codeam-cli 2.20.0 → 2.20.2

package/dist/index.js

@@ -441,7 +441,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.20.0",
+  version: "2.20.2",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -735,7 +735,7 @@ async function postLinkCredential(input) {
   }
 }
 async function _postJsonAuthed(url, body, pluginAuthToken) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const data = JSON.stringify(body);
     const u2 = new URL(url);
     const transport = u2.protocol === "https:" ? https : http;
@@ -767,9 +767,9 @@ async function _postJsonAuthed(url, body, pluginAuthToken) {
             return;
           }
           try {
-            resolve3(JSON.parse(responseBody));
+            resolve4(JSON.parse(responseBody));
           } catch {
-            resolve3(null);
+            resolve4(null);
           }
         });
       }
@@ -784,7 +784,7 @@ async function _postJsonAuthed(url, body, pluginAuthToken) {
   });
 }
 async function _postJson(url, body) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const data = JSON.stringify(body);
     const u2 = new URL(url);
     const transport = u2.protocol === "https:" ? https : http;
@@ -813,9 +813,9 @@ async function _postJson(url, body) {
             return;
           }
           try {
-            resolve3(JSON.parse(body2));
+            resolve4(JSON.parse(body2));
           } catch {
-            resolve3(null);
+            resolve4(null);
           }
         });
       }
@@ -830,7 +830,7 @@ async function _postJson(url, body) {
   });
 }
 async function _getJson(url) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const u2 = new URL(url);
     const transport = u2.protocol === "https:" ? https : http;
     const req = transport.request(
@@ -854,9 +854,9 @@ async function _getJson(url) {
             return;
           }
           try {
-            resolve3(JSON.parse(body));
+            resolve4(JSON.parse(body));
           } catch {
-            resolve3(null);
+            resolve4(null);
           }
         });
       }
@@ -3508,14 +3508,14 @@ async function addSourceContext(frames) {
   return frames;
 }
 function getContextLinesFromFile(path37, ranges, output) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const stream = (0, import_node_fs.createReadStream)(path37);
     const lineReaded = (0, import_node_readline.createInterface)({
       input: stream
     });
     function destroyStreamAndResolve() {
       stream.destroy();
-      resolve3();
+      resolve4();
     }
     let lineNumber = 0;
     let currentRangeIndex = 0;
@@ -4802,9 +4802,9 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
     if (!waitUntil) return;
     if (this.disabled || this.optedOut) return;
     if (!this._waitUntilCycle) {
-      let resolve3;
+      let resolve4;
       const promise = new Promise((r) => {
-        resolve3 = r;
+        resolve4 = r;
       });
       try {
         waitUntil(promise);
@@ -4812,7 +4812,7 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
         return;
       }
       this._waitUntilCycle = {
-        resolve: resolve3,
+        resolve: resolve4,
         startedAt: Date.now(),
         timer: void 0
       };
@@ -4836,12 +4836,12 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
     return cycle?.resolve;
   }
   async resolveWaitUntilFlush() {
-    const resolve3 = this._consumeWaitUntilCycle();
+    const resolve4 = this._consumeWaitUntilCycle();
     try {
       await super.flush();
     } catch {
     } finally {
-      resolve3?.();
+      resolve4?.();
     }
   }
   getPersistedProperty(key) {
@@ -4933,15 +4933,15 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
   async waitForLocalEvaluationReady(timeoutMs = THIRTY_SECONDS) {
     if (this.isLocalEvaluationReady()) return true;
     if (void 0 === this.featureFlagsPoller) return false;
-    return new Promise((resolve3) => {
+    return new Promise((resolve4) => {
       const timeout = setTimeout(() => {
         cleanup();
-        resolve3(false);
+        resolve4(false);
       }, timeoutMs);
       const cleanup = this._events.on("localEvaluationFlagsLoaded", (count) => {
         clearTimeout(timeout);
         cleanup();
-        resolve3(count > 0);
+        resolve4(count > 0);
       });
     });
   }
@@ -5378,13 +5378,13 @@ var PostHogBackendClient = class extends PostHogCoreStateless {
     this.context?.enter(data, options);
   }
   async _shutdown(shutdownTimeoutMs) {
-    const resolve3 = this._consumeWaitUntilCycle();
+    const resolve4 = this._consumeWaitUntilCycle();
     await this.featureFlagsPoller?.stopPoller(shutdownTimeoutMs);
     this.errorTracking.shutdown();
     try {
       return await super._shutdown(shutdownTimeoutMs);
     } finally {
-      resolve3?.();
+      resolve4?.();
     }
   }
   async _requestRemoteConfigPayload(flagKey) {
@@ -5740,7 +5740,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.20.0" : "0.0.0-dev",
+    cliVersion: true ? "2.20.2" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -8874,15 +8874,15 @@ function runInstaller() {
     "-Command",
     "irm https://claude.ai/install.ps1 | iex"
   ] : ["-c", "curl -fsSL https://claude.ai/install.sh | bash"];
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const proc = (0, import_child_process4.spawn)(cmd, args2, { stdio: "inherit" });
     proc.on("error", (err) => {
       console.error(`
   \u2717 Installer failed to launch: ${err.message}`);
-      resolve3(false);
+      resolve4(false);
     });
     proc.on("exit", (code) => {
-      resolve3(code === 0);
+      resolve4(code === 0);
     });
   });
 }
@@ -9045,17 +9045,17 @@ function parseUsageOutput(raw) {
   return { percent, resetAt };
 }
 async function fetchClaudeQuota() {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const claudeCmd = findInPath("claude") ? "claude" : "claude-code";
     if (!claudeCmd) {
-      resolve3(null);
+      resolve4(null);
       return;
     }
     const helperPath = path11.join(os10.tmpdir(), "codeam-quota-helper.py");
     fs8.writeFileSync(helperPath, HELPER_SCRIPT, { mode: 420 });
     const python = findInPath("python3") ?? findInPath("python");
     if (!python) {
-      resolve3(null);
+      resolve4(null);
       return;
     }
     const proc = (0, import_child_process5.spawn)(python, [helperPath, claudeCmd, "--tools", ""], {
@@ -9082,13 +9082,13 @@ async function fetchClaudeQuota() {
           fs8.unlinkSync(helperPath);
         } catch {
         }
