@ouro.bot/cli 0.1.0-alpha.874 → 0.1.0-alpha.876

package/deploy/unraid/sanctuary.ouro/mcp/media-mcp.mjs

@@ -9,7 +9,7 @@
 //
 // Protocol: JSON-RPC 2.0 over stdio, newline framed, MCP 2024-11-05.
 
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs"
+import { appendFileSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs"
 import { dirname } from "node:path"
 import { pathToFileURL } from "node:url"
 
@@ -1797,6 +1797,136 @@ async function fillPass(a, seriesId, seriesTitle, { nowMs = Date.now(), deadline
            ...(errors.length ? { errors } : {}), ...(incomplete ? { incomplete: true } : {}), summary, next_step: nextStep + blockedHint }
 }
 
+// ------------------------------------------------- tool: quality profiles
+
+// Radarr and Sonarr keep the upgrade rules (whether a better release may replace a file, and the quality at which they
+// stop) in a quality profile. The Butler once told the owner this was "config-screen-only"; it is an ordinary API, so it
+// is a typed tool: read profiles, set cutoff and upgradeAllowed, and put a movie or series on a profile. Writes are a
+// dry run unless dry_run is false, and return before, after and applied_at like media_diagnose_and_fix.
+
+const itemQualityId = (i) => i.quality?.id ?? i.id
+const itemQualityName = (i) => i.quality?.name ?? i.name
+
+function profileView(p) {
+  const items = p.items ?? []
+  const cutoffItem = items.find((i) => itemQualityId(i) === p.cutoff)
+  return { id: p.id, name: p.name, upgrade_allowed: Boolean(p.upgradeAllowed), cutoff: p.cutoff ?? null,
+           cutoff_name: cutoffItem ? itemQualityName(cutoffItem) : null,
+           qualities: items.map((i) => ({ id: itemQualityId(i), name: itemQualityName(i), allowed: Boolean(i.allowed), ...(i.items?.length ? { group: true } : {}) })) }
+}
+
+const profileNotFound = (id) => ({ result: "no_such_profile", profile_id: id, message: "No quality profile has that id; call media_quality_profile with action read to list them." })
+const isHttp404 = (e) => /_http_404$/.test(e?.code ?? "")
+
+async function getProfile(kind, id) {
+  try { return await arrFor(kind)(`/qualityprofile/${id}`) } catch (e) { if (isHttp404(e)) return null; throw e }
+}
+
+async function getItem(kind, serviceId) {
+  try { return await arrFor(kind)(`/${kind === "series" ? "series" : "movie"}/${serviceId}`) } catch (e) { if (isHttp404(e)) return null; throw e }
+}
+
+// One line per applied change: what changed, the owner's words that asked for it, who called, and when.
+const qualityAuditPath = () => process.env.SANCTUARY_MEDIA_AUDIT ?? "/home/ouro/AgentBundles/sanctuary.ouro/state/media/quality-profile-audit.ndjson"
+function auditQualityChange(entry) {
+  try {
+    mkdirSync(dirname(qualityAuditPath()), { recursive: true })
+    appendFileSync(qualityAuditPath(), `${JSON.stringify(entry)}\n`)
+    return null
+  } catch (e) { return `${e.code ?? e.message}` }
+}
+const titlesUsing = async (kind, profileId) => (await arrFor(kind)(kind === "series" ? "/series" : "/movie")).filter((t) => t.qualityProfileId === profileId).length
+const OWNER_WORDS_NOTE = "owner_words is logged as the caller's claim in the audit file; the tool cannot verify the owner said it."
+const OWNER_WORDS_NOTE_AUDIT = "claimed by the caller; not verified"
+const OWNER_WORDS_REQUIRED = { result: "owner_words_required", message: "Pass owner_words with the owner's own words asking for this change (a verbatim quote), or leave dry_run true. Nothing was changed." }
+
+const itemView = (item) => ({ service_id: item.id, title: item.title ?? null, quality_profile_id: item.qualityProfileId ?? null })
+const UPGRADE_NEXT_STEP = "The profile now allows the upgrade. Call media_search_now (or media_release_search) for the item so Radarr/Sonarr looks for a better release; do not ask the owner to open a settings page."
+
+export async function mediaQualityProfile(a) {
+  if (!kindOk(a)) return invalidKind()
+  const action = a.action ?? "read"
+  const dryRun = a.dry_run !== false
+  const hasProfileId = a.profile_id !== undefined && a.profile_id !== null
+  const hasServiceId = a.service_id !== undefined && a.service_id !== null
+  const client = arrFor(a.kind)
+  const ownerWords = typeof a.owner_words === "string" ? a.owner_words.trim() : ""
+  if (!dryRun && action !== "read" && !ownerWords) return OWNER_WORDS_REQUIRED
+  const audit = (entry) => {
+    const failed = auditQualityChange({ at: new Date().toISOString(), tool: "media_quality_profile", action, kind: a.kind, owner_words: ownerWords, owner_words_note: OWNER_WORDS_NOTE_AUDIT, caller: typeof a.caller === "string" ? a.caller : "unknown", ...entry })
+    return failed ? { audit_error: failed, owner_words_note: OWNER_WORDS_NOTE } : { owner_words_note: OWNER_WORDS_NOTE }
