codeam-cli 2.65.17 → 2.66.1

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.66.0] — 2026-08-21
+
+### Added
+
+- **cli:** Handle fleet_prune_host — reclaim Docker residue on the fleet host
+
+### Documentation
+
+- **cli:** Document the least-privilege Headroom installer resolution
+
+## [2.65.17] — 2026-08-21
+
+### Fixed
+
+- **cli:** Install Headroom without root by resolving uv before sudo (#648)
+
 ## [2.65.16] — 2026-08-20
 
 ### Added

package/dist/index.js

@@ -8081,7 +8081,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.65.17" : "0.0.0-dev",
+    cliVersion: true ? "2.66.1" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8323,7 +8323,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.65.17",
+  version: "2.66.1",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9845,7 +9845,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.65.17" ? { ideVersion: "2.65.17" } : {}
+      ..."2.66.1" ? { ideVersion: "2.66.1" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -22070,7 +22070,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.65.17" : null;
+  const current2 = true ? "2.66.1" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22087,7 +22087,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.65.17" : null;
+  const current2 = true ? "2.66.1" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22106,8 +22106,23 @@ var SELF_UPDATE_PKG = "codeam-cli";
 var SELF_UPDATE_INTERVAL_MS = 60 * 60 * 1e3;
 var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
+var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
+var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.65.17" : null;
+  return true ? "2.66.1" : null;
+}
+async function installedVersion(deps) {
+  const ls = await deps.run(
+    "npm",
+    ["ls", "-g", "--depth=0", "--json", SELF_UPDATE_PKG],
+    SELF_UPDATE_LS_TIMEOUT_MS
+  );
+  try {
+    const parsed = JSON.parse(ls.stdout);
+    return parsed.dependencies?.[SELF_UPDATE_PKG]?.version ?? null;
+  } catch {
+    return null;
+  }
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve10) => {
@@ -22118,13 +22133,28 @@ function runCmd(cmd, args2, timeoutMs) {
   });
 }
 async function runSelfUpdate() {
+  return runSelfUpdateWith({
+    run: runCmd,
+    currentVersion: currentCliVersion,
+    isRoot: () => process.getuid?.() === 0
+  });
+}
+async function runSelfUpdateWith(deps) {
   try {
-    const current2 = currentCliVersion();
+    const current2 = deps.currentVersion();
     if (!current2) {
       log.trace("host-agent", "self-update: no __CLI_VERSION__ \u2014 skipping");
       return { status: "skipped" };
     }
-    const view = await runCmd(
+    const onDisk = await installedVersion(deps);
+    if (onDisk && compareSemver(onDisk, current2) > 0) {
+      log.info(
+        "host-agent",
+        `self-update: ${onDisk} already installed on disk (running ${current2}) \u2014 restarting onto it`
+      );
+      return { status: "updated", version: onDisk };
+    }
+    const view = await deps.run(
       "npm",
       ["view", SELF_UPDATE_PKG, "version"],
       SELF_UPDATE_VIEW_TIMEOUT_MS
@@ -22143,11 +22173,18 @@ async function runSelfUpdate() {
     }
     log.info("host-agent", `self-update: ${current2} \u2192 ${latest} available \u2014 installing`);
     const installArgs = ["install", "-g", `${SELF_UPDATE_PKG}@latest`];
-    let install = await runCmd("npm", installArgs, SELF_UPDATE_INSTALL_TIMEOUT_MS);
-    const isRoot = process.getuid?.() === 0;
-    if (install.code !== 0 && !isRoot && /EACCES/i.test(install.stderr)) {
-      log.info("host-agent", "self-update: install hit EACCES \u2014 retrying with sudo");
-      install = await runCmd("sudo", ["npm", ...installArgs], SELF_UPDATE_INSTALL_TIMEOUT_MS);
+    let install = await deps.run("npm", installArgs, SELF_UPDATE_INSTALL_TIMEOUT_MS);
+    if (install.code !== 0 && !deps.isRoot() && /EACCES/i.test(install.stderr)) {
+      const canSudo = await deps.run("sudo", ["-n", "true"], SUDO_PREFLIGHT_TIMEOUT_MS);
+      if (canSudo.code === 0) {
+        log.info("host-agent", "self-update: install hit EACCES \u2014 retrying with sudo");
