codeam-cli 2.61.10 → 2.61.13

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.11] — 2026-07-16
+
+### Fixed
+
+- **cli:** Periodic 12h re-baseline so an idle session's conversation outlives the backend TTL
+
+## [2.61.10] — 2026-07-16
+
+### Fixed
+
+- **cli:** Fleet box hardening — self-updatable image, fresh-pull creates, dead-container rm
+
 ## [2.61.9] — 2026-07-16
 
 ### Fixed

package/dist/index.js

@@ -742,6 +742,49 @@ var INTEGRATION_REGISTRY = {
         staticEnv: { AZURE_DEVOPS_AUTH_METHOD: "pat" }
       }
     }
+  },
+  figma: {
+    id: "figma",
+    name: "Figma",
+    icon: "figma",
+    // LIVE — the Figma OAuth app (Confidential, both prod+dev redirect URIs)
+    // is registered and FIGMA_OAUTH_CLIENT_ID/SECRET/REDIRECT_URI are in
+    // Secret Manager (prod+dev, created 2026-07-16). The backend
+    // FigmaOAuthProvider is config-gated (503 if env unset) so this is safe
+    // even mid-rollout before the secrets mount.
+    enabled: true,
+    auth: {
+      kind: "oauth_redirect",
+      // Granular READ-ONLY scopes (legacy `files:read` is deprecated for
+      // OAuth). Asset export (GET /v1/images) rides file_content:read.
+      // file_variables:read is Enterprise-only and would break linking for
+      // normal accounts — deliberately excluded. ⚠️ Changing these requires
+      // the user to RE-LINK Figma.
+      scopes: [
+        "current_user:read",
+        "file_content:read",
+        "file_metadata:read",
+        "file_dev_resources:read",
+        "library_content:read"
+      ]
+    },
+    delivery: {
+      mcp: {
+        // Framelink figma-developer-mcp (Node, stdio) in BYO-token headless
+        // mode — the ONLY known Figma MCP server that accepts an OAuth
+        // Bearer token: FIGMA_OAUTH_TOKEN → `Authorization: Bearer` (env
+        // only, never argv). Figma's official servers can't be used here
+        // (remote = interactive OAuth + client allowlist; Dev Mode =
+        // desktop app). Version PINNED; bump only after re-verifying
+        // headless. Tools: get_figma_data (condensed layout extraction) +
+        // download_figma_images (asset export).
+        command: "npx",
+        args: ["-y", "figma-developer-mcp@0.13.2", "--stdio", "--no-telemetry"],
+        envMapping: {
+          FIGMA_OAUTH_TOKEN: "accessToken"
+        }
+      }
+    }
   }
 };
 function getIntegration(id) {
@@ -5975,7 +6018,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.10" : "0.0.0-dev",
+    cliVersion: true ? "2.61.13" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6156,7 +6199,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.10",
+  version: "2.61.13",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -7299,7 +7342,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.10" ? { ideVersion: "2.61.10" } : {}
+      ..."2.61.13" ? { ideVersion: "2.61.13" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -17900,7 +17943,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.10" : null;
+  const current = true ? "2.61.13" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17917,7 +17960,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.10" : null;
+  const current = true ? "2.61.13" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17937,7 +17980,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.10" : null;
+  return true ? "2.61.13" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -24941,6 +24984,18 @@ var HistoryService = class _HistoryService {
   }
   /** Per-session JSONL mtime at the last upload — gates {@link uploadConversationIfChanged}. */
   lastTranscriptMtimeMs = /* @__PURE__ */ new Map();
+  /** Wall-clock of the last upload per session — drives the periodic
+   *  re-baseline below. */
+  lastUploadWallMs = /* @__PURE__ */ new Map();
+  /** The backend stores the conversation with a bounded TTL (24 h,
+   *  `WS_SESSION_TTL`). An IDLE session's JSONL never changes, so a pure
+   *  mtime gate would never re-ship and the backend copy would expire —
+   *  every later `get_conversation` → GET then returns EMPTY forever (the
+   *  2026-07-16 "la sesión no carga" regression, second occurrence: the
+   *  first fix pushed at session START but nothing refreshed an idle
+   *  session past the TTL). Re-baseline at half the backend TTL so the
+   *  stored copy can never lapse while the session lives. */
+  static REBASELINE_INTERVAL_MS = 12 * 60 * 60 * 1e3;
   /**
    * Upload a session's transcript when its JSONL changed since the last upload.
    * Scales to long/heavy conversations: the ACP `get_conversation` handler is
@@ -24966,7 +25021,12 @@ var HistoryService = class _HistoryService {
