codeam-cli 2.22.0 → 2.23.0

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.22.1] — 2026-05-25
+
+### Fixed
+
+- **cli:** Payload.agentId — accept any string, not just the public enum (#187)
+
+## [2.22.0] — 2026-05-25
+
+### Added
+
+- **cli:** Handle request_link_credentials from backend auto-link (#186)
+
 ## [2.21.2] — 2026-05-25
 
 ### Fixed

package/dist/index.js

@@ -441,7 +441,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.22.0",
+  version: "2.23.0",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -734,6 +734,34 @@ async function postLinkCredential(input) {
     };
   }
 }
+async function postAiResult(input) {
+  const body = {
+    sessionId: input.sessionId,
+    pluginId: input.pluginId,
+    kind: input.kind,
+    summary: input.summary
+  };
+  if (input.turnId) body.turnId = input.turnId;
+  if (input.stats) body.stats = input.stats;
+  if (input.fileChangeId) body.fileChangeId = input.fileChangeId;
+  if (input.reasoning) body.reasoning = input.reasoning;
+  if (input.securityNote) body.securityNote = input.securityNote;
+  try {
+    await _transport.postJsonAuthed(
+      `${API_BASE}/api/plugin/ai-result`,
+      body,
+      input.pluginAuthToken
+    );
+    return { ok: true };
+  } catch (err) {
+    const e = err;
+    return {
+      ok: false,
+      status: typeof e.statusCode === "number" ? e.statusCode : 0,
+      message: e.message || "unknown"
+    };
+  }
+}
 async function _postJsonAuthed(url, body, pluginAuthToken) {
   return new Promise((resolve5, reject) => {
     const data = JSON.stringify(body);
@@ -5740,7 +5768,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.22.0" : "0.0.0-dev",
+    cliVersion: true ? "2.23.0" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -9099,6 +9127,59 @@ async function fetchClaudeQuota() {
   });
 }
 
+// src/services/spawn-and-capture.ts
+var import_child_process6 = require("child_process");
+async function spawnAndCapture(cmd, args2, opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 6e4;
+  return new Promise((resolve5) => {
+    let settled = false;
+    const settle = (value) => {
+      if (settled) return;
+      settled = true;
+      resolve5(value);
+    };
+    let child;
+    try {
+      child = (0, import_child_process6.spawn)(cmd, [...args2], {
+        cwd: opts.cwd,
+        env: opts.env ?? process.env,
+        stdio: ["ignore", "pipe", "pipe"]
+      });
+    } catch {
+      settle(null);
+      return;
+    }
+    let stdout = "";
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk.toString("utf8");
+    });
+    child.stderr?.on("data", (chunk) => {
+      opts.onStderr?.(chunk.toString("utf8"));
+    });
+    const timer = setTimeout(() => {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      settle(null);
+    }, timeoutMs);
+    timer.unref();
+    child.on("error", () => {
+      clearTimeout(timer);
+      settle(null);
+    });
+    child.on("exit", (code) => {
+      clearTimeout(timer);
+      if (code !== 0) {
+        settle(null);
+        return;
+      }
+      const trimmed = stdout.trim();
+      settle(trimmed.length > 0 ? trimmed : null);
+    });
+  });
+}
+
 // src/agents/claude/history.ts
 var fs9 = __toESM(require("fs"));
 var path12 = __toESM(require("path"));
@@ -9541,6 +9622,14 @@ var ClaudeRuntimeStrategy = class {
   loginLauncher() {
     return claudeLoginLauncher();
   }
+  async generateOneShot(prompt, opts) {
+    const launch = buildClaudeLaunch(["-p", prompt], this.os);
+    if (!launch) return null;
+    return spawnAndCapture(launch.cmd, launch.args, {
+      cwd: opts?.cwd,
+      timeoutMs: opts?.timeoutMs
+    });
+  }
 };
 
 // src/agents/claude/deploy.ts
@@ -9549,12 +9638,12 @@ var os13 = __toESM(require("os"));
 var path14 = __toESM(require("path"));
 
