codeam-cli 2.61.35 → 2.61.37

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.35] — 2026-07-24
+
+### Fixed
+
+- **box:** Box user must own /home/box — set HOME late so the build doesn't root-own ~/.codeam
+
 ## [2.61.34] — 2026-07-24
 
 ### Added

package/dist/index.js

@@ -6355,7 +6355,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.35" : "0.0.0-dev",
+    cliVersion: true ? "2.61.37" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6536,7 +6536,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.35",
+  version: "2.61.37",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -7707,7 +7707,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.35" ? { ideVersion: "2.61.35" } : {}
+      ..."2.61.37" ? { ideVersion: "2.61.37" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -18691,7 +18691,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.35" : null;
+  const current = true ? "2.61.37" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18708,7 +18708,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.35" : null;
+  const current = true ? "2.61.37" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18728,7 +18728,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.35" : null;
+  return true ? "2.61.37" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -18978,8 +18978,16 @@ function isFleetBoxRefPayload(p2) {
   if (typeof p2.boxId !== "string") return false;
   if (!isFleetContainerName(p2.containerName)) return false;
   if (p2.removeVolume !== void 0 && typeof p2.removeVolume !== "boolean") return false;
+  if (p2.enrollToken !== void 0 && (typeof p2.enrollToken !== "string" || !p2.enrollToken)) {
+    return false;
+  }
+  if (p2.apiOrigin !== void 0 && (typeof p2.apiOrigin !== "string" || !p2.apiOrigin)) return false;
+  if (p2.limits !== void 0 && !isFleetLimits(p2.limits)) return false;
   return true;
 }
+function fleetRefCanRecreate(p2) {
+  return typeof p2.enrollToken === "string" && p2.enrollToken.length > 0 && typeof p2.apiOrigin === "string" && p2.apiOrigin.length > 0 && p2.limits !== void 0;
+}
 function fleetUserIdFromContainerName(containerName) {
   return containerName.slice("codeam-box-".length);
 }
@@ -18992,6 +19000,57 @@ function isMissingVolumeError(stderr) {
 function resolveFleetBoxImage() {
   return process.env.CODEAM_FLEET_BOX_IMAGE || "ghcr.io/edgar-durand/codeam-box:latest";
 }
+function buildFleetBoxRunArgs(p2) {
+  const userId = fleetUserIdFromContainerName(p2.containerName);
+  const image = resolveFleetBoxImage();
+  return [
+    "run",
+    "-d",
+    // Registry-default image: always pull so the box never silently runs this
+    // host's STALE cached :latest. An explicit CODEAM_FLEET_BOX_IMAGE override
+    // (int test / operator) keeps docker's default policy — a local-only tag
+    // can't be pulled.
+    ...process.env.CODEAM_FLEET_BOX_IMAGE ? [] : ["--pull=always"],
+    "--name",
+    p2.containerName,
+    "--cap-drop",
+    "ALL",
+    "--security-opt",
+    "no-new-privileges",
+    "--memory",
+    `${p2.limits.memoryMb}m`,
+    "--cpus",
+    String(p2.limits.cpus),
+    "--pids-limit",
+    String(p2.limits.pidsLimit),
+    "--network",
+    "fleet-net",
+    "--label",
+    `com.codeagent.user-id=${userId}`,
+    "--label",
+    `com.codeagent.box-id=${p2.boxId}`,
+    "--label",
+    "com.codeagent.created-by=fleet",
+    "-v",
+    `${p2.containerName}:/home/box`,
+    // Bare `-e NAME` — docker reads the value from ITS OWN process env (supplied
+    // via opts.env), never from this argv.
+    "-e",
+    "CODEAM_ENROLL_TOKEN",
+    "-e",
+    `CODEAM_API_URL=${p2.apiOrigin}`,
+    // User-facing "My Servers" label; read at redeem via resolveHostLabel.
+    "-e",
+    "CODEAM_HOST_LABEL=CodeAgent Box",
+    // The enroll token is single-use but lives in the container's fixed env;
+    // resolveHostIdentity resumes from the sealed identity on a terminal
+    // enroll-token rejection (a plain wake/restart replaying the consumed
+    // token). Kept for observability / older-CLI back-compat.
