@botbuddy/cli 1.63.44 → 1.64.0

package/daemon-release/darwin-arm64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.63.44",
-  "source_commit": "6fb9ea556869f4b6bb5b1851941dc348009198ff",
-  "source_sha256": "175730f9512d5a1fa81e4800f0be93420e5fd91f1968bba4cd264611b8ae0f82",
+  "release_version": "1.64.0",
+  "source_commit": "e6cc3786c39bf5326fe5b5dabccd80c1fba8b17d",
+  "source_sha256": "0f97518d4f2ad1ac4d1195fd80ce4fa875a587b3ab2f102fbb5e28d6d5d62172",
   "target": "darwin-arm64",
-  "sha256": "1740585f4d9e5ce03d798353c1c473b6b818191f83d3a6e63b8e94f6e5d975bb"
+  "sha256": "675ce80ef07e7ef87f3a9111e911cd6241a775d5af4812dd9f53fb29846b9832"
 }

package/daemon-release/linux-x64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.63.44",
-  "source_commit": "6fb9ea556869f4b6bb5b1851941dc348009198ff",
-  "source_sha256": "175730f9512d5a1fa81e4800f0be93420e5fd91f1968bba4cd264611b8ae0f82",
+  "release_version": "1.64.0",
+  "source_commit": "e6cc3786c39bf5326fe5b5dabccd80c1fba8b17d",
+  "source_sha256": "0f97518d4f2ad1ac4d1195fd80ce4fa875a587b3ab2f102fbb5e28d6d5d62172",
   "target": "linux-x64",
-  "sha256": "93c1837e1aad2e8cb048399e57d2d4504db08d5edda38a92369558ceb4c4e8c4"
+  "sha256": "3223c862b52f1e81777e7c9403f6c854c5192f618c2c7ee46c56ad5b0a9ccfd9"
 }

package/daemon-release/manifest.json

@@ -1,21 +1,21 @@
 {
   "schema_version": 1,
-  "release_version": "1.63.44",
-  "source_commit": "6fb9ea556869f4b6bb5b1851941dc348009198ff",
-  "source_sha256": "175730f9512d5a1fa81e4800f0be93420e5fd91f1968bba4cd264611b8ae0f82",
+  "release_version": "1.64.0",
+  "source_commit": "e6cc3786c39bf5326fe5b5dabccd80c1fba8b17d",
+  "source_sha256": "0f97518d4f2ad1ac4d1195fd80ce4fa875a587b3ab2f102fbb5e28d6d5d62172",
   "targets": {
     "darwin-arm64": {
       "goos": "darwin",
       "goarch": "arm64",
       "binary": "daemon/bin/darwin-arm64/botbuddy-daemon",
-      "sha256": "1740585f4d9e5ce03d798353c1c473b6b818191f83d3a6e63b8e94f6e5d975bb",
+      "sha256": "675ce80ef07e7ef87f3a9111e911cd6241a775d5af4812dd9f53fb29846b9832",
       "mode": "0755"
     },
     "linux-x64": {
       "goos": "linux",
       "goarch": "amd64",
       "binary": "daemon/bin/linux-x64/botbuddy-daemon",
-      "sha256": "93c1837e1aad2e8cb048399e57d2d4504db08d5edda38a92369558ceb4c4e8c4",
+      "sha256": "3223c862b52f1e81777e7c9403f6c854c5192f618c2c7ee46c56ad5b0a9ccfd9",
       "mode": "0755"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.63.44",
+  "version": "1.64.0",
   "description": "BotBuddy \u2014 Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/daemon/automatic.mjs

