@ouro.bot/cli 0.1.0-alpha.870 → 0.1.0-alpha.871

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.871",
+      "changes": [
+        "Restating an already-recorded steward desired state is now a no-op (no version bump, audit row or source rewrite) and the tool says unchanged; the replay gate's no-telegram check fails only on owner notices attributable to the replay run."
+      ]
+    },
     {
       "version": "0.1.0-alpha.870",
       "changes": [

package/deploy/unraid/sanctuary-replay-gate.mjs

@@ -86,14 +86,40 @@ export function isStalledQueueItem(item, nowMs = Date.now()) {
   return size > 0 && left > 0 && noEta && Number.isFinite(addedAt) && nowMs - addedAt >= STALL_MIN_AGE_HOURS * 3_600_000
 }
 
-/** Telegram effect records written during [start, end] that would have reached Ari's chat from a replay. */
-export function telegramLeaks(effects, start, end) {
+/** Telegram effect records written during [start, end] that are owner notices, before attribution. */
+export function ownerNoticeEffects(effects, start, end) {
   return effects.filter((effect) => {
     const at = Date.parse(effect.createdAt)
     return Number.isFinite(at) && at >= start && at <= end && String(effect.idempotencyKey ?? "").startsWith("owner-notice:")
   })
 }
 
+const AWAIT_NOTICE_KEY = /^owner-notice:await:(.+):(resolved|expired|asked_owner):(\d{4}-\d{2}-\d{2}T[^:]*:[^:]*:[^:]*Z)$/
+const unquote = (value) => String(value ?? "").replace(/^["']|["']$/g, "")
+
+/**
+ * Splits the in-window owner notices into leaks (attributable to the replay run, or not attributable at all, which fails
+ * closed) and info (an await notice whose await was filed by a friend that is not a replay peer: the Butler's real owner
+ * work, which correctly reached Ari during the window). awaits: entries { name, createdAt, filedFor } from awaiting/ and
+ * awaiting/.done/. replayFriends: the replay peers' friend ids.
+ */
+export function classifyOwnerNotices(effects, start, end, { replayFriends = [], awaits = [] } = {}) {
+  const leaks = []
+  const info = []
+  for (const effect of ownerNoticeEffects(effects, start, end)) {
+    const key = String(effect.idempotencyKey)
+    if (key.startsWith("owner-notice:delegated:")) { leaks.push({ key, reason: "delegated command notice (replay peers are the only delegating senders)" }); continue }
+    const match = AWAIT_NOTICE_KEY.exec(key)
+    if (!match) { leaks.push({ key, reason: "unattributable owner notice" }); continue }
+    const [, name, , createdAt] = match
+    const found = awaits.find((entry) => String(entry.name).replace(/\.md$/, "") === name && unquote(entry.createdAt) === createdAt)
+    if (!found || !found.filedFor) { leaks.push({ key, reason: "await not found or has no filing friend" }); continue }
+    if (replayFriends.includes(found.filedFor)) leaks.push({ key, reason: `await filed by replay friend ${found.filedFor}` })
+    else info.push({ key, reason: `await filed by non-replay friend ${found.filedFor}` })
+  }
+  return { leaks, info }
+}
+
 // ---- the cases ---------------------------------------------------------------------------------------------------
 // Each case: id, words, sender, delegated, optional applicable(before) -> reason|null, optional poll, readback(ctx) -> checks.
 // ctx: { trace, reply, error, before, after, sink (lines inside this case's window), friends: { principal, stranger } }
@@ -278,10 +304,11 @@ export async function runSuite(host, { cases = CASES.map((entry) => entry.id), p
   }
   const runEnd = host.now()
   const finalObservation = await host.observe()
-  const leaks = telegramLeaks(finalObservation.effects, runStart, runEnd)
