@catalyst-cloud/cli 0.16.7 → 0.16.9

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 0.16.9
+
+Setup on macOS now accepts Docker’s initial folder ownership mapping during the local storage check. Updating this computer keeps its verified file-access enrollment and can resume an interrupted update to a newer version.
+
+## 0.16.8
+
+Setup can resume an update stopped by a local storage check. Failed access checks keep the earlier settings and report which check stopped setup.
+
 ## 0.16.7
 
 Setup can update an existing installation that still runs its saved, older image version. Headless setup names which key input Catalyst rejected and shows how to try a saved personal login when one is available. Installer checks leave existing skill files in place until the installer updates them.

package/dist/onboard-runner-custody.js

@@ -7,7 +7,34 @@ import { fileURLToPath } from "node:url";
 import { canonicalDarwinThoughtsJson, parseDarwinThoughtsAuthority, parseDarwinThoughtsRequest, verifyDarwinThoughtsCustodyResponse, } from "../vendor/self-host/darwin-thoughts-custody/verifier.mjs";
 const LABEL = "dev.catalystcloud.runner.darwin-thoughts-custody";
 const vendor = resolve(dirname(fileURLToPath(import.meta.url)), "../vendor/self-host/darwin-thoughts-custody");
-function fail(reason) { throw Error("darwin_thoughts_custody_install:" + reason); }
+class CustodyInstallError extends Error {
+    reason;
+    constructor(reason) {
+        super("darwin_thoughts_custody_install:" + reason);
+        this.reason = reason;
+        this.name = "CustodyInstallError";
+    }
+}
+/** Only our fixed installer errors may reach output; never forward command stderr or causes. */
+export function darwinThoughtsInstallRefusal(error) {
+    return error instanceof CustodyInstallError ? error.reason : undefined;
+}
+/** Unknown exception text can contain credentials. Keep its class, and explicitly redact it. */
+export function darwinThoughtsInstallException(error) {
+    const known = error instanceof CustodyInstallError;
+    const classes = new Set(["Error", "TypeError", "RangeError", "SyntaxError", "AbortError", "CustodyInstallError"]);
+    return { custodyErrorClass: error instanceof Error && classes.has(error.name) ? error.name : "Error",
+        custodyErrorMessage: known ? error.message : "Unclassified local storage exception; message withheld to protect credentials.",
+        custodyErrorMessageRedacted: !known };
+}
+function fail(reason) { throw new CustodyInstallError(reason); }
+const VERIFIER_REFUSALS = new Set([
+    "ancestor", "ancestor_identity", "bootstrap_directory", "bootstrap_owner", "bootstrap_path",
+    "channel_identity", "cleanup", "deadline", "directory", "engine_identity", "exchange",
+    "file_owner", "git_descriptor", "git_path", "invalid", "noncanonical_json", "nonce_collision",
+    "path", "producer_refused", "signature", "size", "substituted_file", "substituted_request",
+    "unsafe_directory", "unsafe_file",
+]);
 function path(value) {
     if (!isAbsolute(value) || normalize(value) !== value || value.includes("\0") ||
         value.endsWith("/") || value === "/")
@@ -217,6 +244,7 @@ function factory(ports) {
             const nodeHash = executable(executables.nodeExecutable, principal, roots);
             const dockerHash = executable(executables.dockerExecutable, principal, roots);
             let authority;
+            let producerSupervisorImage = input.supervisorImage;
             if (existing) {
                 custody.walk(state, false, 0o700, true);
                 const runtime = record(parse(custody.read(join(state, "runtime.json"), 4096)), ["version", "nodeExecutable", "nodeExecutableSha256"]);
@@ -229,9 +257,14 @@ function factory(ports) {
                     authority.nativeHome !== principal.home || authority.thoughtsRoot !== thoughtsRoot ||
                     authority.locksRoot !== locksRoot || authority.requestsRoot !== requestsRoot ||
                     authority.responsesRoot !== responsesRoot || row.privateKeyFile !== privateKeyFile ||
-                    row.supervisorImage !== input.supervisorImage || row.dockerExecutable !== executables.dockerExecutable ||
+                    row.dockerExecutable !== executables.dockerExecutable ||
                     row.dockerExecutableSha256 !== dockerHash)
                     fail("existing_authority_mismatch");
+                if (typeof row.supervisorImage !== "string")
+                    fail("existing_authority_mismatch");
+                image(row.supervisorImage);
+                if (row.supervisorImage.split("@sha256:")[0] !== input.supervisorImage.split("@sha256:")[0])