+    "-e",
+    "CODEAM_ENROLL_EPHEMERAL=1",
+    image
+  ];
+}
 var DOCKER_RUN_TIMEOUT_MS = 12e4;
 var defaultDockerRunner = {
   run(args2, opts = {}) {
@@ -19423,7 +19482,6 @@ var HostAgentSupervisor = class {
    */
   async fleetCreateBox(payload) {
     const { containerName, limits } = payload;
-    const userId = fleetUserIdFromContainerName(containerName);
     log.info(
       "host-agent",
       `fleet_create_box id=${payload.boxId} name=${containerName} mem=${limits.memoryMb}m cpus=${limits.cpus} pids=${limits.pidsLimit}`
@@ -19437,63 +19495,7 @@ var HostAgentSupervisor = class {
         `fleet_create_box: pre-create rm of ${containerName} failed (code=${rm.code}): ${rm.stderr.trim().slice(-200)} \u2014 attempting run anyway`
       );
     }
-    const image = resolveFleetBoxImage();
-    const args2 = [
-      "run",
-      "-d",
-      // Registry-default image: always pull so a new box never silently
-      // runs this host's STALE cached :latest (2026-07-16: cache had CLI
-      // 2.61.4 while the registry had 2.61.9). An explicit
-      // CODEAM_FLEET_BOX_IMAGE override (int test / operator) keeps
-      // docker's default policy — a local-only tag can't be pulled.
-      ...process.env.CODEAM_FLEET_BOX_IMAGE ? [] : ["--pull=always"],
-      "--name",
-      containerName,
-      "--cap-drop",
-      "ALL",
-      "--security-opt",
-      "no-new-privileges",
-      "--memory",
-      `${limits.memoryMb}m`,
-      "--cpus",
-      String(limits.cpus),
-      "--pids-limit",
-      String(limits.pidsLimit),
-      "--network",
-      "fleet-net",
-      "--label",
-      `com.codeagent.user-id=${userId}`,
-      "--label",
-      `com.codeagent.box-id=${payload.boxId}`,
-      "--label",
-      "com.codeagent.created-by=fleet",
-      "-v",
-      `${containerName}:/home/box`,
-      // Bare `-e NAME` (no `=value`) — docker reads the value from ITS OWN
-      // process env (supplied below via `opts.env`), never from this argv.
-      "-e",
-      "CODEAM_ENROLL_TOKEN",
-      "-e",
-      `CODEAM_API_URL=${payload.apiOrigin}`,
-      // User-facing label for the rescued box's "My Servers" card. Not a
-      // secret → plain `-e KEY=value`. The box's host-agent reads it at
-      // redeem (resolveHostLabel) so a rescued user sees "CodeAgent Box",
-      // not the generic "my-server" or the ugly container cuid.
-      "-e",
-      "CODEAM_HOST_LABEL=CodeAgent Box",
-      // The enroll token above is a SINGLE-USE bootstrap, but it lives in the
-      // container's fixed env — it can't be stripped after first boot like the
-      // self-hosted systemd unit does, so on every restart (docker restart /
-      // reboot / fleet_start_box wake) the redeem terminally expires.
-      // `resolveHostIdentity` now resumes from a sealed identity on ANY
-      // terminal enroll-token rejection (not just ephemeral boxes — see its
-      // doc comment), so this flag is no longer load-bearing for that
-      // decision; kept set for observability/back-compat with older CLI
-      // builds that still gate on it. Not a secret → plain KEY=value.
