codeam-cli 2.4.7 → 2.4.9

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to `codeam-cli` are documented here.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.4.7] — 2026-05-03
+
+### Fixed
+
+- **cli:** Cross-platform Claude credential bridge for codeam deploy (v2.4.7)
+
 ## [2.4.5] — 2026-05-03
 
 ### Fixed

package/dist/index.js

@@ -179,7 +179,7 @@ var import_qrcode_terminal = __toESM(require("qrcode-terminal"));
 // package.json
 var package_default = {
   name: "codeam-cli",
-  version: "2.4.7",
+  version: "2.4.9",
   description: "Remote control Claude Code (and other AI coding agents) from your mobile phone. Pair your device, send prompts, stream responses in real-time, and approve commands \u2014 from anywhere.",
   main: "dist/index.js",
   bin: {
@@ -5478,8 +5478,11 @@ var GitHubCodespacesProvider = class {
     const tarArgs = ["-czf", "-", "-C", localDir];
     for (const pattern of options.exclude ?? []) {
       tarArgs.push(`--exclude=${pattern}`);
+      const stripped = pattern.replace(/^\.\/+/, "");
+      if (stripped !== pattern) tarArgs.push(`--exclude=${stripped}`);
     }
     tarArgs.push(".");
+    const tarEnv = { ...process.env, COPYFILE_DISABLE: "1" };
     const sshArgs = [
       "codespace",
       "ssh",
@@ -5490,7 +5493,8 @@ var GitHubCodespacesProvider = class {
     ];
     await new Promise((resolve2, reject) => {
       const tar = (0, import_child_process5.spawn)("tar", tarArgs, {
-        stdio: ["ignore", "pipe", "pipe"]
+        stdio: ["ignore", "pipe", "pipe"],
+        env: tarEnv
       });
       const ssh = (0, import_child_process5.spawn)("gh", sshArgs, {
         stdio: [tar.stdout, "pipe", "pipe"]
@@ -5737,6 +5741,38 @@ async function deploy() {
       process.exit(1);
     }
   }
+  const localClaudeDir = path9.join(os6.homedir(), ".claude");
+  const localCredsKind = await detectLocalClaudeCredentials(localClaudeDir);
+  let bridged = "none";
+  if (localCredsKind !== "none") {
+    const sourceLabel = localCredsKind === "flat-file" ? "~/.claude/.credentials.json" : "macOS Keychain";
+    const useLocal = await ot2({
+      message: `Copy your local Claude credentials (${sourceLabel}) to the workspace?`,
+      active: "Yes \u2014 same account, no re-auth",
+      inactive: "No \u2014 log in with a different account",
+      initialValue: true
+    });
+    if (q(useLocal)) {
+      pt("Cancelled.");
+      process.exit(0);
+    }
+    if (useLocal) {
+      const credStep = fe();
+      credStep.start("Bridging Claude credentials\u2026");
+      bridged = await bridgeClaudeCredentials(provider, workspace.id, localClaudeDir);
+      switch (bridged) {
+        case "flat-file":
+          credStep.stop("\u2713 Local credentials staged");
+          break;
+        case "macos-keychain":
+          credStep.stop("\u2713 Credentials extracted from macOS Keychain and staged");
+          break;
+        case "none":
+          credStep.stop("\u26A0 Could not extract local credentials \u2014 falling back to remote login");
+          break;
+      }
+    }
+  }
   const claudeStep = fe();
   claudeStep.start("Installing Claude CLI on workspace\u2026");
   const installResult = await provider.exec(
@@ -5749,12 +5785,10 @@ async function deploy() {
     process.exit(1);
   }
   claudeStep.stop("\u2713 Claude CLI installed");
-  const localClaudeDir = path9.join(os6.homedir(), ".claude");
   const haveLocalClaude = fs8.existsSync(localClaudeDir) && fs8.statSync(localClaudeDir).isDirectory();
   if (haveLocalClaude) {
     const copyStep = fe();
     copyStep.start("Copying local Claude config to workspace\u2026");
-    let configUploaded = false;
     try {
       await provider.uploadDirectory(
         workspace.id,
@@ -5788,52 +5822,36 @@ async function deploy() {
             // local IDE bridge state
             "./todos",
             // local todo state
-            "./tasks"
+            "./tasks",
             // local task state
+            // Don't overwrite the credentials we already staged in
+            // step 4 — the local dir on macOS doesn't have a flat
+            // credentials file anyway, but on Linux it would, and a
