@botbuddy/cli 1.55.0 → 1.56.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.55.0",
+  "version": "1.56.0",
   "description": "BotBuddy \u2014 Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/fixtures/bot-2403-docker-desktop-mounts-2026-10-16.json

@@ -0,0 +1,29 @@
+{
+  "ticket": "BOT-2403",
+  "captured_at": "2026-10-16T20:43:49Z",
+  "provenance": "Actual Docker Desktop container inspect .Mounts and context inspect on owned MacBook lease 0c68ff71-3a1a-4d3c-b7d2-d06617609772; requester and container destination both contained43 entries; actual MCP readyz HTTP200/version2.97.1. No environment/credentials captured.",
+  "project_id": "bbbot240305b549",
+  "host_functions_dir": "/Users/jono/Developer/botbuddy-web/.claude/worktrees/bot-2402/.botbuddy/stacks/bbbot240305b549/supabase/functions",
+  "docker_context": "desktop-linux",
+  "docker_endpoint": "unix:///Users/jono/.docker/run/docker.sock",
+  "mounts": [
+    {
+      "Type": "volume",
+      "Name": "supabase_edge_runtime_bbbot240305b549",
+      "Source": "/var/lib/docker/volumes/supabase_edge_runtime_bbbot240305b549/_data",
+      "Destination": "/root/.cache/deno",
+      "Driver": "local",
+      "Mode": "rw",
+      "RW": true,
+      "Propagation": ""
+    },
+    {
+      "Type": "bind",
+      "Source": "/host_mnt/Users/jono/Developer/botbuddy-web/.claude/worktrees/bot-2402/.botbuddy/stacks/bbbot240305b549/supabase/functions",
+      "Destination": "/Users/jono/Developer/botbuddy-web/.claude/worktrees/bot-2402/.botbuddy/stacks/bbbot240305b549/supabase/functions",
+      "Mode": "ro",
+      "RW": false,
+      "Propagation": "rprivate"
+    }
+  ]
+}

package/src/stack-mount-health.mjs

@@ -38,20 +38,41 @@ export function runDocker(args, { timeoutMs = MOUNT_CHECK_TIMEOUT_MS } = {}) {
 }
 
 /** The container path the functions directory is mounted at, or null (from `docker inspect … .Mounts`). */
-export function functionsMountDestination(mountsJson, hostFunctionsDir) {
+export function functionsMountDestination(mountsJson, hostFunctionsDir, { dockerDesktop = false } = {}) {
   let mounts;
   try { mounts = JSON.parse(String(mountsJson ?? "").trim()); } catch { return null; }
   if (!Array.isArray(mounts)) return null;
-  const mount = mounts.find((m) => m?.Type === "bind" && m?.Source === hostFunctionsDir);
+  const mount = mounts.find((m) => m?.Type === "bind" && (
+    m?.Source === hostFunctionsDir || (
+      dockerDesktop === true && hostFunctionsDir.startsWith("/Users/") &&
+      m?.Source === `/host_mnt${hostFunctionsDir}`
+    )
+  ));
   return typeof mount?.Destination === "string" && mount.Destination ? mount.Destination : null;
 }
 
+// Docker Desktop exposes a macOS bind through its VM's /host_mnt alias.
+// Authorize that alias only for the selected engine, never an arbitrary remote
+// daemon or another VM. Explicit context selection wins over endpoint metadata,
+// exactly as dockerSelectorArgs does. A failed probe keeps the gate closed.
+async function isSelectedDockerDesktop(target, run, platform) {
+  if (platform !== "darwin") return false;
+  const context = typeof target?.context === "string" && target.context ? target.context : null;
+  let endpoint = context ? null : target?.resolved_endpoint ?? target?.endpoint;
+  if (!endpoint) {
+    const result = await run(["context", "inspect", ...(context ? [context] : []), "--format", "{{.Endpoints.docker.Host}}"]);
+    if (result.code !== 0 || result.timedOut) return false;
+    endpoint = String(result.stdout ?? "").trim();
+  }
+  return typeof endpoint === "string" && /^unix:\/\/\/Users\/[^/]+\/\.docker\/run\/docker\.sock$/.test(endpoint);
+}
+
 /**
  * Check (and once repair) the functions mount of a re-adopted idle lease.
  * `lease` is the re-adoption answer: `{ execution_mode, connection: { project_id, botbuddy_docker_target? } }`.
  * Returns `{ ok: true, skipped? , restarted? }` or `{ ok: false, restarted, reason }`. Never throws.
  */
-export async function checkReadoptedStackMounts(lease, stackDir, { run = runDocker, listHost = (dir) => readdirSync(dir), log = () => {} } = {}) {
+export async function checkReadoptedStackMounts(lease, stackDir, { run = runDocker, listHost = (dir) => readdirSync(dir), log = () => {}, platform = process.platform } = {}) {
   if (!CO_LOCATED_MODES.has(lease?.execution_mode)) return { ok: true, skipped: "remote" };
   const projectId = lease?.connection?.project_id;
   if (typeof projectId !== "string" || !PROJECT_ID_RE.test(projectId)) return { ok: true, skipped: "no_project_id" };
@@ -72,7 +93,13 @@ export async function checkReadoptedStackMounts(lease, stackDir, { run = runDock
     if (!inspect.timedOut && /No such (container|object)/i.test(inspect.stderr ?? "")) return { ok: true, skipped: "no_edge_runtime" };
     return { ok: false, restarted: false, reason: `could not inspect ${container} (exit ${inspect.code}${inspect.timedOut ? ", timed out" : ""})` };
   }
-  const destination = functionsMountDestination(inspect.stdout, hostFunctions);
+  let destination = functionsMountDestination(inspect.stdout, hostFunctions);
+  if (!destination) {
+    const desktopDestination = functionsMountDestination(inspect.stdout, hostFunctions, { dockerDesktop: true });
+    if (desktopDestination && await isSelectedDockerDesktop(lease.connection.botbuddy_docker_target, run, platform)) {
+      destination = desktopDestination;
+    }
+  }
   if (!destination) return { ok: false, restarted: false, reason: `${container} does not bind-mount ${hostFunctions}` };
 
   const mountedEntries = async () => {