codeam-cli 2.39.25 → 2.39.27

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.39.26] — 2026-06-17
+
+### Documentation
+
+- **cli:** Document the self-hosted execution plane in the npm README (#351)
+
+## [2.39.25] — 2026-06-17
+
+### Added
+
+- **cli:** Self-hosted host-agent supervisor + Docker E2E (#330) (#350)
+
 ## [2.39.24] — 2026-06-17
 
 ### Changed

package/README.md

@@ -60,6 +60,8 @@ That's it. Open the [CodeAgent Mobile app](https://codeagent-mobile.com), enter
 | `codeam deploy` | Provision a cloud workspace (GitHub Codespaces) and pair it to your phone |
 | `codeam deploy ls` (alias `list`) | List the cloud workspaces you've deployed (and which still have a session running) |
 | `codeam deploy stop` (alias `remove`) | Pick a deployed workspace and stop its codeam session (and optionally the workspace itself) |
+| `codeam host enroll --token <token>` | Enroll **this machine** as a self-hosted execution target (the token is minted by the mobile/web app) |
+| `codeam host-agent` | Run the self-hosted supervisor (the enroll step installs this as a systemd service — you rarely call it by hand) |
 | `codeam completion <shell>` | print shell completions for `<shell>` (`bash`, `zsh`, or `fish`) |
 | `codeam --version`, `-v` | Print the installed CLI version |
 | `codeam --help`, `-h` | Show usage and the full command list |
@@ -98,13 +100,33 @@ codeam deploy stop
 
 Stopping a workspace via `codeam deploy stop` is non-destructive: the GitHub Codespace stays around (preserving your branch, files, and dotfiles); only the running compute is paused. Re-running `codeam deploy` will offer to resume that same codespace.
 
-Adding more cloud backends (Gitpod, Coder, your own SSH host, …) is a single new file in `apps/cli/src/services/providers/` — the `CloudProvider` interface keeps it pluggable.
+Adding more managed cloud backends (Gitpod, Coder, …) is a single new file in `apps/cli/src/services/providers/` — the `CloudProvider` interface keeps it pluggable. To run on **your own server** instead, see the next section.
+
+---
+
+## Self-hosted execution plane — run agents on your own server
+
+Prefer to run the execution plane on **your own hardware** (a VPS, homelab, or GPU box) instead of a managed Codespace? CodeAgent can provision the same agent runtime on any Linux server you own — with **zero inbound ports, no tunnel, and without ever handing us your SSH keys**. The box only needs outbound internet.
+
+**Setup is a one-time paste, driven from the app:**
+
+1. In the CodeAgent Mobile app (or web dashboard), open the deploy flow and pick **Self-hosted → Add server**. It shows a one-line install command carrying a short-lived enroll token.
+2. Paste it into an SSH session on your box:
+   ```bash
+   curl -fsSL https://api.codeagent-mobile.com/api/self-hosted/enroll.sh | sh -s -- --token=<enroll-token>
+   ```
+   That installs `codeam-cli`, registers a **systemd** service (`codeam-host-agent`), and connects it back over the same **outbound** relay everything else uses. It survives reboots.
+3. From then on it's **100% phone/web-driven**: pick the host + a repo (or an absolute path on the box) + an agent, and a session spins up on your server — supervised from your phone like any other. Stop sessions or remove the host from the app.
+
+Under the hood the installer runs `codeam host enroll` (redeems the token, seals a long-lived host-token to `~/.codeam/host-agent.json`) and starts `codeam host-agent` (the supervisor that spawns a `codeam pair-auto` child per deploy, injecting your linked agent's credentials). You normally never invoke these by hand.
+
+> **Deploying to and managing self-hosted servers happens in the mobile/web app, not the CLI.** The CLI's role here is the one-time enrollment plus the long-running host-agent. Requires Linux + systemd.
 
 ---
 
 ## Requirements
 
-- **Node.js 18+**
+- **Node.js 20+**
 - **Claude Code** — see the [official quickstart](https://code.claude.com/docs/en/quickstart)
 - **OpenAI Codex** (optional) — see the [official quickstart](https://github.com/openai/codex)
 - **[CodeAgent Mobile](https://codeagent-mobile.com)** app on your phone ([iOS](https://apps.apple.com/) / [Android](https://play.google.com/store/apps/details?id=com.codeagent.mobile))

package/dist/index.js

@@ -498,7 +498,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.25",
+  version: "2.39.27",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -568,8 +568,8 @@ var package_default = {
     node: ">=20.0.0"
   },
   dependencies: {
-    "@agentclientprotocol/claude-agent-acp": "^0.42.0",
-    "@agentclientprotocol/codex-acp": "^0.0.45",
+    "@agentclientprotocol/claude-agent-acp": "^0.47.0",
+    "@agentclientprotocol/codex-acp": "^0.0.46",
     "@agentclientprotocol/sdk": "^0.25.0",
     "@clack/prompts": "^1.2.0",
     chokidar: "^3.6.0",
@@ -5908,7 +5908,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.25" : "0.0.0-dev",
+    cliVersion: true ? "2.39.27" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -26442,8 +26442,18 @@ function provisionAgentCredentials(publicAgentId, auth, homeDir2 = os34.homedir(
 
