@botbuddy/cli 1.64.20 → 1.64.23

package/daemon-release/darwin-arm64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.64.20",
-  "source_commit": "88727144e4d431316a3805841f3c961913e9bd01",
-  "source_sha256": "6d248826ccf32a9651e8e5cb16714e627f62c2df50b4a75b76d4df6bf1b83170",
+  "release_version": "1.64.23",
+  "source_commit": "7ddae49af589d2fd829eb0a418114a16d69bde05",
+  "source_sha256": "1516cc538b4b9d9dd1d81a6a5403bbdca1f2238385126993852e342a817c5c85",
   "target": "darwin-arm64",
-  "sha256": "729b7f3001812627b43b55f5786352f0abaab8aa22a427c3f19bd2ceab72b9fb"
+  "sha256": "44289087b95f9f27b0b68743543ff65667849be9817f1dad2dc4c22ed5c8c4f0"
 }

package/daemon-release/linux-x64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.64.20",
-  "source_commit": "88727144e4d431316a3805841f3c961913e9bd01",
-  "source_sha256": "6d248826ccf32a9651e8e5cb16714e627f62c2df50b4a75b76d4df6bf1b83170",
+  "release_version": "1.64.23",
+  "source_commit": "7ddae49af589d2fd829eb0a418114a16d69bde05",
+  "source_sha256": "1516cc538b4b9d9dd1d81a6a5403bbdca1f2238385126993852e342a817c5c85",
   "target": "linux-x64",
-  "sha256": "98d279c28da1bf0b3046a5eba886fdac9321f577e2d4819eebcf7a5dd02b66dd"
+  "sha256": "4f8a4996d9254a1c621bf4cd3c76cb5f676f7f2af9fe0700f2598ee4fce1728c"
 }

package/daemon-release/manifest.json

@@ -1,21 +1,21 @@
 {
   "schema_version": 1,
-  "release_version": "1.64.20",
-  "source_commit": "88727144e4d431316a3805841f3c961913e9bd01",
-  "source_sha256": "6d248826ccf32a9651e8e5cb16714e627f62c2df50b4a75b76d4df6bf1b83170",
+  "release_version": "1.64.23",
+  "source_commit": "7ddae49af589d2fd829eb0a418114a16d69bde05",
+  "source_sha256": "1516cc538b4b9d9dd1d81a6a5403bbdca1f2238385126993852e342a817c5c85",
   "targets": {
     "darwin-arm64": {
       "goos": "darwin",
       "goarch": "arm64",
       "binary": "daemon/bin/darwin-arm64/botbuddy-daemon",
-      "sha256": "729b7f3001812627b43b55f5786352f0abaab8aa22a427c3f19bd2ceab72b9fb",
+      "sha256": "44289087b95f9f27b0b68743543ff65667849be9817f1dad2dc4c22ed5c8c4f0",
       "mode": "0755"
     },
     "linux-x64": {
       "goos": "linux",
       "goarch": "amd64",
       "binary": "daemon/bin/linux-x64/botbuddy-daemon",
-      "sha256": "98d279c28da1bf0b3046a5eba886fdac9321f577e2d4819eebcf7a5dd02b66dd",
+      "sha256": "4f8a4996d9254a1c621bf4cd3c76cb5f676f7f2af9fe0700f2598ee4fce1728c",
       "mode": "0755"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.64.20",
+  "version": "1.64.23",
   "description": "BotBuddy \u2014 Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/agent-doctor.mjs

@@ -202,6 +202,10 @@ export async function doctorAgentAuth({
       machine_id_readable: Boolean(machineUuidFn()),
       capability: "unverified",
     },
+    session_linking: {
+      ticketed_native_identity: "enforced",
+      remediation: "ticketed Codex requires --codex-thread-id <UUID>; ticketed Claude Desktop requires CLAUDE_CODE_HOST_SESSION_ID=local_<uuid>; use --no-ticket-reason for terminal or cloud work without a native link",
+    },
   };
   let credential = fresh
     ? { token: state.agent_session_token, sessionId: state.session_id, agentId: state.agent_id, source: "cache" }

