codeam-cli 2.4.6 → 2.4.8

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.4.7] — 2026-05-03
+
+### Fixed
+
+- **cli:** Cross-platform Claude credential bridge for codeam deploy (v2.4.7)
+
+## [2.4.5] — 2026-05-03
+
+### Fixed
+
+- **cli:** Clearer guidance when gh refresh hits multi-account browser (v2.4.5)
+
 ## [2.4.4] — 2026-05-03
 
 ### Fixed

package/dist/index.js

@@ -179,7 +179,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.4.6",
+  version: "2.4.8",
   description: "Remote control Claude Code (and other AI coding agents) from your mobile phone. Pair your device, send prompts, stream responses in real-time, and approve commands \u2014 from anywhere.",
   main: "dist/index.js",
   bin: {
@@ -5077,15 +5077,18 @@ async function logout() {
 }
 
 // src/commands/deploy.ts
+var import_child_process6 = require("child_process");
 var fs8 = __toESM(require("fs"));
 var os6 = __toESM(require("os"));
-var path8 = __toESM(require("path"));
+var path9 = __toESM(require("path"));
+var import_util3 = require("util");
 var import_picocolors8 = __toESM(require("picocolors"));
 
 // src/services/providers/github-codespaces.ts
 var import_child_process5 = require("child_process");
 var import_util2 = require("util");
 var import_picocolors7 = __toESM(require("picocolors"));
+var path8 = __toESM(require("path"));
 var execFileP2 = (0, import_util2.promisify)(import_child_process5.execFile);
 var MAX_BUFFER = 8 * 1024 * 1024;
 function resetStdinForChild() {
@@ -5471,7 +5474,15 @@ var GitHubCodespacesProvider = class {
       proc.on("error", reject);
     });
   }
-  async uploadDirectory(workspaceId, localDir, remoteDir) {
+  async uploadDirectory(workspaceId, localDir, remoteDir, options = {}) {
+    const tarArgs = ["-czf", "-", "-C", localDir];
+    for (const pattern of options.exclude ?? []) {
+      tarArgs.push(`--exclude=${pattern}`);
+      const stripped = pattern.replace(/^\.\/+/, "");
+      if (stripped !== pattern) tarArgs.push(`--exclude=${stripped}`);
+    }
+    tarArgs.push(".");
+    const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const sshArgs = [
       "codespace",
       "ssh",
@@ -5481,8 +5492,9 @@ var GitHubCodespacesProvider = class {
       `mkdir -p ${shellQuote(remoteDir)} && tar -xzf - -C ${shellQuote(remoteDir)}`
     ];
     await new Promise((resolve2, reject) => {
-      const tar = (0, import_child_process5.spawn)("tar", ["-czf", "-", "-C", localDir, "."], {
-        stdio: ["ignore", "pipe", "pipe"]
+      const tar = (0, import_child_process5.spawn)("tar", tarArgs, {
+        stdio: ["ignore", "pipe", "pipe"],
+        env: tarEnv
       });
       const ssh = (0, import_child_process5.spawn)("gh", sshArgs, {
         stdio: [tar.stdout, "pipe", "pipe"]
@@ -5507,6 +5519,35 @@ var GitHubCodespacesProvider = class {
       });
     });
   }
+  async uploadFile(workspaceId, remotePath, contents, options = {}) {
+    const remoteDir = path8.posix.dirname(remotePath);
+    const parts = [
+      `mkdir -p ${shellQuote(remoteDir)}`,
+      `cat > ${shellQuote(remotePath)}`
+    ];
+    if (options.mode != null) {
+      parts.push(`chmod ${options.mode.toString(8)} ${shellQuote(remotePath)}`);
+    }
+    const cmd = parts.join(" && ");
+    await new Promise((resolve2, reject) => {
+      const proc = (0, import_child_process5.spawn)(
+        "gh",
+        ["codespace", "ssh", "-c", workspaceId, "--", cmd],
+        { stdio: ["pipe", "pipe", "pipe"] }
+      );
+      let stderr = "";
+      proc.stderr?.on("data", (d3) => {
+        stderr += d3.toString();
+      });
+      proc.on("error", reject);
+      proc.on("exit", (code) => {
+        if (code === 0) resolve2();
+        else reject(new Error(`Remote write failed: ${(stderr || `exit ${code}`).trim().slice(0, 500)}`));
+      });
+      proc.stdin?.write(contents);
+      proc.stdin?.end();
+    });
+  }
   async listExistingWorkspaces(projectId) {
     try {
       const { stdout } = await execFileP2(
@@ -5565,6 +5606,7 @@ var PROVIDERS = [
 ];
 