+                    fail("existing_authority_mismatch");
                 let key;
                 try {
                     key = createPrivateKey({ key: custody.read(privateKeyFile, 4096), type: "pkcs8", format: "der" });
@@ -241,15 +274,20 @@ function factory(ports) {
                 }
                 if (key.asymmetricKeyType !== "ed25519" || createPublicKey(key).export({ type: "spki", format: "der" }).toString("base64") !== authority.publicKey)
                     fail("private_key_authority_mismatch");
+                // The enrolled producer attests its helper image. A runtime update does not re-enroll it.
+                producerSupervisorImage = row.supervisorImage;
             }
             custody.recheck();
             alive();
             const engine = await ports.engineIdentity({ ...executables, principal,
-                supervisorImage: input.supervisorImage, runnerImage: input.runnerImage, deadlineMs: input.deadlineMs, signal });
+                supervisorImage: input.supervisorImage, producerSupervisorImage,
+                runnerImage: input.runnerImage, deadlineMs: input.deadlineMs, signal });
             alive();
             if (!/^unix:\/\/\/[^,\0]+$/.test(engine.endpoint) || normalize(engine.endpoint.slice(7)) !== engine.endpoint.slice(7) ||
                 !engine.cachedSupervisor || !engine.cachedRunner || !/^[A-Za-z0-9][A-Za-z0-9_.:-]{0,255}$/.test(engine.daemonId))
                 fail("engine_endpoint_or_cache_invalid");
+            if (engine.cachedProducerSupervisor !== true)
+                fail("producer_helper_cache_unavailable");
             if (engine.runnerCustodyVersion !== "v1")
                 fail("runner_custody_label_unqualified");
             if (authority && (authority.endpoint !== engine.endpoint || authority.daemonId !== engine.daemonId))
@@ -306,7 +344,7 @@ function factory(ports) {
             await ports.service({ ...executables, uid: principal.uid, serviceLabel: LABEL, plistPath, deadlineMs: input.deadlineMs, signal });
             alive();
             const receipt = await ports.receiveBootstrap({ ...executables, authority, configPath,
-                supervisorImage: input.supervisorImage, deadlineMs: input.deadlineMs, signal });
+                supervisorImage: producerSupervisorImage, deadlineMs: input.deadlineMs, signal });
             alive();
             if (ports.now() >= input.deadlineMs)
                 fail("startup_proof_expired");
@@ -432,6 +470,9 @@ async function actualEngine(input) {
     const run = (args) => command(input.dockerExecutable, ["--config", config, "--host", selected, ...args], input.deadlineMs, 16384, input.signal);
     const daemon = await run(["info", "--format", "{{.ID}}"]);
     const supervisor = await run(["image", "inspect", "--format", "{{.Id}}", input.supervisorImage]);
+    const producerSupervisorImage = input.producerSupervisorImage ?? input.supervisorImage;
+    const producerSupervisor = producerSupervisorImage === input.supervisorImage ? supervisor :
+        await run(["image", "inspect", "--format", "{{.Id}}", producerSupervisorImage]);
     const runner = await run(["image", "inspect", "--format", "{{json .}}", input.runnerImage]);
     if (daemon.code !== 0)
         fail("engine_identity_unavailable");
@@ -465,6 +506,7 @@ async function actualEngine(input) {
     }
     return { endpoint: selected, daemonId: daemon.stdout,
         cachedSupervisor: supervisor.code === 0 && /^sha256:[a-f0-9]{64}$/.test(supervisor.stdout),
+        cachedProducerSupervisor: producerSupervisor.code === 0 && /^sha256:[a-f0-9]{64}$/.test(producerSupervisor.stdout),
         cachedRunner: runnerId !== undefined,
         ...(runnerCustodyVersion === undefined ? {} : { runnerCustodyVersion }) };
 }
@@ -594,8 +636,10 @@ async function actualBootstrap(input) {
             fail("bootstrap_cleanup_unproved");
         id = receiveIdentity(await docker(["inspect", name]), id);
         const started = await docker(["start", "--attach", id]);
-        if (started.code !== 0)
-            fail("bootstrap_proof_refused");
+        if (started.code !== 0) {
+            const reported = /darwin_thoughts_custody:([a-z_]+)(?![a-z_])/.exec(started.stderr)?.[1];
+            fail("bootstrap_proof_refused" + (reported && VERIFIER_REFUSALS.has(reported) ? ":" + reported : ""));
+        }
         const value = JSON.parse(started.stdout);
         if (typeof value.bytes !== "string" || value.bytes.length > 21848 ||
             Buffer.from(value.bytes, "base64").toString("base64") !== value.bytes)

