@ouro.bot/cli 0.1.0-alpha.737 → 0.1.0-alpha.739

package/changelog.json

@@ -1,6 +1,19 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.739",
+      "changes": [
+        "Allow Linux auto vault unlock reads to reuse an already-approved plaintext fallback when no secure local store has usable material."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.738",
+      "changes": [
+        "Allow the path-locked Sanctuary legacy adoption to discard only the exact obsolete MiniMax provider record in memory while preserving the original envelope and keeping canonical credential validation strict.",
+        "Validate the complete provider discard allowlist and every projected runtime message before the first vault write, with recoverable retry semantics and counts-only audit evidence."
+      ]
+    },
     {
       "version": "0.1.0-alpha.737",
       "changes": [

package/deploy/unraid/README.txt

@@ -713,12 +713,18 @@ local unlock: available
               machineIdMigration: {
                 sourceMachineId: process.argv[1],
                 targetMachineId: process.argv[2],
+                discardProviderCredentialRecords: { providers: ["minimax"] },
               },
             }).then(
               () => process.exit(0),
               () => { process.stderr.write("credential bootstrap failed\n"); process.exit(1) },
             )
           ' "$BOOTSTRAP_SOURCE_MACHINE_ID" "$BOOTSTRAP_TARGET_MACHINE_ID" || return $?
+        # The path-locked Sanctuary migration projects the exact obsolete Minimax
+        # provider record out of memory before strict validation and persistence.
+        # The original legacy envelope remains byte-for-byte unchanged and is the
+        # sole digest authority; current GLM and Gemini credentials are established
+        # only by the separate hidden-input authentication commands below.
         ! docker container inspect ouro-butler-credential-bootstrap >/dev/null 2>&1 || return 1
         test ! -e "$BOOTSTRAP_CREDENTIAL_SOURCE" || return $?
         test ! -e "$BOOTSTRAP_CREDENTIAL_CLAIM" || return $?

package/dist/heart/daemon/container-credential-bootstrap.js

@@ -139,13 +139,20 @@ async function loadContainerCredentialBootstrap(enabledAgents, options = {}) {
         }
         if (loaded.has(message.agentName))
             throw new Error("container credential bootstrap contains a duplicate agent");
-        if (!(0, runtime_credentials_1.isRuntimeCredentialBootstrapMessage)(message))
-            throw new Error("container credential bootstrap message is invalid");
         loaded.add(message.agentName);
     }
-    const machineId = (0, machine_identity_1.loadOrCreateMachineIdentity)().machineId;
     const migration = options.machineIdMigration;
+    const discardProviderCredentialRecords = migration?.discardProviderCredentialRecords;
+    if (discardProviderCredentialRecords === undefined) {
+        for (const message of envelope.credentials) {
+            if (!(0, runtime_credentials_1.isRuntimeCredentialBootstrapMessage)(message)) {
+                throw new Error("container credential bootstrap message is invalid");
+            }
+        }
+    }
+    const machineId = (0, machine_identity_1.loadOrCreateMachineIdentity)().machineId;
     let messages = envelope.credentials;
+    let discardedProviderRecordCount = 0;
     if (migration) {
         const { sourceMachineId, targetMachineId } = migration;
         if (!sourceMachineId
@@ -163,7 +170,46 @@ async function loadContainerCredentialBootstrap(enabledAgents, options = {}) {
                 throw new Error("container credential bootstrap machineId migration source does not match");
             }
         }
-        messages = messages.map((message) => ({ ...message, machineId: targetMachineId }));
+        if (discardProviderCredentialRecords !== undefined) {
+            if (!isRecord(discardProviderCredentialRecords) || !Array.isArray(discardProviderCredentialRecords.providers)) {
+                throw new Error("container credential bootstrap provider discard policy is invalid");
+            }
+            const configuredProviders = discardProviderCredentialRecords.providers;
+            if (configuredProviders.length === 0
+                || configuredProviders.some((provider) => (typeof provider !== "string" || provider.length === 0 || provider !== provider.trim()))
+                || new Set(configuredProviders).size !== configuredProviders.length) {
+                throw new Error("container credential bootstrap provider discard allowlist is invalid");
+            }
+            const legacyProviders = [];
+            for (const message of messages) {
+                const records = message.providerCredentialRecords;
+                if (records === undefined)
+                    continue;
+                if (!Array.isArray(records) || records.length === 0) {
+                    throw new Error("container credential bootstrap discarded provider records are invalid");
+                }
+                for (const record of records) {
+                    if (!isRecord(record) || typeof record.provider !== "string" || record.provider.length === 0) {
+                        throw new Error("container credential bootstrap discarded provider record is invalid");
+                    }
+                    legacyProviders.push(record.provider);
+                }
+            }
+            if (new Set(legacyProviders).size !== legacyProviders.length) {
+                throw new Error("container credential bootstrap discarded providers contain duplicates");
+            }
+            if ([...legacyProviders].sort().join(",")
+                !== [...configuredProviders].sort().join(",")) {
+                throw new Error("container credential bootstrap discarded providers do not match the allowlist");
+            }
+            discardedProviderRecordCount = legacyProviders.length;
+        }
+        messages = messages.map((message) => {
+            const projected = { ...message, machineId: targetMachineId };
+            if (discardProviderCredentialRecords !== undefined)
+                delete projected.providerCredentialRecords;
+            return projected;
+        });
     }
     else {
         for (const message of messages) {
@@ -172,6 +218,13 @@ async function loadContainerCredentialBootstrap(enabledAgents, options = {}) {
             }
         }
     }
+    if (discardProviderCredentialRecords !== undefined) {
+        for (const message of messages) {
+            if (!(0, runtime_credentials_1.isRuntimeCredentialBootstrapMessage)(message)) {
+                throw new Error("container credential bootstrap message is invalid");
+            }
+        }
+    }
     const persist = options.persist ?? ((message) => (0, runtime_credentials_1.persistRuntimeCredentialBootstrapMessage)(message, {
         machineId,
     }));
@@ -198,6 +251,18 @@ async function loadContainerCredentialBootstrap(enabledAgents, options = {}) {
         }
     }
     deleteDurably(consumingPath);
+    if (discardedProviderRecordCount > 0) {
+        (0, runtime_1.emitNervesEvent)({
+            component: "config/identity",
+            event: "config.container_provider_credentials_discarded",
+            message: "discarded allowlisted legacy provider credentials during container migration",
+            meta: {
+                agentCount: loaded.size,
+                recordCount: discardedProviderRecordCount,
+                mode: "machine-id-migration",
+            },
+        });
+    }
     (0, runtime_1.emitNervesEvent)({
         component: "config/identity",
         event: "config.container_credentials_loaded",

