@ouro.bot/cli 0.1.0-alpha.227 → 0.1.0-alpha.228

package/dist/repertoire/tools-credential.js

@@ -0,0 +1,184 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.credentialToolDefinitions = void 0;
+const credential_access_1 = require("./credential-access");
+const runtime_1 = require("../nerves/runtime");
+exports.credentialToolDefinitions = [
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "credential_get",
+                description: "Get credential metadata for a domain. Returns username, notes, and creation date. Never returns passwords — the credential gateway handles secret injection internally.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        domain: {
+                            type: "string",
+                            description: "Domain to look up (e.g. 'airbnb.com', 'api.openweathermap.org')",
+                        },
+                    },
+                    required: ["domain"],
+                },
+            },
+        },
+        handler: async (args) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.credential_tool_call",
+                message: "credential_get invoked",
+                meta: { tool: "credential_get", domain: args.domain },
+            });
+            try {
+                const store = (0, credential_access_1.getCredentialStore)();
+                const meta = await store.get(args.domain);
+                if (!meta) {
+                    return `No credential found for "${args.domain}".`;
+                }
+                return JSON.stringify(meta, null, 2);
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive: store.get wraps errors @preserve */
+                return `Credential error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        summaryKeys: ["domain"],
+    },
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "credential_store",
+                description: "Store credentials the agent acquired (e.g. during sign-up). The password is accepted in args because the model generated it. Stored passwords are never returned later — only metadata is visible.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        domain: {
+                            type: "string",
+                            description: "Domain these credentials are for (e.g. 'airbnb.com')",
+                        },
+                        username: {
+                            type: "string",
+                            description: "Username or email for the account",
+                        },
+                        password: {
+                            type: "string",
+                            description: "Password for the account",
+                        },
+                        notes: {
+                            type: "string",
+                            description: "Optional notes about this credential",
+                        },
+                    },
+                    required: ["domain", "username", "password"],
+                },
+            },
+        },
+        handler: async (args) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.credential_tool_call",
+                message: "credential_store invoked",
+                meta: { tool: "credential_store", domain: args.domain },
+            });
+            try {
+                const store = (0, credential_access_1.getCredentialStore)();
+                await store.store(args.domain, {
+                    username: args.username,
+                    password: args.password,
+                    notes: args.notes,
+                });
+                return `Credentials stored for "${args.domain}".`;
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive: store.store wraps errors @preserve */
+                return `Credential store error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        confirmationRequired: true,
+        summaryKeys: ["domain"],
+    },
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "credential_list",
+                description: "List stored credential domains. Returns metadata only (domain, username, notes, creation date). Never returns passwords.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        search: {
+                            type: "string",
+                            description: "Optional search filter to match against domain names",
+                        },
+                    },
+                },
+            },
+        },
+        handler: async (args) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.credential_tool_call",
+                message: "credential_list invoked",
+                meta: { tool: "credential_list" },
+            });
+            try {
+                const store = (0, credential_access_1.getCredentialStore)();
+                let items = await store.list();
+                // Client-side search filter
+                if (args.search) {
+                    const term = args.search.toLowerCase();
+                    items = items.filter((item) => item.domain.toLowerCase().includes(term) ||
+                        (item.username && item.username.toLowerCase().includes(term)));
+                }
+                return JSON.stringify(items, null, 2);
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive: store.list wraps errors @preserve */
+                return `Credential list error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        summaryKeys: ["search"],
+    },
+    {
+        tool: {
+            type: "function",
+            function: {
+                name: "credential_delete",
+                description: "Delete stored credentials for a domain.",
+                parameters: {
+                    type: "object",
+                    properties: {
+                        domain: {
+                            type: "string",
+                            description: "Domain whose credentials should be deleted",
+                        },
+                    },
+                    required: ["domain"],
+                },
+            },
+        },
+        handler: async (args) => {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.credential_tool_call",
+                message: "credential_delete invoked",
+                meta: { tool: "credential_delete", domain: args.domain },
+            });
+            try {
+                const store = (0, credential_access_1.getCredentialStore)();
+                const deleted = await store.delete(args.domain);
+                if (deleted) {
+                    return `Credentials for "${args.domain}" deleted.`;
+                }
+                return `No credential found for "${args.domain}".`;
+            }
+            catch (err) {
+                /* v8 ignore next -- defensive: store.delete wraps errors @preserve */
+                return `Credential delete error: ${err instanceof Error ? err.message : String(err)}`;
+            }
+        },
+        confirmationRequired: true,
+        summaryKeys: ["domain"],
+    },
+];

