codeam-cli 2.1.0 → 2.2.0

package/CHANGELOG.md

@@ -4,6 +4,44 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.1.0] — 2026-04-25
+
+### Added
+
+- **cli:** Exponential polling backoff with ±10% jitter
+- **cli:** Forward X-Plugin-Auth-Token on /commands/output
+
+### Build
+
+- **deps:** Bump com.google.zxing:core in /apps/jetbrains-plugin (#5)
+- **deps:** Bump org.jetbrains.intellij.platform (#6)
+- **deps:** Bump gradle-wrapper in /apps/jetbrains-plugin (#14)
+
+### CI
+
+- **jetbrains:** Publish plugin to Marketplace stable channel on tag
+
+### Changed
+
+- **cli:** Drop unused token field from WS auth payload
+- **cli:** Zod-validate remote command payloads
+
+### Chore
+
+- Ignore .worktrees directory
+- **cli:** Upgrade @clack/prompts to 1.2.0 (ESM bundled via tsup)
+- **deps:** Bump vitest to clear esbuild CVE (GHSA-67mh-4wv8-2f99)
+
+### Documentation
+
+- Enforce correct-and-implicit TypeScript typing
+
+### Fixed
+
+- **cli:** Pass PTY args as argv array (no shell concatenation)
+- **cli:** Clean up PTY child on SIGINT/SIGTERM
+- **vsc-plugin:** Guard startMonitoring against re-entry; scaffold vitest
+
 ## [2.0.2] — 2026-04-23
 
 ### Build

package/dist/index.js

@@ -87,9 +87,9 @@ var require_src = __commonJS({
 });
 
 // src/commands/start.ts
-var fs5 = __toESM(require("fs"));
+var fs6 = __toESM(require("fs"));
 var os5 = __toESM(require("os"));
-var path5 = __toESM(require("path"));
+var path6 = __toESM(require("path"));
 var import_crypto = require("crypto");
 var import_child_process3 = require("child_process");
 var import_picocolors2 = __toESM(require("picocolors"));
@@ -179,7 +179,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.1.0",
+  version: "2.2.0",
   description: "Remote control Claude Code (and other AI coding agents) from your mobile phone. Pair your device, send prompts, stream responses in real-time, and approve commands \u2014 from anywhere.",
   main: "dist/index.js",
   bin: {
@@ -251,7 +251,7 @@ var package_default = {
     picocolors: "^1.1.0",
     "qrcode-terminal": "^0.12.0",
     ws: "^8.18.0",
-    zod: "^3.22.4"
+    zod: "^4.3.6"
   },
   devDependencies: {
     "@codeagent/shared": "*",
@@ -259,8 +259,8 @@ var package_default = {
     "@types/qrcode-terminal": "^0.12.0",
     "@types/ws": "^8.5.0",
     tsup: "^8.0.0",
-    typescript: "^5.0.0",
-    vitest: "^3.2.4"
+    typescript: "^6.0.3",
+    vitest: "^4.1.5"
   }
 };
 