-        resolve3(result);
+        resolve4(result);
       }, 5e3);
     }, 8e3);
     setTimeout(() => {
       if (!resolved) {
         resolved = true;
-        resolve3(null);
+        resolve4(null);
       }
       try {
         proc.kill();
@@ -9531,6 +9531,9 @@ var ClaudeRuntimeStrategy = class {
   detectInteractivePrompt(lines) {
     return detectSelector(lines) ?? detectListSelector(lines);
   }
+  detectReadyPrompt(lines) {
+    return lines.some((l) => /^\?\s.*shortcut/i.test(l.trim()));
+  }
   credentialLocator() {
     return claudeCredentialLocator();
   }
@@ -10411,6 +10414,9 @@ var CodexRuntimeStrategy = class {
   detectInteractivePrompt(lines) {
     return detectCodexSelector(lines);
   }
+  detectReadyPrompt(lines) {
+    return lines.some((l) => /[│┃]\s*›/u.test(l));
+  }
   credentialLocator() {
     return codexCredentialLocator();
   }
@@ -10422,12 +10428,12 @@ function resolveNpm(os26) {
   return os26.id === "win32" ? "npm.cmd" : "npm";
 }
 async function installCodexViaNpm(os26) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const proc = (0, import_node_child_process4.spawn)(resolveNpm(os26), ["install", "-g", "@openai/codex"], {
       stdio: "inherit"
     });
     proc.on("close", (code) => {
-      if (code === 0) resolve3();
+      if (code === 0) resolve4();
       else reject(new Error(`npm install -g @openai/codex exited ${code}`));
     });
     proc.on("error", (err) => {
@@ -10542,12 +10548,12 @@ async function ensureCoderabbitInstalled(os26) {
     return false;
   }
   console.log("\n  CodeRabbit CLI not found \u2014 installing via the official script\u2026\n");
-  const ok = await new Promise((resolve3) => {
+  const ok = await new Promise((resolve4) => {
     const proc = (0, import_node_child_process5.spawn)("sh", ["-c", `curl -fsSL ${INSTALL_URL} | sh`], {
       stdio: "inherit"
     });
-    proc.on("close", (code) => resolve3(code === 0));
-    proc.on("error", () => resolve3(false));
+    proc.on("close", (code) => resolve4(code === 0));
+    proc.on("error", () => resolve4(false));
   });
   if (!ok) return false;
   os26.augmentPath([`${os26.homeDir()}/.local/bin`, "/opt/homebrew/bin"]);
@@ -10666,7 +10672,7 @@ var CoderabbitRuntimeStrategy = class {
   }
   async runOneShot(input) {
     const launch = await this.prepareInvocation(input);
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const stdoutBuf = [];
       const stderrBuf = [];
       const proc = (0, import_node_child_process7.spawn)(launch.cmd, launch.args, {
@@ -10677,7 +10683,7 @@ var CoderabbitRuntimeStrategy = class {
       proc.stderr?.on("data", (b) => stderrBuf.push(b));
       proc.on("error", (err) => reject(err));
       proc.on("close", (code) => {
-        resolve3(
+        resolve4(
           this.parseOutput({
             exitCode: code ?? 0,
             stdout: Buffer.concat(stdoutBuf).toString("utf8"),
@@ -10858,6 +10864,9 @@ var CursorRuntimeStrategy = class {
   detectInteractivePrompt(lines) {
     return detectCursorSelector(lines);
   }
+  detectReadyPrompt(lines) {
+    return lines.some((l) => /[│┃]\s*[›>]\s/u.test(l));
+  }
   credentialLocator() {
     return cursorCredentialLocator();
   }
@@ -11065,6 +11074,12 @@ var AiderRuntimeStrategy = class {
   detectInteractivePrompt(lines) {
     return detectAiderSelector(lines);
   }
+  detectReadyPrompt(lines) {
+    return lines.some((l) => {
+      const t2 = l.replace(/\x1B\[[^@-~]*[@-~]/g, "").trim();
+      return t2 === ">" || /^>\s*$/.test(t2) || /^\.\.\.\s*>\s*$/.test(t2);
+    });
+  }
   credentialLocator() {
     return aiderCredentialLocator();
   }
@@ -11201,14 +11216,14 @@ var ChunkEmitter = class {
       "chunkEmitter",
       `send type=${body.type ?? "(clear)"} bytes=${payload.length} done=${body.done === true}`
     );
-    return new Promise((resolve3) => {
+    return new Promise((resolve4) => {
       const attempt = (attemptsLeft) => {
         _transport2.post(this.url, this.headers, payload).then(({ statusCode, body: resBody }) => {
           const tookMs = Date.now() - t0;
           if (statusCode === 410 || statusCode === 404 && /SESSION_NOT_FOUND|SESSION_GONE/.test(resBody)) {
             process.stderr.write("[codeam] session was deleted/disconnected \u2014 stopping output stream.\n");
             log.info("chunkEmitter", `dead status=${statusCode} took=${tookMs}ms`);
-            resolve3({ dead: true });
+            resolve4({ dead: true });
             return;
           }
           if (statusCode >= 400) {
@@ -11218,7 +11233,7 @@ var ChunkEmitter = class {
           } else {
             log.info("chunkEmitter", `ok status=${statusCode} took=${tookMs}ms`);
           }
-          resolve3({ dead: false });
+          resolve4({ dead: false });
         }).catch((err) => {
           log.warn(
             "chunkEmitter",
@@ -11229,7 +11244,7 @@ var ChunkEmitter = class {
             const delay = 200 * (maxRetries - attemptsLeft + 1);
             setTimeout(() => attempt(attemptsLeft - 1), delay);
           } else {
-            resolve3({ dead: false });
+            resolve4({ dead: false });
           }
         });
       };
@@ -11241,7 +11256,7 @@ var _transport2 = {
   post: _post
 };
 function _post(url, headers, payload) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     let settled = false;
     const u2 = new URL(url);
     const transport = u2.protocol === "https:" ? https3 : http3;
@@ -11265,7 +11280,7 @@ function _post(url, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve3({ statusCode: res.statusCode ?? 0, body: resData });
+          resolve4({ statusCode: res.statusCode ?? 0, body: resData });
         });
       }
     );
@@ -11362,6 +11377,20 @@ var OutputService = class _OutputService {
   emitter;
   runtime;
   lastSentContent = "";
+  /**
+   * Wall-clock of the most recent tick where the rendered + filtered
+   * content actually changed. Most agent TUIs keep redrawing a
+   * spinner + input prompt after the response is settled (Claude:
+   * `? for shortcuts`; Codex: ratatui input bar), which keeps
+   * `pty.lastPushTime` moving and prevents the PTY-idle heuristic
+   * from ever crossing the IDLE_MS threshold — so the turn never
+   * finalises and `done: true` never reaches the webapp's
+   * canonical-refresh path. Tracking content-stability separately
+   * closes that hole: PTY can churn all it wants, but once the
+   * filtered TUI output stops changing for a beat we know the
+   * agent is done.
