@ouro.bot/cli 0.1.0-alpha.370 → 0.1.0-alpha.372

package/changelog.json

@@ -1,6 +1,22 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.372",
+      "changes": [
+        "Locked-vault errors now explain that provider credentials are still stored in the agent vault and that this computer is missing usable local unlock material.",
+        "The locked-vault guidance now names common machine-local causes, including a new computer, local profile or hostname migration, and removed local unlock entries.",
+        "`@ouro.bot/cli` and the `ouro.bot` wrapper are version-synced for the locked-vault bootstrap copy release."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.371",
+      "changes": [
+        "`ouro up` now rechecks selected provider health after a deterministic repair actually runs, so a successful vault unlock or auth repair is followed by either a recovery confirmation or the remaining degraded details.",
+        "Post-repair provider checks target the originally repairable degraded agents directly, avoiding false recovery when discovery output is sparse.",
+        "`@ouro.bot/cli` and the `ouro.bot` wrapper are version-synced for the post-repair provider check release."
+      ]
+    },
     {
       "version": "0.1.0-alpha.370",
       "changes": [

package/dist/heart/daemon/cli-exec.js

@@ -94,11 +94,11 @@ const DEFAULT_DAEMON_STARTUP_POLL_INTERVAL_MS = 500;
 const DEFAULT_DAEMON_STARTUP_STABILITY_WINDOW_MS = 1_500;
 const DEFAULT_DAEMON_STARTUP_RETRY_LIMIT = 1;
 const DEFAULT_DAEMON_STARTUP_LOG_LINES = 10;
-async function checkAlreadyRunningAgentProviders(deps) {
-    const agents = await Promise.resolve(deps.listDiscoveredAgents ? deps.listDiscoveredAgents() : (0, cli_defaults_1.defaultListDiscoveredAgents)());
+async function checkAgentProviders(deps, agentsOverride) {
+    const agents = agentsOverride ?? await Promise.resolve(deps.listDiscoveredAgents ? deps.listDiscoveredAgents() : (0, cli_defaults_1.defaultListDiscoveredAgents)());
     const bundlesRoot = deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)();
     const degraded = [];
-    for (const agent of agents) {
+    for (const agent of [...new Set(agents)]) {
         try {
             const result = await (0, agent_config_check_1.checkAgentConfigWithProviderHealth)(agent, bundlesRoot);
             if (result.ok)
@@ -132,6 +132,33 @@ async function checkAlreadyRunningAgentProviders(deps) {
     }
     return degraded;
 }
+async function checkAlreadyRunningAgentProviders(deps) {
+    return checkAgentProviders(deps);
+}
+async function reportPostRepairProviderHealth(deps, repairedAgents) {
+    const remainingDegraded = await checkAgentProviders(deps, repairedAgents);
+    (0, runtime_1.emitNervesEvent)({
+        level: remainingDegraded.length > 0 ? "warn" : "info",
+        component: "daemon",
+        event: "daemon.post_repair_provider_check",
+        message: remainingDegraded.length > 0
+            ? "post-repair provider health check still degraded"
+            : "post-repair provider health check recovered",
+        meta: { degradedCount: remainingDegraded.length, repairedAgents },
+    });
+    if (remainingDegraded.length === 0) {
+        deps.writeStdout("provider checks recovered after repair");
+        return;
+    }
+    deps.writeStdout("provider checks still degraded after repair:");
+    for (const d of remainingDegraded) {
+        deps.writeStdout(`  ${d.agent}: ${d.errorReason}`);
+        if (d.fixHint) {
+            deps.writeStdout(`    fix: ${d.fixHint}`);
+        }
+    }
+    deps.writeStdout("run `ouro up` again after applying the remaining fixes.");
+}
 async function checkProviderHealthBeforeChat(agentName, deps) {
     const bundlesRoot = deps.bundlesRoot ?? (0, identity_1.getAgentBundlesRoot)();
     const result = await (0, agent_config_check_1.checkAgentConfigWithProviderHealth)(agentName, bundlesRoot);
@@ -1777,7 +1804,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
                 });
             }
             else {
-                await (0, agentic_repair_1.runAgenticRepair)(daemonResult.stability.degraded, {
+                const repairResult = await (0, agentic_repair_1.runAgenticRepair)(daemonResult.stability.degraded, {
                     /* v8 ignore start -- production provider discovery wiring @preserve */
                     discoverWorkingProvider: async (agentName) => {
                         const { discoverWorkingProvider: discover } = await Promise.resolve().then(() => __importStar(require("./provider-discovery")));
@@ -1819,6 +1846,12 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
                         await executeVaultUnlock({ kind: "vault.unlock", agent }, deps);
                     },
                 });
+                if (repairResult.repairsAttempted) {
+                    const repairedAgents = daemonResult.stability.degraded
+                        .filter(interactive_repair_1.hasRunnableInteractiveRepair)
+                        .map((entry) => entry.agent);
+                    await reportPostRepairProviderHealth(deps, repairedAgents);
+                }
             }
         }
         // Persist boot startup AFTER daemon is running — bootstrap is safe now

package/dist/repertoire/vault-unlock.js

@@ -106,6 +106,10 @@ function lockedMessage(config, store) {
         `Vault: ${vaultLabel(config)}`,
         `Local unlock store: ${store.kind} (${store.location})`,
         "",
+        "Provider credentials are still stored in the agent vault.",
+        "This computer does not currently have usable local unlock material for that vault.",
+        "This can happen on a new computer, after a local profile or hostname migration, or if the local unlock entry was removed.",
+        "",
         `Run \`${command}\` and enter the vault unlock secret from the operator password manager.`,
     ].join("\n");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.370",
+  "version": "0.1.0-alpha.372",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",