@ouro.bot/cli 0.1.0-alpha.445 → 0.1.0-alpha.447

package/dist/repertoire/bitwarden-store.js

@@ -134,15 +134,6 @@ function isBwConfigLogoutRequired(err) {
 function shouldPreferExactItemLookup(domain) {
     return domain.includes("/");
 }
-function isBwDirectLookupMissingError(err) {
-    const message = err.message.toLowerCase();
-    return message.includes("bw cli error: not found") || message.includes("bw cli error: item not found");
-}
-function isBwDirectLookupFallbackError(err) {
-    const message = err.message.toLowerCase();
-    return (message.includes("invalid json from bw get item") ||
-        message.includes("invalid item from bw get item"));
-}
 // ---------------------------------------------------------------------------
 // Cross-process bw CLI lock
 // ---------------------------------------------------------------------------
@@ -159,6 +150,9 @@ function isBwDirectLookupFallbackError(err) {
 const BW_LOCK_FILENAME = ".ouro-bw.lock";
 const BW_LOCK_TIMEOUT_MS = 30_000;
 const BW_LOCK_POLL_MS = 100;
+const BW_DATA_FILENAME = "data.json";
+const BW_SYNC_MARKER_FILENAME = ".ouro-last-sync";
+const BW_SYNC_FRESH_MS = 60_000;
 /** In-process async mutex keyed by appDataDir. */
 const inProcessLocks = new Map();
 function isPidAlive(pid) {
@@ -388,6 +382,7 @@ class BitwardenCredentialStore {
     appDataDir;
     sessionToken = null;
     bwBinaryPath = "bw";
+    structuredItemCache = null;
     constructor(serverUrl, email, masterPassword, options = {}) {
         this.serverUrl = serverUrl;
         this.email = email;
@@ -488,9 +483,19 @@ class BitwardenCredentialStore {
             const unlockOutput = await this.execBw(["unlock", this.masterPassword, "--raw"]);
             this.sessionToken = unlockOutput.trim();
         }
-        // Sync vault data after obtaining a fresh session token
-        /* v8 ignore next -- defensive: loginAttempt always sets sessionToken before sync @preserve */
-        await this.execBw(["sync"], this.sessionToken ?? undefined);
+        if (this.shouldSyncVaultAfterSession(status)) {
+            /* v8 ignore next -- defensive: loginAttempt always sets sessionToken before sync @preserve */
+            await this.execBw(["sync"], this.sessionToken ?? undefined);
+            this.writeSyncMarker();
+        }
+        else {
+            (0, runtime_1.emitNervesEvent)({
+                event: "repertoire.bw_sync_skipped",
+                component: "repertoire",
+                message: "skipping bw sync because local vault cache is still fresh",
+                meta: { email: this.email, serverUrl: this.serverUrl, freshnessWindowMs: BW_SYNC_FRESH_MS },
+            });
+        }
     }
     async ensureSession() {
         if (!this.sessionToken) {
@@ -512,6 +517,7 @@ class BitwardenCredentialStore {
                     throw err;
                 }
                 this.sessionToken = null;
+                this.structuredItemCache = null;
                 attemptedFreshSession = true;
             }
         }
@@ -614,6 +620,7 @@ class BitwardenCredentialStore {
                 notes: data.notes ?? null,
             };
             const encoded = Buffer.from(JSON.stringify(item)).toString("base64");
+            this.structuredItemCache = null;
             let savedItem;
             if (existing) {
                 const stdout = await this.execBw(["edit", "item", existing.id], session, encoded);
@@ -629,6 +636,7 @@ class BitwardenCredentialStore {
             }
             this.assertStoredCredentialMatches(domain, data, savedItem);
         });
+        this.structuredItemCache = null;
         (0, runtime_1.emitNervesEvent)({
             event: "repertoire.bw_credential_store_end",
             component: "repertoire",
@@ -677,6 +685,7 @@ class BitwardenCredentialStore {
             return false;
         }
         await this.withSessionRetry((session) => this.execBw(["delete", "item", item.id], session));
+        this.structuredItemCache = null;
         (0, runtime_1.emitNervesEvent)({
             event: "repertoire.bw_credential_delete_end",
             component: "repertoire",
@@ -688,25 +697,57 @@ class BitwardenCredentialStore {
     // --- Private ---
     async findItemByDomain(domain, session) {
         if (shouldPreferExactItemLookup(domain)) {
-            try {
-                const stdout = await this.execBw(["get", "item", domain], session);
-                const item = parseBwItem(stdout, "bw get item");
-                if (item.name === domain)
-                    return item;
-            }
-            catch (error) {
-                const err = error;
-                if (isBwDirectLookupMissingError(err))
-                    return null;
-                if (!isBwDirectLookupFallbackError(err))
-                    throw err;
-            }
+            const items = await this.readStructuredItemCache(session);
+            return items.get(domain) ?? null;
         }
         const stdout = await this.execBw(["list", "items", "--search", domain], session);
         const items = parseBwItems(stdout, "bw list items --search");
         // Find exact match by name
         return items.find((item) => item.name === domain) ?? null;
     }
+    shouldSyncVaultAfterSession(status) {
+        if (status.status === "unauthenticated" || !status.status)
+            return true;
+        if (!this.appDataDir)
+            return true;
+        const freshnessTimestamp = this.latestLocalSyncTimestamp();
+        if (freshnessTimestamp !== null) {
+            return Date.now() - freshnessTimestamp > BW_SYNC_FRESH_MS;
+        }
+        return true;
+    }
+    latestLocalSyncTimestamp() {
+        const files = [BW_SYNC_MARKER_FILENAME, BW_DATA_FILENAME];
+        let latest = null;
+        for (const name of files) {
+            try {
+                const mtimeMs = fs.statSync(path.join(this.appDataDir, name)).mtimeMs;
+                latest = latest === null ? mtimeMs : Math.max(latest, mtimeMs);
+            }
+            catch {
+                // Missing freshness file is fine; use any other available timestamp.
+            }
+        }
+        return latest;
+    }
+    writeSyncMarker() {
+        if (!this.appDataDir)
+            return;
+        try {
+            fs.writeFileSync(path.join(this.appDataDir, BW_SYNC_MARKER_FILENAME), `${Date.now()}\n`, { mode: 0o600 });
+        }
+        catch {
+            // If the marker cannot be written, fall back to syncing next time.
+        }
+    }
+    async readStructuredItemCache(session) {
+        if (this.structuredItemCache)
+            return this.structuredItemCache;
+        const stdout = await this.execBw(["list", "items"], session);
+        const items = parseBwItems(stdout, "bw list items");
+        this.structuredItemCache = new Map(items.map((item) => [item.name, item]));
+        return this.structuredItemCache;
+    }
     async findItemById(id, session) {
         const stdout = await this.execBw(["get", "item", id], session);
         return parseBwItem(stdout, "bw get item");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.445",
+  "version": "0.1.0-alpha.447",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",