@botbuddy/cli 1.65.0 → 1.66.1

package/daemon-release/darwin-arm64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.65.0",
-  "source_commit": "be92b3792490c1097c679ddd9a8ae52b3e5e6bf2",
-  "source_sha256": "74e6ce7639343fa57b8faa8d4082eeb7bdd0267b8335b2768c09477fd3e032e0",
+  "release_version": "1.66.1",
+  "source_commit": "186cf2389659c39f7a7c4caa3f6fda5bdc54d670",
+  "source_sha256": "9809bace87147ec12fee985d3b4877bbefd1b39eabc5f0f047df553f0afcd3a9",
   "target": "darwin-arm64",
-  "sha256": "94a46209aebe5086ddf8dbd6c6c6588fa700bc56ec9b013ff3a56aba08cafbc0"
+  "sha256": "c3afe8d4c99efe77db044d4d7bb4aef532436e46cdc75179b0e0a847b3e8b190"
 }

package/daemon-release/linux-x64.json

@@ -1,7 +1,7 @@
 {
-  "release_version": "1.65.0",
-  "source_commit": "be92b3792490c1097c679ddd9a8ae52b3e5e6bf2",
-  "source_sha256": "74e6ce7639343fa57b8faa8d4082eeb7bdd0267b8335b2768c09477fd3e032e0",
+  "release_version": "1.66.1",
+  "source_commit": "186cf2389659c39f7a7c4caa3f6fda5bdc54d670",
+  "source_sha256": "9809bace87147ec12fee985d3b4877bbefd1b39eabc5f0f047df553f0afcd3a9",
   "target": "linux-x64",
-  "sha256": "7efa17f7d96f9be166a0589f8634a72825e8886707a92b837b98731a81fdb5de"
+  "sha256": "d8756014b7ba81cdb244425c82728e42892a5ce701fb435abd65ac8cb2743403"
 }

package/daemon-release/manifest.json

@@ -1,21 +1,21 @@
 {
   "schema_version": 1,
-  "release_version": "1.65.0",
-  "source_commit": "be92b3792490c1097c679ddd9a8ae52b3e5e6bf2",
-  "source_sha256": "74e6ce7639343fa57b8faa8d4082eeb7bdd0267b8335b2768c09477fd3e032e0",
+  "release_version": "1.66.1",
+  "source_commit": "186cf2389659c39f7a7c4caa3f6fda5bdc54d670",
+  "source_sha256": "9809bace87147ec12fee985d3b4877bbefd1b39eabc5f0f047df553f0afcd3a9",
   "targets": {
     "darwin-arm64": {
       "goos": "darwin",
       "goarch": "arm64",
       "binary": "daemon/bin/darwin-arm64/botbuddy-daemon",
-      "sha256": "94a46209aebe5086ddf8dbd6c6c6588fa700bc56ec9b013ff3a56aba08cafbc0",
+      "sha256": "c3afe8d4c99efe77db044d4d7bb4aef532436e46cdc75179b0e0a847b3e8b190",
       "mode": "0755"
     },
     "linux-x64": {
       "goos": "linux",
       "goarch": "amd64",
       "binary": "daemon/bin/linux-x64/botbuddy-daemon",
-      "sha256": "7efa17f7d96f9be166a0589f8634a72825e8886707a92b837b98731a81fdb5de",
+      "sha256": "d8756014b7ba81cdb244425c82728e42892a5ce701fb435abd65ac8cb2743403",
       "mode": "0755"
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.65.0",
+  "version": "1.66.1",
   "description": "BotBuddy — Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {

package/src/agent-doctor.mjs

@@ -126,8 +126,19 @@ export function repairFailureRecovery(code, error = null) {
  */
 function applyStackLeaseCapability(report, capability) {
   if (!capability || typeof capability.status !== "string") return;
-  report.stack_lease.capability = capability.status;
+  // BOT-3144: the server names this owner's own revoked (disabled) host record; say
+  // "refused" rather than a generic "unattested", and make its fix the recovery.
+  const revoked = typeof capability.host_state === "string" && capability.host_state.length > 0 && capability.status !== "established";
+  report.stack_lease.capability = revoked ? "refused" : capability.status;
   if (capability.reason) report.stack_lease.reason = capability.reason;
+  if (revoked) {
+    report.stack_lease.host_state = capability.host_state;
+    if (typeof capability.host_key === "string") report.stack_lease.host_key = capability.host_key;
+    // Codex #1609 P2: the server names the fix (withdrawn consent needs the Helper first).
+    if (typeof capability.fix === "string" && capability.fix) report.stack_lease.fix = capability.fix;
+    if (!report.recovery) report.recovery = capability.reason ?? `this machine's host record is ${capability.host_state}; set it to maintenance or re-enable it on /docker, then run \`bb doctor --fix\``;
+  }
+  if (typeof capability.checked_at === "string") report.stack_lease.checked_at = capability.checked_at;
   if (capability.reported_host && capability.enrolled_host) {
     report.stack_lease.hostname_drift = {
       reported: capability.reported_host,
@@ -207,6 +218,9 @@ export async function doctorAgentAuth({
       remediation: "ticketed Codex requires --codex-thread-id <UUID>; ticketed Claude Desktop requires CLAUDE_CODE_HOST_SESSION_ID=local_<uuid>; use --no-ticket-reason for terminal or cloud work without a native link",
     },
   };
+  // BOT-3144: a plain `bb doctor` registers nothing, so report the verdict cached by the
+  // last registration (with when it was checked) instead of a bare `unverified`.
+  if (fresh && !fix) applyStackLeaseCapability(report, state.stack_lease_capability);
   let credential = fresh
     ? { token: state.agent_session_token, sessionId: state.session_id, agentId: state.agent_id, source: "cache" }
     : null;

