switchroom 0.19.4 → 0.19.5

package/dist/auth-broker/index.js

@@ -19381,16 +19381,20 @@ async function fetchAndSummarizeExternalSpend(opts) {
       },
       signal: ac.signal
     });
-    if (!res.ok)
+    if (!res.ok) {
+      console.warn(`external-spend: LiteLLM /spend/logs returned HTTP ${res.status} — ` + `External /usage row will be blank (check master key / proxy)`);
       return null;
+    }
     let body;
     try {
       body = await res.json();
-    } catch {
+    } catch (err) {
+      console.warn(`external-spend: failed to parse /spend/logs JSON: ${err?.message ?? err}`);
       return null;
     }
     return summarizeExternalSpend(normalizeSpendLogRows(body), now);
-  } catch {
+  } catch (err) {
+    console.warn(`external-spend: LiteLLM /spend/logs fetch failed: ${err?.message ?? err}`);
     return null;
   } finally {
     clearTimeout(timer);

package/dist/cli/autoaccept-poll.js

@@ -490,6 +490,7 @@ async function runWedgeWatchdog(opts) {
   let confirmModalPresent = 0;
   let permissionPromptPresent = 0;
   let manifestStallPresent = 0;
+  let lastManifestKey = null;
   let confirmCooldownUntil = 0;
   let permissionCooldownUntil = 0;
   while (polls < maxPolls) {
@@ -505,11 +506,16 @@ async function runWedgeWatchdog(opts) {
     const isPermissionPrompt = !isRateLimitMenu && !!text && permissionPromptSignature !== null && permissionPromptSignature.test(text);
     const isConfirmModal = !isRateLimitMenu && !isPermissionPrompt && !!text && confirmModalSignature !== null && confirmModalSignature.test(text);
     const isBlockingModal = !isRateLimitMenu && !isPermissionPrompt && !isConfirmModal && !!text && signature.test(text) && !deferToPrompts.some((p) => p.match.test(text));
-    const isManifestStall = !!text && manifestStallSignature !== null && manifestStallSignature.test(text) && STOP_HOOK_ERROR_SIGNATURE.test(text);
+    const manifestSignatureHit = !!text && manifestStallSignature !== null && manifestStallSignature.test(text);
+    const manifestKey = manifestSignatureHit ? stabilityKey(text) : null;
+    const stopHookPresent = !!text && STOP_HOOK_ERROR_SIGNATURE.test(text);
+    const manifestNoProgress = manifestSignatureHit && (stopHookPresent || manifestKey === lastManifestKey);
+    lastManifestKey = manifestKey;
+    const isManifestStall = manifestNoProgress;
     if (isManifestStall) {
       manifestStallPresent++;
       if (manifestStallPresent >= manifestStallPolls) {
-        const detail = `Manifesting + stop-hook-error present ${manifestStallPresent} polls ` + `(~${Math.round(manifestStallPresent * pollIntervalMs / 1000)}s) with no progress`;
+        const detail = `Manifesting ${stopHookPresent ? "+ stop-hook-error " : "pane byte-stable "}` + `present ${manifestStallPresent} polls ` + `(~${Math.round(manifestStallPresent * pollIntervalMs / 1000)}s) with no progress`;
         console.error(`[wedge-watchdog] ${opts.agentName}: manifest-stall wedge \u2014 ${detail}; ` + (requestRestart ? "escalating to kill + handoff restart" : "no requestRestart wired \u2014 logging only"));
         if (requestRestart) {
           try {

package/dist/cli/switchroom.js

@@ -2120,7 +2120,7 @@ var init_esm = __esm(() => {
 });
 
 // src/build-info.ts
-var VERSION = "0.19.4", COMMIT_SHA = "7cdf5428";
+var VERSION = "0.19.5", COMMIT_SHA = "c5feaef8";
 