+   */
+  lastContentChangeAt = 0;
   pollTimer = null;
   startTime = 0;
   terminalTurnPending = false;
@@ -11375,6 +11404,22 @@ var OutputService = class _OutputService {
   static IDLE_MS = 3e3;
   /** Same threshold but tighter for selectors (UI is ready to interact immediately). */
   static SELECTOR_IDLE_MS = 1500;
+  /**
+   * Content-stable threshold. When the rendered + filtered content
+   * hasn't changed for this long AND we can see Claude's "? for
+   * shortcuts" prompt re-drawn at the bottom (= back to input
+   * state), we know the response is settled even though the PTY
+   * itself is still pushing spinner / status redraws. Tighter than
+   * IDLE_MS because the ready-prompt is a strong signal on its own.
+   */
+  static READY_STABLE_MS = 800;
+  /**
+   * Hard content-stable fallback. If the filtered content has been
+   * unchanged for this long, finalize regardless of the ready
+   * prompt — covers cases where Claude's TUI doesn't redraw the
+   * shortcuts line (older versions, headless runs).
+   */
+  static CONTENT_STABLE_MS = 8e3;
   /**
    * Grace period before tick processes anything — Claude needs ~100-
    * 200 ms after `\r` to clear the input echo and re-render the TUI.
@@ -11496,6 +11541,7 @@ var OutputService = class _OutputService {
     this.pty.activate();
     this.steps.reset();
     this.lastSentContent = "";
+    this.lastContentChangeAt = 0;
     this.startTime = Date.now();
     this.pollTimer = setInterval(() => this.tick(), _OutputService.POLL_MS);
   }
@@ -11588,18 +11634,32 @@ var OutputService = class _OutputService {
       return;
     }
     const idleMs = this.pty.lastPushTime > 0 ? now - this.pty.lastPushTime : elapsed;
+    if (content !== this.lastSentContent) {
+      this.lastContentChangeAt = now;
+      this.lastSentContent = content;
+      this.send({ type: "text", content, done: false }).catch(() => {
+      });
+    }
+    const contentStableMs = this.lastContentChangeAt > 0 ? now - this.lastContentChangeAt : 0;
+    const readyPrompt = this.runtime.detectReadyPrompt?.(lines) ?? false;
     log.trace(
       "outputSvc",
-      `tick content (raw=${this.pty.size}B lines=${lines.length} content=${content.length} idleMs=${idleMs})`
+      `tick content (raw=${this.pty.size}B lines=${lines.length} content=${content.length} idleMs=${idleMs} stableMs=${contentStableMs} ready=${readyPrompt})`
     );
     if (idleMs >= _OutputService.IDLE_MS) {
+      log.trace("outputSvc", `finalize: idleMs=${idleMs}`);
       this.finalize();
       return;
     }
-    if (content !== this.lastSentContent) {
-      this.lastSentContent = content;
-      this.send({ type: "text", content, done: false }).catch(() => {
-      });
+    if (readyPrompt && contentStableMs >= _OutputService.READY_STABLE_MS) {
+      log.trace("outputSvc", `finalize: readyPrompt + stableMs=${contentStableMs}`);
+      this.finalize();
+      return;
+    }
+    if (contentStableMs >= _OutputService.CONTENT_STABLE_MS) {
+      log.trace("outputSvc", `finalize: stableMs=${contentStableMs} (fallback)`);
+      this.finalize();
+      return;
     }
   }
   finalize() {
@@ -11721,7 +11781,7 @@ function parseJsonl(filePath) {
   return messages;
 }
 function post(endpoint, body) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const payload = JSON.stringify(body);
     const u2 = new URL(`${API_BASE4}${endpoint}`);
     const transport = u2.protocol === "https:" ? https4 : http4;
@@ -11742,17 +11802,17 @@ function post(endpoint, body) {
         res.resume();
         const ok = res.statusCode !== void 0 && res.statusCode >= 200 && res.statusCode < 300;
         if (!ok) log.warn("history:post", `${endpoint} \u2192 HTTP ${res.statusCode}`);
-        resolve3(ok);
+        resolve4(ok);
       }
     );
     req.on("error", (err) => {
       log.warn("history:post", `${endpoint} network error`, err);
-      resolve3(false);
+      resolve4(false);
     });
     req.on("timeout", () => {
       log.warn("history:post", `${endpoint} timeout after 15s`);
       req.destroy();
-      resolve3(false);
+      resolve4(false);
     });
     req.write(payload);
     req.end();
@@ -12146,6 +12206,7 @@ var HistoryService = class _HistoryService {
 
 // src/services/file-watcher.service.ts
 var import_child_process7 = require("child_process");
+var fs21 = __toESM(require("fs"));
 var os22 = __toESM(require("os"));
 var path25 = __toESM(require("path"));
 
@@ -12235,7 +12296,7 @@ var _transport3 = {
   post: _post2
 };
 function _post2(url, headers, payload) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     let settled = false;
     const u2 = new URL(url);
     const lib = u2.protocol === "https:" ? https5 : http5;
@@ -12260,7 +12321,7 @@ function _post2(url, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve3({ statusCode: res.statusCode ?? 0, body });
+          resolve4({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -12320,6 +12381,30 @@ var _chokidarSeam = {
     }
   }
 };
+function findGitRoot(startDir) {
+  return _findGitRootSeam.resolve(startDir);
+}
+var _findGitRootSeam = {
+  resolve: _defaultFindGitRoot
+};
+function _defaultFindGitRoot(startDir) {
+  let dir = path25.resolve(startDir);
+  const seen = /* @__PURE__ */ new Set();
+  for (let i = 0; i < 256; i++) {
+    if (seen.has(dir)) return null;
+    seen.add(dir);
+    try {
+      const gitPath = path25.join(dir, ".git");
+      const stat3 = fs21.statSync(gitPath, { throwIfNoEntry: false });
+      if (stat3 && (stat3.isDirectory() || stat3.isFile())) return dir;
+    } catch {
+    }
+    const parent = path25.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+  return null;
+}
 var FileWatcherService = class {
   constructor(opts) {
     this.opts = opts;
@@ -12329,6 +12414,13 @@ var FileWatcherService = class {
   watcher = null;
   pending = /* @__PURE__ */ new Map();
   apiBase;
+  /**
+   * Cache of (file directory → git root). Resolved lazily on each
+   * file event so brand-new sub-repos under the workingDir light up
+   * automatically; cached so a hot session with thousands of writes
+   * doesn't hammer `fs.statSync` for every event.
