switchroom 0.19.3 → 0.19.4

package/dist/auth-broker/index.js

@@ -18839,6 +18839,27 @@ function parseQuotaHeaders(headers, now = new Date) {
     }
   };
 }
+function extractApiErrorMessage(bodyText) {
+  if (!bodyText || bodyText.trim().length === 0)
+    return null;
+  try {
+    const parsed = JSON.parse(bodyText);
+    const msg = parsed?.error?.message;
+    if (typeof msg === "string" && msg.trim().length > 0)
+      return msg.trim();
+  } catch {}
+  return bodyText.trim().slice(0, 500);
+}
+function isEntitlementDisabledMessage(message) {
+  if (!message)
+    return false;
+  const m = message.toLowerCase();
+  if (!m.includes("disabled"))
+    return false;
+  const mentionsCode = m.includes("claude code") || m.includes("claude subscription");
+  const mentionsOrgOrSub = m.includes("organization") || m.includes("subscription") || m.includes(" org ");
+  return mentionsCode && mentionsOrgOrSub;
+}
 async function fetchQuota(opts) {
   const token = opts.accessToken?.trim();
   if (!token || token.length === 0) {
@@ -18874,13 +18895,28 @@ async function fetchQuota(opts) {
     }
     return { ok: false, reason: `quota probe network error: ${msg}` };
   }
-  clearTimeout(timeout);
   const parsed = parseQuotaHeaders(resp.headers);
-  if (parsed.ok)
+  if (parsed.ok) {
+    clearTimeout(timeout);
     return parsed;
+  }
   if (!resp.ok) {
-    return { ok: false, reason: `HTTP ${resp.status} from Anthropic (${parsed.reason})` };
+    let bodyText = "";
+    try {
+      bodyText = await resp.text();
+    } catch {}
+    clearTimeout(timeout);
+    const apiErrorMessage = extractApiErrorMessage(bodyText);
+    const entitlement = resp.status === 403 && isEntitlementDisabledMessage(apiErrorMessage);
+    return {
+      ok: false,
+      reason: `HTTP ${resp.status} from Anthropic (${parsed.reason})`,
+      httpStatus: resp.status,
+      ...apiErrorMessage ? { apiErrorMessage } : {},
+      failureKind: entitlement ? "entitlement_blocked" : "other"
+    };
   }
+  clearTimeout(timeout);
   return parsed;
 }
 
