codeam-cli 2.39.63 → 2.39.65

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.39.64] — 2026-06-20
+
+### Added
+
+- **host-agent:** Handle self_hosted_refresh_credentials (in-place re-auth)
+
+## [2.39.63] — 2026-06-20
+
+### Added
+
+- **acp:** Make the auth-fail message's re-auth a tappable deep-link
+
 ## [2.39.62] — 2026-06-20
 
 ### Fixed

package/dist/index.js

@@ -5388,7 +5388,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.63" : "0.0.0-dev",
+    cliVersion: true ? "2.39.65" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5547,7 +5547,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.63",
+  version: "2.39.65",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -17367,7 +17367,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.63" : null;
+  const current = true ? "2.39.65" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17419,6 +17419,9 @@ function maybeStartHeadroomReporter(ctx) {
     return null;
   }
 }
+function isRefreshCredentialsPayload(p2) {
+  return typeof p2.agentId === "string" && typeof p2.sealedAgentAuth === "string";
+}
 function isHouseProxy(v) {
   if (typeof v !== "object" || v === null) return false;
   const o = v;
@@ -17769,7 +17772,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process13.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.39.63" : null;
+  return true ? "2.39.65" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -18069,6 +18072,14 @@ var HostAgentSupervisor = class {
       this.stopChild(cmd.payload.sessionId);
       return;
     }
+    if (cmd.type === "self_hosted_refresh_credentials") {
+      if (!isRefreshCredentialsPayload(cmd.payload)) {
+        log.warn("host-agent", `ignoring malformed self_hosted_refresh_credentials id=${cmd.id}`);
+        return;
+      }
+      await this.refreshCredentials(cmd.payload);
+      return;
+    }
     if (cmd.type === "self_hosted_wipe") {
       log.warn("host-agent", `self_hosted_wipe received id=${cmd.id} \u2014 de-provisioning`);
       this.stop();
@@ -18134,6 +18145,7 @@ var HostAgentSupervisor = class {
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
       }
+      childEnv = { ...childEnv, CODEAM_AUTO_APPROVE: "1" };
       if (payload.agentInstallScript) {
         report("installing", "installing agent CLI");
         await this.runAgentInstall(payload.agentInstallScript);
@@ -18291,6 +18303,30 @@ var HostAgentSupervisor = class {
     }
     this.children.delete(child.deployId);
   }
+  /**
+   * Handle `self_hosted_refresh_credentials` (the user re-linked the agent).
+   * Unseal the fresh credential and re-provision the agent's on-disk auth IN
+   * PLACE (`provisionAgentCredentials` rewrites `~/.claude/.credentials.json`
+   * etc.). The running pair-auto child re-reads its auth file on the next API
+   * call, so a 401'd session recovers WITHOUT a restart — the self-hosted
+   * parallel to the codespace `refreshAgentCredentialsOnly` sweep. Best-effort:
+   * a failure is logged, never throws (the relay dispatch must not crash).
+   */
+  async refreshCredentials(payload) {
+    try {
+      const auth = await this.resolveAgentAuth(this.identity, payload.sealedAgentAuth);
+      provisionAgentCredentials(payload.agentId, auth, void 0);
+      log.info(
+        "host-agent",
+        `refreshed credentials in place for agent=${payload.agentId} (${this.children.size} active child(ren))`
+      );
+    } catch (err) {
+      log.warn(
+        "host-agent",
+        `credential refresh failed (best-effort): ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
 };
 async function resolveHostIdentity(enrollToken) {
   const existing = loadHostIdentity();
@@ -25683,10 +25719,13 @@ async function start(requestedAgent) {
       adapter,
       cwd,
       getBeads,
-      // AUTO mode in a headless GitHub Codespace: no human at the phone to
-      // answer permission prompts, so auto-approve them rather than stall the
-      // turn (the agent-agnostic equivalent of --dangerously-skip-permissions).
-      autoApprovePermissions: process.env.CODESPACES === "true"
+      // AUTO mode for headless, mobile-driven sessions: no human at the box
+      // to answer permission prompts, so auto-approve them rather than stall
+      // the turn (the agent-agnostic equivalent of
+      // --dangerously-skip-permissions). Both surfaces qualify — a GitHub
+      // Codespace (`CODESPACES=true`) and a self-hosted deploy (the host-agent
+      // sets `CODEAM_AUTO_APPROVE=1` on the pair-auto child).
+      autoApprovePermissions: process.env.CODESPACES === "true" || process.env.CODEAM_AUTO_APPROVE === "1"
     });
     return;
   }
@@ -28348,7 +28387,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.63" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.65" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -28547,7 +28586,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors14 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.63" : "unknown";
+  const v = true ? "2.39.65" : "unknown";
   console.log(`${import_picocolors14.default.bold("codeam-cli")} ${import_picocolors14.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.39.63",
+  "version": "2.39.65",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",