package/dist/onboard-runner-telemetry.js

@@ -0,0 +1,80 @@
+import { hostname } from "node:os";
+import { loadConfig, normalizeBaseUrl } from "./config.js";
+import { ownedFetch } from "./owned-fetch.js";
+/** One failure event, using the existing personal login and the tenant-stamping ingest route.
+ * The short-lived export token stays in memory. Export failure never erases the setup refusal. */
+export async function emitCustodyFailure(ctx, journal, details, parent) {
+    const cfg = loadConfig(ctx.home);
+    if (!cfg?.user || cfg.account !== (journal.account ?? journal.tenant) ||
+        cfg.user.id !== journal.membershipId || !journal.baseUrl ||
+        normalizeBaseUrl(cfg.baseUrl) !== normalizeBaseUrl(journal.baseUrl))
+        return false;
+    const expiry = cfg.auth ? Date.parse(cfg.auth.expiresAt) - ctx.now().getTime() : 0;
+    const bearer = cfg.key || (cfg.auth && expiry > 30_000 ? cfg.auth.accessToken : undefined);
+    if (!bearer || parent?.aborted)
+        return false;
+    const deadline = new AbortController();
+    const timer = setTimeout(() => deadline.abort(), 5000);
+    const signal = parent ? AbortSignal.any([parent, deadline.signal]) : deadline.signal;
+    const owner = ownedFetch(ctx.fetch, signal, { maxBodyBytes: 4096 });
+    let delivered = false;
+    try {
+        const origin = normalizeBaseUrl(cfg.baseUrl);
+        const minted = await owner.fetch(`${origin}/api/v1/telemetry/token`, {
+            method: "POST", redirect: "error", signal,
+            headers: { authorization: `Bearer ${bearer}`, "content-type": "application/json" },
+            body: JSON.stringify({ ttlSeconds: 60 }),
+        });
+        if (minted.status !== 200)
+            return false;
+        const token = await minted.json();
+        if (!token || typeof token !== "object" || !("token" in token) ||
+            typeof token.token !== "string" || !/^ctc_tel_[A-Za-z0-9._~-]{1,2048}$/.test(token.token) ||
+            !("account" in token) || token.account !== cfg.account ||
+            !("scope" in token) || token.scope !== "telemetry:write" ||
+            !("endpoint" in token) || token.endpoint !== `${origin}/api/v1/telemetry`)
+            return false;
+        const current = loadConfig(ctx.home);
+        if (!current?.user || current.account !== cfg.account || current.user.id !== cfg.user.id ||
+            normalizeBaseUrl(current.baseUrl) !== origin)
+            return false;
+        const attribute = (key, value) => ({ key,
+            value: typeof value === "boolean" ? { boolValue: value } : { stringValue: value } });
+        const attributes = [
+            attribute("catalyst.onboarding.run_id", journal.runId),
+            attribute("catalyst.onboarding.step", "runner"),
+            attribute("catalyst.onboarding.custody.failure_case", details.custodyFailureCase),
+            ...Object.entries(details).filter(([key]) => key !== "custodyFailureCase").map(([key, value]) => attribute(key, value)),
+        ];
+        const response = await owner.fetch(`${origin}/api/v1/telemetry/v1/logs`, {
+            method: "POST", redirect: "error", signal,
+            headers: { authorization: `Bearer ${token.token}`, "content-type": "application/json" },
+            body: JSON.stringify({ resourceLogs: [{ resource: { attributes: [
+                                attribute("service.name", "catalyst-cloud.cli"), attribute("host.name", hostname()),
+                            ] }, scopeLogs: [{ scope: { name: "catalyst-cloud.cli.onboarding", version: journal.cli },
+                                logRecords: [{ timeUnixNano: String(BigInt(ctx.now().getTime()) * 1000000n),
+                                        severityNumber: 17, severityText: "ERROR", eventName: "onboarding.runner.custody.refused",
+                                        body: { stringValue: "Setup could not verify local storage." }, attributes }] }] }] }),
+        });
+        const text = await response.text();
+        const acknowledgement = text ? JSON.parse(text) : {};
+        if (response.ok && acknowledgement && typeof acknowledgement === "object" && !Array.isArray(acknowledgement)) {
+            const partial = "partialSuccess" in acknowledgement ? acknowledgement.partialSuccess : undefined;
+            delivered = partial === undefined || !!partial && typeof partial === "object" && !Array.isArray(partial) &&
+                (!("rejectedLogRecords" in partial) || partial.rejectedLogRecords === 0 || partial.rejectedLogRecords === "0");
+        }
+    }
+    catch {
+        delivered = false;
+    }
+    finally {
+        clearTimeout(timer);
+        try {
+            await owner.settle();
+        }
+        catch {
+            delivered = false;
+        }
+    }
+    return delivered;
+}

