codeam-cli 2.75.38 → 2.75.40

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.75.39] — 2026-09-27
+
+### Fixed
+
+- **cli:** Host never resumes a dead session into the filesystem root (#841)
+
+## [2.75.38] — 2026-09-27
+
+### Fixed
+
+- **cli:** Beads never commits to the user's repo (bd init --stealth) (#844)
+
 ## [2.75.37] — 2026-09-27
 
 ### Fixed

package/dist/index.js

@@ -10529,7 +10529,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.75.38" : "0.0.0-dev",
+    cliVersion: true ? "2.75.40" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10771,7 +10771,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.75.38",
+  version: "2.75.40",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12101,7 +12101,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.75.38" ? { ideVersion: "2.75.38" } : {}
+      ..."2.75.40" ? { ideVersion: "2.75.40" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -12436,6 +12436,10 @@ function isUnsafeWindowsWatchRoot(dir, homedir53) {
   }
   return false;
 }
+function isFilesystemRoot(dir) {
+  const resolved = path5.resolve(dir);
+  return resolved === path5.parse(resolved).root;
+}
 var _chokidarSeam = {
   load: () => {
     try {
@@ -12520,6 +12524,13 @@ var FileWatcherService = class {
     if (this.stopped) {
       throw new Error("FileWatcherService has already been stopped \u2014 re-instantiate to restart.");
     }
+    if (isFilesystemRoot(this.opts.workingDir)) {
+      log.warn(
+        "fileWatcher",
+        `refusing to watch ${this.opts.workingDir} \u2014 the filesystem root. Run codeam from your project folder to enable file change emission.`
+      );
+      return;
+    }
     const isWin = process.platform === "win32";
     if (isWin && isUnsafeWindowsWatchRoot(this.opts.workingDir, os5.homedir())) {
       log.warn(
@@ -13651,7 +13662,13 @@ var startCommandSchema = import_zod.z.object({
     // session (Claude hot-reloads ~/.claude/skills/), or list what's installed.
     "add",
     "remove",
-    "list"
+    "list",
+    // `guardrail_configure` — read / update the session's guardrail policy.
+    // ⚠️ Missing until 2026-09-26: the generic parse rejected `{action:'read'}`
+    // as malformed BEFORE the handler ran, so Guardrails never loaded ("isn't
+    // responding") and every save was silently dropped.
+    "read",
+    "write"
   ]).optional(),
   // `coderabbit_configure` (action='link_apikey') — the CodeRabbit API key.
   apiKey: import_zod.z.string().min(1).max(512).optional(),
@@ -33098,13 +33115,13 @@ var ConnectionBuilder = class {
   /**
    * Adds a typed request handler for one method.
    */
-  onReceiveRequest(method, parse, handler) {
+  onReceiveRequest(method, parse2, handler) {
     return this.withHandler({
       handleMessage: async (message, cx) => {
         if (message.kind !== "request" || message.method !== method) {
           return Handled.no(message);
         }
-        const request2 = parse(message.params);
+        const request2 = parse2(message.params);
         return await handler(request2, message.responder, cx) ?? Handled.yes();
       },
       describe: () => `${this.connectionName ?? "request"}:${method}`
@@ -33113,13 +33130,13 @@ var ConnectionBuilder = class {
   /**
    * Adds a typed notification handler for one method.
    */
-  onReceiveNotification(method, parse, handler) {
+  onReceiveNotification(method, parse2, handler) {
     return this.withHandler({
       handleMessage: async (message, cx) => {
         if (message.kind !== "notification" || message.method !== method) {
           return Handled.no(message);
         }
-        const notification = parse(message.params);
+        const notification = parse2(message.params);
         return await handler(notification, cx) ?? Handled.yes();
       },
       describe: () => `${this.connectionName ?? "notification"}:${method}`
@@ -48344,9 +48361,9 @@ function fileSessionChildStore(file = hostSessionStatePath()) {
     load() {
       try {
         const raw = JSON.parse(fs77.readFileSync(file, "utf8"));
-        return Array.isArray(raw?.sessions) ? raw.sessions.filter(isRecord5) : [];
+        return Array.isArray(raw?.sessions) ? raw.sessions.filter(isRecord5) : null;
       } catch {
-        return [];
+        return null;
       }
     },
     save(list) {
@@ -48835,7 +48852,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.75.38" : null;
+  const current2 = true ? "2.75.40" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -48852,7 +48869,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.75.38" : null;
+  const current2 = true ? "2.75.40" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -48875,7 +48892,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.75.38" : null;
+  return true ? "2.75.40" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -50149,11 +50166,12 @@ var HostAgentSupervisor = class {
     try {
       if (this.children.size > 0) return;
       const records = this.sessionStore.load();
-      if (records.length === 0) {
+      if (records === null) {
         const target = this.fallbackResumeTarget();
         if (target) this.resumeOne(target);
         return;
       }
+      if (records.length === 0) return;
       const max = resolveMaxResumeSessions();
       const { resume, dropped } = planSessionResume(records, max);
       for (const rec of dropped) {
@@ -50201,6 +50219,13 @@ var HostAgentSupervisor = class {
     const session = getActiveSession();
     if (!session || !session.pluginId || !session.pollSecret || !session.agent) return null;
     const cwd = session.cwd && fs80.existsSync(session.cwd) ? session.cwd : process.cwd();
+    if (isFilesystemRoot(cwd)) {
+      log.warn(
+        "host-agent",
+        `resume: skipping session ${session.id.slice(0, 8)} \u2014 it has no saved workspace and the fallback is the filesystem root`
+      );
+      return null;
+    }
     const deployId = deployIdFromWorkspace(session.cwd) ?? session.id;
     return { deployId, cwd, session };
   }
@@ -50272,7 +50297,7 @@ var HostAgentSupervisor = class {
    */
   knownSavedSessions() {
     try {
-      const persisted = new Map(this.sessionStore.load().map((r) => [r.deployId, r.agent]));
+      const persisted = new Map((this.sessionStore.load() ?? []).map((r) => [r.deployId, r.agent]));
       for (const c2 of this.children.values()) persisted.set(c2.deployId, c2.agent);
       return this.listSavedSessions().map((s) => ({ s, deployId: deployIdFromWorkspace(s.cwd) })).filter(
         (x) => x.deployId !== null && !!x.s.cwd && fs80.existsSync(x.s.cwd)
@@ -50843,7 +50868,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.75.38" : "0.0.0-dev";
+  const cliVersion = true ? "2.75.40" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -51367,7 +51392,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.75.38" : "unknown";
+  const v = true ? "2.75.40" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.75.38",
+  "version": "2.75.40",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",