@ouro.bot/cli 0.1.0-alpha.962 → 0.1.0-alpha.965

package/changelog.json

@@ -1,6 +1,18 @@
 {
   "_note": "This changelog is maintained as part of the PR/version-bump workflow. Agent-curated, not auto-generated. Agents read this file directly via read_file to understand what changed between versions.",
   "versions": [
+    {
+      "version": "0.1.0-alpha.965",
+      "changes": [
+        "Ouro ships Bitwarden CLI 2026.9.1 instead of 2026.6.0. Its core-js 3.50.0 replaces 3.49.0, two of whose files Microsoft Defender's enterprise policy quarantines on managed Macs, which broke every vault command with \"Cannot find module '../internals/hidden-keys'\". A new bw version also gets a fresh vault profile, so the first vault use after updating signs in once."
+      ]
+    },
+    {
+      "version": "0.1.0-alpha.963",
+      "changes": [
+        "The vault now syncs after unlock unless Ouro itself synced in the last minute. Before, `bw status` and `bw unlock` rewrote the profile's data file, which made a stale cache look fresh, so a running daemon could keep reading an old copy of a vault item (for example a machine config changed from another Bitwarden client) indefinitely."
+      ]
+    },
     {
       "version": "0.1.0-alpha.962",
       "changes": [

package/deploy/unraid/Dockerfile

@@ -50,7 +50,7 @@ RUN BW_VERIFY_ROOT="$(mktemp -d)" \
   && command -v bw >/dev/null \
   && BW_VERSION="$(BITWARDENCLI_APPDATA_DIR="$BW_VERIFY_ROOT/appdata" bw --version 2>"$BW_VERIFY_ROOT/stderr")" \
   && test ! -s "$BW_VERIFY_ROOT/stderr" \
-  && test "$BW_VERSION" = "2026.6.0" \
+  && test "$BW_VERSION" = "2026.9.1" \
   && rm -rf -- "$BW_VERIFY_ROOT" \
   && trap - 0 \
   && test ! -e "/home/ouro/.config/Bitwarden CLI"

package/deploy/unraid/sanctuary.ouro/bundle-meta.json

@@ -1,5 +1,5 @@
 {
-  "runtimeVersion": "0.1.0-alpha.962",
+  "runtimeVersion": "0.1.0-alpha.965",
   "bundleSchemaVersion": 3,
   "lastUpdated": "2026-09-03T00:00:00.000Z"
 }

package/deploy/unraid/sanctuary.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <Container version="2">
   <Name>ouro-butler</Name>
-  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.962</Repository>
+  <Repository>ghcr.io/ourostack/ouroboros-butler:0.1.0-alpha.965</Repository>
   <Registry>https://github.com/ourostack/ouroboros/pkgs/container/ouroboros-butler</Registry>
   <Network>host</Network>
   <Shell>sh</Shell>

package/dist/repertoire/bitwarden-store.js

@@ -1144,19 +1144,17 @@ class BitwardenCredentialStore {
         }
         return true;
     }
+    /**
+     * When Ouro last synced this profile. Only Ouro's own marker counts: `bw unlock` and `bw status`
+     * rewrite data.json, so its mtime is always fresh right after unlock and a daemon would never sync.
+     */
     latestLocalSyncTimestamp() {
-        const files = [BW_SYNC_MARKER_FILENAME, BW_DATA_FILENAME];
-        let latest = null;
-        for (const name of files) {
-            try {
-                const mtimeMs = fs.statSync(path.join(this.appDataDir, name)).mtimeMs;
-                latest = latest === null ? mtimeMs : Math.max(latest, mtimeMs);
-            }
-            catch {
-                // Missing freshness file is fine; use any other available timestamp.
-            }
+        try {
+            return fs.statSync(path.join(this.appDataDir, BW_SYNC_MARKER_FILENAME)).mtimeMs;
+        }
+        catch {
+            return null;
         }
-        return latest;
     }
     writeSyncMarker() {
         if (!this.appDataDir)

