@botbuddy/cli 1.64.14 → 1.64.16

package/daemon-release/darwin-arm64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.64.14",
-  "source_commit": "2bea99f6e692232d6694356e0fc474daebba622e",
-  "source_sha256": "abb141ad30727d4a9f32819a3e26be122ab750a919dfc21f7813d6dbd3bcaaa3",
+  "release_version": "1.64.16",
+  "source_commit": "6690f94e4c3d385159ca315713a6eab3560289fb",
+  "source_sha256": "81838b2e5024a22f62c4b55a75c3113c26cfe88f0047f0048f28f5800d0693d3",
   "target": "darwin-arm64",
-  "sha256": "2ee00d7621d20c09863a0dc96f862a99ed10a3557ba15df595e512f433020a7c"
+  "sha256": "9ca9db33cdee03687c26d5e162f4d936d44b7c1c23028c78566a61b90f7c40ad"
 }

package/daemon-release/linux-x64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.64.14",
-  "source_commit": "2bea99f6e692232d6694356e0fc474daebba622e",
-  "source_sha256": "abb141ad30727d4a9f32819a3e26be122ab750a919dfc21f7813d6dbd3bcaaa3",
+  "release_version": "1.64.16",
+  "source_commit": "6690f94e4c3d385159ca315713a6eab3560289fb",
+  "source_sha256": "81838b2e5024a22f62c4b55a75c3113c26cfe88f0047f0048f28f5800d0693d3",
   "target": "linux-x64",
-  "sha256": "af268c0f266b387fadc180451ef738760eb95c409c588cc7de62c9ee2b18c8f9"
+  "sha256": "b1a73bbd5bc7d78a13a3ec6f547436cc780163687bb5162e230d5796291e7689"
 }

package/daemon-release/manifest.json

@@ -1,21 +1,21 @@
 {
   "schema_version": 1,
-  "release_version": "1.64.14",
-  "source_commit": "2bea99f6e692232d6694356e0fc474daebba622e",
-  "source_sha256": "abb141ad30727d4a9f32819a3e26be122ab750a919dfc21f7813d6dbd3bcaaa3",
+  "release_version": "1.64.16",
+  "source_commit": "6690f94e4c3d385159ca315713a6eab3560289fb",
+  "source_sha256": "81838b2e5024a22f62c4b55a75c3113c26cfe88f0047f0048f28f5800d0693d3",
   "targets": {
     "darwin-arm64": {
       "goos": "darwin",
       "goarch": "arm64",
       "binary": "daemon/bin/darwin-arm64/botbuddy-daemon",
-      "sha256": "2ee00d7621d20c09863a0dc96f862a99ed10a3557ba15df595e512f433020a7c",
+      "sha256": "9ca9db33cdee03687c26d5e162f4d936d44b7c1c23028c78566a61b90f7c40ad",
       "mode": "0755"
     },
     "linux-x64": {
       "goos": "linux",
       "goarch": "amd64",
       "binary": "daemon/bin/linux-x64/botbuddy-daemon",
-      "sha256": "af268c0f266b387fadc180451ef738760eb95c409c588cc7de62c9ee2b18c8f9",
+      "sha256": "b1a73bbd5bc7d78a13a3ec6f547436cc780163687bb5162e230d5796291e7689",
       "mode": "0755"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.64.14",
+  "version": "1.64.16",
   "description": "BotBuddy \u2014 Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/stack-local-locks.mjs

@@ -0,0 +1,25 @@
+import { isDeepStrictEqual } from "node:util";
+
+// Applied only to the private materialized stack, never to the source config.
+export async function patchLocalLockCapacity(text, value) {
+  if (!Number.isInteger(value) || value < 16 || value > 1024) throw new Error("local lock capacity must be an integer from 16 to 1024");
+  if (typeof text !== "string" || Buffer.byteLength(text) > 1024 * 1024) throw new Error("local stack config unavailable or too large");
+  const { parse, stringify } = await import("./vendor/smol-toml/index.js");
+  let doc;
+  try { doc = parse(text, { integersAsBigInt: true, unsafeKeyBehaviour: "throw" }); }
+  catch { throw new Error("local stack config is not valid supported TOML"); }
+  doc.db ??= Object.create(null);
+  if (!doc.db || typeof doc.db !== "object" || Array.isArray(doc.db)) throw new Error("local db config is ambiguous");
+  doc.db.settings ??= Object.create(null);
+  const settings = doc.db.settings;
+  if (!settings || typeof settings !== "object" || Array.isArray(settings)) throw new Error("local db settings are ambiguous");
+  if (Object.hasOwn(settings, "max_locks_per_transaction") && settings.max_locks_per_transaction !== BigInt(value)) {
+    throw new Error("local lock capacity conflicts with the source configuration");
+  }
+  settings.max_locks_per_transaction = BigInt(value);
+  let patched, check;
+  try { patched = stringify(doc, { numbersAsFloat: true, strictTemporal: true }); check = parse(patched, { integersAsBigInt: true, unsafeKeyBehaviour: "throw" }); }
+  catch { throw new Error("local stack config could not roundtrip safely"); }
+  if (!isDeepStrictEqual(doc, check)) throw new Error("local stack config changed during roundtrip");
+  return patched;
+}