+  }
+
+  if (action === "read") {
+    let profiles
+    if (hasProfileId) {
+      const one = await getProfile(a.kind, Number(a.profile_id))
+      if (!one) return profileNotFound(Number(a.profile_id))
+      profiles = [one]
+    } else {
+      profiles = await client("/qualityprofile")
+    }
+    const out = { kind: a.kind, result: "profiles", profiles: profiles.map(profileView) }
+    if (hasServiceId) {
+      const item = await getItem(a.kind, Number(a.service_id))
+      if (!item) return { result: "no_such_item", kind: a.kind, service_id: Number(a.service_id) }
+      out.item = itemView(item)
+    }
+    return out
+  }
+
+  if (action === "set_upgrade") {
+    if (!hasProfileId) return { result: "profile_id_required" }
+    const wantsCutoff = a.cutoff !== undefined || a.cutoff_name !== undefined
+    if (!wantsCutoff && a.upgrade_allowed === undefined) {
+      return { result: "no_change_requested", message: "Pass upgrade_allowed and/or cutoff (a quality id) or cutoff_name." }
+    }
+    const current = await getProfile(a.kind, Number(a.profile_id))
+    if (!current) return profileNotFound(Number(a.profile_id))
+    const next = { ...current }
+    if (wantsCutoff) {
+      const wanted = (current.items ?? []).find((i) => (a.cutoff !== undefined ? itemQualityId(i) === Number(a.cutoff) : String(itemQualityName(i)).toLowerCase() === String(a.cutoff_name).toLowerCase()))
+      if (!wanted) return { result: "cutoff_not_in_profile", profile_id: current.id, qualities: profileView(current).qualities }
+      next.cutoff = itemQualityId(wanted)
+    }
+    if (a.upgrade_allowed !== undefined) next.upgradeAllowed = Boolean(a.upgrade_allowed)
+    const before = profileView(current)
+    const after = profileView(next)
+    if (before.cutoff === after.cutoff && before.upgrade_allowed === after.upgrade_allowed) return { action, dry_run: dryRun, result: "unchanged", before, after: before }
+    if (dryRun) {
+      const shared = await titlesUsing(a.kind, current.id)
+      return { action, dry_run: true, result: "would_apply", before, after, titles_using_profile: shared,
+               warning: `This profile is used by ${shared} ${a.kind === "series" ? "series" : "movie"} title(s) and the change applies to all of them. To change one title only, use action assign with that title's service_id and another profile.`,
+               would_do: `Set ${a.kind === "series" ? "Sonarr" : "Radarr"} profile "${current.name}" to upgrade_allowed=${after.upgrade_allowed} with cutoff ${after.cutoff_name ?? after.cutoff}. Call again with dry_run false to apply.` }
+    }
+    const saved = await client(`/qualityprofile/${current.id}`, { method: "PUT", body: next })
+    const appliedAfter = profileView(saved ?? next)
+    return { action, dry_run: false, applied_at: new Date().toISOString(), result: "applied", before, after: appliedAfter, ...audit({ profile_id: current.id, before, after: appliedAfter }), next_step: UPGRADE_NEXT_STEP }
+  }
+
+  if (action === "assign") {
+    if (!hasServiceId) return { result: "service_id_required" }
+    if (!hasProfileId) return { result: "profile_id_required" }
+    const item = await getItem(a.kind, Number(a.service_id))
+    if (!item) return { result: "no_such_item", kind: a.kind, service_id: Number(a.service_id) }
+    const profile = await getProfile(a.kind, Number(a.profile_id))
+    if (!profile) return profileNotFound(Number(a.profile_id))
+    const before = itemView(item)
+    const after = itemView({ ...item, qualityProfileId: profile.id })
+    if (before.quality_profile_id === profile.id) return { action, dry_run: dryRun, result: "unchanged", before, after: before }
+    if (dryRun) {
+      return { action, dry_run: true, result: "would_apply", before, after, profile: profileView(profile),
+               would_do: `Put "${item.title ?? item.id}" on the "${profile.name}" profile. Call again with dry_run false to apply.` }
+    }
+    const saved = await client(`/${a.kind === "series" ? "series" : "movie"}/${item.id}`, { method: "PUT", body: { ...item, qualityProfileId: profile.id } })
+    const assignedAfter = itemView(saved ?? { ...item, qualityProfileId: profile.id })
+    return { action, dry_run: false, applied_at: new Date().toISOString(), result: "applied", before, after: assignedAfter,
+             ...audit({ service_id: item.id, profile_id: profile.id, before, after: assignedAfter }), profile: profileView(profile), next_step: UPGRADE_NEXT_STEP }
+  }
+
+  return { result: "invalid_action", message: "action must be read, set_upgrade or assign." }
+}
+
 // ------------------------------------------------------------------- schema
 
