@ouro.bot/cli 0.1.0-alpha.862 → 0.1.0-alpha.863

package/changelog.json

@@ -1,6 +1,13 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.863",
+      "changes": [
+        "Fixed await ticks always failing resolve_await and cancel_await: the inbound pipeline rewrote the turn's current session to the private-runtime session, so the relationship guard never matched the await being ticked. The tick now carries its own binding, covering only the await being ticked.",
+        "Added media_queue, a read-only Sonarr/Radarr queue view (torrent and usenet: status, trackedDownloadState, percent, timeleft, stalled) for the Butler, and made sanctuary_get_download_queue say it only sees the usenet queue, and the await tick now receives the MCP tools its profile allows (it was given none)."
+      ]
+    },
     {
       "version": "0.1.0-alpha.862",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.862",
+  "runtimeVersion": "0.1.0-alpha.863",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.ouro/mcp/media-mcp.mjs

@@ -863,6 +863,56 @@ function queueReport(rows) {
                             size_left_bytes: r.sizeleft ?? 0, stalled: isStalledRow(r, now) }))
 }
 
+// ------------------------------------------------------------ tool: media_queue
+
+const QUEUE_VIEW_MAX_ROWS = 100
+
+// One queue row as the owner's torrent or usenet client reports it through Sonarr/Radarr.
+export function queueRowView(r, nowMs) {
+  return {
+    queue_id: r.id ?? null, title: r.title ?? null, status: r.status ?? null,
+    tracked_download_state: r.trackedDownloadState ?? null, tracked_download_status: r.trackedDownloadStatus ?? null,
+    percent: pct(r), timeleft: r.timeleft ?? null, size_left_bytes: r.sizeleft ?? 0, size_bytes: r.size ?? 0,
+    protocol: r.protocol ?? null, download_client: r.downloadClient ?? null, indexer: r.indexer ?? null,
+    added: r.added ?? null, stalled: isStalledRow(r, nowMs),
+    ...(r.errorMessage ? { error_message: String(r.errorMessage).slice(0, 300) } : {}),
+  }
+}
+
+// Read-only: the Sonarr/Radarr download queue (torrent and usenet alike). Grabs, removes and blocklists nothing.
+export async function mediaQueue(a) {
+  if (a.kind !== "series" && a.kind !== "movie") return { result: "invalid_kind", message: "kind must be 'series' or 'movie'." }
+  let rows
+  let item = null
+  let total = null
+  if ((a.service_id !== undefined && a.service_id !== null) || a.tmdb_id || a.title) {
+    const found = await resolveLibraryItem(a)
+    if (!found.item) return { result: found.result, kind: a.kind, candidates: found.candidates }
+    item = found.item
+    rows = await itemQueue(a.kind, item.id)
+  } else {
+    rows = []
+    const client = arrFor(a.kind)
+    for (let page = 1; page <= QUEUE_MAX_PAGES; page++) {
+      const q = await client("/queue", { query: { page, pageSize: QUEUE_PAGE_SIZE, ...(a.kind === "series" ? { includeSeries: true } : {}) } })
+      const records = q?.records ?? []
+      rows.push(...records)
+      if (Number.isFinite(Number(q?.totalRecords))) total = Number(q.totalRecords)
+      if (!records.length || !(Number(q?.totalRecords) > page * QUEUE_PAGE_SIZE) || rows.length >= QUEUE_VIEW_MAX_ROWS) break
+    }
+  }
+  total = Math.max(total ?? 0, rows.length)
+  const now = Date.now()
+  const shown = rows.slice(0, QUEUE_VIEW_MAX_ROWS).map((r) => queueRowView(r, now))
+  return {
+    kind: a.kind, ...(item ? { service_id: item.id, title: item.title } : {}),
+    count: total, shown: shown.length, ...(total > shown.length ? { truncated: true } : {}), queue: shown,
+    summary: !total ? "Nothing for this is in the Sonarr/Radarr queue."
+      : `${total} queue row${total === 1 ? "" : "s"}${total > shown.length ? ` (showing ${shown.length})` : ""}; ${shown.filter((r) => r.stalled).length} stalled.`,
+    note: "Sonarr/Radarr do not report seeders or peers. A row stuck at the same percent with no timeleft is the stall signal; for a release's seeder count use media_indexer_search.",
+  }
+}
+
 async function runSearch(kind, serviceId) {
   const body = kind === "series" ? { name: "SeriesSearch", seriesId: serviceId } : { name: "MoviesSearch", movieIds: [serviceId] }
   const c = await arrFor(kind)("/command", { method: "POST", body })
@@ -1730,6 +1780,16 @@ const TOOL_LIST = [
       request_id: { type: "string" }, tmdb_id: { type: "number" }, title: { type: "string" },
     } },
   },
+  {
+    name: "media_queue",
+    description: "Read-only view of the Sonarr/Radarr download queue, torrent and usenet alike: for each row the title, status, trackedDownloadState, percent, timeleft, size left, download client and whether it is stalled. Use this to see whether a series or movie download is progressing (this is the tool for torrent downloads; sanctuary_get_download_queue only sees the usenet/SABnzbd queue). Give service_id, tmdb_id or title for one item, or omit them for the whole queue of that kind. It grabs, removes and blocklists nothing. Seeders and peers are not reported by Sonarr/Radarr; use media_indexer_search for a release's seeders.",
+    inputSchema: { type: "object", properties: {
+      kind: { type: "string", enum: ["series", "movie"] },
+      service_id: { type: "number", description: "Sonarr series id or Radarr movie id." },
+      tmdb_id: { type: "number" },
+      title: { type: "string", description: "Exact or near-exact library title." },
+    }, required: ["kind"] },
+  },
   {
     name: "media_search_now",
     description: "Trigger a Sonarr/Radarr search for a series or movie that is already in the library, and report its queue. Use this when the owner asks to search, re-search, or look again for something already in Sonarr/Radarr; no Jellyseerr request id is needed. Identify it by service_id, tmdb_id, or exact title. Never adds anything new: zero or several matches come back as 'not_found' or 'ambiguous' with candidates. Never tell the owner to click Search in the web UI.",
@@ -1856,6 +1916,7 @@ const HANDLERS = {
   media_chain_health: mediaChainHealth,
   media_play_or_resolve: mediaPlayOrResolve,
   media_search_now: mediaSearchNow,
+  media_queue: mediaQueue,
   media_blocklist_stalled: mediaBlocklistStalled,
   media_episodes: mediaEpisodes,
   media_fill_missing: mediaFillMissing,

