switchroom 0.15.33 → 0.15.35

package/dist/cli/switchroom.js

@@ -50574,8 +50574,8 @@ var {
 } = import__.default;
 
 // src/build-info.ts
-var VERSION = "0.15.33";
-var COMMIT_SHA = "9681f212";
+var VERSION = "0.15.35";
+var COMMIT_SHA = "beafcff6";
 
 // src/cli/agent.ts
 init_source();
@@ -54544,6 +54544,23 @@ function resolveRelease(opts) {
     return opts.root;
   return;
 }
+function parseSemverTag(tag) {
+  if (!tag)
+    return null;
+  const m = /^v(\d+)\.(\d+)\.(\d+)$/.exec(tag.trim());
+  return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
+}
+function compareReleaseTags(a, b) {
+  const pa = parseSemverTag(a);
+  const pb = parseSemverTag(b);
+  if (!pa || !pb)
+    return null;
+  for (let i = 0;i < 3; i++) {
+    if (pa[i] !== pb[i])
+      return pa[i] < pb[i] ? -1 : 1;
+  }
+  return 0;
+}
 // src/cli/operator-uid.ts
 import {
   chownSync,
@@ -86916,7 +86933,46 @@ init_helpers();
 import { existsSync as existsSync84, mkdirSync as mkdirSync47, readdirSync as readdirSync33, readFileSync as readFileSync72, writeFileSync as writeFileSync41, statSync as statSync35, copyFileSync as copyFileSync12 } from "node:fs";
 import { homedir as homedir49 } from "node:os";
 import { join as join83 } from "node:path";
+import { spawnSync as spawnSync16 } from "node:child_process";
+
+// src/cli/deploy-version-guard.ts
 import { spawnSync as spawnSync15 } from "node:child_process";
+var defaultRunner2 = (args) => {
+  const r = spawnSync15("docker", args, { encoding: "utf8" });
+  return { ok: r.status === 0, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
+};
+function deployedImageTag(container, run = defaultRunner2) {
+  const r = run(["inspect", "-f", "{{.Config.Image}}", container]);
+  if (!r.ok)
+    return null;
+  const ref = r.stdout.trim();
+  if (!ref)
+    return null;
+  const noDigest = ref.split("@")[0];
+  const colon = noDigest.lastIndexOf(":");
+  if (colon < 0)
+    return null;
+  const tag = noDigest.slice(colon + 1);
+  return tag && !tag.includes("/") ? tag : null;
+}
+function checkDowngrade(opts) {
+  const running = deployedImageTag(opts.container, opts.run);
+  if (opts.allowDowngrade)
+    return { skip: false, running };
+  const cmp = compareReleaseTags(opts.targetTag, running);
+  if (cmp !== null && cmp < 0) {
+    return {
+      skip: true,
+      running,
+      message: `Skipping ${opts.container} deploy \u2014 it is already on ${running}, newer than the ` + `requested ${opts.targetTag}.
+` + `     Refusing to downgrade: this guards against a concurrent rollout/update ` + `reverting a newer build.
+` + `     To force the downgrade, re-run with --allow-downgrade.`
+    };
+  }
+  return { skip: false, running };
+}
+
+// src/cli/hostd.ts
 init_audit_reader();
 function resolveHostdImageTag(explicitTag, release) {
   if (explicitTag)
@@ -87054,7 +87110,7 @@ function backupExistingCompose() {
   return bak;
 }
 function runDocker(args) {
-  const r = spawnSync15("docker", args, { encoding: "utf8" });
+  const r = spawnSync16("docker", args, { encoding: "utf8" });
   return {
     ok: r.status === 0,
     stdout: r.stdout ?? "",
@@ -87081,6 +87137,15 @@ async function doInstall(opts, program3) {
   const composePath = hostdComposePath();
   mkdirSync47(dir, { recursive: true });
   const imageTag = resolveHostdImageTag(opts.tag, cfg.release);
+  const guard = checkDowngrade({
+    container: "switchroom-hostd",
+    targetTag: imageTag,
+    allowDowngrade: opts.allowDowngrade
+  });
+  if (guard.skip) {
+    console.log(source_default.yellow(`  \u23ed  ${opts.dryRun ? "[dry-run] " : ""}${guard.message}`));
+    return;
+  }
   const yaml = renderHostdComposeFile({
     hostHome: resolveHostdHostHome(),
     imageTag,
@@ -87190,7 +87255,7 @@ ${down.stderr}`));
 }
 function registerHostdCommand(program3) {