 // The harness waits 30 s for a tool call unless the tool declares longer; indexer searches can take minutes.
@@ -1958,6 +2088,22 @@ const TOOL_LIST = [
       remove_ids: { type: "array", items: { type: "number" } },
     }, required: ["kind", "service_id"] },
   },
+  {
+    name: "media_quality_profile",
+    description: "Read and change the Radarr/Sonarr quality profiles that decide whether a better release may replace a file ('Quality Profile does not allow upgrades'). This is a normal API, never a settings screen the owner has to click through. action read (default) lists the profiles for the kind with their cutoff, upgrade flag and ordered qualities, or one profile with profile_id; add service_id to also see which profile a movie or series is on. action set_upgrade changes upgrade_allowed and/or the cutoff (a quality id from the profile, or cutoff_name) of profile_id. action assign puts the movie or series service_id on profile_id. Both writes are a dry run that shows before and after and changes nothing until dry_run is false; a change to a shared profile affects every title on it, so prefer assign to move one title when the owner asked about one title. Applying needs owner_words, the owner's exact words asking for the change, and only the owner can apply; every applied change is written to an audit log. After an applied change, call media_search_now so the upgrade is searched for.",
+    inputSchema: { type: "object", properties: {
+      kind: { type: "string", enum: ["movie", "series"], description: "movie = Radarr, series = Sonarr." },
+      action: { type: "string", enum: ["read", "set_upgrade", "assign"], description: "Default read." },
+      profile_id: { type: "number", description: "Quality profile id (from action read)." },
+      service_id: { type: "number", description: "Radarr movie id or Sonarr series id (media_search returns it)." },
+      upgrade_allowed: { type: "boolean", description: "set_upgrade: whether a better release may replace the file." },
+      cutoff: { type: "number", description: "set_upgrade: quality id from the profile at which upgrades stop." },
+      cutoff_name: { type: "string", description: "set_upgrade: the same, by quality name (for example Bluray-1080p)." },
+      dry_run: { type: "boolean", description: "Writes only. Default true: report before and after without changing anything. Pass false to apply." },
+      owner_words: { type: "string", description: "Required to apply (dry_run false): the owner's exact words asking for this change. A verbatim quote, not a paraphrase. It is logged as your claim and is not verified, so never invent it." },
+      caller: { type: "string", description: "Filled in by the runtime for the audit line; leave it out." },
+    }, required: ["kind"] },
+  },
   {
     name: "media_manual_import",
     description: "Map downloaded files to episodes by hand when their names carry the wrong numbering (Sonarr only). mode 'preview' lists the files of a download with the parsed and mapped episodes and rejections. mode 'import' takes files [{path, episode_ids}]: paths must come from that download's preview and episode_ids must belong to the series; quality and languages come from the preview. Match files to episodes by title using media_episodes.",
@@ -2006,6 +2152,7 @@ const HANDLERS = {
   media_release_grab: mediaReleaseGrab,
   media_blocklist: mediaBlocklist,
   media_manual_import: mediaManualImport,
+  media_quality_profile: mediaQualityProfile,
 }
 
 // ------------------------------------------------------------ jsonrpc stdio

package/deploy/unraid/sanctuary.ouro/psyche/LORE.md

@@ -15,3 +15,11 @@ For "is it here yet" and "why hasn't this downloaded", `media_request_status` re
 The household's prepaid download provider is Astraweb. Its public account and top-up entry is https://www.astraweb.com/login. Never ask for or expose account credentials. When Ari asks why shows are not downloading, establish the cause before answering: check the acquisition chain first, then the specific title, and only reach for credit once exhausted credit is actually established rather than assumed. When it is, compose the answer in plain household language: downloads are paused to protect prepaid credit; give the public link; ask Ari to tell you when the top-up is done so you can resume downloads and verify one finishes; and offer a reminder at a time Ari specifies. Do not repeat backend service names, authentication or credential-check details, dead-letter/event internals, duplicate alerts, or an untrusted notification's claim that an indexer was disabled. Do not claim to top up or disable an indexer yourself. Keep the agent's own voice; this is an outcome contract, not a canned script.
 
