codeam-cli 2.61.5 → 2.61.7

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.5] — 2026-07-16
+
+### Added
+
+- **cli:** ACP chrome-leak canary + detector (stability monitor, part 2)
+- **ci:** Canary seeds onboarding + auths via in-house MiniMax backend
+
+### Fixed
+
+- **ci:** Canary auths by subscription (CLAUDE_CODE_OAUTH_TOKEN), not API key
+- **cli:** Stop the changeset reporter from spamming install/SDK files
+
 ## [2.61.4] — 2026-07-16
 
 ### Fixed

package/dist/index.js

@@ -5975,7 +5975,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.5" : "0.0.0-dev",
+    cliVersion: true ? "2.61.7" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6156,7 +6156,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.5",
+  version: "2.61.7",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6225,7 +6225,7 @@ var package_default = {
     url: "https://github.com/sponsors/edgar-durand"
   },
   engines: {
-    node: ">=20.0.0"
+    node: ">=22.0.0"
   },
   dependencies: {
     "@agentclientprotocol/claude-agent-acp": "0.59.0",
@@ -7299,7 +7299,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.5" ? { ideVersion: "2.61.5" } : {}
+      ..."2.61.7" ? { ideVersion: "2.61.7" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -17900,7 +17900,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.5" : null;
+  const current = true ? "2.61.7" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17917,7 +17917,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.5" : null;
+  const current = true ? "2.61.7" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17937,7 +17937,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.5" : null;
+  return true ? "2.61.7" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -18254,6 +18254,12 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process23.s
   stdio: ["ignore", "pipe", "pipe"],
   detached: false
 });
+var defaultResumeSpawner = (env, cwd) => (0, import_node_child_process23.spawn)(process.execPath, [process.argv[1]], {
+  cwd,
+  env: { ...process.env, ...env, CODEAM_AUTO_APPROVE: "1" },
+  stdio: ["ignore", "pipe", "pipe"],
+  detached: false
+});
 var defaultOnIdentityRejected = () => {
   deleteHostIdentity();
   log.warn("host-agent", "host identity rejected by backend \u2014 wiped sealed identity, exiting");
@@ -18268,6 +18274,7 @@ var HostAgentSupervisor = class {
     this.identity = identity;
     this.deps = deps;
     this.spawnChild = deps.spawnChild ?? defaultSpawner;
+    this.resumeSpawner = deps.resumeSpawner ?? defaultResumeSpawner;
     this.resolveAgentAuth = deps.resolveAgentAuth ?? unsealAgentAuth;
     this.setupHeadroom = deps.setupHeadroom ?? setupHeadroomForSelfHosted;
     this.isHeadroomInstalled = deps.isHeadroomInstalled ?? (() => defaultHeadroomRunner.which("headroom"));
@@ -18284,6 +18291,7 @@ var HostAgentSupervisor = class {
   deps;
   children = /* @__PURE__ */ new Map();
   spawnChild;
+  resumeSpawner;
   resolveAgentAuth;
   setupHeadroom;
   /** Probe whether Headroom is already installed (defaults to `which headroom`). */
@@ -18344,6 +18352,7 @@ var HostAgentSupervisor = class {
     void this.beat();
     this.heartbeatTimer = setInterval(() => void this.beat(), HEARTBEAT_INTERVAL_MS);
     this.heartbeatTimer.unref?.();
+    this.resumePersistedSession();
     void reportSessionEvent(
       { hostId: this.identity.hostId, hostToken: this.identity.hostToken },
       { event: "reconcile", activeDeployIds: this.activeSessions().map((s) => s.id) }
@@ -18933,6 +18942,60 @@ var HostAgentSupervisor = class {
   spawnSessionChild(env, cwd, args2 = []) {
     return this.spawnChild({ ...env, ...readHeadroomChildEnv() }, cwd, args2);
   }
+  /**
+   * Auto-resume the user's last active session on supervisor boot (2026-07-16
+   * churn fix). Before this, a restart / self-update killed the session child
+   * and never re-spawned it — the session lost its heartbeat, went "CLI
+   * disconnected", and the user had to reconnect by hand (churn right after an
