codeam-cli 2.61.69 → 2.61.71

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.70] — 2026-07-28
+
+### Added
+
+- **cli:** Self_hosted_cleanup — rm a deleted session's on-disk workspace on the box
+
+## [2.61.69] — 2026-07-28
+
+### Added
+
+- **cli:** ACP internals guard — deny agent access to CodeAgent platform files on managed deploys
+
 ## [2.61.68] — 2026-07-28
 
 ### Changed

package/dist/index.js

@@ -7074,7 +7074,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.69" : "0.0.0-dev",
+    cliVersion: true ? "2.61.71" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -7255,7 +7255,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.69",
+  version: "2.61.71",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -8427,7 +8427,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.69" ? { ideVersion: "2.61.69" } : {}
+      ..."2.61.71" ? { ideVersion: "2.61.71" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -8763,15 +8763,15 @@ var FileWatcherService = class {
       );
       return;
     }
-    const chokidar2 = _chokidarSeam.load();
-    if (!chokidar2) {
+    const chokidar3 = _chokidarSeam.load();
+    if (!chokidar3) {
       log.warn(
         "fileWatcher",
         `chokidar unavailable \u2014 file change emission disabled`
       );
       return;
     }
-    const watcher = chokidar2.watch(this.opts.workingDir, {
+    const watcher = chokidar3.watch(this.opts.workingDir, {
       ignored: [
         /(^|[\\/])\../,
         // dot-files & dot-dirs (.git, .next, .expo, .DS_Store, …)
@@ -19536,7 +19536,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.69" : null;
+  const current = true ? "2.61.71" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19553,7 +19553,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.69" : null;
+  const current = true ? "2.61.71" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19573,7 +19573,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.69" : null;
+  return true ? "2.61.71" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -19807,6 +19807,9 @@ function isDeployPayload(p2) {
 function isStopPayload(p2) {
   return typeof p2.sessionId === "string";
 }
+function isCleanupPayload(p2) {
+  return typeof p2.deployId === "string" && p2.deployId.length > 0;
+}
 var FLEET_CONTAINER_NAME_RE = /^codeam-box-[a-z0-9]+$/;
 function isFleetContainerName(v) {
   return typeof v === "string" && FLEET_CONTAINER_NAME_RE.test(v);
@@ -20250,6 +20253,14 @@ var HostAgentSupervisor = class {
       this.stopChild(cmd.payload.sessionId);
       return;
     }
+    if (cmd.type === "self_hosted_cleanup") {
+      if (!isCleanupPayload(cmd.payload)) {
+        log.warn("host-agent", `ignoring malformed self_hosted_cleanup id=${cmd.id}`);
+        return;
+      }
+      this.cleanupWorkspace(cmd.payload.deployId);
+      return;
+    }
     if (cmd.type === "host_list_dir") {
       await this.listDir(cmd);
       return;
@@ -20838,6 +20849,44 @@ var HostAgentSupervisor = class {
     }
     this.children.delete(child.deployId);
   }
+  /**
+   * Handle `self_hosted_cleanup { deployId }` — the app deleted this deploy's
+   * session. Remove its on-disk workspace so a persistent box doesn't accumulate
+   * one dir per deleted session. Stops any still-running child for the deploy
+   * first (the delete also pushes `session_terminated` to the child, but this is
+   * race-safe), then removes the two `~/.codeam/...<deployId>` dirs.
+   *
+   * Idempotent (`force: true` → no throw if already gone) and inherently safe:
+   * the dir is keyed by the UNIQUE `deployId`, so it can never be another live
+   * session's workspace, and these paths only ever exist for a cloned
+   * self-hosted deploy (a local / absolute-path target has no such dir → no-op).
+   */
+  cleanupWorkspace(deployId) {
+    const short = deployId.slice(0, 8);
+    const child = this.children.get(deployId);
+    if (child) {
+      try {
+        child.proc.kill("SIGTERM");
+      } catch {
+      }
+      this.children.delete(deployId);
+    }
+    const dirs = [
+      path46.join(selfHostedWorkspaceRoot(), deployId),
+      path46.join(os38.homedir(), ".codeam", "house-claude", deployId)
+    ];
+    for (const dir of dirs) {
+      try {
+        fs43.rmSync(dir, { recursive: true, force: true });
+      } catch (err) {
+        log.warn(
+          "host-agent",
+          `cleanup: failed to remove ${dir}: ${err.message}`
+        );
+      }
+    }
+    log.info("host-agent", `cleaned up workspace for deleted deploy=${short}`);
+  }
   /**
    * Handle `self_hosted_refresh_credentials` (the user re-linked the agent).
    * Unseal the fresh credential and re-provision the agent's on-disk auth IN
@@ -23251,12 +23300,12 @@ var BeadsWatcher = class {
   /** Start tailing the change feed. Idempotent (second call is a no-op). */
   start() {
     if (this.watcher || this.stopped) return;
-    const chokidar2 = _chokidarSeam2.load();
-    if (!chokidar2) {
+    const chokidar3 = _chokidarSeam2.load();
+    if (!chokidar3) {
       log.warn("beads", "chokidar unavailable \u2014 beads watcher disabled");
       return;
     }
-    const watcher = chokidar2.watch(this.feedPath, {
+    const watcher = chokidar3.watch(this.feedPath, {
       ignoreInitial: false,
       // push the current state once on start
       persistent: true,
@@ -24535,7 +24584,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
   const readdirSync12 = deps?.readdirSync ?? fs57.readdirSync;
   const statSync15 = deps?.statSync ?? fs57.statSync;
-  const rmSync7 = deps?.rmSync ?? fs57.rmSync;
+  const rmSync8 = deps?.rmSync ?? fs57.rmSync;
   let removed = 0;
   let entries;
   try {
@@ -24549,7 +24598,7 @@ function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
     try {
       const st3 = statSync15(full);
       if (now - st3.mtimeMs < STALE_STAGING_AGE_MS) continue;
-      rmSync7(full, { recursive: true, force: true });
+      rmSync8(full, { recursive: true, force: true });
       removed++;
     } catch {
     }
@@ -33584,6 +33633,38 @@ async function reportCredentialInvalid(opts, fetchImpl = fetch) {
   } catch {
   }
 }
+async function postCredentialSync(opts, fetchImpl = fetch) {
+  const url2 = `${resolveApiBaseUrl()}/api/plugin/agents/${encodeURIComponent(opts.agent)}/credential-sync`;
+  const body = JSON.stringify({
+    sessionId: opts.sessionId,
+    pluginId: opts.pluginId,
+    method: opts.method,
+    credential: opts.credential,
+    ...opts.agentState ? { agentState: opts.agentState } : {}
+  });
+  try {
+    const makeHeaders = (token) => ({
+      "Content-Type": "application/json",
+      "X-Plugin-Auth-Token": token
+    });
+    const response = await fetchImpl(url2, {
+      method: "POST",
+      headers: makeHeaders(opts.pluginAuthToken),
+      body
+    });
+    if (response.status === 401 || response.status === 403) {
+      const freshToken = await fetchCurrentPluginAuthToken(
+        opts.sessionId,
+        opts.pluginId,
+        opts.pollSecret
+      );
+      if (freshToken !== null) {
+        await fetchImpl(url2, { method: "POST", headers: makeHeaders(freshToken), body });
+      }
+    }
+  } catch {
+  }
+}
 async function postBudgetReached(opts, fetchImpl = fetch) {
   const url2 = `${resolveApiBaseUrl()}/api/sessions/${encodeURIComponent(opts.sessionId)}/headroom-budget-reached`;
   try {
@@ -36125,6 +36206,56 @@ function fetchQuotaUsage(runtime, historySvc) {
   });
 }
 
