@ouro.bot/cli 0.1.0-alpha.92 → 0.1.0-alpha.94

package/changelog.json

@@ -1,6 +1,19 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.94",
+      "changes": [
+        "Fix stale CurrentVersion symlink not healing during `ouro up` — the daemon now detects and repairs dangling version symlinks before reading the active version.",
+        "Fix homedir regression in daemon-cli-defaults test and cover changelog-null branch."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.93",
+      "changes": [
+        "Final-answer truth checks now require fresh external-state verification (gh pr view, npm view, etc.) before allowing intent=complete when a live obligation is active, preventing stale or guessed merge/publish/deploy claims."
+      ]
+    },
     {
       "version": "0.1.0-alpha.92",
       "changes": [

package/dist/heart/core.js

@@ -7,6 +7,7 @@ exports.getModel = getModel;
 exports.getProvider = getProvider;
 exports.createSummarize = createSummarize;
 exports.getProviderDisplayLabel = getProviderDisplayLabel;
+exports.isExternalStateQuery = isExternalStateQuery;
 exports.getFinalAnswerRetryError = getFinalAnswerRetryError;
 exports.stripLastToolCalls = stripLastToolCalls;
 exports.repairOrphanedToolCalls = repairOrphanedToolCalls;
@@ -228,7 +229,14 @@ function parseFinalAnswerPayload(argumentsText) {
         return {};
     }
 }
-function getFinalAnswerRetryError(mustResolveBeforeHandoff, intent, sawSteeringFollowUp, delegationDecision, sawSendMessageSelf, sawGoInward, sawQuerySession, currentObligation, innerJob) {
+/** Returns true when a tool call queries external state (GitHub, npm registry). */
+function isExternalStateQuery(toolName, args) {
+    if (toolName !== "shell")
+        return false;
+    const cmd = String(args.command ?? "");
+    return /\bgh\s+(pr|run|api|issue)\b/.test(cmd) || /\bnpm\s+(view|info|show)\b/.test(cmd);
+}
+function getFinalAnswerRetryError(mustResolveBeforeHandoff, intent, sawSteeringFollowUp, delegationDecision, sawSendMessageSelf, sawGoInward, sawQuerySession, currentObligation, innerJob, sawExternalStateQuery) {
     // 1. Delegation adherence: delegate-inward without evidence of inward action
     if (delegationDecision?.target === "delegate-inward" && !sawSendMessageSelf && !sawGoInward && !sawQuerySession) {
         (0, runtime_1.emitNervesEvent)({
@@ -258,6 +266,10 @@ function getFinalAnswerRetryError(mustResolveBeforeHandoff, intent, sawSteeringF
     if (mustResolveBeforeHandoff && intent === "complete" && currentObligation && !sawSteeringFollowUp) {
         return "you still owe the live session a visible return on this work. don't end the turn yet — continue until you've brought back the external-state update, or use intent=blocked with the concrete blocker.";
     }
+    // 6. External-state grounding: obligation + complete requires fresh external verification
+    if (intent === "complete" && currentObligation && !sawExternalStateQuery && !sawSteeringFollowUp) {
+        return "you're claiming this work is complete, but the external state hasn't been verified this turn. ground your claim with a fresh check (gh pr view, npm view, gh run view, etc.) before calling final_answer.";
+    }
     return null;
 }
 // Re-export kick utilities for backward compat
@@ -477,6 +489,7 @@ async function runAgent(messages, callbacks, channel, signal, options) {
     let sawGoInward = false;
     let sawQuerySession = false;
     let sawBridgeManage = false;
+    let sawExternalStateQuery = false;
     // Prevent MaxListenersExceeded warning — each iteration adds a listener
     try {
         require("events").setMaxListeners(50, signal);
@@ -585,7 +598,7 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                     // Extract answer from the tool call arguments.
                     // Supports: {"answer":"text","intent":"..."} or "text" (JSON string).
                     const { answer, intent } = parseFinalAnswerPayload(result.toolCalls[0].arguments);
-                    const retryError = getFinalAnswerRetryError(mustResolveBeforeHandoffActive, intent, sawSteeringFollowUp, options?.delegationDecision, sawSendMessageSelf, sawGoInward, sawQuerySession, options?.currentObligation ?? null, options?.activeWorkFrame?.inner?.job);
+                    const retryError = getFinalAnswerRetryError(mustResolveBeforeHandoffActive, intent, sawSteeringFollowUp, options?.delegationDecision, sawSendMessageSelf, sawGoInward, sawQuerySession, options?.currentObligation ?? null, options?.activeWorkFrame?.inner?.job, sawExternalStateQuery);
                     const validDirectReply = mustResolveBeforeHandoffActive && intent === "direct_reply" && sawSteeringFollowUp;
                     const validTerminalIntent = intent === "complete" || intent === "blocked";
                     const validClosure = answer != null
@@ -783,6 +796,9 @@ async function runAgent(messages, callbacks, channel, signal, options) {
                     /* v8 ignore next -- flag tested via truth-check integration tests @preserve */
                     if (tc.name === "bridge_manage")
                         sawBridgeManage = true;
+                    /* v8 ignore next -- flag tested via truth-check integration tests @preserve */
+                    if (isExternalStateQuery(tc.name, args))
+                        sawExternalStateQuery = true;
                     const argSummary = (0, tools_1.summarizeArgs)(tc.name, args);
                     // Confirmation check for mutate tools
                     if ((0, tools_1.isConfirmationRequired)(tc.name) && !options?.skipConfirmation) {