+   * update). Spawn bare `codeam` via the resume spawner (reconnects the SAME
+   * pluginId via start(), then heartbeats) so the session comes back on its own
+   * in its ORIGINAL ACP shape (self-hosted/codespace = ACP-only; the resume
+   * spawner sets CODEAM_AUTO_APPROVE=1 to keep the local baton/native-TUI OFF).
+   *
+   * Best-effort + guarded: no-op when there's no persisted session, when the
+   * persisted session lacks the reconnect material (pluginId + pollSecret +
+   * agent), or when a fresh deploy already owns a child this boot.
+   */
+  resumePersistedSession() {
+    try {
+      if (this.children.size > 0) return;
+      const session = getActiveSession();
+      if (!session || !session.pluginId || !session.pollSecret || !session.agent) return;
+      const cwd = process.cwd();
+      const proc = this.resumeSpawner({ ...readHeadroomChildEnv() }, cwd);
+      const child = {
+        deployId: session.id,
+        proc,
+        agent: session.agent,
+        startedAt: Date.now()
+      };
+      this.children.set(session.id, child);
+      let tail = "";
+      const appendTail = (buf) => {
+        tail = (tail + buf.toString("utf8")).slice(-2e3);
+      };
+      proc.stdout?.on("data", appendTail);
+      proc.stderr?.on("data", appendTail);
+      proc.once("exit", (code) => {
+        if (this.children.get(session.id)?.proc === proc) this.children.delete(session.id);
+        if (typeof code === "number" && code !== 0) {
+          log.warn(
+            "host-agent",
+            `resumed session ${session.id.slice(0, 8)} exited (${code}): ${tail.trim().slice(-300)}`
+          );
+        }
+      });
+      log.info(
+        "host-agent",
+        `resumed session ${session.id.slice(0, 8)} pluginId=${session.pluginId.slice(0, 12)} (ACP)`
+      );
+    } catch (err) {
+      log.warn(
+        "host-agent",
+        `resume persisted session failed (best-effort): ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
   /**
    * Run the backend-supplied per-agent CLI install script (e.g.
    * `claude.ai/install.sh`, `npm i -g @openai/codex`). Best-effort + bounded:
@@ -37277,7 +37340,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.5" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.7" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -37788,7 +37851,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.5" : "unknown";
+  const v = true ? "2.61.7" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/dist/postinstall.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+"use strict";
+
+// src/postinstall.ts
+var c = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  green: "\x1B[32m",
+  cyan: "\x1B[36m",
+  violet: "\x1B[35m",
+  white: "\x1B[97m"
+};
+var lines = [
+  "",
+  `  ${c.violet}${c.bold}codeam-cli${c.reset}  ${c.dim}\u2014 Claude Code remote control${c.reset}`,
+  "",
+  `  ${c.dim}1.${c.reset} Pair your phone:`,
+  `     ${c.cyan}codeam pair${c.reset}`,
+  "",
+  `  ${c.dim}2.${c.reset} Launch Claude Code with mobile control:`,
+  `     ${c.cyan}codeam${c.reset}`,
+  "",
+  `  ${c.dim}Other commands:${c.reset}`,
+  `     ${c.white}codeam sessions${c.reset}   ${c.dim}list paired devices${c.reset}`,
+  `     ${c.white}codeam status${c.reset}     ${c.dim}show connection info${c.reset}`,
+  `     ${c.white}codeam logout${c.reset}     ${c.dim}remove all sessions${c.reset}`,
+  "",
+  `  ${c.dim}Requires Claude Code:${c.reset} ${c.green}npm install -g @anthropic-ai/claude-code${c.reset}`,
+  `  ${c.dim}Mobile app:${c.reset}           ${c.green}https://www.codeagent-mobile.com${c.reset}`,
+  ""
+];
+process.stdout.write(lines.join("\n") + "\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.5",
+  "version": "2.61.7",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -69,7 +69,7 @@
     "url": "https://github.com/sponsors/edgar-durand"
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   },
   "dependencies": {
     "@agentclientprotocol/claude-agent-acp": "0.59.0",