+// src/agents/claude/credential-sync.ts
+var import_chokidar2 = __toESM(require("chokidar"));
+var crypto5 = __toESM(require("crypto"));
+var CLAUDE_PUBLIC_AGENT_ID = "claude_code";
+function startClaudeCredentialSync(opts) {
+  const push = opts.push ?? postCredentialSync;
+  const read2 = opts.read ?? extractLocalClaudeToken;
+  let lastHash = "";
+  let stopped = false;
+  const syncNow = async () => {
+    if (stopped) return;
+    try {
+      const tok = await read2();
+      if (!tok || !tok.credential) return;
+      const hash = crypto5.createHash("sha256").update(tok.credential).digest("hex");
+      if (hash === lastHash) return;
+      lastHash = hash;
+      await push({
+        agent: CLAUDE_PUBLIC_AGENT_ID,
+        sessionId: opts.sessionId,
+        pluginId: opts.pluginId,
+        pluginAuthToken: opts.pluginAuthToken,
+        pollSecret: opts.pollSecret,
+        method: "oauth",
+        credential: tok.credential,
+        agentState: tok.agentState
+      });
+      log.trace("cred-sync", "pushed fresh claude credential to the vault");
+    } catch {
+    }
+  };
+  const watcher = import_chokidar2.default.watch(claudeCredentialsPaths(), {
+    ignoreInitial: true,
+    // Debounce a rotation's multi-write until the file settles before reading.
+    awaitWriteFinish: { stabilityThreshold: 400, pollInterval: 100 }
+  });
+  watcher.on("add", () => void syncNow());
+  watcher.on("change", () => void syncNow());
+  watcher.on("error", () => {
+  });
+  void syncNow();
+  return {
+    syncNow,
+    stop: async () => {
+      stopped = true;
+      await watcher.close().catch(() => void 0);
+    }
+  };
+}
+
 // src/beads/workflow-hint.ts
 var fs66 = __toESM(require("fs"));
 var path72 = __toESM(require("path"));
@@ -37020,6 +37151,15 @@ async function start(requestedAgent, presetSession) {
   process.once("exit", () => {
     localHeadroomReporter?.stop();
   });
+  const claudeCredentialSync = session.agent === "claude" && session.pluginAuthToken ? startClaudeCredentialSync({
+    sessionId: session.id,
+    pluginId,
+    pluginAuthToken: session.pluginAuthToken,
+    pollSecret: session.pollSecret
+  }) : null;
+  process.once("exit", () => {
+    void claudeCredentialSync?.stop();
+  });
   if (!isLocalSession()) ensureClaudeOnboarded(cwd);
   let beads = null;
   const getBeads = () => beads;
@@ -39862,7 +40002,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.69" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.71" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -40384,7 +40524,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.69" : "unknown";
+  const v = true ? "2.61.71" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.69",
+  "version": "2.61.71",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",