 // src/agents/claude/credentials.ts
-var import_child_process6 = require("child_process");
+var import_child_process7 = require("child_process");
 var fs10 = __toESM(require("fs"));
 var os12 = __toESM(require("os"));
 var path13 = __toESM(require("path"));
 var import_util = require("util");
-var execFileP2 = (0, import_util.promisify)(import_child_process6.execFile);
+var execFileP2 = (0, import_util.promisify)(import_child_process7.execFile);
 async function detectLocalClaudeCredentials() {
   const localClaudeDir = path13.join(os12.homedir(), ".claude");
   const flat = path13.join(localClaudeDir, ".credentials.json");
@@ -10424,6 +10513,15 @@ var CodexRuntimeStrategy = class {
   loginLauncher() {
     return codexLoginLauncher();
   }
+  async generateOneShot(prompt, opts) {
+    const binary = this.os.findInPath("codex");
+    if (!binary) return null;
+    const launch = this.os.buildLaunch(binary, ["exec", prompt]);
+    return spawnAndCapture(launch.cmd, launch.args, {
+      cwd: opts?.cwd,
+      timeoutMs: opts?.timeoutMs
+    });
+  }
 };
 function resolveNpm(os26) {
   return os26.id === "win32" ? "npm.cmd" : "npm";
@@ -12206,7 +12304,7 @@ var HistoryService = class _HistoryService {
 };
 
 // src/services/file-watcher.service.ts
-var import_child_process7 = require("child_process");
+var import_child_process8 = require("child_process");
 var fs21 = __toESM(require("fs"));
 var os22 = __toESM(require("os"));
 var path25 = __toESM(require("path"));
@@ -12744,7 +12842,7 @@ async function _runGitImpl(cwd, args2, opts = {}) {
   return new Promise((resolve5) => {
     let proc;
     try {
-      proc = (0, import_child_process7.spawn)("git", args2, { cwd, env: process.env });
+      proc = (0, import_child_process8.spawn)("git", args2, { cwd, env: process.env });
     } catch {
       resolve5(null);
       return;
@@ -12776,7 +12874,7 @@ function _runGit(cwd, args2, opts = {}) {
 var import_crypto2 = require("crypto");
 
 // src/services/turn-files/git-changeset.ts
-var import_child_process8 = require("child_process");
+var import_child_process9 = require("child_process");
 var path26 = __toESM(require("path"));
 async function collectRepoChangeset(opts) {
   const status2 = await runGit2(opts.repoRoot, ["status", "--porcelain=v1", "-z"]);
@@ -12859,7 +12957,7 @@ function defaultRunGit(cwd, args2) {
   return new Promise((resolve5) => {
     let proc;
     try {
-      proc = (0, import_child_process8.spawn)("git", args2, { cwd, env: process.env });
+      proc = (0, import_child_process9.spawn)("git", args2, { cwd, env: process.env });
     } catch {
       resolve5(null);
       return;
@@ -13199,6 +13297,7 @@ var TurnFileAggregator = class {
       sessionId: entry.sessionId,
       pluginId: entry.pluginId,
       turnId: entry.turnId,
+      agentId: this.opts.agentId,
       files: entry.files
     });
     try {
@@ -13711,13 +13810,13 @@ function fetchQuotaUsage(runtime, historySvc) {
 }
 
 // src/commands/start/keep-alive.ts
-var import_child_process9 = require("child_process");
+var import_child_process10 = require("child_process");
 function buildKeepAlive(ctx) {
   let timer = null;
   async function setIdleTimeout(minutes) {
     if (!ctx.inCodespace || !ctx.codespaceName) return;
     await new Promise((resolve5) => {
-      const proc = (0, import_child_process9.spawn)(
+      const proc = (0, import_child_process10.spawn)(
         "gh",
         [
           "api",
@@ -13758,7 +13857,7 @@ var fs27 = __toESM(require("fs"));
 var os23 = __toESM(require("os"));
 var path33 = __toESM(require("path"));
 var import_crypto5 = require("crypto");
-var import_child_process13 = require("child_process");
+var import_child_process14 = require("child_process");
 
