@botbuddy/cli 1.8.2 → 1.8.4

package/bin/pw.mjs

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+// BOT-1491: `pw` is the first-class short binary for the lock-gated Playwright
+// lane driver. `bb-pw` remains a working alias (bin/bb-pw.mjs) and
+// `botbuddy pw …` the subcommand — all three call the same runPw entrypoint.
+import { runPw } from "../src/pw/run.mjs";
+
+runPw(process.argv.slice(2)).then((code) => process.exit(code)).catch((error) => {
+  console.error(`pw: ${error?.message ?? error}`);
+  process.exit(1);
+});

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "@botbuddy/cli",
-  "version": "1.8.2",
+  "version": "1.8.4",
   "description": "BotBuddy — Swarm coordination CLI for multi-agent workflows",
   "type": "module",
   "bin": {
     "botbuddy": "./bin/botbuddy.mjs",
+    "pw": "./bin/pw.mjs",
     "bb-pw": "./bin/bb-pw.mjs"
   },
   "files": [

package/src/botbuddy-release-repair.json

@@ -0,0 +1 @@
+{"schema_version":1,"source_version":"1.8.3","source_identity":"8a450fe651f42fc96f9fd713da5fe707ff48a914c174496337495adf0c425588"}

package/src/commands.mjs

@@ -105,7 +105,8 @@ ${bold("AGENT WAITS")}
 
 ${bold("BROWSER LANES")}
   pw <lane> <verb> [args…]    Drive a lock-gated Playwright lane
-  pw --help                   Show bb-pw-compatible lane usage
+                              (also the short ${cyan("pw")} binary, or ${cyan("bb-pw")} alias)
+  pw --help                   Show lane usage
 
 ${bold("OTHER")}
   locks -m [--host name]    Reserve typed local resources, including Playwright MCP lanes

package/src/docker-hygiene.mjs

@@ -8,6 +8,7 @@ import { readFileSync } from "node:fs";
 import { hostname } from "node:os";
 import { callToolJson } from "./api.mjs";
 import { acquireStackLock, lockPathForProject, projectIdFromConfig } from "./stack-file-lock.mjs";
+import { machineUuid } from "./machine-id.mjs";
 
 export const SCHEMA_VERSION = 1;
 export const DEFAULT_PROJECTED_ENDPOINTS = 10;
@@ -1118,6 +1119,7 @@ async function runDockerCommandWithBotBuddyLock(argv, {
   runWorkflow = runDockerWorkflow,
   workflowOptions = {},
   machineHost = hostname(),
+  machineId = machineUuid(),
   monotonicNow = Date.now,
 } = {}) {
   const parsed = parseDockerArgs(argv);
@@ -1131,6 +1133,10 @@ async function runDockerCommandWithBotBuddyLock(argv, {
     host: machineHost,
     slot: parsed.opts.lockSlot,
     mode: "lock",
+    // BOT-1239: report THIS machine's unique id so the supabase_local stack lock states
+    // which physical machine holds it (host is a hostname two machines can share). Only
+    // sent when the probe found one — a NULL degrades to hostname grouping.
+    ...(machineId ? { machine_uuid: machineId } : {}),
     ticket_id: parsed.opts.ticket,
     no_pr_reason: "local OrbStack hygiene",
   });