 Ari and each approved household member are separate relationships. Their conversations, preferences, requests, private activity, and return routes do not bleed into one another. Unknown Telegram content is quarantined before any model turn and becomes conversation only after Ari admits the immutable account and chat.
+
+My psyche is the files in this folder (`psyche/`: SOUL, IDENTITY, LORE, TACIT, ASPIRATIONS). The folder is mounted read-only into my container and the runtime refuses edits. They ship from the repository through a pull request and the replay gate, with each release. When Ari, or anyone, asks me to change my personality, voice or how I think, I say that plainly and file a request instead: I message Claude Code (Ari's coding agent) over A2A with `send_message`, and when I have `report_failure` I file it as a failure or feature report too. Claude Code makes the change in a pull request, and it arrives with the next release. Friend notes are facts and preferences about one person (their name, how they like to be messaged, when), never my own persona or style, and the tool refuses a note about my own personality (a note about the person is fine). Steward policy is the house's desired states and the routine actions I may take, never personality or conversation preferences.
+
+What I say about a book, show, film or its characters comes from a source I read in the same turn: `web_search`, a fetched page, `books`, or `media_search`. If I have not looked, I look first, or I say I have not. Names are the first thing a memory invents, so I never name a character, author or episode that no source this turn contains, and I call a book a book, not a show.
+
+I never tell Ari to click, open a settings page, or do a ten-second manual step. When Radarr or Sonarr rejects a better release with "Quality Profile does not allow upgrades", `media_quality_profile` changes that: `action read` shows the profiles, `action set_upgrade` changes upgrade_allowed and the cutoff of one profile, and `action assign` moves one title to another profile. Prefer `assign` when Ari asked about one title: `set_upgrade` changes a profile every title on it shares, and its dry run says how many that is. Writes are a dry run until `dry_run` is false, and applying needs `owner_words`, Ari's own words asking for the change, from Ari himself. So show Ari the before and after in one line, apply it once he has asked, then run `media_search_now`. If no tool can do what he asks, I file it with Claude Code and say I did.
+
+When Ari asks me to be brief, my replies are plain sentences with no headers or bold labels, about 600 characters at most, and they do not end with a question he already answered. The runtime holds me to this once he has asked.

package/deploy/unraid/sanctuary.ouro/tool-profiles.json

@@ -2,7 +2,7 @@
   "version": 2,
   "profiles": {
     "sanctuary-owner": {
-      "version": 14,
+      "version": 15,
       "contextScopes": [
         "household.status",
         "household.policy",
@@ -74,6 +74,7 @@
         "media_release_grab",
         "media_blocklist",
         "media_manual_import",
+        "media_quality_profile",
         "media_fill_missing"
       ],
       "effectScopes": [
@@ -142,7 +143,7 @@
       ]
     },
     "sanctuary-agent-peer": {
-      "version": 5,
+      "version": 6,
       "toolNames": [
         "external_event_disposition",
         "query_active_work",
@@ -207,6 +208,7 @@
         "media_release_grab",
         "media_blocklist",
         "media_manual_import",
+        "media_quality_profile",
         "media_fill_missing"
       ],
       "contextScopes": [

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.874</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.876</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>
@@ -25,4 +25,5 @@
   <Config Name="Agent bundle" Target="/home/ouro/AgentBundles/sanctuary.ouro" Default="/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro" Mode="rw" Description="Sanctuary bundle" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro</Config>
   <Config Name="Privileged event spool" Target="/run/ouro-events" Default="/boot/config/custom/ouro-events/spool" Mode="ro" Description="Root-owned detector envelopes, read-only inside the Butler" Type="Path" Display="always" Required="true" Mask="false">/boot/config/custom/ouro-events/spool</Config>
   <Config Name="Root authority socket" Target="/run/ouro-authority" Default="/run/ouro-authority" Mode="ro" Description="Root-owned gateway socket and public issuer pins only" Type="Path" Display="always" Required="true" Mask="false">/run/ouro-authority</Config>
+  <Config Name="Psyche (read-only)" Target="/home/ouro/AgentBundles/sanctuary.ouro/psyche" Default="/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro/psyche" Mode="ro" Description="The Butler's psyche files, read-only inside the Butler so they can be neither edited nor replaced" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro/psyche</Config>
 </Container>

