@botbuddy/cli 1.64.33 → 1.64.34

package/daemon-release/darwin-arm64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.64.33",
-  "source_commit": "644a0f64f3b74a556a821c8a8997ea4e8910f282",
-  "source_sha256": "1da5f11e7e2200acf29d273111d3550497ea0fa16ea3a570083273995c9d22de",
+  "release_version": "1.64.34",
+  "source_commit": "512513a6c1887db44c8a1743abb0f10ff844c1b0",
+  "source_sha256": "f6675485098c6bc62cab5119a356db6c12f4247e153f241584f0a349c09d9454",
   "target": "darwin-arm64",
-  "sha256": "49b0b67a0e368a26b4f205881120a4dbc114e246e84413d77c108adbbd0ec8de"
+  "sha256": "5fba031a897c73f93e078e0aca1c4e8338926dc3501e512b3a9f0d706f39708c"
 }

package/daemon-release/linux-x64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.64.33",
-  "source_commit": "644a0f64f3b74a556a821c8a8997ea4e8910f282",
-  "source_sha256": "1da5f11e7e2200acf29d273111d3550497ea0fa16ea3a570083273995c9d22de",
+  "release_version": "1.64.34",
+  "source_commit": "512513a6c1887db44c8a1743abb0f10ff844c1b0",
+  "source_sha256": "f6675485098c6bc62cab5119a356db6c12f4247e153f241584f0a349c09d9454",
   "target": "linux-x64",
-  "sha256": "75b79c530c451304354c4bdffe23f373a7de6824f203cba9a7acb7e1bc0cfb2e"
+  "sha256": "7d722a654dd8da0794024fc6c0dba71034d631e1de87f434e5fbd8399f0d08af"
 }

package/daemon-release/manifest.json

@@ -1,21 +1,21 @@
 {
   "schema_version": 1,
-  "release_version": "1.64.33",
-  "source_commit": "644a0f64f3b74a556a821c8a8997ea4e8910f282",
-  "source_sha256": "1da5f11e7e2200acf29d273111d3550497ea0fa16ea3a570083273995c9d22de",
+  "release_version": "1.64.34",
+  "source_commit": "512513a6c1887db44c8a1743abb0f10ff844c1b0",
+  "source_sha256": "f6675485098c6bc62cab5119a356db6c12f4247e153f241584f0a349c09d9454",
   "targets": {
     "darwin-arm64": {
       "goos": "darwin",
       "goarch": "arm64",
       "binary": "daemon/bin/darwin-arm64/botbuddy-daemon",
-      "sha256": "49b0b67a0e368a26b4f205881120a4dbc114e246e84413d77c108adbbd0ec8de",
+      "sha256": "5fba031a897c73f93e078e0aca1c4e8338926dc3501e512b3a9f0d706f39708c",
       "mode": "0755"
     },
     "linux-x64": {
       "goos": "linux",
       "goarch": "amd64",
       "binary": "daemon/bin/linux-x64/botbuddy-daemon",
-      "sha256": "75b79c530c451304354c4bdffe23f373a7de6824f203cba9a7acb7e1bc0cfb2e",
+      "sha256": "7d722a654dd8da0794024fc6c0dba71034d631e1de87f434e5fbd8399f0d08af",
       "mode": "0755"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.64.33",
+  "version": "1.64.34",
   "description": "BotBuddy \u2014 Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/api.mjs

@@ -415,6 +415,8 @@ export function containerHostRegisterEndpoint(serverUrl = SERVER_URL) {
  */
 export function registerContainerHost(body, options = {}) { return postContainerHostControl(body, options, "register", "container_host_register"); }
 export function daemonHandoverRequest(body, options = {}) { return postContainerHostControl(body, options, "handover", "daemon_handover"); }
+// BOT-3127: the owner-only automatic-update describe read (same auth as handover).
+export function daemonAutomaticUpdateRequest(body, options = {}) { return postContainerHostControl(body, options, "automatic-update", "daemon_handover"); }
 async function postContainerHostControl(body, {
   fetchImpl = fetch,
   auth: pinnedAuth = null,