package/dist/onboard-runner.js

@@ -8,7 +8,8 @@ import { runnerAdmission, issueRunnerOrgKey, verifyRunnerRoutes } from "./onboar
 import { verifyOnboardRoutes } from "./onboard-capabilities.js";
 import { liveTeamKey, onboardTeamAdmission } from "./onboard-capacity.js";
 import { runnerVmCapabilities } from "./onboard-runner-probes.js";
-import { installDarwinThoughtsCustody } from "./onboard-runner-custody.js";
+import { darwinThoughtsInstallException, darwinThoughtsInstallRefusal, installDarwinThoughtsCustody } from "./onboard-runner-custody.js";
+import { emitCustodyFailure } from "./onboard-runner-telemetry.js";
 import { canonicalDarwinThoughtsJson, parseDarwinThoughtsAuthority } from "../vendor/self-host/darwin-thoughts-custody/verifier.mjs";
 import { readExistingOnboardJson, readOnboardTeamInventory, selectedOnboardTeam, } from "./onboard-existing.js";
 import { onboardStateRoot, } from "./onboard.js";
@@ -19,13 +20,13 @@ import { onboardStateRoot, } from "./onboard.js";
 /** The Compose project name the vendored file declares. */
 export const RUNNER_PROJECT = "catalyst-host";
 export const RUNNER_SESSION_NETWORK = "catalyst-session-v1";
-/** Public multi-architecture images from main 3d657787e8: host run 38043266620,
- * runner run 38042751509. Explicit environment image values override
- * these pins; the runner also preserves a saved image before choosing its default. */
+/** Qualified public images from main 72e4e20f86: host run 38073557244 and
+ * runner run 38073557245; the unchanged watchdog retains its earlier reviewed pin.
+ * Explicit environment values override these pins; a saved runner image is preserved. */
 export const RUNNER_HOST_IMAGES = {
-    supervisor: "ghcr.io/coalesce-labs/catalyst-supervisor@sha256:a0a8f383b5869eddc8346b7d07fd98d92fe1cd4cfc57956cbbe9dc42d79a4727",
+    supervisor: "ghcr.io/coalesce-labs/catalyst-supervisor@sha256:c175a4176ffdca4ec6689217a2a1c4bcc83cc8e0e93443e3e1d6d449433068f5",
     watchdog: "ghcr.io/coalesce-labs/catalyst-deadline-watchdog@sha256:a5999dbf229ac432b83c2ed3fe43fa251366baceb73af2f57590890a6a758f0d",
-    runner: "ghcr.io/coalesce-labs/catalyst-runner@sha256:88c6143f6c95f92fca9ca385f3c5145389e6d6d0532398c52d225d0edfcf2ea8",
+    runner: "ghcr.io/coalesce-labs/catalyst-runner@sha256:29603376bfd88559f8aa13cccbec31f578be61e99eb8f65f1dcea9ea757c1391",
 };
 const IMAGE_REF = /^[a-z0-9][a-z0-9._:/-]{0,255}@sha256:[0-9a-f]{64}$/;
 const HOST_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]{0,62}$/;
@@ -242,16 +243,30 @@ export function dockerRunnerEngine(deps = {}) {
                 const baseUrl = origins[0].slice("CATALYST_MIRROR_URL=".length);
                 if (!HOST_NAME.test(hostName))
                     return "unverified";
-                // A running older pin is still ours only when the self-owned Compose environment
-                // names that exact pinned image and the same runtime identity. Setup can then move it
-                // to the desired pin after the normal enrollment and custody checks.
-                if (config.Image !== supervisorImage &&
-                    (!saved || !IMAGE_REF.test(saved.CATALYST_SUPERVISOR_IMAGE ?? "") ||
-                        config.Image !== saved.CATALYST_SUPERVISOR_IMAGE ||
+                // An interrupted update can leave saved intent ahead of the actual runtime.
+                // A later requested pin still requires the same publisher and installation identity.
+                if (config.Image !== supervisorImage) {
+                    if (!saved || !IMAGE_REF.test(saved.CATALYST_SUPERVISOR_IMAGE ?? "") ||
+                        typeof config.Image !== "string" || !IMAGE_REF.test(config.Image) ||
+                        config.Image.split("@sha256:")[0] !== supervisorImage.split("@sha256:")[0] ||
                         saved.CATALYST_SUPERVISOR_IMAGE.split("@sha256:")[0] !== supervisorImage.split("@sha256:")[0] ||
                         saved.CATALYST_HOST_NAME !== hostName ||
-                        normalizeBaseUrl(saved.CATALYST_MIRROR_URL ?? "") !== normalizeBaseUrl(baseUrl)))
-                    return "unverified";
+                        normalizeBaseUrl(saved.CATALYST_MIRROR_URL ?? "") !== normalizeBaseUrl(baseUrl))
+                        return "unverified";
+                    if (config.Image !== saved.CATALYST_SUPERVISOR_IMAGE && saved.CATALYST_SUPERVISOR_IMAGE !== supervisorImage) {
+                        // Prove the configured old digest names this exact cached runtime, without a pull.
+                        const imageRead = await docker(["image", "inspect", config.Image], { signal });
+                        if (imageRead.code !== 0 || signal?.aborted)
+                            return "unverified";
+                        const cached = JSON.parse(imageRead.stdout);
+                        const runtimeImage = rows[0]?.Image;
+                        if (!Array.isArray(cached) || cached.length !== 1 ||
+                            typeof runtimeImage !== "string" || !/^sha256:[a-f0-9]{64}$/.test(runtimeImage) ||
+                            cached[0]?.Id !== runtimeImage || !Array.isArray(cached[0]?.RepoDigests) ||
+                            !cached[0].RepoDigests.includes(config.Image))
+                            return "unverified";
+                    }
+                }