package/dist/heart/core.js

@@ -21,6 +21,8 @@ exports.repairOrphanedToolCalls = repairOrphanedToolCalls;
 exports.runAgent = runAgent;
 const config_1 = require("./config");
 const identity_1 = require("./identity");
+const source_grounding_1 = require("./source-grounding");
+const reply_style_1 = require("./reply-style");
 const tools_1 = require("../repertoire/tools");
 const tool_arguments_1 = require("../repertoire/tool-arguments");
 const session_events_1 = require("./session-events");
@@ -653,6 +655,10 @@ function historicalFailedEffectsForExactRepeatedRequest(messages, selection) {
     }
     return [...failedEffects.values()];
 }
+const ANSWER_GATE_MAX_REJECTIONS = 2;
+function userTexts(messages) {
+    return messages.filter((message) => message.role === "user").map((message) => messageContentText(message.content));
+}
 function latestUserMessageText(messages) {
     for (let i = messages.length - 1; i >= 0; i -= 1) {
         const message = messages[i];
@@ -1152,6 +1158,9 @@ async function runAgent(messages, callbacks, channel, signal, options) {
     let sawQuerySession = false;
     let sawBridgeManage = false;
     let sawExternalStateQuery = false;
+    const turnToolRecords = [];
+    let groundingRejections = 0;
+    let brevityRejections = 0;
     const privateReturnHeldTokens = new Set();
     // Once-per-turn flag for the fresh-work rest gate. Without this, an agent
     // that called rest, was told "fresh work arrived", processed the items,
@@ -1957,7 +1966,36 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                             sawSettleContentMismatch = true;
                             (0, runtime_1.emitNervesEvent)({ level: "warn", component: "engine", event: "engine.settle_content_mismatch", message: "settle answer differs from the reply text written beside it; asking once for the reply as the answer", meta: { answerLength: deliveredAnswer.length, contentLength: msg.content.length } });
                         }
+                        // Answer gates run only for agents that opt in (ToolContext.answerGates). A request-specific contract (options.requiredToolCalls)
+                        // already validates its own terminal answer. Each gate has its own bounded retry, and none spends the last provider iteration.
+                        const gates = options?.requiredToolCalls ? undefined : options?.toolContext?.answerGates;
+                        const retriesLeft = providerIterations < stepBudget - 1;
+                        let groundingError = null;
+                        let unverifiedNames = null;
+                        const grounding = gates?.sourceGrounding ? (0, source_grounding_1.sourceGroundingFinding)({ answer: deliveredAnswer, userText: userTexts(messages).join("\n"), tools: turnToolRecords }) : null;
+                        if (grounding) {
+                            if (groundingRejections < ANSWER_GATE_MAX_REJECTIONS && retriesLeft) {
+                                groundingRejections += 1;
+                                groundingError = grounding.message;
+                                (0, runtime_1.emitNervesEvent)({ level: "warn", component: "engine", event: "engine.answer_gate_rejected", message: "settle answer named things from a work that the turn did not look up; sending the model back", meta: { gate: "source_grounding", rejection: groundingRejections, cap: ANSWER_GATE_MAX_REJECTIONS, lookupsRun: grounding.lookups } });
+                            }
+                            else {
+                                unverifiedNames = grounding.names;
+                                (0, runtime_1.emitNervesEvent)({ level: "warn", component: "engine", event: "engine.answer_gate_disclosed", message: "unsourced names survived the retries; delivering with a disclosure", meta: { gate: "source_grounding", names: grounding.names.length } });
+                            }
+                        }
+                        let brevityError = null;
+                        if (!groundingError && gates?.brevity && !options?.toolContext?.context?.isGroupChat && brevityRejections < ANSWER_GATE_MAX_REJECTIONS && retriesLeft
+                            && (0, reply_style_1.briefStyleRequested)(userTexts(messages), (0, reply_style_1.savedCommunicationPreference)(options?.toolContext?.context?.friend))) {
+                            brevityError = (0, reply_style_1.briefStyleViolation)(deliveredAnswer, intent);
+                            if (brevityError) {
+                                brevityRejections += 1;
+                                (0, runtime_1.emitNervesEvent)({ level: "warn", component: "engine", event: "engine.answer_gate_rejected", message: "settle answer broke the person's brevity request; sending the model back", meta: { gate: "brevity", rejection: brevityRejections, cap: ANSWER_GATE_MAX_REJECTIONS } });
+                            }
+                        }
+                        const answerGateError = groundingError ?? brevityError;
                         const retryError = contentMismatch
+                            ?? answerGateError
                             ?? privateReturnAckLeakError(deliveredAnswer, privateReturnHeldTokens)
                             ?? privateReturnMissingPonderError({
                                 latestUserRequest: latestUserMessageText(messages),
@@ -1967,10 +2005,13 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                             ?? getSettleRetryError(mustResolveBeforeHandoffActive, intent, sawSteeringFollowUp, options?.delegationDecision, sawSendMessageSelf, sawPonder, sawQuerySession, options?.currentObligation ?? null, options?.activeWorkFrame?.inner?.job, sawExternalStateQuery);
                         const validDirectReply = mustResolveBeforeHandoffActive && intent === "direct_reply" && sawSteeringFollowUp;
                         if (retryError === null) {
+                            const finalAnswer = unverifiedNames ? (0, source_grounding_1.withUnverifiedDisclosure)(deliveredAnswer, unverifiedNames) : deliveredAnswer;
                             try {
-                                if (!result.settleStreamed) {
+                                if (unverifiedNames && result.settleStreamed)
+                                    callbacks.onClearText?.();
+                                if (unverifiedNames || !result.settleStreamed) {
                                     const acceptedOutputCallbacks = streamCallbackBuffer?.callbacks ?? callbacks;
-                                    acceptedOutputCallbacks.onTextChunk(deliveredAnswer);
+                                    acceptedOutputCallbacks.onTextChunk(finalAnswer);
                                 }
                                 await streamCallbackBuffer?.flush();
                             }
@@ -1982,7 +2023,7 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                             }
                             callbacks.onToolEnd("settle", (0, tools_1.summarizeArgs)("settle", settleArgs, toolSelection), true);
                             completion = {
-                                answer: deliveredAnswer,
+                                answer: finalAnswer,
                                 intent: validDirectReply ? "direct_reply" : intent === "blocked" ? "blocked" : "complete",
                             };
                             // Retractable owners already hold the validated answer. Final-only
@@ -2459,6 +2500,7 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                         }
                         if (invoked && requiredToolCallNames.includes(tc.name) && !options?.requiredToolCalls?.requireSuccessfulResults)
                             dispatchedRequiredToolCalls.add(tc.name);
+                        turnToolRecords.push({ name: tc.name, args, result: toolResult });
                         const modelResult = (0, tool_friction_1.rewriteToolResultForModel)(tc.name, toolResult, toolFrictionLedger);
                         pushGenerated({ role: "tool", tool_call_id: tc.id, content: modelResult });
                         providerRuntime.appendToolOutput(tc.id, modelResult);