-      "-e",
-      "CODEAM_ENROLL_EPHEMERAL=1",
-      image
-    ];
+    const args2 = buildFleetBoxRunArgs(payload);
     const res = await this.docker.run(args2, {
       timeoutMs: DOCKER_RUN_TIMEOUT_MS,
       env: { CODEAM_ENROLL_TOKEN: payload.enrollToken }
@@ -19513,15 +19515,74 @@ var HostAgentSupervisor = class {
   /** `fleet_start_box` — wake a sleeping box (`docker start`). Idempotent: a
    *  container the host already removed is treated as success. */
   async fleetStartBox(payload) {
-    log.info("host-agent", `fleet_start_box id=${payload.boxId} name=${payload.containerName}`);
-    const res = await this.docker.run(["start", payload.containerName]);
+    const { containerName } = payload;
+    if (fleetRefCanRecreate(payload) && await this.fleetBoxImageStale(containerName)) {
+      log.info(
+        "host-agent",
+        `fleet_start_box id=${payload.boxId} name=${containerName} \u2014 image stale \u2192 recreating from :latest`
+      );
+      const rm = await this.docker.run(["rm", "-f", containerName], {
+        timeoutMs: DOCKER_RUN_TIMEOUT_MS
+      });
+      if (rm.code !== 0 && !isMissingContainerError(rm.stderr)) {
+        log.warn(
+          "host-agent",
+          `fleet_start_box: pre-recreate rm of ${containerName} failed (code=${rm.code}): ${rm.stderr.trim().slice(-200)} \u2014 attempting run anyway`
+        );
+      }
+      const args2 = buildFleetBoxRunArgs({
+        boxId: payload.boxId,
+        containerName,
+        apiOrigin: payload.apiOrigin,
+        limits: payload.limits
+      });
+      const res2 = await this.docker.run(args2, {
+        timeoutMs: DOCKER_RUN_TIMEOUT_MS,
+        env: { CODEAM_ENROLL_TOKEN: payload.enrollToken }
+      });
+      if (res2.code === 0) {
+        log.info(
+          "host-agent",
+          `fleet box ${containerName} recreated from :latest (${res2.stdout.trim().slice(0, 12)})`
+        );
+      } else {
+        log.warn(
+          "host-agent",
+          `fleet_start_box recreate ${containerName} failed (code=${res2.code}): ${res2.stderr.trim().slice(-300)}`
+        );
+      }
+      return;
+    }
+    log.info("host-agent", `fleet_start_box id=${payload.boxId} name=${containerName}`);
+    const res = await this.docker.run(["start", containerName]);
     if (res.code !== 0 && !isMissingContainerError(res.stderr)) {
       log.warn(
         "host-agent",
-        `fleet_start_box ${payload.containerName} failed (code=${res.code}): ${res.stderr.trim().slice(-300)}`
+        `fleet_start_box ${containerName} failed (code=${res.code}): ${res.stderr.trim().slice(-300)}`
       );
     }
   }
+  /**
+   * True when the box's container was created from an image OTHER than the
+   * current registry `:latest` (a stale runtime), or the container is gone.
+   * Pulls `:latest` first so the comparison is against the freshest image.
+   * Best-effort + fail-SAFE: a local-image override (int test / operator) or any
+   * pull/inspect error returns false → the caller falls back to a plain
+   * `docker start`, so a transient docker hiccup can never wedge a wake.
+   */
+  async fleetBoxImageStale(containerName) {
+    if (process.env.CODEAM_FLEET_BOX_IMAGE) return false;
+    const image = resolveFleetBoxImage();
+    const cur = await this.docker.run(["inspect", "--format", "{{.Image}}", containerName]);
+    if (cur.code !== 0) {
+      return isMissingContainerError(cur.stderr);
+    }
+    const pull = await this.docker.run(["pull", image], { timeoutMs: DOCKER_RUN_TIMEOUT_MS });
+    if (pull.code !== 0) return false;
+    const latest = await this.docker.run(["inspect", "--format", "{{.Id}}", image]);
+    if (latest.code !== 0) return false;
+    return cur.stdout.trim() !== "" && cur.stdout.trim() !== latest.stdout.trim();
+  }
   /** `fleet_stop_box` — sleep an idle box (`docker stop`). MUST be
    *  idempotent — the backend's reap sweeps may re-send a stop for a box
    *  the host already stopped/removed; "No such container" is success. */
@@ -38737,7 +38798,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.35" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.37" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -39248,7 +39309,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.35" : "unknown";
+  const v = true ? "2.61.37" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.35",
+  "version": "2.61.37",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",