codeam-cli 2.61.70 → 2.61.71

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.61.70] — 2026-07-28
+
+### Added
+
+- **cli:** Self_hosted_cleanup — rm a deleted session's on-disk workspace on the box
+
 ## [2.61.69] — 2026-07-28
 
 ### Added

package/dist/index.js

@@ -7074,7 +7074,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.61.70" : "0.0.0-dev",
+    cliVersion: true ? "2.61.71" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -7255,7 +7255,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.61.70",
+  version: "2.61.71",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -8427,7 +8427,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.61.70" ? { ideVersion: "2.61.70" } : {}
+      ..."2.61.71" ? { ideVersion: "2.61.71" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -8763,15 +8763,15 @@ var FileWatcherService = class {
       );
       return;
     }
-    const chokidar2 = _chokidarSeam.load();
-    if (!chokidar2) {
+    const chokidar3 = _chokidarSeam.load();
+    if (!chokidar3) {
       log.warn(
         "fileWatcher",
         `chokidar unavailable \u2014 file change emission disabled`
       );
       return;
     }
-    const watcher = chokidar2.watch(this.opts.workingDir, {
+    const watcher = chokidar3.watch(this.opts.workingDir, {
       ignored: [
         /(^|[\\/])\../,
         // dot-files & dot-dirs (.git, .next, .expo, .DS_Store, …)
@@ -19536,7 +19536,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.61.70" : null;
+  const current = true ? "2.61.71" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19553,7 +19553,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.61.70" : null;
+  const current = true ? "2.61.71" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -19573,7 +19573,7 @@ var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 function currentCliVersion() {
-  return true ? "2.61.70" : null;
+  return true ? "2.61.71" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve9) => {
@@ -23300,12 +23300,12 @@ var BeadsWatcher = class {
   /** Start tailing the change feed. Idempotent (second call is a no-op). */
   start() {
     if (this.watcher || this.stopped) return;
-    const chokidar2 = _chokidarSeam2.load();
-    if (!chokidar2) {
+    const chokidar3 = _chokidarSeam2.load();
+    if (!chokidar3) {
       log.warn("beads", "chokidar unavailable \u2014 beads watcher disabled");
       return;
     }
-    const watcher = chokidar2.watch(this.feedPath, {
+    const watcher = chokidar3.watch(this.feedPath, {
       ignoreInitial: false,
       // push the current state once on start
       persistent: true,
@@ -33633,6 +33633,38 @@ async function reportCredentialInvalid(opts, fetchImpl = fetch) {
   } catch {
   }
 }
+async function postCredentialSync(opts, fetchImpl = fetch) {
+  const url2 = `${resolveApiBaseUrl()}/api/plugin/agents/${encodeURIComponent(opts.agent)}/credential-sync`;
+  const body = JSON.stringify({
+    sessionId: opts.sessionId,
+    pluginId: opts.pluginId,
+    method: opts.method,
+    credential: opts.credential,
+    ...opts.agentState ? { agentState: opts.agentState } : {}
+  });
+  try {
+    const makeHeaders = (token) => ({
+      "Content-Type": "application/json",
+      "X-Plugin-Auth-Token": token
+    });
+    const response = await fetchImpl(url2, {
+      method: "POST",
+      headers: makeHeaders(opts.pluginAuthToken),
+      body
+    });
+    if (response.status === 401 || response.status === 403) {
+      const freshToken = await fetchCurrentPluginAuthToken(
+        opts.sessionId,
+        opts.pluginId,
+        opts.pollSecret
+      );
+      if (freshToken !== null) {
+        await fetchImpl(url2, { method: "POST", headers: makeHeaders(freshToken), body });
+      }
+    }
+  } catch {
+  }
+}
 async function postBudgetReached(opts, fetchImpl = fetch) {
   const url2 = `${resolveApiBaseUrl()}/api/sessions/${encodeURIComponent(opts.sessionId)}/headroom-budget-reached`;
   try {
@@ -36174,6 +36206,56 @@ function fetchQuotaUsage(runtime, historySvc) {
   });
 }
 
+// src/agents/claude/credential-sync.ts
+var import_chokidar2 = __toESM(require("chokidar"));
+var crypto5 = __toESM(require("crypto"));
+var CLAUDE_PUBLIC_AGENT_ID = "claude_code";
+function startClaudeCredentialSync(opts) {
+  const push = opts.push ?? postCredentialSync;
+  const read2 = opts.read ?? extractLocalClaudeToken;
+  let lastHash = "";
+  let stopped = false;
+  const syncNow = async () => {
+    if (stopped) return;
+    try {
+      const tok = await read2();
+      if (!tok || !tok.credential) return;
+      const hash = crypto5.createHash("sha256").update(tok.credential).digest("hex");
+      if (hash === lastHash) return;
+      lastHash = hash;
+      await push({
+        agent: CLAUDE_PUBLIC_AGENT_ID,
+        sessionId: opts.sessionId,
+        pluginId: opts.pluginId,
+        pluginAuthToken: opts.pluginAuthToken,
+        pollSecret: opts.pollSecret,
+        method: "oauth",
+        credential: tok.credential,
+        agentState: tok.agentState
+      });
+      log.trace("cred-sync", "pushed fresh claude credential to the vault");
+    } catch {
+    }
+  };
+  const watcher = import_chokidar2.default.watch(claudeCredentialsPaths(), {
+    ignoreInitial: true,
+    // Debounce a rotation's multi-write until the file settles before reading.
+    awaitWriteFinish: { stabilityThreshold: 400, pollInterval: 100 }
+  });
+  watcher.on("add", () => void syncNow());
+  watcher.on("change", () => void syncNow());
+  watcher.on("error", () => {
+  });
+  void syncNow();
+  return {
+    syncNow,
+    stop: async () => {
+      stopped = true;
+      await watcher.close().catch(() => void 0);
+    }
+  };
+}
+
 // src/beads/workflow-hint.ts
 var fs66 = __toESM(require("fs"));
 var path72 = __toESM(require("path"));
@@ -37069,6 +37151,15 @@ async function start(requestedAgent, presetSession) {
   process.once("exit", () => {
     localHeadroomReporter?.stop();
   });
+  const claudeCredentialSync = session.agent === "claude" && session.pluginAuthToken ? startClaudeCredentialSync({
+    sessionId: session.id,
+    pluginId,
+    pluginAuthToken: session.pluginAuthToken,
+    pollSecret: session.pollSecret
+  }) : null;
+  process.once("exit", () => {
+    void claudeCredentialSync?.stop();
+  });
   if (!isLocalSession()) ensureClaudeOnboarded(cwd);
   let beads = null;
   const getBeads = () => beads;
@@ -39911,7 +40002,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.61.70" : "0.0.0-dev";
+  const cliVersion = true ? "2.61.71" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -40433,7 +40524,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.61.70" : "unknown";
+  const v = true ? "2.61.71" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.61.70",
+  "version": "2.61.71",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",