package/dist/repertoire/bw-installer.js

@@ -55,7 +55,7 @@ const INSTALL_TIMEOUT_MS = 120_000;
 const WHICH_TIMEOUT_MS = 5_000;
 const DEFAULT_WINDOWS_PATHEXT = ".EXE;.CMD;.BAT;.COM";
 /** Must match the `@bitwarden/cli` dependency in package.json (a test checks). */
-exports.PINNED_BW_CLI_VERSION = "2026.6.0";
+exports.PINNED_BW_CLI_VERSION = "2026.9.1";
 function execFileAsync(cmd, args, timeout) {
     return new Promise((resolve, reject) => {
         (0, node_child_process_1.execFile)(cmd, args, { timeout }, (err, stdout) => {

package/npm-shrinkwrap.json

@@ -1,17 +1,17 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.962",
+  "version": "0.1.0-alpha.965",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ouro.bot/cli",
-      "version": "0.1.0-alpha.962",
+      "version": "0.1.0-alpha.965",
       "dependencies": {
         "@anthropic-ai/sdk": "^0.78.0",
         "@azure/identity": "^4.13.0",
         "@azure/storage-blob": "^12.31.0",
-        "@bitwarden/cli": "2026.6.0",
+        "@bitwarden/cli": "2026.9.1",
         "@microsoft/teams.api": "2.0.11",
         "@microsoft/teams.apps": "2.0.11",
         "@microsoft/teams.cards": "2.0.11",
@@ -451,20 +451,20 @@
       }
     },
     "node_modules/@bitwarden/cli": {
-      "version": "2026.6.0",
-      "resolved": "https://registry.npmjs.org/@bitwarden/cli/-/cli-2026.6.0.tgz",
-      "integrity": "sha512-quoPpGnLIAaGOBe61FZjZInbZzSvJTRzyK76icDFj4p6I4Oah7QubTKa//tIThU1GG5wFWK/OJeHA7AR1Knaxw==",
+      "version": "2026.9.1",
+      "resolved": "https://registry.npmjs.org/@bitwarden/cli/-/cli-2026.9.1.tgz",
+      "integrity": "sha512-RsmnsJmdEczyVsf537W8j8GlzbivrSC9A2HcSwvij3bn0Vz4psCcJCij19jJRQxg/4Wu7GudC4U45l2Tnb2+GA==",
       "license": "SEE LICENSE IN LICENSE.txt",
       "dependencies": {
         "@koa/multer": "4.0.0",
-        "@koa/router": "15.5.0",
+        "@koa/router": "15.7.0",
         "big-integer": "1.6.52",
         "browser-hrtime": "1.1.8",
         "chalk": "4.1.2",
         "commander": "14.0.0",
-        "core-js": "3.49.0",
-        "form-data": "4.0.4",
-        "https-proxy-agent": "9.0.0",
+        "core-js": "3.50.0",
+        "form-data": "4.0.6",
+        "https-proxy-agent": "9.1.0",
         "inquirer": "8.2.6",
         "jsdom": "26.1.0",
         "jszip": "3.10.1",
@@ -473,7 +473,7 @@
         "koa-json": "2.0.2",
         "lowdb": "1.0.0",
         "lunr": "2.3.9",
-        "multer": "2.1.1",
+        "multer": "2.2.0",
         "node-fetch": "2.7.0",
         "node-forge": "1.4.0",
         "open": "8.4.2",
@@ -486,12 +486,16 @@
       },
       "bin": {
         "bw": "build/bw.js"
+      },
+      "engines": {
+        "node": ">=22",
+        "npm": ">=10"
       }
     },
     "node_modules/@bitwarden/cli/node_modules/agent-base": {
       "version": "9.0.0",
       "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-9.0.0.tgz",
-      "integrity": "sha512-TQf59BsZnytt8GdJKLPfUZ54g/iaUL2OWDSFCCvMOhsHduDQxO8xC4PNeyIkVcA5KwL2phPSv0douC0fgWzmnA==",
+      "integrity": "sha1-7J77CDFOHnWwhS10qr+aOH+Zg04=",