package/dist/heart/daemon/daemon-cli.js

@@ -1353,12 +1353,12 @@ function createDefaultOuroCliDeps(socketPath = socket_client_1.DEFAULT_DAEMON_SO
         runAuthFlow: auth_flow_1.runRuntimeAuthFlow,
         registerOuroBundleType: ouro_uti_1.registerOuroBundleUti,
         installOuroCommand: ouro_path_installer_1.installOuroCommand,
-        /* v8 ignore start -- self-healing: ensures versioned layout has current version installed @preserve */
+        /* v8 ignore start -- self-healing: ensures active symlink matches running runtime version @preserve */
         ensureCurrentVersionInstalled: () => {
-            const currentVersion = (0, ouro_version_manager_1.getCurrentVersion)({});
-            if (currentVersion)
-                return; // Already installed and linked
+            const linkedVersion = (0, ouro_version_manager_1.getCurrentVersion)({});
             const version = (0, bundle_manifest_1.getPackageVersion)();
+            if (linkedVersion === version)
+                return;
             (0, ouro_version_manager_1.ensureLayout)({});
             const cliHome = (0, ouro_version_manager_1.getOuroCliHome)();
             const versionEntry = path.join(cliHome, "versions", version, "node_modules", "@ouro.bot", "cli", "dist", "heart", "daemon", "ouro-entry.js");
@@ -1817,6 +1817,7 @@ async function runOuroCli(args, deps = createDefaultOuroCliDeps()) {
         meta: { kind: command.kind },
     });
     if (command.kind === "daemon.up") {
+        const linkedVersionBeforeUp = deps.getCurrentCliVersion?.() ?? null;
         // ── versioned CLI update check ──
         if (deps.checkForCliUpdate) {
             let pendingReExec = false;
@@ -1824,7 +1825,7 @@ async function runOuroCli(args, deps = createDefaultOuroCliDeps()) {
                 const updateResult = await deps.checkForCliUpdate();
                 if (updateResult.available && updateResult.latestVersion) {
                     /* v8 ignore next -- fallback: getCurrentCliVersion always injected in tests @preserve */
-                    const currentVersion = deps.getCurrentCliVersion?.() ?? "unknown";
+                    const currentVersion = linkedVersionBeforeUp ?? "unknown";
                     await deps.installCliVersion(updateResult.latestVersion);
                     deps.activateCliVersion(updateResult.latestVersion);
                     deps.writeStdout(`ouro updated to ${updateResult.latestVersion} (was ${currentVersion})`);
@@ -1852,6 +1853,15 @@ async function runOuroCli(args, deps = createDefaultOuroCliDeps()) {
             }
         }
         await performSystemSetup(deps);
+        const linkedVersionAfterSetup = deps.getCurrentCliVersion?.() ?? null;
+        const runtimeVersion = (0, bundle_manifest_1.getPackageVersion)();
+        if (linkedVersionBeforeUp && linkedVersionBeforeUp !== runtimeVersion && linkedVersionAfterSetup === runtimeVersion) {
+            deps.writeStdout(`ouro updated to ${runtimeVersion} (was ${linkedVersionBeforeUp})`);
+            const changelogCommand = (0, ouro_version_manager_1.buildChangelogCommand)(linkedVersionBeforeUp, runtimeVersion);
+            if (changelogCommand) {
+                deps.writeStdout(`review changes with: ${changelogCommand}`);
+            }
+        }
         if (deps.ensureDaemonBootPersistence) {
             try {
                 await Promise.resolve(deps.ensureDaemonBootPersistence(deps.socketPath));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.92",
+  "version": "0.1.0-alpha.94",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",