@ouro.bot/cli 0.1.0-alpha.661 → 0.1.0-alpha.662

package/changelog.json

@@ -1,6 +1,13 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.662",
+      "changes": [
+        "Parse `--github-token` and `--base-url` in `ouro hatch` so the GitHub Copilot provider can be connected headlessly at cold-start. The credential type, per-provider validation, and storage split already supported github-copilot (githubToken -> vault credential, baseUrl -> config); only the argv parsing was missing, which left the provider selectable but unconnectable from a non-interactive hatch — the exact path Ouro Workbench's provider-config form uses for the work agent.",
+        "Override the transitive `shell-quote` dependency to `^1.8.4` (pulled in via `ink` -> `react-devtools-core`) to clear the newly-disclosed GHSA-w7jw-789q-3m8p critical advisory that was failing the release-preflight `npm audit` gate on every PR."
+      ]
+    },
     {
       "version": "0.1.0-alpha.661",
       "changes": [

package/dist/heart/daemon/cli-parse.js

@@ -316,6 +316,16 @@ function parseHatchCommand(args) {
             i += 1;
             continue;
         }
+        if (token === "--github-token") {
+            credentials.githubToken = args[i + 1];
+            i += 1;
+            continue;
+        }
+        if (token === "--base-url") {
+            credentials.baseUrl = args[i + 1];
+            i += 1;
+            continue;
+        }
         if (token === "--migration-path") {
             migrationPath = args[i + 1];
             i += 1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.661",
+  "version": "0.1.0-alpha.662",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",
@@ -93,6 +93,7 @@
     "@testing-library/react": {
       "react": "$react",
       "@types/react": "$@types/react"
-    }
+    },
+    "shell-quote": "^1.8.4"
   }
 }