package/dist/heart/daemon/container-spec-auditor.js

@@ -10,12 +10,15 @@ const EXPECTED_BINDS = [
     "/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro:/home/ouro/AgentBundles/sanctuary.ouro:rw",
     "/boot/config/custom/ouro-events/spool:/run/ouro-events:ro",
     "/run/ouro-authority:/run/ouro-authority:ro",
+    // The psyche folder, read-only inside the Butler: a read-only mount point cannot be renamed or removed from inside the container.
+    "/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro/psyche:/home/ouro/AgentBundles/sanctuary.ouro/psyche:ro",
 ];
 const EXPECTED_MOUNTS = [
     ["/mnt/user/appdata/ouro-butler/runtime/.ouro-cli", "/home/ouro/.ouro-cli", true, "rprivate"],
     ["/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro", "/home/ouro/AgentBundles/sanctuary.ouro", true, "rprivate"],
     ["/boot/config/custom/ouro-events/spool", "/run/ouro-events", false, "rprivate"],
     ["/run/ouro-authority", "/run/ouro-authority", false, "rprivate"],
+    ["/mnt/user/appdata/ouro-butler/agent/sanctuary.ouro/psyche", "/home/ouro/AgentBundles/sanctuary.ouro/psyche", false, "rprivate"],
 ];
 const PRE_GATEWAY_BINDS = EXPECTED_BINDS.slice(0, 3);
 const PRE_GATEWAY_MOUNTS = EXPECTED_MOUNTS.slice(0, 3);