package/src/stack.mjs

@@ -237,6 +237,8 @@ ${bold("done OPTIONS")}
                          require exact worktree + live connection proof.
 
 ${bold("run OPTIONS")}
+  --local-max-locks N    Set max_locks_per_transaction (16-1024) in the disposable stack only.
+                         Refuses conflicting source settings or an explicit --stack-path.
   --repo <repo>          Required approved repository name.
   --ticket <BOT-123>     Required ticket for the batch.
   --run-id <UUID>        Optional caller-chosen run identity. Choose it before dispatch to arm
@@ -528,6 +530,15 @@ export function parseStackArgs(argv) {
       case "--purpose": if (need(a, rest[i + 1])) opts.purpose = rest[++i]; break;
       case "--run-id": if (need(a, rest[i + 1])) opts.runId = rest[++i]; break;
       case "--stack-path": if (need(a, rest[i + 1])) { opts.stackPath = rest[++i]; opts.stackPathExplicit = true; } break;
+      case "--local-max-locks": {
+        if (need(a, rest[i + 1])) {
+          const raw = rest[++i];
+          const n = Number(raw);
+          if (!/^\d+$/.test(raw) || !Number.isInteger(n) || n < 16 || n > 1024) errors.push("--local-max-locks must be an integer from 16 to 1024");
+          else opts.localMaxLocks = n;
+        }
+        break;
+      }
       case "--idle-ttl": {
         if (need(a, rest[i + 1])) {
           const n = Number(rest[++i]);
@@ -647,6 +658,7 @@ export function parseStackArgs(argv) {
   // `up` exits once the lease is active, so it can never hold a remote lease's SSH
   // forwards and always asks for a co-located host.
   if (opts.remote && opts.localOnly) errors.push("--remote and --local-only are mutually exclusive");
+  if (opts.localMaxLocks != null && (command !== "run" || opts.stackPathExplicit)) errors.push("--local-max-locks requires a CLI-materialized stack run without --stack-path");
   if (opts.remote && opts.localExec) {
     errors.push("--remote cannot be combined with --local-exec: a local-exec stack is started on THIS machine");
   }
@@ -959,6 +971,9 @@ async function claimProjectLock(projectId, lock, subject) {
 }
 
 export async function resolveRunExecution(cwd, opts, { materialize = materializeRunStackDir, lock = acquireStackLock, identity = leasedStackIdentity, reserveBlocks = reservePortBlocks, releaseClaim = releaseLeasedStackClaim, claimHeld = leasedStackClaimHeld, stableReusable = stableRunStackReusable, markReleased = markLeasedStackReleased, idleOriginPort = idleRequesterOriginPort, stableIdle = stableRunStackIdle, recordOrigin = recordRequesterOrigin, reserveOrigin = reserveRequesterOrigin, portRegistryDir = null, warn = (line) => process.stderr.write(`${line}\n`) } = {}) {
+  if (opts.localMaxLocks != null && (opts.stackPathExplicit || (opts.stackPath && opts.stackPath !== "."))) {
+    throw new Error("local lock capacity requires a CLI-materialized stack");
+  }
   const refuseRoot = (execution) => {
     if (execution.stackPath === ".") {
       throw new Error(
@@ -1095,11 +1110,14 @@ export async function resolveRunExecution(cwd, opts, { materialize = materialize
     }
     // The materialized stack stays canonical (a co-located placement serves it unchanged);
     // only the remote bundle's config variant names the reserved origin.
+    const localConfig = opts.localMaxLocks == null ? undefined : await (await import("./stack-local-locks.mjs")).patchLocalLockCapacity(
+      readFileSync(join(worktreeRoot, "supabase", "config.toml"), "utf8"), opts.localMaxLocks,
+    );
     const execution = refuseRoot(resolveStackPath(cwd, materialize(
       cwd,
       { slot: opts.slot, repo: opts.repo, ticket: opts.ticket, nonce, idleTtlSecs: opts.idleTtl ?? undefined },
       // BOT-2403: a functions directory another writer replaced under this stack is reported.
-      { ...(portRegistryDir ? { portRegistryDir } : {}), warn },
+      { ...(portRegistryDir ? { portRegistryDir } : {}), ...(localConfig === undefined ? {} : { configText: localConfig }), warn },
     )));
     let originConfigText = null;
     if (requesterOrigin) {

