codeam-cli 2.76.18 → 2.76.20

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.76.19] — 2026-10-09
+
+### Fixed
+
+- **cli:** Send sessionId on turn-events so PluginAuthGuard stops 401ing them (#929)
+
+## [2.76.18] — 2026-10-09
+
+### Fixed
+
+- **box:** Pull the node base image from mirror.gcr.io (Docker Hub 429) (#927)
+
 ## [2.76.17] — 2026-10-09
 
 ### Added

package/dist/index.js

@@ -10617,7 +10617,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.76.18" : "0.0.0-dev",
+    cliVersion: true ? "2.76.20" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -10866,7 +10866,7 @@ var http = __toESM(require("http"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.76.18",
+  version: "2.76.20",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -11246,6 +11246,7 @@ async function postTurnEvent(input) {
     await _transport.postJsonAuthed(
       `${API_BASE}/api/commands/turn-events`,
       {
+        sessionId: input.sessionId,
         pluginId: input.pluginId,
         commandId: input.commandId,
         phase: input.phase,
@@ -12228,7 +12229,7 @@ var CommandRelayService = class _CommandRelayService {
       // fresh + clear the "CLI update available" banner after a self-update
       // (a codespace that reinstalls @latest reconnects via heartbeat, not
       // pair/reconnect). Older backends ignore the extra field.
-      ..."2.76.18" ? { ideVersion: "2.76.18" } : {}
+      ..."2.76.20" ? { ideVersion: "2.76.20" } : {}
     };
     try {
       const res = await _postJson(`${API_BASE2}/api/plugin/heartbeat`, body, this.pollSecretHeader());
@@ -28965,8 +28966,9 @@ var startTask = async (ctx, cmd, parsed) => {
   reportTurn(ctx, cmd.id, "started");
 };
 function reportTurn(ctx, commandId, phase, errorCode) {
-  if (!ctx.pluginId || !ctx.pluginAuthToken) return;
+  if (!ctx.sessionId || !ctx.pluginId || !ctx.pluginAuthToken) return;
   void postTurnEvent({
+    sessionId: ctx.sessionId,
     pluginId: ctx.pluginId,
     pluginAuthToken: ctx.pluginAuthToken,
     commandId,
@@ -38472,7 +38474,7 @@ var coderabbitProvisioner = {
     return {};
   }
 };
-var opencodeProvisioner = {
+var providerKeyProvisioner = {
   write(auth) {
     const key = auth.value.trim();
     const envName = key.startsWith("sk-ant-") ? "ANTHROPIC_API_KEY" : key.startsWith("AIza") ? "GEMINI_API_KEY" : "OPENAI_API_KEY";
@@ -38486,7 +38488,11 @@ var PROVISIONERS = {
   gemini: geminiProvisioner,
   cursor: cursorProvisioner,
   coderabbit: coderabbitProvisioner,
-  opencode: opencodeProvisioner
+  opencode: providerKeyProvisioner,
+  // ⚠️ Was missing: every self-hosted / fleet-Box aider deploy failed with
+  // "Self-hosted provisioning is not implemented for agent "aider"" (23 in
+  // prod Cloud Run, 2026-09-10..10-08).
+  aider: providerKeyProvisioner
 };
 var UnsupportedAgentError = class extends Error {
   agentId;
@@ -43058,8 +43064,9 @@ function recordCoderabbitTurn(ctx, prompt, replySummary) {
 }
 function reportTurn2(ctx, phase, errorCode) {
   const { opts, cmd } = ctx;
-  if (!opts.pluginId || !opts.pluginAuthToken) return;
+  if (!opts.sessionId || !opts.pluginId || !opts.pluginAuthToken) return;
   void postTurnEvent({
+    sessionId: opts.sessionId,
     pluginId: opts.pluginId,
     pluginAuthToken: opts.pluginAuthToken,
     commandId: cmd.id,
@@ -44482,12 +44489,14 @@ var AcpHistory = class {
    */
   appendAgentReply(text, agentId = this.opts.agent) {
     if (text.length === 0) return;
+    const blocker = failureBlocker(text);
     this.messages.push({
       id: (0, import_node_crypto15.randomUUID)(),
       role: "agent",
       text,
       timestamp: Date.now(),
-      agentId
+      agentId,
+      ...blocker ? { blocker } : {}
     });
   }
   /**
@@ -51215,7 +51224,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current2 = true ? "2.76.18" : null;
+  const current2 = true ? "2.76.20" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -51232,7 +51241,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current2 = true ? "2.76.18" : null;
+  const current2 = true ? "2.76.20" : null;
   if (!current2) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -51514,7 +51523,7 @@ var SELF_UPDATE_VIEW_TIMEOUT_MS = 3e4;
 var SELF_UPDATE_INSTALL_TIMEOUT_MS = 18e4;
 var SELF_UPDATE_LS_TIMEOUT_MS = 15e3;
 function currentCliVersion() {
-  return true ? "2.76.18" : null;
+  return true ? "2.76.20" : null;
 }
 async function installedVersion(deps) {
   const ls = await deps.run(
@@ -51725,7 +51734,7 @@ function signalHostReady(send = process.send?.bind(process)) {
 }
 function defaultDeps() {
   return {
-    ownVersion: true ? "2.76.18" : null,
+    ownVersion: true ? "2.76.20" : null,
     root: cliVersionsRoot(),
     args: process.argv.slice(3),
     execPath: process.execPath,
@@ -52304,6 +52313,15 @@ var HostAgentSupervisor = class {
    * one session's crash-loop must not spend another's retry budget).
