@botbuddy/cli 1.64.15 → 1.64.17

package/daemon-release/darwin-arm64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.64.15",
-  "source_commit": "e14ac43a2273552539b7eda276aaa931cae2281f",
-  "source_sha256": "91035987b6b706fd891dbc9dfa9506129496bd12d112095b77918c26cab0f3f7",
+  "release_version": "1.64.17",
+  "source_commit": "d2fabc08d075fc51a591dd0ce38dc0ec9d66c168",
+  "source_sha256": "a21dcce44a33eddc1392ae4604533ee412d1c0c2bed64a26f52e99a2e2feed30",
   "target": "darwin-arm64",
-  "sha256": "209db97b00d1740ab60be6b3b198cdd9f227ef7964434da5b7025a78fcf59f8c"
+  "sha256": "f8f98b5bc212ed676fe2e97381b5a0c548331602ed7165360a331c3e8ff309fd"
 }

package/daemon-release/linux-x64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.64.15",
-  "source_commit": "e14ac43a2273552539b7eda276aaa931cae2281f",
-  "source_sha256": "91035987b6b706fd891dbc9dfa9506129496bd12d112095b77918c26cab0f3f7",
+  "release_version": "1.64.17",
+  "source_commit": "d2fabc08d075fc51a591dd0ce38dc0ec9d66c168",
+  "source_sha256": "a21dcce44a33eddc1392ae4604533ee412d1c0c2bed64a26f52e99a2e2feed30",
   "target": "linux-x64",
-  "sha256": "fdc1f4af17059c0edd72fd5c776b0b33a564ffaf022610b51852a8f24768fc25"
+  "sha256": "f4a8fd0904f99e688e857b3674400b3e088fbca7f557bdea7cd1f14abcd84f31"
 }

package/daemon-release/manifest.json

@@ -1,21 +1,21 @@
 {
   "schema_version": 1,
-  "release_version": "1.64.15",
-  "source_commit": "e14ac43a2273552539b7eda276aaa931cae2281f",
-  "source_sha256": "91035987b6b706fd891dbc9dfa9506129496bd12d112095b77918c26cab0f3f7",
+  "release_version": "1.64.17",
+  "source_commit": "d2fabc08d075fc51a591dd0ce38dc0ec9d66c168",
+  "source_sha256": "a21dcce44a33eddc1392ae4604533ee412d1c0c2bed64a26f52e99a2e2feed30",
   "targets": {
     "darwin-arm64": {
       "goos": "darwin",
       "goarch": "arm64",
       "binary": "daemon/bin/darwin-arm64/botbuddy-daemon",
-      "sha256": "209db97b00d1740ab60be6b3b198cdd9f227ef7964434da5b7025a78fcf59f8c",
+      "sha256": "f8f98b5bc212ed676fe2e97381b5a0c548331602ed7165360a331c3e8ff309fd",
       "mode": "0755"
     },
     "linux-x64": {
       "goos": "linux",
       "goarch": "amd64",
       "binary": "daemon/bin/linux-x64/botbuddy-daemon",
-      "sha256": "fdc1f4af17059c0edd72fd5c776b0b33a564ffaf022610b51852a8f24768fc25",
+      "sha256": "f4a8fd0904f99e688e857b3674400b3e088fbca7f557bdea7cd1f14abcd84f31",
       "mode": "0755"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.64.15",
+  "version": "1.64.17",
   "description": "BotBuddy \u2014 Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/stack-local-locks.mjs

