codeam-cli 2.61.5 → 2.61.8

package/CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.7] — 2026-07-16
+
+### Fixed
+
+- **cli:** Auto-resume the user's session on host-agent restart (no churn)
+- **cli:** Engines-compat test uses CommonJS require (was import.meta → tsc fail)
+
+## [2.61.5] — 2026-07-16
+
+### Added
+
+- **cli:** ACP chrome-leak canary + detector (stability monitor, part 2)
+- **ci:** Canary seeds onboarding + auths via in-house MiniMax backend
+
+### Fixed
+
+- **ci:** Canary auths by subscription (CLAUDE_CODE_OAUTH_TOKEN), not API key
+- **cli:** Stop the changeset reporter from spamming install/SDK files
+
 ## [2.61.4] — 2026-07-16
 
 ### Fixed

package/dist/index.js

@@ -5975,7 +5975,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.5" : "0.0.0-dev",
+    cliVersion: true ? "2.61.8" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -6156,7 +6156,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.5",
+  version: "2.61.8",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -6225,7 +6225,7 @@ var package_default = {
     url: "https://github.com/sponsors/edgar-durand"
   },
   engines: {
-    node: ">=20.0.0"
+    node: ">=22.0.0"
   },
   dependencies: {
     "@agentclientprotocol/claude-agent-acp": "0.59.0",
@@ -7299,7 +7299,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.5" ? { ideVersion: "2.61.5" } : {}
+      ..."2.61.8" ? { ideVersion: "2.61.8" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -17900,7 +17900,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.5" : null;
+  const current = true ? "2.61.8" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17917,7 +17917,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.5" : null;
+  const current = true ? "2.61.8" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17937,7 +17937,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.5" : null;
+  return true ? "2.61.8" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve8) => {
@@ -18254,6 +18254,15 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process23.s
   stdio: ["ignore", "pipe", "pipe"],
   detached: false
 });
+var defaultResumeSpawner = (env, cwd) => (0, import_node_child_process23.spawn)(process.execPath, [process.argv[1]], {
+  cwd,
+  // CODEAM_AUTO_APPROVE=1 → ACP path (baton off). CODEAM_RESUME_LATEST=1 →
+  // continue the user's most-recent conversation instead of opening an empty
+  // one (runAcpSession loads it via the ACP session/list RPC).
+  env: { ...process.env, ...env, CODEAM_AUTO_APPROVE: "1", CODEAM_RESUME_LATEST: "1" },
+  stdio: ["ignore", "pipe", "pipe"],
+  detached: false
+});
 var defaultOnIdentityRejected = () => {
   deleteHostIdentity();
   log.warn("host-agent", "host identity rejected by backend \u2014 wiped sealed identity, exiting");
@@ -18268,6 +18277,7 @@ var HostAgentSupervisor = class {
     this.identity = identity;
     this.deps = deps;
     this.spawnChild = deps.spawnChild ?? defaultSpawner;
+    this.resumeSpawner = deps.resumeSpawner ?? defaultResumeSpawner;
     this.resolveAgentAuth = deps.resolveAgentAuth ?? unsealAgentAuth;
     this.setupHeadroom = deps.setupHeadroom ?? setupHeadroomForSelfHosted;
     this.isHeadroomInstalled = deps.isHeadroomInstalled ?? (() => defaultHeadroomRunner.which("headroom"));
@@ -18284,6 +18294,7 @@ var HostAgentSupervisor = class {
   deps;
   children = /* @__PURE__ */ new Map();
   spawnChild;
+  resumeSpawner;
   resolveAgentAuth;
   setupHeadroom;
   /** Probe whether Headroom is already installed (defaults to `which headroom`). */
@@ -18344,6 +18355,7 @@ var HostAgentSupervisor = class {
     void this.beat();
     this.heartbeatTimer = setInterval(() => void this.beat(), HEARTBEAT_INTERVAL_MS);
     this.heartbeatTimer.unref?.();
+    this.resumePersistedSession();
     void reportSessionEvent(
       { hostId: this.identity.hostId, hostToken: this.identity.hostToken },
       { event: "reconcile", activeDeployIds: this.activeSessions().map((s) => s.id) }
@@ -18933,6 +18945,60 @@ var HostAgentSupervisor = class {
   spawnSessionChild(env, cwd, args2 = []) {
     return this.spawnChild({ ...env, ...readHeadroomChildEnv() }, cwd, args2);
   }
+  /**
+   * Auto-resume the user's last active session on supervisor boot (2026-07-16
+   * churn fix). Before this, a restart / self-update killed the session child
+   * and never re-spawned it — the session lost its heartbeat, went "CLI
+   * disconnected", and the user had to reconnect by hand (churn right after an
+   * update). Spawn bare `codeam` via the resume spawner (reconnects the SAME
+   * pluginId via start(), then heartbeats) so the session comes back on its own
+   * in its ORIGINAL ACP shape (self-hosted/codespace = ACP-only; the resume
+   * spawner sets CODEAM_AUTO_APPROVE=1 to keep the local baton/native-TUI OFF).
