@ouro.bot/cli 0.1.0-alpha.433 → 0.1.0-alpha.435

package/README.md

@@ -6,7 +6,7 @@ Ouroboros is a TypeScript harness for daemon-managed agents that live in externa
 
 ## What The Runtime Looks Like
 
-- `npx ouro.bot` is the bootstrap path.
+- `npx ouro.bot@latest` is the supported bootstrap path.
 - `ouro` is the installed day-to-day command.
 - `ouro up` starts the daemon from the installed production version, syncs the launcher, installs workflow helpers, and reconciles stale runtime state.
 - `ouro dev` starts the daemon from a local repo build. It auto-builds from source, disables launchd auto-restart (so the installed daemon doesn't respawn underneath you), persists the repo path in `~/.ouro-cli/dev-config.json` for next time, and force-restarts the daemon. If you run `ouro dev` from inside the repo, it detects the CWD automatically. Run `ouro up` to return to production mode (this also cleans up `dev-config.json`).
@@ -142,15 +142,15 @@ For a clean smoke test, run from outside the repo:
 
 ```bash
 cd ~
-npx ouro.bot -v
-npx ouro.bot up
+npx ouro.bot@latest -v
+npx ouro.bot@latest up
 ouro -v
 ouro status
 ```
 
 Expected shape:
 
-- `npx ouro.bot` and `ouro` report the same version.
+- `npx ouro.bot@latest` and `ouro` report the same version.
 - `ouro status` shows the daemon overview plus discovered agents, senses, and workers.
 
 ### Work On The Harness
@@ -209,7 +209,7 @@ ouro hook <event> --agent <name>          # fire a lifecycle hook (SessionStart,
 
 ## Setting Up On Another Machine
 
-To clone an existing agent onto a new machine (macOS, Linux, or Windows via WSL2), see **[docs/cross-machine-setup.md](docs/cross-machine-setup.md)**. The short version is bundle plus vault: `npx ouro.bot`, open the home deck, choose clone, enter the bundle's git remote URL, unlock the agent vault, refresh/verify credentials, and start with `ouro up`.
+To clone an existing agent onto a new machine (macOS, Linux, or Windows via WSL2), see **[docs/cross-machine-setup.md](docs/cross-machine-setup.md)**. The short version is bundle plus vault: `npx ouro.bot@latest`, open the home deck, choose clone, enter the bundle's git remote URL, unlock the agent vault, refresh/verify credentials, and start with `ouro up`.
 
 ## The Agent's Inner Life
 

package/changelog.json

@@ -1,6 +1,22 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.435",
+      "changes": [
+        "Structured agent-vault items like `providers/*` and `runtime/*` now take a direct Bitwarden `bw get item` lookup fast path before falling back to filtered search, so connect, auth, and runtime-config reads spend less time holding the vault lane for work that already has an exact item name.",
+        "The Bitwarden store only trusts that fast path on an exact name match and still falls back to the older filtered search on fuzzy hits, missing items, or malformed direct responses, so the speedup lands without weakening correctness or duplicate protection.",
+        "Hermetic built-runtime coverage now understands the newer direct item lookup path too, so the connect bay, startup provider checks, and vault-backed runtime reads are tested against the same Bitwarden command shape the shipped CLI now uses."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.434",
+      "changes": [
+        "The supported bootstrap command is now explicitly `npx ouro.bot@latest` across the wrapper hints, operator docs, architecture docs, and runtime fallback messages, so humans are steered onto the channel that actually lands on the current published runtime.",
+        "Release smoke now verifies the live `ouro.bot@latest` bootstrap path end to end instead of only checking that the wrapper package resolves, so a stale bootstrap channel cannot slip through publish unnoticed.",
+        "This release closes the installed-product gap found during dogfood after the CLI human-surface overhaul: `npx ouro.bot@latest` now reproduces the current runtime truth in docs, smoke coverage, and real-world operator instructions."
+      ]
+    },
     {
       "version": "0.1.0-alpha.433",
       "changes": [

package/dist/heart/daemon/cli-exec.js

@@ -3917,7 +3917,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
                     /* v8 ignore next 2 -- unreachable after exec replaces process @preserve */
                     return "";
                 }
-                const message = "no installed version found. run: npx ouro.bot";
+                const message = "no installed version found. run: npx ouro.bot@latest";
                 deps.writeStdout(message);
                 return message;
             }

package/dist/heart/versioning/ouro-path-installer.js

@@ -53,7 +53,7 @@ fi
 # Fall back to installed version
 ENTRY="$HOME/.ouro-cli/CurrentVersion/node_modules/@ouro.bot/cli/dist/heart/daemon/ouro-entry.js"
 if [ ! -e "$ENTRY" ]; then
-  echo "ouro not installed. Run: npx ouro.bot" >&2
+  echo "ouro not installed. Run: npx ouro.bot@latest" >&2
   exit 1
 fi
 exec node "$ENTRY" "$@"

package/dist/repertoire/bitwarden-store.js

@@ -131,6 +131,16 @@ function isBwConfigLogoutRequired(err) {
     const message = err.message.toLowerCase();
     return message.includes("logout") && message.includes("required");
 }
+function shouldPreferExactItemLookup(domain) {
+    return domain.includes("/");
+}
+function isBwDirectLookupFallbackError(err) {
+    const message = err.message.toLowerCase();
+    return (message.includes("bw cli error: not found") ||
+        message.includes("bw cli error: item not found") ||
+        message.includes("invalid json from bw get item") ||
+        message.includes("invalid item from bw get item"));
+}
 // ---------------------------------------------------------------------------
 // Cross-process bw CLI lock
 // ---------------------------------------------------------------------------
@@ -671,6 +681,19 @@ class BitwardenCredentialStore {
     }
     // --- Private ---
     async findItemByDomain(domain, session) {
+        if (shouldPreferExactItemLookup(domain)) {
+            try {
+                const stdout = await execBw(["get", "item", domain], session, this.appDataDir);
+                const item = parseBwItem(stdout, "bw get item");
+                if (item.name === domain)
+                    return item;
+            }
+            catch (error) {
+                const err = error;
+                if (!isBwDirectLookupFallbackError(err))
+                    throw err;
+            }
+        }
         const stdout = await execBw(["list", "items", "--search", domain], session, this.appDataDir);
         const items = parseBwItems(stdout, "bw list items --search");
         // Find exact match by name

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.433",
+  "version": "0.1.0-alpha.435",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",