 // src/lib/payload.ts
 var import_zod2 = require("zod");
@@ -13817,11 +13916,33 @@ var startCommandSchema = import_zod2.z.object({
   action: import_zod2.z.enum(["approved", "rejected"]).optional(),
   // `request_link_credentials` — backend fires this from the
   // heartbeat handler when it notices the user is running an agent
-  // they haven't vaulted yet. We reuse the `codeam link` token-
-  // capture path to push the credential up; if extraction fails
-  // (no local auth, missing file), the handler no-ops silently —
-  // no browser-login surprises during a normal `codeam pair`.
-  agentId: import_zod2.z.enum(["claude_code", "codex", "cursor", "aider", "coderabbit"]).optional()
+  // they haven't vaulted yet. Also reused by `get_context` /
+  // `list_models` payloads which carry the currently-selected
+  // agent for that session. We accept any string here (rather than
+  // a narrow enum) because the web sends internal ids ('claude')
+  // while the auto-link backend sends public ids ('claude_code'),
+  // and the consuming handlers normalize themselves.
+  agentId: import_zod2.z.string().max(64).optional(),
+  // `request_ai_summary` / `request_ai_insight` — backend fires
+  // these on turn-end (+ file selection) when LinkedAgent.
+  // aiInsightsEnabled is true. The CLI spawns the agent in
+  // headless one-shot mode (`claude -p "..."` / `codex exec`) and
+  // POSTs the response back to /api/plugin/ai-result.
+  //
+  // `prompt` (declared above for start_task) carries the LLM prompt
+  // the backend pre-rendered with the diff context inlined; the
+  // agent receives it verbatim. `turnId` keys the summary,
+  // `fileChangeId` keys the per-file insight, `stats` is echoed
+  // unchanged on the result POST so the backend doesn't have to
+  // recompute (numbers came from file_changes; the agent only
+  // writes the narrative).
+  turnId: import_zod2.z.string().max(128).optional(),
+  fileChangeId: import_zod2.z.string().max(128).optional(),
+  stats: import_zod2.z.object({
+    added: import_zod2.z.number().int(),
+    removed: import_zod2.z.number().int(),
+    complexityShift: import_zod2.z.number().int()
+  }).optional()
 });
 function parsePayload2(schema, raw) {
   const result = schema.safeParse(raw);
@@ -13977,11 +14098,11 @@ async function writeProjectFile(rawPath, content) {
 }
 
 // src/services/project-ops.service.ts
-var import_child_process10 = require("child_process");
+var import_child_process11 = require("child_process");
 var import_util2 = require("util");
 var fs24 = __toESM(require("fs/promises"));
 var path29 = __toESM(require("path"));
-var execFileP3 = (0, import_util2.promisify)(import_child_process10.execFile);
+var execFileP3 = (0, import_util2.promisify)(import_child_process11.execFile);
 var PROJECT_IGNORE = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -14321,7 +14442,7 @@ async function jsSearchFiles(opts, cwd, cap) {
 }
 
 // src/services/terminal-ops.service.ts
-var import_child_process11 = require("child_process");
+var import_child_process12 = require("child_process");
 var import_crypto4 = require("crypto");
 var import_path3 = __toESM(require("path"));
 var MAX_CONCURRENT_SESSIONS = 4;
@@ -14443,7 +14564,7 @@ function createPythonSession(id, shell, cwd, env, cols, rows) {
   }
   let child;
   try {
-    child = (0, import_child_process11.spawn)(python, ["-c", PYTHON_TERMINAL_HELPER, shell], {
+    child = (0, import_child_process12.spawn)(python, ["-c", PYTHON_TERMINAL_HELPER, shell], {
       cwd,
       env: { ...env, COLUMNS: String(cols), LINES: String(rows) },
       stdio: ["pipe", "pipe", "pipe"]
@@ -14578,7 +14699,7 @@ function closeAllTerminals() {
 }
 
