@ouro.bot/cli 0.1.0-alpha.291 → 0.1.0-alpha.293

package/changelog.json

@@ -1,6 +1,21 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.293",
+      "changes": [
+        "chore(tests): three test-isolation fixes bundled as chain D1 from the follow-up investigation after PR #372 (default.ouro leak). (1) Remove the `agentName = \"default\"` catch fallback in `src/repertoire/credential-access.ts` getCredentialStore() — same silent-leak class as coding/manager.ts, would have routed BuiltInCredentialStore writes to `~/AgentBundles/default.ouro/vault/` and `~/.agentsecrets/default/` on any test hit that didn't mock identity. Hoisted `getAgentName()` out of the outer try/catch so it throws loudly; the remaining try/catch now only guards the bitwarden store wiring (the only code path that has a legitimate fall-through to built-in). Also switched from `require(\"../heart/identity\")` inside the function body to a static ESM import at the top of the file — require() bypasses vitest's module registry so `vi.mock(\"../heart/identity\", ...)` was silently not applying to the old dynamic require; the static import finally lets the existing test mocks intercept. Tests in credential-access.test.ts that had been accidentally leaning on the default fallback now hit the real mock as intended.",
+        "chore(tests): fix the tmpbundle leak guard false-positive on daemon-cli.test.ts. The guard was firing on \"ouro CLI parsing > parses primary daemon commands\" every run, but the real cause was `createTmpBundle` being called at describe-scope inside the \"ouro thoughts CLI execution\" suite (line 5662) — synchronous describe callbacks run during test collection, so the handle landed in _liveHandles before ANY test ran. The first afterEach hook (on the first test in the file) then noticed the dangling handle and blamed it. Fix: moved the createTmpBundle call into a beforeAll hook and tagged it `{ shared: true }` so the handle only exists while the thoughts suite is actually running, with afterAll cleanup aligned to it.",
+        "chore(tests): extend the tmpbundle leak guard with a `shared: true` opt-in. `TmpBundleHandle` gains a `shared` field, `CreateTmpBundleOptions.shared` defaults to false, and the per-test leak guard in `src/__tests__/nerves/global-capture.ts` now skips shared handles (they're cleaned in afterAll, not after every test). Prevents the class of false positive exposed by the daemon-cli.test.ts fix above.",
+        "chore(tests): new runtime prod-path leak guard in `src/__tests__/nerves/global-capture.ts`. Snapshots `~/AgentBundles` entries at worker boot, diffs at worker teardown (afterAll without describe context runs once per worker), force-removes any new entries, and emits a loud console.error naming them. Text-based contract tests can't catch runtime leaks where production code routes a write via a silent fallback (exactly the bug class PR #372 fixed in coding/manager.ts). This runtime guard is the belt to the contract test's suspenders — would have caught the default.ouro leak in the first run instead of requiring my investigation chain."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.292",
+      "changes": [
+        "feat(mind): add structured provenance tracking to diary entries. New DiaryEntryProvenance interface records tool, channel (cli/teams/bluebubbles/inner/mcp), friend identity (id + name), and trust level (family/friend/acquaintance/stranger) at write time. diary_write handler automatically extracts provenance from ToolContext. Associative recall and recall tool render provenance fields when present. Fully backwards compatible — existing entries without provenance parse and display normally. 19 tests across 4 test files with 100% coverage on new code."
+      ]
+    },
     {
       "version": "0.1.0-alpha.291",
       "changes": [

package/dist/mind/associative-recall.js

@@ -197,8 +197,17 @@ async function injectAssociativeRecall(messages, options) {
                 }
             }
             for (const fact of recalled) {
+                let meta = `score=${fact.score.toFixed(3)} source=${fact.source}`;
+                if (fact.provenance) {
+                    if (fact.provenance.channel)
+                        meta += ` channel=${fact.provenance.channel}`;
+                    if (fact.provenance.friendName)
+                        meta += ` friend=${fact.provenance.friendName}`;
+                    if (fact.provenance.trust)
+                        meta += ` trust=${fact.provenance.trust}`;
+                }
                 resultLines.push({
-                    text: `[diary] ${fact.text} [score=${fact.score.toFixed(3)} source=${fact.source}]`,
+                    text: `[diary] ${fact.text} [${meta}]`,
                     score: fact.score,
                 });
             }

package/dist/mind/diary.js

@@ -235,6 +235,7 @@ async function saveDiaryEntry(options) {
         about: options.about?.trim() || undefined,
         createdAt: (options.now ?? (() => new Date()))().toISOString(),
         embedding,
+        ...(options.provenance ? { provenance: options.provenance } : {}),
     };
     return appendEntriesWithDedup(stores, [fact], { semanticThreshold: SEMANTIC_DEDUP_THRESHOLD });
 }

