@ouro.bot/cli 0.1.0-alpha.940 → 0.1.0-alpha.941

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.941",
+      "changes": [
+        "Shepherd owner-requested terminal input now reports submission separately from unverified receiver receipt, execution, capability and progress; uncertain attempts retain identity and are not blindly retried."
+      ]
+    },
     {
       "version": "0.1.0-alpha.940",
       "changes": [

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.940",
+  "runtimeVersion": "0.1.0-alpha.941",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.940</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.941</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/repertoire/tools-shepherd.js

@@ -37,6 +37,7 @@ exports.shepherdToolDefinitions = exports.shepherdSendToolDefinition = exports.s
 exports.shepherdToolsEnabled = shepherdToolsEnabled;
 const fs = __importStar(require("node:fs"));
 const path = __importStar(require("node:path"));
+const node_crypto_1 = require("node:crypto");
 const runtime_credentials_1 = require("../heart/runtime-credentials");
 const shepherd_config_1 = require("../heart/shepherd-config");
 const runtime_1 = require("../nerves/runtime");
@@ -228,7 +229,7 @@ exports.shepherdSendToolDefinition = {
         type: "function",
         function: {
             name: "shepherd_send",
-            description: `Type into one coding agent's terminal on this machine for the human you are talking with, because they asked you to. Use it only to deliver that human's own instruction or keypress ("tell it to run the tests", "approve that", "stop it"): never on your own initiative, and never for anyone else. Give exactly one of text or key. text is one line (at most ${exports.SEND_TEXT_MAX_CHARS} characters, no control characters), typed as "[<your configured name> for <their name>] <text>" and submitted with Enter. key is pressed alone: one of ${exports.SEND_KEYS.join(", ")} (a menu or permission prompt, escape to interrupt, ctrl-c to cancel). enter, tab, a digit, y and n can approve or choose on a prompt, so they need screen from a shepherd_read made just before, and nothing is sent if the terminal changed since; tell the human what a prompt asks before approving it unless they have seen it. Pass screen with text too when the text answers what is on screen. To interrupt and then instruct, send escape, read again, then send the text. It also types into the terminal the human has focused on this machine.`,
+            description: `Type into one coding agent's terminal on this machine for the human you are talking with, because they asked you to. Use it only to submit that human's own instruction or keypress ("tell it to run the tests", "approve that", "stop it"): never on your own initiative, and never for anyone else. Give exactly one of text or key. text is one line (at most ${exports.SEND_TEXT_MAX_CHARS} characters, no control characters), typed as "[<your configured name> for <their name>] <text>" and submitted with Enter. key is pressed alone: one of ${exports.SEND_KEYS.join(", ")} (a menu or permission prompt, escape to interrupt, ctrl-c to cancel). enter, tab, a digit, y and n can approve or choose on a prompt, so they need screen from a shepherd_read made just before, and nothing is sent if the terminal changed since; tell the human what a prompt asks before approving it unless they have seen it. Pass screen with text too when the text answers what is on screen. To interrupt and then instruct, send escape, read again, then send the text. It also types into the terminal the human has focused on this machine. submission.state accepted means only that the terminal host accepted input; it may still be queued behind credential approval or a busy agent. It does not prove receiver receipt, resumed execution, restored capability or useful progress. Report those as unverified, never "unblocked" or "all unblocked" from this result or an unchanged screen. Each stronger claim needs fresh evidence from the exact target instance after this attempt, tied to this instruction; receipt alone is not progress or restored credentials. unknown may already have arrived: preserve the attempt and do not blindly resend.`,
             parameters: {
                 type: "object",
                 properties: {
@@ -275,19 +276,45 @@ exports.shepherdSendToolDefinition = {
             if (seen && seen !== now)
                 return refused("the terminal changed since it was read, so nothing was sent; read it again", meta);
             const typed = key ? null : `[${(0, agent_presentation_1.readAgentPresentation)(ctx.agentName, ctx.agentRoot).name} for ${friend.name}] ${line}`;
-            if (key)
-                await host.key(target.id, key);
-            else
-                await host.prompt(target.id, typed);
+            const input = key ? { key } : { text: typed };
+            const attemptId = (0, node_crypto_1.randomUUID)();
+            const attemptedAt = new Date().toISOString();
+            const receiptTarget = { host: host.name, id: target.id, ref: target.ref, instance: target.instance ?? null };
+            const verification = { received: "unverified", execution: "unverified", capability: "unverified", progress: "unverified" };
+            const retry = "Do not resend blindly; reconcile this attempt with the exact receiver first.";
+            // A rejected/expired call can follow a partial paste or an accepted key.
+            // Neither host provides an agent-receipt or progress acknowledgement here.
+            try {
+                if (key)
+                    await host.key(target.id, key);
+                else
+                    await host.prompt(target.id, typed);
+            }
+            catch (error) {
+                const message = (0, redact_1.redactSecrets)(error instanceof Error ? error.message : String(error));
+                (0, runtime_1.emitNervesEvent)({
+                    level: "warn", component: "repertoire", event: "repertoire.shepherd_send_unknown",
+                    message: "terminal input outcome is unknown; do not blindly resend",
+                    meta: { ...meta, session: target.id, ref: target.ref, instance: target.instance ?? null, attemptId, attemptedAt, error: message },
+                });
+                return {
+                    error: message, session: target.ref, attempted: input,
+                    submission: { state: "unknown", attemptId, attemptedAt, reportedAt: new Date().toISOString(), target: receiptTarget },
+                    verification, retry,
+                };
+            }
             (0, runtime_1.emitNervesEvent)({
                 component: "repertoire",
                 event: "repertoire.shepherd_send",
-                message: "typed into a terminal for a family member",
-                meta: { ...meta, session: target.id, ref: target.ref, agent: target.agent, focused: target.focused, screenChecked: !!seen },
+                message: "terminal host accepted input; receiver receipt and progress unverified",
+                meta: { ...meta, session: target.id, ref: target.ref, instance: target.instance ?? null, attemptId, attemptedAt, agent: target.agent, focused: target.focused, screenChecked: !!seen },
             });
-            // The status line shows the human at the machine who typed; it is best effort, the send already happened.
-            await host.signal(target.id, `sent for ${friend.name}`.slice(0, STATUS_MAX_CHARS)).catch(() => undefined);
-            return { session: target.ref, sent: key ? { key } : { text: typed }, focused: target.focused };
+            await host.signal(target.id, `submitted for ${friend.name}; receipt unverified`.slice(0, STATUS_MAX_CHARS)).catch(() => undefined);
+            return {
+                session: target.ref, submitted: input, focused: target.focused,
+                submission: { state: "accepted", attemptId, attemptedAt, reportedAt: new Date().toISOString(), target: receiptTarget },
+                verification, retry,
+            };
         });
     },
     summaryKeys: ["session", "key"],

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.940",
+  "version": "0.1.0-alpha.941",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.940",
+      "version": "0.1.0-alpha.941",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.940",
+  "version": "0.1.0-alpha.941",
   "engines": {
     "node": ">=22"
   },