package/dist/heart/daemon/sanctuary-acceptance-harness.js

@@ -60,7 +60,7 @@ function exactSanctuaryContainmentProfileBoundaries(value) {
     if (!value || typeof value !== "object" || Array.isArray(value))
         return false;
     const boundaries = value;
-    const versions = { "sanctuary-owner": 14, "sanctuary-household": 5, "sanctuary-event": 4 };
+    const versions = { "sanctuary-owner": 15, "sanctuary-household": 5, "sanctuary-event": 4 };
     if (!(0, node_util_1.isDeepStrictEqual)(Object.keys(boundaries).sort(), Object.keys(versions).sort()))
         return false;
     const packageRoot = path.resolve(__dirname, "../../../deploy/unraid/sanctuary.ouro");
@@ -509,7 +509,7 @@ function validateSanctuaryUnit16EvidenceAssertions(label, raw) {
             integer(value.auditLifecyclePairCount, `${label} auditLifecyclePairCount`, 1);
             if (text(value.containerUser, `${label} containerUser`) !== "10001:10001" || text(value.liveProcessUser, `${label} liveProcessUser`) !== "10001:10001" || text(value.networkMode, `${label} networkMode`) !== "host")
                 throw new Error(`${label} container identity or network is invalid`);
-            requiredInteger(value, "mountCount", 4, label);
+            requiredInteger(value, "mountCount", 5, label);
             requiredInteger(value, "typedWriteExecutorCount", 1, label);
             allTrue(["writeApprovalPolicyExact", "mountsExact", "securityExact", "updaterDisabled"]);
             break;

package/dist/heart/daemon/sanctuary-acceptance-scenarios.js

@@ -132,7 +132,7 @@ function exactContainmentAudit(evidence) {
         && (0, sanctuary_acceptance_harness_1.exactSanctuaryContainmentProfileBoundaries)(evidence.profileBoundaries)
         && evidence.auditPathDigest === (0, node_crypto_1.createHash)("sha256").update(CONTAINMENT_AUDIT_PATH).digest("hex")
         && evidence.auditRecordCount >= 2 && evidence.auditLifecyclePairCount >= 1
-        && evidence.containerUser === "10001:10001" && evidence.liveProcessUser === "10001:10001" && evidence.mountCount === 4 && evidence.publishedPortCount === 0
+        && evidence.containerUser === "10001:10001" && evidence.liveProcessUser === "10001:10001" && evidence.mountCount === 5 && evidence.publishedPortCount === 0
         && evidence.networkMode === "host" && evidence.readOnlyRoot === false && evidence.mountsExact && evidence.securityExact && evidence.updaterDisabled
         && !evidence.writableKeyExposure && evidence.rawWriteMaterialFieldCount === 0 && evidence.typedWriteExecutorCount === 1
         && evidence.writeApprovalPolicyExact && !evidence.sensitiveMaterialObserved

package/dist/heart/daemon/sanctuary-authority-root-lifecycle.js

@@ -972,7 +972,8 @@ class SanctuaryAuthorityRootLifecycle {
         this.#docker(["create", "--name", "ouro-butler", "--network", "host", "--restart", "unless-stopped", "--user", "10001:10001",
             "-l", "net.unraid.docker.managed=dockerman", "-l", `net.unraid.docker.icon=${ICON}`, "-l", "org.opencontainers.image.source=https://github.com/ourostack/ouroboros",
             "-v", `${RUNTIME}:/home/ouro/.ouro-cli:rw`, "-v", `${BUNDLE}:/home/ouro/AgentBundles/sanctuary.ouro:rw`,
-            "-v", `${EVENTS}:/run/ouro-events:ro`, "-v", `${SOCKET}:${SOCKET}:ro`, reference]);
+            "-v", `${EVENTS}:/run/ouro-events:ro`, "-v", `${SOCKET}:${SOCKET}:ro`,
+            "-v", `${BUNDLE}/psyche:/home/ouro/AgentBundles/sanctuary.ouro/psyche:ro`, reference]);
         const resident = this.#containers().find((container) => container.Name === "/ouro-butler");
         if (resident?.Image !== imageId || resident.State.Running)
             throw new Error("Sanctuary resident recreation readback failed");