package/dist/repertoire/travel-api-client.js

@@ -9,7 +9,6 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TRAVEL_ADVISORY_RSS_URL = void 0;
-exports.setWeatherVaultConfig = setWeatherVaultConfig;
 exports.getWeather = getWeather;
 exports.getWeatherByCity = getWeatherByCity;
 exports.parseAdvisoryLevel = parseAdvisoryLevel;
@@ -20,22 +19,13 @@ exports.geocode = geocode;
 exports.reverseGeocode = reverseGeocode;
 exports.searchPOI = searchPOI;
 const runtime_1 = require("../nerves/runtime");
-const bitwarden_client_1 = require("./bitwarden-client");
+const credential_access_1 = require("./credential-access");
 // --- OpenWeatherMap ---
-/**
- * Vault item ID and field name for OpenWeatherMap API key.
- * Override via setWeatherVaultConfig() for custom vault layouts.
- */
-let weatherVaultItemId = "openweathermap-api";
-let weatherVaultField = "apiKey";
-function setWeatherVaultConfig(itemId, field) {
-    weatherVaultItemId = itemId;
-    if (field)
-        weatherVaultField = field;
-}
+/** Domain used for weather API key credential retrieval. */
+const WEATHER_CREDENTIAL_DOMAIN = "api.openweathermap.org";
 async function getWeatherApiKey() {
-    const client = (0, bitwarden_client_1.getBitwardenClient)();
-    return client.getRawSecret(weatherVaultItemId, weatherVaultField);
+    const store = (0, credential_access_1.getCredentialStore)();
+    return store.getRawSecret(WEATHER_CREDENTIAL_DOMAIN, "password");
 }
 async function getWeather(lat, lon) {
     return withNervesEvents("getWeather", { lat, lon }, async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.227",
+  "version": "0.1.0-alpha.228",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",

package/skills/browser-navigation.md

@@ -44,7 +44,7 @@ Follow this pattern for every page interaction:
 3. Use `browser_type` for username/password fields
 4. Use `browser_click` to submit
 5. Wait for redirect, then verify login succeeded via snapshot
-6. NEVER hardcode credentials -- use `vault_get` to retrieve login info
+6. NEVER hardcode credentials -- use `credential_get` to retrieve login info
 
 ### Search Forms (Hotels, Flights, Rentals)
 1. Navigate to the search page
@@ -58,7 +58,7 @@ Follow this pattern for every page interaction:
 ### Booking Forms
 1. **ALWAYS confirm with the user before proceeding to payment**
 2. Fill traveler information
-3. Use vault credentials for payment (via `vault_get` -- NEVER type raw card numbers)
+3. Use stored credentials for payment (via `credential_get` -- NEVER type raw card numbers)
 4. Screenshot the final review page for user confirmation
 5. Only click "Book" / "Confirm" after explicit user approval
 
@@ -98,7 +98,7 @@ The stealth configuration handles most fingerprinting automatically. Additionall
 - **CAPTCHAs**: Stop and ask the user to solve manually.
 - **Stale elements**: Re-snapshot the page and retry the interaction.
 - **Blocked/403**: The site may have detected automation. Wait 30 seconds and try with a different approach (e.g., direct URL instead of navigation).
-- **Session expired**: Re-login using stored vault credentials.
+- **Session expired**: Re-login using stored stored credentials.
 
 ## Human Confirmation Gates
 

package/skills/travel-planning.md

@@ -71,10 +71,25 @@ Present top 3-5 options comparing:
 - **Never proceed with a financial commitment without explicit approval**
 
 ### Credential Handling
-- Use `vault_get` to retrieve payment credentials (never expose raw values)
-- Use `vault_get` for loyalty program numbers
-- Use browser-navigation skill form patterns for entering credentials
-- The credential gateway ensures secrets never enter model context
+
+Credentials are managed through the credential access layer, which stores
+agent-owned secrets encrypted in the bundle vault. Raw passwords never
+enter model context.
+
+- Use `credential_get` to check what credentials exist for a domain (metadata only, never passwords)
+- Use `credential_store` to save credentials the agent acquired (e.g., during sign-up for a service)
+- The credential gateway automatically injects secrets into API requests via `getRawSecret()`
+- Use browser-navigation skill form patterns for entering credentials during interactive sessions
+
+**How credentials work:**
+- Agent-owned credentials are AES-256-GCM encrypted in `~/AgentBundles/<agent>.ouro/vault/`
+- The master key lives at `~/.agentsecrets/<agent>/vault.key` (auto-generated on first use)
+- The agent can sign up for services and store its own credentials
+- Stored passwords are never returned to the model — only metadata (domain, username, notes)
+
+**Upgrade path:** Install `aac` (Bitwarden Agent Access CLI) for vault-backed credentials.
+When `aac` is available, the harness can read credentials from Bitwarden directly,
+enabling access to human-managed vault items without storing them locally.
 
 ### Post-Booking
 - Save confirmation details (confirmation number, dates, hotel name, airline, booking reference)
@@ -105,35 +120,15 @@ Track and reference these travel preferences:
 - `weather_lookup` - Current weather by city or coordinates
 - `travel_advisory` - US State Dept advisory by country code
 - `geocode_search` - Location/POI search with coordinates
-- `vault_get` - Retrieve credentials (payment, loyalty)
-- `vault_store` - Store new credentials (family trust required)
+- `credential_get` - Check credential metadata for a domain (never returns passwords)
+- `credential_store` - Store credentials the agent acquired (family trust, confirmation required)
+- `credential_list` - List stored credential domains
+- `credential_delete` - Delete stored credentials (family trust, confirmation required)
 
 ### MCP Tools (when configured)
 - Browser tools via `@playwright/mcp` - see `browser-navigation` skill
 - Duffel flight search (when MCP server available)
 - Expedia hotel search (when MCP server available)
-- Bitwarden vault management via `@bitwarden/mcp-server` (agent-facing interactive vault access)
-
-### Bitwarden MCP Server
-
-For agent-facing vault interaction (browsing items, searching, reading fields), configure
-`@bitwarden/mcp-server` as an MCP server in agent.json:
-
-```json
-{
-  "mcpServers": {
-    "bitwarden": {
-      "command": "npx",
-      "args": ["@bitwarden/mcp-server"]
-    }
-  }
-}
-```
-
-This is distinct from the built-in `bw` CLI-based credential gateway, which handles
-harness-internal secret injection (e.g., API keys injected into tool requests via
-`getRawSecret()`). The MCP server is for the agent to interactively browse and manage
-vault items on behalf of the user.
 
 ### Human Confirmation Required For
 - Any booking or payment

package/dist/repertoire/bitwarden-client.js

@@ -1,290 +0,0 @@
-"use strict";
-/**
- * Bitwarden vault client for credential management.
- *
- * SDK-first approach: attempts dynamic import of @bitwarden/sdk-napi,
- * falls back to `bw` CLI with --session flag.
- *
- * Raw secrets are NEVER returned to callers except via getRawSecret(),
- * which is reserved for internal use by the credential gateway (apiRequest vaultKey).
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.BitwardenClient = void 0;
-exports.getBitwardenClient = getBitwardenClient;
-exports.resetBitwardenClient = resetBitwardenClient;
-const child_process_1 = require("child_process");
-const runtime_1 = require("../nerves/runtime");
-class BitwardenClient {
-    sessionKey = null;
-    connected = false;
-    clientMode = null;
-    async connect(config) {
-        (0, runtime_1.emitNervesEvent)({
-            event: "client.vault_connect_start",
-            component: "clients",
-            message: "connecting to Bitwarden vault",
-            meta: { mode: config.mode ?? "auto" },
-        });
-        try {
-            if (config.mode === "cli") {
-                await this.connectCli(config);
-            }
-            else {
-                // Try SDK first, fall back to CLI
-                try {
-                    await this.connectSdk(config);
-                }
-                catch {
-                    (0, runtime_1.emitNervesEvent)({
-                        event: "client.vault_sdk_fallback",
-                        component: "clients",
-                        message: "SDK not available, falling back to bw CLI",
-                        meta: {},
-                    });
-                    await this.connectCli(config);
-                }
-            }
-            (0, runtime_1.emitNervesEvent)({
-                event: "client.vault_connect_end",
-                component: "clients",
-                message: "connected to Bitwarden vault",
-                meta: { mode: this.clientMode },
-            });
-        }
-        catch (err) {
-            (0, runtime_1.emitNervesEvent)({
-                level: "error",
-                event: "client.vault_connect_error",
-                component: "clients",
-                message: "failed to connect to Bitwarden vault",
-                /* v8 ignore next -- defensive: execCli always wraps in Error @preserve */
-                meta: { reason: err instanceof Error ? err.message : String(err) },
-            });
-            throw err;
-        }
-    }
-    async disconnect() {
-        this.sessionKey = null;
-        this.connected = false;
-        this.clientMode = null;
-        (0, runtime_1.emitNervesEvent)({
-            event: "client.vault_disconnect",
-            component: "clients",
-            message: "disconnected from Bitwarden vault",
-            meta: {},
-        });
-    }
-    isConnected() {
-        return this.connected;
-    }
-    async getItem(id) {
-        this.requireConnected();
-        return this.withNervesEvents("getItem", { id }, async () => {
-            const raw = await this.fetchRawItem(id);
-            return this.stripSecrets(raw);
-        });
-    }
-    async createItem(name, fields) {
-        this.requireConnected();
-        return this.withNervesEvents("createItem", { name }, async () => {
-            const itemFields = Object.entries(fields).map(([k, v]) => ({
-                name: k,
-                value: v,
-                type: 0, // text type
-            }));
-            const itemTemplate = {
-                type: 1, // login type
-                name,
-                fields: itemFields,
-                login: {},
-            };
-            const encoded = Buffer.from(JSON.stringify(itemTemplate)).toString("base64");
-            const stdout = await this.execCli(["create", "item", encoded]);
-            const parsed = this.parseCliResponse(stdout);
-            return { id: parsed.id, name: parsed.name, type: parsed.type };
-        });
-    }
-    async listItems(search) {
-        this.requireConnected();
-        return this.withNervesEvents("listItems", { search }, async () => {
-            const args = ["list", "items"];
-            if (search) {
-                args.push("--search", search);
-            }
-            const stdout = await this.execCli(args);
-            const parsed = this.parseCliResponse(stdout);
-            const items = Array.isArray(parsed.data) ? parsed.data : (Array.isArray(parsed) ? parsed : []);
-            return items.map((item) => ({ id: item.id, name: item.name, type: item.type }));
-        });
-    }
-    async deleteItem(id) {
-        this.requireConnected();
-        return this.withNervesEvents("deleteItem", { id }, async () => {
-            await this.execCli(["delete", "item", id]);
-        });
-    }
