@botbuddy/cli 1.60.9 → 1.60.10

package/daemon-release/darwin-arm64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.60.9",
-  "source_commit": "460663423af03d399c5b15a72a0a493bdb888813",
-  "source_sha256": "bb012b774ec1728801e48d3239f0a0aecd4e948d21fae5ab866d91935a4d566f",
+  "release_version": "1.60.10",
+  "source_commit": "311044889f28c3b22902954ec29c3c117f46d638",
+  "source_sha256": "a82e951ccda7aa65571953e874a01cf30f75bc218ed5592a2bffa2e7b0d3219a",
   "target": "darwin-arm64",
-  "sha256": "64623b249bafec25024c52e1953382ee6d15e09652fd8450593275a0504059c0"
+  "sha256": "c078605d49201ad3532212bbac322216b06c108c425024a7f68f6ecdab89fd5a"
 }

package/daemon-release/linux-x64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.60.9",
-  "source_commit": "460663423af03d399c5b15a72a0a493bdb888813",
-  "source_sha256": "bb012b774ec1728801e48d3239f0a0aecd4e948d21fae5ab866d91935a4d566f",
+  "release_version": "1.60.10",
+  "source_commit": "311044889f28c3b22902954ec29c3c117f46d638",
+  "source_sha256": "a82e951ccda7aa65571953e874a01cf30f75bc218ed5592a2bffa2e7b0d3219a",
   "target": "linux-x64",
-  "sha256": "2b75efb4413d95344478fdf9506679e435f48ef2f048b44236f00e941bcad445"
+  "sha256": "af6bfdf5e66b133356c620a5dd9aaacc1cee11d8f0f594bb8f5e8447cb932704"
 }

package/daemon-release/manifest.json

@@ -1,21 +1,21 @@
 {
   "schema_version": 1,
-  "release_version": "1.60.9",
-  "source_commit": "460663423af03d399c5b15a72a0a493bdb888813",
-  "source_sha256": "bb012b774ec1728801e48d3239f0a0aecd4e948d21fae5ab866d91935a4d566f",
+  "release_version": "1.60.10",
+  "source_commit": "311044889f28c3b22902954ec29c3c117f46d638",
+  "source_sha256": "a82e951ccda7aa65571953e874a01cf30f75bc218ed5592a2bffa2e7b0d3219a",
   "targets": {
     "darwin-arm64": {
       "goos": "darwin",
       "goarch": "arm64",
       "binary": "daemon/bin/darwin-arm64/botbuddy-daemon",
-      "sha256": "64623b249bafec25024c52e1953382ee6d15e09652fd8450593275a0504059c0",
+      "sha256": "c078605d49201ad3532212bbac322216b06c108c425024a7f68f6ecdab89fd5a",
       "mode": "0755"
     },
     "linux-x64": {
       "goos": "linux",
       "goarch": "amd64",
       "binary": "daemon/bin/linux-x64/botbuddy-daemon",
-      "sha256": "2b75efb4413d95344478fdf9506679e435f48ef2f048b44236f00e941bcad445",
+      "sha256": "af6bfdf5e66b133356c620a5dd9aaacc1cee11d8f0f594bb8f5e8447cb932704",
       "mode": "0755"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.60.9",
+  "version": "1.60.10",
   "description": "BotBuddy \u2014 Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/commands.mjs

@@ -278,8 +278,8 @@ ${bold("STAGING SIGN-IN")} (BOT-2084)
                               persona, no password (${cyan("bb pw auth --help")})
   staging-pool status [--check]
                               Pool health: one reason, who acts, the next command
-  staging-pool install|tick|mint-one|uninstall
-                              Human only, from Terminal.app (${cyan("bb staging-pool --help")})
+  staging-pool install --tenant <slug> | tick | mint-one | uninstall
+                              Human only, any directory (${cyan("bb staging-pool --help")})
   help symptom staging-pool   Every refusal code with its cause and next command
 
