@botbuddy/cli 1.59.1 → 1.59.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.59.1",
+  "version": "1.59.3",
   "description": "BotBuddy \u2014 Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/wait-core.mjs

@@ -676,9 +676,12 @@ export function parseSseFrames(buffer) {
 }
 
 // ---------------------------------------------------------------------------
-// Cursor — the spine `seq` is a non-negative integer; reject garbage loudly.
+// Cursor — replay uses JavaScript Numbers at the relay boundary, so only exact
+// non-negative safe integers can be replayed without changing the requested floor.
 // ---------------------------------------------------------------------------
 
+const MAX_SAFE_SIGNAL_SEQUENCE = BigInt(Number.MAX_SAFE_INTEGER);
+
 /**
  * @param {string|null|undefined} raw
  * @returns {{kind: "absent"} | {kind: "ok", value: string} | {kind: "invalid", raw: string}}
@@ -688,7 +691,9 @@ export function normalizeSince(raw) {
   const t = String(raw).trim();
   if (t === "") return { kind: "absent" };
   if (!/^\d+$/.test(t)) return { kind: "invalid", raw };
-  return { kind: "ok", value: String(BigInt(t)) };
+  const value = BigInt(t);
+  if (value > MAX_SAFE_SIGNAL_SEQUENCE) return { kind: "invalid", raw };
+  return { kind: "ok", value: String(value) };
 }
 
 // ---------------------------------------------------------------------------

package/src/wait.mjs

@@ -153,7 +153,7 @@ CONDITIONS  (TYPE:key=val,key=val — repeat for several; --any wakes on the fir
 OPTIONS
   --any                 wake on the first matching condition (default; only mode in v1)
   --timeout <seconds>   max wait (default 7200; hard cap 28800). Timeout is exit 2, not an error.
-  --since <seq>         resume from a prior receipt's next_cursor (replay what you missed)
+  --since <seq>         resume from a prior receipt's next_cursor (0..9007199254740991; replay what you missed)
   --receipt-max-bytes <n>   cap the receipt (512..65536; default 10240; payloads truncate to pointers)
   --heartbeat           keep this agent session alive while waiting (so it is not reaped)
   --url <base>          relay base URL (default $BOTBUDDY_RELAY_URL or https://api.bot-buddy.ai/functions/v1)
@@ -216,6 +216,7 @@ function parseArgv(argv) {
     mode: "any",
     timeout: 7200,
     since: null,
+    sinceProvided: false,
     receiptMaxBytes: 10240,
     heartbeat: false,
     url: process.env.BOTBUDDY_RELAY_URL || "https://api.bot-buddy.ai/functions/v1",
@@ -248,7 +249,7 @@ function parseArgv(argv) {
     else if (a === "--heartbeat") opts.heartbeat = true;
     else if (a === "--timeout") opts.timeout = Number(optionValue());
     else if (a === "--deadline-at") opts.deadlineAt = optionValue(); // internal recovery argv; never shown as public API
-    else if (a === "--since") opts.since = optionValue();
+    else if (a === "--since") { opts.sinceProvided = true; opts.since = optionValue(); }
     else if (a === "--receipt-max-bytes") opts.receiptMaxBytes = Number(optionValue());
     else if (a === "--url") opts.url = optionValue();
     // BOT-1574: --token and --profile are RETIRED. A wait authenticates from
@@ -1572,6 +1573,19 @@ export async function runWait(argv, { recoveryLocalWaitId = null } = {}) {
     process.exit(EXIT.INVALID);
   }
 
+  // BOT-2453: an explicit replay cursor is a request to replay, never permission
+  // to silently fall back to live-only. Validate it before creating a recoverable
+  // checkpoint, resolving credentials, registering a wait, or opening SSE.
+  if (opts.sinceProvided) {
+    const since = normalizeSince(opts.since);
+    if (since.kind !== "ok") {
+      process.stderr.write("bb-wait: --since must be a non-negative signal sequence <= 9007199254740991\n");
+      emitReceipt({ schema_version: 1, outcome: "error", error: "invalid_since", cursor: opts.since });
+      process.exit(EXIT.INVALID);
+    }
+    opts.since = since.value;
+  }
+
   const { conditions, errors } = parseConditions(opts.conditions);
   if (errors.length > 0) {
     for (const e of errors) process.stderr.write(`bb-wait: invalid condition '${e.spec}': ${e.message}\n`);