 // src/services/apply-file-review.service.ts
-var import_child_process12 = require("child_process");
+var import_child_process13 = require("child_process");
 var fs25 = __toESM(require("fs"));
 var path31 = __toESM(require("path"));
 async function applyFileReview(workingDir, filePath, action) {
@@ -14620,7 +14741,7 @@ function runGit3(cwd, args2) {
   return new Promise((resolve5) => {
     let proc;
     try {
-      proc = (0, import_child_process12.spawn)("git", args2, { cwd, env: process.env });
+      proc = (0, import_child_process13.spawn)("git", args2, { cwd, env: process.env });
     } catch (err) {
       resolve5({ ok: false, code: -1, stdout: "", stderr: err.message });
       return;
@@ -15151,7 +15272,7 @@ var sessionTerminated = (ctx) => {
   } catch {
   }
   try {
-    const proc = (0, import_child_process13.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process14.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -15173,7 +15294,7 @@ var shutdownSession = async (ctx, cmd) => {
   }
   if (ctx.keepAliveCtx.inCodespace && ctx.keepAliveCtx.codespaceName) {
     try {
-      const stopProc = (0, import_child_process13.spawn)(
+      const stopProc = (0, import_child_process14.spawn)(
         "bash",
         ["-lc", `sleep 1; gh codespace stop -c ${JSON.stringify(ctx.keepAliveCtx.codespaceName)} >/dev/null 2>&1 || true`],
         { detached: true, stdio: "ignore" }
@@ -15183,7 +15304,7 @@ var shutdownSession = async (ctx, cmd) => {
     }
   }
   try {
-    const proc = (0, import_child_process13.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
+    const proc = (0, import_child_process14.spawn)("bash", ["-lc", "pm2 delete codeam-pair >/dev/null 2>&1 || true"], {
       detached: true,
       stdio: "ignore"
     });
@@ -15365,6 +15486,62 @@ var requestLinkCredentialsH = async (ctx, _cmd, parsed) => {
     log.trace("auto-link", `upload failed (${result.status}): ${result.message}`);
   }
 };
+var requestAiSummaryH = async (ctx, _cmd, parsed) => {
+  if (!ctx.pluginAuthToken) return;
+  if (typeof ctx.runtime.generateOneShot !== "function") return;
+  if (!parsed.prompt || !parsed.turnId || !parsed.stats) {
+    log.trace("ai-summary", "missing prompt/turnId/stats \u2014 skipping");
+    return;
+  }
+  const text = await ctx.runtime.generateOneShot(parsed.prompt).catch((err) => {
+    log.trace("ai-summary", "generateOneShot threw", err);
+    return null;
+  });
+  if (!text) return;
+  await postAiResult({
+    sessionId: ctx.sessionId,
+    pluginId: ctx.pluginId,
+    pluginAuthToken: ctx.pluginAuthToken,
+    kind: "summary",
+    turnId: parsed.turnId,
+    summary: text,
+    stats: parsed.stats
+  });
+};
+var requestAiInsightH = async (ctx, _cmd, parsed) => {
+  if (!ctx.pluginAuthToken) return;
+  if (typeof ctx.runtime.generateOneShot !== "function") return;
+  if (!parsed.prompt || !parsed.fileChangeId) {
+    log.trace("ai-insight", "missing prompt/fileChangeId \u2014 skipping");
+    return;
+  }
+  const text = await ctx.runtime.generateOneShot(parsed.prompt).catch((err) => {
+    log.trace("ai-insight", "generateOneShot threw", err);
+    return null;
+  });
+  if (!text) return;
+  const { summary, reasoning, securityNote } = parseInsightText(text);
+  await postAiResult({
+    sessionId: ctx.sessionId,
+    pluginId: ctx.pluginId,
+    pluginAuthToken: ctx.pluginAuthToken,
+    kind: "insight",
+    fileChangeId: parsed.fileChangeId,
+    summary,
+    reasoning,
+    securityNote
+  });
+};
+function parseInsightText(text) {
+  const summaryMatch = text.match(/SUMMARY:\s*([\s\S]*?)(?=\n\s*(?:REASONING|SECURITY):|$)/i);
+  const reasoningMatch = text.match(/REASONING:\s*([\s\S]*?)(?=\n\s*SECURITY:|$)/i);
+  const securityMatch = text.match(/SECURITY:\s*([\s\S]*)/i);
+  return {
+    summary: (summaryMatch?.[1] ?? text).trim(),
+    reasoning: (reasoningMatch?.[1] ?? text).trim(),
+    securityNote: securityMatch?.[1]?.trim() || void 0
+  };
+}
 var handlers = {
   start_task: startTask,
   provide_input: provideInput,
@@ -15397,7 +15574,9 @@ var handlers = {
   git_pull: gitPullH,
   git_resolve: gitResolveH,
   apply_file_review: applyFileReviewH,
-  request_link_credentials: requestLinkCredentialsH
+  request_link_credentials: requestLinkCredentialsH,
+  request_ai_summary: requestAiSummaryH,
+  request_ai_insight: requestAiInsightH
 };
 async function dispatchCommand(ctx, cmd) {
   const parsed = parsePayload2(startCommandSchema, cmd.payload);
@@ -15492,6 +15671,7 @@ async function start(requestedAgent) {
     sessionId: session.id,
     pluginId,
     pluginAuthToken: session.pluginAuthToken,
+    agentId: runtime.meta.id,
     dirtyTracker: dirtyTracker ?? void 0
   }) : null;
   let streamingEmitter = null;
@@ -15989,11 +16169,11 @@ async function logout() {
 var import_picocolors10 = __toESM(require("picocolors"));
 