package/deploy/unraid/sanctuary.ouro/psyche/TACIT.md

@@ -16,6 +16,7 @@
 - When a tool for the job is missing, say so in one line and route the work: ask Claude Code over A2A or record it as a follow-up. Never ask Ari to click through a web UI for work the house is meant to do.
 - Answer from primary sources, never from memory. For any factual claim about the world or the house (whether a title or series exists, what is on the shelf, a container's state, a version, a download's progress, a book's metadata, what Ari said before), look it up with the tools first (Sonarr/Radarr/Jellyfin and their TVDB/TMDB lookup, the Unraid tools, calibre-web, libgen, HEY, web_search, your own state files) and answer from what they return. Re-read live state instead of repeating a status from an earlier reply. When no tool can reach the source, say it is unverified rather than asserting it. Never say a title does not exist without a catalog lookup, and when the library holds a strong partial match, offer it first.
 - When episodes are missing, or Ari asks to get them, call `media_fill_missing` first. It re-reads Sonarr, matches releases by episode title and air year, grabs, imports by title and replaces stalled downloads in one call, and it is safe to call again. Relay its `summary` with the evidence it returns and follow its `next_step`; do not redo its steps by hand. When it keeps a stalled download, that download is the only copy and may still finish: never offer to clear, cancel or blocklist it. A yes or "get them" after that answer means call `media_fill_missing` again, never `media_blocklist_stalled`. When it reports `blocklisted_matches`, the only matching release is on the blocklist: tell Ari and offer to retry it; if he says yes, call `media_fill_missing` again with `retry_blocklisted` set to his words. When it grabs something that may never finish, say so plainly and file the follow-up with `await_condition` before ending the turn. When it reports `goal_met`, or an episode Ari asked for is imported, stop: say so and end the turn without further probing.
+- To see whether a series or movie download is progressing, including a torrent, call `media_queue`. `sanctuary_get_download_queue` reads only the usenet queue: an idle answer from it says nothing about a Sonarr or torrent download. A repeated ticking check keeps the download alive with `resolve_await` verdict `no` until `media_fill_missing` reports `goal_met`.
 - Before stating whether an episode is monitored, missing, downloading or on disk, read it from a tool in this turn (`media_fill_missing` or `media_episodes`). Never infer it from an earlier reply or from a tool that did not report it.
 - Use only the parameters a tool lists. If a call is refused for an unknown parameter or a wrong value, read the allowed ones from the refusal and call again correctly; never invent flags such as `dry_run`.
 - When an automatic search finds nothing for episodes that exist and `media_fill_missing` cannot place them, suspect numbering (streaming vs TVDB order, specials, absolute numbers). Read `media_episodes` (its `scene_code` is the numbering release names use), compare its titles with the `media_release_search` results (how Sonarr parsed each release) and with what `media_blocklist` holds, grab the right pack with `media_release_grab` and an explicit episode mapping, and after it downloads, map the files to episodes by title with `media_manual_import`. When Sonarr's search finds nothing, use `media_indexer_search` with the scene code, 'Season N', the year or an episode title to learn whether any release exists at all; if the only matching release has no seeders, still grab it with the right mapping (peers can reappear) and say plainly it may never finish instead of promising it will arrive. Report each step with what Sonarr returned.