@@ -0,0 +1,25 @@
+import { isDeepStrictEqual } from "node:util";
+
+// Applied only to the private materialized stack, never to the source config.
+export async function patchLocalLockCapacity(text, value) {
+  if (!Number.isInteger(value) || value < 16 || value > 1024) throw new Error("local lock capacity must be an integer from 16 to 1024");
+  if (typeof text !== "string" || Buffer.byteLength(text) > 1024 * 1024) throw new Error("local stack config unavailable or too large");
+  const { parse, stringify } = await import("./vendor/smol-toml/index.js");
+  let doc;
+  try { doc = parse(text, { integersAsBigInt: true, unsafeKeyBehaviour: "throw" }); }
+  catch { throw new Error("local stack config is not valid supported TOML"); }
+  doc.db ??= Object.create(null);
+  if (!doc.db || typeof doc.db !== "object" || Array.isArray(doc.db)) throw new Error("local db config is ambiguous");
+  doc.db.settings ??= Object.create(null);
+  const settings = doc.db.settings;
+  if (!settings || typeof settings !== "object" || Array.isArray(settings)) throw new Error("local db settings are ambiguous");
+  if (Object.hasOwn(settings, "max_locks_per_transaction") && settings.max_locks_per_transaction !== BigInt(value)) {
+    throw new Error("local lock capacity conflicts with the source configuration");
+  }
+  settings.max_locks_per_transaction = BigInt(value);
+  let patched, check;
+  try { patched = stringify(doc, { numbersAsFloat: true, strictTemporal: true }); check = parse(patched, { integersAsBigInt: true, unsafeKeyBehaviour: "throw" }); }
+  catch { throw new Error("local stack config could not roundtrip safely"); }
+  if (!isDeepStrictEqual(doc, check)) throw new Error("local stack config changed during roundtrip");
+  return patched;
+}

package/src/stack-run-outcome.mjs

@@ -185,6 +185,9 @@ export function buildStackRunOutcomePayload({ fields = {}, exitCode, runId = ran
   const signal = pick(fields.stop_signal?.signal, SIGNAL_RE);
   // BOT-2880: sent only when present, because an older server refuses an unknown key.
   const callbackAuthorizationReason = pick(fields.callback_authorization_reason, AUTHORIZATION_REASON_RE);
+  const failureMechanism = code === "REQUESTER_ORIGIN_DIGEST_UNAVAILABLE" &&
+      ["origin_config_missing", "origin_digest_missing"].includes(fields.failure_mechanism)
+    ? fields.failure_mechanism : null;
   return {
     run_id: runId,
     lease_id: validStackLeaseId(fields.lease_id),
@@ -208,6 +211,7 @@ export function buildStackRunOutcomePayload({ fields = {}, exitCode, runId = ran
       signal_parent: pick(fields.stop_signal.parent, TOKEN_RE),
     } : {}),
     ...(callbackAuthorizationReason ? { callback_authorization_reason: callbackAuthorizationReason } : {}),
+    ...(failureMechanism ? { failure_mechanism: failureMechanism } : {}),
   };
 }
 
@@ -236,7 +240,19 @@ export async function reportStackRunOutcome({ fields, exitCode, runId, opts, env
     timer = setTimeout(() => { ac.abort(); resolve(TIMED_OUT); }, timeoutMs);
   });
   try {
-    const call = Promise.resolve().then(() => channel.callTool(STACK_RUN_OUTCOME_TOOL, payload, { auth: channel.auth, signal: ac.signal }));
+    const call = Promise.resolve().then(async () => {
+      const first = await channel.callTool(STACK_RUN_OUTCOME_TOOL, payload, { auth: channel.auth, signal: ac.signal });
+      // Older servers reject unknown keys before writing. Retry only that exact,
+      // explicit rejection with the same run id; never retry an uncertain send.
+      if (!ac.signal.aborted && payload.failure_mechanism && first?.ok && first?.isError &&
+          first?.data?.code === "INVALID_STACK_RUN_OUTCOME" &&
+          typeof first?.data?.message === "string" &&
+          first.data.message.startsWith("unknown key 'failure_mechanism'")) {
+        const { failure_mechanism: _omitted, ...legacyPayload } = payload;
+        return await channel.callTool(STACK_RUN_OUTCOME_TOOL, legacyPayload, { auth: channel.auth, signal: ac.signal });
+      }
+      return first;
+    });
     const result = await Promise.race([call.catch(() => null), timeout]);
     if (result === TIMED_OUT) return { sent: false, reason: "timeout", payload };
     const capture = result?.data?.feedback_capture;

package/src/stack.mjs

@@ -237,6 +237,8 @@ ${bold("done OPTIONS")}
                          require exact worktree + live connection proof.
 
