fix(release): retry latest metadata assembly

Root cause: v3.16.4-10 successfully uploaded the unsigned macOS DMG fallback, but the release workflow failed later in Assemble latest.json because gh release download hit a transient GitHub asset API HTTP 503 after assets were already published. That left a downloadable release without updater metadata.

Change: add bounded retries around gh release download and gh release upload latest.json in assemble-latest-json, bump version surfaces to 3.16.4-11, add release notes, and record the release failure boundary in memory.md.

Validation: pnpm exec prettier --check .github/workflows/release.yml package.json src-tauri/tauri.conf.json docs/release-notes/v3.16.4-11-zh.md memory.md; pnpm dlx js-yaml .github/workflows/release.yml; cargo metadata --manifest-path src-tauri/Cargo.toml --no-deps --format-version 1; pnpm typecheck; git diff --check only reported the existing Cargo.lock CRLF warning.

Author: BigStrongSun

.github/workflows/release.yml

@@ -769,7 +769,19 @@ jobs:
           set -euxo pipefail
           TAG="${GITHUB_REF_NAME}"
           mkdir -p dl
-          gh release download "$TAG" --dir dl --repo "$GITHUB_REPOSITORY"
+          for attempt in 1 2 3 4 5 6; do
+            rm -rf dl/*
+            if gh release download "$TAG" --dir dl --repo "$GITHUB_REPOSITORY"; then
+              break
+            fi
+            if [ "$attempt" -eq 6 ]; then
+              echo "Failed to download release assets for $TAG after $attempt attempts" >&2
+              exit 1
+            fi
+            sleep_seconds=$((attempt * 20))
+            echo "Release asset download failed, retrying in ${sleep_seconds}s..."
+            sleep "$sleep_seconds"
+          done
           ls -la dl || true
       - name: Generate latest.json
         env:
@@ -857,4 +869,15 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -euxo pipefail
-          gh release upload "$GITHUB_REF_NAME" latest.json --clobber --repo "$GITHUB_REPOSITORY"
+          for attempt in 1 2 3 4 5 6; do
+            if gh release upload "$GITHUB_REF_NAME" latest.json --clobber --repo "$GITHUB_REPOSITORY"; then
+              exit 0
+            fi
+            if [ "$attempt" -eq 6 ]; then
+              echo "Failed to upload latest.json after $attempt attempts" >&2
+              exit 1
+            fi
+            sleep_seconds=$((attempt * 20))
+            echo "latest.json upload failed, retrying in ${sleep_seconds}s..."
+            sleep "$sleep_seconds"
+          done

docs/release-notes/v3.16.4-11-zh.md

@@ -0,0 +1,14 @@
+# CCSwitchMulti v3.16.4-11 发布说明
+
+本版本补齐上一轮 GitHub Release 的 updater 元数据稳定性。
+
+## 修复
+
+- 保留 `v3.16.4-10` 已验证成功的 macOS 未签名 DMG 发布路径：未配置 Apple 签名和公证凭据时，Release 仍会上传 `CC-Switch-v3.16.4-11-macOS.dmg`。
+- 修复 `latest.json` 组装阶段对 GitHub Release 资产接口 503 过于敏感的问题。下载 release 资产和上传 `latest.json` 都增加有限重试，避免资产已经上传成功但 updater 元数据缺失。
+- Release 下载说明继续明确：macOS DMG 在缺少 Apple 签名配置时是未签名版本；后续补齐 Apple Developer ID 证书和 notarization secrets 后会自动切换为签名并公证的 DMG。
+
+## 验证重点
+
+- `v3.16.4-10` 的 release run 已证明 unsigned macOS DMG 会进入 Release 资产列表，但同 run 因 GitHub asset API 503 未能生成 `latest.json`。
+- 本版本用于验证正式 release 同时具备 macOS DMG、macOS updater tarball、Windows/Linux 多架构资产和 `latest.json`。

memory.md

@@ -1,5 +1,12 @@
 # CC Switch Repository Memory
 
+## 2026-07-03 GitHub Release latest.json Retry Boundary
+
+- `v3.16.4-10` 验证了 unsigned macOS DMG fallback 是有效的：Release 资产已包含 `CC-Switch-v3.16.4-10-macOS.dmg`、`macOS.tar.gz`、`.sig` 和 `macOS.zip`，说明 macOS build 和 `Prepare macOS Assets` 修复没有问题。
+- 同一 run `28613873120` 最终失败在 `Assemble latest.json` 的 `Download all release assets`：`gh release download v3.16.4-10` 调 GitHub asset API 时返回 HTTP 503，导致 `latest.json` 没生成。这个失败点发生在资产上传之后，所以 Release 看起来可下载但缺 updater 元数据。
+- 修复边界：`assemble-latest-json` 不能单次依赖 GitHub release asset API；下载全部 release 资产和上传 `latest.json` 都要有限重试，失败时保留明确错误。不要把这种 503 误判成 macOS DMG fallback 失败。
+- 后续发布应推进新 tag 覆盖半成功 release，而不是只手工给旧 release 补 `latest.json`；否则 workflow 本身仍会在下一次 GitHub API 抖动时复发。
+
 ## 2026-07-03 macOS Unsigned DMG Release Fallback
 
 - `v3.16.4-9` 的 GitHub macOS job 已证明 Tauri 会在 `pnpm tauri build --target universal-apple-darwin` 阶段生成 `src-tauri/target/universal-apple-darwin/release/bundle/dmg/CCSwitchMulti_*_universal.dmg`，即使仓库缺少 Apple 签名和公证 secrets。

package.json

@@ -1,6 +1,6 @@
 {
   "name": "cc-switch-multi",
-  "version": "3.16.4-10",
+  "version": "3.16.4-11",
   "description": "All-in-One Assistant for Claude Code, Codex & Gemini CLI",
   "type": "module",
   "scripts": {

src-tauri/Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "cc-switch"
-version = "3.16.4-10"
+version = "3.16.4-11"
 description = "All-in-One Assistant for Claude Code, Codex & Gemini CLI"
 authors = ["Jason Young"]
 license = "MIT"

src-tauri/Cargo.toml

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "CCSwitchMulti",
-  "version": "3.16.4-10",
+  "version": "3.16.4-11",
   "identifier": "com.ccswitchmulti.desktop",
   "build": {
     "frontendDist": "../dist",