@@ -298,6 +298,16 @@ function showPairingCode(code, expiresAt) {
 
 // src/services/websocket.service.ts
 var import_ws = __toESM(require("ws"));
+
+// src/lib/poll-delay.ts
+var MAX_DELAY_MS = 3e4;
+function computePollDelay({ baseMs, failures }) {
+  const exp = Math.min(MAX_DELAY_MS, baseMs * Math.pow(2, failures));
+  const jitter = exp * (0.9 + Math.random() * 0.2);
+  return Math.round(jitter);
+}
+
+// src/services/websocket.service.ts
 var API_BASE = process.env.CODEAM_API_URL ?? "https://codeagent-mobile-api.vercel.app";
 var WS_URL = API_BASE.replace("https://", "wss://").replace("http://", "ws://") + "/api/ws";
 var HEARTBEAT_MS = 3e4;
@@ -350,7 +360,7 @@ var WebSocketService = class {
         this.handlers.forEach((h) => h.onDisconnected());
         if (this.reconnectAttempts < MAX_RECONNECT) {
           this.reconnectAttempts++;
-          const delay = Math.min(1e3 * 2 ** this.reconnectAttempts, 3e4);
+          const delay = computePollDelay({ baseMs: 1e3, failures: this.reconnectAttempts });
           this.reconnectTimer = setTimeout(() => this.connect(), delay);
         }
       });
@@ -393,16 +403,6 @@ var WebSocketService = class {
 var https = __toESM(require("https"));
 var http = __toESM(require("http"));
 var os2 = __toESM(require("os"));
-
-// src/lib/poll-delay.ts
-var MAX_DELAY_MS = 3e4;
-function computePollDelay({ baseMs, failures }) {
-  const exp = Math.min(MAX_DELAY_MS, baseMs * Math.pow(2, failures));
-  const jitter = exp * (0.9 + Math.random() * 0.2);
-  return Math.round(jitter);
-}
-
-// src/services/pairing.service.ts
 var API_BASE2 = process.env.CODEAM_API_URL ?? "https://codeagent-mobile-api.vercel.app";
 async function requestCode(pluginId) {
   try {
@@ -476,7 +476,7 @@ var _transport = {
   getJson: _getJson
 };
 async function _postJson(url, body) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const data = JSON.stringify(body);
     const u2 = new URL(url);
     const transport = u2.protocol === "https:" ? https : http;
@@ -504,9 +504,9 @@ async function _postJson(url, body) {
             return;
           }
           try {
-            resolve(JSON.parse(body2));
+            resolve2(JSON.parse(body2));
           } catch {
-            resolve(null);
+            resolve2(null);
           }
         });
       }
@@ -521,7 +521,7 @@ async function _postJson(url, body) {
   });
 }
 async function _getJson(url) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const u2 = new URL(url);
     const transport = u2.protocol === "https:" ? https : http;
     const req = transport.request(
@@ -544,9 +544,9 @@ async function _getJson(url) {
             return;
           }
           try {
-            resolve(JSON.parse(body));
+            resolve2(JSON.parse(body));
           } catch {
-            resolve(null);
+            resolve2(null);
           }
         });
       }
@@ -1661,20 +1661,20 @@ var OutputService = class _OutputService {
     if (this.pluginAuthToken) {
       headers["X-Plugin-Auth-Token"] = this.pluginAuthToken;
     }
-    return new Promise((resolve) => {
+    return new Promise((resolve2) => {
       const attempt = (attemptsLeft) => {
         _transport2.sendOutputChunk(`${API_BASE4}/api/commands/output`, headers, payload).then(({ statusCode, body: resBody }) => {
           if (statusCode >= 400) {
             process.stderr.write(`[codeam] output API error ${statusCode}: ${resBody}
 `);
           }
-          resolve();
+          resolve2();
         }).catch(() => {
           if (attemptsLeft > 0) {
             const delay = 200 * (maxRetries - attemptsLeft + 1);
             setTimeout(() => attempt(attemptsLeft - 1), delay);
           } else {
-            resolve();
+            resolve2();
           }
         });
       };
@@ -1686,7 +1686,7 @@ var _transport2 = {
   sendOutputChunk: _sendOutputChunk
 };
 function _sendOutputChunk(url, headers, payload) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     let settled = false;
     const u2 = new URL(url);
     const transport = u2.protocol === "https:" ? https2 : http2;
@@ -1710,7 +1710,7 @@ function _sendOutputChunk(url, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve({ statusCode: res.statusCode ?? 0, body: resData });
+          resolve2({ statusCode: res.statusCode ?? 0, body: resData });
         });
       }
     );
@@ -1733,6 +1733,7 @@ var path4 = __toESM(require("path"));
 var os4 = __toESM(require("os"));
 var https3 = __toESM(require("https"));
 var http3 = __toESM(require("http"));
+var import_zod = require("zod");
 
 // src/services/logger.ts
 var LEVELS = { silent: 0, error: 1, warn: 2, info: 3, debug: 4 };
@@ -1754,6 +1755,16 @@ var log = {
 };
 
