omnius 1.0.792 → 1.0.794

package/dist/index.js

@@ -1,4 +1,4 @@
 [diffend] Oversized file quarantined before diffing.
 name: package/dist/index.js
-size: 39174630 bytes
-sha256: 87ab8a29d4940490150f770d36324499523adc53185959f4fa334a600f9d7d79
+size: 39181622 bytes
+sha256: 54ef7bafed127f8a19146f9400d3123bc77d3f6d92914b0d97d19538cda7f938

package/docs/DISCOVERY.json

@@ -35906,7 +35906,7 @@
       "id": "guide.work-orders-runtime-health-remediation-wo-57-telegram-delivery-truth-and-recovery-uppercase",
       "kind": "guide",
       "title": "WO-57: Telegram delivery truth, reminder authority, and bounded recovery",
-      "summary": "Status: implementation complete in working tree; focused validation green; full-suite and repository-delivery gates remain open Priority: P0 Incident: October 1, 2026, live Telegram reminder and illegal-logging non-responses Owner: Omnius orchestrator and Telegram runtime Depends on: WO-41, WO-44, WO-49, WO-52, WO-54, WO-55, WO-56 Completion rule: A checkbox",
+      "summary": "Status: implementation and post-1.0.793 control-plane repair complete in working tree; focused validation green; full-suite, repository-delivery, and live acceptance gates remain open Priority: P0 Incident: October 1, 2026, live Telegram reminder and illegal-logging non-responses Owner: Omnius orchestrator and Telegram runtime Depends on: WO-41, WO-44, WO-49",
       "keywords": [
         "work",
         "orders",

package/docs/DISCOVERY.md

@@ -609,7 +609,7 @@ Daemon equivalents are `GET /v1/discovery/bootstrap`, `GET /v1/discovery?q=<inte
 | `guide.work-orders-runtime-health-remediation-wo-54-case-theory-router-deferral-recovery-uppercase` | WO-54: Case Theory router deferral recovery | Status: complete Priority: P0 Incident: September 26, 2026, Case Theory messages 455–456 Runtime observed: globally installed Omnius 1.0.764 Owner: current implementation session |
 | `guide.work-orders-runtime-health-remediation-wo-55-telegram-pressure-recovery-uppercase` | WO-55: Telegram pressure recovery without silent terminal states | Status: complete Priority: P0 Incident: September 26, 2026, Case Theory messages 458-461 Owner: current implementation session |
 | `guide.work-orders-runtime-health-remediation-wo-56-evidence-driven-objective-loop-uppercase` | WO-56: Evidence-driven objective loop and nonblocking execution | Status: repository implementation complete; live Telegram acceptance remains an external gate Priority: P0 Incident: September 27, 2026, Telegram SSH-over-Cloudflare task spiral and TUI freeze Owner: Omnius orchestration, execution, and Telegram runtime Depends on: WO-05, WO-21, WO-27, WO-41, WO-44, WO-49, WO-54, WO-55 Completion rule: A checkbox may be mark |
-| `guide.work-orders-runtime-health-remediation-wo-57-telegram-delivery-truth-and-recovery-uppercase` | WO-57: Telegram delivery truth, reminder authority, and bounded recovery | Status: implementation complete in working tree; focused validation green; full-suite and repository-delivery gates remain open Priority: P0 Incident: October 1, 2026, live Telegram reminder and illegal-logging non-responses Owner: Omnius orchestrator and Telegram runtime Depends on: WO-41, WO-44, WO-49, WO-52, WO-54, WO-55, WO-56 Completion rule: A checkbox |
+| `guide.work-orders-runtime-health-remediation-wo-57-telegram-delivery-truth-and-recovery-uppercase` | WO-57: Telegram delivery truth, reminder authority, and bounded recovery | Status: implementation and post-1.0.793 control-plane repair complete in working tree; focused validation green; full-suite, repository-delivery, and live acceptance gates remain open Priority: P0 Incident: October 1, 2026, live Telegram reminder and illegal-logging non-responses Owner: Omnius orchestrator and Telegram runtime Depends on: WO-41, WO-44, WO-49 |
 | `guide.work-orders-telegram-dmn-wo-22-dmn-outreach-and-learning-uppercase` | WO-22: DMN outreach, DM sharing, and outcome learning | On 2026-09-03 at 17:07 PDT the bot posted in the OMNIUS group without being addressed. The operator asked whether this was self-induced reflection. |
 | `guide.work-orders-telegram-dropbear-context-rca-workorder` | Telegram Dropbear Context Engineering RCA Work Order | Observed run: /home/roko/Documents/Projects/Adjacent/telegramtest/.omnius, run id 1782873796963-i5r7mv. |
 | `guide.work-orders-telegram-reliability-consolidation-2026-09-28` | Telegram Reliability Consolidation — 2026-09-28 | Rule: check a box only after the named behavior is implemented and its listed verification passes. A parent box stays open until every child box is checked. |

package/docs/work-orders/runtime-health-remediation/WO-57-telegram-delivery-truth-and-recovery.md