                 return { dir, hostName, baseUrl: normalizeBaseUrl(baseUrl) };
             }
             catch {
@@ -708,6 +723,15 @@ export function onboardRunnerAdapter(input = {}) {
         ...want,
         ...Object.fromEntries(Object.entries(saved ?? {}).filter(([key]) => !(key in want))),
     });
+    async function refuseCustody(ctx, journal, failureCase, message, details = {}, signal) {
+        if (signal?.aborted)
+            return waiting("interrupted", selected);
+        input.message?.(message);
+        const evidence = { custodyFailureCase: failureCase, ...details };
+        const delivered = await emitCustodyFailure(ctx, journal, evidence, signal);
+        return waiting("runner_thoughts_custody_unavailable", { ...selected, ...evidence,
+            custodyTelemetry: delivered ? "sent" : "unavailable" });
+    }
     async function listHosts(ctx, p, signal) {
         const read = await readExistingOnboardJson(ctx, `${ENROLLMENTS}?account=${encodeURIComponent(p.account)}`, signal);
         return "reason" in read ? null : parseHosts(read.body);
@@ -934,8 +958,6 @@ export function onboardRunnerAdapter(input = {}) {
                     return false;
                 }
             };
-            if (!writeEnv(want))
-                return { state: "failed", reason: "runner_directory_unavailable", evidence: selected };
             for (const ref of Object.values(p.images)) {
                 if (!(await engine.imageArch(ref, signal)) && !p.info.vm) {
                     await engine.pull(ref, signal);
@@ -950,11 +972,13 @@ export function onboardRunnerAdapter(input = {}) {
                 const capability = await engine.vmCapabilities(p.dir, p.images.supervisor, p.baseUrl, signal);
                 if (capability !== "ready")
                     return waiting(capability, selected);
+                if (!engine.nativeThoughtsCustody)
+                    return refuseCustody(ctx, journal, "capability_missing", "Setup could not verify local storage: this engine has no native storage-check capability.", {}, signal);
+                let custodyReturned = false;
                 try {
-                    if (!engine.nativeThoughtsCustody)
-                        return waiting("runner_thoughts_custody_unavailable", selected);
                     const result = await engine.nativeThoughtsCustody({ dir: p.dir,
                         supervisorImage: p.images.supervisor, runnerImage: p.images.runner }, signal);
+                    custodyReturned = true;
                     if (signal?.aborted)
                         return waiting("interrupted", selected);
                     const values = {
@@ -962,19 +986,23 @@ export function onboardRunnerAdapter(input = {}) {
                         CATALYST_THOUGHTS_CUSTODY_REQUESTS_DIR: result.requestsRoot,
                         CATALYST_THOUGHTS_CUSTODY_RESPONSES_DIR: result.responsesRoot,
                     };
-                    if (persistedCustody(p.dir, values) !== "installed" ||
-                        canonicalDarwinThoughtsJson(result.authority) !== result.envAuthority)
-                        return waiting("runner_thoughts_custody_unavailable", selected);
+                    const custodyResultInstalled = persistedCustody(p.dir, values) === "installed";
+                    const custodyAuthorityMatched = canonicalDarwinThoughtsJson(result.authority) === result.envAuthority;
+                    if (!custodyResultInstalled || !custodyAuthorityMatched)
+                        return refuseCustody(ctx, journal, "result_unverified", "Setup could not verify local storage: the returned installation or authority did not match.", { custodyResultInstalled, custodyAuthorityMatched }, signal);
                     writePrivate(join(p.dir, "compose.darwin-thoughts.yaml"), readFileSync(join(packageRoot(), "vendor", "self-host", "compose.darwin-thoughts.yaml"), "utf8"));
                     receivedCustody = { dir: p.dir, result };
                     want = (await desiredEnv(p, ctx));
-                    if (!writeEnv(want))
-                        return { state: "failed", reason: "runner_directory_unavailable", evidence: selected };
                 }
-                catch {
-                    return waiting(signal?.aborted ? "interrupted" : "runner_thoughts_custody_unavailable", selected);
+                catch (error) {
+                    const custodyReason = darwinThoughtsInstallRefusal(error);
+                    const failureCase = custodyReturned ? "result_unverified" : "call_threw";
+                    const details = { ...darwinThoughtsInstallException(error), ...(custodyReason ? { custodyReason } : {}) };
+                    return refuseCustody(ctx, journal, failureCase, `Setup could not verify local storage: ${custodyReturned ? "recording the result failed" : "the native check threw"} (${details.custodyErrorClass}: ${details.custodyErrorMessage}).`, details, signal);
                 }
             }
+            if (!writeEnv(want))
+                return { state: "failed", reason: "runner_directory_unavailable", evidence: selected };
             const network = await engine.network(RUNNER_SESSION_NETWORK, signal);
             if (network === "misshaped")
                 return waiting("runner_session_network_misshaped", selected);

