart-runtime-cooldown.json");
+}
+function readLastRestartMs(agentName) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(restartCooldownPath(agentName), "utf8"));
+        return typeof parsed.requestedAtMs === "number" ? parsed.requestedAtMs : null;
+    }
+    catch {
+        return null;
+    }
+}
+// The cooldown is stored per agent, but the restart it limits is daemon-wide.
+function recordRestart(agentName, nowMs) {
+    try {
+        const file = restartCooldownPath(agentName);
+        fs.mkdirSync(path.dirname(file), { recursive: true });
+        const temporary = `${file}.tmp-${process.pid}-${(0, node_crypto_1.randomUUID)()}`;
+        fs.writeFileSync(temporary, JSON.stringify({ requestedAtMs: nowMs }), "utf8");
+        fs.renameSync(temporary, file);
+    }
+    catch {
+        // A failed cooldown write must not block an otherwise allowed restart.
+    }
+}
+async function restartRuntime(args, agentName, ctx) {
     if (typeof args.reason !== "string" || args.reason.trim().length === 0) {
         return JSON.stringify({ error: "reason is required (one-line audit string)" });
     }
     const reason = args.reason.trim();
+    if (ctx?.autonomousTurnKind) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "repertoire",
+            event: "repertoire.runtime_restart_refused",
+            message: "restart_runtime refused in an autonomous turn",
+            meta: { agent: agentName, turnKind: ctx.autonomousTurnKind, reason },
+        });
+        return JSON.stringify({
+            refused: true,
+            code: "autonomous_turn_restart_refused",
+            error: `restart_runtime is not allowed from an autonomous ${ctx.autonomousTurnKind} turn: restarting the daemon kills in-flight work for every agent and habit. A tool error or missing capability is not evidence of a dead runtime. Record or report the problem (note it, surface it to the owner) instead of restarting.`,
+        });
+    }
+    const lastMs = readLastRestartMs(agentName);
+    const nowMs = Date.now();
+    if (lastMs !== null && lastMs <= nowMs && nowMs - lastMs < exports.RESTART_COOLDOWN_MS) {
+        return JSON.stringify({
+            refused: true,
+            code: "restart_cooldown",
+            error: `a restart was already requested ${Math.round((nowMs - lastMs) / 60000)} minutes ago; agent-requested restarts are limited to one per 6 hours. Record or report the problem instead.`,
+            retryAfterMs: exports.RESTART_COOLDOWN_MS - (nowMs - lastMs),
+        });
+    }
     (0, runtime_1.emitNervesEvent)({
         component: "repertoire",
         event: "repertoire.runtime_restart_requested",
@@ -21,6 +106,9 @@ async function restartRuntime(args, agentName) {
             reason,
             requestedBy: agentName,
         });
+        // Only a daemon that accepted the command starts the cooldown; a failed attempt must not lock the owner out.
+        if (response.ok)
+            recordRestart(agentName, nowMs);
         return JSON.stringify({
             requested: true,
             reason,
@@ -110,9 +198,9 @@ exports.runtimeToolDefinitions = [
                 },
             },
         },
-        handler: async (args) => {
+        handler: async (args, ctx) => {
             const agentName = (0, identity_1.getAgentName)();
-            return restartRuntime({ reason: args.reason }, agentName);
+            return restartRuntime({ reason: args.reason }, agentName, ctx);
         },
         riskProfile: { mutates: "external_side_effect", risk: "high", reason: "restarts the hosting runtime" },
     },

