permaura 1.3.36 → 1.3.37

package/bin/cli.mjs

@@ -24,9 +24,9 @@ import { spawn, spawnSync } from "node:child_process";
 import {
   platformKey,
   binaryFilename,
-  compareVersions,
   sweepOldBinaries,
   swapBinaryIntoPlace,
+  upgradePlan,
   verifyDetachedSignatureAny,
 } from "./lib.mjs";
 
@@ -393,8 +393,12 @@ async function ensureBinary({ noUpgrade, force }) {
   }
 
   const latest = manifest.version;
-  const needsUpdate = force || !haveBinary || !have || compareVersions(have, latest) < 0;
-  if (!needsUpdate) {
+  const plan = upgradePlan({ installed: have, latest, haveBinary, force });
+  if (plan === "older") {
+    warn(`The release manifest names ${latest}, older than the installed ${have}. Keeping ${have}: the launcher never installs an older gateway.`);
+    return have;
+  }
+  if (plan === "current") {
     ok(noUpgrade ? `Using cached gateway ${have} (upgrade check skipped).` : `Gateway ${have} is up to date.`);
     return have;
   }
@@ -609,6 +613,9 @@ async function main() {
     console.log(
       `\nAdd it in the console → Settings → Gateways:\n    URL:   http://${ADDR}\n    Token: ${token}`,
     );
+    console.log(
+      C.dim("    That is the gateway's operator token. Never give it to an agent: each agent gets its own from Agents → Connect agent."),
+    );
   }
 
   console.log(C.dim("\nGateway is running. Press Ctrl-C to stop."));

package/bin/lib.mjs

@@ -113,6 +113,17 @@ export function compareVersions(a, b) {
   return comparePreRelease(preA, preB);
 }
 
+/**
+ * What to do with the version a verified manifest names: `"install"` it, leave the `"current"` binary, or refuse it as `"older"`.
+ *
+ * Never older than what is installed, the explicit `upgrade` included: manifests carry no expiry or sequence number, so an old manifest with a genuine signature is exactly what a rollback would serve. `force` only reinstalls the same version, as a repair.
+ */
+export function upgradePlan({ installed, latest, haveBinary, force = false }) {
+  if (haveBinary && installed && compareVersions(latest, installed) < 0) return "older";
+  if (force || !haveBinary || !installed || compareVersions(installed, latest) < 0) return "install";
+  return "current";
+}
+
 /**
  * Semver §11.4 precedence for the pre-release part, over equal numeric cores.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "permaura",
-  "version": "1.3.36",
+  "version": "1.3.37",
   "description": "Run the Permaura gateway with one command. Give your AI agents permission, not keys. `npm i -g permaura` then `permaura start --pair <code>` installs the gateway, starts it, and connects it to your permaura.com account.",
   "license": "Apache-2.0",
   "type": "module",