codeam-cli 2.39.83 → 2.39.85

package/CHANGELOG.md

@@ -4,6 +4,27 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.39.84] — 2026-06-22
+
+### Added
+
+- **cli:** Agent-agnostic credential validation in codeam link
+
+### Fixed
+
+- **cli:** Make self-hosted git credential helper + gh install OS-agnostic
+
+## [2.39.83] — 2026-06-22
+
+### Added
+
+- **cli:** Install + authenticate gh on bare self-hosted boxes
+- **cli:** Synchronous auto-upgrade for link/pair on stale CLIs
+
+### Fixed
+
+- **cli:** Persist git credentials + commit identity for self-hosted workspaces
+
 ## [2.39.82] — 2026-06-22
 
 ### Fixed

package/dist/index.js

@@ -5390,7 +5390,7 @@ function readAnonId() {
 }
 function superProperties() {
   return {
-    cliVersion: true ? "2.39.83" : "0.0.0-dev",
+    cliVersion: true ? "2.39.85" : "0.0.0-dev",
     nodeVersion: process.version,
     platform: process.platform,
     arch: process.arch,
@@ -5549,7 +5549,7 @@ var os4 = __toESM(require("os"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.39.83",
+  version: "2.39.85",
   description: "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device \u2014 async. The terminal companion for CodeAgent Mobile.",
   type: "commonjs",
   main: "dist/index.js",
@@ -11078,12 +11078,12 @@ function isAvailable() {
 }
 function augmentPath() {
   const dirs = probeInstallDirs();
-  const sep5 = path14.delimiter;
+  const sep6 = path14.delimiter;
   const current = process.env.PATH ?? "";
-  const existing = new Set(current.split(sep5).filter(Boolean));
+  const existing = new Set(current.split(sep6).filter(Boolean));
   const additions = dirs.filter((d3) => !existing.has(d3));
   if (additions.length === 0) return;
-  process.env.PATH = additions.join(sep5) + sep5 + current;
+  process.env.PATH = additions.join(sep6) + sep6 + current;
 }
 function runInstaller() {
   const isWindows = process.platform === "win32";
@@ -11200,13 +11200,34 @@ function readClaudeAgentState() {
 }
 
