@ouro.bot/cli 0.1.0-alpha.738 → 0.1.0-alpha.739

package/changelog.json

@@ -1,6 +1,12 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.739",
+      "changes": [
+        "Allow Linux auto vault unlock reads to reuse an already-approved plaintext fallback when no secure local store has usable material."
+      ]
+    },
     {
       "version": "0.1.0-alpha.738",
       "changes": [

package/dist/repertoire/vault-unlock.js

@@ -517,6 +517,15 @@ function deleteFromStoreExact(config, store, deps) {
         return deleteFromWindowsDpapiExact(config, deps);
     return deleteFromPlaintextFileExact(config, deps);
 }
+function readFromAutoPlaintextFallback(config, deps) {
+    if (deps.store !== undefined && deps.store !== "auto")
+        return null;
+    const store = resolveVaultUnlockStore(config, { ...deps, store: "plaintext-file" });
+    const loaded = readFromStore(config, store, deps);
+    if (!loaded)
+        return null;
+    return { secret: loaded.secret, store, source: loaded.source };
+}
 function clearVaultUnlockSecret(config, deps = {}) {
     const canonicalConfig = canonicalizeVaultUnlockConfig(config);
     const store = resolveVaultUnlockStore(canonicalConfig, deps);
@@ -540,9 +549,34 @@ function clearVaultUnlockSecret(config, deps = {}) {
 }
 function readVaultUnlockSecret(config, deps = {}) {
     const canonicalConfig = canonicalizeVaultUnlockConfig(config);
-    const store = resolveVaultUnlockStore(canonicalConfig, deps);
+    let store;
+    try {
+        store = resolveVaultUnlockStore(canonicalConfig, deps);
+    }
+    catch (error) {
+        const fallback = readFromAutoPlaintextFallback(canonicalConfig, deps);
+        if (!fallback)
+            throw error;
+        (0, runtime_1.emitNervesEvent)({
+            component: "repertoire",
+            event: "repertoire.vault_unlock_loaded",
+            message: "loaded vault unlock material from local store",
+            meta: { store: fallback.store.kind, secure: fallback.store.secure, hasAgentName: !!config.agentName, sourceServerUrl: fallback.source.serverUrl },
+        });
+        return fallback;
+    }
     const loaded = readFromStore(canonicalConfig, store, deps);
     if (!loaded) {
+        const fallback = readFromAutoPlaintextFallback(canonicalConfig, deps);
+        if (fallback) {
+            (0, runtime_1.emitNervesEvent)({
+                component: "repertoire",
+                event: "repertoire.vault_unlock_loaded",
+                message: "loaded vault unlock material from local store",
+                meta: { store: fallback.store.kind, secure: fallback.store.secure, hasAgentName: !!config.agentName, sourceServerUrl: fallback.source.serverUrl },
+            });
+            return fallback;
+        }
         throw new Error(lockedMessage(canonicalConfig, store));
     }
     (0, runtime_1.emitNervesEvent)({

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.738",
+  "version": "0.1.0-alpha.739",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.738",
+      "version": "0.1.0-alpha.739",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.738",
+  "version": "0.1.0-alpha.739",
   "engines": {
     "node": ">=22"
   },