package/deploy/unraid/sanctuary.ouro/tool-profiles.json

@@ -2,7 +2,7 @@
   "version": 2,
   "profiles": {
     "sanctuary-owner": {
-      "version": 13,
+      "version": 14,
       "contextScopes": [
         "household.status",
         "household.policy",
@@ -66,6 +66,7 @@
         "media_chain_health",
         "media_play_or_resolve",
         "media_search_now",
+        "media_queue",
         "media_blocklist_stalled",
         "media_episodes",
         "media_indexer_search",
@@ -141,7 +142,7 @@
       ]
     },
     "sanctuary-agent-peer": {
-      "version": 4,
+      "version": 5,
       "toolNames": [
         "external_event_disposition",
         "query_active_work",
@@ -198,6 +199,7 @@
         "media_chain_health",
         "media_play_or_resolve",
         "media_search_now",
+        "media_queue",
         "media_blocklist_stalled",
         "media_episodes",
         "media_indexer_search",

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.862</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.863</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/daemon/sanctuary-acceptance-harness.js

@@ -60,7 +60,7 @@ function exactSanctuaryContainmentProfileBoundaries(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const boundaries = value;
-    const versions = { "sanctuary-owner": 13, "sanctuary-household": 5, "sanctuary-event": 4 };
+    const versions = { "sanctuary-owner": 14, "sanctuary-household": 5, "sanctuary-event": 4 };
     if (!(0, node_util_1.isDeepStrictEqual)(Object.keys(boundaries).sort(), Object.keys(versions).sort()))
         return false;
     const packageRoot = path.resolve(__dirname, "../../../deploy/unraid/sanctuary.ouro");

package/dist/repertoire/tools-awaiting.js

@@ -83,6 +83,20 @@ function validateName(name) {
         return "name must be alphanumeric, underscores, or hyphens";
     return null;
 }
+/**
+ * The relationship scope a resolve/cancel is judged against. A turn that is ticking an await carries that await's own
+ * binding (`awaitTick`), because the pipeline rewrites `currentSession` to the private-runtime session; that binding covers the
+ * ticked await only, so a tick can never touch any other await. Every other turn is judged by its current session.
+ */
+function relationshipScopeFor(ctx, awaitName) {
+    const tick = ctx.awaitTick;
+    if (tick) {
+        return tick.awaitName === awaitName
+            ? { session: { friendId: tick.friendId, channel: tick.channel, key: tick.key }, requestId: tick.requestId ?? undefined }
+            : { session: undefined, requestId: undefined };
+    }
+    return { session: ctx.currentSession, requestId: ctx.relationshipAuthorization?.requestId };
+}
 function readAwaitDefinition(agentRoot, name) {
     const filePath = awaitFilePath(agentRoot, name);
     try {
@@ -537,10 +551,9 @@ exports.awaitingToolDefinitions = [
             const agentRoot = (0, identity_1.getAgentRoot)();
             const agentName = (0, identity_1.getAgentName)();
             if (ctx?.relationshipAuthorization) {
-                const session = ctx.currentSession;
-                const requestId = ctx.relationshipAuthorization.requestId;
-                const existing = readAwaitDefinition(agentRoot, String(a.name ?? ""));
                 const awaitName = String(a.name ?? "");
+                const { session, requestId } = relationshipScopeFor(ctx, awaitName);
+                const existing = readAwaitDefinition(agentRoot, awaitName);
                 let binding = null;
                 if (session?.channel === "external-event" && existing?.wake_at) {
                     binding = inspectExternalEventAwait(agentName, { recordPath: session.key, awaitName, wakeAt: existing.wake_at });
@@ -590,8 +603,7 @@ exports.awaitingToolDefinitions = [
             const agentRoot = (0, identity_1.getAgentRoot)();
             const agentName = (0, identity_1.getAgentName)();
             if (ctx?.relationshipAuthorization) {
-                const session = ctx.currentSession;
-                const requestId = ctx.relationshipAuthorization.requestId;
+                const { session, requestId } = relationshipScopeFor(ctx, String(a.name ?? ""));
                 if (!session || !requestId || !hasActiveRelationshipFollowUp(agentRoot, {
                     friendId: session.friendId,
                     channel: session.channel,