package/dist/repertoire/tools-unraid.js

@@ -336,7 +336,7 @@ function createUnraidReadTools(client) {
 }
 const emptyParameters = { type: "object", properties: {}, additionalProperties: false };
 function missingRuntime() {
-    return JSON.stringify({ ok: false, error: { code: "invalid_response", message: "Sanctuary runtime is unavailable", degraded: true } });
+    return JSON.stringify({ ok: false, error: { code: "tool_context_missing", message: "Sanctuary tools are not wired into this turn; this is a harness wiring gap, not a runtime outage — do not restart; report it.", degraded: true } });
 }
 function householdRepairObligation(selection, target) {
     if (selection?.kind !== "standing" || selection.requester.kind !== "household_request")
@@ -444,7 +444,7 @@ exports.unraidToolDefinitions = [
     readDefinition("unraid_get_system", "Read bounded Sanctuary system and version health.", "getSystem"),
     readDefinition("sanctuary_get_install_state", "Check whether this Butler installation matches its verified release and report any repair needed.", "getInstallState"),
     readDefinition("unraid_check_services", "Freshly check the fixed public Sanctuary service endpoints and return bounded status with an observation timestamp.", "checkServices"),
-    readDefinition("sanctuary_get_download_queue", "Read the bounded live household download queue state, including whether the spend guard has paused it.", "getDownloadQueue"),
+    readDefinition("sanctuary_get_download_queue", "Read the bounded live usenet (SABnzbd) download queue state only, including whether the spend guard has paused it. It cannot see torrents or Sonarr/Radarr progress: an idle result here does not mean a download is absent. For a series or movie download, including torrents, use media_queue.", "getDownloadQueue"),
     {
         tool: { type: "function", function: { name: "sanctuary_resume_download_queue", description: "Resume the household download queue after Ari confirms the provider is ready, then independently verify paused=false. This can spend prepaid download credit.", parameters: emptyParameters } },
         handler: async (_args, ctx) => JSON.stringify(ctx?.sanctuary ? await ctx.sanctuary.resumeDownloadQueue() : JSON.parse(missingRuntime())),

package/dist/repertoire/tools.js

@@ -73,7 +73,7 @@ const SANCTUARY_RELATIONSHIP_BASE_TOOLS = new Set([
 exports.SANCTUARY_MCP_PROVIDED_TOOLS = new Set([
     "media_search", "media_request", "media_request_status",
     "media_diagnose_and_fix", "media_chain_health", "media_play_or_resolve",
-    "media_search_now", "media_blocklist_stalled", "media_episodes", "media_indexer_search", "media_release_search", "media_release_grab", "media_blocklist", "media_manual_import", "media_fill_missing",
+    "media_search_now", "media_queue", "media_blocklist_stalled", "media_episodes", "media_indexer_search", "media_release_search", "media_release_grab", "media_blocklist", "media_manual_import", "media_fill_missing",
 ]);
 /** Channels a Sanctuary turn can arrive on from the host itself, not from a remote party. */
 const SANCTUARY_LOCAL_CHANNELS = new Set(["inner", "cli", "mcp"]);

