@ouro.bot/cli 0.1.0-alpha.876 → 0.1.0-alpha.878

package/dist/senses/a2a-entry.js

@@ -61,8 +61,9 @@ Promise.all([
     Promise.resolve().then(() => __importStar(require("../heart/runtime-credentials"))),
     Promise.resolve().then(() => __importStar(require("../heart/machine-identity"))),
     Promise.resolve().then(() => __importStar(require("@ouro.bot/friends/a2a-client"))),
+    Promise.resolve().then(() => __importStar(require("../a2a/escalation-wiring"))),
 ])
-    .then(async ([{ startA2AServer }, { loadOrMintA2AIdentity, readStoredA2ASeed }, { waitForRuntimeCredentialBootstrap, readMachineRuntimeCredentialConfig, refreshMachineRuntimeCredentialConfig, mergeMachineRuntimeCredentialConfig }, { loadOrCreateMachineIdentity }, { ready },]) => {
+    .then(async ([{ startA2AServer }, { loadOrMintA2AIdentity, readStoredA2ASeed }, { waitForRuntimeCredentialBootstrap, readMachineRuntimeCredentialConfig, refreshMachineRuntimeCredentialConfig, mergeMachineRuntimeCredentialConfig }, { loadOrCreateMachineIdentity }, { ready }, { escalationOptionsFor, sendOwnerNoticeViaTelegram },]) => {
     const os = await Promise.resolve().then(() => __importStar(require("node:os")));
     // Wait for the daemon to deliver the machine-local runtime config (carrying the
     // a2a identity seed) into the in-memory cache before we read or mint identity.
@@ -109,6 +110,7 @@ Promise.all([
                 },
             },
         } : {}),
+        ...escalationOptionsFor(agentName, (notice) => sendOwnerNoticeViaTelegram(agentName, notice)),
         ...(argValue("--host") ? { host: argValue("--host") } : {}),
         ...(Number.isInteger(port) ? { port } : {}),
         ...(argValue("--base-url") ? { baseUrl: argValue("--base-url") } : {}),