 // src/cli/resolve-version.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -29899,6 +29899,15 @@ function normalizeBindMountPath(p) {
     out = out.slice(0, -1);
   return out;
 }
+function isLoopbackHttpBase(url) {
+  try {
+    const u = new URL(url.includes("://") ? url : `http://${url}`);
+    const h = (u.hostname || "").toLowerCase();
+    return h === "localhost" || h === "127.0.0.1" || h === "::1";
+  } catch {
+    return false;
+  }
+}
 function resolveConfigMountSource(switchroomConfigPath, homePrefix) {
   if (!switchroomConfigPath)
     return;
@@ -30154,13 +30163,17 @@ function generateCompose(opts) {
   }
   lines.push(`      SWITCHROOM_AUTH_BROKER_STATE_DIR: /state/auth-broker`);
   let authBrokerNeedsHostGateway = false;
+  let authBrokerNeedsHostNetwork = false;
   {
     const llBase = config.litellm?.base_url;
     if (typeof llBase === "string" && llBase.trim()) {
       const raw = llBase.trim().replace(/\/+$/, "");
-      const bridged = raw.replace(/^http:\/\/127\.0\.0\.1(?=[:/]|$)/i, "http://host.docker.internal").replace(/^http:\/\/localhost(?=[:/]|$)/i, "http://host.docker.internal").replace(/^https:\/\/127\.0\.0\.1(?=[:/]|$)/i, "https://host.docker.internal").replace(/^https:\/\/localhost(?=[:/]|$)/i, "https://host.docker.internal");
-      lines.push(`      SWITCHROOM_LITELLM_BASE: ${JSON.stringify(bridged)}`);
-      authBrokerNeedsHostGateway = true;
+      lines.push(`      SWITCHROOM_LITELLM_BASE: ${JSON.stringify(raw)}`);
+      if (isLoopbackHttpBase(raw)) {
+        authBrokerNeedsHostNetwork = true;
+      } else {
+        authBrokerNeedsHostGateway = true;
+      }
     }
   }
   lines.push(`      SWITCHROOM_ACCOUNTS_DIR: /state/accounts`);
@@ -30168,7 +30181,9 @@ function generateCompose(opts) {
   if (opts.operatorUid !== undefined) {
     lines.push(`      SWITCHROOM_AUTH_BROKER_OPERATOR_UID: "${opts.operatorUid}"`);
   }
-  if (authBrokerNeedsHostGateway) {
+  if (authBrokerNeedsHostNetwork) {
+    lines.push(`    network_mode: host`);
+  } else if (authBrokerNeedsHostGateway) {
     lines.push(`    extra_hosts:`);
     lines.push(`      - "host.docker.internal:host-gateway"`);
   }

package/dist/host-control/main.js

@@ -26663,7 +26663,7 @@ import { existsSync as existsSync9, readFileSync as readFileSync7 } from "node:f
 import { dirname as dirname4, join as join7 } from "node:path";
 
 // src/build-info.ts
-var VERSION = "0.19.4";
+var VERSION = "0.19.5";
 
 // src/cli/resolve-version.ts
 function readPackageVersion() {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "switchroom",
   "//version": "NOT the release version — source of truth is the git tag, resolved by scripts/build.mjs:resolveVersion() (see CLAUDE.md > Standard release process). This field is stale by design and only the Layer-4 dev/non-tag fallback for build.mjs + src/cli/resolve-version.ts; do NOT bump it expecting a release to pick it up. npm-pack tarball naming needs a real version — do that as an UNCOMMITTED pack-time bump (see release step 6), never a committed one.",
-  "version": "0.19.4",
+  "version": "0.19.5",
   "description": "Run Claude Code 24/7 on your Claude Pro/Max subscription over Telegram. Open-source alternative to OpenClaw and NanoClaw — no API keys.",
   "type": "module",
   "bin": {

