appback-remoteagent 0.15.4 → 0.15.6

package/dist/bot.js

@@ -2258,6 +2258,9 @@ print(text)
     const preview = stdout.trim();
     return preview || undefined;
 }
+const TELEGRAM_FILE_DOWNLOAD_ATTEMPTS = 4;
+const TELEGRAM_FILE_DOWNLOAD_TIMEOUT_SECONDS = 120;
+const TELEGRAM_FILE_DOWNLOAD_CONNECT_TIMEOUT_SECONDS = 20;
 async function downloadTelegramFile(botToken, botId, chatId, fileId, preferredName) {
     const file = await callTelegramApi(botToken, "getFile", {
         file_id: fileId,
@@ -2270,20 +2273,43 @@ async function downloadTelegramFile(botToken, botId, chatId, fileId, preferredNa
     const extension = path.extname(file.file_path) || path.extname(preferredName ?? "") || ".bin";
     const basename = path.basename(preferredName ?? file.file_path, path.extname(preferredName ?? file.file_path));
     const outputPath = path.join(directory, `${Date.now()}-${safePathSegment(basename)}-${randomUUID()}${extension}`);
+    const partialPath = `${outputPath}.part`;
     const fileUrl = new URL(file.file_path, `https://api.telegram.org/file/bot${botToken}/`).toString();
-    const { stderr } = await execFileAsync("curl", [
-        "-fL",
-        "-sS",
-        "--max-time",
-        "60",
-        "-o",
-        outputPath,
-        fileUrl,
-    ]);
-    if (stderr?.trim()) {
-        console.error(`curl stderr for Telegram file download: ${stderr.trim()}`);
+    let lastError;
+    for (let attempt = 1; attempt <= TELEGRAM_FILE_DOWNLOAD_ATTEMPTS; attempt += 1) {
+        try {
+            const { stderr } = await execFileAsync("curl", [
+                "-fL",
+                "-sS",
+                "--connect-timeout",
+                String(TELEGRAM_FILE_DOWNLOAD_CONNECT_TIMEOUT_SECONDS),
+                "--max-time",
+                String(TELEGRAM_FILE_DOWNLOAD_TIMEOUT_SECONDS),
+                "-C",
+                "-",
+                "-o",
+                partialPath,
+                fileUrl,
+            ]);
+            if (stderr?.trim()) {
+                console.error(`curl stderr for Telegram file download: ${stderr.trim()}`);
+            }
+            await fs.rename(partialPath, outputPath);
+            return { path: outputPath };
+        }
+        catch (error) {
+            lastError = error;
+            if (attempt < TELEGRAM_FILE_DOWNLOAD_ATTEMPTS) {
+                const partialSize = await fs.stat(partialPath).then((stat) => stat.size).catch(() => 0);
+                console.error(`Telegram file download attempt ${attempt}/${TELEGRAM_FILE_DOWNLOAD_ATTEMPTS} failed; ` +
+                    `retrying with resume from ${partialSize} bytes.`);
+                await sleep(Math.min(5000, attempt * 1000));
+                continue;
+            }
+        }
     }
-    return { path: outputPath };
+    await fs.rm(partialPath, { force: true }).catch(() => undefined);
+    throw lastError instanceof Error ? lastError : new Error("Telegram file download failed.");
 }
 function safePathSegment(value) {
     const safe = value.replace(/[^a-zA-Z0-9._-]+/g, "_").replace(/^_+|_+$/g, "");

package/dist/services/bridge-service.js

@@ -4,9 +4,10 @@ import os from "node:os";
 import path from "node:path";
 import { stopSpawnedExecution } from "../adapters/windows-shell.js";
 const MODEL_PRESETS = {
-    codex: ["gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-5.2", "gpt-5.1-codex-max"],
+    codex: ["gpt-5.6-sol", "gpt-5.6-terra", "gpt-5.6-luna", "gpt-5.6", "gpt-5.5", "gpt-5.4", "gpt-5.4-mini", "gpt-5.2", "gpt-5.1-codex-max"],
     claude: ["sonnet", "opus", "haiku"],
 };
+const DEFAULT_CODEX_MODEL = "gpt-5.6-sol";
 export class BridgeService {
     store;
     adapters;
@@ -59,7 +60,7 @@ export class BridgeService {
             cwd: workspace,
             pairedAt: new Date().toISOString(),
             sessionId: undefined,
-            model: provider === "codex" ? "gpt-5.5" : "sonnet",
+            model: this.defaultModelFor(provider),
             sandboxMode: provider === "codex" ? this.defaultCodexSandboxMode : undefined,
             lastUsedAt: undefined,
         }, workspace);
@@ -94,7 +95,7 @@ export class BridgeService {
             cwd: workspace,
             pairedAt: new Date().toISOString(),
             sessionId: normalizedSessionId,
-            model: existing?.session[provider]?.model ?? (provider === "codex" ? "gpt-5.5" : "sonnet"),
+            model: existing?.session[provider]?.model ?? this.defaultModelFor(provider),
             sandboxMode: provider === "codex"
                 ? (existing?.session[provider]?.sandboxMode ?? this.defaultCodexSandboxMode)
                 : undefined,
@@ -655,7 +656,7 @@ export class BridgeService {
         return next?.trim() || current || this.defaultWorkspace;
     }
     defaultModelFor(provider) {
-        return provider === "codex" ? "gpt-5.5" : "sonnet";
+        return provider === "codex" ? DEFAULT_CODEX_MODEL : "sonnet";
     }
     describeEffectiveAccess(session) {
         if (!session.codex) {