package/src/wait-core.mjs

@@ -225,6 +225,17 @@ const VALIDATORS = {
     if (!CANONICAL_UUID_RE.test(jobId)) throw new Error("staging-pool-refill id must be a canonical UUID");
     return { jobId };
   },
+  // BOT-2888: a reporter waits for a revision after the last consumed update.
+  // The server binds the report to the registering agent and tenant.
+  feedback: (p, raw) => {
+    const match = /^\s*id\s*=\s*([0-9A-Fa-f-]+)\s*,\s*after\s*=\s*(0|[1-9][0-9]*)\s*$/.exec(raw ?? "");
+    if (!match || Object.keys(p).length !== 2 || p.id !== match[1] || String(p.after) !== match[2]) {
+      throw new Error("feedback needs exactly id=<feedback UUID>,after=<last consumed revision>");
+    }
+    const feedbackId = match[1].toLowerCase(), after = Number(match[2]);
+    if (!CANONICAL_UUID_RE.test(feedbackId) || !Number.isSafeInteger(after)) throw new Error("feedback requires a canonical UUID and safe nonnegative revision");
+    return { feedbackId, after };
+  },
   // BOT-2629: this is deliberately a dedicated condition rather than a raw
   // event escape hatch. The UUID is chosen before dispatch and the exact subject
   // prevents another run on the same idle/re-adopted lease waking this waiter.
@@ -1309,6 +1320,11 @@ function conditionMatchesSignal(condition, signal, waitSessionId) {
         signal.subject_key === `staging-pool-refill:${params.jobId}` &&
         signal.payload?.job_id === params.jobId &&
         ["completed", "failed"].includes(signal.payload?.status);
+    case "feedback":
+      return signal.signal_type === "feedback_update" &&
+        signal.subject_key === `feedback:${params.feedbackId}` &&
+        signal.payload?.feedback_id === params.feedbackId &&
+        Number.isSafeInteger(signal.payload?.revision) && signal.payload.revision > params.after;
     case "stack-run":
       return signal.signal_type === "stack_run" && signal.subject_key === `stack-run:${params.id}` &&
         signal.payload?.run_id === params.id && Number.isInteger(signal.payload?.exit_code);
@@ -1523,6 +1539,7 @@ function conditionMatchesSignal(condition, signal, waitSessionId) {
 export function signalTenantBlocked(signal, sessionTenant) {
   if (sessionTenant === undefined) return false;
   if (signal.tenant_id == null) return false;
+  if (signal.signal_type === "feedback_update") return signal.tenant_id !== sessionTenant;
   // Mirror the relay's precedence (recipient > owner > tenant): a signal that is
   // owner- or recipient-scoped keeps THAT isolation and is never tenant-fenced, even
   // though owner-scoped pr_review/ci_run also carry a tenant_id — otherwise a caller who

package/src/wait.mjs

@@ -175,6 +175,9 @@ CONDITIONS  (TYPE:key=val,key=val — repeat for several; --any wakes on the fir
                                       completed or failed. This is the only condition of its
                                       wait and is available to each tenant agent that requested
                                       the deduped job; its terminal receipt is safe to display.
+  feedback:id=<feedback UUID>,after=<revision>
+                                      Wait for a later update to your own feedback; use the
+                                      revision you last consumed and read/acknowledge updates.
   stack-run:id=<run UUID>             one named bb stack run reaching its terminal outcome
                                       (BOT-2629). Choose the UUID BEFORE dispatch and pass it as
                                       bb stack run --run-id <UUID>; the receipt carries exit_code,
@@ -660,6 +663,7 @@ async function registerWait(opts, conditions, deadlineIso) {
       "command_run_single_condition_required",
       "staging_pool_refill_unavailable",
       "staging_pool_refill_single_condition_required",
+      "feedback_wait_unavailable",
     ]);
     if (INVALID_CONDITION_CODES.has(body.error)) {
       const err = new Error(body.detail || body.error);