+   *
+   * Best-effort + guarded: no-op when there's no persisted session, when the
+   * persisted session lacks the reconnect material (pluginId + pollSecret +
+   * agent), or when a fresh deploy already owns a child this boot.
+   */
+  resumePersistedSession() {
+    try {
+      if (this.children.size > 0) return;
+      const session = getActiveSession();
+      if (!session || !session.pluginId || !session.pollSecret || !session.agent) return;
+      const cwd = process.cwd();
+      const proc = this.resumeSpawner({ ...readHeadroomChildEnv() }, cwd);
+      const child = {
+        deployId: session.id,
+        proc,
+        agent: session.agent,
+        startedAt: Date.now()
+      };
+      this.children.set(session.id, child);
+      let tail = "";
+      const appendTail = (buf) => {
+        tail = (tail + buf.toString("utf8")).slice(-2e3);
+      };
+      proc.stdout?.on("data", appendTail);
+      proc.stderr?.on("data", appendTail);
+      proc.once("exit", (code) => {
+        if (this.children.get(session.id)?.proc === proc) this.children.delete(session.id);
+        if (typeof code === "number" && code !== 0) {
+          log.warn(
+            "host-agent",
+            `resumed session ${session.id.slice(0, 8)} exited (${code}): ${tail.trim().slice(-300)}`
+          );
+        }
+      });
+      log.info(
+        "host-agent",
+        `resumed session ${session.id.slice(0, 8)} pluginId=${session.pluginId.slice(0, 12)} (ACP)`
+      );
+    } catch (err) {
+      log.warn(
+        "host-agent",
+        `resume persisted session failed (best-effort): ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
   /**
    * Run the backend-supplied per-agent CLI install script (e.g.
    * `claude.ai/install.sh`, `npm i -g @openai/codex`). Best-effort + bounded:
@@ -29005,6 +29071,7 @@ var AcpClient = class {
    *  the conversation — whereas one without it falls back to a fresh
    *  `session/new`. Set once during {@link startOnce}. */
   supportsLoadSession = false;
+  supportsListSessions = false;
   /** Idle watchdog for the in-flight prompt. The `Client` handlers
    *  (`sessionUpdate` / `requestPermission`) reach for this to keep
    *  the turn alive while the adapter is demonstrably working. Null
@@ -29189,6 +29256,7 @@ var AcpClient = class {
         `initialize \u2190 ok protocolVersion=${initialize.protocolVersion} agentCaps=${JSON.stringify(initialize.agentCapabilities ?? {}).slice(0, 200)}`
       );
       this.supportsLoadSession = initialize.agentCapabilities?.loadSession === true;
+      this.supportsListSessions = !!initialize.agentCapabilities?.sessionCapabilities?.list;
       log.info("acpClient", "newSession \u2192 sending");
       let startupTimer;
       const startupFailure = new Promise((_2, reject) => {
@@ -29432,14 +29500,44 @@ var AcpClient = class {
       return;
     }
     log.info("acpClient", `loadSession \u2192 sessionId=${sessionId.slice(0, 8)}`);
-    await this.connection.loadSession({
-      sessionId,
-      cwd: this.opts.cwd,
-      mcpServers: this.opts.mcpServers ?? []
-    });
+    this.opts.beginLoadReplay?.();
+    try {
+      await this.connection.loadSession({
+        sessionId,
+        cwd: this.opts.cwd,
+        mcpServers: this.opts.mcpServers ?? []
+      });
+    } finally {
+      this.opts.endLoadReplay?.();
+    }
     this.sessionId = sessionId;
     log.info("acpClient", `loadSession \u2190 ok sessionId=${sessionId.slice(0, 8)}`);
   }
+  /**
+   * Enumerate the workspace's conversations via the ACP `session/list` RPC.
