codeam-cli 2.76.11 → 2.76.12

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.76.11] — 2026-10-01
+
+### Added
+
+- **cli:** Host-agent startup self-update with versioned side-by-side installs (#895)
+
+### CI
+
+- **release:** Refresh and verify the wrapper Codespaces prebuild on every release (#894)
+
 ## [2.76.10] — 2026-10-01
 
 ### Fixed

package/dist/index.js

@@ -10579,7 +10579,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.76.11" : "0.0.0-dev",
+    cliVersion: true ? "2.76.12" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10824,7 +10824,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.76.11",
+  version: "2.76.12",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -12160,7 +12160,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.76.11" ? { ideVersion: "2.76.11" } : {}
+      ..."2.76.12" ? { ideVersion: "2.76.12" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body);
@@ -50172,7 +50172,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.76.11" : null;
+  const current2 = true ? "2.76.12" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -50189,7 +50189,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.76.11" : null;
+  const current2 = true ? "2.76.12" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -50460,7 +50460,7 @@ var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 function currentCliVersion() {
-  return true ? "2.76.11" : null;
+  return true ? "2.76.12" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -50655,7 +50655,7 @@ function signalHostReady(send = process.send?.bind(process)) {
 }
 function defaultDeps() {
   return {
-    ownVersion: true ? "2.76.11" : null,
+    ownVersion: true ? "2.76.12" : null,
     root: cliVersionsRoot(),
     args: process.argv.slice(3),
     execPath: process.execPath,
@@ -50832,6 +50832,55 @@ var defaultDisableService = () => {
   }
 };
 
