codeam-cli 2.75.42 → 2.75.44

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.75.43] — 2026-09-27
+
+### Fixed
+
+- **cli:** Stop the EPIPE log loop and retire daemons a restarted host-agent left behind (#851)
+
+## [2.75.42] — 2026-09-27
+
+### Fixed
+
+- **cli:** A CodeAgent Box reports its label, not its container id (#849)
+
 ## [2.75.41] — 2026-09-27
 
 ### Fixed

package/dist/index.js

@@ -3437,6 +3437,18 @@ function resolveLogDir() {
 var LOG_DIR = resolveLogDir();
 var debugFilePath = path.join(LOG_DIR, `debug-${process.pid}.log`);
 var fileInitialized = false;
+var consoleBroken = false;
+process.stderr.on("error", () => {
+  consoleBroken = true;
+});
+function writeConsole(line) {
+  if (consoleBroken) return;
+  try {
+    process.stderr.write(line);
+  } catch {
+    consoleBroken = true;
+  }
+}
 var LOG_RETENTION_MS = 7 * 24 * 60 * 60 * 1e3;
 var LOG_DIR_BUDGET_BYTES = 200 * 1024 * 1024;
 function pidAlive(pid) {
@@ -3556,7 +3568,7 @@ function emit(level, tag, msg, err) {
     appendToFile(jsonMode ? json : `${(/* @__PURE__ */ new Date()).toISOString()} ${text}`);
   }
   if (LEVELS[level] <= currentLevel()) {
-    process.stderr.write(jsonMode ? json : text);
+    writeConsole(jsonMode ? json : text);
   }
 }
 var log = {
@@ -10565,7 +10577,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.75.42" : "0.0.0-dev",
+    cliVersion: true ? "2.75.44" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10810,7 +10822,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.75.42",
+  version: "2.75.44",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12144,7 +12156,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.75.42" ? { ideVersion: "2.75.42" } : {}
+      ..."2.75.44" ? { ideVersion: "2.75.44" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -27706,13 +27718,13 @@ function resolveGlobalNodeModulesDir(opts) {
 var STALE_STAGING_AGE_MS = CLI_UPDATE_INSTALL_TIMEOUT_MS;
 function sweepStaleCliStagingDirs(nodeModulesDir, now = Date.now(), deps) {
   if (!nodeModulesDir) return 0;
-  const readdirSync15 = deps?.readdirSync ?? fs51.readdirSync;
+  const readdirSync16 = deps?.readdirSync ?? fs51.readdirSync;
   const statSync16 = deps?.statSync ?? fs51.statSync;
   const rmSync10 = deps?.rmSync ?? fs51.rmSync;
   let removed = 0;
   let entries;
   try {
-    entries = readdirSync15(nodeModulesDir);
+    entries = readdirSync16(nodeModulesDir);
   } catch {
     return 0;
   }
@@ -28532,6 +28544,9 @@ function installRelayCrashGuards() {
   process.on("uncaughtException", (err) => {
     log.error("process", `uncaughtException \u2014 relay kept alive \u2014 ${describeReason(err)}`);
   });
+  process.stdout.on("error", (err) => {
+    if (err.code !== "EPIPE") log.warn("process", `stdout error \u2014 ${describeReason(err)}`);
+  });
 }
 function describeReason(reason) {
   if (reason instanceof Error) {
@@ -28923,6 +28938,59 @@ function releaseOwnLock(lockPath) {
   } catch {
   }
 }
+function procPpid(pid) {
+  const stat3 = readProcFile(`${pid}/stat`);
+  if (!stat3) return void 0;
+  const ppid = Number(stat3.slice(stat3.lastIndexOf(")") + 2).trim().split(/\s+/)[1]);
+  return Number.isInteger(ppid) ? ppid : void 0;
+}
+function orphanedSupervisorDaemon(sessionId) {
+  const rec = readLockRecord(daemonLockPath(sessionId));
+  if (!rec || !isLiveLockHolder(rec)) return void 0;
+  if (process.pid === 1 || procPpid(rec.pid) !== 1) return void 0;
+  const env = readProcFile(`${rec.pid}/environ`)?.split("\0") ?? [];
+  const spawnedBySupervisor = env.some(
+    (v) => v === `CODEAM_RESUME_SESSION_ID=${sessionId}` || v.startsWith("CODEAM_AUTO_TOKEN=")
+  );
+  return spawnedBySupervisor ? rec.pid : void 0;
+}
+function snapshotProcessTree(root) {
+  const children = /* @__PURE__ */ new Map();
+  let entries = [];
+  try {
+    entries = fs52.readdirSync(procRoot).filter((e) => /^\d+$/.test(e));
+  } catch {
+  }
+  for (const e of entries) {
+    const pid = Number(e);