 ${bold("run OPTIONS")}
+  --local-max-locks N    Set max_locks_per_transaction (16-1024) in the disposable stack only.
+                         Refuses conflicting source settings or an explicit --stack-path.
   --repo <repo>          Required approved repository name.
   --ticket <BOT-123>     Required ticket for the batch.
   --run-id <UUID>        Optional caller-chosen run identity. Choose it before dispatch to arm
@@ -528,6 +530,15 @@ export function parseStackArgs(argv) {
       case "--purpose": if (need(a, rest[i + 1])) opts.purpose = rest[++i]; break;
       case "--run-id": if (need(a, rest[i + 1])) opts.runId = rest[++i]; break;
       case "--stack-path": if (need(a, rest[i + 1])) { opts.stackPath = rest[++i]; opts.stackPathExplicit = true; } break;
+      case "--local-max-locks": {
+        if (need(a, rest[i + 1])) {
+          const raw = rest[++i];
+          const n = Number(raw);
+          if (!/^\d+$/.test(raw) || !Number.isInteger(n) || n < 16 || n > 1024) errors.push("--local-max-locks must be an integer from 16 to 1024");
+          else opts.localMaxLocks = n;
+        }
+        break;
+      }
       case "--idle-ttl": {
         if (need(a, rest[i + 1])) {
           const n = Number(rest[++i]);
@@ -647,6 +658,7 @@ export function parseStackArgs(argv) {
   // `up` exits once the lease is active, so it can never hold a remote lease's SSH
   // forwards and always asks for a co-located host.
   if (opts.remote && opts.localOnly) errors.push("--remote and --local-only are mutually exclusive");
+  if (opts.localMaxLocks != null && (command !== "run" || opts.stackPathExplicit)) errors.push("--local-max-locks requires a CLI-materialized stack run without --stack-path");
   if (opts.remote && opts.localExec) {
     errors.push("--remote cannot be combined with --local-exec: a local-exec stack is started on THIS machine");
   }
@@ -959,6 +971,9 @@ async function claimProjectLock(projectId, lock, subject) {
 }
 