 // src/services/history.service.ts
+var historyRecordSchema = import_zod.z.object({
+  type: import_zod.z.string().optional(),
+  timestamp: import_zod.z.union([import_zod.z.string(), import_zod.z.number()]).optional(),
+  uuid: import_zod.z.string().optional(),
+  isMeta: import_zod.z.boolean().optional(),
+  message: import_zod.z.object({
+    // Claude content is either a string or an array of typed blocks.
+    content: import_zod.z.union([import_zod.z.string(), import_zod.z.array(import_zod.z.unknown())]).optional()
+  }).passthrough().optional()
+}).passthrough();
 var API_BASE5 = process.env.CODEAM_API_URL ?? "https://codeagent-mobile-api.vercel.app";
 function encodeCwd(cwd) {
   return cwd.replace(/\//g, "-");
@@ -1779,28 +1790,35 @@ function parseJsonl(filePath) {
   }
   const lines = raw.split("\n").filter(Boolean);
   for (const line of lines) {
+    let parsedJson;
     try {
-      const record = JSON.parse(line);
-      const type = record["type"];
-      const msg = record["message"];
-      const ts = record["timestamp"];
-      const timestamp = typeof ts === "string" ? new Date(ts).getTime() : typeof ts === "number" ? ts : Date.now();
-      const uuid = record["uuid"] ?? `${Date.now()}-${Math.random()}`;
-      if (record["isMeta"]) continue;
-      if (type === "user" && msg) {
-        const text = extractText(msg["content"]).trim();
-        if (text) messages.push({ id: uuid, role: "user", text, timestamp });
-      } else if (type === "assistant" && msg) {
-        const text = extractText(msg["content"]).trim();
-        if (text) messages.push({ id: uuid, role: "agent", text, timestamp });
-      }
+      parsedJson = JSON.parse(line);
     } catch {
+      continue;
+    }
+    const result = historyRecordSchema.safeParse(parsedJson);
+    if (!result.success) {
+      log.warn("history:parseJsonl", `record failed schema validation in ${filePath}`, result.error.issues);
+      continue;
+    }
+    const record = result.data;
+    if (record.isMeta) continue;
+    const ts = record.timestamp;
+    const timestamp = typeof ts === "string" ? new Date(ts).getTime() : typeof ts === "number" ? ts : Date.now();
+    const uuid = record.uuid ?? `${Date.now()}-${Math.random()}`;
+    const msg = record.message;
+    if (record.type === "user" && msg) {
+      const text = extractText(msg.content).trim();
+      if (text) messages.push({ id: uuid, role: "user", text, timestamp });
+    } else if (record.type === "assistant" && msg) {
+      const text = extractText(msg.content).trim();
+      if (text) messages.push({ id: uuid, role: "agent", text, timestamp });
     }
   }
   return messages;
 }
 function post(endpoint, body) {
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const payload = JSON.stringify(body);
     const u2 = new URL(`${API_BASE5}${endpoint}`);
     const transport = u2.protocol === "https:" ? https3 : http3;
@@ -1820,17 +1838,17 @@ function post(endpoint, body) {
         res.resume();
         const ok = res.statusCode !== void 0 && res.statusCode >= 200 && res.statusCode < 300;
         if (!ok) log.warn("history:post", `${endpoint} \u2192 HTTP ${res.statusCode}`);
-        resolve(ok);
+        resolve2(ok);
       }
     );
     req.on("error", (err) => {
       log.warn("history:post", `${endpoint} network error`, err);
-      resolve(false);
+      resolve2(false);
     });
     req.on("timeout", () => {
       log.warn("history:post", `${endpoint} timeout after 15s`);
       req.destroy();
-      resolve(false);
+      resolve2(false);
     });
     req.write(payload);
     req.end();
@@ -2127,32 +2145,92 @@ var HistoryService = class {
 };
 
