@ouro.bot/cli 0.1.0-alpha.905 → 0.1.0-alpha.907

package/changelog.json

@@ -1,6 +1,20 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.907",
+      "changes": [
+        "When Ari hands his chat to someone, the Butler greets them in that same chat and starts the interview, instead of asking them to message it somewhere else first."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.906",
+      "changes": [
+        "Shepherd's judge now finds the verdict when a model thinks aloud in <think> blocks or writes a sentence around its JSON, so judges on models such as MiniMax stop letting every return through as unclear.",
+        "When the judge's answer still is not JSON, the returns log shows the first 160 characters of what it said, so the next model mismatch is visible.",
+        "A key Shepherd would press is refused when its JSON was found inside the model's prose, since the screen may have planted it, and a logged unparseable answer is passed through the secret filter first."
+      ]
+    },
     {
       "version": "0.1.0-alpha.905",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.905",
+  "runtimeVersion": "0.1.0-alpha.907",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.ouro/psyche/LORE.md

@@ -27,3 +27,5 @@ I never tell Ari to click, open a settings page, or do a ten-second manual step.
 When Ari asks me to be brief, my replies are plain sentences with no headers or bold labels, about 600 characters at most. The runtime holds me to this once he has asked.
 
 I say a title is on the shelf only when a library lookup in the same turn found it there; otherwise I say I can check whether we have it.
+
+When Ari hands his chat to someone ("say hi to her"), that person is reading this same chat now. I greet them here by name and start right away, with a question when he asked me to find out what they want; I never ask them to message me somewhere else first.

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.905</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.907</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/senses/shepherd/judge.js

@@ -6,6 +6,7 @@ exports.parseVerdict = parseVerdict;
 exports.judgeMessages = judgeMessages;
 exports.createShepherdJudge = createShepherdJudge;
 const runtime_1 = require("../../nerves/runtime");
+const redact_1 = require("./redact");
 exports.REPLY_MAX_CHARS = 240;
 const KEYS = new Set(["enter", "escape", "up", "down", "tab", "1", "2", "3", "4", "5", "6", "7", "8", "9", "y", "n"]);
 const KINDS = new Set(["premature", "gate", "done", "working", "unclear"]);
@@ -24,25 +25,50 @@ function safeReplyText(text) {
         return null;
     return line;
 }
+/**
+ * The JSON in a model's answer. Models differ: some wrap it in a code fence, some think aloud in
+ * `<think>` blocks or write a sentence around it, so the first `{` to the last `}` is tried too.
+ * `inProse` says the JSON came from inside other text, where it might be an object the model
+ * quoted from the screen rather than its own verdict.
+ */
+function answerJson(content) {
+    const text = content.replace(/<think>[\s\S]*?(?:<\/think>|$)/g, "").trim().replace(/^```(?:json)?\s*|\s*```$/g, "");
+    const start = text.indexOf("{");
+    const end = text.lastIndexOf("}");
+    const candidates = start >= 0 && end > start ? [text, text.slice(start, end + 1)] : [text];
+    for (const [index, candidate] of candidates.entries()) {
+        try {
+            return { ok: true, value: JSON.parse(candidate), inProse: index > 0 };
+        }
+        catch {
+            // try the next candidate
+        }
+    }
+    return { ok: false, text };
+}
 function parseVerdict(content) {
-    try {
-        const raw = JSON.parse(content.trim().replace(/^```(?:json)?\s*|\s*```$/g, ""));
-        const value = raw && typeof raw === "object" ? raw : {};
-        const kind = typeof value.kind === "string" && KINDS.has(value.kind) ? value.kind : "unclear";
-        const reason = typeof value.reason === "string" && value.reason.trim() ? value.reason.trim().replace(/\s+/g, " ").slice(0, 300) : "no reason given";
-        if (kind === "working" && value.news === true)
-            return { kind, reply: null, reason, news: true };
-        if (kind !== "premature")
-            return { kind, reply: null, reason };
-        const reply = value.reply && typeof value.reply === "object" ? value.reply : {};
-        if (typeof reply.key === "string" && KEYS.has(reply.key))
-            return { kind, reply: { key: reply.key }, reason };
-        const text = typeof reply.text === "string" ? safeReplyText(reply.text) : null;
-        return text ? { kind, reply: { text }, reason } : { kind: "unclear", reply: null, reason: `premature, but the judge gave no safe reply: ${reason}` };
+    const parsed = answerJson(content);
+    if (!parsed.ok) {
+        const seen = (0, redact_1.redactSecrets)((parsed.text || content).replace(/\s+/g, " ").trim()).slice(0, 160);
+        return { kind: "unclear", reply: null, reason: `the judge's answer was not JSON: ${seen || "(empty)"}` };
     }
-    catch {
-        return { kind: "unclear", reply: null, reason: "the judge's answer was not JSON" };
+    const raw = parsed.value;
+    const value = raw && typeof raw === "object" ? raw : {};
+    const kind = typeof value.kind === "string" && KINDS.has(value.kind) ? value.kind : "unclear";
+    const reason = typeof value.reason === "string" && value.reason.trim() ? value.reason.trim().replace(/\s+/g, " ").slice(0, 300) : "no reason given";
+    if (kind === "working" && value.news === true)
+        return { kind, reply: null, reason, news: true };
+    if (kind !== "premature")
+        return { kind, reply: null, reason };
+    const reply = value.reply && typeof value.reply === "object" ? value.reply : {};
+    if (typeof reply.key === "string" && KEYS.has(reply.key)) {
+        // A key can approve a prompt, and a key from JSON found inside prose may be one the screen planted.
+        if (parsed.inProse)
+            return { kind: "unclear", reply: null, reason: `premature, but the key came from JSON inside prose: ${reason}` };
+        return { kind, reply: { key: reply.key }, reason };
     }
+    const text = typeof reply.text === "string" ? safeReplyText(reply.text) : null;
+    return text ? { kind, reply: { text }, reason } : { kind: "unclear", reply: null, reason: `premature, but the judge gave no safe reply: ${reason}` };
 }
 function judgeMessages(packet) {
     return [

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.905",
+  "version": "0.1.0-alpha.907",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.905",
+      "version": "0.1.0-alpha.907",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.905",
+  "version": "0.1.0-alpha.907",
   "engines": {
     "node": ">=22"
   },