   const hostd = program3.command("hostd").description("Manage switchroom-hostd, the host-control daemon for admin agents (RFC C)");
-  hostd.command("install").description("Install or refresh the hostd container (writes ~/.switchroom/hostd/docker-compose.yml + docker compose up -d)").option("--tag <tag>", "Image tag override (default: resolved from release.pin in switchroom.yaml, else latest)").option("--dry-run", "Print the compose file and the docker commands without writing or running anything").action(withConfigError(async (opts) => {
+  hostd.command("install").description("Install or refresh the hostd container (writes ~/.switchroom/hostd/docker-compose.yml + docker compose up -d)").option("--tag <tag>", "Image tag override (default: resolved from release.pin in switchroom.yaml, else latest)").option("--dry-run", "Print the compose file and the docker commands without writing or running anything").option("--allow-downgrade", "Deploy even if the running container is on a newer version (overrides the anti-revert guard)").action(withConfigError(async (opts) => {
     await doInstall(opts, program3);
   }));
   hostd.command("status").description("Show daemon state and bound sockets").action(() => doStatus());
@@ -87247,7 +87312,7 @@ init_helpers();
 import { existsSync as existsSync85, mkdirSync as mkdirSync48, writeFileSync as writeFileSync42, copyFileSync as copyFileSync13 } from "node:fs";
 import { homedir as homedir50 } from "node:os";
 import { join as join84 } from "node:path";
-import { spawnSync as spawnSync16 } from "node:child_process";
+import { spawnSync as spawnSync17 } from "node:child_process";
 function resolveWebImageTag(explicitTag, release) {
   if (explicitTag)
     return explicitTag;
@@ -87346,7 +87411,7 @@ function backupExistingCompose2() {
   return bak;
 }
 function runDocker2(args) {
-  const r = spawnSync16("docker", args, { encoding: "utf8" });
+  const r = spawnSync17("docker", args, { encoding: "utf8" });
   return {
     ok: r.status === 0,
     stdout: r.stdout ?? "",
@@ -87366,6 +87431,15 @@ async function doInstall2(opts, program3) {
   mkdirSync48(dir, { recursive: true });
   const cfg = getConfig(program3);
   const imageTag = resolveWebImageTag(opts.tag, cfg.release);
+  const guard = checkDowngrade({
+    container: "switchroom-web",
+    targetTag: imageTag,
+    allowDowngrade: opts.allowDowngrade
+  });
+  if (guard.skip) {
+    console.log(source_default.yellow(`  \u23ed  ${opts.dryRun ? "[dry-run] " : ""}${guard.message}`));
+    return;
+  }
   const yaml = renderWebComposeFile({
     hostHome: homedir50(),
     imageTag,
@@ -87456,7 +87530,7 @@ ${down.stderr}`));
 }
 function registerWebdCommand(program3) {
   const webd = program3.command("webd").description("Manage switchroom-web, the dashboard + GitHub-webhook receiver container");
-  webd.command("install").description("Install or refresh the web container (writes ~/.switchroom/web/docker-compose.yml + docker compose up -d)").option("--tag <tag>", "Image tag override (default: resolved from release.pin in switchroom.yaml, else latest)").option("--dry-run", "Print the compose file and the docker commands without writing or running anything").action(withConfigError(async (opts) => {
+  webd.command("install").description("Install or refresh the web container (writes ~/.switchroom/web/docker-compose.yml + docker compose up -d)").option("--tag <tag>", "Image tag override (default: resolved from release.pin in switchroom.yaml, else latest)").option("--dry-run", "Print the compose file and the docker commands without writing or running anything").option("--allow-downgrade", "Deploy even if the running container is on a newer version (overrides the anti-revert guard)").action(withConfigError(async (opts) => {
     await doInstall2(opts, program3);
   }));
   webd.command("status").description("Show web-service container state").action(() => doStatus2());