+        install = await deps.run("sudo", ["npm", ...installArgs], SELF_UPDATE_INSTALL_TIMEOUT_MS);
+      } else {
+        log.warn(
+          "host-agent",
+          "self-update: the npm global prefix is not writable by this user and passwordless sudo is unavailable \u2014 install codeam-cli under a user-writable prefix, or let a privileged agent on this host install it (this box restarts onto it automatically)"
+        );
+      }
     }
     if (install.code !== 0) {
       log.warn(
@@ -22156,7 +22193,7 @@ async function runSelfUpdate() {
       );
       return { status: "skipped" };
     }
-    const after = await runCmd(
+    const after = await deps.run(
       "npm",
       ["view", SELF_UPDATE_PKG, "version"],
       SELF_UPDATE_VIEW_TIMEOUT_MS
@@ -22385,6 +22422,11 @@ function fleetUserIdFromContainerName(containerName) {
 function isMissingContainerError(stderr) {
   return /no such container/i.test(stderr);
 }
+function isFleetPruneHostPayload(v) {
+  if (typeof v !== "object" || v === null) return false;
+  const p2 = v;
+  return typeof p2.images === "boolean" && typeof p2.buildCache === "boolean";
+}
 function isMissingVolumeError(stderr) {
   return /no such volume/i.test(stderr);
 }
@@ -22800,6 +22842,14 @@ var HostAgentSupervisor = class {
       await this.fleetDeleteBox(cmd.payload);
       return;
     }
+    if (cmd.type === "fleet_prune_host") {
+      if (!isFleetPruneHostPayload(cmd.payload)) {
+        log.warn("host-agent", `ignoring malformed fleet_prune_host id=${cmd.id}`);
+        return;
+      }
+      await this.fleetPruneHost(cmd.payload);
+      return;
+    }
     if (cmd.type === "self_hosted_deploy") {
       if (!isDeployPayload(cmd.payload)) {
         log.warn("host-agent", `ignoring malformed self_hosted_deploy id=${cmd.id}`);
@@ -23011,6 +23061,39 @@ var HostAgentSupervisor = class {
   /** `fleet_stop_box` — sleep an idle box (`docker stop`). MUST be
    *  idempotent — the backend's reap sweeps may re-send a stop for a box
    *  the host already stopped/removed; "No such container" is success. */
+  /**
+   * `fleet_prune_host` — reclaim Docker residue. Best-effort and idempotent: a
+   * prune with nothing to collect exits 0 with "Total reclaimed space: 0B".
+   *
+   * ⚠️ Only ever `image prune` (dangling) and `builder prune`. NEVER
+   * `container prune` (a stopped fleet container is a SLEEPING BOX) and NEVER
+   * `volume prune` (a box's volume is the user's workspace and outlives its
+   * container by design). See `FleetPruneHostPayload`.
+   */
+  async fleetPruneHost(payload) {
+    log.info(
+      "host-agent",
+      `fleet_prune_host images=${payload.images} buildCache=${payload.buildCache}`
+    );
+    const steps = [];
+    if (payload.images) steps.push({ label: "image", args: ["image", "prune", "-f"] });
+    if (payload.buildCache) steps.push({ label: "builder", args: ["builder", "prune", "-f"] });
+    for (const step of steps) {
+      const res = await this.docker.run(step.args);
+      if (res.code !== 0) {
+        log.warn(
+          "host-agent",
+          `fleet_prune_host ${step.label} failed (code=${res.code}): ${res.stderr.trim().slice(-300)}`
+        );
+        continue;
+      }
+      const reclaimed = /Total reclaimed space:\s*(.+)/i.exec(res.stdout || "");
+      log.info(
+        "host-agent",
+        `fleet_prune_host ${step.label} ok${reclaimed ? ` reclaimed=${reclaimed[1].trim()}` : ""}`
+      );
+    }
+  }
   async fleetStopBox(payload) {
     log.info("host-agent", `fleet_stop_box id=${payload.boxId} name=${payload.containerName}`);
     const res = await this.docker.run(["stop", payload.containerName]);
@@ -45588,7 +45671,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.65.17" : "0.0.0-dev";
+  const cliVersion = true ? "2.66.1" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -45979,7 +46062,7 @@ async function mcpRun(args2) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.65.17" : "unknown";
+  const v = true ? "2.66.1" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.65.17",
+  "version": "2.66.1",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",