+   */
+  gitRootByDir = /* @__PURE__ */ new Map();
   stopped = false;
   /**
    * Start watching `opts.workingDir`. Idempotent (second call is a
@@ -12471,67 +12563,82 @@ var FileWatcherService = class {
   }
   async emitForFile(absPath, changeType) {
     if (this.stopped) return;
-    const relPath = path25.relative(this.opts.workingDir, absPath);
-    if (!relPath || relPath.startsWith("..")) {
+    const fileDir = path25.dirname(absPath);
+    let gitRoot = this.gitRootByDir.get(fileDir);
+    if (gitRoot === void 0) {
+      gitRoot = findGitRoot(fileDir);
+      this.gitRootByDir.set(fileDir, gitRoot);
+    }
+    if (!gitRoot) {
+      log.trace(
+        "fileWatcher",
+        `no enclosing git repo for ${absPath} \u2014 suppressing emit`
+      );
       return;
     }
+    const relPathInRepo = path25.relative(gitRoot, absPath);
+    if (!relPathInRepo || relPathInRepo.startsWith("..")) return;
+    const repoPath = path25.relative(this.opts.workingDir, gitRoot);
+    const repoName = path25.basename(gitRoot);
     let diffText = "";
     let fileStatus = "modified";
     if (changeType === "unlink") {
-      const diff = await this.gitDiff(relPath);
+      const diff = await this.gitDiff(gitRoot, relPathInRepo);
       if (diff !== null && diff.trim().length > 0) {
         diffText = diff;
       } else {
         await this.postFileChanged({
           sessionId: this.opts.sessionId,
           pluginId: this.opts.pluginId,
-          filePath: relPath,
+          filePath: relPathInRepo,
           fileStatus: "deleted",
           linesAdded: 0,
           linesRemoved: 0,
-          hunkCount: 0
+          hunkCount: 0,
+          repoPath,
+          repoName
         });
         return;
       }
       fileStatus = "deleted";
     } else {
-      const diff = await this.gitDiff(relPath);
+      const diff = await this.gitDiff(gitRoot, relPathInRepo);
       if (diff === null) {
         log.warn(
           "fileWatcher",
-          `git diff failed for ${relPath} \u2014 emitting file-changed only`
+          `git diff failed for ${relPathInRepo} in ${gitRoot} \u2014 suppressing emit`
         );
-        await this.postFileChanged({
-          sessionId: this.opts.sessionId,
-          pluginId: this.opts.pluginId,
-          filePath: relPath,
-          fileStatus: changeType === "add" ? "added" : "modified",
-          linesAdded: 0,
-          linesRemoved: 0,
-          hunkCount: 0
-        });
         return;
       }
       diffText = diff;
     }
     const parsed = parseUnifiedDiff(diffText);
+    if (changeType !== "unlink" && parsed.totalLinesAdded === 0 && parsed.totalLinesRemoved === 0 && parsed.hunks.length === 0) {
+      log.trace(
+        "fileWatcher",
+        `no content delta for ${relPathInRepo} in ${repoName} \u2014 suppressing emit`
+      );
+      return;
+    }
     const finalStatus = parsed.fileStatus !== "modified" ? parsed.fileStatus : changeType === "add" ? "added" : changeType === "unlink" ? "deleted" : fileStatus;
     const reviewStatus = parsed.hunks.length > 0 ? "awaiting_review" : void 0;
     await this.postFileChanged({
       sessionId: this.opts.sessionId,
       pluginId: this.opts.pluginId,
-      filePath: relPath,
+      filePath: relPathInRepo,
       fileStatus: finalStatus,
       linesAdded: parsed.totalLinesAdded,
       linesRemoved: parsed.totalLinesRemoved,
       hunkCount: parsed.hunks.length,
-      reviewStatus
+      reviewStatus,
+      repoPath,
+      repoName
     });
     for (const hunk of parsed.hunks) {
       await this.postReviewHunk({
         sessionId: this.opts.sessionId,
         pluginId: this.opts.pluginId,
-        filePath: relPath,
+        filePath: relPathInRepo,
         fileStatus: finalStatus,
         hunkHeader: hunk.header,
         lines: hunk.lines,
@@ -12542,9 +12649,11 @@ var FileWatcherService = class {
   }
   /**
    * Compute the unified diff for a single path relative to the
-   * working dir. Returns `null` when git is unavailable or the cwd
-   * is not a repo. Returns `''` when there's no diff (a touch that
-   * didn't change content).
+   * enclosing git repo (NOT the CLI's workingDir — see
+   * `emitForFile`'s walk-up). Returns `null` when git is unavailable
+   * or the discovered repo root is no longer a repo (race with
+   * external removal). Returns `''` when there's no diff (a touch
+   * that didn't change content).
    *
    * For tracked files we use `git diff --no-color -- <path>` which
    * compares the worktree against HEAD's blob.
@@ -12552,16 +12661,16 @@ var FileWatcherService = class {
    * zero) we use `git diff --no-color --no-index /dev/null <path>`,
    * which produces an "added"-shaped diff against an empty source.
