@ouro.bot/cli 0.1.0-alpha.434 → 0.1.0-alpha.435

package/changelog.json

@@ -1,6 +1,14 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.435",
+      "changes": [
+        "Structured agent-vault items like `providers/*` and `runtime/*` now take a direct Bitwarden `bw get item` lookup fast path before falling back to filtered search, so connect, auth, and runtime-config reads spend less time holding the vault lane for work that already has an exact item name.",
+        "The Bitwarden store only trusts that fast path on an exact name match and still falls back to the older filtered search on fuzzy hits, missing items, or malformed direct responses, so the speedup lands without weakening correctness or duplicate protection.",
+        "Hermetic built-runtime coverage now understands the newer direct item lookup path too, so the connect bay, startup provider checks, and vault-backed runtime reads are tested against the same Bitwarden command shape the shipped CLI now uses."
+      ]
+    },
     {
       "version": "0.1.0-alpha.434",
       "changes": [

package/dist/repertoire/bitwarden-store.js

@@ -131,6 +131,16 @@ function isBwConfigLogoutRequired(err) {
     const message = err.message.toLowerCase();
     return message.includes("logout") && message.includes("required");
 }
+function shouldPreferExactItemLookup(domain) {
+    return domain.includes("/");
+}
+function isBwDirectLookupFallbackError(err) {
+    const message = err.message.toLowerCase();
+    return (message.includes("bw cli error: not found") ||
+        message.includes("bw cli error: item not found") ||
+        message.includes("invalid json from bw get item") ||
+        message.includes("invalid item from bw get item"));
+}
 // ---------------------------------------------------------------------------
 // Cross-process bw CLI lock
 // ---------------------------------------------------------------------------
@@ -671,6 +681,19 @@ class BitwardenCredentialStore {
     }
     // --- Private ---
     async findItemByDomain(domain, session) {
+        if (shouldPreferExactItemLookup(domain)) {
+            try {
+                const stdout = await execBw(["get", "item", domain], session, this.appDataDir);
+                const item = parseBwItem(stdout, "bw get item");
+                if (item.name === domain)
+                    return item;
+            }
+            catch (error) {
+                const err = error;
+                if (!isBwDirectLookupFallbackError(err))
+                    throw err;
+            }
+        }
         const stdout = await execBw(["list", "items", "--search", domain], session, this.appDataDir);
         const items = parseBwItems(stdout, "bw list items --search");
         // Find exact match by name

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.434",
+  "version": "0.1.0-alpha.435",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",