package/docs/OPERATIONS.md

@@ -9,8 +9,17 @@ RemoteAgent production is operated from one canonical Git history:
 - production package: `appback-remoteagent`
 - branch used for production releases: `main`
 
-Do not treat stale server paths or duplicate worktrees as authoritative.
+Use `origin/main` as the authoritative source.
 Code changes should be committed and pushed to `origin/main`, published to npm, and then server 30/26 should be updated from that npm version.
+Production release commands are:
+
+```bash
+npm run release:publish
+npm run release:deploy -- <version> all
+```
+
+Local tarball installation is an emergency runtime restoration path.
+The production release is completed by publishing the same version to npm and running `npm run release:deploy -- <version> all`.
 
 ## Product shape in operations
 
@@ -32,7 +41,7 @@ Current production bot ownership is intentionally split:
 - server 30: RemoteAgent production bots
 - local machine 21: local-only bot runtime
 
-Do not run the same Telegram bot token from multiple runtimes at the same time.
+Assign each Telegram bot token to one runtime at a time.
 Bot polling conflicts are treated as incidents, not harmless warnings.
 
 When a runtime has several configured Telegram bots, polling pressure can become operationally visible.
@@ -134,6 +143,14 @@ If a temporary branch is unavoidable, merge it back to `main`, push it, and depl
 
 A task is not done until commit and push both happened.
 A production deployment is not done until server 30 and server 26 are running the published npm version and the runtime path has been verified.
+If npm publish returns `403`, use a publish-capable npm token for the unscoped `appback-remoteagent` package and run:
+
+```bash
+source ~/.config/remoteagent/npm-token.env
+npm run release:publish
+```
+
+See `docs/RELEASING.md`.
 
 See `docs/RELEASING.md` for the detailed versioning rules.
 

package/docs/RELEASING.md

@@ -1,140 +1,176 @@
-# Releasing
+# RemoteAgent Release Runbook
 
-## Versioning rule
+This runbook is command-first. Use the scripts below as the release interface.
 
-RemoteAgent uses semantic versioning for every production deployment:
+## 1. Bump Version
 
-- `MAJOR`: breaking command changes, storage/runtime contract changes, or migrations that can break an existing installation
-- `MINOR`: new user-facing capabilities, new commands, new adapters, or non-breaking workflow expansion
-- `PATCH`: bug fixes, reliability improvements, security fixes, text-only corrections, and non-breaking maintenance
+Patch release:
 
-Do not deploy production changes without bumping the package version first.
+```bash
+npm run release:version -- patch
+```
 
-## Decision guide
+Minor release:
 
-Use `PATCH` when the behavior is supposed to stay the same but gets safer or more correct.
-Use `MINOR` when the owner can do something new after the release without needing migration.
-Use `MAJOR` when an older installation, script, or user workflow would need active adjustment.
+```bash
+npm run release:version -- minor
+```
 
-When unsure between two levels, choose the higher one and explain why in the commit message.
+Major release:
 
-## Required release flow
+```bash
+npm run release:version -- major
+```
 
-A release is only considered complete when all of the following are done in order:
+Versioning guide:
 
-1. Choose the release scope: `patch`, `minor`, or `major`
-2. Bump the version in `package.json` and `package-lock.json`
-3. Run `npm run check`
-4. Run `npm run build`
-5. Commit the completed work
-6. Push `main` to `origin/main`
-7. Publish `appback-remoteagent@<version>` to npm from server 30's npm credentials
-8. Install that exact npm version on server 30 and server 26
-9. Restart `remoteagent.service` on each target if runtime code changed
-10. Verify the relevant runtime path, logs, or Telegram behavior on each target
+- `patch`: reliability fixes, bug fixes, text fixes, safe maintenance
+- `minor`: new commands, new user-facing behavior, new non-breaking workflow
+- `major`: storage/runtime contract changes or breaking command behavior
 