@@ -1,7 +1,8 @@
 # WO-57: Telegram delivery truth, reminder authority, and bounded recovery
 
-**Status:** implementation complete in working tree; focused validation green;
-full-suite and repository-delivery gates remain open
+**Status:** implementation and post-1.0.793 control-plane repair complete in
+working tree; focused validation green; full-suite, repository-delivery, and
+live acceptance gates remain open
 **Priority:** P0
 **Incident:** October 1, 2026, live Telegram reminder and illegal-logging non-responses
 **Owner:** Omnius orchestrator and Telegram runtime
@@ -37,11 +38,29 @@ verified evidence instead of replaying the full reasoning loop.
       search-only and the conversation ended at assistant message 5705.
 - [x] Anchor false-acknowledgement failure: OMNIUS message 5712 was routed to
       zero-tool quick chat, delivered only `on it. pulling the Borneo illegal
-      logging data now.`, and was marked consumed without a retrieval run.
+logging data now.`, and was marked consumed without a retrieval run.
 - [x] Anchor follow-up router failure: Case Theory message 610 was a same-sender
       reply to the failed reminder-list request 609, but router reconciliation
       exhausted and the fallback lost its exact `inputId`, producing
       `input missing input != telegram:chat:-1003960149435:0:610`.
+- [x] Anchor the partial 1.0.792 result: the runtime restarted at
+      `2026-10-02T06:57:21.994Z` with healthy polling, but the recovered Case
+      Theory message 611 retained its pre-update `outcome:"delivery"`
+      contract, read all 29 reminders, authored the complete answer, then
+      rejected itself for missing the Telegram delivery effect.
+- [x] Anchor bounded-recovery exhaustion: message 611 repeated `reminder`,
+      `tool_search`, and unrelated `file_read` work, ended
+      `incomplete_verification` twice, and was terminally failed at
+      `2026-10-02T07:19:30.188Z` after three cycles with no public reply.
+- [x] Anchor the 1.0.793 OMNIUS continuation failure: message 5717 asked the
+      bot to complete the open Borneo task, but the router again chose chat;
+      quick run `telegram-quick:e0318ff63f7db207` delivered message 5718,
+      `on it. pulling the Borneo illegal logging data now.`, with no action
+      runner or retrieval receipt.
+- [x] Anchor the 1.0.793 Case Theory control failure: message 612 retrieved all
+      29 reminders, reached `deliver_due` at `2026-10-02T08:06:58.242Z`, then
+      admitted `tool_search` and `file_read`, completed with the full answer,
+      rejected its terminal review, and started a whole-task recovery cycle.
 
 Runtime evidence:
 
@@ -50,6 +69,13 @@ Runtime evidence:
 - `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-conversations/84e4e6e5411c97531047.json`
 - `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-conversations/c34a3d7d53728329c081.json`
 - `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/scheduled/reminders.json`
+- `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-runner-state/84e4e6e5411c97531047/debug-library/runs/telegram-84e4e6e5411c9753-1790924323167-1/events.jsonl`
+- `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-runner-state/84e4e6e5411c97531047/completion-finalizations/telegram-84e4e6e5411c9753-1790924323167-1.json`
+- `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-runner-state/84e4e6e5411c97531047/debug-library/runs/telegram-84e4e6e5411c9753-1790925147229-1/events.jsonl`
+- `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-runner-state/84e4e6e5411c97531047/completion-finalizations/telegram-84e4e6e5411c9753-1790925147229-1.json`
+- `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-turn-delivery-ledger/0f3dd3a8bebe1933d1d468175da402e64138954fcc52a8126512426297641ddf.json`
+- `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-runner-state/84e4e6e5411c97531047/debug-library/runs/telegram-84e4e6e5411c9753-1790928285562-1/events.jsonl`
+- `/home/roko/Documents/Projects/Adjacent/telegram_test/.omnius/telegram-runner-state/84e4e6e5411c97531047/completion-finalizations/telegram-84e4e6e5411c9753-1790928285562-1.json`
 
 ## Requirements and implementation checklist
 
@@ -209,6 +235,55 @@ Primary anchors:
 - `packages/cli/tests/telegram-social-decision-binding.test.ts` — stale-input
   negative control at the durable social commit boundary.
 