package/dist/senses/private-runtime.js

@@ -133,6 +133,12 @@ function relationshipAwaitCoordinates(awaitFile) {
                 throw new InvalidRelationshipAwaitProvenanceError("Relationship await provenance is invalid");
             return { friendId: awaitFile.filed_for_friend_id, channel: awaitFile.filed_from, key: awaitFile.filed_from_key, requestId: null };
         }
+        if (awaitFile.filed_from === "a2a" && awaitFile.filed_for_friend_id && awaitFile.filed_from_key) {
+            // Filed in a plain (non-delegated) A2A conversation: the peer and conversation are its whole provenance.
+            if (Buffer.byteLength(awaitFile.filed_for_friend_id) > 256 || Buffer.byteLength(awaitFile.filed_from_key) > 1_024)
+                throw new InvalidRelationshipAwaitProvenanceError("Relationship await provenance is invalid");
+            return { friendId: awaitFile.filed_for_friend_id, channel: "a2a", key: awaitFile.filed_from_key, requestId: null };
+        }
         const isSystemAwait = awaitFile.filed_for_friend_id === null
             && awaitFile.filed_from_key === null
             && (awaitFile.filed_from === null || awaitFile.filed_from === "unknown" || awaitFile.filed_from === "cli");
@@ -186,14 +192,23 @@ async function resolveRelationshipAwaitAuthority(agentRoot, store, registry, coo
     if (coordinates.channel === "external-event" && (friend.capabilityProfileId !== "sanctuary-owner" || !registry.profiles["sanctuary-event"])) {
         throw new StaleRelationshipAwaitError("admission or profile is not active");
     }
-    const subjectFriend = coordinates.channel === "a2a" ? await resolveA2APrincipal(agentRoot, store, friend, coordinates.requestId) : friend;
+    // A plain peer await carries the peer's own authority and nobody else's: no principal, no delegation grant.
+    const plainPeerAwait = coordinates.channel === "a2a" && coordinates.requestId === null;
+    // A peer the operator switched to no contact at all is not ticked; every other policy is held to following up on this one internal request.
+    if (plainPeerAwait && friend.initiativePolicy === "none")
+        throw new StaleRelationshipAwaitError("initiative policy denies contact");
+    const subjectFriend = coordinates.channel === "a2a" && !plainPeerAwait ? await resolveA2APrincipal(agentRoot, store, friend, coordinates.requestId) : friend;
     const authorization = coordinates.channel === "external-event"
         ? (0, relationship_authorization_2.createRelationshipAuthorizationEvaluator)({ friend, registry, profileId: "sanctuary-event", requestPhase: "follow_up" })
-        : coordinates.channel === "a2a"
-            // The follow-up carries the delegating owner's authority (as the delegated command did), but the turn profile
-            // is the peer's own, which can only narrow it: never wider than a peer chat turn or the original command.
-            ? (0, relationship_authorization_2.createRelationshipAuthorizationEvaluator)({ friend: subjectFriend, registry, profileId: friend.capabilityProfileId, requestId: coordinates.requestId, requestPhase: "follow_up" })
-            : (0, relationship_authorization_2.createRelationshipAuthorizationEvaluator)({ friend, registry, requestId: coordinates.requestId, requestPhase: "follow_up" });
+        : plainPeerAwait
+            // The peer's own profile and trust, nothing wider. Following up is reading its own outbox, not contacting it, so the
+            // follow-up phase is opened with an internal request id that exists only for this await and is never shown to the peer.
+            ? (0, relationship_authorization_2.createRelationshipAuthorizationEvaluator)({ friend: { ...friend, initiativePolicy: "request_follow_up_only" }, registry, profileId: friend.capabilityProfileId, requestId: `peer-await:${coordinates.key}`, requestPhase: "follow_up" })
+            : coordinates.channel === "a2a"
+                // The follow-up carries the delegating owner's authority (as the delegated command did), but the turn profile
+                // is the peer's own, which can only narrow it: never wider than a peer chat turn or the original command.
+                ? (0, relationship_authorization_2.createRelationshipAuthorizationEvaluator)({ friend: subjectFriend, registry, profileId: friend.capabilityProfileId, requestId: coordinates.requestId, requestPhase: "follow_up" })
+                : (0, relationship_authorization_2.createRelationshipAuthorizationEvaluator)({ friend, registry, requestId: coordinates.requestId, requestPhase: "follow_up" });
     if (authorization.subject.friendId !== subjectFriend.id)
         throw new Error("Relationship await authority friend is ambiguous");
     if (!authorization.authorizeTool("resolve_await").allowed)
@@ -1233,14 +1248,16 @@ async function runPrivateRuntimeTurn(options) {
                             ? parsedAwait.wake_at && (0, tools_awaiting_1.hasActiveExternalEventAwait)(agentName, { recordPath: relationshipAwaitCoordinatesValue.key, awaitName: parsedAwait.name, wakeAt: parsedAwait.wake_at })
                                 ? { active: true }
                                 : { active: false, reason: "external event disposition is no longer active" }
-                            : (0, tools_awaiting_1.inspectRelationshipFollowUp)(agentRoot, {
-                                friendId: relationshipAwaitCoordinatesValue.friendId,
-                                channel: relationshipAwaitCoordinatesValue.channel,
-                                key: relationshipAwaitCoordinatesValue.key,
-                                requestId: relationshipAwaitCoordinatesValue.requestId,
-                                awaitName: parsedAwait.name,
-                                now: now().getTime(),
-                            });
+                            : relationshipAwaitCoordinatesValue.channel === "a2a" && relationshipAwaitCoordinatesValue.requestId === null
+                                ? (0, tools_awaiting_1.inspectPeerAwait)(agentRoot, { friendId: relationshipAwaitCoordinatesValue.friendId, key: relationshipAwaitCoordinatesValue.key, awaitName: parsedAwait.name, now: now().getTime() })
+                                : (0, tools_awaiting_1.inspectRelationshipFollowUp)(agentRoot, {
+                                    friendId: relationshipAwaitCoordinatesValue.friendId,
+                                    channel: relationshipAwaitCoordinatesValue.channel,
+                                    key: relationshipAwaitCoordinatesValue.key,
+                                    requestId: relationshipAwaitCoordinatesValue.requestId,
+                                    awaitName: parsedAwait.name,
+                                    now: now().getTime(),
+                                });
                         if (!binding.active) {
                             if ((0, tools_awaiting_1.isBrokenBindingReason)(binding.reason))
                                 (0, tools_awaiting_1.failBrokenAwait)(agentRoot, agentName, parsedAwait.name, binding.reason);

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.876",
+  "version": "0.1.0-alpha.878",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.876",
+      "version": "0.1.0-alpha.878",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.876",
+  "version": "0.1.0-alpha.878",
   "engines": {
     "node": ">=22"
   },