codeam-cli 2.52.3 → 2.52.5

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.52.3] — 2026-06-30
+
+### Added
+
+- **cli:** Emit static quick-reply chips from ACP runner on normal turn end
+
 ## [2.52.2] — 2026-06-30
 
 ### Fixed

package/dist/index.js

@@ -5397,7 +5397,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.52.3" : "0.0.0-dev",
+    cliVersion: true ? "2.52.5" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5578,7 +5578,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.52.3",
+  version: "2.52.5",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -13920,13 +13920,26 @@ var path36 = __toESM(require("path"));
 var import_node_fs5 = __toESM(require("fs"));
 var import_node_os3 = __toESM(require("os"));
 var import_node_child_process11 = require("child_process");
+var BROAD_WINDOWS_SIDS = [
+  "*S-1-1-0",
+  "*S-1-5-11",
+  "*S-1-5-32-545",
+  "*S-1-5-32-544",
+  "*S-1-5-18"
+];
 function restrictToOwner(filePath) {
   try {
     if (process.platform === "win32") {
       const username = import_node_os3.default.userInfo().username;
       (0, import_node_child_process11.execFileSync)(
         "icacls",
-        [filePath, "/inheritance:r", "/grant:r", `${username}:F`],
+        [
+          filePath,
+          "/inheritance:r",
+          "/grant:r",
+          `${username}:F`,
+          ...BROAD_WINDOWS_SIDS.flatMap((sid) => ["/remove", sid])
+        ],
         { stdio: "ignore" }
       );
     } else {
@@ -14016,7 +14029,7 @@ function saveHostIdentity(identity) {
     encoding: "utf8",
     mode: 384
   });
-  fs27.chmodSync(file, 384);
+  restrictToOwner(file);
 }
 var TERMINAL_ENROLL_CODES = /* @__PURE__ */ new Set(["ENROLL_TOKEN_EXPIRED", "ENROLL_TOKEN_INVALID"]);
 var HostHttpError = class extends Error {
@@ -14863,7 +14876,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.52.3" : null;
+  const current = true ? "2.52.5" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -14880,7 +14893,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.52.3" : null;
+  const current = true ? "2.52.5" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -15582,7 +15595,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process15.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.52.3" : null;
+  return true ? "2.52.5" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -19207,7 +19220,14 @@ var requestLinkCredentialsH = (ctx, _cmd, parsed) => {
       pluginId: ctx.pluginId,
       pluginAuthToken,
       method: token.method,
-      credential: token.credential
+      credential: token.credential,
+      // This handler ALWAYS rides the user's real paired session (the
+      // backend pushed the request onto it), never a `codeam link`
+      // throwaway. Omitting the flag made the backend delete the
+      // session the user had just paired (2026-07-02 incident) — the
+      // backend now also guards via its own auto-link Redis flag, but
+      // the CLI must state the truth for older backends too.
+      preserveSession: true
     });
     if (result.ok) {
       log.trace("auto-link", `vaulted ${publicId} from ${token.source}`);
@@ -31187,7 +31207,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.52.3" : "0.0.0-dev";
+  const cliVersion = true ? "2.52.5" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -31386,7 +31406,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.52.3" : "unknown";
+  const v = true ? "2.52.5" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.52.3",
+  "version": "2.52.5",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",