    */
-  async gitDiff(relPath) {
+  async gitDiff(repoRoot, relPath) {
     const tracked = await runGit(
-      this.opts.workingDir,
+      repoRoot,
       ["diff", "--no-color", "--", relPath]
     );
     if (tracked === null) return null;
     if (tracked.trim().length > 0) return tracked;
     const devNull = process.platform === "win32" ? "NUL" : "/dev/null";
     const untracked = await runGit(
-      this.opts.workingDir,
+      repoRoot,
       ["diff", "--no-color", "--no-index", "--", devNull, relPath],
       { allowNonZeroExit: true }
     );
@@ -12629,12 +12738,12 @@ var _gitSeam = {
   run: _runGitImpl
 };
 async function _runGitImpl(cwd, args2, opts = {}) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     let proc;
     try {
       proc = (0, import_child_process7.spawn)("git", args2, { cwd, env: process.env });
     } catch {
-      resolve3(null);
+      resolve4(null);
       return;
     }
     let stdout = "";
@@ -12645,13 +12754,13 @@ async function _runGitImpl(cwd, args2, opts = {}) {
     proc.stderr?.on("data", (c2) => {
       stderr += c2.toString();
     });
-    proc.on("error", () => resolve3(null));
+    proc.on("error", () => resolve4(null));
     proc.on("close", (code) => {
       if (code === 0 || opts.allowNonZeroExit) {
-        resolve3(stdout);
+        resolve4(stdout);
       } else {
         log.trace("fileWatcher", `git ${args2.join(" ")} exited ${code} stderr=${stderr.slice(0, 200)}`);
-        resolve3(null);
+        resolve4(null);
       }
     });
   });
@@ -12671,7 +12780,7 @@ var _transport4 = {
   get: _get
 };
 function _post3(url, headers, payload) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     let settled = false;
     const u2 = new URL(url);
     const lib = u2.protocol === "https:" ? https6 : http6;
@@ -12696,7 +12805,7 @@ function _post3(url, headers, payload) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve3({ statusCode: res.statusCode ?? 0, body });
+          resolve4({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -12713,7 +12822,7 @@ function _post3(url, headers, payload) {
   });
 }
 function _get(url, headers) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     let settled = false;
     const u2 = new URL(url);
     const lib = u2.protocol === "https:" ? https6 : http6;
@@ -12737,7 +12846,7 @@ function _get(url, headers) {
         res.on("end", () => {
           if (settled) return;
           settled = true;
-          resolve3({ statusCode: res.statusCode ?? 0, body });
+          resolve4({ statusCode: res.statusCode ?? 0, body });
         });
       }
     );
@@ -13120,7 +13229,7 @@ function buildKeepAlive(ctx) {
   let timer = null;
   async function setIdleTimeout(minutes) {
     if (!ctx.inCodespace || !ctx.codespaceName) return;
-    await new Promise((resolve3) => {
+    await new Promise((resolve4) => {
       const proc = (0, import_child_process8.spawn)(
         "gh",
         [
@@ -13134,8 +13243,8 @@ function buildKeepAlive(ctx) {
         { stdio: "ignore", detached: true }
       );
       proc.unref();
-      proc.on("exit", () => resolve3());
-      proc.on("error", () => resolve3());
+      proc.on("exit", () => resolve4());
+      proc.on("error", () => resolve4());
     });
   }
   return {
@@ -13158,7 +13267,7 @@ function buildKeepAlive(ctx) {
 }
 
 // src/commands/start/handlers.ts
-var fs23 = __toESM(require("fs"));
+var fs24 = __toESM(require("fs"));
 var os23 = __toESM(require("os"));
 var path29 = __toESM(require("path"));
 var import_crypto4 = require("crypto");
@@ -13218,7 +13327,7 @@ function parsePayload2(schema, raw) {
 }
 
 // src/services/file-ops.service.ts
-var fs21 = __toESM(require("fs/promises"));
+var fs22 = __toESM(require("fs/promises"));
 var path26 = __toESM(require("path"));
 var MAX_FILE_BYTES = 5 * 1024 * 1024;
 var MAX_WALK_DEPTH = 6;
@@ -13259,7 +13368,7 @@ function isUnder(parent, candidate) {
 }
 async function isExistingFile(absPath) {
   try {
-    const stat3 = await fs21.stat(absPath);
+    const stat3 = await fs22.stat(absPath);
     return stat3.isFile();
   } catch {
     return false;
@@ -13272,7 +13381,7 @@ async function walkForSuffix(dir, needleVariants, depth, ctx) {
   ctx.visited++;
   let entries = [];
   try {
-    entries = await fs21.readdir(dir, { withFileTypes: true });
+    entries = await fs22.readdir(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -13333,11 +13442,11 @@ async function readProjectFile(rawPath) {
     if (!abs) {
       return { error: `File not found in the project tree: ${rawPath}` };
     }
-    const stat3 = await fs21.stat(abs);
+    const stat3 = await fs22.stat(abs);
     if (stat3.size > MAX_FILE_BYTES) {
       return { error: `File too large (${(stat3.size / 1024 / 1024).toFixed(1)} MB > ${MAX_FILE_BYTES / 1024 / 1024} MB).` };
     }
-    const buf = await fs21.readFile(abs);
+    const buf = await fs22.readFile(abs);
     if (looksBinary(buf)) {
       return { error: "Binary file \u2014 refusing to open in a code editor." };
     }
@@ -13356,8 +13465,8 @@ async function writeProjectFile(rawPath, content) {
     if (Buffer.byteLength(content, "utf-8") > MAX_FILE_BYTES) {
       return { error: "Content too large." };
     }
-    await fs21.mkdir(path26.dirname(abs), { recursive: true });
-    await fs21.writeFile(abs, content, "utf-8");
+    await fs22.mkdir(path26.dirname(abs), { recursive: true });
+    await fs22.writeFile(abs, content, "utf-8");
     return { ok: true };
   } catch (e) {
     const msg = e instanceof Error ? e.message : "Write failed";
@@ -13368,7 +13477,7 @@ async function writeProjectFile(rawPath, content) {
 // src/services/project-ops.service.ts
 var import_child_process9 = require("child_process");
 var import_util2 = require("util");
-var fs22 = __toESM(require("fs/promises"));
+var fs23 = __toESM(require("fs/promises"));
 var path27 = __toESM(require("path"));
 var execFileP3 = (0, import_util2.promisify)(import_child_process9.execFile);
 var PROJECT_IGNORE = /* @__PURE__ */ new Set([
@@ -13417,7 +13526,7 @@ async function listProjectFiles(opts = {}) {