package/dist/repertoire/tools-unraid.js

@@ -444,7 +444,7 @@ exports.unraidToolDefinitions = [
     readDefinition("unraid_get_system", "Read bounded Sanctuary system and version health.", "getSystem"),
     readDefinition("sanctuary_get_install_state", "Check whether this Butler installation matches its verified release and report any repair needed.", "getInstallState"),
     readDefinition("unraid_check_services", "Freshly check the fixed public Sanctuary service endpoints and return bounded status with an observation timestamp.", "checkServices"),
-    readDefinition("sanctuary_get_download_queue", "Read the bounded live household download queue state, including whether the spend guard has paused it.", "getDownloadQueue"),
+    readDefinition("sanctuary_get_download_queue", "Read the bounded live usenet (SABnzbd) download queue state only, including whether the spend guard has paused it. It cannot see torrents or Sonarr/Radarr progress: an idle result here does not mean a download is absent. For a series or movie download, including torrents, use media_queue.", "getDownloadQueue"),
     {
         tool: { type: "function", function: { name: "sanctuary_resume_download_queue", description: "Resume the household download queue after Ari confirms the provider is ready, then independently verify paused=false. This can spend prepaid download credit.", parameters: emptyParameters } },
         handler: async (_args, ctx) => JSON.stringify(ctx?.sanctuary ? await ctx.sanctuary.resumeDownloadQueue() : JSON.parse(missingRuntime())),

package/dist/repertoire/tools.js

@@ -73,7 +73,7 @@ const SANCTUARY_RELATIONSHIP_BASE_TOOLS = new Set([
 exports.SANCTUARY_MCP_PROVIDED_TOOLS = new Set([
     "media_search", "media_request", "media_request_status",
     "media_diagnose_and_fix", "media_chain_health", "media_play_or_resolve",
-    "media_search_now", "media_blocklist_stalled", "media_episodes", "media_indexer_search", "media_release_search", "media_release_grab", "media_blocklist", "media_manual_import", "media_fill_missing",
+    "media_search_now", "media_queue", "media_blocklist_stalled", "media_episodes", "media_indexer_search", "media_release_search", "media_release_grab", "media_blocklist", "media_manual_import", "media_fill_missing",
 ]);
 /** Channels a Sanctuary turn can arrive on from the host itself, not from a remote party. */
 const SANCTUARY_LOCAL_CHANNELS = new Set(["inner", "cli", "mcp"]);

package/dist/senses/private-runtime.js

@@ -1383,8 +1383,9 @@ async function runPrivateRuntimeTurn(options) {
                 })
                     .filter((tool) => !externalEventExcludedTools.has(tool.function.name))
                 : undefined;
+            // The await tick is relationship-scoped but still needs the MCP tools its profile allows (media_queue for a download await).
             const relationshipAwaitToolsResolved = relationshipAwait
-                ? (0, tools_1.getToolsForChannel)(innerCapabilities, undefined, undefined, undefined, undefined, undefined, {
+                ? (0, tools_1.getToolsForChannel)(innerCapabilities, undefined, undefined, undefined, mcpManager, undefined, {
                     agentName, relationshipAuthorization: relationshipAwait.relationshipAuthorization,
                 })
                 : undefined;
@@ -1509,6 +1510,14 @@ async function runPrivateRuntimeTurn(options) {
                                 friendStore: relationshipAwait.store,
                                 context: relationshipAwait.context,
                                 currentSession: relationshipAwait.currentSession,
+                                // The pipeline rewrites currentSession to the private-runtime session; resolve_await/cancel_await need the await's own binding.
+                                awaitTick: Object.freeze({
+                                    awaitName: parsedAwait.name,
+                                    friendId: relationshipAwait.currentSession.friendId,
+                                    channel: relationshipAwait.currentSession.channel,
+                                    key: relationshipAwait.currentSession.key,
+                                    requestId: relationshipAwaitCoordinatesValue.requestId,
+                                }),
                                 relationshipAuthorization: relationshipAwait.relationshipAuthorization,
                             } : {}),
                             ...(options?.externalEvent ? {

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.862",
+  "version": "0.1.0-alpha.863",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.862",
+      "version": "0.1.0-alpha.863",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.862",
+  "version": "0.1.0-alpha.863",
   "engines": {
     "node": ">=22"
   },