    */
   resumeStates = /* @__PURE__ */ new Map();
+  /**
+   * Env-delivered agent credentials per deploy (the `api_key` path:
+   * ANTHROPIC_API_KEY / GEMINI_API_KEY / CURSOR_API_KEY / OPENAI_API_KEY).
+   * Such a key lives ONLY in the child's spawn env — nothing on disk carries
+   * it — so every re-spawn of the session (crash respawn, resume, a re-link
+   * restart) must re-inject it. Memory only: credential plaintext is never
+   * persisted by the host-agent (codeagent-5m12).
+   */
+  credentialEnvByDeploy = /* @__PURE__ */ new Map();
   /** Set once the bounded retries exhaust → heartbeat-ridden slow re-probe. */
   /** True after stop() — no resume retries may be scheduled past teardown. */
   stopped = false;
@@ -52824,6 +52842,7 @@ var HostAgentSupervisor = class {
   async fleetMigrateBoxImage(payload) {
     const { containerName } = payload;
     const state = await this.docker.run([
+      "container",
       "inspect",
       "--format",
       "{{.State.Running}}",
@@ -52936,7 +52955,13 @@ var HostAgentSupervisor = class {
   async fleetBoxImageStale(containerName) {
     if (process.env.CODEAM_FLEET_BOX_IMAGE) return false;
     const image = resolveFleetBoxImage();
-    const cur = await this.docker.run(["inspect", "--format", "{{.Image}}", containerName]);
+    const cur = await this.docker.run([
+      "container",
+      "inspect",
+      "--format",
+      "{{.Image}}",
+      containerName
+    ]);
     if (cur.code !== 0) {
       return isMissingContainerError(cur.stderr);
     }
@@ -53213,6 +53238,8 @@ var HostAgentSupervisor = class {
       } else {
         const auth = await this.resolveAgentAuth(this.identity, payload.sealedAgentAuth);
         const credEnv = provisionAgentCredentials(payload.agentId, auth, void 0);
+        if (Object.keys(credEnv).length > 0) this.credentialEnvByDeploy.set(payload.deployId, credEnv);
+        else this.credentialEnvByDeploy.delete(payload.deployId);
         childEnv = {
           ...credEnv,
           CODEAM_AUTO_TOKEN: payload.autoPairToken
@@ -53610,7 +53637,11 @@ var HostAgentSupervisor = class {
         `resume: session ${session.id.slice(0, 8)} deploy=${deployId.slice(0, 8)} cwd=${cwd}`
       );
       const proc = this.resumeSpawner(
-        { ...readHouseProxyChildEnv(deployId), CODEAM_RESUME_SESSION_ID: session.id },
+        {
+          ...readHouseProxyChildEnv(deployId),
+          ...this.credentialEnvByDeploy.get(deployId) ?? {},
+          CODEAM_RESUME_SESSION_ID: session.id
+        },
         cwd
       );
       const child = {
@@ -53818,6 +53849,7 @@ var HostAgentSupervisor = class {
    */
   cleanupWorkspace(deployId) {
     const short = deployId.slice(0, 8);
+    this.credentialEnvByDeploy.delete(deployId);
     const child = this.children.get(deployId);
     if (child) {
       try {
@@ -53844,20 +53876,43 @@ var HostAgentSupervisor = class {
   }
   /**
    * Handle `self_hosted_refresh_credentials` (the user re-linked the agent).