 // src/commands/deploy.ts
+var execFileP3 = (0, import_util3.promisify)(import_child_process6.execFile);
 async function deploy() {
   console.log();
   mt(import_picocolors8.default.bgMagenta(import_picocolors8.default.white(" codeam deploy ")));
@@ -5699,6 +5741,21 @@ async function deploy() {
       process.exit(1);
     }
   }
+  const localClaudeDir = path9.join(os6.homedir(), ".claude");
+  const credStep = fe();
+  credStep.start("Bridging Claude credentials\u2026");
+  const bridged = await bridgeClaudeCredentials(provider, workspace.id, localClaudeDir);
+  switch (bridged) {
+    case "flat-file":
+      credStep.stop("\u2713 Local credentials staged");
+      break;
+    case "macos-keychain":
+      credStep.stop("\u2713 Credentials extracted from macOS Keychain and staged");
+      break;
+    case "none":
+      credStep.stop("\xB7 No local credentials found \u2014 will run interactive login after install");
+      break;
+  }
   const claudeStep = fe();
   claudeStep.start("Installing Claude CLI on workspace\u2026");
   const installResult = await provider.exec(
@@ -5711,36 +5768,73 @@ async function deploy() {
     process.exit(1);
   }
   claudeStep.stop("\u2713 Claude CLI installed");
-  const localClaudeDir = path8.join(os6.homedir(), ".claude");
   const haveLocalClaude = fs8.existsSync(localClaudeDir) && fs8.statSync(localClaudeDir).isDirectory();
   if (haveLocalClaude) {
     const copyStep = fe();
     copyStep.start("Copying local Claude config to workspace\u2026");
     try {
-      await provider.uploadDirectory(workspace.id, localClaudeDir, "/home/codespace/.claude");
-      copyStep.stop("\u2713 Claude config copied \u2014 no re-auth needed");
+      await provider.uploadDirectory(
+        workspace.id,
+        localClaudeDir,
+        "/home/codespace/.claude",
+        {
+          exclude: [
+            "./projects",
+            // per-project conversation history (often 700MB+)
+            "./file-history",
+            // per-project file diffs
+            "./downloads",
+            // downloaded artifacts
+            "./image-cache",
+            // cached images
+            "./paste-cache",
+            // clipboard/paste cache
+            "./backups",
+            // local backups
+            "./shell-snapshots",
+            // shell history snapshots
+            "./telemetry",
+            // analytics dumps
+            "./statsig",
+            // feature-flag cache
+            "./cache",
+            // generic cache dir
+            "./history.jsonl",
+            // global REPL history
+            "./ide",
+            // local IDE bridge state
+            "./todos",
+            // local todo state
+            "./tasks",
+            // local task state
+            // Don't overwrite the credentials we already staged in
+            // step 4 — the local dir on macOS doesn't have a flat
+            // credentials file anyway, but on Linux it would, and a
+            // re-write here would be redundant.
+            "./.credentials.json"
+          ]
+        }
+      );
+      copyStep.stop("\u2713 Claude config uploaded");
     } catch (err) {
-      copyStep.stop("\u26A0 Could not copy Claude config \u2014 falling back to remote login");
+      copyStep.stop("\u26A0 Could not upload Claude config (continuing)");
       void err;
-      await runRemoteClaudeLogin(provider, workspace.id);
     }
+  }
+  const verifyStep = fe();
+  verifyStep.start("Verifying Claude auth on workspace\u2026");
+  const verified = await verifyClaudeAuth(provider, workspace.id);
+  if (verified) {
+    verifyStep.stop("\u2713 Claude is logged in \u2014 no re-auth needed");
   } else {
-    wt(
-      [
-        "No local ~/.claude config found.",
-        "We can run `claude login` inside the workspace right now \u2014 the URL",
-        "will print here, you open it in your browser, paste the code back,",
-        "and the workspace gets authenticated. (Skip if you'd rather do it",
-        "manually later from inside the codespace.)"
-      ].join("\n"),
-      "Claude credentials"
-    );
-    const proceed = await ot2({
-      message: "Run `claude login` on the workspace now?",
-      initialValue: true
-    });
-    if (!q(proceed) && proceed) {
-      await runRemoteClaudeLogin(provider, workspace.id);
+    verifyStep.stop("\xB7 Claude not yet authenticated \u2014 running login flow");
+    await runRemoteClaudeLogin(provider, workspace.id);
+    const reverified = await verifyClaudeAuth(provider, workspace.id);
+    if (!reverified) {
+      wt(
+        "Claude auth could not be confirmed. You may need to run `claude /login` manually inside the codespace.",
+        "Heads up"
+      );
     }
   }
   const cliStep = fe();
@@ -5788,6 +5882,46 @@ async function runRemoteClaudeLogin(provider, workspaceId) {
     );
   }
 }
+async function verifyClaudeAuth(provider, workspaceId) {
+  const result = await provider.exec(
+    workspaceId,
+    'bash -lc "claude auth status 2>/dev/null || true"'
+  );
+  if (result.code !== 0) return false;
+  const jsonStart = result.stdout.indexOf("{");
+  if (jsonStart < 0) return false;
+  try {
+    const parsed = JSON.parse(result.stdout.slice(jsonStart));
+    return parsed.loggedIn === true;
+  } catch {
+    return false;
+  }
+}
+async function bridgeClaudeCredentials(provider, workspaceId, localClaudeDir) {
+  const fileBased = path9.join(localClaudeDir, ".credentials.json");
+  if (fs8.existsSync(fileBased)) return "flat-file";
+  if (process.platform === "darwin") {
+    try {
+      const { stdout } = await execFileP3(
+        "security",
+        ["find-generic-password", "-s", "Claude Code-credentials", "-w"],
+        { maxBuffer: 1024 * 1024 }
+      );
+      const json = stdout.trim();
+      if (json.length === 0) return "none";
+      await provider.uploadFile(
+        workspaceId,
+        "/home/codespace/.claude/.credentials.json",
+        json,
+        { mode: 384 }
+      );
+      return "macos-keychain";
+    } catch {
+      return "none";
+    }
+  }
+  return "none";
+}
 function formatLastUsed(iso) {
   if (!iso) return "";
   const t2 = Date.parse(iso);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.4.6",
+  "version": "2.4.8",
   "description": "Remote control Claude Code (and other AI coding agents) from your mobile phone. Pair your device, send prompts, stream responses in real-time, and approve commands — from anywhere.",
   "main": "dist/index.js",
   "bin": {