 // src/commands/host-agent.ts
 var HEARTBEAT_INTERVAL_MS = 2e4;
+function isHouseProxy(v) {
+  if (typeof v !== "object" || v === null) return false;
+  const o = v;
+  return typeof o.baseUrl === "string" && typeof o.token === "string" && typeof o.agentKind === "string";
+}
 function isDeployPayload(p2) {
-  return typeof p2.deployId === "string" && typeof p2.repoOrPath === "string" && typeof p2.agentId === "string" && typeof p2.sealedAgentAuth === "string" && typeof p2.autoPairToken === "string";
+  if (typeof p2.deployId !== "string" || typeof p2.repoOrPath !== "string" || typeof p2.agentId !== "string" || typeof p2.autoPairToken !== "string") {
+    return false;
+  }
+  const hasHouse = isHouseProxy(p2.houseProxy);
+  const hasSealed = typeof p2.sealedAgentAuth === "string";
+  return hasHouse || hasSealed;
 }
 function isStopPayload(p2) {
   return typeof p2.sessionId === "string";
@@ -26456,7 +26466,7 @@ var CONTROL_AGENT_META = {
   supportedAuthKinds: ["oauth_token"],
   preferredAuthKind: "oauth_token"
 };
-var defaultSpawner = (env, cwd) => (0, import_node_child_process13.spawn)(process.execPath, [process.argv[1], "pair-auto"], {
+var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process13.spawn)(process.execPath, [process.argv[1], "pair-auto", ...args2], {
   cwd,
   env: { ...process.env, ...env },
   stdio: "ignore",
@@ -26556,13 +26566,31 @@ var HostAgentSupervisor = class {
       `deploy id=${payload.deployId.slice(0, 8)} agent=${payload.agentId} target=${payload.repoOrPath}`
     );
     const cwd = await prepareWorkspace(payload.repoOrPath, payload.deployId);
-    const auth = await this.resolveAgentAuth(this.identity, payload.sealedAgentAuth);
-    const credEnv = provisionAgentCredentials(payload.agentId, auth, void 0);
-    const childEnv = {
-      ...credEnv,
-      CODEAM_AUTO_TOKEN: payload.autoPairToken
-    };
-    const proc = this.spawnChild(childEnv, cwd);
+    let childEnv;
+    let extraArgs = [];
+    if (payload.houseProxy) {
+      const { baseUrl, token, agentKind } = payload.houseProxy;
+      childEnv = {
+        ANTHROPIC_BASE_URL: baseUrl,
+        ANTHROPIC_AUTH_TOKEN: token,
+        ANTHROPIC_MODEL: "MiniMax-M3",
+        ANTHROPIC_DEFAULT_SONNET_MODEL: "MiniMax-M3",
+        ANTHROPIC_DEFAULT_OPUS_MODEL: "MiniMax-M3",
+        ANTHROPIC_DEFAULT_HAIKU_MODEL: "MiniMax-M3",
+        CLAUDE_CODE_AUTO_COMPACT_WINDOW: "512000",
+        API_TIMEOUT_MS: "3000000",
+        CODEAM_AUTO_TOKEN: payload.autoPairToken
+      };
+      extraArgs = [`--agent=${agentKind || "claude"}`];
+    } else {
+      const auth = await this.resolveAgentAuth(this.identity, payload.sealedAgentAuth);
+      const credEnv = provisionAgentCredentials(payload.agentId, auth, void 0);
+      childEnv = {
+        ...credEnv,
+        CODEAM_AUTO_TOKEN: payload.autoPairToken
+      };
+    }
+    const proc = this.spawnChild(childEnv, cwd, extraArgs);
     const child = { deployId: payload.deployId, sessionId: payload.deployId, proc };
     this.children.set(payload.deployId, child);
     proc.once("exit", () => {
@@ -26794,7 +26822,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.25" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.27" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -26993,7 +27021,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.25" : "unknown";
+  const v = true ? "2.39.27" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -27279,7 +27307,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.25" : null;
+  const current = true ? "2.39.27" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.39.25",
+  "version": "2.39.27",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -70,8 +70,8 @@
     "node": ">=20.0.0"
   },
   "dependencies": {
-    "@agentclientprotocol/claude-agent-acp": "^0.42.0",
-    "@agentclientprotocol/codex-acp": "^0.0.45",
+    "@agentclientprotocol/claude-agent-acp": "^0.47.0",
+    "@agentclientprotocol/codex-acp": "^0.0.46",
     "@agentclientprotocol/sdk": "^0.25.0",
     "@clack/prompts": "^1.2.0",
     "chokidar": "^3.6.0",