+  const { leaks, info } = classifyOwnerNotices(finalObservation.effects, runStart, runEnd, { replayFriends: [host.friends.principal, host.friends.stranger], awaits: [...(finalObservation.awaiting ?? []), ...(finalObservation.done ?? [])] })
   const readable = finalObservation.effectsReadable === true
   const clean = readable && leaks.length === 0
-  const telegram = { id: "no-telegram", status: clean ? "pass" : "fail", checks: [check("no owner-notice Telegram effect was recorded during the run", clean, readable ? leaks.map((leak) => leak.idempotencyKey).join(",") : "state/telegram/effects is not readable, so the absence of a leak cannot be shown")] }
+  const detail = readable ? [...leaks.map((leak) => `${leak.key} (${leak.reason})`), ...info.map((entry) => `info: ${entry.key} (${entry.reason})`)].join(", ") : "state/telegram/effects is not readable, so the absence of a leak cannot be shown"
+  const telegram = { id: "no-telegram", status: clean ? "pass" : "fail", checks: [check("no owner-notice Telegram effect attributable to the replay run was recorded", clean, detail)] }
   const all = [...results, telegram]
   const failed = all.filter((entry) => entry.status === "fail").map((entry) => entry.id)
   return { results: all, summary: { ok: failed.length === 0, passed: all.filter((entry) => entry.status === "pass").length, skipped: all.filter((entry) => entry.status === "skipped").length, failed } }
@@ -354,9 +381,17 @@ export function selfTest() {
   const stalled = { trackedDownloadStatus: "warning" }
   if (CASES.find((entry) => entry.id === "stall-kept").applicable(emptyObservation({ queue: [{ id: 1 }] })) === null) problems.push("stall-kept ran with no stalled item")
   if (CASES.find((entry) => entry.id === "stall-kept").applicable(emptyObservation({ queue: [stalled] })) !== null) problems.push("stall-kept skipped with a stalled item")
-  const leaked = telegramLeaks([{ idempotencyKey: "owner-notice:delegated:x", createdAt: new Date(500).toISOString() }, { idempotencyKey: "other", createdAt: new Date(500).toISOString() }], 0, 1000)
-  if (leaked.length !== 1) problems.push("the telegram leak check missed an in-window owner notice")
-  if (telegramLeaks([{ idempotencyKey: "owner-notice:x", createdAt: new Date(5000).toISOString() }], 0, 1000).length !== 0) problems.push("the telegram leak check counted an out-of-window record")
+  const at = new Date(500).toISOString()
+  const created = "2026-10-08T03:03:00.876Z"
+  const ctx = { replayFriends: ["p", "s"], awaits: [{ name: "replay-wait.md", createdAt: created, filedFor: "p" }, { name: "chef_show_s2_landed.md", createdAt: created, filedFor: "real-friend" }] }
+  const classify = (key) => classifyOwnerNotices([{ idempotencyKey: key, createdAt: at }, { idempotencyKey: "other", createdAt: at }], 0, 1000, ctx)
+  if (classify("owner-notice:delegated:x").leaks.length !== 1) problems.push("no-telegram missed a replay-delegated owner notice")
+  if (classify(`owner-notice:await:replay-wait:asked_owner:${created}`).leaks.length !== 1) problems.push("no-telegram missed an await notice filed by a replay friend")
+  const real = classify(`owner-notice:await:chef_show_s2_landed:asked_owner:${created}`)
+  if (real.leaks.length !== 0 || real.info.length !== 1) problems.push("no-telegram did not pass a real owner await notice with an info detail")
+  if (classify("owner-notice:mystery").leaks.length !== 1) problems.push("no-telegram did not fail closed on an unknown owner-notice key")
+  if (classify(`owner-notice:await:missing:asked_owner:${created}`).leaks.length !== 1) problems.push("no-telegram did not fail closed on an await it could not find")
+  if (classifyOwnerNotices([{ idempotencyKey: "owner-notice:x", createdAt: new Date(5000).toISOString() }], 0, 1000, ctx).leaks.length !== 0) problems.push("no-telegram counted an out-of-window record")
   return problems
 }
 