 ${bold("OTHER")}

package/src/pw/run.mjs

@@ -11,6 +11,7 @@ import { VERSION } from "../version.mjs";
 import { readAgentSessionTokenEnv, AGENT_KEY_RE, legacyAgentAliasHint } from "../agent-key.mjs";
 import { clearAgentState, isRejectedCachedMcpSession, resolveAgentSessionCredential } from "../agent-session.mjs";
 import * as stagingAuth from "./staging-auth.mjs";
+import { DOC_SECTIONS, DOC_URL } from "../staging-pool/errors.mjs";
 // BOT-1488: canonicalize the raw hostname the SAME way acquire_resources does
 // server-side, so the lane name bb-pw builds/matches/prints is the one the lock
 // kernel actually stored ("jonos-mbp:8", not "Jonos-MBP.localdomain:8").
@@ -134,7 +135,12 @@ export async function runPw(argv, deps = {}) {
 // while-loop in runPwInner). Everything after the first non-option (the lane) is a
 // Playwright workload argument and is never a BotBuddy credential.
 const PW_LEADING_FLAGS = ["--tenant", "--session-id", "--agent-session-token", "--agent-key", "--session-token", "--environment"];
-const selfHealErrorLine = (error) => `bb-pw: ${error?.message ?? "agent session unavailable"}. ${error?.code === "client_key_required" ? "Run `bb login` then retry." : "Run `bb doctor --fix` then retry."}\n`;
+// BOT-2648 acceptance: with no tenant binding, `bb doctor --fix` cannot help: the
+// caller is outside a registered agent worktree, which lane locks need.
+const NO_BINDING_NEXT = "Agent: run this from your registered project worktree (the checkout with .botbuddy-agent.json; run `bb setup` there once), then retry. bb help symptom tenant_binding_required";
+const selfHealErrorLine = (error) => error?.code === "tenant_binding_required"
+  ? `bb-pw: tenant_binding_required — ${error?.message ?? "no BotBuddy tenant binding here"} ${NO_BINDING_NEXT}. Docs: ${DOC_URL}#${DOC_SECTIONS.take}\n`
+  : `bb-pw: ${error?.message ?? "agent session unavailable"}. ${error?.code === "client_key_required" ? "Run `bb login` then retry." : "Run `bb doctor --fix` then retry."}\n`;
 // The leading credential options, NORMALIZED to split `flag value` pairs so an
 // inline `--agent-key=<token>` is recognized by legacyAgentAliasHint (which
 // matches exact flag tokens) exactly like the split form. Credential flags are
@@ -247,6 +253,8 @@ async function runPwInner(argv, deps = {}) {
       // BOT-2648 (Codex P2, #1323): the credential's tenant picks the installed staging pool.
       deps = { ...deps, sessionToken: credential.token, sessionId: deps.sessionId ?? credential.sessionId ?? null, credentialAgentId: credential.agentId ?? null, credentialTenant: credential.identity?.tenant ?? null };
     } catch (error) {
+      // BOT-2648 acceptance: an auth refusal is the standard JSON receipt (actor, next, doc, symptom).
+      if (plan.mode === "auth" && error?.code === "tenant_binding_required") return stagingAuth.refuse({ stdout, stderr }, "tenant_binding_required", 3, {}, authVars(plan, deps));
       stderr.write(selfHealErrorLine(error)); return 3;
     }
   }

package/src/staging-pool/errors.mjs

@@ -52,6 +52,13 @@ export const ERROR_CODES = Object.freeze({
     "The lane lock is held by another agent session of your owner, not by this session.",
     "The lane was claimed from a different session or sub-agent; auth needs the exact holder.",
     `bb locks -m --lane {lane}{ticketFlag}   # from THIS session, then: ${AUTH}`),
+  // BOT-2648 acceptance: the take runs from a registered agent worktree. Lane locks
+  // are per agent worktree, so a directory with no .botbuddy-agent.json has no
+  // agent identity to hold the lane (the pool itself never needs a checkout).
+  tenant_binding_required: entry("agent", "take",
+    "bb pw needs a registered agent worktree, and this directory has no BotBuddy tenant binding.",
+    "No .botbuddy-agent.json was found here or above, so there is no per-worktree agent identity to hold the lane lock.",
+    `bb setup   # run inside your registered project worktree (the checkout with .botbuddy-agent.json); then from there: bb locks -m --lane {lane}{ticketFlag} && ${AUTH}`),
   persona_not_allowlisted: entry("agent", "take",
     "Persona \"{persona}\" is not one of this repository's staging_session_pool personas.",
     "A typo, or an email where the alias is expected. Allowed aliases: {allowed}.",
@@ -310,7 +317,7 @@ export const ERROR_CODES = Object.freeze({
 // Codes only `bb pw … auth` can raise; every other code can come from `bb staging-pool`.
 export const AUTH_ONLY_CODES = Object.freeze(new Set([
   "auth_requires_staging_environment", "auth_requires_lane_lock", "lane_not_claimed", "exact_lane_holder_required",
-  "persona_not_allowlisted", "lane_browser_not_open", "browser_session_not_staging", "persistent_profile_refused",
+  "tenant_binding_required", "persona_not_allowlisted", "lane_browser_not_open", "browser_session_not_staging", "persistent_profile_refused",
   "session_install_failed", "staging_session_cleanup_pending", "session_not_aal2", "session_expired",
   "session_persona_mismatch", "slot_state_invalid", "slot_state_unreadable", "daemon_node_unsupported",
   "daemon_run_failed", "daemon_result_missing", "daemon_result_invalid", "pool_take_failed", "pool_empty",