+   * Agent-agnostic — works for ANY adapter that advertises
+   * `sessionCapabilities.list` (claude/codex/gemini alike), so the mobile RECENT
+   * list no longer depends on per-agent JSONL scanning. Maps SessionInfo (id +
+   * agent-authored title + updatedAt) to the backend's RECENT-list shape.
+   *
+   * Returns null when the agent doesn't advertise `list` (caller falls back or
+   * skips). Best-effort — never throws out to the caller.
+   */
+  async listSessions() {
+    if (!this.connection || !this.supportsListSessions) return null;
+    try {
+      const res = await this.connection.listSessions({ cwd: this.opts.cwd });
+      return (res.sessions ?? []).map((s) => ({
+        id: s.sessionId,
+        summary: s.title ?? "",
+        // updatedAt is an ISO string; fall back to now on absent/unparseable.
+        timestamp: s.updatedAt ? Date.parse(s.updatedAt) || Date.now() : Date.now()
+      }));
+    } catch (err) {
+      log.trace("acpClient", "listSessions failed (best-effort)", err);
+      return null;
+    }
+  }
   /**
    * Switch the active session's model via the non-standard
    * `session/set_model` RPC. The standard ACP SDK doesn't expose
@@ -32267,17 +32365,17 @@ var AcpHistory = class {
   async flush() {
     if (this.summary === null || this.messages.length === 0) return;
     const timestamp = Date.now();
+    const current = { id: this.opts.acpSessionId, summary: this.summary, timestamp };
+    let sessions3 = [current];
+    const listed = this.opts.listSessions ? await this.opts.listSessions() : null;
+    if (listed && listed.length > 0) {
+      sessions3 = listed.map(
+        (s) => s.id === this.opts.acpSessionId && !s.summary ? { ...s, summary: this.summary } : s
+      );
+      if (!sessions3.some((s) => s.id === this.opts.acpSessionId)) sessions3.unshift(current);
+    }
     await Promise.all([
-      this.publisher.pushSessionList({
-        agentId: this.opts.agent,
-        sessions: [
-          {
-            id: this.opts.acpSessionId,
-            summary: this.summary,
-            timestamp
-          }
-        ]
-      }),
+      this.publisher.pushSessionList({ agentId: this.opts.agent, sessions: sessions3 }),
       this.publisher.pushConversation({
         agentId: this.opts.agent,
         sessionId: this.opts.acpSessionId,
@@ -32323,6 +32421,10 @@ function computeAdapterExtraEnv(params) {
   );
   return env;
 }
+function pickLatestResumableConversation(sessions3, currentId) {
+  const prior = (sessions3 ?? []).filter((s) => s.id !== currentId).sort((a, b) => b.timestamp - a.timestamp)[0];
+  return prior?.id ?? null;
+}
 async function runAcpSession(opts) {
   const publisher = new AcpPublisher({
     sessionId: opts.sessionId,
@@ -32471,16 +32573,24 @@ async function runAcpSession(opts) {
     });
     return;
   }
-  const {
-    sessionId: acpSessionId,
-    initialize,
-    model: handshakeModel,
-    tier: handshakeTier
-  } = handshake;
+  let acpSessionId = handshake.sessionId;
+  const { initialize, model: handshakeModel, tier: handshakeTier } = handshake;
   log.trace(
     "acpRunner",
     `adapter handshake ok protocolVersion=${initialize.protocolVersion} sessionId=${acpSessionId.slice(0, 8)}`
   );
+  if (process.env.CODEAM_RESUME_LATEST === "1") {