-If commit or push is missing, the work is not done.
-If server 30 or server 26 is not running the published npm version, the production deployment is incomplete.
+## 2. Validate
 
-## Commands
+```bash
+npm run check
+npm run build
+```
 
-Version bump helpers:
+## 3. Commit And Push
 
 ```bash
-./scripts/bump-version.sh patch
-./scripts/bump-version.sh minor
-./scripts/bump-version.sh major
+git status --short
+git add -A
+git commit -m "Release <version>"
+git push origin main
 ```
 
-Equivalent npm shortcuts:
+Example:
 
 ```bash
-npm run version:patch
-npm run version:minor
-npm run version:major
+git commit -m "Release 0.15.5"
 ```
 
-Typical local release sequence:
+## 4. Publish To npm
+
+Load the npm token when the shell has not loaded it yet:
 
 ```bash
-./scripts/bump-version.sh patch
-npm run check
-npm run build
-git status
-git add -A
-git commit -m "Release 0.12.3"
-git push origin main
-npm pack
+source ~/.config/remoteagent/npm-token.env
 ```
 
-## npm publish procedure
+Publish:
 
-Use this package-specific path for `appback-remoteagent`.
+```bash
+npm run release:publish
+```
 
-Do not publish this package from machine 21 with the `21token`. That token is scoped for `@appbackhub` packages and cannot publish the unscoped `appback-remoteagent` package. It can authenticate but `npm publish` fails with:
+The publish script performs:
 
-```text
-403 Forbidden - You may not perform that action with these credentials.
+- clean working tree check
+- `npm whoami`
+- `npm owner ls appback-remoteagent`
+- `npm run check`
+- `npm run build`
+- `npm pack`
+- guarded `npm publish`
+- registry version verification
+
+The package publish entrypoint is `npm run release:publish`.
+`scripts/prepublish-guard.mjs` routes manual publish attempts back to that entrypoint.
+
+## 5. Deploy Published Version
+
+Deploy to server 30:
+
+```bash
+npm run release:deploy -- <version> 30
 ```
 
-The successful publish path is:
+Deploy to server 26:
 
 ```bash
-VERSION=0.14.0
-npm pack
-scp appback-remoteagent-$VERSION.tgz au2223@192.168.0.30:/tmp/appback-remoteagent-$VERSION.tgz
-ssh au2223@192.168.0.30 "bash -lc 'npm publish /tmp/appback-remoteagent-$VERSION.tgz'"
-npm view appback-remoteagent version
-ssh au2223@192.168.0.30 'bash -lc "npm view appback-remoteagent version"'
-rm -f appback-remoteagent-$VERSION.tgz
-ssh au2223@192.168.0.30 "rm -f /tmp/appback-remoteagent-$VERSION.tgz"
+npm run release:deploy -- <version> 26
+```
+
+Deploy to both production targets:
+
+```bash
+npm run release:deploy -- <version> all
 ```
 
-If registry caching briefly returns the previous version after publish, wait a few seconds and rerun `npm view appback-remoteagent version` before installing to servers.
+Example:
+
+```bash
+npm run release:deploy -- 0.15.5 all
+```
+
+The deploy script performs:
+
+- npm registry version check for `appback-remoteagent@<version>`
+- server 30 npm install, install hook, systemd restart, version/log verification
+- server 26 npm install, install hook, user-process restart, version/log verification
 
-## Target deployment sequence
+## 6. Verify
 
-Server 30 uses a systemd service:
+Registry:
 
 ```bash
-VERSION=0.14.0
-ssh au2223@192.168.0.30 "VERSION=$VERSION bash -s" <<'REMOTE'
-set -euo pipefail
+npm view appback-remoteagent version
+```
+
+Server 30:
+
+```bash
+ssh au2223@192.168.0.30 'bash -lc '"'"'
 export PATH="/home/au2223/.local/bin:/home/au2223/.nvm/versions/node/v22.22.0/bin:$PATH"
-npm install -g appback-remoteagent@$VERSION
-/home/au2223/.nvm/versions/node/v22.22.0/bin/remoteagent-install
-sudo -n systemctl restart remoteagent
 systemctl is-active remoteagent
-node -p 'require("/home/au2223/.nvm/versions/node/v22.22.0/lib/node_modules/appback-remoteagent/package.json").version'
-journalctl -u remoteagent --since '2 minutes ago' --no-pager
-REMOTE
+node -p "require(\"/home/au2223/.nvm/versions/node/v22.22.0/lib/node_modules/appback-remoteagent/package.json\").version"
+journalctl -u remoteagent --since "5 minutes ago" --no-pager | tail -80
+'"'"''
 ```
 
-Do not run `sudo npm install -g` on server 30. The global RemoteAgent package is installed under
-`/home/au2223/.nvm/versions/node/v22.22.0`; only the `systemctl restart remoteagent` step needs sudo.
-Runtime state remains in `/home/au2223/.remoteagent` and must not be deleted during npm upgrades.
-
-Server 26 currently uses user-level start/stop scripts, not a systemd `remoteagent.service`:
+Server 26:
 