package/dist/cli/ui/index.html

@@ -1015,23 +1015,41 @@
       return provLine + body;
     }
 
-    async function fetchConnections() {
-      // Each fetch falls back independently (.catch → default). A single
-      // network blip — e.g. one endpoint momentarily unreachable — must NOT
-      // reject the whole batch and blank the connected accounts; the others
-      // still render. (Previously a bare Promise.all meant any one failure
-      // wiped the tab, so a connected Google/Microsoft account "vanished".)
-      const safe = (p, fallback) => p.then(r => r.ok ? r.json() : fallback).catch(() => fallback);
+    async function fetchConnections(opts) {
+      opts = opts || {};
+      const attempt = opts.attempt || 0;
+      // Distinguish a FAILED fetch from a genuinely-empty result. The old
+      // `safe` collapsed both to []/{}, so a transient broker/web blip
+      // rendered identically to "nothing configured" — and because this tab
+      // fetches only on open (NOT the 10s fleet poll), a one-time failure
+      // stuck until a manual re-click. Track ok per fetch so renderConnections
+      // can show an honest "couldn't load" state, and self-heal with bounded
+      // retries. (A single endpoint failing still renders the others.)
+      const safe = (p, fallback) => p
+        .then(r => r.ok ? r.json().then(d => ({ ok: true, data: d })) : { ok: false, data: fallback })
+        .catch(() => ({ ok: false, data: fallback }));
       try {
-        const [google, microsoft, notion, agents] = await Promise.all([
+        const [g, ms, n, ag] = await Promise.all([
           safe(fetch(`${API}/api/google-accounts`, { headers: authHeaders() }), []),
           safe(fetch(`${API}/api/microsoft-accounts`, { headers: authHeaders() }), []),
           safe(fetch(`${API}/api/notion-workspace`, { headers: authHeaders() }), { configured: false, databases: [] }),
           safe(fetch(`${API}/api/agents`, { headers: authHeaders() }), []),
         ]);
-        const agentNames = (agents || []).map(a => a.name).sort();
-        renderConnections({ google, microsoft, notion, agentNames });
+        // Notion legitimately reports unconfigured — not a failure. The OAuth
+        // providers + the agent list are the ones whose failure must not read
+        // as "empty".
+        const fetchFailed = !g.ok || !ms.ok || !ag.ok;
+        renderConnections({
+          google: g.data, microsoft: ms.data, notion: n.data,
+          agentNames: (ag.data || []).map(a => a.name).sort(),
+          googleFailed: !g.ok, microsoftFailed: !ms.ok, fetchFailed,
+        });
         clearError();
+        // Self-heal a transient blip without a manual re-click. Bounded
+        // backoff (3s, 6s, 9s); stops the instant a fetch succeeds.
+        if (fetchFailed && attempt < 3) {
+          setTimeout(() => fetchConnections({ attempt: attempt + 1 }), 3000 * (attempt + 1));
+        }
       } catch (err) {
         showError(`Failed to fetch connections: ${err.message}`);
       }
@@ -1566,6 +1584,14 @@
             detail: 'These accounts are from the config; the broker did not return live slot state, so connection status may be stale.',
             remediation: { kind: 'none', label: 'Refresh the tab once the broker is reachable to see live status.' },
           };
+        case 'connections-unreachable':
+          return {
+            title: "Couldn't load live connection data — retrying",
+            detail: 'The dashboard could not reach the account data source (the broker or web container may be restarting). ' +
+              'This is NOT "no accounts configured" — your connected accounts are unchanged. ' +
+              'Auto-retrying; the tab fills in once it recovers.',
+            remediation: { kind: 'none', label: 'Or refresh the page if it persists.' },
+          };
         default:
           return { title: String(kind || 'Problem'), remediation: { kind: 'none' } };
       }
@@ -2093,13 +2119,21 @@
       const notion = data.notion || { configured: false, databases: [] };
       const agentNames = data.agentNames || [];
 
+      // When a provider's fetch FAILED (not genuinely empty), its empty-state
+      // must say "couldn't load", never "none configured" — otherwise a
+      // transient blip reads as "you have no accounts".
       const googleSection = _connectionSection(
         'Google',
-        'No Google accounts. Add one under <code>google_accounts:</code> and run <code>switchroom auth google account add</code>.',
+        data.googleFailed
+          ? "Couldn't load Google accounts — the data source was unreachable (retrying)."
+          : 'No Google accounts. Add one under <code>google_accounts:</code> and run <code>switchroom auth google account add</code>.',
         google.map(a => renderOAuthAccountCard(a, { showType: false, provider: 'google', agentNames })).join(''),
       );
 
       const msCards = microsoft.map(a => renderOAuthAccountCard(a, { showType: true, provider: 'microsoft', agentNames })).join('');
+      const msEmpty = data.microsoftFailed
+        ? "Couldn't load Microsoft accounts — the data source was unreachable (retrying)."
+        : 'No Microsoft accounts yet — click <b>Connect a Microsoft account</b> above (or <code>/connect microsoft</code> from Telegram).';
       const microsoftSection = `
         <div style="margin-bottom:1.5rem">
           <h3 style="margin:0 0 .6rem;font-size:.95rem;color:var(--text-dim);text-transform:uppercase;letter-spacing:.04em">
@@ -2109,7 +2143,7 @@
           <div id="ms-connect-card"></div>
           ${msCards
             ? `<div class="accounts-grid">${msCards}</div>`
-            : `<div class="loading" style="padding:.8rem">No Microsoft accounts yet — click <b>Connect a Microsoft account</b> above (or <code>/connect microsoft</code> from Telegram).</div>`}
+            : `<div class="loading" style="padding:.8rem">${msEmpty}</div>`}
         </div>`;
 
       let notionCards = '';
@@ -2156,7 +2190,14 @@
         ? renderProblem(problemFor('connections-degraded', {}))
         : '';
 
-      container.innerHTML = degradedBanner + googleSection + microsoftSection + notionSection;
+      // A failed fetch must NOT masquerade as "nothing configured" — lead
+      // with an honest banner so the operator knows the empty look is a
+      // load failure (auto-retrying), not an absence of accounts.
+      const unreachableBanner = data.fetchFailed
+        ? renderProblem(problemFor('connections-unreachable', {}))
+        : '';
+
+      container.innerHTML = unreachableBanner + degradedBanner + googleSection + microsoftSection + notionSection;
     }
 
     function renderSchedule(data) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.15.33",
+  "version": "0.15.35",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/telegram-plugin/dist/gateway/gateway.js

@@ -54460,10 +54460,10 @@ function readTurnActiveMarkerAgeMs(stateDir, now) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.15.33";
-var COMMIT_SHA = "9681f212";
-var COMMIT_DATE = "2026-06-15T12:48:47Z";
-var LATEST_PR = 2386;
+var VERSION = "0.15.35";
+var COMMIT_SHA = "beafcff6";
+var COMMIT_DATE = "2026-06-16T07:06:45Z";
+var LATEST_PR = 2391;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts