@ouro.bot/cli 0.1.0-alpha.414 → 0.1.0-alpha.415

package/changelog.json

@@ -1,6 +1,14 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.415",
+      "changes": [
+        "Transient vault errors (timeout, ECONNREFUSED, socket hang up) are now classified separately from vault-locked errors in `ouro up` provider checks -- operators see retry guidance instead of misleading unlock/replace/recover instructions.",
+        "Fix text across vault unlock, vault create, missing credential, and failed ping results tightened to concise single-line instructions.",
+        "`@ouro.bot/cli` and the `ouro.bot` wrapper are version-synced for the error classification release."
+      ]
+    },
     {
       "version": "0.1.0-alpha.414",
       "changes": [

package/dist/heart/daemon/agent-config-check.js

@@ -233,7 +233,7 @@ function missingCredentialResult(agentName, lane, provider, model, credentialPat
     return {
         ok: false,
         error: `${lane} provider ${provider} model ${model} has no credentials in ${agentName}'s vault at ${credentialPath}`,
-        fix: `Run 'ouro auth --agent ${agentName} --provider ${provider}' to authenticate this machine, or run 'ouro use --agent ${agentName} --lane ${lane} --provider <provider> --model <model>' to choose a working provider/model.`,
+        fix: `Run 'ouro auth --agent ${agentName} --provider ${provider}' to authenticate.`,
         issue: (0, readiness_repair_1.providerCredentialMissingIssue)({
             agentName,
             lane,
@@ -243,7 +243,21 @@ function missingCredentialResult(agentName, lane, provider, model, credentialPat
         }),
     };
 }
+function isTransientVaultError(error) {
+    const normalized = error.toLowerCase();
+    return (normalized.includes("timed out") ||
+        normalized.includes("econnrefused") ||
+        normalized.includes("socket hang up") ||
+        normalized.includes("etimedout"));
+}
 function invalidPoolResult(agentName, lane, provider, model, pool) {
+    if (pool.reason === "unavailable" && isTransientVaultError(pool.error)) {
+        return {
+            ok: false,
+            error: `${lane} provider ${provider} model ${model} cannot read provider credentials from ${agentName}'s vault: ${pool.error}`,
+            fix: `Vault read timed out -- this usually resolves on retry. Run 'ouro up' again.`,
+        };
+    }
     if (pool.reason === "unavailable" && isVaultLockedError(pool.error)) {
         return {
             ok: false,
@@ -284,7 +298,7 @@ function failedPingResult(agentName, lane, provider, model, result) {
     return {
         ok: false,
         error: `${lane} provider ${provider} model ${model} failed live check: ${result.message}`,
-        fix: `Run 'ouro auth --agent ${agentName} --provider ${provider}' to refresh credentials, or run 'ouro use --agent ${agentName} --lane ${lane} --provider <provider> --model <model>' to switch this lane.`,
+        fix: `Run 'ouro auth --agent ${agentName} --provider ${provider}' to refresh credentials.`,
         issue: (0, readiness_repair_1.providerLiveCheckFailedIssue)({
             agentName,
             lane,

package/dist/repertoire/vault-unlock.js

@@ -101,13 +101,8 @@ function missingSecureStoreMessage(config) {
             : "Run `ouro vault unlock --store plaintext-file` to store the vault unlock secret in a chmod 0600 local file.",
     ].join("\n");
 }
-function vaultUnlockReplaceRecoverFix(agentName, nextStep = "Then run 'ouro up' again.") {
-    return [
-        `Run 'ouro vault unlock --agent ${agentName}' if you have the saved vault unlock secret.`,
-        `If this agent predates vault auth or nobody saved the unlock secret, run 'ouro vault replace --agent ${agentName}' to create a new empty vault, then re-auth/re-enter credentials.`,
-        `If you do have a local JSON credential export, run 'ouro vault recover --agent ${agentName} --from <json>' to create the agent vault and import it.`,
-        nextStep,
-    ].join(" ");
+function vaultUnlockReplaceRecoverFix(agentName, _nextStep) {
+    return `Run 'ouro vault unlock --agent ${agentName}' or 'ouro vault replace --agent ${agentName}' if the secret is lost.`;
 }
 function credentialVaultNotConfiguredError(agentName, configPath) {
     return (`${CREDENTIAL_VAULT_NOT_CONFIGURED_PREFIX}${configPath}. ` +
@@ -116,12 +111,8 @@ function credentialVaultNotConfiguredError(agentName, configPath) {
 function isCredentialVaultNotConfiguredError(message) {
     return message.includes(CREDENTIAL_VAULT_NOT_CONFIGURED_PREFIX);
 }
-function vaultCreateRecoverFix(agentName, nextStep = "Then run 'ouro up' again.") {
-    return [
-        `Run 'ouro vault create --agent ${agentName}' to create this agent's vault.`,
-        `If you still have a local JSON credential export from an earlier alpha, run 'ouro vault recover --agent ${agentName} --from <json>' instead.`,
-        nextStep,
-    ].join(" ");
+function vaultCreateRecoverFix(agentName, _nextStep) {
+    return `Run 'ouro vault create --agent ${agentName}' to set up this agent's vault.`;
 }
 function vaultUnlockSecretStrengthIssues(secret) {
     const issues = [];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.414",
+  "version": "0.1.0-alpha.415",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",