 // src/services/providers/github-codespaces.ts
-var import_child_process14 = require("child_process");
+var import_child_process15 = require("child_process");
 var import_util3 = require("util");
 var import_picocolors8 = __toESM(require("picocolors"));
 var path34 = __toESM(require("path"));
-var execFileP4 = (0, import_util3.promisify)(import_child_process14.execFile);
+var execFileP4 = (0, import_util3.promisify)(import_child_process15.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
   if (process.stdin.isTTY) {
@@ -16037,7 +16217,7 @@ var GitHubCodespacesProvider = class {
     if (!isAuthed) {
       resetStdinForChild();
       await new Promise((resolve5, reject) => {
-        const proc = (0, import_child_process14.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
+        const proc = (0, import_child_process15.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
           stdio: "inherit"
         });
         proc.on("exit", (code) => {
@@ -16071,7 +16251,7 @@ var GitHubCodespacesProvider = class {
       wt(noteLines.join("\n"), "One more permission needed");
       resetStdinForChild();
       const refreshCode = await new Promise((resolve5, reject) => {
-        const proc = (0, import_child_process14.spawn)(
+        const proc = (0, import_child_process15.spawn)(
           "gh",
           ["auth", "refresh", "-h", "github.com", "-s", "codespace"],
           { stdio: "inherit" }
@@ -16221,7 +16401,7 @@ var GitHubCodespacesProvider = class {
     O2.step(`Installing gh via ${installCmd.describe}\u2026`);
     resetStdinForChild();
     const ok = await new Promise((resolve5) => {
-      const proc = (0, import_child_process14.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
+      const proc = (0, import_child_process15.spawn)(installCmd.exe, installCmd.args, { stdio: "inherit" });
       proc.on("exit", (code) => resolve5(code === 0));
       proc.on("error", () => resolve5(false));
     });
@@ -16248,7 +16428,7 @@ var GitHubCodespacesProvider = class {
     );
     resetStdinForChild();
     await new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process14.spawn)(
+      const proc = (0, import_child_process15.spawn)(
         "gh",
         ["auth", "refresh", "-h", "github.com", "-s", "repo,read:org"],
         { stdio: "inherit" }
@@ -16426,7 +16606,7 @@ var GitHubCodespacesProvider = class {
   async streamCommand(workspaceId, command2) {
     resetStdinForChild();
     return new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process14.spawn)(
+      const proc = (0, import_child_process15.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
@@ -16453,11 +16633,11 @@ var GitHubCodespacesProvider = class {
       `mkdir -p ${shellQuote(remoteDir)} && tar -xzf - -C ${shellQuote(remoteDir)}`
     ];
     await new Promise((resolve5, reject) => {
-      const tar = (0, import_child_process14.spawn)("tar", tarArgs, {
+      const tar = (0, import_child_process15.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
       });
-      const ssh = (0, import_child_process14.spawn)("gh", sshArgs, {
+      const ssh = (0, import_child_process15.spawn)("gh", sshArgs, {
         stdio: [tar.stdout, "pipe", "pipe"]
       });
       let tarErr = "";
@@ -16491,7 +16671,7 @@ var GitHubCodespacesProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process14.spawn)(
+      const proc = (0, import_child_process15.spawn)(
         "gh",
         ["codespace", "ssh", "-c", workspaceId, "--", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -16549,11 +16729,11 @@ function shellQuote(s) {
 }
 