package/src/daemon/automatic.mjs

@@ -1,4 +1,4 @@
-import { callToolJson, resolveCallAuth } from "../api.mjs";
+import { callToolJson, daemonAutomaticUpdateRequest, resolveCallAuth } from "../api.mjs";
 import {
   assertSshHost,
   installedBinaryPath,
@@ -11,13 +11,20 @@ const fail = (code) => {
 };
 // One explicit administrator installation grants only the fixed native
 // coordinator/schedule. Persisted operator opt-in remains a separate drawer act.
+// BOT-3127: user-scoped. The spec names no tenant; the host's owner asks the
+// server for the host's inert rollout label and the root binding pins that.
 export async function installAutomaticDaemonUpdater(spec, {
   validateRelease = validateDaemonRelease,
   resolveAuth = resolveCallAuth,
   identity = callToolJson,
+  describe = daemonAutomaticUpdateRequest,
   stage = stageRemoteDaemonRelease,
   native = nativeHandoverCommand,
 } = {}) {
+  if (spec && typeof spec === "object" && Object.hasOwn(spec, "tenant")) {
+    // Automatic updates belong to the host's owner, not a project.
+    fail("daemon_automatic_install_tenant_not_used");
+  }
   if (
     !spec || typeof spec !== "object" || Array.isArray(spec) ||
     Object.keys(spec).some((key) =>
@@ -28,13 +35,11 @@ export async function installAutomaticDaemonUpdater(spec, {
         "serviceUser",
         "releaseRoot",
         "expectedHostKey",
-        "tenant",
       ].includes(key)
     ) || !["linux", "darwin"].includes(spec.platform) ||
     typeof spec.serviceUser !== "string" || spec.serviceUser === "root" ||
     !/^[a-z_][a-z0-9_-]*$/i.test(spec.serviceUser) ||
-    !/^bbh-[0-9a-f]{24}$/.test(spec.expectedHostKey) ||
-    typeof spec.tenant !== "string" || !spec.tenant
+    !/^bbh-[0-9a-f]{24}$/.test(spec.expectedHostKey)
   ) fail("daemon_automatic_install_spec_invalid");
   assertSshHost(spec.sshHost);
   const release = await validateRelease({ releaseRoot: spec.releaseRoot }, {
@@ -48,14 +53,30 @@ export async function installAutomaticDaemonUpdater(spec, {
   if (resolved?.error || !resolved?.auth) {
     fail("daemon_automatic_install_auth_required");
   }
-  const who = await identity("whoami", {}, {
-    auth: resolved.auth,
-    tenant: spec.tenant,
-  });
+  const who = await identity("whoami", {}, { auth: resolved.auth });
   if (
     !who?.ok || who.isError || typeof who.data?.owner_email !== "string" ||
-    !who.data.owner_email.includes("@") || who.data.tenant_id !== spec.tenant
+    !who.data.owner_email.includes("@")
   ) fail("daemon_automatic_install_owner_unavailable");
+  const described = await describe({
+    action: "describe",
+    host_key: spec.expectedHostKey,
+  }, { auth: resolved.auth });
+  const owner = described?.data?.owner_email, label = described?.data?.tenant_id;
+  if (
+    !described?.ok || described.data?.success !== true ||
+    described.data.host_key !== spec.expectedHostKey ||
+    typeof owner !== "string" || owner.toLowerCase() !== who.data.owner_email.toLowerCase() ||
+    typeof label !== "string" || !label
+  ) {
+    // A 4xx answer carries its code in `error` (e.g. daemon_host_scope).
+    const code = described?.data?.code ?? described?.error;
+    fail(
+      typeof code === "string" && /^(?:[A-Z_]{1,64}|[a-z_]{1,64})$/.test(code)
+        ? `daemon_automatic_install_owner_refused: ${code}`
+        : "daemon_automatic_install_owner_refused",
+    );
+  }
   const staged = await stage({
     platform: spec.platform,
     host: spec.sshHost,
@@ -70,8 +91,8 @@ export async function installAutomaticDaemonUpdater(spec, {
     mode: "automatic-install",
     input: {
       host_key: spec.expectedHostKey,
-      owner_email: who.data.owner_email,
-      tenant_id: who.data.tenant_id,
+      owner_email: owner,
+      tenant_id: label,
     },
   });
   if (result?.installed !== true || result.protocol !== 2) {