package/src/agent-session.mjs

@@ -439,6 +439,11 @@ export async function selfHealAgentSession({
       ...(typeof data.session_token_generation === "string" && data.session_token_generation
         ? { session_token_generation: data.session_token_generation }
         : {}),
+      // BOT-3144: the registration's stack-lease verdict, so a plain `bb doctor` can
+      // report "refused" for a revoked host record instead of `unverified`.
+      ...(data.stack_lease_capability && typeof data.stack_lease_capability.status === "string"
+        ? { stack_lease_capability: { ...data.stack_lease_capability, checked_at: issued.toISOString() } }
+        : {}),
     };
     if (renewal && !isAgentStateFresh(state, issued, 0)) {
       throw missing("session_mint_invalid", "register_agent returned an invalid replacement session record.");

package/src/commands.mjs

@@ -423,7 +423,12 @@ export async function cmdDoctor(args, {
     log(`agent session: ${result.report.session.status}${result.report.session.minted_with ? ` (minted_with: ${result.report.session.minted_with})` : ""}`);
     if (result.report.stack_lease) {
       const sl = result.report.stack_lease;
-      log(`stack lease: ${sl.capability} (host ${sl.host}, machine id ${sl.machine_id_readable ? "readable" : "unavailable"})${sl.reason ? ` — ${sl.reason}` : ""}${publish ? ` ${formatPublishIp(publish)}` : ""}`);
+      // BOT-3144: a revoked host record leads with the cause and the fix.
+      if (sl.capability === "refused" && sl.host_state) {
+        log(`stack lease: refused — this machine's host record is ${sl.host_state}${sl.host_key ? ` (${sl.host_key})` : ""}: ${sl.fix ?? "set it to maintenance or re-enable it on /docker, then run \`bb doctor --fix\`"} (host ${sl.host}${sl.checked_at ? `, checked ${sl.checked_at}` : ""})`);
+      } else {
+        log(`stack lease: ${sl.capability} (host ${sl.host}, machine id ${sl.machine_id_readable ? "readable" : "unavailable"})${sl.reason ? ` — ${sl.reason}` : ""}${publish ? ` ${formatPublishIp(publish)}` : ""}`);
+      }
       if (publish && !isLoopbackIp(publish.publish_ip)) {
         log(`stack publish: leased stacks on this host are reachable beyond loopback (\`bb stack up --local-exec\` refuses; the Helper refuses ports_exposed_beyond_loopback) — fix: ${publishIpFix(publish.engine)}`);
       }

package/src/wait-core.mjs

@@ -116,6 +116,9 @@ export const SIGNAL_TYPES = Object.freeze([
   // It is intentionally consumed through the existing raw `event:` escape
   // hatch rather than adding another parallel wait grammar.
   "host_approval",
+  // BOT-3136: one signal per member-issue change of a Linear project (an epic),
+  // subject = the project's lower-case UUID. Tenant-primary like linear_issue.
+  "linear_project",
 ]);
 
 const LOCK_SUBTYPES = Object.freeze(["playwright_lane", "vite_port", "backend_port", "supabase_local"]);
@@ -525,6 +528,15 @@ const VALIDATORS = {
     if (p.type === "host_approval" && (!subject || !HOST_APPROVAL_HOST_KEY_RE.test(subject))) {
       throw new Error("event:type=host_approval needs subject=<canonical bbh- host key>");
     }
+    // BOT-3136: a project subject is its Linear UUID, matched exactly as the
+    // emitter writes it (lower-case), so normalize here and refuse anything else.
+    if (p.type === "linear_project") {
+      const id = subject ? subject.toLowerCase() : "";
+      if (!CANONICAL_UUID_RE.test(id)) {
+        throw new Error("event:type=linear_project needs subject=<Linear project UUID>");
+      }
+      return { type: p.type, subject: id };
+    }
     return { type: p.type, subject };
   },
 };

package/src/wait.mjs

@@ -251,6 +251,10 @@ CONDITIONS  (TYPE:key=val,key=val — repeat for several; --any wakes on the fir
                                       event:type=host_approval,subject=bbh-<24 lowercase hex>;
                                       it wakes only for the authenticated owner's one bound
                                       tenant after current server-side approval revalidation.
+                                      Epic progress uses
+                                      event:type=linear_project,subject=<Linear project UUID>;
+                                      it wakes when any issue in that project changes, joins
+                                      or leaves it (the band's epic row, BOT-3136).
 
 OPTIONS
   Review intervention: exact-head Codex waits have a durable one-shot diagnostic.