switchroom 0.14.6 → 0.14.8

package/examples/switchroom.yaml

@@ -248,7 +248,7 @@ agents:
   #   topic_emoji: "💻"
   #   bot_token: "vault:telegram-dev-bot-token"     # its own bot
   #   extends: coder                      # inherits from inline profile above
-  #   model: claude-opus-4-7              # override defaults.model for this agent
+  #   model: claude-opus-4-8              # override defaults.model for this agent
   #   memory:
   #     collection: coding
   #   cli_args: ["--effort", "high"]      # escape hatch: extra exec claude flags

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.14.6",
+  "version": "0.14.8",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/_base/start.sh.hbs

@@ -183,6 +183,29 @@ export PATH="$HOME/.bun/bin:$PATH"
 # all land in these paths; survival across container restart is via the
 # /state/agent bind mount (HOME=/state/agent/home).
 export PATH="$HOME/.local/bin:$HOME/bin:$HOME/.npm-global/bin:$PATH"
+# claude is delivered ONLY by the agent image (/usr/local, root-owned,
+# version-pinned, rebuilt deliberately via `switchroom update`). The
+# persistent-HOME dirs above precede /usr/local/bin on PATH so agents
+# can install their own npm/pip tools — but that same precedence means
+# a stray `claude` in the writable, state-persisted npm prefix would
+# silently SHADOW the image's, surviving every restart and drifting the
+# fleet off the tested binary (this bit test-harness with a months-old
+# self-installed 2.1.139). DISABLE_AUTOUPDATER=1 stops claude's own
+# self-update, but can't undo a pre-existing or manual drop. So prune
+# any user-local claude at boot — narrowly, by name, leaving every
+# other user-installed package intact — guaranteeing `claude` always
+# resolves to the image binary. Idempotent; no-op when clean.
+for _stray_claude in \
+  "$HOME/.npm-global/bin/claude" \
+  "$HOME/.local/bin/claude" \
+  "$HOME/bin/claude"; do
+  if [ -e "$_stray_claude" ] || [ -L "$_stray_claude" ]; then
+    echo "start.sh: pruning user-local claude shadow at $_stray_claude (image binary is authoritative)" >&2
+    rm -f "$_stray_claude"
+  fi
+done
+rm -rf "$HOME/.npm-global/lib/node_modules/@anthropic-ai/claude-code" 2>/dev/null || true
+unset _stray_claude
 export CLAUDE_CONFIG_DIR="{{agentDir}}/.claude"
 # CLAUDE_CODE_OAUTH_TOKEN injection was removed with RFC H (auth-broker).
 # Claude reads .credentials.json directly; the broker is the sole writer

package/skills/switchroom-status/SKILL.md

@@ -85,7 +85,7 @@ assistant — running (2h 14m)
   model: claude-sonnet-4-6  collection: general
 
 dev — running (45m)
-  model: claude-opus-4-7  collection: coding
+  model: claude-opus-4-8  collection: coding
 
 coach — stopped
   last run: 3 days ago