@@ -18912,7 +18948,9 @@ function snapshotClearlyHealthy(s) {
   return s.fiveHourUtilizationPct < HEALTHY_CLEAR_PCT && s.sevenDayUtilizationPct < HEALTHY_CLEAR_PCT;
 }
 function accountEligibility(opts) {
-  const { mark, snapshot, now, allowOverage = false } = opts;
+  const { mark, snapshot, now, allowOverage = false, entitlementBlocked = false } = opts;
+  if (entitlementBlocked)
+    return "blocked";
   if (snapshotFresh(snapshot, now) && snapshotWalled(snapshot) && !overageLiftsWall(snapshot, allowOverage)) {
     return "blocked";
   }
@@ -21170,9 +21208,51 @@ class AuthBroker {
       mark: this.exhaustionMarkOf(account),
       snapshot: this.lastQuotaCache[account],
       now: this.now(),
-      allowOverage: this.isOverageAllowed(account)
+      allowOverage: this.isOverageAllowed(account),
+      entitlementBlocked: this.isAccountEntitlementBlocked(account)
     });
   }
+  isAccountEntitlementBlocked(account) {
+    return this.quota[account]?.entitlement_blocked === true;
+  }
+  markEntitlementBlocked(label, result) {
+    if (result.ok || result.failureKind !== "entitlement_blocked")
+      return;
+    if (this.quota[label]?.entitlement_blocked === true)
+      return;
+    this.quota[label] = {
+      ...this.quota[label],
+      entitlement_blocked: true,
+      entitlement_blocked_at: this.now(),
+      ...result.apiErrorMessage ? { entitlement_blocked_reason: result.apiErrorMessage } : {}
+    };
+    this.persistQuota();
+    this.audit({
+      op: "mark-exhausted",
+      identity: { kind: "operator" },
+      account: label,
+      accountKind: "claude",
+      ok: true,
+      reason: "entitlement-403"
+    });
+    process.stdout.write(`auth-broker: ${label} returned entitlement-403 (Claude Code access disabled) — marked entitlement_blocked${result.apiErrorMessage ? ` (${result.apiErrorMessage})` : ""}
+`);
+  }
+  clearEntitlementBlocked(label) {
+    const entry = this.quota[label];
+    if (!entry?.entitlement_blocked)
+      return;
+    const {
+      entitlement_blocked,
+      entitlement_blocked_at,
+      entitlement_blocked_reason,
+      ...rest
+    } = entry;
+    this.quota[label] = rest;
+    this.persistQuota();
+    process.stdout.write(`auth-broker: live probe of ${label} succeeded — cleared entitlement_blocked mark
+`);
+  }
   premiumWallMarkOf(account) {
     const q = this.quota[account];
     if (!q || q.premium_walled_until === undefined)
@@ -21329,7 +21409,8 @@ class AuthBroker {
       mark: this.exhaustionMarkOf(account),
       snapshot,
       now,
-      allowOverage: true
+      allowOverage: true,
+      entitlementBlocked: this.isAccountEntitlementBlocked(account)
     }) === "eligible";
   }
   accountEligibilityOf(account) {
@@ -21339,7 +21420,8 @@ class AuthBroker {
       mark: this.exhaustionMarkOf(account),
       snapshot,
       now: this.now(),
-      allowOverage
+      allowOverage,
+      entitlementBlocked: this.isAccountEntitlementBlocked(account)
     });
     if (verdict === "eligible" && allowOverage && snapshot && (snapshot.fiveHourUtilizationPct >= WALL_PCT || snapshot.sevenDayUtilizationPct >= WALL_PCT)) {
       process.stdout.write(`auth-broker: ${account} is past the utilization wall but eligible via allow_overage — Anthropic overage billing active (5h=${snapshot.fiveHourUtilizationPct.toFixed(1)}%, 7d=${snapshot.sevenDayUtilizationPct.toFixed(1)}%)
@@ -21356,6 +21438,8 @@ class AuthBroker {
       const result = await this.probeQuotaSingleFlight(account, token);
       if (result.ok)
         this.cacheQuotaSnapshot(account, result);
+      else
+        this.markEntitlementBlocked(account, result);
     } catch {}
   }
   async nextHealthyAccountLive(current, order) {
@@ -21455,7 +21539,6 @@ class AuthBroker {
         expiresAt: creds?.claudeAiOauth?.expiresAt,
         exhausted,
         in_service: inService.has(label),
-        entitlement_blocked: false,
         exhausted_until: q?.exhausted_until,
         throttled_until: q?.throttled_until,
         threshold_violations: this.thresholdViolations[label] ?? 0,
@@ -21465,6 +21548,7 @@ class AuthBroker {
         premium_walled_until: q?.premium_walled_until,
         premium_wall_bucket: q?.premium_wall_bucket,
         last_tier_quota: this.lastTierQuotaCache[label] ?? null,
+        entitlement_blocked: q?.entitlement_blocked ?? false,
         usage_ledger: summarizeAccountUsage(this.usageLedger, label, this.now())
       };
     });
@@ -21539,6 +21623,7 @@ class AuthBroker {
         this.cacheQuotaSnapshot(label, result);
         return { label, result, served: "live" };
       }
+      this.markEntitlementBlocked(label, result);
       if (cached) {
         return { label, result: cachedSnapshotToResult(cached), served: "cache", capturedAt: cached.capturedAt };
       }
@@ -21560,6 +21645,7 @@ class AuthBroker {
   cacheQuotaSnapshot(label, result) {
     if (!result.ok)
       return;
+    this.clearEntitlementBlocked(label);
     const snapshot = {
       fiveHourUtilizationPct: result.data.fiveHourUtilizationPct,
       sevenDayUtilizationPct: result.data.sevenDayUtilizationPct,
@@ -21589,6 +21675,8 @@ class AuthBroker {
     const canarySet = this.premiumCanarySet();
     const canaryEnabled = process.env.SWITCHROOM_DISABLE_MODEL_TIER_PROBE !== "1";
     for (const label of listAccounts(this.home)) {
+      if (this.isAccountEntitlementBlocked(label))
+        continue;
       const creds = readAccountCredentials(label, this.home);
       const token = creds?.claudeAiOauth?.accessToken;
       if (!token)
@@ -21601,6 +21689,7 @@ class AuthBroker {
         continue;
       }
       this.cacheQuotaSnapshot(label, result);
+      this.markEntitlementBlocked(label, result);
       probed.push({ label, result });
       if (canaryEnabled && canarySet.has(label)) {
         let tierResult;

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.19.3", COMMIT_SHA = "41896be4";
+var VERSION = "0.19.4", COMMIT_SHA = "7cdf5428";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/host-control/main.js

@@ -26663,7 +26663,7 @@ import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:f
 import { dirname as dirname4, join as join7 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.19.3";
+var VERSION = "0.19.4";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.19.3",
+  "version": "0.19.4",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/telegram-plugin/dist/gateway/gateway.js

@@ -93135,10 +93135,10 @@ function effectiveTurnAgeMs(markerAgeMs, turnStartedAt, now) {
 }
 
 // ../src/build-info.ts
-var VERSION = "0.19.3";
-var COMMIT_SHA = "41896be4";
-var COMMIT_DATE = "2026-07-20T10:37:39+10:00";
-var LATEST_PR = 3456;
+var VERSION = "0.19.4";
+var COMMIT_SHA = "7cdf5428";
+var COMMIT_DATE = "2026-07-20T11:09:10+10:00";
+var LATEST_PR = 3457;
 var COMMITS_AHEAD_OF_TAG = 0;
 
 // gateway/boot-version.ts