relay-companion 0.1.97 → 0.1.98

package/overlay/main.cjs

@@ -460,10 +460,14 @@ function accountInfo() {
     // hosts present NO certificate — the handshake fails outright, so a signed-out
     // user hitting /app/setup was bounced to a page no browser can load. /sign-in
     // renders through the proxy and carries the user on to setup afterwards.
-    setupPath: "/sign-in?redirect_url=%2Fapp%2Fsetup",
+    // switch=1 is what makes this a SWITCH rather than a sign-in: the browser
+    // that runs this almost always still holds the old session, and without the
+    // flag the page treats that session as success and returns the pairing code
+    // for the very account the user was trying to leave.
+    setupPath: SETUP_PATH,
     // Shown in the pill so the flow is not trapped in whichever browser the OS
     // considers default (the session usually lives in a different one).
-    setupUrl: absoluteUrl("/sign-in?redirect_url=%2Fapp%2Fsetup"),
+    setupUrl: absoluteUrl(SETUP_PATH),
   };
 }
 
@@ -556,6 +560,11 @@ async function signOutAccount() {
 }
 
 // Turn an actionUrl (absolute https, or a relative path) into an absolute URL.
+// The one destination "Switch account" may use. Kept as a constant so the path
+// and the copyable URL can never drift apart, and so the regression test has a
+// single thing to assert against.
+const SETUP_PATH = "/sign-in?switch=1&redirect_url=%2Fapp%2Fsetup";
+
 function absoluteUrl(pathOrUrl) {
   const value = String(pathOrUrl || "").trim();
   if (!value) return webBase();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "relay-companion",
-  "version": "0.1.97",
+  "version": "0.1.98",
   "description": "Relay companion for ordinary messages, with dormant coordination features available only by explicit opt-in.",
   "type": "module",
   "bin": {