package/src/agent-session.mjs

@@ -324,6 +324,11 @@ export async function selfHealAgentSession({
     // number) so the minted session keeps its dashboard deep link and the server
     // can reconcile a replacement agent by thread identity if the cache is lost.
     const codexThreadId = env.CODEX_THREAD_ID || undefined;
+    // A native Codex thread is proof that this is a Codex harness, rather than a
+    // generic CLI caller.  Keep the type and deep-link identity paired so a
+    // ticketed renewal is accepted by the server's verified-owner contract.
+    const claudeDesktopSessionId = env.CLAUDE_CODE_HOST_SESSION_ID || undefined;
+    const agentType = codexThreadId ? "codex" : claudeDesktopSessionId ? "claude" : "custom";
     const prNumber = Number.parseInt(env.BOTBUDDY_PR_NUMBER ?? env.CODEX_PR_NUMBER ?? "", 10);
     // BOT-2425: present the session-lifetime identity. The cached agent_id is only
     // this session's when the cache belongs to its harness session; otherwise the
@@ -336,7 +341,7 @@ export async function selfHealAgentSession({
       : envHarness ?? (ownCache ? current?.harness_session_id : null) ?? null;
     const response = await call("register_agent", {
       name: workAgentName,
-      type: "custom",
+      type: agentType,
       host: resolvedHost,
       worktree: registrationWorktree,
       // BOT-1750 (AC-4): attest the machine so the worktree's stack-lease capability
@@ -354,6 +359,7 @@ export async function selfHealAgentSession({
       model: env.BOTBUDDY_MODEL || undefined,
       effort: env.BOTBUDDY_EFFORT || undefined,
       codex_thread_id: codexThreadId,
+      claude_desktop_session_id: claudeDesktopSessionId,
       pr_number: Number.isInteger(prNumber) ? prNumber : undefined,
       // BOT-1649 (Codex round-6 P2): a self-heal only ever consumes the returned
       // short-lived session token — never the durable `bb_agent_` key. Declare

package/src/commands.mjs

@@ -1157,6 +1157,7 @@ export async function cmdBootstrap(args, {
   clearHarnessSession: clearSession = clearHarnessSession,
   bootstrapHarnessSession: bootstrapSession = bootstrapHarnessSession,
   getConfig: getCfg = getConfig,
+  env = process.env,
   log = (line) => console.log(line),
   die: fail = die,
 } = {}) {
@@ -1196,7 +1197,7 @@ export async function cmdBootstrap(args, {
   // Claude Desktop injects this only for a desktop-hosted agent session. The
   // CLI deliberately treats every other environment as absent, so terminal and
   // cloud Claude sessions never manufacture a deep link.
-  const claudeDesktopSessionId = process.env.CLAUDE_CODE_HOST_SESSION_ID || null;
+  let claudeDesktopSessionId = env.CLAUDE_CODE_HOST_SESSION_ID || null;
   let branch = null;
   let ticketId = null;
   let ticketUrl = null;
@@ -1229,6 +1230,8 @@ export async function cmdBootstrap(args, {
   if (linkageError) fail(linkageError);
   ticketId = ticketId?.trim() || null;
   noTicketReason = noTicketReason?.trim() || null;
+  const nativeIdentityError = validateBootstrapNativeIdentity({ type, ticketId, codexThreadId, claudeDesktopSessionId });
+  if (nativeIdentityError) fail(nativeIdentityError);
   if (!nameExplicit) name = `${name}-${harnessSessionId.slice(0, 8)}`;
   const state = await bootstrapSession({
     name,
@@ -1256,6 +1259,18 @@ export async function cmdBootstrap(args, {
   log(JSON.stringify({ agent_id: state.agent_id, display_name: state.display_name, session_id: state.session_id, expires_at: state.expires_at, ...(state.ticket_signals?.concurrency ? { ticket_session_warning: state.ticket_signals.concurrency } : {}), ...(state.replaced_cached_session ? { replaced_cached_session: state.replaced_cached_session } : {}) }));
 }
 
+/** BOT-2457: local preflight mirrors the server's ticket-link identity gate. */
+export function validateBootstrapNativeIdentity({ type, ticketId, codexThreadId, claudeDesktopSessionId }) {
+  if (!ticketId) return null;
+  const codex = typeof codexThreadId === "string" && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(codexThreadId);
+  const claude = typeof claudeDesktopSessionId === "string" && /^local_[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(claudeDesktopSessionId);
+  if (type === "codex" && codex && !claude) return null;
+  if (type === "claude" && claude && !codex) return null;
+  if (type === "codex") return "Ticketed Codex bootstrap requires exactly one --codex-thread-id <canonical UUID>; do not pass a URL, name, or Claude identity.";
+  if (type === "claude") return "Ticketed Claude Desktop bootstrap requires CLAUDE_CODE_HOST_SESSION_ID=local_<uuid>; terminal and cloud Claude sessions must use --no-ticket-reason.";
+  return "Ticketed bootstrap requires type=codex with one --codex-thread-id or type=claude with one CLAUDE_CODE_HOST_SESSION_ID; use --no-ticket-reason for ticketless custom, terminal, or cloud work.";
+}
+
 // BOT-1566 A4: after the local-metadata lines, ask the SERVER whether the stored
 // credential is actually accepted. `status` used to decode only local metadata,
 // so a Keychain item holding a typed password (the BOT-1566 incident) was