     }
     let entries = [];
     try {
-      entries = await fs22.readdir(dir, { withFileTypes: true });
+      entries = await fs23.readdir(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -13438,7 +13547,7 @@ async function listProjectFiles(opts = {}) {
         }
         let size = 0;
         try {
-          const st3 = await fs22.stat(full);
+          const st3 = await fs23.stat(full);
           size = st3.size;
         } catch {
         }
@@ -13541,7 +13650,7 @@ async function gitStatus(cwd) {
   try {
     const gitDir = (await git(["rev-parse", "--git-dir"], root)).stdout.trim();
     const mergeHead = path27.isAbsolute(gitDir) ? path27.join(gitDir, "MERGE_HEAD") : path27.join(root, gitDir, "MERGE_HEAD");
-    await fs22.access(mergeHead);
+    await fs23.access(mergeHead);
     hasMergeInProgress = true;
   } catch {
   }
@@ -13687,7 +13796,7 @@ async function jsSearchFiles(opts, cwd, cap) {
     }
     let content = "";
     try {
-      content = await fs22.readFile(path27.join(cwd, f.path), "utf8");
+      content = await fs23.readFile(path27.join(cwd, f.path), "utf8");
     } catch {
       continue;
     }
@@ -13971,7 +14080,7 @@ var pendingAttachmentFiles = /* @__PURE__ */ new Set();
 function cleanupAttachmentTempFiles() {
   for (const p2 of pendingAttachmentFiles) {
     try {
-      fs23.unlinkSync(p2);
+      fs24.unlinkSync(p2);
     } catch {
     }
   }
@@ -13981,7 +14090,7 @@ function saveFilesTemp(files) {
   return files.filter(({ base64 }) => base64 && base64.length > 0).map(({ filename, base64 }) => {
     const safeName = filename.replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
     const tmpPath = path29.join(os23.tmpdir(), `codeam-${(0, import_crypto4.randomUUID)()}-${safeName}`);
-    fs23.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
+    fs24.writeFileSync(tmpPath, Buffer.from(base64, "base64"));
     pendingAttachmentFiles.add(tmpPath);
     return tmpPath;
   });
@@ -14001,7 +14110,7 @@ var startTask = (ctx, _cmd, parsed) => {
     setTimeout(() => {
       for (const p2 of paths) {
         try {
-          fs23.unlinkSync(p2);
+          fs24.unlinkSync(p2);
         } catch {
         }
         pendingAttachmentFiles.delete(p2);
@@ -14567,7 +14676,7 @@ async function pair(args2 = []) {
     waitSpin.message(waitMessage());
   }, 1e3);
   countdownInterval.unref?.();
-  await new Promise((resolve3) => {
+  await new Promise((resolve4) => {
     let stopPolling = null;
     function sigintHandler() {
       clearInterval(countdownInterval);
@@ -14607,7 +14716,7 @@ async function pair(args2 = []) {
         });
         showSuccess(`Paired with ${info.userName} (${info.plan})`);
         console.log("");
-        resolve3();
+        resolve4();
       },
       () => {
         clearInterval(countdownInterval);
@@ -14623,7 +14732,7 @@ async function pair(args2 = []) {
 }
 
 // src/commands/pair-auto.ts
-var fs24 = __toESM(require("fs"));
+var fs25 = __toESM(require("fs"));
 var os24 = __toESM(require("os"));
 var import_crypto6 = require("crypto");
 var API_BASE7 = resolveApiBaseUrl();
@@ -14643,10 +14752,10 @@ function readTokenFromArgs(args2) {
   if (fileFlag) {
     const path37 = fileFlag.slice("--token-file=".length);
     try {
-      const content = fs24.readFileSync(path37, "utf8").trim();
+      const content = fs25.readFileSync(path37, "utf8").trim();
       if (content.length === 0) fail(`--token-file ${path37} is empty`);
       try {
-        fs24.unlinkSync(path37);
+        fs25.unlinkSync(path37);
       } catch {
       }
       return content;
@@ -14943,12 +15052,12 @@ var GitHubCodespacesProvider = class {
     }
     if (!isAuthed) {
       resetStdinForChild();
-      await new Promise((resolve3, reject) => {
+      await new Promise((resolve4, reject) => {
         const proc = (0, import_child_process12.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
           stdio: "inherit"
         });
         proc.on("exit", (code) => {
-          if (code === 0) resolve3();
+          if (code === 0) resolve4();
           else reject(new Error("gh auth login failed."));
         });
         proc.on("error", reject);
@@ -14977,13 +15086,13 @@ var GitHubCodespacesProvider = class {
       }
       wt(noteLines.join("\n"), "One more permission needed");
       resetStdinForChild();
-      const refreshCode = await new Promise((resolve3, reject) => {
+      const refreshCode = await new Promise((resolve4, reject) => {
         const proc = (0, import_child_process12.spawn)(
           "gh",
           ["auth", "refresh", "-h", "github.com", "-s", "codespace"],
           { stdio: "inherit" }
         );
-        proc.on("exit", (code) => resolve3(code ?? 1));
+        proc.on("exit", (code) => resolve4(code ?? 1));
         proc.on("error", reject);
       });
       if (refreshCode !== 0) {
@@ -15127,10 +15236,10 @@ var GitHubCodespacesProvider = class {
     if (q(proceed) || !proceed) return;
     O2.step(`Installing gh via ${installCmd.describe}\u2026`);
     resetStdinForChild();
-    const ok = await new Promise((resolve3) => {
+    const ok = await new Promise((resolve4) => {
       const proc = (0, import_child_process12.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
-      proc.on("exit", (code) => resolve3(code === 0));
-      proc.on("error", () => resolve3(false));
+      proc.on("exit", (code) => resolve4(code === 0));
+      proc.on("error", () => resolve4(false));
     });
     if (ok) O2.success("gh installed");
     else O2.error("gh install failed");
@@ -15154,14 +15263,14 @@ var GitHubCodespacesProvider = class {
       "Expanding GitHub scopes"
     );
     resetStdinForChild();
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const proc = (0, import_child_process12.spawn)(
         "gh",
         ["auth", "refresh", "-h", "github.com", "-s", "repo,read:org"],
         { stdio: "inherit" }
       );
       proc.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error(
           "gh auth refresh failed. Re-run `gh auth refresh -h github.com -s repo,read:org` manually."