 // src/agents/claude/link.ts
+function validateClaudeToken(token) {
+  if (token.method !== "oauth") return { status: "unknown" };
+  let oauth;
+  try {
+    const parsed = JSON.parse(token.credential);
+    const inner = parsed.claudeAiOauth;
+    oauth = inner && typeof inner === "object" ? inner : parsed;
+  } catch {
+    return { status: "unknown" };
+  }
+  const expiresAt = typeof oauth.expiresAt === "number" ? oauth.expiresAt : null;
+  if (expiresAt === null) return { status: "unknown" };
+  if (expiresAt >= Date.now()) return { status: "valid" };
+  const hasRefresh = typeof oauth.refreshToken === "string" && oauth.refreshToken.length > 0;
+  if (hasRefresh) return { status: "unknown" };
+  return {
+    status: "expired",
+    reason: "Your local Claude session has expired with no refresh token."
+  };
+}
 function claudeCredentialLocator() {
   return {
     publicId: "claude_code",
     vendor: "Anthropic",
     hint: "~/.claude/.credentials.json or the macOS Keychain",
     watchPaths: claudeCredentialsPaths,
-    extract: extractLocalClaudeToken
+    extract: extractLocalClaudeToken,
+    validate: validateClaudeToken
   };
 }
 function claudeLoginLauncher() {
@@ -12470,6 +12491,13 @@ var import_node_child_process6 = require("child_process");
 var fs19 = __toESM(require("fs"));
 var os18 = __toESM(require("os"));
 var path24 = __toESM(require("path"));
+
+// src/agents/strategy.ts
+function validateNonEmptyCredential(token) {
+  return { status: token.credential.trim().length > 0 ? "valid" : "unknown" };
+}
+
+// src/agents/coderabbit/link.ts
 function authPath() {
   return path24.join(os18.homedir(), ".coderabbit", "auth.json");
 }
@@ -12486,7 +12514,8 @@ function coderabbitCredentialLocator() {
     vendor: "CodeRabbit",
     hint: "~/.coderabbit/auth.json",
     watchPaths: () => [authPath()],
-    extract: extractLocalCoderabbitToken
+    extract: extractLocalCoderabbitToken,
+    validate: validateNonEmptyCredential
   };
 }
 function coderabbitLoginLauncher(os40) {
@@ -12651,7 +12680,8 @@ function cursorCredentialLocator() {
     vendor: "Cursor",
     hint: "~/.cursor/auth.json",
     watchPaths: cursorCredentialsPaths,
-    extract: extractLocalCursorToken
+    extract: extractLocalCursorToken,
+    validate: validateNonEmptyCredential
   };
 }
 function cursorLoginLauncher(os40) {
@@ -12837,7 +12867,8 @@ function aiderCredentialLocator() {
     vendor: "Aider",
     hint: "ANTHROPIC_API_KEY / OPENAI_API_KEY env var or ~/.aider.conf.yml",
     watchPaths: aiderCredentialsPaths,
-    extract: extractLocalAiderToken
+    extract: extractLocalAiderToken,
+    validate: validateNonEmptyCredential
   };
 }
 function aiderLoginLauncher(os40) {
@@ -17140,6 +17171,7 @@ async function configureGitCredentials(dest, repoRef, cloneToken) {
   }
   const env = nonInteractiveGitEnv();
   const git2 = (args2) => execFileP5("git", ["-C", dest, ...args2], { timeout: 3e4, env });
+  const credFilePosix = credFile.split(path42.sep).join("/");
   await git2(["config", "--local", "--replace-all", "credential.helper", ""]).catch(() => {
   });
   await git2([
@@ -17147,7 +17179,7 @@ async function configureGitCredentials(dest, repoRef, cloneToken) {
     "--local",
     "--add",
     "credential.helper",
-    `store --file=${credFile}`
+    `store --file=${credFilePosix}`
   ]).catch(() => {
   });
   await git2(["remote", "set-url", "origin", repoCloneUrl(repoRef)]).catch(() => {
@@ -17319,16 +17351,17 @@ async function ensureGhCli(runner, token, deps = {}) {
   if (runner.which("gh")) return "gh";
   const arch2 = ghArch();
   const platform3 = process.platform;
-  if (arch2 === null || platform3 !== "linux" && platform3 !== "darwin") {
+  if (arch2 === null || platform3 !== "linux" && platform3 !== "darwin" && platform3 !== "win32") {
     log.warn("host-agent", `gh auto-install unsupported on ${platform3}/${process.arch} \u2014 skipping`);
     return null;
   }
+  const osToken = platform3 === "darwin" ? "macOS" : platform3 === "win32" ? "windows" : "linux";
+  const ext = platform3 === "linux" ? "tar.gz" : "zip";
+  const binaryName = platform3 === "win32" ? "gh.exe" : "gh";
   const downloadFn = deps.downloadFn ?? download;
   const resolveVersionFn = deps.resolveVersionFn ?? resolveLatestGhVersion;
   try {
     const version3 = await resolveVersionFn(token);
-    const osToken = platform3 === "darwin" ? "macOS" : "linux";
-    const ext = platform3 === "darwin" ? "zip" : "tar.gz";
     const asset = `gh_${version3}_${osToken}_${arch2}`;
     const url = `https://github.com/cli/cli/releases/download/v${version3}/${asset}.${ext}`;
     const tmpRoot = fs38.mkdtempSync(path44.join(os31.tmpdir(), "codeam-gh-"));
@@ -17337,26 +17370,19 @@ async function ensureGhCli(runner, token, deps = {}) {
       log.warn("host-agent", "gh download failed \u2014 skipping (git pull/push still work via the credential helper)");
       return null;
     }
-    let extractCode = null;
-    if (platform3 === "darwin") {