       "license": "MIT",
       "engines": {
         "node": ">= 20"
@@ -532,13 +536,14 @@
       }
     },
     "node_modules/@bitwarden/cli/node_modules/https-proxy-agent": {
-      "version": "9.0.0",
-      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.0.0.tgz",
-      "integrity": "sha512-/MVmHp58WkOypgFhCLk4fzpPcFQvTJ/e6LBI7irpIO2HfxUbpmYoHF+KzipzJpxxzJu7aJNWQ0xojJ/dzV2G5g==",
+      "version": "9.1.0",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.1.0.tgz",
+      "integrity": "sha1-qfYPebwVeMN7Fm3X9Ytry1xX5Es=",
       "license": "MIT",
       "dependencies": {
         "agent-base": "9.0.0",
-        "debug": "^4.3.4"
+        "debug": "^4.3.4",
+        "proxy-agent-negotiate": "1.1.0"
       },
       "engines": {
         "node": ">= 20"
@@ -1138,9 +1143,9 @@
       }
     },
     "node_modules/@koa/router": {
-      "version": "15.5.0",
-      "resolved": "https://registry.npmjs.org/@koa/router/-/router-15.5.0.tgz",
-      "integrity": "sha512-KSC0oG/5t6ITu5wqX4lJseA/dngoj14hEaohrLZEXtlUT2RRyJvwaJ0KV+5uQoaWrY3A8ClHOrBEU4g8dujn8Q==",
+      "version": "15.7.0",
+      "resolved": "https://registry.npmjs.org/@koa/router/-/router-15.7.0.tgz",
+      "integrity": "sha1-40SKb4xUHdz+S7zkneuslPUf4g8=",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
@@ -3075,11 +3080,14 @@
       "license": "MIT"
     },
     "node_modules/core-js": {
-      "version": "3.49.0",
-      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.49.0.tgz",
-      "integrity": "sha512-es1U2+YTtzpwkxVLwAFdSpaIMyQaq0PBgm3YD1W3Qpsn1NAmO3KSgZfu+oGSWVu6NvLHoHCV/aYcsE5wiB7ALg==",
+      "version": "3.50.0",
+      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.50.0.tgz",
+      "integrity": "sha1-oYZG/LAJdlAYm0UEyAPoh7yuTAo=",
       "hasInstallScript": true,
       "license": "MIT",
+      "engines": {
+        "node": "*"
+      },
       "funding": {
         "type": "opencollective",
         "url": "https://opencollective.com/core-js"
@@ -6585,6 +6593,23 @@
         "url": "https://opencollective.com/express"
       }
     },
+    "node_modules/proxy-agent-negotiate": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-agent-negotiate/-/proxy-agent-negotiate-1.1.0.tgz",
+      "integrity": "sha1-3n03rt6dcedDRhJdb0hPrICSthU=",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 20"
+      },
+      "peerDependencies": {
+        "kerberos": "^2.0.0"
+      },
+      "peerDependenciesMeta": {
+        "kerberos": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/proxy-from-env": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouro.bot/cli",
-  "version": "0.1.0-alpha.962",
+  "version": "0.1.0-alpha.965",
   "engines": {
     "node": ">=22"
   },
@@ -61,7 +61,7 @@
     "@anthropic-ai/sdk": "^0.78.0",
     "@azure/identity": "^4.13.0",
     "@azure/storage-blob": "^12.31.0",
-    "@bitwarden/cli": "2026.6.0",
+    "@bitwarden/cli": "2026.9.1",
     "@microsoft/teams.api": "2.0.11",
     "@microsoft/teams.apps": "2.0.11",
     "@microsoft/teams.cards": "2.0.11",