 // src/lib/payload.ts
-var import_zod = require("zod");
-var fileEntrySchema = import_zod.z.object({
-  filename: import_zod.z.string().min(1).max(256),
-  mimeType: import_zod.z.string(),
-  base64: import_zod.z.string()
+var import_zod2 = require("zod");
+var fileEntrySchema = import_zod2.z.object({
+  filename: import_zod2.z.string().min(1).max(256),
+  mimeType: import_zod2.z.string(),
+  base64: import_zod2.z.string()
 });
-var startCommandSchema = import_zod.z.object({
-  prompt: import_zod.z.string().optional(),
-  files: import_zod.z.array(fileEntrySchema).optional(),
-  input: import_zod.z.string().optional(),
-  index: import_zod.z.number().optional(),
-  from: import_zod.z.number().optional(),
-  id: import_zod.z.string().optional(),
-  auto: import_zod.z.boolean().optional()
+var startCommandSchema = import_zod2.z.object({
+  prompt: import_zod2.z.string().optional(),
+  files: import_zod2.z.array(fileEntrySchema).optional(),
+  input: import_zod2.z.string().optional(),
+  index: import_zod2.z.number().optional(),
+  from: import_zod2.z.number().optional(),
+  id: import_zod2.z.string().optional(),
+  auto: import_zod2.z.boolean().optional(),
+  // `read_file` / `write_file` for the mobile + landing mini-IDE modal.
+  // `path` is bounded to 4096 chars (a comfortable POSIX path max) so a
+  // malformed payload can't blow up the disk-side validator.
+  path: import_zod2.z.string().min(1).max(4096).optional(),
+  content: import_zod2.z.string().optional()
 });
 function parsePayload(schema, raw) {
   const result = schema.safeParse(raw);
   return result.success ? result.data : null;
 }
 