@@ -0,0 +1,81 @@
+import { callToolJson, resolveCallAuth } from "../api.mjs";
+import {
+  assertSshHost,
+  installedBinaryPath,
+  stageRemoteDaemonRelease,
+} from "./installer.mjs";
+import { validateDaemonRelease } from "./release.mjs";
+import { nativeHandoverCommand } from "./handover.mjs";
+const fail = (code) => {
+  throw new Error(code);
+};
+// One explicit administrator installation grants only the fixed native
+// coordinator/schedule. Persisted operator opt-in remains a separate drawer act.
+export async function installAutomaticDaemonUpdater(spec, {
+  validateRelease = validateDaemonRelease,
+  resolveAuth = resolveCallAuth,
+  identity = callToolJson,
+  stage = stageRemoteDaemonRelease,
+  native = nativeHandoverCommand,
+} = {}) {
+  if (
+    !spec || typeof spec !== "object" || Array.isArray(spec) ||
+    Object.keys(spec).some((key) =>
+      ![
+        "platform",
+        "arch",
+        "sshHost",
+        "serviceUser",
+        "releaseRoot",
+        "expectedHostKey",
+        "tenant",
+      ].includes(key)
+    ) || !["linux", "darwin"].includes(spec.platform) ||
+    typeof spec.serviceUser !== "string" || spec.serviceUser === "root" ||
+    !/^[a-z_][a-z0-9_-]*$/i.test(spec.serviceUser) ||
+    !/^bbh-[0-9a-f]{24}$/.test(spec.expectedHostKey) ||
+    typeof spec.tenant !== "string" || !spec.tenant
+  ) fail("daemon_automatic_install_spec_invalid");
+  assertSshHost(spec.sshHost);
+  const release = await validateRelease({ releaseRoot: spec.releaseRoot }, {
+    platform: spec.platform,
+    arch: spec.arch,
+  });
+  const resolved = await resolveAuth({
+    toolName: "daemon_handover",
+    preferSession: false,
+  });
+  if (resolved?.error || !resolved?.auth) {
+    fail("daemon_automatic_install_auth_required");
+  }
+  const who = await identity("whoami", {}, {
+    auth: resolved.auth,
+    tenant: spec.tenant,
+  });
+  if (
+    !who?.ok || who.isError || typeof who.data?.owner_email !== "string" ||
+    !who.data.owner_email.includes("@") || who.data.tenant_id !== spec.tenant
+  ) fail("daemon_automatic_install_owner_unavailable");
+  const staged = await stage({
+    platform: spec.platform,
+    host: spec.sshHost,
+    user: spec.serviceUser,
+    release,
+  });
+  const binary = installedBinaryPath(release);
+  if (staged?.binary !== binary) fail("daemon_automatic_install_stage_invalid");
+  const result = await native({
+    host: spec.sshHost,
+    binary,
+    mode: "automatic-install",
+    input: {
+      host_key: spec.expectedHostKey,
+      owner_email: who.data.owner_email,
+      tenant_id: who.data.tenant_id,
+    },
+  });
+  if (result?.installed !== true || result.protocol !== 2) {
+    fail("daemon_automatic_install_receipt_invalid");
+  }
+  return { installed: true, protocol: 2, host_key: spec.expectedHostKey };
+}

package/src/daemon/commands.mjs

@@ -5,6 +5,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { promisify } from "node:util";
 import { registerContainerHost } from "../api.mjs";
+import { installAutomaticDaemonUpdater } from "./automatic.mjs";
 import { upgradeDaemonHost } from "./handover.mjs";
 import { awaitHostApproval } from "./approval-wait.mjs";
 import { bootstrapFreshDaemon } from "./bootstrap.mjs";
@@ -49,6 +50,7 @@ export const daemonHelp = `Usage:
   bb daemon config-render '<json host policy>'
   bb daemon enroll '<json host-bound enrollment spec>'
   bb daemon bootstrap '<json fresh-host bootstrap spec>'
+  bb daemon updater-install '<json automatic updater installation spec>'
   bb daemon upgrade '<json controlled host upgrade spec>'
 
 The Go payload is verified from the extracted universal package before sudo.
@@ -293,6 +295,7 @@ export async function cmdDaemon(args, {
   verifyRemoteHelperIdentity = verifyRemoteHelperIdentityOnTarget,
   bootstrap = bootstrapFreshDaemon,
   upgrade = upgradeDaemonHost,
+  installAutomaticUpdater = installAutomaticDaemonUpdater,
   registerHost = registerContainerHost,
   createBootstrapIdentity = createRemoteBootstrapIdentity,
   inspectBootstrapIdentity = inspectRemoteBootstrapIdentity,
@@ -305,6 +308,11 @@ export async function cmdDaemon(args, {
     log(daemonHelp);
     return 0;
   }
+  if(args[0]==="updater-install"){
+    if(args.length!==2)fail("Usage: bb daemon updater-install '<json automatic updater installation spec>'");
+    let spec;try{spec=JSON.parse(args[1]);}catch{fail("daemon_automatic_install_spec_invalid");}
+    log(JSON.stringify(await installAutomaticUpdater(spec)));return 0;
+  }
   if(args[0]==="upgrade"){
     if(args.length!==2)fail("Usage: bb daemon upgrade '<json controlled host upgrade spec>'");
     let spec;try{spec=JSON.parse(args[1]);}catch{fail("daemon_handover_spec_invalid");}

package/src/daemon/handover.mjs

@@ -27,9 +27,9 @@ export function nativeHandoverCommand(
   { spawnImpl = spawn } = {},
 ) {
   if (
-    !immutableBinaryRE.test(binary) || !["inspect", "submit"].includes(mode)
+    !immutableBinaryRE.test(binary) || !["inspect", "submit", "automatic-install"].includes(mode)
   ) fail("daemon_handover_command_invalid");
-  const flag = mode === "inspect"
+  const flag = mode === "automatic-install" ? "--native-automatic-update-install" : mode === "inspect"
     ? "--native-handover-inspect"
     : "--native-handover-submit";
   let command = "sudo", args = ["-n", binary, flag];