@@ -378,7 +413,7 @@ export function makeHost({ bundle = DEFAULT_BUNDLE, cardUrl, log = console.error
   const list = (dir) => (existsSync(dir) ? readdirSync(dir) : [])
   const awaitEntries = (dir) => list(dir).filter((name) => name.endsWith(".md")).map((name) => {
     const text = readFileSync(path.join(dir, name), "utf8")
-    return { name, status: /^status:\s*(\S+)/m.exec(text)?.[1] ?? "pending", createdAt: /^created_at:\s*(\S+)/m.exec(text)?.[1] ?? "", reason: /^cancel_reason:\s*(.+)$/m.exec(text)?.[1]?.trim() ?? "" }
+    return { name, status: /^status:\s*(\S+)/m.exec(text)?.[1] ?? "pending", createdAt: /^created_at:\s*(\S+)/m.exec(text)?.[1] ?? "", filedFor: unquote(/^filed_for_friend_id:\s*(\S+)/m.exec(text)?.[1] ?? ""), reason: /^cancel_reason:\s*(.+)$/m.exec(text)?.[1]?.trim() ?? "" }
   })
   return {
     friends: { principal: provisioned.principal.friendId, stranger: provisioned.stranger.friendId },

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.870",
+  "runtimeVersion": "0.1.0-alpha.871",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.870</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.871</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/heart/steward-policy.js

@@ -381,6 +381,13 @@ function updateStewardPolicy(agentRoot, input) {
         }
         if (current.version !== input.expectedVersion)
             throw new Error(`steward policy version changed: expected ${input.expectedVersion}, got ${current.version}`);
+        if (input.mutation.kind === "set_desired_state") {
+            const existing = current.desiredStates[key];
+            const sameValue = existing !== undefined && existing.provenance === input.mutation.provenance && existing.value === affectedKeyResult.value && existing.expiresAt === expiresAt;
+            // Restating what is already recorded is a no-op: no version bump, no audit row, no provenance rewrite.
+            if (sameValue)
+                return current;
+        }
         optionalExpiry(expiresAt, now);
         const postimage = JSON.stringify(next, null, 2);
         if (Buffer.byteLength(postimage) > MAX_POLICY_BYTES)

package/dist/repertoire/tools-steward-policy.js

@@ -117,6 +117,7 @@ exports.stewardPolicyToolDefinition = {
                 || ctx.currentSession?.key !== sessionKey || !sessionMatches() || ctx.currentExternalEvent) {
                 throw new Error("steward policy owner authorization or session changed before mutation");
             }
+            const versionBefore = (0, steward_policy_1.readStewardPolicy)(agentRoot).version;
             const result = (0, steward_policy_1.updateStewardPolicy)(agentRoot, {
                 expectedVersion: expectedVersion ?? (0, steward_policy_1.readStewardPolicy)(agentRoot).version,
                 actor: {
@@ -127,6 +128,11 @@ exports.stewardPolicyToolDefinition = {
                 mutation,
             });
             (0, runtime_1.emitNervesEvent)({ component: "repertoire", event: "repertoire.steward_policy_tool_call", message: "updated steward policy", meta: { action: args.action } });
+            if (mutation.kind === "set_desired_state" && result.version === versionBefore) {
+                // A same-value restatement writes nothing; the entry is necessarily present.
+                const existing = result.desiredStates[mutation.key];
+                return JSON.stringify({ ...result, unchanged: true, note: `already recorded as ${existing.value} (source: ${existing.source})` });
+            }
             return JSON.stringify(result);
         });
     },

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.870",
+  "version": "0.1.0-alpha.871",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.870",
+      "version": "0.1.0-alpha.871",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.870",
+  "version": "0.1.0-alpha.871",
   "engines": {
     "node": ">=22"
   },