package/dist/onboard.js

@@ -315,6 +315,14 @@ function normalizeStep(value, fallbackAt) {
         "actor",
         // CTC-4716: which AI accounts the workspace may add, so the step's text offers only those.
         "aiAccountKinds",
+        "custodyFailureCase",
+        "custodyErrorClass",
+        "custodyErrorMessage",
+        "custodyErrorMessageRedacted",
+        "custodyReason",
+        "custodyResultInstalled",
+        "custodyAuthorityMatched",
+        "custodyTelemetry",
     ]) {
         const item = evidence?.[key];
         if (item === null ||

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@catalyst-cloud/cli",
-  "version": "0.16.7",
+  "version": "0.16.9",
   "description": "Set up Catalyst Cloud, check your tickets and manage your account from the command line.",
   "license": "MIT",
   "type": "module",

package/skills/catalyst-github/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Catalyst's GitHub: show a ticket's pull request with its checks, reviews and review threads, say whether it is mergeable under this repository's policy, and explain what a PR accumulates as the ticket moves (the branch, the draft, the rewrite, the force-pushes, the labels, the queue). Use when someone asks "show me the PR", "what are the checks saying", "why hasn't it merged", "what does the queue need", "what does that label mean", or wants the branch and merge conventions Catalyst follows.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.7 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.9 — written in this repository for customer accounts -->
 
 # Catalyst's GitHub
 

package/skills/catalyst-linear/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Catalyst's view of Linear on the customer's own cloud account. Reads a ticket with its comments, relations, labels, linked pull requests and agent sessions inline, from the cloud API by default, with local replica reads available as an explicit opt-in, always naming the source; searches tickets, PRs, projects and initiatives; writes comments, card moves, labels and new tickets through the account's agent proxy as the app actor, with every route, stage id, label id and marker read from the account's contract. Knows what a ticket accumulates as Catalyst works it (phase-outcome comments, the document per phase, the agent session, the labels, the single blocks relation, the bookkeeping marker, the eyes acknowledgement). Use when a person says "show me the ticket", "what did Catalyst write on it", "comment on it", "move it", "label it" or "file a ticket". Not for raising a decision for a human (what-needs-me) and not for pull requests (catalyst-github).
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.7 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.9 — written in this repository for customer accounts -->
 
 # Catalyst Linear
 

package/skills/catalyst-onboard/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Set up Catalyst Cloud and say whether setup is working. Walks a person from nothing to their first ticket running, one step at a time: the coding account, the project, the integrations and connected accounts, each repository's settings file, then one real ticket moving. Also logs this machine in, reads the readiness verdict with who can fix each failure, and checks the optional local replica. Use when someone says "set me up", "onboard me", "I just signed up", "get me started", "what do I do first", "log me in", "which account is this machine on", "am I set up", "what is missing", "why does nothing happen" or "is the replica running", when a login expired, or when a skill script exits 2 saying this machine is not connected. Does every step a key can do through the catalyst CLI, hands over the exact page for the steps only a browser can do, and never claims a step it did not watch succeed.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.7 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.9 — written in this repository for customer accounts -->
 
 # Onboard me
 

package/skills/run-this-project/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Own one Catalyst Cloud project end to end until it closes. Use when the person says "run this project for me", "own this until it ships", "keep this moving", or hands you a project id or a set of tickets to drive. Subscribes to the account's event stream for the scope through the catalyst CLI, reacts to each change in the same turn, makes tickets ready and moves them to dispatch, parks what should stop, chases stalls, escalates inward, and keeps one status summary current. Writes to Linear as the app actor; never polls.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.7 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.9 — written in this repository for customer accounts -->
 