 ```bash
-VERSION=0.14.0
-ssh ospadmin@192.168.0.26 "VERSION=$VERSION bash -s" <<'REMOTE'
-set -euo pipefail
-npm install -g appback-remoteagent@$VERSION
-remoteagent-install
-~/.remoteagent/stop-remoteagent.sh || true
-sleep 2
-~/.remoteagent/start-remoteagent.sh
-sleep 3
+ssh ospadmin@192.168.0.26 'bash -lc '"'"'
+npm list -g appback-remoteagent --depth=0
 pgrep -af "appback-remoteagent/dist/index.js"
 tail -80 ~/.remoteagent/logs/agent.log
-REMOTE
+'"'"''
+```
+
+## Release 0.15.5
+
+Date: 2026-07-08
+
+Changes:
+
+- Telegram file attachment download now writes to `.part` first.
+- Telegram file attachment download resumes partial files with `curl -C -`.
+- Telegram file attachment download retries up to 4 attempts.
+- Download timeout changed from one 60-second attempt to resumable 120-second attempts.
+- npm publish flow is guarded by `prepublishOnly`.
+- Standard publish command is `npm run release:publish`.
+- Standard deploy command is `npm run release:deploy -- <version> <30|26|all>`.
+
+Validated:
+
+```bash
+npm run check
+npm run build
+npm run release:publish
+npm run release:deploy -- 0.15.5 all
 ```
 
-## Other Runtime Follow-up
+Published:
 
-Server 30 and server 26 are production runtime targets.
-Machine 21 or any other host should be updated only when it intentionally runs a separate RemoteAgent service.
+```text
+appback-remoteagent@0.15.5
+```
 
-At minimum, the operator should run the install/update flow again and verify the process comes back up cleanly.
-For npm installs, the package contains `dist/`, so the target machine should not need a repository checkout or a separate manual build step.
+Runtime targets:
+
+```text
+server 30: 0.15.5 active
+server 26: 0.15.5 running
+```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "appback-remoteagent",
-  "version": "0.15.4",
+  "version": "0.15.6",
   "description": "Personal installable session server for continuing local AI work across PC and Telegram",
   "license": "MIT",
   "type": "module",
@@ -20,9 +20,10 @@
     "check": "tsc --noEmit -p tsconfig.json",
     "selftest:telegram": "npm run build && node scripts/selftest-telegram-update.mjs",
     "prepare": "npm run build",
-    "version:patch": "npm version --no-git-tag-version patch",
-    "version:minor": "npm version --no-git-tag-version minor",
-    "version:major": "npm version --no-git-tag-version major"
+    "prepublishOnly": "node scripts/prepublish-guard.mjs",
+    "release:version": "bash scripts/release-version.sh",
+    "release:publish": "bash scripts/release-publish.sh",
+    "release:deploy": "bash scripts/release-deploy.sh"
   },
   "dependencies": {
     "dotenv": "^16.6.1",

package/scripts/prepublish-guard.mjs

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+
+if (process.env.REMOTEAGENT_PUBLISH_GUARD_OK === "1") {
+  process.exit(0);
+}
+
+console.error([
+  "RemoteAgent publishes through the guarded release command.",
+  "",
+  "Command:",
+  "  npm run release:publish",
+  "",
+  "This command checks the working tree, npm identity, package owner, build, pack, publish, and registry version.",
+].join("\n"));
+
+process.exit(1);

package/scripts/release-deploy.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+usage() {
+  echo "Usage: npm run release:deploy -- <version> <30|26|all>" >&2
+  echo "Example: npm run release:deploy -- 0.15.5 all" >&2
+}
+
+if [[ $# -ne 2 ]]; then
+  usage
+  exit 1
+fi
+
+VERSION="$1"
+TARGET="$2"
+
+if [[ ! "$VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+  usage
+  exit 1