         ));
@@ -15332,13 +15441,13 @@ var GitHubCodespacesProvider = class {
   }
   async streamCommand(workspaceId, command2) {
     resetStdinForChild();
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const proc = (0, import_child_process12.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve3({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve4({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -15359,7 +15468,7 @@ var GitHubCodespacesProvider = class {
       "--",
       `mkdir -p ${shellQuote(remoteDir)} && tar -xzf - -C ${shellQuote(remoteDir)}`
     ];
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const tar = (0, import_child_process12.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
@@ -15379,7 +15488,7 @@ var GitHubCodespacesProvider = class {
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
         if (code === 0) {
-          resolve3();
+          resolve4();
         } else {
           const reason = (sshErr || tarErr || `exit ${code}`).trim().slice(0, 500);
           reject(new Error(`Remote tar failed: ${reason}`));
@@ -15397,7 +15506,7 @@ var GitHubCodespacesProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const proc = (0, import_child_process12.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", cmd],
@@ -15409,7 +15518,7 @@ var GitHubCodespacesProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -15499,10 +15608,10 @@ var GitpodProvider = class {
       "Authenticating Gitpod"
     );
     resetStdinForChild2();
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const proc = (0, import_child_process13.spawn)("gitpod", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error("gitpod login failed."));
       });
       proc.on("error", reject);
@@ -15651,13 +15760,13 @@ var GitpodProvider = class {
   }
   async streamCommand(workspaceId, command2) {
     resetStdinForChild2();
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const proc = (0, import_child_process13.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve3({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve4({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -15671,7 +15780,7 @@ var GitpodProvider = class {
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote2(remoteDir)} && tar -xzf - -C ${shellQuote2(remoteDir)}`;
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const tar = (0, import_child_process13.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
@@ -15692,7 +15801,7 @@ var GitpodProvider = class {
       tar.on("error", reject);
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error(`Remote tar failed: ${(sshErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -15707,7 +15816,7 @@ var GitpodProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote2(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const proc = (0, import_child_process13.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", cmd],
@@ -15719,7 +15828,7 @@ var GitpodProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -15776,14 +15885,14 @@ var GitLabWorkspacesProvider = class {
       "Authenticating GitLab"
     );
     resetStdinForChild3();
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const proc = (0, import_child_process14.spawn)(
         "glab",
         ["auth", "login", "--scopes", "api,read_user,read_repository"],
         { stdio: "inherit" }
       );
       proc.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error("glab auth login failed."));
       });
       proc.on("error", reject);
@@ -15948,13 +16057,13 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
   async streamCommand(workspaceId, command2) {
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
     resetStdinForChild3();
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const proc = (0, import_child_process14.spawn)(
         "ssh",
         ["-tt", "-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve3({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve4({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -15969,7 +16078,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote3(remoteDir)} && tar -xzf - -C ${shellQuote3(remoteDir)}`;
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const tar = (0, import_child_process14.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
       const ssh = (0, import_child_process14.spawn)(
         "ssh",
@@ -15987,7 +16096,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       tar.on("error", reject);
       ssh.on("error", reject);
       ssh.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error(`Remote tar failed: ${(sshErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -16000,7 +16109,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote3(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const proc = (0, import_child_process14.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, cmd],
@@ -16012,7 +16121,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -16103,10 +16212,10 @@ var RailwayProvider = class {
       "Authenticating Railway"
     );
     resetStdinForChild4();
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const proc = (0, import_child_process15.spawn)("railway", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error("railway login failed."));
       });
       proc.on("error", reject);
@@ -16246,13 +16355,13 @@ var RailwayProvider = class {
       throw new Error("Invalid Railway workspace id (expected projectId/serviceId).");
     }
     resetStdinForChild4();
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve4, reject) => {
       const proc = (0, import_child_process15.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", command2],
         { stdio: "inherit" }
       );
-      proc.on("exit", (code) => resolve3({ code: code ?? 0 }));
+      proc.on("exit", (code) => resolve4({ code: code ?? 0 }));
       proc.on("error", reject);
     });
   }
@@ -16270,7 +16379,7 @@ var RailwayProvider = class {
     tarArgs.push(".");
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote4(remoteDir)} && tar -xzf - -C ${shellQuote4(remoteDir)}`;
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const tar = (0, import_child_process15.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
       const sh = (0, import_child_process15.spawn)(
         "railway",
@@ -16288,7 +16397,7 @@ var RailwayProvider = class {
       tar.on("error", reject);
       sh.on("error", reject);
       sh.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error(`Remote tar failed: ${(shErr || tarErr || `exit ${code}`).trim().slice(0, 500)}`));
       });
     });
@@ -16304,7 +16413,7 @@ var RailwayProvider = class {
       parts.push(`chmod ${options.mode.toString(8)} ${shellQuote4(remotePath)}`);
     }
     const cmd = parts.join(" && ");
-    await new Promise((resolve3, reject) => {
+    await new Promise((resolve4, reject) => {
