@ouro.bot/cli 0.1.0-alpha.537 → 0.1.0-alpha.539

package/README.md

@@ -6,7 +6,7 @@ Ouroboros is a TypeScript harness for daemon-managed agents that live in externa
 
 ## What The Runtime Looks Like
 
-- `npx ouro.bot@alpha` is the supported bootstrap path while the runtime is in prerelease.
+- `npx ouro.bot@latest` is the supported bootstrap path.
 - `ouro` is the installed day-to-day command.
 - `ouro up` starts the daemon from the installed production version, syncs the launcher, installs workflow helpers, and reconciles stale runtime state.
 - `ouro dev` starts the daemon from a local repo build. It auto-builds from source, disables launchd auto-restart (so the installed daemon doesn't respawn underneath you), persists the repo path in `~/.ouro-cli/dev-config.json` for next time, and force-restarts the daemon. If you run `ouro dev` from inside the repo, it detects the CWD automatically. Run `ouro up` to return to production mode (this also cleans up `dev-config.json`).
@@ -144,15 +144,15 @@ For a clean smoke test, run from outside the repo:
 
 ```bash
 cd ~
-npx ouro.bot@alpha -v
-npx ouro.bot@alpha up
+npx ouro.bot@latest -v
+npx ouro.bot@latest up
 ouro -v
 ouro status
 ```
 
 Expected shape:
 
-- `npx ouro.bot@alpha` and `ouro` report the same version.
+- `npx ouro.bot@latest` and `ouro` report the same version.
 - `ouro status` shows the daemon overview plus discovered agents, senses, and workers.
 
 ### Work On The Harness
@@ -216,7 +216,7 @@ The generic secret primitive is a vault item / credential in the owning agent va
 
 ## Setting Up On Another Machine
 
-To clone an existing agent onto a new machine (macOS, Linux, or Windows via WSL2), see **[docs/cross-machine-setup.md](docs/cross-machine-setup.md)**. The short version is bundle plus vault: `npx ouro.bot@alpha`, open the home deck, choose clone, enter the bundle's git remote URL, unlock the agent vault, refresh/verify credentials, and start with `ouro up`.
+To clone an existing agent onto a new machine (macOS, Linux, or Windows via WSL2), see **[docs/cross-machine-setup.md](docs/cross-machine-setup.md)**. The short version is bundle plus vault: `npx ouro.bot@latest`, open the home deck, choose clone, enter the bundle's git remote URL, unlock the agent vault, refresh/verify credentials, and start with `ouro up`.
 
 ## The Agent's Inner Life
 

package/changelog.json

@@ -1,6 +1,21 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.539",
+      "changes": [
+        "The trusted-publishing workflow now selects the safe npm dist-tag before publishing instead of relying on post-publish `npm dist-tag add`, which OIDC trusted publishing cannot authenticate.",
+        "Prerelease publishes keep using `latest` while `latest` is absent or already prerelease, then move future prereleases back to their prerelease channel after `latest` points at a stable release.",
+        "Runtime update checks, version status, and install guidance now use the supported `latest` channel so default npm installs and daemon updates follow the same publish path."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.538",
+      "changes": [
+        "The publish workflow now repairs a stale prerelease-polluted npm `latest` dist-tag to the just-published alpha while leaving future stable `latest` releases untouched.",
+        "Adds tested npm dist-tag policy helpers so prerelease publishes continue using `alpha` and default npm installs cannot quietly drift behind the supported alpha channel."
+      ]
+    },
     {
       "version": "0.1.0-alpha.537",
       "changes": [

package/dist/heart/daemon/cli-exec.js

@@ -5702,7 +5702,7 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
                     /* v8 ignore next 2 -- unreachable after exec replaces process @preserve */
                     return "";
                 }
-                const message = "no installed version found. run: npx ouro.bot@alpha";
+                const message = "no installed version found. run: npx ouro.bot@latest";
                 deps.writeStdout(message);
                 return message;
             }
@@ -6269,15 +6269,15 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
             try {
                 const { result: updateResult, timedOut } = await runCliUpdateCheckWithTimeout(deps.checkForCliUpdate, deps.updateCheckTimeoutMs ?? update_checker_1.CLI_UPDATE_CHECK_TIMEOUT_MS);
                 if (updateResult.latestVersion) {
-                    sections.push(`published alpha: ${updateResult.latestVersion} (${updateResult.available ? "update available" : "up to date"})`);
+                    sections.push(`published latest: ${updateResult.latestVersion} (${updateResult.available ? "update available" : "up to date"})`);
                 }
                 else if (updateResult.error) {
-                    sections.push(`published alpha: unavailable (${summarizeCliUpdateCheckStatus(updateResult.error, timedOut)})`);
+                    sections.push(`published latest: unavailable (${summarizeCliUpdateCheckStatus(updateResult.error, timedOut)})`);
                 }
             }
             catch (err) {
                 const reason = summarizeCliUpdateCheckStatus(err instanceof Error ? err.message : String(err));
-                sections.push(`published alpha: unavailable (${reason})`);
+                sections.push(`published latest: unavailable (${reason})`);
             }
         }
         const message = ttyBoardEnabled(deps)
@@ -6291,8 +6291,8 @@ async function runOuroCli(args, deps = (0, cli_defaults_1.createDefaultOuroCliDe
                         lines: localSection.split("\n"),
                     },
                     {
-                        title: "Published alpha",
-                        lines: sections.slice(1).length > 0 ? sections.slice(1) : ["published alpha: unavailable"],
+                        title: "Published latest",
+                        lines: sections.slice(1).length > 0 ? sections.slice(1) : ["published latest: unavailable"],
                     },
                 ],
             })

package/dist/heart/versioning/ouro-path-installer.js

@@ -53,7 +53,7 @@ fi
 # Fall back to installed version
 ENTRY="$HOME/.ouro-cli/CurrentVersion/node_modules/@ouro.bot/cli/dist/heart/daemon/ouro-entry.js"
 if [ ! -e "$ENTRY" ]; then
-  echo "ouro not installed. Run: npx ouro.bot@alpha" >&2
+  echo "ouro not installed. Run: npx ouro.bot@latest" >&2
   exit 1
 fi
 exec node "$ENTRY" "$@"

package/dist/heart/versioning/update-checker.js

@@ -41,7 +41,7 @@ const semver = __importStar(require("semver"));
 const runtime_1 = require("../../nerves/runtime");
 const DEFAULT_INTERVAL_MS = 30 * 60 * 1000; // 30 minutes
 exports.CLI_UPDATE_CHECK_TIMEOUT_MS = 3_000;
-exports.CLI_UPDATE_DIST_TAG = "alpha";
+exports.CLI_UPDATE_DIST_TAG = "latest";
 async function checkForUpdate(currentVersion, deps) {
     (0, runtime_1.emitNervesEvent)({
         component: "daemon",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.537",
+  "version": "0.1.0-alpha.539",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",