+    const ppid = procPpid(pid);
+    if (ppid === void 0) continue;
+    const list = children.get(ppid) ?? [];
+    list.push(pid);
+    children.set(ppid, list);
+  }
+  const tree = [];
+  const queue = [root];
+  const seen2 = /* @__PURE__ */ new Set();
+  while (queue.length > 0) {
+    const pid = queue.shift();
+    if (seen2.has(pid)) continue;
+    seen2.add(pid);
+    const start2 = procStartTicks(pid);
+    tree.push(start2 ? { pid, start: start2 } : { pid });
+    queue.push(...children.get(pid) ?? []);
+  }
+  return tree;
+}
+function signalProcessTree(refs, signal) {
+  for (const ref of refs) {
+    if (ref.start !== void 0 && procStartTicks(ref.pid) !== ref.start) continue;
+    try {
+      process.kill(ref.pid, signal);
+    } catch {
+    }
+  }
+}
 function daemonLockPath(sessionId) {
   const safe = sessionId.replace(/[^a-zA-Z0-9_-]/g, "_");
   return path60.join(os40.homedir(), ".codeam", `daemon-${safe}.lock`);
@@ -48895,7 +48963,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.75.42" : null;
+  const current2 = true ? "2.75.44" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -48912,7 +48980,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.75.42" : null;
+  const current2 = true ? "2.75.44" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -48935,7 +49003,7 @@ var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 var SUDO_PREFLIGHT_TIMEOUT_MS = 5e3;
 function currentCliVersion() {
-  return true ? "2.75.42" : null;
+  return true ? "2.75.44" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -49160,6 +49228,11 @@ function buildFleetBoxRunArgs(p2) {
     ...process.env.CODEAM_FLEET_BOX_IMAGE ? [] : ["--pull=always"],
     "--name",
     p2.containerName,
+    // The box's host-agent is the container's pid 1 and its self-update restart
+    // is an exit(0): without a restart policy that stopped the whole box until
+    // the next wake. `docker stop` (the sleep sweep) still keeps it stopped.
+    "--restart",
+    "unless-stopped",
     "--cap-drop",
     "ALL",
     "--security-opt",
@@ -49275,8 +49348,33 @@ var defaultOnIdentityRejected = () => {
   );
   process.exit(1);
 };
+var ORPHAN_TERM_GRACE_MS = 3e3;
+var ORPHAN_KILL_SETTLE_MS = 500;
+function needsSelfRelaunch(env = process.env, pid = process.pid) {
+  return !env.INVOCATION_ID && pid !== 1;
+}
+function relaunchArgv(execPath, argv) {
+  return ["-c", 'sleep 2; exec "$0" "$@"', execPath, ...argv.slice(1)];
+}
 var defaultOnUpdated = (version3) => {
-  log.info("host-agent", `self-update: installed ${version3}, restarting`);
+  const relaunch = needsSelfRelaunch();
+  log.info(
+    "host-agent",
+    `self-update: installed ${version3}, restarting${relaunch ? " (self-relaunch, no supervisor)" : ""}`
+  );
+  if (relaunch) {
+    try {
+      (0, import_node_child_process30.spawn)("/bin/sh", relaunchArgv(process.execPath, process.argv), {
+        cwd: process.cwd(),
+        env: process.env,
+        detached: true,
+        stdio: "ignore"
+      }).unref();
+    } catch (err) {
+      log.error("host-agent", "self-update: relaunch failed \u2014 staying on the old binary", err);
+      return;
+    }
+  }
   process.exit(0);
 };
 var HostAgentSupervisor = class {
@@ -49287,6 +49385,9 @@ var HostAgentSupervisor = class {
     this.resumeSpawner = deps.resumeSpawner ?? defaultResumeSpawner;
     this.sessionStore = deps.sessionStore ?? fileSessionChildStore();
     this.listSavedSessions = deps.listSavedSessions ?? (() => loadCliConfig().sessions);
+    this.orphanedDaemonFor = deps.orphanedDaemonFor ?? orphanedSupervisorDaemon;
+    this.snapshotTree = deps.snapshotProcessTree ?? snapshotProcessTree;
+    this.signalTree = deps.signalProcessTree ?? signalProcessTree;
     this.resolveAgentAuth = deps.resolveAgentAuth ?? unsealAgentAuth;
     this.metrics = deps.metricsCollector ?? new MetricsCollector();
     this.onIdentityRejected = deps.onIdentityRejected ?? defaultOnIdentityRejected;
