@ouro.bot/cli 0.1.0-alpha.388 → 0.1.0-alpha.389

package/changelog.json

@@ -1,6 +1,16 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.389",
+      "changes": [
+        "CLI entrypoints now print command failures to stderr before exiting, so invalid commands and vault recovery errors are visible in the terminal instead of only appearing in runtime logs.",
+        "Vault unlock secret prompts now fail fast when stdin/stdout is not an interactive terminal, preserving the non-echoing human-provided secret flow instead of dangling or silently exiting.",
+        "`ouro vault recover` now validates every local `--from` JSON source before asking for the replacement vault unlock secret, so bad paths or malformed files never ask the human to type a secret first.",
+        "Vault recovery tests now assert that bad source files do not call the secret prompt and that entrypoint failures are terminal-visible.",
+        "`@ouro.bot/cli` and the `ouro.bot` wrapper are version-synced for the vault recovery prompt polish release."
+      ]
+    },
     {
       "version": "0.1.0-alpha.388",
       "changes": [

package/dist/heart/daemon/cli-defaults.js

@@ -222,6 +222,9 @@ async function defaultPromptInput(question) {
     }
 }
 async function defaultPromptSecret(question) {
+    if (process.stdin.isTTY !== true || process.stdout.isTTY !== true) {
+        throw new Error("vault unlock secret entry requires an interactive terminal so the secret can be hidden. Re-run this command in a terminal and enter the human-chosen secret when prompted.");
+    }
     const readline = await Promise.resolve().then(() => __importStar(require("readline")));
     const rl = readline.createInterface({
         input: process.stdin,

package/dist/heart/daemon/cli-exec.js

@@ -779,6 +779,7 @@ async function executeVaultRecover(command, deps) {
     }
     if (command.generateUnlockSecret)
         rejectGeneratedVaultUnlockSecret("recover");
+    const sourceImports = command.sources.map(readVaultRecoverSource);
     const promptSecret = ensureVaultSecretPrompt(deps.promptSecret, "recover");
     const now = providerCliNow(deps);
     const { configPath, config } = (0, auth_flow_1.readAgentConfigForAgent)(command.agent, deps.bundlesRoot);
@@ -789,7 +790,6 @@ async function executeVaultRecover(command, deps) {
     if (!unlockSecret) {
         throw new Error("vault recover requires a replacement unlock secret. Re-run in an interactive terminal and enter a human-chosen unlock secret.");
     }
-    const sourceImports = command.sources.map(readVaultRecoverSource);
     const result = await (0, vault_setup_1.createVaultAccount)("Ouro credential vault", serverUrl, email, unlockSecret);
     if (!result.success) {
         const message = [

package/dist/heart/daemon/ouro-bot-entry.js

@@ -12,12 +12,14 @@ const ouro_bot_wrapper_1 = require("../versioning/ouro-bot-wrapper");
     meta: { args: process.argv.slice(2) },
 });
 void (0, ouro_bot_wrapper_1.runOuroBotWrapper)(process.argv.slice(2)).catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`${message}\n`);
     (0, runtime_1.emitNervesEvent)({
         level: "error",
         component: "daemon",
         event: "daemon.ouro_bot_entry_error",
         message: "ouro.bot wrapper entrypoint failed",
-        meta: { error: error instanceof Error ? error.message : String(error) },
+        meta: { error: message },
     });
     process.exit(1);
 });

package/dist/heart/daemon/ouro-entry.js

@@ -12,12 +12,14 @@ const runtime_logging_1 = require("./runtime-logging");
     meta: { args: process.argv.slice(2) },
 });
 void (0, daemon_cli_1.runOuroCli)(process.argv.slice(2)).catch((error) => {
+    const message = error instanceof Error ? error.message : String(error);
+    process.stderr.write(`${message}\n`);
     (0, runtime_1.emitNervesEvent)({
         level: "error",
         component: "daemon",
         event: "daemon.cli_entry_error",
         message: "ouro CLI entrypoint failed",
-        meta: { error: error instanceof Error ? error.message : String(error) },
+        meta: { error: message },
     });
     process.exit(1);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.388",
+  "version": "0.1.0-alpha.389",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",