fix: webui auto-update fails after rebuild + bump to v0.5.8

Two changes:

1. Dockerfile: Pin hermes-web-ui to v0.5.8 (released 2026-05-03)
Previous v0.5.7 is stale. GitHub latest is v0.5.8.

2. start.sh: Add rebuild detection to webui auto-update (same bug as hermes-agent)
After rebuild, /app/webui.version resets to Dockerfile version but
/data/hermes/webui.version (persistent) keeps the old recorded version.
If recorded version was NEWER than Dockerfile version, the updater would
skip because it read the wrong baseline.
Fix: Compare /app/webui.version (Dockerfile) vs /data/hermes/webui.version
(persistent). If mismatch, detect rebuild and force re-apply update.

Dockerfile

@@ -82,11 +82,11 @@ RUN mkdir -p /usr/share/fonts/truetype/noto && \
 RUN git clone --depth 1 https://github.com/jnMetaCode/agency-agents-zh.git /app/agency-agents && \
     echo "agency-agents-zh cloned ($(find /app/agency-agents -name '*.md' ! -name 'README*' ! -name 'CATALOG*' ! -name 'AGENT-LIST*' ! -name 'CONTRIBUTING*' ! -name 'LICENSE*' ! -name 'UPSTREAM*' | wc -l) agent files)"
 
-# Build hermes-web-ui v0.5.7
+# Build hermes-web-ui v0.5.8
 RUN rm -rf /tmp/hermes-web-ui && \
-    git clone --depth 1 --branch v0.5.7 https://github.com/EKKOLearnAI/hermes-web-ui.git /tmp/hermes-web-ui && \
+    git clone --depth 1 --branch v0.5.8 https://github.com/EKKOLearnAI/hermes-web-ui.git /tmp/hermes-web-ui && \
     cd /tmp/hermes-web-ui && \
-    echo "build-v0.5.7-$(date +%Y%m%d)" > .buildstamp && \
+    echo "build-v0.5.8-$(date +%Y%m%d)" > .buildstamp && \
     npm install --ignore-scripts 2>&1 | tail -5 && \
     npm run build 2>&1 | tail -10 && \
     mkdir -p /app/webui-server && \
@@ -97,8 +97,8 @@ RUN rm -rf /tmp/hermes-web-ui && \
     npm prune --omit=dev --prefix /tmp/hermes-web-ui 2>&1 | tail -3 && \
     cp -r node_modules /app/webui-server/node_modules && \
     rm -rf /tmp/hermes-web-ui && \
-    echo "v0.5.7" > /app/webui.version && \
-    echo "hermes-web-ui v0.5.7 build done"
+    echo "v0.5.8" > /app/webui.version && \
+    echo "hermes-web-ui v0.5.8 build done"
 
 # Create hermes home
 RUN mkdir -p /root/.hermes/plugins/image_gen/pollinations

start.sh

@@ -629,19 +629,33 @@ update_webui_background() {
 
     WEBUI_REPO="EKKOLearnAI/hermes-web-ui"
     VERSION_FILE="/data/hermes/webui.version"
+    BUILD_VERSION_FILE="/app/webui.version"
     BUILD_TMP="/tmp/webui-update"
     WEBUI_INSTALL="/app/webui-server"
     WEBUI_CLIENT="/app/webui-client"
     API_URL="https://api.github.com/repos/${WEBUI_REPO}/releases/latest"
 
-    # Current installed version (from Dockerfile build or previous update)
-    CURRENT_VERSION="$(cat "$VERSION_FILE" 2>/dev/null | head -1)"
-    if [ -z "$CURRENT_VERSION" ]; then
-        CURRENT_VERSION="v0.5.5"  # fallback to last known build
+    # ── Detect rebuild: Dockerfile writes /app/webui.version, persistent is /data/hermes/ ──
+    BUILD_VERSION="$(cat "$BUILD_VERSION_FILE" 2>/dev/null | head -1)"
+    RECORDED_VERSION="$(cat "$VERSION_FILE" 2>/dev/null | head -1)"
+    NEED_FORCE=false
+
+    if [ -n "$BUILD_VERSION" ] && [ -n "$RECORDED_VERSION" ] && [ "$BUILD_VERSION" != "$RECORDED_VERSION" ]; then
+        echo "[$(date)] WebUI auto-update: REBUILD DETECTED (Dockerfile=$BUILD_VERSION, recorded=$RECORDED_VERSION)"
+        echo "[$(date)] WebUI auto-update: code was reset to $BUILD_VERSION by container rebuild"
+        NEED_FORCE=true
+        # Reset baseline so version comparison works correctly
+        CURRENT_VERSION="$BUILD_VERSION"
+    elif [ -n "$RECORDED_VERSION" ]; then
+        CURRENT_VERSION="$RECORDED_VERSION"
+    elif [ -n "$BUILD_VERSION" ]; then
+        CURRENT_VERSION="$BUILD_VERSION"
+    else
+        CURRENT_VERSION="v0.5.5"
         echo "$CURRENT_VERSION" > "$VERSION_FILE"
     fi
 
-    echo "[$(date)] WebUI auto-update: checking for new version (current: $CURRENT_VERSION)..."
+    echo "[$(date)] WebUI auto-update: checking (current: $CURRENT_VERSION, Dockerfile: $BUILD_VERSION, latest: querying...)"
 
     # Query GitHub API for latest release tag
     LATEST_JSON=$(curl -sf --connect-timeout 10 --max-time 20 "$API_URL" 2>/dev/null)
@@ -662,8 +676,8 @@ update_webui_background() {
     CURRENT_NUM="${CURRENT_VERSION#v}"
     LATEST_NUM="${LATEST_TAG#v}"
 
-    # Skip if same or current is newer
-    if [ "$CURRENT_NUM" = "$LATEST_NUM" ]; then
+    # Skip if same or current is newer (unless rebuild detected)
+    if [ "$CURRENT_NUM" = "$LATEST_NUM" ] && [ "$NEED_FORCE" = "false" ]; then
         echo "[$(date)] WebUI auto-update: already on latest ($CURRENT_VERSION)"
         return
     fi
@@ -681,12 +695,16 @@ update_webui_background() {
         fi
     done
 
-    if [ "$update_needed" = "false" ]; then
+    if [ "$update_needed" = "false" ] && [ "$NEED_FORCE" = "false" ]; then
         echo "[$(date)] WebUI auto-update: current $CURRENT_VERSION is up to date"
         return
     fi
 
-    echo "[$(date)] WebUI auto-update: upgrading $CURRENT_VERSION → $LATEST_TAG ..."
+    if [ "$NEED_FORCE" = "true" ] && [ "$update_needed" = "false" ]; then
+        echo "[$(date)] WebUI auto-update: re-applying $LATEST_TAG after rebuild (code was reset to $BUILD_VERSION)"
+    else
+        echo "[$(date)] WebUI auto-update: upgrading $CURRENT_VERSION → $LATEST_TAG ..."
+    fi
 
     # Build in temp directory
     rm -rf "$BUILD_TMP"