@@ -49341,6 +49442,11 @@ var HostAgentSupervisor = class {
   postResumeFailure;
   sessionStore;
   listSavedSessions;
+  orphanedDaemonFor;
+  snapshotTree;
+  signalTree;
+  /** Resumes waiting for a left-behind daemon to die (see replaceOrphanedDaemon). */
+  pendingOrphanReplacements = 0;
   /**
    * Per-session resume bookkeeping (codeagent-v07a: N sessions resume on
    * boot, each with its OWN bounded retries / exhaustion / re-probe throttle —
@@ -49881,6 +49987,7 @@ var HostAgentSupervisor = class {
       return;
     }
     log.info("host-agent", `fleet_start_box id=${payload.boxId} name=${containerName}`);
+    await this.docker.run(["update", "--restart", "unless-stopped", containerName]);
     const res = await this.docker.run(["start", containerName]);
     if (res.code !== 0 && !isMissingContainerError(res.stderr)) {
       log.warn(
@@ -50211,7 +50318,7 @@ var HostAgentSupervisor = class {
       const records = this.sessionStore.load();
       if (records === null) {
         const target = this.fallbackResumeTarget();
-        if (target) this.resumeOne(target);
+        if (target) this.resumeOrReplace(target);
         return;
       }
       if (records.length === 0) return;
@@ -50238,14 +50345,16 @@ var HostAgentSupervisor = class {
           );
           continue;
         }
-        this.resumeOne({ deployId: rec.deployId, cwd: rec.cwd, session, agent: rec.agent });
+        this.resumeOrReplace({ deployId: rec.deployId, cwd: rec.cwd, session, agent: rec.agent });
         resumed += 1;
       }
       log.info(
         "host-agent",
         `resume: ${resumed} session(s) resumed, ${dropped.length} ended (bound ${max}), ${resume.length - resumed} skipped`
       );
-      if (this.children.size === 0) this.sessionStore.save([]);
+      if (this.children.size === 0 && this.pendingOrphanReplacements === 0) {
+        this.sessionStore.save([]);
+      }
     } catch (err) {
       log.warn(
         "host-agent",
@@ -50352,6 +50461,36 @@ var HostAgentSupervisor = class {
       return [];
     }
   }
+  /**
+   * Resume `target` — first retiring a daemon the PREVIOUS host-agent left
+   * holding the session, if there is one. Without this the resume child
+   * defers to that orphan (it holds the daemon lock and is alive), so the
+   * session keeps running the old code with dead stdio pipes — on 2.75.41 and
+   * older that wedged it offline for good (see `orphanedSupervisorDaemon`).
+   * Replacing it matches what systemd already does on a self-hosted box,
+   * where a unit restart kills the whole control group.
+   */
+  resumeOrReplace(target) {
+    const orphan = this.orphanedDaemonFor(target.session.id);
+    if (orphan === void 0) {
+      this.resumeOne(target);
+      return;
+    }
+    log.warn(
+      "host-agent",
+      `resume: session ${target.session.id.slice(0, 8)} is held by pid ${orphan}, left behind by the previous host-agent \u2014 replacing it`
+    );
+    this.pendingOrphanReplacements += 1;
+    const tree = this.snapshotTree(orphan);
+    this.signalTree(tree.slice(0, 1), "SIGTERM");
+    setTimeout(() => {
+      this.signalTree(tree, "SIGKILL");
+      setTimeout(() => {
+        this.pendingOrphanReplacements -= 1;
+        if (!this.stopped) this.resumeOne(target);
+      }, ORPHAN_KILL_SETTLE_MS);
+    }, ORPHAN_TERM_GRACE_MS);
+  }
   /** Spawn ONE resume child for `target` (boot, retry, or re-probe). */
   resumeOne(target) {
     const { session, deployId } = target;
@@ -50911,7 +51050,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.75.42" : "0.0.0-dev";
+  const cliVersion = true ? "2.75.44" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto13.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -51435,7 +51574,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.75.42" : "unknown";
+  const v = true ? "2.75.44" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.75.42",
+  "version": "2.75.44",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",