@ouro.bot/cli 0.1.0-alpha.384 → 0.1.0-alpha.385

package/changelog.json

@@ -1,6 +1,14 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.385",
+      "changes": [
+        "`ouro up` provider-check repair hints for locked agent vaults now mention both normal unlock and lost-secret `ouro vault recover --agent <agent> --from <json>` recovery.",
+        "Provider health checks now share the locked-vault unlock-or-recover wording so compact degraded summaries do not send operators back to a secret they never saved.",
+        "`@ouro.bot/cli` and the `ouro.bot` wrapper are version-synced for the locked-vault repair-hint release."
+      ]
+    },
     {
       "version": "0.1.0-alpha.384",
       "changes": [

package/dist/heart/daemon/agent-config-check.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.vaultUnlockOrRecoverFix = vaultUnlockOrRecoverFix;
 exports.checkAgentConfig = checkAgentConfig;
 exports.checkAgentConfigWithProviderHealth = checkAgentConfigWithProviderHealth;
 const fs = __importStar(require("fs"));
@@ -238,7 +239,7 @@ function invalidPoolResult(agentName, lane, provider, model, pool) {
         return {
             ok: false,
             error: `${lane} provider ${provider} model ${model} cannot read provider credentials because ${agentName}'s credential vault is locked on this machine.`,
-            fix: `Run 'ouro vault unlock --agent ${agentName}', then run 'ouro up' again.`,
+            fix: vaultUnlockOrRecoverFix(agentName),
         };
     }
     if (pool.reason === "invalid") {
@@ -251,13 +252,20 @@ function invalidPoolResult(agentName, lane, provider, model, pool) {
     return {
         ok: false,
         error: `${lane} provider ${provider} model ${model} cannot read provider credentials from ${agentName}'s vault at ${pool.poolPath}: ${pool.error}`,
-        fix: `Run 'ouro vault unlock --agent ${agentName}', then run 'ouro up' again. If the credential is missing or stale after unlock, run 'ouro auth --agent ${agentName} --provider ${provider}'.`,
+        fix: vaultUnlockOrRecoverFix(agentName, `Then run 'ouro up' again. If the credential is missing or stale after unlock or recovery, run 'ouro auth --agent ${agentName} --provider ${provider}'.`),
     };
 }
 function isVaultLockedError(error) {
     const normalized = error.toLowerCase();
     return /(?:ouro )?credential vault is locked|vault(?: is)? locked/.test(normalized);
 }
+function vaultUnlockOrRecoverFix(agentName, nextStep = "Then run 'ouro up' again.") {
+    return [
+        `Run 'ouro vault unlock --agent ${agentName}' if you have the saved vault unlock secret.`,
+        `If nobody saved it, run 'ouro vault recover --agent ${agentName} --from <json>' with a local credential export.`,
+        nextStep,
+    ].join(" ");
+}
 function failedPingResult(agentName, lane, provider, model, result) {
     return {
         ok: false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.384",
+  "version": "0.1.0-alpha.385",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",