 export async function resolveRunExecution(cwd, opts, { materialize = materializeRunStackDir, lock = acquireStackLock, identity = leasedStackIdentity, reserveBlocks = reservePortBlocks, releaseClaim = releaseLeasedStackClaim, claimHeld = leasedStackClaimHeld, stableReusable = stableRunStackReusable, markReleased = markLeasedStackReleased, idleOriginPort = idleRequesterOriginPort, stableIdle = stableRunStackIdle, recordOrigin = recordRequesterOrigin, reserveOrigin = reserveRequesterOrigin, portRegistryDir = null, warn = (line) => process.stderr.write(`${line}\n`) } = {}) {
+  if (opts.localMaxLocks != null && (opts.stackPathExplicit || (opts.stackPath && opts.stackPath !== "."))) {
+    throw new Error("local lock capacity requires a CLI-materialized stack");
+  }
   const refuseRoot = (execution) => {
     if (execution.stackPath === ".") {
       throw new Error(
@@ -1095,11 +1110,14 @@ export async function resolveRunExecution(cwd, opts, { materialize = materialize
     }
     // The materialized stack stays canonical (a co-located placement serves it unchanged);
     // only the remote bundle's config variant names the reserved origin.
+    const localConfig = opts.localMaxLocks == null ? undefined : await (await import("./stack-local-locks.mjs")).patchLocalLockCapacity(
+      readFileSync(join(worktreeRoot, "supabase", "config.toml"), "utf8"), opts.localMaxLocks,
+    );
     const execution = refuseRoot(resolveStackPath(cwd, materialize(
       cwd,
       { slot: opts.slot, repo: opts.repo, ticket: opts.ticket, nonce, idleTtlSecs: opts.idleTtl ?? undefined },
       // BOT-2403: a functions directory another writer replaced under this stack is reported.
-      { ...(portRegistryDir ? { portRegistryDir } : {}), warn },
+      { ...(portRegistryDir ? { portRegistryDir } : {}), ...(localConfig === undefined ? {} : { configText: localConfig }), warn },
     )));
     let originConfigText = null;
     if (requesterOrigin) {
@@ -4232,7 +4250,7 @@ async function runStackLifecycleOnce(opts, childArgv, adapters, incidentBox) {
       let hasDeclaration = false;
       try { hasDeclaration = existsSync(declaration) && lstatSync(declaration).isFile(); } catch { hasDeclaration = false; }
       if (remoteVariant && !originConfigPath) {
-        const error = new Error("the requester-origin config variant has no materialized config to replace"); error.code = "REQUESTER_ORIGIN_DIGEST_UNAVAILABLE"; throw error;
+        const error = new Error("the requester-origin config variant has no materialized config to replace"); error.code = "REQUESTER_ORIGIN_DIGEST_UNAVAILABLE"; error.failureMechanism = "origin_config_missing"; throw error;
       }
       return buildBundle(stackDirFor(execution), {
         ...(remoteVariant ? { readFile: (abs, ...rest) => abs === originConfigPath ? Buffer.from(execution.originConfigText, "utf8") : readFileSync(abs, ...rest) } : {}),
@@ -4270,7 +4288,8 @@ async function runStackLifecycleOnce(opts, childArgv, adapters, incidentBox) {
         // hide it — and it happens before any lease exists.
         if (executionRequest === "remote" || bundleInclude.length) {
           const fixable = typeof error?.code === "string" && error.code.startsWith("BUNDLE_");
-          return { exitCode: fixable ? EXIT.INVALID : EXIT.INTERNAL, outcome: "error", code: error?.code ?? "BUNDLE_FAILED", error: message };
+          return { exitCode: fixable ? EXIT.INVALID : EXIT.INTERNAL, outcome: "error", code: error?.code ?? "BUNDLE_FAILED", error: message,
+            ...(error?.code === "REQUESTER_ORIGIN_DIGEST_UNAVAILABLE" && error?.failureMechanism === "origin_config_missing" ? { failureMechanism: error.failureMechanism } : {}) };
         }
         // Codex #1077 P2: without a digest, `auto` could still pick a remote host and be
         // refused BUNDLE_REQUIRED instead of queueing here, so ask for this machine.
@@ -4328,7 +4347,7 @@ async function runStackLifecycleOnce(opts, childArgv, adapters, incidentBox) {
     let renewIdentifiedRequest = null;
     if (execution.admissionRequestId) {
       if (!stackDigest || !bundle?.sha256) {
-        return { exitCode: EXIT.INTERNAL, outcome: "error", code: "REQUESTER_ORIGIN_DIGEST_UNAVAILABLE", error: "the requester-origin bundle digest could not be computed; no lease was requested" };
+        return { exitCode: EXIT.INTERNAL, outcome: "error", code: "REQUESTER_ORIGIN_DIGEST_UNAVAILABLE", failureMechanism: "origin_digest_missing", error: "the requester-origin bundle digest could not be computed; no lease was requested" };
       }
       leaseArgs.request_id = execution.admissionRequestId;
       // Durable request-to-context association before any request can commit (recovery key).
@@ -5305,6 +5324,8 @@ export function runReceiptFields(result) {
     ...(result.callbackCause ? { callback_cause: result.callbackCause } : {}),
     // BOT-2880: which check refused a CALLBACK_AUTHORIZATION_LOST (a bounded token, never a value).
     ...(result.callbackAuthorizationReason ? { callback_authorization_reason: result.callbackAuthorizationReason } : {}),
+    ...(result.code === "REQUESTER_ORIGIN_DIGEST_UNAVAILABLE" && ["origin_config_missing", "origin_digest_missing"].includes(result.failureMechanism)
+      ? { failure_mechanism: result.failureMechanism } : {}),
     // BOT-2957: the control-plane gaps this run's callback route rode through (never on a run that had none).
     ...(result.callbackOutage ? { callback_outage: result.callbackOutage } : {}),
     // BOT-2780: the reserved requester origin generated auth links name (never a credential).