@ouro.bot/cli 0.1.0-alpha.115 → 0.1.0-alpha.117

package/changelog.json

@@ -1,6 +1,19 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.117",
+      "changes": [
+        "Failover messages now show human-readable reasons for failing providers instead of raw JSON API errors.",
+        "ouro auth now pings the provider after saving credentials and reports whether they work."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.116",
+      "changes": [
+        "Provider ping now uses a minimal direct API call (max_tokens:1, no thinking/reasoning params) instead of streamTurn, which was adding provider-specific features that could cause 400 errors unrelated to auth."
+      ]
+    },
     {
       "version": "0.1.0-alpha.115",
       "changes": [
@@ -12,7 +25,7 @@
       "changes": [
         "When a model provider fails mid-conversation (auth error, usage limit, outage), the harness now classifies the error, pings alternative configured providers, and surfaces validated failover options to the user in-channel. Reply 'switch to <provider>' to continue on a working provider.",
         "Each provider now has a `classifyError` method that distinguishes auth failures, usage/subscription limits, rate limits, server errors, and network errors. The old auth guidance wrappers are replaced by this unified classification system.",
-        "New `pingProvider` function makes a real heartbeat completion call to verify provider credentials and quota are live — no more format-only checks.",
+        "New `pingProvider` function makes a real heartbeat completion call to verify provider credentials and quota are live \u2014 no more format-only checks.",
         "Provider factories now accept optional config parameters, enabling credential injection for health inventory pings without touching disk config."
       ]
     },
@@ -147,7 +160,7 @@
     {
       "version": "0.1.0-alpha.94",
       "changes": [
-        "Fix stale CurrentVersion symlink not healing during `ouro up` — the daemon now detects and repairs dangling version symlinks before reading the active version.",
+        "Fix stale CurrentVersion symlink not healing during `ouro up` \u2014 the daemon now detects and repairs dangling version symlinks before reading the active version.",
         "Fix homedir regression in daemon-cli-defaults test and cover changelog-null branch."
       ]
     },
@@ -241,14 +254,14 @@
     {
       "version": "0.1.0-alpha.80",
       "changes": [
-        "Bootstrap package (npx ouro.bot) now installs into ~/.ouro-cli/ versioned layout directly. No more silent npx updates — every install and update is logged. Cleans up old ~/.local/bin/ouro wrapper."
+        "Bootstrap package (npx ouro.bot) now installs into ~/.ouro-cli/ versioned layout directly. No more silent npx updates \u2014 every install and update is logged. Cleans up old ~/.local/bin/ouro wrapper."
       ]
     },
     {
       "version": "0.1.0-alpha.79",
       "changes": [
         "New: Versioned CLI directory layout (~/.ouro-cli/) replaces npx-based ouro wrapper. Explicit version management, rollback support, and deterministic updates.",
-        "New: `ouro up` now checks the registry for newer CLI versions, installs them into ~/.ouro-cli/versions/, activates via symlink flip, and re-execs — no more silent npx downloads.",
+        "New: `ouro up` now checks the registry for newer CLI versions, installs them into ~/.ouro-cli/versions/, activates via symlink flip, and re-execs \u2014 no more silent npx downloads.",
         "New: `ouro rollback [<version>]` swaps CurrentVersion/previous symlinks, stops the daemon. With a version arg, installs if needed then activates.",
         "New: `ouro versions` lists cached CLI versions with * current and (previous) markers.",
         "Migration: On first run, old ~/.local/bin/ouro wrapper is removed, old PATH entry cleaned from shell profile, new ~/.ouro-cli/bin added to PATH.",
@@ -270,10 +283,10 @@
     {
       "version": "0.1.0-alpha.76",
       "changes": [
-        "Fix: CLI chat terminal logging now filters to warn/error only — info-level nerves logs go to ndjson file only, keeping the interactive TUI clean.",
+        "Fix: CLI chat terminal logging now filters to warn/error only \u2014 info-level nerves logs go to ndjson file only, keeping the interactive TUI clean.",
         "Fix: Streamed model output now wraps at word boundaries instead of mid-word. A new StreamingWordWrapper buffers partial lines and breaks at spaces when approaching terminal width.",
         "New: `ouro up` now prints 'ouro updated to <version> (was <previous>)' when npx downloads a newer CLI binary, separate from the agent bundle update message.",
-        "Fix: Spinner/log interleave verified — terminal sink reads pause/resume hooks at call time, not creation time, so the filterSink wrapper in CLI logging does not break spinner coordination."
+        "Fix: Spinner/log interleave verified \u2014 terminal sink reads pause/resume hooks at call time, not creation time, so the filterSink wrapper in CLI logging does not break spinner coordination."
       ]
     },
     {