package/dist/repertoire/vault-unlock.js

@@ -517,6 +517,15 @@ function deleteFromStoreExact(config, store, deps) {
         return deleteFromWindowsDpapiExact(config, deps);
     return deleteFromPlaintextFileExact(config, deps);
 }
+function readFromAutoPlaintextFallback(config, deps) {
+    if (deps.store !== undefined && deps.store !== "auto")
+        return null;
+    const store = resolveVaultUnlockStore(config, { ...deps, store: "plaintext-file" });
+    const loaded = readFromStore(config, store, deps);
+    if (!loaded)
+        return null;
+    return { secret: loaded.secret, store, source: loaded.source };
+}
 function clearVaultUnlockSecret(config, deps = {}) {
     const canonicalConfig = canonicalizeVaultUnlockConfig(config);
     const store = resolveVaultUnlockStore(canonicalConfig, deps);
@@ -540,9 +549,34 @@ function clearVaultUnlockSecret(config, deps = {}) {
 }
 function readVaultUnlockSecret(config, deps = {}) {
     const canonicalConfig = canonicalizeVaultUnlockConfig(config);
-    const store = resolveVaultUnlockStore(canonicalConfig, deps);
+    let store;
+    try {
+        store = resolveVaultUnlockStore(canonicalConfig, deps);
+    }
+    catch (error) {
+        const fallback = readFromAutoPlaintextFallback(canonicalConfig, deps);
+        if (!fallback)
+            throw error;
+        (0, runtime_1.emitNervesEvent)({
+            component: "repertoire",
+            event: "repertoire.vault_unlock_loaded",
+            message: "loaded vault unlock material from local store",
+            meta: { store: fallback.store.kind, secure: fallback.store.secure, hasAgentName: !!config.agentName, sourceServerUrl: fallback.source.serverUrl },
+        });
+        return fallback;
+    }
     const loaded = readFromStore(canonicalConfig, store, deps);
     if (!loaded) {
+        const fallback = readFromAutoPlaintextFallback(canonicalConfig, deps);
+        if (fallback) {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.vault_unlock_loaded",
+                message: "loaded vault unlock material from local store",
+                meta: { store: fallback.store.kind, secure: fallback.store.secure, hasAgentName: !!config.agentName, sourceServerUrl: fallback.source.serverUrl },
+            });
+            return fallback;
+        }
         throw new Error(lockedMessage(canonicalConfig, store));
     }
     (0, runtime_1.emitNervesEvent)({

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.737",
+  "version": "0.1.0-alpha.739",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.737",
+      "version": "0.1.0-alpha.739",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.737",
+  "version": "0.1.0-alpha.739",
   "engines": {
     "node": ">=22"
   },