codeam-cli 2.4.2 → 2.4.3

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.4.1] — 2026-05-03
+
+### Added
+
+- **cli:** Interactive `claude login` fallback when no local config (v2.4.1)
+
+## [2.4.0] — 2026-05-03
+
+### Added
+
+- **cli:** `codeam deploy` — provision a paired cloud workspace in one command (v2.4.0)
+
 ## [2.2.2] — 2026-05-02
 
 ### Fixed

package/dist/index.js

@@ -179,7 +179,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.4.2",
+  version: "2.4.3",
   description: "Remote control Claude Code (and other AI coding agents) from your mobile phone. Pair your device, send prompts, stream responses in real-time, and approve commands \u2014 from anywhere.",
   main: "dist/index.js",
   bin: {
@@ -5113,21 +5113,70 @@ var GitHubCodespacesProvider = class {
         );
       }
     }
+    let isAuthed = false;
     try {
       await execFileP2("gh", ["auth", "status"], { maxBuffer: MAX_BUFFER });
-      return;
+      isAuthed = true;
     } catch {
     }
-    await new Promise((resolve2, reject) => {
-      const proc = (0, import_child_process5.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
-        stdio: "inherit"
+    if (!isAuthed) {
+      await new Promise((resolve2, reject) => {
+        const proc = (0, import_child_process5.spawn)("gh", ["auth", "login", "-s", "codespace,repo,read:user"], {
+          stdio: "inherit"
+        });
+        proc.on("exit", (code) => {
+          if (code === 0) resolve2();
+          else reject(new Error("gh auth login failed."));
+        });
+        proc.on("error", reject);
       });
-      proc.on("exit", (code) => {
-        if (code === 0) resolve2();
-        else reject(new Error("gh auth login failed."));
+      return;
+    }
+    const hasScope = await this.hasCodespaceScope();
+    if (!hasScope) {
+      wt(
+        [
+          "Your existing GitHub login is missing the `codespace` scope.",
+          "I'll run `gh auth refresh` to add it \u2014 your browser will open",
+          "for a one-tap approval."
+        ].join("\n"),
+        "One more permission needed"
+      );
+      await new Promise((resolve2, reject) => {
+        const proc = (0, import_child_process5.spawn)(
+          "gh",
+          ["auth", "refresh", "-h", "github.com", "-s", "codespace"],
+          { stdio: "inherit" }
+        );
+        proc.on("exit", (code) => {
+          if (code === 0) resolve2();
+          else reject(new Error("gh auth refresh failed \u2014 re-run `gh auth refresh -h github.com -s codespace` manually."));
+        });
+        proc.on("error", reject);
       });
-      proc.on("error", reject);
-    });
+    }
+  }
+  /**
+   * Check whether the current `gh` token includes the `codespace`
+   * OAuth scope. We hit `/user` with `-i` so GitHub echoes the granted
+   * scopes back in the `X-OAuth-Scopes` response header — the most
+   * authoritative source (more reliable than scraping `gh auth status`,
+   * whose format has shifted across `gh` versions).
+   */
+  async hasCodespaceScope() {
+    try {
+      const { stdout } = await execFileP2(
+        "gh",
+        ["api", "-i", "user"],
+        { maxBuffer: MAX_BUFFER }
+      );
+      const m = stdout.match(/^x-oauth-scopes:\s*(.+)$/im);
+      if (!m) return false;
+      const scopes = m[1].split(",").map((s) => s.trim().toLowerCase());
+      return scopes.includes("codespace");
+    } catch {
+      return false;
+    }
   }
   /**
    * Try to install the `gh` CLI for the user. Opt-in via a confirm

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.4.2",
+  "version": "2.4.3",
   "description": "Remote control Claude Code (and other AI coding agents) from your mobile phone. Pair your device, send prompts, stream responses in real-time, and approve commands — from anywhere.",
   "main": "dist/index.js",
   "bin": {