package/dist/heart/daemon/daemon-cli.js

@@ -1352,6 +1352,12 @@ function createDefaultOuroCliDeps(socketPath = socket_client_1.DEFAULT_DAEMON_SO
         promptInput: defaultPromptInput,
         runAdoptionSpecialist: defaultRunAdoptionSpecialist,
         runAuthFlow: auth_flow_1.runRuntimeAuthFlow,
+        /* v8 ignore start -- integration: real API ping @preserve */
+        pingProvider: async (provider, config) => {
+            const { pingProvider: ping } = await Promise.resolve().then(() => __importStar(require("../../heart/provider-ping")));
+            return ping(provider, config);
+        },
+        /* v8 ignore stop */
         registerOuroBundleType: ouro_uti_1.registerOuroBundleUti,
         installOuroCommand: ouro_path_installer_1.installOuroCommand,
         /* v8 ignore start -- self-healing: ensures active symlink matches running runtime version @preserve */
@@ -2064,6 +2070,23 @@ async function runOuroCli(args, deps = createDefaultOuroCliDeps()) {
         // Behavior: ouro auth stores credentials only — does NOT switch provider.
         // Use `ouro auth switch` to change the active provider.
         deps.writeStdout(result.message);
+        // Verify the credentials actually work by pinging the provider
+        /* v8 ignore start -- integration: real API ping after auth @preserve */
+        try {
+            const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent);
+            const config = secrets.providers[provider];
+            const pingResult = await deps.pingProvider(provider, config);
+            if (pingResult.ok) {
+                deps.writeStdout(`verified: ${provider} credentials are working.`);
+            }
+            else {
+                deps.writeStdout(`warning: ${provider} credentials were saved but verification failed. you may need to re-run auth.`);
+            }
+        }
+        catch {
+            // Ping failure is non-blocking — credentials were saved regardless
+        }
+        /* v8 ignore stop */
         return result.message;
     }
     // ── auth verify (local, no daemon socket needed) ──

package/dist/heart/provider-failover.js

@@ -3,6 +3,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildFailoverContext = buildFailoverContext;
 exports.handleFailoverReply = handleFailoverReply;
 const runtime_1 = require("../nerves/runtime");
+const FAILING_PROVIDER_LABELS = {
+    "auth-failure": "its credentials need to be refreshed",
+    "usage-limit": "has also hit its usage limit",
+    "rate-limit": "is also being rate limited",
+    "server-error": "is also experiencing an outage",
+    "network-error": "could not be reached",
+    "unknown": "could not be reached",
+};
 const CLASSIFICATION_LABELS = {
     "auth-failure": "authentication failed",
     "usage-limit": "hit its usage limit",
@@ -29,7 +37,7 @@ function buildFailoverContext(errorMessage, classification, currentProvider, cur
         }
         else {
             // Configured but ping failed (expired token, provider also down, etc.)
-            failingProviders.push({ provider, reason: result.message });
+            failingProviders.push({ provider, classification: result.classification });
         }
     }
     const lines = [`${errorSummary}.`];
@@ -43,8 +51,10 @@ function buildFailoverContext(errorMessage, classification, currentProvider, cur
         lines.push(`reply ${switchOptions} to continue.`);
     }
     if (failingProviders.length > 0) {
-        for (const { provider, reason } of failingProviders) {
-            lines.push(`${provider} is configured but its credentials failed (${reason}). run \`ouro auth --agent ${agentName} --provider ${provider}\` to refresh.`);
+        for (const { provider, classification } of failingProviders) {
+            /* v8 ignore next -- defensive: all classifications have labels @preserve */
+            const detail = FAILING_PROVIDER_LABELS[classification] ?? "could not be reached";
+            lines.push(`${provider} is configured but ${detail}. run \`ouro auth --agent ${agentName} --provider ${provider}\` to refresh.`);
         }
     }
     if (unconfiguredProviders.length > 0) {

package/dist/heart/provider-ping.js

@@ -48,18 +48,6 @@ function createRuntimeForPing(provider, config) {
             throw new Error(`unsupported provider for ping: ${provider}`);
     }
 }
-/* v8 ignore start -- no-op stubs: never invoked, ping only needs streamTurn to not throw @preserve */
-const noop = () => { };
-/* v8 ignore stop */
-const noopCallbacks = {
-    onModelStart: noop,
-    onModelStreamStart: noop,
-    onTextChunk: noop,
-    onReasoningChunk: noop,
-    onToolStart: noop,
-    onToolEnd: noop,
-    onError: noop,
-};
 async function pingProvider(provider, config) {
     if (hasEmptyCredentials(provider, config)) {
         return { ok: false, classification: "auth-failure", message: "no credentials configured" };
@@ -82,12 +70,19 @@ async function pingProvider(provider, config) {
         /* v8 ignore next -- timeout callback: only fires after 10s, tests resolve faster @preserve */
         const timeout = setTimeout(() => controller.abort(), PING_TIMEOUT_MS);
         try {
-            await runtime.streamTurn({
-                messages: [{ role: "user", content: "ping" }],
-                activeTools: [],
-                callbacks: noopCallbacks,
-                signal: controller.signal,
-            });
+            // Minimal API call — no thinking, no reasoning, no tools.
+            // We use the runtime's client directly to avoid provider-specific
+            // streamTurn params (adaptive thinking, reasoning effort, phase
+            // annotations) that can cause 400 errors unrelated to auth/quota.
+            if (provider === "anthropic") {
+                const client = runtime.client;
+                await client.messages.create({ model: runtime.model, max_tokens: 1, messages: [{ role: "user", content: "ping" }] }, { signal: controller.signal });
+            }
+            else {
+                // OpenAI-compatible providers (azure, codex, minimax, github-copilot)
+                const client = runtime.client;
+                await client.chat.completions.create({ model: runtime.model, max_tokens: 1, messages: [{ role: "user", content: "ping" }] }, { signal: controller.signal });
+            }
             return { ok: true };
         }
         finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.115",
+  "version": "0.1.0-alpha.117",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",