+    try {
+      const priorId = pickLatestResumableConversation(await client3.listSessions(), acpSessionId);
+      if (priorId) {
+        await client3.loadSession(priorId);
+        acpSessionId = priorId;
+        log.info("acpRunner", `auto-resumed latest conversation ${priorId.slice(0, 8)}`);
+      }
+    } catch (err) {
+      log.trace("acpRunner", "auto-resume-latest failed (best-effort)", err);
+    }
+  }
   showSuccess(`${opts.agent} online (ACP) \u2014 awaiting prompts from mobile.`);
   showRelayNotice();
   void publisher.publishOutput({
@@ -32502,7 +32612,14 @@ async function runAcpSession(opts) {
   });
   const runtime = createInteractiveAgentStrategy(opts.agent, createOsStrategy());
   const models = await runtime.listModels();
-  const history = new AcpHistory(publisher, { agent: opts.agent, acpSessionId });
+  const history = new AcpHistory(publisher, {
+    agent: opts.agent,
+    acpSessionId,
+    // Agent-agnostic RECENT list: enumerate via the ACP session/list RPC (any
+    // adapter advertising sessionCapabilities.list). Returns null on unsupported
+    // agents → flush() falls back to the current session only.
+    listSessions: () => client3.listSessions()
+  });
   const jsonlHistory = new HistoryService(runtime, opts.pluginId, opts.cwd, {
     pluginAuthToken: opts.pluginAuthToken
   });
@@ -37277,7 +37394,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.5" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.8" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto12.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -37788,7 +37905,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.5" : "unknown";
+  const v = true ? "2.61.8" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/dist/postinstall.js

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+"use strict";
+
+// src/postinstall.ts
+var c = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  green: "\x1B[32m",
+  cyan: "\x1B[36m",
+  violet: "\x1B[35m",
+  white: "\x1B[97m"
+};
+var lines = [
+  "",
+  `  ${c.violet}${c.bold}codeam-cli${c.reset}  ${c.dim}\u2014 Claude Code remote control${c.reset}`,
+  "",
+  `  ${c.dim}1.${c.reset} Pair your phone:`,
+  `     ${c.cyan}codeam pair${c.reset}`,
+  "",
+  `  ${c.dim}2.${c.reset} Launch Claude Code with mobile control:`,
+  `     ${c.cyan}codeam${c.reset}`,
+  "",
+  `  ${c.dim}Other commands:${c.reset}`,
+  `     ${c.white}codeam sessions${c.reset}   ${c.dim}list paired devices${c.reset}`,
+  `     ${c.white}codeam status${c.reset}     ${c.dim}show connection info${c.reset}`,
+  `     ${c.white}codeam logout${c.reset}     ${c.dim}remove all sessions${c.reset}`,
+  "",
+  `  ${c.dim}Requires Claude Code:${c.reset} ${c.green}npm install -g @anthropic-ai/claude-code${c.reset}`,
+  `  ${c.dim}Mobile app:${c.reset}           ${c.green}https://www.codeagent-mobile.com${c.reset}`,
+  ""
+];
+process.stdout.write(lines.join("\n") + "\n");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.5",
+  "version": "2.61.8",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -69,7 +69,7 @@
     "url": "https://github.com/sponsors/edgar-durand"
   },
   "engines": {
-    "node": ">=20.0.0"
+    "node": ">=22.0.0"
   },
   "dependencies": {
     "@agentclientprotocol/claude-agent-acp": "0.59.0",