     } catch {
       return false;
     }
-    if (this.lastTranscriptMtimeMs.get(sessionId) === mtimeMs) return false;
+    const now = Date.now();
+    const staleBaseline = now - (this.lastUploadWallMs.get(sessionId) ?? 0) > _HistoryService.REBASELINE_INTERVAL_MS;
+    if (!staleBaseline && this.lastTranscriptMtimeMs.get(sessionId) === mtimeMs) {
+      return false;
+    }
+    if (staleBaseline) this.lastUploadedUuid.delete(sessionId);
     let uploaded;
     if (this.lastUploadedUuid.has(sessionId)) {
       uploaded = await this.uploadDelta(sessionId) > 0;
@@ -24975,6 +25035,7 @@ var HistoryService = class _HistoryService {
       uploaded = true;
     }
     this.lastTranscriptMtimeMs.set(sessionId, mtimeMs);
+    this.lastUploadWallMs.set(sessionId, now);
     return uploaded;
   }
   /**
@@ -31789,6 +31850,23 @@ async function resumeSessionH(ctx) {
   }
   try {
     await client3.loadSession(id);
+    ctx.history.switchActiveSession(id);
+    ctx.onActiveSessionChanged?.(id);
+    try {
+      await ctx.jsonlHistory.uploadConversationIfChanged(id);
+    } catch (err) {
+      log.warn("acpRunner", `resume_session: transcript upload failed: ${describeError(err)}`);
+    }
+    void (async () => {
+      try {
+        const listed = await client3.listSessions();
+        if (listed && listed.length > 0) {
+          await ctx.publisher.pushSessionList({ agentId: opts.agent, sessions: listed });
+        }
+      } catch (err) {
+        log.warn("acpRunner", `resume_session: list push failed: ${describeError(err)}`);
+      }
+    })();
     await relay.sendResult(cmd.id, "completed", { sessionId: id });
   } catch (err) {
     log.warn("acpRunner", `resume_session failed: ${describeError(err)}`);
@@ -32342,6 +32420,21 @@ var AcpHistory = class {
   opts;
   messages = [];
   summary = null;
+  /**
+   * Switch the active conversation after a `resume_session` loadSession
+   * (2026-07-16 "conversation never loads on resume" fix). The buffered
+   * turns belong to the PREVIOUS conversation — flushing them under the
+   * new id would corrupt it — so the buffer and summary reset; the loaded
+   * conversation's real history lives in its JSONL, which the resume
+   * handler uploads via HistoryService. Future turn flushes then push
+   * under the new id.
+   */
+  switchActiveSession(id) {
+    if (id === this.opts.acpSessionId) return;
+    this.opts.acpSessionId = id;
+    this.messages.length = 0;
+    this.summary = null;
+  }
   appendUserPrompt(text) {
     if (this.summary === null) {
       const trimmed = text.trim().replace(/\s+/g, " ");
@@ -32727,7 +32820,15 @@ async function runAcpSession(opts) {
         budgetRecovery,
         { get: () => _budgetReachedPosted, set: (v) => {
           _budgetReachedPosted = v;
-        } }
+        } },
+        // resume_session re-points the runner's active conversation: the
+        // relay callback reads `acpSessionId` per command, so every FUTURE
+        // get_conversation / upload / one-shot serves the RESUMED id — not
+        // the boot-time one (2026-07-16 "resume loads the old/blank
+        // conversation" fix).
+        (id) => {
+          acpSessionId = id;
+        }
       );
     },
     { id: opts.agent, name: opts.agent, displayName: opts.agent }
@@ -32762,7 +32863,7 @@ async function runAcpSession(opts) {
   await new Promise(() => {
   });
 }
-async function handleCommand(cmd, client3, relay, acpSessionId, models, streaming, opts, history, jsonlHistory, agentCaps, turnFiles, getBeads, publisher, recentStderr, budgetRecovery, budgetReachedFlag) {
+async function handleCommand(cmd, client3, relay, acpSessionId, models, streaming, opts, history, jsonlHistory, agentCaps, turnFiles, getBeads, publisher, recentStderr, budgetRecovery, budgetReachedFlag, onActiveSessionChanged) {
   const session = {
     client: client3,
     relay,
@@ -32778,7 +32879,8 @@ async function handleCommand(cmd, client3, relay, acpSessionId, models, streamin
     publisher,
     recentStderr,
     budgetRecovery,
-    budgetReachedFlag
+    budgetReachedFlag,
+    onActiveSessionChanged
   };
   await dispatchAcpCommand(assembleAcpCommandContext(session, cmd));
 }
@@ -37437,7 +37539,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.10" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.13" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -37948,7 +38050,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.10" : "unknown";
+  const v = true ? "2.61.13" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.10",
+  "version": "2.61.13",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",