 # Run this project
 

package/skills/unstick/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Get a stuck Catalyst Cloud ticket moving again. Use when the person asks "why is this parked and can you release it?", "unpark this", "get things flowing again", "the outage is over, retry what failed", or hands you a ticket that is not moving. Reads why nothing runs and what holds the ticket through the catalyst CLI, decides whether the recorded cause is fixed, previews the release, releases every governor holding the ticket the right way (or one failure class across a team), and raises an ask only for what a person has to do. Never releases a cause it cannot show changed without saying so.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.7 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.9 — written in this repository for customer accounts -->
 
 # Unstick
 

package/skills/what-needs-me/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   The human's decision inbox on Catalyst Cloud, and the one way an agent raises a decision on their behalf. Use when the person asks "what needs me?", "what am I blocking?", or when active work is gated on a choice only they can make. Lists open asks ranked by how much open work each one holds, files an ask through the cloud's ask route with the account's own template, and records the answer so the held work releases. Never answers as the human, never duplicates an open ask.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.7 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.9 — written in this repository for customer accounts -->
 
 # What needs me
 

package/skills/what-this-repo-needs/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   What environment variable names does this repository need, and where does each one come from? Scans the repository offline (no login, no network) and lists the names in three groups (build/test, deploy-only, bindings), each with where it was found, what uses it, and where a local value would come from. Never reads a value or prints one. Also checks the environment variable table in `.catalyst/catalyst.toml` offline. Use when someone asks "what does catalyst.env.json mean", "what env vars does this repo need", "why does the container need this", or before reviewing or writing the declaration.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.7 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.9 — written in this repository for customer accounts -->
 
 # What this repository needs
 

package/skills/whats-happening/SKILL.md

@@ -4,7 +4,7 @@ description: >-
   Use for "what's happening?", "what machines do we have?", "how much capacity do we have?", "where are we?", "why is that stuck?", "what closed?", "what's next?", "how does this work?", "why did it do that?", "how does it prioritise?" and "what does this setting do, where is it set?" in Catalyst Cloud, or asks for something to be done rather than known. Reads the contract via catalyst CLI. Read-only: route work/decisions, never answer as the human.
 allowed-tools: Bash(catalyst:*) Bash(npx -p @catalyst-cloud/cli catalyst:*)
 ---
-<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.7 — written in this repository for customer accounts -->
+<!-- vendored-from: @catalyst-cloud/catalyst-skills@0.16.9 — written in this repository for customer accounts -->
 
 # What's happening
 

package/vendor/self-host/darwin-thoughts-custody/manifest.json

@@ -4,7 +4,7 @@
   "inputs": {
     "packages/host-isolation/src/darwin-thoughts-producer.ts": "038fb63d8121fb1665ec31869f45604aedd96dd7d9b15a415d578fea9a0ad507",
     "packages/protocol/src/darwin-thoughts-custody.ts": "3515efc22b0a3cfb512ff1acaf649c6eafb978b894c724fabb01c325aea51075",
-    "packages/host-isolation/src/darwin-thoughts-custody.ts": "5d65d59d71205e2ce5551e99b4ad33364d53cbdd29993cf2f164fc214b83baf8",
+    "packages/host-isolation/src/darwin-thoughts-custody.ts": "d75c21a5a64a3200f882f14d15c80eb365637e91d2d101cc6c20568f689ffe8d",
     "deploy/self-host/darwin-thoughts-custody/producer-entry.ts": "27c8ff591c8dc4d1a4c65dd154157df5191ead1fb0af673bfd7099d5226d37bc",
     "deploy/self-host/darwin-thoughts-custody/verifier-entry.ts": "80bc1e72943e43bc33d76ba205bd79751f58ca34d622e35f7e50e3b661f65464",
     "deploy/self-host/darwin-thoughts-custody/generate.ts": "bfe1bef175fa8243be0558e1ddee6ddbcfbd622922e3a5df850e8621f18e7b26",
@@ -13,6 +13,6 @@
     "deploy/self-host/darwin-thoughts-custody/service.plist.in": "66e9a2c175d2500b1f7130e7c04a5ed07f22bc7425661777f514fa3f2a816496"
   },
   "artifactSha256": "0e0f1bbdac23813e8ee57b6eb4ae3dfd24c3f1c51ebe0c3d119a1448734ea05e",
-  "verifierSha256": "2d8c9b5c35e38a25a45098b7606a216109557fb0466113098f503e9d6c8f6b4c",
+  "verifierSha256": "64bc6251fbd7033067fab74d855293b901e05d3280a3f5fcb76811440dcbeb5d",
   "verifierDeclarationsSha256": "624428ced2eb18b045b761b49e20b7f52c0fc6c3132689571103ece7b4a1083f"
 }