+fi
+
+case "$TARGET" in
+  30|26|all)
+    ;;
+  *)
+    usage
+    exit 1
+    ;;
+esac
+
+PACKAGE_NAME="appback-remoteagent"
+REGISTRY_VERSION="$(npm view "$PACKAGE_NAME@$VERSION" version)"
+if [[ "$REGISTRY_VERSION" != "$VERSION" ]]; then
+  echo "Registry version check failed for $PACKAGE_NAME@$VERSION" >&2
+  exit 1
+fi
+
+deploy_30() {
+  ssh au2223@192.168.0.30 "VERSION=$VERSION bash -s" <<'REMOTE'
+set -euo pipefail
+export PATH="/home/au2223/.local/bin:/home/au2223/.nvm/versions/node/v22.22.0/bin:$PATH"
+npm install -g "appback-remoteagent@$VERSION"
+remoteagent-install
+sudo -n systemctl restart remoteagent
+sleep 5
+systemctl is-active remoteagent
+node -p 'require("/home/au2223/.nvm/versions/node/v22.22.0/lib/node_modules/appback-remoteagent/package.json").version'
+journalctl -u remoteagent --since '1 minute ago' --no-pager | tail -80
+REMOTE
+}
+
+deploy_26() {
+  ssh ospadmin@192.168.0.26 "VERSION=$VERSION bash -s" <<'REMOTE'
+set -euo pipefail
+export PATH="$HOME/.local/bin:$PATH"
+npm install -g "appback-remoteagent@$VERSION"
+remoteagent-install
+~/.remoteagent/stop-remoteagent.sh || true
+sleep 2
+~/.remoteagent/start-remoteagent.sh
+sleep 5
+npm list -g appback-remoteagent --depth=0
+pgrep -af 'appback-remoteagent/dist/index.js'
+tail -80 ~/.remoteagent/logs/agent.log
+REMOTE
+}
+
+case "$TARGET" in
+  30)
+    deploy_30
+    ;;
+  26)
+    deploy_26
+    ;;
+  all)
+    deploy_30
+    deploy_26
+    ;;
+esac

package/scripts/release-publish.sh

@@ -0,0 +1,45 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$ROOT"
+
+PACKAGE_NAME="$(node -p 'require("./package.json").name')"
+VERSION="$(node -p 'require("./package.json").version')"
+
+if [[ "$PACKAGE_NAME" != "appback-remoteagent" ]]; then
+  echo "Unexpected package name: $PACKAGE_NAME" >&2
+  exit 1
+fi
+
+if [[ -n "$(git status --porcelain)" ]]; then
+  echo "Working tree is not clean. Commit and push before publishing." >&2
+  git status --short >&2
+  exit 1
+fi
+
+echo "Publishing $PACKAGE_NAME@$VERSION"
+echo
+echo "npm identity:"
+npm whoami
+echo
+echo "npm owners:"
+npm owner ls "$PACKAGE_NAME"
+echo
+
+npm run check
+npm run build
+
+TARBALL="$(npm pack --silent)"
+cleanup() {
+  rm -f "$TARBALL"
+}
+trap cleanup EXIT
+
+echo
+echo "Publishing tarball: $TARBALL"
+REMOTEAGENT_PUBLISH_GUARD_OK=1 npm publish "$TARBALL" --access public
+
+echo
+echo "Verifying registry version:"
+npm view "$PACKAGE_NAME" version

package/scripts/release-version.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+usage() {
+  echo "Usage: npm run release:version -- <patch|minor|major>" >&2
+  echo "Example: npm run release:version -- patch" >&2
+}
+
+if [[ $# -ne 1 ]]; then
+  usage
+  exit 1
+fi
+
+case "$1" in
+  patch|minor|major)
+    ;;
+  *)
+    usage
+    exit 1
+    ;;
+esac
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "$ROOT"
+
+npm version --no-git-tag-version "$1"
+node -p "'RemoteAgent version is now ' + require('./package.json').version"

package/scripts/bump-version.sh

@@ -1,23 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-if [ $# -ne 1 ]; then
-  echo "Usage: $0 <patch|minor|major>" >&2
-  exit 1
-fi
-
-case "$1" in
-  patch|minor|major)
-    ;;
-  *)
-    echo "Release type must be one of: patch, minor, major" >&2
-    exit 1
-    ;;
-esac
-
-ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
-export PATH="$HOME/.local/bin:$PATH"
-cd "$ROOT_DIR"
-
-npm version --no-git-tag-version "$1"
-node -p "'RemoteAgent version is now ' + require('./package.json').version"