package/dist/heart/reply-style.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BRIEF_MAX_CHARS = void 0;
+exports.briefStyleRequested = briefStyleRequested;
+exports.briefStyleViolation = briefStyleViolation;
+exports.savedCommunicationPreference = savedCommunicationPreference;
+/**
+ * An owner-stated brevity preference, enforced where the answer is delivered rather than left to prose.
+ *
+ * "Be brief, no sections" is a request about how every later reply should look. A model that agrees in one turn and
+ * writes five bold-labelled paragraphs in the next has not kept it, so the runtime reads the request from what the
+ * person said (or a saved communication preference) and holds the answer to it at settle.
+ */
+const runtime_1 = require("../nerves/runtime");
+exports.BRIEF_MAX_CHARS = 600;
+const ASK_BRIEF = /\b(?:be|keep(?:\s+(?:it|things|replies|answers|your\s+(?:replies|answers|messages)))?|stay)\s+(?:more\s+)?(?:brief|briefer|concise|terse|short|shorter|tight|compact)\b|\bbrevity\b|\bno\s+sections\b|\bshort\s+(?:answers|replies|messages)\b/i;
+const ASK_LONGER = /\b(?:be\s+(?:more\s+)?(?:detailed|thorough|verbose|longer)|(?:more|full)\s+detail|elaborate|longer\s+(?:answers|replies)|you\s+can\s+be\s+longer|in\s+depth)\b/i;
+const NEGATED_BRIEF = /\b(?:don['’]?t|do\s+not|stop\s+being|no\s+more|not\s+so|less|never)\s+(?:be\s+|being\s+|so\s+|that\s+)*(?:brief|concise|terse|short|brevity|tight)\b/i;
+/** A reply that asks for a confirmation or a choice the person must make: the question is the point, so brevity does not apply. */
+const REQUIRED_QUESTION = /\b(?:confirm|are\s+you\s+sure|did\s+you\s+mean|which\s+(?:one|of|do\s+you|did\s+you)|do\s+you\s+want\s+me\s+to\s+(?:apply|delete|remove|change|proceed|overwrite)|should\s+i\s+(?:apply|proceed|go\s+ahead|delete|remove|change|overwrite)|before\s+i\s+(?:apply|delete|remove|change|proceed))\b/i;
+/** True when the latest word from the person (oldest to newest) asks for brevity; a saved preference counts as the oldest word. */
+function briefStyleRequested(userTexts, savedPreference) {
+    let brief = false;
+    for (const text of [...(savedPreference ? [savedPreference] : []), ...userTexts]) {
+        if (NEGATED_BRIEF.test(text) || ASK_LONGER.test(text))
+            brief = false;
+        else if (ASK_BRIEF.test(text))
+            brief = true;
+    }
+    return brief;
+}
+const HEADER = /^#{1,6}\s/m;
+const BOLD_LABEL = /(?:^|\n)\s*(?:[-*•]\s+)?\*\*[^*\n]{1,60}\*\*[ \t]*(?::|—|-|\n|$)|\*\*[^*\n]{1,60}:\*\*/;
+const SENTENCE_END = /[.!?]+(?:\s+|$)/;
+/** What is wrong with an answer that should be brief, or null when it is fine. */
+function briefStyleViolation(answer, intent) {
+    // A blocked reply must say what is blocking, and a reply that asks for a confirmation or a choice must ask it.
+    if (intent === "blocked" || REQUIRED_QUESTION.test(answer))
+        return null;
+    const problems = [];
+    if (HEADER.test(answer) || BOLD_LABEL.test(answer))
+        problems.push("no markdown headers or bold section labels, just plain sentences");
+    if (answer.length > exports.BRIEF_MAX_CHARS)
+        problems.push(`about ${exports.BRIEF_MAX_CHARS} characters at most (this one is ${answer.length})`);
+    const sentences = answer.split(SENTENCE_END).filter((part) => part.trim());
+    if (sentences.length > 1 && answer.trimEnd().endsWith("?"))
+        problems.push("no closing question tacked onto an answer; answer and stop");
+    if (problems.length > 0)
+        (0, runtime_1.emitNervesEvent)({ level: "warn", component: "engine", event: "engine.brief_style_violation", message: "a reply broke the person's brevity request", meta: { problems: problems.length, length: answer.length } });
+    return problems.length === 0 ? null : `the person asked you to be brief. rewrite the reply: ${problems.join("; ")}. say the answer once, in your own voice, keep every warning, uncertainty and required confirmation, cut everything else, and settle again.`;
+}
+/** The person's saved communication preference, from their relationship policy or their older tool preferences. */
+function savedCommunicationPreference(friend) {
+    const value = friend?.relationshipPolicy?.preferences.communication?.value ?? friend?.toolPreferences?.communication;
+    return value === undefined ? undefined : String(value);
+}