+            // re-write here would be redundant.
+            "./.credentials.json"
           ]
         }
       );
-      configUploaded = true;
       copyStep.stop("\u2713 Claude config uploaded");
     } catch (err) {
-      copyStep.stop("\u26A0 Could not upload Claude config \u2014 falling back to remote login");
+      copyStep.stop("\u26A0 Could not upload Claude config (continuing)");
       void err;
-      await runRemoteClaudeLogin(provider, workspace.id);
-    }
-    if (configUploaded) {
-      const credStep = fe();
-      credStep.start("Bridging Claude credentials\u2026");
-      const bridged = await bridgeClaudeCredentials(provider, workspace.id, localClaudeDir);
-      switch (bridged) {
-        case "flat-file":
-          credStep.stop("\u2713 Credentials in tar \u2014 no re-auth needed");
-          break;
-        case "macos-keychain":
-          credStep.stop("\u2713 Credentials extracted from macOS Keychain \u2014 no re-auth needed");
-          break;
-        case "none":
-          credStep.stop("\u26A0 No transferable Claude credentials found \u2014 falling back to remote login");
-          await runRemoteClaudeLogin(provider, workspace.id);
-          break;
-      }
     }
+  }
+  const verifyStep = fe();
+  verifyStep.start("Verifying Claude auth on workspace\u2026");
+  const verified = await verifyClaudeAuth(provider, workspace.id);
+  if (verified) {
+    verifyStep.stop("\u2713 Claude is logged in \u2014 no re-auth needed");
   } else {
-    wt(
-      [
-        "No local ~/.claude config found.",
-        "We can run `claude login` inside the workspace right now \u2014 the URL",
-        "will print here, you open it in your browser, paste the code back,",
-        "and the workspace gets authenticated. (Skip if you'd rather do it",
-        "manually later from inside the codespace.)"
-      ].join("\n"),
-      "Claude credentials"
-    );
-    const proceed = await ot2({
-      message: "Run `claude login` on the workspace now?",
-      initialValue: true
-    });
-    if (!q(proceed) && proceed) {
-      await runRemoteClaudeLogin(provider, workspace.id);
+    verifyStep.stop("\xB7 Claude not yet authenticated \u2014 running login flow");
+    await runRemoteClaudeLogin(provider, workspace.id);
+    const reverified = await verifyClaudeAuth(provider, workspace.id);
+    if (!reverified) {
+      wt(
+        "Claude auth could not be confirmed. You may need to run `claude /login` manually inside the codespace.",
+        "Heads up"
+      );
     }
   }
   const cliStep = fe();
@@ -5881,6 +5899,39 @@ async function runRemoteClaudeLogin(provider, workspaceId) {
     );
   }
 }
+async function detectLocalClaudeCredentials(localClaudeDir) {
+  if (fs8.existsSync(path9.join(localClaudeDir, ".credentials.json"))) {
+    return "flat-file";
+  }
+  if (process.platform === "darwin") {
+    try {
+      await execFileP3(
+        "security",
+        ["find-generic-password", "-s", "Claude Code-credentials"],
+        { maxBuffer: 1024 * 1024 }
+      );
+      return "macos-keychain";
+    } catch {
+      return "none";
+    }
+  }
+  return "none";
+}
+async function verifyClaudeAuth(provider, workspaceId) {
+  const result = await provider.exec(
+    workspaceId,
+    'bash -lc "claude auth status 2>/dev/null || true"'
+  );
+  if (result.code !== 0) return false;
+  const jsonStart = result.stdout.indexOf("{");
+  if (jsonStart < 0) return false;
+  try {
+    const parsed = JSON.parse(result.stdout.slice(jsonStart));
+    return parsed.loggedIn === true;
+  } catch {
+    return false;
+  }
+}
 async function bridgeClaudeCredentials(provider, workspaceId, localClaudeDir) {
   const fileBased = path9.join(localClaudeDir, ".credentials.json");
   if (fs8.existsSync(fileBased)) return "flat-file";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeam-cli",
-  "version": "2.4.7",
+  "version": "2.4.9",
   "description": "Remote control Claude Code (and other AI coding agents) from your mobile phone. Pair your device, send prompts, stream responses in real-time, and approve commands — from anywhere.",
   "main": "dist/index.js",
   "bin": {