+// src/services/file-ops.service.ts
+var fs5 = __toESM(require("fs/promises"));
+var path5 = __toESM(require("path"));
+var MAX_FILE_BYTES = 5 * 1024 * 1024;
+function resolveSafe(rawPath) {
+  const cwd = process.cwd();
+  const absolute = path5.isAbsolute(rawPath) ? path5.normalize(rawPath) : path5.resolve(cwd, rawPath);
+  const relativeFromCwd = path5.relative(cwd, absolute);
+  if (relativeFromCwd.startsWith("..") || path5.isAbsolute(relativeFromCwd)) {
+    throw new Error(`Path escapes the project root: ${rawPath}`);
+  }
+  return absolute;
+}
+function looksBinary(buf) {
+  const sample = buf.subarray(0, Math.min(8192, buf.length));
+  for (let i = 0; i < sample.length; i++) {
+    if (sample[i] === 0) return true;
+  }
+  return false;
+}
+async function readProjectFile(rawPath) {
+  try {
+    const abs = resolveSafe(rawPath);
+    const stat2 = await fs5.stat(abs);
+    if (!stat2.isFile()) {
+      return { error: "Not a regular file." };
+    }
+    if (stat2.size > MAX_FILE_BYTES) {
+      return { error: `File too large (${(stat2.size / 1024 / 1024).toFixed(1)} MB > ${MAX_FILE_BYTES / 1024 / 1024} MB).` };
+    }
+    const buf = await fs5.readFile(abs);
+    if (looksBinary(buf)) {
+      return { error: "Binary file \u2014 refusing to open in a code editor." };
+    }
+    return { content: buf.toString("utf-8") };
+  } catch (e) {
+    const msg = e instanceof Error ? e.message : "Read failed";
+    return { error: msg };
+  }
+}
+async function writeProjectFile(rawPath, content) {
+  try {
+    const abs = resolveSafe(rawPath);
+    if (Buffer.byteLength(content, "utf-8") > MAX_FILE_BYTES) {
+      return { error: "Content too large." };
+    }
+    await fs5.mkdir(path5.dirname(abs), { recursive: true });
+    await fs5.writeFile(abs, content, "utf-8");
+    return { ok: true };
+  } catch (e) {
+    const msg = e instanceof Error ? e.message : "Write failed";
+    return { error: msg };
+  }
+}
+
 // src/commands/start.ts
 function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-    const tmpPath = path5.join(os5.tmpdir(), `codeam-${(0, import_crypto.randomUUID)()}-${safeName}`);
-    fs5.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    const tmpPath = path6.join(os5.tmpdir(), `codeam-${(0, import_crypto.randomUUID)()}-${safeName}`);
+    fs6.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     return tmpPath;
   });
 }
@@ -2225,8 +2303,8 @@ try:
     sys.exit((st>>8)&0xFF)
 except Exception:sys.exit(0)
 `;
-    const helperPath = path5.join(os5.tmpdir(), "codeam-quota-helper.py");
-    fs5.writeFileSync(helperPath, helperScript, { mode: 420 });
+    const helperPath = path6.join(os5.tmpdir(), "codeam-quota-helper.py");
+    fs6.writeFileSync(helperPath, helperScript, { mode: 420 });
     const python = findInPath("python3") ?? findInPath("python");
     if (!python) {
       quotaFetchInProgress = false;
@@ -2258,7 +2336,7 @@ except Exception:sys.exit(0)
         } catch {
         }
         try {
-          fs5.unlinkSync(helperPath);
+          fs6.unlinkSync(helperPath);
         } catch {
         }
         quotaFetchInProgress = false;
@@ -2308,7 +2386,7 @@ except Exception:sys.exit(0)
           setTimeout(() => {
             for (const p2 of paths) {
               try {
-                fs5.unlinkSync(p2);
+                fs6.unlinkSync(p2);
               } catch {
               }
             }
@@ -2380,6 +2458,26 @@ except Exception:sys.exit(0)
         await relay.sendResult(cmd.id, "completed", { models });
         break;
       }
+      case "read_file": {
+        const { path: filePath } = parsed;
+        if (!filePath) {
+          await relay.sendResult(cmd.id, "failed", { error: "Missing path" });
+          break;
+        }
+        const result = await readProjectFile(filePath);
+        await relay.sendResult(cmd.id, "completed", result);
+        break;
+      }
+      case "write_file": {
+        const { path: filePath, content } = parsed;
+        if (!filePath || typeof content !== "string") {
+          await relay.sendResult(cmd.id, "failed", { error: "Missing path or content" });
+          break;
+        }
+        const result = await writeProjectFile(filePath, content);
+        await relay.sendResult(cmd.id, "completed", result);
+        break;
+      }
     }
   });
   ws.addHandler({
@@ -2407,7 +2505,7 @@ except Exception:sys.exit(0)
           setTimeout(() => {
             for (const p2 of paths) {
               try {
-                fs5.unlinkSync(p2);
+                fs6.unlinkSync(p2);
               } catch {
               }
             }
@@ -2509,7 +2607,7 @@ __export(dist_exports, {
   S_ERROR: () => ge,
   S_INFO: () => he,
   S_PASSWORD_MASK: () => xe,
-  S_RADIO_ACTIVE: () => z3,
+  S_RADIO_ACTIVE: () => z4,
   S_RADIO_INACTIVE: () => H2,
   S_STEP_ACTIVE: () => _e,
   S_STEP_CANCEL: () => oe,
@@ -2988,7 +3086,7 @@ function w(r, t2) {
   const e = r;
   e.isTTY && e.setRawMode(t2);
 }