package/dist/repertoire/credential-access.js

@@ -54,6 +54,7 @@ const path = __importStar(require("node:path"));
 const os = __importStar(require("node:os"));
 const node_child_process_1 = require("node:child_process");
 const runtime_1 = require("../nerves/runtime");
+const identity = __importStar(require("../heart/identity"));
 // ---------------------------------------------------------------------------
 // Helpers
 // ---------------------------------------------------------------------------
@@ -459,14 +460,25 @@ function ensureVaultDefaults(agentName, agentRoot, existingVault) {
 function getCredentialStore() {
     if (_store)
         return _store;
-    let agentName;
+    // Resolve identity up front. The previous implementation wrapped this call
+    // in a try/catch that silently fell back to `agentName = "default"`, which
+    // meant any test that hit getCredentialStore() without mocking identity
+    // silently constructed a BuiltInCredentialStore("default") routing writes
+    // to `~/AgentBundles/default.ouro/vault/` and `~/.agentsecrets/default/`.
+    // Same silent-leak class we just fixed in coding/manager.ts. No fallback:
+    // getAgentName() throws loudly if argv lacks --agent, which is correct for
+    // the only caller (production agents with a real identity). Uses the
+    // static ESM import above instead of `require("../heart/identity")` so
+    // `vi.mock("../heart/identity", ...)` in tests actually intercepts the
+    // call — require() bypasses vitest's module registry.
+    const agentName = identity.getAgentName();
+    const agentRoot = identity.getAgentRoot(agentName);
+    // Try to load vault config from agent.json + secrets.json. Only this block
+    // is defended with try/catch — bitwarden wiring can legitimately fail
+    // (missing vault config, no bw CLI, unreachable server) and the fallback
+    // to BuiltInCredentialStore is the intended behavior.
     let backend = "built-in";
     try {
-        // Dynamic import to avoid circular dependency at module level
-        const identity = require("../heart/identity");
-        agentName = identity.getAgentName();
-        const agentRoot = identity.getAgentRoot(agentName);
-        // Try to load vault config from agent.json + secrets.json
         const config = identity.loadAgentConfig?.();
         // Auto-configure vault defaults if missing
         const vaultSection = ensureVaultDefaults(agentName, agentRoot, config?.vault);
@@ -495,7 +507,7 @@ function getCredentialStore() {
         /* v8 ignore stop */
     }
     catch {
-        agentName = "default";
+        // Bitwarden wiring failed — fall through to built-in store below.
     }
     /* v8 ignore next -- false branch only reachable when BitwardenCredentialStore was created above @preserve */
     if (!_store) {
@@ -505,7 +517,7 @@ function getCredentialStore() {
         event: "repertoire.credential_store_init",
         component: "repertoire",
         message: "credential store initialized",
-        meta: { backend, agentName: agentName },
+        meta: { backend, agentName },
     });
     return _store;
 }

package/dist/repertoire/tools-memory.js

@@ -172,7 +172,16 @@ exports.memoryToolDefinitions = [
                 // Search diary entries
                 const hits = await (0, diary_1.searchDiaryEntries)(query, (0, diary_1.readDiaryEntries)());
                 for (const fact of hits) {
-                    resultLines.push(`[diary] ${fact.text} (source=${fact.source}, createdAt=${fact.createdAt})`);
+                    let meta = `source=${fact.source}, createdAt=${fact.createdAt}`;
+                    if (fact.provenance) {
+                        if (fact.provenance.channel)
+                            meta += `, channel=${fact.provenance.channel}`;
+                        if (fact.provenance.friendName)
+                            meta += `, friend=${fact.provenance.friendName}`;
+                        if (fact.provenance.trust)
+                            meta += `, trust=${fact.provenance.trust}`;
+                    }
+                    resultLines.push(`[diary] ${fact.text} (${meta})`);
                 }
                 // Search journal index
                 const agentRoot = (0, identity_1.getAgentRoot)();
@@ -219,14 +228,32 @@ exports.memoryToolDefinitions = [
                 },
             },
         },
-        handler: async (a) => {
+        handler: async (a, ctx) => {
             const entry = (a.entry || "").trim();
             if (!entry)
                 return "entry is required";
+            let provenance;
+            if (ctx?.context) {
+                const p = { tool: "diary_write" };
+                const channel = ctx.context.channel?.channel;
+                if (channel)
+                    p.channel = channel;
+                const friendId = ctx.context.friend?.id;
+                if (friendId)
+                    p.friendId = friendId;
+                const friendName = ctx.context.friend?.name;
+                if (friendName)
+                    p.friendName = friendName;
+                const trust = ctx.context.friend?.trustLevel;
+                if (trust)
+                    p.trust = trust;
+                provenance = p;
+            }
             const result = await (0, diary_1.saveDiaryEntry)({
                 text: entry,
                 source: "tool:diary_write",
                 about: typeof a.about === "string" ? a.about : undefined,
+                provenance,
             });
             return `saved diary entry (added=${result.added}, skipped=${result.skipped})`;
         },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.291",
+  "version": "0.1.0-alpha.293",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",