 // src/services/providers/gitpod.ts
-var import_child_process15 = require("child_process");
+var import_child_process16 = require("child_process");
 var import_util4 = require("util");
 var path35 = __toESM(require("path"));
 var import_picocolors9 = __toESM(require("picocolors"));
-var execFileP5 = (0, import_util4.promisify)(import_child_process15.execFile);
+var execFileP5 = (0, import_util4.promisify)(import_child_process16.execFile);
 var MAX_BUFFER2 = 8 * 1024 * 1024;
 function resetStdinForChild2() {
   if (process.stdin.isTTY) {
@@ -16593,7 +16773,7 @@ var GitpodProvider = class {
     );
     resetStdinForChild2();
     await new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process15.spawn)("gitpod", ["login"], { stdio: "inherit" });
+      const proc = (0, import_child_process16.spawn)("gitpod", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
         if (code === 0) resolve5();
         else reject(new Error("gitpod login failed."));
@@ -16745,7 +16925,7 @@ var GitpodProvider = class {
   async streamCommand(workspaceId, command2) {
     resetStdinForChild2();
     return new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process15.spawn)(
+      const proc = (0, import_child_process16.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", "-tt", command2],
         { stdio: "inherit" }
@@ -16765,11 +16945,11 @@ var GitpodProvider = class {
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote2(remoteDir)} && tar -xzf - -C ${shellQuote2(remoteDir)}`;
     await new Promise((resolve5, reject) => {
-      const tar = (0, import_child_process15.spawn)("tar", tarArgs, {
+      const tar = (0, import_child_process16.spawn)("tar", tarArgs, {
         stdio: ["ignore", "pipe", "pipe"],
         env: tarEnv
       });
-      const ssh = (0, import_child_process15.spawn)(
+      const ssh = (0, import_child_process16.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -16801,7 +16981,7 @@ var GitpodProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process15.spawn)(
+      const proc = (0, import_child_process16.spawn)(
         "gitpod",
         ["workspace", "ssh", workspaceId, "--", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -16825,10 +17005,10 @@ function shellQuote2(s) {
 }
 
