codeam-cli 2.61.23 → 2.61.24

package/CHANGELOG.md

@@ -4,6 +4,29 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.23] — 2026-07-20
+
+### Added
+
+- **shared:** Add Agent Skills wire types (SkillDefinition, SkillsManifest)
+- **shared:** Seed SKILL_REGISTRY with code-review + resolve-conflicts
+- **cli:** Skills.json manifest read/persist/clear util
+- **cli:** Materialize curated SKILL.md bundles under $HOME (namespaced)
+- **cli:** ProvisionSkillsForStart materializes skills before agent spawn
+- **cli:** Persist self-hosted deploy skills manifest to skills.json
+- **cli:** Skills_configure relay command (add/remove/list) in both registries
+- **shared:** Add skillIds to AgentReviewPlan wire type
+
+### Fixed
+
+- **cli:** SKILL.md frontmatter name must match codeam-<id> skill dir
+- **cli:** ConfigureSkill rejects unknown action instead of destructive remove fall-through
+- **cli:** Quote SKILL.md description (valid YAML) + harden skills manifest read
+
+### Tests
+
+- **cli:** Make skills path assertions separator-agnostic (Windows CI)
+
 ## [2.61.21] — 2026-07-18
 
 ### Added

package/dist/index.js

@@ -6117,7 +6117,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.23" : "0.0.0-dev",
+    cliVersion: true ? "2.61.24" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6298,7 +6298,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.23",
+  version: "2.61.24",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6375,7 +6375,7 @@ var package_default = {
     "@agentclientprotocol/sdk": "1.2.1",
     "@clack/prompts": "^1.2.0",
     chokidar: "^3.6.0",
-    ignore: "^5.3.2",
+    ignore: "^7.0.6",
     picocolors: "^1.1.0",
     "qrcode-terminal": "^0.12.0",
     which: "^6.0.0",
@@ -6394,8 +6394,9 @@ var package_default = {
     "@vitest/coverage-v8": "^4.1.7",
     "node-pty": "^1.1.0",
     tsup: "^8.0.0",
-    typescript: "^6.0.3",
-    vitest: "^4.1.5"
+    typescript: "^7.0.2",
+    vitest: "^4.1.5",
+    yaml: "^2.9.0"
   }
 };
 
@@ -7462,7 +7463,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.23" ? { ideVersion: "2.61.23" } : {}
+      ..."2.61.24" ? { ideVersion: "2.61.24" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -16763,6 +16764,29 @@ function persistOrClearSkillsFromPayload(skills) {
   else clearSkillsManifest();
 }
 