package/profiles/_base/start.sh.hbs

@@ -325,6 +325,32 @@ x-litellm-tags: agent:$SWITCHROOM_AGENT_NAME,profile:${SWITCHROOM_AGENT_PROFILE:
   #    retrying — it recovers on its own the moment the broker
   #    unlocks (no human, no container recreate); bot token invalid
   #    → 401 → gateway exits 78 → quarantined (operator action).
+  # --- Session-model carrier PRE-FORK SNAPSHOT (gateway-consume boot race) ---
+  # The gateway forked just below consumes `.session-model` (+ the bounded-retry
+  # attempt counter) the moment it acquires the boot lock (#3284 healthy-boot
+  # consume, gateway.ts). But the session-model RESOLUTION block runs much later
+  # in the INNER pass — behind the LiteLLM probe's up-to-120s wait — so the
+  # gateway reliably won the race and the carrier vanished before resolution
+  # ever read it: a `/model <target>` differing from the configured default was
+  # silently dropped and the boot reverted (the overlord `/model fable`
+  # NOT-APPLIED incident, 2026-07). Snapshot the carrier + counter HERE, before
+  # the fork, into `.boot-snapshot` siblings the gateway never touches; the
+  # resolution block prefers the snapshot and deletes it after use (per-boot
+  # ephemeral). Refresh-or-remove every boot so a stale snapshot can never
+  # re-apply a consumed override on a later restart.
+  rm -f "{{agentDir}}/.session-model.boot-snapshot" "{{agentDir}}/.session-model-boot-attempts.boot-snapshot"
+  if [ -f "{{agentDir}}/.session-model" ]; then
+    # A failed copy (ENOSPC, perms) must not be a SILENT drop — the resolution
+    # block still falls back to the live carrier, but the gateway may consume
+    # that first, so warn loudly enough to diagnose a reverted override.
+    cp -f "{{agentDir}}/.session-model" "{{agentDir}}/.session-model.boot-snapshot" 2>/dev/null \
+      || echo "session-model: WARNING — failed to snapshot .session-model before the gateway fork; if the gateway consumes the carrier first, this boot's /model override may silently revert to the configured default" >&2
+    if [ -f "{{agentDir}}/.session-model-boot-attempts" ]; then
+      cp -f "{{agentDir}}/.session-model-boot-attempts" "{{agentDir}}/.session-model-boot-attempts.boot-snapshot" 2>/dev/null \
+        || echo "session-model: WARNING — failed to snapshot .session-model-boot-attempts before the gateway fork (retry-budget count may be lost this boot)" >&2
+    fi
+  fi
+
   _gateway_bundle=/opt/switchroom/telegram-plugin/dist/gateway/gateway.js
   _telegram_enabled={{#if telegramEnabledFlag}}{{telegramEnabledFlag}}{{else}}true{{/if}}
   if [ "$_telegram_enabled" = "true" ] && [ -f "$_gateway_bundle" ] && command -v bun >/dev/null 2>&1; then
@@ -1333,7 +1359,11 @@ rm -f "{{agentDir}}/.relaunch-model-intent" "{{agentDir}}/.session-model-kept-no
 # meaningless without a carrier to belong to, so sweep it as stale ONLY when no
 # `.session-model` carrier is present (rollout leftover / completed apply / a
 # prior giveup that didn't get to delete it).
-[ -f "{{agentDir}}/.session-model" ] || rm -f "{{agentDir}}/.session-model-boot-attempts"
+# (Gateway-consume race fix: the outer pass snapshotted the carrier BEFORE the
+# gateway fork — the gateway may already have consumed the live carrier by now
+# on a healthy boot, so the snapshot is an equally valid "a carrier existed
+# this boot" signal.)
+{ [ -f "{{agentDir}}/.session-model" ] || [ -f "{{agentDir}}/.session-model.boot-snapshot" ]; } || rm -f "{{agentDir}}/.session-model-boot-attempts"
 
 # Migration shim (one release): a leftover one-shot `.session-model-override`
 # carrier from a pre-consume-once gateway means an OLD gateway wrote it
@@ -1344,6 +1374,18 @@ if [ -f "{{agentDir}}/.session-model-override" ]; then
   rm -f "{{agentDir}}/.session-model-override"
   if printf '%s' "$_mig" | grep -Eq '^[A-Za-z0-9][]A-Za-z0-9._[/-]{0,99}$'; then
     printf '{"model":"%s","configuredDefaultAtWrite":"%s","ts":%s}\n' "$_mig" "$_EFFECTIVE_MODEL" "$(( $(date +%s) * 1000 ))" > "{{agentDir}}/.session-model" 2>/dev/null || true
+    # Also refresh the pre-fork snapshot: this write happened AFTER the outer
+    # pass's snapshot point, and the resolution below prefers the snapshot. A
+    # newer legacy intent must win over any stale pre-fork copy (and survive
+    # an early gateway consume of the live file).
+    #
+    # KNOWN one-release quirk (accepted): this live write also lands AFTER the
+    # gateway's boot-lock consume already fired, so on a healthy boot nothing
+    # deletes it until the NEXT boot's gateway consume — the migrated legacy
+    # override therefore applies for up to TWO boots instead of one. Shim-only
+    # (the mainline gateway writes `.session-model` directly, pre-restart, so
+    # it is snapshotted and consumed normally); the shim dies next release.
+    cp -f "{{agentDir}}/.session-model" "{{agentDir}}/.session-model.boot-snapshot" 2>/dev/null || true
     echo "session-model: migrated legacy one-shot carrier '$_mig' to .session-model (applying + consuming this boot)" >&2
   else
     echo "session-model: ignoring malformed legacy .session-model-override (failed shape gate)" >&2
@@ -1351,8 +1393,19 @@ if [ -f "{{agentDir}}/.session-model-override" ]; then
   unset _mig
 fi
 