+// src/commands/host/fleet-image-gc.ts
+var FLEET_ROLLBACK_TAG = "rollback";
+var FLEET_IMAGE_INSPECT_FORMAT = '{{.Id}}|{{.Created}}|{{join .RepoTags ","}}|{{join .RootFS.Layers ","}}';
+function repoOfImageRef(ref) {
+  const colon = ref.lastIndexOf(":");
+  return colon > ref.lastIndexOf("/") ? ref.slice(0, colon) : ref;
+}
+function parseFleetImageInspect(stdout) {
+  const out2 = [];
+  for (const line of stdout.split("\n")) {
+    const parts = line.trim().split("|");
+    if (parts.length !== 4 || !parts[0].startsWith("sha256:")) continue;
+    const [id, created, tags, layers] = parts;
+    out2.push({
+      id,
+      created,
+      repoTags: tags ? tags.split(",").filter((t2) => t2 && t2 !== "<none>:<none>") : [],
+      layers: layers ? layers.split(",") : []
+    });
+  }
+  return out2;
+}
+function planFleetBoxImageGc(input) {
+  const { images, referenced, currentId, currentRef } = input;
+  const current2 = images.find((i) => i.id === currentId);
+  if (!current2) return { removeTags: [] };
+  const currentRepo = repoOfImageRef(currentRef);
+  const boxRepos = /* @__PURE__ */ new Set([currentRepo, "codeam-box"]);
+  const boxTagsOf = (img) => img.repoTags.filter((t2) => boxRepos.has(repoOfImageRef(t2)));
+  const baseLayer = current2.layers[0];
+  const isBox = (img) => boxTagsOf(img).length > 0 || img.repoTags.length === 0 && !!baseLayer && img.layers[0] === baseLayer;
+  const previous = images.filter((i) => i.id !== currentId && isBox(i)).sort((a, b) => Date.parse(b.created) - Date.parse(a.created));
+  const rollback = previous[0];
+  const rollbackTag = `${currentRepo}:${FLEET_ROLLBACK_TAG}`;
+  const tagAs = rollback && boxTagsOf(rollback).length === 0 ? rollbackTag : void 0;
+  const removeTags = [];
+  for (const img of previous.slice(1)) {
+    if (referenced.has(img.id)) continue;
+    for (const tag of boxTagsOf(img)) {
+      if (tagAs && tag === rollbackTag) continue;
+      removeTags.push(tag);
+    }
+  }
+  return {
+    rollback: rollback ? { id: rollback.id, ...tagAs ? { tagAs } : {} } : void 0,
+    removeTags
+  };
+}
+
 // src/commands/host-agent.ts
 var HEARTBEAT_INTERVAL_MS = 2e4;
 var RESUME_RETRY_BACKOFF_MS = [15e3, 3e4, 6e4, 12e4];
@@ -50996,6 +51045,7 @@ function buildFleetBoxRunArgs(p2) {
 }
 var DOCKER_RUN_TIMEOUT_MS = 12e4;
 var DOCKER_RUN_WITH_PULL_TIMEOUT_MS = 6e5;
+var DOCKER_PRUNE_TIMEOUT_MS = 6e5;
 var defaultDockerRunner = {
   run(args2, opts = {}) {
     return new Promise((resolve14) => {
@@ -51767,22 +51817,42 @@ var HostAgentSupervisor = class {
    * `fleet_prune_host` — reclaim Docker residue. Best-effort and idempotent: a
    * prune with nothing to collect exits 0 with "Total reclaimed space: 0B".
    *
-   * ⚠️ Only ever `image prune` (dangling) and `builder prune`. NEVER
-   * `container prune` (a stopped fleet container is a SLEEPING BOX) and NEVER
-   * `volume prune` (a box's volume is the user's workspace and outlives its
-   * container by design). See `FleetPruneHostPayload`.
+   * ⚠️ Only superseded Box images, `image prune` (dangling) and `builder prune`.
+   * NEVER `container prune` (a stopped fleet container is a SLEEPING BOX) and
+   * NEVER `volume prune` (a box's volume is the user's workspace and outlives
+   * its container by design). See `FleetPruneHostPayload`.
+   *
+   * ⚠️ Every step runs on the LONG docker bound. Under the 120 s one the dangling
+   * prune never finished on fleet-1: the prod and dev host-agents share one
+   * daemon and both get this command at 15:45 UTC; dev's prune was SIGTERM'd at
+   * 120 s (code=143) and prod's was refused with "a prune operation is already
+   * running" — every day, so 17 GB of dangling Box images stayed (2026-10-02).
+   * That refusal now means the other agent is doing the work, not a failure.
    */
   async fleetPruneHost(payload) {
     log.info(
       "host-agent",
       `fleet_prune_host images=${payload.images} buildCache=${payload.buildCache}`
     );
+    if (payload.images) await this.fleetCollectSupersededBoxImages();
     const steps = [];
     if (payload.images) steps.push({ label: "image", args: ["image", "prune", "-f"] });
-    if (payload.buildCache) steps.push({ label: "builder", args: ["builder", "prune", "-f"] });
+    if (payload.buildCache) {
+      steps.push({
+        label: "builder",
+        args: ["builder", "prune", "-f", "--all", "--filter", "until=72h"]
+      });
+    }
     for (const step of steps) {
-      const res = await this.docker.run(step.args);
+      const res = await this.docker.run(step.args, { timeoutMs: DOCKER_PRUNE_TIMEOUT_MS });
       if (res.code !== 0) {
+        if (/prune operation is already running/i.test(res.stderr)) {
+          log.info(
