switchroom 0.16.7 → 0.16.8

package/dist/host-control/main.js

@@ -22587,7 +22587,7 @@ import { existsSync as existsSync6, readFileSync as readFileSync4 } from "node:f
 import { dirname as dirname4, join as join2 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.16.7";
+var VERSION = "0.16.8";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {
@@ -22827,7 +22827,7 @@ function parseUpdateResultLine(stdout) {
 // src/host-control/config-edit-validator.ts
 import { mkdtempSync, writeFileSync as writeFileSync2, rmSync as rmSync2, existsSync as existsSync7, readFileSync as readFileSync5 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join4, isAbsolute as isAbsolute2, normalize } from "node:path";
+import { join as join4, isAbsolute as isAbsolute2, normalize, basename as basename2 } from "node:path";
 import { spawnSync as spawnSync2 } from "node:child_process";
 import { isDeepStrictEqual } from "node:util";
 var MAX_PATCH_BYTES = 1024 * 1024;
@@ -22847,7 +22847,7 @@ function isTargetPathHeader(headerPath, targetBasename) {
   const norm = normalize(p);
   if (norm.includes("..") || isAbsolute2(norm))
     return false;
-  return norm === targetBasename;
+  return norm === targetBasename || basename2(norm) === targetBasename;
 }
 function validateShape(unifiedDiff, targetPath) {
   const byteLen = Buffer.byteLength(unifiedDiff, "utf8");
@@ -22923,8 +22923,8 @@ function applyPatch(unifiedDiff, configPath, gitBin) {
   const liveContent = readFileSync5(configPath, "utf8");
   const scratchDir = mkdtempSync(join4(tmpdir(), "config-propose-edit-"));
   try {
-    const basename2 = configPath.split("/").pop() ?? "switchroom.yaml";
-    const scratchFile = join4(scratchDir, basename2);
+    const basename3 = configPath.split("/").pop() ?? "switchroom.yaml";
+    const scratchFile = join4(scratchDir, basename3);
     writeFileSync2(scratchFile, liveContent);
     const patchFile = join4(scratchDir, "proposal.patch");
     writeFileSync2(patchFile, unifiedDiff);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "switchroom",
-  "version": "0.16.7",
+  "version": "0.16.8",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/_base/start.sh.hbs

@@ -51,6 +51,41 @@ if [ "$SWITCHROOM_RUNTIME" = "docker" ] && [ -z "$SWITCHROOM_DOCKER_TMUX_INNER"
 {{/each}}
 {{/if}}
 
+  # LiteLLM virtual-key fetch for the GATEWAY process (outer-pass hoist).
+  # The INNER block below fetches this same key for the `claude` process;
+  # the gateway daemon forks HERE (in the outer pass) so it needs
+  # ANTHROPIC_CUSTOM_HEADERS exported BEFORE the gateway fork below, or
+  # discoverSrModels() returns [] and /model never shows OpenRouter entries.
+  #
+  # Mirrors the INNER block's fail-open logic exactly:
+  #   - missing key   → log + skip export (gateway talks direct OAuth)
+  #   - proxy down    → log + strip ALL routing env (fail-open)
+  #   - ANTHROPIC_CUSTOM_HEADERS already set → skip (idempotent)
+  #
+  # SWITCHROOM_AGENT_NAME is injected by compose env (compose.ts:1816)
+  # so it is available here, before the inner-pass export at line ~320.
+  if [ -n "$SWITCHROOM_LITELLM" ] && [ -z "$ANTHROPIC_CUSTOM_HEADERS" ] && command -v switchroom >/dev/null 2>&1; then
+    sr_ll_key="$(switchroom vault get "litellm/$SWITCHROOM_AGENT_NAME/api-key" 2>/dev/null || true)"
+    sr_ll_ok=""
+    if [ -z "$sr_ll_key" ]; then
+      echo "litellm(outer): no virtual key for agent '$SWITCHROOM_AGENT_NAME' — gateway will use direct OAuth (no tracking/guardrail)" >&2
+    elif command -v curl >/dev/null 2>&1 && [ -n "$ANTHROPIC_BASE_URL" ] \
+         && ! curl -fsS -m 5 -o /dev/null "${ANTHROPIC_BASE_URL%/}/health/liveliness" 2>/dev/null; then
+      echo "litellm(outer): proxy unreachable at $ANTHROPIC_BASE_URL — falling back to direct OAuth (no tracking/guardrail this session)" >&2
+    else
+      sr_ll_ok="1"
+    fi
+    if [ -n "$sr_ll_ok" ]; then
+      export ANTHROPIC_CUSTOM_HEADERS="x-litellm-api-key: Bearer $sr_ll_key
+x-litellm-customer-id: $SWITCHROOM_AGENT_NAME
+x-litellm-tags: agent:$SWITCHROOM_AGENT_NAME,profile:${SWITCHROOM_AGENT_PROFILE:-default}"
+      export CLAUDE_CODE_ENABLE_GATEWAY_MODEL_DISCOVERY=1
+    else
+      unset ANTHROPIC_BASE_URL ANTHROPIC_SMALL_FAST_MODEL SWITCHROOM_LITELLM
+    fi
+    unset sr_ll_key sr_ll_ok
+  fi
+
   # Tiny in-process supervisor: runs cmd in a respawn loop with
   # exponential backoff (1→2→4…→60s cap) and NEVER permanently gives
   # up. Rationale (RFC J / install-validation 2026-05-17): the

package/telegram-plugin/dist/gateway/gateway.js

@@ -54803,6 +54803,8 @@ function naturalAction(toolName, inputPreview) {
       return "update its task list";
     case "ExitPlanMode":
       return "exit plan mode";
+    case "config_propose_edit":
+      return "edit switchroom config";
     default:
       return `use ${toolName}`;
   }
@@ -56013,11 +56015,11 @@ function readTurnActiveMarkerAgeMs(stateDir, now) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.16.7";
-var COMMIT_SHA = "696eea91";
-var COMMIT_DATE = "2026-06-28T04:56:27Z";
-var LATEST_PR = 2615;
-var COMMITS_AHEAD_OF_TAG = 0;
+var VERSION = "0.16.8";
+var COMMIT_SHA = "c2668516";
+var COMMIT_DATE = "2026-06-28T15:28:08+10:00";
+var LATEST_PR = null;
+var COMMITS_AHEAD_OF_TAG = 5;
 
 // gateway/boot-version.ts
 function formatRelativeAgo(iso) {

package/telegram-plugin/permission-title.ts

@@ -212,6 +212,11 @@ export function naturalAction(
       return "update its task list";
     case "ExitPlanMode":
       return "exit plan mode";
+    // hostd config-edit verb (#2605) — not mcp__-prefixed (it's a direct
+    // wire call from the agent-config MCP server), so it falls through to
+    // the switch rather than naturalMcpAction. Give it a readable title.
+    case "config_propose_edit":
+      return "edit switchroom config";
     default:
       return `use ${toolName}`;
   }