@ouro.bot/cli 0.1.0-alpha.256 → 0.1.0-alpha.257

package/changelog.json

@@ -1,6 +1,13 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.257",
+      "changes": [
+        "test(daemon): convert all `daemon-cli.test.ts` auth/thoughts/config tests to use `os.tmpdir()` via the new `createTmpBundle()` helper. Previously these tests wrote real bundles to `~/AgentBundles/auth-local-${Date.now()}.ouro` etc., relying on `try/finally` cleanup that doesn't fire on test interruption \u2014 leaking bundle directories into the developer's home and inflating noise on the running daemon. The `REAL_BUNDLES_WRITE_ALLOWLIST` ratchet in `test-isolation.contract.test.ts` is now empty.",
+        "fix(daemon/cli-exec): plumb `bundlesRoot` and `secretsRoot` deps through the auth.run / auth.verify / auth.switch / config.model / config.models / thoughts handlers so tests can route reads/writes to a tmpdir without monkey-patching the identity module. Production code paths still default to `getAgentBundlesRoot()` and `~/.agentsecrets`."
+      ]
+    },
     {
       "version": "0.1.0-alpha.256",
       "changes": [

package/dist/heart/daemon/cli-exec.js

@@ -1345,7 +1345,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
     }
     // ── auth (local, no daemon socket needed) ──
     if (command.kind === "auth.run") {
-        const provider = command.provider ?? (0, auth_flow_1.readAgentConfigForAgent)(command.agent).config.humanFacing.provider;
+        const provider = command.provider ?? (0, auth_flow_1.readAgentConfigForAgent)(command.agent, deps.bundlesRoot).config.humanFacing.provider;
         /* v8 ignore next -- tests always inject runAuthFlow; default is for production @preserve */
         const authRunner = deps.runAuthFlow ?? (await Promise.resolve().then(() => __importStar(require("../auth/auth-flow")))).runRuntimeAuthFlow;
         const result = await authRunner({
@@ -1359,7 +1359,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
         // Verify the credentials actually work by pinging the provider
         /* v8 ignore start -- integration: real API ping after auth @preserve */
         try {
-            const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent);
+            const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent, { secretsRoot: deps.secretsRoot });
             const status = await verifyProviderCredentials(provider, secrets.providers);
             deps.writeStdout(`${provider}: ${status}`);
         }
@@ -1372,7 +1372,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
     // ── auth verify (local, no daemon socket needed) ──
     /* v8 ignore start -- auth verify/switch: tested in daemon-cli.test.ts but v8 traces differ in CI @preserve */
     if (command.kind === "auth.verify") {
-        const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent);
+        const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent, { secretsRoot: deps.secretsRoot });
         const providers = secrets.providers;
         if (command.provider) {
             const status = await verifyProviderCredentials(command.provider, providers);
@@ -1391,7 +1391,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
     }
     // ── auth switch (local, no daemon socket needed) ──
     if (command.kind === "auth.switch") {
-        const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent);
+        const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent, { secretsRoot: deps.secretsRoot });
         const providerSecrets = secrets.providers[command.provider];
         if (!providerSecrets || !hasStoredCredentials(command.provider, providerSecrets)) {
             const message = `no credentials stored for ${command.provider}. Run \`ouro auth --agent ${command.agent} --provider ${command.provider}\` first.`;
@@ -1406,11 +1406,11 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
             return message;
         }
         if (command.facing) {
-            (0, auth_flow_1.writeAgentProviderSelection)(command.agent, command.facing, command.provider);
+            (0, auth_flow_1.writeAgentProviderSelection)(command.agent, command.facing, command.provider, deps.bundlesRoot);
         }
         else {
-            (0, auth_flow_1.writeAgentProviderSelection)(command.agent, "human", command.provider);
-            (0, auth_flow_1.writeAgentProviderSelection)(command.agent, "agent", command.provider);
+            (0, auth_flow_1.writeAgentProviderSelection)(command.agent, "human", command.provider, deps.bundlesRoot);
+            (0, auth_flow_1.writeAgentProviderSelection)(command.agent, "agent", command.provider, deps.bundlesRoot);
         }
         const message = `switched ${command.agent} to ${command.provider} (verified working)`;
         deps.writeStdout(message);
@@ -1420,14 +1420,14 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
     // ── config models (local, no daemon socket needed) ──
     /* v8 ignore start -- config models: tested via daemon-cli.test.ts @preserve */
     if (command.kind === "config.models") {
-        const { config } = (0, auth_flow_1.readAgentConfigForAgent)(command.agent);
+        const { config } = (0, auth_flow_1.readAgentConfigForAgent)(command.agent, deps.bundlesRoot);
         const provider = config.humanFacing.provider;
         if (provider !== "github-copilot") {
             const message = `model listing not available for ${provider} — check provider documentation.`;
             deps.writeStdout(message);
             return message;
         }
-        const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent);
+        const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent, { secretsRoot: deps.secretsRoot });
         const ghConfig = secrets.providers["github-copilot"];
         if (!ghConfig.githubToken || !ghConfig.baseUrl) {
             throw new Error(`github-copilot credentials not configured. Run \`ouro auth --agent ${command.agent} --provider github-copilot\` first.`);
@@ -1454,10 +1454,10 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
     if (command.kind === "config.model") {
         const facing = command.facing ?? "human";
         // Validate model availability for github-copilot before writing
-        const { config } = (0, auth_flow_1.readAgentConfigForAgent)(command.agent);
+        const { config } = (0, auth_flow_1.readAgentConfigForAgent)(command.agent, deps.bundlesRoot);
         const facingConfig = facing === "human" ? config.humanFacing : config.agentFacing;
         if (facingConfig.provider === "github-copilot") {
-            const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent);
+            const { secrets } = (0, auth_flow_1.loadAgentSecrets)(command.agent, { secretsRoot: deps.secretsRoot });
             const ghConfig = secrets.providers["github-copilot"];
             if (ghConfig.githubToken && ghConfig.baseUrl) {
                 const fetchFn = deps.fetchImpl ?? fetch;
@@ -1482,7 +1482,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
                 }
             }
         }
-        const { provider, previousModel } = (0, auth_flow_1.writeAgentModel)(command.agent, facing, command.modelName);
+        const { provider, previousModel } = (0, auth_flow_1.writeAgentModel)(command.agent, facing, command.modelName, { bundlesRoot: deps.bundlesRoot });
         const message = previousModel
             ? `updated ${command.agent} model on ${provider}: ${previousModel} → ${command.modelName}`
             : `set ${command.agent} model on ${provider}: ${command.modelName}`;
@@ -1569,7 +1569,9 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
     if (command.kind === "thoughts") {
         try {
             const agentName = command.agent ?? (0, identity_1.getAgentName)();
-            const agentRoot = path.join((0, identity_1.getAgentBundlesRoot)(), `${agentName}.ouro`);
+            /* v8 ignore next -- production fallback: tests always inject bundlesRoot via createTmpBundle @preserve */
+            const bundlesRoot = deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)();
+            const agentRoot = path.join(bundlesRoot, `${agentName}.ouro`);
             const sessionFilePath = (0, thoughts_1.getInnerDialogSessionPath)(agentRoot);
             if (command.json) {
                 try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.256",
+  "version": "0.1.0-alpha.257",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",