+            "host-agent",
+            `fleet_prune_host ${step.label} skipped: another prune is running on this daemon`
+          );
+          continue;
+        }
         log.warn(
           "host-agent",
           `fleet_prune_host ${step.label} failed (code=${res.code}): ${res.stderr.trim().slice(-300)}`
@@ -51796,6 +51866,103 @@ var HostAgentSupervisor = class {
       );
     }
   }
+  /**
+   * Remove superseded Box images by tag: everything but the current `:latest`,
+   * one previous release (kept, tagged `:rollback`) and any image a container
+   * uses. Fail-SAFE: if the current image, the image list or the container
+   * references cannot be read, it removes nothing.
+   */
+  async fleetCollectSupersededBoxImages() {
+    if (process.env.CODEAM_FLEET_BOX_IMAGE) return;
+    const currentRef = resolveFleetBoxImage();
+    const opts = { timeoutMs: DOCKER_PRUNE_TIMEOUT_MS };
+    const lines = (out2) => [...new Set(out2.split("\n").map((l) => l.trim()).filter(Boolean))];
+    const cur = await this.docker.run(
+      ["image", "inspect", "--format", "{{.Id}}", currentRef],
+      opts
+    );
+    const currentId = cur.stdout.trim();
+    if (cur.code !== 0 || !currentId) {
+      log.warn("host-agent", `fleet_prune_host box-images skipped: ${currentRef} not present`);
+      return;
+    }
+    const ids = await this.docker.run(["image", "ls", "-aq", "--no-trunc"], opts);
+    if (ids.code !== 0) {
+      log.warn(
+        "host-agent",
+        `fleet_prune_host box-images skipped: image ls failed (code=${ids.code})`
+      );
+      return;
+    }
+    const imageIds = lines(ids.stdout);
+    if (imageIds.length === 0) return;
+    const inspect = await this.docker.run(
+      ["image", "inspect", "--format", FLEET_IMAGE_INSPECT_FORMAT, ...imageIds],
+      opts
+    );
+    if (inspect.code !== 0) {
+      log.warn(
+        "host-agent",
+        `fleet_prune_host box-images skipped: image inspect failed (code=${inspect.code})`
+      );
+      return;
+    }
+    const containers = await this.docker.run(["ps", "-aq", "--no-trunc"], opts);
+    if (containers.code !== 0) {
+      log.warn(
+        "host-agent",
+        `fleet_prune_host box-images skipped: ps failed (code=${containers.code})`
+      );
+      return;
+    }
+    const containerIds = lines(containers.stdout);
+    const referenced = /* @__PURE__ */ new Set();
+    if (containerIds.length > 0) {
+      const refs = await this.docker.run(
+        ["inspect", "--format", "{{.Image}}", ...containerIds],
+        opts
+      );
+      if (refs.code !== 0) {
+        log.warn(
+          "host-agent",
+          `fleet_prune_host box-images skipped: container inspect failed (code=${refs.code})`
+        );
+        return;
+      }
+      for (const id of lines(refs.stdout)) referenced.add(id);
+    }
+    const plan = planFleetBoxImageGc({
+      images: parseFleetImageInspect(inspect.stdout),
+      referenced,
+      currentId,
+      currentRef
+    });
+    if (plan.rollback?.tagAs) {
+      const tag = await this.docker.run(["tag", plan.rollback.id, plan.rollback.tagAs], opts);
+      if (tag.code !== 0) {
+        log.warn(
+          "host-agent",
+          `fleet_prune_host box-images: tagging rollback failed (code=${tag.code}), removing nothing`
+        );
+        return;
+      }
+    }
+    for (const ref of plan.removeTags) {
+      const res = await this.docker.run(["rmi", ref], opts);
+      if (res.code === 0 || /no such image/i.test(res.stderr)) {
+        log.info("host-agent", `fleet_prune_host box-images removed ${ref}`);
+      } else {
+        log.warn(
+          "host-agent",
+          `fleet_prune_host box-images rmi ${ref} failed (code=${res.code}): ${res.stderr.trim().slice(-300)}`
+        );
+      }
+    }
+    log.info(
+      "host-agent",
+      `fleet_prune_host box-images current=${currentId.slice(7, 19)} rollback=${plan.rollback ? plan.rollback.id.slice(7, 19) : "none"} removed=${plan.removeTags.length}`
+    );
+  }
   async fleetStopBox(payload) {
     log.info("host-agent", `fleet_stop_box id=${payload.boxId} name=${payload.containerName}`);
     const res = await this.docker.run(["stop", payload.containerName]);
@@ -52806,7 +52973,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.76.11" : "0.0.0-dev";
+  const cliVersion = true ? "2.76.12" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto17.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -53330,7 +53497,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.76.11" : "unknown";
+  const v = true ? "2.76.12" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.76.11",
+  "version": "2.76.12",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",