package/src/machine-id.mjs

@@ -0,0 +1,70 @@
+// BOT-1239 — the machine-UNIQUE identity of THIS physical machine.
+//
+// A hostname is not machine-unique (two machines can both be "ubuntu"), so a
+// supabase_local lock keyed only on hostname cannot be attributed to the machine
+// that holds it. This reads the same machine-unique token a BotBuddy Helper attests
+// at enrollment (container_hosts.hardware_uuid) so a lock the CLI acquires reports the
+// SAME identity — letting /docker merge a machine's Helper with its own stack lock and
+// never with a foreign machine's under a shared hostname.
+//
+//   * macOS : IOPlatformUUID from `ioreg -rd1 -c IOPlatformExpertDevice` (what the
+//             Helper attests, so the two identities match for one machine).
+//   * Linux : /etc/machine-id (falling back to /var/lib/dbus/machine-id).
+//   * else / on any error : null — the lock then degrades to hostname grouping, never
+//             a wrong merge. This must NEVER throw or block a lock acquisition.
+//
+// `BOTBUDDY_MACHINE_UUID` overrides the probe (explicit operator control / tests).
+import { spawnSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+
+const IOREG_UUID_RE = /"IOPlatformUUID"\s*=\s*"([^"]+)"/;
+
+export function readMachineUuid({
+  platform = process.platform,
+  env = process.env,
+  exec = (cmd, args) => spawnSync(cmd, args, { encoding: "utf8", timeout: 4000 }),
+  readFile = (p) => readFileSync(p, "utf8"),
+} = {}) {
+  try {
+    const override = (env.BOTBUDDY_MACHINE_UUID || "").trim();
+    if (override) return override;
+
+    if (platform === "darwin") {
+      const out = exec("ioreg", ["-rd1", "-c", "IOPlatformExpertDevice"]);
+      if (out && out.status === 0 && typeof out.stdout === "string") {
+        const m = out.stdout.match(IOREG_UUID_RE);
+        const uuid = m && m[1] ? m[1].trim() : "";
+        return uuid || null;
+      }
+      return null;
+    }
+
+    if (platform === "linux") {
+      for (const path of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
+        try {
+          const id = String(readFile(path) || "").trim();
+          if (id) return id;
+        } catch { /* try the next source */ }
+      }
+      return null;
+    }
+
+    return null;
+  } catch {
+    // A machine id is a best-effort disambiguator; never let it fail an acquire.
+    return null;
+  }
+}
+
+let _cached;
+let _cachedComputed = false;
+
+// Cached, zero-argument accessor for the real process. Tests call readMachineUuid
+// directly with injected dependencies instead of hitting this cache.
+export function machineUuid() {
+  if (!_cachedComputed) {
+    _cached = readMachineUuid();
+    _cachedComputed = true;
+  }
+  return _cached;
+}

package/src/pw/run.mjs

@@ -11,7 +11,7 @@ import { loadConfig, getConfig } from "../config.mjs";
 // server-side, so the lane name bb-pw builds/matches/prints is the one the lock
 // kernel actually stored ("jonos-mbp:8", not "Jonos-MBP.localdomain:8").
 const hostFor = (env) => canonicalizeHostString(env.PLAYWRIGHT_MCP_HOST || env.HOSTNAME || os.hostname());
-function help(out) { out.write("Usage: botbuddy pw [--profile <name>] [--session-id <id>] <lane> <verb> [args…]\n\nAlias: bb-pw <lane> <verb> [args…]\n\n--session-id <id>  accept a lane held by this arming-session agent id (from\n                   register_agent); defaults to $BOTBUDDY_SESSION_ID, then the\n                   id saved by `botbuddy register`.\n"); }
+function help(out) { out.write("Usage: pw [--profile <name>] [--session-id <id>] <lane> <verb> [args…]\n\nAliases: bb-pw <lane> <verb> [args…]   ·   botbuddy pw <lane> <verb> [args…]\n         (all three drive the same lock-gated Playwright lane)\n\n--session-id <id>  accept a lane held by this arming-session agent id (from\n                   register_agent); defaults to $BOTBUDDY_SESSION_ID, then the\n                   id saved by `botbuddy register`.\n"); }
 function redact(value, secretValues = []) { return secretValues.reduce((text, secret) => secret ? text.split(secret).join("[redacted]") : text, String(value ?? "")); }
 // BOT-1488: the register_agent identity for this machine, persisted by
 // `botbuddy register` into ~/.botbuddy/config.json. This is the SESSION agent