codeam-cli 2.61.69 → 2.61.70

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.69] — 2026-07-28
+
+### Added
+
+- **cli:** ACP internals guard — deny agent access to CodeAgent platform files on managed deploys
+
 ## [2.61.68] — 2026-07-28
 
 ### Changed

package/dist/index.js

@@ -7074,7 +7074,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.69" : "0.0.0-dev",
+    cliVersion: true ? "2.61.70" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -7255,7 +7255,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.69",
+  version: "2.61.70",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -8427,7 +8427,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.69" ? { ideVersion: "2.61.69" } : {}
+      ..."2.61.70" ? { ideVersion: "2.61.70" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -19536,7 +19536,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.69" : null;
+  const current = true ? "2.61.70" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19553,7 +19553,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.69" : null;
+  const current = true ? "2.61.70" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19573,7 +19573,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.69" : null;
+  return true ? "2.61.70" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -19807,6 +19807,9 @@ function isDeployPayload(p2) {
 function isStopPayload(p2) {
   return typeof p2.sessionId === "string";
 }
+function isCleanupPayload(p2) {
+  return typeof p2.deployId === "string" && p2.deployId.length > 0;
+}
 var FLEET_CONTAINER_NAME_RE = /^codeam-box-[a-z0-9]+$/;
 function isFleetContainerName(v) {
   return typeof v === "string" && FLEET_CONTAINER_NAME_RE.test(v);
@@ -20250,6 +20253,14 @@ var HostAgentSupervisor = class {
       this.stopChild(cmd.payload.sessionId);
       return;
     }
+    if (cmd.type === "self_hosted_cleanup") {
+      if (!isCleanupPayload(cmd.payload)) {
+        log.warn("host-agent", `ignoring malformed self_hosted_cleanup id=${cmd.id}`);
+        return;
+      }
+      this.cleanupWorkspace(cmd.payload.deployId);
+      return;
+    }
     if (cmd.type === "host_list_dir") {
       await this.listDir(cmd);
       return;
@@ -20838,6 +20849,44 @@ var HostAgentSupervisor = class {
     }
     this.children.delete(child.deployId);
   }
+  /**
+   * Handle `self_hosted_cleanup { deployId }` — the app deleted this deploy's
+   * session. Remove its on-disk workspace so a persistent box doesn't accumulate
+   * one dir per deleted session. Stops any still-running child for the deploy
+   * first (the delete also pushes `session_terminated` to the child, but this is
+   * race-safe), then removes the two `~/.codeam/...<deployId>` dirs.
+   *
+   * Idempotent (`force: true` → no throw if already gone) and inherently safe:
+   * the dir is keyed by the UNIQUE `deployId`, so it can never be another live
+   * session's workspace, and these paths only ever exist for a cloned
+   * self-hosted deploy (a local / absolute-path target has no such dir → no-op).
+   */
+  cleanupWorkspace(deployId) {
+    const short = deployId.slice(0, 8);
+    const child = this.children.get(deployId);
+    if (child) {
+      try {
+        child.proc.kill("SIGTERM");
+      } catch {
+      }
+      this.children.delete(deployId);
+    }
+    const dirs = [
+      path46.join(selfHostedWorkspaceRoot(), deployId),
+      path46.join(os38.homedir(), ".codeam", "house-claude", deployId)
+    ];
+    for (const dir of dirs) {
+      try {
+        fs43.rmSync(dir, { recursive: true, force: true });
+      } catch (err) {
+        log.warn(
+          "host-agent",
+          `cleanup: failed to remove ${dir}: ${err.message}`
+        );
+      }
+    }
+    log.info("host-agent", `cleaned up workspace for deleted deploy=${short}`);
+  }
   /**
    * Handle `self_hosted_refresh_credentials` (the user re-linked the agent).
    * Unseal the fresh credential and re-provision the agent's on-disk auth IN
@@ -24535,7 +24584,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
   const readdirSync12 = deps?.readdirSync ?? fs57.readdirSync;
   const statSync15 = deps?.statSync ?? fs57.statSync;
-  const rmSync7 = deps?.rmSync ?? fs57.rmSync;
+  const rmSync8 = deps?.rmSync ?? fs57.rmSync;
   let removed = 0;
   let entries;
   try {
@@ -24549,7 +24598,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
     try {
       const st3 = statSync15(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
-      rmSync7(full, { recursive: true, force: true });
+      rmSync8(full, { recursive: true, force: true });
       removed++;
     } catch {
     }
@@ -39862,7 +39911,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.69" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.70" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -40384,7 +40433,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.69" : "unknown";
+  const v = true ? "2.61.70" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.69",
+  "version": "2.61.70",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",