+### REQ-TDT-009 — recovered-contract migration and convergence
+
+- [x] Prefer a current deterministic host-repaired contract over a stale
+      persisted contract when recovering the exact same Telegram input.
+- [x] Preserve fail-closed external file/media delivery contracts; only typed
+      `host-contract-repair` authority can migrate an exact recovered task.
+- [x] Do not consume the one-shot `deliver_due` synthesis instruction before a
+      required grounded observation exists.
+- [x] Make `bounded_review` authoritative in deferred external-effect mode so
+      a no-delta plateau cannot continue into unrelated tool families.
+- [x] Add regressions for exact contract migration, grounded synthesis timing,
+      and bounded no-delta enforcement.
+
+Primary anchors:
+
+- `packages/cli/src/tui/telegram-bridge.ts` — exact recovery contract selection
+  and evidence-gated synthesis.
+- `packages/orchestrator/src/agenticRunner.ts` — objective admission at bounded
+  review.
+- `packages/cli/tests/telegram-objective-resume.test.ts`
+- `packages/cli/tests/telegram-bot-api-10.test.ts`
+- `packages/orchestrator/tests/agenticRunner-objective-control.test.ts`
+
+### REQ-TDT-010 — authoritative continuation and control-plane convergence
+
+- [x] Treat a directly addressed completion command as continuation of the
+      durable open task; it cannot be consumed by zero-tool quick chat.
+- [x] Bind terminal-review generation to the exact input, evidence IDs, and
+      message IDs enforced by its parser instead of generating against a
+      looser schema and rejecting the result afterward.
+- [x] Retry an invalid terminal review once at the review boundary using the
+      same immutable evidence snapshot; do not use a full object-work replay
+      as the first contract-repair mechanism.
+- [x] Make `deliver_due` authoritative for planning-free read-only contracts.
+      After the admitted observation, unrelated discovery/read tools must be
+      rejected and the runner must synthesize/complete.
+- [x] Keep checklist research in deferred enforcement so a first generic
+      observation does not prematurely terminate multi-source work.
+- [x] Add exact regressions for message 5717 continuation, review schema/parser
+      identity, in-place review repair, and message-612 enforcement mode.
+
+Primary anchors:
+
+- `packages/cli/src/tui/telegram-bridge.ts` — durable continuation boundary,
+  terminal-review schema/retry, and objective enforcement selection.
+- `packages/cli/tests/telegram-steering-finalization.test.ts`
+- `packages/cli/tests/telegram-terminal-metacognition.test.ts`
+- `packages/cli/tests/telegram-reminder-contract.test.ts`
+
 ## Cross-surface validation gates
 
 - [x] Orchestrator focused tests pass for visible-response evidence, completion
@@ -232,16 +307,18 @@ Primary anchors:
 
 ## Traceability matrix
 
-| Requirement | Production anchors | Regression anchors | Status |
-|---|---|---|---|
-| REQ-TDT-001 | orchestrator expected effects/readiness | terminal finalization + runner | focused green |
-| REQ-TDT-002 | Telegram task completion/delivery | public/private/no-reply | focused green |
-| REQ-TDT-003 | Telegram routing + reminder receipt | 5652/5653/5698/607 replay | focused green |
-| REQ-TDT-004 | expected-outcome normalization | PNG inline research | focused green |
-| REQ-TDT-005 | steering projection/ownership | PNG to Borneo steering | focused green |
-| REQ-TDT-006 | safe-delivery receipt parser | wrappers + redirects | focused green |
-| REQ-TDT-007 | terminal recovery/memory eligibility | retained-candidate recovery | focused green |
-| REQ-TDT-008 | capability admission + unavailable ownership | 5712/610 + recovery ordering | focused green |
+| Requirement | Production anchors                               | Regression anchors                                 | Status        |
+| ----------- | ------------------------------------------------ | -------------------------------------------------- | ------------- |
+| REQ-TDT-001 | orchestrator expected effects/readiness          | terminal finalization + runner                     | focused green |
+| REQ-TDT-002 | Telegram task completion/delivery                | public/private/no-reply                            | focused green |
+| REQ-TDT-003 | Telegram routing + reminder receipt              | 5652/5653/5698/607 replay                          | focused green |
+| REQ-TDT-004 | expected-outcome normalization                   | PNG inline research                                | focused green |
+| REQ-TDT-005 | steering projection/ownership                    | PNG to Borneo steering                             | focused green |
+| REQ-TDT-006 | safe-delivery receipt parser                     | wrappers + redirects                               | focused green |
+| REQ-TDT-007 | terminal recovery/memory eligibility             | retained-candidate recovery                        | focused green |
+| REQ-TDT-008 | capability admission + unavailable ownership     | 5712/610 + recovery ordering                       | focused green |
+| REQ-TDT-009 | recovered-contract migration + convergence gates | exact recovery + synthesis timing + bounded review | focused green |
+| REQ-TDT-010 | continuation + control-plane convergence         | 5717/612 + exact review contract                   | focused green |
 