-      const r = await runner.run("unzip", ["-o", archive, "-d", tmpRoot], { timeoutMs: 6e4 });
-      extractCode = r.code;
-    } else {
-      const r = await runner.run("tar", ["-xzf", archive, "-C", tmpRoot], { timeoutMs: 6e4 });
-      extractCode = r.code;
-    }
-    if (extractCode !== 0) {
-      log.warn("host-agent", `gh archive extraction failed (code=${String(extractCode)}) \u2014 skipping`);
+    const extract = await runner.run("tar", ["-xf", archive, "-C", tmpRoot], { timeoutMs: 6e4 });
+    if (extract.code !== 0) {
+      log.warn("host-agent", `gh archive extraction failed (code=${String(extract.code)}) \u2014 skipping`);
       return null;
     }
-    const extractedBin = path44.join(tmpRoot, asset, "bin", "gh");
+    const extractedBin = path44.join(tmpRoot, asset, "bin", binaryName);
     if (!fs38.existsSync(extractedBin)) {
       log.warn("host-agent", "gh binary not found in the extracted archive \u2014 skipping");
       return null;
     }
     const binDir = codeamBinDir();
     fs38.mkdirSync(binDir, { recursive: true });
-    const target = path44.join(binDir, "gh");
+    const target = path44.join(binDir, binaryName);
     fs38.copyFileSync(extractedBin, target);
     fs38.chmodSync(target, 493);
     log.info("host-agent", `gh installed to ${target} (v${version3})`);
@@ -17391,7 +17417,8 @@ async function ensureGhAuth(runner, ghCmd, token) {
 var defaultGitToolingRunner = {
   which(cmd) {
     try {
-      (0, import_node_child_process12.execFileSync)("which", [cmd], { stdio: "ignore" });
+      const probe = process.platform === "win32" ? "where" : "which";
+      (0, import_node_child_process12.execFileSync)(probe, [cmd], { stdio: "ignore" });
       return true;
     } catch {
       return false;
@@ -17677,7 +17704,7 @@ async function autoUpgradeBeforeCriticalCommand() {
   if (process.env.NODE_ENV === "test") return;
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
-  const current = true ? "2.39.83" : null;
+  const current = true ? "2.39.85" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -17694,7 +17721,7 @@ function checkForUpdates() {
   if (process.env.CODEAM_DISABLE_UPDATE_CHECK === "1") return;
   if (process.env.CI) return;
   if (!process.stdout.isTTY) return;
-  const current = true ? "2.39.83" : null;
+  const current = true ? "2.39.85" : null;
   if (!current) return;
   const cache = readCache();
   const fresh = cache && Date.now() - cache.fetchedAt < TTL_MS;
@@ -18132,7 +18159,7 @@ var defaultSpawner = (env, cwd, args2 = []) => (0, import_node_child_process14.s
   detached: false
 });
 function currentCliVersion() {
-  return true ? "2.39.83" : null;
+  return true ? "2.39.85" : null;
 }
 function runCmd(cmd, args2, timeoutMs) {
   return new Promise((resolve7) => {
@@ -18527,6 +18554,12 @@ var HostAgentSupervisor = class {
           API_TIMEOUT_MS: "3000000",
           CODEAM_AUTO_TOKEN: payload.autoPairToken
         };
+        const houseConfigDir = path46.join(os33.homedir(), ".codeam", "house-claude");
+        try {
+          fs40.mkdirSync(houseConfigDir, { recursive: true, mode: 448 });
+        } catch {
+        }
+        childEnv.CLAUDE_CONFIG_DIR = houseConfigDir;
         extraArgs = [`--agent=${agentKind || "claude"}`];
       } else {
         const auth = await this.resolveAgentAuth(this.identity, payload.sealedAgentAuth);
@@ -18548,7 +18581,7 @@ var HostAgentSupervisor = class {
           report("preparing", "configuring git tooling");
           const ghCmd = await ensureGhCli(defaultGitToolingRunner, payload.cloneToken);
           if (ghCmd) {
-            childEnv.PATH = `${codeamBinDir()}:${childEnv.PATH}`;
+            childEnv.PATH = `${codeamBinDir()}${path46.delimiter}${childEnv.PATH}`;
             await ensureGhAuth(defaultGitToolingRunner, ghCmd, payload.cloneToken);
           }
         } catch (e) {
@@ -28937,7 +28970,7 @@ function checkChokidar() {
 }
 async function doctor(args2 = []) {
   const json = args2.includes("--json");
-  const cliVersion = true ? "2.39.83" : "0.0.0-dev";
+  const cliVersion = true ? "2.39.85" : "0.0.0-dev";
   const apiBase2 = resolveApiBaseUrl();
   const diagnosticId = (0, import_node_crypto8.randomUUID)();
   log.info("doctor", `run id=${diagnosticId} cli=${cliVersion}`);
@@ -29136,7 +29169,7 @@ async function completion(args2) {
 // src/commands/version.ts
 var import_picocolors14 = __toESM(require("picocolors"));
 function version2() {
-  const v = true ? "2.39.83" : "unknown";
+  const v = true ? "2.39.85" : "unknown";
   console.log(`${import_picocolors14.default.bold("codeam-cli")} ${import_picocolors14.default.cyan(v)}`);
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.39.83",
+  "version": "2.39.85",
   "description": "Workflow-continuity bridge for AI coding agents. Wrap Claude Code or Codex in a PTY and supervise, approve, and redirect the session from any device — async. The terminal companion for CodeAgent Mobile.",
   "type": "commonjs",
   "main": "dist/index.js",