+// src/lib/process-guards.ts
+var installed = false;
+function installRelayCrashGuards() {
+  if (installed) return;
+  installed = true;
+  process.on("unhandledRejection", (reason) => {
+    log.error("process", `unhandledRejection \u2014 relay kept alive \u2014 ${describeReason(reason)}`);
+  });
+  process.on("uncaughtException", (err) => {
+    log.error("process", `uncaughtException \u2014 relay kept alive \u2014 ${describeReason(err)}`);
+  });
+}
+function describeReason(reason) {
+  if (reason instanceof Error) {
+    return reason.stack ?? `${reason.name}: ${reason.message}`;
+  }
+  try {
+    return typeof reason === "string" ? reason : JSON.stringify(reason);
+  } catch {
+    return String(reason);
+  }
+}
+
 // src/commands/host/host-client.ts
 var fs35 = __toESM(require("fs"));
 var os31 = __toESM(require("os"));
@@ -18288,7 +18312,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.23" : null;
+  const current = true ? "2.61.24" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18305,7 +18329,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.23" : null;
+  const current = true ? "2.61.24" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18325,7 +18349,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.23" : null;
+  return true ? "2.61.24" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -18652,8 +18676,12 @@ var defaultResumeSpawner = (env, cwd) => (0, import_node_child_process24.spawn)(
   detached: false
 });
 var defaultOnIdentityRejected = () => {
+  defaultDisableService();
   deleteHostIdentity();
-  log.warn("host-agent", "host identity rejected by backend \u2014 wiped sealed identity, exiting");
+  log.warn(
+    "host-agent",
+    "host identity rejected by backend \u2014 disabled service + wiped sealed identity, exiting"
+  );
   process.exit(1);
 };
 var defaultOnUpdated = (version3) => {
@@ -19072,10 +19100,13 @@ var HostAgentSupervisor = class {
       "CODEAM_HOST_LABEL=CodeAgent Box",
       // The enroll token above is a SINGLE-USE bootstrap, but it lives in the
       // container's fixed env — it can't be stripped after first boot like the
-      // self-hosted systemd unit does. This flag tells `resolveHostIdentity`
-      // that on a restart (docker restart / reboot / fleet_start_box wake) an
-      // expired-token redeem is EXPECTED: resume from the sealed identity
-      // instead of dying with "token expired". Not a secret → plain KEY=value.
+      // self-hosted systemd unit does, so on every restart (docker restart /
+      // reboot / fleet_start_box wake) the redeem terminally expires.
+      // `resolveHostIdentity` now resumes from a sealed identity on ANY
+      // terminal enroll-token rejection (not just ephemeral boxes — see its
+      // doc comment), so this flag is no longer load-bearing for that
+      // decision; kept set for observability/back-compat with older CLI
+      // builds that still gate on it. Not a secret → plain KEY=value.
       "-e",
       "CODEAM_ENROLL_EPHEMERAL=1",
       image
@@ -19522,10 +19553,10 @@ async function resolveHostIdentity(enrollToken) {
       return identity;
     } catch (err) {
       if (isTerminalEnrollError(err)) {
-        if (existing && process.env.CODEAM_ENROLL_EPHEMERAL === "1") {
+        if (existing) {
           log.info(
             "host-agent",
-            "ephemeral enroll token expired on restart; resuming from sealed identity"
+            "enroll token terminally rejected (expired/replayed) but a sealed identity is present; resuming from it \u2014 likely a restart, not a re-enroll"
           );
           return existing;
         }
@@ -19549,6 +19580,7 @@ async function resolveHostIdentity(enrollToken) {
   return null;
 }
 async function hostAgent(args2 = []) {
+  installRelayCrashGuards();
   const tokenArg = args2.find((a) => a.startsWith("--token="));
   const enrollToken = (tokenArg ? tokenArg.slice("--token=".length).trim() : "") || process.env.CODEAM_ENROLL_TOKEN || void 0;
   const identity = await resolveHostIdentity(enrollToken);
@@ -23809,29 +23841,6 @@ function buildKeepAlive(ctx) {
   };
 }
 
-// src/lib/process-guards.ts
-var installed = false;
-function installRelayCrashGuards() {
-  if (installed) return;
-  installed = true;
-  process.on("unhandledRejection", (reason) => {
-    log.error("process", `unhandledRejection \u2014 relay kept alive \u2014 ${describeReason(reason)}`);
-  });
-  process.on("uncaughtException", (err) => {
-    log.error("process", `uncaughtException \u2014 relay kept alive \u2014 ${describeReason(err)}`);
-  });
-}
-function describeReason(reason) {
-  if (reason instanceof Error) {
-    return reason.stack ?? `${reason.name}: ${reason.message}`;
-  }
-  try {
-    return typeof reason === "string" ? reason : JSON.stringify(reason);
-  } catch {
-    return String(reason);
-  }
-}
-
 // src/commands/start-infra-only.ts
 var INFRA_ONLY_COMMAND_TYPES = /* @__PURE__ */ new Set([
   // File ops (drive the dashboard's Files panel + open-file).
@@ -38332,7 +38341,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.23" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.24" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -38843,7 +38852,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.23" : "unknown";
+  const v = true ? "2.61.24" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.23",
+  "version": "2.61.24",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -77,7 +77,7 @@
     "@agentclientprotocol/sdk": "1.2.1",
     "@clack/prompts": "^1.2.0",
     "chokidar": "^3.6.0",
-    "ignore": "^5.3.2",
+    "ignore": "^7.0.6",
     "picocolors": "^1.1.0",
     "qrcode-terminal": "^0.12.0",
     "which": "^6.0.0",
@@ -96,7 +96,8 @@
     "@vitest/coverage-v8": "^4.1.7",
     "node-pty": "^1.1.0",
     "tsup": "^8.0.0",
-    "typescript": "^6.0.3",
-    "vitest": "^4.1.5"
+    "typescript": "^7.0.2",
+    "vitest": "^4.1.5",
+    "yaml": "^2.9.0"
   }
 }