 ## Evidence log
 
@@ -370,5 +447,72 @@ Primary anchors:
   exact-binding, quick-chat, terminal delivery, reminder, attention, router,
   cognition/recovery, and streamed-terminal surfaces.
 - CLI typecheck and build passed after the repair.
-- Live runtime remains `omnius@1.0.790`; no deployment, restart, inference
-  request, Telegram send, or live reminder mutation was performed.
+- At this checkpoint the live runtime remained `omnius@1.0.790`; no deployment,
+  restart, inference request, Telegram send, or live reminder mutation was
+  performed by this repair session.
+
+### 2026-10-02 — live 1.0.792 recovery finding and follow-up repair
+
+- The user-owned runtime updated to `omnius@1.0.792` and restarted at
+  `2026-10-02T06:57:21.994Z`. Its health record remained in `polling` with zero
+  consecutive poll failures and no replay backlog. This session did not start,
+  stop, or send through that process.
+- Version 1.0.792 contains the fresh-request boundary for message-5712-shaped
+  thread-data retrieval, so a new request cannot complete as a zero-tool
+  progress acknowledgement. A bare follow-up cannot reconstruct work already
+  orphaned by the pre-update runtime.
+- Restart recovery exposed a separate exact-task migration bug. Message 611's
+  current host boundary selected reminder `read_only` semantics, but
+  `telegramExpectedOutcomeContractForRun` preferred the persisted pre-update
+  `delivery` contract. Both post-restart attempts observed 29 reminders and
+  authored the roster, then failed readiness solely on missing `delivery`.
+- The recovery attempts also consumed `deliver_due` guidance before grounded
+  evidence and admitted `tool_search`/`file_read` after the useful reminder
+  result. The final intake state was `failed` after three bounded cycles with
+  no public reply.
+- Exact-input recovery now treats a current `host-contract-repair` contract as
+  the migration authority over the retained legacy contract. Real external
+  delivery contracts retain their receipt requirement.
+- `deliver_due` synthesis now waits for a successful non-control action result,
+  and the orchestrator enforces `bounded_review` even while external-effect
+  enforcement is deferred.
+- Focused validation after the follow-up patch: 200/200 CLI tests passed across
+  objective recovery, terminal delivery, and Telegram Bot API 10; 7/7
+  orchestrator objective-control tests passed; CLI and orchestrator typechecks
+  passed.
+- Broader affected-surface validation: 332/332 tests passed across 16 Telegram
+  suites, and 29/29 passed across four orchestrator completion, steering,
+  response-authority, and objective-control suites. Orchestrator and CLI builds
+  passed after formatting.
+- The follow-up patch is not in the installed 1.0.792 runtime. A new build,
+  version, install, and restart are required before live acceptance can be
+  checked.
+
+### 2026-10-02 — live 1.0.793 control-plane finding and root repair
+
+- The user-owned runtime restarted on globally installed `omnius@1.0.793` at
+  `2026-10-02T08:01:52.570Z`; polling remained healthy with no replay backlog.
+  This session did not start, stop, or send through that process.
+- Installed bundle SHA-256
+  `77c9e3b8094d90a3f91db155f9e28ee0a3dfad588bb03538608f284fbc768c27`
+  contains the REQ-TDT-009 contract-migration, grounded-synthesis, and bounded-
+  review changes. The live recurrence is therefore not a stale-package
+  explanation.
+- OMNIUS message 5717 exposed a durable-continuity failure: an exact open task
+  existed, but the directly addressed completion command was admitted to chat
+  and consumed after another unsupported progress acknowledgement.
+- Case Theory message 612 exposed two control-plane mismatches. Telegram set
+  `taskObjectiveEnforcement="verified_external_effect"` for every objective,
+  so a planning-free reminder list reached `deliver_due` but could still run
+  `tool_search` and `file_read`. Terminal-review generation also allowed
+  arbitrary evidence/message IDs while the parser required the exact packet,
+  so invalid reviewer output caused completed object work to be replayed.
+- The repair now derives strict frontier enforcement for planning-free
+  read-only contracts, binds the reviewer schema to the parser's exact IDs,
+  and performs one fresh reviewer retry against the unchanged evidence before
+  any lifecycle recovery. Multi-source checklist research remains deferred.
+- Focused validation after the root repair: 250/250 tests passed across six
+  affected Telegram suites; the updated review/enforcement tests passed 14/14;
+  CLI typecheck, build, and `git diff --check` passed.
+- The installed 1.0.793 runtime does not contain this REQ-TDT-010 repair. Live
+  acceptance remains open until a rebuilt package is installed and restarted.

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "omnius",
-  "version": "1.0.792",
+  "version": "1.0.794",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "omnius",
-      "version": "1.0.792",
+      "version": "1.0.794",
       "bundleDependencies": [
         "image-to-ascii"
       ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omnius",
-  "version": "1.0.792",
+  "version": "1.0.794",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/library.js",