package/vendor/self-host/darwin-thoughts-custody/verifier.mjs

@@ -522,6 +522,19 @@ function checkAncestors(expected) {
     }
   }
 }
+function receiveStagingChannel(path, before, stagedFile, observedAncestors) {
+  const current = directory(path, true);
+  if (sameDirectoryAuthority(before, current))
+    return current;
+  if (before.dev !== current.dev || before.ino !== current.ino || before.mode !== current.mode || before.uid !== 0n || before.gid !== 0n || current.uid !== 10001n || current.gid !== 10001n || process.getuid?.() !== 10001 || process.geteuid?.() !== 10001 || process.getgid?.() !== 10001 || stagedFile.uid !== 10001n || stagedFile.gid !== 10001n)
+    throw failure("ancestor_identity");
+  const channel = observedAncestors.find((ancestor) => ancestor.path === path);
+  if (!channel || !sameDirectoryAuthority(channel.stat, before))
+    throw failure("ancestor_identity");
+  checkAncestors(observedAncestors.filter((ancestor) => ancestor.path !== path));
+  channel.stat = current;
+  return current;
+}
 function isMissing(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
@@ -607,7 +620,7 @@ async function exchange(options, bootstrap) {
     issuedAtMs,
     expiresAtMs: options.deadlineMs
   }));
-  const requests = directory(options.requestDir, true);
+  let requests = directory(options.requestDir, true);
   const responses = directory(options.responseDir, true);
   const creationPaths = bootstrap ? bootstrapPaths(authority, options.tenant, options.repository) : [];
   if (bootstrap)
@@ -651,6 +664,7 @@ async function exchange(options, bootstrap) {
     } finally {
       fs.closeSync(fd);
     }
+    requests = receiveStagingChannel(options.requestDir, requests, owned, aliasAncestors);
     checkAncestors(aliasAncestors);
     if (!sameDirectoryAuthority(requests, directory(options.requestDir, true)))
       throw failure("channel_identity");

package/vendor/self-host/provenance.json

@@ -1,16 +1,16 @@
 {
   "repository": "coalesce-labs/catalyst-cloud",
-  "commit": "3d657787e8d4a0295068d0ea67ea3e7a1f4707a2",
+  "commit": "72e4e20f866e0c0885d1b40fc0e1a1026a2487a6",
   "sha256": {
     "deploy/self-host/compose.yaml": "0ffb7671c7ea49d8490d6e97093ada0afcb31da3b00092a8768150b090cca0bc",
     "deploy/self-host/compose.darwin-thoughts.yaml": "6269d66d6f487175ab8560d0648e65c8a0eccb86f69a8dc24daf41d8ae1dcf02",
     "deploy/self-host/darwin-thoughts-custody/producer.mjs": "0e0f1bbdac23813e8ee57b6eb4ae3dfd24c3f1c51ebe0c3d119a1448734ea05e",
-    "deploy/self-host/darwin-thoughts-custody/verifier.mjs": "2d8c9b5c35e38a25a45098b7606a216109557fb0466113098f503e9d6c8f6b4c",
+    "deploy/self-host/darwin-thoughts-custody/verifier.mjs": "64bc6251fbd7033067fab74d855293b901e05d3280a3f5fcb76811440dcbeb5d",
     "deploy/self-host/darwin-thoughts-custody/verifier.d.mts": "624428ced2eb18b045b761b49e20b7f52c0fc6c3132689571103ece7b4a1083f",
     "deploy/self-host/darwin-thoughts-custody/watchdog.mjs": "6b5c7204aacd296c85a216d4f1b3adbe2084024fe37200ec1d24dfc2dec2e12d",
     "deploy/self-host/darwin-thoughts-custody/watchdog-deadline.mjs": "a642e6d8968f56f635056d3b258e5c4ad186c638a273c26b4528e85b7d2a6346",
     "deploy/self-host/darwin-thoughts-custody/service.plist.in": "66e9a2c175d2500b1f7130e7c04a5ed07f22bc7425661777f514fa3f2a816496",
-    "deploy/self-host/darwin-thoughts-custody/manifest.json": "ee575635e8135bc2d9e735bb69795d011371e234af1139e30dfee6d4785f4fa4",
+    "deploy/self-host/darwin-thoughts-custody/manifest.json": "c7816e0ffa4ae46b6d19f79359bbddbc889bd88f948c7e3e1ab36cccaaf45382",
     "deploy/self-host/linux-session-egress/session-egress.py": "a20cedfa1e883127ec461e4b7f9588d379fe1633b8244ecd703c81f589d3f142",
     "deploy/self-host/linux-session-egress/catalyst-session-egress.service": "703c150ab23ec87aea47cfc394f63e061b66c4b8c1454a88a9be879c161ce2a5",
     "deploy/self-host/linux-session-egress/catalyst-session-egress-attest.service": "94fa75ea0616f6a1172fc20ca637a5727c36456357e4a977d5bdd65f2fad2e8d",