-if [ -f "{{agentDir}}/.session-model" ]; then
-  _smf="$(cat "{{agentDir}}/.session-model" 2>/dev/null || true)"
+# Prefer the PRE-FORK SNAPSHOT over the live carrier: on a healthy boot the
+# gateway (forked long before this block runs) has typically ALREADY consumed
+# the live `.session-model` by now — reading only the live file silently
+# reverted every `/model <target>` that differed from the configured default
+# (the overlord `/model fable` NOT-APPLIED incident). The snapshot was taken
+# before the gateway fork so it is race-free; fall back to the live file when
+# no snapshot exists (non-docker runtimes / block run standalone in tests).
+if [ -f "{{agentDir}}/.session-model.boot-snapshot" ] || [ -f "{{agentDir}}/.session-model" ]; then
+  if [ -f "{{agentDir}}/.session-model.boot-snapshot" ]; then
+    _smf="$(cat "{{agentDir}}/.session-model.boot-snapshot" 2>/dev/null || true)"
+  else
+    _smf="$(cat "{{agentDir}}/.session-model" 2>/dev/null || true)"
+  fi
   _sm_model="$(printf '%s' "$_smf" | sed -n 's/.*"model"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p')"
   _sm_cfg="$(printf '%s' "$_smf" | sed -n 's/.*"configuredDefaultAtWrite"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p')"
   # BOUNDED-RETRY CONSUME (#3284) — the carrier is NO LONGER deleted here before
@@ -1380,7 +1433,13 @@ if [ -f "{{agentDir}}/.session-model" ]; then
   # and persists the incremented counter. The delete-before-apply that used to
   # sit here is GONE by design.
   _SM_MAX_ATTEMPTS=3
-  _sm_attempts="$(cat "{{agentDir}}/.session-model-boot-attempts" 2>/dev/null | tr -dc '0-9' || true)"
+  # Counter read prefers the pre-fork snapshot for the same race reason (the
+  # gateway deletes the live counter alongside the carrier on healthy consume).
+  if [ -f "{{agentDir}}/.session-model-boot-attempts.boot-snapshot" ]; then
+    _sm_attempts="$(cat "{{agentDir}}/.session-model-boot-attempts.boot-snapshot" 2>/dev/null | tr -dc '0-9' || true)"
+  else
+    _sm_attempts="$(cat "{{agentDir}}/.session-model-boot-attempts" 2>/dev/null | tr -dc '0-9' || true)"
+  fi
   [ -z "$_sm_attempts" ] && _sm_attempts=0
   _sm_attempts=$(( _sm_attempts + 1 ))
   # Shape gate — kept BYTE-IDENTICAL with MODEL_ARG_RE in
@@ -1444,6 +1503,10 @@ if [ -f "{{agentDir}}/.session-model" ]; then
   fi
   unset _smf _sm_model _sm_cfg _sm_attempts _SM_MAX_ATTEMPTS
 fi
+# The snapshot is strictly per-boot: consumed here regardless of which branch
+# fired, so it can never re-apply an already-consumed override on a later boot
+# (the outer pass also refresh-or-removes it, belt and braces).
+rm -f "{{agentDir}}/.session-model.boot-snapshot" "{{agentDir}}/.session-model-boot-attempts.boot-snapshot"
 
 # Configured-default LiteLLM guard, SPLIT BY CAUSE (2026-07-17 boot-race
 # incident: a slow LiteLLM co-boot demoted a configured-fable agent to opus on