codeam-cli 2.61.41 → 2.61.43

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.42] — 2026-07-25
+
+### Added
+
+- **cli:** Host-agent deploy supports a specific branch/ref
+
+## [2.61.41] — 2026-07-25
+
+### Fixed
+
+- **cli:** Bypass the box-wide pair-auto singleton for host-agent children
+
 ## [2.61.40] — 2026-07-25
 
 ### CI

package/dist/index.js

@@ -780,12 +780,40 @@ var INTEGRATION_REGISTRY = {
     name: "Discord",
     icon: "discord",
     category: "comms",
-    // COMING SOON — placeholder catalog entry (no OAuth provider / MCP yet). The
-    // agent will post review pings + read channels over the Discord API once the
-    // provider lands. `enabled:false` → dimmed "coming soon" tile.
-    enabled: false,
-    auth: { kind: "oauth_redirect" },
-    delivery: {}
+    // LIVE — the DiscordOAuthProvider + DISCORD_* secrets (client id/secret,
+    // bot token, per-env redirect) are registered; the backend provider is
+    // config-gated (503 if env unset). Follows the SLACK pattern (OAuth redirect, zero friction),
+    // EXCEPT Discord OAuth gives no per-install token: the user's `bot`-scope
+    // authorize INVITES the app's single bot into their guild, and we store the
+    // returned guild id as the per-user credential. The broker injects the app's
+    // BOT token as `accessToken` (from config), so `DISCORD_TOKEN` = that bot
+    // token and `DISCORD_GUILD_ID` = the user's guild.
+    enabled: true,
+    auth: {
+      kind: "oauth_redirect",
+      // `bot` invites the app's bot into the user's guild (Guild Install);
+      // `guilds` lets the exchange read the guild name for display. The bot's
+      // channel permissions (View Channels + Read Message History + Send
+      // Messages + Send Messages in Threads) are set on the app's bot, NOT here.
+      // ⚠️ The app's bot MUST have the Message Content privileged intent enabled
+      // or read_messages returns empty content.
+      scopes: ["bot", "guilds"]
+    },
+    delivery: {
+      mcp: {
+        // mcp-discord (barryyip0625) — Node stdio, BYO bot token headless via the
+        // DISCORD_TOKEN env (never argv). Version PINNED; bump only after
+        // re-verifying headless. Tools: list/read channels + messages, send
+        // message, reply in thread, add reaction. `DISCORD_GUILD_ID` scopes it to
+        // the user's invited guild.
+        command: "npx",
+        args: ["-y", "mcp-discord@1.3.4"],
+        envMapping: {
+          DISCORD_TOKEN: "accessToken",
+          DISCORD_GUILD_ID: "guildId"
+        }
+      }
+    }
   },
   notion: {
     id: "notion",
@@ -6355,7 +6383,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.41" : "0.0.0-dev",
+    cliVersion: true ? "2.61.43" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6536,7 +6564,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.41",
+  version: "2.61.43",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -7707,7 +7735,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.41" ? { ideVersion: "2.61.41" } : {}
+      ..."2.61.43" ? { ideVersion: "2.61.43" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -17413,7 +17441,7 @@ function maskToken(text, cloneToken) {
   }
   return masked;
 }
-async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "github") {
+async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "github", branch) {
   if (isAbsolutePathTarget(repoOrPath)) {
     if (!fs36.existsSync(repoOrPath)) {
       throw new Error(`deploy target path does not exist: ${repoOrPath}`);
@@ -17427,8 +17455,9 @@ async function prepareWorkspace(repoOrPath, deployId, cloneToken, provider = "gi
   }
   fs36.mkdirSync(selfHostedWorkspaceRoot(), { recursive: true, mode: 448 });
   const cloneUrl = repoCloneUrl(repoOrPath, cloneToken, provider);
+  const cloneArgs = branch ? ["clone", "--depth", "1", "--branch", branch, cloneUrl, dest] : ["clone", "--depth", "1", cloneUrl, dest];
   try {
-    await execFileP4("git", ["clone", "--depth", "1", cloneUrl, dest], {
+    await execFileP4("git", cloneArgs, {
       timeout: 12e4,
       maxBuffer: 16 * 1024 * 1024,
       env: nonInteractiveGitEnv()
@@ -18691,7 +18720,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.41" : null;
+  const current = true ? "2.61.43" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18708,7 +18737,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.41" : null;
+  const current = true ? "2.61.43" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18728,7 +18757,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.41" : null;
+  return true ? "2.61.43" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -18940,6 +18969,9 @@ function isDeployPayload(p2) {
   if (p2.repoProvider !== void 0 && p2.repoProvider !== "github" && p2.repoProvider !== "gitlab") {
     return false;
   }
+  if (p2.branch !== void 0 && typeof p2.branch !== "string") {
+    return false;
+  }
   if (p2.headroomEnabled !== void 0 && typeof p2.headroomEnabled !== "boolean") {
     return false;
   }
@@ -19653,7 +19685,8 @@ var HostAgentSupervisor = class {
         payload.repoOrPath,
         payload.deployId,
         payload.cloneToken,
-        payload.repoProvider ?? "github"
+        payload.repoProvider ?? "github",
+        payload.branch
       );
       let childEnv;
       let extraArgs = [];
@@ -38850,7 +38883,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.41" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.43" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -39361,7 +39394,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.41" : "unknown";
+  const v = true ? "2.61.43" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.41",
+  "version": "2.61.43",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",