 // src/services/providers/gitlab-workspaces.ts
-var import_child_process16 = require("child_process");
+var import_child_process17 = require("child_process");
 var import_util5 = require("util");
 var path36 = __toESM(require("path"));
-var execFileP6 = (0, import_util5.promisify)(import_child_process16.execFile);
+var execFileP6 = (0, import_util5.promisify)(import_child_process17.execFile);
 var MAX_BUFFER3 = 8 * 1024 * 1024;
 var GITLAB_API_BASE = process.env.CODEAM_GITLAB_API_URL ?? "https://gitlab.com/api/v4";
 function resetStdinForChild3() {
@@ -16870,7 +17050,7 @@ var GitLabWorkspacesProvider = class {
     );
     resetStdinForChild3();
     await new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process16.spawn)(
+      const proc = (0, import_child_process17.spawn)(
         "glab",
         ["auth", "login", "--scopes", "api,read_user,read_repository"],
         { stdio: "inherit" }
@@ -17042,7 +17222,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     const sshHost = process.env.CODEAM_GITLAB_SSH_HOST ?? "workspaces.gitlab.com";
     resetStdinForChild3();
     return new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process16.spawn)(
+      const proc = (0, import_child_process17.spawn)(
         "ssh",
         ["-tt", "-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, command2],
         { stdio: "inherit" }
@@ -17063,8 +17243,8 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote3(remoteDir)} && tar -xzf - -C ${shellQuote3(remoteDir)}`;
     await new Promise((resolve5, reject) => {
-      const tar = (0, import_child_process16.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
-      const ssh = (0, import_child_process16.spawn)(
+      const tar = (0, import_child_process17.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
+      const ssh = (0, import_child_process17.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -17094,7 +17274,7 @@ Docs: https://docs.gitlab.com/ee/user/workspace/configuration.html`
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process16.spawn)(
+      const proc = (0, import_child_process17.spawn)(
         "ssh",
         ["-o", "StrictHostKeyChecking=accept-new", `${workspaceId}@${sshHost}`, cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -17153,10 +17333,10 @@ function shellQuote3(s) {
 }
 
 // src/services/providers/railway.ts
-var import_child_process17 = require("child_process");
+var import_child_process18 = require("child_process");
 var import_util6 = require("util");
 var path37 = __toESM(require("path"));
-var execFileP7 = (0, import_util6.promisify)(import_child_process17.execFile);
+var execFileP7 = (0, import_util6.promisify)(import_child_process18.execFile);
 var MAX_BUFFER4 = 8 * 1024 * 1024;
 function resetStdinForChild4() {
   if (process.stdin.isTTY) {
@@ -17197,7 +17377,7 @@ var RailwayProvider = class {
     );
     resetStdinForChild4();
     await new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process17.spawn)("railway", ["login"], { stdio: "inherit" });
+      const proc = (0, import_child_process18.spawn)("railway", ["login"], { stdio: "inherit" });
       proc.on("exit", (code) => {
         if (code === 0) resolve5();
         else reject(new Error("railway login failed."));
@@ -17340,7 +17520,7 @@ var RailwayProvider = class {
     }
     resetStdinForChild4();
     return new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process17.spawn)(
+      const proc = (0, import_child_process18.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", command2],
         { stdio: "inherit" }
@@ -17364,8 +17544,8 @@ var RailwayProvider = class {
     const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const remoteCmd = `mkdir -p ${shellQuote4(remoteDir)} && tar -xzf - -C ${shellQuote4(remoteDir)}`;
     await new Promise((resolve5, reject) => {
-      const tar = (0, import_child_process17.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
-      const sh = (0, import_child_process17.spawn)(
+      const tar = (0, import_child_process18.spawn)("tar", tarArgs, { stdio: ["ignore", "pipe", "pipe"], env: tarEnv });
+      const sh = (0, import_child_process18.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", remoteCmd],
         { stdio: [tar.stdout, "pipe", "pipe"] }
@@ -17398,7 +17578,7 @@ var RailwayProvider = class {
     }
     const cmd = parts.join(" && ");
     await new Promise((resolve5, reject) => {
-      const proc = (0, import_child_process17.spawn)(
+      const proc = (0, import_child_process18.spawn)(
         "railway",
         ["shell", "--project", projectId, "--service", serviceId, "--command", cmd],
         { stdio: ["pipe", "pipe", "pipe"] }
@@ -18103,7 +18283,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.22.0" : "0.0.0-dev";
+  const cliVersion = true ? "2.23.0" : "0.0.0-dev";
   const apiBase = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto5.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -18302,7 +18482,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors13 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.22.0" : "unknown";
+  const v = true ? "2.23.0" : "unknown";
   console.log(`${import_picocolors13.default.bold("codeam-cli")} ${import_picocolors13.default.cyan(v)}`);
 }
 
@@ -18530,7 +18710,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.22.0" : null;
+  const current = true ? "2.23.0" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.22.0",
+  "version": "2.23.0",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",