-function z2({ input: r = import_node_process.stdin, output: t2 = import_node_process.stdout, overwrite: e = true, hideCursor: s = true } = {}) {
+function z3({ input: r = import_node_process.stdin, output: t2 = import_node_process.stdout, overwrite: e = true, hideCursor: s = true } = {}) {
   const i = _.createInterface({ input: r, output: t2, prompt: "", tabSize: 1 });
   _.emitKeypressEvents(r, i), r instanceof import_node_tty.ReadStream && r.isTTY && r.setRawMode(true);
   const n = (o, { name: a, sequence: h }) => {
@@ -3600,7 +3698,7 @@ var d2 = w2("\u2502", "|");
 var E2 = w2("\u2514", "\u2014");
 var Ie = w2("\u2510", "T");
 var Ee = w2("\u2518", "\u2014");
-var z3 = w2("\u25CF", ">");
+var z4 = w2("\u25CF", ">");
 var H2 = w2("\u25CB", " ");
 var te = w2("\u25FB", "[\u2022]");
 var U = w2("\u25FC", "[+]");
@@ -3692,7 +3790,7 @@ var Ae = (e) => new H({ options: e.options, initialValue: e.initialValue ? [e.in
     const $2 = Me(a), y2 = a.hint && a.value === this.focusedValue ? (0, import_node_util2.styleText)("dim", ` (${a.hint})`) : "";
     switch (l) {
       case "active":
-        return `${(0, import_node_util2.styleText)("green", z3)} ${$2}${y2}`;
+        return `${(0, import_node_util2.styleText)("green", z4)} ${$2}${y2}`;
       case "inactive":
         return `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", $2)}`;
       case "disabled":
@@ -3805,9 +3903,9 @@ ${(0, import_node_util2.styleText)("gray", d2)}` : ""}`;
       }
       default: {
         const l = r ? `${(0, import_node_util2.styleText)("cyan", d2)}  ` : "", $2 = r ? (0, import_node_util2.styleText)("cyan", E2) : "";
-        return `${c2}${l}${this.value ? `${(0, import_node_util2.styleText)("green", z3)} ${i}` : `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", i)}`}${e.vertical ? r ? `
+        return `${c2}${l}${this.value ? `${(0, import_node_util2.styleText)("green", z4)} ${i}` : `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", i)}`}${e.vertical ? r ? `
 ${(0, import_node_util2.styleText)("cyan", d2)}  ` : `
-` : ` ${(0, import_node_util2.styleText)("dim", "/")} `}${this.value ? `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", s)}` : `${(0, import_node_util2.styleText)("green", z3)} ${s}`}
+` : ` ${(0, import_node_util2.styleText)("dim", "/")} `}${this.value ? `${(0, import_node_util2.styleText)("dim", H2)} ${(0, import_node_util2.styleText)("dim", s)}` : `${(0, import_node_util2.styleText)("green", z4)} ${s}`}
 ${$2}
 `;
       }
@@ -4138,7 +4236,7 @@ var fe = ({ indicator: e = "dots", onCancel: i, output: s = process.stdout, canc
     const A2 = (performance.now() - _2) / 1e3, k2 = Math.floor(A2 / 60), L2 = Math.floor(A2 % 60);
     return k2 > 0 ? `[${k2}m ${L2}s]` : `[${L2}s]`;
   }, D2 = a.withGuide ?? u.withGuide, ie = (_2 = "") => {
-    p2 = true, $2 = z2({ output: s }), g = R2(_2), h = performance.now(), D2 && s.write(`${(0, import_node_util2.styleText)("gray", d2)}
+    p2 = true, $2 = z3({ output: s }), g = R2(_2), h = performance.now(), D2 && s.write(`${(0, import_node_util2.styleText)("gray", d2)}
 `);
     let A2 = 0, k2 = 0;
     x(), y2 = setInterval(() => {
@@ -4209,7 +4307,7 @@ var _t = (e) => {
       case "selected":
         return `${re(u2, (n) => (0, import_node_util2.styleText)("dim", n))}`;
       case "active":
-        return `${(0, import_node_util2.styleText)("green", z3)} ${u2}${s.hint ? ` ${(0, import_node_util2.styleText)("dim", `(${s.hint})`)}` : ""}`;
+        return `${(0, import_node_util2.styleText)("green", z4)} ${u2}${s.hint ? ` ${(0, import_node_util2.styleText)("dim", `(${s.hint})`)}` : ""}`;
       case "cancelled":
         return `${re(u2, (n) => (0, import_node_util2.styleText)(["strikethrough", "dim"], n))}`;
       default:
@@ -4437,7 +4535,7 @@ async function pair() {
   console.log("");
   const waitSpin = dist_exports.spinner();
   waitSpin.start("Waiting for mobile app...");
-  await new Promise((resolve) => {
+  await new Promise((resolve2) => {
     let stopPolling = null;
     function sigintHandler() {
       stopPolling?.();
@@ -4460,7 +4558,7 @@ async function pair() {
         });
         showSuccess(`Paired with ${info.userName} (${info.plan})`);
         console.log("");
-        resolve();
+        resolve2();
       },
       () => {
         waitSpin.stop("Timed out");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Remote control Claude Code (and other AI coding agents) from your mobile phone. Pair your device, send prompts, stream responses in real-time, and approve commands — from anywhere.",
   "main": "dist/index.js",
   "bin": {
@@ -72,7 +72,7 @@
     "picocolors": "^1.1.0",
     "qrcode-terminal": "^0.12.0",
     "ws": "^8.18.0",
-    "zod": "^3.22.4"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@codeagent/shared": "*",
@@ -80,7 +80,7 @@
     "@types/qrcode-terminal": "^0.12.0",
     "@types/ws": "^8.5.0",
     "tsup": "^8.0.0",
-    "typescript": "^5.0.0",
-    "vitest": "^3.2.4"
+    "typescript": "^6.0.3",
+    "vitest": "^4.1.5"
   }
 }