-   * Unseal the fresh credential and re-provision the agent's on-disk auth IN
-   * PLACE (`provisionAgentCredentials` rewrites `~/.claude/.credentials.json`
-   * etc.). The running pair-auto child re-reads its auth file on the next API
-   * call, so a 401'd session recovers WITHOUT a restart — the self-hosted
-   * parallel to the codespace `refreshAgentCredentialsOnly` sweep. Best-effort:
-   * a failure is logged, never throws (the relay dispatch must not crash).
+   * Unseal the fresh credential and re-provision the agent's auth IN PLACE.
+   *
+   * Two delivery shapes, two outcomes (codeagent-5m12):
+   *  - **Login-state FILE** (`oauth_token`; `provisionAgentCredentials`
+   *    returns `{}`): the file is rewritten and running children are left
+   *    alone. Claude Code and Codex re-read their auth file on a 401 (Claude's
+   *    `oauth_401_recovered_from_disk`, Codex's `UnauthorizedRecovery` Reload
+   *    step), so a 401'd session recovers without losing its turn.
+   *  - **Env var** (`api_key`; it returns e.g. `{ ANTHROPIC_API_KEY }`): the
+   *    key exists only in each child's spawn env, which a rewrite cannot reach
+   *    — the old key keeps 401ing until the process is replaced. Every running
+   *    child of THIS agent is restarted through the resume path with the new
+   *    env (same conversation, `CODEAM_RESUME_SESSION_ID`).
+   *
+   * Best-effort: a failure is logged, never throws (the relay dispatch must
+   * not crash).
    */
   async refreshCredentials(payload) {
     try {
       const auth = await this.resolveAgentAuth(this.identity, payload.sealedAgentAuth);
-      provisionAgentCredentials(payload.agentId, auth, void 0);
+      const credEnv = provisionAgentCredentials(payload.agentId, auth, void 0);
+      const affected = [...this.children.values()].filter((c2) => c2.agent === payload.agentId);
+      if (Object.keys(credEnv).length === 0) {
+        for (const c2 of affected) this.credentialEnvByDeploy.delete(c2.deployId);
+        log.info(
+          "host-agent",
+          `refreshed credentials in place for agent=${payload.agentId} (${this.children.size} active child(ren))`
+        );
+        return;
+      }
+      for (const child of affected) {
+        this.credentialEnvByDeploy.set(child.deployId, credEnv);
+        this.restartWithFreshCredentials(child);
+      }
       log.info(
         "host-agent",
-        `refreshed credentials in place for agent=${payload.agentId} (${this.children.size} active child(ren))`
+        `refreshed env credential for agent=${payload.agentId}; restarted ${affected.length} child(ren)`
       );
     } catch (err) {
       log.warn(
@@ -53866,6 +53921,28 @@ var HostAgentSupervisor = class {
       );
     }
   }
+  /**
+   * Replace one session child so it picks up a re-linked env credential.
+   * Kill THEN untrack (an intentional stop, so its exit handler neither
+   * reports `ended` nor crash-respawns), then resume the same conversation;
+   * `resumeOne` waits out the dying daemon if it still holds the session.
+   */
+  restartWithFreshCredentials(child) {
+    const session = pickSavedSessionForWorkspace(this.listSavedSessions(), child.cwd, child.deployId);
+    if (!session) {
+      log.warn(
+        "host-agent",
+        `credential refresh: no saved pairing for deploy=${child.deployId.slice(0, 8)} \u2014 it keeps the old key until its next restart`
+      );
+      return;
+    }
+    try {
+      child.proc.kill("SIGTERM");
+    } catch {
+    }
+    this.untrackChild(child.deployId);
+    this.resumeOne({ deployId: child.deployId, cwd: child.cwd, session, agent: child.agent });
+  }
 };
 async function resolveHostIdentity(enrollToken) {
   const existing = ensureControlPollSecret(loadHostIdentity());
@@ -54168,7 +54245,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.76.18" : "0.0.0-dev";
+  const cliVersion = true ? "2.76.20" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto17.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -54704,7 +54781,7 @@ async function mcpWarm(argv = [], opts = {}) {
 // src/commands/version.ts
 var import_picocolors15 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.76.18" : "unknown";
+  const v = true ? "2.76.20" : "unknown";
   console.log(`${import_picocolors15.default.bold("codeam-cli")} ${import_picocolors15.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.76.18",
+  "version": "2.76.20",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",