@ouro.bot/cli 0.1.0-alpha.683 → 0.1.0-alpha.684

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.684",
+      "changes": [
+        "Bootstrap private-runtime provider credentials before queued work is flushed."
+      ]
+    },
     {
       "version": "0.1.0-alpha.683",
       "changes": [

package/dist/heart/agent-entry.js

@@ -122,6 +122,7 @@ if (!ipcState.installed) {
 // Dynamic import: agent-entry is process-start wiring that starts a sense process.
 // Using dynamic import avoids a static heart/ -> senses/ dependency.
 Promise.resolve().then(() => __importStar(require("./runtime-credentials"))).then(async ({ readMachineRuntimeCredentialConfig, readRuntimeCredentialConfig, refreshMachineRuntimeCredentialConfig, refreshRuntimeCredentialConfig, applyRuntimeCredentialBootstrapMessage, waitForRuntimeCredentialBootstrap, }) => {
+    const { readProviderCredentialPool, refreshProviderCredentialPool } = await Promise.resolve().then(() => __importStar(require("./provider-credentials")));
     const bootstrappedBeforeWait = drainBufferedRuntimeCredentialBootstrap(applyRuntimeCredentialBootstrapMessage);
     const bootstrappedDuringWait = bootstrappedBeforeWait ? true : await waitForRuntimeCredentialBootstrap(agentName);
     if (bootstrappedDuringWait) {
@@ -133,6 +134,10 @@ Promise.resolve().then(() => __importStar(require("./runtime-credentials"))).the
     if (!readRuntimeCredentialConfig(agentName).ok) {
         void refreshRuntimeCredentialConfig(agentName, { preserveCachedOnFailure: true }).catch(() => undefined);
     }
+    const providerPool = readProviderCredentialPool(agentName);
+    if (!providerPool.ok || Object.keys(providerPool.pool.providers).length === 0) {
+        await refreshProviderCredentialPool(agentName, { preserveCachedOnFailure: true }).catch(() => undefined);
+    }
     /* v8 ignore next 7 -- process-start best-effort machine credential refresh runs in a child entrypoint and is covered operationally by daemon startup tests @preserve */
     if (!readMachineRuntimeCredentialConfig(agentName).ok) {
         void Promise.resolve().then(() => __importStar(require("./machine-identity"))).then(({ loadOrCreateMachineIdentity }) => {

package/dist/heart/daemon/daemon-entry.js

@@ -66,6 +66,8 @@ const bundle_manifest_1 = require("../../mind/bundle-manifest");
 const mcp_canary_1 = require("./mcp-canary");
 const context_loss_sentinel_1 = require("../context-loss-sentinel");
 const provider_credentials_1 = require("../provider-credentials");
+const runtime_credentials_1 = require("../runtime-credentials");
+const machine_identity_1 = require("../machine-identity");
 function parseSocketPath(argv) {
     const socketIndex = argv.indexOf("--socket");
     if (socketIndex >= 0) {
@@ -100,6 +102,28 @@ const managedPrivateRuntimes = managedAgents.map((agent) => ({
     agent,
     config: (0, agent_discovery_1.readPrivateRuntimeConfig)(agent),
 }));
+function currentMachineId() {
+    return (0, machine_identity_1.loadOrCreateMachineIdentity)().machineId;
+}
+function privateRuntimeCredentialBootstrapFor(agent) {
+    const machineId = currentMachineId();
+    const runtime = (0, runtime_credentials_1.readRuntimeCredentialConfig)(agent);
+    const machine = (0, runtime_credentials_1.readMachineRuntimeCredentialConfig)(agent);
+    const providerPool = (0, provider_credentials_1.readProviderCredentialPool)(agent);
+    const providerCredentialRecords = providerPool.ok
+        ? Object.values(providerPool.pool.providers).filter((record) => !!record)
+        : [];
+    const bootstrap = {
+        agentName: agent,
+        runtimeConfig: runtime.ok ? runtime.config : undefined,
+        machineRuntimeConfig: machine.ok ? machine.config : undefined,
+        machineId,
+        providerCredentialRecords: providerCredentialRecords.length > 0 ? providerCredentialRecords : undefined,
+    };
+    if (!bootstrap.runtimeConfig && !bootstrap.machineRuntimeConfig && !bootstrap.providerCredentialRecords)
+        return null;
+    return bootstrap;
+}
 function sentinelHealthStatus(receipt) {
     if (receipt.verdict === "ready")
         return "ok";
@@ -178,6 +202,7 @@ const processManager = new process_manager_1.DaemonProcessManager({
         entry: "heart/agent-entry.js",
         channel: "private-runtime",
         autoStart: config.autoStart,
+        getRuntimeCredentialBootstrap: () => privateRuntimeCredentialBootstrapFor(agent),
     })),
     existsSync: fs.existsSync,
     /* v8 ignore next 4 -- wiring: delegates to checkAgentConfig which has full unit tests @preserve */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.683",
+  "version": "0.1.0-alpha.684",
   "main": "dist/heart/daemon/ouro-entry.js",
   "bin": {
     "cli": "dist/heart/daemon/ouro-bot-entry.js",