-    /**
-     * Internal: used by credential gateway (PR 5) to get raw secret for HTTP injection.
-     * NOT exposed via tools -- only called by apiRequest() internally.
-     */
-    async getRawSecret(itemId, fieldName) {
-        this.requireConnected();
-        return this.withNervesEvents("getRawSecret", { itemId, fieldName }, async () => {
-            const raw = await this.fetchRawItem(itemId);
-            // Check custom fields first
-            if (raw.fields) {
-                const field = raw.fields.find((f) => f.name === fieldName);
-                if (field)
-                    return field.value;
-            }
-            // Check login.password
-            if (fieldName === "password" && raw.login?.password) {
-                return raw.login.password;
-            }
-            throw new Error(`field "${fieldName}" not found on vault item "${itemId}"`);
-        });
-    }
-    // --- Private methods ---
-    requireConnected() {
-        if (!this.connected) {
-            throw new Error("vault not connected -- call connect() first");
-        }
-    }
-    async withNervesEvents(operation, meta, fn) {
-        (0, runtime_1.emitNervesEvent)({
-            event: "client.request_start",
-            component: "clients",
-            message: `vault ${operation} starting`,
-            meta: { operation, ...meta },
-        });
-        try {
-            const result = await fn();
-            (0, runtime_1.emitNervesEvent)({
-                event: "client.request_end",
-                component: "clients",
-                message: `vault ${operation} complete`,
-                meta: { operation, ...meta },
-            });
-            return result;
-        }
-        catch (err) {
-            (0, runtime_1.emitNervesEvent)({
-                level: "error",
-                event: "client.error",
-                component: "clients",
-                message: `vault ${operation} failed`,
-                /* v8 ignore next -- defensive: callers always throw Error instances @preserve */
-                meta: { operation, reason: err instanceof Error ? err.message : String(err), ...meta },
-            });
-            throw err;
-        }
-    }
-    async connectSdk(_config) {
-        // Attempt dynamic import of SDK
-        // This will throw if the package is not installed
-        const sdk = await Promise.resolve(`${"@bitwarden/sdk-napi"}`).then(s => __importStar(require(s)));
-        /* v8 ignore start -- SDK not yet published; path tested when package becomes available @preserve */
-        const client = new sdk.BitwardenClient({ apiUrl: _config.serverUrl ?? "https://api.bitwarden.com" }, 0);
-        await client.auth().loginAccessToken(_config.accessToken, "");
-        this.connected = true;
-        this.clientMode = "sdk";
-        /* v8 ignore stop */
-    }
-    async connectCli(config) {
-        this.sessionKey = config.accessToken;
-        // Verify CLI is available and session key works
-        await this.execCli(["status"]);
-        this.connected = true;
-        this.clientMode = "cli";
-    }
-    async fetchRawItem(id) {
-        const stdout = await this.execCli(["get", "item", id]);
-        const parsed = this.parseCliResponse(stdout);
-        return parsed;
-    }
-    stripSecrets(raw) {
-        const item = {
-            id: raw.id,
-            name: raw.name,
-            type: raw.type,
-        };
-        if (raw.notes)
-            item.notes = raw.notes;
-        if (raw.fields)
-            item.fields = raw.fields;
-        if (raw.login) {
-            item.login = {};
-            if (raw.login.username)
-                item.login.username = raw.login.username;
-            if (raw.login.uris)
-                item.login.uris = raw.login.uris;
-            // password intentionally NOT copied
-        }
-        return item;
-    }
-    parseCliResponse(stdout) {
-        const parsed = JSON.parse(stdout);
-        // bw CLI with --response wraps in { success, data }
-        if (parsed.success !== undefined && parsed.data !== undefined) {
-            return parsed.data;
-        }
-        return parsed;
-    }
-    execCli(args) {
-        return new Promise((resolve, reject) => {
-            const fullArgs = [...args, "--session", this.sessionKey, "--response"];
-            (0, child_process_1.execFile)("bw", fullArgs, { timeout: 30_000 }, (err, stdout, _stderr) => {
-                if (err) {
-                    reject(new Error(`bw CLI error: ${err.message}`));
-                    return;
-                }
-                resolve(stdout);
-            });
-        });
-    }
-}
-exports.BitwardenClient = BitwardenClient;
-// Singleton accessor
-let _client = null;
-function getBitwardenClient() {
-    if (!_client) {
-        _client = new BitwardenClient();
-    }
-    return _client;
-}
-function resetBitwardenClient() {
-    _client = null;
-}