codeam-cli 2.73.6 → 2.73.8

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.73.7] — 2026-09-03
+
+### Fixed
+
+- **cli:** LoadSession closes the fresh session it abandons — one agent, not two (#692)
+
+## [2.73.6] — 2026-09-03
+
+### Fixed
+
+- **cli:** AcpClient.stop() reaps the whole adapter tree, not just the adapter (#690)
+
 ## [2.73.5] — 2026-09-03
 
 ### Fixed

package/dist/index.js

@@ -1788,14 +1788,34 @@ var INTEGRATION_REGISTRY = {
     },
     delivery: {
       mcp: {
-        // @taazkareem/clickup-mcp-server (Node): CLICKUP_API_KEY (the OAuth
-        // access token — ClickUp accepts it in the Authorization header) +
-        // CLICKUP_TEAM_ID (the workspace id, captured at exchange) via env only.
-        // Version PINNED; bump only after re-verifying headless.
+        // clickup-mcp-pro (Node, MIT): 162 tools over `tools/list` — spaces,
+        // folders, lists, tasks (37 task tools incl. create/update/bulk),
+        // comments, time tracking, docs, custom fields, goals, webhooks. Reads
+        // CLICKUP_API_TOKEN (ClickUp accepts the OAuth access token there) +
+        // CLICKUP_TEAM_ID (the workspace id, captured at exchange), env only.
+        //
+        // ⚠️ WHY NOT @taazkareem/clickup-mcp-server ANY MORE. It was our pin at
+        // 0.14.4 and the maintainer had gone paid: 0.9.0–0.12.x `UNLICENSED`,
+        // 0.13.0+ `Proprietary` with an OBFUSCATED `build/license.js` that
+        // validates a Polar key and puts the tools behind
+        // `CLICKUP_MCP_LICENSE_KEY`. The server connected and found the user's
+        // workspace, then every tool was "LIMITED" (rafaelph90.br@gmail.com,
+        // 2026-09-03) — indistinguishable, to the agent and the user, from the
+        // connection failures fixed the same day. Its last MIT release, 0.8.5,
+        // exposes 36 tools; this one exposes 162 under a licence that cannot be
+        // pulled the same way. `mcp-package-licences.test.ts` now audits every
+        // npx pin's licence so a paywall fails in CI, not on a box.
+        //
+        // Verified 2026-09-03 over MCP with a dummy key (`tools/list` → 162, no
+        // licence gate, no paywall on stderr) and supply-chain audited from the
+        // tarball: the only network hosts are api.clickup.com /
+        // developer.clickup.com, no child_process/eval, deps = MCP SDK, axios,
+        // zod, dotenv, form-data. Young package (2 releases, one author) — the
+        // pin is EXACT and the licence audit watches every bump.
         command: "npx",
-        args: ["-y", "@taazkareem/clickup-mcp-server@0.14.4"],
+        args: ["-y", "clickup-mcp-pro@1.0.1"],
         envMapping: {
-          CLICKUP_API_KEY: "accessToken",
+          CLICKUP_API_TOKEN: "accessToken",
           CLICKUP_TEAM_ID: "teamId"
         }
       }
@@ -8116,7 +8136,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.73.6" : "0.0.0-dev",
+    cliVersion: true ? "2.73.8" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8358,7 +8378,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.73.6",
+  version: "2.73.8",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -9951,7 +9971,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.73.6" ? { ideVersion: "2.73.6" } : {}
+      ..."2.73.8" ? { ideVersion: "2.73.8" } : {}
     }).then(() => log.trace("relay", `heartbeat ok online=${online}`)).catch((err) => log.trace("relay", `heartbeat failed online=${online}`, err));
   }
   /**
@@ -22227,7 +22247,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.73.6" : null;
+  const current2 = true ? "2.73.8" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22244,7 +22264,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.73.6" : null;
+  const current2 = true ? "2.73.8" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -22267,7 +22287,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.73.6" : null;
+  return true ? "2.73.8" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -36284,7 +36304,22 @@ var AcpClient = class {
       if (loadTimer) clearTimeout(loadTimer);
       this.opts.endLoadReplay?.();
     }
+    const abandoned = this.sessionId;
     this.sessionId = sessionId;
+    if (abandoned && abandoned !== sessionId) {
+      try {
+        await this.connection.closeSession({ sessionId: abandoned });
+        log.info(
+          "acpClient",
+          `loadSession \u2014 closed the abandoned fresh session ${abandoned.slice(0, 8)}`
+        );
+      } catch (err) {
+        log.warn(
+          "acpClient",
+          `loadSession \u2014 could not close abandoned session ${abandoned.slice(0, 8)}: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
     if (loaded?.configOptions) this.captureModelConfig(loaded.configOptions);
     if (loaded?.modes !== void 0) this.captureModes(loaded.modes ?? null);
     log.info("acpClient", `loadSession \u2190 ok sessionId=${sessionId.slice(0, 8)}`);
@@ -47141,7 +47176,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.73.6" : "0.0.0-dev";
+  const cliVersion = true ? "2.73.8" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -47612,7 +47647,7 @@ async function mcpWarm(argv = []) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.73.6" : "unknown";
+  const v = true ? "2.73.8" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.73.6",
+  "version": "2.73.8",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",