package/dist/senses/private-runtime.js

@@ -46,6 +46,7 @@ exports.enrichDelegatedFromWithBridge = enrichDelegatedFromWithBridge;
 exports.routeDelegatedCompletion = routeDelegatedCompletion;
 exports.buildParseErrorNudge = buildParseErrorNudge;
 exports.buildHeldReturnWakeMessage = buildHeldReturnWakeMessage;
+exports.sanctuaryToolContextFor = sanctuaryToolContextFor;
 exports.runPrivateRuntimeTurn = runPrivateRuntimeTurn;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
@@ -968,6 +969,28 @@ function reduceHabitSessionToNoSend(habitSession) {
         },
     };
 }
+/** Sanctuary tool context for a private turn: always for the sanctuary agent, and for sanctuary external events.
+ * Sanctuary external events keep the strict behavior (a missing config fails the turn); other turns degrade to
+ * no context so a config gap cannot stop the agent from waking at all. */
+function sanctuaryToolContextFor(agentName, externalEventSource) {
+    const sanctuaryEvent = externalEventSource === "sanctuary-health" || externalEventSource === "sanctuary-usenet";
+    if (sanctuaryEvent)
+        return (0, sanctuary_runtime_1.createSanctuaryToolContext)(agentName);
+    if (!(0, sanctuary_runtime_1.isSanctuaryAgent)(agentName))
+        return {};
+    try {
+        return (0, sanctuary_runtime_1.createSanctuaryToolContext)(agentName);
+    }
+    catch (error) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "senses",
+            event: "senses.sanctuary_tool_context_unavailable",
+            message: "sanctuary tool context could not be built for a private turn",
+            meta: { agent: agentName, reason: String(error) },
+        });
+        return {};
+    }
+}
 async function runPrivateRuntimeTurn(options) {
     const now = options?.now ?? (() => new Date());
     const reason = options?.reason ?? "instinct";
@@ -1360,8 +1383,9 @@ async function runPrivateRuntimeTurn(options) {
                 })
                     .filter((tool) => !externalEventExcludedTools.has(tool.function.name))
                 : undefined;
+            // The await tick is relationship-scoped but still needs the MCP tools its profile allows (media_queue for a download await).
             const relationshipAwaitToolsResolved = relationshipAwait
-                ? (0, tools_1.getToolsForChannel)(innerCapabilities, undefined, undefined, undefined, undefined, undefined, {
+                ? (0, tools_1.getToolsForChannel)(innerCapabilities, undefined, undefined, undefined, mcpManager, undefined, {
                     agentName, relationshipAuthorization: relationshipAwait.relationshipAuthorization,
                 })
                 : undefined;
@@ -1476,10 +1500,24 @@ async function runPrivateRuntimeTurn(options) {
                         toolContext: {
                             signin: async () => undefined,
                             delegatedOrigins: attentionQueue,
+                            // Every private-runtime turn is autonomous; restart_runtime refuses to act on one.
+                            autonomousTurnKind: options?.externalEvent ? "external-event"
+                                : reason === "await" || reason === "habit" || reason === "instinct" ? reason : "scheduler",
+                            // The Butler's Sanctuary read tools need the typed runtime on every private turn
+                            // (await, habit, instinct, external-event), not only on sanctuary external events.
+                            ...(sanctuaryToolContextFor(agentName, options?.externalEvent?.source)),
                             ...(relationshipAwait ? {
                                 friendStore: relationshipAwait.store,
                                 context: relationshipAwait.context,
                                 currentSession: relationshipAwait.currentSession,
+                                // The pipeline rewrites currentSession to the private-runtime session; resolve_await/cancel_await need the await's own binding.
+                                awaitTick: Object.freeze({
+                                    awaitName: parsedAwait.name,
+                                    friendId: relationshipAwait.currentSession.friendId,
+                                    channel: relationshipAwait.currentSession.channel,
+                                    key: relationshipAwait.currentSession.key,
+                                    requestId: relationshipAwaitCoordinatesValue.requestId,
+                                }),
                                 relationshipAuthorization: relationshipAwait.relationshipAuthorization,
                             } : {}),
                             ...(options?.externalEvent ? {
@@ -1489,7 +1527,6 @@ async function runPrivateRuntimeTurn(options) {
                                 relationshipAuthorization: externalEventRelationship.relationshipAuthorization,
                                 externalEventAuthority: externalEventRelationship.externalEventAuthority,
                                 externalEventEffects: externalEventRelationship.externalEventEffects,
-                                ...(["sanctuary-health", "sanctuary-usenet"].includes(options.externalEvent.source) ? (0, sanctuary_runtime_1.createSanctuaryToolContext)(agentName) : {}),
                             } : {}),
                             ...(options?.noSend ? { noSend: true } : {}),
                             ...(effectiveHabitSession ? { habitSession: effectiveHabitSession } : {}),

package/dist/senses/sanctuary-runtime.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.isSanctuaryAgent = isSanctuaryAgent;
 exports.runWithSanctuaryToolReceiptCollection = runWithSanctuaryToolReceiptCollection;
 exports.loadSanctuarySabApiKey = loadSanctuarySabApiKey;
 exports.ensureSanctuarySourceRuntimeReady = ensureSanctuarySourceRuntimeReady;
@@ -60,6 +61,10 @@ const bundle_manifest_1 = require("../mind/bundle-manifest");
 const sanctuaryToolReceipts = new node_async_hooks_1.AsyncLocalStorage();
 const sanctuaryToolGroundings = new node_async_hooks_1.AsyncLocalStorage();
 const acceptanceLedgerTails = new Map();
+/** The Butler agent whose private and A2A turns carry the Sanctuary tool context. */
+function isSanctuaryAgent(agentName) {
+    return agentName === "sanctuary";
+}
 function isSanctuaryExternalEventSource(source) {
     return source === "sanctuary-health" || source === "sanctuary-usenet";
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.861",
+  "version": "0.1.0-alpha.863",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.861",
+      "version": "0.1.0-alpha.863",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.861",
+  "version": "0.1.0-alpha.863",
   "engines": {
     "node": ">=22"
   },