       const proc = (0, import_child_process15.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", cmd],
@@ -16316,7 +16425,7 @@ var RailwayProvider = class {
       });
       proc.on("error", reject);
       proc.on("exit", (code) => {
-        if (code === 0) resolve3();
+        if (code === 0) resolve4();
         else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
       });
       proc.stdin?.write(contents);
@@ -16839,7 +16948,7 @@ async function stopWorkspaceFromLocal(target) {
 
 // src/commands/link.ts
 var import_node_crypto4 = require("crypto");
-var fs25 = __toESM(require("fs"));
+var fs26 = __toESM(require("fs"));
 var path34 = __toESM(require("path"));
 var import_chokidar = __toESM(require("chokidar"));
 var import_picocolors11 = __toESM(require("picocolors"));
@@ -16878,7 +16987,7 @@ function parseLinkArgs(args2) {
   if (apiKeyFileArg) {
     const filePath = apiKeyFileArg.slice("--api-key-file=".length);
     try {
-      apiKey = fs25.readFileSync(path34.resolve(filePath), "utf8").trim();
+      apiKey = fs26.readFileSync(path34.resolve(filePath), "utf8").trim();
     } catch (err) {
       throw new Error(`Could not read --api-key-file ${filePath}: ${err.message}`);
     }
@@ -16923,7 +17032,7 @@ async function link(args2 = []) {
   waitSpin.start(waitMsg());
   const countdown = setInterval(() => waitSpin.message(waitMsg()), 1e3);
   countdown.unref?.();
-  const paired = await new Promise((resolve3, reject) => {
+  const paired = await new Promise((resolve4, reject) => {
     let stopPoll = null;
     const sigint = () => {
       clearInterval(countdown);
@@ -16936,7 +17045,7 @@ async function link(args2 = []) {
         process.removeListener("SIGINT", sigint);
         clearInterval(countdown);
         waitSpin.stop("Paired");
-        resolve3(info);
+        resolve4(info);
       },
       () => {
         clearInterval(countdown);
@@ -16972,7 +17081,7 @@ async function link(args2 = []) {
     return;
   }
   if (parsed.tokenFile) {
-    const credential = fs25.readFileSync(path34.resolve(parsed.tokenFile), "utf8").trim();
+    const credential = fs26.readFileSync(path34.resolve(parsed.tokenFile), "utf8").trim();
     if (!credential) {
       showError(`--token-file ${parsed.tokenFile} is empty.`);
       process.exit(1);
@@ -17042,14 +17151,14 @@ async function captureFreshCredentials(ctx) {
     }
   };
   try {
-    const token = await new Promise((resolve3, reject) => {
+    const token = await new Promise((resolve4, reject) => {
       let settled = false;
       const tryExtract = async () => {
         if (settled) return;
         const t2 = await ctx.locator.extract();
         if (t2 && !settled) {
           settled = true;
-          resolve3(t2);
+          resolve4(t2);
         }
       };
       watcher.on("add", () => void tryExtract());
@@ -17161,7 +17270,7 @@ async function linkDryRunPreflight(ctx) {
 var import_node_dns = require("dns");
 var import_node_util4 = require("util");
 var import_node_crypto5 = require("crypto");
-var fs26 = __toESM(require("fs"));
+var fs27 = __toESM(require("fs"));
 var path35 = __toESM(require("path"));
 var import_picocolors12 = __toESM(require("picocolors"));
 var dnsResolveP = (0, import_node_util4.promisify)(import_node_dns.resolve);
@@ -17220,11 +17329,11 @@ async function checkHealth(apiBase) {
 function checkConfigDir() {
   const dir = path35.join(require("os").homedir(), ".codeam");
   try {
-    fs26.mkdirSync(dir, { recursive: true, mode: 448 });
+    fs27.mkdirSync(dir, { recursive: true, mode: 448 });
     const probe = path35.join(dir, ".doctor-probe");
-    fs26.writeFileSync(probe, "ok", { mode: 384 });
-    const read = fs26.readFileSync(probe, "utf8");
-    fs26.unlinkSync(probe);
+    fs27.writeFileSync(probe, "ok", { mode: 384 });
+    const read = fs27.readFileSync(probe, "utf8");
+    fs27.unlinkSync(probe);
     if (read !== "ok") throw new Error("write/read round-trip mismatch");
     return {
       id: "config-dir",
@@ -17330,7 +17439,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.20.0" : "0.0.0-dev";
+  const cliVersion = true ? "2.20.2" : "0.0.0-dev";
   const apiBase = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto5.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -17529,7 +17638,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.20.0" : "unknown";
+  const v = true ? "2.20.2" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -17657,7 +17766,7 @@ function tryShowSubcommandHelp(cmd, args2) {
 var _subcommandHelpKeys = Object.keys(HELPS);
 
 // src/lib/updateNotifier.ts
-var fs27 = __toESM(require("fs"));
+var fs28 = __toESM(require("fs"));
 var os25 = __toESM(require("os"));
 var path36 = __toESM(require("path"));
 var https7 = __toESM(require("https"));
@@ -17672,7 +17781,7 @@ function cachePath() {
 }
 function readCache() {
   try {
-    const raw = fs27.readFileSync(cachePath(), "utf8");
+    const raw = fs28.readFileSync(cachePath(), "utf8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.fetchedAt !== "number" || typeof parsed.latest !== "string") return null;
     return parsed;
@@ -17683,10 +17792,10 @@ function readCache() {
 function writeCache(cache) {
   try {
     const file = cachePath();
-    fs27.mkdirSync(path36.dirname(file), { recursive: true });
+    fs28.mkdirSync(path36.dirname(file), { recursive: true });
     const tmp = `${file}.${process.pid}.tmp`;
-    fs27.writeFileSync(tmp, JSON.stringify(cache));
-    fs27.renameSync(tmp, file);
+    fs28.writeFileSync(tmp, JSON.stringify(cache));
+    fs28.renameSync(tmp, file);
   } catch {
   }
 }
@@ -17704,14 +17813,14 @@ function compareSemver(a, b) {
   return 0;
 }
 function fetchLatest() {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const req = https7.get(
       REGISTRY_URL,
       { headers: { Accept: "application/json" }, timeout: REQUEST_TIMEOUT_MS },
       (res) => {
         if (res.statusCode !== 200) {
           res.resume();
-          resolve3(null);
+          resolve4(null);
           return;
         }
         let buf = "";
@@ -17723,21 +17832,21 @@ function fetchLatest() {
           try {
             const json = JSON.parse(buf);
             if (typeof json.version === "string") {
-              resolve3(json.version);
+              resolve4(json.version);
             } else {
-              resolve3(null);
+              resolve4(null);
             }
           } catch {
-            resolve3(null);
+            resolve4(null);
           }
         });
       }
     );
     req.on("timeout", () => {
       req.destroy();
-      resolve3(null);
+      resolve4(null);
     });
-    req.on("error", () => resolve3(null));
+    req.on("error", () => resolve4(null));
   });
 }
 function notifyIfStale(currentVersion, latest) {
@@ -17757,7 +17866,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.20.0" : null;
+  const current = true ? "2.20.2" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;